Home › Weekly Digests › This Week
LiveThreat Threat Intelligence

Weekly Threat Intelligence Digest — Oct 05 to Oct 12, 2026

Weekly threat intelligence digest from 2817 items (411 critical, 2265 high).

October 12, 2026 2817 articles analyzed
🛡️ LiveThreat Weekly Threat Intelligence — Oct 05 to Oct 12, 2026 This week we tracked 1014 breach/ransomware report(s), 1488 vulnerabilit(y/ies), 304 advisor(y/ies). Recurring themes: Data Exfiltration, Zero-Day Exploit, Credential Compromise. Most affected sectors: Technology & SaaS, Media & Entertainment, Retail & E-Commerce. Top items this week: • [Critical] U.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vuln… • [Critical] Week in review: FortiBleed is still active, Patch Tuesday forecast • [Critical] Citrix Ships Another Emergency Fix for NetScaler Appliances • [Critical] Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access • [Critical] Max severity SonicWall SMA1000 flaw now exploited in attacks For compliance and audit readiness, this is exactly the kind of activity worth tracking continuously — so you can show your controls are working when it counts. #TrustOperations #NISTCSF #ControlAssurance #Cybersecurity #ThreatIntel #ContinuousMonitoring #LiveThreat #VerisqAI

Articles Referenced in This Digest 2817 items

Advisory (34)

HighOctober 2026 Patch Tuesday forecast: Time for an Office cleanup
HighMicrosoft: Outdated Windows devices will stop receiving security updates
HighChina-linked malicious actors called out by UK and international partners for targeting sensitive data globally
HighChinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
HighJava library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws
HighDutch Tax Agency Reverses Microsoft 365 Cloud Migration Over Data Risks
HighGoogle October Update Fixes Pixel Bugs as Pixel 6 Nears End of Support
HighGoogle issues Android security updates: who can get them and how
HighOffice 2021 support ends this month – you have 5 options
HighHitachi Energy RTU500
HighMI5 Raises Alarm Over Chinese Funding of UK Academic Research
MediumTrade Coalition Calls for Binding Rules on Feds' OT Security
MediumGot a Microsoft 365 subscription? Your storage is about to shrink
MediumAnthropic Bans AI Model Abuse, Tightens Rules on Deception
MediumJapan Adopts Proactive Cyber Defense Strategy
MediumCMMC and AI Governance: How to Keep CUI Out of AI Tools
MediumOpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing
MediumOpenAI is adding invisible watermarks to ChatGPT and Codex text in the EU
MediumApple tightens macOS disk access as AI agents become more powerful
InformationalAnthropic offers free AI security scans to open-source maintainers
InformationalAnthropic Launches Free AI Vulnerability Scanner for Open-Source Projects
InformationalPCI SSC calls for human approval of AI agent actions involving cardholder data
InformationalSplunk .conf26: Tracking the Triage Agent in the Agentic SOC
InformationalPost-quantum authentication: Why organizations should start testing certificate ecosystems now
InformationalReconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th)
InformationalThe Data-First Approach to CMMC
InformationalMaking the Case to the Board for Post-Quantum Readiness
InformationalMicrosoft Outlook to block MSIX attachments starting November
InformationalAI Agent Gateway: Open-source tool keeps credentials out of agent configs
InformationalDLP Inspection Where Your Agents Run: Extending Symantec DLP to Tetrate Agent Router
InformationalGoogle Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
InformationalIntroducing the New Small Business Cybersecurity Support Program Finder
InformationalSecure Your Mission-Critical Application Estate: Qualys TotalAppSec is Now FedRAMP High Authorized (FedRAMP Certified Class D)
InformationalGoogle halts open-source bug bounty program amid AI spam surge

Breach (1006)

