HackZoneLabs News
Newsletter

Known exploited vulnerabilities

From CISA’s Known Exploited Vulnerabilities catalogue: flaws that attackers are using now, when each was added, and the date federal agencies were told to fix it by.

Feed of new additions

In the catalogue
1781
Added in the last 7 days
12
Used in ransomware
361

The catalogue, newest first

CVEVendorProductNameAddedFix dueRansomware
CVE-2023-38180Microsoft.NET Core and Visual StudioMicrosoft .NET Core and Visual Studio Denial-of-Service Vulnerability9 Aug 202330 Aug 2023Unknown
CVE-2017-18368ZyxelP660HN-T1A RoutersZyxel P660HN-T1A Routers Command Injection Vulnerability7 Aug 202328 Aug 2023Unknown
CVE-2023-35081IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability31 Jul 202321 Aug 2023Unknown
CVE-2023-37580SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability27 Jul 202317 Aug 2023Unknown
CVE-2023-38606AppleMultiple ProductsApple Multiple Products Kernel Unspecified Vulnerability26 Jul 202316 Aug 2023Unknown
CVE-2023-35078IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability25 Jul 202315 Aug 2023Known
CVE-2023-29298AdobeColdFusionAdobe ColdFusion Improper Access Control Vulnerability20 Jul 202310 Aug 2023Unknown
CVE-2023-38205AdobeColdFusionAdobe ColdFusion Improper Access Control Vulnerability20 Jul 202310 Aug 2023Unknown
CVE-2023-3519CitrixNetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability19 Jul 20239 Aug 2023Known
CVE-2023-36884MicrosoftWindowsMicrosoft Windows Search Remote Code Execution Vulnerability17 Jul 202329 Aug 2023Known
CVE-2022-29303SolarViewCompactSolarView Compact Command Injection Vulnerability13 Jul 20233 Aug 2023Unknown
CVE-2023-37450AppleMultiple ProductsApple Multiple Products WebKit Code Execution Vulnerability13 Jul 20233 Aug 2023Unknown
CVE-2022-31199NetwrixAuditorNetwrix Auditor Insecure Object Deserialization Vulnerability11 Jul 20231 Aug 2023Known
CVE-2023-32046MicrosoftWindowsMicrosoft Windows MSHTML Platform Privilege Escalation Vulnerability11 Jul 20231 Aug 2023Unknown
CVE-2023-32049MicrosoftWindowsMicrosoft Windows Defender SmartScreen Security Feature Bypass Vulnerability11 Jul 20231 Aug 2023Unknown
CVE-2023-35311MicrosoftOutlookMicrosoft Outlook Security Feature Bypass Vulnerability11 Jul 20231 Aug 2023Unknown
CVE-2023-36874MicrosoftWindowsMicrosoft Windows Error Reporting Service Privilege Escalation Vulnerability11 Jul 20231 Aug 2023Unknown
CVE-2021-29256ArmMali Graphics Processing Unit (GPU)Arm Mali GPU Kernel Driver Use-After-Free Vulnerability7 Jul 202328 Jul 2023Unknown
CVE-2019-17621D-LinkDIR-859 RouterD-Link DIR-859 Router Command Execution Vulnerability29 Jun 202320 Jul 2023Unknown
CVE-2019-20500D-LinkDWL-2600AP Access PointD-Link DWL-2600AP Access Point Command Injection Vulnerability29 Jun 202320 Jul 2023Unknown
CVE-2021-25371SamsungMobile DevicesSamsung Mobile Devices Unspecified Vulnerability29 Jun 202320 Jul 2023Unknown
CVE-2021-25372SamsungMobile DevicesSamsung Mobile Devices Improper Boundary Check Vulnerability29 Jun 202320 Jul 2023Unknown
