Known exploited vulnerabilities
Under attack, per CISA.
- watchguard firebox and xtm appliances, fireware +1 more On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 more Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High
- sitecore xp, experience platform +1 more Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure... 9.8 Critical
- citrix sharefile storage zones controller, sharefile, sharefile storagezones controller +2 more Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an... 9.8 Critical
- gfi software helpdesk improper access control vulnerability in Helpdesk 7.3 High
- sophos sg utm, unified threat management +1 more A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5,... 9.8 Critical
- d-link dir-610 devices, dlink dir-610 firmware +1 more ** UNSUPPORTED WHEN ASSIGNED ** D-Link DIR-610 devices allow Remote Command Execution via the cmd... 8.8 High
- palo alto networks pan-os PAN-OS: Authentication Bypass in SAML Authentication 10.0 Critical
- spring cloud config, vmware spring cloud config, vmware tanzu spring cloud configuration (config) server +2 more Directory Traversal with spring-cloud-config-server 7.5 High
- apache kylin Command Injection in Kylin 8.8 High
- juniper junos, junos os +1 more Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services 8.8 High
- d-link dcs-930l devices, dlink dcs-930l firmware +1 more setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code... 7.2 High
- zyxel nas326, nas520, nas540 +38 more +40 more ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi 9.8 Critical
- openbsd opensmtpd, canonical ubuntu linux, debian linux +1 more +3 more smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products,... 9.8 Critical
- php, canonical ubuntu linux, debian linux +21 more +23 more Underflow in PHP-FPM can lead to RCE 8.7 High
- d-link multiple routers, dlink dap-1533 firmware, dhp-1565 firmware +8 more +10 more Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR... 9.8 Critical
- webmin An issue was discovered in Webmin through 1.920. The parameter old in password_change.cgi... 9.8 Critical
- citrix netscaler sd-wan, sd-wan, sd-wan and netscaler +2 more Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection. 9.8 Critical
- citrix netscaler sd-wan, sd-wan, sd-wan and netscaler +2 more Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input... 8.8 High
- microsoft graphics device interface (gdi), windows, windows 10 version 1903 for 32-bit systems +20 more +22 more A remote code execution vulnerability exists in the way that the Windows Graphics Device... 8.8 High
- lg n1a1 nas, n1a1 firmware +1 more LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary... 9.8 Critical
- oracle bi publisher (formerly xml publisher), business intelligence publisher +1 more Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware ... 7.2 High
- kentico xperience An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10... 9.8 Critical
- jenkins project pipeline: groovy plugin, jenkins matrix project plugin, pipeline\ +1 more +3 more Sandbox bypass in Jenkins Pipeline: Groovy Plugin 9.9 Critical
- drupal core, drupal +1 more Drupal core - Highly critical - Remote Code Execution 8.1 High
- microsoft windows, windows 10, windows 10 servers +5 more +7 more A remote code execution vulnerability exists when the Windows Shell does not properly validate... 8.8 High
- microsoft internet explorer 10, internet explorer 11, internet explorer 9 +2 more +4 more A remote code execution vulnerability exists in the way that the scripting engine handles objects... 7.5 High
- vmware sd-wan edge, nsx sd-wan by velocloud +1 more VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection... 8.1 High
- quest kace system management appliance The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8... 9.8 Critical
- broadcom spring data commons, pivotal software spring data rest, apache ignite +3 more +5 more Spring Data Commons remote code injection vulnerability 9.8 Critical
- cisco secure access control system (acs), secure access control system +1 more A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to... 9.8 Critical
- cisco vpn routers, rv132w firmware, rv134w firmware +2 more A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2... 9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +55 more +57 more Unrestricted Upload of File with Dangerous Type Apache Tomcat 8.1 High
- d-link and trendnet multiple devices, dlink dir-626l firmware, dir-636l firmware +13 more +15 more The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary... 9.8 Critical
- apache tomcat, netapp 7-mode transition tool, oncommand balance +19 more +21 more When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server 8.1 High
- citrix netscaler sd-wan, netscaler sd-wan enterprise, cloudbridge virtual wan, and xenmobile server +1 more Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute... 9.8 Critical
- netgear wireless access point (wap) devices, wn604 firmware, wn802tv2 firmware +5 more +7 more (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5)... 9.8 Critical
- cisco ios, ios xe, ios and ios xe +2 more A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and... 9.8 Critical
- microsoft windows, microsoft corporation windows smb, microsoft server message block +8 more +10 more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7... 8.8 High
- netgear dgn2200 devices, dgn2200 series firmware +1 more dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote... 8.8 High
- netgear wnr2000v5 router, d6100 firmware, d7000 firmware +26 more +28 more The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when... 9.8 Critical
- adobe flash player, flash player desktop runtime +1 more Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable... 8.8 High
- adobe flash player, opensuse, redhat enterprise linux desktop +4 more +6 more Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to... 9.8 Critical
- rails ruby on rails, rubyonrails rails, debian linux +4 more +6 more Directory traversal vulnerability in Action View in Ruby on Rails 7.5 High
- arcserve udp, unified data protection (udp) +1 more Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to... 9.1 Critical
- tp-link archer c5 firmware, archer c7 firmware, archer c8 firmware +9 more +11 more Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0... 7.5 High
- cisco prime data center network manager (dcnm), prime data center network manager +1 more Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network... 7.8 High
- elastic elasticsearch, redhat fuse +1 more Improper Access Control in Elasticsearch 9.8 Critical
- microsoft kerberos key distribution center (kdc), windows 7, windows 8 +4 more +6 more The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista... 9.0 High
- microsoft windows, windows 7, windows 8 +7 more +9 more OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008... 9.3 High
- Show olderLoading…