CriticalYouNow - 18,241,518 accounts breached
CriticalWongnai - 3,924,454 accounts breached
CriticalWishbone (2020) - 9,705,172 accounts breached
CriticalWiredBucks - 918,529 accounts breached
CriticalWindows93 / Myspace93 - 46,105 accounts breached
CriticalWin7Vista Forum - 202,683 accounts breached
CriticalWildStar - 738,556 accounts breached
CriticalWHMCS - 134,047 accounts breached
CriticalTAP Air Portugal - 6,083,479 accounts breached
CriticalTaobao - 21,149,008 accounts breached
CriticalT2 - 94,584 accounts breached
CriticalSynthient Stealer Log Threat Data - 182,962,095 accounts breached
CriticalStaminus - 26,815 accounts breached
CriticalpcTattletale - 138,751 accounts breached
CriticalPayHere - 1,580,249 accounts breached
CriticalPatreon - 2,330,382 accounts breached
CriticalLiker - 465,141 accounts breached
CriticalLanwar - 45,120 accounts breached
CriticalLandAirSea - 337,373 accounts breached
CriticalLadies.com - 118,809 accounts breached
CriticalLa Poste Mobile - 533,886 accounts breached
CriticalEvite - 100,985,047 accounts breached
CriticalDescomplica - 4,845,378 accounts breached
CriticalDentaQuest - 2,553,599 accounts breached
CriticalDC Health Link - 48,145 accounts breached
CriticalDave - 2,964,182 accounts breached
CriticalData Enrichment Records - 8,176,132 accounts breached
CriticalData Enrichment Exposure From PDL Customer - 622,161,052 accounts breached
CriticalData & Leads - 44,320,330 accounts breached
CriticalDailymotion - 85,176,234 accounts breached
CriticalCyberServe - 1,107,034 accounts breached
CriticalCTARS - 12,314 accounts breached
HighSecurity Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION
HighNippon Columbia malware incident exposes 8.6 million karaoke fan records
HighFBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack
HighASOS breach update: Hackers stole customer details and shopping searches
HighWhat We Missed: FBI Strikes Back at ShinyHunters
HighASOS Breach Reveals the Risks in Customer-Facing SaaS
HighFBI arrests another suspected ShinyHunters hacker after agency breach
HighUnpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
HighNeogen - 435,963 accounts breached
HighBelarusian hacktivists admit to 2023 breach of Russian state healthcare network
HighFBI touts another ShinyHunters arrest in response to data breach
HighHundreds of thousands impacted by data breach at biosensor firm iRhythm
HighAsos Hackers Claim Breach of Snowflake-Connected Simon AI
HighSuspected ShinyHunters Extortion Hacker Arrested by FBI
HighNeogen - 435,963 breached accounts
HighAI-Driven tool ARTEX used in attacks against South Korean Banks
HighFBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
HighTensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
HighMonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data
HighHackers target two South Korean megachurches, potentially exposing congregant data
HighASOS: Hackers tricked way into employee account before sending rogue push notification
HighASOS links data breach to social engineering attack, credential theft
HighAttackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
HighHackers hijack Google domains after breaching ccTLD registries
HighFBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
HighArizona courts say hackers stole info on more than 1.3 million people
HighOracle Health's Cerner EHR Breach Figure Soars to 20 Million
HighCyrusOne - 373,460 breached accounts
HighSouth Korean President Orders Probe After Financial Data Breaches
HighFortiBleed hit 86,000 firewalls by exploiting something nobody can patch away
HighDouble Counter - 274,922 accounts breached
HighCyrusOne - 373,460 accounts breached
HighAngel One - 6,765,054 accounts breached
High100+ Ukrainian Websites Hacked to Install Lunex Stealer with ClickFix Lure
HighDread Dark Web Forum Hijacked, Operators Claim Control of Domain Keys
HighHackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains
HighSenate passes healthcare cybersecurity bill after 190 million impacted by Change Healthcare breach
HighShinyHunters Extorted Boeing Spin-off Prior to Arrests
HighAttackers Hijack Asos App to Say Store is Hacked
HighSouth Korea Suspects AI Tool Helped Steal Bank Customer Data
HighDouble Counter - 274,922 breached accounts
HighAI Agents Leaked 13,000 Screenshots: Why Enterprise Approval Controls Failed
HighASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach
HighCoast Guard Boardings of Hacked Vessels: New Details
HighAngel One - 6,765,054 breached accounts
High집꾸미기 - 1,298,651 accounts breached
HighСпрашивай.ру - 3,474,763 accounts breached
HighПара Па - 4,946,850 accounts breached
HighМедицинская лаборатория Гемотест (Gemotest) - 6,341,495 accounts breached
HighZynga - 172,869,660 accounts breached
HighZurich - 756,737 accounts breached
HighZooville - 71,407 accounts breached
HighZoosk (2020) - 23,927,853 accounts breached
HighZoomcar - 3,589,795 accounts breached
HighZomato - 16,472,873 accounts breached
HighZ-lib - 9,737,374 accounts breached
HighZilvia.net - 287,863 accounts breached
HighZenBusiness - 5,118,184 accounts breached
HighZara - 197,376 accounts breached
HighZAP-Hosting - 746,682 accounts breached
HighZadig & Voltaire - 586,895 accounts breached
HighZacks (2024) - 11,994,223 accounts breached
HighZacks - 8,929,503 accounts breached
HighYou've Been Scraped - 66,147,869 accounts breached
HighYouthmanual - 937,912 accounts breached
HighYouPorn - 1,327,567 accounts breached
HighYoung Living Essential Oils - 1,128,951 accounts breached
HighYouku - 91,890,110 accounts breached
Highyotepresto.com - 1,444,629 accounts breached
HighYonéma - 35,962 accounts breached
HighYatra - 5,033,997 accounts breached
HighYandex Dump - 1,186,564 accounts breached
HighYam - 13,258,797 accounts breached
HighYahoo - 453,427 accounts breached
HighXSplit - 2,983,472 accounts breached
HighXPG - 890,341 accounts breached
HighXKCD - 561,991 accounts breached
HighXiaomi - 7,088,010 accounts breached
HighxHamster - 377,377 accounts breached
HighXbox-Scene - 432,552 accounts breached
HighXbox 360 ISO - 1,296,959 accounts breached
Highxat - 5,968,783 accounts breached
HighWPT Amateur Poker League - 148,366 accounts breached
HighWPSandbox - 858 accounts breached
HighWoTLabs - 21,994 accounts breached
HighWoflow - 447,593 accounts breached
HighWiziShop - 2,856,769 accounts breached
HighWishbone (2016) - 2,247,314 accounts breached
HighWIRED - 2,364,431 accounts breached
HighWIIU ISO - 458,155 accounts breached
HighWife Lovers - 1,274,051 accounts breached
HighWiener Büchereien - 224,119 accounts breached
HighWhitepages - 11,657,763 accounts breached
HighWendy's - 52,485 accounts breached
HighWelhof - 107,292 accounts breached
HighWeee - 1,117,405 accounts breached
HighWedMeGood - 1,306,723 accounts breached
HighWeb Hosting Talk - 515,149 accounts breached
HighWe Heart It - 8,600,635 accounts breached
HighWanelo - 23,165,793 accounts breached
HighV-Tight Gel - 2,013,164 accounts breached
HighVimeWorld - 3,118,964 accounts breached
HighVimeo - 119,167 accounts breached
HighViewFines - 777,649 accounts breached
HighVietnam Airlines - 7,316,915 accounts breached
HighVictory Phones - 166,046 accounts breached
HighVianet - 94,353 accounts breached
HighVermillion - 8,106 accounts breached
HighVerified - 16,919 accounts breached
HighVerifications.io - 763,117,241 accounts breached
HighvBulletin - 518,966 accounts breached
HighVastaamo - 30,433 accounts breached
HighVakinha - 4,775,203 accounts breached
HighuTorrent - 395,044 accounts breached
HighUtair - 401,400 accounts breached
HighUtah Gun Exchange - 235,233 accounts breached
HighUpstox - 111,002 accounts breached
HighUnverified Data Source - 11,498,146 accounts breached
HighUnreal Engine - 530,147 accounts breached
HighUniversity of Pennsylvania - 623,750 accounts breached
HighUniversity of Nottingham - 454,635 accounts breached
HighUniversity of California - 547,422 accounts breached
HighUniversarium - 564,962 accounts breached
HighUnigame - 843,696 accounts breached
HighUnico Campania - 166,031 accounts breached
HighUnderworld Empire - 428,779 accounts breached
HighUnder Armour - 72,742,892 accounts breached
HighUN Internet Governance Forum - 3,200 accounts breached
HighUlmon - 777,769 accounts breached
HighUiggy - 2,682,650 accounts breached
HighUdemy - 1,401,259 accounts breached
HighUbook - 699,908 accounts breached
HighUalabee - 472,296 accounts breached
HighTwitter (200M) - 211,524,284 accounts breached
HighTunngle - 8,192,928 accounts breached
HighTuned Global - 985,586 accounts breached
Hightumblr - 65,469,298 accounts breached
HighTruth Finder - 8,159,573 accounts breached
HighTrueFire - 599,667 accounts breached
HighTruckersMP - 83,957 accounts breached
HighTroy Hunt's Mailchimp List - 16,627 accounts breached
HighTrillian - 3,827,238 accounts breached
HighTrik Spam Botnet - 43,432,346 accounts breached
HighTrello - 15,111,945 accounts breached
HighTravelio - 471,376 accounts breached
HighTravel Oklahoma - 637,279 accounts breached
HighTraderie - 364,898 accounts breached
HighTracki - 372,557 accounts breached
HighToy Battles - 1,017 accounts breached
HighTout - 652,683 accounts breached
HighToumei - 76,682 accounts breached
HighTorrent Invites - 352,120 accounts breached
HighToonDoo - 6,002,694 accounts breached
HighTokopedia - 71,443,698 accounts breached
HighTNAFlix - 1,374,344 accounts breached
HighTISZA Világ - 198,520 accounts breached
HighTigo - 700,394 accounts breached
HighTicketfly - 26,151,608 accounts breached
HighTicketek - 17,643,173 accounts breached
HighTicketcounter - 1,921,722 accounts breached
HighTibber - 50,002 accounts breached
HighTianya - 29,020,808 accounts breached
HighThisHabbo Forum - 612,414 accounts breached
HighThingiverse - 228,102 accounts breached
HighTheTVDB.com - 181,871 accounts breached
HighTheSqua.re - 107,041 accounts breached
HighThermomix Recipe World Forum - 3,123,439 accounts breached
HighTheGradCafe - 310,975 accounts breached
HighThe Real World - 324,382 accounts breached
HighThe Post Millennial - 56,973,345 accounts breached
HighThe Kodi Foundation - 400,635 accounts breached
HighThe Heritage Foundation - 72,004 accounts breached
HighThe Halloween Spot - 10,653 accounts breached
HighThe Fly on the Wall - 84,011 accounts breached
HighThe Fappening - 179,030 accounts breached
HighThe Club Penguin Experience - 6,342 accounts breached
HighThe Candid Board - 178,201 accounts breached
HighThe Botting Network - 96,320 accounts breached
HighTesco - 2,239 accounts breached
HighTerravision - 2,075,625 accounts breached
HighTeracod - 97,151 accounts breached
HighTelecom Regulatory Authority of India - 107,776 accounts breached
HighTehetségKapu - 54,357 accounts breached
HighTeespring - 8,234,193 accounts breached
HighTechnic - 265,410 accounts breached
HighTeam SoloMid - 442,166 accounts breached
HighTaringa - 27,971,100 accounts breached
HighTappware - 94,734 accounts breached
HighTangerine - 243,462 accounts breached
HighTamodo - 494,945 accounts breached
HighTaiLieu - 7,327,477 accounts breached
HighSysco - 2,691,852 accounts breached
HighSynthient Credential Stuffing Threat Data - 1,957,476,021 accounts breached
HighSwvl - 4,195,918 accounts breached
HighSwordFantasy - 2,690,657 accounts breached
HighSwitch - 5,397 accounts breached
HighSweClockers.com - 254,867 accounts breached
HighSvenskaMagic - 30,327 accounts breached
HighSurveyLama - 4,426,879 accounts breached
HighSuperVPN & GeckoVPN - 20,339,937 accounts breached
HighSuperDraft - 300,187 accounts breached
HighSuno - 55,282,226 accounts breached
HighSundry Files - 274,461 accounts breached
HighSumo Torrent - 285,191 accounts breached
HighSUCCESS - 253,510 accounts breached
HighSubstack - 663,121 accounts breached
HighSubaGames - 6,137,666 accounts breached
HighStronghold Kingdoms - 5,187,305 accounts breached
HighStripchat - 10,001,355 accounts breached
HighStreetEasy - 988,230 accounts breached
HighStreamCraft - 1,772,620 accounts breached
HighStratfor - 859,777 accounts breached
HighStraffic - 48,580,249 accounts breached
HighStoryBird - 1,047,200 accounts breached
HighStorenvy - 11,052,071 accounts breached
HighStockX - 6,840,339 accounts breached
HighSter-Kinekor - 1,619,544 accounts breached
HighStealer Logs, Jan 2025 - 71,039,833 accounts breached
HighStarTribune - 2,192,857 accounts breached
HighSTART - 7,455,386 accounts breached
HighStarNet - 139,395 accounts breached
HighStalker Online - 1,385,472 accounts breached
HighSpyzie - 518,643 accounts breached
HighSpyX - 1,977,011 accounts breached
HighSpytech - 5,645 accounts breached
HighSpyic - 875,999 accounts breached
HighSpyFone - 44,109 accounts breached
HighSpoutible - 207,114 accounts breached
HighSport 2000 - 3,189,643 accounts breached
HighSplitVPN - 865,336 accounts breached
HighSpirol - 55,622 accounts breached
HighSphero - 832,255 accounts breached
HighSpeedio - 27,501,041 accounts breached
HighSpecial K Data Feed Spam List - 30,741,620 accounts breached
HighSoundwave - 130,705 accounts breached
HighSoundCloud - 29,815,722 accounts breached
HighSound Radix - 292,993 accounts breached
HighSony - 37,103 accounts breached
HighSonicbids - 751,700 accounts breached
HighSongTrivia2 - 291,739 accounts breached
HighSocietà Italiana degli Autori ed Editori - 14,609 accounts breached
HighSocial Engineered - 89,392 accounts breached
HighSoarGames - 4,774,445 accounts breached
HighSnail - 1,410,899 accounts breached
HighSmogon - 386,489 accounts breached
HighSlideTeam - 1,464,271 accounts breached
HighSlickwraps - 857,611 accounts breached
HighSkTorrent - 117,070 accounts breached
HighSirHurt - 90,655 accounts breached
HighShotbow - 1,052,753 accounts breached
HighShort Édition - 505,466 accounts breached
HighShopper+ - 878,290 accounts breached
HighShopBack - 20,529,819 accounts breached
HighShoe Zone - 46,140 accounts breached
HighShockGore - 73,944 accounts breached
HighShitexpress - 23,817 accounts breached
HighSHEIN - 39,086,762 accounts breached
HighShareThis - 40,960,499 accounts breached
HighShadow - 543,295 accounts breached
HighShadi.com - 2,021,984 accounts breached
HighSevenRooms - 1,205,385 accounts breached
HighServerPact - 73,587 accounts breached
HighSephora - 780,073 accounts breached
HighSenior Dating - 765,517 accounts breached
HighSeedpeer - 281,924 accounts breached
HighScuf Gaming - 128,683 accounts breached
HighSchool District 42 - 18,850 accounts breached
HighScholastic - 4,247,768 accounts breached
HighschenkYOU - 237,349 accounts breached
HighScentbird - 5,814,988 accounts breached
HighSC Daily Phone Spam List - 32,939,105 accounts breached
HighSaverSpy - 2,457,420 accounts breached
HighSamsung Germany Customer Tickets - 216,333 accounts breached
HighSalvadoran Citizens - 946,989 accounts breached
HighRussian America - 182,717 accounts breached
HighRuneScape Boards - 222,762 accounts breached
HighRoyal Enfield - 420,873 accounts breached
HighRosebutt Board - 107,303 accounts breached
HighRomwe - 19,531,820 accounts breached
HighRoll20 - 3,994,436 accounts breached
HighRoblox Developer Conference (2023) - 3,943 accounts breached
HighRoblox - 52,458 accounts breached
HighRobinsons Malls - 195,597 accounts breached
HighRobinhood - 5,003,937 accounts breached
HighRiver City Media Spam List - 393,430,309 accounts breached
HighRingCentral - 1,596,490 accounts breached
HighReverbNation - 7,040,725 accounts breached
HighRetina-X - 71,153 accounts breached
HighRepublican Party of Texas - 72,596 accounts breached
HighRentoMojo - 2,185,697 accounts breached
HighReincubate - 616,146 accounts breached
HighRedLine Stealer - 441,657 accounts breached
HighRedDoorz - 5,890,277 accounts breached
HighRealDudesInc - 101,543 accounts breached
HighReal Estate Mogul - 307,768 accounts breached
HighRead Novel - 22,424,472 accounts breached
HighRbx.Rocks - 149,958 accounts breached
HighRaychat - 938,981 accounts breached
HighRankWatch - 7,445,067 accounts breached
HighRambler - 91,436,280 accounts breached
HighRalph Lauren - 139,903 accounts breached
HighRailYatri - 23,209,732 accounts breached
HighRaaga - 10,225,145 accounts breached
HighR2Games - 22,281,337 accounts breached
HighR2 (2017 forum breach) - 1,023,466 accounts breached
HighQuitbro - 22,874 accounts breached
HighQuinStreet - 4,907,802 accounts breached
HighQuidd - 3,805,863 accounts breached
HighQuestionPro - 22,229,637 accounts breached
HighQuestel - 1,226,209 accounts breached
HighQuantum Booter - 48,592 accounts breached
HighQraved - 984,519 accounts breached
HighQIP - 26,183,992 accounts breached
HighQatar National Bank - 88,678 accounts breached
HighQakbot - 6,431,319 accounts breached
HighPublic Business Data - 27,917,714 accounts breached
HighPSX-Scene - 341,118 accounts breached
HighPSP ISO - 1,274,070 accounts breached
HighPS3Hax - 447,410 accounts breached
HighProvecho - 712,904 accounts breached
HighProtemps - 49,591 accounts breached
HighProsper - 17,605,276 accounts breached
HighPropTiger - 2,156,921 accounts breached
HighPromofarma - 1,277,761 accounts breached
HighPromo - 14,610,585 accounts breached
HighProgramming Forums - 707,432 accounts breached
HighProctorU - 444,453 accounts breached
HighPreen.Me - 236,105 accounts breached
HighPPCGeeks - 492,518 accounts breached
HighPowerbot - 503,501 accounts breached
HighPoshmark - 36,395,491 accounts breached
HighPolish Credentials - 1,204,870 accounts breached
HighPoliceOne - 709,926 accounts breached
HighPokémon Negro - 830,155 accounts breached
HighPokémon Creed - 116,465 accounts breached
HighPokébip - 657,001 accounts breached
HighPoinCampus - 89,116 accounts breached
HighPluto TV - 3,225,080 accounts breached
HighPlex - 327,314 accounts breached
HighPlayCyberGames - 3,681,753 accounts breached
HighPlaybook - 50,538 accounts breached
HighPlanet Ice - 240,488 accounts breached
HighPlanet Calypso - 62,261 accounts breached
HighpiZap - 41,817,893 accounts breached
HighPixlr - 1,906,808 accounts breached
HighPixel Federation - 38,108 accounts breached
HighPitney Bowes - 8,243,989 accounts breached
HighPiping Rock - 2,103,100 accounts breached
HighPHP Freaks - 173,891 accounts breached
HighPhoenix - 74,776 accounts breached
HighPetFlow - 990,919 accounts breached
HighPeople's Energy - 358,822 accounts breached
HighPemiblanc - 110,964,206 accounts breached
HighPeatix - 4,227,907 accounts breached
HighPayAsUGym - 400,260 accounts breached
HighPass'Sport - 6,366,133 accounts breached
HighParkMobile - 20,949,825 accounts breached
HighPanera Bread - 5,112,502 accounts breached
HighPandabuy - 1,348,407 accounts breached
HighPampling - 383,468 accounts breached
HighPaidwork - 23,272,765 accounts breached
HighPaddy Power - 590,954 accounts breached
HighOxfam - 1,834,006 accounts breached
HighOwnedCore - 880,331 accounts breached
HighOVH - 452,899 accounts breached
HighOtelier - 436,855 accounts breached
HighOrdine Avvocati di Roma - 41,960 accounts breached
HighOrderSnapp - 1,304,447 accounts breached
HighOrange Romania - 556,557 accounts breached
HighOperation Endgame 2.0 - 15,436,844 accounts breached
HighOperation Endgame - 16,466,858 accounts breached
HighOpen Subtitles - 6,783,158 accounts breached
HighOpen CS:GO - 512,311 accounts breached
HighOnverse - 800,157 accounts breached
HighOnRPG - 1,047,640 accounts breached
HighOnliner Spambot - 711,477,622 accounts breached
HighOnline Trade (Онлайн Трейд) - 3,805,265 accounts breached
HighOmnicuris - 215,298 accounts breached
HighOMGPOP - 7,071,293 accounts breached
HighOGUsers (2022 breach) - 529,020 accounts breached
HighOGUsers (2020 breach) - 263,189 accounts breached
HighOGUsers (2019 breach) - 161,143 accounts breached
HighOdido - 6,077,025 accounts breached
HighNVIDIA - 71,335 accounts breached
HighNulled.cr - 599,080 accounts breached
HighNulled.ch - 43,491 accounts breached
HighNon Nude Girls - 75,383 accounts breached
HighNival - 1,535,473 accounts breached
HighNIUS - 6,090 accounts breached
HighNitro - 77,159,696 accounts breached
HighNihonomaru - 1,697,282 accounts breached
HighNexus Mods - 5,915,013 accounts breached
HighNextGenUpdate - 1,194,597 accounts breached
HighNetshoes - 499,836 accounts breached
HighNetProspex - 33,698,126 accounts breached
HighNetlog - 49,038,354 accounts breached
HighNetGalley - 1,436,435 accounts breached
HighNeteller - 3,619,948 accounts breached
HighNetEase - 234,842,089 accounts breached
HighNeopets - 26,892,897 accounts breached
HighNeiman Marcus - 31,152,842 accounts breached
HighNaz.API - 70,840,771 accounts breached
HighNaughty America - 1,398,630 accounts breached
HighNapsGear - 287,071 accounts breached
HighNameless Malware - 1,121,484 accounts breached
HighMyVidster (2025) - 3,864,364 accounts breached
HighMytheresa - 84,108 accounts breached
HighMySpace - 359,420,698 accounts breached
HighMyPertamina - 5,970,416 accounts breached
HighMyHeritage - 91,991,358 accounts breached
HighMyFitnessPal - 143,606,147 accounts breached
HighMyFHA - 972,629 accounts breached
HighMuslim Match - 149,830 accounts breached
HighMuslim Directory - 37,784 accounts breached
HighMultiplayer.it - 503,957 accounts breached
HighMuah.AI - 1,910,261 accounts breached
HighmSpy (2024) - 2,394,179 accounts breached
HighmSpy - 699,793 accounts breached
HighMSI - 249,990 accounts breached
HighMrExcel - 366,140 accounts breached
HighMr. Green Gaming - 27,123 accounts breached
HighMPGH - 3,122,898 accounts breached
HighMovieBoxPro - 6,009,014 accounts breached
HighMovie Forums - 39,914 accounts breached
HighMortal Online - 606,637 accounts breached
HighMorele.net - 2,467,304 accounts breached
HighMoody Bible Institute - 2,303,416 accounts breached
HighMoneycontrol - 762,874 accounts breached
HighMoney Bookers - 4,483,605 accounts breached
HighModern Business Solutions - 58,843,488 accounts breached
HighMoDaCo - 879,703 accounts breached
HighMobiFriends - 3,512,952 accounts breached
HighMMG Fusion - 2,660,295 accounts breached
HighMisattributed Habib's Data - 3,517,679 accounts breached
HighMisattributed Flipkart Data - 552,094 accounts breached
HighMinted - 4,418,182 accounts breached
HighMinehut - 396,533 accounts breached
HighMinefield - 188,343 accounts breached
HighMinecraft World Map - 71,081 accounts breached
HighMinecraft Pocket Edition Forum - 16,034 accounts breached
HighMindjolt - 28,364,826 accounts breached
HighMiljödata - 870,108 accounts breached
HighMGM Resorts (2022 Update) - 24,842,001 accounts breached
HighMGM Resorts - 3,081,321 accounts breached
HighMEO - 8,227 accounts breached
HighMemeChat - 4,348,570 accounts breached
HighMeetMindful - 1,422,717 accounts breached
HighMediaWorks - 162,710 accounts breached
HighMedela - 423,947 accounts breached
HighMecho Download - 437,928 accounts breached
HighMDPI - 845,012 accounts breached
HighMcKesson - 6,404,340 accounts breached
HighMcGraw Hill - 13,500,136 accounts breached
HighMCBans - 119,948 accounts breached
HighMC2 Data - 2,122,280 accounts breached
HighMathway - 25,692,862 accounts breached
HighMate1.com - 27,393,015 accounts breached
HighMastercard Priceless Specials - 89,388 accounts breached
HighMaster Deeds - 2,257,930 accounts breached
HighMashable - 1,414,677 accounts breached
HighMaReads - 74,453 accounts breached
HighMarcus & Millichap - 1,837,078 accounts breached
HighMappery - 205,242 accounts breached
HighManipulated Caiman - 39,901,389 accounts breached
HighMangatoon - 23,040,238 accounts breached
HighMangaFox.me - 1,311,610 accounts breached
HighMangaDex - 2,987,329 accounts breached
HighManga Traders - 855,249 accounts breached
HighManchester Airports Group - 8,849,657 accounts breached
HighMalwarebytes - 111,623 accounts breached
HighMALL.cz - 735,405 accounts breached
HighMalindoAir - 4,328,232 accounts breached
HighMajorGeeks - 269,548 accounts breached
Highmail.ru Dump - 16,630,988 accounts breached
HighMagicDuel - 138,443 accounts breached
HighMadison Square Garden Sports - 9,796,738 accounts breached
HighMac-Torrents - 93,992 accounts breached
HighMacGeneration - 101,004 accounts breached
HighMac Forums - 326,714 accounts breached
HighLyrics Mania - 109,202 accounts breached
HighLuxottica - 77,093,812 accounts breached
HighLumin PDF - 15,453,048 accounts breached
HighLuLu - 2,796,835 accounts breached
HighLovora - 495,556 accounts breached
HighLounge Board - 45,018 accounts breached
HighLord of the Rings Online - 1,141,278 accounts breached
HighLookiero - 4,981,760 accounts breached
HighLookbook - 1,074,948 accounts breached
HighLocally - 362,619 accounts breached
HighLizard Squad - 13,451 accounts breached
HighLivpure - 269,552 accounts breached
HighLiveJournal - 26,372,781 accounts breached
HighLiveAuctioneers - 3,385,862 accounts breached
HighLittle Monsters - 995,698 accounts breached
HighLinux Mint - 144,989 accounts breached
HighLinux Forums - 275,785 accounts breached
HighLinkedIn Scraped and Faked Data (2023) - 19,788,753 accounts breached
HighLinkedIn - 164,611,595 accounts breached
HighLimeVPN - 23,348 accounts breached
HighLimeLeads - 17,838,396 accounts breached
HighLight's Hope - 30,484 accounts breached
HighLifeboat - 7,089,395 accounts breached
HighLifebear - 3,670,561 accounts breached
HighLife360 - 442,519 accounts breached
HighLexipol - 672,546 accounts breached
HighLegionProxy - 10,144 accounts breached
HighLegendas.TV - 3,869,181 accounts breached
HighLeet - 5,081,689 accounts breached
HighLedger - 1,075,241 accounts breached
HighLeaked Reality - 114,907 accounts breached
HighLeague of Legends - 339,487 accounts breached
HighLead Hunter - 68,693,853 accounts breached
HighLe Slip Français - 1,495,127 accounts breached
HighLe Coq Sportif Columbia - 79,712 accounts breached
HighLDLC - 1,266,026 accounts breached
HighLBB - 39,288 accounts breached
HighLazada RedMart - 1,107,789 accounts breached
HighLatest Pilot Jobs - 118,864 accounts breached
HighLast.fm - 37,217,682 accounts breached
HighKreditplus - 768,890 accounts breached
HighKomplettFritid - 139,401 accounts breached
HighKomikoAI - 1,060,191 accounts breached
HighKnuddels - 808,330 accounts breached
HighKnownCircle - 1,957,600 accounts breached
HighKM.RU - 1,476,783 accounts breached
HighKiwiFarms - 4,606 accounts breached
HighKitchenPal - 98,726 accounts breached
HighKinoKong - 817,808 accounts breached
HighKimsufi - 504,565 accounts breached
HighKemper - 269,299 accounts breached
HighKayo.moe Credential Stuffing List - 41,826,763 accounts breached
HighKaneva - 3,901,179 accounts breached
HighJune 2026 Stealer Logs - 56,278,397 accounts breached
HighJukinMedia - 314,290 accounts breached
HighJoyGames - 4,461,787 accounts breached
HighJoomlArt - 22,477 accounts breached
HighJobzone - 29,708 accounts breached
HighJobStreet - 3,883,455 accounts breached
HighJobandtalent - 10,981,207 accounts breached
HighJD Group - 521,878 accounts breached
HighJD - 77,449,341 accounts breached
HighJCPenney - 368,418 accounts breached
HighJames - 1,541,284 accounts breached
HighJam Tangan - 434,784 accounts breached
Highixigo - 17,204,697 accounts breached
HighiPmart - 2,460,787 accounts breached
HighInterPals - 3,439,414 accounts breached
HighInternet Archive - 31,081,179 accounts breached
HighInternational Kiteboarding Organization - 340,349 accounts breached
HighInter-Con Security - 276,114 accounts breached
HighIntelimost - 3,073,409 accounts breached
HighInstituto Nacional de Deportes de Chile - 319,613 accounts breached
HighInstant Checkmate - 11,943,887 accounts breached
HighInstagram - 6,215,150 accounts breached
HighInsanelyi - 104,097 accounts breached
HighInflateVids - 13,405 accounts breached
HighInfinite Campus - 137,123 accounts breached
HighIndiHome - 12,629,245 accounts breached
HighIndian Railways - 583,377 accounts breached
HighIndiaMART - 20,154,583 accounts breached
Highimgur - 1,749,806 accounts breached
HighiMesh - 49,467,477 accounts breached
HighiMenu360 - 3,425,860 accounts breached
HighImavex - 878,209 accounts breached
HighILikeCheats - 188,847 accounts breached
HighIIMJobs - 4,216,063 accounts breached
Highi-Dressup - 2,191,565 accounts breached
HighIDC Games - 3,966,871 accounts breached
HighiD Tech - 415,121 accounts breached
HighHusky Owners - 16,502 accounts breached
HighHurb - 20,727,771 accounts breached
HighHuntStand - 2,795,947 accounts breached
HighHub4Tech - 36,916 accounts breached
HighHTH Studios - 411,755 accounts breached
HighHTC Mania - 1,488,089 accounts breached
HighHouzz - 48,881,308 accounts breached
HighHouston City College - 831,642 accounts breached
HighHoundDawgs - 45,701 accounts breached
HighHot Topic - 56,904,909 accounts breached
HighHorse Isle - 27,786 accounts breached
HighHopamedia - 23,835,870 accounts breached
HighHookers.nl - 290,955 accounts breached
HighHongFire - 999,991 accounts breached
HighHomeRefill - 187,457 accounts breached
HighHome Chef - 8,815,692 accounts breached
HighHLTV - 611,070 accounts breached
HighHjedd - 13,204,029 accounts breached
HighHiAPK - 13,873,674 accounts breached
HighHeroes of Newerth - 8,089,103 accounts breached
HighHeroes of Gaia - 179,967 accounts breached
Highhemmelig.com - 28,641 accounts breached
HighHemmakväll - 47,297 accounts breached
HighHello Cake - 22,907 accounts breached
HighHeatGames - 647,896 accounts breached
HighHealth Now Networks - 321,920 accounts breached
HighHDB Financial Services - 1,658,750 accounts breached
HighHavenly - 1,369,180 accounts breached
HighHave Fun Teaching - 27,126 accounts breached
HighHauteLook - 28,510,459 accounts breached
HighHathway - 4,670,080 accounts breached
HighHallmark - 1,736,520 accounts breached
HighHakko Corporation - 9,665 accounts breached
HighHacking Team - 32,310 accounts breached
Highhackforums.net - 191,540 accounts breached
HighGuntrader - 112,031 accounts breached
HighGuns.com - 375,928 accounts breached
HighGuns and Robots - 143,569 accounts breached
HighGunAuction.com - 565,470 accounts breached
HighGTAGaming - 197,184 accounts breached
HighGSM Hosting - 2,607,440 accounts breached
HighGravatar - 113,990,759 accounts breached
HighGPS Underground - 669,584 accounts breached
HighgPotato - 2,136,520 accounts breached
HighGoose Creek - 6,574,121 accounts breached
HighGolf Canada - 568,972 accounts breached
HighGoldSilver - 242,715 accounts breached
HighGo Ninja - 4,999,001 accounts breached
HighGo Games - 3,430,083 accounts breached
HighGlofox - 2,330,735 accounts breached
HighGlendale Community College - 793,925 accounts breached
HighGLAMIRA - 874,594 accounts breached
HighGiglio - 1,026,468 accounts breached
HighGiant Tiger - 2,842,669 accounts breached
HighGGCorp - 2,376,330 accounts breached
HighGFAN - 22,526,334 accounts breached
HighGet Revenge On Your Ex - 79,195 accounts breached
HighGerman Doner Kebab - 162,373 accounts breached
HighGeniusU - 1,301,460 accounts breached
HighGenesis Market - 8,000,000 accounts breached
HighGemplex - 4,563,166 accounts breached
HighGemini - 5,274,214 accounts breached
HighGeekedIn - 1,073,164 accounts breached
HighGe.tt - 2,481,121 accounts breached
HighGawker - 1,247,574 accounts breached
HighGateHub - 1,408,078 accounts breached
HighGamingMonk - 654,510 accounts breached
HighGamigo - 8,243,604 accounts breached
HighGameVN - 1,369,485 accounts breached
HighGameTuts - 2,064,274 accounts breached
HighGameSprite - 6,164,643 accounts breached
HighGameSalad - 1,506,242 accounts breached
HighGames Box - 1,439,354 accounts breached
HighGamerzplanet - 1,217,166 accounts breached
HighGab - 66,521 accounts breached
HighGaadi - 4,261,179 accounts breached
HighFur Affinity - 1,270,564 accounts breached
HighFunny Games - 764,357 accounts breached
HighFunimation - 2,491,103 accounts breached
HighFridae - 35,368 accounts breached
HighFreshMenu - 110,355 accounts breached
HighFrench Citizens - 28,445,106 accounts breached
HighFreeOnes - 960,213 accounts breached
HighFreedom Hosting II - 380,830 accounts breached
HighFree - 13,926,173 accounts breached
HighFrame & Optic - 15,678 accounts breached
HighFoxy Bingo - 252,216 accounts breached
HighFotolog - 16,717,854 accounts breached
HighForumCommunity - 776,648 accounts breached
HighForbes - 1,057,819 accounts breached
HighFoodora - 582,578 accounts breached
HighFNTECH - 10,386 accounts breached
HighFluke - 821,100 accounts breached
HighFlorida Virtual School - 542,902 accounts breached
HighFlipaClip - 892,854 accounts breached
HighFling - 40,767,652 accounts breached
HighFlexBooker - 3,756,794 accounts breached
HighFlat Earth Sun, Moon and Zodiac App - 33,294 accounts breached
HighFlashback - 40,256 accounts breached
HighFlash Flash Revolution (2019 breach) - 1,858,124 accounts breached
HighFlash Flash Revolution (2016 breach) - 1,771,845 accounts breached
HighFitmart - 214,492 accounts breached
HighFinsure - 296,124 accounts breached
HighFinal Fantasy Shrine - 620,677 accounts breached
HighFilmai.in - 645,786 accounts breached
HighFigure - 967,178 accounts breached
HighFédération Francaise de Rugby - 281,977 accounts breached
HighFashionFantasyGame - 2,357,872 accounts breached
HighFashion Nexus - 1,279,263 accounts breached
HighFantasy Football Hub - 66,479 accounts breached
HighFanpass - 112,251 accounts breached
HighFanlore - 144,520 accounts breached
HighFamm - 535,240 accounts breached
HighFair Vote Canada - 134,336 accounts breached
HighFactual - 2,461,696 accounts breached
HighFaceUP - 87,633 accounts breached
HighFacepunch - 342,913 accounts breached
HighFacebook Marketplace - 77,267 accounts breached
HighFacebook - 509,458,528 accounts breached
HighEyeEm - 19,611,022 accounts breached
HighEye4Fraud - 16,000,591 accounts breached
HighExvagos - 2,121,789 accounts breached
HighExposed VINs - 396,650 accounts breached
HighExplore Talent (July 2024) - 5,371,574 accounts breached
HighExplore Talent (August 2024) - 8,929,384 accounts breached
HighExploit.In - 593,427,119 accounts breached
HighExperian (South Africa) - 1,284,637 accounts breached
HighExactis - 131,577,763 accounts breached
HighExact Sciences - 10,869,543 accounts breached
HighEvony - 29,396,116 accounts breached
HighEverybody Edits - 871,190 accounts breached
HighEvermotion - 435,510 accounts breached
HighEurofiber - 10,003 accounts breached
HighEthereum - 16,431 accounts breached
HigheThekwini Municipality - 81,830 accounts breached
HighEstonian Citizens (via Estonian Cybercrime Bureau) - 655,161 accounts breached
HighEstante Virtual - 5,412,603 accounts breached
HighEskimi - 1,197,620 accounts breached
HighEroticy - 1,370,175 accounts breached
HighEpik - 15,003,961 accounts breached
HighEpicNPC - 408,795 accounts breached
HighEpicBot - 816,662 accounts breached
HighEpic Games - 251,661 accounts breached
HighE-Pal - 108,887 accounts breached
HighEmuparadise - 1,131,229 accounts breached
HighEmotet - 4,324,770 accounts breached
HighElasticsearch Instance of Sales Leads on AWS - 5,788,169 accounts breached
HighElance - 1,291,178 accounts breached
HighEdmunds - 177,860 accounts breached
HighEdmodo - 43,423,561 accounts breached
HighECCIE - 536,923 accounts breached
HighEatStreet - 6,353,564 accounts breached
HighEatigo - 2,789,609 accounts breached
HighDymocks - 836,120 accounts breached
Highdvd-shop.ch - 67,973 accounts breached
HighDuowan.com - 2,639,894 accounts breached
HighDuolingo - 2,676,696 accounts breached
HighDunzo - 3,465,259 accounts breached
HighDungeons & Dragons Online - 1,580,933 accounts breached
HighDueling Network - 6,486,626 accounts breached
HighDucks Unlimited - 1,324,364 accounts breached
HighDubsmash - 161,749,950 accounts breached
HighDropbox - 68,648,009 accounts breached
HighDrizly - 2,479,044 accounts breached
HighDriveSure - 3,675,099 accounts breached
HighDragonica Lunaris - 126,293 accounts breached
HighDoxbin Scrape - 435,784 accounts breached
HighDoxbin (TOoDA) - 136,461 accounts breached
HighDoxbin - 370,794 accounts breached
HighDota2 - 1,907,205 accounts breached
HighDoorDash - 367,476 accounts breached
HighDoomworld - 34,478 accounts breached
HighDomino's India - 22,527,655 accounts breached
HighDomino's - 648,231 accounts breached
HighDLH.net - 3,264,710 accounts breached
HighDivX SubTitles - 783,058 accounts breached
HighDisqus - 17,551,044 accounts breached
HighDisk Union - 690,667 accounts breached
HighdigiDirect - 304,337 accounts breached
HighDennis Kirk - 1,356,026 accounts breached
HighDemandScience by Pure Incubation - 121,796,165 accounts breached
HighDeezer - 229,037,936 accounts breached
HighdBforums - 363,468 accounts breached
HighDatPiff - 7,476,940 accounts breached
HighDate Hot Brunettes - 1,494,078 accounts breached
HighDataCamp - 760,561 accounts breached
HighData Troll Stealer Logs - 109,532,219 accounts breached
HighDaniWeb - 1,131,636 accounts breached
HighDangdang - 4,848,734 accounts breached
HighDailyObjects - 464,260 accounts breached
HighDaily Quiz - 8,032,404 accounts breached
HighDaFont - 637,340 accounts breached
HighD3Scene - 568,827 accounts breached
HighCutout.Pro - 19,972,829 accounts breached
HighCuties AI - 144,250 accounts breached
HighCushman & Wakefield - 310,431 accounts breached
HighCultura - 1,462,025 accounts breached
HighCTT - 468,124 accounts breached
HighCrunchyroll - 1,195,684 accounts breached
HighCross Fire - 12,865,609 accounts breached
HighCrimeAgency vBulletin Hacks - 942,044 accounts breached
HighCreative - 483,015 accounts breached
HighCreams Cafe - 159,652 accounts breached
HighCraftRise - 2,532,527 accounts breached
HighCrackingForum - 660,305 accounts breached
HighCracked.to - 749,161 accounts breached
HighCrack Community - 19,210 accounts breached
HighCovve - 22,802,117 accounts breached
HighCoupon Mom / Armor Games - 11,010,525 accounts breached
HighCombolists Posted to Telegram - 361,468,099 accounts breached
HighCoinmama - 478,824 accounts breached
HighCodeStepByStep - 103,077 accounts breached
HighCocospy - 1,798,059 accounts breached
HighClub Penguin Rewritten (January 2018) - 1,688,176 accounts breached
HighClixSense - 2,424,784 accounts breached
HighClickASnap - 3,262,980 accounts breached
HighClearVoice Surveys - 15,074,786 accounts breached
HighClash of Kings - 1,604,957 accounts breached
HighCivil Online - 7,830,195 accounts breached
HighCityBee - 110,156 accounts breached
HighCit0day - 226,883,414 accounts breached
HighChowbus - 444,224 accounts breached
HighChina Software Developer Network - 6,414,990 accounts breached
HighChess.com (2026) - 4,653,212 accounts breached
HighCheapAssGamer.com - 444,767 accounts breached
HighCharter - 4,851,517 accounts breached
HighCFGI - 248,235 accounts breached
HighCentral Tickets - 722,860 accounts breached
HighCD Projekt RED - 1,871,373 accounts breached
HighCatwatchful - 61,641 accounts breached
HighCatho - 1,173,012 accounts breached
HighCashCrate - 6,844,490 accounts breached
HighCarnival - 7,531,359 accounts breached
HighCarMax - 431,371 accounts breached
HighCarhartt - 12,933,413 accounts breached
HighCarGurus - 12,461,887 accounts breached
HighCarding Mafia (March 2021) - 297,744 accounts breached
HighCarding Mafia (December 2021) - 303,877 accounts breached
HighCanva - 137,272,116 accounts breached
HighCannabis.com - 227,746 accounts breached
HighCanadian Tire - 38,306,562 accounts breached
HighCanada Life - 237,810 accounts breached
HighCanada Goose - 581,877 accounts breached
HighCafePress - 23,205,290 accounts breached
HighCafeMom - 2,628,148 accounts breached
HighBusiness Acumen Magazine - 26,596 accounts breached
HighBurger King Russia - 3,155,792 accounts breached
HighBulgarian National Revenue Agency - 471,167 accounts breached
HighBukalapak - 13,369,666 accounts breached
HighBudTrader - 2,721,185 accounts breached
HighBtoBet - 444,241 accounts breached
HighBTC-E - 568,340 accounts breached
HighBTC-Alpha - 362,426 accounts breached
HighBrinks Home - 732,162 accounts breached
HighBreachForums Version 5 - 339,778 accounts breached
HighBreachForums Clone - 4,204 accounts breached
HighBreachForums (2025) - 672,247 accounts breached
HighBreachForums - 212,156 accounts breached
HighBrazzers - 790,724 accounts breached
HighBrand New Tube - 349,627 accounts breached
HighBoxee - 158,093 accounts breached
HighBouygues Telecom - 5,685,771 accounts breached
HighBourse des Vols - 1,460,130 accounts breached
HighBoulanger - 2,077,078 accounts breached
HighBot of Legends - 238,373 accounts breached
HighBookmate - 3,830,916 accounts breached
HighBookCrossing - 1,582,323 accounts breached
HighBonobos - 2,811,929 accounts breached
HighBlooms Today - 3,184,010 accounts breached
HighBlackSpigotMC - 140,029 accounts breached
HighBitView - 63,127 accounts breached
HighBitly - 9,313,136 accounts breached
HighBitcoin Talk - 501,407 accounts breached
HighBin Weevils - 1,287,073 accounts breached
HighBigMoneyJobs - 36,789 accounts breached
Highbigbasket - 24,500,011 accounts breached
HighBetterment - 1,435,174 accounts breached
HighBestialitysextaboo - 3,204 accounts breached
HighBerkadia - 305,216 accounts breached
HighBenchmark - 93,343 accounts breached
HighBell (2017 breach) - 2,231,256 accounts breached
HighBell (2014 breach) - 20,902 accounts breached
HighBaydöner - 1,266,822 accounts breached
HighBattlefy - 83,610 accounts breached
HighBattlefield Heroes - 530,270 accounts breached
HighBannerBit - 213,415 accounts breached
HighBaker Distributing - 102,935 accounts breached
HighBaby Names - 846,742 accounts breached
HighB2B USA Businesses - 105,059,554 accounts breached
HighAvast - 422,959 accounts breached
HighAutotrader - 20,032 accounts breached
HighAutocentrum.pl - 143,717 accounts breached
HighAura - 903,080 accounts breached
HighAudi - 2,743,539 accounts breached
HighAtmeltomo - 580,177 accounts breached
HighAtlas Quantum - 261,463 accounts breached
HighAtlas Menu - 63,926 accounts breached
HighAstropid - 5,788 accounts breached
HighArtsy - 1,079,970 accounts breached
HighArtists&Clients - 95,351 accounts breached
HighArmy Force Online - 1,531,235 accounts breached
HighArmor Games - 10,604,307 accounts breached
HighAptoide - 20,012,235 accounts breached
HighAppen - 5,888,405 accounts breached
HighAppartoo - 49,681 accounts breached
HighApollo - 125,929,660 accounts breached
HighAPOIA.se - 450,764 accounts breached
HighAPK.TW - 2,451,197 accounts breached
HighApexSMS - 23,246,481 accounts breached
HighAnti Public Combo List - 457,962,538 accounts breached
HighAnimoto - 22,437,749 accounts breached
HighAnime-Planet - 368,507 accounts breached
HighAnimeLeague - 192,134 accounts breached
HighAnimeify - 808,034 accounts breached
HighAnimeGame - 1,431,378 accounts breached
HighAnimal Jam - 7,104,998 accounts breached
HighAndroidLista - 6,640,643 accounts breached
HighAndroid Forums - 745,355 accounts breached
HighAncestry - 297,806 accounts breached
HighAmtrak - 2,147,679 accounts breached
HighAmeriprise - 502,597 accounts breached
HighAmerican Tower - 216,601 accounts breached
HighAmart Furniture - 108,940 accounts breached
HighAltenen - 1,267,701 accounts breached
HighAlpineReplay - 898,681 accounts breached
HighAllianz Life - 1,115,061 accounts breached
HighALIEN TXTBASE Stealer Logs - 284,132,969 accounts breached
HighAlcon - 218,395 accounts breached
HighAKP Emails - 917,461 accounts breached
HighAjarn - 266,399 accounts breached
HighAipai.com - 6,496,778 accounts breached
HighAimware - 305,470 accounts breached
Highai.type - 20,580,060 accounts breached
HighAhaShare.com - 180,468 accounts breached
HighAgusiQ-Torrents.pl - 90,478 accounts breached
HighAerServ - 66,308 accounts breached
HighAdvance Auto Parts - 79,243,727 accounts breached
HighAdult-FanFiction.Org - 186,082 accounts breached
HighAdult FriendFinder (2016) - 169,746,810 accounts breached
HighAdult FriendFinder (2015) - 3,867,997 accounts breached
HighADT - 5,488,888 accounts breached
HighAdpost - 3,339,512 accounts breached
HighAdopt Me Trading Values - 86,136 accounts breached
HighAdobe - 152,445,165 accounts breached
HighAdecco - 4,284,538 accounts breached
HighAddi - 34,532,941 accounts breached
HighADDA - 1,829,314 accounts breached
HighAdapt - 9,363,740 accounts breached
HighAcuity - 14,055,729 accounts breached
HighActMobile - 1,583,193 accounts breached
HighActivision - 16,006 accounts breached
HighAcne.org - 432,943 accounts breached
HighAbuseWith.Us - 1,372,550 accounts breached
HighAbrigo - 711,099 accounts breached
HighAbandonia (2022) - 919,790 accounts breached
HighAbandonia (2015) - 776,125 accounts breached
High9Lives - 109,515 accounts breached
High8fit - 15,025,407 accounts breached
High7-Eleven - 185,256 accounts breached
High500px - 14,867,999 accounts breached
High2fast4u - 17,706 accounts breached
High2,844 Separate Data Breaches - 80,115,532 accounts breached
High17173 - 7,485,802 accounts breached
High126 - 6,414,191 accounts breached
High123RF - 8,661,578 accounts breached
High000webhost - 14,936,670 accounts breached
HighAppViewX Adds Shadow AI Visibility and a Runtime Kill Switch to Agent Identity Security
HighCriminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
HighFBI Removes Accenture Contractor Over ShinyHunters Job Site Data Breach
HighIncident affecting ASOS customers
HighDenmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account
HighFBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
HighShares in British clothing company ASOS dive after hackers apparently send push notification
HighSouth Korean officials believe AI agents were used to hack several banks
HighEngineer sentenced for locking over 3,000 devices on employer network
HighFBI Drops Accenture Contractor After Sensitive Data Breach
HighA week in security (September 28 – October 4)
HighUkraine grocery chain ATB confirms cyberattack as hackers threaten to leak data
HighWikimedia Foundation: OpenAI agents tried to edit pages and compromise notes tool
HighAlleged dev of Ploutus ATM malware appears in US court after arrest
HighSouth Korea probes bank breaches amid suspected AI-powered attacks
HighDenmark population registry data breach affects 8.8 million people
HighIQVIA fined $7.8 million for failing to properly anonymize health data
HighDetained ShinyHunters hacker reportedly helping FBI track down fellow members
HighDenmark ’s Population Registry Breached, 8.8 Million Affected
HighIranian hacker accused of draining 31TB from university inboxes extradited to the US
HighData breach at Denmark’s national population register exposes 8.8 million people
MediumZhenai.com - 5,024,908 accounts breached
MediumWhiteDate - 20,363 accounts breached
MediumStealer Logs Posted to Telegram - 26,105,473 accounts breached
MediumReborn Gaming - 126 accounts breached
MediumPi-hole - 29,926 accounts breached
MediumParagon Cheats - 188,089 accounts breached
MediumOz Hair and Beauty - 1,988,331 accounts breached
MediumNurseryCam - 10,585 accounts breached
MediumNemoWeb - 3,472,916 accounts breached
MediumMarket Moveis - 28,220 accounts breached
MediumLolzteam - 398,011 accounts breached
MediumEarth 2 - 420,961 accounts breached
MediumDevil-Torrents.pl - 63,451 accounts breached
MediumDemon Forums - 52,623 accounts breached
MediumBiohack.me - 3,402 accounts breached
MediumAssociation Nationale des Premiers Secours - 5,600 accounts breached
InformationalCryptohack Roundup: Conviction in Uranium Finance Hack
LowJustdate.com - 24,451,312 accounts breached

Ransomware (8)

CriticalPhone House España - 5,223,350 accounts breached
HighSilent Ransom Group Allegedly Extorted $207 Million Without Encrypting Files
HighMonsterCloud CEO Zohar Pinhasi Accused of Paying Hackers, Defrauding Victims
HighRansomware attack disrupts Japan's IDCF Cloud used by govt clients
HighMonsterCloud Owner Charged With Secretly Paying Ransomware Demands
HighAdvantest confirms personal information stolen in ransomware attack
HighOsaka Metropolitan University cancels classes after suspected ransomware attack
HighUniversity of Illinois Chicago affected by ransomware attack on medical school

ThreatIntel (270)

