Known exploited vulnerabilities
Under attack, per CISA.
- cisco ios xe software, ios xe, ios xe web ui +2 more +4 more Cisco is aware of active exploitation of a previously unknown vulnerability in the web UI feature... 10.0 Critical
- microsoft wordpad, windows 10 version 1507, windows 10 version 1607 +27 more +29 more Microsoft WordPad Information Disclosure Vulnerability 6.5 Medium
- microsoft skype for business, skype for business server 2015 cu13, skype for business server 2019 cu7 +1 more +3 more Skype for Business Elevation of Privilege Vulnerability 5.3 Medium
- cisco ios xe software, ios, ios xe +1 more +3 more A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS... 6.6 Medium
- eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High
- adobe acrobat, acrobat reader, acrobat reader dc +2 more +4 more Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability 7.8 High
- apple ipados, ios and ipados, iphone os +2 more The issue was addressed with improved checks. This issue is fixed in iOS 17.0.3 and iPadOS 17.0.3... 7.8 High
- atlassian confluence data center, confluence data center and server, confluence server +2 more Atlassian has been made aware of an issue reported by a handful of customers where external... 10.0 Critical
- progress ws ftp server WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability 10.0 Critical
- jetbrains teamcity In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server... 9.8 Critical
- microsoft windows cng key isolation service, windows 10 version 1507, windows 10 version 1607 +29 more +31 more Windows CNG Key Isolation Service Elevation of Privilege Vulnerability 7.0 High
- arm mali gpu kernel driver, 5th gen gpu architecture kernel driver, bifrost gpu kernel driver +3 more +5 more Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations 5.5 Medium
- google chrome, libvpx, apple ipados +9 more +11 more Electron affected by libvpx's heap buffer overflow in vp8 encoding 8.8 High
- [unknown] richfaces, red hat jboss richfaces framework, redhat enterprise linux +2 more Richfaces vulnerable to arbitrary code execution 9.8 Critical
- apple macos, ipad os, ipados +13 more +15 more The issue was addressed with improved checks. This issue is fixed in Safari 16.6.1, macOS Ventura... 8.8 High
- apple ipados, macos, ios and ipados +2 more +4 more The issue was addressed with improved checks. This issue is fixed in iOS 16.7 and iPadOS 16.7, OS... 7.8 High
- apple ipados, macos, ios and ipados +2 more +4 more A certificate validation issue was addressed. This issue is fixed in iOS 16.7 and iPadOS 16.7, OS... 5.5 Medium
- trend micro apex one, trend micro, inc. micro apex one, trendmicro worry-free business security +4 more +6 more A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem... 7.2 High
- minio MinIO is vulnerable to privilege escalation on Linux/MacOS 8.8 High
- google android, samsung mobile devices, samsung mobile devices +2 more An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022... 5.0 Medium
- facade ignition Unauthenticated remote code execution in Ignition 9.8 Critical
- zyxel emg2926 routers, emg2926 firmware +1 more A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware... 8.8 High
- realtek sdk, aterm w1200ex-ms firmware, w1200ex firmware +23 more +25 more The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a... 9.8 Critical
- adobe acrobat, acrobat reader, acrobat dc +2 more +4 more [Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild 7.8 High
- google chrome, libwebp, bandisoft honeyview +10 more +12 more Duplicate Advisory: Bundled libwebp in Pillow vulnerable 8.8 High
- cisco adaptive security appliance (asa) software, adaptive security appliance and firepower threat defense, adaptive security appliance software +2 more +4 more A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA)... 5.0 Medium
- android framework, google android +1 more In onCreate of WindowState.java, there is a possible way to launch a background activity due to a... 7.8 High
- microsoft word, 365 apps, 365 apps for enterprise +6 more +8 more Microsoft Word Information Disclosure Vulnerability 6.5 Medium
- microsoft streaming service proxy, windows 10 version 1809, windows 10 version 21h2 +11 more +13 more Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability 7.8 High
- apple ipados, macos, ios and ipados +2 more +4 more A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS... 7.8 High
- apple ipados, watchos, ios and ipados +2 more +4 more A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS... 7.8 High
- apache rocketmq Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function 9.8 Critical
- rarlab winrar RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to... 7.8 High
- ignite realtime openfire Openfire administration console authentication bypass 8.6 High
- ivanti mobileiron sentry, sentry +1 more A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and... 9.8 Critical
- veeam backup & replication, backup \& replication +1 more Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the... 7.5 High
- adobe coldfusion Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution 9.8 Critical
- citrix sharefile storage zones controller, content collaboration +1 more A vulnerability has been discovered in the customer-managed ShareFile storage zones controller... 9.8 Critical
- microsoft .net, fedoraproject fedora, microsoft .net 6.0 +8 more +10 more .NET and Visual Studio Denial of Service Vulnerability 7.5 High
- billion 5200w-t firmware, zyxel p660hn-t1a routers, p660hn-t1a v1 firmware +1 more +3 more The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by... 9.8 Critical
- ivanti epmm, endpoint manager mobile (epmm), endpoint manager mobile +2 more A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2... 7.2 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client. 6.1 Medium
- apple ipados, macos, tvos +4 more +6 more This issue was addressed with improved state management. This issue is fixed in iOS 16.6 and... 5.5 Medium
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more Ivanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core, through 11.10 allows remote... 10.0 Critical
- adobe coldfusion ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298 7.5 High
- adobe coldfusion Adobe ColdFusion Improper Access Control Security feature bypass 7.5 High
- citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 more Unauthenticated remote code execution 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +27 more +29 more Windows Search Remote Code Execution Vulnerability 7.5 High
- apple ipados, macos, safari +6 more +8 more The issue was addressed with improved checks. This issue is fixed in watchOS 9.6, iOS 16.6 and... 8.8 High
- solarview compact, contec sv-cpt-mc310 firmware +1 more SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via... 9.8 Critical
- Show olderLoading…