Known Exploited

    Dashboard / Known Exploited

    Filters
    7.8
    High

    CVE-2014-4077

    Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default (with the default set as disabled). IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE (IME for Japanese) is installed which allows attackers to bypass a sandbox and perform privilege escalation.

    Alert Date:25 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2014-4077

    7.8
    High

    CVE-2014-3153

    The futex_requeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.

    Alert Date:25 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2014-3153

    6.5
    Medium

    CVE-2013-7331

    An information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerability could allow an attacker to detect anti-malware applications.

    Alert Date:25 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2013-7331

    6.5
    Medium

    CVE-2013-3993

    Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.

    Alert Date:25 May 2022
    Action:The impacted product is end-of-life and should be disconnected if still in use.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2013-3993

    5.5
    Medium

    CVE-2013-3896

    Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.

    Alert Date:25 May 2022
    Action:The impacted product is end-of-life and should be disconnected if still in use.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2013-3896

    3.7
    Low

    CVE-2013-2423

    Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity.

    Alert Date:25 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2013-2423

    3.7
    Low

    CVE-2013-0431

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.

    Alert Date:25 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2013-0431

    9.8
    Critical

    CVE-2013-0422

    A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.

    Alert Date:25 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2013-0422

    7.8
    High

    CVE-2013-0074

    Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.

    Alert Date:25 May 2022
    Action:The impacted product is end-of-life and should be disconnected if still in use.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2013-0074

    9.8
    Critical

    CVE-2012-1710

    Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer.

    Alert Date:25 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2012-1710

    5.9
    Medium

    CVE-2010-1428

    Unauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this flaw to gain access to sensitive information.

    Alert Date:25 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2010-1428

    9.8
    Critical

    CVE-2010-0840

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors.

    Alert Date:25 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2010-0840

    3.7
    Low

    CVE-2010-0738

    The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.

    Alert Date:25 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2010-0738

    7.8
    High

    CVE-2018-8611

    A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2018-8611

    6.1
    Medium

    CVE-2018-19953

    A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2018-19953

    9.8
    Critical

    CVE-2018-19949

    A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2018-19949

    8
    High

    CVE-2018-19943

    A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2018-19943

    7.5
    High

    CVE-2017-0147

    The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2017-0147

    6.5
    Medium

    CVE-2017-0022

    Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2017-0022

    7.8
    High

    CVE-2017-0005

    The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2017-0005

    8.8
    High

    CVE-2017-0149

    Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service (DoS) via a crafted website.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2017-0149

    8.8
    High

    CVE-2017-0210

    A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2017-0210

    7.8
    High

    CVE-2017-8291

    Artifex Ghostscript allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2017-8291

    9.8
    Critical

    CVE-2017-8543

    Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2017-8543

    9.8
    Critical

    CVE-2017-18362

    ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.

    Alert Date:24 May 2022
    Action:The impacted product is end-of-life and should be disconnected if still in use.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2017-18362

    4.3
    Medium

    CVE-2016-0162

    An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2016-0162

    6.5
    Medium

    CVE-2016-3351

    An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2016-3351

    5.5
    Medium

    CVE-2016-4655

    The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2016-4655

    7.8
    High

    CVE-2016-4656

    A memory corruption vulnerability in Apple iOS kernel allows attackers to execute code in a privileged context or cause a denial-of-service (DoS) via a crafted application.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2016-4656

    8.8
    High

    CVE-2016-4657

    Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS) via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2016-4657

    8.8
    High

    CVE-2016-6366

    A buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco ASA software could allow an attacker to cause a reload of the affected system or to remotely execute code.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2016-6366

    7.8
    High

    CVE-2016-6367

    A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a denial-of-service (DoS) condition or potentially execute code.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2016-6367

    6.5
    Medium

    CVE-2016-3298

    An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk.

    Alert Date:24 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2016-3298

    6.5
    Medium

    CVE-2022-20821

    Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2022-20821

    7.8
    High

    CVE-2021-1048

    Android kernel contains a use-after-free vulnerability that allows for privilege escalation.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2021-1048

    6.4
    Medium

    CVE-2021-0920

    Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2021-0920

    7.8
    High

    CVE-2021-30883

    Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for remote code execution.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2021-30883

    7.8
    High

    CVE-2020-1027

    An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2020-1027

    7.8
    High

    CVE-2020-0638

    Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2020-0638

    7.8
    High

    CVE-2019-7286

    Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2019-7286

    7.8
    High

    CVE-2019-7287

    Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2019-7287

    6.5
    Medium

    CVE-2019-0676

    An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2019-0676

    6.5
    Medium

    CVE-2019-5786

    Google Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out of bounds memory access via a crafted HTML page.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2019-5786

    6.5
    Medium

    CVE-2019-0703

    An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2019-0703

    7.8
    High

    CVE-2019-0880

    A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2019-0880

    8.8
    High

    CVE-2019-13720

    Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2019-13720

    8.8
    High

    CVE-2019-11707

    Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2019-11707

    10
    Critical

    CVE-2019-11708

    Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2019-11708

    8.8
    High

    CVE-2019-8720

    WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2019-8720

    8.2
    High

    CVE-2019-18426

    A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.

    Alert Date:23 May 2022
    Action:Apply updates per vendor instructions.

    Note: https://nvd.nist.gov/vuln/detail/CVE-2019-18426

    Items Per Page