Critical[CISA KEV] CVE-2011-1823: Android Android OS - Android OS Privilege Escalation Vulnerability
Critical[CISA KEV] CVE-2023-22518: Atlassian Confluence Data Center and Server - Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
Critical[CISA KEV] CVE-2024-1709: ConnectWise ScreenConnect - ConnectWise ScreenConnect Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2024-3400: Palo Alto Networks PAN-OS - Palo Alto Networks PAN-OS Command Injection Vulnerability
Critical[CISA KEV] CVE-2022-38028: Microsoft Windows - Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Critical[CISA KEV] CVE-2022-24816: OSGeo JAI-EXT - OSGeo GeoServer JAI-EXT Code Injection Vulnerability
Critical[CISA KEV] CVE-2021-31196: Microsoft Exchange Server - Microsoft Exchange Server Information Disclosure Vulnerability
Critical[CISA KEV] CVE-2024-23113: Fortinet Multiple Products - Fortinet Multiple Products Format String Vulnerability
Critical[CISA KEV] CVE-2024-38094: Microsoft SharePoint - Microsoft SharePoint Deserialization Vulnerability
Critical[CISA KEV] CVE-2018-9276: Paessler PRTG Network Monitor - Paessler PRTG Network Monitor OS Command Injection Vulnerability
Critical[CISA KEV] CVE-2020-29574: Sophos CyberoamOS - CyberoamOS (CROS) SQL Injection Vulnerability
Critical[CISA KEV] CVE-2025-24813: Apache Tomcat - Apache Tomcat Path Equivalence Vulnerability
Critical[CISA KEV] CVE-2025-4008: Smartbedded Meteobridge - Smartbedded Meteobridge Command Injection Vulnerability
Critical[CISA KEV] CVE-2026-33634: Aquasecurity Trivy - Aquasecurity Trivy Embedded Malicious Code Vulnerability
Criticaldiet.com - 1,383,759 accounts breached
CriticalDell System Update flaw allows attackers to gain root privileges (CVE-2026-86360)
CriticalAtlassian warns of critical file-access flaw in Jira, Confluence
CriticalSavannah lwIP SMTP client
CriticalDenmark Braces for Wave of Phishing Attacks
HighGTA 6 Leaker Demands $30M Meme Coin Market Cap to Release Full Game
HighSECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 3
HighBitdefender finds preinstalled Android malware you can’t uninstall, seen in 150 countries
HighAnthropic Restricts Live Internet Access After Claude Evaluation Failures
HighAnthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws
HighThe Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't
HighCyber exec arrested in case allegedly tied to ShinyHunters hackers
HighUS Sentences Empire Market Co-Creator Over $430 Million Criminal Marketplace
HighFBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe
HighFBI Arrests Founder of Ransomware Negotiation Firm
HighCredential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
HighJapan confirms arrest of Russian Qilin operative, extradition to Germany
HighWhy Anthropic's Cloud Lifeline Could Become a Liability
HighGermany Arrests Suspected Qilin Ransomware Leader After Japan Detention
HighSocial Engineering AI Agents: The New BEC for 2026
HighHow to keep AI agents within their permissions
HighGermany arrests alleged core Qilin ransomware member after extradition
HighHackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks
High$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack
HighFBI disrupts Flax Typhoon hacking tools used in global cyberattacks
HighFBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions
HighThree Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own
HighTP-Link Sued by Four More U.S. States Over Router Security and China Ties
HighP7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
HighOpenAI says it disrupted Russian and Iranian influence ops that used ChatGPT
HighLeader of vast money mule operation that laundered cybercriminal proceeds pleads guilty
HighUS Disrupts China-Linked Integrity Tech ‘s Cyber Espionage Tools
HighHackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland
HighMan admits to running network of 15,000 money mules for cybercriminals
HighTP-Link Faces 5 State Lawsuits: Are Its Routers Still Legal in the US?
HighItaly’s Foreign Ministry Under Cyberattack as Embassy Sites Come Under Review
HighFBI Seizes Flax Typhoon Hacking Tools Linked to Chinese Contractor
HighThousands of wind and solar park systems sit exposed on the internet across Europe
HighWhat the BPFDoor backdoor tells us about attacks on the network edge
HighThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
HighInternational coalition seizes tools used by cyber firm behind Flax Typhoon
HighLawmakers warn Google could expose Spirit Airlines data in $10 million AI training deal
HighCo-creator of Empire Market dark web marketplace given 40-year sentence
HighBreach Roundup: FortiBleed Still Hemorrhaging Credentials
HighFBI Seizes Domains Used in Flax Typhoon Attacks
HighOpenAI Lawyer: Labs Shouldn't Be Liable for AI Agent Hacking
HighAttackers hijack country-code domains to impersonate Google and other services
HighChasing AMMYY at Splunk .conf
HighRussian Spies Give 'MatchBoil' Malware a Stealthy Facelift
HighVenezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting
HighThe phone was compromised before the user turned it on: the rise of Midnight Mimosa
HighLow-cost Android phones ship with residential proxy malware
HighFBI disrupts Chinese hacking tools used to breach critical infrastructure
HighMeta’s Muse AI files away your friendships, arguments, and secrets
HighHunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure
HighFBI, French Police Seize CSAM Site Domains, Suspected Admin Arrested
HighMidnight Mimosa Malware Found Preinstalled on Low-Cost Android Phones
HighRansomware recovery firm boss charged with secretly paying attackers and overcharging victims
HighWhat is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor
HighCryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers
HighYouTubers targeted with fake sponsorships and “channel verification” phishing
HighU.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
High16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
HighWazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
HighARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
HighUAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
HighJapan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
HighLeaked chats show Russian extortion gang sending ‘agents’ into US law firms
HighCrypto thief who splurged on gold grills sentenced in London
HighDOJ charges ransomware recovery CEO for secretly paying hackers
HighSamsung Galaxy S26 hacked three more times at Pwn2Own Ireland
HighOwner of Empire cybercrime market gets 40 years in prison
HighUranium crypto exchange hacker convicted for stealing $53 million
HighOAuth grants pile up faster than you can review them. Here's how to keep up.
HighFakeGit malware campaign returns with 17,610 malicious GitHub repos
HighSandworm-Linked Group Sharpens Matchboil Downloader
HighRansomware Response Firm CEO Accused of Data Recovery Fraud
HighU.S. Offers $10 Million Reward for Alleged HAFNIUM Hacker Zhang Yu
HighMedical devices patients rely on most are least prepared for quantum attacks
HighRansomware recovery CEO charged over secret ransom payments
HighUS posts $10 million reward for accused Chinese ‘Hafnium’ hacker
HighMeta Faces First Ofcom Probe Under Online Safety Act Over Instagram Instants
HighCERT-UA: Fake Cloudflare Checks Deliver LunexStealer Malware
HighSmashing Security podcast #487: Clippy’s crypto comeback
HighOpenAI Agent Escape Causes Wikimedia Service Outage
HighAnthropic Gives Vetted Defenders Fewer Claude Guardrails
HighAustralian Gov't Weighs Mandatory AI Incident Reporting
HighEvolution of Web3 in Cloud Supply Chain Attacks
HighAnother ShinyHunters suspect arrested
HighAI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
HighOne breach, please, and make no mistakes
HighFortiBleed is still active, with attackers locking admins out of Fortinet firewalls
High100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer
HighAnthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws
HighFBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
HighPoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet
HighEight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
HighFBI, Secret Service add to warnings of FortiBleed credential stealing campaign
HighRussian cyberattacks against UK are 'Putin Tax' costing $3.3 billion, says lawmaker
HighCyber experts call on CISA to create mandatory federal OT rules
HighMusician sent to prison for $10 million streaming fraud using AI bots
HighRansomware has a new target. Is your backup ready?
HighPoeLLM malware infects exposed AI servers in cryptomining attacks
HighWikimedia Finds Unauthorized OpenAI Agent Activity on Wikipedia
HighCritical Healthcare Systems Aren't Quantum-Ready
HighClickFix Attacks Evolve to Better Hide Malicious Payloads
HighEven with OT network visibility, critical infrastructure operators struggle with legacy equipment
HighLinux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
HighFake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
HighHackers exploit 32 zero-days on first day of Pwn2Own Ireland
High[CISA KEV] CVE-2022-22954: VMware Workspace ONE Access and Identity Manager - VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
High[CISA KEV] CVE-2018-6530: D-Link Multiple Routers - D-Link Multiple Routers OS Command Injection Vulnerability
High[CISA KEV] CVE-2023-38035: Ivanti Sentry - Ivanti Sentry Authentication Bypass Vulnerability
High[CISA KEV] CVE-2023-36802: Microsoft Streaming Service Proxy - Microsoft Streaming Service Proxy Privilege Escalation Vulnerability
High[CISA KEV] CVE-2023-36761: Microsoft Word - Microsoft Word Information Disclosure Vulnerability
High[CISA KEV] CVE-2023-20269: Cisco Adaptive Security Appliance and Firepower Threat Defense - Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
High[CISA KEV] CVE-2023-28229: Microsoft Windows CNG Key Isolation Service - Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
High[CISA KEV] CVE-2023-41763: Microsoft Skype for Business - Microsoft Skype for Business Privilege Escalation Vulnerability
High[CISA KEV] CVE-2023-21608: Adobe Acrobat and Reader - Adobe Acrobat and Reader Use-After-Free Vulnerability
High[CISA KEV] CVE-2023-36845: Juniper Junos OS - Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
High[CISA KEV] CVE-2023-7101: Spreadsheet::ParseExcel Spreadsheet::ParseExcel - Spreadsheet::ParseExcel Remote Code Execution Vulnerability
High[CISA KEV] CVE-2024-21410: Microsoft Exchange Server - Microsoft Exchange Server Privilege Escalation Vulnerability
High[CISA KEV] CVE-2023-29360: Microsoft Streaming Service - Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability
High[CISA KEV] CVE-2024-30051: Microsoft DWM Core Library - Microsoft DWM Core Library Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-33044: Dahua IP Camera Firmware - Dahua IP Camera Authentication Bypass Vulnerability
High[CISA KEV] CVE-2022-0185: Linux Kernel - Linux Kernel Heap-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2024-6670: Progress WhatsUp Gold - Progress WhatsUp Gold SQL Injection Vulnerability
High[CISA KEV] CVE-2013-0643: Adobe Flash Player - Adobe Flash Player Incorrect Default Permissions Vulnerability
High[CISA KEV] CVE-2024-43093: Android Framework - Android Framework Privilege Escalation Vulnerability
High[CISA KEV] CVE-2024-53104: Linux Kernel - Linux Kernel Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2018-8639: Microsoft Windows - Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
High[CISA KEV] CVE-2025-22226: VMware ESXi, Workstation, and Fusion - VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
High[CISA KEV] CVE-2025-25181: Advantive VeraCore - Advantive VeraCore SQL Injection Vulnerability
High[CISA KEV] CVE-2024-13161: Ivanti Endpoint Manager (EPM) - Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
High[CISA KEV] CVE-2025-43200: Apple Multiple Products - Apple Multiple Products Unspecified Vulnerability
High[CISA KEV] CVE-2023-33538: TP-Link Multiple Routers - TP-Link Multiple Routers Command Injection Vulnerability
High[CISA KEV] CVE-2019-6693: Fortinet FortiOS - Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
High[CISA KEV] CVE-2025-48928: TeleMessage TM SGNL - TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability
High[CISA KEV] CVE-2020-25078: D-Link DCS-2530L and DCS-2670L Devices - D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
High[CISA KEV] CVE-2013-3893: Microsoft Internet Explorer - Microsoft Internet Explorer Resource Management Errors Vulnerability
High[CISA KEV] CVE-2025-8088: RARLAB WinRAR - RARLAB WinRAR Path Traversal Vulnerability
High[CISA KEV] CVE-2025-8876: N-able N-Central - N-able N-Central Command Injection Vulnerability
High[CISA KEV] CVE-2025-55182: Meta React Server Components - Meta React Server Components Remote Code Execution Vulnerability
High[CISA KEV] CVE-2025-66644: Array Networks ArrayOS AG - Array Networks ArrayOS AG OS Command Injection Vulnerability
High[CISA KEV] CVE-2026-23760: SmarterTools SmarterMail - SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability
High[CISA KEV] CVE-2021-22054: Omnissa Workspace One UEM - Omnissa Workspace ONE Server-Side Request Forgery
High[CISA KEV] CVE-2026-1340: Ivanti Endpoint Manager Mobile (EPMM) - Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
High[CISA KEV] CVE-2010-0806: Microsoft Internet Explorer - Microsoft Internet Explorer Use-After-Free Vulnerability
High[CISA KEV] CVE-2025-34291: Langflow Langflow - Langflow Origin Validation Error Vulnerability
High[CISA KEV] CVE-2026-16812: Arista VeloCloud Orchestrator - Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
High[CISA KEV] CVE-2026-18577: N-able N-central - N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
High[CISA KEV] CVE-2023-49105: ownCloud ownCloud - ownCloud Improper Authentication Vulnerability
HighNot Acxiom - 51,730,831 accounts breached
HighKickstarter - 5,176,463 accounts breached
HighKaspersky Club - 55,971 accounts breached
HighEngland Cricket - 43,299 accounts breached
HighDragonNest - 511,290 accounts breached
HighDodonew.com - 8,718,404 accounts breached
HighDivine Skins - 105,814 accounts breached
HighDigimon - 7,687,679 accounts breached
HighdevkitPro - 1,508 accounts breached
HighConvex - 150,129 accounts breached
HighCloudPets - 583,503 accounts breached
HighCityJerks - 177,554 accounts breached
HighChris Leong - 27,096 accounts breached
HighChegg - 39,721,127 accounts breached
HighChatbooks - 2,520,441 accounts breached
HighCapital Economics - 263,829 accounts breached
HighBlackBerry Fans - 174,168 accounts breached
HighBlack Hat World - 777,387 accounts breached
HighBitTorrent - 34,235 accounts breached
HighBhinneka - 1,274,340 accounts breached
HighBanorte - 2,107,000 accounts breached
HighAvvo - 4,101,101 accounts breached
HighAvito - 2,721,835 accounts breached
HighAternos - 1,436,486 accounts breached
HighAT&T - 49,102,176 accounts breached
HighAshley Madison - 30,811,934 accounts breached
HighArtvalue.com - 157,692 accounts breached
HighAman - 215,563 accounts breached
HighAditya Birla Fashion and Retail - 5,470,063 accounts breached
High1win - 96,166,543 accounts breached
High17 - 4,009,640 accounts breached
HighSt. Lucie County Finds Unpermitted Flock Cameras, Raising Privacy Concerns
HighClingSTUN Linux Backdoor Abuses Public STUN Infrastructure
HighFBI Confirms Multiple Arrests in ShinyHunters Investigation
HighMore RMM Tools In the Wild, (Tue, Oct 6th)
High'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates
HighGoogle's PageBreak AI Agent Finds 500 Flaws in Its Web Apps
HighBlinder Tunnel Campaign Targets Iraqi Infrastructure
HighClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits
HighWelcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
HighWikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies
HighClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware
HighAlleged ATM malware creator appears in Nebraska court after arrest
HighWikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits
HighASOS confirms data breach after “HACKED” in-app notifications
HighJohnson Controls EasyIO FG
HighProposed anti-Flock bills could spell trouble for license plate readers
HighFacebook Marketplace scam uses your name and number
HighASOS “hackers” send push notifications to customers
HighClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes
HighAlleged ShinyHunters member reportedly detained in Jordan, assisting law enforcement
HighNeed for Speed: AI-Driven Attacks Are Changing Security Strategies
HighChinese Hackers Impersonate US Officials for AI Cyber Espionage
HighMalwarebytes Scam Link Check analyzes URLs and explains potential risks
HighFake brand discounts on social media prey on shoppers’ fear of missing out
HighThe Credential Layer Is Expanding Faster Than Security Teams Can See It
HighKey ShinyHunters Suspect Reportedly Detained in Jordan
HighStar Blizzard Targets 100+ Organizations with Phishing and RedFlick Technique
MediumSECURITY AFFAIRS MALWARE NEWSLETTER ROUND 118
MediumAnthropic Turns Claude Toward Critical Infrastructure
MediumAI Agents, Local Hardware, and Security Risks Reshape Tech
MediumSecurity Threats Don't Stop at the Office: Why Executives' Families Need Training, Too
MediumMaking sure the checks get printed
MediumAmazon has an uncomfortably personal profile on you
MediumThe Zero-Day Blind Spot: Why Your Agentic SOC needs Retrospective Packet Replay
MediumIgnore all instructions and read this blog: The state of AI-analysis evasion in malware
MediumAnthropic’s new budget model gets much better at ignoring hidden commands
MediumThe people who know passkeys best are still typing passwords
MediumAnthropic Expands Access to Frontier Cyber AI Models
MediumVijil DART tests AI agents for security flaws and policy violations
MediumThe Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow
MediumAnthropic Creates Three Tiers for Claude Cyber Access
Medium[CISA KEV] CVE-2025-24991: Microsoft Windows - Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability
MediumHadrian Expands Offensive Security Platform With $40M Raise
MediumSailPoint adds AI agent discovery, temporary access and compliance automation
MediumConnected Data Exposes Hidden Third-Party Risk
MediumGoogle Pauses Open-Source Bug Bounty Program Amid AI Slop
MediumRemoveMacAI turns off Apple Intelligence on macOS 27 and deletes its models
MediumApple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access
InformationalISC Stormcast For Monday, October 12th, 2026 https://isc.sans.edu/podcastdetail/10132, (Mon, Oct 12th)
InformationalCriminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
InformationalCisco Expects AI Agents to Spark Record Compute Demand
InformationalClaude Helps Secure Open Source as Anthropic Offers Free Vulnerability Scanning
InformationalAI Scramble Drives Cybersecurity M&A Boom
InformationalRecorded Future Introduces AI Infrastructure Indicator Lists, Strengthening AI Governance
InformationalISC Stormcast For Friday, October 9th, 2026 https://isc.sans.edu/podcastdetail/10130, (Fri, Oct 9th)
InformationalGitHub adds AI to catch passwords before a code push
Informational🎙️SECURITY.COM The Podcast: The Resilient Channel
InformationalChina Could Coerce Taiwan by Hacking Comms, Think Tank Warns
InformationalBuilding an evidence-grounded agentic security operations harness on Cloudflare
InformationalHow DNS, Firewalls and Endpoint Tools Block Websites
InformationalTanium adds endpoint behavior detection and AI-assisted threat hunting
InformationalHoxhunt expands Respond to automate phishing investigations and email removal
InformationalEdgescan Atomic validates attack paths with controlled AI testing
InformationalZoosk (2011) - 52,578,183 accounts breached
InformationalPhished Data via CERT Poland - 67,943 accounts breached
InformationalPaytm - 3,395,101 accounts breached
InformationalPaySystem.tech - 1,410,764 accounts breached
InformationalOperation Endgame 4.0 - 4,348,526 accounts breached
InformationalOperation Endgame 3.0 - 2,046,030 accounts breached
InformationalLinkedIn Scraped Data (2021) - 125,698,496 accounts breached
InformationalNew Relic adds terminal-based investigation and recovery checks with Ground Truth CLI
InformationalAnaconda combines agent swarms with autonomous security testing
InformationalISC Stormcast For Monday, October 5th, 2026 https://isc.sans.edu/podcastdetail/10122, (Mon, Oct 5th)

Vulnerability (1499)

