HackZoneLabs News
Newsletter

Known exploited vulnerabilities

From CISA’s Known Exploited Vulnerabilities catalogue: flaws that attackers are using now, when each was added, and the date federal agencies were told to fix it by.

Feed of new additions

In the catalogue
1781
Added in the last 7 days
12
Used in ransomware
361

The catalogue, newest first

CVEVendorProductNameAddedFix dueRansomware
CVE-2022-46169CactiCactiCacti Command Injection Vulnerability16 Feb 20239 Mar 2023Unknown
CVE-2023-21715MicrosoftOfficeMicrosoft Office Publisher Security Feature Bypass Vulnerability14 Feb 20237 Mar 2023Unknown
CVE-2023-21823MicrosoftWindowsMicrosoft Windows Graphic Component Privilege Escalation Vulnerability14 Feb 20237 Mar 2023Unknown
CVE-2023-23376MicrosoftWindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability14 Feb 20237 Mar 2023Known
CVE-2023-23529AppleMultiple ProductsApple Multiple Products WebKit Type Confusion Vulnerability14 Feb 20237 Mar 2023Unknown
CVE-2015-2291IntelEthernet Diagnostics Driver for WindowsIntel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability10 Feb 20233 Mar 2023Known
CVE-2022-24990TerraMasterTerraMaster OSTerraMaster OS Remote Command Execution Vulnerability10 Feb 20233 Mar 2023Known
CVE-2023-0669FortraGoAnywhere MFTFortra GoAnywhere MFT Remote Code Execution Vulnerability10 Feb 20233 Mar 2023Known
CVE-2022-21587OracleE-Business SuiteOracle E-Business Suite Unspecified Vulnerability2 Feb 202323 Feb 2023Known
CVE-2023-22952SugarCRMMultiple ProductsMultiple SugarCRM Products Remote Code Execution Vulnerability2 Feb 202323 Feb 2023Unknown
CVE-2017-11357TelerikUser Interface (UI) for ASP.NET AJAXTelerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability26 Jan 202316 Feb 2023Known
CVE-2022-47966ZohoManageEngineZoho ManageEngine Multiple Products Remote Code Execution Vulnerability23 Jan 202313 Feb 2023Known
CVE-2022-44877CWPControl Web PanelCWP Control Web Panel OS Command Injection Vulnerability17 Jan 20237 Feb 2023Unknown
CVE-2022-41080MicrosoftExchange ServerMicrosoft Exchange Server Privilege Escalation Vulnerability10 Jan 202331 Jan 2023Known
CVE-2023-21674MicrosoftWindowsMicrosoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability10 Jan 202331 Jan 2023Unknown
CVE-2018-18809TIBCOJasperReportsTIBCO JasperReports Library Directory Traversal Vulnerability29 Dec 202219 Jan 2023Unknown
CVE-2018-5430TIBCOJasperReportsTIBCO JasperReports Server Information Disclosure Vulnerability29 Dec 202219 Jan 2023Unknown
CVE-2022-42856AppleiOSApple iOS Type Confusion Vulnerability14 Dec 20224 Jan 2023Unknown
CVE-2022-26500VeeamBackup & ReplicationVeeam Backup & Replication Remote Code Execution Vulnerability13 Dec 20223 Jan 2023Known
CVE-2022-26501VeeamBackup & ReplicationVeeam Backup & Replication Remote Code Execution Vulnerability13 Dec 20223 Jan 2023Known
CVE-2022-27518CitrixApplication Delivery Controller (ADC) and GatewayCitrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability13 Dec 20223 Jan 2023Unknown
CVE-2022-42475FortinetFortiOSFortinet FortiOS Heap-Based Buffer Overflow Vulnerability13 Dec 20223 Jan 2023Known
CVE-2022-44698MicrosoftDefenderMicrosoft Defender SmartScreen Security Feature Bypass Vulnerability13 Dec 20223 Jan 2023Known
CVE-2022-4262GoogleChromium V8Google Chromium V8 Type Confusion Vulnerability5 Dec 202226 Dec 2022Unknown
CVE-2021-35587OracleFusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability28 Nov 202219 Dec 2022Unknown
CVE-2022-4135GoogleChromium GPUGoogle Chromium GPU Heap Buffer Overflow Vulnerability28 Nov 202219 Dec 2022Unknown
CVE-2022-41049MicrosoftWindowsMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability14 Nov 20229 Dec 2022Unknown
CVE-2021-25337SamsungMobile DevicesSamsung Mobile Devices Improper Access Control Vulnerability8 Nov 202229 Nov 2022Unknown
CVE-2021-25369SamsungMobile DevicesSamsung Mobile Devices Improper Access Control Vulnerability8 Nov 202229 Nov 2022Unknown
CVE-2021-25370SamsungMobile DevicesSamsung Mobile Devices Memory Corruption Vulnerability8 Nov 202229 Nov 2022Unknown
CVE-2022-41073MicrosoftWindowsMicrosoft Windows Print Spooler Privilege Escalation Vulnerability8 Nov 20229 Dec 2022Known
