Known exploited vulnerabilities
Under attack, per CISA.
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who... 9.6 Critical
- minio Minio Information Disclosure in Cluster Deployment 7.5 High
- cisco ios, ios xe software, ios and ios xe software +2 more +4 more The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0... 8.8 High
- google chrome, couchbase server, debian linux +2 more +4 more Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to... 8.8 High
- apple macos, mac os x +1 more A use after free issue was addressed with improved memory management. This issue is fixed in... 7.8 High
- 3rdmill novi survey, novi survey survey +1 more Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in... 9.8 Critical
- google android, android framework +1 more In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of... 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +29 more +31 more Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High
- apple ios, ipados, and macos, ipados, macos +2 more +4 more Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability 8.6 High
- apple ipados, macos, safari +3 more +5 more A use after free issue was addressed with improved memory management. This issue is fixed in iOS... 8.8 High
- arm bifrost gpu kernel driver, midgard gpu kernel driver, valhall gpu kernel driver +2 more +4 more Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions... 3.3 Low
- veritas backup exec, backup exec agent +1 more An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication... 8.2 High
- veritas backup exec, backup exec agent +1 more An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client... 8.8 High
- veritas backup exec, backup exec agent +1 more An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client... 8.1 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +17 more +19 more An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not... 7.8 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component... 6.1 Medium
- fortra cobalt strike Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing... 9.8 Critical
- debian linux, linux kernel +1 more Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel 7.9 High
- arm bifrost gpu kernel driver, mali graphics processing unit (gpu), midgard gpu kernel driver +1 more +3 more An Arm product family through 2022-08-12 mail GPU kernel driver allows non-privileged users to... 8.8 High
- fortra cobalt strike An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7... 6.1 Medium
- google chrome, fedoraproject fedora, google chromium network service +2 more Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote... 8.8 High
- arm bifrost gpu kernel driver, mali graphics processing unit (gpu), midgard gpu kernel driver +1 more +3 more An Arm product family through 2022-01-03 has an Exposed Dangerous Method or Function. 7.8 High
- apple ios, ipados, and macos, ipados, macos +2 more +4 more Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability 7.8 High
- samba, debian linux +1 more Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code... 9.8 Critical
- microsoft internet explorer Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or... 8.8 High
- adobe coldfusion Adobe ColdFusion Improper Access Control Arbitrary code execution 8.6 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +17 more +19 more Windows SmartScreen Security Feature Bypass Vulnerability 4.4 Medium
- microsoft outlook, 365 apps, 365 apps for enterprise +6 more +8 more Microsoft Outlook Elevation of Privilege Vulnerability 9.8 Critical
- fortinet fortios A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') ... 6.5 Medium
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to a Remote Command Execution attack 8.5 High
- plex media server Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated... 7.2 High
- glpi-project glpi Teclib GLPI Remote Code Execution Vulnerability 9.8 Critical
- apache spark Apache Spark shell command injection vulnerability via Spark UI 8.8 High
- zoho manageengine, zohocorp manageengine adselfservice plus +1 more Zoho ManageEngine ADSelfService Plus before 6122 allows an authenticated user to achieve remote... 6.8 Medium
- zk framework auuploader, zkoss zk framework +1 more ZK Framework vulnerable to malicious POST 7.5 High
- ibm aspera faspex IBM Aspera Faspex code execution 9.8 Critical
- mitel mivoice connect The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an... 6.8 Medium
- mitel mivoice connect A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0... 6.8 Medium
- cacti Unauthenticated Command Injection 9.8 Critical
- apple ipados, macos, safari +3 more +5 more A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura... 8.8 High
- microsoft windows, office for android, office for ios +32 more +34 more Windows Graphics Component Remote Code Execution Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +29 more +31 more Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High
- microsoft 365 apps, 365 apps for enterprise, office +2 more Microsoft Publisher Security Feature Bypass Vulnerability 7.3 High
- terra-master terramaster operating system, terramaster os +1 more TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative... 7.5 High
- fortra goanywhere mft, goanywhere managed file transfer +1 more Fortra GoAnywhere MFT License Response Servlet Command Injection 7.2 High
- intel ethernet diagnostics driver for windows, ethernet diagnostics driver iqvw32.sys, ethernet diagnostics driver iqvw64.sys +2 more (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics... 7.8 High
- sugarcrm, sugarcrm multiple products +1 more In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the... 8.8 High
- oracle e-business suite, oracle corporation web applications desktop integrator +1 more Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business... 9.8 Critical
- progress telerik ui for asp.net ajax, telerik user interface (ui) for asp.net ajax +1 more Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to... 9.8 Critical
- zoho manageengine, zohocorp manageengine access manager plus, manageengine ad360 +20 more +22 more Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow... 9.8 Critical
- Show olderLoading…