# CISA KEV security incidents · pwn.watch

> Security incidents tagged CISA KEV (vendor, product, platform or attack type).

Page: https://pwn.watch/t/cisa-kev · generated 2026-10-22T16:42:00.965Z

## Status (as of 2026-10-22)
- Incidents: 609 (14 live, 3 live and not fully patched, 594 patched)
- Days without a CISA KEV security incident: 0 (3 still unpatched, so the counter stays at 0)
- Newest incident started: 2026-10-20

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/cisa-kev.json
- RSS (every update): https://pwn.watch/t/cisa-kev/feed.xml
- This file: https://pwn.watch/t/cisa-kev/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [EG Secure Solutions SiteGuard Server Edition: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability](https://pwn.watch/i/eg-secure-solutions-siteguard-server-edition-cve-2026-106931) ([json](https://pwn.watch/i/eg-secure-solutions-siteguard-server-edition-cve-2026-106931.json)): high, live, patched, started 2026-10-20, CVE-2026-106931
- [Siemens Software Center: Siemens Software Center Uncontrolled Search Path Element Vulnerability](https://pwn.watch/i/siemens-software-center-cve-2026-110936) ([json](https://pwn.watch/i/siemens-software-center-cve-2026-110936.json)): high, live, patched, started 2026-10-20, CVE-2026-110936
- [PHP2Shell: critical unauthenticated RCE in PHP core](https://pwn.watch/i/php2shell-cve-2026-109618-109619) ([json](https://pwn.watch/i/php2shell-cve-2026-109618-109619.json)): critical, live, partial, started 2026-10-17, CVE-2026-109618, CVE-2026-109619
- [Plex2Shell: chained Plex Media Server RCE exploited for miners](https://pwn.watch/i/plex2shell-cve-2026-96652) ([json](https://pwn.watch/i/plex2shell-cve-2026-96652.json)): critical, live, patched, started 2026-10-16, CVE-2026-96652, CVE-2026-96654, CVE-2026-96655…
- [Fortinet Multiple Products: Fortinet Multiple Products Path Traversal Vulnerability](https://pwn.watch/i/fortinet-multiple-products-cve-2025-61624) ([json](https://pwn.watch/i/fortinet-multiple-products-cve-2025-61624.json)): high, live, patched, started 2026-10-16, CVE-2025-61624
- [Atlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability](https://pwn.watch/i/atlassian-multiple-products-cve-2026-21589) ([json](https://pwn.watch/i/atlassian-multiple-products-cve-2026-21589.json)): high, live, patched, started 2026-10-15, CVE-2026-21589
- [Ahsay AhsayCBS: Ahsay AhsayCBS Command Injection Vulnerability](https://pwn.watch/i/ahsay-ahsaycbs-cve-2026-105134) ([json](https://pwn.watch/i/ahsay-ahsaycbs-cve-2026-105134.json)): high, live, patched, started 2026-10-14, CVE-2026-105134, CVE-2026-105133
- [Cisco Secure Email Gateway: Cisco Secure Email Gateway Relative Path Traversal Vulnerability](https://pwn.watch/i/cisco-secure-email-gateway-cve-2026-76519) ([json](https://pwn.watch/i/cisco-secure-email-gateway-cve-2026-76519.json)): high, live, patched, started 2026-10-14, CVE-2026-76519
- [Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Code Injection Vulnerability](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0322) ([json](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0322.json)): high, live, patched, started 2026-10-14, CVE-2026-0322
- [Windows Shell Mark-of-the-Web bypass zero-day (CVE-2026-96951)](https://pwn.watch/i/windows-shell-cve-2026-96951-motw) ([json](https://pwn.watch/i/windows-shell-cve-2026-96951-motw.json)): high, closed, patched, started 2026-10-13, CVE-2026-96951, CVE-2026-108398, CVE-2026-92707
- [Citrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability](https://pwn.watch/i/citrix-netscaler-cve-2026-88779) ([json](https://pwn.watch/i/citrix-netscaler-cve-2026-88779.json)): high, live, patched, started 2026-10-04, CVE-2026-88779
- [Zammad GmbH Zammad: Zammad GmbH Zammad Improper Privilege Management Vulnerability](https://pwn.watch/i/zammad-gmbh-zammad-cve-2026-102490) ([json](https://pwn.watch/i/zammad-gmbh-zammad-cve-2026-102490.json)): high, live, patched, started 2026-10-02, CVE-2026-102490, CVE-2026-102489
- [Ivanti Connect Secure zero-day chain (CVE-2026-104935) exploited for root](https://pwn.watch/i/ivanti-connect-secure-cve-2026-104935) ([json](https://pwn.watch/i/ivanti-connect-secure-cve-2026-104935.json)): high, live, partial, started 2026-10-01, CVE-2026-104935
- [FortiMail unauthenticated file-write zero-day CVE-2026-104286](https://pwn.watch/i/fortimail-cve-2026-104286) ([json](https://pwn.watch/i/fortimail-cve-2026-104286.json)): critical, live, patched, started 2026-09-30, CVE-2026-104286
- [Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability](https://pwn.watch/i/cisco-catalyst-sd-wan-manager-cve-2026-76504) ([json](https://pwn.watch/i/cisco-catalyst-sd-wan-manager-cve-2026-76504.json)): high, closed, patched, started 2026-09-30, CVE-2026-76504
- [Apple CoreGraphics zero-day CVE-2026-86950](https://pwn.watch/i/apple-coregraphics-cve-2026-86950) ([json](https://pwn.watch/i/apple-coregraphics-cve-2026-86950.json)): high, closed, patched, started 2026-09-29, CVE-2026-86950
- [Microsoft SharePoint: Microsoft SharePoint Code Injection Vulnerability](https://pwn.watch/i/microsoft-sharepoint-cve-2026-65660) ([json](https://pwn.watch/i/microsoft-sharepoint-cve-2026-65660.json)): high, closed, patched, started 2026-09-25, CVE-2026-65660
- [WordPress Core: WordPress Core Remote File Inclusion Vulnerability](https://pwn.watch/i/wordpress-core-cve-2026-87902) ([json](https://pwn.watch/i/wordpress-core-cve-2026-87902.json)): high, closed, patched, started 2026-09-25, CVE-2026-87902
- [Adobe Commerce and Magento : Adobe Commerce and Magento Incorrect Authorization Vulnerability ](https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-71362) ([json](https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-71362.json)): high, closed, patched, started 2026-09-24, CVE-2026-71362
- [Linux Kernel: Linux Kernel Race Condition Vulnerability](https://pwn.watch/i/linux-kernel-cve-2025-39964) ([json](https://pwn.watch/i/linux-kernel-cve-2025-39964.json)): high, closed, patched, started 2026-09-18, CVE-2025-39964, CVE-2026-53266, CVE-2025-39682
- [Cisco Identity Services Engine: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability](https://pwn.watch/i/cisco-identity-services-engine-cve-2026-76460) ([json](https://pwn.watch/i/cisco-identity-services-engine-cve-2026-76460.json)): high, closed, patched, started 2026-09-16, CVE-2026-76460
- [Google Pixel: Google Pixel Improper Authorization Vulnerability](https://pwn.watch/i/google-pixel-cve-2026-58704) ([json](https://pwn.watch/i/google-pixel-cve-2026-58704.json)): high, closed, patched, started 2026-09-16, CVE-2026-58704
- [Cisco Secure Email Gateway: Cisco Secure Email Gateway SQL Injection Vulnerability](https://pwn.watch/i/cisco-secure-email-gateway-cve-2026-76461) ([json](https://pwn.watch/i/cisco-secure-email-gateway-cve-2026-76461.json)): high, closed, patched, started 2026-09-14, CVE-2026-76461
