Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- broadcom vmware aria operations, vmware aria operations, cloud foundation +3 more +5 more VMware Aria Operations command injection vulnerability 8.1 High
- cisco catalyst sd-wan manager, catalyst sd-wan controller and manager, sd-wan vbond orchestrator +1 more +3 more Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability 10.0 Critical
- cisco sd-wan, catalyst sd-wan manager, catalyst sd-wan +5 more +7 more Cisco SD-WAN Software Privilege Escalation Vulnerability 7.8 High
- soliton filezen FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is... 8.7 High
- bulwarkmail webmail Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS)... 7.2 High
- bulwarkmail webmail, debian linux +1 more Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization 9.9 Critical
- dell recoverpoint for virtual machines, recoverpoint for virtual machines (rp4vms) +1 more Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded... 10.0 Critical
- gitlab When requests to the internal network for webhooks are enabled, a server-side request forgery... 6.8 Medium
- google chrome, chromium +1 more Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to... 8.8 High
- teamt5 threatsonar anti-ransomware TeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload 7.2 High
- synacor zimbra collaboration suite Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed... 9.8 Critical
- microsoft windows, windows 2003 server, windows xp +2 more Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template... 9.3 High
- beyondtrust privileged remote access, remote support (rs) and privileged remote access (pra), remote support +1 more +3 more Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) 9.9 Critical
- apple ipados, macos, tvos +5 more +7 more A memory corruption issue was addressed with improved state management. This issue is fixed in... 7.8 High
- notepad++, notepad-plus-plus, notepad-plus-plus notepad\+\+ +2 more Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification 7.7 High
- solarwinds web help desk SolarWinds Web Help Desk Security Control Bypass Vulnerability 8.1 High
- microsoft configuration manager, configuration manager 2403, configuration manager 2409 +1 more +3 more Microsoft Configuration Manager Remote Code Execution Vulnerability 9.8 Critical
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +27 more +29 more Windows Remote Access Connection Manager Denial of Service Vulnerability 6.2 Medium
- microsoft office, 365 apps, 365 apps for enterprise +5 more +7 more Microsoft Word Security Feature Bypass Vulnerability 7.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +27 more +29 more Windows Shell Security Feature Bypass Vulnerability 8.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +27 more +29 more Windows Remote Desktop Services Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +27 more +29 more MSHTML Framework Security Feature Bypass Vulnerability 8.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +23 more +25 more Desktop Window Manager Elevation of Privilege Vulnerability 7.8 High
- smartertools smartermail SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API 9.3 Critical
- react native community cli, react-native-community react native community cli +1 more Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests 9.8 Critical
- solarwinds web help desk SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability 9.8 Critical
- bridgehead software filestore, sangoma freepbx +1 more FreePBX Administration GUI is Vulnerable to Authenticated Command Injection 8.6 High
- gitlab, gitlab community and enterprise editions +1 more An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14... 6.8 Medium
- sangoma freepbx Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect... 9.8 Critical
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated... 9.8 Critical
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated... 9.8 Critical
- fortinet fortianalyzer, fortimanager, fortinac-f +6 more +8 more An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability... 9.4 Critical
- fortinet fortiweb, siemens ruggedcom ape1808 +1 more An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0,... 9.1 Critical
- microsoft office, 365 apps, 365 apps for enterprise +5 more +7 more Microsoft Office Security Feature Bypass Vulnerability 7.8 High
- smartertools smartermail SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API 9.3 Critical
- gnu inetutils, debian linux +1 more telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value... 9.8 Critical
- smartertools smartermail Upload Arbitrary Files 10.0 Critical
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +25 more +27 more An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An... 7.8 High
- vmware vcenter server, broadcom vmware vcenter server, vmware cloud foundation +2 more vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC... 9.8 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra... 8.8 High
- prettier eslint-config-prettier, eslint-plugin-prettier, un-ts napi-postinstall +4 more +6 more eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code 7.5 High
- versa concerto Versa Concerto Actuator Authentication Bypass Information Leak 9.2 Critical
- vitejs vite, vite vitejs +1 more Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query 5.3 Medium
- cisco unified communications manager, unity connection, unified communications manager im and presence service +2 more Cisco Unified Communications Products Remote Code Execution Vulnerability 8.2 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +25 more +27 more Desktop Window Manager Information Disclosure Vulnerability 5.5 Medium
- gogs File overwrite in file update API in Gogs 8.7 High
- hewlett packard enterprise (hpe) hpe oneview, oneview +1 more A remote code execution issue exists in HPE OneView. 10.0 Critical
- microsoft office, office powerpoint, powerpoint +2 more Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office... 9.3 High
- mongodb, mongodb and mongodb server, mongodb inc. server +1 more +3 more Zlib compressed protocol header length confusion may allow memory read 8.7 High
- digiever ds-2105 pro, ds-2105 pro\+ firmware, ds-2105 pro firmware +2 more Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This... 8.8 High
- Show olderLoading…