Overview 459 matches · 30 in Waratek scope · 26 protected · 299 public PoC · 247 EPSS ≥ 0.5
Protected by Waratek
29
6.3%
Rule in development
0
0.0%
Mitigation candidate
1
0.2%
No exploit published
0
0.0%
Outside Waratek scope
14
3.1%
Not applicable
415
90.4%
Withdrawn CVE
0
0.0%
blocked by ARMR today
26
5.7%
partly blocked
3
0.7%
not blocked
430
93.7%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
459
100.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 52 / year
20071
Not applicable1
Critical1
not blocked1
Exploited1
20081
Not applicable1
Critical1
not blocked1
Exploited1
20094
Not applicable4
High4
not blocked4
Exploited4
20103
Not applicable3
High3
not blocked3
Exploited3
20113
Outside Waratek scope1
Not applicable2
Critical1
High2
not blocked3
Exploited3
201210
Outside Waratek scope3
Not applicable7
Critical4
High6
not blocked10
Exploited10
201313
Outside Waratek scope1
Not applicable12
Critical2
High10
Medium1
not blocked13
Exploited13
201418
Not applicable18
Critical4
High13
Medium1
not blocked18
Exploited18
201523
Protected by Waratek1
Outside Waratek scope2
Not applicable20
Critical9
High12
Medium2
blocked by ARMR today1
not blocked22
Exploited23
201624
Protected by Waratek2
Not applicable22
Critical6
High13
Medium5
blocked by ARMR today2
not blocked22
Exploited24
201730
Protected by Waratek6
Not applicable24
Critical4
High25
Medium1
blocked by ARMR today4
partly blocked2
not blocked24
Exploited30
201821
Protected by Waratek1
Not applicable20
Critical1
High20
blocked by ARMR today1
not blocked20
Exploited21
201938
Protected by Waratek1
Outside Waratek scope2
Not applicable35
Critical7
High29
Medium2
blocked by ARMR today1
not blocked37
Exploited38
202033
Protected by Waratek8
Outside Waratek scope1
Not applicable24
Critical13
High18
Medium2
blocked by ARMR today8
not blocked25
Exploited33
202152
Protected by Waratek2
Outside Waratek scope1
Not applicable49
Critical15
High31
Medium6
blocked by ARMR today2
not blocked50
Exploited52
202232
Protected by Waratek1
Not applicable31
Critical5
High23
Medium4
blocked by ARMR today1
not blocked31
Exploited32
202338
Protected by Waratek3
Mitigation candidate1
Outside Waratek scope1
Not applicable33
Critical7
High27
Medium4
blocked by ARMR today3
not blocked35
Exploited38
202439
Protected by Waratek2
Not applicable37
Critical11
High25
Medium3
blocked by ARMR today1
partly blocked1
not blocked37
Exploited39
202535
Protected by Waratek1
Not applicable34
Critical6
High23
Medium6
blocked by ARMR today1
not blocked34
Exploited35
202641
Protected by Waratek1
Outside Waratek scope2
Not applicable38
Critical17
High16
Medium8
blocked by ARMR today1
not blocked40
Exploited41
2008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-111497 | Critical | 2026-10-22 | Outside Waratek scope | Exploited | A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. |
| CVE-2026-110447 | Critical | 2026-10-14 | Not applicable | Exploited | Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected. |
| CVE-2026-96951 | High | 2026-10-13 | Not applicable | Exploited | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-21589 | Critical | 2026-10-05 | Not applicable | Exploited | This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledge of the target file's exact name and path; this vulnerability does not allow attackers to enumerate or list directory contents. In some configurations, there may be some sensitive files that make this highly severe. This vulnerability allows an unauthenticated remote attacker to access specific files within the web application root directory in affected versions. The vulnerability must be addressed for affected versions of: -- Bitbucket Data Center, introduced in version >= 4.6.0, fix versions: 9.4.26, 10.2.8, 10.5.1 -- Confluence Data Center, introduced in version >= 5.10.0, fix versions 9.2.26, 10.2.19 -- Crowd Data Center, introduced in version >= 2.11.0, fix versions 6.3.7, 7.0.3, 7.1.7, 7.2.4 -- Jira Software Data Center, introduced in version >= 7.1.0, fix versions 9.12.40, 10.3.26, 11.3.12 -- Jira Service Management Data Center, introduced in version >= 3.1.0, fix versions 5.12.40, 10.3.26, 11.3.12 -- Bamboo Data Center >= 7.0.1, fix versions 10.2.24, 12.1.12 -- Crucible, fix versions 4.9.15 -- Fisheye, fix version 4.9.15 -- Exploitation requires prior knowledge of the target file's exact name and path. The vulnerability does not include the capability to enumerate or list directory contents. |
| CVE-2026-96656 | High | 2026-09-23 | Not applicable | Exploited | Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264's option string on every transcode. At startup, all .so files are run without signature, execute bit, or symbol checks. |
| CVE-2026-96655 | Medium | 2026-09-23 | Not applicable | Exploited | Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. |