CriticalU.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalog
CriticalWeek in review: FortiBleed is still active, Patch Tuesday forecast
CriticalMax severity SonicWall SMA1000 flaw now exploited in attacks
CriticalFBI Warns FortiBleed Campaign Still Active, Hits 86,000+ FortiGate Devices
CriticalCitrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments
CriticalGoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys
CriticalFlax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
CriticalResearchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
CriticalCitrix Ships Another Emergency Fix for NetScaler Appliances
CriticalCVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability
CriticalCitrix warns admins to patch new NetScaler RCE flaw immediately
Critical[CISA KEV] CVE-2021-3199: ONLYOFFICE Docs - ONLYOFFICE Docs Server Path Traversal Vulnerability
Critical'AgentCorruption' Puts AWS Environments At Risk With Single Prompt
CriticalGrid Protection Alliance openPDC and openHistorian
CriticalCisco warns of critical flaws allowing Nexus switch takeover
CriticalAtlassian Vulnerability Comes Under Attack Hours After Details Go Public
CriticalSamsung’s October Update Patches 9 Critical Security Flaws Across Galaxy Devices
CriticalSonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances
CriticalUpdate Chrome and ChromeOS to fix critical security issues
CriticalExploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)
CriticalAtlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details
CriticalUnpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
CriticalSonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances
CriticalSonicWall warns of max severity SSRF flaw in SMA1000 gateways
Critical[CISA KEV] CVE-2020-10189: Zoho ManageEngine - Zoho ManageEngine Desktop Central File Upload Vulnerability
Critical[CISA KEV] CVE-2021-40539: Zoho ManageEngine - Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2021-27561: Yealink Device Management - Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability
Critical[CISA KEV] CVE-2020-4006: VMware Multiple Products - Multiple VMware Products Command Injection Vulnerability
Critical[CISA KEV] CVE-2021-21985: VMware vCenter Server - VMware vCenter Server Improper Input Validation Vulnerability
Critical[CISA KEV] CVE-2021-21972: VMware vCenter Server - VMware vCenter Server Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2021-22005: VMware vCenter Server - VMware vCenter Server File Upload Vulnerability
Critical[CISA KEV] CVE-2020-3992: VMware ESXi - VMware ESXi OpenSLP Use-After-Free Vulnerability
Critical[CISA KEV] CVE-2020-17496: vBulletin vBulletin - vBulletin PHP Module Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2019-16759: vBulletin vBulletin - vBulletin PHP Module Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-5847: Unraid Unraid - Unraid Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-5849: Unraid Unraid - Unraid Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2018-20062: ThinkPHP noneCms - ThinkPHP "noneCms" Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-6327: Symantec Symantec Messaging Gateway - Symantec Messaging Gateway Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-12271: Sophos SFOS - Sophos SFOS SQL Injection Vulnerability
Critical[CISA KEV] CVE-2021-20021: SonicWall SonicWall Email Security - SonicWall Email Security Improper Privilege Management Vulnerability
Critical[CISA KEV] CVE-2020-10199: Sonatype Nexus Repository - Sonatype Nexus Repository Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2021-35211: SolarWinds Serv-U - SolarWinds Serv-U Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-10148: SolarWinds Orion - SolarWinds Orion Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2020-6207: SAP Solution Manager - SAP Solution Manager Missing Authentication for Critical Function Vulnerability
Critical[CISA KEV] CVE-2020-6287: SAP NetWeaver - SAP NetWeaver Missing Authentication for Critical Function Vulnerability
Critical[CISA KEV] CVE-2010-5326: SAP NetWeaver - SAP NetWeaver Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-16846: SaltStack Salt - SaltStack Salt Shell Injection Vulnerability
Critical[CISA KEV] CVE-2020-11651: SaltStack Salt - SaltStack Salt Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2020-10221: rConfig rConfig - rConfig OS Command Injection Vulnerability
Critical[CISA KEV] CVE-2019-11539: Ivanti Pulse Connect Secure and Pulse Policy Secure - Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
Critical[CISA KEV] CVE-2019-11510: Ivanti Pulse Connect Secure - Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
Critical[CISA KEV] CVE-2020-8243: Ivanti Pulse Connect Secure - Ivanti Pulse Connect Secure Code Execution Vulnerability
Critical[CISA KEV] CVE-2021-22893: Ivanti Pulse Connect Secure - Ivanti Pulse Connect Secure Use-After-Free Vulnerability
Critical[CISA KEV] CVE-2020-8644: PlaySMS PlaySMS - PlaySMS Server-Side Template Injection Vulnerability
Critical[CISA KEV] CVE-2020-14883: Oracle WebLogic Server - Oracle WebLogic Server Unspecified Vulnerability
Critical[CISA KEV] CVE-2020-14882: Oracle WebLogic Server - Oracle WebLogic Server Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2015-4852: Oracle WebLogic Server - Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability
Critical[CISA KEV] CVE-2020-2555: Oracle Multiple Products - Oracle Multiple Products Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2019-19356: Netis WF2419 Devices - Netis WF2419 Devices Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2019-15949: Nagios Nagios XI - Nagios XI Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-1147: Microsoft .NET Framework, SharePoint, Visual Studio - Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2021-26857: Microsoft Exchange Server - Microsoft Exchange Server Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-0646: Microsoft .NET Framework - Microsoft .NET Framework Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2019-0604: Microsoft SharePoint - Microsoft SharePoint Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2021-27065: Microsoft Exchange Server - Microsoft Exchange Server Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2021-26858: Microsoft Exchange Server - Microsoft Exchange Server Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-1472: Microsoft Netlogon - Microsoft Netlogon Privilege Escalation Vulnerability
Critical[CISA KEV] CVE-2021-27085: Microsoft Internet Explorer - Microsoft Internet Explorer Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-8759: Microsoft .NET Framework - Microsoft .NET Framework Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-1350: Microsoft Windows - Microsoft Windows DNS Server Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2021-34473: Microsoft Exchange Server - Microsoft Exchange Server Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2019-0708: Microsoft Remote Desktop Services - Microsoft Remote Desktop Services Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-0688: Microsoft Exchange Server - Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-7269: Microsoft Internet Information Services (IIS) - Microsoft Windows Server Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2016-0185: Microsoft Windows - Microsoft Windows Media Center Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2021-38647: Microsoft Open Management Infrastructure (OMI) - Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2019-4716: IBM Planning Analytics - IBM Planning Analytics Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-4428: IBM Data Risk Manager - IBM Data Risk Manager Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2018-13379: Fortinet FortiOS - Fortinet FortiOS SSL VPN Path Traversal Vulnerability
Critical[CISA KEV] CVE-2021-35464: ForgeRock Access Management (AM) - ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2021-22986: F5 BIG-IP and BIG-IQ Centralized Management - F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-5902: F5 BIG-IP - F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2018-6789: Exim Exim - Exim Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2021-22205: GitLab Community and Enterprise Editions - GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2018-7600: Drupal Drupal Core - Drupal Core Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-8515: DrayTek Multiple Vigor Routers - Multiple DrayTek Vigor Routers Web Management Page Vulnerability
Critical[CISA KEV] CVE-2017-9822: DotNetNuke (DNN) DotNetNuke (DNN) - DotNetNuke (DNN) Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-25506: D-Link DNS-320 Device - D-Link DNS-320 Device Command Injection Vulnerability
Critical[CISA KEV] CVE-2020-8193: Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance - Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
Critical[CISA KEV] CVE-2020-3161: Cisco Cisco IP Phones - Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
Critical[CISA KEV] CVE-2020-3566: Cisco IOS XR - Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
Critical[CISA KEV] CVE-2021-1497: Cisco HyperFlex HX - Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability
Critical[CISA KEV] CVE-2020-3452: Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) - Cisco ASA and FTD Read-Only Path Traversal Vulnerability
Critical[CISA KEV] CVE-2019-11580: Atlassian Crowd and Crowd Data Center - Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2021-26084: Atlassian Confluence Server and Data Center - Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
Critical[CISA KEV] CVE-2019-3398: Atlassian Confluence Server and Data Center - Atlassian Confluence Server and Data Center Path Traversal Vulnerability
Critical[CISA KEV] CVE-2021-20090: Arcadyan Buffalo Firmware - Arcadyan Buffalo Firmware Path Traversal Vulnerability
Critical[CISA KEV] CVE-2020-9859: Apple Multiple Products - Apple Multiple Products Code Execution Vulnerability
Critical[CISA KEV] CVE-2021-30807: Apple Multiple Products - Apple Multiple Products Memory Corruption Vulnerability
Critical[CISA KEV] CVE-2018-11776: Apache Struts - Apache Struts Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-5638: Apache Struts - Apache Struts Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-17530: Apache Struts - Apache Struts Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2019-17558: Apache Solr - Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-9805: Apache Struts - Apache Struts Deserialization of Untrusted Data Vulnerability
Critical[CISA KEV] CVE-2018-15961: Adobe ColdFusion - Adobe ColdFusion Unrestricted File Upload Vulnerability
Critical[CISA KEV] CVE-2018-4939: Adobe ColdFusion - Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Critical[CISA KEV] CVE-2021-27101: Accellion FTA - Accellion FTA SQL Injection Vulnerability
Critical[CISA KEV] CVE-2021-27102: Accellion FTA - Accellion FTA OS Command Injection Vulnerability
Critical[CISA KEV] CVE-2021-27104: Accellion FTA - Accellion FTA OS Command Injection Vulnerability
Critical[CISA KEV] CVE-2021-42321: Microsoft Exchange - Microsoft Exchange Server Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2021-22204: Perl Exiftool - ExifTool Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2021-44077: Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus - Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2018-14847: MikroTik RouterOS - MikroTik Router OS Directory Traversal Vulnerability
Critical[CISA KEV] CVE-2021-44228: Apache Log4j2 - Apache Log4j2 Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2019-10758: MongoDB mongo-express - MongoDB mongo-express Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-8816: Pi-hole AdminLTE - Pi-Hole AdminLTE Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-12149: Red Hat JBoss Application Server - Red Hat JBoss Application Server Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-17562: Embedthis GoAhead - Embedthis GoAhead Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2019-0193: Apache Solr - Apache Solr DataImportHandler Code Injection Vulnerability
Critical[CISA KEV] CVE-2019-7238: Sonatype Nexus Repository Manager - Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
Critical[CISA KEV] CVE-2021-35394: Realtek Jungle Software Development Kit (SDK) - Realtek Jungle SDK Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2021-44515: Zoho Desktop Central - Zoho Desktop Central Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2021-27860: FatPipe WARP, IPVPN, and MPVPN software - FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit
Critical[CISA KEV] CVE-2019-7609: Elastic Kibana - Kibana Arbitrary Code Execution
Critical[CISA KEV] CVE-2017-1000486: Primetek Primefaces Application - Primetek Primefaces Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2015-7450: IBM WebSphere Application Server and Server Hypervisor Edition - IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
Critical[CISA KEV] CVE-2019-10149: Exim Mail Transfer Agent (MTA) - Exim Mail Transfer Agent (MTA) Improper Input Validation
Critical[CISA KEV] CVE-2019-1579: Palo Alto Networks PAN-OS - Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2019-2725: Oracle WebLogic Server - Oracle WebLogic Server, Injection
Critical[CISA KEV] CVE-2021-36260: Hikvision Security cameras web server - Hikvision Improper Input Validation
Critical[CISA KEV] CVE-2021-22017: VMware vCenter Server - VMware vCenter Server Improper Access Control
Critical[CISA KEV] CVE-2012-0391: Apache Struts 2 - Apache Struts 2 Improper Input Validation Vulnerability
Critical[CISA KEV] CVE-2014-6271: GNU Bourne-Again Shell (Bash) - GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
Critical[CISA KEV] CVE-2022-22587: Apple iOS and macOS - Apple Memory Corruption Vulnerability
Critical[CISA KEV] CVE-2014-4404: Apple OS X - Apple OS X Heap-Based Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2016-3088: Apache ActiveMQ - Apache ActiveMQ Improper Input Validation Vulnerability
Critical[CISA KEV] CVE-2017-0144: Microsoft SMBv1 - Microsoft SMBv1 Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-0145: Microsoft SMBv1 - Microsoft SMBv1 Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-9791: Apache Struts 1 - Apache Struts 1 Improper Input Validation Vulnerability
Critical[CISA KEV] CVE-2018-1000861: Jenkins Jenkins Stapler Web Framework - Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
Critical[CISA KEV] CVE-2020-0796: Microsoft SMBv3 - Microsoft SMBv3 Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2022-23131: Zabbix Frontend - Zabbix Frontend Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2017-8570: Microsoft Office - Microsoft Office Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2010-0188: Adobe Reader and Acrobat - Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
Critical[CISA KEV] CVE-2011-1889: Microsoft Forefront Threat Management Gateway (TMG) - Microsoft Forefront TMG Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2015-2590: Oracle Java SE - Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2016-4117: Adobe Flash Player - Adobe Flash Player Arbitrary Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-11826: Microsoft Office - Microsoft Office Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-12240: Cisco IOS and IOS XE Software - Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-6736: Cisco IOS and IOS XE Software - Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-6738: Cisco IOS and IOS XE Software - Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-6739: Cisco IOS and IOS XE Software - Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-6740: Cisco IOS and IOS XE Software - Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-6744: Cisco IOS software - Cisco IOS Software SNMP Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2018-0151: Cisco IOS and IOS XE Software - Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2018-0175: Cisco IOS, XR, and XE Software - Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2019-1652: Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers - Cisco Small Business Routers Improper Input Validation Vulnerability
Critical[CISA KEV] CVE-2019-16928: Exim Exim Internet Mailer - Exim Out-of-bounds Write Vulnerability
Critical[CISA KEV] CVE-2020-8218: Pulse Secure Pulse Connect Secure - Pulse Connect Secure Code Injection Vulnerability
Critical[CISA KEV] CVE-2022-26485: Mozilla Firefox - Mozilla Firefox Use-After-Free Vulnerability
Critical[CISA KEV] CVE-2022-26486: Mozilla Firefox - Mozilla Firefox Use-After-Free Vulnerability
Critical[CISA KEV] CVE-2009-1151: phpMyAdmin phpMyAdmin - phpMyAdmin Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2010-4344: Exim Exim - Exim Heap-Based Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2014-3120: Elastic Elasticsearch - Elasticsearch Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-12615: Apache Tomcat - Apache Tomcat on Windows Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-3881: Cisco IOS and IOS XE - Cisco IOS and IOS XE Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2018-0125: Cisco VPN Routers - Cisco VPN Routers Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2018-0147: Cisco Secure Access Control System (ACS) - Cisco Secure Access Control System Java Deserialization Vulnerability
Critical[CISA KEV] CVE-2018-1273: VMware Tanzu Spring Data Commons - VMware Tanzu Spring Data Commons Property Binder Vulnerability
Critical[CISA KEV] CVE-2018-14839: LG N1A1 NAS - LG N1A1 NAS Remote Command Execution Vulnerability
Critical[CISA KEV] CVE-2018-6961: VMware SD-WAN Edge - VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability
Critical[CISA KEV] CVE-2019-1003030: Jenkins Matrix Project Plugin - Jenkins Matrix Project Plugin Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2019-10068: Kentico Xperience - Kentico Xperience Deserialization of Untrusted Data Vulnerability
Critical[CISA KEV] CVE-2019-11043: PHP FastCGI Process Manager (FPM) - PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2019-15107: Webmin Webmin - Webmin Command Injection Vulnerability
Critical[CISA KEV] CVE-2019-16920: D-Link Multiple Routers - D-Link Multiple Routers Command Injection Vulnerability
Critical[CISA KEV] CVE-2019-6340: Drupal Core - Drupal Core Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-1956: Apache Kylin - Apache Kylin OS Command Injection Vulnerability
Critical[CISA KEV] CVE-2020-2021: Palo Alto Networks PAN-OS - Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2020-9054: Zyxel Multiple Network-Attached Storage (NAS) Devices - Zyxel Multiple NAS Devices OS Command Injection Vulnerability
Critical[CISA KEV] CVE-2021-22941: Citrix ShareFile - Citrix ShareFile Improper Access Control Vulnerability
Critical[CISA KEV] CVE-2021-42237: Sitecore XP - Sitecore XP Remote Command Execution Vulnerability
Critical[CISA KEV] CVE-2021-20028: SonicWall Secure Remote Access (SRA) - SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability
Critical[CISA KEV] CVE-2022-0543: Redis Debian-specific Redis Servers - Debian-specific Redis Server Lua Sandbox Escape Vulnerability
Critical[CISA KEV] CVE-2022-1096: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
Critical[CISA KEV] CVE-2018-10562: Dasan Gigabit Passive Optical Network (GPON) Routers - Dasan GPON Routers Command Injection Vulnerability
Critical[CISA KEV] CVE-2021-45382: D-Link Multiple Routers - D-Link Multiple Routers Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-0148: Microsoft SMBv1 server - Microsoft SMBv1 Server Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2021-31166: Microsoft HTTP Protocol Stack - Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-2509: QNAP QNAP Network-Attached Storage (NAS) - QNAP Network-Attached Storage (NAS) Command Injection Vulnerability
Critical[CISA KEV] CVE-2018-20753: Kaseya Virtual System/Server Administrator (VSA) - Kaseya VSA Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2018-7602: Drupal Core - Drupal Core Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2019-3568: Meta Platforms WhatsApp - WhatsApp VOIP Stack Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2022-0847: Linux Kernel - Linux Kernel Privilege Escalation Vulnerability
Critical[CISA KEV] CVE-2014-0160: OpenSSL OpenSSL - OpenSSL Information Disclosure Vulnerability
Critical[CISA KEV] CVE-2014-0322: Microsoft Internet Explorer - Microsoft Internet Explorer Use-After-Free Vulnerability
Critical[CISA KEV] CVE-2022-1388: F5 BIG-IP - F5 BIG-IP Missing Authentication Vulnerability
Critical[CISA KEV] CVE-2022-26134: Atlassian Confluence Server/Data Center - Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2019-15271: Cisco RV Series Routers - Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability
Critical[CISA KEV] CVE-2020-3837: Apple Multiple Products - Apple Multiple Products Memory Corruption Vulnerability
Critical[CISA KEV] CVE-2021-4034: Red Hat Polkit - Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
Critical[CISA KEV] CVE-2022-34713: Microsoft Windows - Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2022-27925: Synacor Zimbra Collaboration Suite (ZCS) - Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
Critical[CISA KEV] CVE-2022-26923: Microsoft Active Directory - Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Critical[CISA KEV] CVE-2022-32894: Apple iOS and macOS - Apple iOS and macOS Out-of-Bounds Write Vulnerability
Critical[CISA KEV] CVE-2021-38406: Delta Electronics DOPSoft 2 - Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability
Critical[CISA KEV] CVE-2022-2294: WebRTC WebRTC - WebRTC Heap Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2022-22963: VMware Tanzu Spring Cloud - VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2022-26352: dotCMS dotCMS - dotCMS Unrestricted Upload of File Vulnerability
Critical[CISA KEV] CVE-2018-2628: Oracle WebLogic Server - Oracle WebLogic Server Unspecified Vulnerability
Critical[CISA KEV] CVE-2022-40684: Fortinet Multiple Products - Fortinet Multiple Products Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2022-41128: Microsoft Windows - Microsoft Windows Scripting Languages Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2023-0669: Fortra GoAnywhere MFT - Fortra GoAnywhere MFT Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2022-47986: IBM Aspera Faspex - IBM Aspera Faspex Code Execution Vulnerability
Critical[CISA KEV] CVE-2017-6742: Cisco IOS and IOS XE Software - Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2023-21839: Oracle WebLogic Server - Oracle WebLogic Server Unspecified Vulnerability
Critical[CISA KEV] CVE-2021-45046: Apache Log4j2 - Apache Log4j2 Deserialization of Untrusted Data Vulnerability
Critical[CISA KEV] CVE-2023-1389: TP-Link Archer AX21 - TP-Link Archer AX-21 Command Injection Vulnerability
Critical[CISA KEV] CVE-2023-32373: Apple Multiple Products - Apple Multiple Products WebKit Use-After-Free Vulnerability
Critical[CISA KEV] CVE-2023-32409: Apple Multiple Products - Apple Multiple Products WebKit Sandbox Escape Vulnerability
Critical[CISA KEV] CVE-2023-33009: Zyxel Multiple Firewalls - Zyxel Multiple Firewalls Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2023-27997: Fortinet FortiOS and FortiProxy SSL-VPN - Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2023-32435: Apple Multiple Products - Apple Multiple Products WebKit Memory Corruption Vulnerability
Critical[CISA KEV] CVE-2023-32434: Apple Multiple Products - Apple Multiple Products Integer Overflow Vulnerability
Critical[CISA KEV] CVE-2021-25487: Samsung Mobile Devices - Samsung Mobile Devices Out-of-Bounds Read Vulnerability
Critical[CISA KEV] CVE-2019-17621: D-Link DIR-859 Router - D-Link DIR-859 Router Command Execution Vulnerability
Critical[CISA KEV] CVE-2022-31199: Netwrix Auditor - Netwrix Auditor Insecure Object Deserialization Vulnerability
Critical[CISA KEV] CVE-2023-36884: Microsoft Windows - Microsoft Windows Search Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2023-3519: Citrix NetScaler ADC and NetScaler Gateway - Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
Critical[CISA KEV] CVE-2023-24489: Citrix Content Collaboration - Citrix Content Collaboration ShareFile Improper Access Control Vulnerability
Critical[CISA KEV] CVE-2023-27532: Veeam Backup & Replication - Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
Critical[CISA KEV] CVE-2021-3129: Laravel Ignition - Laravel Ignition File Upload Vulnerability
Critical[CISA KEV] CVE-2023-42793: JetBrains TeamCity - JetBrains TeamCity Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2023-22515: Atlassian Confluence Data Center and Server - Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
Critical[CISA KEV] CVE-2023-20198: Cisco IOS XE Web UI - Cisco IOS XE Web UI Privilege Escalation Vulnerability
Critical[CISA KEV] CVE-2023-46747: F5 BIG-IP Configuration Utility - F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2023-47246: SysAid SysAid Server - SysAid Server Path Traversal Vulnerability
Critical[CISA KEV] CVE-2020-2551: Oracle Fusion Middleware - Oracle Fusion Middleware Unspecified Vulnerability
Critical[CISA KEV] CVE-2023-1671: Sophos Web Appliance - Sophos Web Appliance Command Injection Vulnerability
Critical[CISA KEV] CVE-2023-38203: Adobe ColdFusion - Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Critical[CISA KEV] CVE-2023-29300: Adobe ColdFusion - Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Critical[CISA KEV] CVE-2023-41990: Apple Multiple Products - Apple Multiple Products Code Execution Vulnerability
Critical[CISA KEV] CVE-2024-21887: Ivanti Connect Secure and Policy Secure - Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
Critical[CISA KEV] CVE-2023-29357: Microsoft SharePoint Server - Microsoft SharePoint Server Privilege Escalation Vulnerability
Critical[CISA KEV] CVE-2023-34048: VMware vCenter Server - VMware vCenter Server Out-of-Bounds Write Vulnerability
Critical[CISA KEV] CVE-2023-22527: Atlassian Confluence Data Center and Server - Atlassian Confluence Data Center and Server Template Injection Vulnerability
Critical[CISA KEV] CVE-2023-4762: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
Critical[CISA KEV] CVE-2024-21762: Fortinet FortiOS - Fortinet FortiOS Out-of-Bound Write Vulnerability
Critical[CISA KEV] CVE-2024-23296: Apple Multiple Products - Apple Multiple Products Memory Corruption Vulnerability
Critical[CISA KEV] CVE-2023-48788: Fortinet FortiClient EMS - Fortinet FortiClient EMS SQL Injection Vulnerability
Critical[CISA KEV] CVE-2019-7256: Nice Linear eMerge E3-Series - Nice Linear eMerge E3-Series OS Command Injection Vulnerability
Critical[CISA KEV] CVE-2023-43208: NextGen Healthcare Mirth Connect - NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability
Critical[CISA KEV] CVE-2024-4947: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
Critical[CISA KEV] CVE-2017-3506: Oracle WebLogic Server - Oracle WebLogic Server OS Command Injection Vulnerability
Critical[CISA KEV] CVE-2024-23692: Rejetto HTTP File Server - Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
Critical[CISA KEV] CVE-2024-4879: ServiceNow Utah, Vancouver, and Washington DC Now Platform - ServiceNow Improper Input Validation Vulnerability
Critical[CISA KEV] CVE-2024-37085: VMware ESXi - VMware ESXi Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2024-38178: Microsoft Windows - Microsoft Windows Scripting Engine Memory Corruption Vulnerability
Critical[CISA KEV] CVE-2021-20123: DrayTek VigorConnect - Draytek VigorConnect Path Traversal Vulnerability
Critical[CISA KEV] CVE-2022-21445: Oracle ADF Faces - Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
Critical[CISA KEV] CVE-2020-14644: Oracle WebLogic Server - Oracle WebLogic Server Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2020-15415: DrayTek Multiple Vigor Routers - DrayTek Multiple Vigor Routers OS Command Injection Vulnerability
Critical[CISA KEV] CVE-2019-0344: SAP Commerce Cloud - SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
Critical[CISA KEV] CVE-2024-45519: Synacor Zimbra Collaboration Suite (ZCS) - Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
Critical[CISA KEV] CVE-2024-43572: Microsoft Windows - Microsoft Windows Management Console Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2024-40711: Veeam Backup & Replication - Veeam Backup and Replication Deserialization Vulnerability
Critical[CISA KEV] CVE-2024-9463: Palo Alto Networks Expedition - Palo Alto Networks Expedition OS Command Injection Vulnerability
Critical[CISA KEV] CVE-2024-9465: Palo Alto Networks Expedition - Palo Alto Networks Expedition SQL Injection Vulnerability
Critical[CISA KEV] CVE-2024-1212: Progress Kemp LoadMaster - Progress Kemp LoadMaster OS Command Injection Vulnerability
Critical[CISA KEV] CVE-2024-0012: Palo Alto Networks PAN-OS - Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2023-28461: Array Networks AG/vxAG ArrayOS - Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
Critical[CISA KEV] CVE-2024-11680: ProjectSend ProjectSend - ProjectSend Improper Authentication Vulnerability
Critical[CISA KEV] CVE-2024-51378: CyberPersons CyberPanel - CyberPanel Incorrect Default Permissions Vulnerability
Critical[CISA KEV] CVE-2021-44207: Acclaim Systems USAHERDS - Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability
Critical[CISA KEV] CVE-2025-0282: Ivanti Connect Secure, Policy Secure, and ZTA Gateways - Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2024-12686: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) - BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
Critical[CISA KEV] CVE-2024-55591: Fortinet FortiOS and FortiProxy - Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2025-21333: Microsoft Windows - Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2025-21334: Microsoft Windows - Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
Critical[CISA KEV] CVE-2025-21335: Microsoft Windows - Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
Critical[CISA KEV] CVE-2024-50603: Aviatrix Controllers - Aviatrix Controllers OS Command Injection Vulnerability
Critical[CISA KEV] CVE-2025-23006: SonicWall SMA1000 Appliances - SonicWall SMA1000 Appliances Deserialization Vulnerability
Critical[CISA KEV] CVE-2018-19410: Paessler PRTG Network Monitor - Paessler PRTG Network Monitor Local File Inclusion Vulnerability
Critical[CISA KEV] CVE-2020-15069: Sophos XG Firewall - Sophos XG Firewall Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2024-53704: SonicWall SonicOS - SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
Critical[CISA KEV] CVE-2017-3066: Adobe ColdFusion - Adobe ColdFusion Deserialization Vulnerability
Critical[CISA KEV] CVE-2025-24472: Fortinet FortiOS and FortiProxy - Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2019-9874: Sitecore CMS and Experience Platform (XP) - Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
Critical[CISA KEV] CVE-2019-9875: Sitecore CMS and Experience Platform (XP) - Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
Critical[CISA KEV] CVE-2025-33053: Microsoft Windows - Microsoft Windows External Control of File Name or Path Vulnerability
Critical[CISA KEV] CVE-2025-47812: Wing FTP Server Wing FTP Server - Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability
Critical[CISA KEV] CVE-2025-25257: Fortinet FortiWeb - Fortinet FortiWeb SQL Injection Vulnerability
Critical[CISA KEV] CVE-2025-54309: CrushFTP CrushFTP - CrushFTP Unprotected Alternate Channel Vulnerability
Critical[CISA KEV] CVE-2025-20281: Cisco Identity Services Engine - Cisco Identity Services Engine Injection Vulnerability
Critical[CISA KEV] CVE-2025-20337: Cisco Identity Services Engine - Cisco Identity Services Engine Injection Vulnerability
Critical[CISA KEV] CVE-2025-7775: Citrix NetScaler - Citrix NetScaler Memory Overflow Vulnerability
Critical[CISA KEV] CVE-2025-57819: Sangoma FreePBX - Sangoma FreePBX Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2025-53690: Sitecore Multiple Products - Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability
Critical[CISA KEV] CVE-2025-10585: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
Critical[CISA KEV] CVE-2025-20333: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense - Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2025-20352: Cisco IOS and IOS XE - Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2015-7755: Juniper ScreenOS - Juniper ScreenOS Improper Authentication Vulnerability
