CISA Known Exploited Vulnerabilities (KEV) index
1,766 entries from the CISA catalog, catalog version 2026.10.30, released 2026-10-30T17:02:45.3665Z (the catalog itself says it has 1,766 entries). 361 entries are marked by CISA as known to be used in ransomware campaigns; CISA does not say which group.
| CVE | Name | Vendor | Product | Added | Ransomware use (CISA) |
|---|---|---|---|---|---|
| CVE-2026-111357 | Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability | Ivanti | Connect Secure | 2026-10-30 | Unknown |
| CVE-2026-118527 | Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability | Ivanti | Connect Secure | 2026-10-30 | Unknown |
| CVE-2026-76418 | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability | Cisco | Secure Firewall ASA Software and Cisco Secure FTD Software | 2026-10-29 | Unknown |
| CVE-2026-97229 | GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability | GitLab | Community Edition and Enterprise Edition | 2026-10-29 | Unknown |
| CVE-2026-41709 | Broadcom VMWare ESX Insufficient Logging Vulnerability | Broadcom | VMware ESX | 2026-10-28 | Unknown |
| CVE-2026-46300 | Linux Kernel Missing Initialization of a Variable Vulnerability | Linux | Kernel | 2026-10-28 | Unknown |
| CVE-2026-111497 | Google Brotli Unchecked Return Value Vulnerability | Brotli | 2026-10-27 | Unknown | |
| CVE-2026-48356 | Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability | Adobe | Commerce and Magento | 2026-10-27 | Unknown |
| CVE-2026-109618 | PHP Memory Corruption Vulnerability | PHP Group | PHP | 2026-10-26 | Unknown |
| CVE-2026-109619 | PHP Stale Internal Request-State Vulnerability | PHP Group | PHP | 2026-10-26 | Unknown |
| CVE-2026-110447 | Collabora Online – Built-in CODE Server OS Command Injection Vulnerability | Collabora | Collabora Online – Built-in CODE Server | 2026-10-23 | Unknown |
| CVE-2026-114625 | Arista VeloCloud Orchestrator SQL Injection Vulnerability | Arista | VeloCloud Orchestrator | 2026-10-23 | Unknown |
| CVE-2026-106931 | EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability | EG Secure Solutions | SiteGuard Server Edition | 2026-10-20 | Unknown |
| CVE-2026-110936 | Siemens Software Center Uncontrolled Search Path Element Vulnerability | Siemens | Software Center | 2026-10-20 | Unknown |
| CVE-2026-96652 | Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | Plex | Media Server | 2026-10-20 | Unknown |
| CVE-2026-96654 | Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability | Plex | Media Server | 2026-10-20 | Unknown |
| CVE-2026-96655 | Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | Plex | Media Server | 2026-10-20 | Unknown |
| CVE-2026-96656 | Plex Media Server External Control of File Name or Path Vulnerability | Plex | Media Server | 2026-10-20 | Unknown |
| CVE-2025-61624 | Fortinet Multiple Products Path Traversal Vulnerability | Fortinet | Multiple Products | 2026-10-16 | Unknown |
| CVE-2026-102764 | BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability | BeyondTrust | Remote Support | 2026-10-16 | Unknown |
| CVE-2026-21589 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | Atlassian | Multiple Products | 2026-10-15 | Unknown |
| CVE-2026-0322 | Palo Alto Networks PAN-OS Code Injection Vulnerability | Palo Alto Networks | PAN-OS | 2026-10-14 | Unknown |
| CVE-2026-105133 | Ahsay AhsayCBS Improper Authentication Vulnerability | Ahsay | AhsayCBS | 2026-10-14 | Unknown |
| CVE-2026-105134 | Ahsay AhsayCBS Command Injection Vulnerability | Ahsay | AhsayCBS | 2026-10-14 | Unknown |
| CVE-2026-76519 | Cisco Secure Email Gateway Relative Path Traversal Vulnerability | Cisco | Secure Email Gateway | 2026-10-14 | Unknown |
| CVE-2026-104935 | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | Ivanti | Connect Secure | 2026-10-13 | Unknown |
| CVE-2026-96951 | Microsoft Windows Command Injection Vulnerability | Microsoft | Windows | 2026-10-13 | Unknown |
| CVE-2015-3306 | ProFTPD Improper Access Control Vulnerability | ProFTPD | ProFTPD | 2026-10-08 | Unknown |
| CVE-2015-5477 | ISC BIND Data Processing Errors Vulnerability | ISC | BIND | 2026-10-08 | Unknown |
| CVE-2016-3081 | Apache Struts Command Injection Vulnerability | Apache | Struts | 2026-10-08 | Unknown |
| CVE-2021-3199 | ONLYOFFICE Docs Server Path Traversal Vulnerability | ONLYOFFICE | Docs | 2026-10-08 | Unknown |
| CVE-2023-22894 | Strapi Cleartext Storage of Sensitive Information Vulnerability | Strapi | Strapi | 2026-10-08 | Unknown |
| CVE-2026-88779 | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | Citrix | NetScaler | 2026-10-04 | Unknown |
| CVE-2026-102489 | Zammad GmbH Zammad Session Fixation Vulnerability | Zammad GmbH | Zammad | 2026-10-02 | Unknown |
| CVE-2026-102490 | Zammad GmbH Zammad Improper Privilege Management Vulnerability | Zammad GmbH | Zammad | 2026-10-02 | Unknown |
| CVE-2026-104286 | Fortinet FortiMail Path Traversal Vulnerability | Fortinet | FortiMail | 2026-10-01 | Unknown |
| CVE-2026-76504 | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | Cisco | Catalyst SD-WAN Manager | 2026-09-30 | Unknown |
| CVE-2026-86950 | Apple Multiple Products Out-of-Bounds Write Vulnerability | Apple | Multiple Products | 2026-09-29 | Unknown |
| CVE-2026-88771 | Citrix NetScaler Improper Input Validation Vulnerability | Citrix | NetScaler | 2026-09-27 | Unknown |
| CVE-2026-88772 | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | Citrix | NetScaler | 2026-09-27 | Unknown |
| CVE-2026-65660 | Microsoft SharePoint Code Injection Vulnerability | Microsoft | SharePoint | 2026-09-25 | Unknown |
| CVE-2026-67279 | Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability | MikroTik | RouterOS | 2026-09-25 | Unknown |
| CVE-2026-87902 | WordPress Core Remote File Inclusion Vulnerability | WordPress | Core | 2026-09-25 | Unknown |
| CVE-2026-5430 | WSO2 Multiple Products Path Traversal Vulnerability | WSO2 | Multiple Products | 2026-09-24 | Unknown |
| CVE-2026-71362 | Adobe Commerce and Magento Incorrect Authorization Vulnerability | Adobe | Commerce and Magento | 2026-09-24 | Unknown |
| CVE-2026-85102 | Check Point Multiple Products Improper Certificate Validation Vulnerability | Check Point | Multiple Products | 2026-09-22 | Unknown |
| CVE-2026-93616 | Check Point Multiple Products Path Traversal Vulnerability | Check Point | Multiple Products | 2026-09-22 | Unknown |
| CVE-2026-93952 | Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | Arista | VeloCloud Orchestrator | 2026-09-22 | Unknown |
| CVE-2026-94127 | F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | F5 | BIG-IP APM | 2026-09-22 | Unknown |
| CVE-2026-7273 | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | Zyxel | GS1900 Series Switches | 2026-09-21 | Unknown |
| CVE-2025-39682 | Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability | Linux | Kernel | 2026-09-18 | Unknown |
| CVE-2025-39964 | Linux Kernel Race Condition Vulnerability | Linux | Kernel | 2026-09-18 | Unknown |
| CVE-2026-53266 | Linux Kernel Out-of-Bounds Write Vulnerability | Linux | Kernel | 2026-09-18 | Unknown |
| CVE-2026-58704 | Google Pixel Improper Authorization Vulnerability | Pixel | 2026-09-16 | Unknown | |
| CVE-2026-76460 | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | Cisco | Identity Services Engine | 2026-09-16 | Unknown |
| CVE-2026-87886 | Acronis Backup Incorrect Default Permissions Vulnerability | Acronis | Backup | 2026-09-16 | Unknown |
| CVE-2026-76461 | Cisco Secure Email Gateway SQL Injection Vulnerability | Cisco | Secure Email Gateway | 2026-09-14 | Unknown |
| CVE-2026-42016 | JFrog Artifactory Incorrect Authorization Vulnerability | JFrog | Artifactory | 2026-09-11 | Unknown |
| CVE-2026-42018 | JFrog Artifactory Improper Authentication Vulnerability | JFrog | Artifactory | 2026-09-11 | Unknown |
| CVE-2026-84869 | ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability | ConnectWise | ScreenConnect | 2026-09-11 | Unknown |
| CVE-2026-85706 | GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability | GitLab | Community Edition and Enterprise Edition | 2026-09-11 | Unknown |
| CVE-2026-67277 | MikroTik RouterOS Missing Authentication for Critical Function Vulnerability | MikroTik | RouterOS | 2026-09-10 | Unknown |
| CVE-2026-86060 | MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability | MikroTik | RouterOS | 2026-09-10 | Unknown |
| CVE-2025-25249 | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | Fortinet | Multiple Products | 2026-09-09 | Unknown |
| CVE-2026-19490 | Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | Citrix | NetScaler | 2026-09-09 | Unknown |
| CVE-2026-20079 | Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | Cisco | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | 2026-09-09 | Unknown |
| CVE-2026-87491 | Google Chromium V8 Out of Bounds Write Vulnerability | Chromium V8 | 2026-09-09 | Unknown | |
| CVE-2026-75650 | Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | Adobe | Commerce and Magento | 2026-09-08 | Unknown |
| CVE-2026-81963 | Microsoft Windows Link Following Vulnerability | Microsoft | Windows | 2026-09-08 | Unknown |
| CVE-2026-85880 | Microsoft Windows Heap-Based Buffer Overflow Vulnerability | Microsoft | Windows | 2026-09-08 | Unknown |
| CVE-2026-86218 | N-able N-central Static Code Injection Vulnerability | N-able | N-central | 2026-09-08 | Unknown |
| CVE-2026-85046 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2026-09-04 | Unknown | |
| CVE-2026-48710 | Kludex Starlette HTTP Request/Response Smuggling Vulnerability | Kludex | Starlette | 2026-09-02 | Unknown |
| CVE-2026-49869 | Kestra OSS OS Command Injection Vulnerability | Kestra | Kestra OSS | 2026-09-02 | Unknown |
| CVE-2026-59822 | BerriAI LiteLLM Improper Authentication Vulnerability | BerriAI | LiteLLM | 2026-09-02 | Unknown |
| CVE-2026-82329 | JFrog Artifactory Improper Authentication Vulnerability | JFrog | Artifactory | 2026-09-02 | Unknown |
| CVE-2026-83548 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | SonicWall | SMA1000 Appliances | 2026-09-02 | Unknown |
| CVE-2026-83549 | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | SonicWall | SMA1000 Appliances | 2026-09-02 | Unknown |
| CVE-2026-9586 | Sangoma Switchvox SQL Injection Vulnerability | Sangoma | Switchvox | 2026-09-02 | Unknown |
| CVE-2026-81578 | PaperCut NG/MF Missing Authentication for Critical Function Vulnerability | PaperCut | NG/MF | 2026-08-31 | Unknown |
| CVE-2026-82078 | PaperCut NG/MF Unsafe Reflection Vulnerability | PaperCut | NG/MF | 2026-08-31 | Unknown |
| CVE-2023-49105 | ownCloud Improper Authentication Vulnerability | ownCloud | ownCloud | 2026-08-27 | Unknown |
| CVE-2026-53362 | Linux Kernel Unspecified Vulnerability | Linux | Kernel | 2026-08-27 | Unknown |
| CVE-2026-66384 | JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability | JFrog | Artifactory | 2026-08-27 | Unknown |
| CVE-2015-3246 | Red Hat Libuser Race Condition Vulnerability | Red Hat | Libuser | 2026-08-26 | Unknown |
| CVE-2015-5287 | Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability | Red Hat | Automatic Bug Reporting Tool | 2026-08-26 | Unknown |
| CVE-2019-1068 | Microsoft SQL Server Remote Code Execution Vulnerability | Microsoft | SQL Server | 2026-08-26 | Unknown |
| CVE-2021-23758 | Ajax.NET Professional Deserialization of Untrusted Data Vulnerability | Ajax.NET Professional | Ajax.NET Professional | 2026-08-26 | Unknown |
| CVE-2022-0995 | Linux Kernel Out-of-Bounds Write Vulnerability | Linux | Kernel | 2026-08-26 | Unknown |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | Citrix | NetScaler ADC and NetScaler Gateway | 2026-08-26 | Unknown |
| CVE-2026-60004 | Gitea Code Injection Vulnerability | Gitea | Gitea | 2026-08-25 | Unknown |
| CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability | Oracle | HTTP Server and Oracle Weblogic Server Proxy Plug-in | 2026-08-24 | Unknown |
| CVE-2026-73570 | Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2026-08-21 | Unknown |
| CVE-2026-72529 | TrueConf Server Missing Authentication for Critical Function Vulnerability | TrueConf | Server | 2026-08-20 | Unknown |
| CVE-2026-72530 | TrueConf Server Code Injection Vulnerability | TrueConf | Server | 2026-08-20 | Unknown |
| CVE-2026-64849 | MLflow Server-Side Request Forgery Vulnerability | MLflow | MLflow | 2026-08-19 | Unknown |
| CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | Microsoft | Internet Key Exchange (IKE) Service Extensions | 2026-08-18 | Unknown |
| CVE-2026-55040 | Microsoft SharePoint Weak Authentication Vulnerability | Microsoft | SharePoint | 2026-08-18 | Unknown |
| CVE-2026-59310 | Broadcom VMware vCenter Path Traversal Vulnerability | Broadcom | VMware vCenter | 2026-08-18 | Known |
| CVE-2026-65400 | Apple macOS Improper Authentication Vulnerability | Apple | macOS | 2026-08-18 | Unknown |
| CVE-2025-62593 | Ray-Project Ray Code Injection Vulnerability | Ray-Project | Ray | 2026-08-17 | Unknown |
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | Cisco | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 2026-08-11 | Unknown |
| CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | Microsoft | Windows Ancillary Function Driver for WinSock | 2026-08-11 | Unknown |
| CVE-2026-72898 | Metabase SQL Injection Vulnerability | Metabase | Metabase | 2026-08-11 | Unknown |
| CVE-2026-8037 | Progress LoadMaster Command Injection Vulnerability | Progress | LoadMaster | 2026-08-07 | Unknown |
| CVE-2026-63077 | JetBrains TeamCity Deserialization of Untrusted Data Vulnerability | JetBrains | TeamCity | 2026-08-05 | Known |
| CVE-2026-18556 | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | N-able | N-central | 2026-08-04 | Unknown |
| CVE-2026-34486 | Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | Apache | Tomcat | 2026-08-04 | Unknown |
| CVE-2026-9198 | IBM Langflow Code Injection Vulnerability | IBM | Langflow | 2026-08-04 | Unknown |
| CVE-2026-18577 | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | N-able | N-central | 2026-08-03 | Unknown |
| CVE-2026-20316 | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | Cisco | Secure Firewall Management Center (FMC) | 2026-07-29 | Known |
| CVE-2025-68686 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | Fortinet | FortiOS | 2026-07-27 | Unknown |
| CVE-2026-16812 | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | Arista | VeloCloud Orchestrator | 2026-07-27 | Unknown |
| CVE-2026-16232 | Check Point SmartConsole Improper Authentication Vulnerability | Check Point | SmartConsole | 2026-07-22 | Unknown |
| CVE-2026-50522 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Microsoft | SharePoint | 2026-07-22 | Unknown |
| CVE-2021-27137 | DD-WRT Stack-Based Buffer Overflow Vulnerability | DD-WRT | DD-WRT | 2026-07-21 | Unknown |
| CVE-2026-0770 | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | Langflow | Langflow | 2026-07-21 | Unknown |
| CVE-2026-60137 | WordPress Core SQL Injection Vulnerability | WordPress | Core | 2026-07-21 | Unknown |
| CVE-2026-63030 | WordPress Core Interpretation Conflict Vulnerability | WordPress | Core | 2026-07-21 | Unknown |
| CVE-2026-25089 | Fortinet FortiSandbox OS Command Injection Vulnerability | Fortinet | FortiSandbox | 2026-07-16 | Unknown |
| CVE-2026-39808 | Fortinet FortiSandbox OS Command Injection Vulnerability | Fortinet | FortiSandbox | 2026-07-16 | Unknown |
| CVE-2026-58644 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Microsoft | SharePoint | 2026-07-16 | Unknown |
| CVE-2023-4346 | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | KNX Association | KNX Protocol Connection Authorization Option 1 | 2026-07-15 | Unknown |
| CVE-2026-46817 | Oracle E-Business Suite Improper Privilege Management Vulnerability | Oracle | E-Business Suite | 2026-07-15 | Unknown |
| CVE-2026-15409 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | SonicWall | SMA1000 Appliances | 2026-07-14 | Known |
| CVE-2026-15410 | SonicWall SMA1000 Appliances Code Injection Vulnerability | SonicWall | SMA1000 Appliances | 2026-07-14 | Known |
| CVE-2026-56155 | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | Microsoft | Active Directory Federation Services | 2026-07-14 | Unknown |
| CVE-2026-56164 | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | Microsoft | SharePoint Server | 2026-07-14 | Unknown |
| CVE-2008-4128 | Cisco IOS Cross-Site Request Forgery Vulnerability | Cisco | IOS | 2026-07-13 | Unknown |
| CVE-2026-48939 | iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability | iCagenda | iCagenda | 2026-07-10 | Unknown |
| CVE-2026-56291 | Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | Balbooa | Forms | 2026-07-10 | Unknown |
| CVE-2026-48282 | Adobe ColdFusion Path Traversal Vulnerability | Adobe | ColdFusion | 2026-07-07 | Unknown |
| CVE-2026-48908 | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability | JoomShaper | SP Page Builder | 2026-07-07 | Unknown |
| CVE-2026-55255 | Langflow Authorization Bypass Through User-Controlled Key Vulnerability | Langflow | Langflow | 2026-07-07 | Unknown |
| CVE-2026-56290 | Joomlack Page Builder Improper Access Control Vulnerability | Joomlack | Page Builder | 2026-07-07 | Unknown |
| CVE-2026-45659 | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | Microsoft | SharePoint Server | 2026-07-01 | Known |
| CVE-2026-48558 | SimpleHelp Authentication Bypass Vulnerability | SimpleHelp | SimpleHelp | 2026-06-29 | Unknown |
| CVE-2026-12569 | PTC Windchill and FlexPLM Improper Input Validation Vulnerability | PTC | Windchill and FlexPLM | 2026-06-25 | Known |
| CVE-2026-20230 | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | Cisco | Unified Communications Manager | 2026-06-25 | Unknown |
| CVE-2025-67038 | Lantronix EDS5000 Code Injection Vulnerability | Lantronix | EDS5000 | 2026-06-23 | Unknown |
| CVE-2026-34908 | Ubiquiti UniFi OS Improper Access Control Vulnerability | Ubiquiti | UniFi OS | 2026-06-23 | Unknown |
| CVE-2026-34909 | Ubiquiti UniFi OS Path Traversal Vulnerability | Ubiquiti | UniFi OS | 2026-06-23 | Unknown |
| CVE-2026-34910 | Ubiquiti UniFi OS Improper Input Validation Vulnerability | Ubiquiti | UniFi OS | 2026-06-23 | Unknown |
| CVE-2026-20253 | Splunk Enterprise Missing Authentication for Critical Function Vulnerability | Splunk | Enterprise | 2026-06-18 | Unknown |
| CVE-2026-48907 | Widget Factory Joomla Content Editor Improper Access Control Vulnerability | Widget Factory | Joomla Content Editor | 2026-06-16 | Unknown |
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | Cisco | Catalyst SD-WAN Manager | 2026-06-15 | Unknown |
| CVE-2026-54420 | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability | LiteSpeed | cPanel Plugin | 2026-06-15 | Unknown |
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | Oracle | PeopleSoft Enterprise PeopleTools | 2026-06-12 | Known |
| CVE-2026-10520 | Ivanti Sentry OS Command Injection Vulnerability | Ivanti | Sentry | 2026-06-11 | Unknown |
| CVE-2026-11645 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | Chromium V8 | 2026-06-09 | Unknown | |
| CVE-2026-20245 | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | Cisco | Catalyst SD-WAN Manager | 2026-06-09 | Unknown |
| CVE-2026-7473 | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | Arista | Extensible Operating System | 2026-06-09 | Unknown |
| CVE-2026-42271 | BerriAI LiteLLM Command Injection Vulnerability | BerriAI | LiteLLM | 2026-06-08 | Unknown |
| CVE-2026-50751 | Check Point Security Gateway Improper Authentication Vulnerability | Check Point | Security Gateway | 2026-06-08 | Known |
| CVE-2026-28318 | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | SolarWinds | Serv-U | 2026-06-05 | Unknown |
| CVE-2026-45247 | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability | Mirasvit | Mirasvit Full Page Cache Warmer | 2026-06-03 | Unknown |
| CVE-2022-0492 | Linux Kernel Improper Authentication Vulnerability | Linux | Kernel | 2026-06-02 | Unknown |
| CVE-2025-48595 | Android Framework Integer Overflow Vulnerability | Android | Framework | 2026-06-02 | Unknown |
| CVE-2024-21182 | Oracle WebLogic Server Unspecified Vulnerability | Oracle | WebLogic Server | 2026-06-01 | Unknown |
| CVE-2026-0257 | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | Palo Alto Networks | PAN-OS | 2026-05-29 | Known |
| CVE-2026-45321 | TanStack Unspecified Vulnerability | TanStack | TanStack | 2026-05-27 | Known |
| CVE-2026-48027 | Nx Console Embedded Malicious Code Vulnerability | Nx | Nx Console | 2026-05-27 | Known |
| CVE-2026-8398 | Daemon Tools Lite Embedded Malicious Code Vulnerability | Daemon | Daemon Tools Lite | 2026-05-27 | Unknown |
| CVE-2026-48172 | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | LiteSpeed | cPanel Plugin | 2026-05-26 | Unknown |
| CVE-2026-9082 | Drupal Core SQL Injection Vulnerability | Drupal | Core | 2026-05-22 | Unknown |
| CVE-2025-34291 | Langflow Origin Validation Error Vulnerability | Langflow | Langflow | 2026-05-21 | Unknown |
| CVE-2026-34926 | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | Trend Micro | Apex One | 2026-05-21 | Unknown |
| CVE-2008-4250 | Microsoft Windows Buffer Overflow Vulnerability | Microsoft | Windows | 2026-05-20 | Unknown |
| CVE-2009-1537 | Microsoft DirectX NULL Byte Overwrite Vulnerability | Microsoft | DirectX | 2026-05-20 | Unknown |
| CVE-2009-3459 | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | Adobe | Acrobat and Reader | 2026-05-20 | Unknown |
| CVE-2010-0249 | Microsoft Internet Explorer Use-After-Free Vulnerability | Microsoft | Internet Explorer | 2026-05-20 | Unknown |
| CVE-2010-0806 | Microsoft Internet Explorer Use-After-Free Vulnerability | Microsoft | Internet Explorer | 2026-05-20 | Unknown |
| CVE-2026-41091 | Microsoft Defender Link Following Vulnerability | Microsoft | Defender | 2026-05-20 | Unknown |
| CVE-2026-45498 | Microsoft Defender Denial of Service Vulnerability | Microsoft | Defender | 2026-05-20 | Unknown |
| CVE-2026-42897 | Microsoft Exchange Server Cross-Site Scripting Vulnerability | Microsoft | Microsoft | 2026-05-15 | Unknown |
| CVE-2026-20182 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | Cisco | Catalyst SD-WAN | 2026-05-14 | Unknown |
| CVE-2026-42208 | BerriAI LiteLLM SQL Injection Vulnerability | BerriAI | LiteLLM | 2026-05-08 | Unknown |
| CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | Ivanti | Endpoint Manager Mobile (EPMM) | 2026-05-07 | Unknown |
| CVE-2026-0300 | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | Palo Alto Networks | PAN-OS | 2026-05-06 | Unknown |
| CVE-2026-31431 | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | Linux | Kernel | 2026-05-01 | Unknown |
| CVE-2026-41940 | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability | WebPros | cPanel & WHM and WP2 (WordPress Squared) | 2026-04-30 | Known |
| CVE-2024-1708 | ConnectWise ScreenConnect Path Traversal Vulnerability | ConnectWise | ScreenConnect | 2026-04-28 | Known |
| CVE-2026-32202 | Microsoft Windows Protection Mechanism Failure Vulnerability | Microsoft | Windows | 2026-04-28 | Unknown |
| CVE-2024-57726 | SimpleHelp Missing Authorization Vulnerability | SimpleHelp | SimpleHelp | 2026-04-24 | Known |
| CVE-2024-57728 | SimpleHelp Path Traversal Vulnerability | SimpleHelp | SimpleHelp | 2026-04-24 | Known |
| CVE-2024-7399 | Samsung MagicINFO 9 Server Path Traversal Vulnerability | Samsung | MagicINFO 9 Server | 2026-04-24 | Unknown |
| CVE-2025-29635 | D-Link DIR-823X Command Injection Vulnerability | D-Link | DIR-823X | 2026-04-24 | Unknown |
| CVE-2026-39987 | Marimo Remote Code Execution Vulnerability | Marimo | Marimo | 2026-04-23 | Unknown |
| CVE-2026-33825 | Microsoft Defender Insufficient Granularity of Access Control Vulnerability | Microsoft | Defender | 2026-04-22 | Known |
| CVE-2023-27351 | PaperCut NG/MF Improper Authentication Vulnerability | PaperCut | NG/MF | 2026-04-20 | Known |
| CVE-2024-27199 | JetBrains TeamCity Relative Path Traversal Vulnerability | JetBrains | TeamCity | 2026-04-20 | Known |
| CVE-2025-2749 | Kentico Xperience Path Traversal Vulnerability | Kentico | Kentico Xperience | 2026-04-20 | Unknown |
| CVE-2025-32975 | Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability | Quest | KACE Systems Management Appliance (SMA) | 2026-04-20 | Unknown |
| CVE-2025-48700 | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2026-04-20 | Unknown |
| CVE-2026-20122 | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | Cisco | Catalyst SD-WAN Manger | 2026-04-20 | Unknown |
| CVE-2026-20128 | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | Cisco | Catalyst SD-WAN Manager | 2026-04-20 | Unknown |
| CVE-2026-20133 | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | Cisco | Catalyst SD-WAN Manager | 2026-04-20 | Unknown |
| CVE-2026-34197 | Apache ActiveMQ Improper Input Validation Vulnerability | Apache | ActiveMQ | 2026-04-16 | Unknown |
| CVE-2009-0238 | Microsoft Office Remote Code Execution | Microsoft | Office | 2026-04-14 | Unknown |
| CVE-2026-32201 | Microsoft SharePoint Server Improper Input Validation Vulnerability | Microsoft | SharePoint Server | 2026-04-14 | Unknown |
| CVE-2012-1854 | Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability | Microsoft | Visual Basic for Applications (VBA) | 2026-04-13 | Unknown |
| CVE-2020-9715 | Adobe Acrobat Use-After-Free Vulnerability | Adobe | Acrobat | 2026-04-13 | Unknown |
| CVE-2023-21529 | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability | Microsoft | Exchange Server | 2026-04-13 | Known |
| CVE-2023-36424 | Microsoft Windows Out-of-Bounds Read Vulnerability | Microsoft | Windows | 2026-04-13 | Unknown |
| CVE-2025-60710 | Microsoft Windows Link Following Vulnerability | Microsoft | Windows | 2026-04-13 | Known |
| CVE-2026-21643 | Fortinet FortiClient EMS SQL Injection Vulnerability | Fortinet | FortiClient EMS | 2026-04-13 | Unknown |
| CVE-2026-34621 | Adobe Acrobat and Reader Prototype Pollution Vulnerability | Adobe | Acrobat and Reader | 2026-04-13 | Unknown |
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Ivanti | Endpoint Manager Mobile (EPMM) | 2026-04-08 | Unknown |
| CVE-2026-35616 | Fortinet FortiClient EMS Improper Access Control Vulnerability | Fortinet | FortiClient EMS | 2026-04-06 | Unknown |
| CVE-2026-3502 | TrueConf Client Download of Code Without Integrity Check Vulnerability | TrueConf | Client | 2026-04-02 | Unknown |
| CVE-2026-5281 | Google Dawn Use-After-Free Vulnerability | Dawn | 2026-04-01 | Unknown | |
| CVE-2026-3055 | Citrix NetScaler Out-of-Bounds Read Vulnerability | Citrix | NetScaler | 2026-03-30 | Unknown |
| CVE-2025-53521 | F5 BIG-IP Stack-Based Buffer Overflow Vulnerability | F5 | BIG-IP | 2026-03-27 | Unknown |
| CVE-2026-33634 | Aquasecurity Trivy Embedded Malicious Code Vulnerability | Aquasecurity | Trivy | 2026-03-26 | Unknown |
| CVE-2026-33017 | Langflow Code Injection Vulnerability | Langflow | Langflow | 2026-03-25 | Unknown |
| CVE-2025-31277 | Apple Multiple Products Buffer Overflow Vulnerability | Apple | Multiple Products | 2026-03-20 | Unknown |
| CVE-2025-32432 | Craft CMS Code Injection Vulnerability | Craft CMS | Craft CMS | 2026-03-20 | Unknown |
| CVE-2025-43510 | Apple Multiple Products Improper Locking Vulnerability | Apple | Multiple Products | 2026-03-20 | Unknown |
| CVE-2025-43520 | Apple Multiple Products Classic Buffer Overflow Vulnerability | Apple | Multiple Products | 2026-03-20 | Unknown |