CVE-2021-25394SamsungMobile DevicesSamsung Mobile Devices Race Condition Vulnerability29 Jun 202320 Jul 2023Unknown
CVE-2021-25395SamsungMobile DevicesSamsung Mobile Devices Race Condition Vulnerability29 Jun 202320 Jul 2023Unknown
CVE-2021-25487SamsungMobile DevicesSamsung Mobile Devices Out-of-Bounds Read Vulnerability29 Jun 202320 Jul 2023Unknown
CVE-2021-25489SamsungMobile DevicesSamsung Mobile Devices Improper Input Validation Vulnerability29 Jun 202320 Jul 2023Unknown
CVE-2023-20867VMwareToolsVMware Tools Authentication Bypass Vulnerability23 Jun 202314 Jul 2023Unknown
CVE-2023-27992ZyxelMultiple Network-Attached Storage (NAS) DevicesZyxel Multiple NAS Devices Command Injection Vulnerability23 Jun 202314 Jul 2023Unknown
CVE-2023-32434AppleMultiple ProductsApple Multiple Products Integer Overflow Vulnerability23 Jun 202314 Jul 2023Unknown
CVE-2023-32435AppleMultiple ProductsApple Multiple Products WebKit Memory Corruption Vulnerability23 Jun 202314 Jul 2023Unknown
CVE-2023-32439AppleMultiple ProductsApple Multiple Products WebKit Type Confusion Vulnerability23 Jun 202314 Jul 2023Unknown
CVE-2016-0165MicrosoftWin32kMicrosoft Win32k Privilege Escalation Vulnerability22 Jun 202313 Jul 2023Unknown
CVE-2016-9079MozillaFirefox, Firefox ESR, and ThunderbirdMozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability22 Jun 202313 Jul 2023Unknown
CVE-2020-12641RoundcubeRoundcube WebmailRoundcube Webmail Remote Code Execution Vulnerability22 Jun 202313 Jul 2023Unknown
CVE-2020-35730RoundcubeRoundcube WebmailRoundcube Webmail Cross-Site Scripting (XSS) Vulnerability22 Jun 202313 Jul 2023Unknown
CVE-2021-44026RoundcubeRoundcube WebmailRoundcube Webmail SQL Injection Vulnerability22 Jun 202313 Jul 2023Unknown
CVE-2023-20887VMwareAria Operations for NetworksVmware Aria Operations for Networks Command Injection Vulnerability22 Jun 202313 Jul 2023Unknown
CVE-2023-27997FortinetFortiOS and FortiProxy SSL-VPNFortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability13 Jun 20234 Jul 2023Known
CVE-2023-3079GoogleChromium V8Google Chromium V8 Type Confusion Vulnerability7 Jun 202328 Jun 2023Unknown
CVE-2023-33009ZyxelMultiple FirewallsZyxel Multiple Firewalls Buffer Overflow Vulnerability5 Jun 202326 Jun 2023Unknown
CVE-2023-33010ZyxelMultiple FirewallsZyxel Multiple Firewalls Buffer Overflow Vulnerability5 Jun 202326 Jun 2023Unknown
CVE-2023-34362ProgressMOVEit TransferProgress MOVEit Transfer SQL Injection Vulnerability2 Jun 202323 Jun 2023Known
CVE-2023-28771ZyxelMultiple FirewallsZyxel Multiple Firewalls OS Command Injection Vulnerability31 May 202321 Jun 2023Unknown
CVE-2023-2868Barracuda NetworksEmail Security Gateway (ESG) ApplianceBarracuda Networks ESG Appliance Improper Input Validation Vulnerability26 May 202316 Jun 2023Unknown
CVE-2023-28204AppleMultiple ProductsApple Multiple Products WebKit Out-of-Bounds Read Vulnerability22 May 202312 Jun 2023Unknown
CVE-2023-32373AppleMultiple ProductsApple Multiple Products WebKit Use-After-Free Vulnerability22 May 202312 Jun 2023Unknown
CVE-2023-32409AppleMultiple ProductsApple Multiple Products WebKit Sandbox Escape Vulnerability22 May 202312 Jun 2023Unknown
