Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- vmware vrealize operations manager api, vrealize operations manager, cloud foundation +1 more +3 more Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may... 7.5 High
- f5 big-ip, big-ip traffic management microkernel, big-ip access policy manager +13 more +15 more On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x... 9.8 Critical
- npm package system information library for node.js, sebhildebrandt systeminformation, apache cordova +2 more Command Injection Vulnerability 7.1 High
- nagios xi Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the... 8.8 High
- nagios xi Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the... 8.8 High
- nagios xi Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the... 8.8 High
- drupal, drupal core, fedoraproject fedora +2 more Drupal core Unrestricted Upload of File with Dangerous Type 8.8 High
- apache airflow, airflow's experimental api +1 more Authentication bypass in Apache Airflow 9.8 Critical
- oracle business intelligence, intelligence enterprise edition, oracle corporation business intelligence enterprise edition +2 more Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion... 7.5 High
- apache airflow Remote code execution (RCE) in Apache Airflow 8.8 High
- fatpipe ipvpn, mpvpn, warp +4 more +6 more Arbitrary file upload vulnerability in FatPipe software 9.8 Critical
- vmware vcenter server Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of... 5.3 Medium
- hikvision ds-2cd2021g1-i\(w\) firmware, ds-2cd2023g2-i\(u\) firmware, ds-2cd2026g2-iu\/sl firmware +254 more +256 more A command injection vulnerability in the web server of some Hikvision product. Due to the... 9.8 Critical
- google chrome, chrome media +1 more Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to... 8.8 High
- microsoft win32k, windows, windows server +8 more +10 more An elevation of privilege vulnerability exists in Windows when the Win32k component fails to... 7.8 High
- palo alto networks pan-os Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier, and PAN-OS 8.1.2... 8.1 High
- fortinet fortios, fortiproxy, fortios, fortiproxy +1 more +3 more An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5... 9.1 Critical
- exim, canonical ubuntu linux, debian linux +1 more +3 more A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient... 9.0 Critical
- synacor zimbra collaboration suite, zimbra collaboration suite (zcs) +1 more mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML... 9.8 Critical
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 more A heap buffer overflow in Fortinet FortiOS all versions below 6.0.5 in the SSL VPN web portal may... 4.3 Medium
- oracle weblogic server, agile product lifecycle management, communications converged application server +5 more +7 more Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:... 7.5 High
- elastic kibana, redhat openshift container platform +1 more Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion... 10.0 Critical
- primetek primefaces, primefaces application +1 more Inadequate Encryption Strength 9.8 Critical
- ibm sterling b2b integrator, sterling integrator, tivoli common reporting +5 more +7 more Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT... 9.8 Critical
- microsoft winverifytrust function, windows 10 version 1507, windows 10 version 1607 +42 more +44 more WinVerifyTrust Signature Validation Vulnerability 5.5 Medium
- google chrome, chromium v8 +1 more Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to... 8.8 High
- microsoft app installer, windows +1 more Windows AppX Installer Spoofing Vulnerability 7.1 High
- fortinet fortios A download of code without integrity check vulnerability in the "execute restore src-vis" command... 3.3 Low
- zoho desktop central, zohocorp manageengine desktop central +1 more Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code... 9.8 Critical
- apache log4j, log4j2, apple xcode +141 more +143 more Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints 10.0 Critical
- realtek jungle software development kit (sdk), rtl819x jungle software development kit +1 more Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that... 9.8 Critical
- fuel cms cms, thedaylightstudio fuel cms +1 more FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or... 9.8 Critical
- pi-hole adminlte, pi-hole +1 more Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via... 9.1 Critical
- mongo-express project mongo-express Remote Code Execution Vulnerability in NPM mongo-express 9.9 Critical
- apache solr, debian linux +1 more XML External Entity (XXE) Injection in Apache Solr 7.2 High
- debian linux, linux kernel, canonical ubuntu linux +19 more +21 more In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the... 7.8 High
- sonatype nexus repository manager Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control. 9.8 Critical
- embedthis goahead, oracle integrated lights out manager +1 more Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program... 8.1 High
- red hat jboss application server, red hat, inc. jbossas, redhat jboss enterprise application platform +2 more In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was... 9.8 Critical
- red hat jboss seam 2, redhat jboss enterprise application platform, netapp oncommand balance +2 more +4 more JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat... 8.8 High
- zohocorp manageengine servicedesk plus, zoho manageengine servicedesk plus (sdp) / supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 more Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and... 9.8 Critical
- apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 more mod_proxy SSRF 9.0 Critical
- zohocorp manageengine servicedesk plus, zoho manageengine servicedesk plus (sdp) +1 more Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that... 9.8 Critical
- qualcomm snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, apq8009 firmware, apq8009w firmware +397 more +399 more Memory corruption due to improper check to return error when user application requests memory... 7.8 High
- mikrotik routeros MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files... 9.1 Critical
- microsoft exchange, exchange server, exchange server 2016 cumulative update 21 +3 more +5 more Microsoft Exchange Server Remote Code Execution Vulnerability 8.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +10 more +12 more Microsoft Excel Security Feature Bypass Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +38 more +40 more Win32k Elevation of Privilege Vulnerability 7.8 High
- exiftool, debian linux, fedoraproject fedora +2 more Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up... 6.8 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote... 8.8 High
- Show olderLoading…