| CVE-2025-54068 | Laravel Livewire Code Injection Vulnerability | Laravel | Livewire | 2026-03-20 | Unknown |
| CVE-2026-20131 | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability | Cisco | Secure Firewall Management Center (FMC) | 2026-03-19 | Known |
| CVE-2025-66376 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2026-03-18 | Unknown |
| CVE-2026-20963 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Microsoft | SharePoint | 2026-03-18 | Unknown |
| CVE-2025-47813 | Wing FTP Server Information Disclosure Vulnerability | Wing FTP Server | Wing FTP Server | 2026-03-16 | Unknown |
| CVE-2026-3909 | Google Skia Out-of-Bounds Write Vulnerability | Skia | 2026-03-13 | Unknown | |
| CVE-2026-3910 | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | Chromium V8 | 2026-03-13 | Unknown | |
| CVE-2025-68613 | n8n Improper Control of Dynamically-Managed Code Resources Vulnerability | n8n | n8n | 2026-03-11 | Unknown |
| CVE-2021-22054 | Omnissa Workspace ONE Server-Side Request Forgery | Omnissa | Workspace One UEM | 2026-03-09 | Unknown |
| CVE-2025-26399 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | SolarWinds | Web Help Desk | 2026-03-09 | Known |
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | Ivanti | Endpoint Manager (EPM) | 2026-03-09 | Unknown |
| CVE-2017-7921 | Hikvision Multiple Products Improper Authentication Vulnerability | Hikvision | Multiple Products | 2026-03-05 | Unknown |
| CVE-2021-22681 | Rockwell Multiple Products Insufficient Protected Credentials Vulnerability | Rockwell | Multiple Products | 2026-03-05 | Unknown |
| CVE-2021-30952 | Apple Multiple Products Integer Overflow or Wraparound Vulnerability | Apple | Multiple Products | 2026-03-05 | Unknown |
| CVE-2023-41974 | Apple iOS and iPadOS Use-After-Free Vulnerability | Apple | iOS and iPadOS | 2026-03-05 | Unknown |
| CVE-2023-43000 | Apple Multiple products Use-After-Free Vulnerability | Apple | Multiple Products | 2026-03-05 | Unknown |
| CVE-2026-21385 | Qualcomm Multiple Chipsets Memory Corruption Vulnerability | Qualcomm | Multiple Chipsets | 2026-03-03 | Unknown |
| CVE-2026-22719 | Broadcom VMware Aria Operations Command Injection Vulnerability | Broadcom | VMware Aria Operations | 2026-03-03 | Unknown |
| CVE-2022-20775 | Cisco SD-WAN Path Traversal Vulnerability | Cisco | SD-WAN | 2026-02-25 | Unknown |
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | Cisco | Catalyst SD-WAN Controller and Manager | 2026-02-25 | Unknown |
| CVE-2026-25108 | Soliton Systems K.K FileZen OS Command Injection Vulnerability | Soliton Systems K.K | FileZen | 2026-02-24 | Unknown |
| CVE-2025-49113 | RoundCube Webmail Deserialization of Untrusted Data Vulnerability | Roundcube | Webmail | 2026-02-20 | Unknown |
| CVE-2025-68461 | RoundCube Webmail Cross-site Scripting Vulnerability | Roundcube | Webmail | 2026-02-20 | Unknown |
| CVE-2021-22175 | GitLab Server-Side Request Forgery (SSRF) Vulnerability | GitLab | GitLab | 2026-02-18 | Unknown |
| CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability | Dell | RecoverPoint for Virtual Machines (RP4VMs) | 2026-02-18 | Unknown |
| CVE-2008-0015 | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | Microsoft | Windows | 2026-02-17 | Unknown |
| CVE-2020-7796 | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability | Synacor | Zimbra Collaboration Suite | 2026-02-17 | Unknown |
| CVE-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability | TeamT5 | ThreatSonar Anti-Ransomware | 2026-02-17 | Unknown |
| CVE-2026-2441 | Google Chromium CSS Use-After-Free Vulnerability | Chromium | 2026-02-17 | Unknown | |
| CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability | BeyondTrust | Remote Support (RS) and Privileged Remote Access (PRA) | 2026-02-13 | Known |
| CVE-2024-43468 | Microsoft Configuration Manager SQL Injection Vulnerability | Microsoft | Configuration Manager | 2026-02-12 | Unknown |
| CVE-2025-15556 | Notepad++ Download of Code Without Integrity Check Vulnerability | Notepad++ | Notepad++ | 2026-02-12 | Unknown |
| CVE-2025-40536 | SolarWinds Web Help Desk Security Control Bypass Vulnerability | SolarWinds | Web Help Desk | 2026-02-12 | Unknown |
| CVE-2026-20700 | Apple Multiple Buffer Overflow Vulnerability | Apple | Multiple Products | 2026-02-12 | Unknown |
| CVE-2026-21510 | Microsoft Windows Shell Protection Mechanism Failure Vulnerability | Microsoft | Windows | 2026-02-10 | Unknown |
| CVE-2026-21513 | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | Microsoft | Windows | 2026-02-10 | Unknown |
| CVE-2026-21514 | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability | Microsoft | Office | 2026-02-10 | Unknown |
| CVE-2026-21519 | Microsoft Windows Type Confusion Vulnerability | Microsoft | Windows | 2026-02-10 | Unknown |
| CVE-2026-21525 | Microsoft Windows NULL Pointer Dereference Vulnerability | Microsoft | Windows | 2026-02-10 | Unknown |
| CVE-2026-21533 | Microsoft Windows Improper Privilege Management Vulnerability | Microsoft | Windows | 2026-02-10 | Unknown |
| CVE-2025-11953 | React Native Community CLI OS Command Injection Vulnerability | React Native Community | CLI | 2026-02-05 | Unknown |
| CVE-2026-24423 | SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability | SmarterTools | SmarterMail | 2026-02-05 | Known |
| CVE-2019-19006 | Sangoma FreePBX Improper Authentication Vulnerability | Sangoma | FreePBX | 2026-02-03 | Unknown |
| CVE-2021-39935 | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability | GitLab | Community and Enterprise Editions | 2026-02-03 | Unknown |
| CVE-2025-40551 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | SolarWinds | Web Help Desk | 2026-02-03 | Unknown |
| CVE-2025-64328 | Sangoma FreePBX OS Command Injection Vulnerability | Sangoma | FreePBX | 2026-02-03 | Unknown |
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Ivanti | Endpoint Manager Mobile (EPMM) | 2026-01-29 | Unknown |
| CVE-2026-24858 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | Fortinet | Multiple Products | 2026-01-27 | Unknown |
| CVE-2018-14634 | Linux Kernel Integer Overflow Vulnerability | Linux | Kernel | 2026-01-26 | Unknown |
| CVE-2025-52691 | SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability | SmarterTools | SmarterMail | 2026-01-26 | Known |
| CVE-2026-21509 | Microsoft Office Security Feature Bypass Vulnerability | Microsoft | Office | 2026-01-26 | Unknown |
| CVE-2026-23760 | SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability | SmarterTools | SmarterMail | 2026-01-26 | Known |
| CVE-2026-24061 | GNU InetUtils Argument Injection Vulnerability | GNU | InetUtils | 2026-01-26 | Unknown |
| CVE-2024-37079 | Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability | Broadcom | VMware vCenter Server | 2026-01-23 | Unknown |
| CVE-2025-31125 | Vite Vitejs Improper Access Control Vulnerability | Vite | Vitejs | 2026-01-22 | Unknown |
| CVE-2025-34026 | Versa Concerto Improper Authentication Vulnerability | Versa | Concerto | 2026-01-22 | Unknown |
| CVE-2025-54313 | Prettier eslint-config-prettier Embedded Malicious Code Vulnerability | Prettier | eslint-config-prettier | 2026-01-22 | Unknown |
| CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2026-01-22 | Unknown |
| CVE-2026-20045 | Cisco Unified Communications Products Code Injection Vulnerability | Cisco | Unified Communications Manager | 2026-01-21 | Unknown |
| CVE-2026-20805 | Microsoft Windows Information Disclosure Vulnerability | Microsoft | Windows | 2026-01-13 | Unknown |
| CVE-2025-8110 | Gogs Path Traversal Vulnerability | Gogs | Gogs | 2026-01-12 | Unknown |
| CVE-2009-0556 | Microsoft Office PowerPoint Code Injection Vulnerability | Microsoft | Office | 2026-01-07 | Unknown |
| CVE-2025-37164 | Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability | Hewlett Packard Enterprise (HPE) | OneView | 2026-01-07 | Unknown |
| CVE-2025-14847 | MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability | MongoDB | MongoDB and MongoDB Server | 2025-12-29 | Unknown |
| CVE-2023-52163 | Digiever DS-2105 Pro Missing Authorization Vulnerability | Digiever | DS-2105 Pro | 2025-12-22 | Unknown |
| CVE-2025-14733 | WatchGuard Firebox Out of Bounds Write Vulnerability | WatchGuard | Firebox | 2025-12-19 | Known |
| CVE-2025-20393 | Cisco Multiple Products Improper Input Validation Vulnerability | Cisco | Multiple Products | 2025-12-17 | Unknown |
| CVE-2025-40602 | SonicWall SMA1000 Missing Authorization Vulnerability | SonicWall | SMA1000 appliance | 2025-12-17 | Unknown |
| CVE-2025-59374 | ASUS Live Update Embedded Malicious Code Vulnerability | ASUS | Live Update | 2025-12-17 | Unknown |
| CVE-2025-59718 | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability | Fortinet | Multiple Products | 2025-12-16 | Unknown |
| CVE-2025-14611 | Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability | Gladinet | CentreStack and Triofox | 2025-12-15 | Unknown |
| CVE-2025-43529 | Apple Multiple Products Use-After-Free WebKit Vulnerability | Apple | Multiple Products | 2025-12-15 | Unknown |
| CVE-2018-4063 | Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability | Sierra Wireless | AirLink ALEOS | 2025-12-12 | Unknown |
| CVE-2025-14174 | Google Chromium Out of Bounds Memory Access Vulnerability | Chromium | 2025-12-12 | Unknown | |
| CVE-2025-58360 | OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability | OSGeo | GeoServer | 2025-12-11 | Unknown |
| CVE-2025-6218 | RARLAB WinRAR Path Traversal Vulnerability | RARLAB | WinRAR | 2025-12-09 | Unknown |
| CVE-2025-62221 | Microsoft Windows Use After Free Vulnerability | Microsoft | Windows | 2025-12-09 | Unknown |
| CVE-2022-37055 | D-Link Routers Buffer Overflow Vulnerability | D-Link | Routers | 2025-12-08 | Unknown |
| CVE-2025-66644 | Array Networks ArrayOS AG OS Command Injection Vulnerability | Array Networks | ArrayOS AG | 2025-12-08 | Unknown |
| CVE-2025-55182 | Meta React Server Components Remote Code Execution Vulnerability | Meta | React Server Components | 2025-12-05 | Known |
| CVE-2021-26828 | OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability | OpenPLC | ScadaBR | 2025-12-03 | Unknown |
| CVE-2025-48572 | Android Framework Privilege Escalation Vulnerability | Android | Framework | 2025-12-02 | Unknown |
| CVE-2025-48633 | Android Framework Information Disclosure Vulnerability | Android | Framework | 2025-12-02 | Unknown |
| CVE-2021-26829 | OpenPLC ScadaBR Cross-site Scripting Vulnerability | OpenPLC | ScadaBR | 2025-11-28 | Unknown |
| CVE-2025-61757 | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | Oracle | Fusion Middleware | 2025-11-21 | Unknown |
| CVE-2025-13223 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2025-11-19 | Unknown | |
| CVE-2025-58034 | Fortinet FortiWeb OS Command Injection Vulnerability | Fortinet | FortiWeb | 2025-11-18 | Unknown |
| CVE-2025-64446 | Fortinet FortiWeb Path Traversal Vulnerability | Fortinet | FortiWeb | 2025-11-14 | Unknown |
| CVE-2025-12480 | Gladinet Triofox Improper Access Control Vulnerability | Gladinet | Triofox | 2025-11-12 | Unknown |
| CVE-2025-62215 | Microsoft Windows Race Condition Vulnerability | Microsoft | Windows | 2025-11-12 | Unknown |
| CVE-2025-9242 | WatchGuard Firebox Out-of-Bounds Write Vulnerability | WatchGuard | Firebox | 2025-11-12 | Unknown |
| CVE-2025-21042 | Samsung Mobile Devices Out-of-Bounds Write Vulnerability | Samsung | Mobile Devices | 2025-11-10 | Unknown |
| CVE-2025-11371 | Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability | Gladinet | CentreStack and Triofox | 2025-11-04 | Unknown |
| CVE-2025-48703 | CWP Control Web Panel OS Command Injection Vulnerability | CWP | Control Web Panel | 2025-11-04 | Unknown |
| CVE-2025-24893 | XWiki Platform Eval Injection Vulnerability | XWiki | Platform | 2025-10-30 | Unknown |
| CVE-2025-41244 | Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability | Broadcom | VMware Aria Operations and VMware Tools | 2025-10-30 | Unknown |
| CVE-2025-6204 | Dassault Systèmes DELMIA Apriso Code Injection Vulnerability | Dassault Systèmes | DELMIA Apriso | 2025-10-28 | Unknown |
| CVE-2025-6205 | Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability | Dassault Systèmes | DELMIA Apriso | 2025-10-28 | Unknown |
| CVE-2025-54236 | Adobe Commerce and Magento Improper Input Validation Vulnerability | Adobe | Commerce and Magento | 2025-10-24 | Unknown |
| CVE-2025-59287 | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | Microsoft | Windows | 2025-10-24 | Unknown |
| CVE-2025-61932 | Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability | Motex | LANSCOPE Endpoint Manager | 2025-10-22 | Unknown |
| CVE-2022-48503 | Apple Multiple Products Unspecified Vulnerability | Apple | Multiple Products | 2025-10-20 | Unknown |
| CVE-2025-2746 | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | Kentico | Xperience CMS | 2025-10-20 | Unknown |
| CVE-2025-2747 | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | Kentico | Xperience CMS | 2025-10-20 | Unknown |
| CVE-2025-33073 | Microsoft Windows SMB Client Improper Access Control Vulnerability | Microsoft | Windows | 2025-10-20 | Unknown |
| CVE-2025-61884 | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability | Oracle | E-Business Suite | 2025-10-20 | Known |
| CVE-2025-54253 | Adobe Experience Manager Forms Code Execution Vulnerability | Adobe | Experience Manager (AEM) Forms | 2025-10-15 | Unknown |
| CVE-2016-7836 | SKYSEA Client View Improper Authentication Vulnerability | SKYSEA | Client View | 2025-10-14 | Unknown |
| CVE-2025-24990 | Microsoft Windows Untrusted Pointer Dereference Vulnerability | Microsoft | Windows | 2025-10-14 | Unknown |
| CVE-2025-47827 | IGEL OS Use of a Key Past its Expiration Date Vulnerability | IGEL | IGEL OS | 2025-10-14 | Unknown |
| CVE-2025-59230 | Microsoft Windows Improper Access Control Vulnerability | Microsoft | Windows | 2025-10-14 | Unknown |
| CVE-2021-43798 | Grafana Path Traversal Vulnerability | Grafana Labs | Grafana | 2025-10-09 | Unknown |
| CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2025-10-07 | Unknown |
| CVE-2010-3765 | Mozilla Multiple Products Remote Code Execution Vulnerability | Mozilla | Multiple Products | 2025-10-06 | Unknown |
| CVE-2010-3962 | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | Microsoft | Internet Explorer | 2025-10-06 | Unknown |
| CVE-2011-3402 | Microsoft Windows Remote Code Execution Vulnerability | Microsoft | Windows | 2025-10-06 | Unknown |
| CVE-2013-3918 | Microsoft Windows Out-of-Bounds Write Vulnerability | Microsoft | Windows | 2025-10-06 | Unknown |
| CVE-2021-22555 | Linux Kernel Heap Out-of-Bounds Write Vulnerability | Linux | Kernel | 2025-10-06 | Unknown |
| CVE-2021-43226 | Microsoft Windows Privilege Escalation Vulnerability | Microsoft | Windows | 2025-10-06 | Known |
| CVE-2025-61882 | Oracle E-Business Suite Unspecified Vulnerability | Oracle | E-Business Suite | 2025-10-06 | Known |
| CVE-2014-6278 | GNU Bash OS Command Injection Vulnerability | GNU | GNU Bash | 2025-10-02 | Unknown |
| CVE-2015-7755 | Juniper ScreenOS Improper Authentication Vulnerability | Juniper | ScreenOS | 2025-10-02 | Unknown |
| CVE-2017-1000353 | Jenkins Remote Code Execution Vulnerability | Jenkins | Jenkins | 2025-10-02 | Unknown |
| CVE-2025-21043 | Samsung Mobile Devices Out-of-Bounds Write Vulnerability | Samsung | Mobile Devices | 2025-10-02 | Unknown |
| CVE-2025-4008 | Smartbedded Meteobridge Command Injection Vulnerability | Smartbedded | Meteobridge | 2025-10-02 | Unknown |
| CVE-2021-21311 | Adminer Server-Side Request Forgery Vulnerability | Adminer | Adminer | 2025-09-29 | Unknown |
| CVE-2025-10035 | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability | Fortra | GoAnywhere MFT | 2025-09-29 | Known |
| CVE-2025-20352 | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | Cisco | IOS and IOS XE | 2025-09-29 | Unknown |
| CVE-2025-32463 | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability | Sudo | Sudo | 2025-09-29 | Unknown |
| CVE-2025-59689 | Libraesva Email Security Gateway Command Injection Vulnerability | Libraesva | Email Security Gateway | 2025-09-29 | Unknown |
| CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | Cisco | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | Unknown |
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | Cisco | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | Unknown |
| CVE-2025-10585 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2025-09-23 | Unknown | |
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability | Dassault Systèmes | DELMIA Apriso | 2025-09-11 | Unknown |
| CVE-2025-38352 | Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability | Linux | Kernel | 2025-09-04 | Unknown |
| CVE-2025-48543 | Android Runtime Use-After-Free Vulnerability | Android | Runtime | 2025-09-04 | Unknown |
| CVE-2025-53690 | Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability | Sitecore | Multiple Products | 2025-09-04 | Unknown |
| CVE-2023-50224 | TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability | TP-Link | TL-WR841N | 2025-09-03 | Unknown |
| CVE-2025-9377 | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability | TP-Link | Multiple Routers | 2025-09-03 | Unknown |
| CVE-2020-24363 | TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability | TP-Link | TL-WA855RE | 2025-09-02 | Unknown |
| CVE-2025-55177 | Meta Platforms WhatsApp Incorrect Authorization Vulnerability | Meta Platforms | 2025-09-02 | Unknown | |
| CVE-2025-57819 | Sangoma FreePBX Authentication Bypass Vulnerability | Sangoma | FreePBX | 2025-08-29 | Unknown |
| CVE-2025-7775 | Citrix NetScaler Memory Overflow Vulnerability | Citrix | NetScaler | 2025-08-26 | Unknown |
| CVE-2024-8068 | Citrix Session Recording Improper Privilege Management Vulnerability | Citrix | Session Recording | 2025-08-25 | Unknown |
| CVE-2024-8069 | Citrix Session Recording Deserialization of Untrusted Data Vulnerability | Citrix | Session Recording | 2025-08-25 | Unknown |
| CVE-2025-48384 | Git Link Following Vulnerability | Git | Git | 2025-08-25 | Unknown |
| CVE-2025-43300 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | Apple | iOS, iPadOS, and macOS | 2025-08-21 | Unknown |
| CVE-2025-54948 | Trend Micro Apex One OS Command Injection Vulnerability | Trend Micro | Apex One | 2025-08-18 | Unknown |
| CVE-2025-8875 | N-able N-Central Insecure Deserialization Vulnerability | N-able | N-Central | 2025-08-13 | Unknown |
| CVE-2025-8876 | N-able N-Central Command Injection Vulnerability | N-able | N-Central | 2025-08-13 | Unknown |
| CVE-2007-0671 | Microsoft Office Excel Remote Code Execution Vulnerability | Microsoft | Office | 2025-08-12 | Unknown |
| CVE-2013-3893 | Microsoft Internet Explorer Resource Management Errors Vulnerability | Microsoft | Internet Explorer | 2025-08-12 | Unknown |
| CVE-2025-8088 | RARLAB WinRAR Path Traversal Vulnerability | RARLAB | WinRAR | 2025-08-12 | Known |
| CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | D-Link | DCS-2530L and DCS-2670L Devices | 2025-08-05 | Unknown |
| CVE-2020-25079 | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability | D-Link | DCS-2530L and DCS-2670L Devices | 2025-08-05 | Unknown |
| CVE-2022-40799 | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | D-Link | DNR-322L | 2025-08-05 | Unknown |
| CVE-2023-2533 | PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability | PaperCut | NG/MF | 2025-07-28 | Unknown |
| CVE-2025-20281 | Cisco Identity Services Engine Injection Vulnerability | Cisco | Identity Services Engine | 2025-07-28 | Unknown |
| CVE-2025-20337 | Cisco Identity Services Engine Injection Vulnerability | Cisco | Identity Services Engine | 2025-07-28 | Unknown |
| CVE-2025-2775 | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | SysAid | SysAid On-Prem | 2025-07-22 | Unknown |
| CVE-2025-2776 | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | SysAid | SysAid On-Prem | 2025-07-22 | Unknown |
| CVE-2025-49704 | Microsoft SharePoint Code Injection Vulnerability | Microsoft | SharePoint | 2025-07-22 | Known |
| CVE-2025-49706 | Microsoft SharePoint Improper Authentication Vulnerability | Microsoft | SharePoint | 2025-07-22 | Known |
| CVE-2025-54309 | CrushFTP Unprotected Alternate Channel Vulnerability | CrushFTP | CrushFTP | 2025-07-22 | Unknown |
| CVE-2025-6558 | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability | Chromium | 2025-07-22 | Unknown | |
| CVE-2025-53770 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Microsoft | SharePoint | 2025-07-20 | Known |
| CVE-2025-25257 | Fortinet FortiWeb SQL Injection Vulnerability | Fortinet | FortiWeb | 2025-07-18 | Unknown |
| CVE-2025-47812 | Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability | Wing FTP Server | Wing FTP Server | 2025-07-14 | Unknown |
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability | Citrix | NetScaler ADC and Gateway | 2025-07-10 | Known |
| CVE-2014-3931 | Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability | Looking Glass | Multi-Router Looking Glass (MRLG) | 2025-07-07 | Unknown |
| CVE-2016-10033 | PHPMailer Command Injection Vulnerability | PHP | PHPMailer | 2025-07-07 | Unknown |
| CVE-2019-5418 | Rails Ruby on Rails Path Traversal Vulnerability | Rails | Ruby on Rails | 2025-07-07 | Unknown |
| CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2025-07-07 | Unknown |
| CVE-2025-6554 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2025-07-02 | Unknown | |
| CVE-2025-48927 | TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability | TeleMessage | TM SGNL | 2025-07-01 | Unknown |
| CVE-2025-48928 | TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability | TeleMessage | TM SGNL | 2025-07-01 | Unknown |
| CVE-2025-6543 | Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability | Citrix | NetScaler ADC and Gateway | 2025-06-30 | Unknown |
| CVE-2019-6693 | Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability | Fortinet | FortiOS | 2025-06-25 | Known |
| CVE-2024-0769 | D-Link DIR-859 Router Path Traversal Vulnerability | D-Link | DIR-859 Router | 2025-06-25 | Unknown |
| CVE-2024-54085 | AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability | AMI | MegaRAC SPx | 2025-06-25 | Unknown |
| CVE-2023-0386 | Linux Kernel Improper Ownership Management Vulnerability | Linux | Kernel | 2025-06-17 | Unknown |
| CVE-2023-33538 | TP-Link Multiple Routers Command Injection Vulnerability | TP-Link | Multiple Routers | 2025-06-16 | Unknown |
| CVE-2025-43200 | Apple Multiple Products Unspecified Vulnerability | Apple | Multiple Products | 2025-06-16 | Unknown |
| CVE-2025-24016 | Wazuh Server Deserialization of Untrusted Data Vulnerability | Wazuh | Wazuh Server | 2025-06-10 | Unknown |
| CVE-2025-33053 | Microsoft Windows External Control of File Name or Path Vulnerability | Microsoft | Windows | 2025-06-10 | Unknown |
| CVE-2024-42009 | RoundCube Webmail Cross-Site Scripting Vulnerability | Roundcube | Webmail | 2025-06-09 | Unknown |
| CVE-2025-32433 | Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability | Erlang | Erlang/OTP | 2025-06-09 | Unknown |
| CVE-2025-5419 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | Chromium V8 | 2025-06-05 | Unknown | |
| CVE-2025-21479 | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | Qualcomm | Multiple Chipsets | 2025-06-03 | Unknown |
| CVE-2025-21480 | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | Qualcomm | Multiple Chipsets | 2025-06-03 | Unknown |
| CVE-2025-27038 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | Qualcomm | Multiple Chipsets | 2025-06-03 | Unknown |
| CVE-2021-32030 | ASUS Routers Improper Authentication Vulnerability | ASUS | Routers | 2025-06-02 | Unknown |
| CVE-2023-39780 | ASUS RT-AX55 Routers OS Command Injection Vulnerability | ASUS | RT-AX55 Routers | 2025-06-02 | Unknown |
| CVE-2024-56145 | Craft CMS Code Injection Vulnerability | Craft CMS | Craft CMS | 2025-06-02 | Unknown |
| CVE-2025-35939 | Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability | Craft CMS | Craft CMS | 2025-06-02 | Unknown |
| CVE-2025-3935 | ConnectWise ScreenConnect Improper Authentication Vulnerability | ConnectWise | ScreenConnect | 2025-06-02 | Unknown |
| CVE-2025-4632 | Samsung MagicINFO 9 Server Path Traversal Vulnerability | Samsung | MagicINFO 9 Server | 2025-05-22 | Unknown |
| CVE-2023-38950 | ZKTeco BioTime Path Traversal Vulnerability | ZKTeco | BioTime | 2025-05-19 | Unknown |
| CVE-2024-11182 | MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability | MDaemon | Email Server | 2025-05-19 | Unknown |
| CVE-2024-27443 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2025-05-19 | Unknown |
| CVE-2025-27920 | Srimax Output Messenger Directory Traversal Vulnerability | Srimax | Output Messenger | 2025-05-19 | Unknown |
| CVE-2025-4427 | Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability | Ivanti | Endpoint Manager Mobile (EPMM) | 2025-05-19 | Unknown |
| CVE-2025-4428 | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Ivanti | Endpoint Manager Mobile (EPMM) | 2025-05-19 | Unknown |
| CVE-2024-12987 | DrayTek Vigor Routers OS Command Injection Vulnerability | DrayTek | Vigor Routers | 2025-05-15 | Unknown |
| CVE-2025-42999 | SAP NetWeaver Deserialization Vulnerability | SAP | NetWeaver | 2025-05-15 | Known |
| CVE-2025-32756 | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability | Fortinet | Multiple Products | 2025-05-14 | Unknown |
| CVE-2025-30397 | Microsoft Windows Scripting Engine Type Confusion Vulnerability | Microsoft | Windows | 2025-05-13 | Unknown |
| CVE-2025-30400 | Microsoft Windows DWM Core Library Use-After-Free Vulnerability | Microsoft | Windows | 2025-05-13 | Unknown |
| CVE-2025-32701 | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | Microsoft | Windows | 2025-05-13 | Unknown |
| CVE-2025-32706 | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | Microsoft | Windows | 2025-05-13 | Unknown |
| CVE-2025-32709 | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | Microsoft | Windows | 2025-05-13 | Unknown |
| CVE-2025-47729 | TeleMessage TM SGNL Hidden Functionality Vulnerability | TeleMessage | TM SGNL | 2025-05-12 | Unknown |
| CVE-2024-11120 | GeoVision Devices OS Command Injection Vulnerability | GeoVision | Multiple Devices | 2025-05-07 | Unknown |
| CVE-2024-6047 | GeoVision Devices OS Command Injection Vulnerability | GeoVision | Multiple Devices | 2025-05-07 | Unknown |
| CVE-2025-27363 | FreeType Out-of-Bounds Write Vulnerability | FreeType | FreeType | 2025-05-06 | Unknown |
| CVE-2025-3248 | Langflow Missing Authentication Vulnerability | Langflow | Langflow | 2025-05-05 | Known |
| CVE-2024-58136 | Yiiframework Yii Improper Protection of Alternate Path Vulnerability | Yiiframework | Yii | 2025-05-02 | Unknown |
| CVE-2025-34028 | Commvault Command Center Path Traversal Vulnerability | Commvault | Command Center | 2025-05-02 | Unknown |
| CVE-2023-44221 | SonicWall SMA100 Appliances OS Command Injection Vulnerability | SonicWall | SMA100 Appliances | 2025-05-01 | Unknown |
| CVE-2024-38475 | Apache HTTP Server Improper Escaping of Output Vulnerability | Apache | HTTP Server | 2025-05-01 | Unknown |
| CVE-2025-31324 | SAP NetWeaver Unrestricted File Upload Vulnerability | SAP | NetWeaver | 2025-04-29 | Known |
| CVE-2025-1976 | Broadcom Brocade Fabric OS Code Injection Vulnerability | Broadcom | Brocade Fabric OS | 2025-04-28 | Unknown |
