Known exploited vulnerabilities
Under attack, per CISA.
- rejetto http file server, http file server (hfs) +1 more The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or... 9.8 Critical
- elastic elasticsearch Elasticsearch Improper Access Control vulnerability 8.1 High
- rails ruby on rails, rubyonrails rails, redhat enterprise linux server +1 more +3 more actionpack Path Traversal vulnerability 7.5 High
- d-link dsl-2760u, dlink dsl-2760u firmware +1 more Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow... 5.4 Medium
- hp application lifecycle management, procurve manager, hewlett packard (hp) procurve manager (pcm), pcm+, identity driven manager (idm), and application lifecycle management +2 more HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and... 9.8 Critical
- apache struts, archiva, fujitsu interstage business process manager analytics +1 more +3 more Code injection in Apache Struts 9.8 Critical
- php, apple mac os x, debian linux +14 more +16 more sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script ... 7.5 High
- exim, canonical ubuntu linux, debian linux +1 more +3 more Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim... 7.8 High
- exim, canonical ubuntu linux, debian linux +1 more +3 more Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows... 9.8 Critical
- cisco ios xr Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized... 7.5 High
- adobe coldfusion Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0... 9.8 Critical
- cisco ios xr Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session... 4.3 Medium
- phpmyadmin, debian linux +1 more Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x... 9.8 Critical
- adobe acrobat reader, reader and acrobat +1 more Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and... 8.8 High
- hewlett packard (hp) openview network node manager HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary... 9.8 Critical
- sonicwall sonicos, sonicosv +1 more A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service ... 9.8 Critical
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +18 more +20 more An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP)... 7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +9 more +11 more An elevation of privilege vulnerability exists when Windows improperly handles authentication... 7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +16 more +18 more An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly... 7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 more An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly... 7.8 High
- microsoft win32k, windows, windows server +2 more +4 more An elevation of privilege vulnerability exists in Windows when the Win32k component fails to... 7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 more An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC)... 7.8 High
- microsoft task scheduler, windows 10 version 1507, windows 10 version 1607 +24 more +26 more Task Scheduler Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1703 +22 more +24 more Windows Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows server, windows 10 1703 +5 more +7 more An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC)... 7.8 High
- microsoft windows, windows 7, windows 8.1 +13 more +15 more An elevation of privilege vulnerability exists when Windows improperly handles authentication... 7.8 High
- microsoft win32k, windows 7, windows server 2008 +1 more +3 more An elevation of privilege vulnerability exists in Windows when the Win32k component fails to... 7.0 High
- microsoft windows, windows 7, windows server 2008 +1 more +3 more The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server... 7.8 High
- microsoft windows, windows 7, windows 8.1 +7 more +9 more The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1;... 7.8 High
- microsoft win32k, windows 7, windows 8 +7 more +9 more The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,... 6.9 Medium
- mozilla firefox, firefox esr, firefox for android +4 more +6 more An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable... 9.6 Critical
- mozilla firefox, firefox esr, firefox for android +4 more +6 more Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We... 8.8 High
- vmware cloud foundation, vcenter server, vcenter server and cloud foundation +2 more The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to... 5.3 Medium
- ivanti connect secure, policy secure, pulsesecure pulse policy secure +2 more A code injection vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker to... 7.2 High
- atlassian jira server and data center, jira server +1 more There was a server-side template injection vulnerability in Jira Server and Data Center, in the... 9.8 Critical
- netgear dgn2200 firmware, wireless router dgn2200 +1 more ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated... 9.8 Critical
- netgear d6220 firmware, d6400 firmware, multiple routers +9 more +11 more NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900,... 8.8 High
- adobe coldfusion Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via... 7.5 High
- adobe coldfusion Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers... 7.5 High
- adobe coldfusion Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote... 9.8 Critical
- adobe blazeds, coldfusion, flex data services +2 more +4 more Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0,... 6.5 Medium
- cisco small business rv160, rv260, rv340, and rv345 series routers, small business rv series router firmware, rv340 firmware +3 more +5 more Cisco Small Business RV Series Routers Vulnerabilities 10.0 Critical
- cisco small business rv160, rv260, rv340, and rv345 series routers, small business rv series router firmware, rv160 firmware +8 more +10 more Cisco Small Business RV Series Routers Vulnerabilities 10.0 Critical
- cisco small business rv160, rv260, rv340, and rv345 series routers, small business rv series router firmware, rv340 firmware +3 more +5 more Cisco Small Business RV Series Routers Vulnerabilities 10.0 Critical
- cisco small business rv160, rv260, rv340, and rv345 series routers, small business rv series router firmware, rv160 firmware +8 more +10 more Cisco Small Business RV Series Routers Vulnerabilities 10.0 Critical
- cisco small business rv160, rv260, rv340, and rv345 series routers, small business rv series router firmware, rv340 firmware +3 more +5 more Cisco Small Business RV Series Routers Vulnerabilities 10.0 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +36 more +38 more Windows Installer Elevation of Privilege Vulnerability 5.5 Medium
- treck tcp/ip stack ipv6, dell wyse 5030 firmware, wyse 5050 all-in-one firmware +2 more +4 more The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. 5.4 Medium
- apache tomcat, geode, blackberry good control +18 more +20 more Improper Privilege Management in Tomcat 9.8 Critical
- exim, canonical ubuntu linux, debian linux +2 more +4 more Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019... 9.8 Critical
- Show olderLoading…