| CVE-2026-96654 | Medium | 2026-09-23 | Not applicable | Exploited | Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters. |
| CVE-2026-96652 | Medium | 2026-09-23 | Not applicable | Exploited | Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination. |
| CVE-2026-85880 | High | 2026-09-08 | Not applicable | Exploited | Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. |
| CVE-2026-81963 | High | 2026-09-08 | Not applicable | Exploited | Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72530 | Critical | 2026-08-19 | Not applicable | Exploited | A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system. |
| CVE-2026-72529 | Critical | 2026-08-19 | Not applicable | Exploited | A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function. |
| CVE-2026-20320 | High | 2026-08-19 | Not applicable | Exploited | A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution being allowed by default. An attacker could exploit this vulnerability by sending a crafted XML message to the Open Client Interface – Provisioning (OCI-P) service. A successful exploit could allow the attacker to view sensitive files from the filesystem with the privileges of the Cisco BroadWorks user. |
| CVE-2026-68820 | High | 2026-08-11 | Not applicable | Exploited | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65660 | High | 2026-08-11 | Not applicable | Exploited | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-59310 | Critical | 2026-07-30 | Not applicable | Exploited | VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code. |
| CVE-2026-58644 | Critical | 2026-07-14 | Not applicable | Exploited | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-56164 | Critical | 2026-07-14 | Not applicable | Exploited | Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-56155 | High | 2026-07-14 | Not applicable | Exploited | Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-55040 | Critical | 2026-07-14 | Not applicable | Exploited | Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-50522 | Critical | 2026-07-14 | Not applicable | Exploited | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-48710 | Medium | 2026-05-26 | Outside Waratek scope | Exploited | Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuilt from the `Host` header, a malformed header could make `request.url.path` differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on `request.url` (rather than the raw `scope` path) could therefore be bypassed. Users should upgrade to a version greater than or equal to version 1.0.1, which validates the `Host` header against the grammar of RFC 9112 §3.2 / RFC 3986 §3.2.2 when constructing `request.url` and falls back to `scope["server"]` for malformed values. |
| CVE-2026-45659 | High | 2026-05-22 | Not applicable | Exploited | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-34910 | Critical | 2026-05-22 | Not applicable | Exploited | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. |
| CVE-2026-34909 | Critical | 2026-05-22 | Not applicable | Exploited | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account. |
| CVE-2026-34908 | Critical | 2026-05-22 | Not applicable | Exploited | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system. |
| CVE-2026-42897 | High | 2026-05-14 | Not applicable | Exploited | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-45321 | Critical | 2026-05-12 | Not applicable | Exploited | On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target "Pwn Request" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart. |
| CVE-2026-31431 | High | 2026-04-22 | Not applicable | Exploited | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly. |
| CVE-2026-33824 | Critical | 2026-04-14 | Not applicable | Exploited | Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. |
| CVE-2026-32202 | Medium | 2026-04-14 | Not applicable | Exploited | Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-32201 | Medium | 2026-04-14 | Not applicable | Exploited | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-34486 | High | 2026-04-09 | Protected by Waratek | Exploited | Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue. |
| CVE-2026-21533 | High | 2026-02-10 | Not applicable | Exploited | Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21525 | Medium | 2026-02-10 | Not applicable | Exploited | Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally. |
| CVE-2026-21519 | High | 2026-02-10 | Not applicable | Exploited | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21513 | High | 2026-02-10 | Not applicable | Exploited | Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-21510 | High | 2026-02-10 | Not applicable | Exploited | Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-21962 | Critical | 2026-01-20 | Not applicable | Exploited | Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data. Note: Affected version for Weblogic Server Proxy Plug-in for IIS is 12.2.1.4.0 only. CVSS 3.1 Base Score 10.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N). |
