Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- sonicwall sma100, sslvpn sma100, sma 100 firmware +5 more +7 more A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote... 9.8 Critical
- d-link dns-320 device, dlink dns-320 firmware +1 more D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi... 9.8 Critical
- d-link dir-825 r1 devices, dlink dir-825 r1 firmware +1 more An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer... 9.8 Critical
- microsoft defender, security essentials, system center 2012 endpoint protection +3 more +5 more Microsoft Defender Remote Code Execution Vulnerability 7.8 High
- solarwinds orion, orion platform +1 more SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands 9.8 Critical
- zyxel atp100 firmware, atp100w firmware, atp200 firmware +28 more +30 more Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an... 9.8 Critical
- apache struts, oracle business intelligence, communications diameter intelligence hub +5 more +7 more Remote code execution in Apache Struts 9.8 Critical
- microsoft exchange server, exchange server 2010 service pack 3 update rollup 31 +1 more Microsoft Exchange Remote Code Execution Vulnerability 8.4 High
- apple ipados, macos, watchos +4 more +6 more A memory corruption issue was addressed with improved input validation. This issue is fixed in... 7.8 High
- apple ipados, macos, watchos +3 more +5 more A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS... 5.5 Medium
- apple ipados, macos, watchos +6 more +8 more A type confusion issue was addressed with improved state handling. This issue is fixed in macOS... 7.8 High
- vmware identity manager, identity manager connector, one access +3 more +5 more VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector... 9.1 Critical
- apple ipados, macos, safari +5 more +7 more A use after free issue was addressed with improved memory management. This issue is fixed in... 8.8 High
- google chrome Use after free in CefSharp 9.6 Critical
- google chrome, chromium v8 +1 more Inappropriate implementation in V8 in CefSharp 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +38 more +40 more Windows Kernel Local Elevation of Privilege Vulnerability 7.8 High
- saltstack salt, debian linux, fedoraproject fedora +1 more +3 more SaltStack Salt Command Injection in netapi ssh client 9.8 Critical
- google android, chrome, chrome for android ui +2 more Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote... 9.6 Critical
- google chrome, cefsharp, debian linux +6 more +8 more Inappropriate implementation in V8 8.8 High
- oracle weblogic server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component:... 9.8 Critical
- ivanti connect secure, pulse connect secure +1 more A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an... 7.2 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd) +1 more +3 more Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities 6.1 Medium
- oracle weblogic server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component:... 7.2 High
- oracle weblogic server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component:... 9.8 Critical
- oracle solaris, solaris and zettabyte file system (zfs), oracle corporation solaris operating system +2 more Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable... 10.0 Critical
- vmware esxi, cloud foundation +1 more OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401... 9.8 Critical
- freetype, google chrome, debian linux +4 more +6 more Heap buffer overflow in CefSharp 9.6 Critical
- netgear jgs516pe devices, jgs516pe firmware +1 more NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function... 9.8 Critical
- ivanti connect secure, pulse connect secure, policy secure +2 more A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an... 7.2 High
- cisco ios xr software, ios xr +1 more Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities 8.6 High
- microsoft chakracore, edge, edge and internet explorer +4 more +6 more Microsoft Browser Memory Corruption Vulnerability 4.2 Medium
- filemanagerpro file manager, wordpress file manager plugin +1 more The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to... 10.0 Critical
- trend micro apex one, worry-free business security, apex one, officescan, and worry-free business security +1 more +3 more A vulnerability in Trend Micro Apex One on Microsoft Windows may allow an attacker to manipulate... 7.8 High
- cisco ios xr software, ios xr +1 more Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability 8.6 High
- microsoft netlogon, canonical ubuntu linux, debian linux +24 more +26 more Netlogon Elevation of Privilege Vulnerability 5.5 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +41 more +43 more Windows Spoofing Vulnerability 7.8 High
- microsoft internet explorer, internet explorer 11 +1 more Scripting Engine Memory Corruption Vulnerability 7.8 High
- fortinet fortios A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the... 6.5 Medium
- vbulletin vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an... 9.8 Critical
- fortinet fortios An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and... 9.8 Critical
- cisco adaptive security appliance software, adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd) +1 more +3 more Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability 7.5 High
- microsoft windows, windows server, windows server, version 1903 (server core installation) +6 more +8 more A remote code execution vulnerability exists in Windows Domain Name System servers when they fail... 10.0 Critical
- microsoft .net framework, sharepoint server, .net core +68 more +70 more .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability 7.8 High
- microsoft hyper-v remotefx, windows server, windows server 2008 +2 more +4 more A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to... 9.0 Critical
- sap netweaver, sap se netweaver as java (lm configuration wizard), sap netweaver application server java +2 more SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not... 10.0 Critical
- tenda ac15 firmware, ac1900 router ac15 model +1 more The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers... 9.8 Critical
- citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +2 more +4 more Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18,... 4.3 Medium
- citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +3 more +5 more Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18... 6.5 Medium
- citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +2 more +4 more Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18,... 6.5 Medium
- mobileiron core, monitor and reporting database, sentry +2 more +4 more MobileIron Core and Connector before 10.3.0.4, 10.4.x before 10.4.0.4, 10.5.x before 10.5.1.1, 10... 9.8 Critical
- Show olderLoading…