Known exploited vulnerabilities
Under attack, per CISA.
- vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 more Privilege escalation vulnerability 7.5 High
- vmware vcenter server, broadcom vmware cloud foundation, vmware vcenter server +1 more +3 more Heap-overflow vulnerability 9.8 Critical
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface 6.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) 9.3 Critical
- kemptechnologies loadmaster, progress kemp loadmaster +1 more LoadMaster Pre-Authenticated OS Command Injection 10.0 Critical
- palo alto networks expedition Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure 9.2 Critical
- palo alto networks expedition Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure 9.9 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +24 more +26 more Windows Task Scheduler Elevation of Privilege Vulnerability 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more NTLM Hash Disclosure Spoofing Vulnerability 6.5 Medium
- metabase GeoJSON URL validation can expose server files and environment variables to unauthorized users 10.0 Critical
- atlassian jira server, jira server and data center, jira data center +2 more Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read... 5.3 Medium
- cisco adaptive security appliance (asa), adaptive security appliance software +1 more Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security... 6.1 Medium
- android framework, google android +1 more In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path... 7.3 High
- cyberpanel upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows... 10.0 Critical
- palo alto networks expedition Expedition: Missing Authentication Leads to Admin Account Takeover 9.3 Critical
- nazgul nostromo nhttpd, nostromo nhttpd +1 more Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an... 9.8 Critical
- ptzoptics pt30x-sdi, pt30x-ndi, pt30x-ndi-xx-g2 firmware +3 more +5 more PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration 7.2 High
- ptzoptics pt30x-sdi, pt30x-ndi, pt30x-ndi-xx-g2 firmware +2 more +4 more PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication 9.1 Critical
- cisco adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd), adaptive security appliance software +2 more +4 more A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance ... 5.8 Medium
- roundcube webmail, debian linux +1 more Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes. 6.1 Medium
- fortinet fortimanager, fortimanager cloud +1 more A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through... 9.8 Critical
- microsoft sharepoint, sharepoint enterprise server 2016, sharepoint server 2019 +2 more +4 more Microsoft SharePoint Remote Code Execution Vulnerability 7.2 High
- sciencelogic sl1 ScienceLogic SL1 unspecified vulnerability 9.3 Critical
- veeam backup & replication, backup and recovery, backup \& replication +2 more A deserialization of untrusted data vulnerability with a malicious payload can allow an... 9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 more An attacker was able to achieve code execution in the content process by exploiting a use-after... 9.8 Critical
- solarwinds web help desk, webhelpdesk +1 more SolarWinds Web Help Desk Hardcoded Credential Vulnerability 9.1 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +21 more +23 more Windows Kernel Elevation of Privilege Vulnerability 7.0 High
- ivanti cloud services appliance (csa), csa (cloud services appliance), endpoint manager cloud services appliance +2 more An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2... 7.2 High
- ivanti cloud services appliance (csa), csa (cloud services appliance), endpoint manager cloud services appliance +2 more SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote... 6.5 Medium
- fortinet fortios, fortipam, fortiproxy +2 more +4 more A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Microsoft Management Console Remote Code Execution Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +27 more +29 more Windows MSHTML Platform Spoofing Vulnerability 6.5 Medium
- qualcomm fastconnect 6700 firmware, fastconnect 6800 firmware, fastconnect 6900 firmware +74 more +76 more Use After Free in DSP Service 7.8 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0... 10.0 Critical
- ivanti epm, endpoint manager (epm), endpoint manager +2 more An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows... 9.6 Critical
- d-link dir-820 router, dlink dir-820l firmware, dir820la1 firmware +2 more OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate... 9.8 Critical
- draytek multiple vigor routers, vigor2960 firmware, vigor300b firmware +1 more +3 more On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi... 9.8 Critical
- sap commerce cloud, sap se commerce cloud (virtualjdbc extension) +1 more Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6... 9.8 Critical
- ivanti vtm, virtual traffic manager +1 more Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1... 9.8 Critical
- ivanti cloud services appliance (csa), csa (cloud services appliance), endpoint manager cloud services appliance +2 more Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to... 9.4 Critical
- apache hugegraph, hugegraph-server +1 more Apache HugeGraph-Server: Command execution in gremlin 9.8 Critical
- oracle adf faces, application development framework, jdeveloper +1 more +3 more Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)... 9.8 Critical
- oracle weblogic server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)... 9.8 Critical
- microsoft sql server, sql server 2014 service pack 3 for 32-bit systems (cu), sql server 2014 service pack 3 for 32-bit systems (gdr) +3 more +5 more A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it... 8.8 High
- adobe air, air sdk, flash player +7 more +9 more Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x... 8.8 High
- adobe flash player, google chrome, opensuse +6 more +8 more Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0... 9.8 Critical
- adobe flash player, opensuse, redhat enterprise linux desktop +5 more +7 more Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash... 8.8 High
- adobe flash player, opensuse, redhat enterprise linux desktop +5 more +7 more The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on... 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows MSHTML Platform Spoofing Vulnerability 8.8 High
- progress whatsup gold, whatsupgold +1 more WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability 9.8 Critical
- Show olderLoading…