- [ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability](https://pwn.watch/i/connectwise-screenconnect-cve-2026-84869) ([json](https://pwn.watch/i/connectwise-screenconnect-cve-2026-84869.json)): high, closed, patched, started 2026-09-11, CVE-2026-84869
- [GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability](https://pwn.watch/i/gitlab-community-edition-and-enterprise-edition-cve-2026-85706) ([json](https://pwn.watch/i/gitlab-community-edition-and-enterprise-edition-cve-2026-85706.json)): high, closed, patched, started 2026-09-11, CVE-2026-85706
- [JFrog Artifactory: JFrog Artifactory Incorrect Authorization Vulnerability](https://pwn.watch/i/jfrog-artifactory-cve-2026-42016) ([json](https://pwn.watch/i/jfrog-artifactory-cve-2026-42016.json)): high, closed, patched, started 2026-09-11, CVE-2026-42016, CVE-2026-42018
- [MikroTik RouterOS: MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability](https://pwn.watch/i/mikrotik-routeros-cve-2026-86060) ([json](https://pwn.watch/i/mikrotik-routeros-cve-2026-86060.json)): high, closed, patched, started 2026-09-10, CVE-2026-86060, CVE-2026-67277, CVE-2026-67279
- [Chrome zero-day CVE-2026-87491 (V8 OOB write)](https://pwn.watch/i/chrome-zero-day-cve-2026-87491) ([json](https://pwn.watch/i/chrome-zero-day-cve-2026-87491.json)): high, closed, patched, started 2026-09-09, CVE-2026-87491
- [Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management: Cisco Firewall Management Center Authentication Bypass Using](https://pwn.watch/i/cisco-secure-firewall-management-center-fmc-and-security-cloud-control-scc-firew) ([json](https://pwn.watch/i/cisco-secure-firewall-management-center-fmc-and-security-cloud-control-scc-firew.json)): high, closed, patched, started 2026-09-09, CVE-2026-20079
- [Citrix NetScaler: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability](https://pwn.watch/i/citrix-netscaler-cve-2026-19490) ([json](https://pwn.watch/i/citrix-netscaler-cve-2026-19490.json)): high, closed, patched, started 2026-09-09, CVE-2026-19490
- [Fortinet Multiple Products: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability](https://pwn.watch/i/fortinet-multiple-products-cve-2025-25249) ([json](https://pwn.watch/i/fortinet-multiple-products-cve-2025-25249.json)): high, closed, patched, started 2026-09-09, CVE-2025-25249
- [Adobe Commerce and Magento: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability](https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-75650) ([json](https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-75650.json)): high, closed, patched, started 2026-09-08, CVE-2026-75650
- [Microsoft Windows: Microsoft Windows Link Following Vulnerability](https://pwn.watch/i/microsoft-windows-cve-2026-81963) ([json](https://pwn.watch/i/microsoft-windows-cve-2026-81963.json)): high, closed, patched, started 2026-09-08, CVE-2026-81963, CVE-2026-85880
- [N-able N-central: N-able N-central Static Code Injection Vulnerability](https://pwn.watch/i/n-able-n-central-cve-2026-86218) ([json](https://pwn.watch/i/n-able-n-central-cve-2026-86218.json)): high, closed, patched, started 2026-09-08, CVE-2026-86218
- [Chrome zero-day CVE-2026-85046 (V8 type confusion)](https://pwn.watch/i/chrome-zero-day-cve-2026-85046) ([json](https://pwn.watch/i/chrome-zero-day-cve-2026-85046.json)): high, closed, patched, started 2026-09-04, CVE-2026-85046
- [BerriAI LiteLLM: BerriAI LiteLLM Improper Authentication Vulnerability](https://pwn.watch/i/berriai-litellm-cve-2026-59822) ([json](https://pwn.watch/i/berriai-litellm-cve-2026-59822.json)): high, closed, patched, started 2026-09-02, CVE-2026-59822
- [JFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerability](https://pwn.watch/i/jfrog-artifactory-cve-2026-82329) ([json](https://pwn.watch/i/jfrog-artifactory-cve-2026-82329.json)): high, closed, patched, started 2026-09-02, CVE-2026-82329
- [Kestra Kestra OSS: Kestra OSS OS Command Injection Vulnerability](https://pwn.watch/i/kestra-kestra-oss-cve-2026-49869) ([json](https://pwn.watch/i/kestra-kestra-oss-cve-2026-49869.json)): high, closed, patched, started 2026-09-02, CVE-2026-49869
- [Sangoma Switchvox: Sangoma Switchvox SQL Injection Vulnerability](https://pwn.watch/i/sangoma-switchvox-cve-2026-9586) ([json](https://pwn.watch/i/sangoma-switchvox-cve-2026-9586.json)): high, closed, patched, started 2026-09-02, CVE-2026-9586
- [SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability](https://pwn.watch/i/sonicwall-sma1000-appliances-cve-2026-83548) ([json](https://pwn.watch/i/sonicwall-sma1000-appliances-cve-2026-83548.json)): high, closed, patched, started 2026-09-02, CVE-2026-83548, CVE-2026-83549
- [BeyondTrust Remote Support zero-day CVE-2026-102764 (ARMORY CASTLE)](https://pwn.watch/i/beyondtrust-remote-support-cve-2026-102764) ([json](https://pwn.watch/i/beyondtrust-remote-support-cve-2026-102764.json)): critical, live, partial, started 2026-08-29, CVE-2026-102764
- [JFrog Artifactory: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability](https://pwn.watch/i/jfrog-artifactory-cve-2026-66384) ([json](https://pwn.watch/i/jfrog-artifactory-cve-2026-66384.json)): high, closed, patched, started 2026-08-27, CVE-2026-66384
- [Linux Kernel: Linux Kernel Unspecified Vulnerability](https://pwn.watch/i/linux-kernel-cve-2026-53362) ([json](https://pwn.watch/i/linux-kernel-cve-2026-53362.json)): high, closed, patched, started 2026-08-27, CVE-2026-53362
- [Gitea Gitea: Gitea Code Injection Vulnerability](https://pwn.watch/i/gitea-gitea-cve-2026-60004) ([json](https://pwn.watch/i/gitea-gitea-cve-2026-60004.json)): high, closed, patched, started 2026-08-25, CVE-2026-60004
- [Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability](https://pwn.watch/i/oracle-http-server-and-oracle-weblogic-server-proxy-plug-in-cve-2026-21962) ([json](https://pwn.watch/i/oracle-http-server-and-oracle-weblogic-server-proxy-plug-in-cve-2026-21962.json)): high, closed, patched, started 2026-08-24, CVE-2026-21962
- [Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2026-73570) ([json](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2026-73570.json)): high, closed, patched, started 2026-08-21, CVE-2026-73570
- [TrueConf Server: TrueConf Server Code Injection Vulnerability](https://pwn.watch/i/trueconf-server-cve-2026-72530) ([json](https://pwn.watch/i/trueconf-server-cve-2026-72530.json)): high, closed, patched, started 2026-08-20, CVE-2026-72530, CVE-2026-72529
- [MLflow MLflow: MLflow Server-Side Request Forgery Vulnerability](https://pwn.watch/i/mlflow-mlflow-cve-2026-64849) ([json](https://pwn.watch/i/mlflow-mlflow-cve-2026-64849.json)): high, closed, patched, started 2026-08-19, CVE-2026-64849