| CVE-2026-20963 | Critical | 2026-01-13 | Not applicable | Exploited | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-20805 | Medium | 2026-01-13 | Not applicable | Exploited | Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally. |
| CVE-2025-62221 | High | 2025-12-09 | Not applicable | Exploited | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-58360 | Critical | 2025-11-25 | Protected by Waratek | Exploited | GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity (XXE) vulnerability was identified. The application accepts XML input through a specific endpoint /geoserver/wms operation GetMap. However, this input is not sufficiently sanitized or restricted, allowing an attacker to define external entities within the XML request. This issue has been patched in GeoServer 2.25.6, GeoServer 2.26.3, and GeoServer 2.27.0. |
| CVE-2025-62215 | High | 2025-11-11 | Not applicable | Exploited | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2025-60710 | High | 2025-11-11 | Not applicable | Exploited | Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59287 | Critical | 2025-10-14 | Not applicable | Exploited | Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network. |
| CVE-2025-59230 | High | 2025-10-14 | Not applicable | Exploited | Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2025-24990 | High | 2025-10-14 | Not applicable | Exploited | Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware. |
| CVE-2025-53770 | Critical | 2025-07-20 | Not applicable | Exploited | Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation. |
| CVE-2025-47813 | Medium | 2025-07-10 | Not applicable | Exploited | loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie. |
| CVE-2025-47812 | Critical | 2025-07-10 | Not applicable | Exploited | In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default). This is thus a remote code execution vulnerability that guarantees a total server compromise. This is also exploitable via anonymous FTP accounts. |
| CVE-2025-49706 | Medium | 2025-07-08 | Not applicable | Exploited | Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-49704 | High | 2025-07-08 | Not applicable | Exploited | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2025-32463 | Critical | 2025-06-30 | Not applicable | Exploited | Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. |
| CVE-2025-33073 | High | 2025-06-10 | Not applicable | Exploited | Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network. |
| CVE-2025-33053 | High | 2025-06-10 | Not applicable | Exploited | External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network. |
| CVE-2025-47827 | Medium | 2025-06-05 | Not applicable | Exploited | In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image. |
| CVE-2025-4632 | Critical | 2025-05-13 | Not applicable | Exploited | Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority. |
| CVE-2025-32709 | High | 2025-05-13 | Not applicable | Exploited | Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2025-32706 | High | 2025-05-13 | Not applicable | Exploited | Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-32701 | High | 2025-05-13 | Not applicable | Exploited | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-30400 | High | 2025-05-13 | Not applicable | Exploited | Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. |
| CVE-2025-30397 | High | 2025-05-13 | Not applicable | Exploited | Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network. |
| CVE-2025-29824 | High | 2025-04-08 | Not applicable | Exploited | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-26633 | High | 2025-03-11 | Not applicable | Exploited | Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2025-24993 | High | 2025-03-11 | Not applicable | Exploited | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2025-24991 | Medium | 2025-03-11 | Not applicable | Exploited | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2025-24985 | High | 2025-03-11 | Not applicable | Exploited | Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. |
| CVE-2025-24984 | Medium | 2025-03-11 | Not applicable | Exploited | Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2025-24983 | High | 2025-03-11 | Not applicable | Exploited | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2025-24054 | Medium | 2025-03-11 | Not applicable | Exploited | External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-21418 | High | 2025-02-11 | Not applicable | Exploited | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2025-21391 | High | 2025-02-11 | Not applicable | Exploited | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2025-21335 | High | 2025-01-14 | Not applicable | Exploited | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