Critical[CISA KEV] CVE-2017-1000353: Jenkins Jenkins - Jenkins Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2025-54253: Adobe Experience Manager (AEM) Forms - Adobe Experience Manager Forms Code Execution Vulnerability
Critical[CISA KEV] CVE-2025-9242: WatchGuard Firebox - WatchGuard Firebox Out-of-Bounds Write Vulnerability
Critical[CISA KEV] CVE-2025-20393: Cisco Multiple Products - Cisco Multiple Products Improper Input Validation Vulnerability
Critical[CISA KEV] CVE-2025-14733: WatchGuard Firebox - WatchGuard Firebox Out of Bounds Write Vulnerability
Critical[CISA KEV] CVE-2025-37164: Hewlett Packard Enterprise (HPE) OneView - Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
Critical[CISA KEV] CVE-2024-37079: Broadcom VMware vCenter Server - Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
Critical[CISA KEV] CVE-2026-24061: GNU InetUtils - GNU InetUtils Argument Injection Vulnerability
Critical[CISA KEV] CVE-2025-52691: SmarterTools SmarterMail - SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability
Critical[CISA KEV] CVE-2026-20700: Apple Multiple Products - Apple Multiple Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2026-2441: Google Chromium - Google Chromium CSS Use-After-Free Vulnerability
Critical[CISA KEV] CVE-2022-20775: Cisco SD-WAN - Cisco SD-WAN Path Traversal Vulnerability
Critical[CISA KEV] CVE-2023-41974: Apple iOS and iPadOS - Apple iOS and iPadOS Use-After-Free Vulnerability
Critical[CISA KEV] CVE-2026-20963: Microsoft SharePoint - Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Critical[CISA KEV] CVE-2026-20131: Cisco Secure Firewall Management Center (FMC) - Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
Critical[CISA KEV] CVE-2025-31277: Apple Multiple Products - Apple Multiple Products Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2025-43520: Apple Multiple Products - Apple Multiple Products Classic Buffer Overflow Vulnerability
Critical[CISA KEV] CVE-2026-39987: Marimo Marimo - Marimo Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2024-7399: Samsung MagicINFO 9 Server - Samsung MagicINFO 9 Server Path Traversal Vulnerability
Critical[CISA KEV] CVE-2025-29635: D-Link DIR-823X - D-Link DIR-823X Command Injection Vulnerability
Critical[CISA KEV] CVE-2026-0300: Palo Alto Networks PAN-OS - Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
Critical[CISA KEV] CVE-2026-20182: Cisco Catalyst SD-WAN - Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Critical[CISA KEV] CVE-2026-50751: Check Point Security Gateway - Check Point Security Gateway Improper Authentication Vulnerability
Critical[CISA KEV] CVE-2026-11645: Google Chromium V8 - Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
Critical[CISA KEV] CVE-2025-67038: Lantronix EDS5000 - Lantronix EDS5000 Code Injection Vulnerability
Critical[CISA KEV] CVE-2026-12569: PTC Windchill and FlexPLM - PTC Windchill and FlexPLM Improper Input Validation Vulnerability
Critical[CISA KEV] CVE-2026-56290: Joomlack Page Builder - Joomlack Page Builder Improper Access Control Vulnerability
Critical[CISA KEV] CVE-2026-48939: iCagenda iCagenda - iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
Critical[CISA KEV] CVE-2026-56291: Balbooa Forms - Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability
Critical[CISA KEV] CVE-2026-25089: Fortinet FortiSandbox - Fortinet FortiSandbox OS Command Injection Vulnerability
Critical[CISA KEV] CVE-2026-16232: Check Point SmartConsole - Check Point SmartConsole Improper Authentication Vulnerability
Critical[CISA KEV] CVE-2026-9198: IBM Langflow - IBM Langflow Code Injection Vulnerability
Critical[CISA KEV] CVE-2026-59310: Broadcom VMware vCenter - Broadcom VMware vCenter Path Traversal Vulnerability
Critical[CISA KEV] CVE-2026-33824: Microsoft Internet Key Exchange (IKE) Service Extensions - Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Critical[CISA KEV] CVE-2026-72530: TrueConf Server - TrueConf Server Code Injection Vulnerability
Critical[CISA KEV] CVE-2019-1068: Microsoft SQL Server - Microsoft SQL Server Remote Code Execution Vulnerability
Critical[CISA KEV] CVE-2026-9586: Sangoma Switchvox - Sangoma Switchvox SQL Injection Vulnerability
Critical[CISA KEV] CVE-2026-82329: JFrog Artifactory - JFrog Artifactory Improper Authentication Vulnerability
Critical[CISA KEV] CVE-2026-85046: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
Critical[CISA KEV] CVE-2026-20079: Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management - Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
Critical[CISA KEV] CVE-2026-87491: Google Chromium V8 - Google Chromium V8 Out of Bounds Write Vulnerability
Critical[CISA KEV] CVE-2026-19490: Citrix NetScaler - Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
Critical[CISA KEV] CVE-2026-76461: Cisco Secure Email Gateway - Cisco Secure Email Gateway SQL Injection Vulnerability
Critical[CISA KEV] CVE-2026-76460: Cisco Identity Services Engine - Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Critical[CISA KEV] CVE-2026-93616: Check Point Multiple Products - Check Point Multiple Products Path Traversal Vulnerability
Critical[CISA KEV] CVE-2026-87902: WordPress Core - WordPress Core Remote File Inclusion Vulnerability
Critical[CISA KEV] CVE-2026-88771: Citrix NetScaler - Citrix NetScaler Improper Input Validation Vulnerability
Critical[CISA KEV] CVE-2026-86950: Apple Multiple Products - Apple Multiple Products Out-of-Bounds Write Vulnerability
Critical[CISA KEV] CVE-2026-76504: Cisco Catalyst SD-WAN Manager - Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
CriticalDell Urges Customers to Patch Critical DSU Flaw That Can Give Attackers Root Access
CriticalCritical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
CriticalHow to secure RMM software: 8 controls MSPs should test
CriticalNew Dell System Update flaw lets hackers gain root privileges
CriticalRejetto HFS servers now actively scanned for critical RCE flaw
CriticalAttackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
CriticalRealtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2
Critical⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
HighA Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway Could Allow for Remote Code Execution
HighHigh-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring
High[CISA KEV] CVE-2015-3306: ProFTPD ProFTPD - ProFTPD Improper Access Control Vulnerability
High[CISA KEV] CVE-2023-22894: Strapi Strapi - Strapi Cleartext Storage of Sensitive Information Vulnerability
High[CISA KEV] CVE-2016-3081: Apache Struts - Apache Struts Command Injection Vulnerability
HighRed Lion Controls N-Tron 700 Series
HighSatel Netco Design
HighMicrosoft, Adobe, Apple, and Foxit vulnerabilities
HighScans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)
HighMultiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
HighCheck your X.Org server version because a dozen vulnerabilities have been patched
HighNinja Forms plugin flaw exploited to hack WordPress sites
High[CISA KEV] CVE-2020-29583: Zyxel Multiple Products - Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability
High[CISA KEV] CVE-2019-8394: Zoho ManageEngine - Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability
High[CISA KEV] CVE-2019-9978: WordPress Social Warfare Plugin - WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability
High[CISA KEV] CVE-2020-11738: WordPress Snap Creek Duplicator Plugin - WordPress Snap Creek Duplicator Plugin File Download Vulnerability
High[CISA KEV] CVE-2020-25213: WordPress File Manager Plugin - WordPress File Manager Plugin Remote Code Execution Vulnerability
High[CISA KEV] CVE-2020-3952: VMware vCenter Server - VMware vCenter Server Information Disclosure Vulnerability
High[CISA KEV] CVE-2020-3950: VMware Multiple Products - VMware Multiple Products Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-5544: VMware VMware ESXi and Horizon DaaS - VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2019-20085: TVT NVMS-1000 - TVT NVMS-1000 Directory Traversal Vulnerability
High[CISA KEV] CVE-2021-36741: Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security - Trend Micro Multiple Products Improper Input Validation Vulnerability
High[CISA KEV] CVE-2021-36742: Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security - Trend Micro Multiple Products Improper Input Validation Vulnerability
High[CISA KEV] CVE-2020-8599: Trend Micro Apex One and OfficeScan - Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
High[CISA KEV] CVE-2020-24557: Trend Micro Apex One, OfficeScan, and Worry-Free Business Security - Trend Micro Multiple Products Improper Access Control Vulnerability
High[CISA KEV] CVE-2020-8468: Trend Micro Apex One, OfficeScan and Worry-Free Business Security Agents - Trend Micro Multiple Products Content Validation Escape Vulnerability
High[CISA KEV] CVE-2020-8467: Trend Micro Apex One and OfficeScan - Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
High[CISA KEV] CVE-2019-18187: Trend Micro OfficeScan - Trend Micro OfficeScan Directory Traversal Vulnerability
High[CISA KEV] CVE-2019-9082: ThinkPHP ThinkPHP - ThinkPHP Remote Code Execution Vulnerability
High[CISA KEV] CVE-2018-14558: Tenda AC7, AC9, and AC10 Routers - Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability
High[CISA KEV] CVE-2020-10987: Tenda AC1900 Router AC15 Model - Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability
High[CISA KEV] CVE-2021-31755: Tenda AC11 Router - Tenda AC11 Router Stack Buffer Overflow Vulnerability
High[CISA KEV] CVE-2017-9248: Progress ASP.NET AJAX and Sitefinity - Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability
High[CISA KEV] CVE-2019-18988: TeamViewer Desktop - TeamViewer Desktop Bypass Remote Login Vulnerability
High[CISA KEV] CVE-2020-10181: Sumavision Enhanced Multimedia Router (EMR) - Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability
High[CISA KEV] CVE-2021-20016: SonicWall SSLVPN SMA100 - SonicWall SSLVPN SMA100 SQL Injection Vulnerability
High[CISA KEV] CVE-2021-20023: SonicWall SonicWall Email Security - SonicWall Email Security Path Traversal Vulnerability
High[CISA KEV] CVE-2021-20022: SonicWall SonicWall Email Security - SonicWall Email Security Unrestricted Upload of File Vulnerability
High[CISA KEV] CVE-2019-7481: SonicWall SMA100 - SonicWall SMA100 SQL Injection Vulnerability
High[CISA KEV] CVE-2016-3643: SolarWinds Virtualization Manager - SolarWinds Virtualization Manager Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-16256: SIMalliance Toolbox Browser - SIMalliance Toolbox Browser Command Injection Vulnerability
High[CISA KEV] CVE-2016-3976: SAP NetWeaver - SAP NetWeaver Directory Traversal Vulnerability
High[CISA KEV] CVE-2016-9563: SAP NetWeaver - SAP NetWeaver XML External Entity (XXE) Vulnerability
High[CISA KEV] CVE-2018-2380: SAP Customer Relationship Management (CRM) - SAP Customer Relationship Management (CRM) Path Traversal Vulnerability
High[CISA KEV] CVE-2020-11652: SaltStack Salt - SaltStack Salt Path Traversal Vulnerability
High[CISA KEV] CVE-2021-35395: Realtek AP-Router SDK - Realtek AP-Router SDK Buffer Overflow Vulnerability
High[CISA KEV] CVE-2021-1905: Qualcomm Multiple Chipsets - Qualcomm Multiple Chipsets Use-After-Free Vulnerability
High[CISA KEV] CVE-2021-22899: Ivanti Pulse Connect Secure - Ivanti Pulse Connect Secure Command Injection Vulnerability
High[CISA KEV] CVE-2020-8260: Ivanti Pulse Connect Secure - Ivanti Pulse Connect Secure Code Execution Vulnerability
High[CISA KEV] CVE-2021-22894: Ivanti Pulse Connect Secure - Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
High[CISA KEV] CVE-2020-14871: Oracle Solaris and Zettabyte File System (ZFS) - Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
High[CISA KEV] CVE-2012-3152: Oracle Fusion Middleware - Oracle Fusion Middleware Unspecified Vulnerability
High[CISA KEV] CVE-2020-26919: NETGEAR JGS516PE Devices - Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability
High[CISA KEV] CVE-2019-17026: Mozilla Firefox and Thunderbird - Mozilla Firefox And Thunderbird Type Confusion Vulnerability
High[CISA KEV] CVE-2020-6820: Mozilla Firefox and Thunderbird - Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
High[CISA KEV] CVE-2020-6819: Mozilla Firefox and Thunderbird - Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
High[CISA KEV] CVE-2021-38648: Microsoft Open Management Infrastructure (OMI) - Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-36955: Microsoft Windows - Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-0863: Microsoft Windows - Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability
High[CISA KEV] CVE-2016-3235: Microsoft Office - Microsoft Office OLE DLL Side Loading Vulnerability
High[CISA KEV] CVE-2019-1214: Microsoft Windows - Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability
High[CISA KEV] CVE-2019-0808: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2020-0601: Microsoft Windows - Microsoft Windows CryptoAPI Spoofing Vulnerability
High[CISA KEV] CVE-2021-34448: Microsoft Windows - Microsoft Windows Scripting Engine Memory Corruption Vulnerability
High[CISA KEV] CVE-2021-1675: Microsoft Windows - Microsoft Windows Print Spooler Remote Code Execution Vulnerability
High[CISA KEV] CVE-2020-1054: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2020-0968: Microsoft Internet Explorer - Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
High[CISA KEV] CVE-2017-11774: Microsoft Office - Microsoft Office Outlook Security Feature Bypass Vulnerability
High[CISA KEV] CVE-2019-1429: Microsoft Internet Explorer - Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
High[CISA KEV] CVE-2020-1380: Microsoft Internet Explorer - Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
High[CISA KEV] CVE-2017-0199: Microsoft Office and WordPad - Microsoft Office and WordPad Remote Code Execution Vulnerability
High[CISA KEV] CVE-2019-1367: Microsoft Internet Explorer - Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
High[CISA KEV] CVE-2021-27059: Microsoft Office - Microsoft Office Remote Code Execution Vulnerability
High[CISA KEV] CVE-2020-0674: Microsoft Internet Explorer - Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
High[CISA KEV] CVE-2017-11882: Microsoft Office - Microsoft Office Memory Corruption Vulnerability
High[CISA KEV] CVE-2019-0541: Microsoft MSHTML - Microsoft MSHTML Remote Code Execution Vulnerability
High[CISA KEV] CVE-2015-1641: Microsoft Office - Microsoft Office Memory Corruption Vulnerability
High[CISA KEV] CVE-2018-0798: Microsoft Office - Microsoft Office Memory Corruption Vulnerability
High[CISA KEV] CVE-2019-1215: Microsoft Windows - Microsoft Windows Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-36942: Microsoft Windows - Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
High[CISA KEV] CVE-2019-0797: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2018-8653: Microsoft Internet Explorer - Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
High[CISA KEV] CVE-2021-40444: Microsoft MSHTML - Microsoft MSHTML Remote Code Execution Vulnerability
High[CISA KEV] CVE-2019-0859: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-26411: Microsoft Internet Explorer - Microsoft Internet Explorer Memory Corruption Vulnerability
High[CISA KEV] CVE-2021-28310: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2020-1040: Microsoft Hyper-V RemoteFX - Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
High[CISA KEV] CVE-2019-0803: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-31207: Microsoft Exchange Server - Microsoft Exchange Server Security Feature Bypass Vulnerability
High[CISA KEV] CVE-2021-34527: Microsoft Windows - Microsoft Windows Print Spooler Remote Code Execution Vulnerability
High[CISA KEV] CVE-2021-1732: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2020-1464: Microsoft Windows - Microsoft Windows Spoofing Vulnerability
High[CISA KEV] CVE-2016-7255: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2017-0143: Microsoft Windows - Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability
High[CISA KEV] CVE-2021-38649: Microsoft Open Management Infrastructure (OMI) - Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-36948: Microsoft Windows - Microsoft Windows Update Medic Service Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-34523: Microsoft Exchange Server - Microsoft Exchange Server Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-38645: Microsoft Open Management Infrastructure (OMI) - Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
High[CISA KEV] CVE-2020-1020: Microsoft Windows - Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
High[CISA KEV] CVE-2020-0986: Microsoft Windows - Microsoft Windows Kernel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2020-17144: Microsoft Exchange Server - Microsoft Exchange Server Remote Code Execution Vulnerability
High[CISA KEV] CVE-2020-0938: Microsoft Windows - Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
High[CISA KEV] CVE-2021-31979: Microsoft Windows - Microsoft Windows Kernel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-31201: Microsoft Enhanced Cryptographic Provider - Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-31956: Microsoft Windows - Microsoft Windows NTFS Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-33771: Microsoft Windows - Microsoft Windows Kernel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-31199: Microsoft Enhanced Cryptographic Provider - Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-33742: Microsoft Windows - Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability
High[CISA KEV] CVE-2020-17087: Microsoft Windows - Microsoft Windows Kernel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2020-0683: Microsoft Windows - Microsoft Windows Installer Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-33739: Microsoft Windows - Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-1647: Microsoft Defender - Microsoft Defender Remote Code Execution Vulnerability
High[CISA KEV] CVE-2021-31955: Microsoft Windows - Microsoft Windows Kernel Information Disclosure Vulnerability
High[CISA KEV] CVE-2020-0878: Microsoft Edge and Internet Explorer - Microsoft Edge and Internet Explorer Memory Corruption Vulnerability
High[CISA KEV] CVE-2016-0167: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2014-1812: Microsoft Windows - Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-22502: Micro Focus Operation Bridge Reporter (OBR) - Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability
High[CISA KEV] CVE-2021-22506: Micro Focus Micro Focus Access Manager - Micro Focus Access Manager Information Leakage Vulnerability
High[CISA KEV] CVE-2021-23874: McAfee McAfee Total Protection (MTP) - McAfee Total Protection (MTP) Improper Privilege Management Vulnerability
High[CISA KEV] CVE-2020-7961: Liferay Liferay Portal - Liferay Portal Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2020-15505: Ivanti MobileIron Multiple Products - Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability
High[CISA KEV] CVE-2016-3718: ImageMagick ImageMagick - ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
High[CISA KEV] CVE-2020-4427: IBM Data Risk Manager - IBM Data Risk Manager Security Bypass Vulnerability
High[CISA KEV] CVE-2021-30563: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
High[CISA KEV] CVE-2021-21220: Google Chromium V8 - Google Chromium V8 Improper Input Validation Vulnerability
High[CISA KEV] CVE-2021-21193: Google Chromium Blink - Google Chromium Blink Use-After-Free Vulnerability
High[CISA KEV] CVE-2021-21224: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
High[CISA KEV] CVE-2021-38003: Google Chromium V8 - Google Chromium V8 Memory Corruption Vulnerability
High[CISA KEV] CVE-2021-38000: Google Chromium Intents - Google Chromium Intents Improper Input Validation Vulnerability
High[CISA KEV] CVE-2021-21206: Google Chromium Blink - Google Chromium Blink Use-After-Free Vulnerability
High[CISA KEV] CVE-2021-30554: Google Chromium WebGL - Google Chromium WebGL Use-After-Free Vulnerability
High[CISA KEV] CVE-2020-6418: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
High[CISA KEV] CVE-2021-37975: Google Chromium V8 - Google Chromium V8 Use-After-Free Vulnerability
High[CISA KEV] CVE-2021-30551: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
High[CISA KEV] CVE-2021-37973: Google Chromium Portals - Google Chromium Portals Use-After-Free Vulnerability
High[CISA KEV] CVE-2021-21148: Google Chromium V8 - Google Chromium V8 Heap Buffer Overflow Vulnerability
High[CISA KEV] CVE-2021-30633: Google Chromium Indexed DB API - Google Chromium Indexed DB API Use-After-Free Vulnerability
High[CISA KEV] CVE-2020-16013: Google Chromium V8 - Google Chromium V8 Incorrect Implementation Vulnerabililty
High[CISA KEV] CVE-2021-30632: Google Chromium V8 - Google Chromium V8 Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2020-16009: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
High[CISA KEV] CVE-2021-37976: Google Chromium - Google Chromium Information Disclosure Vulnerability
High[CISA KEV] CVE-2020-16017: Google Chrome - Google Chrome Use-After-Free Vulnerability
High[CISA KEV] CVE-2021-21166: Google Chromium - Google Chromium Race Condition Vulnerability
High[CISA KEV] CVE-2020-15999: Google Chrome FreeType - Google Chrome FreeType Heap Buffer Overflow Vulnerability
High[CISA KEV] CVE-2020-16010: Google Chrome for Android UI - Google Chrome for Android UI Heap Buffer Overflow Vulnerability
High[CISA KEV] CVE-2020-12812: Fortinet FortiOS - Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
High[CISA KEV] CVE-2019-5591: Fortinet FortiOS - Fortinet FortiOS Default Configuration Vulnerability
High[CISA KEV] CVE-2020-8655: EyesOfNetwork EyesOfNetwork - EyesOfNetwork Improper Privilege Management Vulnerability
High[CISA KEV] CVE-2020-8657: EyesOfNetwork EyesOfNetwork - EyesOfNetwork Use of Hard-Coded Credentials Vulnerability
High[CISA KEV] CVE-2019-15752: Docker Desktop Community Edition - Docker Desktop Community Edition Privilege Escalation Vulnerability
High[CISA KEV] CVE-2020-29557: D-Link DIR-825 R1 Devices - D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability
High[CISA KEV] CVE-2019-11634: Citrix Workspace Application and Receiver for Windows - Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
High[CISA KEV] CVE-2020-8196: Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance - Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
High[CISA KEV] CVE-2020-8195: Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance - Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
High[CISA KEV] CVE-2019-13608: Citrix StoreFront Server - Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
High[CISA KEV] CVE-2018-0296: Cisco Adaptive Security Appliance (ASA) - Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
High[CISA KEV] CVE-2019-1653: Cisco Small Business RV320 and RV325 Routers - Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
High[CISA KEV] CVE-2020-3569: Cisco IOS XR - Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
High[CISA KEV] CVE-2021-1498: Cisco HyperFlex HX - Cisco HyperFlex HX Data Platform Command Injection Vulnerability
High[CISA KEV] CVE-2020-3580: Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) - Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability
High[CISA KEV] CVE-2021-42258: BQE BillQuick Web Suite - BQE BillQuick Web Suite SQL Injection Vulnerability
High[CISA KEV] CVE-2021-28663: Arm Mali Graphics Processing Unit (GPU) - Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability
High[CISA KEV] CVE-2021-28664: Arm Mali Graphics Processing Unit (GPU) - Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability
High[CISA KEV] CVE-2021-27562: Arm Trusted Firmware - Arm Trusted Firmware Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2021-30869: Apple iOS, iPadOS, and macOS - Apple iOS, iPadOS, and macOS Type Confusion Vulnerability
High[CISA KEV] CVE-2021-30761: Apple iOS - Apple iOS WebKit Memory Corruption Vulnerability
High[CISA KEV] CVE-2021-30663: Apple Multiple Products - Apple Multiple Products WebKit Integer Overflow Vulnerability
High[CISA KEV] CVE-2021-30665: Apple Multiple Products - Apple Multiple Products WebKit Memory Corruption Vulnerability
High[CISA KEV] CVE-2021-30713: Apple macOS - Apple macOS Unspecified Vulnerability
High[CISA KEV] CVE-2021-30666: Apple iOS - Apple iOS WebKit Buffer Overflow Vulnerability
High[CISA KEV] CVE-2021-30661: Apple Multiple Products - Apple Multiple Products WebKit Storage Use-After-Free Vulnerability
High[CISA KEV] CVE-2021-1879: Apple iOS, iPadOS, and watchOS - Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability
High[CISA KEV] CVE-2021-1871: Apple iOS, iPadOS, and macOS - Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
High[CISA KEV] CVE-2021-1870: Apple iOS, iPadOS, and macOS - Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
High[CISA KEV] CVE-2021-1782: Apple Multiple Products - Apple Multiple Products Race Condition Vulnerability
High[CISA KEV] CVE-2021-30762: Apple iOS - Apple iOS WebKit Use-After-Free Vulnerability
High[CISA KEV] CVE-2020-9819: Apple iOS, iPadOS, and watchOS - Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability
High[CISA KEV] CVE-2020-9818: Apple iOS, iPadOS, and watchOS - Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2020-27932: Apple Multiple Products - Apple Multiple Products Type Confusion Vulnerability
High[CISA KEV] CVE-2020-27950: Apple Multiple Products - Apple Multiple Products Memory Initialization Vulnerability
High[CISA KEV] CVE-2020-27930: Apple Multiple Products - Apple Multiple Products Memory Corruption Vulnerability
High[CISA KEV] CVE-2021-30860: Apple Multiple Products - Apple Multiple Products Integer Overflow Vulnerability
High[CISA KEV] CVE-2019-6223: Apple iOS and macOS - Apple iOS and macOS Group Facetime Vulnerability
High[CISA KEV] CVE-2021-30858: Apple iOS, iPadOS, and macOS - Apple iOS, iPadOS, macOS Use-After-Free Vulnerability
High[CISA KEV] CVE-2016-4437: Apache Shiro - Apache Shiro Code Execution Vulnerability
High[CISA KEV] CVE-2021-41773: Apache HTTP Server - Apache HTTP Server Path Traversal Vulnerability
High[CISA KEV] CVE-2021-42013: Apache HTTP Server - Apache HTTP Server Path Traversal Vulnerability
High[CISA KEV] CVE-2020-0069: MediaTek Multiple Chipsets - Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability
High[CISA KEV] CVE-2020-0041: Android Android Kernel - Android Kernel Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2019-2215: Android Android Kernel - Android Kernel Use-After-Free Vulnerability
High[CISA KEV] CVE-2020-5735: Amcrest Cameras and Network Video Recorder (NVR) - Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2018-4878: Adobe Flash Player - Adobe Flash Player Use-After-Free Vulnerability
High[CISA KEV] CVE-2021-28550: Adobe Acrobat and Reader - Adobe Acrobat and Reader Use-After-Free Vulnerability
High[CISA KEV] CVE-2021-21017: Adobe Acrobat and Reader - Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2021-27103: Accellion FTA - Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability
High[CISA KEV] CVE-2021-42292: Microsoft Office - Microsoft Excel Security Feature Bypass
High[CISA KEV] CVE-2021-40449: Microsoft Windows - Microsoft Windows Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-40438: Apache Apache - Apache HTTP Server-Side Request Forgery (SSRF)
High[CISA KEV] CVE-2021-37415: Zoho ManageEngine ServiceDesk Plus (SDP) - Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
High[CISA KEV] CVE-2020-11261: Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables - Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
High[CISA KEV] CVE-2020-17463: Fuel CMS Fuel CMS - Fuel CMS SQL Injection Vulnerability
High[CISA KEV] CVE-2010-1871: Red Hat JBoss Seam 2 - Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
High[CISA KEV] CVE-2021-44168: Fortinet FortiOS - Fortinet FortiOS Arbitrary File Download
High[CISA KEV] CVE-2019-13272: Linux Kernel - Linux Kernel Improper Privilege Management Vulnerability
High[CISA KEV] CVE-2021-4102: Google Chromium V8 - Google Chromium V8 Use-After-Free Vulnerability
High[CISA KEV] CVE-2018-13383: Fortinet FortiOS and FortiProxy - Fortinet FortiOS and FortiProxy Out-of-bounds Write
High[CISA KEV] CVE-2018-13382: Fortinet FortiOS and FortiProxy - Fortinet FortiOS and FortiProxy Improper Authorization
High[CISA KEV] CVE-2019-9670: Synacor Zimbra Collaboration Suite (ZCS) - Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
High[CISA KEV] CVE-2013-3900: Microsoft WinVerifyTrust function - Microsoft WinVerifyTrust function Remote Code Execution
High[CISA KEV] CVE-2019-1458: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2020-6572: Google Chrome Media - Google Chrome Media Use-After-Free Vulnerability
High[CISA KEV] CVE-2020-13927: Apache Airflow's Experimental API - Apache Airflow's Experimental API Authentication Bypass
High[CISA KEV] CVE-2020-11978: Apache Airflow - Apache Airflow Command Injection
High[CISA KEV] CVE-2020-13671: Drupal Drupal core - Drupal core Un-restricted Upload of File
High[CISA KEV] CVE-2020-14864: Oracle Intelligence Enterprise Edition - Oracle Business Intelligence Enterprise Edition Path Transversal
High[CISA KEV] CVE-2021-22991: F5 BIG-IP Traffic Management Microkernel - F5 BIG-IP Traffic Management Microkernel Buffer Overflow
High[CISA KEV] CVE-2021-21315: Npm package System Information Library for Node.JS - System Information Library for Node.JS Command Injection
High[CISA KEV] CVE-2021-21975: VMware vRealize Operations Manager API - VMware Server Side Request Forgery in vRealize Operations Manager API
High[CISA KEV] CVE-2021-33766: Microsoft Exchange Server - Microsoft Exchange Server Information Disclosure
High[CISA KEV] CVE-2021-40870: Aviatrix Aviatrix Controller - Aviatrix Controller Unrestricted Upload of File
High[CISA KEV] CVE-2021-25298: Nagios Nagios XI - Nagios XI OS Command Injection
High[CISA KEV] CVE-2021-25297: Nagios Nagios XI - Nagios XI OS Command Injection
High[CISA KEV] CVE-2021-25296: Nagios Nagios XI - Nagios XI OS Command Injection
High[CISA KEV] CVE-2021-32648: October CMS October CMS - October CMS Improper Authentication
High[CISA KEV] CVE-2021-35247: SolarWinds Serv-U - SolarWinds Serv-U Improper Input Validation Vulnerability
High[CISA KEV] CVE-2018-8453: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2014-7169: GNU Bourne-Again Shell (Bash) - GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
High[CISA KEV] CVE-2014-1776: Microsoft Internet Explorer - Microsoft Internet Explorer Memory Corruption Vulnerability
High[CISA KEV] CVE-2017-5689: Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability - Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
High[CISA KEV] CVE-2020-0787: Microsoft Windows - Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability
High[CISA KEV] CVE-2020-5722: Grandstream UCM6200 - Grandstream Networks UCM6200 Series SQL Injection Vulnerability
High[CISA KEV] CVE-2021-20038: SonicWall SMA 100 Appliances - SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2022-21882: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2015-1130: Apple OS X - Apple OS X Authentication Bypass Vulnerability
High[CISA KEV] CVE-2015-1635: Microsoft HTTP.sys - Microsoft HTTP.sys Remote Code Execution Vulnerability
High[CISA KEV] CVE-2015-2051: D-Link DIR-645 Router - D-Link DIR-645 Router Remote Code Execution Vulnerability
High[CISA KEV] CVE-2017-0262: Microsoft Office - Microsoft Office Remote Code Execution Vulnerability
High[CISA KEV] CVE-2017-0263: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-36934: Microsoft Windows - Microsoft Windows SAM Local Privilege Escalation Vulnerability
High[CISA KEV] CVE-2022-22620: Apple iOS, iPadOS, and macOS - Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability
High[CISA KEV] CVE-2013-3906: Microsoft Graphics Component - Microsoft Graphics Component Memory Corruption Vulnerability
High[CISA KEV] CVE-2017-9841: PHPUnit PHPUnit - PHPUnit Command Injection Vulnerability
High[CISA KEV] CVE-2018-15982: Adobe Flash Player - Adobe Flash Player Use-After-Free Vulnerability
High[CISA KEV] CVE-2018-20250: RARLAB WinRAR - WinRAR Absolute Path Traversal Vulnerability
High[CISA KEV] CVE-2018-8174: Microsoft Windows - Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2022-0609: Google Chromium Animation - Google Chromium Animation Use-After-Free Vulnerability
