Known exploited vulnerabilities
Under attack, per CISA.
- mozilla firefox, firefox esr, thunderbird +1 more +3 more Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and... 10.0 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 more A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in... 8.8 High
- microsoft windows, windows server, windows 10 1507 +14 more +16 more An information disclosure vulnerability exists in the way that the Windows SMB Server handles... 6.5 Medium
- google chrome, chrome blink +1 more Use-After-Free in puppeteer 6.5 Medium
- microsoft internet explorer, internet explorer 10, internet explorer 11 +2 more An information disclosure vulnerability exists when Internet Explorer improperly handles objects... 6.5 Medium
- microsoft win32k, windows 7, windows server 2008 +1 more +3 more An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k... 7.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 more Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow... 7.8 High
- zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +19 more +21 more A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware... 9.8 Critical
- vmware spring cloud gateway, oracle commerce guided search, communications cloud native core binding support function +7 more +9 more Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured 10.0 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 more On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x... 9.8 Critical
- apple ipados, macos, tvos +7 more +9 more A type confusion issue was addressed with improved state handling. This issue is fixed in macOS... 8.8 High
- apple icloud, icloud for windows, ios +10 more +12 more A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12... 8.8 High
- microsoft win32k, windows 7, windows 8 +7 more +9 more win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2,... 7.2 High
- openssl, broadcom symantec messaging gateway, canonical ubuntu linux +25 more +27 more The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle... 7.5 High
- microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to... 8.8 High
- wso2 api manager, enterprise integrator, identity server +6 more +8 more Certain WSO2 products allow unrestricted file upload with resultant remote code execution. This... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 more Windows User Profile Service Elevation of Privilege Vulnerability 7.0 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +26 more +28 more Important: kernel security, bug fix, and enhancement update 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 more Windows User Profile Service Elevation of Privilege Vulnerability 7.0 High
- microsoft win32k, windows 10 version 2004, windows 10 version 20h2 +11 more +13 more Win32k Elevation of Privilege Vulnerability 7.8 High
- microsoft win32k, windows 10 version 1809, windows 10 version 1909 +17 more +19 more Win32k Elevation of Privilege Vulnerability 7.8 High
- jenkins script security plugin, script security, redhat openshift container platform +2 more Sandbox bypass in Script Security Plugin 9.9 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 more Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High
- facebook whatsapp business for android, whatsapp business for ios, whatsapp for android +5 more +7 more A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via... 9.8 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in... 6.1 Medium
- google chrome, chromium v8 +1 more Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker... 8.8 High
- vmware identity manager, vrealize automation, workspace one access +3 more +5 more VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege... 7.8 High
- d-link dns-320 storage device, dlink dns-320 firmware +1 more The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command... 9.8 Critical
- ubiquiti airos On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show... 9.8 Critical
- schneider electric u.motion builder, u.motion builder software version 1.3.4 +1 more A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which... 9.8 Critical
- barco wepresent wipg-1000p firmware, crestron am-100 firmware, am-101 firmware +11 more +13 more The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG... 9.8 Critical
- trihedral vtscada, vtscada (formerly vts) +1 more The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows... 7.5 High
- indusoft web studio InduSoft Web Studio Path Traversal 7.5
- al-enterprise omnipcx enterprise communication server, alcatel omnipcx enterprise +1 more masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1... 9.8 Critical
- vmware identity manager, workspace one access and identity manager, workspace one access +3 more +5 more VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 more Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High
- kaseya virtual system/server administrator (vsa), virtual system administrator +1 more Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows... 9.8 Critical
- drupal core, drupal, debian linux +2 more Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004 9.8 Critical
- microsoft internet explorer Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or... 8.8 High
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 more Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation... 9.8 Critical
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 more Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)... 9.8 Critical
- adobe flash player, hp insight orchestration, system management homepage +12 more +14 more Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before... 9.8 Critical
- adobe flash player, microsoft edge, internet explorer +4 more +6 more Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before... 9.8 Critical
- adobe flash player, microsoft edge, internet explorer +2 more +4 more Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x... 9.8 Critical
- adobe flash player Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0... 10.0 High
- google android, pixel +1 more In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due... 7.8 High
- watchguard firebox and xtm, fireware +1 more WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to... 8.8 High
- linux kernel, debian linux, netapp 8300 firmware +8 more +10 more Double Free in net/packet/af_packet.c leading to priviledge escalation 6.6 Medium
- microsoft active directory, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +16 more +18 more Active Directory Domain Services Elevation of Privilege Vulnerability 7.5 High
- microsoft active directory, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +16 more +18 more Active Directory Domain Services Elevation of Privilege Vulnerability 7.5 High
- Show olderLoading…