- [Apple macOS: Apple macOS Improper Authentication Vulnerability](https://pwn.watch/i/apple-macos-cve-2026-65400) ([json](https://pwn.watch/i/apple-macos-cve-2026-65400.json)): high, closed, patched, started 2026-08-18, CVE-2026-65400
- [Broadcom VMware vCenter: Broadcom VMware vCenter Path Traversal Vulnerability](https://pwn.watch/i/broadcom-vmware-vcenter-cve-2026-59310) ([json](https://pwn.watch/i/broadcom-vmware-vcenter-cve-2026-59310.json)): high, closed, patched, started 2026-08-18, CVE-2026-59310
- [Microsoft Internet Key Exchange (IKE) Service Extensions: Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability](https://pwn.watch/i/microsoft-internet-key-exchange-ike-service-extensions-cve-2026-33824) ([json](https://pwn.watch/i/microsoft-internet-key-exchange-ike-service-extensions-cve-2026-33824.json)): high, closed, patched, started 2026-08-18, CVE-2026-33824
- [Microsoft SharePoint: Microsoft SharePoint Weak Authentication Vulnerability](https://pwn.watch/i/microsoft-sharepoint-cve-2026-55040) ([json](https://pwn.watch/i/microsoft-sharepoint-cve-2026-55040.json)): high, closed, patched, started 2026-08-18, CVE-2026-55040
- [Ray-Project Ray: Ray-Project Ray Code Injection Vulnerability](https://pwn.watch/i/ray-project-ray-cve-2025-62593) ([json](https://pwn.watch/i/ray-project-ray-cve-2025-62593.json)): high, closed, patched, started 2026-08-17, CVE-2025-62593
- [Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) : Cisco Secure Firewall Adaptive Security Appliance (ASA) and S](https://pwn.watch/i/cisco-secure-firewall-adaptive-security-appliance-asa-and-secure-firewall-threat) ([json](https://pwn.watch/i/cisco-secure-firewall-adaptive-security-appliance-asa-and-secure-firewall-threat.json)): high, closed, patched, started 2026-08-11, CVE-2026-20349
- [Metabase Metabase: Metabase SQL Injection Vulnerability](https://pwn.watch/i/metabase-metabase-cve-2026-72898) ([json](https://pwn.watch/i/metabase-metabase-cve-2026-72898.json)): high, closed, patched, started 2026-08-11, CVE-2026-72898
- [Microsoft Windows Ancillary Function Driver for WinSock : Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability](https://pwn.watch/i/microsoft-windows-ancillary-function-driver-for-winsock-cve-2026-68820) ([json](https://pwn.watch/i/microsoft-windows-ancillary-function-driver-for-winsock-cve-2026-68820.json)): high, closed, patched, started 2026-08-11, CVE-2026-68820
- [Progress LoadMaster: Progress LoadMaster Command Injection Vulnerability](https://pwn.watch/i/progress-loadmaster-cve-2026-8037) ([json](https://pwn.watch/i/progress-loadmaster-cve-2026-8037.json)): high, closed, patched, started 2026-08-07, CVE-2026-8037
- [JetBrains TeamCity: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability](https://pwn.watch/i/jetbrains-teamcity-cve-2026-63077) ([json](https://pwn.watch/i/jetbrains-teamcity-cve-2026-63077.json)): high, closed, patched, started 2026-08-05, CVE-2026-63077
- [Apache Tomcat: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability](https://pwn.watch/i/apache-tomcat-cve-2026-34486) ([json](https://pwn.watch/i/apache-tomcat-cve-2026-34486.json)): high, closed, patched, started 2026-08-04, CVE-2026-34486
- [IBM Langflow: IBM Langflow Code Injection Vulnerability](https://pwn.watch/i/ibm-langflow-cve-2026-9198) ([json](https://pwn.watch/i/ibm-langflow-cve-2026-9198.json)): high, closed, patched, started 2026-08-04, CVE-2026-9198
- [N-able N-central: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability](https://pwn.watch/i/n-able-n-central-cve-2026-18577) ([json](https://pwn.watch/i/n-able-n-central-cve-2026-18577.json)): high, closed, patched, started 2026-08-03, CVE-2026-18577, CVE-2026-18556
- [Cisco Secure Firewall Management Center (FMC): Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability](https://pwn.watch/i/cisco-secure-firewall-management-center-fmc-cve-2026-20316) ([json](https://pwn.watch/i/cisco-secure-firewall-management-center-fmc-cve-2026-20316.json)): high, closed, patched, started 2026-07-29, CVE-2026-20316
- [Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability](https://pwn.watch/i/arista-velocloud-orchestrator-cve-2026-16812) ([json](https://pwn.watch/i/arista-velocloud-orchestrator-cve-2026-16812.json)): high, closed, patched, started 2026-07-27, CVE-2026-16812
- [Fortinet FortiOS: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability](https://pwn.watch/i/fortinet-fortios-cve-2025-68686) ([json](https://pwn.watch/i/fortinet-fortios-cve-2025-68686.json)): high, closed, patched, started 2026-07-27, CVE-2025-68686
- [Check Point SmartConsole: Check Point SmartConsole Improper Authentication Vulnerability](https://pwn.watch/i/check-point-smartconsole-cve-2026-16232) ([json](https://pwn.watch/i/check-point-smartconsole-cve-2026-16232.json)): high, closed, patched, started 2026-07-22, CVE-2026-16232
- [Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability ](https://pwn.watch/i/microsoft-sharepoint-cve-2026-50522) ([json](https://pwn.watch/i/microsoft-sharepoint-cve-2026-50522.json)): high, closed, patched, started 2026-07-22, CVE-2026-50522
- [Langflow Langflow: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability](https://pwn.watch/i/langflow-langflow-cve-2026-0770) ([json](https://pwn.watch/i/langflow-langflow-cve-2026-0770.json)): high, closed, patched, started 2026-07-21, CVE-2026-0770
- [WordPress Core: WordPress Core SQL Injection Vulnerability](https://pwn.watch/i/wordpress-core-cve-2026-60137) ([json](https://pwn.watch/i/wordpress-core-cve-2026-60137.json)): high, closed, patched, started 2026-07-21, CVE-2026-60137, CVE-2026-63030
- [Fortinet FortiSandbox: Fortinet FortiSandbox OS Command Injection Vulnerability](https://pwn.watch/i/fortinet-fortisandbox-cve-2026-25089) ([json](https://pwn.watch/i/fortinet-fortisandbox-cve-2026-25089.json)): high, closed, patched, started 2026-07-16, CVE-2026-25089, CVE-2026-39808
- [Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability](https://pwn.watch/i/microsoft-sharepoint-cve-2026-58644) ([json](https://pwn.watch/i/microsoft-sharepoint-cve-2026-58644.json)): high, closed, patched, started 2026-07-16, CVE-2026-58644
- [Oracle E-Business Suite: Oracle E-Business Suite Improper Privilege Management Vulnerability](https://pwn.watch/i/oracle-e-business-suite-cve-2026-46817) ([json](https://pwn.watch/i/oracle-e-business-suite-cve-2026-46817.json)): high, closed, patched, started 2026-07-15, CVE-2026-46817
- [Microsoft Active Directory Federation Services: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability ](https://pwn.watch/i/microsoft-active-directory-federation-services-cve-2026-56155) ([json](https://pwn.watch/i/microsoft-active-directory-federation-services-cve-2026-56155.json)): high, closed, patched, started 2026-07-14, CVE-2026-56155
