Known exploited vulnerabilities
Under attack, per CISA.
- gitlab, gitlab community and enterprise editions +1 more An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab... 10.0 Critical
- ivanti connect secure, pulse connect secure +1 more Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass... 10.0 Critical
- sonicwall email security, email security appliance 3300 firmware, email security appliance 4300 firmware +8 more +10 more SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post... 4.9 Medium
- google chrome, fedoraproject fedora, google chromium v8 +2 more Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed... 8.8 High
- google chrome, fedoraproject fedora, google chromium blink +2 more Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to... 8.8 High
- microsoft win32k, windows 10 version 1803, windows 10 version 1809 +16 more +18 more Win32k Elevation of Privilege Vulnerability 7.8 High
- sonicwall email security, email security appliance 3300 firmware, email security appliance 4300 firmware +8 more +10 more SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post... 7.2 High
- sonicwall email security, email security appliance 3300 firmware, email security appliance 4300 firmware +8 more +10 more A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an... 9.8 Critical
- apple ios, ipados, watchos +3 more +5 more This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS... 6.1 Medium
- apple ipados, macos, ios and ipados +5 more +7 more A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2... 9.8 Critical
- apple ipados, macos, tvos +5 more +7 more A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2,... 7.0 High
- f5 big-ip and big-iq centralized management, big-ip access policy manager, big-ip advanced firewall manager +13 more +15 more On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x... 9.8 Critical
- micro focus access manager Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager... 7.5 High
- apple ipados, macos, ios and ipados +5 more +7 more A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2... 9.8 Critical
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to... 8.8 High
- microsoft office, office 2010 service pack 2, office 2013 service pack 1 +1 more +3 more Microsoft Office Remote Code Execution Vulnerability 7.6 High
- microsoft internet explorer, internet explorer 11 +1 more Internet Explorer Remote Code Execution Vulnerability 8.8 High
- microsoft internet explorer, edge, internet explorer 11 +2 more +4 more Internet Explorer Memory Corruption Vulnerability 8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to... 8.8 High
- microsoft exchange server, exchange server 2013 cumulative update 21, exchange server 2013 cumulative update 22 +23 more +25 more Microsoft Exchange Server Remote Code Execution Vulnerability 7.8 High
- microsoft exchange server, exchange server 2013 cumulative update 21, exchange server 2013 cumulative update 22 +22 more +24 more Microsoft Exchange Server Remote Code Execution Vulnerability 7.8 High
- microsoft exchange server, exchange server 2010 service pack 3, exchange server 2013 cumulative update 21 +24 more +26 more Microsoft Exchange Server Remote Code Execution Vulnerability 7.8 High
- microsoft exchange server, exchange server 2013 cumulative update 21, exchange server 2013 cumulative update 22 +22 more +24 more Microsoft Exchange Server Remote Code Execution Vulnerability 9.1 Critical
- microsoft win32k, windows 10 version 1803, windows 10 version 1809 +16 more +18 more Windows Win32k Elevation of Privilege Vulnerability 7.8 High
- vmware cloud foundation, vcenter server +1 more The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server... 9.8 Critical
- accellion fta Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request... 9.8 Critical
- accellion fta Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to... 9.8 Critical
- accellion fta Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service... 7.8 High
- accellion fta Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a... 9.8 Critical
- adobe acrobat, acrobat reader, acrobat reader dc +2 more +4 more Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution 8.8 High
- mcafee total protection (mtp), total protection, mcafee,llc mcafee total protection (mtp) +2 more McAfee Total Protection (MTP) privilege escalation vulnerability 8.2 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to... 8.8 High
- micro focus operation bridge reporter (obr), microfocus operation bridge reporter +1 more Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product,... 9.8 Critical
- sonicwall sma100, sslvpn sma100, sma 100 firmware +5 more +7 more A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote... 9.8 Critical
- d-link dns-320 device, dlink dns-320 firmware +1 more D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi... 9.8 Critical
- d-link dir-825 r1 devices, dlink dir-825 r1 firmware +1 more An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer... 9.8 Critical
- microsoft defender, security essentials, system center 2012 endpoint protection +3 more +5 more Microsoft Defender Remote Code Execution Vulnerability 7.8 High
- solarwinds orion, orion platform +1 more SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands 9.8 Critical
- zyxel atp100 firmware, atp100w firmware, atp200 firmware +28 more +30 more Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an... 9.8 Critical
- apache struts, oracle business intelligence, communications diameter intelligence hub +5 more +7 more Remote code execution in Apache Struts 9.8 Critical
- microsoft exchange server, exchange server 2010 service pack 3 update rollup 31 +1 more Microsoft Exchange Remote Code Execution Vulnerability 8.4 High
- apple ipados, macos, watchos +4 more +6 more A memory corruption issue was addressed with improved input validation. This issue is fixed in... 7.8 High
- apple ipados, macos, watchos +3 more +5 more A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS... 5.5 Medium
- apple ipados, macos, watchos +6 more +8 more A type confusion issue was addressed with improved state handling. This issue is fixed in macOS... 7.8 High
- vmware identity manager, identity manager connector, one access +3 more +5 more VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector... 9.1 Critical
- apple ipados, macos, safari +5 more +7 more A use after free issue was addressed with improved memory management. This issue is fixed in... 8.8 High
- google chrome Use after free in CefSharp 9.6 Critical
- google chrome, chromium v8 +1 more Inappropriate implementation in V8 in CefSharp 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +38 more +40 more Windows Kernel Local Elevation of Privilege Vulnerability 7.8 High
- saltstack salt, debian linux, fedoraproject fedora +1 more +3 more SaltStack Salt Command Injection in netapi ssh client 9.8 Critical
- Show olderLoading…