| CVE-2025-3928 | Commvault Web Server Unspecified Vulnerability | Commvault | Web Server | 2025-04-28 | Unknown |
| CVE-2025-42599 | Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability | Qualitia | Active! Mail | 2025-04-28 | Unknown |
| CVE-2025-24054 | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability | Microsoft | Windows | 2025-04-17 | Unknown |
| CVE-2025-31200 | Apple Multiple Products Memory Corruption Vulnerability | Apple | Multiple Products | 2025-04-17 | Unknown |
| CVE-2025-31201 | Apple Multiple Products Arbitrary Read and Write Vulnerability | Apple | Multiple Products | 2025-04-17 | Unknown |
| CVE-2021-20035 | SonicWall SMA100 Appliances OS Command Injection Vulnerability | SonicWall | SMA100 Appliances | 2025-04-16 | Unknown |
| CVE-2024-53150 | Linux Kernel Out-of-Bounds Read Vulnerability | Linux | Kernel | 2025-04-09 | Unknown |
| CVE-2024-53197 | Linux Kernel Out-of-Bounds Access Vulnerability | Linux | Kernel | 2025-04-09 | Unknown |
| CVE-2025-29824 | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | Microsoft | Windows | 2025-04-08 | Known |
| CVE-2025-30406 | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability | Gladinet | CentreStack | 2025-04-08 | Unknown |
| CVE-2025-31161 | CrushFTP Authentication Bypass Vulnerability | CrushFTP | CrushFTP | 2025-04-07 | Known |
| CVE-2025-22457 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | Ivanti | Connect Secure, Policy Secure, and ZTA Gateways | 2025-04-04 | Known |
| CVE-2025-24813 | Apache Tomcat Path Equivalence Vulnerability | Apache | Tomcat | 2025-04-01 | Unknown |
| CVE-2024-20439 | Cisco Smart Licensing Utility Static Credential Vulnerability | Cisco | Smart Licensing Utility | 2025-03-31 | Unknown |
| CVE-2025-2783 | Google Chromium Mojo Sandbox Escape Vulnerability | Chromium Mojo | 2025-03-27 | Unknown | |
| CVE-2019-9874 | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | Sitecore | CMS and Experience Platform (XP) | 2025-03-26 | Unknown |
| CVE-2019-9875 | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | Sitecore | CMS and Experience Platform (XP) | 2025-03-26 | Unknown |
| CVE-2025-30154 | reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability | reviewdog | action-setup GitHub Action | 2025-03-24 | Unknown |
| CVE-2017-12637 | SAP NetWeaver Directory Traversal Vulnerability | SAP | NetWeaver | 2025-03-19 | Unknown |
| CVE-2024-48248 | NAKIVO Backup and Replication Absolute Path Traversal Vulnerability | NAKIVO | Backup and Replication | 2025-03-19 | Unknown |
| CVE-2025-1316 | Edimax IC-7100 IP Camera OS Command Injection Vulnerability | Edimax | IC-7100 IP Camera | 2025-03-19 | Unknown |
| CVE-2025-24472 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | Fortinet | FortiOS and FortiProxy | 2025-03-18 | Known |
| CVE-2025-30066 | tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability | tj-actions | changed-files GitHub Action | 2025-03-18 | Unknown |
| CVE-2025-21590 | Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability | Juniper | Junos OS | 2025-03-13 | Unknown |
| CVE-2025-24201 | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability | Apple | Multiple Products | 2025-03-13 | Unknown |
| CVE-2025-24983 | Microsoft Windows Win32k Use-After-Free Vulnerability | Microsoft | Windows | 2025-03-11 | Unknown |
| CVE-2025-24984 | Microsoft Windows NTFS Information Disclosure Vulnerability | Microsoft | Windows | 2025-03-11 | Unknown |
| CVE-2025-24985 | Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability | Microsoft | Windows | 2025-03-11 | Unknown |
| CVE-2025-24991 | Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability | Microsoft | Windows | 2025-03-11 | Unknown |
| CVE-2025-24993 | Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability | Microsoft | Windows | 2025-03-11 | Unknown |
| CVE-2025-26633 | Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability | Microsoft | Windows | 2025-03-11 | Known |
| CVE-2024-13159 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Ivanti | Endpoint Manager (EPM) | 2025-03-10 | Unknown |
| CVE-2024-13160 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Ivanti | Endpoint Manager (EPM) | 2025-03-10 | Unknown |
| CVE-2024-13161 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Ivanti | Endpoint Manager (EPM) | 2025-03-10 | Unknown |
| CVE-2024-57968 | Advantive VeraCore Unrestricted File Upload Vulnerability | Advantive | VeraCore | 2025-03-10 | Unknown |
| CVE-2025-25181 | Advantive VeraCore SQL Injection Vulnerability | Advantive | VeraCore | 2025-03-10 | Unknown |
| CVE-2024-50302 | Linux Kernel Use of Uninitialized Resource Vulnerability | Linux | Kernel | 2025-03-04 | Unknown |
| CVE-2025-22224 | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability | VMware | ESXi and Workstation | 2025-03-04 | Unknown |
| CVE-2025-22225 | VMware ESXi Arbitrary Write Vulnerability | VMware | ESXi | 2025-03-04 | Known |
| CVE-2025-22226 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability | VMware | ESXi, Workstation, and Fusion | 2025-03-04 | Unknown |
| CVE-2018-8639 | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability | Microsoft | Windows | 2025-03-03 | Known |
| CVE-2022-43769 | Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability | Hitachi Vantara | Pentaho Business Analytics (BA) Server | 2025-03-03 | Unknown |
| CVE-2022-43939 | Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability | Hitachi Vantara | Pentaho Business Analytics (BA) Server | 2025-03-03 | Unknown |
| CVE-2023-20118 | Cisco Small Business RV Series Routers Command Injection Vulnerability | Cisco | Small Business RV Series Routers | 2025-03-03 | Unknown |
| CVE-2024-4885 | Progress WhatsUp Gold Path Traversal Vulnerability | Progress | WhatsUp Gold | 2025-03-03 | Unknown |
| CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2025-02-25 | Unknown |
| CVE-2024-49035 | Microsoft Partner Center Improper Access Control Vulnerability | Microsoft | Partner Center | 2025-02-25 | Unknown |
| CVE-2017-3066 | Adobe ColdFusion Deserialization Vulnerability | Adobe | ColdFusion | 2025-02-24 | Unknown |
| CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | Oracle | Agile Product Lifecycle Management (PLM) | 2025-02-24 | Unknown |
| CVE-2025-24989 | Microsoft Power Pages Improper Access Control Vulnerability | Microsoft | Power Pages | 2025-02-21 | Unknown |
| CVE-2025-0111 | Palo Alto Networks PAN-OS File Read Vulnerability | Palo Alto Networks | PAN-OS | 2025-02-20 | Unknown |
| CVE-2025-23209 | Craft CMS Code Injection Vulnerability | Craft CMS | Craft CMS | 2025-02-20 | Unknown |
| CVE-2024-53704 | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | SonicWall | SonicOS | 2025-02-18 | Known |
| CVE-2025-0108 | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | Palo Alto Networks | PAN-OS | 2025-02-18 | Unknown |
| CVE-2024-57727 | SimpleHelp Path Traversal Vulnerability | SimpleHelp | SimpleHelp | 2025-02-13 | Known |
| CVE-2024-41710 | Mitel SIP Phones Argument Injection Vulnerability | Mitel | SIP Phones | 2025-02-12 | Unknown |
| CVE-2025-24200 | Apple iOS and iPadOS Incorrect Authorization Vulnerability | Apple | iOS and iPadOS | 2025-02-12 | Unknown |
| CVE-2024-40890 | Zyxel DSL CPE OS Command Injection Vulnerability | Zyxel | DSL CPE Devices | 2025-02-11 | Unknown |
| CVE-2024-40891 | Zyxel DSL CPE OS Command Injection Vulnerability | Zyxel | DSL CPE Devices | 2025-02-11 | Unknown |
| CVE-2025-21391 | Microsoft Windows Storage Link Following Vulnerability | Microsoft | Windows | 2025-02-11 | Unknown |
| CVE-2025-21418 | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability | Microsoft | Windows | 2025-02-11 | Unknown |
| CVE-2025-0994 | Trimble Cityworks Deserialization Vulnerability | Trimble | Cityworks | 2025-02-07 | Unknown |
| CVE-2020-15069 | Sophos XG Firewall Buffer Overflow Vulnerability | Sophos | XG Firewall | 2025-02-06 | Unknown |
| CVE-2020-29574 | CyberoamOS (CROS) SQL Injection Vulnerability | Sophos | CyberoamOS | 2025-02-06 | Known |
| CVE-2022-23748 | Dante Discovery Process Control Vulnerability | Audinate | Dante Discovery | 2025-02-06 | Unknown |
| CVE-2024-21413 | Microsoft Outlook Improper Input Validation Vulnerability | Microsoft | Office Outlook | 2025-02-06 | Unknown |
| CVE-2025-0411 | 7-Zip Mark of the Web Bypass Vulnerability | 7-Zip | 7-Zip | 2025-02-06 | Unknown |
| CVE-2024-53104 | Linux Kernel Out-of-Bounds Write Vulnerability | Linux | Kernel | 2025-02-05 | Unknown |
| CVE-2018-19410 | Paessler PRTG Network Monitor Local File Inclusion Vulnerability | Paessler | PRTG Network Monitor | 2025-02-04 | Unknown |
| CVE-2018-9276 | Paessler PRTG Network Monitor OS Command Injection Vulnerability | Paessler | PRTG Network Monitor | 2025-02-04 | Unknown |
| CVE-2024-29059 | Microsoft .NET Framework Information Disclosure Vulnerability | Microsoft | .NET Framework | 2025-02-04 | Unknown |
| CVE-2024-45195 | Apache OFBiz Forced Browsing Vulnerability | Apache | OFBiz | 2025-02-04 | Unknown |
| CVE-2025-24085 | Apple Multiple Products Use-After-Free Vulnerability | Apple | Multiple Products | 2025-01-29 | Unknown |
| CVE-2025-23006 | SonicWall SMA1000 Appliances Deserialization Vulnerability | SonicWall | SMA1000 Appliances | 2025-01-24 | Known |
| CVE-2020-11023 | JQuery Cross-Site Scripting (XSS) Vulnerability | JQuery | JQuery | 2025-01-23 | Unknown |
| CVE-2024-50603 | Aviatrix Controllers OS Command Injection Vulnerability | Aviatrix | Controllers | 2025-01-16 | Unknown |
| CVE-2024-55591 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | Fortinet | FortiOS and FortiProxy | 2025-01-14 | Known |
| CVE-2025-21333 | Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability | Microsoft | Windows | 2025-01-14 | Unknown |
| CVE-2025-21334 | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | Microsoft | Windows | 2025-01-14 | Unknown |
| CVE-2025-21335 | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | Microsoft | Windows | 2025-01-14 | Unknown |
| CVE-2023-48365 | Qlik Sense HTTP Tunneling Vulnerability | Qlik | Sense | 2025-01-13 | Known |
| CVE-2024-12686 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability | BeyondTrust | Privileged Remote Access (PRA) and Remote Support (RS) | 2025-01-13 | Unknown |
| CVE-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | Ivanti | Connect Secure, Policy Secure, and ZTA Gateways | 2025-01-08 | Known |
| CVE-2020-2883 | Oracle WebLogic Server Unspecified Vulnerability | Oracle | WebLogic Server | 2025-01-07 | Unknown |
| CVE-2024-41713 | Mitel MiCollab Path Traversal Vulnerability | Mitel | MiCollab | 2025-01-07 | Known |
| CVE-2024-55550 | Mitel MiCollab Path Traversal Vulnerability | Mitel | MiCollab | 2025-01-07 | Known |
| CVE-2024-3393 | Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability | Palo Alto Networks | PAN-OS | 2024-12-30 | Unknown |
| CVE-2021-44207 | Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability | Acclaim Systems | USAHERDS | 2024-12-23 | Unknown |
| CVE-2024-12356 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability | BeyondTrust | Privileged Remote Access (PRA) and Remote Support (RS) | 2024-12-19 | Unknown |
| CVE-2018-14933 | NUUO NVRmini Devices OS Command Injection Vulnerability | NUUO | NVRmini Devices | 2024-12-18 | Unknown |
| CVE-2019-11001 | Reolink Multiple IP Cameras OS Command Injection Vulnerability | Reolink | Multiple IP Cameras | 2024-12-18 | Unknown |
| CVE-2021-40407 | Reolink RLC-410W IP Camera OS Command Injection Vulnerability | Reolink | RLC-410W IP Camera | 2024-12-18 | Unknown |
| CVE-2022-23227 | NUUO NVRmini2 Devices Missing Authentication Vulnerability | NUUO | NVRmini2 Devices | 2024-12-18 | Unknown |
| CVE-2024-55956 | Cleo Multiple Products Unauthenticated File Upload Vulnerability | Cleo | Multiple Products | 2024-12-17 | Known |
| CVE-2024-20767 | Adobe ColdFusion Improper Access Control Vulnerability | Adobe | ColdFusion | 2024-12-16 | Unknown |
| CVE-2024-35250 | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability | Microsoft | Windows | 2024-12-16 | Unknown |
| CVE-2024-50623 | Cleo Multiple Products Unrestricted File Upload Vulnerability | Cleo | Multiple Products | 2024-12-13 | Known |
| CVE-2024-49138 | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | Microsoft | Windows | 2024-12-10 | Unknown |
| CVE-2024-51378 | CyberPanel Incorrect Default Permissions Vulnerability | CyberPersons | CyberPanel | 2024-12-04 | Known |
| CVE-2023-45727 | North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability | North Grid | Proself | 2024-12-03 | Unknown |
| CVE-2024-11667 | Zyxel Multiple Firewalls Path Traversal Vulnerability | Zyxel | Multiple Firewalls | 2024-12-03 | Known |
| CVE-2024-11680 | ProjectSend Improper Authentication Vulnerability | ProjectSend | ProjectSend | 2024-12-03 | Unknown |
| CVE-2023-28461 | Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability | Array Networks | AG/vxAG ArrayOS | 2024-11-25 | Known |
| CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability | Oracle | Agile Product Lifecycle Management (PLM) | 2024-11-21 | Unknown |
| CVE-2024-44308 | Apple Multiple Products Code Execution Vulnerability | Apple | Multiple Products | 2024-11-21 | Unknown |
| CVE-2024-44309 | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability | Apple | Multiple Products | 2024-11-21 | Unknown |
| CVE-2024-38812 | VMware vCenter Server Heap-Based Buffer Overflow Vulnerability | VMware | vCenter Server | 2024-11-20 | Unknown |
| CVE-2024-38813 | VMware vCenter Server Privilege Escalation Vulnerability | VMware | vCenter Server | 2024-11-20 | Unknown |
| CVE-2024-0012 | Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability | Palo Alto Networks | PAN-OS | 2024-11-18 | Known |
| CVE-2024-1212 | Progress Kemp LoadMaster OS Command Injection Vulnerability | Progress | Kemp LoadMaster | 2024-11-18 | Unknown |
| CVE-2024-9474 | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | Palo Alto Networks | PAN-OS | 2024-11-18 | Known |
| CVE-2024-9463 | Palo Alto Networks Expedition OS Command Injection Vulnerability | Palo Alto Networks | Expedition | 2024-11-14 | Unknown |
| CVE-2024-9465 | Palo Alto Networks Expedition SQL Injection Vulnerability | Palo Alto Networks | Expedition | 2024-11-14 | Unknown |
| CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability | Cisco | Adaptive Security Appliance (ASA) | 2024-11-12 | Unknown |
| CVE-2021-26086 | Atlassian Jira Server and Data Center Path Traversal Vulnerability | Atlassian | Jira Server and Data Center | 2024-11-12 | Unknown |
| CVE-2021-41277 | Metabase GeoJSON API Local File Inclusion Vulnerability | Metabase | Metabase | 2024-11-12 | Unknown |
| CVE-2024-43451 | Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability | Microsoft | Windows | 2024-11-12 | Unknown |
| CVE-2024-49039 | Microsoft Windows Task Scheduler Privilege Escalation Vulnerability | Microsoft | Windows | 2024-11-12 | Known |
| CVE-2019-16278 | Nostromo nhttpd Directory Traversal Vulnerability | Nostromo | nhttpd | 2024-11-07 | Unknown |
| CVE-2024-43093 | Android Framework Privilege Escalation Vulnerability | Android | Framework | 2024-11-07 | Unknown |
| CVE-2024-51567 | CyberPanel Incorrect Default Permissions Vulnerability | CyberPersons | CyberPanel | 2024-11-07 | Known |
| CVE-2024-5910 | Palo Alto Networks Expedition Missing Authentication Vulnerability | Palo Alto Networks | Expedition | 2024-11-07 | Unknown |
| CVE-2024-8956 | PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability | PTZOptics | PT30X-SDI/NDI Cameras | 2024-11-04 | Unknown |
| CVE-2024-8957 | PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability | PTZOptics | PT30X-SDI/NDI Cameras | 2024-11-04 | Unknown |
| CVE-2024-20481 | Cisco ASA and FTD Denial-of-Service Vulnerability | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-10-24 | Unknown |
| CVE-2024-37383 | RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability | Roundcube | Webmail | 2024-10-24 | Unknown |
| CVE-2024-47575 | Fortinet FortiManager Missing Authentication Vulnerability | Fortinet | FortiManager | 2024-10-23 | Unknown |
| CVE-2024-38094 | Microsoft SharePoint Deserialization Vulnerability | Microsoft | SharePoint | 2024-10-22 | Known |
| CVE-2024-9537 | ScienceLogic SL1 Unspecified Vulnerability | ScienceLogic | SL1 | 2024-10-21 | Unknown |
| CVE-2024-40711 | Veeam Backup and Replication Deserialization Vulnerability | Veeam | Backup & Replication | 2024-10-17 | Known |
| CVE-2024-28987 | SolarWinds Web Help Desk Hardcoded Credential Vulnerability | SolarWinds | Web Help Desk | 2024-10-15 | Unknown |
| CVE-2024-30088 | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability | Microsoft | Windows | 2024-10-15 | Known |
| CVE-2024-9680 | Mozilla Firefox Use-After-Free Vulnerability | Mozilla | Firefox | 2024-10-15 | Known |
| CVE-2024-23113 | Fortinet Multiple Products Format String Vulnerability | Fortinet | Multiple Products | 2024-10-09 | Unknown |
| CVE-2024-9379 | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | Ivanti | Cloud Services Appliance (CSA) | 2024-10-09 | Unknown |
| CVE-2024-9380 | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | Ivanti | Cloud Services Appliance (CSA) | 2024-10-09 | Unknown |
| CVE-2024-43047 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | Qualcomm | Multiple Chipsets | 2024-10-08 | Unknown |
| CVE-2024-43572 | Microsoft Windows Management Console Remote Code Execution Vulnerability | Microsoft | Windows | 2024-10-08 | Unknown |
| CVE-2024-43573 | Microsoft Windows MSHTML Platform Spoofing Vulnerability | Microsoft | Windows | 2024-10-08 | Unknown |
| CVE-2024-45519 | Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2024-10-03 | Unknown |
| CVE-2024-29824 | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | Ivanti | Endpoint Manager (EPM) | 2024-10-02 | Unknown |
| CVE-2019-0344 | SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability | SAP | Commerce Cloud | 2024-09-30 | Unknown |
| CVE-2020-15415 | DrayTek Multiple Vigor Routers OS Command Injection Vulnerability | DrayTek | Multiple Vigor Routers | 2024-09-30 | Unknown |
| CVE-2023-25280 | D-Link DIR-820 Router OS Command Injection Vulnerability | D-Link | DIR-820 Router | 2024-09-30 | Unknown |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | Ivanti | Virtual Traffic Manager | 2024-09-24 | Unknown |
| CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | Ivanti | Cloud Services Appliance (CSA) | 2024-09-19 | Unknown |
| CVE-2020-0618 | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability | Microsoft | SQL Server | 2024-09-18 | Known |
| CVE-2020-14644 | Oracle WebLogic Server Remote Code Execution Vulnerability | Oracle | WebLogic Server | 2024-09-18 | Unknown |
| CVE-2022-21445 | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability | Oracle | ADF Faces | 2024-09-18 | Unknown |
| CVE-2024-27348 | Apache HugeGraph-Server Improper Access Control Vulnerability | Apache | HugeGraph-Server | 2024-09-18 | Unknown |
| CVE-2013-0643 | Adobe Flash Player Incorrect Default Permissions Vulnerability | Adobe | Flash Player | 2024-09-17 | Unknown |
| CVE-2013-0648 | Adobe Flash Player Code Execution Vulnerability | Adobe | Flash Player | 2024-09-17 | Unknown |
| CVE-2014-0497 | Adobe Flash Player Integer Underflow Vulnerablity | Adobe | Flash Player | 2024-09-17 | Unknown |
| CVE-2014-0502 | Adobe Flash Player Double Free Vulnerablity | Adobe | Flash Player | 2024-09-17 | Unknown |
| CVE-2024-43461 | Microsoft Windows MSHTML Platform Spoofing Vulnerability | Microsoft | Windows | 2024-09-16 | Unknown |
| CVE-2024-6670 | Progress WhatsUp Gold SQL Injection Vulnerability | Progress | WhatsUp Gold | 2024-09-16 | Known |
| CVE-2024-8190 | Ivanti Cloud Services Appliance OS Command Injection Vulnerability | Ivanti | Cloud Services Appliance | 2024-09-13 | Unknown |
| CVE-2024-38014 | Microsoft Windows Installer Improper Privilege Management Vulnerability | Microsoft | Windows | 2024-09-10 | Unknown |
| CVE-2024-38217 | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability | Microsoft | Windows | 2024-09-10 | Unknown |
| CVE-2024-38226 | Microsoft Publisher Protection Mechanism Failure Vulnerability | Microsoft | Publisher | 2024-09-10 | Unknown |
| CVE-2016-3714 | ImageMagick Improper Input Validation Vulnerability | ImageMagick | ImageMagick | 2024-09-09 | Unknown |
| CVE-2017-1000253 | Linux Kernel PIE Stack Buffer Corruption Vulnerability | Linux | Kernel | 2024-09-09 | Known |
| CVE-2024-40766 | SonicWall SonicOS Improper Access Control Vulnerability | SonicWall | SonicOS | 2024-09-09 | Known |
| CVE-2021-20123 | Draytek VigorConnect Path Traversal Vulnerability | DrayTek | VigorConnect | 2024-09-03 | Unknown |
| CVE-2021-20124 | Draytek VigorConnect Path Traversal Vulnerability | DrayTek | VigorConnect | 2024-09-03 | Unknown |
| CVE-2024-7262 | Kingsoft WPS Office Path Traversal Vulnerability | Kingsoft | WPS Office | 2024-09-03 | Unknown |
| CVE-2024-7965 | Google Chromium V8 Inappropriate Implementation Vulnerability | Chromium V8 | 2024-08-28 | Unknown | |
| CVE-2024-38856 | Apache OFBiz Incorrect Authorization Vulnerability | Apache | OFBiz | 2024-08-27 | Unknown |
| CVE-2024-7971 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2024-08-26 | Unknown | |
| CVE-2024-39717 | Versa Director Dangerous File Type Upload Vulnerability | Versa | Director | 2024-08-23 | Unknown |
| CVE-2021-31196 | Microsoft Exchange Server Information Disclosure Vulnerability | Microsoft | Exchange Server | 2024-08-21 | Unknown |
| CVE-2021-33044 | Dahua IP Camera Authentication Bypass Vulnerability | Dahua | IP Camera Firmware | 2024-08-21 | Unknown |
| CVE-2021-33045 | Dahua IP Camera Authentication Bypass Vulnerability | Dahua | IP Camera Firmware | 2024-08-21 | Unknown |
| CVE-2022-0185 | Linux Kernel Heap-Based Buffer Overflow Vulnerability | Linux | Kernel | 2024-08-21 | Unknown |
| CVE-2024-23897 | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability | Jenkins | Jenkins Command Line Interface (CLI) | 2024-08-19 | Known |
| CVE-2024-28986 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | SolarWinds | Web Help Desk | 2024-08-15 | Unknown |
| CVE-2024-38106 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Microsoft | Windows | 2024-08-13 | Unknown |
| CVE-2024-38107 | Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability | Microsoft | Windows | 2024-08-13 | Unknown |
| CVE-2024-38178 | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | Microsoft | Windows | 2024-08-13 | Unknown |
| CVE-2024-38189 | Microsoft Project Remote Code Execution Vulnerability | Microsoft | Project | 2024-08-13 | Unknown |
| CVE-2024-38193 | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability | Microsoft | Windows | 2024-08-13 | Unknown |
| CVE-2024-38213 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | Microsoft | Windows | 2024-08-13 | Unknown |
| CVE-2024-32113 | Apache OFBiz Path Traversal Vulnerability | Apache | OFBiz | 2024-08-07 | Unknown |
| CVE-2024-36971 | Android Kernel Remote Code Execution Vulnerability | Android | Kernel | 2024-08-07 | Unknown |
| CVE-2018-0824 | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability | Microsoft | Windows | 2024-08-05 | Unknown |
| CVE-2024-37085 | VMware ESXi Authentication Bypass Vulnerability | VMware | ESXi | 2024-07-30 | Known |
| CVE-2023-45249 | Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability | Acronis | Cyber Infrastructure (ACI) | 2024-07-29 | Unknown |
| CVE-2024-4879 | ServiceNow Improper Input Validation Vulnerability | ServiceNow | Utah, Vancouver, and Washington DC Now Platform | 2024-07-29 | Unknown |
| CVE-2024-5217 | ServiceNow Incomplete List of Disallowed Inputs Vulnerability | ServiceNow | Utah, Vancouver, and Washington DC Now Platform | 2024-07-29 | Unknown |
| CVE-2012-4792 | Microsoft Internet Explorer Use-After-Free Vulnerability | Microsoft | Internet Explorer | 2024-07-23 | Unknown |
| CVE-2024-39891 | Twilio Authy Information Disclosure Vulnerability | Twilio | Authy | 2024-07-23 | Unknown |
| CVE-2022-22948 | VMware vCenter Server Incorrect Default File Permissions Vulnerability | VMware | vCenter Server | 2024-07-17 | Unknown |
| CVE-2024-28995 | SolarWinds Serv-U Path Traversal Vulnerability | SolarWinds | Serv-U | 2024-07-17 | Unknown |
| CVE-2024-34102 | Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability | Adobe | Commerce and Magento Open Source | 2024-07-17 | Unknown |
| CVE-2024-36401 | OSGeo GeoServer GeoTools Eval Injection Vulnerability | OSGeo | GeoServer | 2024-07-15 | Unknown |
| CVE-2024-23692 | Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | Rejetto | HTTP File Server | 2024-07-09 | Known |
| CVE-2024-38080 | Microsoft Windows Hyper-V Privilege Escalation Vulnerability | Microsoft | Windows | 2024-07-09 | Unknown |
| CVE-2024-38112 | Microsoft Windows MSHTML Platform Spoofing Vulnerability | Microsoft | Windows | 2024-07-09 | Unknown |
| CVE-2024-20399 | Cisco NX-OS Command Injection Vulnerability | Cisco | NX-OS | 2024-07-02 | Unknown |
| CVE-2020-13965 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | Roundcube | Webmail | 2024-06-26 | Unknown |
| CVE-2022-24816 | OSGeo GeoServer JAI-EXT Code Injection Vulnerability | OSGeo | JAI-EXT | 2024-06-26 | Unknown |
| CVE-2022-2586 | Linux Kernel Use-After-Free Vulnerability | Linux | Kernel | 2024-06-26 | Unknown |
| CVE-2024-26169 | Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability | Microsoft | Windows | 2024-06-13 | Known |
| CVE-2024-32896 | Android Pixel Privilege Escalation Vulnerability | Android | Pixel | 2024-06-13 | Unknown |
| CVE-2024-4358 | Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability | Progress | Telerik Report Server | 2024-06-13 | Unknown |
| CVE-2024-4577 | PHP-CGI OS Command Injection Vulnerability | PHP Group | PHP | 2024-06-12 | Known |
| CVE-2024-4610 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | Arm | Mali GPU Kernel Driver | 2024-06-12 | Unknown |
| CVE-2017-3506 | Oracle WebLogic Server OS Command Injection Vulnerability | Oracle | WebLogic Server | 2024-06-03 | Unknown |
| CVE-2024-1086 | Linux Kernel Use-After-Free Vulnerability | Linux | Kernel | 2024-05-30 | Known |
| CVE-2024-24919 | Check Point Quantum Security Gateways Information Disclosure Vulnerability | Check Point | Quantum Security Gateways | 2024-05-30 | Known |
| CVE-2024-4978 | Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability | Justice AV Solutions | Viewer | 2024-05-29 | Unknown |
| CVE-2024-5274 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2024-05-28 | Unknown | |
| CVE-2020-17519 | Apache Flink Improper Access Control Vulnerability | Apache | Flink | 2024-05-23 | Unknown |
| CVE-2023-43208 | NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability | NextGen Healthcare | Mirth Connect | 2024-05-20 | Known |
| CVE-2024-4947 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2024-05-20 | Unknown | |
| CVE-2014-100005 | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | D-Link | DIR-600 Router | 2024-05-16 | Unknown |
| CVE-2021-40655 | D-Link DIR-605 Router Information Disclosure Vulnerability | D-Link | DIR-605 Router | 2024-05-16 | Unknown |
| CVE-2024-4761 | Google Chromium V8 Out-of-Bounds Memory Write Vulnerability | Chromium V8 | 2024-05-16 | Unknown | |