- [Microsoft SharePoint Server: Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability](https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-56164) ([json](https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-56164.json)): high, closed, patched, started 2026-07-14, CVE-2026-56164
- [SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability](https://pwn.watch/i/sonicwall-sma1000-appliances-cve-2026-15409) ([json](https://pwn.watch/i/sonicwall-sma1000-appliances-cve-2026-15409.json)): high, closed, patched, started 2026-07-14, CVE-2026-15409, CVE-2026-15410
- [Adobe ColdFusion: Adobe ColdFusion Path Traversal Vulnerability](https://pwn.watch/i/adobe-coldfusion-cve-2026-48282) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2026-48282.json)): high, closed, patched, started 2026-07-07, CVE-2026-48282
- [Joomlack Page Builder: Joomlack Page Builder Improper Access Control Vulnerability](https://pwn.watch/i/joomlack-page-builder-cve-2026-56290) ([json](https://pwn.watch/i/joomlack-page-builder-cve-2026-56290.json)): high, closed, patched, started 2026-07-07, CVE-2026-56290
- [Langflow Langflow: Langflow Authorization Bypass Through User-Controlled Key Vulnerability](https://pwn.watch/i/langflow-langflow-cve-2026-55255) ([json](https://pwn.watch/i/langflow-langflow-cve-2026-55255.json)): high, closed, patched, started 2026-07-07, CVE-2026-55255
- [Microsoft SharePoint Server: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability](https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-45659) ([json](https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-45659.json)): high, closed, patched, started 2026-07-01, CVE-2026-45659
- [Cisco Unified Communications Manager: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability](https://pwn.watch/i/cisco-unified-communications-manager-cve-2026-20230) ([json](https://pwn.watch/i/cisco-unified-communications-manager-cve-2026-20230.json)): high, closed, patched, started 2026-06-25, CVE-2026-20230
- [PTC Windchill and FlexPLM: PTC Windchill and FlexPLM Improper Input Validation Vulnerability](https://pwn.watch/i/ptc-windchill-and-flexplm-cve-2026-12569) ([json](https://pwn.watch/i/ptc-windchill-and-flexplm-cve-2026-12569.json)): high, closed, patched, started 2026-06-25, CVE-2026-12569
- [Widget Factory Joomla Content Editor : Widget Factory Joomla Content Editor Improper Access Control Vulnerability](https://pwn.watch/i/widget-factory-joomla-content-editor-cve-2026-48907) ([json](https://pwn.watch/i/widget-factory-joomla-content-editor-cve-2026-48907.json)): high, closed, patched, started 2026-06-16, CVE-2026-48907
- [Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability](https://pwn.watch/i/cisco-catalyst-sd-wan-manager-cve-2026-20262) ([json](https://pwn.watch/i/cisco-catalyst-sd-wan-manager-cve-2026-20262.json)): high, closed, patched, started 2026-06-15, CVE-2026-20262
- [Oracle PeopleSoft Enterprise PeopleTools: Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability](https://pwn.watch/i/oracle-peoplesoft-enterprise-peopletools-cve-2026-35273) ([json](https://pwn.watch/i/oracle-peoplesoft-enterprise-peopletools-cve-2026-35273.json)): high, closed, patched, started 2026-06-12, CVE-2026-35273
- [Ivanti Sentry: Ivanti Sentry OS Command Injection Vulnerability](https://pwn.watch/i/ivanti-sentry-cve-2026-10520) ([json](https://pwn.watch/i/ivanti-sentry-cve-2026-10520.json)): high, closed, patched, started 2026-06-11, CVE-2026-10520
- [Arista Extensible Operating System: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability](https://pwn.watch/i/arista-extensible-operating-system-cve-2026-7473) ([json](https://pwn.watch/i/arista-extensible-operating-system-cve-2026-7473.json)): high, closed, patched, started 2026-06-09, CVE-2026-7473
- [Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability](https://pwn.watch/i/cisco-catalyst-sd-wan-manager-cve-2026-20245) ([json](https://pwn.watch/i/cisco-catalyst-sd-wan-manager-cve-2026-20245.json)): high, closed, patched, started 2026-06-09, CVE-2026-20245
- [BerriAI LiteLLM: BerriAI LiteLLM Command Injection Vulnerability](https://pwn.watch/i/berriai-litellm-cve-2026-42271) ([json](https://pwn.watch/i/berriai-litellm-cve-2026-42271.json)): high, closed, patched, started 2026-06-08, CVE-2026-42271, CVE-2026-48710
- [Check Point Security Gateway: Check Point Security Gateway Improper Authentication Vulnerability](https://pwn.watch/i/check-point-security-gateway-cve-2026-50751) ([json](https://pwn.watch/i/check-point-security-gateway-cve-2026-50751.json)): high, closed, patched, started 2026-06-08, CVE-2026-50751
- [SolarWinds Serv-U: SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability](https://pwn.watch/i/solarwinds-serv-u-cve-2026-28318) ([json](https://pwn.watch/i/solarwinds-serv-u-cve-2026-28318.json)): high, closed, patched, started 2026-06-05, CVE-2026-28318
- [Android Framework: Android Framework Integer Overflow Vulnerability](https://pwn.watch/i/android-framework-cve-2025-48595) ([json](https://pwn.watch/i/android-framework-cve-2025-48595.json)): high, closed, patched, started 2026-06-02, CVE-2025-48595
- [Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0257) ([json](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0257.json)): high, closed, patched, started 2026-05-29, CVE-2026-0257
- [Nx Nx Console: Nx Console Embedded Malicious Code Vulnerability](https://pwn.watch/i/nx-nx-console-cve-2026-48027) ([json](https://pwn.watch/i/nx-nx-console-cve-2026-48027.json)): high, closed, patched, started 2026-05-27, CVE-2026-48027
- [TanStack TanStack: TanStack Unspecified Vulnerability](https://pwn.watch/i/tanstack-tanstack-cve-2026-45321) ([json](https://pwn.watch/i/tanstack-tanstack-cve-2026-45321.json)): high, closed, patched, started 2026-05-27, CVE-2026-45321
- [Drupal Core: Drupal Core SQL Injection Vulnerability](https://pwn.watch/i/drupal-core-cve-2026-9082) ([json](https://pwn.watch/i/drupal-core-cve-2026-9082.json)): high, closed, patched, started 2026-05-22, CVE-2026-9082
- [Langflow Langflow: Langflow Origin Validation Error Vulnerability](https://pwn.watch/i/langflow-langflow-cve-2025-34291) ([json](https://pwn.watch/i/langflow-langflow-cve-2025-34291.json)): high, closed, patched, started 2026-05-21, CVE-2025-34291
- [Microsoft Defender: Microsoft Defender Link Following Vulnerability](https://pwn.watch/i/microsoft-defender-cve-2026-41091) ([json](https://pwn.watch/i/microsoft-defender-cve-2026-41091.json)): high, closed, patched, started 2026-05-20, CVE-2026-41091, CVE-2026-45498
- [Microsoft Microsoft: Microsoft Exchange Server Cross-Site Scripting Vulnerability](https://pwn.watch/i/microsoft-microsoft-cve-2026-42897) ([json](https://pwn.watch/i/microsoft-microsoft-cve-2026-42897.json)): high, closed, patched, started 2026-05-15, CVE-2026-42897
