Known exploited vulnerabilities
Under attack, per CISA.
- microsoft windows, windows 2003 server, windows xp +2 more Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template... 9.3 High
- beyondtrust privileged remote access, remote support (rs) and privileged remote access (pra), remote support +1 more +3 more Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) 9.9 Critical
- apple ipados, macos, tvos +5 more +7 more A memory corruption issue was addressed with improved state management. This issue is fixed in... 7.8 High
- notepad++, notepad-plus-plus, notepad-plus-plus notepad\+\+ +2 more Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification 7.7 High
- solarwinds web help desk SolarWinds Web Help Desk Security Control Bypass Vulnerability 8.1 High
- microsoft configuration manager, configuration manager 2403, configuration manager 2409 +1 more +3 more Microsoft Configuration Manager Remote Code Execution Vulnerability 9.8 Critical
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +27 more +29 more Windows Remote Access Connection Manager Denial of Service Vulnerability 6.2 Medium
- microsoft office, 365 apps, 365 apps for enterprise +5 more +7 more Microsoft Word Security Feature Bypass Vulnerability 7.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +27 more +29 more Windows Shell Security Feature Bypass Vulnerability 8.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +27 more +29 more Windows Remote Desktop Services Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +27 more +29 more MSHTML Framework Security Feature Bypass Vulnerability 8.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +23 more +25 more Desktop Window Manager Elevation of Privilege Vulnerability 7.8 High
- smartertools smartermail SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API 9.3 Critical
- react native community cli, react-native-community react native community cli +1 more Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests 9.8 Critical
- solarwinds web help desk SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability 9.8 Critical
- bridgehead software filestore, sangoma freepbx +1 more FreePBX Administration GUI is Vulnerable to Authenticated Command Injection 8.6 High
- gitlab, gitlab community and enterprise editions +1 more An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14... 6.8 Medium
- sangoma freepbx Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect... 9.8 Critical
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated... 9.8 Critical
- fortinet fortianalyzer, fortimanager, fortinac-f +6 more +8 more An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability... 9.4 Critical
- microsoft office, 365 apps, 365 apps for enterprise +5 more +7 more Microsoft Office Security Feature Bypass Vulnerability 7.8 High
- smartertools smartermail SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API 9.3 Critical
- gnu inetutils, debian linux +1 more telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value... 9.8 Critical
- smartertools smartermail Upload Arbitrary Files 10.0 Critical
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +25 more +27 more An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An... 7.8 High
- vmware vcenter server, broadcom vmware vcenter server, vmware cloud foundation +2 more vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC... 9.8 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra... 8.8 High
- prettier eslint-config-prettier, eslint-plugin-prettier, un-ts napi-postinstall +4 more +6 more eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code 7.5 High
- versa concerto Versa Concerto Actuator Authentication Bypass Information Leak 9.2 Critical
- vitejs vite, vite vitejs +1 more Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query 5.3 Medium
- cisco unified communications manager, unity connection, unified communications manager im and presence service +2 more Cisco Unified Communications Products Remote Code Execution Vulnerability 8.2 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +25 more +27 more Desktop Window Manager Information Disclosure Vulnerability 5.5 Medium
- gogs File overwrite in file update API in Gogs 8.7 High
- hewlett packard enterprise (hpe) hpe oneview, oneview +1 more A remote code execution issue exists in HPE OneView. 10.0 Critical
- microsoft office, office powerpoint, powerpoint +2 more Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office... 9.3 High
- mongodb, mongodb and mongodb server, mongodb inc. server +1 more +3 more Zlib compressed protocol header length confusion may allow memory read 8.7 High
- digiever ds-2105 pro, ds-2105 pro\+ firmware, ds-2105 pro firmware +2 more Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This... 8.8 High
- watchguard firebox, fireware, fireware os +2 more WatchGuard Firebox iked Out of Bounds Write Vulnerability 9.3 Critical
- sonicwall sma1000, sma1000 appliance, sma6200 firmware +4 more +6 more A local privilege escalation vulnerability due to insufficient authorization in the SonicWall... 6.6 Medium
- cisco asyncos, secure email, secure email and web manager +1 more +3 more Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability 10.0 Critical
- asus live update "UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with... 9.3 Critical
- fortinet fortios, fortiproxy, fortiswitchmanager +3 more +5 more A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0... 9.1 Critical
- apple ipados, macos, safari +6 more +8 more A use-after-free issue was addressed with improved memory management. This issue is fixed in... 8.8 High
- gladinet centrestack, centrestack and triofox, triofox +2 more Gladinet CentreStack and TrioFox Hard Coded AES Keys 7.1 High
- google chrome, chromium, apple ipados +7 more +9 more Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a... 8.8 High
- sierra wireless airlink aleos, sierrawireless aleos +1 more An exploitable remote code execution vulnerability exists in the upload.cgi functionality of... 8.8 High
- geoserver GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature 8.2 High
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +18 more +20 more Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 7.8 High
- rarlab winrar RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability 7.8 High
- array networks arrayos ag Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in... 7.2 High
- Show olderLoading…