Known exploited vulnerabilities

Old Windows computers contain a flaw that lets attackers who trick a user into opening a program take over the entire machine and install ransomware

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2…

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and…

Older Mozilla browser and email applications had a flaw that could let a malicious website or message take over the app and potentially compromise the user’s…

An outdated Mozilla browser or email app could let an attacker take over a user's device after they open malicious web or email content

Attackers can trick vulnerable VMware management servers into contacting internal systems and revealing information that could help them plan a larger breach

A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the…

A flaw in Jira lets outsiders run their own commands on the server without logging in, which can expose internal project information and allow attackers to…

Attackers can take over certain older NETGEAR routers by sending special web requests that let them run any commands they want on the device

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta…

Attackers could steal private information from certain older web servers without needing any login credentials

If a web application server was left without any password set, outsiders could reach files and folders that should have stayed private

Old versions of a web application server can be taken over by anyone on the internet if no password is set, letting attackers steal information or run their…

Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data…

Some Cisco small-business routers can be taken over or crashed if an attacker reaches a vulnerable device component, putting network connectivity and traffic…

Attackers can take control of certain Cisco small-business routers, potentially disrupting connectivity and using the device as a hidden entry point into the…

Attackers can take over certain Cisco small-business routers from the internet, potentially disrupting connectivity and using the router to access or monitor…

Attackers can take control of vulnerable small-business routers, disrupting connectivity and using them as a doorway into the network

Attackers can take control of certain Cisco small-business routers from the internet, potentially disrupting connectivity and using the device to break into…

An attacker who already has limited access to a Windows computer may be able to turn that access into full control, enabling theft, disruption, or ransomware

A networking flaw in certain devices lets nearby attackers disrupt operations or make small unauthorized changes without needing passwords or remote access

A configuration issue in Tomcat lets attackers who reach a special internal port read private files or run malicious code on the server

A problem in Excel lets attackers run their own code on a computer simply by getting someone to open a specially crafted spreadsheet file

Attackers with admin login details can take full control of certain Cisco routers by sending bad data through the management webpage, letting them run any…

A flaw in email servers lets outsiders take over the system and potentially lock up or steal company information

Attackers can send a specially made network message that crashes certain Cisco and Rockwell switches, knocking entire networks offline until they restart

A flaw in widely used Cisco network equipment lets attackers send specially crafted network messages that crash the devices, knocking critical network services…

A flaw in certain Cisco network devices lets remote attackers crash them without needing any login credentials, which can take networks offline until someone…

Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a…

Attackers can remotely crash certain Cisco network devices by sending a specially crafted network message, causing outages until the devices are restarted or…

A flaw in how certain network devices handle neighbor-discovery messages can let someone nearby crash the device or take it over, potentially knocking out…

Attackers can remotely crash certain Cisco routers that handle VPN connections, knocking entire networks offline until the devices are restarted

Attackers can send special messages that make certain Cisco network devices run out of memory and restart, knocking networks offline until fixed

Nearby attackers can crash or take control of certain network devices by sending specially crafted discovery messages

Attackers can remotely crash or take over certain Cisco network devices by sending specially made network packets, potentially disrupting entire networks

A flaw in certain Cisco network devices lets anyone on the network send a specially made message that makes the device restart, knocking it offline until it…

Attackers can remotely crash certain Cisco network devices by sending specially crafted messages, knocking networks offline until the devices restart

Certain older Cisco network switches can be crashed remotely by an attacker who already knows the management password, causing sudden network outages until the…

A flaw in certain older Cisco network switches lets attackers send a specially made message that crashes the switch and knocks it offline until it restarts

Certain older Cisco network devices can be forced to crash or lose their routing information when they receive a specially crafted message from a trusted…

Old Adobe Flash software contains a bug that lets attackers take over a computer simply by getting someone to open a malicious web page or file

A flaw in older Microsoft Office programs lets attackers take over a computer simply by getting someone to open a specially made document

Attackers can take over or crash certain older Cisco network routers by sending a specially made network message, which could disrupt business networks or let…

Attackers can remotely crash many Cisco routers and switches by sending specially formatted network packets, knocking entire sites or VPN connections offline…

Attackers can remotely crash certain older Cisco industrial network devices, forcing restarts that interrupt connected operations until the devices come back…

Certain older Cisco network switches can be crashed by nearby attackers who flood them with specific traffic, cutting off network connections until the device…

Attackers can send specially crafted messages that crash certain older Cisco network devices, knocking them offline until someone restarts them

Attackers can send a specially made message that makes certain Cisco network devices crash and restart, briefly knocking services offline until they recover

Attackers on the same local network can send a specially made message that makes certain Cisco routers crash and restart, interrupting network traffic until…

A flaw in certain Cisco network devices lets attackers send bad messages that crash the devices and stop network operations until they restart