- [Cisco Catalyst SD-WAN: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability](https://pwn.watch/i/cisco-catalyst-sd-wan-cve-2026-20182) ([json](https://pwn.watch/i/cisco-catalyst-sd-wan-cve-2026-20182.json)): high, closed, patched, started 2026-05-14, CVE-2026-20182
- [BerriAI LiteLLM: BerriAI LiteLLM SQL Injection Vulnerability](https://pwn.watch/i/berriai-litellm-cve-2026-42208) ([json](https://pwn.watch/i/berriai-litellm-cve-2026-42208.json)): high, closed, patched, started 2026-05-08, CVE-2026-42208
- [Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability](https://pwn.watch/i/ivanti-endpoint-manager-mobile-epmm-cve-2026-6973) ([json](https://pwn.watch/i/ivanti-endpoint-manager-mobile-epmm-cve-2026-6973.json)): high, closed, patched, started 2026-05-07, CVE-2026-6973
- [Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0300) ([json](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0300.json)): high, closed, patched, started 2026-05-06, CVE-2026-0300
- [Linux Kernel: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability](https://pwn.watch/i/linux-kernel-cve-2026-31431) ([json](https://pwn.watch/i/linux-kernel-cve-2026-31431.json)): high, closed, patched, started 2026-05-01, CVE-2026-31431
- [WebPros cPanel & WHM and WP2 (WordPress Squared): WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability](https://pwn.watch/i/webpros-cpanel-whm-and-wp2-wordpress-squared-cve-2026-41940) ([json](https://pwn.watch/i/webpros-cpanel-whm-and-wp2-wordpress-squared-cve-2026-41940.json)): high, closed, patched, started 2026-04-30, CVE-2026-41940
- [Microsoft Windows: Microsoft Windows Protection Mechanism Failure Vulnerability](https://pwn.watch/i/microsoft-windows-cve-2026-32202) ([json](https://pwn.watch/i/microsoft-windows-cve-2026-32202.json)): high, closed, patched, started 2026-04-28, CVE-2026-32202
- [Microsoft Defender: Microsoft Defender Insufficient Granularity of Access Control Vulnerability](https://pwn.watch/i/microsoft-defender-cve-2026-33825) ([json](https://pwn.watch/i/microsoft-defender-cve-2026-33825.json)): high, closed, patched, started 2026-04-22, CVE-2026-33825
- [Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability](https://pwn.watch/i/cisco-catalyst-sd-wan-manager-cve-2026-20133) ([json](https://pwn.watch/i/cisco-catalyst-sd-wan-manager-cve-2026-20133.json)): high, closed, patched, started 2026-04-20, CVE-2026-20133, CVE-2026-20128
- [Cisco Catalyst SD-WAN Manger: Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability](https://pwn.watch/i/cisco-catalyst-sd-wan-manger-cve-2026-20122) ([json](https://pwn.watch/i/cisco-catalyst-sd-wan-manger-cve-2026-20122.json)): high, closed, patched, started 2026-04-20, CVE-2026-20122
- [Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2025-48700) ([json](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2025-48700.json)): high, closed, patched, started 2026-04-20, CVE-2025-48700
- [Apache ActiveMQ: Apache ActiveMQ Improper Input Validation Vulnerability](https://pwn.watch/i/apache-activemq-cve-2026-34197) ([json](https://pwn.watch/i/apache-activemq-cve-2026-34197.json)): high, closed, patched, started 2026-04-16, CVE-2026-34197
- [Microsoft SharePoint Server: Microsoft SharePoint Server Improper Input Validation Vulnerability](https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-32201) ([json](https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-32201.json)): high, closed, patched, started 2026-04-14, CVE-2026-32201
- [Adobe Acrobat and Reader: Adobe Acrobat and Reader Prototype Pollution Vulnerability](https://pwn.watch/i/adobe-acrobat-and-reader-cve-2026-34621) ([json](https://pwn.watch/i/adobe-acrobat-and-reader-cve-2026-34621.json)): high, closed, patched, started 2026-04-13, CVE-2026-34621
- [Fortinet FortiClient EMS: Fortinet FortiClient EMS SQL Injection Vulnerability](https://pwn.watch/i/fortinet-forticlient-ems-cve-2026-21643) ([json](https://pwn.watch/i/fortinet-forticlient-ems-cve-2026-21643.json)): high, closed, patched, started 2026-04-13, CVE-2026-21643
- [Microsoft Windows: Microsoft Windows Link Following Vulnerability](https://pwn.watch/i/microsoft-windows-cve-2025-60710) ([json](https://pwn.watch/i/microsoft-windows-cve-2025-60710.json)): high, closed, patched, started 2026-04-13, CVE-2025-60710, CVE-2023-36424
- [Citrix NetScaler: Citrix NetScaler Out-of-Bounds Read Vulnerability](https://pwn.watch/i/citrix-netscaler-cve-2026-3055) ([json](https://pwn.watch/i/citrix-netscaler-cve-2026-3055.json)): high, closed, patched, started 2026-03-30, CVE-2026-3055
- [F5 BIG-IP: F5 BIG-IP Stack-Based Buffer Overflow Vulnerability](https://pwn.watch/i/f5-big-ip-cve-2025-53521) ([json](https://pwn.watch/i/f5-big-ip-cve-2025-53521.json)): high, closed, patched, started 2026-03-27, CVE-2025-53521
- [Langflow Langflow: Langflow Code Injection Vulnerability](https://pwn.watch/i/langflow-langflow-cve-2026-33017) ([json](https://pwn.watch/i/langflow-langflow-cve-2026-33017.json)): high, closed, patched, started 2026-03-25, CVE-2026-33017
- [Apple Multiple Products: Apple Multiple Products Improper Locking Vulnerability](https://pwn.watch/i/apple-multiple-products-cve-2025-43510) ([json](https://pwn.watch/i/apple-multiple-products-cve-2025-43510.json)): high, closed, patched, started 2026-03-20, CVE-2025-43510, CVE-2025-43520, CVE-2025-31277
- [Cisco Secure Firewall Management Center (FMC): Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management](https://pwn.watch/i/cisco-secure-firewall-management-center-fmc-cve-2026-20131) ([json](https://pwn.watch/i/cisco-secure-firewall-management-center-fmc-cve-2026-20131.json)): high, closed, patched, started 2026-03-19, CVE-2026-20131
- [Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability](https://pwn.watch/i/microsoft-sharepoint-cve-2026-20963) ([json](https://pwn.watch/i/microsoft-sharepoint-cve-2026-20963.json)): high, closed, patched, started 2026-03-18, CVE-2026-20963
- [Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2025-66376) ([json](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2025-66376.json)): high, closed, patched, started 2026-03-18, CVE-2025-66376
- [Ivanti Endpoint Manager (EPM): Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability](https://pwn.watch/i/ivanti-endpoint-manager-epm-cve-2026-1603) ([json](https://pwn.watch/i/ivanti-endpoint-manager-epm-cve-2026-1603.json)): high, closed, patched, started 2026-03-09, CVE-2026-1603
- [SolarWinds Web Help Desk: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability](https://pwn.watch/i/solarwinds-web-help-desk-cve-2025-26399) ([json](https://pwn.watch/i/solarwinds-web-help-desk-cve-2025-26399.json)): high, closed, patched, started 2026-03-09, CVE-2025-26399
