Known exploited vulnerabilities
Under attack, per CISA.
- google android, chrome, chrome for android ui +2 more Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote... 9.6 Critical
- google chrome, cefsharp, debian linux +6 more +8 more Inappropriate implementation in V8 8.8 High
- oracle weblogic server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component:... 9.8 Critical
- ivanti connect secure, pulse connect secure +1 more A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an... 7.2 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd) +1 more +3 more Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities 6.1 Medium
- oracle weblogic server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component:... 7.2 High
- oracle weblogic server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component:... 9.8 Critical
- oracle solaris, solaris and zettabyte file system (zfs), oracle corporation solaris operating system +2 more Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable... 10.0 Critical
- vmware esxi, cloud foundation +1 more OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401... 9.8 Critical
- freetype, google chrome, debian linux +4 more +6 more Heap buffer overflow in CefSharp 9.6 Critical
- netgear jgs516pe devices, jgs516pe firmware +1 more NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function... 9.8 Critical
- ivanti connect secure, pulse connect secure, policy secure +2 more A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an... 7.2 High
- cisco ios xr software, ios xr +1 more Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities 8.6 High
- microsoft chakracore, edge, edge and internet explorer +4 more +6 more Microsoft Browser Memory Corruption Vulnerability 4.2 Medium
- filemanagerpro file manager, wordpress file manager plugin +1 more The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to... 10.0 Critical
- trend micro apex one, worry-free business security, apex one, officescan, and worry-free business security +1 more +3 more A vulnerability in Trend Micro Apex One on Microsoft Windows may allow an attacker to manipulate... 7.8 High
- cisco ios xr software, ios xr +1 more Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability 8.6 High
- microsoft netlogon, canonical ubuntu linux, debian linux +24 more +26 more Netlogon Elevation of Privilege Vulnerability 5.5 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +41 more +43 more Windows Spoofing Vulnerability 7.8 High
- microsoft internet explorer, internet explorer 11 +1 more Scripting Engine Memory Corruption Vulnerability 7.8 High
- fortinet fortios A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the... 6.5 Medium
- vbulletin vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an... 9.8 Critical
- fortinet fortios An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and... 9.8 Critical
- cisco adaptive security appliance software, adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd) +1 more +3 more Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability 7.5 High
- microsoft windows, windows server, windows server, version 1903 (server core installation) +6 more +8 more A remote code execution vulnerability exists in Windows Domain Name System servers when they fail... 10.0 Critical
- microsoft .net framework, sharepoint server, .net core +68 more +70 more .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability 7.8 High
- microsoft hyper-v remotefx, windows server, windows server 2008 +2 more +4 more A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to... 9.0 Critical
- sap netweaver, sap se netweaver as java (lm configuration wizard), sap netweaver application server java +2 more SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not... 10.0 Critical
- tenda ac15 firmware, ac1900 router ac15 model +1 more The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers... 9.8 Critical
- citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +2 more +4 more Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18,... 4.3 Medium
- citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +3 more +5 more Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18... 6.5 Medium
- citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +2 more +4 more Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18,... 6.5 Medium
- mobileiron core, monitor and reporting database, sentry +2 more +4 more MobileIron Core and Connector before 10.3.0.4, 10.4.x before 10.4.0.4, 10.5.x before 10.5.1.1, 10... 9.8 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1... 9.8 Critical
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +28 more +30 more An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle... 7.8 High
- apple ios, ipados, watchos +3 more +5 more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in... 8.8 High
- apple ios, ipados, watchos +4 more +6 more A memory consumption issue was addressed with improved memory handling. This issue is fixed in... 4.3 Medium
- apple ios, ipados, macos +5 more +7 more A memory consumption issue was addressed with improved memory handling. This issue is fixed in... 7.8 High
- microsoft win32k, windows 10 version 1507, windows 10 version 1607 +38 more +40 more Win32k Elevation of Privilege Vulnerability 7.0 High
- ibm data risk manager IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote... 4.3 Medium
- ibm data risk manager IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote... 9.1 Critical
- ibm data risk manager IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker... 9.0 Critical
- apple ios, iphone os +1 more A use after free issue was addressed with improved memory management. This issue is fixed in iOS... 8.8 High
- saltstack salt, blackberry workspaces server, canonical ubuntu linux +3 more +5 more SaltStack Salt is vulnerable Arbitrary Directory Access 6.5 Medium
- saltstack salt, canonical ubuntu linux, debian linux +2 more +4 more SaltStack Salt Unauthenticated Remote Code Execution 9.8 Critical
- sophos sfos A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG... 10.0 Critical
- cisco ip phone, ip phones, 8831 firmware +12 more +14 more Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability 9.8 Critical
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +23 more +25 more A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type... 8.8 High
- microsoft internet explorer, internet explorer 11, internet explorer 11 on windows 10 version 1903 for 32-bit systems +7 more +9 more A remote code execution vulnerability exists in the way that the scripting engine handles objects... 7.5 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +24 more +26 more A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type... 7.8 High
- Show olderLoading…