Known exploited vulnerabilities
Under attack, per CISA.
- awesomemotive duplicator, wordpress snap creek duplicator plugin +1 more The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1)... 7.5 High
- vmware vcenter server Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or... 9.8 Critical
- amcrest 1080-lite 8ch firmware, amdv10814-h5 firmware, cameras and network video recorder (nvr) +16 more +18 more Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An... 8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 more Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after... 8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 more Under certain conditions, when running the nsDocShell destructor, a race condition can cause a... 8.1 High
- sonatype nexus, nexus repository +1 more Nexus Repository Manager 3 - Remote Code Execution 8.8 High
- liferay portal Deserialization of Untrusted Data in Liferay Portal 9.8 Critical
- trendmicro apex one, officescan, trend micro apex one and officescan +1 more +3 more Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could... 9.8 Critical
- trendmicro apex one, officescan, worry-free business security +2 more +4 more Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0)... 8.8 High
- trendmicro apex one, officescan, trend micro apex one and officescan +1 more +3 more A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a... 8.8 High
- vmware fusion, horizon client, remote console +1 more +3 more VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1)... 7.8 High
- unraid Unraid 6.8.0 allows authentication bypass. 7.5 High
- unraid Unraid through 6.8.0 allows Remote Code Execution. 9.8 Critical
- sumavision enhanced multimedia router (emr), enhanced multimedia router firmware +1 more goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of... 9.8 Critical
- sap solution manager, sap se solution manager (user experience monitoring) +1 more SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication... 10.0 Critical
- google android, huawei berkeley-l09 firmware, columbia-al10b firmware +27 more +29 more In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds... 7.8 High
- android kernel, google android +1 more In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect... 7.8 High
- rconfig lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute... 8.8 High
- zoho manageengine, zohocorp manageengine desktop central +1 more Zoho ManageEngine Desktop Central 10 allows remote code execution because of deserialization of... 9.8 Critical
- google chrome, debian linux, fedoraproject fedora +4 more +6 more Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to... 8.8 High
- microsoft exchange server, exchange server 2010 service pack 3 update rollup 30, exchange server 2013 +4 more +6 more A remote code execution vulnerability exists in Microsoft Exchange software when the software... 8.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +24 more +26 more An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process... 7.8 High
- microsoft internet explorer, internet explorer 10, internet explorer 11 +8 more +10 more A remote code execution vulnerability exists in the way that the scripting engine handles objects... 7.5 High
- netis wf2419 devices, netis-systems wf2419 firmware +1 more Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the... 7.5 High
- teamviewer desktop, teamviewer +1 more TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the... 7.0 High
- eyesofnetwork An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege... 7.8 High
- eyesofnetwork An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded... 9.8 Critical
- playsms PlaySMS before 1.4.3 does not sanitize inputs from a malicious string. 9.8 Critical
- cisco ios xr software, ios xr +1 more Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability 8.8 High
- draytek multiple vigor routers, vigor2960 firmware, vigor300b firmware +1 more +3 more DrayTek Vigor2960 1.3.1_Beta; Vigor3900 1.4.4_Beta; and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1... 9.8 Critical
- oracle coherence, access manager, commerce platform +7 more +9 more Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching... 9.8 Critical
- microsoft .net framework, .net framework 3.0, .net framework 3.5 +50 more +52 more A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate... 9.8 Critical
- microsoft windows, golang go, microsoft windows 10 version 1903 for 32-bit systems +20 more +22 more A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic... 8.1 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 more Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a... 8.8 High
- apache solr, oracle primavera unifier +1 more Improper Input Validation in Apache Solr 7.5 High
- tvt nvms-1000, nvms-1000 firmware +1 more TVT NVMS-1000 devices allow GET /.. Directory Traversal 7.5 High
- citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +1 more +3 more An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1,... 9.8 Critical
- ibm planning analytics IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows... 10.0 Critical
- sonicwall sma100, sma 100 firmware +1 more Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to... 7.5 High
- progress telerik ui for asp.net ajax, telerik ui for asp.net ajax +1 more Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization... 9.8 Critical
- openslp, vmware esxi, horizon daas +14 more +16 more OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has... 9.8 Critical
- microsoft internet explorer, internet explorer 10, internet explorer 11 +5 more +7 more A remote code execution vulnerability exists in the way that the scripting engine handles objects... 7.5 High
- apple ios, iphone os +1 more A memory corruption issue was addressed with improved state management. This issue is fixed in... 8.8 High
- apple ios, iphone os +1 more A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS... 8.8 High
- trend micro officescan Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a... 7.5 High
- android kernel, debian linux, google android +75 more +77 more A use-after-free in binder.c allows an elevation of privilege from an application to the Linux... 7.8 High
- vbulletin vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter... 9.8 Critical
- microsoft internet explorer, internet explorer 10, internet explorer 11 +5 more +7 more A remote code execution vulnerability exists in the way that the scripting engine handles objects... 7.5 High
- simalliance toolbox browser, trustedconnectivityalliance s\@t browser +1 more Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which... 9.8 Critical
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 more An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles... 7.8 High
- Show olderLoading…