Known Exploited Vulnerabilities

Microsoft Windows Out-of-Bounds Write Vulnerability

Microsoft Windows Remote Code Execution Vulnerability

Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

Mozilla Multiple Products Remote Code Execution Vulnerability

Smartbedded Meteobridge Command Injection Vulnerability

Samsung Mobile Devices Out-of-Bounds Write Vulnerability

Jenkins Remote Code Execution Vulnerability

Juniper ScreenOS Improper Authentication Vulnerability

GNU Bash OS Command Injection Vulnerability

Libraesva Email Security Gateway Command Injection Vulnerability

Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability

Adminer Server-Side Request Forgery Vulnerability

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

Android Runtime Use-After-Free Vulnerability

Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability

TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

Meta Platforms WhatsApp Incorrect Authorization Vulnerability

TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability

Sangoma FreePBX Authentication Bypass Vulnerability

Citrix NetScaler Memory Overflow Vulnerability

Git Link Following Vulnerability

Citrix Session Recording Deserialization of Untrusted Data Vulnerability

Citrix Session Recording Improper Privilege Management Vulnerability

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Trend Micro Apex One OS Command Injection Vulnerability

N-able N-Central Command Injection Vulnerability

N-able N-Central Insecure Deserialization Vulnerability

RARLAB WinRAR Path Traversal Vulnerability

Microsoft Internet Explorer Resource Management Errors Vulnerability

Microsoft Office Excel Remote Code Execution Vulnerability

D-Link DNR-322L Download of Code Without Integrity Check Vulnerability

D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability

D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability

Cisco Identity Services Engine Injection Vulnerability

Cisco Identity Services Engine Injection Vulnerability

PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

CrushFTP Unprotected Alternate Channel Vulnerability

Microsoft SharePoint Improper Authentication Vulnerability

Microsoft SharePoint Code Injection Vulnerability

SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Fortinet FortiWeb SQL Injection Vulnerability

Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

Rails Ruby on Rails Path Traversal Vulnerability

PHPMailer Command Injection Vulnerability

Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability

Google Chromium V8 Type Confusion Vulnerability

TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability

AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

D-Link DIR-859 Router Path Traversal Vulnerability

Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

Linux Kernel Improper Ownership Management Vulnerability

Apple Multiple Products Unspecified Vulnerability

TP-Link Multiple Routers Command Injection Vulnerability

Microsoft Windows External Control of File Name or Path Vulnerability

Wazuh Server Deserialization of Untrusted Data Vulnerability

Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

RoundCube Webmail Cross-Site Scripting Vulnerability

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

ConnectWise ScreenConnect Improper Authentication Vulnerability

Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability

Craft CMS Code Injection Vulnerability

ASUS RT-AX55 Routers OS Command Injection Vulnerability

ASUS Routers Improper Authentication Vulnerability

Samsung MagicINFO 9 Server Path Traversal Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

Srimax Output Messenger Directory Traversal Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability

ZKTeco BioTime Path Traversal Vulnerability

SAP NetWeaver Deserialization Vulnerability

DrayTek Vigor Routers OS Command Injection Vulnerability

Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Microsoft Windows DWM Core Library Use-After-Free Vulnerability

Microsoft Windows Scripting Engine Type Confusion Vulnerability

TeleMessage TM SGNL Hidden Functionality Vulnerability

GeoVision Devices OS Command Injection Vulnerability

GeoVision Devices OS Command Injection Vulnerability

FreeType Out-of-Bounds Write Vulnerability

Langflow Missing Authentication Vulnerability