Known exploited vulnerabilities

Attackers can use a vulnerable Ivanti VPN appliance as a doorway into an organization’s network and may steal credentials or support ransomware attacks

Attackers can break into vulnerable Ivanti remote-access appliances without a password, potentially giving them a path into the wider network

Attackers can break into vulnerable SharePoint servers without a password and gain powerful access to company files and settings

A malicious file could compromise an unpatched Apple device when the device processes a specially crafted font

A flaw in Adobe ColdFusion lets attackers take over unpatched servers remotely without anyone clicking anything

Attackers can remotely take over unpatched ColdFusion servers and use them to steal data, disrupt services, or deploy ransomware

Some Apache Superset installations used a public default secret that could let outsiders sign in as legitimate users and view or change analytics data

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through…

A specially crafted Excel file can cause vulnerable software that reads spreadsheets to run an attacker’s commands

An attacker with a valid login could make certain older video recorder systems run unauthorized commands, potentially exposing recordings or disrupting…

Attackers with a login can take control of affected network devices and use them to steal settings, disrupt connectivity, or attack other systems

Attackers can take control of certain industrial control panels if they are still using an unchanged built-in administrator password

Attackers can abuse an unpatched Qlik Sense server to turn limited access into control of the analytics platform, exposing data and potentially supporting…

A flaw in Qlik Sense can let outsiders reach parts of the analytics system they should not be able to access, and attackers have used it in real ransomware…

Attackers with a foothold on affected Qualcomm-based devices can use a graphics driver flaw to take much deeper control of the device, so vendor firmware…

Affected Qualcomm-based devices can be taken over by an attacker who has already managed to run a malicious program on the device, so vendor firmware or…

An attacker who already has limited access to an affected device may be able to take much greater control of it by abusing a flaw in its chipset software

Some Qualcomm-powered devices can be taken over by a malicious app or attacker who already has limited access unless the device firmware or operating system…

A vulnerable ownCloud component can expose passwords and system details to anyone who visits a specific web address, so affected systems must be updated and…

A flaw in a common Linux component can let someone who already has basic access take full control of the machine unless it is patched

A malicious file from the internet can bypass Windows safety warnings, making it easier to trick someone into opening harmful content

An attacker can break into vulnerable Sophos web filtering appliances remotely without a password and take control of them

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are…

A regular user or malware already on a Windows computer may be able to take full control of it unless the latest security updates are installed

An attacker who already gets limited access to a Windows computer can use this flaw to take full control of it if the system is not updated

Attackers can trick people into opening malicious Windows files without the normal safety warning appearing, making malware infections more likely on unpatched…

A flaw in affected on-premise SysAid servers lets attackers break into the system remotely, run their own code, and potentially use it as a starting point for…

Attackers can contact the firewall’s web management page without logging in and use it to read or place files, which could help them undermine a key network…

An exposed Juniper web management interface can let an unauthenticated attacker take control of the network device unless it is patched or access is restricted

Attackers can abuse a flaw in some Juniper firewalls to place files on the device without logging in, potentially helping them take further control of the…

Attackers can abuse an exposed Juniper switch management webpage to tamper with how it runs and potentially combine that with other flaws to take control of…

Attackers can abuse an exposed Juniper switch management webpage to upload files without signing in, which can help them tamper with network equipment

A network discovery service can be abused to flood other systems with traffic, causing outages or making your infrastructure appear to participate in attacks

Attackers can take over some self-hosted Confluence sites without a password, giving them control over company documents and the ability to disrupt or destroy…

An attacker with a valid login could take control of vulnerable F5 BIG-IP management systems, putting important application traffic and security controls at…

Attackers can take control of vulnerable F5 BIG-IP devices over the network and use them to steal data, change traffic, or disrupt critical applications

Attackers can take full control of certain Cisco network devices through their web management feature if they gain administrative access, putting network…

Attackers can steal active remote-access sessions from vulnerable Citrix gateway systems and use them to get inside without needing a password

Attackers can take over vulnerable network devices through an exposed web management page and use them to control or disrupt business network traffic

Attackers can abuse an unpatched communications server to make it access places inside the network that they normally could not reach

A malicious document opened in WordPad can expose sensitive information from Windows computers, so affected systems should be updated promptly

A flaw in a common web protocol allows attackers to easily crash websites and online services by overwhelming them with rapidly cancelled requests

A flaw in some Cisco network devices can let someone who controls part of the encrypted VPN setup crash the device or take it over, potentially disrupting…

A booby-trapped PDF can take over a user’s computer if it is opened with an outdated Adobe PDF reader. CVE-2023-21608 is rated high (CVSS 7.8), is listed in…

An attacker who already gets limited access to a vulnerable device may be able to take much greater control of it, so affected systems should be updated…

Attackers can break into vulnerable self-managed Confluence sites from the internet by creating their own administrator account

A flaw in the file-transfer server can let attackers take control of the system before logging in, potentially stealing files or enabling ransomware

A flaw in TeamCity can let outsiders take over the build server and tamper with software releases. CVE-2023-42793 is rated critical (CVSS 9.8), is listed in…

A flaw in Windows can let someone who already has limited access to a computer take full control if the system has not been updated

A malicious app on an unpatched device with certain Arm Mali graphics drivers may be able to read sensitive data from memory that it should not be allowed to…