| CVE-2024-20353 Known exploited | High 8.6 | A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote att… Assigned by cisco | Apr 24, 2024 |
| CVE-2024-4040 Known exploited | Critical 9.8 | Unauthenticated arbitrary file read and remote code execution in CrushFTP Assigned by directcyber | Apr 22, 2024 |
| CVE-2024-27348 Known exploited | Critical 9.8 | Apache HugeGraph-Server: Command execution in gremlin Assigned by apache | Apr 22, 2024 |
| CVE-2024-3400 Known exploited | Critical 10.0 | PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect Assigned by palo_alto | Apr 12, 2024 |
| CVE-2024-29988 Known exploited | High 8.8 | SmartScreen Prompt Security Feature Bypass Vulnerability Assigned by microsoft | Apr 9, 2024 |
| CVE-2024-29748 Known exploited | High 7.8 | there is a possible way to bypass due to a logic error in the code. Assigned by Google_Devices | Apr 5, 2024 |
| CVE-2024-29745 Known exploited | Medium 5.5 | there is a possible Information Disclosure due to uninitialized data. Assigned by Google_Devices | Apr 5, 2024 |
| CVE-2024-3273 Known exploited | High 7.3 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection Assigned by VulDB | Apr 4, 2024 |
| CVE-2024-3272 Known exploited | Critical 9.8 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials Assigned by VulDB | Apr 4, 2024 |
| CVE-2024-29059 Known exploited | High 7.5 | .NET Framework Information Disclosure Vulnerability Assigned by microsoft | Mar 22, 2024 |
| CVE-2024-20767 Known exploited | High 7.4 | ColdFusion | Improper Access Control (CWE-284) Assigned by adobe | Mar 18, 2024 |
| CVE-2024-26169 Known exploited | High 7.8 | Windows Error Reporting Service Elevation of Privilege Vulnerability Assigned by microsoft | Mar 12, 2024 |
| CVE-2023-48788 Known exploited | Critical 9.3 | A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to e… Assigned by fortinet | Mar 12, 2024 |
| CVE-2024-23296 Known exploited | High 7.8 | A memory corruption issue was addressed with improved validation. Assigned by apple | Mar 5, 2024 |
| CVE-2024-23225 Known exploited | High 7.8 | A memory corruption issue was addressed with improved validation. Assigned by apple | Mar 5, 2024 |
| CVE-2024-27199 Known exploited | High 7.3 | In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible Assigned by JetBrains | Mar 4, 2024 |
| CVE-2024-27198 Known exploited | Critical 9.8 | In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible Assigned by JetBrains | Mar 4, 2024 |
| CVE-2024-1212 Known exploited | Critical 10.0 | LoadMaster Pre-Authenticated OS Command Injection Assigned by ProgressSoftware | Feb 21, 2024 |
| CVE-2024-1709 Known exploited | Critical 10.0 | Authentication bypass using an alternate path or channel Assigned by cisa-cg | Feb 21, 2024 |
| CVE-2024-1708 Known exploited | High 8.4 | Improper limitation of a pathname to a restricted directory (“path traversal”) Assigned by cisa-cg | Feb 21, 2024 |
| CVE-2024-20953 Known exploited | High 8.8 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). Assigned by oracle | Feb 17, 2024 |
| CVE-2024-23113 Known exploited | Critical 9.8 | A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8,… Assigned by fortinet | Feb 15, 2024 |
| CVE-2024-21412 Known exploited | High 8.1 | Internet Shortcut Files Security Feature Bypass Vulnerability Assigned by microsoft | Feb 13, 2024 |
| CVE-2024-21410 Known exploited | Critical 9.8 | Microsoft Exchange Server Elevation of Privilege Vulnerability Assigned by microsoft | Feb 13, 2024 |
| CVE-2024-21413 Known exploited | Critical 9.8 | Microsoft Outlook Remote Code Execution Vulnerability Assigned by microsoft | Feb 13, 2024 |
| CVE-2024-21351 Known exploited | High 7.6 | Windows SmartScreen Security Feature Bypass Vulnerability Assigned by microsoft | Feb 13, 2024 |
| CVE-2024-21338 Known exploited | High 7.8 | Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft | Feb 13, 2024 |
| CVE-2024-21762 Known exploited | Critical 9.6 | A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy version… Assigned by fortinet | Feb 9, 2024 |
| CVE-2024-21893 Known exploited | High 8.2 | A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access cer… Assigned by hackerone | Jan 31, 2024 |
| CVE-2024-1086 Known exploited | High 7.8 | Use-after-free in Linux kernel's netfilter: nf_tables component Assigned by Google | Jan 31, 2024 |
| CVE-2024-23897 Known exploited | Critical 9.8 | Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents,… Assigned by jenkins | Jan 24, 2024 |
| CVE-2024-23222 Known exploited | High 8.8 | A type confusion issue was addressed with improved checks. Assigned by apple | Jan 23, 2024 |
| CVE-2024-0769 Known exploited | Medium 5.3 | D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal Assigned by VulDB | Jan 21, 2024 |
| CVE-2023-6549 Known exploited | High 8.2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read Assigned by Citrix | Jan 17, 2024 |
| CVE-2023-6548 Known exploited | Medium 5.5 | Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticate… Assigned by Citrix | Jan 17, 2024 |
| CVE-2024-0519 Known exploited | High 8.8 | Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome | Jan 16, 2024 |
| CVE-2023-22527 Known exploited | Critical 10.0 | A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Assigned by atlassian | Jan 16, 2024 |
| CVE-2024-21887 Known exploited | Critical 9.1 | A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests… Assigned by hackerone | Jan 12, 2024 |
| CVE-2023-46805 Known exploited | High 8.2 | An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks. Assigned by hackerone | Jan 12, 2024 |
| CVE-2023-7028 Known exploited | Critical 10.0 | Weak Password Recovery Mechanism for Forgotten Password in GitLab Assigned by GitLab | Jan 12, 2024 |
| CVE-2023-41974 Known exploited | High 7.8 | A use-after-free issue was addressed with improved memory management. Assigned by apple | Jan 10, 2024 |
| CVE-2022-48618 Known exploited | High 7.0 | The issue was addressed with improved checks. Assigned by apple | Jan 9, 2024 |
| CVE-2022-2586 Known exploited | Medium 5.3 | It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted. Assigned by canonical | Jan 8, 2024 |
| CVE-2023-7101 Known exploited | High 7.8 | Arbitrary Code Execution (ACE) Vulnerability Assigned by Mandiant | Dec 24, 2023 |
| CVE-2023-7024 Known exploited | High 8.8 | Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome | Dec 21, 2023 |
| CVE-2023-47565 Known exploited | High 8.0 | Legacy VioStor NVR Assigned by qnap | Dec 8, 2023 |
| CVE-2023-49897 Known exploited | High 8.8 | An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. Assigned by jpcert | Dec 6, 2023 |
| CVE-2023-44221 Known exploited | High 7.2 | Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody'… Assigned by sonicwall | Dec 5, 2023 |
| CVE-2023-6448 Known exploited | Critical 9.8 | Unitronics VisiLogic uses a default administrative password Assigned by cisa-cg | Dec 5, 2023 |
| CVE-2023-33107 Known exploited | High 8.4 | Integer Overflow or Wraparound in Graphics Linux Assigned by qualcomm | Dec 5, 2023 |