CVE-2022-41091MicrosoftWindowsMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability8 Nov 20229 Dec 2022Known
CVE-2022-41125MicrosoftWindowsMicrosoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability8 Nov 20229 Dec 2022Unknown
CVE-2022-41128MicrosoftWindowsMicrosoft Windows Scripting Languages Remote Code Execution Vulnerability8 Nov 20229 Dec 2022Unknown
CVE-2022-3723GoogleChromium V8Google Chromium V8 Type Confusion Vulnerability28 Oct 202218 Nov 2022Unknown
CVE-2022-42827AppleiOS and iPadOSApple iOS and iPadOS Out-of-Bounds Write Vulnerability25 Oct 202215 Nov 2022Unknown
CVE-2018-19320GIGABYTEMultiple ProductsGIGABYTE Multiple Products Unspecified Vulnerability24 Oct 202214 Nov 2022Known
CVE-2018-19321GIGABYTEMultiple ProductsGIGABYTE Multiple Products Privilege Escalation Vulnerability24 Oct 202214 Nov 2022Known
CVE-2018-19322GIGABYTEMultiple ProductsGIGABYTE Multiple Products Code Execution Vulnerability24 Oct 202214 Nov 2022Known
CVE-2018-19323GIGABYTEMultiple ProductsGIGABYTE Multiple Products Privilege Escalation Vulnerability24 Oct 202214 Nov 2022Known
CVE-2020-3153CiscoAnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability24 Oct 202214 Nov 2022Known
CVE-2020-3433CiscoAnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability24 Oct 202214 Nov 2022Known
CVE-2021-3493LinuxKernelLinux Kernel Privilege Escalation Vulnerability20 Oct 202210 Nov 2022Unknown
CVE-2022-41352SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability20 Oct 202210 Nov 2022Known
CVE-2022-40684FortinetMultiple ProductsFortinet Multiple Products Authentication Bypass Vulnerability11 Oct 20221 Nov 2022Known
CVE-2022-41033MicrosoftWindows COM+ Event System ServiceMicrosoft Windows COM+ Event System Service Privilege Escalation Vulnerability11 Oct 20221 Nov 2022Unknown
CVE-2022-36804AtlassianBitbucket Server and Data CenterAtlassian Bitbucket Server and Data Center Command Injection Vulnerability30 Sep 202221 Oct 2022Unknown
CVE-2022-41040MicrosoftExchange ServerMicrosoft Exchange Server Server-Side Request Forgery Vulnerability30 Sep 202221 Oct 2022Known
CVE-2022-41082MicrosoftExchange ServerMicrosoft Exchange Server Remote Code Execution Vulnerability30 Sep 202221 Oct 2022Known
CVE-2022-3236SophosFirewallSophos Firewall Code Injection Vulnerability23 Sep 202214 Oct 2022Unknown
CVE-2022-35405ZohoManageEngineZoho ManageEngine Multiple Products Remote Code Execution Vulnerability22 Sep 202213 Oct 2022Unknown
CVE-2010-2568MicrosoftWindowsMicrosoft Windows Remote Code Execution Vulnerability15 Sep 20226 Oct 2022Unknown
CVE-2013-2094LinuxKernelLinux Kernel Privilege Escalation Vulnerability15 Sep 20226 Oct 2022Unknown
CVE-2013-2596LinuxKernelLinux Kernel Integer Overflow Vulnerability15 Sep 20226 Oct 2022Unknown
CVE-2013-2597Code AuroraACDB Audio DriverCode Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability15 Sep 20226 Oct 2022Unknown
CVE-2013-6282LinuxKernelLinux Kernel Improper Input Validation Vulnerability15 Sep 20226 Oct 2022Unknown
CVE-2022-40139Trend MicroApex One and Apex One as a ServiceTrend Micro Apex One and Apex One as a Service Improper Validation Vulnerability15 Sep 20226 Oct 2022Unknown
CVE-2022-32917AppleiOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Remote Code Execution Vulnerability14 Sep 20225 Oct 2022Unknown
CVE-2022-37969MicrosoftWindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability14 Sep 20225 Oct 2022Known
CVE-2011-1823AndroidAndroid OSAndroid OS Privilege Escalation Vulnerability8 Sep 202229 Sep 2022Unknown
CVE-2011-4723D-LinkDIR-300 RouterD-Link DIR-300 Router Cleartext Storage of a Password Vulnerability8 Sep 202229 Sep 2022Unknown
CVE-2017-5521NETGEARMultiple DevicesNETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability8 Sep 202229 Sep 2022Unknown
CVE-2018-13374FortinetFortiOS and FortiADCFortinet FortiOS and FortiADC Improper Access Control Vulnerability8 Sep 202229 Sep 2022Known
CVE-2018-2628OracleWebLogic ServerOracle WebLogic Server Unspecified Vulnerability8 Sep 202229 Sep 2022Unknown
CVE-2018-6530D-LinkMultiple RoutersD-Link Multiple Routers OS Command Injection Vulnerability8 Sep 202229 Sep 2022Known