High[CISA KEV] CVE-2022-24086: Adobe Commerce and Magento Open Source - Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability
High[CISA KEV] CVE-2022-23134: Zabbix Frontend - Zabbix Frontend Improper Access Control Vulnerability
High[CISA KEV] CVE-2014-6352: Microsoft Windows - Microsoft Windows Code Injection Vulnerability
High[CISA KEV] CVE-2017-0222: Microsoft Internet Explorer - Microsoft Internet Explorer Remote Code Execution Vulnerability
High[CISA KEV] CVE-2022-24682: Synacor Zimbra Collaborate Suite (ZCS) - Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability
High[CISA KEV] CVE-2002-0367: Microsoft Windows - Microsoft Windows Privilege Escalation Vulnerability
High[CISA KEV] CVE-2004-0210: Microsoft Windows - Microsoft Windows Privilege Escalation Vulnerability
High[CISA KEV] CVE-2008-2992: Adobe Acrobat and Reader - Adobe Reader and Acrobat Input Validation Vulnerability
High[CISA KEV] CVE-2008-3431: Oracle VirtualBox - Oracle VirtualBox Insufficient Input Validation Vulnerability
High[CISA KEV] CVE-2009-1123: Microsoft Windows - Microsoft Windows Improper Input Validation Vulnerability
High[CISA KEV] CVE-2010-0232: Microsoft Windows - Microsoft Windows Kernel Exception Handler Vulnerability
High[CISA KEV] CVE-2010-3333: Microsoft Office - Microsoft Office Stack-based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2011-0611: Adobe Flash Player - Adobe Flash Player Remote Code Execution Vulnerability
High[CISA KEV] CVE-2011-3544: Oracle Java SE JDK and JRE - Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
High[CISA KEV] CVE-2012-0507: Oracle Java SE - Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
High[CISA KEV] CVE-2012-1535: Adobe Flash Player - Adobe Flash Player Arbitrary Code Execution Vulnerability
High[CISA KEV] CVE-2012-1856: Microsoft Office - Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
High[CISA KEV] CVE-2012-4681: Oracle Java SE - Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
High[CISA KEV] CVE-2013-0632: Adobe ColdFusion - Adobe ColdFusion Authentication Bypass Vulnerability
High[CISA KEV] CVE-2013-0640: Adobe Reader and Acrobat - Adobe Reader and Acrobat Memory Corruption Vulnerability
High[CISA KEV] CVE-2013-0641: Adobe Reader - Adobe Reader Buffer Overflow Vulnerability
High[CISA KEV] CVE-2013-1347: Microsoft Internet Explorer - Microsoft Internet Explorer Remote Code Execution Vulnerability
High[CISA KEV] CVE-2013-3346: Adobe Reader and Acrobat - Adobe Reader and Acrobat Memory Corruption Vulnerability
High[CISA KEV] CVE-2013-3897: Microsoft Internet Explorer - Microsoft Internet Explorer Use-After-Free Vulnerability
High[CISA KEV] CVE-2013-5065: Microsoft Windows - Microsoft Windows Kernel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2014-0496: Adobe Reader and Acrobat - Adobe Reader and Acrobat Use-After-Free Vulnerability
High[CISA KEV] CVE-2014-4114: Microsoft Windows - Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability
High[CISA KEV] CVE-2015-1642: Microsoft Office - Microsoft Office Memory Corruption Vulnerability
High[CISA KEV] CVE-2015-1701: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2015-2387: Microsoft ATM Font Driver - Microsoft ATM Font Driver Privilege Escalation Vulnerability
High[CISA KEV] CVE-2015-2424: Microsoft PowerPoint - Microsoft PowerPoint Memory Corruption Vulnerability
High[CISA KEV] CVE-2015-2545: Microsoft Office - Microsoft Office Malformed EPS File Vulnerability
High[CISA KEV] CVE-2015-3043: Adobe Flash Player - Adobe Flash Player Memory Corruption Vulnerability
High[CISA KEV] CVE-2015-5119: Adobe Flash Player - Adobe Flash Player Use-After-Free Vulnerability
High[CISA KEV] CVE-2015-7645: Adobe Flash Player - Adobe Flash Player Arbitrary Code Execution Vulnerability
High[CISA KEV] CVE-2016-1019: Adobe Flash Player - Adobe Flash Player Arbitrary Code Execution Vulnerability
High[CISA KEV] CVE-2016-5195: Linux Kernel - Linux Kernel Race Condition Vulnerability
High[CISA KEV] CVE-2016-7193: Microsoft Office - Microsoft Office Memory Corruption Vulnerability
High[CISA KEV] CVE-2016-7262: Microsoft Excel - Microsoft Office Security Feature Bypass Vulnerability
High[CISA KEV] CVE-2016-7855: Adobe Flash Player - Adobe Flash Player Use-After-Free Vulnerability
High[CISA KEV] CVE-2016-8562: Siemens SIMATIC CP - Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability
High[CISA KEV] CVE-2017-0001: Microsoft Graphics Device Interface (GDI) - Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability
High[CISA KEV] CVE-2017-0261: Microsoft Office - Microsoft Office Use-After-Free Vulnerability
High[CISA KEV] CVE-2017-11292: Adobe Flash Player - Adobe Flash Player Type Confusion Vulnerability
High[CISA KEV] CVE-2017-12231: Cisco IOS software - Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability
High[CISA KEV] CVE-2017-12232: Cisco IOS software - Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
High[CISA KEV] CVE-2017-12233: Cisco IOS software - Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
High[CISA KEV] CVE-2017-12234: Cisco IOS software - Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
High[CISA KEV] CVE-2017-12235: Cisco IOS software - Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
High[CISA KEV] CVE-2017-12237: Cisco IOS and IOS XE Software - Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
High[CISA KEV] CVE-2017-12238: Cisco Catalyst 6800 Series Switches - Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
High[CISA KEV] CVE-2017-12319: Cisco IOS XE Software - Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
High[CISA KEV] CVE-2017-6627: Cisco IOS and IOS XE Software - Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
High[CISA KEV] CVE-2017-6663: Cisco IOS and IOS XE Software - Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
High[CISA KEV] CVE-2017-6737: Cisco IOS and IOS XE Software - Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
High[CISA KEV] CVE-2017-6743: Cisco IOS and IOS XE Software - Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
High[CISA KEV] CVE-2017-8540: Microsoft Malware Protection Engine - Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability
High[CISA KEV] CVE-2018-0154: Cisco IOS Software - Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
High[CISA KEV] CVE-2018-0155: Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches - Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
High[CISA KEV] CVE-2018-0156: Cisco IOS Software and Cisco IOS XE Software - Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
High[CISA KEV] CVE-2018-0158: Cisco IOS Software and Cisco IOS XE Software - Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
High[CISA KEV] CVE-2018-0159: Cisco IOS Software and Cisco IOS XE Software - Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
High[CISA KEV] CVE-2018-0161: Cisco IOS Software - Cisco IOS Software Resource Management Errors Vulnerability
High[CISA KEV] CVE-2018-0173: Cisco IOS and IOS XE Software - Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
High[CISA KEV] CVE-2018-0174: Cisco IOS XE Software - Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
High[CISA KEV] CVE-2018-0179: Cisco IOS Software - Cisco IOS Software Denial-of-Service Vulnerability
High[CISA KEV] CVE-2018-0180: Cisco IOS Software - Cisco IOS Software Denial-of-Service Vulnerability
High[CISA KEV] CVE-2018-8298: ChakraCore ChakraCore scripting engine - ChakraCore Scripting Engine Type Confusion Vulnerability
High[CISA KEV] CVE-2018-8581: Microsoft Exchange Server - Microsoft Exchange Server Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-1297: Microsoft Excel - Microsoft Excel Remote Code Execution Vulnerability
High[CISA KEV] CVE-2020-11899: Treck TCP/IP stack IPv6 - Treck TCP/IP stack Out-of-Bounds Read Vulnerability
High[CISA KEV] CVE-2020-1938: Apache Tomcat - Apache Tomcat Improper Privilege Management Vulnerability
High[CISA KEV] CVE-2021-41379: Microsoft Windows - Microsoft Windows Installer Privilege Escalation Vulnerability
High[CISA KEV] CVE-2022-20699: Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers - Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2022-20700: Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers - Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2022-20701: Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers - Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2022-20703: Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers - Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2022-20708: Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers - Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2009-3960: Adobe BlazeDS - Adobe BlazeDS Information Disclosure Vulnerability
High[CISA KEV] CVE-2013-0625: Adobe ColdFusion - Adobe ColdFusion Authentication Bypass Vulnerability
High[CISA KEV] CVE-2016-6277: NETGEAR Multiple Routers - NETGEAR Multiple Routers Remote Code Execution Vulnerability
High[CISA KEV] CVE-2017-6077: NETGEAR Wireless Router DGN2200 - NETGEAR DGN2200 Remote Code Execution Vulnerability
High[CISA KEV] CVE-2019-11581: Atlassian Jira Server and Data Center - Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
High[CISA KEV] CVE-2021-21973: VMware vCenter Server and Cloud Foundation - VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
High[CISA KEV] CVE-2015-2546: Microsoft Win32k - Microsoft Win32k Memory Corruption Vulnerability
High[CISA KEV] CVE-2016-3309: Microsoft Windows - Microsoft Windows Kernel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2017-0101: Microsoft Windows - Microsoft Windows Transaction Manager Privilege Escalation Vulnerability
High[CISA KEV] CVE-2018-8120: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-0543: Microsoft Windows - Microsoft Windows Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-0841: Microsoft Windows - Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-1064: Microsoft Windows - Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-1069: Microsoft Task Scheduler - Microsoft Task Scheduler Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-1129: Microsoft Windows - Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-1132: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-1253: Microsoft Windows - Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-1315: Microsoft Windows - Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-1322: Microsoft Windows - Microsoft Windows Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-1405: Microsoft Windows - Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
High[CISA KEV] CVE-2020-5135: SonicWall SonicOS - SonicWall SonicOS Buffer Overflow Vulnerability
High[CISA KEV] CVE-2005-2773: Hewlett Packard (HP) OpenView Network Node Manager - HP OpenView Network Node Manager Remote Code Execution Vulnerability
High[CISA KEV] CVE-2009-0927: Adobe Reader and Acrobat - Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2009-2055: Cisco IOS XR - Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
High[CISA KEV] CVE-2010-3035: Cisco IOS XR - Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
High[CISA KEV] CVE-2010-4345: Exim Exim - Exim Privilege Escalation Vulnerability
High[CISA KEV] CVE-2012-1823: PHP PHP - PHP-CGI Query String Parameter Vulnerability
High[CISA KEV] CVE-2013-2251: Apache Struts - Apache Struts Improper Input Validation Vulnerability
High[CISA KEV] CVE-2013-4810: Hewlett Packard (HP) ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management - HP Multiple Products Remote Code Execution Vulnerability
High[CISA KEV] CVE-2014-0130: Rails Ruby on Rails - Ruby on Rails Directory Traversal Vulnerability
High[CISA KEV] CVE-2014-6287: Rejetto HTTP File Server (HFS) - Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability
High[CISA KEV] CVE-2014-6324: Microsoft Kerberos Key Distribution Center (KDC) - Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
High[CISA KEV] CVE-2014-6332: Microsoft Windows - Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
High[CISA KEV] CVE-2015-1187: D-Link and TRENDnet Multiple Devices - D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
High[CISA KEV] CVE-2015-1427: Elastic Elasticsearch - Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
High[CISA KEV] CVE-2015-3035: TP-Link Multiple Archer Devices - TP-Link Multiple Archer Devices Directory Traversal Vulnerability
High[CISA KEV] CVE-2015-4068: Arcserve Unified Data Protection (UDP) - Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability
High[CISA KEV] CVE-2016-0752: Rails Ruby on Rails - Ruby on Rails Directory Traversal Vulnerability
High[CISA KEV] CVE-2016-10174: NETGEAR WNR2000v5 Router - NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
High[CISA KEV] CVE-2016-11021: D-Link DCS-930L Devices - D-Link DCS-930L Devices OS Command Injection Vulnerability
High[CISA KEV] CVE-2016-1555: NETGEAR Wireless Access Point (WAP) Devices - NETGEAR Multiple WAP Devices Command Injection Vulnerability
High[CISA KEV] CVE-2016-4171: Adobe Flash Player - Adobe Flash Player Remote Code Execution Vulnerability
High[CISA KEV] CVE-2016-7892: Adobe Flash Player - Adobe Flash Player Use-After-Free Vulnerability
High[CISA KEV] CVE-2017-0146: Microsoft Windows - Microsoft Windows SMB Remote Code Execution Vulnerability
High[CISA KEV] CVE-2017-6316: Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server - Citrix Multiple Products Remote Code Execution Vulnerability
High[CISA KEV] CVE-2017-6334: NETGEAR DGN2200 Devices - NETGEAR DGN2200 Devices OS Command Injection Vulnerability
High[CISA KEV] CVE-2018-11138: Quest KACE System Management Appliance - Quest KACE System Management Appliance Remote Command Execution Vulnerability
High[CISA KEV] CVE-2018-8373: Microsoft Internet Explorer Scripting Engine - Microsoft Scripting Engine Memory Corruption Vulnerability
High[CISA KEV] CVE-2018-8414: Microsoft Windows - Microsoft Windows Shell Remote Code Execution Vulnerability
High[CISA KEV] CVE-2019-0903: Microsoft Graphics Device Interface (GDI) - Microsoft GDI Remote Code Execution Vulnerability
High[CISA KEV] CVE-2019-12989: Citrix SD-WAN and NetScaler - Citrix SD-WAN and NetScaler SQL Injection Vulnerability
High[CISA KEV] CVE-2019-12991: Citrix SD-WAN and NetScaler - Citrix SD-WAN and NetScaler Command Injection Vulnerability
High[CISA KEV] CVE-2019-2616: Oracle BI Publisher (Formerly XML Publisher) - Oracle BI Publisher Unauthorized Access Vulnerability
High[CISA KEV] CVE-2020-2506: QNAP Systems Helpdesk - QNAP Helpdesk Improper Access Control Vulnerability
High[CISA KEV] CVE-2020-5410: VMware Tanzu Spring Cloud Configuration (Config) Server - VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
High[CISA KEV] CVE-2020-7247: OpenBSD OpenSMTPD - OpenSMTPD Remote Code Execution Vulnerability
High[CISA KEV] CVE-2022-21999: Microsoft Windows - Microsoft Windows Print Spooler Privilege Escalation Vulnerability
High[CISA KEV] CVE-2022-26143: Mitel MiCollab, MiVoice Business Express - MiCollab, MiVoice Business Express Access Control Vulnerability
High[CISA KEV] CVE-2010-4398: Microsoft Windows - Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2012-2034: Adobe Flash Player - Adobe Flash Player Memory Corruption Vulnerability
High[CISA KEV] CVE-2012-5076: Oracle Java SE - Oracle Java SE Sandbox Bypass Vulnerability
High[CISA KEV] CVE-2013-2465: Oracle Java SE - Oracle Java SE Unspecified Vulnerability
High[CISA KEV] CVE-2013-2551: Microsoft Internet Explorer - Microsoft Internet Explorer Use-After-Free Vulnerability
High[CISA KEV] CVE-2013-2729: Adobe Reader and Acrobat - Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability
High[CISA KEV] CVE-2013-3660: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2015-1770: Microsoft Office - Microsoft Office Uninitialized Memory Use Vulnerability
High[CISA KEV] CVE-2015-2426: Microsoft Windows - Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability
High[CISA KEV] CVE-2016-0040: Microsoft Windows - Microsoft Windows Kernel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2016-0189: Microsoft Internet Explorer - Microsoft Internet Explorer Memory Corruption Vulnerability
High[CISA KEV] CVE-2016-7200: Microsoft Edge - Microsoft Edge Memory Corruption Vulnerability
High[CISA KEV] CVE-2016-7201: Microsoft Edge - Microsoft Edge Memory Corruption Vulnerability
High[CISA KEV] CVE-2017-0059: Microsoft Internet Explorer - Microsoft Internet Explorer Information Disclosure Vulnerability
High[CISA KEV] CVE-2018-8406: Microsoft DirectX Graphics Kernel (DXGKRNL) - Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2018-8440: Microsoft Windows - Microsoft Windows Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-26085: Atlassian Confluence Server - Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
High[CISA KEV] CVE-2021-34486: Microsoft Windows - Microsoft Windows Event Tracing Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-38646: Microsoft Office - Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
High[CISA KEV] CVE-2018-10561: Dasan Gigabit Passive Optical Network (GPON) Routers - Dasan GPON Routers Authentication Bypass Vulnerability
High[CISA KEV] CVE-2021-28799: QNAP Network Attached Storage (NAS) - QNAP NAS Improper Authorization Vulnerability
High[CISA KEV] CVE-2021-34484: Microsoft Windows - Microsoft Windows User Profile Service Privilege Escalation Vulnerability
High[CISA KEV] CVE-2022-22674: Apple macOS - Apple macOS Out-of-Bounds Read Vulnerability
High[CISA KEV] CVE-2022-22675: Apple macOS - Apple macOS Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2021-22600: Linux Kernel - Linux Kernel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-27852: Checkbox Checkbox Survey - Checkbox Survey Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2021-39793: Google Pixel - Google Pixel Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2014-9163: Adobe Flash Player - Adobe Flash Player Stack-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2015-0311: Adobe Flash Player - Adobe Flash Player Remote Code Execution Vulnerability
High[CISA KEV] CVE-2015-0313: Adobe Flash Player - Adobe Flash Player Use-After-Free Vulnerability
High[CISA KEV] CVE-2015-2502: Microsoft Internet Explorer - Microsoft Internet Explorer Memory Corruption Vulnerability
High[CISA KEV] CVE-2022-24521: Microsoft Windows - Microsoft Windows CLFS Driver Privilege Escalation Vulnerability
High[CISA KEV] CVE-2007-3010: Alcatel OmniPCX Enterprise - Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability
High[CISA KEV] CVE-2010-5330: Ubiquiti AirOS - Ubiquiti AirOS Command Injection Vulnerability
High[CISA KEV] CVE-2014-0780: InduSoft Web Studio - InduSoft Web Studio NTWebServer Directory Traversal Vulnerability
High[CISA KEV] CVE-2022-22960: VMware Multiple Products - VMware Multiple Products Privilege Escalation Vulnerability
High[CISA KEV] CVE-2022-22718: Microsoft Windows - Microsoft Windows Print Spooler Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-1003029: Jenkins Script Security Plugin - Jenkins Script Security Plugin Sandbox Bypass Vulnerability
High[CISA KEV] CVE-2021-40450: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-41357: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2022-21919: Microsoft Windows - Microsoft Windows User Profile Service Privilege Escalation Vulnerability
High[CISA KEV] CVE-2022-26904: Microsoft Windows - Microsoft Windows User Profile Service Privilege Escalation Vulnerability
High[CISA KEV] CVE-2022-29464: WSO2 Multiple Products - WSO2 Multiple Products Unrestrictive Upload of File Vulnerability
High[CISA KEV] CVE-2014-4113: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-8506: Apple Multiple Products - Apple Multiple Products Type Confusion Vulnerability
High[CISA KEV] CVE-2021-1789: Apple Multiple Products - Apple Multiple Products Type Confusion Vulnerability
High[CISA KEV] CVE-2022-22947: VMware Spring Cloud Gateway - VMware Spring Cloud Gateway Code Injection Vulnerability
High[CISA KEV] CVE-2022-30525: Zyxel Multiple Firewalls - Zyxel Multiple Firewalls OS Command Injection Vulnerability
High[CISA KEV] CVE-2018-8589: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2018-5002: Adobe Flash Player - Adobe Flash Player Stack-based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2019-1130: Microsoft Windows - Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-1385: Microsoft Windows - Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
High[CISA KEV] CVE-2019-18426: Meta Platforms WhatsApp - WhatsApp Cross-Site Scripting Vulnerability
High[CISA KEV] CVE-2019-8720: WebKitGTK WebKitGTK - WebKitGTK Memory Corruption Vulnerability
High[CISA KEV] CVE-2019-11708: Mozilla Firefox and Thunderbird - Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
High[CISA KEV] CVE-2019-11707: Mozilla Firefox and Thunderbird - Mozilla Firefox and Thunderbird Type Confusion Vulnerability
High[CISA KEV] CVE-2019-13720: Google Chrome WebAudio - Google Chrome WebAudio Use-After-Free Vulnerability
High[CISA KEV] CVE-2019-7287: Apple iOS - Apple iOS Memory Corruption Vulnerability
High[CISA KEV] CVE-2019-7286: Apple Multiple Products - Apple Multiple Products Memory Corruption Vulnerability
High[CISA KEV] CVE-2020-0638: Microsoft Update Notification Manager - Microsoft Update Notification Manager Privilege Escalation Vulnerability
High[CISA KEV] CVE-2020-1027: Microsoft Windows - Microsoft Windows Kernel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2021-30883: Apple Multiple Products - Apple Multiple Products Memory Corruption Vulnerability
High[CISA KEV] CVE-2021-0920: Android Kernel - Android Kernel Race Condition Vulnerability
High[CISA KEV] CVE-2021-1048: Android Kernel - Android Kernel Use-After-Free Vulnerability
High[CISA KEV] CVE-2022-20821: Cisco IOS XR - Cisco IOS XR Open Port Vulnerability
High[CISA KEV] CVE-2016-6366: Cisco Adaptive Security Appliance (ASA) - Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
High[CISA KEV] CVE-2016-4657: Apple iOS - Apple iOS Webkit Memory Corruption Vulnerability
High[CISA KEV] CVE-2016-4656: Apple iOS - Apple iOS Memory Corruption Vulnerability
High[CISA KEV] CVE-2017-8543: Microsoft Windows - Microsoft Windows Search Remote Code Execution Vulnerability
High[CISA KEV] CVE-2017-0210: Microsoft Internet Explorer - Microsoft Internet Explorer Privilege Escalation Vulnerability
High[CISA KEV] CVE-2017-0149: Microsoft Internet Explorer - Microsoft Internet Explorer Memory Corruption Vulnerability
High[CISA KEV] CVE-2017-0005: Microsoft Windows - Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability
High[CISA KEV] CVE-2018-19953: QNAP Network Attached Storage (NAS) - QNAP NAS File Station Cross-Site Scripting Vulnerability
High[CISA KEV] CVE-2010-0738: Red Hat JBoss - Red Hat JBoss Authentication Bypass Vulnerability
High[CISA KEV] CVE-2010-0840: Oracle Java Runtime Environment (JRE) - Oracle JRE Unspecified Vulnerability
High[CISA KEV] CVE-2012-1710: Oracle Fusion Middleware - Oracle Fusion Middleware Unspecified Vulnerability
High[CISA KEV] CVE-2013-0422: Oracle Java Runtime Environment (JRE) - Oracle JRE Remote Code Execution Vulnerability
High[CISA KEV] CVE-2014-4123: Microsoft Internet Explorer - Microsoft Internet Explorer Privilege Escalation Vulnerability
High[CISA KEV] CVE-2014-8439: Adobe Flash Player - Adobe Flash Player Dereferenced Pointer Vulnerability
High[CISA KEV] CVE-2014-4148: Microsoft Windows - Microsoft Windows Remote Code Execution Vulnerability
High[CISA KEV] CVE-2015-6175: Microsoft Windows - Microsoft Windows Kernel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2015-4495: Mozilla Firefox - Mozilla Firefox Security Feature Bypass Vulnerability
High[CISA KEV] CVE-2015-1769: Microsoft Windows - Microsoft Windows Mount Manager Privilege Escalation Vulnerability
High[CISA KEV] CVE-2016-3393: Microsoft Windows - Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability
High[CISA KEV] CVE-2019-3010: Oracle Solaris - Oracle Solaris Privilege Escalation Vulnerability
High[CISA KEV] CVE-2006-2492: Microsoft Word - Microsoft Word Malformed Object Pointer Vulnerability
High[CISA KEV] CVE-2007-5659: Adobe Acrobat and Reader - Adobe Acrobat and Reader Buffer Overflow Vulnerability
High[CISA KEV] CVE-2009-0557: Microsoft Office - Microsoft Office Object Record Corruption Vulnerability
High[CISA KEV] CVE-2009-1862: Adobe Acrobat and Reader, Flash Player - Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
High[CISA KEV] CVE-2009-3953: Adobe Acrobat and Reader - Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
High[CISA KEV] CVE-2009-4324: Adobe Acrobat and Reader - Adobe Acrobat and Reader Use-After-Free Vulnerability
High[CISA KEV] CVE-2010-1297: Adobe Flash Player - Adobe Flash Player Memory Corruption Vulnerability
High[CISA KEV] CVE-2010-2572: Microsoft PowerPoint - Microsoft PowerPoint Buffer Overflow Vulnerability
High[CISA KEV] CVE-2010-2883: Adobe Acrobat and Reader - Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2011-0609: Adobe Flash Player - Adobe Flash Player Unspecified Vulnerability
High[CISA KEV] CVE-2011-2462: Adobe Reader and Acrobat - Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
High[CISA KEV] CVE-2012-0151: Microsoft Windows - Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability
High[CISA KEV] CVE-2012-1889: Microsoft XML Core Services - Microsoft XML Core Services Memory Corruption Vulnerability
High[CISA KEV] CVE-2012-4969: Microsoft Internet Explorer - Microsoft Internet Explorer Use-After-Free Vulnerability
High[CISA KEV] CVE-2012-5054: Adobe Flash Player - Adobe Flash Player Integer Overflow Vulnerability
High[CISA KEV] CVE-2013-1331: Microsoft Office - Microsoft Office Buffer Overflow Vulnerability
High[CISA KEV] CVE-2016-5198: Google Chromium V8 - Google Chromium V8 Out-of-Bounds Memory Vulnerability
High[CISA KEV] CVE-2017-5030: Google Chromium V8 - Google Chromium V8 Memory Corruption Vulnerability
High[CISA KEV] CVE-2017-5070: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
High[CISA KEV] CVE-2019-5825: Google Chromium V8 - Google Chromium V8 Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2016-2388: SAP NetWeaver - SAP NetWeaver Information Disclosure Vulnerability
High[CISA KEV] CVE-2016-2386: SAP NetWeaver - SAP NetWeaver SQL Injection Vulnerability
High[CISA KEV] CVE-2021-38163: SAP NetWeaver - SAP NetWeaver Unrestricted File Upload Vulnerability
High[CISA KEV] CVE-2022-30190: Microsoft Windows - Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
High[CISA KEV] CVE-2019-8605: Apple Multiple Products - Apple Multiple Products Use-After-Free Vulnerability
High[CISA KEV] CVE-2021-30983: Apple iOS and iPadOS - Apple iOS and iPadOS Buffer Overflow Vulnerability
High[CISA KEV] CVE-2021-30533: Google Chromium PopupBlocker - Google Chromium PopupBlocker Security Bypass Vulnerability
High[CISA KEV] CVE-2022-29499: Mitel MiVoice Connect - Mitel MiVoice Connect Data Validation Vulnerability
High[CISA KEV] CVE-2022-26925: Microsoft Windows - Microsoft Windows LSA Spoofing Vulnerability
High[CISA KEV] CVE-2022-22047: Microsoft Windows - Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability
High[CISA KEV] CVE-2022-26138: Atlassian Confluence - Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability
High[CISA KEV] CVE-2022-27924: Synacor Zimbra Collaboration Suite (ZCS) - Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
High[CISA KEV] CVE-2022-30333: RARLAB UnRAR - RARLAB UnRAR Directory Traversal Vulnerability
High[CISA KEV] CVE-2022-37042: Synacor Zimbra Collaboration Suite (ZCS) - Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability
High[CISA KEV] CVE-2017-15944: Palo Alto Networks PAN-OS - Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
High[CISA KEV] CVE-2022-21971: Microsoft Windows - Microsoft Windows Runtime Remote Code Execution Vulnerability
High[CISA KEV] CVE-2022-2856: Google Chromium Intents - Google Chromium Intents Insufficient Input Validation Vulnerability
High[CISA KEV] CVE-2022-22536: SAP Multiple Products - SAP Multiple Products HTTP Request Smuggling Vulnerability
High[CISA KEV] CVE-2020-28949: PEAR Archive_Tar - PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2020-36193: PEAR Archive_Tar - PEAR Archive_Tar Improper Link Resolution Vulnerability
High[CISA KEV] CVE-2021-31010: Apple iOS, macOS, watchOS - Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability
High[CISA KEV] CVE-2021-39226: Grafana Labs Grafana - Grafana Authentication Bypass Vulnerability
High[CISA KEV] CVE-2022-24112: Apache APISIX - Apache APISIX Authentication Bypass Vulnerability
High[CISA KEV] CVE-2011-4723: D-Link DIR-300 Router - D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
High[CISA KEV] CVE-2017-5521: NETGEAR Multiple Devices - NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
High[CISA KEV] CVE-2018-13374: Fortinet FortiOS and FortiADC - Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
High[CISA KEV] CVE-2018-7445: MikroTik RouterOS - MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2022-26258: D-Link DIR-820L - D-Link DIR-820L Remote Code Execution Vulnerability
High[CISA KEV] CVE-2022-27593: QNAP Photo Station - QNAP Photo Station Externally Controlled Reference Vulnerability
High[CISA KEV] CVE-2022-3075: Google Chromium Mojo - Google Chromium Mojo Insufficient Data Validation Vulnerability
High[CISA KEV] CVE-2022-32917: Apple iOS, iPadOS, and macOS - Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability
High[CISA KEV] CVE-2022-37969: Microsoft Windows - Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
High[CISA KEV] CVE-2010-2568: Microsoft Windows - Microsoft Windows Remote Code Execution Vulnerability
High[CISA KEV] CVE-2013-2596: Linux Kernel - Linux Kernel Integer Overflow Vulnerability
High[CISA KEV] CVE-2013-6282: Linux Kernel - Linux Kernel Improper Input Validation Vulnerability
High[CISA KEV] CVE-2022-40139: Trend Micro Apex One and Apex One as a Service - Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability
High[CISA KEV] CVE-2022-36804: Atlassian Bitbucket Server and Data Center - Atlassian Bitbucket Server and Data Center Command Injection Vulnerability
High[CISA KEV] CVE-2021-3493: Linux Kernel - Linux Kernel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2022-41352: Synacor Zimbra Collaboration Suite (ZCS) - Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
High[CISA KEV] CVE-2018-19321: GIGABYTE Multiple Products - GIGABYTE Multiple Products Privilege Escalation Vulnerability
High[CISA KEV] CVE-2018-19323: GIGABYTE Multiple Products - GIGABYTE Multiple Products Privilege Escalation Vulnerability
High[CISA KEV] CVE-2020-3433: Cisco AnyConnect Secure - Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
High[CISA KEV] CVE-2021-25337: Samsung Mobile Devices - Samsung Mobile Devices Improper Access Control Vulnerability
High[CISA KEV] CVE-2022-4262: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
High[CISA KEV] CVE-2022-41223: Mitel MiVoice Connect - Mitel MiVoice Connect Code Injection Vulnerability
High[CISA KEV] CVE-2022-33891: Apache Spark - Apache Spark Command Injection Vulnerability
High[CISA KEV] CVE-2022-41328: Fortinet FortiOS - Fortinet FortiOS Path Traversal Vulnerability
High[CISA KEV] CVE-2023-2136: Google Chromium Skia - Google Chrome Skia Integer Overflow Vulnerability
High[CISA KEV] CVE-2023-27350: PaperCut MF/NG - PaperCut MF/NG Improper Access Control Vulnerability
High[CISA KEV] CVE-2023-28432: MinIO MinIO - MinIO Information Disclosure Vulnerability
High[CISA KEV] CVE-2023-29336: Microsoft Win32k - Microsoft Win32K Privilege Escalation Vulnerability
High[CISA KEV] CVE-2016-3427: Oracle Java SE and JRockit - Oracle Java SE and JRockit Unspecified Vulnerability
High[CISA KEV] CVE-2014-0196: Linux Kernel - Linux Kernel Race Condition Vulnerability
High[CISA KEV] CVE-2021-3560: Red Hat Polkit - Red Hat Polkit Incorrect Authorization Vulnerability
High[CISA KEV] CVE-2023-25717: Ruckus Wireless Multiple Products - Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
High[CISA KEV] CVE-2023-21492: Samsung Mobile Devices - Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
High[CISA KEV] CVE-2016-6415: Cisco IOS, IOS XR, and IOS XE - Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
High[CISA KEV] CVE-2023-2868: Barracuda Networks Email Security Gateway (ESG) Appliance - Barracuda Networks ESG Appliance Improper Input Validation Vulnerability
High[CISA KEV] CVE-2023-28771: Zyxel Multiple Firewalls - Zyxel Multiple Firewalls OS Command Injection Vulnerability
