Known exploited vulnerabilities
Under attack, per CISA.
- ivanti epmm, endpoint manager mobile (epmm) and mobileiron core, endpoint manager mobile +2 more An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users... 10.0 Critical
- citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 more Denial of Service 8.2 High
- citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 more [PROBLEMTYPE] in [COMPONENT] in [VENDOR] [PRODUCT] [VERSION] on [PLATFORMS] allows [ATTACKER] to ... 5.5 Medium
- google chrome, couchbase server, fedoraproject fedora +1 more +3 more Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote... 8.8 High
- laravel, laravel framework +1 more Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior 8.1 High
- ivanti connect secure, policy secure, connect secure and policy secure +2 more +4 more A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and... 9.1 Critical
- ivanti ics, policy secure, connect secure and policy secure +2 more +4 more An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti... 8.2 High
- microsoft sharepoint server, sharepoint server 2019 +1 more Microsoft SharePoint Server Elevation of Privilege Vulnerability 9.8 Critical
- apple ipados, macos, tvos +4 more +6 more The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13... 7.8 High
- adobe coldfusion Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE 9.8 Critical
- adobe coldfusion Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution 9.8 Critical
- apache superset Apache Superset: Session validation vulnerability when using provided default SECRET_KEY 8.9 High
- joomla!, joomla joomla\!, joomla! project cms +2 more [20230201] - Core - Improper access check in webservice endpoints 5.3 Medium
- d-link dsl-2750b devices, dlink dsl-2750b firmware +1 more D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login... 9.8 Critical
- douglas wilson spreadsheet::parseexcel, debian linux, fedoraproject fedora +1 more +3 more Arbitrary Code Execution (ACE) Vulnerability 7.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker... 8.8 High
- qnap qvr firmware, viostor nvr +1 more Legacy VioStor NVR 8.0 High
- fxc ae1021 firmware, ae1021pe firmware, fxc inc. ae1021 +2 more +4 more An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and... 8.8 High
- unitronics visilogic, samba 3.5 firmware, samba 4.3 firmware +15 more +17 more Unitronics VisiLogic uses a default administrative password 9.8 Critical
- qlik sense A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023... 8.2 High
- qlik sense An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions... 9.6 Critical
- qualcomm 315 5g iot modem firmware, apq8017 firmware, apq8064au firmware +241 more +243 more Integer Overflow or Wraparound in Graphics Linux 8.4 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +152 more +154 more Use of Out-of-range Pointer Offset in Graphics 8.4 High
- qualcomm 315 5g iot modem firmware, 8098 firmware, 8953pro firmware +313 more +315 more Use After Free in DSP Services 7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, ar8031 firmware +89 more +91 more Possible use after free when process shell memory is freed using IOCTL munmap call and process... 8.4 High
- apple ipados, macos, safari +6 more +8 more A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS... 8.8 High
- apple ipados, macos, safari +6 more +8 more An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17... 6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 more Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who... 9.6 Critical
- owncloud graphapi, graph api +1 more An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1.... 10.0 Critical
- gnu glibc, c library, canonical ubuntu linux +48 more +50 more Glibc: buffer overflow in ld.so leading to privilege escalation 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +26 more +28 more Windows Mark of the Web Security Feature Bypass Vulnerability 5.4 Medium
- sophos web appliance A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance... 9.8 Critical
- oracle fusion middleware, weblogic server +1 more Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +31 more +33 more Windows SmartScreen Security Feature Bypass Vulnerability 8.8 High
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +16 more +18 more Windows DWM Core Library Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +31 more +33 more Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 7.8 High
- sysaid, sysaid server, on-premises +2 more In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after... 9.8 Critical
- juniper junos, junos os +1 more Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files 5.3 Medium
- juniper junos, junos os +1 more Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files 5.3 Medium
- juniper junos, junos os +1 more Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable 9.8 Critical
- juniper junos, junos os +1 more Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables 5.3 Medium
- juniper junos, junos os +1 more Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files 5.3 Medium
- service location protocol project location protocol, ietf service location protocol (slp), netapp smi-s provider +3 more +5 more The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to... 7.5 High
- atlassian confluence data center, confluence data center and server, confluence server +2 more All versions of Confluence Data Center and Server are affected by this unexploited vulnerability.... 10.0 Critical
- apache activemq, activemq legacy openwire module, debian linux +3 more +5 more Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack 10.0 Critical
- f5 big-ip, big-ip configuration utility, big-ip access policy manager +19 more +21 more BIG-IP Configuration utility authenticated SQL injection vulnerability 8.8 High
- f5 big-ip, big-ip configuration utility, big-ip access policy manager +19 more +21 more BIG-IP Configuration utility unauthenticated remote code execution vulnerability 9.8 Critical
- debian linux, fedoraproject fedora, roundcube roundcubemail +1 more +3 more Stored XSS vulnerability in Roundcube 6.1 Medium
- cisco ios xe software, ios xe, ios xe web ui +2 more A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated,... 7.2 High
- citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 more Unauthenticated sensitive information disclosure 9.4 Critical
- Show olderLoading…