CVE-2018-7445MikroTikRouterOSMikroTik RouterOS Stack-Based Buffer Overflow Vulnerability8 Sep 202229 Sep 2022Unknown
CVE-2020-9934AppleiOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Input Validation Vulnerability8 Sep 202229 Sep 2022Unknown
CVE-2022-26258D-LinkDIR-820LD-Link DIR-820L Remote Code Execution Vulnerability8 Sep 202229 Sep 2022Unknown
CVE-2022-27593QNAPPhoto StationQNAP Photo Station Externally Controlled Reference Vulnerability8 Sep 202229 Sep 2022Known
CVE-2022-3075GoogleChromium MojoGoogle Chromium Mojo Insufficient Data Validation Vulnerability8 Sep 202229 Sep 2022Unknown
CVE-2020-28949PEARArchive_TarPEAR Archive_Tar Deserialization of Untrusted Data Vulnerability25 Aug 202215 Sep 2022Unknown
CVE-2020-36193PEARArchive_TarPEAR Archive_Tar Improper Link Resolution Vulnerability25 Aug 202215 Sep 2022Unknown
CVE-2021-31010AppleiOS, macOS, watchOSApple iOS, macOS, watchOS Sandbox Bypass Vulnerability25 Aug 202215 Sep 2022Unknown
CVE-2021-38406Delta ElectronicsDOPSoft 2Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability25 Aug 202215 Sep 2022Unknown
CVE-2021-39226Grafana LabsGrafanaGrafana Authentication Bypass Vulnerability25 Aug 202215 Sep 2022Unknown
CVE-2022-2294WebRTCWebRTCWebRTC Heap Buffer Overflow Vulnerability25 Aug 202215 Sep 2022Known
CVE-2022-22963VMware TanzuSpring CloudVMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability25 Aug 202215 Sep 2022Unknown
CVE-2022-24112ApacheAPISIXApache APISIX Authentication Bypass Vulnerability25 Aug 202215 Sep 2022Unknown
CVE-2022-24706ApacheCouchDBApache CouchDB Insecure Default Initialization of Resource Vulnerability25 Aug 202215 Sep 2022Unknown
CVE-2022-26352dotCMSdotCMSdotCMS Unrestricted Upload of File Vulnerability25 Aug 202215 Sep 2022Known
CVE-2022-0028Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability22 Aug 202212 Sep 2022Unknown
CVE-2017-15944Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Remote Code Execution Vulnerability18 Aug 20228 Sep 2022Unknown
CVE-2022-21971MicrosoftWindowsMicrosoft Windows Runtime Remote Code Execution Vulnerability18 Aug 20228 Sep 2022Unknown
CVE-2022-22536SAPMultiple ProductsSAP Multiple Products HTTP Request Smuggling Vulnerability18 Aug 20228 Sep 2022Unknown
CVE-2022-26923MicrosoftActive DirectoryMicrosoft Active Directory Domain Services Privilege Escalation Vulnerability18 Aug 20228 Sep 2022Unknown
CVE-2022-2856GoogleChromium IntentsGoogle Chromium Intents Insufficient Input Validation Vulnerability18 Aug 20228 Sep 2022Unknown
CVE-2022-32893AppleiOS and macOSApple iOS and macOS Out-of-Bounds Write Vulnerability18 Aug 20228 Sep 2022Unknown
CVE-2022-32894AppleiOS and macOSApple iOS and macOS Out-of-Bounds Write Vulnerability18 Aug 20228 Sep 2022Unknown
CVE-2022-27925SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability11 Aug 20221 Sep 2022Known
CVE-2022-37042SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability11 Aug 20221 Sep 2022Known
CVE-2022-30333RARLABUnRARRARLAB UnRAR Directory Traversal Vulnerability9 Aug 202230 Aug 2022Known
CVE-2022-34713MicrosoftWindowsMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability9 Aug 202230 Aug 2022Unknown
CVE-2022-27924SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability4 Aug 202225 Aug 2022Known
CVE-2022-26138AtlassianConfluenceAtlassian Questions For Confluence App Hard-coded Credentials Vulnerability29 Jul 202219 Aug 2022Unknown
CVE-2022-22047MicrosoftWindowsMicrosoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability12 Jul 20222 Aug 2022Unknown
CVE-2022-26925MicrosoftWindowsMicrosoft Windows LSA Spoofing Vulnerability1 Jul 202222 Jul 2022Unknown
CVE-2018-4344AppleMultiple ProductsApple Multiple Products Memory Corruption Vulnerability27 Jun 202218 Jul 2022Unknown
CVE-2019-8605AppleMultiple ProductsApple Multiple Products Use-After-Free Vulnerability27 Jun 202218 Jul 2022Unknown
CVE-2020-3837AppleMultiple ProductsApple Multiple Products Memory Corruption Vulnerability27 Jun 202218 Jul 2022Unknown
CVE-2020-9907AppleMultiple ProductsApple Multiple Products Memory Corruption Vulnerability27 Jun 202218 Jul 2022Unknown