CVE-2004-1464CiscoIOSCisco IOS Denial-of-Service Vulnerability19 May 20239 Jun 2023Unknown
CVE-2016-6415CiscoIOS, IOS XR, and IOS XECisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability19 May 20239 Jun 2023Unknown
CVE-2023-21492SamsungMobile DevicesSamsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability19 May 20239 Jun 2023Unknown
CVE-2010-3904LinuxKernelLinux Kernel Improper Input Validation Vulnerability12 May 20232 Jun 2023Unknown
CVE-2014-0196LinuxKernelLinux Kernel Race Condition Vulnerability12 May 20232 Jun 2023Unknown
CVE-2015-5317JenkinsJenkins User Interface (UI)Jenkins User Interface (UI) Information Disclosure Vulnerability12 May 20232 Jun 2023Unknown
CVE-2016-3427OracleJava SE and JRockitOracle Java SE and JRockit Unspecified Vulnerability12 May 20232 Jun 2023Unknown
CVE-2016-8735ApacheTomcatApache Tomcat Remote Code Execution Vulnerability12 May 20232 Jun 2023Unknown
CVE-2021-3560Red HatPolkitRed Hat Polkit Incorrect Authorization Vulnerability12 May 20232 Jun 2023Unknown
CVE-2023-25717Ruckus WirelessMultiple ProductsMultiple Ruckus Wireless Products CSRF and RCE Vulnerability12 May 20232 Jun 2023Unknown
CVE-2023-29336MicrosoftWin32kMicrosoft Win32K Privilege Escalation Vulnerability9 May 202330 May 2023Unknown
CVE-2021-45046ApacheLog4j2Apache Log4j2 Deserialization of Untrusted Data Vulnerability1 May 202322 May 2023Known
CVE-2023-1389TP-LinkArcher AX21TP-Link Archer AX-21 Command Injection Vulnerability1 May 202322 May 2023Unknown
CVE-2023-21839OracleWebLogic ServerOracle WebLogic Server Unspecified Vulnerability1 May 202322 May 2023Unknown
CVE-2023-2136GoogleChromium SkiaGoogle Chrome Skia Integer Overflow Vulnerability21 Apr 202312 May 2023Unknown
CVE-2023-27350PaperCutMF/NGPaperCut MF/NG Improper Access Control Vulnerability21 Apr 202312 May 2023Known
CVE-2023-28432MinIOMinIOMinIO Information Disclosure Vulnerability21 Apr 202312 May 2023Unknown
CVE-2017-6742CiscoIOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability19 Apr 202310 May 2023Unknown
CVE-2019-8526ApplemacOSApple macOS Use-After-Free Vulnerability17 Apr 20238 May 2023Unknown
CVE-2023-2033GoogleChromium V8Google Chromium V8 Type Confusion Vulnerability17 Apr 20238 May 2023Unknown
CVE-2023-20963AndroidFrameworkAndroid Framework Privilege Escalation Vulnerability13 Apr 20234 May 2023Unknown
CVE-2023-29492Novi SurveyNovi SurveyNovi Survey Insecure Deserialization Vulnerability13 Apr 20234 May 2023Unknown
CVE-2023-28252MicrosoftWindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability11 Apr 20232 May 2023Known
CVE-2023-28205AppleMultiple ProductsApple Multiple Products WebKit Use-After-Free Vulnerability10 Apr 20231 May 2023Unknown
CVE-2023-28206AppleiOS, iPadOS, and macOSApple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability10 Apr 20231 May 2023Unknown
CVE-2019-1388MicrosoftWindowsMicrosoft Windows Certificate Dialog Privilege Escalation Vulnerability7 Apr 202328 Apr 2023Known
CVE-2021-27876VeritasBackup Exec AgentVeritas Backup Exec Agent File Access Vulnerability7 Apr 202328 Apr 2023Known
