Verdict
Weaponised and widely attempted
Reliable public exploit code exists, or mass exploitation attempts are probable. Patch inside days, not weeks. 637 vulnerabilities in this band.
- CVE-2019-11708 Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2019-18426 WhatsApp Cross-Site Scripting Vulnerability Meta Platforms · WhatsApp
- CVE-2022-30525 Zyxel Multiple Firewalls OS Command Injection Vulnerability Zyxel · Multiple Firewalls
- CVE-2022-22947 VMware Spring Cloud Gateway Code Injection Vulnerability VMware · Spring Cloud Gateway
- CVE-2014-4113 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2014-0322 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2014-0160 OpenSSL Information Disclosure Vulnerability OpenSSL · OpenSSL
- CVE-2022-0847 Linux Kernel Privilege Escalation Vulnerability Linux · Kernel
- CVE-2019-1003029 Jenkins Script Security Plugin Sandbox Bypass Vulnerability Jenkins · Script Security Plugin
- CVE-2019-3929 Crestron Multiple Products Command Injection Vulnerability Crestron · Multiple Products
- CVE-2018-7841 Schneider Electric U.motion Builder SQL Injection Vulnerability Schneider Electric · U.motion Builder
- CVE-2014-0780 InduSoft Web Studio NTWebServer Directory Traversal Vulnerability InduSoft · Web Studio
- CVE-2007-3010 Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability Alcatel · OmniPCX Enterprise
- CVE-2015-5122 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2015-3113 Adobe Flash Player Heap-Based Buffer Overflow Vulnerability Adobe · Flash Player
- CVE-2015-0313 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2015-0311 Adobe Flash Player Remote Code Execution Vulnerability Adobe · Flash Player
- CVE-2017-11317 Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability Telerik · User Interface (UI) for ASP.NET AJAX
- CVE-2021-3156 Sudo Heap-Based Buffer Overflow Vulnerability Sudo · Sudo
- CVE-2021-31166 Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability Microsoft · HTTP Protocol Stack
- CVE-2022-22965 Spring Framework JDK 9+ Remote Code Execution Vulnerability VMware · Spring Framework
- CVE-2021-45382 D-Link Multiple Routers Remote Code Execution Vulnerability D-Link · Multiple Routers
- CVE-2022-1040 Sophos Firewall Authentication Bypass Vulnerability Sophos · Firewall
- CVE-2021-21551 Dell dbutil Driver Insufficient Access Control Vulnerability Dell · dbutil Driver
- CVE-2018-10561 Dasan GPON Routers Authentication Bypass Vulnerability Dasan · Gigabit Passive Optical Network (GPON) Routers
- CVE-2022-0543 Debian-specific Redis Server Lua Sandbox Escape Vulnerability Redis · Debian-specific Redis Servers
- CVE-2017-0059 Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft · Internet Explorer
- CVE-2017-0037 Microsoft Edge and Internet Explorer Type Confusion Vulnerability Microsoft · Edge and Internet Explorer
- CVE-2016-7201 Microsoft Edge Memory Corruption Vulnerability Microsoft · Edge
- CVE-2016-7200 Microsoft Edge Memory Corruption Vulnerability Microsoft · Edge
- CVE-2016-0189 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2015-2426 Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2013-3660 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2013-2729 Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability Adobe · Reader and Acrobat
- CVE-2013-1690 Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2012-5076 Oracle Java SE Sandbox Bypass Vulnerability Oracle · Java SE
- CVE-2012-2539 Microsoft Word Remote Code Execution Vulnerability Microsoft · Word
- CVE-2022-26318 WatchGuard Firebox and XTM Appliances Arbitrary Code Execution WatchGuard · Firebox and XTM Appliances
- CVE-2022-26143 MiCollab, MiVoice Business Express Access Control Vulnerability Mitel · MiCollab, MiVoice Business Express
- CVE-2020-9054 Zyxel Multiple NAS Devices OS Command Injection Vulnerability Zyxel · Multiple Network-Attached Storage (NAS) Devices
