Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- broadcom fabric operating system, linux kernel, netapp aff 500f firmware +18 more +20 more Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE 8.3 High
- microsoft windows, windows 7, windows 8 +8 more +10 more The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2... 8.8 High
- microsoft windows, windows 7, windows server 2003 +3 more +5 more Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode... 8.8 High
- microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers... 9.3 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 more Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and... 9.3 High
- samsung android, mobile devices, samsung mobile devices +2 more Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote... 8.8 High
- smartbedded meteobridge, meteobridge firmware, meteobridge vm +2 more Arbitrary Command Injection in Smartbedded MeteoBridge 8.7 High
- jenkins, oracle communications cloud native core automated test suite +1 more Deserialization of Untrusted Data in Jenkins 9.8 Critical
- juniper screenos Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b,... 9.8 Critical
- gnu bash GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of... 10.0 High
- cisco ios xe software, ios, ios xe +3 more +5 more A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software... 7.7 High
- libraesva email security gateway Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail... 6.1 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 more Deserialization Vulnerability in GoAnywhere MFT's License Servlet 10.0 Critical
- sudo, canonical ubuntu linux, debian linux +5 more +7 more Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a... 9.3 Critical
- adminer, debian linux +1 more SSRF in adminer 7.2 High
- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software, secure firewall threat defense +2 more +4 more A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA)... 6.5 Medium
- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software, secure firewall threat defense +2 more +4 more A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA)... 9.9 Critical
- google chrome, chromium v8, siemens cadra +2 more Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to... 9.8 Critical
- 3ds delmia apriso Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 9.0 Critical
- omnissa workspace one uem Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious... 7.5 High
- sitecore experience manager (xm), experience platform (xp), experience manager +4 more +6 more Sitecore Products ViewState Deserialization Vulnerability 9.0 Critical
- google android, android runtime +1 more In multiple locations, there is a possible way to escape chrome sandbox to attack android... 8.8 High
- debian linux, linux kernel +1 more posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() 7.8 High
- tp-link systems inc. archer c7(eu) v2, tl-wr841n/nd(ms) v9, tp-link archer c7 firmware +3 more +5 more Authenticated RCE via Parental Control command injection 8.6 High
- tp-link tl-wr841n, archer c5, archer c7 +55 more +57 more TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability 6.5 Medium
- facebook whatsapp business for ios, whatsapp for ios, meta platforms whatsapp +2 more +4 more Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to... 5.4 Medium
- tp-link tl-wa855re, tl-wa855re firmware +1 more TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same... 8.8 High
- elastic endpoint, sangoma freepbx +1 more FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE 10.0 Critical
- citrix netscaler, netscaler gateway, netscaler adc +2 more +4 more Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service 9.2 Critical
- git, apple xcode, debian linux +2 more Git allows arbitrary code execution through broken config quoting 8.1 High
- citrix session recording Limited remote code execution with privilege of a NetworkService Account access 5.1 Medium
- citrix session recording Privilege escalation to NetworkService Account access 5.1 Medium
- apple ipados, macos, ios and ipados +2 more +4 more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in... 10.0 Critical
- trend micro apex one, trend micro, inc. micro apex one +1 more A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre... 9.4 Critical
- n-able n-central Insecure Deserialization Vulnerability 9.4 Critical
- n-able n-central Command Injection Vulnerability 9.4 Critical
- rarlab winrar, dtsearch +1 more Path traversal vulnerability in WinRAR 8.4 High
- microsoft internet explorer Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft... 9.3 High
- microsoft excel, office, access +11 more +13 more Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other... 9.3 High
- d-link dnr-322l, dlink dnr-322l firmware +1 more Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated... 8.8 High
- d-link dcs-2530l and dcs-2670l devices, dlink dcs-2530l firmware, dcs-2670l firmware +7 more +9 more An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02... 7.5 High
- d-link dcs-2530l and dcs-2670l devices, dlink dcs-2530l firmware, dcs-2670l firmware +7 more +9 more An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02... 8.8 High
- cisco identity services engine software, ise passive identity connector, identity services engine +1 more +3 more Cisco ISE API Unauthenticated Remote Code Execution Vulnerability 10.0 Critical
- cisco identity services engine software, identity services engine, identity services engine passive identity connector +2 more Cisco ISE API Unauthenticated Remote Code Execution Vulnerability 10.0 Critical
- papercut ng/mf, mf, ng +2 more PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF 8.4 High
- crushftp CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used,... 9.0 Critical
- google chrome, chromium, apple ipados +8 more +10 more Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204... 8.8 High
- microsoft sharepoint, sharepoint server, sharepoint enterprise server 2016 +3 more +5 more Microsoft SharePoint Server Spoofing Vulnerability 6.5 Medium
- microsoft sharepoint, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 more Microsoft SharePoint Remote Code Execution Vulnerability 8.8 High
- sysaid, sysaid on-prem +1 more SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection 9.3 Critical
- Show olderLoading…