- [Broadcom VMware Aria Operations: Broadcom VMware Aria Operations Command Injection Vulnerability](https://pwn.watch/i/broadcom-vmware-aria-operations-cve-2026-22719) ([json](https://pwn.watch/i/broadcom-vmware-aria-operations-cve-2026-22719.json)): high, closed, patched, started 2026-03-03, CVE-2026-22719
- [Cisco Catalyst SD-WAN Controller and Manager: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability](https://pwn.watch/i/cisco-catalyst-sd-wan-controller-and-manager-cve-2026-20127) ([json](https://pwn.watch/i/cisco-catalyst-sd-wan-controller-and-manager-cve-2026-20127.json)): high, closed, patched, started 2026-02-25, CVE-2026-20127
- [Roundcube Webmail: RoundCube Webmail Deserialization of Untrusted Data Vulnerability](https://pwn.watch/i/roundcube-webmail-cve-2025-49113) ([json](https://pwn.watch/i/roundcube-webmail-cve-2025-49113.json)): high, closed, patched, started 2026-02-20, CVE-2025-49113, CVE-2025-68461
- [BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA): BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vuln](https://pwn.watch/i/beyondtrust-remote-support-rs-and-privileged-remote-access-pra-cve-2026-1731) ([json](https://pwn.watch/i/beyondtrust-remote-support-rs-and-privileged-remote-access-pra-cve-2026-1731.json)): high, closed, patched, started 2026-02-13, CVE-2026-1731
- [Apple Multiple Products: Apple Multiple Buffer Overflow Vulnerability](https://pwn.watch/i/apple-multiple-products-cve-2026-20700) ([json](https://pwn.watch/i/apple-multiple-products-cve-2026-20700.json)): high, closed, patched, started 2026-02-12, CVE-2026-20700
- [SolarWinds Web Help Desk: SolarWinds Web Help Desk Security Control Bypass Vulnerability](https://pwn.watch/i/solarwinds-web-help-desk-cve-2025-40536) ([json](https://pwn.watch/i/solarwinds-web-help-desk-cve-2025-40536.json)): high, closed, patched, started 2026-02-12, CVE-2025-40536
- [Microsoft Office: Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability](https://pwn.watch/i/microsoft-office-cve-2026-21514) ([json](https://pwn.watch/i/microsoft-office-cve-2026-21514.json)): high, closed, patched, started 2026-02-10, CVE-2026-21514
- [Microsoft Windows: Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability](https://pwn.watch/i/microsoft-windows-cve-2026-21513) ([json](https://pwn.watch/i/microsoft-windows-cve-2026-21513.json)): high, closed, patched, started 2026-02-10, CVE-2026-21513, CVE-2026-21525, CVE-2026-21510…
- [React Native Community CLI: React Native Community CLI OS Command Injection Vulnerability](https://pwn.watch/i/react-native-community-cli-cve-2025-11953) ([json](https://pwn.watch/i/react-native-community-cli-cve-2025-11953.json)): high, closed, patched, started 2026-02-05, CVE-2025-11953
- [SmarterTools SmarterMail: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability](https://pwn.watch/i/smartertools-smartermail-cve-2026-24423) ([json](https://pwn.watch/i/smartertools-smartermail-cve-2026-24423.json)): high, closed, patched, started 2026-02-05, CVE-2026-24423
- [Sangoma FreePBX : Sangoma FreePBX OS Command Injection Vulnerability](https://pwn.watch/i/sangoma-freepbx-cve-2025-64328) ([json](https://pwn.watch/i/sangoma-freepbx-cve-2025-64328.json)): high, closed, patched, started 2026-02-03, CVE-2025-64328
- [SolarWinds Web Help Desk: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability](https://pwn.watch/i/solarwinds-web-help-desk-cve-2025-40551) ([json](https://pwn.watch/i/solarwinds-web-help-desk-cve-2025-40551.json)): high, closed, patched, started 2026-02-03, CVE-2025-40551
- [Ivanti EPMM code injection CVE-2026-1340 exploited](https://pwn.watch/i/ivanti-epmm-cve-2026-1340) ([json](https://pwn.watch/i/ivanti-epmm-cve-2026-1340.json)): critical, closed, patched, started 2026-01-29, CVE-2026-1340
- [Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability](https://pwn.watch/i/ivanti-endpoint-manager-mobile-epmm-cve-2026-1281) ([json](https://pwn.watch/i/ivanti-endpoint-manager-mobile-epmm-cve-2026-1281.json)): high, closed, patched, started 2026-01-29, CVE-2026-1281
- [Fortinet Multiple Products: Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability](https://pwn.watch/i/fortinet-multiple-products-cve-2026-24858) ([json](https://pwn.watch/i/fortinet-multiple-products-cve-2026-24858.json)): high, closed, patched, started 2026-01-27, CVE-2026-24858
- [Microsoft Office: Microsoft Office Security Feature Bypass Vulnerability](https://pwn.watch/i/microsoft-office-cve-2026-21509) ([json](https://pwn.watch/i/microsoft-office-cve-2026-21509.json)): high, closed, patched, started 2026-01-26, CVE-2026-21509
- [SmarterTools SmarterMail: SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability](https://pwn.watch/i/smartertools-smartermail-cve-2025-52691) ([json](https://pwn.watch/i/smartertools-smartermail-cve-2025-52691.json)): high, closed, patched, started 2026-01-26, CVE-2025-52691, CVE-2026-23760
- [Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2025-68645) ([json](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2025-68645.json)): high, closed, patched, started 2026-01-22, CVE-2025-68645
- [Cisco Unified Communications Manager: Cisco Unified Communications Products Code Injection Vulnerability](https://pwn.watch/i/cisco-unified-communications-manager-cve-2026-20045) ([json](https://pwn.watch/i/cisco-unified-communications-manager-cve-2026-20045.json)): high, closed, patched, started 2026-01-21, CVE-2026-20045
- [Microsoft Windows: Microsoft Windows Information Disclosure Vulnerability](https://pwn.watch/i/microsoft-windows-cve-2026-20805) ([json](https://pwn.watch/i/microsoft-windows-cve-2026-20805.json)): high, closed, patched, started 2026-01-13, CVE-2026-20805
- [Digiever DS-2105 Pro: DS-2105 Pro Missing Authorization Vulnerability](https://pwn.watch/i/digiever-ds-2105-pro-cve-2023-52163) ([json](https://pwn.watch/i/digiever-ds-2105-pro-cve-2023-52163.json)): high, closed, patched, started 2025-12-22, CVE-2023-52163
- [WatchGuard Firebox: Firebox Out of Bounds Write Vulnerability](https://pwn.watch/i/watchguard-firebox-cve-2025-14733) ([json](https://pwn.watch/i/watchguard-firebox-cve-2025-14733.json)): critical, closed, patched, started 2025-12-19, CVE-2025-14733
- [MongoBleed: pre-auth heap memory leak in MongoDB Server](https://pwn.watch/i/mongobleed-mongodb-cve-2025-14847) ([json](https://pwn.watch/i/mongobleed-mongodb-cve-2025-14847.json)): high, closed, patched, started 2025-12-19, CVE-2025-14847
- [ASUS Live Update: Live Update Embedded Malicious Code Vulnerability](https://pwn.watch/i/asus-live-update-cve-2025-59374) ([json](https://pwn.watch/i/asus-live-update-cve-2025-59374.json)): critical, closed, patched, started 2025-12-17, CVE-2025-59374
