Known exploited vulnerabilities
Under attack, per CISA.
- arm bifrost gpu kernel driver, mali gpu kernel driver, valhall gpu kernel driver +2 more Mali GPU Kernel Driver allows improper GPU memory processing operations 7.8 High
- oracle weblogic server Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:... 7.4 High
- check point quantum security gateways, checkpoint check point quantum gateway, spark gateway and cloudguard network, cloudguard network +4 more +6 more Information disclosure 8.6 High
- debian linux, linux kernel, fedoraproject fedora +15 more +17 more Use-after-free in Linux kernel's netfilter: nf_tables component 7.8 High
- javs viewer Malicious Code in Justice AV Solutions (JAVS) Viewer 8.7 High
- google chrome, fedoraproject fedora, google chromium v8 +2 more chromium - security update 9.6 Critical
- apache flink Apache Flink directory traversal attack: reading remote files through the REST API 7.5 High
- google chrome, fedoraproject fedora, google chromium v8 +2 more Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute... 9.6 Critical
- nextgen mirth connect NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote... 9.8 Critical
- google chrome, fedoraproject fedora, google chromium v8 +2 more Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to... 8.8 High
- d-link dir-605 router, dlink dir-605l, dir-605l firmware +2 more An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker... 7.5 High
- d-link dir-600 router, dlink dir-600, dir-600 firmware +2 more Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx)... 8.0 High
- microsoft dwm core library, windows 10 version 1507, windows 10 version 1607 +20 more +22 more Windows DWM Core Library Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +22 more +24 more Windows MSHTML Platform Security Feature Bypass Vulnerability 8.8 High
- google chrome, chromium, fedoraproject fedora +2 more Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who... 9.6 Critical
- gitlab, gitlab ce/ee +1 more Weak Password Recovery Mechanism for Forgotten Password in GitLab 10.0 Critical
- microsoft smartscreen prompt, windows 10 version 1809, windows 10 version 21h2 +16 more +18 more SmartScreen Prompt Security Feature Bypass Vulnerability 8.8 High
- cisco asa, adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd) +3 more +5 more A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug... 6.0 Medium
- cisco asa, adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd) +3 more +5 more A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA)... 8.6 High
- crushftp Unauthenticated arbitrary file read and remote code execution in CrushFTP 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +24 more +26 more Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect 10.0 Critical
- d-link dns-320l, dns-325, dns-327l +22 more +24 more D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection 7.3 High
- d-link dns-320l, dns-325, dns-327l +22 more +24 more D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials 9.8 Critical
- android pixel, google android +1 more there is a possible way to bypass due to a logic error in the code. This could lead to local... 7.8 High
- android pixel, google android +1 more there is a possible Information Disclosure due to uninitialized data. This could lead to local... 5.5 Medium
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +2 more +4 more Microsoft SharePoint Server Remote Code Execution Vulnerability 7.2 High
- fortinet forticlientems, forticlient ems, forticlient enterprise management server +2 more A improper neutralization of special elements used in an sql command ('sql injection') in... 9.3 Critical
- ivanti endpoint manager cloud service appliance (epm csa), endpoint manager cloud services appliance +1 more A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an... 9.8 Critical
- nice linear emerge e3-series, nortekcontrol linear emerge elite firmware, linear emerge essential firmware +2 more Linear eMerge E3-Series devices allow Command Injections. 9.8 Critical
- jetbrains teamcity In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions... 9.8 Critical
- apple ipados, macos, tvos +6 more +8 more A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 17.4... 7.8 High
- apple ipados, macos, tvos +6 more +8 more A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7... 7.8 High
- google android, android pixel +1 more In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide... 5.5 Medium
- sunhillo sureline Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell... 9.8 Critical
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +16 more +18 more Windows Kernel Elevation of Privilege Vulnerability 7.8 High
- microsoft streaming service, windows 10 version 1607, windows 10 version 1809 +15 more +17 more Microsoft Streaming Service Elevation of Privilege Vulnerability 8.4 High
- connectwise screenconnect Authentication bypass using an alternate path or channel 10.0 Critical
- microsoft exchange server, exchange server 2016 cumulative update 23, exchange server 2019 cumulative update 13 +1 more +3 more Microsoft Exchange Server Elevation of Privilege Vulnerability 9.8 Critical
- cisco adaptive security appliance software, adaptive security appliance (asa) software, firepower threat defense +2 more +4 more Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability 7.5 High
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +16 more +18 more Internet Shortcut Files Security Feature Bypass Vulnerability 8.1 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +19 more +21 more Windows SmartScreen Security Feature Bypass Vulnerability 7.6 High
- debian linux, roundcube webmail +1 more Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e... 6.1 Medium
- fortinet fortios, fortiproxy +1 more A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0... 9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 more Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to... 8.8 High
- ivanti connect secure, policy secure, connect secure, policy secure, and neurons +3 more +5 more A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x,... 8.2 High
- apple ipados, macos, tvos +4 more +6 more The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS... 7.0 High
- atlassian confluence data center, confluence data center and server, confluence server +2 more Summary of Vulnerability A template injection vulnerability on older versions of Confluence Data... 10.0 Critical
- apple ipados, macos, safari +5 more +7 more A type confusion issue was addressed with improved checks. This issue is fixed in tvOS 17.3, iOS... 8.8 High
- vmware vcenter server, cloud foundation, cloud foundation (vmware vcenter server) +2 more VMware vCenter Server Out-of-Bounds Write Vulnerability 9.8 Critical
- Show olderLoading…