Known exploited vulnerabilities
Under attack, per CISA.
- debian linux, linux kernel +1 more ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices 7.8 High
- debian linux, linux kernel +1 more ALSA: usb-audio: Fix out of bounds reads when finding clock sources 7.1 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High
- gladinet centrestack Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization... 9.0 Critical
- crushftp CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the... 9.8 Critical
- ivanti connect secure, policy secure, connect secure, policy secure, and zta gateways +2 more +4 more A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy... 9.0 Critical
- apache tomcat, debian linux, netapp bootstrap os +2 more Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT 9.8 Critical
- cisco smart licensing utility, smart license utility +1 more A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker... 9.8 Critical
- google chrome, chromium mojo +1 more Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior... 8.3 High
- sitecore cms, cms and experience platform (xp) +1 more Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an... 8.8 High
- sitecore cms, cms and experience platform (xp), experience platform +2 more Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in... 9.8 Critical
- reviewdog action-ast-grep, action-composite-template, action-setup +5 more +7 more Multiple Reviewdog actions were compromised during a specific time period 8.6 High
- edimax ic-7100 ip camera, ic-7100 firmware +1 more Edimax IC-7100 IP Camera OS Command Injection 9.3 Critical
- nakivo backup & replication director, backup and replication, backup \& replication director +2 more NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files... 8.6 High
- sap netweaver, netweaver application server java +1 more Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP... 7.5 High
- tj-actions changed-files, changed-files github action +1 more tj-actions changed-files through 45.0.7 allows remote attackers to discover secrets by reading actions logs. 8.6 High
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 more An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting... 8.1 High
- juniper junos, junos os +1 more Junos OS: An local attacker with shell access can execute arbitrary code 6.7 Medium
- apple ipados, macos, safari +6 more +8 more An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions.... 10.0 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Microsoft Management Console Security Feature Bypass Vulnerability 7.0 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Windows NTFS Remote Code Execution Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Windows NTFS Information Disclosure Vulnerability 5.5 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Windows Fast FAT File System Driver Remote Code Execution Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +28 more +30 more Windows NTFS Information Disclosure Vulnerability 4.6 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +13 more +15 more Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability 7.0 High
- advantive veracore A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows... 5.8 Medium
- advantive veracore Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to... 9.9 Critical
- ivanti endpoint manager, endpoint manager (epm) +1 more Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6... 9.8 Critical
- ivanti endpoint manager, endpoint manager (epm) +1 more Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6... 9.8 Critical
- ivanti endpoint manager, endpoint manager (epm) +1 more Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6... 9.8 Critical
- vmware esxi, esxi, workstation, and fusion, fusion +4 more +6 more VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an... 7.1 High
- vmware esxi, cloud foundation, telco cloud infrastructure +1 more +3 more VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within... 8.2 High
- vmware esxi, workstation, cloud foundation +3 more +5 more VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that... 9.3 Critical
- debian linux, linux kernel, google android +3 more +5 more HID: core: zero-initialize the report buffer 5.5 Medium
- progress whatsup gold WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability 9.8 Critical
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +5 more +7 more A vulnerability in the web-based management interface of Cisco Small Business Routers RV016,... 6.5 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server, pentaho business analytics (ba) server +2 more Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions 8.6 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server, pentaho business analytics (ba) server +2 more Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) 8.8 High
- microsoft windows, windows 10, windows 10 servers +15 more +17 more An elevation of privilege vulnerability exists in Windows when the Win32k component fails to... 7.8 High
- microsoft partner center Partner.Microsoft.Com Elevation of Privilege Vulnerability 8.7 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker... 9.0 Critical
- oracle agile product lifecycle management (plm), agile plm framework, agile product lifecycle management +2 more Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The... 8.8 High
- adobe coldfusion Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10... 9.8 Critical
- microsoft power pages Microsoft Power Pages Elevation of Privilege Vulnerability 8.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface 7.1 High
- craft cms cms, craftcms craft cms +1 more Potential RCE with a compromised security key in craft/cms 8.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Authentication Bypass in the Management Web Interface 8.8 High
- sonicwall sonicos An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote... 9.8 Critical
- simple-help simplehelp SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal... 7.5 High
- apple ipados, ios and ipados, iphone os +2 more An authorization issue was addressed with improved state management. This issue is fixed in... 6.1 Medium
- Show olderLoading…