- [Cisco Multiple Products: Multiple Products Improper Input Validation Vulnerability](https://pwn.watch/i/cisco-multiple-products-cve-2025-20393) ([json](https://pwn.watch/i/cisco-multiple-products-cve-2025-20393.json)): critical, closed, patched, started 2025-12-17, CVE-2025-20393
- [SonicWall SMA1000 appliance: SMA1000 Missing Authorization Vulnerability](https://pwn.watch/i/sonicwall-sma1000-appliance-cve-2025-40602) ([json](https://pwn.watch/i/sonicwall-sma1000-appliance-cve-2025-40602.json)): medium, closed, patched, started 2025-12-17, CVE-2025-40602
- [Fortinet Multiple Products: Multiple Products Improper Verification of Cryptographic Signature Vulnerability](https://pwn.watch/i/fortinet-multiple-products-cve-2025-59718) ([json](https://pwn.watch/i/fortinet-multiple-products-cve-2025-59718.json)): critical, closed, patched, started 2025-12-16, CVE-2025-59718
- [Apple Multiple Products: Multiple Products Use-After-Free WebKit Vulnerability](https://pwn.watch/i/apple-multiple-products-cve-2025-43529) ([json](https://pwn.watch/i/apple-multiple-products-cve-2025-43529.json)): high, closed, patched, started 2025-12-15, CVE-2025-43529
- [Gladinet CentreStack and Triofox: CentreStack and Triofox Hard Coded Cryptographic Vulnerability](https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-14611) ([json](https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-14611.json)): high, closed, patched, started 2025-12-15, CVE-2025-14611
- [Google Chromium: Chromium Out of Bounds Memory Access Vulnerability](https://pwn.watch/i/google-chromium-cve-2025-14174) ([json](https://pwn.watch/i/google-chromium-cve-2025-14174.json)): high, closed, patched, started 2025-12-12, CVE-2025-14174
- [Sierra Wireless AirLink ALEOS: AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability](https://pwn.watch/i/sierra-wireless-airlink-aleos-cve-2018-4063) ([json](https://pwn.watch/i/sierra-wireless-airlink-aleos-cve-2018-4063.json)): high, closed, patched, started 2025-12-12, CVE-2018-4063
- [OSGeo GeoServer: GeoServer Improper Restriction of XML External Entity Reference Vulnerability](https://pwn.watch/i/osgeo-geoserver-cve-2025-58360) ([json](https://pwn.watch/i/osgeo-geoserver-cve-2025-58360.json)): high, closed, patched, started 2025-12-11, CVE-2025-58360
- [Microsoft Windows: Windows Use After Free Vulnerability](https://pwn.watch/i/microsoft-windows-cve-2025-62221) ([json](https://pwn.watch/i/microsoft-windows-cve-2025-62221.json)): high, closed, patched, started 2025-12-09, CVE-2025-62221
- [RARLAB WinRAR: WinRAR Path Traversal Vulnerability](https://pwn.watch/i/rarlab-winrar-cve-2025-6218) ([json](https://pwn.watch/i/rarlab-winrar-cve-2025-6218.json)): high, closed, patched, started 2025-12-09, CVE-2025-6218
- [D-Link Routers: Routers Buffer Overflow Vulnerability](https://pwn.watch/i/d-link-routers-cve-2022-37055) ([json](https://pwn.watch/i/d-link-routers-cve-2022-37055.json)): critical, closed, patched, started 2025-12-08, CVE-2022-37055
- [Array Networks ArrayOS AG: ArrayOS AG OS Command Injection Vulnerability](https://pwn.watch/i/array-networks-arrayos-ag-cve-2025-66644) ([json](https://pwn.watch/i/array-networks-arrayos-ag-cve-2025-66644.json)): high, closed, patched, started 2025-12-08, CVE-2025-66644
- [React2Shell: CVSS 10 unauthenticated RCE in React Server Components and Next.js](https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182) ([json](https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182.json)): critical, closed, patched, started 2025-12-03, CVE-2025-55182
- [OpenPLC ScadaBR: ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability](https://pwn.watch/i/openplc-scadabr-cve-2021-26828) ([json](https://pwn.watch/i/openplc-scadabr-cve-2021-26828.json)): high, closed, patched, started 2025-12-03, CVE-2021-26828
- [Android Framework: 2 exploited vulnerabilities (CVE-2025-48572, CVE-2025-48633)](https://pwn.watch/i/android-framework-cve-2025-48572) ([json](https://pwn.watch/i/android-framework-cve-2025-48572.json)): high, closed, patched, started 2025-12-02, CVE-2025-48572, CVE-2025-48633
- [OpenPLC ScadaBR: ScadaBR Cross-site Scripting Vulnerability](https://pwn.watch/i/openplc-scadabr-cve-2021-26829) ([json](https://pwn.watch/i/openplc-scadabr-cve-2021-26829.json)): medium, closed, patched, started 2025-11-28, CVE-2021-26829
- [Oracle Fusion Middleware: Fusion Middleware Missing Authentication for Critical Function Vulnerability](https://pwn.watch/i/oracle-fusion-middleware-cve-2025-61757) ([json](https://pwn.watch/i/oracle-fusion-middleware-cve-2025-61757.json)): critical, closed, patched, started 2025-11-21, CVE-2025-61757
- [Google Chromium V8: Chromium V8 Type Confusion Vulnerability](https://pwn.watch/i/google-chromium-v8-cve-2025-13223) ([json](https://pwn.watch/i/google-chromium-v8-cve-2025-13223.json)): high, closed, patched, started 2025-11-19, CVE-2025-13223
- [Fortinet FortiWeb: FortiWeb OS Command Injection Vulnerability](https://pwn.watch/i/fortinet-fortiweb-cve-2025-58034) ([json](https://pwn.watch/i/fortinet-fortiweb-cve-2025-58034.json)): medium, closed, patched, started 2025-11-18, CVE-2025-58034
- [Fortinet FortiWeb: FortiWeb Path Traversal Vulnerability](https://pwn.watch/i/fortinet-fortiweb-cve-2025-64446) ([json](https://pwn.watch/i/fortinet-fortiweb-cve-2025-64446.json)): critical, closed, patched, started 2025-11-14, CVE-2025-64446
- [Gladinet Triofox: Triofox Improper Access Control Vulnerability](https://pwn.watch/i/gladinet-triofox-cve-2025-12480) ([json](https://pwn.watch/i/gladinet-triofox-cve-2025-12480.json)): critical, closed, patched, started 2025-11-12, CVE-2025-12480
- [WatchGuard Firebox: Firebox Out-of-Bounds Write Vulnerability](https://pwn.watch/i/watchguard-firebox-cve-2025-9242) ([json](https://pwn.watch/i/watchguard-firebox-cve-2025-9242.json)): critical, closed, patched, started 2025-11-12, CVE-2025-9242
- [Microsoft Windows: Windows Race Condition Vulnerability](https://pwn.watch/i/microsoft-windows-cve-2025-62215) ([json](https://pwn.watch/i/microsoft-windows-cve-2025-62215.json)): high, closed, patched, started 2025-11-12, CVE-2025-62215
- [Samsung Mobile Devices: Mobile Devices Out-of-Bounds Write Vulnerability](https://pwn.watch/i/samsung-mobile-devices-cve-2025-21042) ([json](https://pwn.watch/i/samsung-mobile-devices-cve-2025-21042.json)): high, closed, patched, started 2025-11-10, CVE-2025-21042
- [CWP Control Web Panel: Control Web Panel OS Command Injection Vulnerability](https://pwn.watch/i/cwp-control-web-panel-cve-2025-48703) ([json](https://pwn.watch/i/cwp-control-web-panel-cve-2025-48703.json)): critical, closed, patched, started 2025-11-04, CVE-2025-48703