| CVE-2024-30040 | Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability | Microsoft | Windows | 2024-05-14 | Unknown |
| CVE-2024-30051 | Microsoft DWM Core Library Privilege Escalation Vulnerability | Microsoft | DWM Core Library | 2024-05-14 | Known |
| CVE-2024-4671 | Google Chromium Visuals Use-After-Free Vulnerability | Chromium | 2024-05-13 | Unknown | |
| CVE-2023-7028 | GitLab Community and Enterprise Editions Improper Access Control Vulnerability | GitLab | GitLab CE/EE | 2024-05-01 | Unknown |
| CVE-2024-29988 | Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability | Microsoft | SmartScreen Prompt | 2024-04-30 | Unknown |
| CVE-2024-20353 | Cisco ASA and FTD Denial of Service Vulnerability | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-04-24 | Unknown |
| CVE-2024-20359 | Cisco ASA and FTD Privilege Escalation Vulnerability | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-04-24 | Unknown |
| CVE-2024-4040 | CrushFTP VFS Sandbox Escape Vulnerability | CrushFTP | CrushFTP | 2024-04-24 | Unknown |
| CVE-2022-38028 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | Microsoft | Windows | 2024-04-23 | Unknown |
| CVE-2024-3400 | Palo Alto Networks PAN-OS Command Injection Vulnerability | Palo Alto Networks | PAN-OS | 2024-04-12 | Known |
| CVE-2024-3272 | D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability | D-Link | Multiple NAS Devices | 2024-04-11 | Unknown |
| CVE-2024-3273 | D-Link Multiple NAS Devices Command Injection Vulnerability | D-Link | Multiple NAS Devices | 2024-04-11 | Unknown |
| CVE-2024-29745 | Android Pixel Information Disclosure Vulnerability | Android | Pixel | 2024-04-04 | Unknown |
| CVE-2024-29748 | Android Pixel Privilege Escalation Vulnerability | Android | Pixel | 2024-04-04 | Unknown |
| CVE-2023-24955 | Microsoft SharePoint Server Code Injection Vulnerability | Microsoft | SharePoint Server | 2024-03-26 | Known |
| CVE-2019-7256 | Nice Linear eMerge E3-Series OS Command Injection Vulnerability | Nice | Linear eMerge E3-Series | 2024-03-25 | Unknown |
| CVE-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability | Ivanti | Endpoint Manager Cloud Service Appliance (EPM CSA) | 2024-03-25 | Known |
| CVE-2023-48788 | Fortinet FortiClient EMS SQL Injection Vulnerability | Fortinet | FortiClient EMS | 2024-03-25 | Known |
| CVE-2024-27198 | JetBrains TeamCity Authentication Bypass Vulnerability | JetBrains | TeamCity | 2024-03-07 | Known |
| CVE-2024-23225 | Apple Multiple Products Memory Corruption Vulnerability | Apple | Multiple Products | 2024-03-06 | Unknown |
| CVE-2024-23296 | Apple Multiple Products Memory Corruption Vulnerability | Apple | Multiple Products | 2024-03-06 | Unknown |
| CVE-2021-36380 | Sunhillo SureLine OS Command Injection Vulnerablity | Sunhillo | SureLine | 2024-03-05 | Unknown |
| CVE-2023-21237 | Android Pixel Information Disclosure Vulnerability | Android | Pixel | 2024-03-05 | Unknown |
| CVE-2024-21338 | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability | Microsoft | Windows | 2024-03-04 | Known |
| CVE-2023-29360 | Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability | Microsoft | Streaming Service | 2024-02-29 | Unknown |
| CVE-2024-1709 | ConnectWise ScreenConnect Authentication Bypass Vulnerability | ConnectWise | ScreenConnect | 2024-02-22 | Known |
| CVE-2020-3259 | Cisco ASA and FTD Information Disclosure Vulnerability | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-02-15 | Known |
| CVE-2024-21410 | Microsoft Exchange Server Privilege Escalation Vulnerability | Microsoft | Exchange Server | 2024-02-15 | Unknown |
| CVE-2024-21351 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | Microsoft | Windows | 2024-02-13 | Unknown |
| CVE-2024-21412 | Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability | Microsoft | Windows | 2024-02-13 | Known |
| CVE-2023-43770 | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | Roundcube | Webmail | 2024-02-12 | Unknown |
| CVE-2024-21762 | Fortinet FortiOS Out-of-Bound Write Vulnerability | Fortinet | FortiOS | 2024-02-09 | Known |
| CVE-2023-4762 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2024-02-06 | Unknown | |
| CVE-2022-48618 | Apple Multiple Products Memory Corruption Vulnerability | Apple | Multiple Products | 2024-01-31 | Unknown |
| CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability | Ivanti | Connect Secure, Policy Secure, and Neurons | 2024-01-31 | Known |
| CVE-2023-22527 | Atlassian Confluence Data Center and Server Template Injection Vulnerability | Atlassian | Confluence Data Center and Server | 2024-01-24 | Known |
| CVE-2024-23222 | Apple Multiple Products WebKit Type Confusion Vulnerability | Apple | Multiple Products | 2024-01-23 | Unknown |
| CVE-2023-34048 | VMware vCenter Server Out-of-Bounds Write Vulnerability | VMware | vCenter Server | 2024-01-22 | Unknown |
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability | Ivanti | Endpoint Manager Mobile (EPMM) and MobileIron Core | 2024-01-18 | Known |
| CVE-2023-6548 | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | Citrix | NetScaler ADC and NetScaler Gateway | 2024-01-17 | Unknown |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | Citrix | NetScaler ADC and NetScaler Gateway | 2024-01-17 | Unknown |
| CVE-2024-0519 | Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | Chromium V8 | 2024-01-17 | Unknown | |
| CVE-2018-15133 | Laravel Deserialization of Untrusted Data Vulnerability | Laravel | Laravel Framework | 2024-01-16 | Unknown |
| CVE-2023-29357 | Microsoft SharePoint Server Privilege Escalation Vulnerability | Microsoft | SharePoint Server | 2024-01-10 | Known |
| CVE-2023-46805 | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability | Ivanti | Connect Secure and Policy Secure | 2024-01-10 | Known |
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | Ivanti | Connect Secure and Policy Secure | 2024-01-10 | Known |
| CVE-2016-20017 | D-Link DSL-2750B Devices Command Injection Vulnerability | D-Link | DSL-2750B Devices | 2024-01-08 | Unknown |
| CVE-2023-23752 | Joomla! Improper Access Control Vulnerability | Joomla! | Joomla! | 2024-01-08 | Unknown |
| CVE-2023-27524 | Apache Superset Insecure Default Initialization of Resource Vulnerability | Apache | Superset | 2024-01-08 | Unknown |
| CVE-2023-29300 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Adobe | ColdFusion | 2024-01-08 | Known |
| CVE-2023-38203 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Adobe | ColdFusion | 2024-01-08 | Known |
| CVE-2023-41990 | Apple Multiple Products Code Execution Vulnerability | Apple | Multiple Products | 2024-01-08 | Unknown |
| CVE-2023-7024 | Google Chromium WebRTC Heap Buffer Overflow Vulnerability | Chromium WebRTC | 2024-01-02 | Unknown | |
| CVE-2023-7101 | Spreadsheet::ParseExcel Remote Code Execution Vulnerability | Spreadsheet::ParseExcel | Spreadsheet::ParseExcel | 2024-01-02 | Unknown |
| CVE-2023-47565 | QNAP VioStor NVR OS Command Injection Vulnerability | QNAP | VioStor NVR | 2023-12-21 | Unknown |
| CVE-2023-49897 | FXC AE1021, AE1021PE OS Command Injection Vulnerability | FXC | AE1021, AE1021PE | 2023-12-21 | Unknown |
| CVE-2023-6448 | Unitronics Vision PLC and HMI Insecure Default Password Vulnerability | Unitronics | Vision PLC and HMI | 2023-12-11 | Unknown |
| CVE-2023-41265 | Qlik Sense HTTP Tunneling Vulnerability | Qlik | Sense | 2023-12-07 | Known |
| CVE-2023-41266 | Qlik Sense Path Traversal Vulnerability | Qlik | Sense | 2023-12-07 | Known |
| CVE-2022-22071 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | Qualcomm | Multiple Chipsets | 2023-12-05 | Unknown |
| CVE-2023-33063 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | Qualcomm | Multiple Chipsets | 2023-12-05 | Unknown |
| CVE-2023-33106 | Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability | Qualcomm | Multiple Chipsets | 2023-12-05 | Unknown |
| CVE-2023-33107 | Qualcomm Multiple Chipsets Integer Overflow Vulnerability | Qualcomm | Multiple Chipsets | 2023-12-05 | Unknown |
| CVE-2023-42916 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | Apple | Multiple Products | 2023-12-04 | Unknown |
| CVE-2023-42917 | Apple Multiple Products WebKit Memory Corruption Vulnerability | Apple | Multiple Products | 2023-12-04 | Unknown |
| CVE-2023-49103 | ownCloud graphapi Information Disclosure Vulnerability | ownCloud | ownCloud graphapi | 2023-11-30 | Unknown |
| CVE-2023-6345 | Google Skia Integer Overflow Vulnerability | Chromium Skia | 2023-11-30 | Unknown | |
| CVE-2023-4911 | GNU C Library Buffer Overflow Vulnerability | GNU | GNU C Library | 2023-11-21 | Unknown |
| CVE-2020-2551 | Oracle Fusion Middleware Unspecified Vulnerability | Oracle | Fusion Middleware | 2023-11-16 | Unknown |
| CVE-2023-1671 | Sophos Web Appliance Command Injection Vulnerability | Sophos | Web Appliance | 2023-11-16 | Unknown |
| CVE-2023-36584 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | Microsoft | Windows | 2023-11-16 | Unknown |
| CVE-2023-36025 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | Microsoft | Windows | 2023-11-14 | Unknown |
| CVE-2023-36033 | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | Microsoft | Windows | 2023-11-14 | Unknown |
| CVE-2023-36036 | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | Microsoft | Windows | 2023-11-14 | Unknown |
| CVE-2023-36844 | Juniper Junos OS EX Series PHP External Variable Modification Vulnerability | Juniper | Junos OS | 2023-11-13 | Unknown |
| CVE-2023-36845 | Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability | Juniper | Junos OS | 2023-11-13 | Unknown |
| CVE-2023-36846 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | Juniper | Junos OS | 2023-11-13 | Unknown |
| CVE-2023-36847 | Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability | Juniper | Junos OS | 2023-11-13 | Unknown |
| CVE-2023-36851 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | Juniper | Junos OS | 2023-11-13 | Unknown |
| CVE-2023-47246 | SysAid Server Path Traversal Vulnerability | SysAid | SysAid Server | 2023-11-13 | Known |
| CVE-2023-29552 | Service Location Protocol (SLP) Denial-of-Service Vulnerability | IETF | Service Location Protocol (SLP) | 2023-11-08 | Unknown |
| CVE-2023-22518 | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | Atlassian | Confluence Data Center and Server | 2023-11-07 | Known |
| CVE-2023-46604 | Apache ActiveMQ Deserialization of Untrusted Data Vulnerability | Apache | ActiveMQ | 2023-11-02 | Known |
| CVE-2023-46747 | F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability | F5 | BIG-IP Configuration Utility | 2023-10-31 | Known |
| CVE-2023-46748 | F5 BIG-IP Configuration Utility SQL Injection Vulnerability | F5 | BIG-IP Configuration Utility | 2023-10-31 | Unknown |
| CVE-2023-5631 | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | Roundcube | Webmail | 2023-10-26 | Unknown |
| CVE-2023-20273 | Cisco IOS XE Web UI Command Injection Vulnerability | Cisco | Cisco IOS XE Web UI | 2023-10-23 | Unknown |
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | Citrix | NetScaler ADC and NetScaler Gateway | 2023-10-18 | Known |
| CVE-2023-20198 | Cisco IOS XE Web UI Privilege Escalation Vulnerability | Cisco | IOS XE Web UI | 2023-10-16 | Unknown |
| CVE-2023-20109 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | Cisco | IOS and IOS XE | 2023-10-10 | Unknown |
| CVE-2023-21608 | Adobe Acrobat and Reader Use-After-Free Vulnerability | Adobe | Acrobat and Reader | 2023-10-10 | Unknown |
| CVE-2023-36563 | Microsoft WordPad Information Disclosure Vulnerability | Microsoft | WordPad | 2023-10-10 | Unknown |
| CVE-2023-41763 | Microsoft Skype for Business Privilege Escalation Vulnerability | Microsoft | Skype for Business | 2023-10-10 | Unknown |
| CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability | IETF | HTTP/2 | 2023-10-10 | Unknown |
| CVE-2023-22515 | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability | Atlassian | Confluence Data Center and Server | 2023-10-05 | Known |
| CVE-2023-40044 | Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability | Progress | WS_FTP Server | 2023-10-05 | Known |
| CVE-2023-42824 | Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability | Apple | iOS and iPadOS | 2023-10-05 | Unknown |
| CVE-2023-28229 | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | Microsoft | Windows CNG Key Isolation Service | 2023-10-04 | Unknown |
| CVE-2023-42793 | JetBrains TeamCity Authentication Bypass Vulnerability | JetBrains | TeamCity | 2023-10-04 | Known |
| CVE-2023-4211 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | Arm | Mali GPU Kernel Driver | 2023-10-03 | Unknown |
| CVE-2023-5217 | Google Chromium libvpx Heap Buffer Overflow Vulnerability | Chromium libvpx | 2023-10-02 | Unknown | |
| CVE-2018-14667 | Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability | Red Hat | JBoss RichFaces Framework | 2023-09-28 | Unknown |
| CVE-2023-41991 | Apple Multiple Products Improper Certificate Validation Vulnerability | Apple | Multiple Products | 2023-09-25 | Unknown |
| CVE-2023-41992 | Apple Multiple Products Kernel Privilege Escalation Vulnerability | Apple | Multiple Products | 2023-09-25 | Unknown |
| CVE-2023-41993 | Apple Multiple Products WebKit Code Execution Vulnerability | Apple | Multiple Products | 2023-09-25 | Unknown |
| CVE-2023-41179 | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability | Trend Micro | Apex One and Worry-Free Business Security | 2023-09-21 | Unknown |
| CVE-2023-28434 | MinIO Security Feature Bypass Vulnerability | MinIO | MinIO | 2023-09-19 | Unknown |
| CVE-2014-8361 | Realtek SDK Improper Input Validation Vulnerability | Realtek | SDK | 2023-09-18 | Unknown |
| CVE-2017-6884 | Zyxel EMG2926 Routers Command Injection Vulnerability | Zyxel | EMG2926 Routers | 2023-09-18 | Known |
| CVE-2021-3129 | Laravel Ignition File Upload Vulnerability | Laravel | Ignition | 2023-09-18 | Known |
| CVE-2022-22265 | Samsung Mobile Devices Use-After-Free Vulnerability | Samsung | Mobile Devices | 2023-09-18 | Unknown |
| CVE-2023-26369 | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | Adobe | Acrobat and Reader | 2023-09-14 | Unknown |
| CVE-2023-20269 | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability | Cisco | Adaptive Security Appliance and Firepower Threat Defense | 2023-09-13 | Known |
| CVE-2023-35674 | Android Framework Privilege Escalation Vulnerability | Android | Framework | 2023-09-13 | Unknown |
| CVE-2023-4863 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | Chromium WebP | 2023-09-13 | Unknown | |
| CVE-2023-36761 | Microsoft Word Information Disclosure Vulnerability | Microsoft | Word | 2023-09-12 | Unknown |
| CVE-2023-36802 | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | Microsoft | Streaming Service Proxy | 2023-09-12 | Unknown |
| CVE-2023-41061 | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability | Apple | iOS, iPadOS, and watchOS | 2023-09-11 | Unknown |
| CVE-2023-41064 | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability | Apple | iOS, iPadOS, and macOS | 2023-09-11 | Unknown |
| CVE-2023-33246 | Apache RocketMQ Command Execution Vulnerability | Apache | RocketMQ | 2023-09-06 | Unknown |
| CVE-2023-32315 | Ignite Realtime Openfire Path Traversal Vulnerability | Ignite Realtime | Openfire | 2023-08-24 | Unknown |
| CVE-2023-38831 | RARLAB WinRAR Code Execution Vulnerability | RARLAB | WinRAR | 2023-08-24 | Known |
| CVE-2023-27532 | Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability | Veeam | Backup & Replication | 2023-08-22 | Known |
| CVE-2023-38035 | Ivanti Sentry Authentication Bypass Vulnerability | Ivanti | Sentry | 2023-08-22 | Known |
| CVE-2023-26359 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Adobe | ColdFusion | 2023-08-21 | Unknown |
| CVE-2023-24489 | Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | Citrix | Content Collaboration | 2023-08-16 | Unknown |
| CVE-2023-38180 | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability | Microsoft | .NET Core and Visual Studio | 2023-08-09 | Unknown |
| CVE-2017-18368 | Zyxel P660HN-T1A Routers Command Injection Vulnerability | Zyxel | P660HN-T1A Routers | 2023-08-07 | Unknown |
| CVE-2023-35081 | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | Ivanti | Endpoint Manager Mobile (EPMM) | 2023-07-31 | Unknown |
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2023-07-27 | Unknown |
| CVE-2023-38606 | Apple Multiple Products Kernel Unspecified Vulnerability | Apple | Multiple Products | 2023-07-26 | Unknown |
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | Ivanti | Endpoint Manager Mobile (EPMM) | 2023-07-25 | Known |
| CVE-2023-29298 | Adobe ColdFusion Improper Access Control Vulnerability | Adobe | ColdFusion | 2023-07-20 | Unknown |
| CVE-2023-38205 | Adobe ColdFusion Improper Access Control Vulnerability | Adobe | ColdFusion | 2023-07-20 | Unknown |
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | Citrix | NetScaler ADC and NetScaler Gateway | 2023-07-19 | Known |
| CVE-2023-36884 | Microsoft Windows Search Remote Code Execution Vulnerability | Microsoft | Windows | 2023-07-17 | Known |
| CVE-2022-29303 | SolarView Compact Command Injection Vulnerability | SolarView | Compact | 2023-07-13 | Unknown |
| CVE-2023-37450 | Apple Multiple Products WebKit Code Execution Vulnerability | Apple | Multiple Products | 2023-07-13 | Unknown |
| CVE-2022-31199 | Netwrix Auditor Insecure Object Deserialization Vulnerability | Netwrix | Auditor | 2023-07-11 | Known |
| CVE-2023-32046 | Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | Microsoft | Windows | 2023-07-11 | Unknown |
| CVE-2023-32049 | Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | Microsoft | Windows | 2023-07-11 | Unknown |
| CVE-2023-35311 | Microsoft Outlook Security Feature Bypass Vulnerability | Microsoft | Outlook | 2023-07-11 | Unknown |
| CVE-2023-36874 | Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | Microsoft | Windows | 2023-07-11 | Unknown |
| CVE-2021-29256 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | Arm | Mali Graphics Processing Unit (GPU) | 2023-07-07 | Unknown |
| CVE-2019-17621 | D-Link DIR-859 Router Command Execution Vulnerability | D-Link | DIR-859 Router | 2023-06-29 | Unknown |
| CVE-2019-20500 | D-Link DWL-2600AP Access Point Command Injection Vulnerability | D-Link | DWL-2600AP Access Point | 2023-06-29 | Unknown |
| CVE-2021-25371 | Samsung Mobile Devices Unspecified Vulnerability | Samsung | Mobile Devices | 2023-06-29 | Unknown |
| CVE-2021-25372 | Samsung Mobile Devices Improper Boundary Check Vulnerability | Samsung | Mobile Devices | 2023-06-29 | Unknown |
| CVE-2021-25394 | Samsung Mobile Devices Race Condition Vulnerability | Samsung | Mobile Devices | 2023-06-29 | Unknown |
| CVE-2021-25395 | Samsung Mobile Devices Race Condition Vulnerability | Samsung | Mobile Devices | 2023-06-29 | Unknown |
| CVE-2021-25487 | Samsung Mobile Devices Out-of-Bounds Read Vulnerability | Samsung | Mobile Devices | 2023-06-29 | Unknown |
| CVE-2021-25489 | Samsung Mobile Devices Improper Input Validation Vulnerability | Samsung | Mobile Devices | 2023-06-29 | Unknown |
| CVE-2023-20867 | VMware Tools Authentication Bypass Vulnerability | VMware | Tools | 2023-06-23 | Unknown |
| CVE-2023-27992 | Zyxel Multiple NAS Devices Command Injection Vulnerability | Zyxel | Multiple Network-Attached Storage (NAS) Devices | 2023-06-23 | Unknown |
| CVE-2023-32434 | Apple Multiple Products Integer Overflow Vulnerability | Apple | Multiple Products | 2023-06-23 | Unknown |
| CVE-2023-32435 | Apple Multiple Products WebKit Memory Corruption Vulnerability | Apple | Multiple Products | 2023-06-23 | Unknown |
| CVE-2023-32439 | Apple Multiple Products WebKit Type Confusion Vulnerability | Apple | Multiple Products | 2023-06-23 | Unknown |
| CVE-2016-0165 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2023-06-22 | Unknown |
| CVE-2016-9079 | Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability | Mozilla | Firefox, Firefox ESR, and Thunderbird | 2023-06-22 | Unknown |
| CVE-2020-12641 | Roundcube Webmail Remote Code Execution Vulnerability | Roundcube | Roundcube Webmail | 2023-06-22 | Unknown |
| CVE-2020-35730 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | Roundcube | Roundcube Webmail | 2023-06-22 | Unknown |
| CVE-2021-44026 | Roundcube Webmail SQL Injection Vulnerability | Roundcube | Roundcube Webmail | 2023-06-22 | Unknown |
| CVE-2023-20887 | Vmware Aria Operations for Networks Command Injection Vulnerability | VMware | Aria Operations for Networks | 2023-06-22 | Unknown |
| CVE-2023-27997 | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | Fortinet | FortiOS and FortiProxy SSL-VPN | 2023-06-13 | Known |
| CVE-2023-3079 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2023-06-07 | Unknown | |
| CVE-2023-33009 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | Zyxel | Multiple Firewalls | 2023-06-05 | Unknown |
| CVE-2023-33010 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | Zyxel | Multiple Firewalls | 2023-06-05 | Unknown |
| CVE-2023-34362 | Progress MOVEit Transfer SQL Injection Vulnerability | Progress | MOVEit Transfer | 2023-06-02 | Known |
| CVE-2023-28771 | Zyxel Multiple Firewalls OS Command Injection Vulnerability | Zyxel | Multiple Firewalls | 2023-05-31 | Unknown |
| CVE-2023-2868 | Barracuda Networks ESG Appliance Improper Input Validation Vulnerability | Barracuda Networks | Email Security Gateway (ESG) Appliance | 2023-05-26 | Unknown |
| CVE-2023-28204 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | Apple | Multiple Products | 2023-05-22 | Unknown |
| CVE-2023-32373 | Apple Multiple Products WebKit Use-After-Free Vulnerability | Apple | Multiple Products | 2023-05-22 | Unknown |
| CVE-2023-32409 | Apple Multiple Products WebKit Sandbox Escape Vulnerability | Apple | Multiple Products | 2023-05-22 | Unknown |
| CVE-2004-1464 | Cisco IOS Denial-of-Service Vulnerability | Cisco | IOS | 2023-05-19 | Unknown |
| CVE-2016-6415 | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability | Cisco | IOS, IOS XR, and IOS XE | 2023-05-19 | Unknown |
| CVE-2023-21492 | Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability | Samsung | Mobile Devices | 2023-05-19 | Unknown |
| CVE-2010-3904 | Linux Kernel Improper Input Validation Vulnerability | Linux | Kernel | 2023-05-12 | Unknown |
| CVE-2014-0196 | Linux Kernel Race Condition Vulnerability | Linux | Kernel | 2023-05-12 | Unknown |
| CVE-2015-5317 | Jenkins User Interface (UI) Information Disclosure Vulnerability | Jenkins | Jenkins User Interface (UI) | 2023-05-12 | Unknown |
| CVE-2016-3427 | Oracle Java SE and JRockit Unspecified Vulnerability | Oracle | Java SE and JRockit | 2023-05-12 | Unknown |
| CVE-2016-8735 | Apache Tomcat Remote Code Execution Vulnerability | Apache | Tomcat | 2023-05-12 | Unknown |
| CVE-2021-3560 | Red Hat Polkit Incorrect Authorization Vulnerability | Red Hat | Polkit | 2023-05-12 | Unknown |
| CVE-2023-25717 | Multiple Ruckus Wireless Products CSRF and RCE Vulnerability | Ruckus Wireless | Multiple Products | 2023-05-12 | Unknown |
| CVE-2023-29336 | Microsoft Win32K Privilege Escalation Vulnerability | Microsoft | Win32k | 2023-05-09 | Unknown |
| CVE-2021-45046 | Apache Log4j2 Deserialization of Untrusted Data Vulnerability | Apache | Log4j2 | 2023-05-01 | Known |
| CVE-2023-1389 | TP-Link Archer AX-21 Command Injection Vulnerability | TP-Link | Archer AX21 | 2023-05-01 | Unknown |
| CVE-2023-21839 | Oracle WebLogic Server Unspecified Vulnerability | Oracle | WebLogic Server | 2023-05-01 | Unknown |
| CVE-2023-2136 | Google Chrome Skia Integer Overflow Vulnerability | Chromium Skia | 2023-04-21 | Unknown | |
| CVE-2023-27350 | PaperCut MF/NG Improper Access Control Vulnerability | PaperCut | MF/NG | 2023-04-21 | Known |
| CVE-2023-28432 | MinIO Information Disclosure Vulnerability | MinIO | MinIO | 2023-04-21 | Unknown |
| CVE-2017-6742 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Cisco | IOS and IOS XE Software | 2023-04-19 | Unknown |
| CVE-2019-8526 | Apple macOS Use-After-Free Vulnerability | Apple | macOS | 2023-04-17 | Unknown |
| CVE-2023-2033 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2023-04-17 | Unknown | |
| CVE-2023-20963 | Android Framework Privilege Escalation Vulnerability | Android | Framework | 2023-04-13 | Unknown |
| CVE-2023-29492 | Novi Survey Insecure Deserialization Vulnerability | Novi Survey | Novi Survey | 2023-04-13 | Unknown |
| CVE-2023-28252 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | Microsoft | Windows | 2023-04-11 | Known |
| CVE-2023-28205 | Apple Multiple Products WebKit Use-After-Free Vulnerability | Apple | Multiple Products | 2023-04-10 | Unknown |
| CVE-2023-28206 | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability | Apple | iOS, iPadOS, and macOS | 2023-04-10 | Unknown |
| CVE-2019-1388 | Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability | Microsoft | Windows | 2023-04-07 | Known |
| CVE-2021-27876 | Veritas Backup Exec Agent File Access Vulnerability | Veritas | Backup Exec Agent | 2023-04-07 | Known |
| CVE-2021-27877 | Veritas Backup Exec Agent Improper Authentication Vulnerability | Veritas | Backup Exec Agent | 2023-04-07 | Known |
| CVE-2021-27878 | Veritas Backup Exec Agent Command Execution Vulnerability | Veritas | Backup Exec Agent | 2023-04-07 | Known |
| CVE-2023-26083 | Arm Mali GPU Kernel Driver Information Disclosure Vulnerability | Arm | Mali Graphics Processing Unit (GPU) | 2023-04-07 | Unknown |
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2023-04-03 | Unknown |
| CVE-2013-3163 | Microsoft Internet Explorer Memory Corruption Vulnerability | Microsoft | Internet Explorer | 2023-03-30 | Unknown |
| CVE-2017-7494 | Samba Remote Code Execution Vulnerability | Samba | Samba | 2023-03-30 | Known |
| CVE-2021-30900 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | Apple | iOS, iPadOS, and macOS | 2023-03-30 | Unknown |
| CVE-2022-22706 | Arm Mali GPU Kernel Driver Unspecified Vulnerability | Arm | Mali Graphics Processing Unit (GPU) | 2023-03-30 | Unknown |
| CVE-2022-3038 | Google Chromium Network Service Use-After-Free Vulnerability | Chromium Network Service | 2023-03-30 | Unknown | |
| CVE-2022-38181 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | Arm | Mali Graphics Processing Unit (GPU) | 2023-03-30 | Unknown |
| CVE-2022-39197 | Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability | Fortra | Cobalt Strike | 2023-03-30 | Unknown |
| CVE-2022-42948 | Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability | Fortra | Cobalt Strike | 2023-03-30 | Unknown |
| CVE-2023-0266 | Linux Kernel Use-After-Free Vulnerability | Linux | Kernel | 2023-03-30 | Unknown |
| CVE-2023-26360 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Adobe | ColdFusion | 2023-03-15 | Unknown |
| CVE-2022-41328 | Fortinet FortiOS Path Traversal Vulnerability | Fortinet | FortiOS | 2023-03-14 | Unknown |
| CVE-2023-23397 | Microsoft Office Outlook Privilege Escalation Vulnerability | Microsoft | Office | 2023-03-14 | Unknown |
| CVE-2023-24880 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | Microsoft | Windows | 2023-03-14 | Known |
| CVE-2020-5741 | Plex Media Server Remote Code Execution Vulnerability | Plex | Media Server | 2023-03-10 | Unknown |
| CVE-2021-39144 | XStream Remote Code Execution Vulnerability | XStream | XStream | 2023-03-10 | Unknown |
| CVE-2022-28810 | Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability | Zoho | ManageEngine | 2023-03-07 | Unknown |
| CVE-2022-33891 | Apache Spark Command Injection Vulnerability | Apache | Spark | 2023-03-07 | Unknown |
| CVE-2022-35914 | Teclib GLPI Remote Code Execution Vulnerability | Teclib | GLPI | 2023-03-07 | Unknown |
| CVE-2022-36537 | ZK Framework AuUploader Unspecified Vulnerability | ZK Framework | AuUploader | 2023-02-27 | Known |
| CVE-2022-40765 | Mitel MiVoice Connect Command Injection Vulnerability | Mitel | MiVoice Connect | 2023-02-21 | Known |
| CVE-2022-41223 | Mitel MiVoice Connect Code Injection Vulnerability | Mitel | MiVoice Connect | 2023-02-21 | Known |
| CVE-2022-47986 | IBM Aspera Faspex Code Execution Vulnerability | IBM | Aspera Faspex | 2023-02-21 | Known |
| CVE-2022-46169 | Cacti Command Injection Vulnerability | Cacti | Cacti | 2023-02-16 | Unknown |
| CVE-2023-21715 | Microsoft Office Publisher Security Feature Bypass Vulnerability | Microsoft | Office | 2023-02-14 | Unknown |
| CVE-2023-21823 | Microsoft Windows Graphic Component Privilege Escalation Vulnerability | Microsoft | Windows | 2023-02-14 | Unknown |
| CVE-2023-23376 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | Microsoft | Windows | 2023-02-14 | Known |
| CVE-2023-23529 | Apple Multiple Products WebKit Type Confusion Vulnerability | Apple | Multiple Products | 2023-02-14 | Unknown |
| CVE-2015-2291 | Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability | Intel | Ethernet Diagnostics Driver for Windows | 2023-02-10 | Known |
| CVE-2022-24990 | TerraMaster OS Remote Command Execution Vulnerability | TerraMaster | TerraMaster OS | 2023-02-10 | Known |
| CVE-2023-0669 | Fortra GoAnywhere MFT Remote Code Execution Vulnerability | Fortra | GoAnywhere MFT | 2023-02-10 | Known |
| CVE-2022-21587 | Oracle E-Business Suite Unspecified Vulnerability | Oracle | E-Business Suite | 2023-02-02 | Known |
| CVE-2023-22952 | Multiple SugarCRM Products Remote Code Execution Vulnerability | SugarCRM | Multiple Products | 2023-02-02 | Unknown |
| CVE-2017-11357 | Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability | Telerik | User Interface (UI) for ASP.NET AJAX | 2023-01-26 | Known |
| CVE-2022-47966 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | Zoho | ManageEngine | 2023-01-23 | Known |
| CVE-2022-44877 | CWP Control Web Panel OS Command Injection Vulnerability | CWP | Control Web Panel | 2023-01-17 | Unknown |
| CVE-2022-41080 | Microsoft Exchange Server Privilege Escalation Vulnerability | Microsoft | Exchange Server | 2023-01-10 | Known |
| CVE-2023-21674 | Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability | Microsoft | Windows | 2023-01-10 | Unknown |
| CVE-2018-18809 | TIBCO JasperReports Library Directory Traversal Vulnerability | TIBCO | JasperReports | 2022-12-29 | Unknown |
| CVE-2018-5430 | TIBCO JasperReports Server Information Disclosure Vulnerability | TIBCO | JasperReports | 2022-12-29 | Unknown |
| CVE-2022-42856 | Apple iOS Type Confusion Vulnerability | Apple | iOS | 2022-12-14 | Unknown |
| CVE-2022-26500 | Veeam Backup & Replication Remote Code Execution Vulnerability | Veeam | Backup & Replication | 2022-12-13 | Known |
| CVE-2022-26501 | Veeam Backup & Replication Remote Code Execution Vulnerability | Veeam | Backup & Replication | 2022-12-13 | Known |
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | Citrix | Application Delivery Controller (ADC) and Gateway | 2022-12-13 | Unknown |
| CVE-2022-42475 | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | Fortinet | FortiOS | 2022-12-13 | Known |
| CVE-2022-44698 | Microsoft Defender SmartScreen Security Feature Bypass Vulnerability | Microsoft | Defender | 2022-12-13 | Known |
| CVE-2022-4262 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2022-12-05 | Unknown | |
| CVE-2021-35587 | Oracle Fusion Middleware Unspecified Vulnerability | Oracle | Fusion Middleware | 2022-11-28 | Unknown |
| CVE-2022-4135 | Google Chromium GPU Heap Buffer Overflow Vulnerability | Chromium GPU | 2022-11-28 | Unknown | |
| CVE-2022-41049 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | Microsoft | Windows | 2022-11-14 | Unknown |
| CVE-2021-25337 | Samsung Mobile Devices Improper Access Control Vulnerability | Samsung | Mobile Devices | 2022-11-08 | Unknown |
| CVE-2021-25369 | Samsung Mobile Devices Improper Access Control Vulnerability | Samsung | Mobile Devices | 2022-11-08 | Unknown |
| CVE-2021-25370 | Samsung Mobile Devices Memory Corruption Vulnerability | Samsung | Mobile Devices | 2022-11-08 | Unknown |
| CVE-2022-41073 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | Microsoft | Windows | 2022-11-08 | Known |
| CVE-2022-41091 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | Microsoft | Windows | 2022-11-08 | Known |
| CVE-2022-41125 | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | Microsoft | Windows | 2022-11-08 | Unknown |
| CVE-2022-41128 | Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | Microsoft | Windows | 2022-11-08 | Unknown |
| CVE-2022-3723 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2022-10-28 | Unknown | |
| CVE-2022-42827 | Apple iOS and iPadOS Out-of-Bounds Write Vulnerability | Apple | iOS and iPadOS | 2022-10-25 | Unknown |
| CVE-2018-19320 | GIGABYTE Multiple Products Unspecified Vulnerability | GIGABYTE | Multiple Products | 2022-10-24 | Known |
| CVE-2018-19321 | GIGABYTE Multiple Products Privilege Escalation Vulnerability | GIGABYTE | Multiple Products | 2022-10-24 | Known |
| CVE-2018-19322 | GIGABYTE Multiple Products Code Execution Vulnerability | GIGABYTE | Multiple Products | 2022-10-24 | Known |
| CVE-2018-19323 | GIGABYTE Multiple Products Privilege Escalation Vulnerability | GIGABYTE | Multiple Products | 2022-10-24 | Known |
| CVE-2020-3153 | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability | Cisco | AnyConnect Secure | 2022-10-24 | Known |
| CVE-2020-3433 | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | Cisco | AnyConnect Secure | 2022-10-24 | Known |
| CVE-2021-3493 | Linux Kernel Privilege Escalation Vulnerability | Linux | Kernel | 2022-10-20 | Unknown |
| CVE-2022-41352 | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2022-10-20 | Known |
| CVE-2022-40684 | Fortinet Multiple Products Authentication Bypass Vulnerability | Fortinet | Multiple Products | 2022-10-11 | Known |
| CVE-2022-41033 | Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability | Microsoft | Windows COM+ Event System Service | 2022-10-11 | Unknown |
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | Atlassian | Bitbucket Server and Data Center | 2022-09-30 | Unknown |
| CVE-2022-41040 | Microsoft Exchange Server Server-Side Request Forgery Vulnerability | Microsoft | Exchange Server | 2022-09-30 | Known |
| CVE-2022-41082 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | Exchange Server | 2022-09-30 | Known |
| CVE-2022-3236 | Sophos Firewall Code Injection Vulnerability | Sophos | Firewall | 2022-09-23 | Unknown |
| CVE-2022-35405 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | Zoho | ManageEngine | 2022-09-22 | Unknown |
| CVE-2010-2568 | Microsoft Windows Remote Code Execution Vulnerability | Microsoft | Windows | 2022-09-15 | Unknown |
| CVE-2013-2094 | Linux Kernel Privilege Escalation Vulnerability | Linux | Kernel | 2022-09-15 | Unknown |
| CVE-2013-2596 | Linux Kernel Integer Overflow Vulnerability | Linux | Kernel | 2022-09-15 | Unknown |
| CVE-2013-2597 | Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability | Code Aurora | ACDB Audio Driver | 2022-09-15 | Unknown |
| CVE-2013-6282 | Linux Kernel Improper Input Validation Vulnerability | Linux | Kernel | 2022-09-15 | Unknown |
| CVE-2022-40139 | Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability | Trend Micro | Apex One and Apex One as a Service | 2022-09-15 | Unknown |
| CVE-2022-32917 | Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability | Apple | iOS, iPadOS, and macOS | 2022-09-14 | Unknown |
| CVE-2022-37969 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | Microsoft | Windows | 2022-09-14 | Known |
| CVE-2011-1823 | Android OS Privilege Escalation Vulnerability | Android | Android OS | 2022-09-08 | Unknown |
| CVE-2011-4723 | D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | D-Link | DIR-300 Router | 2022-09-08 | Unknown |
| CVE-2017-5521 | NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability | NETGEAR | Multiple Devices | 2022-09-08 | Unknown |
| CVE-2018-13374 | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | Fortinet | FortiOS and FortiADC | 2022-09-08 | Known |
| CVE-2018-2628 | Oracle WebLogic Server Unspecified Vulnerability | Oracle | WebLogic Server | 2022-09-08 | Unknown |
| CVE-2018-6530 | D-Link Multiple Routers OS Command Injection Vulnerability | D-Link | Multiple Routers | 2022-09-08 | Known |
| CVE-2018-7445 | MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability | MikroTik | RouterOS | 2022-09-08 | Unknown |
| CVE-2020-9934 | Apple iOS, iPadOS, and macOS Input Validation Vulnerability | Apple | iOS, iPadOS, and macOS | 2022-09-08 | Unknown |
| CVE-2022-26258 | D-Link DIR-820L Remote Code Execution Vulnerability | D-Link | DIR-820L | 2022-09-08 | Unknown |
| CVE-2022-27593 | QNAP Photo Station Externally Controlled Reference Vulnerability | QNAP | Photo Station | 2022-09-08 | Known |
| CVE-2022-3075 | Google Chromium Mojo Insufficient Data Validation Vulnerability | Chromium Mojo | 2022-09-08 | Unknown | |
| CVE-2020-28949 | PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability | PEAR | Archive_Tar | 2022-08-25 | Unknown |
| CVE-2020-36193 | PEAR Archive_Tar Improper Link Resolution Vulnerability | PEAR | Archive_Tar | 2022-08-25 | Unknown |
| CVE-2021-31010 | Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability | Apple | iOS, macOS, watchOS | 2022-08-25 | Unknown |
| CVE-2021-38406 | Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability | Delta Electronics | DOPSoft 2 | 2022-08-25 | Unknown |
| CVE-2021-39226 | Grafana Authentication Bypass Vulnerability | Grafana Labs | Grafana | 2022-08-25 | Unknown |
| CVE-2022-2294 | WebRTC Heap Buffer Overflow Vulnerability | WebRTC | WebRTC | 2022-08-25 | Known |
| CVE-2022-22963 | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability | VMware Tanzu | Spring Cloud | 2022-08-25 | Unknown |
| CVE-2022-24112 | Apache APISIX Authentication Bypass Vulnerability | Apache | APISIX | 2022-08-25 | Unknown |
| CVE-2022-24706 | Apache CouchDB Insecure Default Initialization of Resource Vulnerability | Apache | CouchDB | 2022-08-25 | Unknown |
| CVE-2022-26352 | dotCMS Unrestricted Upload of File Vulnerability | dotCMS | dotCMS | 2022-08-25 | Known |
| CVE-2022-0028 | Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability | Palo Alto Networks | PAN-OS | 2022-08-22 | Unknown |
| CVE-2017-15944 | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | Palo Alto Networks | PAN-OS | 2022-08-18 | Unknown |
| CVE-2022-21971 | Microsoft Windows Runtime Remote Code Execution Vulnerability | Microsoft | Windows | 2022-08-18 | Unknown |
| CVE-2022-22536 | SAP Multiple Products HTTP Request Smuggling Vulnerability | SAP | Multiple Products | 2022-08-18 | Unknown |
| CVE-2022-26923 | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | Microsoft | Active Directory | 2022-08-18 | Unknown |
| CVE-2022-2856 | Google Chromium Intents Insufficient Input Validation Vulnerability | Chromium Intents | 2022-08-18 | Unknown | |
| CVE-2022-32893 | Apple iOS and macOS Out-of-Bounds Write Vulnerability | Apple | iOS and macOS | 2022-08-18 | Unknown |
| CVE-2022-32894 | Apple iOS and macOS Out-of-Bounds Write Vulnerability | Apple | iOS and macOS | 2022-08-18 | Unknown |
| CVE-2022-27925 | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2022-08-11 | Known |
| CVE-2022-37042 | Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2022-08-11 | Known |
| CVE-2022-30333 | RARLAB UnRAR Directory Traversal Vulnerability | RARLAB | UnRAR | 2022-08-09 | Known |
| CVE-2022-34713 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | Microsoft | Windows | 2022-08-09 | Unknown |
| CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2022-08-04 | Known |
| CVE-2022-26138 | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | Atlassian | Confluence | 2022-07-29 | Unknown |
| CVE-2022-22047 | Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability | Microsoft | Windows | 2022-07-12 | Unknown |
| CVE-2022-26925 | Microsoft Windows LSA Spoofing Vulnerability | Microsoft | Windows | 2022-07-01 | Unknown |
| CVE-2018-4344 | Apple Multiple Products Memory Corruption Vulnerability | Apple | Multiple Products | 2022-06-27 | Unknown |
| CVE-2019-8605 | Apple Multiple Products Use-After-Free Vulnerability | Apple | Multiple Products | 2022-06-27 | Unknown |
| CVE-2020-3837 | Apple Multiple Products Memory Corruption Vulnerability | Apple | Multiple Products | 2022-06-27 | Unknown |
| CVE-2020-9907 | Apple Multiple Products Memory Corruption Vulnerability | Apple | Multiple Products | 2022-06-27 | Unknown |
| CVE-2021-30533 | Google Chromium PopupBlocker Security Bypass Vulnerability | Chromium PopupBlocker | 2022-06-27 | Unknown | |
| CVE-2021-30983 | Apple iOS and iPadOS Buffer Overflow Vulnerability | Apple | iOS and iPadOS | 2022-06-27 | Unknown |
| CVE-2021-4034 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability | Red Hat | Polkit | 2022-06-27 | Known |
| CVE-2022-29499 | Mitel MiVoice Connect Data Validation Vulnerability | Mitel | MiVoice Connect | 2022-06-27 | Known |
| CVE-2022-30190 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | Microsoft | Windows | 2022-06-14 | Known |
| CVE-2016-2386 | SAP NetWeaver SQL Injection Vulnerability | SAP | NetWeaver | 2022-06-09 | Unknown |
| CVE-2016-2388 | SAP NetWeaver Information Disclosure Vulnerability | SAP | NetWeaver | 2022-06-09 | Unknown |
| CVE-2021-38163 | SAP NetWeaver Unrestricted File Upload Vulnerability | SAP | NetWeaver | 2022-06-09 | Unknown |
| CVE-2006-2492 | Microsoft Word Malformed Object Pointer Vulnerability | Microsoft | Word | 2022-06-08 | Unknown |
| CVE-2007-5659 | Adobe Acrobat and Reader Buffer Overflow Vulnerability | Adobe | Acrobat and Reader | 2022-06-08 | Unknown |
| CVE-2008-0655 | Adobe Acrobat and Reader Unspecified Vulnerability | Adobe | Acrobat and Reader | 2022-06-08 | Unknown |
| CVE-2009-0557 | Microsoft Office Object Record Corruption Vulnerability | Microsoft | Office | 2022-06-08 | Unknown |
| CVE-2009-0563 | Microsoft Office Buffer Overflow Vulnerability | Microsoft | Office | 2022-06-08 | Unknown |
| CVE-2009-1862 | Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability | Adobe | Acrobat and Reader, Flash Player | 2022-06-08 | Unknown |
| CVE-2009-3953 | Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability | Adobe | Acrobat and Reader | 2022-06-08 | Unknown |
| CVE-2009-4324 | Adobe Acrobat and Reader Use-After-Free Vulnerability | Adobe | Acrobat and Reader | 2022-06-08 | Unknown |
| CVE-2010-1297 | Adobe Flash Player Memory Corruption Vulnerability | Adobe | Flash Player | 2022-06-08 | Unknown |
| CVE-2010-2572 | Microsoft PowerPoint Buffer Overflow Vulnerability | Microsoft | PowerPoint | 2022-06-08 | Unknown |
| CVE-2010-2883 | Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability | Adobe | Acrobat and Reader | 2022-06-08 | Unknown |
| CVE-2011-0609 | Adobe Flash Player Unspecified Vulnerability | Adobe | Flash Player | 2022-06-08 | Unknown |
| CVE-2011-2462 | Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability | Adobe | Reader and Acrobat | 2022-06-08 | Unknown |
| CVE-2012-0151 | Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability | Microsoft | Windows | 2022-06-08 | Unknown |
| CVE-2012-0754 | Adobe Flash Player Memory Corruption Vulnerability | Adobe | Flash Player | 2022-06-08 | Unknown |
| CVE-2012-0767 | Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability | Adobe | Flash Player | 2022-06-08 | Unknown |
| CVE-2012-1889 | Microsoft XML Core Services Memory Corruption Vulnerability | Microsoft | XML Core Services | 2022-06-08 | Unknown |
| CVE-2012-4969 | Microsoft Internet Explorer Use-After-Free Vulnerability | Microsoft | Internet Explorer | 2022-06-08 | Unknown |
| CVE-2012-5054 | Adobe Flash Player Integer Overflow Vulnerability | Adobe | Flash Player | 2022-06-08 | Unknown |
| CVE-2013-1331 | Microsoft Office Buffer Overflow Vulnerability | Microsoft | Office | 2022-06-08 | Unknown |
| CVE-2016-1646 | Google Chromium V8 Out-of-Bounds Read Vulnerability | Chromium V8 | 2022-06-08 | Unknown | |
| CVE-2016-5198 | Google Chromium V8 Out-of-Bounds Memory Vulnerability | Chromium V8 | 2022-06-08 | Unknown | |
| CVE-2017-5030 | Google Chromium V8 Memory Corruption Vulnerability | Chromium V8 | 2022-06-08 | Unknown | |
| CVE-2017-5070 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2022-06-08 | Unknown | |
| CVE-2017-6862 | NETGEAR Multiple Devices Buffer Overflow Vulnerability | NETGEAR | Multiple Devices | 2022-06-08 | Unknown |
| CVE-2018-17463 | Google Chromium V8 Remote Code Execution Vulnerability | Chromium V8 | 2022-06-08 | Unknown | |
| CVE-2018-17480 | Google Chromium V8 Out-of-Bounds Write Vulnerability | Chromium V8 | 2022-06-08 | Unknown | |
| CVE-2018-4990 | Adobe Acrobat and Reader Double Free Vulnerability | Adobe | Acrobat and Reader | 2022-06-08 | Unknown |
| CVE-2018-6065 | Google Chromium V8 Integer Overflow Vulnerability | Chromium V8 | 2022-06-08 | Unknown | |
| CVE-2019-15271 | Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability | Cisco | RV Series Routers | 2022-06-08 | Unknown |
| CVE-2019-5825 | Google Chromium V8 Out-of-Bounds Write Vulnerability | Chromium V8 | 2022-06-08 | Unknown | |
| CVE-2019-7192 | QNAP Photo Station Improper Access Control Vulnerability | QNAP | Photo Station | 2022-06-08 | Known |
| CVE-2019-7193 | QNAP QTS Improper Input Validation Vulnerability | QNAP | QTS | 2022-06-08 | Known |
| CVE-2019-7194 | QNAP Photo Station Path Traversal Vulnerability | QNAP | Photo Station | 2022-06-08 | Known |
| CVE-2019-7195 | QNAP Photo Station Path Traversal Vulnerability | QNAP | Photo Station | 2022-06-08 | Known |
| CVE-2022-26134 | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability | Atlassian | Confluence Server/Data Center | 2022-06-02 | Known |
| CVE-2010-0738 | Red Hat JBoss Authentication Bypass Vulnerability | Red Hat | JBoss | 2022-05-25 | Known |
| CVE-2010-0840 | Oracle JRE Unspecified Vulnerability | Oracle | Java Runtime Environment (JRE) | 2022-05-25 | Unknown |
| CVE-2010-1428 | Red Hat JBoss Information Disclosure Vulnerability | Red Hat | JBoss | 2022-05-25 | Known |
| CVE-2012-1710 | Oracle Fusion Middleware Unspecified Vulnerability | Oracle | Fusion Middleware | 2022-05-25 | Known |
| CVE-2013-0074 | Microsoft Silverlight Double Dereference Vulnerability | Microsoft | Silverlight | 2022-05-25 | Known |
| CVE-2013-0422 | Oracle JRE Remote Code Execution Vulnerability | Oracle | Java Runtime Environment (JRE) | 2022-05-25 | Known |
| CVE-2013-0431 | Oracle JRE Sandbox Bypass Vulnerability | Oracle | Java Runtime Environment (JRE) | 2022-05-25 | Known |
| CVE-2013-2423 | Oracle JRE Unspecified Vulnerability | Oracle | Java Runtime Environment (JRE) | 2022-05-25 | Unknown |
| CVE-2013-3896 | Microsoft Silverlight Information Disclosure Vulnerability | Microsoft | Silverlight | 2022-05-25 | Unknown |
| CVE-2013-3993 | IBM InfoSphere BigInsights Invalid Input Vulnerability | IBM | InfoSphere BigInsights | 2022-05-25 | Known |
| CVE-2013-7331 | Microsoft Internet Explorer Information Disclosure Vulnerability | Microsoft | Internet Explorer | 2022-05-25 | Unknown |
| CVE-2014-0546 | Adobe Reader and Acrobat Sandbox Bypass Vulnerability | Adobe | Reader and Acrobat | 2022-05-25 | Unknown |
| CVE-2014-2817 | Microsoft Internet Explorer Privilege Escalation Vulnerability | Microsoft | Internet Explorer | 2022-05-25 | Unknown |
| CVE-2014-3153 | Linux Kernel Privilege Escalation Vulnerability | Linux | Kernel | 2022-05-25 | Unknown |
| CVE-2014-4077 | Microsoft IME Japanese Privilege Escalation Vulnerability | Microsoft | Input Method Editor (IME) Japanese | 2022-05-25 | Unknown |
| CVE-2014-4123 | Microsoft Internet Explorer Privilege Escalation Vulnerability | Microsoft | Internet Explorer | 2022-05-25 | Unknown |
| CVE-2014-4148 | Microsoft Windows Remote Code Execution Vulnerability | Microsoft | Windows | 2022-05-25 | Unknown |
| CVE-2014-8439 | Adobe Flash Player Dereferenced Pointer Vulnerability | Adobe | Flash Player | 2022-05-25 | Unknown |
| CVE-2015-0016 | Microsoft Windows TS WebProxy Directory Traversal Vulnerability | Microsoft | Windows | 2022-05-25 | Unknown |
| CVE-2015-0071 | Microsoft Internet Explorer ASLR Bypass Vulnerability | Microsoft | Internet Explorer | 2022-05-25 | Unknown |
| CVE-2015-0310 | Adobe Flash Player ASLR Bypass Vulnerability | Adobe | Flash Player | 2022-05-25 | Unknown |
| CVE-2015-1671 | Microsoft Windows Remote Code Execution Vulnerability | Microsoft | Windows | 2022-05-25 | Unknown |
| CVE-2015-1769 | Microsoft Windows Mount Manager Privilege Escalation Vulnerability | Microsoft | Windows | 2022-05-25 | Unknown |
| CVE-2015-2360 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2022-05-25 | Unknown |
| CVE-2015-2425 | Microsoft Internet Explorer Memory Corruption Vulnerability | Microsoft | Internet Explorer | 2022-05-25 | Unknown |
| CVE-2015-4495 | Mozilla Firefox Security Feature Bypass Vulnerability | Mozilla | Firefox | 2022-05-25 | Unknown |
| CVE-2015-6175 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Microsoft | Windows | 2022-05-25 | Unknown |
| CVE-2015-8651 | Adobe Flash Player Integer Overflow Vulnerability | Adobe | Flash Player | 2022-05-25 | Unknown |
| CVE-2016-0034 | Microsoft Silverlight Runtime Remote Code Execution Vulnerability | Microsoft | Silverlight | 2022-05-25 | Known |
| CVE-2016-0984 | Adobe Flash Player and AIR Use-After-Free Vulnerability | Adobe | Flash Player and AIR | 2022-05-25 | Unknown |
| CVE-2016-1010 | Adobe Flash Player and AIR Integer Overflow Vulnerability | Adobe | Flash Player and AIR | 2022-05-25 | Unknown |
| CVE-2016-3393 | Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability | Microsoft | Windows | 2022-05-25 | Unknown |
| CVE-2016-7256 | Microsoft Windows Open Type Font Remote Code Execution Vulnerability | Microsoft | Windows | 2022-05-25 | Unknown |
| CVE-2019-3010 | Oracle Solaris Privilege Escalation Vulnerability | Oracle | Solaris | 2022-05-25 | Unknown |
| CVE-2016-0162 | Microsoft Internet Explorer Information Disclosure Vulnerability | Microsoft | Internet Explorer | 2022-05-24 | Unknown |
| CVE-2016-3298 | Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability | Microsoft | Internet Explorer | 2022-05-24 | Unknown |
| CVE-2016-3351 | Microsoft Internet Explorer and Edge Information Disclosure Vulnerability | Microsoft | Internet Explorer and Edge | 2022-05-24 | Known |
| CVE-2016-4655 | Apple iOS Information Disclosure Vulnerability | Apple | iOS | 2022-05-24 | Unknown |
| CVE-2016-4656 | Apple iOS Memory Corruption Vulnerability | Apple | iOS | 2022-05-24 | Unknown |
| CVE-2016-4657 | Apple iOS Webkit Memory Corruption Vulnerability | Apple | iOS | 2022-05-24 | Unknown |
| CVE-2016-6366 | Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability | Cisco | Adaptive Security Appliance (ASA) | 2022-05-24 | Unknown |
| CVE-2016-6367 | Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability | Cisco | Adaptive Security Appliance (ASA) | 2022-05-24 | Unknown |
| CVE-2017-0005 | Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability | Microsoft | Windows | 2022-05-24 | Unknown |
| CVE-2017-0022 | Microsoft XML Core Services Information Disclosure Vulnerability | Microsoft | XML Core Services | 2022-05-24 | Unknown |
| CVE-2017-0147 | Microsoft Windows SMBv1 Information Disclosure Vulnerability | Microsoft | SMBv1 server | 2022-05-24 | Known |
| CVE-2017-0149 | Microsoft Internet Explorer Memory Corruption Vulnerability | Microsoft | Internet Explorer | 2022-05-24 | Unknown |
| CVE-2017-0210 | Microsoft Internet Explorer Privilege Escalation Vulnerability | Microsoft | Internet Explorer | 2022-05-24 | Unknown |
| CVE-2017-18362 | Kaseya VSA SQL Injection Vulnerability | Kaseya | Virtual System/Server Administrator (VSA) | 2022-05-24 | Known |
| CVE-2017-8291 | Artifex Ghostscript Type Confusion Vulnerability | Artifex | Ghostscript | 2022-05-24 | Unknown |
| CVE-2017-8543 | Microsoft Windows Search Remote Code Execution Vulnerability | Microsoft | Windows | 2022-05-24 | Unknown |
| CVE-2018-19943 | QNAP NAS File Station Cross-Site Scripting Vulnerability | QNAP | Network Attached Storage (NAS) | 2022-05-24 | Known |
| CVE-2018-19949 | QNAP NAS File Station Command Injection Vulnerability | QNAP | Network Attached Storage (NAS) | 2022-05-24 | Known |
| CVE-2018-19953 | QNAP NAS File Station Cross-Site Scripting Vulnerability | QNAP | Network Attached Storage (NAS) | 2022-05-24 | Known |
| CVE-2018-8611 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Microsoft | Windows | 2022-05-24 | Unknown |
| CVE-2018-5002 | Adobe Flash Player Stack-based Buffer Overflow Vulnerability | Adobe | Flash Player | 2022-05-23 | Unknown |
| CVE-2018-8589 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2022-05-23 | Unknown |
| CVE-2019-0676 | Microsoft Internet Explorer Information Disclosure Vulnerability | Microsoft | Internet Explorer | 2022-05-23 | Unknown |
| CVE-2019-0703 | Microsoft Windows SMB Information Disclosure Vulnerability | Microsoft | Windows | 2022-05-23 | Unknown |
| CVE-2019-0880 | Microsoft Windows Privilege Escalation Vulnerability | Microsoft | Windows | 2022-05-23 | Unknown |
| CVE-2019-1130 | Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability | Microsoft | Windows | 2022-05-23 | Known |
| CVE-2019-11707 | Mozilla Firefox and Thunderbird Type Confusion Vulnerability | Mozilla | Firefox and Thunderbird | 2022-05-23 | Unknown |
| CVE-2019-11708 | Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability | Mozilla | Firefox and Thunderbird | 2022-05-23 | Unknown |
| CVE-2019-13720 | Google Chrome WebAudio Use-After-Free Vulnerability | Chrome WebAudio | 2022-05-23 | Unknown | |
| CVE-2019-1385 | Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability | Microsoft | Windows | 2022-05-23 | Known |
| CVE-2019-18426 | WhatsApp Cross-Site Scripting Vulnerability | Meta Platforms | 2022-05-23 | Unknown | |
| CVE-2019-5786 | Google Chrome Blink Use-After-Free Vulnerability | Chrome Blink | 2022-05-23 | Unknown | |
| CVE-2019-7286 | Apple Multiple Products Memory Corruption Vulnerability | Apple | Multiple Products | 2022-05-23 | Unknown |
| CVE-2019-7287 | Apple iOS Memory Corruption Vulnerability | Apple | iOS | 2022-05-23 | Unknown |
| CVE-2019-8720 | WebKitGTK Memory Corruption Vulnerability | WebKitGTK | WebKitGTK | 2022-05-23 | Unknown |
| CVE-2020-0638 | Microsoft Update Notification Manager Privilege Escalation Vulnerability | Microsoft | Update Notification Manager | 2022-05-23 | Known |
| CVE-2020-1027 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Microsoft | Windows | 2022-05-23 | Unknown |
| CVE-2021-0920 | Android Kernel Race Condition Vulnerability | Android | Kernel | 2022-05-23 | Unknown |
| CVE-2021-1048 | Android Kernel Use-After-Free Vulnerability | Android | Kernel | 2022-05-23 | Unknown |
| CVE-2021-30883 | Apple Multiple Products Memory Corruption Vulnerability | Apple | Multiple Products | 2022-05-23 | Unknown |
