Known exploited vulnerabilities
Under attack, per CISA.
- microsoft outlook, 365 apps, 365 apps for enterprise +6 more +8 more Microsoft Outlook Security Feature Bypass Vulnerability 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +27 more +29 more Windows Error Reporting Service Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +15 more +17 more Windows SmartScreen Security Feature Bypass Vulnerability 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +27 more +29 more Windows MSHTML Platform Elevation of Privilege Vulnerability 7.8 High
- netwrix auditor Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording... 9.8 Critical
- arm bifrost gpu kernel driver, mali graphics processing unit (gpu), midgard gpu kernel driver +1 more +3 more . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory,... 8.8 High
- samsung android, mobile devices, samsung mobile devices +2 more Assuming radio permission is gained, missing input validation in modem interface driver prior to... 3.3 Low
- samsung android, mobile devices, samsung mobile devices +2 more Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR... 7.3 High
- samsung android, mobile devices, samsung mobile devices +2 more A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to... 6.4 Medium
- samsung android, mobile devices, samsung mobile devices +2 more A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021... 6.4 Medium
- samsung android, mobile devices, samsung mobile devices +2 more An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds... 6.1 Medium
- samsung android, mobile devices, samsung mobile devices +2 more A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF... 6.1 Medium
- d-link dwl-2600ap access point, dlink dwl-2600ap firmware +1 more D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability... 7.8 High
- d-link dir-859 router, dlink dir-818lx firmware, dir-822 firmware +12 more +14 more The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows... 9.8 Critical
- apple ipados, macos, safari +4 more +6 more A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and... 8.8 High
- apple ipados, macos, watchos +3 more +5 more An integer overflow was addressed with improved input validation. This issue is fixed in watchOS... 7.8 High
- zyxel nas326 firmware, nas540 firmware, multiple network-attached storage (nas) devices +1 more +3 more The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions... 9.8 Critical
- vmware tools, debian linux, fedoraproject fedora +2 more VMware Tools Authentication Bypass Vulnerability 3.9 Low
- apple ipados, macos, safari +3 more +5 more A memory corruption issue was addressed with improved state management. This issue is fixed in... 8.8 High
- vmware aria operations for networks Aria Operations for Networks contains a command injection vulnerability. A malicious actor with... 9.8 Critical
- debian linux, fedoraproject fedora, roundcube webmail +2 more Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search... 9.8 Critical
- roundcube webmail, debian linux, fedoraproject fedora +2 more linkref_addindex in rcube_string_replacer.php in Roundcube Webmail before 1.4.10 allows XSS via a... 6.1 Medium
- roundcube webmail, opensuse backports sle, leap +2 more rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via... 9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 more A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this... 7.5 High
- microsoft win32k, windows 7, windows 8.1 +6 more +8 more The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,... 7.8 High
- fortinet fortios, fortiproxy, fortios and fortiproxy ssl-vpn +1 more +3 more A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version... 9.2 Critical
- google chrome, couchbase server, debian linux +2 more +4 more Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to... 8.8 High
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +27 more +29 more A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware... 9.8 Critical
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +27 more +29 more A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware... 9.8 Critical
- progress moveit transfer, moveit cloud +1 more In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022... 9.8 Critical
- zyxel atp series firmware, usg flex series firmware, vpn series firmware +21 more +23 more Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73,... 9.8 Critical
- barracuda email security gateway, email security gateway 300 firmware, email security gateway 400 firmware +4 more +6 more Remote Code injection in Barracuda Email Security Gateway 9.4 Critical
- apple ipados, macos, safari +5 more +7 more The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, macOS... 8.6 High
- apple ipados, macos, safari +7 more +9 more A use-after-free issue was addressed with improved memory management. This issue is fixed in... 8.8 High
- apple ipados, macos, safari +6 more +8 more An out-of-bounds read was addressed with improved input validation. This issue is fixed in... 6.5 Medium
- samsung android, mobile devices, samsung mobile devices +2 more Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged... 4.4 Medium
- cisco ios, ios xe, ios xr +1 more +3 more The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE... 7.5 High
- cisco ios Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY ... 5.9 Medium
- ruckuswireless ruckus wireless admin, commscope ruckus smartzone firmware, ruckus wireless multiple products +1 more +3 more Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET... 9.8 Critical
- polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 more It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests... 7.8 High
- apache tomcat, canonical ubuntu linux, debian linux +16 more +18 more Apache Tomcat Improper Access Control vulnerability 9.8 Critical
- oracle jrockit, apache cassandra, canonical ubuntu linux +35 more +37 more Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and... 9.8 Critical
- jenkins, jenkins user interface (ui), redhat openshift +2 more Jenkins discloses project names via fingerprints 5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +26 more +28 more The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not... 6.9 Medium
- linux kernel, canonical ubuntu linux, opensuse +5 more +7 more The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol... 7.8 High
- microsoft win32k, windows 10 version 1507, windows 10 version 1607 +14 more +16 more Win32k Elevation of Privilege Vulnerability 7.8 High
- tp-link archer ax21, archer ax21 firmware +1 more TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command... 8.8 High
- oracle weblogic server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)... 7.5 High
- apache log4j, log4j2, cvat computer vision annotation tool +53 more +55 more Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack 9.0 Critical
- papercut ng, mf/ng, mf +2 more This vulnerability allows remote attackers to bypass authentication on affected installations of... 9.8 Critical
- Show olderLoading…