| CVE-2025-21334 | High | 2025-01-14 | Not applicable | Exploited | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
| CVE-2025-21333 | High | 2025-01-14 | Not applicable | Exploited | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
| CVE-2024-49138 | High | 2024-12-12 | Not applicable | Exploited | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2024-49039 | High | 2024-11-12 | Not applicable | Exploited | Windows Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2024-43451 | Medium | 2024-11-12 | Not applicable | Exploited | NTLM Hash Disclosure Spoofing Vulnerability |
| CVE-2024-43573 | High | 2024-10-08 | Not applicable | Exploited | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-43572 | High | 2024-10-08 | Not applicable | Exploited | Microsoft Management Console Remote Code Execution Vulnerability |
| CVE-2024-38813 | Critical | 2024-09-17 | Not applicable | Exploited | The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet. |
| CVE-2024-38812 | Critical | 2024-09-17 | Not applicable | Exploited | The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution. |
| CVE-2024-43461 | High | 2024-09-10 | Not applicable | Exploited | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-38217 | Medium | 2024-09-10 | Not applicable | Exploited | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2024-38014 | High | 2024-09-10 | Not applicable | Exploited | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2024-38213 | Medium | 2024-08-13 | Not applicable | Exploited | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2024-38193 | High | 2024-08-13 | Not applicable | Exploited | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2024-38178 | High | 2024-08-13 | Not applicable | Exploited | Scripting Engine Memory Corruption Vulnerability |
| CVE-2024-38107 | High | 2024-08-13 | Not applicable | Exploited | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability |
| CVE-2024-38106 | High | 2024-08-13 | Not applicable | Exploited | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2024-7399 | Critical | 2024-08-12 | Not applicable | Exploited | Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority. |
| CVE-2024-21182 | High | 2024-07-16 | Protected by Waratek | Exploited | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). |
| CVE-2024-38112 | High | 2024-07-09 | Not applicable | Exploited | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-38094 | High | 2024-07-09 | Not applicable | Exploited | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2024-38080 | High | 2024-07-09 | Not applicable | Exploited | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2024-38475 | Critical | 2024-07-01 | Not applicable | Exploited | Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. Substitutions in server context that use a backreferences or variables as the first segment of the substitution are affected. Some unsafe RewiteRules will be broken by this change and the rewrite flag "UnsafePrefixStat" can be used to opt back in once ensuring the substitution is appropriately constrained. |
| CVE-2024-36401 | Critical | 2024-07-01 | Protected by Waratek | Exploited | GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted input against a default GeoServer installation due to unsafely evaluating property names as XPath expressions. The GeoTools library API that GeoServer calls evaluates property/attribute names for feature types in a way that unsafely passes them to the commons-jxpath library which can execute arbitrary code when evaluating XPath expressions. This XPath evaluation is intended to be used only by complex feature types (i.e., Application Schema data stores) but is incorrectly being applied to simple feature types as well which makes this vulnerability apply to **ALL** GeoServer instances. No public PoC is provided but this vulnerability has been confirmed to be exploitable through WFS GetFeature, WFS GetPropertyValue, WMS GetMap, WMS GetFeatureInfo, WMS GetLegendGraphic and WPS Execute requests. This vulnerability can lead to executing arbitrary code. Versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2 contain a patch for the issue. A workaround exists by removing the `gt-complex-x.y.jar` file from the GeoServer where `x.y` is the GeoTools version (e.g., `gt-complex-31.1.jar` if running GeoServer 2.25.1). This will remove the vulnerable code from GeoServer but may break some GeoServer functionality or prevent GeoServer from deploying if the gt-complex module is needed. |
| CVE-2024-37079 | Critical | 2024-06-18 | Not applicable | Exploited | vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution. |
| CVE-2024-35250 | High | 2024-06-11 | Not applicable | Exploited | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |