Known Exploited Vulnerabilities

SimpleHelp Authentication Bypass Vulnerability

Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

PTC Windchill and FlexPLM Improper Input Validation Vulnerability

Ubiquiti UniFi OS Improper Input Validation Vulnerability

Ubiquiti UniFi OS Path Traversal Vulnerability

Ubiquiti UniFi OS Improper Access Control Vulnerability

Lantronix EDS5000 Code Injection Vulnerability

Splunk Enterprise Missing Authentication for Critical Function Vulnerability

Widget Factory Joomla Content Editor Improper Access Control Vulnerability

LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

Ivanti Sentry OS Command Injection Vulnerability

Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability

Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Check Point Security Gateway Improper Authentication Vulnerability

BerriAI LiteLLM Command Injection Vulnerability

SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability

Android Framework Integer Overflow Vulnerability

Linux Kernel Improper Authentication Vulnerability

Oracle WebLogic Server Unspecified Vulnerability

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Daemon Tools Lite Embedded Malicious Code Vulnerability

Nx Console Embedded Malicious Code Vulnerability

TanStack Unspecified Vulnerability

LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

Drupal Core SQL Injection Vulnerability

Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

Langflow Origin Validation Error Vulnerability

Microsoft Defender Denial of Service Vulnerability

Microsoft Defender Link Following Vulnerability

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft Internet Explorer Use-After-Free Vulnerability

Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability

Microsoft DirectX NULL Byte Overwrite Vulnerability

Microsoft Windows Buffer Overflow Vulnerability

Microsoft Exchange Server Cross-Site Scripting Vulnerability

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

BerriAI LiteLLM SQL Injection Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

Microsoft Windows Protection Mechanism Failure Vulnerability

ConnectWise ScreenConnect Path Traversal Vulnerability

D-Link DIR-823X Command Injection Vulnerability

Samsung MagicINFO 9 Server Path Traversal Vulnerability

SimpleHelp Path Traversal Vulnerability

SimpleHelp Missing Authorization Vulnerability

Marimo Remote Code Execution Vulnerability

Microsoft Defender Insufficient Granularity of Access Control Vulnerability

Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

Kentico Xperience Path Traversal Vulnerability

JetBrains TeamCity Relative Path Traversal Vulnerability

PaperCut NG/MF Improper Authentication Vulnerability

Apache ActiveMQ Improper Input Validation Vulnerability

Microsoft SharePoint Server Improper Input Validation Vulnerability

Microsoft Office Remote Code Execution

Adobe Acrobat and Reader Prototype Pollution Vulnerability

Fortinet FortiClient EMS SQL Injection Vulnerability

Microsoft Windows Link Following Vulnerability

Microsoft Windows Out-of-Bounds Read Vulnerability

Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

Adobe Acrobat Use-After-Free Vulnerability

Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Fortinet FortiClient EMS Improper Access Control Vulnerability

TrueConf Client Download of Code Without Integrity Check Vulnerability

Google Dawn Use-After-Free Vulnerability

Citrix NetScaler Out-of-Bounds Read Vulnerability

F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

Aquasecurity Trivy Embedded Malicious Code Vulnerability

Langflow Code Injection Vulnerability

Laravel Livewire Code Injection Vulnerability

Apple Multiple Products Classic Buffer Overflow Vulnerability

Apple Multiple Products Improper Locking Vulnerability

Craft CMS Code Injection Vulnerability

Apple Multiple Products Buffer Overflow Vulnerability

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

Wing FTP Server Information Disclosure Vulnerability

Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

Google Skia Out-of-Bounds Write Vulnerability

n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

Omnissa Workspace ONE Server-Side Request Forgery

Apple Multiple products Use-After-Free Vulnerability

Apple iOS and iPadOS Use-After-Free Vulnerability

Apple Multiple Products Integer Overflow or Wraparound Vulnerability

Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

Hikvision Multiple Products Improper Authentication Vulnerability

Broadcom VMware Aria Operations Command Injection Vulnerability