Known exploited vulnerabilities

A flaw in a remote access tool can let outsiders run commands on the system without logging in, potentially giving them a path into sensitive administrative…

Some Reolink cameras can be remotely taken over through a network settings request, so exposed devices should be updated, isolated, or replaced quickly

Attackers can take over vulnerable NVR video recorders remotely without a password, potentially giving them control over cameras, recordings, and the device…

Attackers who gain admin access to certain Reolink security cameras can run any commands they want on the device, giving them full control

A flaw in certain network video devices lets outsiders run any commands they want on the device simply by sending a specially crafted request, putting…

Attackers can break into vulnerable Cleo file transfer servers without a password and run commands that may let them steal data or deploy ransomware

An attacker who already gets basic access to a Windows computer can use this flaw to take full control of it unless the system is updated

Attackers can use this flaw to steal sensitive files from vulnerable ColdFusion servers and may be able to change files on them without needing a password

A flaw in Cleo file transfer software can let attackers break into the server, steal transferred files, and potentially deploy ransomware if it is not updated

Attackers who already get a small foothold on an unpatched Windows computer can use this flaw to take full control of it

Attackers can break into vulnerable hosting control panels over the internet without a password and take control of the server

Attackers can abuse vulnerable Zyxel firewall management pages to steal or place files on the device, potentially giving them a foothold for broader attacks…

A flaw in a file-sharing application can let outsiders change settings, create accounts, and plant malicious files without logging in

Attackers can trick vulnerable Proself file-sharing servers into revealing sensitive account and configuration files without logging in

A flaw in certain Array Networks VPN gateways can let outsiders break into the device and use it as a doorway into the organization

An attacker could take over an unpatched Apple device if the user opens malicious web content, and this has already been used in real attacks

A malicious website could abuse a flaw in Apple’s browser software to tamper with what a user sees or does online, so affected Apple devices should be updated…

A flaw in Oracle Agile PLM can let outsiders view sensitive product and supply-chain data without logging in. CVE-2024-21287 is rated high (CVSS 7.5) and is…

Attackers can potentially take full control of a VMware management server if it is not patched. CVE-2024-38813 is rated critical (CVSS 9.8) and is listed in…

An attacker who can reach the VMware management server may be able to take it over and control critical virtual infrastructure unless it is patched

Attackers can turn access to a firewall’s management page into full control of the firewall, potentially letting them change security rules, steal settings, or…

Attackers can take control of exposed Palo Alto firewall management portals without a password and use that access to change defenses or help launch further…

Attackers can take over vulnerable LoadMaster devices remotely and use them to disrupt services or access sensitive network traffic

Attackers can break into vulnerable firewall migration servers without a password and steal sensitive network access information

Attackers can break into an exposed firewall migration tool without a password and steal the information needed to access or change firewall systems

Attackers can use this Windows flaw to turn limited access on a computer into full control, which can help them steal data or launch ransomware

A malicious file or link can trick Windows into sending a user's login proof to an attacker, which could help them break into other systems

Attackers can remotely read protected Jira application files from vulnerable servers, which can expose information that helps them plan a larger compromise

A problem in the login screen of certain Cisco VPN devices lets attackers trick administrators into running malicious code that can steal their access and…

Attackers can remotely take over vulnerable CyberPanel servers without logging in, and this flaw has already been used in real attacks including ransomware…

An attacker who can reach the migration tool can take over its administrator account and steal sensitive firewall configuration data and passwords

An old web server contains a flaw that lets outsiders break in and take full control of the computer without any password, risking theft or shutdown of…

Attackers can take control of vulnerable PTZOptics cameras by abusing a time-server setting unless the camera firmware is updated

Some PTZOptics cameras can let outsiders read or change sensitive settings without logging in, so affected devices should be updated and checked for tampering

Attackers can overwhelm vulnerable Cisco VPN systems with login attempts, preventing legitimate users from connecting remotely

A flaw in Fortinet’s central firewall management system can let outsiders take control of it and access or change important network security settings if it is…

Attackers who already have powerful SharePoint access may be able to take over the server, steal company files, and use it as a launch point for ransomware

A flaw in ScienceLogic SL1 could let attackers compromise a monitoring system that many teams rely on to see and manage business-critical technology

Attackers can remotely take control of vulnerable backup servers, which can let them destroy recovery options and launch ransomware attacks

An outdated Firefox browser can be taken over simply by opening a malicious web page, so affected systems should be updated immediately

A flaw in the help desk software can let outsiders get into the system and change support data without a real login

Attackers who already get a small foothold on an unpatched Windows computer can use this flaw to take full control of it, and it has been used in real attacks…

An attacker with administrator access to a vulnerable Ivanti appliance could manipulate its database and potentially take control of important appliance…

Attackers with admin access to a vulnerable Ivanti remote access appliance can make it run their own commands and potentially use it to break further into the…

Attackers can take control of vulnerable Fortinet security devices remotely, potentially letting them steal access, change network protections, or disrupt…

A malicious file can abuse a built-in Windows management tool to run attacker code if someone opens it, so Windows systems need the relevant security update

A flaw in Windows can let a malicious link or file trick users and expose sensitive information, so affected computers need current security updates

Attackers can take control of vulnerable Zimbra email servers remotely, putting email data and business operations at serious risk

A flaw in Ivanti’s endpoint management server can let someone already on the network take over that server and potentially use it to control other managed…

Attackers can remotely take over certain D-Link routers and use them to disrupt service, spy on traffic, or break further into the network