Known exploited vulnerabilities
Under attack, per CISA.
- mitel sip phones, 6863i sip firmware, 6865i sip firmware +14 more +16 more A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the... 7.2 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +32 more +34 more Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +24 more +26 more Windows Storage Elevation of Privilege Vulnerability 7.1 High
- zyxel vmg4325-b10a firmware, dsl cpe devices, sbg3300-n000 firmware +12 more +14 more **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the... 8.8 High
- zyxel vmg4325-b10a firmware, dsl cpe devices, sbg3300-n000 firmware +12 more +14 more **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI... 8.8 High
- trimble cityworks, cityworks (with office companion) +1 more Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to... 8.6 High
- 7-zip, netapp active iq unified manager +1 more 7-Zip Mark-of-the-Web Bypass Vulnerability 7.0 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +4 more +6 more Microsoft Outlook Remote Code Execution Vulnerability 9.8 Critical
- audinate dante discovery, dante application library +1 more mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to... 7.8 High
- sophos cyberoamos An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows... 9.8 Critical
- sophos xg firewall, xg firewall firmware +1 more Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via... 9.8 Critical
- debian linux, linux kernel +1 more media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format 7.8 High
- apache ofbiz Apache OFBiz: Confused controller-view authorization logic (forced browsing) 7.5 High
- microsoft .net framework, .net framework 2.0 service pack 2, .net framework 3.0 service pack 2 +9 more +11 more .NET Framework Information Disclosure Vulnerability 7.5 High
- paessler prtg network monitor PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users... 9.8 Critical
- paessler prtg network monitor An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the... 7.2 High
- apple ipados, macos, tvos +5 more +7 more A use after free issue was addressed with improved memory management. This issue is fixed in... 10.0 Critical
- sonicwall sma1000, sma1000 appliances, sma6200 firmware +7 more +9 more Pre-authentication deserialization of untrusted data vulnerability has been identified in the... 9.8 Critical
- jquery, debian linux, drupal +49 more +51 more Potential XSS vulnerability in jQuery 6.9 Medium
- aviatrix controller, controllers +1 more An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to... 10.0 Critical
- microsoft windows, windows 10 version 21h2, windows 10 version 22h2 +13 more +15 more Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 21h2, windows 10 version 22h2 +13 more +15 more Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 21h2, windows 10 version 22h2 +13 more +15 more Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability 7.8 High
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 more An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting... 9.6 Critical
- beyondtrust privileged remote access (pra) and remote support (rs), privileged remote access, remote support +1 more +3 more Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA) 6.6 Medium
- qlik sense Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code... 9.6 Critical
- ivanti connect secure, neurons for zta gateways, policy secure +2 more +4 more A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy... 9.0 Critical
- mitel micollab Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative... 2.7 Low
- mitel micollab A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8... 9.1 Critical
- oracle weblogic server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)... 9.8 Critical
- palo alto networks pan-os, cloud ngfw, paloaltonetworks prisma access +2 more PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet 8.7 High
- acclaim systems usaherds Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials. 8.1 High
- beyondtrust privileged remote access, privileged remote access (pra) and remote support (rs), remote support +2 more Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA) 9.8 Critical
- reolink rlc-410w ip camera, rlc-410w firmware +1 more An OS command injection vulnerability exists in the device network settings functionality of... 9.1 Critical
- nuuo nvrmini2 devices, nvrmini2 firmware +1 more NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive,... 9.8 Critical
- reolink c1 pro firmware, c2 pro firmware, multiple ip cameras +3 more +5 more On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an... 7.2 High
- nuuo nvrmini devices, nvrmini firmware +1 more upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell... 9.8 Critical
- cleo harmony, lexicom, vltrader +1 more +3 more In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +30 more +32 more Windows Kernel-Mode Driver Elevation of Privilege Vulnerability 7.8 High
- adobe coldfusion ColdFusion | Improper Access Control (CWE-284) 7.4 High
- cleo harmony, lexicom, vltrader +1 more +3 more In Cleo Harmony before 5.8.0.20, VLTrader before 5.8.0.20, and LexiCom before 5.8.0.20, there is... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High
- cyberpanel getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb... 10.0 Critical
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +7 more +9 more A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware... 7.5 High
- projectsend ProjectSend Unauthenticated Configuration Modification 9.8 Critical
- north grid proself, north grid corporation proself enterprise/standard edition, proself gateway edition +1 more +3 more Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and... 7.5 High
- array networks ag/vxag arrayos, arraynetworks arrayos ag +1 more Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An... 9.8 Critical
- apple ipados, macos, safari +6 more +8 more A cookie management issue was addressed with improved state management. This issue is fixed in... 6.3 Medium
- apple ipados, macos, safari +6 more +8 more The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2... 8.8 High
- oracle corporation agile plm framework, oracle agile product lifecycle management (plm), agile product lifecycle management +2 more Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component:... 7.5 High
- Show olderLoading…