Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1... 9.8 Critical
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +28 more +30 more An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle... 7.8 High
- apple ios, ipados, watchos +3 more +5 more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in... 8.8 High
- apple ios, ipados, watchos +4 more +6 more A memory consumption issue was addressed with improved memory handling. This issue is fixed in... 4.3 Medium
- apple ios, ipados, macos +5 more +7 more A memory consumption issue was addressed with improved memory handling. This issue is fixed in... 7.8 High
- microsoft win32k, windows 10 version 1507, windows 10 version 1607 +38 more +40 more Win32k Elevation of Privilege Vulnerability 7.0 High
- ibm data risk manager IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote... 4.3 Medium
- ibm data risk manager IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote... 9.1 Critical
- ibm data risk manager IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker... 9.0 Critical
- apple ios, iphone os +1 more A use after free issue was addressed with improved memory management. This issue is fixed in iOS... 8.8 High
- saltstack salt, blackberry workspaces server, canonical ubuntu linux +3 more +5 more SaltStack Salt is vulnerable Arbitrary Directory Access 6.5 Medium
- saltstack salt, canonical ubuntu linux, debian linux +2 more +4 more SaltStack Salt Unauthenticated Remote Code Execution 9.8 Critical
- sophos sfos A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG... 10.0 Critical
- cisco ip phone, ip phones, 8831 firmware +12 more +14 more Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability 9.8 Critical
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +23 more +25 more A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type... 8.8 High
- microsoft internet explorer, internet explorer 11, internet explorer 11 on windows 10 version 1903 for 32-bit systems +7 more +9 more A remote code execution vulnerability exists in the way that the scripting engine handles objects... 7.5 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +24 more +26 more A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type... 7.8 High
- awesomemotive duplicator, wordpress snap creek duplicator plugin +1 more The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1)... 7.5 High
- vmware vcenter server Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or... 9.8 Critical
- amcrest 1080-lite 8ch firmware, amdv10814-h5 firmware, cameras and network video recorder (nvr) +16 more +18 more Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An... 8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 more Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after... 8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 more Under certain conditions, when running the nsDocShell destructor, a race condition can cause a... 8.1 High
- sonatype nexus, nexus repository +1 more Nexus Repository Manager 3 - Remote Code Execution 8.8 High
- liferay portal Deserialization of Untrusted Data in Liferay Portal 9.8 Critical
- trendmicro apex one, officescan, trend micro apex one and officescan +1 more +3 more Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could... 9.8 Critical
- trendmicro apex one, officescan, worry-free business security +2 more +4 more Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0)... 8.8 High
- trendmicro apex one, officescan, trend micro apex one and officescan +1 more +3 more A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a... 8.8 High
- vmware fusion, horizon client, remote console +1 more +3 more VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1)... 7.8 High
- unraid Unraid 6.8.0 allows authentication bypass. 7.5 High
- unraid Unraid through 6.8.0 allows Remote Code Execution. 9.8 Critical
- sumavision enhanced multimedia router (emr), enhanced multimedia router firmware +1 more goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of... 9.8 Critical
- sap solution manager, sap se solution manager (user experience monitoring) +1 more SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication... 10.0 Critical
- google android, huawei berkeley-l09 firmware, columbia-al10b firmware +27 more +29 more In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds... 7.8 High
- android kernel, google android +1 more In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect... 7.8 High
- rconfig lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute... 8.8 High
- zoho manageengine, zohocorp manageengine desktop central +1 more Zoho ManageEngine Desktop Central 10 allows remote code execution because of deserialization of... 9.8 Critical
- google chrome, debian linux, fedoraproject fedora +4 more +6 more Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to... 8.8 High
- microsoft exchange server, exchange server 2010 service pack 3 update rollup 30, exchange server 2013 +4 more +6 more A remote code execution vulnerability exists in Microsoft Exchange software when the software... 8.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +24 more +26 more An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process... 7.8 High
- microsoft internet explorer, internet explorer 10, internet explorer 11 +8 more +10 more A remote code execution vulnerability exists in the way that the scripting engine handles objects... 7.5 High
- netis wf2419 devices, netis-systems wf2419 firmware +1 more Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the... 7.5 High
- teamviewer desktop, teamviewer +1 more TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the... 7.0 High
- eyesofnetwork An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege... 7.8 High
- eyesofnetwork An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded... 9.8 Critical
- playsms PlaySMS before 1.4.3 does not sanitize inputs from a malicious string. 9.8 Critical
- cisco ios xr software, ios xr +1 more Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability 8.8 High
- draytek multiple vigor routers, vigor2960 firmware, vigor300b firmware +1 more +3 more DrayTek Vigor2960 1.3.1_Beta; Vigor3900 1.4.4_Beta; and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1... 9.8 Critical
- oracle coherence, access manager, commerce platform +7 more +9 more Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching... 9.8 Critical
- microsoft .net framework, .net framework 3.0, .net framework 3.5 +50 more +52 more A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate... 9.8 Critical
- microsoft windows, golang go, microsoft windows 10 version 1903 for 32-bit systems +20 more +22 more A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic... 8.1 High
- Show olderLoading…