Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- adobe coldfusion Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have... 9.8 Critical
- cisco ios, ios and ios xe +1 more A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software... 9.8 Critical
- drupal, drupal core, debian linux +2 more Drupal Core Remote Code Execution Vulnerability 9.8 Critical
- sap se crm, sap customer relationship management (crm), customer relationship management +2 more SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation... 6.6 Medium
- exim, canonical ubuntu linux, debian linux +2 more An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By... 9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 more A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This... 7.8 High
- microsoft office, microsoft corporation equation editor, microsoft office compatibility pack +1 more +3 more Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and... 7.8 High
- microsoft office, microsoft corporation equation editor, microsoft office compatibility pack +1 more +3 more Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and... 8.8 High
- microsoft office Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013... 7.8 High
- roundcube webmail, debian linux +1 more Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized... 7.8 High
- microsoft office, outlook +1 more Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to... 7.8 High
- apache struts, cisco digital media manager, hosted collaboration solution +4 more +6 more REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type filtering 8.1 High
- microsoft .net framework Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to... 7.8 High
- symantec messaging gateway, message gateway +1 more The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution,... 8.8 High
- dnnsoftware dotnetnuke, dotnetnuke cms fixed in 9.1.1, dotnetnuke (dnn) (dnn) +2 more DNN (aka DotNetNuke) has Remote Code Execution via a cookie 8.8 High
- progress sitefinity, telerik ui for asp.net ajax, progress asp.net ajax and sitefinity +2 more Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity... 9.8 Critical
- microsoft office, windows 7, windows server 2008 +5 more +7 more Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office... 7.8 High
- microsoft internet information services (iis), internet information services +1 more Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet... 9.8 Critical
- microsoft windows, microsoft corporation windows smb, microsoft server message block +9 more +11 more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7... 8.8 High
- apache struts, arubanetworks clearpass policy manager, hp server automation +6 more +8 more Apache Struts vulnerable to remote arbitrary command execution due to improper input validation 9.8 Critical
- sap netweaver, netweaver application server java +1 more BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML... 6.5 Medium
- microsoft win32k, windows 7, windows 8.1 +8 more +10 more The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,... 7.8 High
- solarwinds virtualization manager SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by... 7.8 High
- microsoft office, visio, visio viewer +2 more Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and... 7.8 High
- apache shiro, aurora, redhat fuse +1 more +3 more Improper Access Control in Apache Shiro 9.8 Critical
- sap netweaver, netweaver application server java +1 more The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does... 10.0 Critical
- microsoft windows, windows 7, windows 8.1 +1 more +3 more Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote... 7.8 High
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 more The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow... 5.5 Medium
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 more The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers... 5.5 Medium
- microsoft win32k, windows 7, windows 8.1 +6 more +8 more The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,... 7.8 High
- sap netweaver, netweaver application server java +1 more Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote... 7.5 High
- oracle weblogic server, storagetek tape analytics sw tool, virtual desktop infrastructure +2 more The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0... 9.8 Critical
- microsoft office, office compatibility pack, office web apps +3 more +5 more Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word... 7.8 High
- microsoft windows, windows 7, windows 8 +4 more +6 more The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2... 9.0 High
- oracle fusion middleware Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware... 9.1 Critical
- microsoft biztalk server, commerce server, mscomctl.ocx +8 more +10 more The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX... 8.8 High