Known exploited vulnerabilities
Under attack, per CISA.
- checkbox survey Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an... 9.8 Critical
- qnap qts, quts hero, network-attached storage (nas) +2 more Command Injection Vulnerability in QTS and QuTS hero 9.8 Critical
- telerik ui for asp.net ajax, user interface (ui) for asp.net ajax +1 more Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2... 9.8 Critical
- microsoft http protocol stack, windows 10 version 2004, windows 10 version 20h2 +6 more +8 more HTTP Protocol Stack Remote Code Execution Vulnerability 9.8 Critical
- sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 more Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ... 7.8 High
- microsoft smbv1 server, microsoft corporation windows smb, microsoft server message block +8 more +10 more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7... 8.1 High
- apple ipados, macos, tvos +3 more +5 more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in... 7.8 High
- apple macos, mac os x +1 more An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was... 5.5 Medium
- vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 more Remote Code Execution in Spring Framework 9.8 Critical
- d-link multiple routers, dlink dir-810l firmware, dir-820l firmware +4 more +6 more A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L... 9.8 Critical
- trend micro apex central, trend micro, inc. micro apex central, trendmicro apex one +2 more An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated... 9.8 Critical
- sophos firewall, sfos +1 more An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Windows User Profile Service Elevation of Privilege Vulnerability 7.8 High
- qnap hybrid backup sync, qnap systems inc. hbs 1.3, hbs 2 +2 more +4 more Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync) 10.0 Critical
- dell dbutil, dbutil driver +1 more Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead... 8.8 High
- dasan gigabit passive optical network (gpon) routers, dasannetworks gpon router firmware +1 more An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host... 9.8 Critical
- dasan gigabit passive optical network (gpon) routers, dasannetworks gpon router firmware +1 more An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication... 9.8 Critical
- google chrome, chromium v8 +1 more chromium - security update 8.8 High
- debian redis, redis debian-specific redis servers +1 more It was discovered, that redis, a persistent key-value database, due to a packaging issue, is... 10.0 Critical
- microsoft office, 365 apps, 365 apps for enterprise +3 more +5 more Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability 7.8 High
- microsoft windows, windows 10 version 1809, windows 10 version 1909 +14 more +16 more Windows Event Tracing Elevation of Privilege Vulnerability 7.8 High
- sonicwall secure remote access (sra), sma 210 firmware, sma 410 firmware +5 more +7 more ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of a SQL Command leading to SQL Injection... 9.8 Critical
- atlassian confluence server, confluence data center +1 more Affected versions of Atlassian Confluence Server allow remote attackers to view restricted... 5.3 Medium
- sonicwall sma100, sma 100 firmware +1 more In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the... 7.5 High
- microsoft windows, windows 10, windows 10 servers +12 more +14 more An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced... 7.8 High
- microsoft directx graphics kernel (dxgkrnl), windows 10, windows 10 servers +8 more +10 more An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver... 7.8 High
- microsoft directx graphics kernel (dxgkrnl), windows 10, windows 10 servers +12 more +14 more An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver... 7.8 High
- microsoft windows, windows 7, windows 8.1 +9 more +11 more Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,... 7.3 High
- microsoft internet explorer Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information... 4.3 Medium
- microsoft edge, internet explorer, edge and internet explorer +1 more +3 more Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the... 8.1 High
- microsoft edge ChakraCore RCE Vulnerability 8.8 High
- microsoft edge ChakraCore RCE Vulnerability 8.8 High
- microsoft internet explorer, jscript, vbscript +2 more The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer... 7.5 High
- microsoft client-server run-time subsystem (csrss), windows 8.1, windows rt 8.1 +3 more +5 more The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold... 7.8 High
- microsoft windows, windows 7, windows server 2008 +1 more +3 more The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1... 7.8 High
- microsoft windows, windows 7, windows 8 +7 more +9 more Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows... 9.3 High
- microsoft internet explorer JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary... 8.8 High
- microsoft office Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a... 8.8 High
- mozilla firefox, thunderbird, thunderbird esr +13 more +15 more Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and... 8.8 High
- oracle java se, jre, suse linux enterprise desktop +3 more +5 more Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7... 10.0 High
- microsoft win32k, windows 7, windows 8 +6 more +8 more The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft... 7.8 High
- adobe acrobat, reader and acrobat, acrobat reader +6 more +8 more Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x... 9.8 Critical
- microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers... 8.8 High
- microsoft office compatibility pack, office web apps, word +2 more +4 more Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack... 9.3 High
- oracle fusion middleware Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle... 4.7 Medium
- oracle java se, jre, suse linux enterprise desktop +2 more Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7... 10.0 High
- adobe air, flash player, opensuse +6 more +8 more Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X;... 7.5 High
- microsoft windows xp, ancillary function driver (afd.sys), windows server 2003 +2 more afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2... 7.8 High
- microsoft windows, windows 7, windows server 2003 +3 more +5 more Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft... 7.8 High
- mitel micollab, mivoice business express, micollab, mivoice business express +2 more The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business... 9.8 Critical
- Show olderLoading…