- CVE-2020-7247 OpenSMTPD Remote Code Execution Vulnerability OpenBSD · OpenSMTPD
- CVE-2020-5410 VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability VMware Tanzu · Spring Cloud Configuration (Config) Server
- CVE-2020-25223 Sophos SG UTM Remote Code Execution Vulnerability Sophos · SG UTM
- CVE-2020-1956 Apache Kylin OS Command Injection Vulnerability Apache · Kylin
- CVE-2019-6340 Drupal Core Remote Code Execution Vulnerability Drupal · Core
- CVE-2019-2616 Oracle BI Publisher Unauthorized Access Vulnerability Oracle · BI Publisher (Formerly XML Publisher)
- CVE-2019-16920 D-Link Multiple Routers Command Injection Vulnerability D-Link · Multiple Routers
- CVE-2019-12991 Citrix SD-WAN and NetScaler Command Injection Vulnerability Citrix · SD-WAN and NetScaler
- CVE-2019-12989 Citrix SD-WAN and NetScaler SQL Injection Vulnerability Citrix · SD-WAN and NetScaler
- CVE-2019-10068 Kentico Xperience Deserialization of Untrusted Data Vulnerability Kentico · Xperience
- CVE-2019-1003030 Jenkins Matrix Project Plugin Remote Code Execution Vulnerability Jenkins · Matrix Project Plugin
- CVE-2018-8414 Microsoft Windows Shell Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2018-8373 Microsoft Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer Scripting Engine
- CVE-2018-6961 VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability VMware · SD-WAN Edge
- CVE-2018-14839 LG N1A1 NAS Remote Command Execution Vulnerability LG · N1A1 NAS
- CVE-2018-0125 Cisco VPN Routers Remote Code Execution Vulnerability Cisco · VPN Routers
- CVE-2017-6334 NETGEAR DGN2200 Devices OS Command Injection Vulnerability NETGEAR · DGN2200 Devices
- CVE-2017-6316 Citrix Multiple Products Remote Code Execution Vulnerability Citrix · NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server
- CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability Cisco · IOS and IOS XE
- CVE-2017-12617 Apache Tomcat Remote Code Execution Vulnerability Apache · Tomcat
- CVE-2016-1555 NETGEAR Multiple WAP Devices Command Injection Vulnerability NETGEAR · Wireless Access Point (WAP) Devices
- CVE-2016-11021 D-Link DCS-930L Devices OS Command Injection Vulnerability D-Link · DCS-930L Devices
- CVE-2016-10174 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability NETGEAR · WNR2000v5 Router
- CVE-2016-0752 Ruby on Rails Directory Traversal Vulnerability Rails · Ruby on Rails
- CVE-2015-4068 Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability Arcserve · Unified Data Protection (UDP)
- CVE-2015-3035 TP-Link Multiple Archer Devices Directory Traversal Vulnerability TP-Link · Multiple Archer Devices
- CVE-2015-1427 Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability Elastic · Elasticsearch
- CVE-2015-1187 D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability D-Link and TRENDnet · Multiple Devices
- CVE-2014-6332 Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2014-6324 Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability Microsoft · Kerberos Key Distribution Center (KDC)
- CVE-2014-6287 Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability Rejetto · HTTP File Server (HFS)
- CVE-2014-3120 Elasticsearch Remote Code Execution Vulnerability Elastic · Elasticsearch
- CVE-2014-0130 Ruby on Rails Directory Traversal Vulnerability Rails · Ruby on Rails
- CVE-2013-4810 HP Multiple Products Remote Code Execution Vulnerability Hewlett Packard (HP) · ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management
- CVE-2013-2251 Apache Struts Improper Input Validation Vulnerability Apache · Struts
- CVE-2012-1823 PHP-CGI Query String Parameter Vulnerability PHP · PHP
- CVE-2010-4344 Exim Heap-Based Buffer Overflow Vulnerability Exim · Exim
- CVE-2009-1151 phpMyAdmin Remote Code Execution Vulnerability phpMyAdmin · phpMyAdmin
