Known exploited vulnerabilities
Under attack, per CISA.
- ivanti connect secure Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6... 4.3 Medium
- ivanti connect secure Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache... 7.0 High
- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software, secure firewall threat defense +2 more +4 more Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability 8.6 High
- gitlab, gitlab community edition and enterprise edition, ruby-lang ruby +2 more Integer Overflow or Wraparound in GitLab 10.0 Critical
- broadcom vmware esx, vmware esx, cloud foundation +3 more +5 more ESX insufficient logging vulnerability 2.7 Low
- linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 more net: skbuff: preserve shared-frag marker during coalescing 7.8 High
- adobe commerce, commerce b2b, commerce events +5 more +7 more Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) 9.3 Critical
- andybalholm brotli, 7-zip p7zip, anthropic bun +34 more +36 more Out-of-Bounds Write in Google Brotli Decoder 9.2 Critical
- php, paloaltonetworks pan-os, panorama virtual appliance +57 more +59 more RCE via stale global state 9.2 Critical
- php, paloaltonetworks pan-os, panorama virtual appliance +56 more +58 more RCE via OOM corruption 9.2 Critical
- arista velocloud orchestrator Security Advisory 0199 9.4 Critical
- collabora online - built-in code server, online – built-in code server +1 more Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app,... 9.2 Critical
- siemens software center A vulnerability has been identified in Siemens Software Center (All versions). The affected... 8.4 High
- e-guardian siteguard, eg secure solutions siteguard server edition, eg secure solutions inc. siteguard server edition for apache httpd +4 more +6 more SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an... 8.5 High
- plex media server Plex Media Server arbitrary file write 8.6 High
- plex media server Plex Media Server arbitrary-host SSRF 5.3 Medium
- plex media server Plex Media Server URL injection 6.9 Medium
- plex media server Plex Media Server SSRF 5.3 Medium
- beyondtrust remote support Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support 9.3 Critical
- fortinet fortios, fortipam, fortiproxy +4 more +6 more An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22]... 5.4 Medium
- atlassian bamboo, bamboo data center, bitbucket data center +14 more +16 more h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira... 9.3 Critical
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface 8.6 High
- cisco secure email, secure email gateway, asyncos +2 more Cisco Secure Email Gateway Arbitrary File Write Vulnerability 9.8 Critical
- ahsay ahsaycbs, cloud backup suite +1 more Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection 10.0 Critical
- ahsay ahsaycbs, cloud backup suite +1 more Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication 6.9 Medium
- microsoft windows, edge (chromium-based), outlook.com +29 more +31 more Windows Shell Security Feature Bypass Vulnerability 8.8 High
- ivanti connect secure Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated... 8.6 High
- strapi Strapi leaking sensitive user information by filtering on private fields 4.9 Medium
- onlyoffice document server, docs +1 more Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server... 9.8 Critical
- apache struts, huawei agile controller-campus firmware, anyoffice +17 more +19 more Apache Struts RCE Vulnerability 8.1 High
- isc bind, apple os x server, canonical ubuntu linux +18 more +20 more named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to... 7.8 High
- proftpd, debian linux, fedoraproject fedora +2 more +4 more The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files... 10.0 High
- citrix netscaler, netscaler gateway, netscaler adc +2 more +4 more Memory overflow vulnerability leading to Denial of Service 8.7 High
- zammad Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package 8.5 High
- zammad Undisclosed RCE in Zammad v6.3 and higher 8.7 High
- fortinet fortimail An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability... 9.8 Critical
- cisco catalyst sd-wan manager Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability 9.8 Critical
- apple ipados, macos, ios and ipados +2 more +4 more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in... 8.8 High
- citrix netscaler, netscaler gateway, citrix netscaler adc +2 more +4 more Memory overflow vulnerability leading to Remote Code Execution or Denial of Service 9.5 Critical
- citrix netscaler, netscaler gateway, citrix netscaler adc +2 more +4 more A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands 9.5 Critical
- wordpress core, wordpress +1 more WordPress Core Remote File Inclusion Vulnerability 8.1 High
- mikrotik routeros SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS 6.9 Medium
- microsoft sharepoint, sharepoint server, sharepoint enterprise server 2016 +2 more +4 more Microsoft SharePoint Server Remote Code Execution Vulnerability 8.8 High
- adobe commerce, commerce b2b, commerce and magento +3 more +5 more Adobe Commerce | Incorrect Authorization (CWE-863) 9.1 Critical
- wso2 api control plane, api manager, multiple products +3 more +5 more Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover 10.0 Critical
- f5 big-ip, big-ip apm, big-ip access policy manager +2 more BIG-IP APM OAuth vulnerability 9.3 Critical
- check point multiple products, checkpoint multi-domain security management, quantum security management +2 more Directory Traversal and File upload allows execution of arbitrary script on the Management Server 9.8 Critical
- arista velocloud orchestrator, arista networks velocloud orchestrator (vco) on-prem +1 more Security Advisory 0183 9.5 Critical
- checkpoint quantum security gateway, check point multiple products, checkpoint gaia embedded +1 more +3 more Improper Certificate Validation in Quantum Security Gateway 9.8 Critical
- zyxel gs1900-48hpv2 firmware, gs1900 series switches, gs1900-10hp firmware +8 more +10 more A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware... 8.8 High
- Show olderLoading…