Known exploited vulnerabilities
Under attack, per CISA.
- microsoft excel, office, office 365 proplus +2 more A remote code execution vulnerability exists in Microsoft Excel software when the software fails... 8.8 High
- cisco small business rv320 and rv325 dual gigabit wan vpn routers, small business rv series router firmware, rv320 firmware +1 more +3 more Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability 7.2 High
- microsoft exchange server An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft... 7.4 High
- chakracore scripting engine, microsoft chakracore +1 more ChakraCore RCE Vulnerability 7.5 High
- cisco ios, ios software +1 more Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software... 5.9 Medium
- cisco ios, ios software +1 more Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software... 5.9 Medium
- cisco ios, ios xe, ios xr +1 more +3 more Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS... 8.0 High
- cisco ios, ios xe software, ios xe +2 more A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco... 8.6 High
- cisco ios, ios xe, ios and ios xe software +2 more A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores... 8.6 High
- cisco ios, ios xe, ios and ios xe software +2 more A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco... 8.6 High
- cisco ios, ios xe, ios xr +1 more +3 more Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of... 8.8 High
- cisco ios, ios software +1 more A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software... 6.3 Medium
- cisco ios, ios software and cisco ios xe software, ios xe +2 more A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in... 7.5 High
- cisco ios, ios software and cisco ios xe software, ios xe +2 more A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and... 8.6 High
- cisco ios, ios software and cisco ios xe software, ios xe +2 more A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software... 7.5 High
- cisco catalyst 4500 series switches and cisco catalyst 4500-x series switches, ios, ios xe +2 more A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco... 8.6 High
- cisco ios, ios software +1 more A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN)... 7.5 High
- cisco ios xe, ios and ios xe software +1 more A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE... 9.8 Critical
- cisco ios, ios xe software, ios xe +2 more A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network ... 5.9 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 more Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure,... 8.8 High
- microsoft office, office online server, office web apps server +5 more +7 more Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web... 7.8 High
- cisco ios, ios and ios xe software +1 more The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a... 9.8 Critical
- cisco catalyst 6800 series switches, ios +1 more A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for... 6.5 Medium
- cisco ios, ios xe, ios and ios xe software +2 more A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through... 7.5 High
- cisco ios, ios software +1 more A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN... 7.5 High
- cisco ios, ios software +1 more Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in... 7.5 High
- cisco ios, ios software +1 more Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in... 7.5 High
- cisco ios, ios software +1 more A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers... 6.5 Medium
- cisco ios, ios software +1 more A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco... 7.5 High
- cisco ios, ios xe, ios and ios xe software +2 more A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14... 7.5 High
- cisco ios, ios xe, ios and ios xe software +2 more A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE... 6.5 Medium
- cisco ios, ios software, intellishield universal product +2 more The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0... 8.8 High
- cisco ios, ios and ios xe software, ios xe +1 more +3 more The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0... 8.8 High
- cisco ios, ios and ios xe software, ios xe +1 more +3 more The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0... 8.8 High
- cisco ios, ios and ios xe software, ios xe +1 more +3 more The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0... 8.8 High
- cisco ios xe software, ios, ios and ios xe software +1 more +3 more The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0... 8.8 High
- cisco ios, ios and ios xe software, ios xe +2 more The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0... 8.8 High
- cisco ios, ios and ios xe software, ios xe +1 more +3 more The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0... 8.8 High
- microsoft exchange server, malware protection engine, endpoint protection +6 more +8 more The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on... 7.8 High
- microsoft office Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution... 7.8 High
- microsoft graphics device interface (gdi), windows 7, windows 8.1 +9 more +11 more The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and... 7.8 High
- microsoft excel, excel viewer, office compatibility pack +2 more Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office... 7.8 High
- siemens simatic cp, simatic cp 1543-1 firmware, siplus net cp 1543-1 firmware +2 more A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP... 7.5 High
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 more Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and... 8.8 High
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 more Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to... 7.0 High
- microsoft office, office compatibility pack, word +1 more +3 more Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for... 7.8 High
- adobe flash player, opensuse evergreen, opensuse +6 more +8 more Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via... 9.8 Critical
- adobe flash player, air desktop runtime, air sdk +2 more +4 more Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service ... 9.8 Critical
- microsoft windows, windows 7, windows 8.1 +5 more +7 more The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,... 7.8 High
- oracle java se, opensuse leap, opensuse +19 more +21 more Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to... 5.0 Medium
- Show olderLoading…