Known exploited vulnerabilities
Under attack, per CISA.
- ivanti cloud services appliance, csa (cloud services appliance), endpoint manager cloud services appliance +2 more An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518... 7.2 High
- microsoft publisher, office 2019, office ltsc 2021 +2 more +4 more Microsoft Publisher Security Feature Bypass Vulnerability 7.3 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows Mark of the Web Security Feature Bypass Vulnerability 5.4 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows Installer Elevation of Privilege Vulnerability 7.8 High
- sonicwall sonicos An improper access control vulnerability has been identified in the SonicWall SonicOS management... 9.8 Critical
- linux kernel, centos, redhat enterprise linux +2 more Linux distributions that have not patched their long-term kernels with https://git.kernel.org... 7.8 High
- imagemagick, canonical ubuntu linux, debian linux +3 more +5 more The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders... 8.4 High
- kingsoft wps office, wps office +1 more Arbitrary Code Execution in WPS Office 9.3 Critical
- draytek vigorconnect A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download... 7.5 High
- draytek vigorconnect A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download... 7.5 High
- google chrome, chromium v8, microsoft edge chromium +2 more Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote... 8.8 High
- apache ofbiz Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code 9.8 Critical
- google chrome, chromium v8, microsoft edge +2 more Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit... 9.6 Critical
- versa director, versa-networks versa director +1 more The Versa Director GUI provides an option to customize the look and feel of the user interface.... 6.6 Medium
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 more Important: kernel security and bug fix update 8.4 High
- dahua ip camera firmware, dahuasecurity ipc-hum7xxx firmware, ipc-hx3xxx firmware +16 more +18 more The identity authentication bypass vulnerability found in some Dahua products during the login... 9.8 Critical
- dahua ip camera firmware, dahuasecurity ipc-hum7xxx firmware, ipc-hx3xxx firmware +17 more +19 more The identity authentication bypass vulnerability found in some Dahua products during the login... 9.8 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 20 +3 more +5 more Microsoft Exchange Server Remote Code Execution Vulnerability 7.2 High
- jenkins, jenkins command line interface (cli) +1 more Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE 9.8 Critical
- solarwinds web help desk, webhelpdesk +1 more SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability 9.8 Critical
- microsoft project, 365 apps, 365 apps for enterprise +4 more +6 more Microsoft Project Remote Code Execution Vulnerability 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +28 more +30 more Windows Power Dependency Coordinator Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +24 more +26 more Windows Kernel Elevation of Privilege Vulnerability 7.0 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +26 more +28 more Windows Mark of the Web Security Feature Bypass Vulnerability 6.5 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +27 more +29 more Scripting Engine Memory Corruption Vulnerability 7.5 High
- android kernel, debian linux +1 more net: fix __dst_negative_advice() race 7.8 High
- apache ofbiz Apache OFBiz: Path traversal leading to RCE 9.8 Critical
- microsoft windows, windows 10, windows 7 +12 more +14 more A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to... 8.8 High
- vmware esxi, cloud foundation +1 more VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient... 6.8 Medium
- acronis cyber infrastructure, cyber infrastructure (aci) +1 more Remote command execution due to use of default passwords. The following products are affected:... 9.8 Critical
- servicenow now platform, servicenow, servicenow utah, vancouver, and washington dc now platform +2 more Incomplete Input Validation in GlideExpression Script 9.2 Critical
- servicenow now platform, servicenow, servicenow utah, vancouver, and washington dc now platform +2 more Jelly Template Injection Vulnerability in ServiceNow UI Macros 9.3 Critical
- twilio authy, authy 2-factor authentication, authy authenticator +2 more In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an... 5.3 Medium
- microsoft internet explorer, ie +1 more Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers... 8.8 High
- adobe commerce, commerce and magento open source, commerce webhooks +1 more +3 more XXE can expose crypt key and other secrets granting full admin access 9.8 Critical
- solarwinds serv-u SolarWinds Serv-U L Directory Transversal Vulnerability 8.6 High
- vmware vcenter server, cloud foundation +1 more The vCenter Server contains an information disclosure vulnerability due to improper permission of... 6.5 Medium
- geoserver, geotools +1 more Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +29 more +31 more Windows MSHTML Platform Spoofing Vulnerability 7.5 High
- microsoft windows, windows 11 version 21h2, windows 11 version 22h2 +8 more +10 more Windows Hyper-V Elevation of Privilege Vulnerability 7.8 High
- rejetto http file server Rejetto HTTP File Server 2.3m Unauthenticated RCE 9.8 Critical
- cisco nx-os software, nx-os +1 more Cisco NX-OS Software CLI Command Injection Vulnerability 6.0 Medium
- linux kernel, canonical ubuntu linux, linux +3 more +5 more Moderate: kernel-rt security and bug fix update 5.3 Medium
- geosolutions-it jai-ext Improper Control of Generation of Code in jai-ext 10.0 Critical
- roundcube webmail, debian linux, fedoraproject fedora +2 more An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS... 6.1 Medium
- android pixel, google android +1 more there is a possible way to bypass due to a logic error in the code. This could lead to local... 7.8 High
- progress telerik report server, telerik report server 2024 +1 more Registration Authentication Bypass Vulnerability 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +26 more +28 more Windows Error Reporting Service Elevation of Privilege Vulnerability 7.8 High
- php, fedoraproject fedora +1 more Argument Injection in PHP-CGI 9.8 Critical
- Show olderLoading…