Verdict
Weaponised and widely attempted
Reliable public exploit code exists, or mass exploitation attempts are probable. Patch inside days, not weeks. 637 vulnerabilities in this band.
- CVE-2023-49103 ownCloud graphapi Information Disclosure Vulnerability ownCloud · ownCloud graphapi
- CVE-2023-4911 GNU C Library Buffer Overflow Vulnerability GNU · GNU C Library
- CVE-2023-1671 Sophos Web Appliance Command Injection Vulnerability Sophos · Web Appliance
- CVE-2020-2551 Oracle Fusion Middleware Unspecified Vulnerability Oracle · Fusion Middleware
- CVE-2023-36025 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2023-36844 Juniper Junos OS EX Series PHP External Variable Modification Vulnerability Juniper · Junos OS
- CVE-2023-36845 Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability Juniper · Junos OS
- CVE-2023-36846 Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability Juniper · Junos OS
- CVE-2023-36847 Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability Juniper · Junos OS
- CVE-2023-29552 Service Location Protocol (SLP) Denial-of-Service Vulnerability IETF · Service Location Protocol (SLP)
- CVE-2023-5631 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2023-20273 Cisco IOS XE Web UI Command Injection Vulnerability Cisco · Cisco IOS XE Web UI
- CVE-2023-20198 Cisco IOS XE Web UI Privilege Escalation Vulnerability Cisco · IOS XE Web UI
- CVE-2023-21608 Adobe Acrobat and Reader Use-After-Free Vulnerability Adobe · Acrobat and Reader
- CVE-2023-41763 Microsoft Skype for Business Privilege Escalation Vulnerability Microsoft · Skype for Business
- CVE-2023-44487 HTTP/2 Rapid Reset Attack Vulnerability IETF · HTTP/2
- CVE-2018-14667 Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability Red Hat · JBoss RichFaces Framework
- CVE-2014-8361 Realtek SDK Improper Input Validation Vulnerability Realtek · SDK
- CVE-2023-4863 Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Google · Chromium WebP
- CVE-2023-33246 Apache RocketMQ Command Execution Vulnerability Apache · RocketMQ
- CVE-2023-32315 Ignite Realtime Openfire Path Traversal Vulnerability Ignite Realtime · Openfire
- CVE-2023-24489 Citrix Content Collaboration ShareFile Improper Access Control Vulnerability Citrix · Content Collaboration
- CVE-2017-18368 Zyxel P660HN-T1A Routers Command Injection Vulnerability Zyxel · P660HN-T1A Routers
- CVE-2023-35081 Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2023-37580 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2023-29298 Adobe ColdFusion Improper Access Control Vulnerability Adobe · ColdFusion
- CVE-2023-38205 Adobe ColdFusion Improper Access Control Vulnerability Adobe · ColdFusion
- CVE-2022-29303 SolarView Compact Command Injection Vulnerability SolarView · Compact
- CVE-2019-17621 D-Link DIR-859 Router Command Execution Vulnerability D-Link · DIR-859 Router
- CVE-2019-20500 D-Link DWL-2600AP Access Point Command Injection Vulnerability D-Link · DWL-2600AP Access Point
- CVE-2023-32434 Apple Multiple Products Integer Overflow Vulnerability Apple · Multiple Products
- CVE-2023-27992 Zyxel Multiple NAS Devices Command Injection Vulnerability Zyxel · Multiple Network-Attached Storage (NAS) Devices
- CVE-2023-20887 Vmware Aria Operations for Networks Command Injection Vulnerability VMware · Aria Operations for Networks
- CVE-2020-12641 Roundcube Webmail Remote Code Execution Vulnerability Roundcube · Roundcube Webmail
- CVE-2016-9079 Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability Mozilla · Firefox, Firefox ESR, and Thunderbird
- CVE-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability Zyxel · Multiple Firewalls
- CVE-2023-2868 Barracuda Networks ESG Appliance Improper Input Validation Vulnerability Barracuda Networks · Email Security Gateway (ESG) Appliance
- CVE-2016-6415 Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability Cisco · IOS, IOS XR, and IOS XE
- CVE-2023-25717 Multiple Ruckus Wireless Products CSRF and RCE Vulnerability Ruckus Wireless · Multiple Products
- CVE-2010-3904 Linux Kernel Improper Input Validation Vulnerability Linux · Kernel
- CVE-2016-3427 Oracle Java SE and JRockit Unspecified Vulnerability Oracle · Java SE and JRockit
- CVE-2016-8735 Apache Tomcat Remote Code Execution Vulnerability Apache · Tomcat
- CVE-2023-1389 TP-Link Archer AX-21 Command Injection Vulnerability TP-Link · Archer AX21
- CVE-2023-21839 Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server
- CVE-2023-28432 MinIO Information Disclosure Vulnerability MinIO · MinIO
- CVE-2013-3163 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2023-26360 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2023-23397 Microsoft Office Outlook Privilege Escalation Vulnerability Microsoft · Office
- CVE-2021-39144 XStream Remote Code Execution Vulnerability XStream · XStream
- CVE-2020-5741 Plex Media Server Remote Code Execution Vulnerability Plex · Media Server
- CVE-2022-28810 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability Zoho · ManageEngine
- CVE-2022-33891 Apache Spark Command Injection Vulnerability Apache · Spark
- CVE-2022-35914 Teclib GLPI Remote Code Execution Vulnerability Teclib · GLPI
- CVE-2022-46169 Cacti Command Injection Vulnerability Cacti · Cacti
- CVE-2023-22952 Multiple SugarCRM Products Remote Code Execution Vulnerability SugarCRM · Multiple Products
- CVE-2022-44877 CWP Control Web Panel OS Command Injection Vulnerability CWP · Control Web Panel
- CVE-2018-18809 TIBCO JasperReports Library Directory Traversal Vulnerability TIBCO · JasperReports
- CVE-2021-35587 Oracle Fusion Middleware Unspecified Vulnerability Oracle · Fusion Middleware
