Actively exploited vulnerabilities
Flaws that, according to CISA, attackers are already using. If you run one of these products, fix them first.
- Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
- Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
- Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
- Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
- Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
- Fortinet Multiple Products Path Traversal Vulnerability
- Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- Cisco Secure Email Gateway Relative Path Traversal Vulnerability
- Cisco Secure Email Gateway Arbitrary File Write Vulnerability
- Palo Alto Networks PAN-OS Code Injection Vulnerability
- Microsoft Windows Command Injection Vulnerability
- Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
- Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability
- Fortinet FortiMail Path Traversal Vulnerability
- Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
- Citrix NetScaler Improper Input Validation Vulnerability
- Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- Microsoft SharePoint Code Injection Vulnerability
- Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
- F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
- Check Point Multiple Products Path Traversal Vulnerability
- Check Point Multiple Products Improper Certificate Validation Vulnerability
- Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
- Cisco Secure Email Gateway SQL Injection Vulnerability
- Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
- Cisco Secure Email Gateway SQL Injection Vulnerability
- MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
- MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
- Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
- Microsoft Windows Link Following Vulnerability
- Microsoft Windows Heap-Based Buffer Overflow Vulnerability
- SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
- SonicWall SMA1000 Appliances OS Command Injection Vulnerability
- Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
- Microsoft SharePoint Weak Authentication Vulnerability
- Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
- Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
- Progress LoadMaster Command Injection Vulnerability
- Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
- Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
- Check Point SmartConsole Improper Authentication Vulnerability
- Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- Fortinet FortiSandbox OS Command Injection Vulnerability
- Fortinet FortiSandbox OS Command Injection Vulnerability
- SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
- Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
- SonicWall SMA1000 Appliances Code Injection Vulnerability
- Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
- Cisco IOS Cross-Site Request Forgery Vulnerability
- Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
- Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
- Ubiquiti UniFi OS Improper Input Validation Vulnerability
- Ubiquiti UniFi OS Path Traversal Vulnerability
- Ubiquiti UniFi OS Improper Access Control Vulnerability
- Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
- Ivanti Sentry OS Command Injection Vulnerability
- Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
- Check Point Security Gateway Improper Authentication Vulnerability
- SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
- Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
- Microsoft Windows Buffer Overflow Vulnerability
- Microsoft DirectX NULL Byte Overwrite Vulnerability
- Microsoft Internet Explorer Use-After-Free Vulnerability
- Microsoft Internet Explorer Use-After-Free Vulnerability
- Microsoft Defender Link Following Vulnerability
- Microsoft Defender Denial of Service Vulnerability
- Microsoft Exchange Server Cross-Site Scripting Vulnerability
- Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
- Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
- Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
- Microsoft Windows Protection Mechanism Failure Vulnerability
- D-Link DIR-823X Command Injection Vulnerability
- Microsoft Defender Insufficient Granularity of Access Control Vulnerability
- Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
- Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
- Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
- Microsoft Office Remote Code Execution
- Microsoft SharePoint Server Improper Input Validation Vulnerability
- Fortinet FortiClient EMS SQL Injection Vulnerability
- Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
- Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
- Microsoft Windows Link Following Vulnerability
- Microsoft Windows Out-of-Bounds Read Vulnerability
- Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
- Fortinet FortiClient EMS Improper Access Control Vulnerability
- Citrix NetScaler Out-of-Bounds Read Vulnerability
- F5 BIG-IP Stack-Based Buffer Overflow Vulnerability
- Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
- Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
- Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
- Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
- Cisco SD-WAN Path Traversal Vulnerability
- Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
- Microsoft Configuration Manager SQL Injection Vulnerability
- SolarWinds Web Help Desk Security Control Bypass Vulnerability
- Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
- Microsoft Windows Shell Protection Mechanism Failure Vulnerability
- Microsoft Windows Improper Privilege Management Vulnerability
- Microsoft Windows Type Confusion Vulnerability
- Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
- Microsoft Windows NULL Pointer Dereference Vulnerability
- SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
- Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
- Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Microsoft Office Security Feature Bypass Vulnerability
- Cisco Unified Communications Products Code Injection Vulnerability
- Microsoft Windows Information Disclosure Vulnerability
- Microsoft Office PowerPoint Code Injection Vulnerability
- WatchGuard Firebox Out of Bounds Write Vulnerability
- Cisco Multiple Products Improper Input Validation Vulnerability
- SonicWall SMA1000 Missing Authorization Vulnerability
- Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
- Microsoft Windows Use After Free Vulnerability
- D-Link Routers Buffer Overflow Vulnerability
- Fortinet FortiWeb OS Command Injection Vulnerability
- Fortinet FortiWeb Path Traversal Vulnerability
- WatchGuard Firebox Out-of-Bounds Write Vulnerability
- Microsoft Windows Race Condition Vulnerability
- Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
- Microsoft Windows SMB Client Improper Access Control Vulnerability
- Microsoft Windows Untrusted Pointer Dereference Vulnerability
- Microsoft Windows Improper Access Control Vulnerability
- Microsoft Windows Out-of-Bounds Write Vulnerability
- Microsoft Windows Remote Code Execution Vulnerability
- Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability
- Microsoft Windows Privilege Escalation Vulnerability
- Juniper ScreenOS Improper Authentication Vulnerability
- Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
- Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
- Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
- TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability
- TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
- TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability
- Citrix NetScaler Memory Overflow Vulnerability
- Citrix Session Recording Improper Privilege Management Vulnerability
- Citrix Session Recording Deserialization of Untrusted Data Vulnerability
- Microsoft Office Excel Remote Code Execution Vulnerability
- Microsoft Internet Explorer Resource Management Errors Vulnerability
- D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
- D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
- D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
- Cisco Identity Services Engine Injection Vulnerability
- Cisco Identity Services Engine Injection Vulnerability
- Microsoft SharePoint Code Injection Vulnerability
- Microsoft SharePoint Improper Authentication Vulnerability
- Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- Fortinet FortiWeb SQL Injection Vulnerability
- Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability
- Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
- Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
- D-Link DIR-859 Router Path Traversal Vulnerability
- TP-Link Multiple Routers Command Injection Vulnerability
- Microsoft Windows External Control of File Name or Path Vulnerability
- Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
- Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
- DrayTek Vigor Routers OS Command Injection Vulnerability
- Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
- Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
- Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
- Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
- Microsoft Windows DWM Core Library Use-After-Free Vulnerability
- Microsoft Windows Scripting Engine Type Confusion Vulnerability
- SonicWall SMA100 Appliances OS Command Injection Vulnerability
- Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
- SonicWall SMA100 Appliances OS Command Injection Vulnerability
- Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
- Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
- Cisco Smart Licensing Utility Static Credential Vulnerability
- Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
- Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
- Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability
- Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
- Microsoft Windows Win32k Use-After-Free Vulnerability
- Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
- Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability
- Microsoft Windows NTFS Information Disclosure Vulnerability
- Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
- Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
- Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
- VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
- VMware ESXi Arbitrary Write Vulnerability
- VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
- Progress WhatsUp Gold Path Traversal Vulnerability
- Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
- Cisco Small Business RV Series Routers Command Injection Vulnerability
- Microsoft Partner Center Improper Access Control Vulnerability
- Microsoft Power Pages Improper Access Control Vulnerability
- Palo Alto Networks PAN-OS File Read Vulnerability
- SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
- Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
- Zyxel DSL CPE OS Command Injection Vulnerability
- Zyxel DSL CPE OS Command Injection Vulnerability
- Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
- Microsoft Windows Storage Link Following Vulnerability
- Sophos XG Firewall Buffer Overflow Vulnerability
- Sophos: CyberoamOS (CROS) SQL Injection Vulnerability
- Microsoft Outlook Improper Input Validation Vulnerability
- Microsoft .NET Framework Information Disclosure Vulnerability
- SonicWall SMA1000 Appliances Deserialization Vulnerability
- Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
- Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
- Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
- Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
- Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
- Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
- Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
- Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
- Zyxel Multiple Firewalls Path Traversal Vulnerability
- VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
- VMware vCenter Server Privilege Escalation Vulnerability
- Progress Kemp LoadMaster OS Command Injection Vulnerability
- Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
- Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
- Palo Alto Networks Expedition SQL Injection Vulnerability
- Palo Alto Networks Expedition OS Command Injection Vulnerability
- Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
- Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
- Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
- Atlassian Jira Server and Data Center Path Traversal Vulnerability
- Palo Alto Networks Expedition Missing Authentication Vulnerability
- Cisco ASA and FTD Denial-of-Service Vulnerability
- Fortinet FortiManager Missing Authentication Vulnerability
- Microsoft SharePoint Deserialization Vulnerability
- Veeam Backup and Replication Deserialization Vulnerability
- SolarWinds Web Help Desk Hardcoded Credential Vulnerability
- Microsoft Windows Kernel TOCTOU Race Condition Vulnerability
- Fortinet Multiple Products Format String Vulnerability
- Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
- Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
- Microsoft Windows Management Console Remote Code Execution Vulnerability
- Microsoft Windows MSHTML Platform Spoofing Vulnerability
- Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
- DrayTek Multiple Vigor Routers OS Command Injection Vulnerability
- D-Link DIR-820 Router OS Command Injection Vulnerability
- Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
- Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
- Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
- Progress WhatsUp Gold SQL Injection Vulnerability
- Microsoft Windows MSHTML Platform Spoofing Vulnerability
- Ivanti Cloud Services Appliance OS Command Injection Vulnerability
- Microsoft Windows Installer Improper Privilege Management Vulnerability
- Microsoft Publisher Protection Mechanism Failure Vulnerability
- Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
- SonicWall SonicOS Improper Access Control Vulnerability
- Draytek VigorConnect Path Traversal Vulnerability
- Draytek VigorConnect Path Traversal Vulnerability
- Microsoft Exchange Server Information Disclosure Vulnerability
- SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
- Microsoft Project Remote Code Execution Vulnerability
- Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability
- Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
- Microsoft Windows Scripting Engine Memory Corruption Vulnerability
- Microsoft Windows Kernel Privilege Escalation Vulnerability
- Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
- Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability
- VMware ESXi Authentication Bypass Vulnerability
- Microsoft Internet Explorer Use-After-Free Vulnerability
- SolarWinds Serv-U Path Traversal Vulnerability
- VMware vCenter Server Incorrect Default File Permissions Vulnerability
- Microsoft Windows Hyper-V Privilege Escalation Vulnerability
- Microsoft Windows MSHTML Platform Spoofing Vulnerability
- Cisco NX-OS Command Injection Vulnerability
- Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
- Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability
- Check Point Quantum Security Gateways Information Disclosure Vulnerability
- D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
- D-Link DIR-605 Router Information Disclosure Vulnerability
- Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability
- Microsoft DWM Core Library Privilege Escalation Vulnerability
- Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
- Cisco ASA and FTD Denial of Service Vulnerability
- Cisco ASA and FTD Privilege Escalation Vulnerability
- Microsoft Windows Print Spooler Privilege Escalation Vulnerability
- Palo Alto Networks PAN-OS Command Injection Vulnerability
- D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
- D-Link Multiple NAS Devices Command Injection Vulnerability
- Microsoft SharePoint Server Code Injection Vulnerability
- Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
- Fortinet FortiClient EMS SQL Injection Vulnerability
- Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability
- Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability
- Microsoft Exchange Server Privilege Escalation Vulnerability
- Cisco ASA and FTD Information Disclosure Vulnerability
- Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability
- Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
- Fortinet FortiOS Out-of-Bound Write Vulnerability
- Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
- Atlassian Confluence Data Center and Server Template Injection Vulnerability
- VMware vCenter Server Out-of-Bounds Write Vulnerability
- Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
- Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
- Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
- Microsoft SharePoint Server Privilege Escalation Vulnerability
- Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
- Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
- D-Link DSL-2750B Devices Command Injection Vulnerability
No advisories match these filters.