CVE-2021-27877VeritasBackup Exec AgentVeritas Backup Exec Agent Improper Authentication Vulnerability7 Apr 202328 Apr 2023Known
CVE-2021-27878VeritasBackup Exec AgentVeritas Backup Exec Agent Command Execution Vulnerability7 Apr 202328 Apr 2023Known
CVE-2023-26083ArmMali Graphics Processing Unit (GPU)Arm Mali GPU Kernel Driver Information Disclosure Vulnerability7 Apr 202328 Apr 2023Unknown
CVE-2022-27926SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability3 Apr 202324 Apr 2023Unknown
CVE-2013-3163MicrosoftInternet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability30 Mar 202320 Apr 2023Unknown
CVE-2017-7494SambaSambaSamba Remote Code Execution Vulnerability30 Mar 202320 Apr 2023Known
CVE-2021-30900AppleiOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability30 Mar 202320 Apr 2023Unknown
CVE-2022-22706ArmMali Graphics Processing Unit (GPU)Arm Mali GPU Kernel Driver Unspecified Vulnerability30 Mar 202320 Apr 2023Unknown
CVE-2022-3038GoogleChromium Network ServiceGoogle Chromium Network Service Use-After-Free Vulnerability30 Mar 202320 Apr 2023Unknown
CVE-2022-38181ArmMali Graphics Processing Unit (GPU)Arm Mali GPU Kernel Driver Use-After-Free Vulnerability30 Mar 202320 Apr 2023Unknown
CVE-2022-39197FortraCobalt StrikeFortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability30 Mar 202320 Apr 2023Unknown
CVE-2022-42948FortraCobalt StrikeFortra Cobalt Strike User Interface Remote Code Execution Vulnerability30 Mar 202320 Apr 2023Unknown
CVE-2023-0266LinuxKernelLinux Kernel Use-After-Free Vulnerability30 Mar 202320 Apr 2023Unknown
CVE-2023-26360AdobeColdFusionAdobe ColdFusion Deserialization of Untrusted Data Vulnerability15 Mar 20235 Apr 2023Unknown
CVE-2022-41328FortinetFortiOSFortinet FortiOS Path Traversal Vulnerability14 Mar 20234 Apr 2023Unknown
CVE-2023-23397MicrosoftOfficeMicrosoft Office Outlook Privilege Escalation Vulnerability14 Mar 20234 Apr 2023Unknown
CVE-2023-24880MicrosoftWindowsMicrosoft Windows SmartScreen Security Feature Bypass Vulnerability14 Mar 20234 Apr 2023Known
CVE-2020-5741PlexMedia ServerPlex Media Server Remote Code Execution Vulnerability10 Mar 202331 Mar 2023Unknown
CVE-2021-39144XStreamXStreamXStream Remote Code Execution Vulnerability10 Mar 202331 Mar 2023Unknown
CVE-2022-28810ZohoManageEngineZoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability7 Mar 202328 Mar 2023Unknown
CVE-2022-33891ApacheSparkApache Spark Command Injection Vulnerability7 Mar 202328 Mar 2023Unknown
CVE-2022-35914TeclibGLPITeclib GLPI Remote Code Execution Vulnerability7 Mar 202328 Mar 2023Unknown
CVE-2022-36537ZK FrameworkAuUploaderZK Framework AuUploader Unspecified Vulnerability27 Feb 202320 Mar 2023Known
CVE-2022-40765MitelMiVoice ConnectMitel MiVoice Connect Command Injection Vulnerability21 Feb 202314 Mar 2023Known
CVE-2022-41223MitelMiVoice ConnectMitel MiVoice Connect Code Injection Vulnerability21 Feb 202314 Mar 2023Known
CVE-2022-47986IBMAspera FaspexIBM Aspera Faspex Code Execution Vulnerability21 Feb 202314 Mar 2023Known