- CVE-2009-0927 Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability Adobe · Reader and Acrobat
- CVE-2005-2773 HP OpenView Network Node Manager Remote Code Execution Vulnerability Hewlett Packard (HP) · OpenView Network Node Manager
- CVE-2021-21973 VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability VMware · vCenter Server and Cloud Foundation
- CVE-2019-11581 Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability Atlassian · Jira Server and Data Center
- CVE-2017-6077 NETGEAR DGN2200 Remote Code Execution Vulnerability NETGEAR · Wireless Router DGN2200
- CVE-2016-6277 NETGEAR Multiple Routers Remote Code Execution Vulnerability NETGEAR · Multiple Routers
- CVE-2013-0631 Adobe ColdFusion Information Disclosure Vulnerability Adobe · ColdFusion
- CVE-2013-0629 Adobe ColdFusion Directory Traversal Vulnerability Adobe · ColdFusion
- CVE-2013-0625 Adobe ColdFusion Authentication Bypass Vulnerability Adobe · ColdFusion
- CVE-2022-20699 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
- CVE-2020-1938 Apache Tomcat Improper Privilege Management Vulnerability Apache · Tomcat
- CVE-2019-1652 Cisco Small Business Routers Improper Input Validation Vulnerability Cisco · Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers
- CVE-2018-8298 ChakraCore Scripting Engine Type Confusion Vulnerability ChakraCore · ChakraCore scripting engine
- CVE-2017-8540 Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability Microsoft · Malware Protection Engine
- CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-11826 Microsoft Office Remote Code Execution Vulnerability Microsoft · Office
- CVE-2017-0261 Microsoft Office Use-After-Free Vulnerability Microsoft · Office
- CVE-2016-7262 Microsoft Office Security Feature Bypass Vulnerability Microsoft · Excel
- CVE-2016-7193 Microsoft Office Memory Corruption Vulnerability Microsoft · Office
- CVE-2016-5195 Linux Kernel Race Condition Vulnerability Linux · Kernel
- CVE-2016-4117 Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe · Flash Player
- CVE-2015-5119 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2015-3043 Adobe Flash Player Memory Corruption Vulnerability Adobe · Flash Player
- CVE-2015-2545 Microsoft Office Malformed EPS File Vulnerability Microsoft · Office
- CVE-2015-1642 Microsoft Office Memory Corruption Vulnerability Microsoft · Office
- CVE-2014-4114 Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2013-5065 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2013-3897 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2013-3346 Adobe Reader and Acrobat Memory Corruption Vulnerability Adobe · Reader and Acrobat
- CVE-2013-1347 Microsoft Internet Explorer Remote Code Execution Vulnerability Microsoft · Internet Explorer
- CVE-2013-0640 Adobe Reader and Acrobat Memory Corruption Vulnerability Adobe · Reader and Acrobat
- CVE-2013-0632 Adobe ColdFusion Authentication Bypass Vulnerability Adobe · ColdFusion
- CVE-2012-1856 Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability Microsoft · Office
- CVE-2012-1535 Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe · Flash Player
- CVE-2011-3544 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle · Java SE JDK and JRE
- CVE-2011-0611 Adobe Flash Player Remote Code Execution Vulnerability Adobe · Flash Player
- CVE-2010-3333 Microsoft Office Stack-based Buffer Overflow Vulnerability Microsoft · Office
- CVE-2009-3129 Microsoft Excel Featheader Record Memory Corruption Vulnerability Microsoft · Excel
- CVE-2017-8570 Microsoft Office Remote Code Execution Vulnerability Microsoft · Office
- CVE-2014-6352 Microsoft Windows Code Injection Vulnerability Microsoft · Windows
- CVE-2022-23131 Zabbix Frontend Authentication Bypass Vulnerability Zabbix · Frontend
- CVE-2022-23134 Zabbix Frontend Improper Access Control Vulnerability Zabbix · Frontend
Nothing on this page matches that filter.