Known exploited vulnerabilities
Under attack, per CISA.
- microsoft internet information services (iis), internet information services +1 more Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet... 9.8 Critical
- microsoft windows, microsoft corporation windows smb, microsoft server message block +9 more +11 more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7... 8.8 High
- apache struts, arubanetworks clearpass policy manager, hp server automation +6 more +8 more Apache Struts vulnerable to remote arbitrary command execution due to improper input validation 9.8 Critical
- sap netweaver, netweaver application server java +1 more BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML... 6.5 Medium
- microsoft win32k, windows 7, windows 8.1 +8 more +10 more The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,... 7.8 High
- solarwinds virtualization manager SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by... 7.8 High
- microsoft office, visio, visio viewer +2 more Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and... 7.8 High
- apache shiro, aurora, redhat fuse +1 more +3 more Improper Access Control in Apache Shiro 9.8 Critical
- sap netweaver, netweaver application server java +1 more The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does... 10.0 Critical
- microsoft windows, windows 7, windows 8.1 +1 more +3 more Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote... 7.8 High
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 more The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow... 5.5 Medium
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 more The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers... 5.5 Medium
- microsoft win32k, windows 7, windows 8.1 +6 more +8 more The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,... 7.8 High
- sap netweaver, netweaver application server java +1 more Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote... 7.5 High
- oracle weblogic server, storagetek tape analytics sw tool, virtual desktop infrastructure +2 more The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0... 9.8 Critical
- microsoft office, office compatibility pack, office web apps +3 more +5 more Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word... 7.8 High
- microsoft windows, windows 7, windows 8 +4 more +6 more The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2... 9.0 High
- oracle fusion middleware Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware... 9.1 Critical
- microsoft biztalk server, commerce server, mscomctl.ocx +8 more +10 more The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX... 8.8 High