High[CISA KEV] CVE-2023-34362: Progress MOVEit Transfer - Progress MOVEit Transfer SQL Injection Vulnerability
High[CISA KEV] CVE-2023-33010: Zyxel Multiple Firewalls - Zyxel Multiple Firewalls Buffer Overflow Vulnerability
High[CISA KEV] CVE-2023-3079: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
High[CISA KEV] CVE-2016-0165: Microsoft Win32k - Microsoft Win32k Privilege Escalation Vulnerability
High[CISA KEV] CVE-2016-9079: Mozilla Firefox, Firefox ESR, and Thunderbird - Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
High[CISA KEV] CVE-2021-44026: Roundcube Roundcube Webmail - Roundcube Webmail SQL Injection Vulnerability
High[CISA KEV] CVE-2020-12641: Roundcube Roundcube Webmail - Roundcube Webmail Remote Code Execution Vulnerability
High[CISA KEV] CVE-2023-20887: VMware Aria Operations for Networks - Vmware Aria Operations for Networks Command Injection Vulnerability
High[CISA KEV] CVE-2023-27992: Zyxel Multiple Network-Attached Storage (NAS) Devices - Zyxel Multiple NAS Devices Command Injection Vulnerability
High[CISA KEV] CVE-2023-20867: VMware Tools - VMware Tools Authentication Bypass Vulnerability
High[CISA KEV] CVE-2023-32439: Apple Multiple Products - Apple Multiple Products WebKit Type Confusion Vulnerability
High[CISA KEV] CVE-2021-25372: Samsung Mobile Devices - Samsung Mobile Devices Improper Boundary Check Vulnerability
High[CISA KEV] CVE-2021-25371: Samsung Mobile Devices - Samsung Mobile Devices Unspecified Vulnerability
High[CISA KEV] CVE-2021-25395: Samsung Mobile Devices - Samsung Mobile Devices Race Condition Vulnerability
High[CISA KEV] CVE-2021-25394: Samsung Mobile Devices - Samsung Mobile Devices Race Condition Vulnerability
High[CISA KEV] CVE-2021-25489: Samsung Mobile Devices - Samsung Mobile Devices Improper Input Validation Vulnerability
High[CISA KEV] CVE-2019-20500: D-Link DWL-2600AP Access Point - D-Link DWL-2600AP Access Point Command Injection Vulnerability
High[CISA KEV] CVE-2021-29256: Arm Mali Graphics Processing Unit (GPU) - Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
High[CISA KEV] CVE-2023-36874: Microsoft Windows - Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability
High[CISA KEV] CVE-2023-35311: Microsoft Outlook - Microsoft Outlook Security Feature Bypass Vulnerability
High[CISA KEV] CVE-2023-32049: Microsoft Windows - Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability
High[CISA KEV] CVE-2023-32046: Microsoft Windows - Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability
High[CISA KEV] CVE-2023-37450: Apple Multiple Products - Apple Multiple Products WebKit Code Execution Vulnerability
High[CISA KEV] CVE-2022-29303: SolarView Compact - SolarView Compact Command Injection Vulnerability
High[CISA KEV] CVE-2023-38205: Adobe ColdFusion - Adobe ColdFusion Improper Access Control Vulnerability
High[CISA KEV] CVE-2023-29298: Adobe ColdFusion - Adobe ColdFusion Improper Access Control Vulnerability
High[CISA KEV] CVE-2023-35078: Ivanti Endpoint Manager Mobile (EPMM) - Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
High[CISA KEV] CVE-2023-38606: Apple Multiple Products - Apple Multiple Products Kernel Unspecified Vulnerability
High[CISA KEV] CVE-2023-37580: Synacor Zimbra Collaboration Suite (ZCS) - Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
High[CISA KEV] CVE-2023-35081: Ivanti Endpoint Manager Mobile (EPMM) - Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
High[CISA KEV] CVE-2017-18368: Zyxel P660HN-T1A Routers - Zyxel P660HN-T1A Routers Command Injection Vulnerability
High[CISA KEV] CVE-2023-38180: Microsoft .NET Core and Visual Studio - Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
High[CISA KEV] CVE-2023-26359: Adobe ColdFusion - Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2023-32315: Ignite Realtime Openfire - Ignite Realtime Openfire Path Traversal Vulnerability
High[CISA KEV] CVE-2023-38831: RARLAB WinRAR - RARLAB WinRAR Code Execution Vulnerability
High[CISA KEV] CVE-2023-33246: Apache RocketMQ - Apache RocketMQ Command Execution Vulnerability
High[CISA KEV] CVE-2023-41061: Apple iOS, iPadOS, and watchOS - Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability
High[CISA KEV] CVE-2023-4863: Google Chromium WebP - Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2023-35674: Android Framework - Android Framework Privilege Escalation Vulnerability
High[CISA KEV] CVE-2023-26369: Adobe Acrobat and Reader - Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2017-6884: Zyxel EMG2926 Routers - Zyxel EMG2926 Routers Command Injection Vulnerability
High[CISA KEV] CVE-2014-8361: Realtek SDK - Realtek SDK Improper Input Validation Vulnerability
High[CISA KEV] CVE-2022-22265: Samsung Mobile Devices - Samsung Mobile Devices Use-After-Free Vulnerability
High[CISA KEV] CVE-2023-28434: MinIO MinIO - MinIO Security Feature Bypass Vulnerability
High[CISA KEV] CVE-2023-41993: Apple Multiple Products - Apple Multiple Products WebKit Code Execution Vulnerability
High[CISA KEV] CVE-2023-41992: Apple Multiple Products - Apple Multiple Products Kernel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2018-14667: Red Hat JBoss RichFaces Framework - Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
High[CISA KEV] CVE-2023-4211: Arm Mali GPU Kernel Driver - Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
High[CISA KEV] CVE-2023-42824: Apple iOS and iPadOS - Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2023-40044: Progress WS_FTP Server - Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2023-44487: IETF HTTP/2 - HTTP/2 Rapid Reset Attack Vulnerability
High[CISA KEV] CVE-2023-20109: Cisco IOS and IOS XE - Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2023-4966: Citrix NetScaler ADC and NetScaler Gateway - Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
High[CISA KEV] CVE-2023-20273: Cisco Cisco IOS XE Web UI - Cisco IOS XE Web UI Command Injection Vulnerability
High[CISA KEV] CVE-2023-46748: F5 BIG-IP Configuration Utility - F5 BIG-IP Configuration Utility SQL Injection Vulnerability
High[CISA KEV] CVE-2023-29552: IETF Service Location Protocol (SLP) - Service Location Protocol (SLP) Denial-of-Service Vulnerability
High[CISA KEV] CVE-2023-36851: Juniper Junos OS - Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
High[CISA KEV] CVE-2023-36847: Juniper Junos OS - Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability
High[CISA KEV] CVE-2023-36846: Juniper Junos OS - Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
High[CISA KEV] CVE-2023-36844: Juniper Junos OS - Juniper Junos OS EX Series PHP External Variable Modification Vulnerability
High[CISA KEV] CVE-2023-36036: Microsoft Windows - Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability
High[CISA KEV] CVE-2023-36025: Microsoft Windows - Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
High[CISA KEV] CVE-2023-36033: Microsoft Windows - Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
High[CISA KEV] CVE-2023-36584: Microsoft Windows - Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
High[CISA KEV] CVE-2023-4911: GNU GNU C Library - GNU C Library Buffer Overflow Vulnerability
High[CISA KEV] CVE-2023-49103: ownCloud ownCloud graphapi - ownCloud graphapi Information Disclosure Vulnerability
High[CISA KEV] CVE-2023-6345: Google Chromium Skia - Google Skia Integer Overflow Vulnerability
High[CISA KEV] CVE-2023-42917: Apple Multiple Products - Apple Multiple Products WebKit Memory Corruption Vulnerability
High[CISA KEV] CVE-2022-22071: Qualcomm Multiple Chipsets - Qualcomm Multiple Chipsets Use-After-Free Vulnerability
High[CISA KEV] CVE-2023-33063: Qualcomm Multiple Chipsets - Qualcomm Multiple Chipsets Use-After-Free Vulnerability
High[CISA KEV] CVE-2023-33106: Qualcomm Multiple Chipsets - Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability
High[CISA KEV] CVE-2023-33107: Qualcomm Multiple Chipsets - Qualcomm Multiple Chipsets Integer Overflow Vulnerability
High[CISA KEV] CVE-2023-41265: Qlik Sense - Qlik Sense HTTP Tunneling Vulnerability
High[CISA KEV] CVE-2023-41266: Qlik Sense - Qlik Sense Path Traversal Vulnerability
High[CISA KEV] CVE-2023-6448: Unitronics Vision PLC and HMI - Unitronics Vision PLC and HMI Insecure Default Password Vulnerability
High[CISA KEV] CVE-2023-47565: QNAP VioStor NVR - QNAP VioStor NVR OS Command Injection Vulnerability
High[CISA KEV] CVE-2023-49897: FXC AE1021, AE1021PE - FXC AE1021, AE1021PE OS Command Injection Vulnerability
High[CISA KEV] CVE-2023-7024: Google Chromium WebRTC - Google Chromium WebRTC Heap Buffer Overflow Vulnerability
High[CISA KEV] CVE-2023-27524: Apache Superset - Apache Superset Insecure Default Initialization of Resource Vulnerability
High[CISA KEV] CVE-2016-20017: D-Link DSL-2750B Devices - D-Link DSL-2750B Devices Command Injection Vulnerability
High[CISA KEV] CVE-2023-23752: Joomla! Joomla! - Joomla! Improper Access Control Vulnerability
High[CISA KEV] CVE-2023-6549: Citrix NetScaler ADC and NetScaler Gateway - Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
High[CISA KEV] CVE-2024-0519: Google Chromium V8 - Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
High[CISA KEV] CVE-2023-35082: Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core - Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
High[CISA KEV] CVE-2024-23222: Apple Multiple Products - Apple Multiple Products WebKit Type Confusion Vulnerability
High[CISA KEV] CVE-2024-21893: Ivanti Connect Secure, Policy Secure, and Neurons - Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
High[CISA KEV] CVE-2023-43770: Roundcube Webmail - Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
High[CISA KEV] CVE-2024-21351: Microsoft Windows - Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
High[CISA KEV] CVE-2024-21412: Microsoft Windows - Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability
High[CISA KEV] CVE-2020-3259: Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) - Cisco ASA and FTD Information Disclosure Vulnerability
High[CISA KEV] CVE-2024-21338: Microsoft Windows - Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability
High[CISA KEV] CVE-2021-36380: Sunhillo SureLine - Sunhillo SureLine OS Command Injection Vulnerablity
High[CISA KEV] CVE-2024-27198: JetBrains TeamCity - JetBrains TeamCity Authentication Bypass Vulnerability
High[CISA KEV] CVE-2021-44529: Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) - Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
High[CISA KEV] CVE-2023-24955: Microsoft SharePoint Server - Microsoft SharePoint Server Code Injection Vulnerability
High[CISA KEV] CVE-2024-29745: Android Pixel - Android Pixel Information Disclosure Vulnerability
High[CISA KEV] CVE-2024-29748: Android Pixel - Android Pixel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2024-3272: D-Link Multiple NAS Devices - D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
High[CISA KEV] CVE-2024-3273: D-Link Multiple NAS Devices - D-Link Multiple NAS Devices Command Injection Vulnerability
High[CISA KEV] CVE-2024-20353: Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) - Cisco ASA and FTD Denial of Service Vulnerability
High[CISA KEV] CVE-2024-20359: Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) - Cisco ASA and FTD Privilege Escalation Vulnerability
High[CISA KEV] CVE-2024-4040: CrushFTP CrushFTP - CrushFTP VFS Sandbox Escape Vulnerability
High[CISA KEV] CVE-2024-29988: Microsoft SmartScreen Prompt - Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
High[CISA KEV] CVE-2023-7028: GitLab GitLab CE/EE - GitLab Community and Enterprise Editions Improper Access Control Vulnerability
High[CISA KEV] CVE-2024-4671: Google Chromium - Google Chromium Visuals Use-After-Free Vulnerability
High[CISA KEV] CVE-2024-30040: Microsoft Windows - Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability
High[CISA KEV] CVE-2021-40655: D-Link DIR-605 Router - D-Link DIR-605 Router Information Disclosure Vulnerability
High[CISA KEV] CVE-2024-4761: Google Chromium V8 - Google Chromium V8 Out-of-Bounds Memory Write Vulnerability
High[CISA KEV] CVE-2020-17519: Apache Flink - Apache Flink Improper Access Control Vulnerability
High[CISA KEV] CVE-2024-5274: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
High[CISA KEV] CVE-2024-4978: Justice AV Solutions Viewer - Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability
High[CISA KEV] CVE-2024-24919: Check Point Quantum Security Gateways - Check Point Quantum Security Gateways Information Disclosure Vulnerability
High[CISA KEV] CVE-2024-1086: Linux Kernel - Linux Kernel Use-After-Free Vulnerability
High[CISA KEV] CVE-2024-4610: Arm Mali GPU Kernel Driver - Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
High[CISA KEV] CVE-2024-4577: PHP Group PHP - PHP-CGI OS Command Injection Vulnerability
High[CISA KEV] CVE-2024-32896: Android Pixel - Android Pixel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2024-4358: Progress Telerik Report Server - Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
High[CISA KEV] CVE-2022-2586: Linux Kernel - Linux Kernel Use-After-Free Vulnerability
High[CISA KEV] CVE-2020-13965: Roundcube Webmail - Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
High[CISA KEV] CVE-2024-20399: Cisco NX-OS - Cisco NX-OS Command Injection Vulnerability
High[CISA KEV] CVE-2024-38112: Microsoft Windows - Microsoft Windows MSHTML Platform Spoofing Vulnerability
High[CISA KEV] CVE-2024-38080: Microsoft Windows - Microsoft Windows Hyper-V Privilege Escalation Vulnerability
High[CISA KEV] CVE-2024-36401: OSGeo GeoServer - OSGeo GeoServer GeoTools Eval Injection Vulnerability
High[CISA KEV] CVE-2024-34102: Adobe Commerce and Magento Open Source - Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
High[CISA KEV] CVE-2024-28995: SolarWinds Serv-U - SolarWinds Serv-U Path Traversal Vulnerability
High[CISA KEV] CVE-2012-4792: Microsoft Internet Explorer - Microsoft Internet Explorer Use-After-Free Vulnerability
High[CISA KEV] CVE-2024-5217: ServiceNow Utah, Vancouver, and Washington DC Now Platform - ServiceNow Incomplete List of Disallowed Inputs Vulnerability
High[CISA KEV] CVE-2023-45249: Acronis Cyber Infrastructure (ACI) - Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability
High[CISA KEV] CVE-2018-0824: Microsoft Windows - Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2024-36971: Android Kernel - Android Kernel Remote Code Execution Vulnerability
High[CISA KEV] CVE-2024-32113: Apache OFBiz - Apache OFBiz Path Traversal Vulnerability
High[CISA KEV] CVE-2024-38189: Microsoft Project - Microsoft Project Remote Code Execution Vulnerability
High[CISA KEV] CVE-2024-38213: Microsoft Windows - Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
High[CISA KEV] CVE-2024-38193: Microsoft Windows - Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
High[CISA KEV] CVE-2024-38106: Microsoft Windows - Microsoft Windows Kernel Privilege Escalation Vulnerability
High[CISA KEV] CVE-2024-38107: Microsoft Windows - Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability
High[CISA KEV] CVE-2024-28986: SolarWinds Web Help Desk - SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2024-23897: Jenkins Jenkins Command Line Interface (CLI) - Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
High[CISA KEV] CVE-2021-33045: Dahua IP Camera Firmware - Dahua IP Camera Authentication Bypass Vulnerability
High[CISA KEV] CVE-2024-39717: Versa Director - Versa Director Dangerous File Type Upload Vulnerability
High[CISA KEV] CVE-2024-7965: Google Chromium V8 - Google Chromium V8 Inappropriate Implementation Vulnerability
High[CISA KEV] CVE-2024-7262: Kingsoft WPS Office - Kingsoft WPS Office Path Traversal Vulnerability
High[CISA KEV] CVE-2016-3714: ImageMagick ImageMagick - ImageMagick Improper Input Validation Vulnerability
High[CISA KEV] CVE-2024-40766: SonicWall SonicOS - SonicWall SonicOS Improper Access Control Vulnerability
High[CISA KEV] CVE-2024-38226: Microsoft Publisher - Microsoft Publisher Protection Mechanism Failure Vulnerability
High[CISA KEV] CVE-2024-8190: Ivanti Cloud Services Appliance - Ivanti Cloud Services Appliance OS Command Injection Vulnerability
High[CISA KEV] CVE-2024-43461: Microsoft Windows - Microsoft Windows MSHTML Platform Spoofing Vulnerability
High[CISA KEV] CVE-2013-0648: Adobe Flash Player - Adobe Flash Player Code Execution Vulnerability
High[CISA KEV] CVE-2014-0502: Adobe Flash Player - Adobe Flash Player Double Free Vulnerablity
High[CISA KEV] CVE-2020-0618: Microsoft SQL Server - Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
High[CISA KEV] CVE-2024-8963: Ivanti Cloud Services Appliance (CSA) - Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
High[CISA KEV] CVE-2024-7593: Ivanti Virtual Traffic Manager - Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
High[CISA KEV] CVE-2023-25280: D-Link DIR-820 Router - D-Link DIR-820 Router OS Command Injection Vulnerability
High[CISA KEV] CVE-2024-29824: Ivanti Endpoint Manager (EPM) - Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
High[CISA KEV] CVE-2024-43047: Qualcomm Multiple Chipsets - Qualcomm Multiple Chipsets Use-After-Free Vulnerability
High[CISA KEV] CVE-2024-43573: Microsoft Windows - Microsoft Windows MSHTML Platform Spoofing Vulnerability
High[CISA KEV] CVE-2024-9379: Ivanti Cloud Services Appliance (CSA) - Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
High[CISA KEV] CVE-2024-9380: Ivanti Cloud Services Appliance (CSA) - Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
High[CISA KEV] CVE-2024-30088: Microsoft Windows - Microsoft Windows Kernel TOCTOU Race Condition Vulnerability
High[CISA KEV] CVE-2024-9680: Mozilla Firefox - Mozilla Firefox Use-After-Free Vulnerability
High[CISA KEV] CVE-2024-28987: SolarWinds Web Help Desk - SolarWinds Web Help Desk Hardcoded Credential Vulnerability
High[CISA KEV] CVE-2024-9537: ScienceLogic SL1 - ScienceLogic SL1 Unspecified Vulnerability
High[CISA KEV] CVE-2024-47575: Fortinet FortiManager - Fortinet FortiManager Missing Authentication Vulnerability
High[CISA KEV] CVE-2024-20481: Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) - Cisco ASA and FTD Denial-of-Service Vulnerability
High[CISA KEV] CVE-2024-37383: Roundcube Webmail - RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability
High[CISA KEV] CVE-2024-8957: PTZOptics PT30X-SDI/NDI Cameras - PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability
High[CISA KEV] CVE-2024-8956: PTZOptics PT30X-SDI/NDI Cameras - PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability
High[CISA KEV] CVE-2024-5910: Palo Alto Networks Expedition - Palo Alto Networks Expedition Missing Authentication Vulnerability
High[CISA KEV] CVE-2024-51567: CyberPersons CyberPanel - CyberPanel Incorrect Default Permissions Vulnerability
High[CISA KEV] CVE-2019-16278: Nostromo nhttpd - Nostromo nhttpd Directory Traversal Vulnerability
High[CISA KEV] CVE-2024-49039: Microsoft Windows - Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
High[CISA KEV] CVE-2024-43451: Microsoft Windows - Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
High[CISA KEV] CVE-2014-2120: Cisco Adaptive Security Appliance (ASA) - Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
High[CISA KEV] CVE-2021-26086: Atlassian Jira Server and Data Center - Atlassian Jira Server and Data Center Path Traversal Vulnerability
High[CISA KEV] CVE-2024-9474: Palo Alto Networks PAN-OS - Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
High[CISA KEV] CVE-2024-38812: VMware vCenter Server - VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2024-38813: VMware vCenter Server - VMware vCenter Server Privilege Escalation Vulnerability
High[CISA KEV] CVE-2024-44308: Apple Multiple Products - Apple Multiple Products Code Execution Vulnerability
High[CISA KEV] CVE-2024-21287: Oracle Agile Product Lifecycle Management (PLM) - Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
High[CISA KEV] CVE-2023-45727: North Grid Proself - North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability
High[CISA KEV] CVE-2024-11667: Zyxel Multiple Firewalls - Zyxel Multiple Firewalls Path Traversal Vulnerability
High[CISA KEV] CVE-2024-49138: Microsoft Windows - Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2024-50623: Cleo Multiple Products - Cleo Multiple Products Unrestricted File Upload Vulnerability
High[CISA KEV] CVE-2024-20767: Adobe ColdFusion - Adobe ColdFusion Improper Access Control Vulnerability
High[CISA KEV] CVE-2024-35250: Microsoft Windows - Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
High[CISA KEV] CVE-2024-55956: Cleo Multiple Products - Cleo Multiple Products Unauthenticated File Upload Vulnerability
High[CISA KEV] CVE-2018-14933: NUUO NVRmini Devices - NUUO NVRmini Devices OS Command Injection Vulnerability
High[CISA KEV] CVE-2022-23227: NUUO NVRmini2 Devices - NUUO NVRmini2 Devices Missing Authentication Vulnerability
High[CISA KEV] CVE-2019-11001: Reolink Multiple IP Cameras - Reolink Multiple IP Cameras OS Command Injection Vulnerability
High[CISA KEV] CVE-2021-40407: Reolink RLC-410W IP Camera - Reolink RLC-410W IP Camera OS Command Injection Vulnerability
High[CISA KEV] CVE-2024-12356: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) - BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability
High[CISA KEV] CVE-2024-3393: Palo Alto Networks PAN-OS - Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
High[CISA KEV] CVE-2024-55550: Mitel MiCollab - Mitel MiCollab Path Traversal Vulnerability
High[CISA KEV] CVE-2023-48365: Qlik Sense - Qlik Sense HTTP Tunneling Vulnerability
High[CISA KEV] CVE-2020-11023: JQuery JQuery - JQuery Cross-Site Scripting (XSS) Vulnerability
High[CISA KEV] CVE-2025-24085: Apple Multiple Products - Apple Multiple Products Use-After-Free Vulnerability
High[CISA KEV] CVE-2024-29059: Microsoft .NET Framework - Microsoft .NET Framework Information Disclosure Vulnerability
High[CISA KEV] CVE-2025-0411: 7-Zip 7-Zip - 7-Zip Mark of the Web Bypass Vulnerability
High[CISA KEV] CVE-2022-23748: Audinate Dante Discovery - Dante Discovery Process Control Vulnerability
High[CISA KEV] CVE-2024-21413: Microsoft Office Outlook - Microsoft Outlook Improper Input Validation Vulnerability
High[CISA KEV] CVE-2025-0994: Trimble Cityworks - Trimble Cityworks Deserialization Vulnerability
High[CISA KEV] CVE-2025-21391: Microsoft Windows - Microsoft Windows Storage Link Following Vulnerability
High[CISA KEV] CVE-2025-21418: Microsoft Windows - Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2024-40890: Zyxel DSL CPE Devices - Zyxel DSL CPE OS Command Injection Vulnerability
High[CISA KEV] CVE-2024-40891: Zyxel DSL CPE Devices - Zyxel DSL CPE OS Command Injection Vulnerability
High[CISA KEV] CVE-2024-41710: Mitel SIP Phones - Mitel SIP Phones Argument Injection Vulnerability
High[CISA KEV] CVE-2025-24200: Apple iOS and iPadOS - Apple iOS and iPadOS Incorrect Authorization Vulnerability
High[CISA KEV] CVE-2024-57727: SimpleHelp SimpleHelp - SimpleHelp Path Traversal Vulnerability
High[CISA KEV] CVE-2025-0108: Palo Alto Networks PAN-OS - Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
High[CISA KEV] CVE-2025-23209: Craft CMS Craft CMS - Craft CMS Code Injection Vulnerability
High[CISA KEV] CVE-2025-0111: Palo Alto Networks PAN-OS - Palo Alto Networks PAN-OS File Read Vulnerability
High[CISA KEV] CVE-2025-24989: Microsoft Power Pages - Microsoft Power Pages Improper Access Control Vulnerability
High[CISA KEV] CVE-2024-20953: Oracle Agile Product Lifecycle Management (PLM) - Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
High[CISA KEV] CVE-2024-49035: Microsoft Partner Center - Microsoft Partner Center Improper Access Control Vulnerability
High[CISA KEV] CVE-2023-20118: Cisco Small Business RV Series Routers - Cisco Small Business RV Series Routers Command Injection Vulnerability
High[CISA KEV] CVE-2022-43769: Hitachi Vantara Pentaho Business Analytics (BA) Server - Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
High[CISA KEV] CVE-2025-24984: Microsoft Windows - Microsoft Windows NTFS Information Disclosure Vulnerability
High[CISA KEV] CVE-2025-24985: Microsoft Windows - Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
High[CISA KEV] CVE-2025-24993: Microsoft Windows - Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2025-24201: Apple Multiple Products - Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2025-21590: Juniper Junos OS - Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
High[CISA KEV] CVE-2025-30066: tj-actions changed-files GitHub Action - tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
High[CISA KEV] CVE-2025-1316: Edimax IC-7100 IP Camera - Edimax IC-7100 IP Camera OS Command Injection Vulnerability
High[CISA KEV] CVE-2024-48248: NAKIVO Backup and Replication - NAKIVO Backup and Replication Absolute Path Traversal Vulnerability
High[CISA KEV] CVE-2025-30154: reviewdog action-setup GitHub Action - reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability
High[CISA KEV] CVE-2025-2783: Google Chromium Mojo - Google Chromium Mojo Sandbox Escape Vulnerability
High[CISA KEV] CVE-2025-22457: Ivanti Connect Secure, Policy Secure, and ZTA Gateways - Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2025-31161: CrushFTP CrushFTP - CrushFTP Authentication Bypass Vulnerability
High[CISA KEV] CVE-2025-30406: Gladinet CentreStack - Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability
High[CISA KEV] CVE-2025-29824: Microsoft Windows - Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
High[CISA KEV] CVE-2024-53197: Linux Kernel - Linux Kernel Out-of-Bounds Access Vulnerability
High[CISA KEV] CVE-2024-53150: Linux Kernel - Linux Kernel Out-of-Bounds Read Vulnerability
High[CISA KEV] CVE-2021-20035: SonicWall SMA100 Appliances - SonicWall SMA100 Appliances OS Command Injection Vulnerability
High[CISA KEV] CVE-2025-31200: Apple Multiple Products - Apple Multiple Products Memory Corruption Vulnerability
High[CISA KEV] CVE-2025-31201: Apple Multiple Products - Apple Multiple Products Arbitrary Read and Write Vulnerability
High[CISA KEV] CVE-2025-24054: Microsoft Windows - Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
High[CISA KEV] CVE-2025-3928: Commvault Web Server - Commvault Web Server Unspecified Vulnerability
High[CISA KEV] CVE-2025-31324: SAP NetWeaver - SAP NetWeaver Unrestricted File Upload Vulnerability
High[CISA KEV] CVE-2023-44221: SonicWall SMA100 Appliances - SonicWall SMA100 Appliances OS Command Injection Vulnerability
High[CISA KEV] CVE-2024-38475: Apache HTTP Server - Apache HTTP Server Improper Escaping of Output Vulnerability
High[CISA KEV] CVE-2024-58136: Yiiframework Yii - Yiiframework Yii Improper Protection of Alternate Path Vulnerability
High[CISA KEV] CVE-2025-34028: Commvault Command Center - Commvault Command Center Path Traversal Vulnerability
High[CISA KEV] CVE-2025-3248: Langflow Langflow - Langflow Missing Authentication Vulnerability
High[CISA KEV] CVE-2025-47729: TeleMessage TM SGNL - TeleMessage TM SGNL Hidden Functionality Vulnerability
High[CISA KEV] CVE-2025-30400: Microsoft Windows - Microsoft Windows DWM Core Library Use-After-Free Vulnerability
High[CISA KEV] CVE-2025-32706: Microsoft Windows - Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2025-30397: Microsoft Windows - Microsoft Windows Scripting Engine Type Confusion Vulnerability
High[CISA KEV] CVE-2025-32709: Microsoft Windows - Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
High[CISA KEV] CVE-2024-12987: DrayTek Vigor Routers - DrayTek Vigor Routers OS Command Injection Vulnerability
High[CISA KEV] CVE-2025-42999: SAP NetWeaver - SAP NetWeaver Deserialization Vulnerability
High[CISA KEV] CVE-2025-4427: Ivanti Endpoint Manager Mobile (EPMM) - Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
High[CISA KEV] CVE-2025-4428: Ivanti Endpoint Manager Mobile (EPMM) - Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
High[CISA KEV] CVE-2024-11182: MDaemon Email Server - MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability
High[CISA KEV] CVE-2025-27920: Srimax Output Messenger - Srimax Output Messenger Directory Traversal Vulnerability
High[CISA KEV] CVE-2024-27443: Synacor Zimbra Collaboration Suite (ZCS) - Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
High[CISA KEV] CVE-2023-38950: ZKTeco BioTime - ZKTeco BioTime Path Traversal Vulnerability
High[CISA KEV] CVE-2025-4632: Samsung MagicINFO 9 Server - Samsung MagicINFO 9 Server Path Traversal Vulnerability
High[CISA KEV] CVE-2023-39780: ASUS RT-AX55 Routers - ASUS RT-AX55 Routers OS Command Injection Vulnerability
High[CISA KEV] CVE-2024-56145: Craft CMS Craft CMS - Craft CMS Code Injection Vulnerability
High[CISA KEV] CVE-2025-35939: Craft CMS Craft CMS - Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability
High[CISA KEV] CVE-2025-3935: ConnectWise ScreenConnect - ConnectWise ScreenConnect Improper Authentication Vulnerability
High[CISA KEV] CVE-2021-32030: ASUS Routers - ASUS Routers Improper Authentication Vulnerability
High[CISA KEV] CVE-2025-21480: Qualcomm Multiple Chipsets - Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
High[CISA KEV] CVE-2025-21479: Qualcomm Multiple Chipsets - Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
High[CISA KEV] CVE-2025-5419: Google Chromium V8 - Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
High[CISA KEV] CVE-2025-32433: Erlang Erlang/OTP - Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability
High[CISA KEV] CVE-2024-42009: Roundcube Webmail - RoundCube Webmail Cross-Site Scripting Vulnerability
High[CISA KEV] CVE-2025-24016: Wazuh Wazuh Server - Wazuh Server Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2023-0386: Linux Kernel - Linux Kernel Improper Ownership Management Vulnerability
High[CISA KEV] CVE-2024-54085: AMI MegaRAC SPx - AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability
High[CISA KEV] CVE-2024-0769: D-Link DIR-859 Router - D-Link DIR-859 Router Path Traversal Vulnerability
High[CISA KEV] CVE-2025-6543: Citrix NetScaler ADC and Gateway - Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
High[CISA KEV] CVE-2025-48927: TeleMessage TM SGNL - TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability
High[CISA KEV] CVE-2025-6554: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
High[CISA KEV] CVE-2014-3931: Looking Glass Multi-Router Looking Glass (MRLG) - Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability
High[CISA KEV] CVE-2016-10033: PHP PHPMailer - PHPMailer Command Injection Vulnerability
High[CISA KEV] CVE-2019-5418: Rails Ruby on Rails - Rails Ruby on Rails Path Traversal Vulnerability
High[CISA KEV] CVE-2019-9621: Synacor Zimbra Collaboration Suite (ZCS) - Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability
High[CISA KEV] CVE-2025-5777: Citrix NetScaler ADC and Gateway - Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability
High[CISA KEV] CVE-2025-53770: Microsoft SharePoint - Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2025-49706: Microsoft SharePoint - Microsoft SharePoint Improper Authentication Vulnerability
High[CISA KEV] CVE-2025-49704: Microsoft SharePoint - Microsoft SharePoint Code Injection Vulnerability
High[CISA KEV] CVE-2025-6558: Google Chromium - Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
High[CISA KEV] CVE-2025-2776: SysAid SysAid On-Prem - SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
High[CISA KEV] CVE-2025-2775: SysAid SysAid On-Prem - SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
High[CISA KEV] CVE-2023-2533: PaperCut NG/MF - PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability
High[CISA KEV] CVE-2022-40799: D-Link DNR-322L - D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
High[CISA KEV] CVE-2020-25079: D-Link DCS-2530L and DCS-2670L Devices - D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
High[CISA KEV] CVE-2007-0671: Microsoft Office - Microsoft Office Excel Remote Code Execution Vulnerability
High[CISA KEV] CVE-2025-8875: N-able N-Central - N-able N-Central Insecure Deserialization Vulnerability
High[CISA KEV] CVE-2025-54948: Trend Micro Apex One - Trend Micro Apex One OS Command Injection Vulnerability
High[CISA KEV] CVE-2025-43300: Apple iOS, iPadOS, and macOS - Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2024-8069: Citrix Session Recording - Citrix Session Recording Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2024-8068: Citrix Session Recording - Citrix Session Recording Improper Privilege Management Vulnerability
