Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- mozilla firefox, firefox esr, thunderbird +2 more +4 more Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a... 8.8 High
- apache solr, oracle primavera unifier +1 more Improper Input Validation in Apache Solr 7.5 High
- tvt nvms-1000, nvms-1000 firmware +1 more TVT NVMS-1000 devices allow GET /.. Directory Traversal 7.5 High
- citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +1 more +3 more An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1,... 9.8 Critical
- ibm planning analytics IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows... 10.0 Critical
- sonicwall sma100, sma 100 firmware +1 more Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to... 7.5 High
- progress telerik ui for asp.net ajax, telerik ui for asp.net ajax +1 more Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization... 9.8 Critical
- openslp, vmware esxi, horizon daas +14 more +16 more OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has... 9.8 Critical
- microsoft internet explorer, internet explorer 10, internet explorer 11 +5 more +7 more A remote code execution vulnerability exists in the way that the scripting engine handles objects... 7.5 High
- apple ios, iphone os +1 more A memory corruption issue was addressed with improved state management. This issue is fixed in... 8.8 High
- apple ios, iphone os +1 more A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS... 8.8 High
- trend micro officescan Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a... 7.5 High
- android kernel, debian linux, google android +75 more +77 more A use-after-free in binder.c allows an elevation of privilege from an application to the Linux... 7.8 High
- vbulletin vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter... 9.8 Critical
- microsoft internet explorer, internet explorer 10, internet explorer 11 +5 more +7 more A remote code execution vulnerability exists in the way that the scripting engine handles objects... 7.5 High
- simalliance toolbox browser, trustedconnectivityalliance s\@t browser +1 more Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which... 9.8 Critical
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 more An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles... 7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 more An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS)... 7.8 High
- nagios xi Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to... 8.8 High
- citrix storefront server Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 ... 7.5 High
- docker desktop community edition, docker, apache geode +2 more Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing... 7.8 High
- dnnsoftware dotnetnuke, dotnetnuke (dnn) (dnn) +1 more Inadequate Encryption Strength in DotNetNuke 7.5 High
- dnnsoftware dotnetnuke, dotnetnuke (dnn) (dnn) +1 more Inadequate Encryption Strength in DotNetNuke 7.5 High
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 more An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet... 9.1 Critical
- atlassian crowd, crowd and crowd data center +1 more Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled... 9.8 Critical
- citrix workspace, receiver, workspace application and receiver for windows +2 more Citrix Workspace App before 1904 for Windows has Incorrect Access Control. 9.8 Critical
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 more An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles... 7.8 High
- microsoft remote desktop services, huawei agile controller-campus firmware, bh620 v2 firmware +67 more +69 more A remote code execution vulnerability exists in Remote Desktop Services formerly known as... 9.8 Critical
- ivanti connect secure, pulse connect secure +1 more In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7... 9.9 Critical
- ivanti connect secure, policy secure, pulsesecure pulse policy secure +1 more +3 more In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX... 8.0 High
- atlassian confluence, confluence server and data center, confluence server +2 more Confluence Server and Data Center had a path traversal vulnerability in the... 8.8 High
- microsoft win32k, windows, windows server +15 more +17 more An elevation of privilege vulnerability exists in Windows when the Win32k component fails to... 7.8 High
- microsoft win32k, windows, windows server +15 more +17 more An elevation of privilege vulnerability exists in Windows when the Win32k component fails to... 7.8 High
- microsoft win32k, windows, windows server +13 more +15 more An elevation of privilege vulnerability exists in Windows when the Win32k component fails to... 7.8 High
- microsoft win32k, windows, windows server +2 more +4 more An elevation of privilege vulnerability exists in Windows when the Win32k component fails to... 7.8 High
- apache http server, canonical ubuntu linux, debian linux +23 more +25 more In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code... 7.8 High
- atlassian confluence server, confluence server and data server +1 more The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed... 9.8 Critical
- warfareplugins social warfare, social warfare pro, wordpress social warfare plugin +2 more The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post... 6.1 Medium
- microsoft sharepoint, sharepoint enterprise server, sharepoint foundation +1 more +3 more A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to... 9.8 Critical
- apple ios, macos, ios and macos +2 more +4 more A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with... 7.5 High
- thinkphp, opensourcebms open source background management system, zzzcms zzzphp +2 more ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote... 8.8 High
- zoho manageengine, zohocorp manageengine servicedesk plus +1 more Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to... 6.5 Medium
- cisco small business rv320 and rv325 routers, small business rv series router firmware, rv320 firmware +1 more +3 more Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability 7.5 High
- microsoft excel viewer, internet explorer 10, internet explorer 11 +6 more +8 more A remote code execution vulnerability exists in the way that the MSHTML engine inproperly... 8.8 High
- microsoft internet explorer, internet explorer 10, internet explorer 11 +1 more +3 more A remote code execution vulnerability exists in the way that the scripting engine handles objects... 7.5 High
- 5none nonecms An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers... 9.8 Critical
- tenda ac10 firmware, ac7, ac9, and ac10 routers, ac7 firmware +1 more +3 more An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9... 9.8 Critical
- adobe coldfusion Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14... 9.8 Critical
- apache struts, netapp active iq unified manager, oncommand insight +5 more +7 more Apache Struts vulnerable to remote command execution (RCE) due to improper input validation 8.1 High
- cisco adaptive security appliance (asa), firepower threat defense, adaptive security appliance software +1 more +3 more A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow... 7.5 High
- Show olderLoading…