| CVE-2022-20821 | Cisco IOS XR Open Port Vulnerability | Cisco | IOS XR | 2022-05-23 | Unknown |
| CVE-2022-22947 | VMware Spring Cloud Gateway Code Injection Vulnerability | VMware | Spring Cloud Gateway | 2022-05-16 | Unknown |
| CVE-2022-30525 | Zyxel Multiple Firewalls OS Command Injection Vulnerability | Zyxel | Multiple Firewalls | 2022-05-16 | Unknown |
| CVE-2022-1388 | F5 BIG-IP Missing Authentication Vulnerability | F5 | BIG-IP | 2022-05-10 | Known |
| CVE-2014-0160 | OpenSSL Information Disclosure Vulnerability | OpenSSL | OpenSSL | 2022-05-04 | Unknown |
| CVE-2014-0322 | Microsoft Internet Explorer Use-After-Free Vulnerability | Microsoft | Internet Explorer | 2022-05-04 | Unknown |
| CVE-2014-4113 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2022-05-04 | Unknown |
| CVE-2019-8506 | Apple Multiple Products Type Confusion Vulnerability | Apple | Multiple Products | 2022-05-04 | Unknown |
| CVE-2021-1789 | Apple Multiple Products Type Confusion Vulnerability | Apple | Multiple Products | 2022-05-04 | Unknown |
| CVE-2019-1003029 | Jenkins Script Security Plugin Sandbox Bypass Vulnerability | Jenkins | Script Security Plugin | 2022-04-25 | Unknown |
| CVE-2021-40450 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2022-04-25 | Unknown |
| CVE-2021-41357 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2022-04-25 | Unknown |
| CVE-2022-0847 | Linux Kernel Privilege Escalation Vulnerability | Linux | Kernel | 2022-04-25 | Unknown |
| CVE-2022-21919 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | Microsoft | Windows | 2022-04-25 | Unknown |
| CVE-2022-26904 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | Microsoft | Windows | 2022-04-25 | Unknown |
| CVE-2022-29464 | WSO2 Multiple Products Unrestrictive Upload of File Vulnerability | WSO2 | Multiple Products | 2022-04-25 | Known |
| CVE-2018-6882 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | Synacor | Zimbra Collaboration Suite (ZCS) | 2022-04-19 | Known |
| CVE-2019-3568 | WhatsApp VOIP Stack Buffer Overflow Vulnerability | Meta Platforms | 2022-04-19 | Unknown | |
| CVE-2022-22718 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | Microsoft | Windows | 2022-04-19 | Unknown |
| CVE-2007-3010 | Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability | Alcatel | OmniPCX Enterprise | 2022-04-15 | Unknown |
| CVE-2010-5330 | Ubiquiti AirOS Command Injection Vulnerability | Ubiquiti | AirOS | 2022-04-15 | Unknown |
| CVE-2014-0780 | InduSoft Web Studio NTWebServer Directory Traversal Vulnerability | InduSoft | Web Studio | 2022-04-15 | Unknown |
| CVE-2016-4523 | Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability | Trihedral | VTScada (formerly VTS) | 2022-04-15 | Unknown |
| CVE-2018-7841 | Schneider Electric U.motion Builder SQL Injection Vulnerability | Schneider Electric | U.motion Builder | 2022-04-15 | Unknown |
| CVE-2019-16057 | D-Link DNS-320 Remote Code Execution Vulnerability | D-Link | DNS-320 Storage Device | 2022-04-15 | Known |
| CVE-2019-3929 | Crestron Multiple Products Command Injection Vulnerability | Crestron | Multiple Products | 2022-04-15 | Unknown |
| CVE-2022-1364 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2022-04-15 | Unknown | |
| CVE-2022-22960 | VMware Multiple Products Privilege Escalation Vulnerability | VMware | Multiple Products | 2022-04-15 | Unknown |
| CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability | VMware | Workspace ONE Access and Identity Manager | 2022-04-14 | Known |
| CVE-2014-9163 | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability | Adobe | Flash Player | 2022-04-13 | Unknown |
| CVE-2015-0311 | Adobe Flash Player Remote Code Execution Vulnerability | Adobe | Flash Player | 2022-04-13 | Unknown |
| CVE-2015-0313 | Adobe Flash Player Use-After-Free Vulnerability | Adobe | Flash Player | 2022-04-13 | Unknown |
| CVE-2015-2502 | Microsoft Internet Explorer Memory Corruption Vulnerability | Microsoft | Internet Explorer | 2022-04-13 | Unknown |
| CVE-2015-3113 | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability | Adobe | Flash Player | 2022-04-13 | Unknown |
| CVE-2015-5122 | Adobe Flash Player Use-After-Free Vulnerability | Adobe | Flash Player | 2022-04-13 | Unknown |
| CVE-2015-5123 | Adobe Flash Player Use-After-Free Vulnerability | Adobe | Flash Player | 2022-04-13 | Unknown |
| CVE-2018-20753 | Kaseya VSA Remote Code Execution Vulnerability | Kaseya | Virtual System/Server Administrator (VSA) | 2022-04-13 | Known |
| CVE-2018-7602 | Drupal Core Remote Code Execution Vulnerability | Drupal | Core | 2022-04-13 | Known |
| CVE-2022-24521 | Microsoft Windows CLFS Driver Privilege Escalation Vulnerability | Microsoft | Windows | 2022-04-13 | Known |
| CVE-2017-11317 | Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability | Telerik | User Interface (UI) for ASP.NET AJAX | 2022-04-11 | Unknown |
| CVE-2020-2509 | QNAP Network-Attached Storage (NAS) Command Injection Vulnerability | QNAP | QNAP Network-Attached Storage (NAS) | 2022-04-11 | Unknown |
| CVE-2021-22600 | Linux Kernel Privilege Escalation Vulnerability | Linux | Kernel | 2022-04-11 | Unknown |
| CVE-2021-27852 | Checkbox Survey Deserialization of Untrusted Data Vulnerability | Checkbox | Checkbox Survey | 2022-04-11 | Unknown |
| CVE-2021-39793 | Google Pixel Out-of-Bounds Write Vulnerability | Pixel | 2022-04-11 | Unknown | |
| CVE-2021-42278 | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | Microsoft | Active Directory | 2022-04-11 | Known |
| CVE-2021-42287 | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | Microsoft | Active Directory | 2022-04-11 | Known |
| CVE-2022-23176 | WatchGuard Firebox and XTM Privilege Escalation Vulnerability | WatchGuard | Firebox and XTM | 2022-04-11 | Unknown |
| CVE-2017-0148 | Microsoft SMBv1 Server Remote Code Execution Vulnerability | Microsoft | SMBv1 server | 2022-04-06 | Known |
| CVE-2021-31166 | Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability | Microsoft | HTTP Protocol Stack | 2022-04-06 | Unknown |
| CVE-2021-3156 | Sudo Heap-Based Buffer Overflow Vulnerability | Sudo | Sudo | 2022-04-06 | Unknown |
| CVE-2021-45382 | D-Link Multiple Routers Remote Code Execution Vulnerability | D-Link | Multiple Routers | 2022-04-04 | Unknown |
| CVE-2022-22674 | Apple macOS Out-of-Bounds Read Vulnerability | Apple | macOS | 2022-04-04 | Unknown |
| CVE-2022-22675 | Apple macOS Out-of-Bounds Write Vulnerability | Apple | macOS | 2022-04-04 | Unknown |
| CVE-2022-22965 | Spring Framework JDK 9+ Remote Code Execution Vulnerability | VMware | Spring Framework | 2022-04-04 | Unknown |
| CVE-2018-10561 | Dasan GPON Routers Authentication Bypass Vulnerability | Dasan | Gigabit Passive Optical Network (GPON) Routers | 2022-03-31 | Unknown |
| CVE-2018-10562 | Dasan GPON Routers Command Injection Vulnerability | Dasan | Gigabit Passive Optical Network (GPON) Routers | 2022-03-31 | Known |
| CVE-2021-21551 | Dell dbutil Driver Insufficient Access Control Vulnerability | Dell | dbutil Driver | 2022-03-31 | Unknown |
| CVE-2021-28799 | QNAP NAS Improper Authorization Vulnerability | QNAP | Network Attached Storage (NAS) | 2022-03-31 | Known |
| CVE-2021-34484 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-31 | Unknown |
| CVE-2022-1040 | Sophos Firewall Authentication Bypass Vulnerability | Sophos | Firewall | 2022-03-31 | Unknown |
| CVE-2022-26871 | Trend Micro Apex Central Arbitrary File Upload Vulnerability | Trend Micro | Apex Central | 2022-03-31 | Unknown |
| CVE-2010-4398 | Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability | Microsoft | Windows | 2022-03-28 | Unknown |
| CVE-2011-2005 | Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability | Microsoft | Ancillary Function Driver (afd.sys) | 2022-03-28 | Unknown |
| CVE-2012-0518 | Oracle Fusion Middleware Unspecified Vulnerability | Oracle | Fusion Middleware | 2022-03-28 | Unknown |
| CVE-2012-2034 | Adobe Flash Player Memory Corruption Vulnerability | Adobe | Flash Player | 2022-03-28 | Unknown |
| CVE-2012-2539 | Microsoft Word Remote Code Execution Vulnerability | Microsoft | Word | 2022-03-28 | Unknown |
| CVE-2012-5076 | Oracle Java SE Sandbox Bypass Vulnerability | Oracle | Java SE | 2022-03-28 | Unknown |
| CVE-2013-1690 | Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability | Mozilla | Firefox and Thunderbird | 2022-03-28 | Unknown |
| CVE-2013-2465 | Oracle Java SE Unspecified Vulnerability | Oracle | Java SE | 2022-03-28 | Known |
| CVE-2013-2551 | Microsoft Internet Explorer Use-After-Free Vulnerability | Microsoft | Internet Explorer | 2022-03-28 | Known |
| CVE-2013-2729 | Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability | Adobe | Reader and Acrobat | 2022-03-28 | Unknown |
| CVE-2013-3660 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2022-03-28 | Unknown |
| CVE-2015-1770 | Microsoft Office Uninitialized Memory Use Vulnerability | Microsoft | Office | 2022-03-28 | Unknown |
| CVE-2015-2419 | Microsoft Internet Explorer Memory Corruption Vulnerability | Microsoft | Internet Explorer | 2022-03-28 | Unknown |
| CVE-2015-2426 | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability | Microsoft | Windows | 2022-03-28 | Unknown |
| CVE-2016-0040 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-28 | Unknown |
| CVE-2016-0151 | Microsoft Windows CSRSS Security Feature Bypass Vulnerability | Microsoft | Client-Server Run-time Subsystem (CSRSS) | 2022-03-28 | Known |
| CVE-2016-0189 | Microsoft Internet Explorer Memory Corruption Vulnerability | Microsoft | Internet Explorer | 2022-03-28 | Known |
| CVE-2016-7200 | Microsoft Edge Memory Corruption Vulnerability | Microsoft | Edge | 2022-03-28 | Unknown |
| CVE-2016-7201 | Microsoft Edge Memory Corruption Vulnerability | Microsoft | Edge | 2022-03-28 | Unknown |
| CVE-2017-0037 | Microsoft Edge and Internet Explorer Type Confusion Vulnerability | Microsoft | Edge and Internet Explorer | 2022-03-28 | Unknown |
| CVE-2017-0059 | Microsoft Internet Explorer Information Disclosure Vulnerability | Microsoft | Internet Explorer | 2022-03-28 | Unknown |
| CVE-2017-0213 | Microsoft Windows Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-28 | Known |
| CVE-2018-8405 | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability | Microsoft | DirectX Graphics Kernel (DXGKRNL) | 2022-03-28 | Known |
| CVE-2018-8406 | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability | Microsoft | DirectX Graphics Kernel (DXGKRNL) | 2022-03-28 | Known |
| CVE-2018-8440 | Microsoft Windows Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-28 | Known |
| CVE-2019-7483 | SonicWall SMA100 Directory Traversal Vulnerability | SonicWall | SMA100 | 2022-03-28 | Unknown |
| CVE-2021-20028 | SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability | SonicWall | Secure Remote Access (SRA) | 2022-03-28 | Known |
| CVE-2021-26085 | Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability | Atlassian | Confluence Server | 2022-03-28 | Known |
| CVE-2021-34486 | Microsoft Windows Event Tracing Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-28 | Unknown |
| CVE-2021-38646 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | Microsoft | Office | 2022-03-28 | Known |
| CVE-2022-0543 | Debian-specific Redis Server Lua Sandbox Escape Vulnerability | Redis | Debian-specific Redis Servers | 2022-03-28 | Unknown |
| CVE-2022-1096 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2022-03-28 | Unknown | |
| CVE-2005-2773 | HP OpenView Network Node Manager Remote Code Execution Vulnerability | Hewlett Packard (HP) | OpenView Network Node Manager | 2022-03-25 | Unknown |
| CVE-2009-0927 | Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability | Adobe | Reader and Acrobat | 2022-03-25 | Unknown |
| CVE-2009-1151 | phpMyAdmin Remote Code Execution Vulnerability | phpMyAdmin | phpMyAdmin | 2022-03-25 | Unknown |
| CVE-2009-2055 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | Cisco | IOS XR | 2022-03-25 | Unknown |
| CVE-2010-2861 | Adobe ColdFusion Directory Traversal Vulnerability | Adobe | ColdFusion | 2022-03-25 | Known |
| CVE-2010-3035 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | Cisco | IOS XR | 2022-03-25 | Unknown |
| CVE-2010-4344 | Exim Heap-Based Buffer Overflow Vulnerability | Exim | Exim | 2022-03-25 | Unknown |
| CVE-2010-4345 | Exim Privilege Escalation Vulnerability | Exim | Exim | 2022-03-25 | Unknown |
| CVE-2012-1823 | PHP-CGI Query String Parameter Vulnerability | PHP | PHP | 2022-03-25 | Unknown |
| CVE-2013-2251 | Apache Struts Improper Input Validation Vulnerability | Apache | Struts | 2022-03-25 | Unknown |
| CVE-2013-4810 | HP Multiple Products Remote Code Execution Vulnerability | Hewlett Packard (HP) | ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management | 2022-03-25 | Unknown |
| CVE-2013-5223 | D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | D-Link | DSL-2760U | 2022-03-25 | Unknown |
| CVE-2014-0130 | Ruby on Rails Directory Traversal Vulnerability | Rails | Ruby on Rails | 2022-03-25 | Unknown |
| CVE-2014-3120 | Elasticsearch Remote Code Execution Vulnerability | Elastic | Elasticsearch | 2022-03-25 | Unknown |
| CVE-2014-6287 | Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability | Rejetto | HTTP File Server (HFS) | 2022-03-25 | Unknown |
| CVE-2014-6324 | Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability | Microsoft | Kerberos Key Distribution Center (KDC) | 2022-03-25 | Unknown |
| CVE-2014-6332 | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability | Microsoft | Windows | 2022-03-25 | Unknown |
| CVE-2015-0666 | Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability | Cisco | Prime Data Center Network Manager (DCNM) | 2022-03-25 | Unknown |
| CVE-2015-1187 | D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability | D-Link and TRENDnet | Multiple Devices | 2022-03-25 | Unknown |
| CVE-2015-1427 | Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability | Elastic | Elasticsearch | 2022-03-25 | Unknown |
| CVE-2015-3035 | TP-Link Multiple Archer Devices Directory Traversal Vulnerability | TP-Link | Multiple Archer Devices | 2022-03-25 | Unknown |
| CVE-2015-4068 | Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability | Arcserve | Unified Data Protection (UDP) | 2022-03-25 | Unknown |
| CVE-2016-0752 | Ruby on Rails Directory Traversal Vulnerability | Rails | Ruby on Rails | 2022-03-25 | Unknown |
| CVE-2016-10174 | NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability | NETGEAR | WNR2000v5 Router | 2022-03-25 | Unknown |
| CVE-2016-11021 | D-Link DCS-930L Devices OS Command Injection Vulnerability | D-Link | DCS-930L Devices | 2022-03-25 | Unknown |
| CVE-2016-1555 | NETGEAR Multiple WAP Devices Command Injection Vulnerability | NETGEAR | Wireless Access Point (WAP) Devices | 2022-03-25 | Unknown |
| CVE-2016-4171 | Adobe Flash Player Remote Code Execution Vulnerability | Adobe | Flash Player | 2022-03-25 | Unknown |
| CVE-2016-7892 | Adobe Flash Player Use-After-Free Vulnerability | Adobe | Flash Player | 2022-03-25 | Unknown |
| CVE-2017-0146 | Microsoft Windows SMB Remote Code Execution Vulnerability | Microsoft | Windows | 2022-03-25 | Known |
| CVE-2017-12615 | Apache Tomcat on Windows Remote Code Execution Vulnerability | Apache | Tomcat | 2022-03-25 | Known |
| CVE-2017-12617 | Apache Tomcat Remote Code Execution Vulnerability | Apache | Tomcat | 2022-03-25 | Unknown |
| CVE-2017-3881 | Cisco IOS and IOS XE Remote Code Execution Vulnerability | Cisco | IOS and IOS XE | 2022-03-25 | Unknown |
| CVE-2017-6316 | Citrix Multiple Products Remote Code Execution Vulnerability | Citrix | NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | 2022-03-25 | Unknown |
| CVE-2017-6334 | NETGEAR DGN2200 Devices OS Command Injection Vulnerability | NETGEAR | DGN2200 Devices | 2022-03-25 | Unknown |
| CVE-2018-0125 | Cisco VPN Routers Remote Code Execution Vulnerability | Cisco | VPN Routers | 2022-03-25 | Unknown |
| CVE-2018-0147 | Cisco Secure Access Control System Java Deserialization Vulnerability | Cisco | Secure Access Control System (ACS) | 2022-03-25 | Unknown |
| CVE-2018-11138 | Quest KACE System Management Appliance Remote Command Execution Vulnerability | Quest | KACE System Management Appliance | 2022-03-25 | Known |
| CVE-2018-1273 | VMware Tanzu Spring Data Commons Property Binder Vulnerability | VMware Tanzu | Spring Data Commons | 2022-03-25 | Known |
| CVE-2018-14839 | LG N1A1 NAS Remote Command Execution Vulnerability | LG | N1A1 NAS | 2022-03-25 | Unknown |
| CVE-2018-6961 | VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability | VMware | SD-WAN Edge | 2022-03-25 | Unknown |
| CVE-2018-8373 | Microsoft Scripting Engine Memory Corruption Vulnerability | Microsoft | Internet Explorer Scripting Engine | 2022-03-25 | Unknown |
| CVE-2018-8414 | Microsoft Windows Shell Remote Code Execution Vulnerability | Microsoft | Windows | 2022-03-25 | Unknown |
| CVE-2019-0903 | Microsoft GDI Remote Code Execution Vulnerability | Microsoft | Graphics Device Interface (GDI) | 2022-03-25 | Unknown |
| CVE-2019-1003030 | Jenkins Matrix Project Plugin Remote Code Execution Vulnerability | Jenkins | Matrix Project Plugin | 2022-03-25 | Unknown |
| CVE-2019-10068 | Kentico Xperience Deserialization of Untrusted Data Vulnerability | Kentico | Xperience | 2022-03-25 | Unknown |
| CVE-2019-11043 | PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability | PHP | FastCGI Process Manager (FPM) | 2022-03-25 | Known |
| CVE-2019-12989 | Citrix SD-WAN and NetScaler SQL Injection Vulnerability | Citrix | SD-WAN and NetScaler | 2022-03-25 | Unknown |
| CVE-2019-12991 | Citrix SD-WAN and NetScaler Command Injection Vulnerability | Citrix | SD-WAN and NetScaler | 2022-03-25 | Unknown |
| CVE-2019-15107 | Webmin Command Injection Vulnerability | Webmin | Webmin | 2022-03-25 | Known |
| CVE-2019-16920 | D-Link Multiple Routers Command Injection Vulnerability | D-Link | Multiple Routers | 2022-03-25 | Unknown |
| CVE-2019-2616 | Oracle BI Publisher Unauthorized Access Vulnerability | Oracle | BI Publisher (Formerly XML Publisher) | 2022-03-25 | Unknown |
| CVE-2019-6340 | Drupal Core Remote Code Execution Vulnerability | Drupal | Core | 2022-03-25 | Unknown |
| CVE-2020-1631 | Juniper Junos OS Path Traversal Vulnerability | Juniper | Junos OS | 2022-03-25 | Unknown |
| CVE-2020-1956 | Apache Kylin OS Command Injection Vulnerability | Apache | Kylin | 2022-03-25 | Unknown |
| CVE-2020-2021 | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | Palo Alto Networks | PAN-OS | 2022-03-25 | Known |
| CVE-2020-2506 | QNAP Helpdesk Improper Access Control Vulnerability | QNAP Systems | Helpdesk | 2022-03-25 | Unknown |
| CVE-2020-25223 | Sophos SG UTM Remote Code Execution Vulnerability | Sophos | SG UTM | 2022-03-25 | Unknown |
| CVE-2020-5410 | VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability | VMware Tanzu | Spring Cloud Configuration (Config) Server | 2022-03-25 | Unknown |
| CVE-2020-7247 | OpenSMTPD Remote Code Execution Vulnerability | OpenBSD | OpenSMTPD | 2022-03-25 | Unknown |
| CVE-2020-9054 | Zyxel Multiple NAS Devices OS Command Injection Vulnerability | Zyxel | Multiple Network-Attached Storage (NAS) Devices | 2022-03-25 | Unknown |
| CVE-2020-9377 | D-Link DIR-610 Devices Remote Command Execution | D-Link | DIR-610 Devices | 2022-03-25 | Unknown |
| CVE-2021-22941 | Citrix ShareFile Improper Access Control Vulnerability | Citrix | ShareFile | 2022-03-25 | Known |
| CVE-2021-42237 | Sitecore XP Remote Command Execution Vulnerability | Sitecore | XP | 2022-03-25 | Known |
| CVE-2022-21999 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-25 | Known |
| CVE-2022-26143 | MiCollab, MiVoice Business Express Access Control Vulnerability | Mitel | MiCollab, MiVoice Business Express | 2022-03-25 | Unknown |
| CVE-2022-26318 | WatchGuard Firebox and XTM Appliances Arbitrary Code Execution | WatchGuard | Firebox and XTM Appliances | 2022-03-25 | Unknown |
| CVE-2015-2546 | Microsoft Win32k Memory Corruption Vulnerability | Microsoft | Win32k | 2022-03-15 | Known |
| CVE-2016-3309 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-15 | Known |
| CVE-2017-0101 | Microsoft Windows Transaction Manager Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-15 | Known |
| CVE-2018-8120 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2022-03-15 | Known |
| CVE-2019-0543 | Microsoft Windows Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-15 | Known |
| CVE-2019-0841 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-15 | Known |
| CVE-2019-1064 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-15 | Known |
| CVE-2019-1069 | Microsoft Task Scheduler Privilege Escalation Vulnerability | Microsoft | Task Scheduler | 2022-03-15 | Known |
| CVE-2019-1129 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-15 | Known |
| CVE-2019-1132 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2022-03-15 | Unknown |
| CVE-2019-1253 | Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-15 | Known |
| CVE-2019-1315 | Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-15 | Known |
| CVE-2019-1322 | Microsoft Windows Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-15 | Known |
| CVE-2019-1405 | Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-15 | Known |
| CVE-2020-5135 | SonicWall SonicOS Buffer Overflow Vulnerability | SonicWall | SonicOS | 2022-03-15 | Known |
| CVE-2009-3960 | Adobe BlazeDS Information Disclosure Vulnerability | Adobe | BlazeDS | 2022-03-07 | Known |
| CVE-2013-0625 | Adobe ColdFusion Authentication Bypass Vulnerability | Adobe | ColdFusion | 2022-03-07 | Unknown |
| CVE-2013-0629 | Adobe ColdFusion Directory Traversal Vulnerability | Adobe | ColdFusion | 2022-03-07 | Unknown |
| CVE-2013-0631 | Adobe ColdFusion Information Disclosure Vulnerability | Adobe | ColdFusion | 2022-03-07 | Unknown |
| CVE-2016-6277 | NETGEAR Multiple Routers Remote Code Execution Vulnerability | NETGEAR | Multiple Routers | 2022-03-07 | Unknown |
| CVE-2017-6077 | NETGEAR DGN2200 Remote Code Execution Vulnerability | NETGEAR | Wireless Router DGN2200 | 2022-03-07 | Unknown |
| CVE-2019-11581 | Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability | Atlassian | Jira Server and Data Center | 2022-03-07 | Unknown |
| CVE-2020-8218 | Pulse Connect Secure Code Injection Vulnerability | Pulse Secure | Pulse Connect Secure | 2022-03-07 | Unknown |
| CVE-2021-21973 | VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability | VMware | vCenter Server and Cloud Foundation | 2022-03-07 | Unknown |
| CVE-2022-26485 | Mozilla Firefox Use-After-Free Vulnerability | Mozilla | Firefox | 2022-03-07 | Unknown |
| CVE-2022-26486 | Mozilla Firefox Use-After-Free Vulnerability | Mozilla | Firefox | 2022-03-07 | Unknown |
| CVE-2002-0367 | Microsoft Windows Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-03 | Unknown |
| CVE-2004-0210 | Microsoft Windows Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-03 | Unknown |
| CVE-2008-2992 | Adobe Reader and Acrobat Input Validation Vulnerability | Adobe | Acrobat and Reader | 2022-03-03 | Known |
| CVE-2008-3431 | Oracle VirtualBox Insufficient Input Validation Vulnerability | Oracle | VirtualBox | 2022-03-03 | Unknown |
| CVE-2009-1123 | Microsoft Windows Improper Input Validation Vulnerability | Microsoft | Windows | 2022-03-03 | Unknown |
| CVE-2009-3129 | Microsoft Excel Featheader Record Memory Corruption Vulnerability | Microsoft | Excel | 2022-03-03 | Unknown |
| CVE-2010-0188 | Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability | Adobe | Reader and Acrobat | 2022-03-03 | Known |
| CVE-2010-0232 | Microsoft Windows Kernel Exception Handler Vulnerability | Microsoft | Windows | 2022-03-03 | Unknown |
| CVE-2010-3333 | Microsoft Office Stack-based Buffer Overflow Vulnerability | Microsoft | Office | 2022-03-03 | Unknown |
| CVE-2011-0611 | Adobe Flash Player Remote Code Execution Vulnerability | Adobe | Flash Player | 2022-03-03 | Unknown |
| CVE-2011-1889 | Microsoft Forefront TMG Remote Code Execution Vulnerability | Microsoft | Forefront Threat Management Gateway (TMG) | 2022-03-03 | Unknown |
| CVE-2011-3544 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | Oracle | Java SE JDK and JRE | 2022-03-03 | Unknown |
| CVE-2012-0507 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | Oracle | Java SE | 2022-03-03 | Known |
| CVE-2012-1535 | Adobe Flash Player Arbitrary Code Execution Vulnerability | Adobe | Flash Player | 2022-03-03 | Unknown |
| CVE-2012-1723 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | Oracle | Java SE | 2022-03-03 | Known |
| CVE-2012-1856 | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability | Microsoft | Office | 2022-03-03 | Unknown |
| CVE-2012-4681 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | Oracle | Java SE | 2022-03-03 | Known |
| CVE-2013-0632 | Adobe ColdFusion Authentication Bypass Vulnerability | Adobe | ColdFusion | 2022-03-03 | Unknown |
| CVE-2013-0640 | Adobe Reader and Acrobat Memory Corruption Vulnerability | Adobe | Reader and Acrobat | 2022-03-03 | Unknown |
| CVE-2013-0641 | Adobe Reader Buffer Overflow Vulnerability | Adobe | Reader | 2022-03-03 | Unknown |
| CVE-2013-1347 | Microsoft Internet Explorer Remote Code Execution Vulnerability | Microsoft | Internet Explorer | 2022-03-03 | Unknown |
| CVE-2013-1675 | Mozilla Firefox Information Disclosure Vulnerability | Mozilla | Firefox | 2022-03-03 | Unknown |
| CVE-2013-3346 | Adobe Reader and Acrobat Memory Corruption Vulnerability | Adobe | Reader and Acrobat | 2022-03-03 | Unknown |
| CVE-2013-3897 | Microsoft Internet Explorer Use-After-Free Vulnerability | Microsoft | Internet Explorer | 2022-03-03 | Unknown |
| CVE-2013-5065 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-03 | Unknown |
| CVE-2014-0496 | Adobe Reader and Acrobat Use-After-Free Vulnerability | Adobe | Reader and Acrobat | 2022-03-03 | Unknown |
| CVE-2014-4114 | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability | Microsoft | Windows | 2022-03-03 | Unknown |
| CVE-2015-1642 | Microsoft Office Memory Corruption Vulnerability | Microsoft | Office | 2022-03-03 | Unknown |
| CVE-2015-1701 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2022-03-03 | Known |
| CVE-2015-2387 | Microsoft ATM Font Driver Privilege Escalation Vulnerability | Microsoft | ATM Font Driver | 2022-03-03 | Unknown |
| CVE-2015-2424 | Microsoft PowerPoint Memory Corruption Vulnerability | Microsoft | PowerPoint | 2022-03-03 | Unknown |
| CVE-2015-2545 | Microsoft Office Malformed EPS File Vulnerability | Microsoft | Office | 2022-03-03 | Unknown |
| CVE-2015-2590 | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability | Oracle | Java SE | 2022-03-03 | Unknown |
| CVE-2015-3043 | Adobe Flash Player Memory Corruption Vulnerability | Adobe | Flash Player | 2022-03-03 | Unknown |
| CVE-2015-4902 | Oracle Java SE Integrity Check Vulnerability | Oracle | Java SE | 2022-03-03 | Unknown |
| CVE-2015-5119 | Adobe Flash Player Use-After-Free Vulnerability | Adobe | Flash Player | 2022-03-03 | Unknown |
| CVE-2015-7645 | Adobe Flash Player Arbitrary Code Execution Vulnerability | Adobe | Flash Player | 2022-03-03 | Known |
| CVE-2016-0099 | Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-03 | Known |
| CVE-2016-1019 | Adobe Flash Player Arbitrary Code Execution Vulnerability | Adobe | Flash Player | 2022-03-03 | Known |
