Skip to content
OpenAdvisories

Latest vulnerabilities

Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.

Tracked
409,442
Last 24h
646
Critical, 7 days
338
Known exploited
1,779
All Critical High Medium Low Exploited only Public exploit

472 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-2551 Exploited Public exploit Scanner template EPSS 93%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppo…

    Oracle WebLogic Server
    KEV Nov 16, 2023
  • Critical 9.8
    CVE-2020-2555 Exploited Public exploit EPSS 97%

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). S…

    Oracle WebCenter Portal Utilities Framework
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-0646 Exploited Public exploit EPSS 99%

    A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.…

    Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-17621 Exploited Public exploit EPSS 91%

    The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated re…

    KEV Jun 29, 2023
  • Critical 9.8
    CVE-2019-19781 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. T…

    KEV Nov 3, 2021
  • Critical 9.9
    CVE-2019-10758 Exploited Public exploit Scanner template EPSS 85%

    Remote Code Execution Vulnerability in NPM mongo-express

    mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.

    mongo-express npm
    KEV Dec 10, 2021
  • Critical 10.0
    CVE-2019-4716 Exploited Public exploit Scanner template EPSS 86%

    IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated us…

    IBM Planning Analytics
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-18935 Exploited · Ransomware Public exploit EPSS 100%

    Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncU…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-5544 Exploited · Ransomware Public exploit Scanner template EPSS 98%

    OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity o…

    openslp-dfsg openslp Virtualization Ubuntu Azure Linux
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-7195 Exploited · Ransomware Public exploit Scanner template EPSS 89%

    This external control of file name or path vulnerability allows remote attackers to access or modify system files. To f…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2019-7194 Exploited · Ransomware Public exploit Scanner template EPSS 83%

    This external control of file name or path vulnerability allows remote attackers to access or modify system files. To f…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2019-7192 Exploited · Ransomware Public exploit Scanner template EPSS 88%

    This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix th…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2019-16278 Exploited Public exploit Scanner template EPSS 99%

    Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote c…

    KEV Nov 7, 2024
  • Critical 9.8
    CVE-2019-16920 Exploited Public exploit Scanner template EPSS 100%

    Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The …

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2019-16759 Exploited Public exploit Scanner template EPSS 100%

    vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widg…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-15107 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulner…

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2019-11581 Exploited Public exploit Scanner template EPSS 85%

    There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators a…

    Atlassian Jira Server and Data Center Web / CMS
    KEV Mar 7, 2022
  • Critical 10.0
    CVE-2019-11708 Exploited Public exploit EPSS 56%

    Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can resul…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
    KEV May 23, 2022
  • Critical 9.8
    CVE-2019-12989 Exploited Public exploit Scanner template EPSS 95%

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2019-7256 Exploited Public exploit Scanner template EPSS 97%

    Linear eMerge E3-Series devices allow Command Injections.

    KEV Mar 25, 2024
  • Critical 9.0
    CVE-2019-10149 Exploited Public exploit EPSS 100%

    A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message…

    Exim Exim exim4 exim4 Debian Ubuntu Alpine
    KEV Jan 10, 2022
  • Critical 9.1
    CVE-2018-13382 Exploited · Ransomware Public exploit EPSS 82%

    An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and Fort…

    Fortinet Fortinet FortiOS, FortiProxy Network devices
    KEV Jan 10, 2022
  • Critical 9.1
    CVE-2018-13379 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5…

    Fortinet Fortinet FortiOS, FortiProxy Network devices
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-11580 Exploited · Ransomware Public exploit Scanner template EPSS 95%

    Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Atta…

    Atlassian Crowd
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-9670 Exploited Public exploit Scanner template EPSS 100%

    mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (X…

    KEV Jan 10, 2022
  • Critical 9.8
    CVE-2018-7841 Exploited Public exploit Scanner template EPSS 72%

    A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted cod…

    U.motion U.motion Builder software version 1.3.4
    KEV Apr 15, 2022
  • Critical 9.8
    CVE-2019-0708 Exploited · Ransomware Public exploit EPSS 100%

    A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an una…

    Microsoft Windows Windows Server Windows
    KEV Nov 3, 2021
  • Critical 9.9
    CVE-2019-11510 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthen…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2017-18368 Exploited Public exploit EPSS 95%

    The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injec…

    KEV Aug 7, 2023
  • Critical 9.8
    CVE-2019-3929 Exploited Public exploit Scanner template EPSS 99%

    The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, B…

    Crestron Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4.
    KEV Apr 15, 2022
  • Critical 9.8
    CVE-2019-10068 Exploited Public exploit Scanner template EPSS 95%

    An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x version…

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2019-3396 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from ver…

    Atlassian Confluence Server Web / CMS
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-7609 Exploited Public exploit Scanner template EPSS 95%

    Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacke…

    Elastic Kibana
    KEV Jan 10, 2022
  • Critical 9.8
    CVE-2019-7238 Exploited Public exploit Scanner template EPSS 77%

    Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

    KEV Dec 10, 2021
  • Critical 9.9
    CVE-2019-1003029 Exploited Public exploit EPSS 74%

    Sandbox bypass in Script Security Plugin

    A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScr…

    Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
    KEV Apr 25, 2022
  • Critical 9.9
    CVE-2019-1003030 Exploited Public exploit Scanner template EPSS 97%

    Sandbox bypass in Jenkins Pipeline: Groovy Plugin

    A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the …

    Jenkins Project Jenkins Pipeline: Groovy Plugin org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven
    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2019-0604 Exploited · Ransomware Public exploit EPSS 100%

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…

    Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2018-19323 Exploited · Ransomware Public exploit

    The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING…

    KEV Oct 24, 2022
  • Critical 9.8
    CVE-2018-20062 Exploited Public exploit Scanner template EPSS 100%

    An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PH…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2018-1000861 Exploited Public exploit Scanner template EPSS 98%

    Deserialization of Untrusted Data in Jenkins

    A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by acce…

    org.jenkins-ci.main:jenkins-core Maven
    KEV Feb 10, 2022