- CVE-2022-41352 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2022-36804 Atlassian Bitbucket Server and Data Center Command Injection Vulnerability Atlassian · Bitbucket Server and Data Center
- CVE-2022-3236 Sophos Firewall Code Injection Vulnerability Sophos · Firewall
- CVE-2022-35405 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Zoho · ManageEngine
- CVE-2013-6282 Linux Kernel Improper Input Validation Vulnerability Linux · Kernel
- CVE-2013-2094 Linux Kernel Privilege Escalation Vulnerability Linux · Kernel
- CVE-2010-2568 Microsoft Windows Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2022-26258 D-Link DIR-820L Remote Code Execution Vulnerability D-Link · DIR-820L
- CVE-2018-7445 MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability MikroTik · RouterOS
- CVE-2018-2628 Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server
- CVE-2017-5521 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability NETGEAR · Multiple Devices
- CVE-2022-24706 Apache CouchDB Insecure Default Initialization of Resource Vulnerability Apache · CouchDB
- CVE-2022-24112 Apache APISIX Authentication Bypass Vulnerability Apache · APISIX
- CVE-2022-22963 VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability VMware Tanzu · Spring Cloud
- CVE-2021-39226 Grafana Authentication Bypass Vulnerability Grafana Labs · Grafana
- CVE-2021-38406 Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability Delta Electronics · DOPSoft 2
- CVE-2020-36193 PEAR Archive_Tar Improper Link Resolution Vulnerability PEAR · Archive_Tar
- CVE-2020-28949 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability PEAR · Archive_Tar
- CVE-2022-22536 SAP Multiple Products HTTP Request Smuggling Vulnerability SAP · Multiple Products
- CVE-2022-26923 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft · Active Directory
- CVE-2022-21971 Microsoft Windows Runtime Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2017-15944 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability Palo Alto Networks · PAN-OS
- CVE-2022-34713 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2022-26138 Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability Atlassian · Confluence
- CVE-2021-4034 Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Red Hat · Polkit
- CVE-2016-2386 SAP NetWeaver SQL Injection Vulnerability SAP · NetWeaver
- CVE-2016-2388 SAP NetWeaver Information Disclosure Vulnerability SAP · NetWeaver
- CVE-2019-5825 Google Chromium V8 Out-of-Bounds Write Vulnerability Google · Chromium V8
- CVE-2018-6065 Google Chromium V8 Integer Overflow Vulnerability Google · Chromium V8
- CVE-2018-17463 Google Chromium V8 Remote Code Execution Vulnerability Google · Chromium V8
- CVE-2013-1331 Microsoft Office Buffer Overflow Vulnerability Microsoft · Office
- CVE-2012-4969 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2012-1889 Microsoft XML Core Services Memory Corruption Vulnerability Microsoft · XML Core Services
- CVE-2012-0754 Adobe Flash Player Memory Corruption Vulnerability Adobe · Flash Player
- CVE-2012-0151 Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2011-2462 Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability Adobe · Reader and Acrobat
- CVE-2011-0609 Adobe Flash Player Unspecified Vulnerability Adobe · Flash Player
- CVE-2010-2883 Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability Adobe · Acrobat and Reader
- CVE-2010-2572 Microsoft PowerPoint Buffer Overflow Vulnerability Microsoft · PowerPoint
- CVE-2010-1297 Adobe Flash Player Memory Corruption Vulnerability Adobe · Flash Player
- CVE-2009-4324 Adobe Acrobat and Reader Use-After-Free Vulnerability Adobe · Acrobat and Reader
- CVE-2009-3953 Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability Adobe · Acrobat and Reader
- CVE-2009-0563 Microsoft Office Buffer Overflow Vulnerability Microsoft · Office
- CVE-2009-0557 Microsoft Office Object Record Corruption Vulnerability Microsoft · Office
- CVE-2007-5659 Adobe Acrobat and Reader Buffer Overflow Vulnerability Adobe · Acrobat and Reader
- CVE-2016-3393 Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2016-7256 Microsoft Windows Open Type Font Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2016-0984 Adobe Flash Player and AIR Use-After-Free Vulnerability Adobe · Flash Player and AIR
- CVE-2015-0016 Microsoft Windows TS WebProxy Directory Traversal Vulnerability Microsoft · Windows
- CVE-2015-4495 Mozilla Firefox Security Feature Bypass Vulnerability Mozilla · Firefox
- CVE-2015-8651 Adobe Flash Player Integer Overflow Vulnerability Adobe · Flash Player
- CVE-2015-1671 Microsoft Windows Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2014-4148 Microsoft Windows Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2013-7331 Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft · Internet Explorer
- CVE-2013-3896 Microsoft Silverlight Information Disclosure Vulnerability Microsoft · Silverlight
- CVE-2013-2423 Oracle JRE Unspecified Vulnerability Oracle · Java Runtime Environment (JRE)
- CVE-2010-0840 Oracle JRE Unspecified Vulnerability Oracle · Java Runtime Environment (JRE)
- CVE-2017-8291 Artifex Ghostscript Type Confusion Vulnerability Artifex · Ghostscript
- CVE-2017-8543 Microsoft Windows Search Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2016-4657 Apple iOS Webkit Memory Corruption Vulnerability Apple · iOS
- CVE-2016-6366 Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability Cisco · Adaptive Security Appliance (ASA)
- CVE-2019-5786 Google Chrome Blink Use-After-Free Vulnerability Google · Chrome Blink
Nothing on this page matches that filter.