| CVE-2016-4117 | Adobe Flash Player Arbitrary Code Execution Vulnerability | Adobe | Flash Player | 2022-03-03 | Known |
| CVE-2016-5195 | Linux Kernel Race Condition Vulnerability | Linux | Kernel | 2022-03-03 | Unknown |
| CVE-2016-7193 | Microsoft Office Memory Corruption Vulnerability | Microsoft | Office | 2022-03-03 | Unknown |
| CVE-2016-7262 | Microsoft Office Security Feature Bypass Vulnerability | Microsoft | Excel | 2022-03-03 | Unknown |
| CVE-2016-7855 | Adobe Flash Player Use-After-Free Vulnerability | Adobe | Flash Player | 2022-03-03 | Unknown |
| CVE-2016-8562 | Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability | Siemens | SIMATIC CP | 2022-03-03 | Unknown |
| CVE-2017-0001 | Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability | Microsoft | Graphics Device Interface (GDI) | 2022-03-03 | Unknown |
| CVE-2017-0261 | Microsoft Office Use-After-Free Vulnerability | Microsoft | Office | 2022-03-03 | Unknown |
| CVE-2017-11292 | Adobe Flash Player Type Confusion Vulnerability | Adobe | Flash Player | 2022-03-03 | Unknown |
| CVE-2017-11826 | Microsoft Office Remote Code Execution Vulnerability | Microsoft | Office | 2022-03-03 | Unknown |
| CVE-2017-12231 | Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability | Cisco | IOS software | 2022-03-03 | Unknown |
| CVE-2017-12232 | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability | Cisco | IOS software | 2022-03-03 | Unknown |
| CVE-2017-12233 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | Cisco | IOS software | 2022-03-03 | Unknown |
| CVE-2017-12234 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | Cisco | IOS software | 2022-03-03 | Unknown |
| CVE-2017-12235 | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability | Cisco | IOS software | 2022-03-03 | Unknown |
| CVE-2017-12237 | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability | Cisco | IOS and IOS XE Software | 2022-03-03 | Unknown |
| CVE-2017-12238 | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability | Cisco | Catalyst 6800 Series Switches | 2022-03-03 | Unknown |
| CVE-2017-12240 | Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability | Cisco | IOS and IOS XE Software | 2022-03-03 | Unknown |
| CVE-2017-12319 | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability | Cisco | IOS XE Software | 2022-03-03 | Unknown |
| CVE-2017-6627 | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability | Cisco | IOS and IOS XE Software | 2022-03-03 | Unknown |
| CVE-2017-6663 | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability | Cisco | IOS and IOS XE Software | 2022-03-03 | Unknown |
| CVE-2017-6736 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Cisco | IOS and IOS XE Software | 2022-03-03 | Unknown |
| CVE-2017-6737 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Cisco | IOS and IOS XE Software | 2022-03-03 | Unknown |
| CVE-2017-6738 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Cisco | IOS and IOS XE Software | 2022-03-03 | Unknown |
| CVE-2017-6739 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Cisco | IOS and IOS XE Software | 2022-03-03 | Unknown |
| CVE-2017-6740 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Cisco | IOS and IOS XE Software | 2022-03-03 | Unknown |
| CVE-2017-6743 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Cisco | IOS and IOS XE Software | 2022-03-03 | Unknown |
| CVE-2017-6744 | Cisco IOS Software SNMP Remote Code Execution Vulnerability | Cisco | IOS software | 2022-03-03 | Unknown |
| CVE-2017-8540 | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability | Microsoft | Malware Protection Engine | 2022-03-03 | Unknown |
| CVE-2018-0151 | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability | Cisco | IOS and IOS XE Software | 2022-03-03 | Unknown |
| CVE-2018-0154 | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability | Cisco | IOS Software | 2022-03-03 | Unknown |
| CVE-2018-0155 | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability | Cisco | Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | 2022-03-03 | Unknown |
| CVE-2018-0156 | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability | Cisco | IOS Software and Cisco IOS XE Software | 2022-03-03 | Unknown |
| CVE-2018-0158 | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability | Cisco | IOS Software and Cisco IOS XE Software | 2022-03-03 | Unknown |
| CVE-2018-0159 | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability | Cisco | IOS Software and Cisco IOS XE Software | 2022-03-03 | Unknown |
| CVE-2018-0161 | Cisco IOS Software Resource Management Errors Vulnerability | Cisco | IOS Software | 2022-03-03 | Unknown |
| CVE-2018-0167 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | Cisco | IOS, XR, and XE Software | 2022-03-03 | Unknown |
| CVE-2018-0172 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | Cisco | IOS and IOS XE Software | 2022-03-03 | Unknown |
| CVE-2018-0173 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | Cisco | IOS and IOS XE Software | 2022-03-03 | Unknown |
| CVE-2018-0174 | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability | Cisco | IOS XE Software | 2022-03-03 | Unknown |
| CVE-2018-0175 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | Cisco | IOS, XR, and XE Software | 2022-03-03 | Unknown |
| CVE-2018-0179 | Cisco IOS Software Denial-of-Service Vulnerability | Cisco | IOS Software | 2022-03-03 | Unknown |
| CVE-2018-0180 | Cisco IOS Software Denial-of-Service Vulnerability | Cisco | IOS Software | 2022-03-03 | Unknown |
| CVE-2018-8298 | ChakraCore Scripting Engine Type Confusion Vulnerability | ChakraCore | ChakraCore scripting engine | 2022-03-03 | Unknown |
| CVE-2018-8581 | Microsoft Exchange Server Privilege Escalation Vulnerability | Microsoft | Exchange Server | 2022-03-03 | Known |
| CVE-2019-1297 | Microsoft Excel Remote Code Execution Vulnerability | Microsoft | Excel | 2022-03-03 | Unknown |
| CVE-2019-1652 | Cisco Small Business Routers Improper Input Validation Vulnerability | Cisco | Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | 2022-03-03 | Unknown |
| CVE-2019-16928 | Exim Out-of-bounds Write Vulnerability | Exim | Exim Internet Mailer | 2022-03-03 | Unknown |
| CVE-2020-11899 | Treck TCP/IP stack Out-of-Bounds Read Vulnerability | Treck TCP/IP stack | IPv6 | 2022-03-03 | Unknown |
| CVE-2020-1938 | Apache Tomcat Improper Privilege Management Vulnerability | Apache | Tomcat | 2022-03-03 | Unknown |
| CVE-2021-41379 | Microsoft Windows Installer Privilege Escalation Vulnerability | Microsoft | Windows | 2022-03-03 | Known |
| CVE-2022-20699 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Cisco | Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | Unknown |
| CVE-2022-20700 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Cisco | Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | Unknown |
| CVE-2022-20701 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Cisco | Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | Unknown |
| CVE-2022-20703 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Cisco | Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | Unknown |
| CVE-2022-20708 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Cisco | Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | Unknown |
| CVE-2014-6352 | Microsoft Windows Code Injection Vulnerability | Microsoft | Windows | 2022-02-25 | Unknown |
| CVE-2017-0222 | Microsoft Internet Explorer Remote Code Execution Vulnerability | Microsoft | Internet Explorer | 2022-02-25 | Unknown |
| CVE-2017-8570 | Microsoft Office Remote Code Execution Vulnerability | Microsoft | Office | 2022-02-25 | Unknown |
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability | Synacor | Zimbra Collaborate Suite (ZCS) | 2022-02-25 | Known |
| CVE-2022-23131 | Zabbix Frontend Authentication Bypass Vulnerability | Zabbix | Frontend | 2022-02-22 | Unknown |
| CVE-2022-23134 | Zabbix Frontend Improper Access Control Vulnerability | Zabbix | Frontend | 2022-02-22 | Unknown |
| CVE-2013-3906 | Microsoft Graphics Component Memory Corruption Vulnerability | Microsoft | Graphics Component | 2022-02-15 | Unknown |
| CVE-2014-1761 | Microsoft Word Memory Corruption Vulnerability | Microsoft | Word | 2022-02-15 | Unknown |
| CVE-2017-9841 | PHPUnit Command Injection Vulnerability | PHPUnit | PHPUnit | 2022-02-15 | Unknown |
| CVE-2018-15982 | Adobe Flash Player Use-After-Free Vulnerability | Adobe | Flash Player | 2022-02-15 | Known |
| CVE-2018-20250 | WinRAR Absolute Path Traversal Vulnerability | RARLAB | WinRAR | 2022-02-15 | Known |
| CVE-2018-8174 | Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability | Microsoft | Windows | 2022-02-15 | Known |
| CVE-2019-0752 | Microsoft Internet Explorer Type Confusion Vulnerability | Microsoft | Internet Explorer | 2022-02-15 | Known |
| CVE-2022-0609 | Google Chromium Animation Use-After-Free Vulnerability | Chromium Animation | 2022-02-15 | Unknown | |
| CVE-2022-24086 | Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability | Adobe | Commerce and Magento Open Source | 2022-02-15 | Unknown |
| CVE-2022-22620 | Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability | Apple | iOS, iPadOS, and macOS | 2022-02-11 | Unknown |
| CVE-2014-4404 | Apple OS X Heap-Based Buffer Overflow Vulnerability | Apple | OS X | 2022-02-10 | Unknown |
| CVE-2015-1130 | Apple OS X Authentication Bypass Vulnerability | Apple | OS X | 2022-02-10 | Unknown |
| CVE-2015-1635 | Microsoft HTTP.sys Remote Code Execution Vulnerability | Microsoft | HTTP.sys | 2022-02-10 | Unknown |
| CVE-2015-2051 | D-Link DIR-645 Router Remote Code Execution Vulnerability | D-Link | DIR-645 Router | 2022-02-10 | Unknown |
| CVE-2016-3088 | Apache ActiveMQ Improper Input Validation Vulnerability | Apache | ActiveMQ | 2022-02-10 | Unknown |
| CVE-2017-0144 | Microsoft SMBv1 Remote Code Execution Vulnerability | Microsoft | SMBv1 | 2022-02-10 | Known |
| CVE-2017-0145 | Microsoft SMBv1 Remote Code Execution Vulnerability | Microsoft | SMBv1 | 2022-02-10 | Known |
| CVE-2017-0262 | Microsoft Office Remote Code Execution Vulnerability | Microsoft | Office | 2022-02-10 | Unknown |
| CVE-2017-0263 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2022-02-10 | Unknown |
| CVE-2017-10271 | Oracle Corporation WebLogic Server Remote Code Execution Vulnerability | Oracle | WebLogic Server | 2022-02-10 | Known |
| CVE-2017-8464 | Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability | Microsoft | Windows | 2022-02-10 | Unknown |
| CVE-2017-9791 | Apache Struts 1 Improper Input Validation Vulnerability | Apache | Struts 1 | 2022-02-10 | Unknown |
| CVE-2018-1000861 | Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability | Jenkins | Jenkins Stapler Web Framework | 2022-02-10 | Unknown |
| CVE-2020-0796 | Microsoft SMBv3 Remote Code Execution Vulnerability | Microsoft | SMBv3 | 2022-02-10 | Known |
| CVE-2021-36934 | Microsoft Windows SAM Local Privilege Escalation Vulnerability | Microsoft | Windows | 2022-02-10 | Unknown |
| CVE-2022-21882 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2022-02-04 | Known |
| CVE-2014-1776 | Microsoft Internet Explorer Memory Corruption Vulnerability | Microsoft | Internet Explorer | 2022-01-28 | Unknown |
| CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | GNU | Bourne-Again Shell (Bash) | 2022-01-28 | Unknown |
| CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | GNU | Bourne-Again Shell (Bash) | 2022-01-28 | Unknown |
| CVE-2017-5689 | Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability | Intel | Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability | 2022-01-28 | Unknown |
| CVE-2020-0787 | Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability | Microsoft | Windows | 2022-01-28 | Known |
| CVE-2020-5722 | Grandstream Networks UCM6200 Series SQL Injection Vulnerability | Grandstream | UCM6200 | 2022-01-28 | Unknown |
| CVE-2021-20038 | SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability | SonicWall | SMA 100 Appliances | 2022-01-28 | Known |
| CVE-2022-22587 | Apple Memory Corruption Vulnerability | Apple | iOS and macOS | 2022-01-28 | Unknown |
| CVE-2006-1547 | Apache Struts 1 ActionForm Denial-of-Service Vulnerability | Apache | Struts 1 | 2022-01-21 | Unknown |
| CVE-2012-0391 | Apache Struts 2 Improper Input Validation Vulnerability | Apache | Struts 2 | 2022-01-21 | Unknown |
| CVE-2018-8453 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2022-01-21 | Known |
| CVE-2021-35247 | SolarWinds Serv-U Improper Input Validation Vulnerability | SolarWinds | Serv-U | 2022-01-21 | Unknown |
| CVE-2020-11978 | Apache Airflow Command Injection | Apache | Airflow | 2022-01-18 | Unknown |
| CVE-2020-13671 | Drupal core Un-restricted Upload of File | Drupal | Drupal core | 2022-01-18 | Unknown |
| CVE-2020-13927 | Apache Airflow's Experimental API Authentication Bypass | Apache | Airflow's Experimental API | 2022-01-18 | Unknown |
| CVE-2020-14864 | Oracle Business Intelligence Enterprise Edition Path Transversal | Oracle | Intelligence Enterprise Edition | 2022-01-18 | Unknown |
| CVE-2021-21315 | System Information Library for Node.JS Command Injection | Npm package | System Information Library for Node.JS | 2022-01-18 | Unknown |
| CVE-2021-21975 | VMware Server Side Request Forgery in vRealize Operations Manager API | VMware | vRealize Operations Manager API | 2022-01-18 | Known |
| CVE-2021-22991 | F5 BIG-IP Traffic Management Microkernel Buffer Overflow | F5 | BIG-IP Traffic Management Microkernel | 2022-01-18 | Unknown |
| CVE-2021-25296 | Nagios XI OS Command Injection | Nagios | Nagios XI | 2022-01-18 | Unknown |
| CVE-2021-25297 | Nagios XI OS Command Injection | Nagios | Nagios XI | 2022-01-18 | Unknown |
| CVE-2021-25298 | Nagios XI OS Command Injection | Nagios | Nagios XI | 2022-01-18 | Unknown |
| CVE-2021-32648 | October CMS Improper Authentication | October CMS | October CMS | 2022-01-18 | Unknown |
| CVE-2021-33766 | Microsoft Exchange Server Information Disclosure | Microsoft | Exchange Server | 2022-01-18 | Unknown |
| CVE-2021-40870 | Aviatrix Controller Unrestricted Upload of File | Aviatrix | Aviatrix Controller | 2022-01-18 | Unknown |
| CVE-2013-3900 | Microsoft WinVerifyTrust function Remote Code Execution | Microsoft | WinVerifyTrust function | 2022-01-10 | Unknown |
| CVE-2015-7450 | IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. | IBM | WebSphere Application Server and Server Hypervisor Edition | 2022-01-10 | Unknown |
| CVE-2017-1000486 | Primetek Primefaces Remote Code Execution Vulnerability | Primetek | Primefaces Application | 2022-01-10 | Unknown |
| CVE-2018-13382 | Fortinet FortiOS and FortiProxy Improper Authorization | Fortinet | FortiOS and FortiProxy | 2022-01-10 | Known |
| CVE-2018-13383 | Fortinet FortiOS and FortiProxy Out-of-bounds Write | Fortinet | FortiOS and FortiProxy | 2022-01-10 | Known |
| CVE-2019-10149 | Exim Mail Transfer Agent (MTA) Improper Input Validation | Exim | Mail Transfer Agent (MTA) | 2022-01-10 | Unknown |
| CVE-2019-1458 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2022-01-10 | Known |
| CVE-2019-1579 | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | Palo Alto Networks | PAN-OS | 2022-01-10 | Known |
| CVE-2019-2725 | Oracle WebLogic Server, Injection | Oracle | WebLogic Server | 2022-01-10 | Known |
| CVE-2019-7609 | Kibana Arbitrary Code Execution | Elastic | Kibana | 2022-01-10 | Unknown |
| CVE-2019-9670 | Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference | Synacor | Zimbra Collaboration Suite (ZCS) | 2022-01-10 | Unknown |
| CVE-2020-6572 | Google Chrome Media Use-After-Free Vulnerability | Chrome Media | 2022-01-10 | Unknown | |
| CVE-2021-22017 | VMware vCenter Server Improper Access Control | VMware | vCenter Server | 2022-01-10 | Unknown |
| CVE-2021-27860 | FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit | FatPipe | WARP, IPVPN, and MPVPN software | 2022-01-10 | Unknown |
| CVE-2021-36260 | Hikvision Improper Input Validation | Hikvision | Security cameras web server | 2022-01-10 | Unknown |
| CVE-2021-4102 | Google Chromium V8 Use-After-Free Vulnerability | Chromium V8 | 2021-12-15 | Unknown | |
| CVE-2021-43890 | Microsoft Windows AppX Installer Spoofing Vulnerability | Microsoft | Windows | 2021-12-15 | Known |
| CVE-2010-1871 | Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability | Red Hat | JBoss Seam 2 | 2021-12-10 | Unknown |
| CVE-2017-12149 | Red Hat JBoss Application Server Remote Code Execution Vulnerability | Red Hat | JBoss Application Server | 2021-12-10 | Known |
| CVE-2017-17562 | Embedthis GoAhead Remote Code Execution Vulnerability | Embedthis | GoAhead | 2021-12-10 | Unknown |
| CVE-2019-0193 | Apache Solr DataImportHandler Code Injection Vulnerability | Apache | Solr | 2021-12-10 | Unknown |
| CVE-2019-10758 | MongoDB mongo-express Remote Code Execution Vulnerability | MongoDB | mongo-express | 2021-12-10 | Unknown |
| CVE-2019-13272 | Linux Kernel Improper Privilege Management Vulnerability | Linux | Kernel | 2021-12-10 | Unknown |
| CVE-2019-7238 | Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability | Sonatype | Nexus Repository Manager | 2021-12-10 | Unknown |
| CVE-2020-17463 | Fuel CMS SQL Injection Vulnerability | Fuel CMS | Fuel CMS | 2021-12-10 | Unknown |
| CVE-2020-8816 | Pi-Hole AdminLTE Remote Code Execution Vulnerability | Pi-hole | AdminLTE | 2021-12-10 | Unknown |
| CVE-2021-35394 | Realtek Jungle SDK Remote Code Execution Vulnerability | Realtek | Jungle Software Development Kit (SDK) | 2021-12-10 | Unknown |
| CVE-2021-44168 | Fortinet FortiOS Arbitrary File Download | Fortinet | FortiOS | 2021-12-10 | Unknown |
| CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability | Apache | Log4j2 | 2021-12-10 | Known |
| CVE-2021-44515 | Zoho Desktop Central Authentication Bypass Vulnerability | Zoho | Desktop Central | 2021-12-10 | Unknown |
| CVE-2018-14847 | MikroTik Router OS Directory Traversal Vulnerability | MikroTik | RouterOS | 2021-12-01 | Unknown |
| CVE-2020-11261 | Qualcomm Multiple Chipsets Improper Input Validation Vulnerability | Qualcomm | Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | 2021-12-01 | Unknown |
| CVE-2021-37415 | Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability | Zoho | ManageEngine ServiceDesk Plus (SDP) | 2021-12-01 | Unknown |
| CVE-2021-40438 | Apache HTTP Server-Side Request Forgery (SSRF) | Apache | Apache | 2021-12-01 | Known |
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability | Zoho | ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | 2021-12-01 | Unknown |
| CVE-2021-22204 | ExifTool Remote Code Execution Vulnerability | Perl | Exiftool | 2021-11-17 | Unknown |
| CVE-2021-40449 | Microsoft Windows Win32k Privilege Escalation Vulnerability | Microsoft | Windows | 2021-11-17 | Known |
| CVE-2021-42292 | Microsoft Excel Security Feature Bypass | Microsoft | Office | 2021-11-17 | Unknown |
| CVE-2021-42321 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | Exchange | 2021-11-17 | Known |
| CVE-2010-5326 | SAP NetWeaver Remote Code Execution Vulnerability | SAP | NetWeaver | 2021-11-03 | Unknown |
| CVE-2012-0158 | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability | Microsoft | MSCOMCTL.OCX | 2021-11-03 | Known |
| CVE-2012-3152 | Oracle Fusion Middleware Unspecified Vulnerability | Oracle | Fusion Middleware | 2021-11-03 | Unknown |
| CVE-2014-1812 | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability | Microsoft | Windows | 2021-11-03 | Known |
| CVE-2015-1641 | Microsoft Office Memory Corruption Vulnerability | Microsoft | Office | 2021-11-03 | Unknown |
| CVE-2015-4852 | Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability | Oracle | WebLogic Server | 2021-11-03 | Unknown |
| CVE-2016-0167 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2021-11-03 | Known |
| CVE-2016-0185 | Microsoft Windows Media Center Remote Code Execution Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2016-3235 | Microsoft Office OLE DLL Side Loading Vulnerability | Microsoft | Office | 2021-11-03 | Unknown |
| CVE-2016-3643 | SolarWinds Virtualization Manager Privilege Escalation Vulnerability | SolarWinds | Virtualization Manager | 2021-11-03 | Unknown |
| CVE-2016-3715 | ImageMagick Arbitrary File Deletion Vulnerability | ImageMagick | ImageMagick | 2021-11-03 | Unknown |
| CVE-2016-3718 | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability | ImageMagick | ImageMagick | 2021-11-03 | Unknown |
| CVE-2016-3976 | SAP NetWeaver Directory Traversal Vulnerability | SAP | NetWeaver | 2021-11-03 | Unknown |
| CVE-2016-4437 | Apache Shiro Code Execution Vulnerability | Apache | Shiro | 2021-11-03 | Unknown |
| CVE-2016-7255 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2021-11-03 | Known |
| CVE-2016-9563 | SAP NetWeaver XML External Entity (XXE) Vulnerability | SAP | NetWeaver | 2021-11-03 | Unknown |
| CVE-2017-0143 | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability | Microsoft | Windows | 2021-11-03 | Known |
| CVE-2017-0199 | Microsoft Office and WordPad Remote Code Execution Vulnerability | Microsoft | Office and WordPad | 2021-11-03 | Known |
| CVE-2017-11774 | Microsoft Office Outlook Security Feature Bypass Vulnerability | Microsoft | Office | 2021-11-03 | Unknown |
| CVE-2017-11882 | Microsoft Office Memory Corruption Vulnerability | Microsoft | Office | 2021-11-03 | Known |
| CVE-2017-16651 | Roundcube Webmail File Disclosure Vulnerability | Roundcube | Roundcube Webmail | 2021-11-03 | Unknown |
| CVE-2017-5638 | Apache Struts Remote Code Execution Vulnerability | Apache | Struts | 2021-11-03 | Known |
| CVE-2017-6327 | Symantec Messaging Gateway Remote Code Execution Vulnerability | Symantec | Symantec Messaging Gateway | 2021-11-03 | Unknown |
| CVE-2017-7269 | Microsoft Windows Server Buffer Overflow Vulnerability | Microsoft | Internet Information Services (IIS) | 2021-11-03 | Unknown |
| CVE-2017-8759 | Microsoft .NET Framework Remote Code Execution Vulnerability | Microsoft | .NET Framework | 2021-11-03 | Unknown |
| CVE-2017-9248 | Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability | Progress | ASP.NET AJAX and Sitefinity | 2021-11-03 | Unknown |
| CVE-2017-9805 | Apache Struts Deserialization of Untrusted Data Vulnerability | Apache | Struts | 2021-11-03 | Unknown |
| CVE-2017-9822 | DotNetNuke (DNN) Remote Code Execution Vulnerability | DotNetNuke (DNN) | DotNetNuke (DNN) | 2021-11-03 | Known |
| CVE-2018-0171 | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | Cisco | IOS and IOS XE | 2021-11-03 | Unknown |
| CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | Cisco | Adaptive Security Appliance (ASA) | 2021-11-03 | Unknown |
| CVE-2018-0798 | Microsoft Office Memory Corruption Vulnerability | Microsoft | Office | 2021-11-03 | Unknown |
| CVE-2018-0802 | Microsoft Office Memory Corruption Vulnerability | Microsoft | Office | 2021-11-03 | Known |
| CVE-2018-11776 | Apache Struts Remote Code Execution Vulnerability | Apache | Struts | 2021-11-03 | Unknown |
| CVE-2018-13379 | Fortinet FortiOS SSL VPN Path Traversal Vulnerability | Fortinet | FortiOS | 2021-11-03 | Known |
| CVE-2018-14558 | Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability | Tenda | AC7, AC9, and AC10 Routers | 2021-11-03 | Unknown |
| CVE-2018-15811 | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | DotNetNuke (DNN) | DotNetNuke (DNN) | 2021-11-03 | Unknown |
| CVE-2018-15961 | Adobe ColdFusion Unrestricted File Upload Vulnerability | Adobe | ColdFusion | 2021-11-03 | Unknown |
| CVE-2018-18325 | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | DotNetNuke (DNN) | DotNetNuke (DNN) | 2021-11-03 | Unknown |
| CVE-2018-20062 | ThinkPHP "noneCms" Remote Code Execution Vulnerability | ThinkPHP | noneCms | 2021-11-03 | Unknown |
| CVE-2018-2380 | SAP Customer Relationship Management (CRM) Path Traversal Vulnerability | SAP | Customer Relationship Management (CRM) | 2021-11-03 | Known |
| CVE-2018-4878 | Adobe Flash Player Use-After-Free Vulnerability | Adobe | Flash Player | 2021-11-03 | Known |
| CVE-2018-4939 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Adobe | ColdFusion | 2021-11-03 | Unknown |
| CVE-2018-6789 | Exim Buffer Overflow Vulnerability | Exim | Exim | 2021-11-03 | Known |
| CVE-2018-7600 | Drupal Core Remote Code Execution Vulnerability | Drupal | Drupal Core | 2021-11-03 | Known |
| CVE-2018-8653 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Microsoft | Internet Explorer | 2021-11-03 | Unknown |
| CVE-2019-0211 | Apache HTTP Server Privilege Escalation Vulnerability | Apache | HTTP Server | 2021-11-03 | Unknown |
| CVE-2019-0541 | Microsoft MSHTML Remote Code Execution Vulnerability | Microsoft | MSHTML | 2021-11-03 | Unknown |
| CVE-2019-0604 | Microsoft SharePoint Remote Code Execution Vulnerability | Microsoft | SharePoint | 2021-11-03 | Known |
| CVE-2019-0708 | Microsoft Remote Desktop Services Remote Code Execution Vulnerability | Microsoft | Remote Desktop Services | 2021-11-03 | Known |
| CVE-2019-0797 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2021-11-03 | Unknown |
| CVE-2019-0803 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2021-11-03 | Known |
| CVE-2019-0808 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2021-11-03 | Unknown |
| CVE-2019-0859 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2021-11-03 | Known |
| CVE-2019-0863 | Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2019-11510 | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | Ivanti | Pulse Connect Secure | 2021-11-03 | Known |
| CVE-2019-11539 | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability | Ivanti | Pulse Connect Secure and Pulse Policy Secure | 2021-11-03 | Known |
| CVE-2019-11580 | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | Atlassian | Crowd and Crowd Data Center | 2021-11-03 | Known |
| CVE-2019-11634 | Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability | Citrix | Workspace Application and Receiver for Windows | 2021-11-03 | Known |
| CVE-2019-1214 | Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2019-1215 | Microsoft Windows Privilege Escalation Vulnerability | Microsoft | Windows | 2021-11-03 | Known |
| CVE-2019-13608 | Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability | Citrix | StoreFront Server | 2021-11-03 | Known |
| CVE-2019-1367 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Microsoft | Internet Explorer | 2021-11-03 | Known |
| CVE-2019-1429 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Microsoft | Internet Explorer | 2021-11-03 | Unknown |
| CVE-2019-15752 | Docker Desktop Community Edition Privilege Escalation Vulnerability | Docker | Desktop Community Edition | 2021-11-03 | Unknown |
| CVE-2019-15949 | Nagios XI Remote Code Execution Vulnerability | Nagios | Nagios XI | 2021-11-03 | Unknown |
| CVE-2019-16256 | SIMalliance Toolbox Browser Command Injection Vulnerability | SIMalliance | Toolbox Browser | 2021-11-03 | Unknown |
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | Cisco | Small Business RV320 and RV325 Routers | 2021-11-03 | Unknown |
| CVE-2019-16759 | vBulletin PHP Module Remote Code Execution Vulnerability | vBulletin | vBulletin | 2021-11-03 | Unknown |
| CVE-2019-17026 | Mozilla Firefox And Thunderbird Type Confusion Vulnerability | Mozilla | Firefox and Thunderbird | 2021-11-03 | Unknown |
| CVE-2019-17558 | Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability | Apache | Solr | 2021-11-03 | Unknown |
| CVE-2019-18187 | Trend Micro OfficeScan Directory Traversal Vulnerability | Trend Micro | OfficeScan | 2021-11-03 | Unknown |
| CVE-2019-18935 | Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability | Progress | Telerik UI for ASP.NET AJAX | 2021-11-03 | Known |
| CVE-2019-18988 | TeamViewer Desktop Bypass Remote Login Vulnerability | TeamViewer | Desktop | 2021-11-03 | Unknown |
| CVE-2019-19356 | Netis WF2419 Devices Remote Code Execution Vulnerability | Netis | WF2419 Devices | 2021-11-03 | Unknown |
| CVE-2019-19781 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | Citrix | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | Known |
| CVE-2019-20085 | TVT NVMS-1000 Directory Traversal Vulnerability | TVT | NVMS-1000 | 2021-11-03 | Unknown |
| CVE-2019-2215 | Android Kernel Use-After-Free Vulnerability | Android | Android Kernel | 2021-11-03 | Unknown |
| CVE-2019-3396 | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | Atlassian | Confluence Server and Data Server | 2021-11-03 | Known |
| CVE-2019-3398 | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | Atlassian | Confluence Server and Data Center | 2021-11-03 | Unknown |
| CVE-2019-4716 | IBM Planning Analytics Remote Code Execution Vulnerability | IBM | Planning Analytics | 2021-11-03 | Unknown |
| CVE-2019-5544 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability | VMware | VMware ESXi and Horizon DaaS | 2021-11-03 | Known |
| CVE-2019-5591 | Fortinet FortiOS Default Configuration Vulnerability | Fortinet | FortiOS | 2021-11-03 | Known |
| CVE-2019-6223 | Apple iOS and macOS Group Facetime Vulnerability | Apple | iOS and macOS | 2021-11-03 | Unknown |
| CVE-2019-7481 | SonicWall SMA100 SQL Injection Vulnerability | SonicWall | SMA100 | 2021-11-03 | Known |
| CVE-2019-8394 | Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability | Zoho | ManageEngine | 2021-11-03 | Unknown |
| CVE-2019-9082 | ThinkPHP Remote Code Execution Vulnerability | ThinkPHP | ThinkPHP | 2021-11-03 | Unknown |
| CVE-2019-9978 | WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability | WordPress | Social Warfare Plugin | 2021-11-03 | Unknown |
| CVE-2020-0041 | Android Kernel Out-of-Bounds Write Vulnerability | Android | Android Kernel | 2021-11-03 | Unknown |
| CVE-2020-0069 | Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability | MediaTek | Multiple Chipsets | 2021-11-03 | Unknown |
| CVE-2020-0601 | Microsoft Windows CryptoAPI Spoofing Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2020-0646 | Microsoft .NET Framework Remote Code Execution Vulnerability | Microsoft | .NET Framework | 2021-11-03 | Unknown |
| CVE-2020-0674 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Microsoft | Internet Explorer | 2021-11-03 | Unknown |
| CVE-2020-0683 | Microsoft Windows Installer Privilege Escalation Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2020-0688 | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability | Microsoft | Exchange Server | 2021-11-03 | Known |
| CVE-2020-0878 | Microsoft Edge and Internet Explorer Memory Corruption Vulnerability | Microsoft | Edge and Internet Explorer | 2021-11-03 | Known |
| CVE-2020-0938 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2020-0968 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Microsoft | Internet Explorer | 2021-11-03 | Known |
| CVE-2020-0986 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2020-10148 | SolarWinds Orion Authentication Bypass Vulnerability | SolarWinds | Orion | 2021-11-03 | Unknown |
| CVE-2020-10181 | Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability | Sumavision | Enhanced Multimedia Router (EMR) | 2021-11-03 | Unknown |
| CVE-2020-10189 | Zoho ManageEngine Desktop Central File Upload Vulnerability | Zoho | ManageEngine | 2021-11-03 | Unknown |
| CVE-2020-10199 | Sonatype Nexus Repository Remote Code Execution Vulnerability | Sonatype | Nexus Repository | 2021-11-03 | Unknown |
| CVE-2020-1020 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2020-10221 | rConfig OS Command Injection Vulnerability | rConfig | rConfig | 2021-11-03 | Unknown |
| CVE-2020-1040 | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | Microsoft | Hyper-V RemoteFX | 2021-11-03 | Unknown |
| CVE-2020-1054 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2021-11-03 | Unknown |
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability | Tenda | AC1900 Router AC15 Model | 2021-11-03 | Unknown |
| CVE-2020-1147 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | Microsoft | .NET Framework, SharePoint, Visual Studio | 2021-11-03 | Unknown |
| CVE-2020-11651 | SaltStack Salt Authentication Bypass Vulnerability | SaltStack | Salt | 2021-11-03 | Unknown |
| CVE-2020-11652 | SaltStack Salt Path Traversal Vulnerability | SaltStack | Salt | 2021-11-03 | Unknown |
| CVE-2020-11738 | WordPress Snap Creek Duplicator Plugin File Download Vulnerability | WordPress | Snap Creek Duplicator Plugin | 2021-11-03 | Unknown |
| CVE-2020-12271 | Sophos SFOS SQL Injection Vulnerability | Sophos | SFOS | 2021-11-03 | Known |
| CVE-2020-12812 | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | Fortinet | FortiOS | 2021-11-03 | Known |
| CVE-2020-1350 | Microsoft Windows DNS Server Remote Code Execution Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2020-1380 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Microsoft | Internet Explorer | 2021-11-03 | Unknown |
| CVE-2020-1464 | Microsoft Windows Spoofing Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2020-1472 | Microsoft Netlogon Privilege Escalation Vulnerability | Microsoft | Netlogon | 2021-11-03 | Known |
| CVE-2020-14750 | Oracle WebLogic Server Remote Code Execution Vulnerability | Oracle | WebLogic Server | 2021-11-03 | Unknown |
| CVE-2020-14871 | Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | Oracle | Solaris and Zettabyte File System (ZFS) | 2021-11-03 | Unknown |
| CVE-2020-14882 | Oracle WebLogic Server Remote Code Execution Vulnerability | Oracle | WebLogic Server | 2021-11-03 | Unknown |
| CVE-2020-14883 | Oracle WebLogic Server Unspecified Vulnerability | Oracle | WebLogic Server | 2021-11-03 | Unknown |
| CVE-2020-15505 | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | Ivanti | MobileIron Multiple Products | 2021-11-03 | Unknown |
| CVE-2020-15999 | Google Chrome FreeType Heap Buffer Overflow Vulnerability | Chrome FreeType | 2021-11-03 | Unknown | |
| CVE-2020-16009 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2021-11-03 | Unknown | |
| CVE-2020-16010 | Google Chrome for Android UI Heap Buffer Overflow Vulnerability | Chrome for Android UI | 2021-11-03 | Unknown | |
| CVE-2020-16013 | Google Chromium V8 Incorrect Implementation Vulnerabililty | Chromium V8 | 2021-11-03 | Unknown | |
| CVE-2020-16017 | Google Chrome Use-After-Free Vulnerability | Chrome | 2021-11-03 | Unknown | |
| CVE-2020-16846 | SaltStack Salt Shell Injection Vulnerability | SaltStack | Salt | 2021-11-03 | Unknown |
| CVE-2020-17087 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2020-17144 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | Exchange Server | 2021-11-03 | Unknown |
| CVE-2020-17496 | vBulletin PHP Module Remote Code Execution Vulnerability | vBulletin | vBulletin | 2021-11-03 | Unknown |
| CVE-2020-17530 | Apache Struts Remote Code Execution Vulnerability | Apache | Struts | 2021-11-03 | Unknown |
| CVE-2020-24557 | Trend Micro Multiple Products Improper Access Control Vulnerability | Trend Micro | Apex One, OfficeScan, and Worry-Free Business Security | 2021-11-03 | Unknown |
| CVE-2020-25213 | WordPress File Manager Plugin Remote Code Execution Vulnerability | WordPress | File Manager Plugin | 2021-11-03 | Unknown |
| CVE-2020-25506 | D-Link DNS-320 Device Command Injection Vulnerability | D-Link | DNS-320 Device | 2021-11-03 | Unknown |
| CVE-2020-2555 | Oracle Multiple Products Remote Code Execution Vulnerability | Oracle | Multiple Products | 2021-11-03 | Unknown |
| CVE-2020-26919 | Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability | NETGEAR | JGS516PE Devices | 2021-11-03 | Unknown |
| CVE-2020-27930 | Apple Multiple Products Memory Corruption Vulnerability | Apple | Multiple Products | 2021-11-03 | Unknown |
| CVE-2020-27932 | Apple Multiple Products Type Confusion Vulnerability | Apple | Multiple Products | 2021-11-03 | Unknown |
| CVE-2020-27950 | Apple Multiple Products Memory Initialization Vulnerability | Apple | Multiple Products | 2021-11-03 | Unknown |
| CVE-2020-29557 | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | D-Link | DIR-825 R1 Devices | 2021-11-03 | Unknown |
| CVE-2020-29583 | Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | Zyxel | Multiple Products | 2021-11-03 | Unknown |
| CVE-2020-3118 | Cisco IOS XR Software Discovery Protocol Format String Vulnerability | Cisco | IOS XR | 2021-11-03 | Unknown |
| CVE-2020-3161 | Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | Cisco | Cisco IP Phones | 2021-11-03 | Unknown |
| CVE-2020-3452 | Cisco ASA and FTD Read-Only Path Traversal Vulnerability | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2021-11-03 | Unknown |
| CVE-2020-3566 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | Cisco | IOS XR | 2021-11-03 | Unknown |
| CVE-2020-3569 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | Cisco | IOS XR | 2021-11-03 | Unknown |
| CVE-2020-3580 | Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2021-11-03 | Known |
| CVE-2020-3950 | VMware Multiple Products Privilege Escalation Vulnerability | VMware | Multiple Products | 2021-11-03 | Unknown |
| CVE-2020-3952 | VMware vCenter Server Information Disclosure Vulnerability | VMware | vCenter Server | 2021-11-03 | Unknown |
| CVE-2020-3992 | VMware ESXi OpenSLP Use-After-Free Vulnerability | VMware | ESXi | 2021-11-03 | Known |
| CVE-2020-4006 | Multiple VMware Products Command Injection Vulnerability | VMware | Multiple Products | 2021-11-03 | Unknown |
| CVE-2020-4427 | IBM Data Risk Manager Security Bypass Vulnerability | IBM | Data Risk Manager | 2021-11-03 | Unknown |
| CVE-2020-4428 | IBM Data Risk Manager Remote Code Execution Vulnerability | IBM | Data Risk Manager | 2021-11-03 | Unknown |
| CVE-2020-4430 | IBM Data Risk Manager Directory Traversal Vulnerability | IBM | Data Risk Manager | 2021-11-03 | Unknown |
| CVE-2020-5735 | Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability | Amcrest | Cameras and Network Video Recorder (NVR) | 2021-11-03 | Unknown |
| CVE-2020-5847 | Unraid Remote Code Execution Vulnerability | Unraid | Unraid | 2021-11-03 | Unknown |
| CVE-2020-5849 | Unraid Authentication Bypass Vulnerability | Unraid | Unraid | 2021-11-03 | Unknown |
| CVE-2020-5902 | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | F5 | BIG-IP | 2021-11-03 | Known |
| CVE-2020-6207 | SAP Solution Manager Missing Authentication for Critical Function Vulnerability | SAP | Solution Manager | 2021-11-03 | Unknown |
| CVE-2020-6287 | SAP NetWeaver Missing Authentication for Critical Function Vulnerability | SAP | NetWeaver | 2021-11-03 | Unknown |
| CVE-2020-6418 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2021-11-03 | Unknown | |
| CVE-2020-6819 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | Mozilla | Firefox and Thunderbird | 2021-11-03 | Unknown |
| CVE-2020-6820 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | Mozilla | Firefox and Thunderbird | 2021-11-03 | Unknown |
| CVE-2020-7961 | Liferay Portal Deserialization of Untrusted Data Vulnerability | Liferay | Liferay Portal | 2021-11-03 | Unknown |
| CVE-2020-8193 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | Citrix | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | Unknown |
| CVE-2020-8195 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | Citrix | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | Unknown |
| CVE-2020-8196 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | Citrix | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | Unknown |
| CVE-2020-8243 | Ivanti Pulse Connect Secure Code Execution Vulnerability | Ivanti | Pulse Connect Secure | 2021-11-03 | Unknown |
| CVE-2020-8260 | Ivanti Pulse Connect Secure Code Execution Vulnerability | Ivanti | Pulse Connect Secure | 2021-11-03 | Unknown |
| CVE-2020-8467 | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | Trend Micro | Apex One and OfficeScan | 2021-11-03 | Unknown |
| CVE-2020-8468 | Trend Micro Multiple Products Content Validation Escape Vulnerability | Trend Micro | Apex One, OfficeScan and Worry-Free Business Security Agents | 2021-11-03 | Unknown |
| CVE-2020-8515 | Multiple DrayTek Vigor Routers Web Management Page Vulnerability | DrayTek | Multiple Vigor Routers | 2021-11-03 | Unknown |
| CVE-2020-8599 | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | Trend Micro | Apex One and OfficeScan | 2021-11-03 | Unknown |
| CVE-2020-8644 | PlaySMS Server-Side Template Injection Vulnerability | PlaySMS | PlaySMS | 2021-11-03 | Unknown |
| CVE-2020-8655 | EyesOfNetwork Improper Privilege Management Vulnerability | EyesOfNetwork | EyesOfNetwork | 2021-11-03 | Unknown |
| CVE-2020-8657 | EyesOfNetwork Use of Hard-Coded Credentials Vulnerability | EyesOfNetwork | EyesOfNetwork | 2021-11-03 | Unknown |
| CVE-2020-9818 | Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability | Apple | iOS, iPadOS, and watchOS | 2021-11-03 | Unknown |
| CVE-2020-9819 | Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability | Apple | iOS, iPadOS, and watchOS | 2021-11-03 | Unknown |
| CVE-2020-9859 | Apple Multiple Products Code Execution Vulnerability | Apple | Multiple Products | 2021-11-03 | Unknown |
| CVE-2021-1497 | Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | Cisco | HyperFlex HX | 2021-11-03 | Unknown |
| CVE-2021-1498 | Cisco HyperFlex HX Data Platform Command Injection Vulnerability | Cisco | HyperFlex HX | 2021-11-03 | Unknown |
| CVE-2021-1647 | Microsoft Defender Remote Code Execution Vulnerability | Microsoft | Defender | 2021-11-03 | Unknown |
| CVE-2021-1675 | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | Microsoft | Windows | 2021-11-03 | Known |
| CVE-2021-1732 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2021-11-03 | Known |
| CVE-2021-1782 | Apple Multiple Products Race Condition Vulnerability | Apple | Multiple Products | 2021-11-03 | Unknown |
| CVE-2021-1870 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | Apple | iOS, iPadOS, and macOS | 2021-11-03 | Unknown |
| CVE-2021-1871 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | Apple | iOS, iPadOS, and macOS | 2021-11-03 | Unknown |
| CVE-2021-1879 | Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability | Apple | iOS, iPadOS, and watchOS | 2021-11-03 | Unknown |
| CVE-2021-1905 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | Qualcomm | Multiple Chipsets | 2021-11-03 | Unknown |
| CVE-2021-1906 | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability | Qualcomm | Multiple Chipsets | 2021-11-03 | Unknown |
| CVE-2021-20016 | SonicWall SSLVPN SMA100 SQL Injection Vulnerability | SonicWall | SSLVPN SMA100 | 2021-11-03 | Known |
| CVE-2021-20021 | SonicWall Email Security Improper Privilege Management Vulnerability | SonicWall | SonicWall Email Security | 2021-11-03 | Known |
| CVE-2021-20022 | SonicWall Email Security Unrestricted Upload of File Vulnerability | SonicWall | SonicWall Email Security | 2021-11-03 | Known |
| CVE-2021-20023 | SonicWall Email Security Path Traversal Vulnerability | SonicWall | SonicWall Email Security | 2021-11-03 | Known |
| CVE-2021-20090 | Arcadyan Buffalo Firmware Path Traversal Vulnerability | Arcadyan | Buffalo Firmware | 2021-11-03 | Unknown |
| CVE-2021-21017 | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | Adobe | Acrobat and Reader | 2021-11-03 | Unknown |
| CVE-2021-21148 | Google Chromium V8 Heap Buffer Overflow Vulnerability | Chromium V8 | 2021-11-03 | Unknown | |
| CVE-2021-21166 | Google Chromium Race Condition Vulnerability | Chromium | 2021-11-03 | Unknown | |
| CVE-2021-21193 | Google Chromium Blink Use-After-Free Vulnerability | Chromium Blink | 2021-11-03 | Unknown | |
| CVE-2021-21206 | Google Chromium Blink Use-After-Free Vulnerability | Chromium Blink | 2021-11-03 | Unknown | |
| CVE-2021-21220 | Google Chromium V8 Improper Input Validation Vulnerability | Chromium V8 | 2021-11-03 | Unknown | |
| CVE-2021-21224 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2021-11-03 | Unknown | |
| CVE-2021-21972 | VMware vCenter Server Remote Code Execution Vulnerability | VMware | vCenter Server | 2021-11-03 | Known |
| CVE-2021-21985 | VMware vCenter Server Improper Input Validation Vulnerability | VMware | vCenter Server | 2021-11-03 | Known |
| CVE-2021-22005 | VMware vCenter Server File Upload Vulnerability | VMware | vCenter Server | 2021-11-03 | Known |
| CVE-2021-22205 | GitLab Community and Enterprise Editions Remote Code Execution Vulnerability | GitLab | Community and Enterprise Editions | 2021-11-03 | Known |
| CVE-2021-22502 | Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability | Micro Focus | Operation Bridge Reporter (OBR) | 2021-11-03 | Unknown |
| CVE-2021-22506 | Micro Focus Access Manager Information Leakage Vulnerability | Micro Focus | Micro Focus Access Manager | 2021-11-03 | Unknown |
| CVE-2021-22893 | Ivanti Pulse Connect Secure Use-After-Free Vulnerability | Ivanti | Pulse Connect Secure | 2021-11-03 | Known |
| CVE-2021-22894 | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | Ivanti | Pulse Connect Secure | 2021-11-03 | Unknown |
| CVE-2021-22899 | Ivanti Pulse Connect Secure Command Injection Vulnerability | Ivanti | Pulse Connect Secure | 2021-11-03 | Unknown |
| CVE-2021-22900 | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | Ivanti | Pulse Connect Secure | 2021-11-03 | Unknown |
| CVE-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | F5 | BIG-IP and BIG-IQ Centralized Management | 2021-11-03 | Known |
| CVE-2021-23874 | McAfee Total Protection (MTP) Improper Privilege Management Vulnerability | McAfee | McAfee Total Protection (MTP) | 2021-11-03 | Unknown |
| CVE-2021-26084 | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | Atlassian | Confluence Server and Data Center | 2021-11-03 | Known |
| CVE-2021-26411 | Microsoft Internet Explorer Memory Corruption Vulnerability | Microsoft | Internet Explorer | 2021-11-03 | Known |
| CVE-2021-26855 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | Exchange Server | 2021-11-03 | Known |
| CVE-2021-26857 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | Exchange Server | 2021-11-03 | Known |
| CVE-2021-26858 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | Exchange Server | 2021-11-03 | Known |
| CVE-2021-27059 | Microsoft Office Remote Code Execution Vulnerability | Microsoft | Office | 2021-11-03 | Unknown |
| CVE-2021-27065 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | Exchange Server | 2021-11-03 | Known |
| CVE-2021-27085 | Microsoft Internet Explorer Remote Code Execution Vulnerability | Microsoft | Internet Explorer | 2021-11-03 | Unknown |
| CVE-2021-27101 | Accellion FTA SQL Injection Vulnerability | Accellion | FTA | 2021-11-03 | Known |
| CVE-2021-27102 | Accellion FTA OS Command Injection Vulnerability | Accellion | FTA | 2021-11-03 | Known |
| CVE-2021-27103 | Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability | Accellion | FTA | 2021-11-03 | Known |
| CVE-2021-27104 | Accellion FTA OS Command Injection Vulnerability | Accellion | FTA | 2021-11-03 | Known |
| CVE-2021-27561 | Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability | Yealink | Device Management | 2021-11-03 | Unknown |
| CVE-2021-27562 | Arm Trusted Firmware Out-of-Bounds Write Vulnerability | Arm | Trusted Firmware | 2021-11-03 | Unknown |
| CVE-2021-28310 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Win32k | 2021-11-03 | Unknown |
| CVE-2021-28550 | Adobe Acrobat and Reader Use-After-Free Vulnerability | Adobe | Acrobat and Reader | 2021-11-03 | Unknown |
| CVE-2021-28663 | Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability | Arm | Mali Graphics Processing Unit (GPU) | 2021-11-03 | Unknown |
| CVE-2021-28664 | Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability | Arm | Mali Graphics Processing Unit (GPU) | 2021-11-03 | Unknown |
| CVE-2021-30116 | Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability | Kaseya | Virtual System/Server Administrator (VSA) | 2021-11-03 | Known |
| CVE-2021-30551 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2021-11-03 | Unknown | |
| CVE-2021-30554 | Google Chromium WebGL Use-After-Free Vulnerability | Chromium WebGL | 2021-11-03 | Unknown | |
| CVE-2021-30563 | Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2021-11-03 | Unknown | |
| CVE-2021-30632 | Google Chromium V8 Out-of-Bounds Write Vulnerability | Chromium V8 | 2021-11-03 | Unknown | |
| CVE-2021-30633 | Google Chromium Indexed DB API Use-After-Free Vulnerability | Chromium Indexed DB API | 2021-11-03 | Unknown | |
| CVE-2021-30657 | Apple macOS Unspecified Vulnerability | Apple | macOS | 2021-11-03 | Unknown |
| CVE-2021-30661 | Apple Multiple Products WebKit Storage Use-After-Free Vulnerability | Apple | Multiple Products | 2021-11-03 | Unknown |
| CVE-2021-30663 | Apple Multiple Products WebKit Integer Overflow Vulnerability | Apple | Multiple Products | 2021-11-03 | Unknown |
| CVE-2021-30665 | Apple Multiple Products WebKit Memory Corruption Vulnerability | Apple | Multiple Products | 2021-11-03 | Unknown |
| CVE-2021-30666 | Apple iOS WebKit Buffer Overflow Vulnerability | Apple | iOS | 2021-11-03 | Unknown |
| CVE-2021-30713 | Apple macOS Unspecified Vulnerability | Apple | macOS | 2021-11-03 | Unknown |
| CVE-2021-30761 | Apple iOS WebKit Memory Corruption Vulnerability | Apple | iOS | 2021-11-03 | Unknown |
| CVE-2021-30762 | Apple iOS WebKit Use-After-Free Vulnerability | Apple | iOS | 2021-11-03 | Unknown |
| CVE-2021-30807 | Apple Multiple Products Memory Corruption Vulnerability | Apple | Multiple Products | 2021-11-03 | Unknown |
| CVE-2021-30858 | Apple iOS, iPadOS, macOS Use-After-Free Vulnerability | Apple | iOS, iPadOS, and macOS | 2021-11-03 | Unknown |
| CVE-2021-30860 | Apple Multiple Products Integer Overflow Vulnerability | Apple | Multiple Products | 2021-11-03 | Unknown |
| CVE-2021-30869 | Apple iOS, iPadOS, and macOS Type Confusion Vulnerability | Apple | iOS, iPadOS, and macOS | 2021-11-03 | Unknown |
| CVE-2021-31199 | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | Microsoft | Enhanced Cryptographic Provider | 2021-11-03 | Unknown |
| CVE-2021-31201 | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | Microsoft | Enhanced Cryptographic Provider | 2021-11-03 | Unknown |
| CVE-2021-31207 | Microsoft Exchange Server Security Feature Bypass Vulnerability | Microsoft | Exchange Server | 2021-11-03 | Known |
| CVE-2021-31755 | Tenda AC11 Router Stack Buffer Overflow Vulnerability | Tenda | AC11 Router | 2021-11-03 | Unknown |
| CVE-2021-31955 | Microsoft Windows Kernel Information Disclosure Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2021-31956 | Microsoft Windows NTFS Privilege Escalation Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2021-31979 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2021-33739 | Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2021-33742 | Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2021-33771 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2021-34448 | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2021-34473 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | Exchange Server | 2021-11-03 | Known |
| CVE-2021-34523 | Microsoft Exchange Server Privilege Escalation Vulnerability | Microsoft | Exchange Server | 2021-11-03 | Known |
| CVE-2021-34527 | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | Microsoft | Windows | 2021-11-03 | Known |
| CVE-2021-35211 | SolarWinds Serv-U Remote Code Execution Vulnerability | SolarWinds | Serv-U | 2021-11-03 | Known |
| CVE-2021-35395 | Realtek AP-Router SDK Buffer Overflow Vulnerability | Realtek | AP-Router SDK | 2021-11-03 | Unknown |
| CVE-2021-35464 | ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability | ForgeRock | Access Management (AM) | 2021-11-03 | Known |
| CVE-2021-36741 | Trend Micro Multiple Products Improper Input Validation Vulnerability | Trend Micro | Apex One, Apex One as a Service, and Worry-Free Business Security | 2021-11-03 | Unknown |
| CVE-2021-36742 | Trend Micro Multiple Products Improper Input Validation Vulnerability | Trend Micro | Apex One, Apex One as a Service, and Worry-Free Business Security | 2021-11-03 | Unknown |
| CVE-2021-36942 | Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability | Microsoft | Windows | 2021-11-03 | Known |
| CVE-2021-36948 | Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | Microsoft | Windows | 2021-11-03 | Unknown |
| CVE-2021-36955 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | Microsoft | Windows | 2021-11-03 | Known |
| CVE-2021-37973 | Google Chromium Portals Use-After-Free Vulnerability | Chromium Portals | 2021-11-03 | Unknown | |
| CVE-2021-37975 | Google Chromium V8 Use-After-Free Vulnerability | Chromium V8 | 2021-11-03 | Unknown | |
| CVE-2021-37976 | Google Chromium Information Disclosure Vulnerability | Chromium | 2021-11-03 | Unknown | |
| CVE-2021-38000 | Google Chromium Intents Improper Input Validation Vulnerability | Chromium Intents | 2021-11-03 | Unknown | |
| CVE-2021-38003 | Google Chromium V8 Memory Corruption Vulnerability | Chromium V8 | 2021-11-03 | Unknown | |
| CVE-2021-38645 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | Microsoft | Open Management Infrastructure (OMI) | 2021-11-03 | Unknown |
| CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | Microsoft | Open Management Infrastructure (OMI) | 2021-11-03 | Known |
| CVE-2021-38648 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | Microsoft | Open Management Infrastructure (OMI) | 2021-11-03 | Unknown |
| CVE-2021-38649 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | Microsoft | Open Management Infrastructure (OMI) | 2021-11-03 | Unknown |
| CVE-2021-40444 | Microsoft MSHTML Remote Code Execution Vulnerability | Microsoft | MSHTML | 2021-11-03 | Known |
| CVE-2021-40539 | Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability | Zoho | ManageEngine | 2021-11-03 | Known |
| CVE-2021-41773 | Apache HTTP Server Path Traversal Vulnerability | Apache | HTTP Server | 2021-11-03 | Known |
| CVE-2021-42013 | Apache HTTP Server Path Traversal Vulnerability | Apache | HTTP Server | 2021-11-03 | Known |
| CVE-2021-42258 | BQE BillQuick Web Suite SQL Injection Vulnerability | BQE | BillQuick Web Suite | 2021-11-03 | Known |
Sources and licences
CISA
Source: CISA Catalog of Known Exploited Vulnerabilities, version 2026.10.30, CC0 1.0. Use of this data does not imply endorsement by CISA or DHS.
Cite this page
Dragons Eye Ransomware Tracker, "CISA Known Exploited Vulnerabilities (KEV) index",
entity page, dataset version ref-61e5e47bdb61, updated 2026-10-30T17:02:45.366Z,
https://ransomware-tracker.com/kev (accessed 2026-11-03).
Underlying source: CISA Catalog of Known Exploited Vulnerabilities, version 2026.10.30.
Pages change. The dataset version identifies the data, but no archive of old versions is kept, so this citation cannot be replayed later.