Known exploited vulnerabilities
Under attack, per CISA.
- cwp control web panel, control-webpanel webpanel +1 more RESERVED An issue in the /login/index.php component of Centos Web Panel 7 before v0.9.8.1147... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +24 more +26 more Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability 8.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 22 +3 more +5 more Microsoft Exchange Server Elevation of Privilege Vulnerability 8.8 High
- tibco jasperreports, jasperreports library, jasperreports server +8 more +10 more TIBCO JasperReports Library Directory Traversal Vulnerability 9.9 Critical
- tibco jasperreports, jasperreports server, jaspersoft +5 more +7 more TIBCO JasperReports Server Information Disclosure Vulnerability 7.7 High
- apple ios, ipados, macos +3 more +5 more A type confusion issue was addressed with improved state handling. This issue is fixed in Safari... 8.8 High
- fortinet fortios, fortiproxy +1 more A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0... 9.3 Critical
- microsoft defender, windows 10 version 1607, windows 10 version 1809 +15 more +17 more Windows SmartScreen Security Feature Bypass Vulnerability 5.4 Medium
- citrix application delivery controller (adc) and gateway, application delivery controller firmware, gateway, citrix adc +1 more +3 more Unauthenticated remote arbitrary code execution 9.8 Critical
- veeam backup & replication, backup \& replication +1 more Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x... 8.8 High
- veeam backup & replication, backup \& replication +1 more Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2). 9.8 Critical
- google chrome, chromium v8 +1 more Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to... 8.8 High
- google chrome, chromium gpu, microsoft edge +1 more +3 more Heap buffer overflow in GPU 9.6 Critical
- oracle access manager, fusion middleware +1 more Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component:... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +21 more +23 more Windows Mark of the Web Security Feature Bypass Vulnerability 5.4 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +26 more +28 more Windows Scripting Languages Remote Code Execution Vulnerability 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +26 more +28 more Windows CNG Key Isolation Service Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +21 more +23 more Windows Mark of the Web Security Feature Bypass Vulnerability 5.4 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High
- samsung android, mobile devices, samsung mobile devices +2 more An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release... 6.1 Medium
- samsung android, mobile devices, samsung mobile devices +2 more An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes... 6.2 Medium
- samsung mobile devices, samsung mobile devices, samsung android +2 more Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021... 4.4 Medium
- google chrome, chromium v8 +1 more Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to... 8.8 High
- apple ipados, ios and ipados, iphone os +2 more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in... 7.8 High
- cisco anyconnect secure, anyconnect secure mobility client +1 more Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability 7.8 High
- cisco anyconnect secure, anyconnect secure mobility client +1 more Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability 6.5 Medium
- gigabyte aorus graphics engine, app center, oc guru ii +2 more +4 more The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE... 9.8 Critical
- gigabyte aorus graphics engine, app center, oc guru ii +2 more +4 more The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS... 7.8 High
- gigabyte aorus graphics engine, app center, oc guru ii +2 more +4 more The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS... 7.8 High
- gigabyte aorus graphics engine, app center, oc guru ii +2 more +4 more The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE... 7.8 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload... 9.8 Critical
- linux kernel, ubuntu linux kernel, canonical ubuntu linux +2 more The overlayfs implementation in the linux kernel did not properly validate with respect to user... 8.8 High
- fortinet fortios, fortiproxy, fortiswitchmanager +2 more +4 more An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version... 9.8 Critical
- microsoft windows com+ event system service, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Windows COM+ Event System Service Elevation of Privilege Vulnerability 7.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 22 +3 more +5 more Microsoft Exchange Server Remote Code Execution Vulnerability 8.0 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 22 +3 more +5 more Microsoft Exchange Server Elevation of Privilege Vulnerability 8.8 High
- atlassian bitbucket, bitbucket server, bitbucket server and data center +1 more +3 more Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17,... 8.8 High
- sophos firewall A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to... 9.8 Critical
- zoho manageengine, zohocorp manageengine access manager plus, manageengine password manager pro +1 more +3 more Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to... 9.8 Critical
- trend micro apex one, apex one and apex one as a service +1 more Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and... 7.2 High
- code aurora acdb audio driver, codeaurora android-msm +1 more Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver... 7.2 High
- linux kernel The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and... 8.8 High
- linux kernel The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an... 7.2 High
- linux kernel, motorola android +1 more Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8... 7.8 High
- microsoft windows, windows 7, windows xp +3 more +5 more Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2... 9.3 High
- apple ios, ipados, macos +2 more +4 more The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6,... 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +31 more +33 more Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High
- qnap photo station DeadBolt Ransomware 10.0 Critical
- google chrome, fedoraproject fedora, google chromium mojo +2 more Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote... 9.6 Critical
- d-link dir-820l, dlink dir-820l firmware +1 more D-Link DIR-820L 1.05B03 was discovered to contain a remote command execution (RCE) vulnerability... 9.8 Critical
- Show olderLoading…