High[CISA KEV] CVE-2025-48384: Git Git - Git Link Following Vulnerability
High[CISA KEV] CVE-2025-55177: Meta Platforms WhatsApp - Meta Platforms WhatsApp Incorrect Authorization Vulnerability
High[CISA KEV] CVE-2020-24363: TP-Link TL-WA855RE - TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability
High[CISA KEV] CVE-2025-9377: TP-Link Multiple Routers - TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability
High[CISA KEV] CVE-2025-48543: Android Runtime - Android Runtime Use-After-Free Vulnerability
High[CISA KEV] CVE-2025-20362: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense - Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
High[CISA KEV] CVE-2021-21311: Adminer Adminer - Adminer Server-Side Request Forgery Vulnerability
High[CISA KEV] CVE-2025-10035: Fortra GoAnywhere MFT - Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2025-59689: Libraesva Email Security Gateway - Libraesva Email Security Gateway Command Injection Vulnerability
High[CISA KEV] CVE-2025-32463: Sudo Sudo - Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
High[CISA KEV] CVE-2025-21043: Samsung Mobile Devices - Samsung Mobile Devices Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2014-6278: GNU GNU Bash - GNU Bash OS Command Injection Vulnerability
High[CISA KEV] CVE-2025-61882: Oracle E-Business Suite - Oracle E-Business Suite Unspecified Vulnerability
High[CISA KEV] CVE-2010-3765: Mozilla Multiple Products - Mozilla Multiple Products Remote Code Execution Vulnerability
High[CISA KEV] CVE-2011-3402: Microsoft Windows - Microsoft Windows Remote Code Execution Vulnerability
High[CISA KEV] CVE-2013-3918: Microsoft Windows - Microsoft Windows Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2021-43226: Microsoft Windows - Microsoft Windows Privilege Escalation Vulnerability
High[CISA KEV] CVE-2010-3962: Microsoft Internet Explorer - Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability
High[CISA KEV] CVE-2021-22555: Linux Kernel - Linux Kernel Heap Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2025-27915: Synacor Zimbra Collaboration Suite (ZCS) - Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
High[CISA KEV] CVE-2021-43798: Grafana Labs Grafana - Grafana Path Traversal Vulnerability
High[CISA KEV] CVE-2016-7836: SKYSEA Client View - SKYSEA Client View Improper Authentication Vulnerability
High[CISA KEV] CVE-2025-59230: Microsoft Windows - Microsoft Windows Improper Access Control Vulnerability
High[CISA KEV] CVE-2025-47827: IGEL IGEL OS - IGEL OS Use of a Key Past its Expiration Date Vulnerability
High[CISA KEV] CVE-2025-61884: Oracle E-Business Suite - Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
High[CISA KEV] CVE-2025-33073: Microsoft Windows - Microsoft Windows SMB Client Improper Access Control Vulnerability
High[CISA KEV] CVE-2025-2747: Kentico Xperience CMS - Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
High[CISA KEV] CVE-2025-2746: Kentico Xperience CMS - Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
High[CISA KEV] CVE-2022-48503: Apple Multiple Products - Apple Multiple Products Unspecified Vulnerability
High[CISA KEV] CVE-2025-61932: Motex LANSCOPE Endpoint Manager - Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
High[CISA KEV] CVE-2025-59287: Microsoft Windows - Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2025-54236: Adobe Commerce and Magento - Adobe Commerce and Magento Improper Input Validation Vulnerability
High[CISA KEV] CVE-2025-6205: Dassault Systèmes DELMIA Apriso - Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
High[CISA KEV] CVE-2025-6204: Dassault Systèmes DELMIA Apriso - Dassault Systèmes DELMIA Apriso Code Injection Vulnerability
High[CISA KEV] CVE-2025-24893: XWiki Platform - XWiki Platform Eval Injection Vulnerability
High[CISA KEV] CVE-2025-41244: Broadcom VMware Aria Operations and VMware Tools - Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
High[CISA KEV] CVE-2025-11371: Gladinet CentreStack and Triofox - Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability
High[CISA KEV] CVE-2025-21042: Samsung Mobile Devices - Samsung Mobile Devices Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2025-62215: Microsoft Windows - Microsoft Windows Race Condition Vulnerability
High[CISA KEV] CVE-2025-12480: Gladinet Triofox - Gladinet Triofox Improper Access Control Vulnerability
High[CISA KEV] CVE-2025-64446: Fortinet FortiWeb - Fortinet FortiWeb Path Traversal Vulnerability
High[CISA KEV] CVE-2025-58034: Fortinet FortiWeb - Fortinet FortiWeb OS Command Injection Vulnerability
High[CISA KEV] CVE-2025-13223: Google Chromium V8 - Google Chromium V8 Type Confusion Vulnerability
High[CISA KEV] CVE-2025-48572: Android Framework - Android Framework Privilege Escalation Vulnerability
High[CISA KEV] CVE-2025-48633: Android Framework - Android Framework Information Disclosure Vulnerability
High[CISA KEV] CVE-2022-37055: D-Link Routers - D-Link Routers Buffer Overflow Vulnerability
High[CISA KEV] CVE-2025-62221: Microsoft Windows - Microsoft Windows Use After Free Vulnerability
High[CISA KEV] CVE-2025-6218: RARLAB WinRAR - RARLAB WinRAR Path Traversal Vulnerability
High[CISA KEV] CVE-2025-58360: OSGeo GeoServer - OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability
High[CISA KEV] CVE-2025-14174: Google Chromium - Google Chromium Out of Bounds Memory Access Vulnerability
High[CISA KEV] CVE-2018-4063: Sierra Wireless AirLink ALEOS - Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability
High[CISA KEV] CVE-2025-43529: Apple Multiple Products - Apple Multiple Products Use-After-Free WebKit Vulnerability
High[CISA KEV] CVE-2025-14611: Gladinet CentreStack and Triofox - Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability
High[CISA KEV] CVE-2025-59718: Fortinet Multiple Products - Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
High[CISA KEV] CVE-2025-40602: SonicWall SMA1000 appliance - SonicWall SMA1000 Missing Authorization Vulnerability
High[CISA KEV] CVE-2025-59374: ASUS Live Update - ASUS Live Update Embedded Malicious Code Vulnerability
High[CISA KEV] CVE-2023-52163: Digiever DS-2105 Pro - Digiever DS-2105 Pro Missing Authorization Vulnerability
High[CISA KEV] CVE-2025-14847: MongoDB MongoDB and MongoDB Server - MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability
High[CISA KEV] CVE-2009-0556: Microsoft Office - Microsoft Office PowerPoint Code Injection Vulnerability
High[CISA KEV] CVE-2025-8110: Gogs Gogs - Gogs Path Traversal Vulnerability
High[CISA KEV] CVE-2025-54313: Prettier eslint-config-prettier - Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
High[CISA KEV] CVE-2025-31125: Vite Vitejs - Vite Vitejs Improper Access Control Vulnerability
High[CISA KEV] CVE-2025-68645: Synacor Zimbra Collaboration Suite (ZCS) - Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
High[CISA KEV] CVE-2026-21509: Microsoft Office - Microsoft Office Security Feature Bypass Vulnerability
High[CISA KEV] CVE-2026-24858: Fortinet Multiple Products - Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
High[CISA KEV] CVE-2026-1281: Ivanti Endpoint Manager Mobile (EPMM) - Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
High[CISA KEV] CVE-2025-40551: SolarWinds Web Help Desk - SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2019-19006: Sangoma FreePBX - Sangoma FreePBX Improper Authentication Vulnerability
High[CISA KEV] CVE-2025-64328: Sangoma FreePBX - Sangoma FreePBX OS Command Injection Vulnerability
High[CISA KEV] CVE-2021-39935: GitLab Community and Enterprise Editions - GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
High[CISA KEV] CVE-2026-24423: SmarterTools SmarterMail - SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability
High[CISA KEV] CVE-2025-11953: React Native Community CLI - React Native Community CLI OS Command Injection Vulnerability
High[CISA KEV] CVE-2026-21514: Microsoft Office - Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
High[CISA KEV] CVE-2026-21519: Microsoft Windows - Microsoft Windows Type Confusion Vulnerability
High[CISA KEV] CVE-2026-21533: Microsoft Windows - Microsoft Windows Improper Privilege Management Vulnerability
High[CISA KEV] CVE-2026-21510: Microsoft Windows - Microsoft Windows Shell Protection Mechanism Failure Vulnerability
High[CISA KEV] CVE-2026-21513: Microsoft Windows - Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
High[CISA KEV] CVE-2025-15556: Notepad++ Notepad++ - Notepad++ Download of Code Without Integrity Check Vulnerability
High[CISA KEV] CVE-2024-43468: Microsoft Configuration Manager - Microsoft Configuration Manager SQL Injection Vulnerability
High[CISA KEV] CVE-2008-0015: Microsoft Windows - Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
High[CISA KEV] CVE-2024-7694: TeamT5 ThreatSonar Anti-Ransomware - TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability
High[CISA KEV] CVE-2020-7796: Synacor Zimbra Collaboration Suite - Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
High[CISA KEV] CVE-2026-22769: Dell RecoverPoint for Virtual Machines (RP4VMs) - Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
High[CISA KEV] CVE-2021-22175: GitLab GitLab - GitLab Server-Side Request Forgery (SSRF) Vulnerability
High[CISA KEV] CVE-2025-49113: Roundcube Webmail - RoundCube Webmail Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2026-25108: Soliton Systems K.K FileZen - Soliton Systems K.K FileZen OS Command Injection Vulnerability
High[CISA KEV] CVE-2026-20127: Cisco Catalyst SD-WAN Controller and Manager - Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
High[CISA KEV] CVE-2026-21385: Qualcomm Multiple Chipsets - Qualcomm Multiple Chipsets Memory Corruption Vulnerability
High[CISA KEV] CVE-2026-22719: Broadcom VMware Aria Operations - Broadcom VMware Aria Operations Command Injection Vulnerability
High[CISA KEV] CVE-2021-30952: Apple Multiple Products - Apple Multiple Products Integer Overflow or Wraparound Vulnerability
High[CISA KEV] CVE-2023-43000: Apple Multiple Products - Apple Multiple products Use-After-Free Vulnerability
High[CISA KEV] CVE-2021-22681: Rockwell Multiple Products - Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
High[CISA KEV] CVE-2017-7921: Hikvision Multiple Products - Hikvision Multiple Products Improper Authentication Vulnerability
High[CISA KEV] CVE-2026-1603: Ivanti Endpoint Manager (EPM) - Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
High[CISA KEV] CVE-2025-68613: n8n n8n - n8n Improper Control of Dynamically-Managed Code Resources Vulnerability
High[CISA KEV] CVE-2026-3909: Google Skia - Google Skia Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2026-3910: Google Chromium V8 - Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
High[CISA KEV] CVE-2025-66376: Synacor Zimbra Collaboration Suite (ZCS) - Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
High[CISA KEV] CVE-2025-43510: Apple Multiple Products - Apple Multiple Products Improper Locking Vulnerability
High[CISA KEV] CVE-2025-54068: Laravel Livewire - Laravel Livewire Code Injection Vulnerability
High[CISA KEV] CVE-2025-32432: Craft CMS Craft CMS - Craft CMS Code Injection Vulnerability
High[CISA KEV] CVE-2026-33017: Langflow Langflow - Langflow Code Injection Vulnerability
High[CISA KEV] CVE-2025-53521: F5 BIG-IP - F5 BIG-IP Stack-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2026-3055: Citrix NetScaler - Citrix NetScaler Out-of-Bounds Read Vulnerability
High[CISA KEV] CVE-2026-5281: Google Dawn - Google Dawn Use-After-Free Vulnerability
High[CISA KEV] CVE-2026-3502: TrueConf Client - TrueConf Client Download of Code Without Integrity Check Vulnerability
High[CISA KEV] CVE-2026-35616: Fortinet FortiClient EMS - Fortinet FortiClient EMS Improper Access Control Vulnerability
High[CISA KEV] CVE-2026-34621: Adobe Acrobat and Reader - Adobe Acrobat and Reader Prototype Pollution Vulnerability
High[CISA KEV] CVE-2026-21643: Fortinet FortiClient EMS - Fortinet FortiClient EMS SQL Injection Vulnerability
High[CISA KEV] CVE-2020-9715: Adobe Acrobat - Adobe Acrobat Use-After-Free Vulnerability
High[CISA KEV] CVE-2023-36424: Microsoft Windows - Microsoft Windows Out-of-Bounds Read Vulnerability
High[CISA KEV] CVE-2023-21529: Microsoft Exchange Server - Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2025-60710: Microsoft Windows - Microsoft Windows Link Following Vulnerability
High[CISA KEV] CVE-2012-1854: Microsoft Visual Basic for Applications (VBA) - Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
High[CISA KEV] CVE-2009-0238: Microsoft Office - Microsoft Office Remote Code Execution
High[CISA KEV] CVE-2026-34197: Apache ActiveMQ - Apache ActiveMQ Improper Input Validation Vulnerability
High[CISA KEV] CVE-2024-27199: JetBrains TeamCity - JetBrains TeamCity Relative Path Traversal Vulnerability
High[CISA KEV] CVE-2025-32975: Quest KACE Systems Management Appliance (SMA) - Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
High[CISA KEV] CVE-2026-20128: Cisco Catalyst SD-WAN Manager - Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
High[CISA KEV] CVE-2025-48700: Synacor Zimbra Collaboration Suite (ZCS) - Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
High[CISA KEV] CVE-2023-27351: PaperCut NG/MF - PaperCut NG/MF Improper Authentication Vulnerability
High[CISA KEV] CVE-2025-2749: Kentico Kentico Xperience - Kentico Xperience Path Traversal Vulnerability
High[CISA KEV] CVE-2026-20122: Cisco Catalyst SD-WAN Manger - Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
High[CISA KEV] CVE-2024-57726: SimpleHelp SimpleHelp - SimpleHelp Missing Authorization Vulnerability
High[CISA KEV] CVE-2024-57728: SimpleHelp SimpleHelp - SimpleHelp Path Traversal Vulnerability
High[CISA KEV] CVE-2024-1708: ConnectWise ScreenConnect - ConnectWise ScreenConnect Path Traversal Vulnerability
High[CISA KEV] CVE-2026-41940: WebPros cPanel & WHM and WP2 (WordPress Squared) - WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability
High[CISA KEV] CVE-2026-31431: Linux Kernel - Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
High[CISA KEV] CVE-2026-6973: Ivanti Endpoint Manager Mobile (EPMM) - Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
High[CISA KEV] CVE-2026-42208: BerriAI LiteLLM - BerriAI LiteLLM SQL Injection Vulnerability
High[CISA KEV] CVE-2026-42897: Microsoft Microsoft - Microsoft Exchange Server Cross-Site Scripting Vulnerability
High[CISA KEV] CVE-2026-45498: Microsoft Defender - Microsoft Defender Denial of Service Vulnerability
High[CISA KEV] CVE-2026-41091: Microsoft Defender - Microsoft Defender Link Following Vulnerability
High[CISA KEV] CVE-2010-0249: Microsoft Internet Explorer - Microsoft Internet Explorer Use-After-Free Vulnerability
High[CISA KEV] CVE-2009-3459: Adobe Acrobat and Reader - Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2009-1537: Microsoft DirectX - Microsoft DirectX NULL Byte Overwrite Vulnerability
High[CISA KEV] CVE-2008-4250: Microsoft Windows - Microsoft Windows Buffer Overflow Vulnerability
High[CISA KEV] CVE-2026-34926: Trend Micro Apex One - Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
High[CISA KEV] CVE-2026-9082: Drupal Core - Drupal Core SQL Injection Vulnerability
High[CISA KEV] CVE-2026-48172: LiteSpeed cPanel Plugin - LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
High[CISA KEV] CVE-2026-8398: Daemon Daemon Tools Lite - Daemon Tools Lite Embedded Malicious Code Vulnerability
High[CISA KEV] CVE-2026-45321: TanStack TanStack - TanStack Unspecified Vulnerability
High[CISA KEV] CVE-2026-48027: Nx Nx Console - Nx Console Embedded Malicious Code Vulnerability
High[CISA KEV] CVE-2026-0257: Palo Alto Networks PAN-OS - Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
High[CISA KEV] CVE-2025-48595: Android Framework - Android Framework Integer Overflow Vulnerability
High[CISA KEV] CVE-2022-0492: Linux Kernel - Linux Kernel Improper Authentication Vulnerability
High[CISA KEV] CVE-2026-45247: Mirasvit Mirasvit Full Page Cache Warmer - Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2026-28318: SolarWinds Serv-U - SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
High[CISA KEV] CVE-2026-42271: BerriAI LiteLLM - BerriAI LiteLLM Command Injection Vulnerability
High[CISA KEV] CVE-2026-20245: Cisco Catalyst SD-WAN Manager - Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
High[CISA KEV] CVE-2026-7473: Arista Extensible Operating System - Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
High[CISA KEV] CVE-2026-35273: Oracle PeopleSoft Enterprise PeopleTools - Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
High[CISA KEV] CVE-2026-20262: Cisco Catalyst SD-WAN Manager - Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
High[CISA KEV] CVE-2026-54420: LiteSpeed cPanel Plugin - LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
High[CISA KEV] CVE-2026-48907: Widget Factory Joomla Content Editor - Widget Factory Joomla Content Editor Improper Access Control Vulnerability
High[CISA KEV] CVE-2026-20253: Splunk Enterprise - Splunk Enterprise Missing Authentication for Critical Function Vulnerability
High[CISA KEV] CVE-2026-34908: Ubiquiti UniFi OS - Ubiquiti UniFi OS Improper Access Control Vulnerability
High[CISA KEV] CVE-2026-34909: Ubiquiti UniFi OS - Ubiquiti UniFi OS Path Traversal Vulnerability
High[CISA KEV] CVE-2026-34910: Ubiquiti UniFi OS - Ubiquiti UniFi OS Improper Input Validation Vulnerability
High[CISA KEV] CVE-2026-20230: Cisco Unified Communications Manager - Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
High[CISA KEV] CVE-2026-48558: SimpleHelp SimpleHelp - SimpleHelp Authentication Bypass Vulnerability
High[CISA KEV] CVE-2026-45659: Microsoft SharePoint Server - Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2026-48282: Adobe ColdFusion - Adobe ColdFusion Path Traversal Vulnerability
High[CISA KEV] CVE-2026-55255: Langflow Langflow - Langflow Authorization Bypass Through User-Controlled Key Vulnerability
High[CISA KEV] CVE-2026-48908: JoomShaper SP Page Builder - JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
High[CISA KEV] CVE-2008-4128: Cisco IOS - Cisco IOS Cross-Site Request Forgery Vulnerability
High[CISA KEV] CVE-2026-15410: SonicWall SMA1000 Appliances - SonicWall SMA1000 Appliances Code Injection Vulnerability
High[CISA KEV] CVE-2026-15409: SonicWall SMA1000 Appliances - SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
High[CISA KEV] CVE-2026-56164: Microsoft SharePoint Server - Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
High[CISA KEV] CVE-2026-56155: Microsoft Active Directory Federation Services - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
High[CISA KEV] CVE-2023-4346: KNX Association KNX Protocol Connection Authorization Option 1 - KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
High[CISA KEV] CVE-2026-46817: Oracle E-Business Suite - Oracle E-Business Suite Improper Privilege Management Vulnerability
High[CISA KEV] CVE-2026-39808: Fortinet FortiSandbox - Fortinet FortiSandbox OS Command Injection Vulnerability
High[CISA KEV] CVE-2026-58644: Microsoft SharePoint - Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2021-27137: DD-WRT DD-WRT - DD-WRT Stack-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2026-0770: Langflow Langflow - Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
High[CISA KEV] CVE-2026-63030: WordPress Core - WordPress Core Interpretation Conflict Vulnerability
High[CISA KEV] CVE-2026-60137: WordPress Core - WordPress Core SQL Injection Vulnerability
High[CISA KEV] CVE-2026-50522: Microsoft SharePoint - Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2025-68686: Fortinet FortiOS - Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High[CISA KEV] CVE-2026-20316: Cisco Secure Firewall Management Center (FMC) - Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
High[CISA KEV] CVE-2026-34486: Apache Tomcat - Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
High[CISA KEV] CVE-2026-18556: N-able N-central - N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
High[CISA KEV] CVE-2026-63077: JetBrains TeamCity - JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2026-8037: Progress LoadMaster - Progress LoadMaster Command Injection Vulnerability
High[CISA KEV] CVE-2026-72898: Metabase Metabase - Metabase SQL Injection Vulnerability
High[CISA KEV] CVE-2026-68820: Microsoft Windows Ancillary Function Driver for WinSock - Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
High[CISA KEV] CVE-2026-20349: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) - Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
High[CISA KEV] CVE-2025-62593: Ray-Project Ray - Ray-Project Ray Code Injection Vulnerability
High[CISA KEV] CVE-2026-65400: Apple macOS - Apple macOS Improper Authentication Vulnerability
High[CISA KEV] CVE-2026-55040: Microsoft SharePoint - Microsoft SharePoint Weak Authentication Vulnerability
High[CISA KEV] CVE-2026-64849: MLflow MLflow - MLflow Server-Side Request Forgery Vulnerability
High[CISA KEV] CVE-2026-72529: TrueConf Server - TrueConf Server Missing Authentication for Critical Function Vulnerability
High[CISA KEV] CVE-2026-73570: Synacor Zimbra Collaboration Suite (ZCS) - Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
High[CISA KEV] CVE-2026-21962: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in - Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
High[CISA KEV] CVE-2026-60004: Gitea Gitea - Gitea Code Injection Vulnerability
High[CISA KEV] CVE-2026-8452: Citrix NetScaler ADC and NetScaler Gateway - Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
High[CISA KEV] CVE-2022-0995: Linux Kernel - Linux Kernel Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2015-5287: Red Hat Automatic Bug Reporting Tool - Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
High[CISA KEV] CVE-2015-3246: Red Hat Libuser - Red Hat Libuser Race Condition Vulnerability
High[CISA KEV] CVE-2021-23758: Ajax.NET Professional Ajax.NET Professional - Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
High[CISA KEV] CVE-2026-66384: JFrog Artifactory - JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
High[CISA KEV] CVE-2026-53362: Linux Kernel - Linux Kernel Unspecified Vulnerability
High[CISA KEV] CVE-2026-81578: PaperCut NG/MF - PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
High[CISA KEV] CVE-2026-82078: PaperCut NG/MF - PaperCut NG/MF Unsafe Reflection Vulnerability
High[CISA KEV] CVE-2026-83549: SonicWall SMA1000 Appliances - SonicWall SMA1000 Appliances OS Command Injection Vulnerability
High[CISA KEV] CVE-2026-83548: SonicWall SMA1000 Appliances - SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
High[CISA KEV] CVE-2026-49869: Kestra Kestra OSS - Kestra OSS OS Command Injection Vulnerability
High[CISA KEV] CVE-2026-48710: Kludex Starlette - Kludex Starlette HTTP Request/Response Smuggling Vulnerability
High[CISA KEV] CVE-2026-59822: BerriAI LiteLLM - BerriAI LiteLLM Improper Authentication Vulnerability
High[CISA KEV] CVE-2026-85880: Microsoft Windows - Microsoft Windows Heap-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2026-86218: N-able N-central - N-able N-central Static Code Injection Vulnerability
High[CISA KEV] CVE-2026-81963: Microsoft Windows - Microsoft Windows Link Following Vulnerability
High[CISA KEV] CVE-2026-75650: Adobe Commerce and Magento - Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
High[CISA KEV] CVE-2026-67277: MikroTik RouterOS - MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
High[CISA KEV] CVE-2026-86060: MikroTik RouterOS - MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
High[CISA KEV] CVE-2026-85706: GitLab Community Edition and Enterprise Edition - GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
High[CISA KEV] CVE-2026-42018: JFrog Artifactory - JFrog Artifactory Improper Authentication Vulnerability
High[CISA KEV] CVE-2026-42016: JFrog Artifactory - JFrog Artifactory Incorrect Authorization Vulnerability
High[CISA KEV] CVE-2026-84869: ConnectWise ScreenConnect - ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
High[CISA KEV] CVE-2026-87886: Acronis Backup - Acronis Backup Incorrect Default Permissions Vulnerability
High[CISA KEV] CVE-2026-58704: Google Pixel - Google Pixel Improper Authorization Vulnerability
High[CISA KEV] CVE-2025-39682: Linux Kernel - Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
High[CISA KEV] CVE-2026-53266: Linux Kernel - Linux Kernel Out-of-Bounds Write Vulnerability
High[CISA KEV] CVE-2025-39964: Linux Kernel - Linux Kernel Race Condition Vulnerability
High[CISA KEV] CVE-2026-7273: Zyxel GS1900 Series Switches - Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2026-85102: Check Point Multiple Products - Check Point Multiple Products Improper Certificate Validation Vulnerability
High[CISA KEV] CVE-2026-94127: F5 BIG-IP APM - F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
High[CISA KEV] CVE-2026-93952: Arista VeloCloud Orchestrator - Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
High[CISA KEV] CVE-2026-71362: Adobe Commerce and Magento - Adobe Commerce and Magento Incorrect Authorization Vulnerability
High[CISA KEV] CVE-2026-5430: WSO2 Multiple Products - WSO2 Multiple Products Path Traversal Vulnerability
High[CISA KEV] CVE-2026-65660: Microsoft SharePoint - Microsoft SharePoint Code Injection Vulnerability
High[CISA KEV] CVE-2026-67279: MikroTik RouterOS - Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
High[CISA KEV] CVE-2026-88772: Citrix NetScaler - Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
High[CISA KEV] CVE-2026-104286: Fortinet FortiMail - Fortinet FortiMail Path Traversal Vulnerability
High[CISA KEV] CVE-2026-102490: Zammad GmbH Zammad - Zammad GmbH Zammad Improper Privilege Management Vulnerability
High[CISA KEV] CVE-2026-88779: Citrix NetScaler - Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
HighCVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely
HighLibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
HighHitachi Energy SOI
HighHitachi Energy Asset Suite
HighUS, Australia warn of latest Citrix vulnerability after NetScaler advisory
HighOut-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)
HighCISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779)
HighNew NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
HighMicrosoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
MediumAttackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge
Medium[CISA KEV] CVE-2015-5477: ISC BIND - ISC BIND Data Processing Errors Vulnerability
Medium[CISA KEV] CVE-2021-1906: Qualcomm Multiple Chipsets - Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
Medium[CISA KEV] CVE-2021-30116: Kaseya Virtual System/Server Administrator (VSA) - Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability
Medium[CISA KEV] CVE-2016-3715: ImageMagick ImageMagick - ImageMagick Arbitrary File Deletion Vulnerability
Medium[CISA KEV] CVE-2020-4430: IBM Data Risk Manager - IBM Data Risk Manager Directory Traversal Vulnerability
Medium[CISA KEV] CVE-2018-18325: DotNetNuke (DNN) DotNetNuke (DNN) - DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
Medium[CISA KEV] CVE-2018-15811: DotNetNuke (DNN) DotNetNuke (DNN) - DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
Medium[CISA KEV] CVE-2021-43890: Microsoft Windows - Microsoft Windows AppX Installer Spoofing Vulnerability
Medium[CISA KEV] CVE-2006-1547: Apache Struts 1 - Apache Struts 1 ActionForm Denial-of-Service Vulnerability
Medium[CISA KEV] CVE-2013-1675: Mozilla Firefox - Mozilla Firefox Information Disclosure Vulnerability
Medium[CISA KEV] CVE-2015-4902: Oracle Java SE - Oracle Java SE Integrity Check Vulnerability
Medium[CISA KEV] CVE-2013-0629: Adobe ColdFusion - Adobe ColdFusion Directory Traversal Vulnerability
Medium[CISA KEV] CVE-2013-0631: Adobe ColdFusion - Adobe ColdFusion Information Disclosure Vulnerability
Medium[CISA KEV] CVE-2010-2861: Adobe ColdFusion - Adobe ColdFusion Directory Traversal Vulnerability
Medium[CISA KEV] CVE-2013-5223: D-Link DSL-2760U - D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability
Medium[CISA KEV] CVE-2015-0666: Cisco Prime Data Center Network Manager (DCNM) - Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
Medium[CISA KEV] CVE-2013-1690: Mozilla Firefox and Thunderbird - Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
Medium[CISA KEV] CVE-2016-4523: Trihedral VTScada (formerly VTS) - Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
Medium[CISA KEV] CVE-2018-6882: Synacor Zimbra Collaboration Suite (ZCS) - Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Medium[CISA KEV] CVE-2019-0880: Microsoft Windows - Microsoft Windows Privilege Escalation Vulnerability
Medium[CISA KEV] CVE-2019-0703: Microsoft Windows - Microsoft Windows SMB Information Disclosure Vulnerability
Medium[CISA KEV] CVE-2019-5786: Google Chrome Blink - Google Chrome Blink Use-After-Free Vulnerability
Medium[CISA KEV] CVE-2019-0676: Microsoft Internet Explorer - Microsoft Internet Explorer Information Disclosure Vulnerability
Medium[CISA KEV] CVE-2016-0162: Microsoft Internet Explorer - Microsoft Internet Explorer Information Disclosure Vulnerability
Medium[CISA KEV] CVE-2017-0022: Microsoft XML Core Services - Microsoft XML Core Services Information Disclosure Vulnerability
Medium[CISA KEV] CVE-2013-2423: Oracle Java Runtime Environment (JRE) - Oracle JRE Unspecified Vulnerability
Medium[CISA KEV] CVE-2008-0655: Adobe Acrobat and Reader - Adobe Acrobat and Reader Unspecified Vulnerability
Medium[CISA KEV] CVE-2012-0767: Adobe Flash Player - Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability
Medium[CISA KEV] CVE-2016-1646: Google Chromium V8 - Google Chromium V8 Out-of-Bounds Read Vulnerability
Medium[CISA KEV] CVE-2022-0028: Palo Alto Networks PAN-OS - Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
Medium[CISA KEV] CVE-2022-24706: Apache CouchDB - Apache CouchDB Insecure Default Initialization of Resource Vulnerability
Medium[CISA KEV] CVE-2020-9934: Apple iOS, iPadOS, and macOS - Apple iOS, iPadOS, and macOS Input Validation Vulnerability
Medium[CISA KEV] CVE-2015-5317: Jenkins Jenkins User Interface (UI) - Jenkins User Interface (UI) Information Disclosure Vulnerability
Medium[CISA KEV] CVE-2023-28204: Apple Multiple Products - Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
Medium[CISA KEV] CVE-2020-35730: Roundcube Roundcube Webmail - Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
Medium[CISA KEV] CVE-2023-36563: Microsoft WordPad - Microsoft WordPad Information Disclosure Vulnerability
Medium[CISA KEV] CVE-2023-42916: Apple Multiple Products - Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
Medium[CISA KEV] CVE-2023-21237: Android Pixel - Android Pixel Information Disclosure Vulnerability
Medium[CISA KEV] CVE-2014-100005: D-Link DIR-600 Router - D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
Medium[CISA KEV] CVE-2024-39891: Twilio Authy - Twilio Authy Information Disclosure Vulnerability
Medium[CISA KEV] CVE-2021-41277: Metabase Metabase - Metabase GeoJSON API Local File Inclusion Vulnerability
Medium[CISA KEV] CVE-2024-44309: Apple Multiple Products - Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
Medium[CISA KEV] CVE-2024-41713: Mitel MiCollab - Mitel MiCollab Path Traversal Vulnerability
Medium[CISA KEV] CVE-2020-2883: Oracle WebLogic Server - Oracle WebLogic Server Unspecified Vulnerability
Medium[CISA KEV] CVE-2021-26829: OpenPLC ScadaBR - OpenPLC ScadaBR Cross-site Scripting Vulnerability
Medium[CISA KEV] CVE-2026-20805: Microsoft Windows - Microsoft Windows Information Disclosure Vulnerability
Medium[CISA KEV] CVE-2026-21525: Microsoft Windows - Microsoft Windows NULL Pointer Dereference Vulnerability
Medium[CISA KEV] CVE-2025-68461: Roundcube Webmail - RoundCube Webmail Cross-site Scripting Vulnerability
Medium[CISA KEV] CVE-2025-47813: Wing FTP Server Wing FTP Server - Wing FTP Server Information Disclosure Vulnerability
Medium[CISA KEV] CVE-2026-32201: Microsoft SharePoint Server - Microsoft SharePoint Server Improper Input Validation Vulnerability
Medium[CISA KEV] CVE-2026-20133: Cisco Catalyst SD-WAN Manager - Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium[CISA KEV] CVE-2026-33825: Microsoft Defender - Microsoft Defender Insufficient Granularity of Access Control Vulnerability
Medium[CISA KEV] CVE-2026-32202: Microsoft Windows - Microsoft Windows Protection Mechanism Failure Vulnerability

Daily breach, advisory, and vulnerability briefs publish every weekday.

View Live Breach Feed ← All Weekly Digests