Attackers can remotely crash or take over certain older Cisco network devices by sending specially crafted messages, potentially disrupting entire networks…
Published Mar 28, 2018 EPSS 99.5% Act now
Known exploited vulnerabilities
Vulnerabilities CISA has confirmed are being exploited in the wild. These carry remediation deadlines for US federal agencies, and are a reasonable priority order for everyone else.
1533 in the catalogue · showing 1501–1533
Attackers can reach and tamper with files they should not access inside the company's customer management system by slipping special characters into web…
Published Mar 1, 2018 EPSS 28.9% Act now
A flaw in old Adobe Flash software lets attackers take over computers when users open certain files or web pages, and criminals have already used it to install…
Published Feb 6, 2018 EPSS 90.3% Act now
Opening a specially made document can let attackers take over a computer and install harmful software like ransomware
Published Jan 10, 2018 EPSS 93.3% Act now
A flaw in Microsoft Office can let attackers run their own code on a computer simply by getting someone to open a specially made document
Published Jan 10, 2018 EPSS 95.1% Act now
A flaw in Microsoft Office lets attackers run harmful code on a computer when someone opens a specially crafted document, which can lead to stolen data or…
Published Nov 15, 2017 EPSS 99.9% Act now
A bug in the webmail software lets someone who already has a valid login read any file stored on the server, which attackers have used to steal sensitive…
Published Nov 9, 2017 EPSS 45.7% Act now
A problem in how certain email software handles data in memory lets attackers run unwanted programs on a computer simply by getting someone to open a bad…
Published Oct 13, 2017 EPSS 59.6% Act now
A web application framework flaw let attackers run their own programs on servers simply by sending special data, putting sensitive information and operations…
Published Sep 15, 2017 EPSS 99.4% Act now
A flaw in older versions of a core Windows software component lets attackers take over a computer simply by getting a user to open a specially made file
Published Sep 13, 2017 EPSS 88.7% Act now
Attackers could take over the email security system to read, alter, or misuse company email traffic and potentially spread malware
Published Aug 11, 2017 EPSS 35.9% Act now
Older versions of a popular website platform can be taken over by attackers who send a specially made cookie, potentially allowing them to steal data or…
Published Jul 20, 2017 EPSS 94.8% Act now
A long-standing flaw in popular web tools lets attackers bypass security protections, steal information, or take control of websites if the software is not…
Published Jul 3, 2017 EPSS 75.1% Act now
Opening a specially made document in older Microsoft Office programs can let attackers secretly take control of the computer and install harmful software like…
Published Apr 12, 2017 EPSS 99.5% Act now
A flaw in an old web server component lets attackers take over computers running very outdated Microsoft server software simply by sending one specially made…
Published Mar 27, 2017 EPSS 99.8% Act now
A flaw in older Windows file-sharing software lets attackers take over computers over the network and install ransomware, which has already caused major…
Published Mar 17, 2017 EPSS 93.3% Act now
A web framework used by many sites contained a flaw that let attackers run any commands they wanted on the server simply by sending a specially crafted web…
Published Mar 11, 2017 EPSS 100.0% Act now
A flaw in SAP's business process software lets logged-in users trick the system into revealing internal files or connecting to other systems, which attackers…
Published Nov 23, 2016 EPSS 24.2% Act now
A problem in Windows lets someone who can run programs on a computer take complete control of it, which criminals have already used to spread ransomware
Published Nov 10, 2016 EPSS 81.0% Act now
SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat…
Published Jun 17, 2016 EPSS 3.7%
Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows…
Published Jun 16, 2016 EPSS 43.3%
A missing or weak encryption setting in an older web security library lets attackers send a specially made web request that can take over the application…
Published Jun 7, 2016 EPSS 93.0% Act now
The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to…
Published May 13, 2016 EPSS 17.8%
Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link…
Published May 11, 2016 EPSS 69.8%
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF)…
Published May 5, 2016 EPSS 75.6%
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image
Published May 5, 2016 EPSS 75.3%
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows…
Published Apr 12, 2016 EPSS 5.7%
Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the…
Published Apr 7, 2016 EPSS 47.3%
A flaw in certain Oracle server software lets attackers run any commands they want on the machine over the network without needing a password
Published Nov 18, 2015 EPSS 95.0% Act now
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation…
Published Apr 14, 2015 EPSS 97.2%
Attackers who already have basic network access can steal hidden passwords from shared system folders to take over more computers and install ransomware
Published May 14, 2014 EPSS 65.1% Act now
A flaw in Oracle reporting software lets remote attackers steal or add files on the server, which can be used to take control of affected systems
Published Oct 16, 2012 EPSS 98.8% Act now
Old Microsoft programs can be tricked by a bad file or website into letting attackers take over the computer completely
Published Apr 10, 2012 EPSS 100.0% Act now