Known exploited vulnerabilities
Under attack, per CISA.
- microsoft lync, office, office compatibility pack +6 more +8 more GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1... 7.8 High
- apple ipados, macos, safari +3 more +5 more A use after free issue was addressed with improved memory management. This issue is fixed in... 8.8 High
- microsoft windows, windows 10 version 1809, windows 10 version 1909 +8 more +10 more Windows Elevation of Privilege Vulnerability 7.8 High
- microsoft smbv3, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +10 more +12 more A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3... 10.0 Critical
- jenkins, jenkins stapler web framework, redhat openshift container platform +2 more Deserialization of Untrusted Data in Jenkins 9.8 Critical
- oracle weblogic server Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:... 7.5 High
- apache struts, struts 1 +1 more Code execution in Apache Struts 1 plugin 9.8 Critical
- microsoft windows, windows 7, windows 8.1 +8 more +10 more Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows... 8.8 High
- microsoft win32k, windows 7, windows 8.1 +9 more +11 more The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8... 7.8 High
- microsoft office Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution... 7.8 High
- microsoft smbv1, microsoft corporation windows smb, microsoft server message block +8 more +10 more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7... 8.8 High
- microsoft smbv1, microsoft corporation windows smb, microsoft server message block +8 more +10 more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7... 8.8 High
- apache activemq Improper Input Validation in Apache ActiveMQ 9.8 Critical
- microsoft http.sys, windows 7, windows 8 +3 more +5 more HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and... 10.0 High
- apple os x, mac os x +1 more The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to... 7.8 High
- dlink dir-645, d-link dir-645 router, dlink dir-645 firmware +2 more The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote... 8.8 High
- apple iphone os, mac os x, os x +1 more +3 more Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows... 7.8 High
- microsoft win32k, windows 10 version 1809, windows 10 version 1909 +15 more +17 more Win32k Elevation of Privilege Vulnerability 7.0 High
- apple ipados, macos, ios and ipados +2 more +4 more A memory corruption issue was addressed with improved input validation. This issue is fixed in... 9.8 Critical
- sonicwall sma100, sma 100 appliances, sma 200 firmware +4 more +6 more A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module... 9.8 Critical
- grandstream ucm6200, ucm6200 firmware +1 more The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote... 9.8 Critical
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +24 more +26 more An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer... 7.8 High
- hpe proliant ml10 gen9 server firmware, intel active management technology (amt), small business technology (sbt), and standard manageability, active management technology firmware +35 more +37 more An unprivileged network attacker could gain system privileges to provisioned Intel manageability... 9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function... 9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 processes trailing strings after function definitions in the values of... 9.8 Critical
- microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers... 10.0 High
- solarwinds serv-u Improper Input Validation Vulnerability in Serv-U 4.3 Medium
- microsoft win32k, windows 10, windows 10 servers +17 more +19 more An elevation of privilege vulnerability exists in Windows when the Win32k component fails to... 7.8 High
- apache struts, struts 2 +1 more Apache Struts Remote Java Code Execution 9.8 Critical
- apache struts, struts 1 +1 more Improper Input Validation in Apache Struts 7.5 High
- aviatrix controller An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a... 9.8 Critical
- october cms cms, octobercms october +1 more Account Takeover in Octobercms 8.2 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 more Microsoft Exchange Server Information Disclosure Vulnerability 7.3 High
- vmware vrealize operations manager api, vrealize operations manager, cloud foundation +1 more +3 more Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may... 7.5 High
- f5 big-ip, big-ip traffic management microkernel, big-ip access policy manager +13 more +15 more On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x... 9.8 Critical
- npm package system information library for node.js, sebhildebrandt systeminformation, apache cordova +2 more Command Injection Vulnerability 7.1 High
- nagios xi Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the... 8.8 High
- nagios xi Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the... 8.8 High
- nagios xi Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the... 8.8 High
- drupal, drupal core, fedoraproject fedora +2 more Drupal core Unrestricted Upload of File with Dangerous Type 8.8 High
- apache airflow, airflow's experimental api +1 more Authentication bypass in Apache Airflow 9.8 Critical
- oracle business intelligence, intelligence enterprise edition, oracle corporation business intelligence enterprise edition +2 more Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion... 7.5 High
- apache airflow Remote code execution (RCE) in Apache Airflow 8.8 High
- fatpipe ipvpn, mpvpn, warp +4 more +6 more Arbitrary file upload vulnerability in FatPipe software 9.8 Critical
- vmware vcenter server Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of... 5.3 Medium
- hikvision ds-2cd2021g1-i\(w\) firmware, ds-2cd2023g2-i\(u\) firmware, ds-2cd2026g2-iu\/sl firmware +254 more +256 more A command injection vulnerability in the web server of some Hikvision product. Due to the... 9.8 Critical
- google chrome, chrome media +1 more Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to... 8.8 High
- microsoft win32k, windows, windows server +8 more +10 more An elevation of privilege vulnerability exists in Windows when the Win32k component fails to... 7.8 High
- palo alto networks pan-os Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier, and PAN-OS 8.1.2... 8.1 High
- fortinet fortios, fortiproxy, fortios, fortiproxy +1 more +3 more An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5... 9.1 Critical
- Show olderLoading…