Known exploited vulnerabilities

A malicious email can run code in a person’s webmail session if the mail server has not been updated, potentially exposing or misusing that user’s email account

A malicious calendar invitation can make vulnerable webmail accounts run attacker-controlled actions when a user opens the message

A flaw in ZKTeco BioTime can let outsiders read sensitive files from the server unless the system is updated or tightly restricted

A flaw in a SAP upload feature can let an attacker with privileged access take over the server and disrupt or steal critical business data

Attackers can remotely take control of certain DrayTek routers if they are not updated, putting network traffic and connectivity at risk

Attackers can break into vulnerable Fortinet appliances over the network without a password, so exposed systems need urgent updating or isolation

Attackers who already get a basic foothold on an affected Windows computer can use this flaw to take full control of it

A flaw in Windows can let someone who already gets onto a computer take full control of it, so affected systems need to be updated promptly

Attackers can use malicious web or script content to take control of unpatched Windows computers, so affected systems should be updated promptly

An attacker who already gets onto a Windows computer can use this flaw to gain much more control over it, so affected systems should be updated immediately

Attackers who already get a small foothold on a Windows computer can use this flaw to take full control of it unless it is updated

Some supposedly protected archived messages were stored in readable form, so anyone who accessed the archive backend may have been able to read sensitive…

Some older GeoVision security devices can be taken over remotely without a password, so they should be replaced, updated if possible, or isolated from…

A malicious font file can compromise or crash software that reads it unless the affected font-handling components are updated

Langflow Vulnerable to Code Injection via the `/api/v1/validate/code` endpoint

Attackers can take over unpatched Langflow servers remotely, potentially stealing secrets, disrupting operations, or deploying ransomware

Attackers can take over vulnerable Commvault backup management servers remotely and may be able to steal, alter, or destroy backup data needed for recovery

yiisoft/yii2 Mishandles the Attaching of Behavior Defined by a `__class` Array Key

A flaw in a widely used PHP web framework can let attackers take over vulnerable websites if they have not been updated

A flaw in certain SonicWall remote-access appliances can let an attacker with administrator access run commands on the device and potentially use it as a…

Attackers can break into vulnerable SAP systems without a password by uploading a malicious file, potentially stealing data, disrupting operations, or…

Attackers with a login can take over vulnerable Commvault backup web servers by planting malicious files, putting backup data and recovery operations at risk

An attacker who already has administrator access to an affected storage switch can gain complete control of it and potentially disrupt critical storage…

Attackers can remotely break into or crash vulnerable Active! mail servers unless they are updated or isolated

A malicious audio file could let attackers take control of unpatched Apple devices, so affected devices should be updated immediately

Some Apple devices had a serious flaw that could help a skilled attacker break built-in protections and take control of a targeted device unless it is updated

A malicious file can trick Windows into sending a user’s login proof to an attacker, which may let the attacker break into other systems

A flaw in the device management portal can let a logged-in attacker run commands that may disrupt the appliance and related remote access services

A malicious USB device could crash or potentially take control of an unpatched Linux computer when it is plugged in or virtually attached

A malicious USB audio device can make vulnerable Linux systems read memory they should not, potentially exposing sensitive data or crashing the machine

Attackers who already get onto a Windows computer can use this flaw to take full control of it and help launch ransomware attacks

Attackers can take over vulnerable CentreStack file-sharing servers remotely, so affected systems should be updated and checked for compromise immediately

Attackers can break into vulnerable CrushFTP file-transfer servers without a password and take control of sensitive file-sharing operations

Attackers can break into vulnerable Ivanti remote-access systems from the internet and use them as a gateway into the organization

Attackers can abuse certain misconfigured Tomcat web servers to alter files or take control of the server, so exposed systems should be updated and checked for…

A flaw in Cisco’s licensing tool lets outsiders sign in as an administrator if they can reach it, so exposed systems must be updated or isolated quickly

Attackers can silently take complete control of vulnerable Sitecore websites by sending specially crafted data in a security token, potentially leading to…

Attackers who already have login access can send specially crafted data to Sitecore software and take over the server to steal information or cause damage

A widely used build automation component was briefly compromised and could have printed private passwords and access keys into build logs

Attackers can abuse vulnerable backup servers to read sensitive files and steal credentials that may let them take control of other important systems

A flaw in certain business server software lets outsiders read any file on the computer without needing to log in

A widely used build automation component was tampered with in a way that could expose private passwords and access keys in build logs

Attackers can take full control of vulnerable Fortinet firewall or proxy devices when a trusted device-linking feature is enabled, creating a serious risk of…

A person who already has powerful shell access to an affected Juniper device could tamper with its operating system, so vulnerable devices should be upgraded…

Attackers could use a malicious web page to break out of normal browser protections on unpatched Apple devices and gain unauthorized access

A malicious file can abuse a built-in Windows management tool to help attackers run malware, including ransomware, if a user opens it

Attackers can abuse a Windows file-system flaw to take over a computer when it handles specially crafted storage content, so affected systems need urgent…

A Windows file system flaw can let someone who already has access to a computer read information they should not be able to see, so affected systems should be…

A flaw in Windows can let someone who already has limited access take full control of a computer by getting it to process a malicious storage device or disk…

Someone with physical access to an unpatched Windows device may be able to recover sensitive information from the drive without signing in

A flaw in Windows can let someone who already has basic access to a computer take it over with much higher privileges, so affected systems should be updated…

A flaw in VeraCore can let outsiders tamper with the system’s database, putting important business data and operations at risk