- [Gladinet CentreStack and Triofox: CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability](https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-11371) ([json](https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-11371.json)): high, closed, patched, started 2025-11-04, CVE-2025-11371
- [XWiki Platform: Platform Eval Injection Vulnerability](https://pwn.watch/i/xwiki-platform-cve-2025-24893) ([json](https://pwn.watch/i/xwiki-platform-cve-2025-24893.json)): critical, closed, patched, started 2025-10-30, CVE-2025-24893
- [Broadcom VMware Aria Operations and VMware Tools: VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability](https://pwn.watch/i/broadcom-vmware-aria-operations-and-vmware-tools-cve-2025-41244) ([json](https://pwn.watch/i/broadcom-vmware-aria-operations-and-vmware-tools-cve-2025-41244.json)): high, closed, patched, started 2025-10-30, CVE-2025-41244
- [Dassault Systèmes DELMIA Apriso: 2 exploited vulnerabilities (CVE-2025-6204, CVE-2025-6205)](https://pwn.watch/i/dassault-systemes-delmia-apriso-cve-2025-6204) ([json](https://pwn.watch/i/dassault-systemes-delmia-apriso-cve-2025-6204.json)): critical, closed, patched, started 2025-10-28, CVE-2025-6204, CVE-2025-6205
- [Adobe Commerce and Magento: Commerce and Magento Improper Input Validation Vulnerability](https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236) ([json](https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236.json)): critical, closed, patched, started 2025-10-24, CVE-2025-54236
- [Microsoft Windows: Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability](https://pwn.watch/i/microsoft-windows-cve-2025-59287) ([json](https://pwn.watch/i/microsoft-windows-cve-2025-59287.json)): critical, closed, patched, started 2025-10-24, CVE-2025-59287
- [Motex LANSCOPE Endpoint Manager: LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability](https://pwn.watch/i/motex-lanscope-endpoint-manager-cve-2025-61932) ([json](https://pwn.watch/i/motex-lanscope-endpoint-manager-cve-2025-61932.json)): critical, closed, patched, started 2025-10-22, CVE-2025-61932
- [Kentico Xperience CMS: 2 exploited vulnerabilities (CVE-2025-2746, CVE-2025-2747)](https://pwn.watch/i/kentico-xperience-cms-cve-2025-2746) ([json](https://pwn.watch/i/kentico-xperience-cms-cve-2025-2746.json)): critical, closed, patched, started 2025-10-20, CVE-2025-2746, CVE-2025-2747
- [Oracle E-Business Suite: E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability](https://pwn.watch/i/oracle-e-business-suite-cve-2025-61884) ([json](https://pwn.watch/i/oracle-e-business-suite-cve-2025-61884.json)): critical, closed, patched, started 2025-10-20, CVE-2025-61884
- [Apple Multiple Products: Multiple Products Unspecified Vulnerability](https://pwn.watch/i/apple-multiple-products-cve-2022-48503) ([json](https://pwn.watch/i/apple-multiple-products-cve-2022-48503.json)): high, closed, patched, started 2025-10-20, CVE-2022-48503
- [Microsoft Windows: Windows SMB Client Improper Access Control Vulnerability](https://pwn.watch/i/microsoft-windows-cve-2025-33073) ([json](https://pwn.watch/i/microsoft-windows-cve-2025-33073.json)): high, closed, patched, started 2025-10-20, CVE-2025-33073
- [Adobe Experience Manager (AEM) Forms: Experience Manager Forms Code Execution Vulnerability](https://pwn.watch/i/adobe-experience-manager-aem-forms-cve-2025-54253) ([json](https://pwn.watch/i/adobe-experience-manager-aem-forms-cve-2025-54253.json)): critical, closed, patched, started 2025-10-15, CVE-2025-54253
- [SKYSEA Client View: Client View Improper Authentication Vulnerability](https://pwn.watch/i/skysea-client-view-cve-2016-7836) ([json](https://pwn.watch/i/skysea-client-view-cve-2016-7836.json)): critical, closed, patched, started 2025-10-14, CVE-2016-7836
- [Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-24990, CVE-2025-59230)](https://pwn.watch/i/microsoft-windows-cve-2025-24990) ([json](https://pwn.watch/i/microsoft-windows-cve-2025-24990.json)): high, closed, patched, started 2025-10-14, CVE-2025-24990, CVE-2025-59230
- [IGEL OS: OS Use of a Key Past its Expiration Date Vulnerability](https://pwn.watch/i/igel-os-cve-2025-47827) ([json](https://pwn.watch/i/igel-os-cve-2025-47827.json)): medium, closed, patched, started 2025-10-14, CVE-2025-47827
- [Grafana Labs Grafana: Grafana Path Traversal Vulnerability](https://pwn.watch/i/grafana-labs-grafana-cve-2021-43798) ([json](https://pwn.watch/i/grafana-labs-grafana-cve-2021-43798.json)): high, closed, patched, started 2025-10-09, CVE-2021-43798
- [Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2025-27915) ([json](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2025-27915.json)): medium, closed, patched, started 2025-10-07, CVE-2025-27915
- [Microsoft Windows: 3 exploited vulnerabilities (CVE-2011-3402, CVE-2013-3918, CVE-2021-43226)](https://pwn.watch/i/microsoft-windows-cve-2011-3402) ([json](https://pwn.watch/i/microsoft-windows-cve-2011-3402.json)): critical, closed, patched, started 2025-10-06, CVE-2011-3402, CVE-2013-3918, CVE-2021-43226
- [Mozilla Multiple Products: Multiple Products Remote Code Execution Vulnerability](https://pwn.watch/i/mozilla-multiple-products-cve-2010-3765) ([json](https://pwn.watch/i/mozilla-multiple-products-cve-2010-3765.json)): critical, closed, patched, started 2025-10-06, CVE-2010-3765
- [Linux Kernel: Kernel Heap Out-of-Bounds Write Vulnerability](https://pwn.watch/i/linux-kernel-cve-2021-22555) ([json](https://pwn.watch/i/linux-kernel-cve-2021-22555.json)): high, closed, patched, started 2025-10-06, CVE-2021-22555
- [Microsoft Internet Explorer: Internet Explorer Uninitialized Memory Corruption Vulnerability](https://pwn.watch/i/microsoft-internet-explorer-cve-2010-3962) ([json](https://pwn.watch/i/microsoft-internet-explorer-cve-2010-3962.json)): high, closed, patched, started 2025-10-06, CVE-2010-3962
- [Jenkins: Remote Code Execution Vulnerability](https://pwn.watch/i/jenkins-cve-2017-1000353) ([json](https://pwn.watch/i/jenkins-cve-2017-1000353.json)): critical, closed, patched, started 2025-10-02, CVE-2017-1000353
- [Juniper ScreenOS: ScreenOS Improper Authentication Vulnerability](https://pwn.watch/i/juniper-screenos-cve-2015-7755) ([json](https://pwn.watch/i/juniper-screenos-cve-2015-7755.json)): critical, closed, patched, started 2025-10-02, CVE-2015-7755
- [GNU Bash: Bash OS Command Injection Vulnerability](https://pwn.watch/i/gnu-bash-cve-2014-6278) ([json](https://pwn.watch/i/gnu-bash-cve-2014-6278.json)): high, closed, patched, started 2025-10-02, CVE-2014-6278
- [Samsung Mobile Devices: Mobile Devices Out-of-Bounds Write Vulnerability](https://pwn.watch/i/samsung-mobile-devices-cve-2025-21043) ([json](https://pwn.watch/i/samsung-mobile-devices-cve-2025-21043.json)): high, closed, patched, started 2025-10-02, CVE-2025-21043
- [Smartbedded Meteobridge: Meteobridge Command Injection Vulnerability](https://pwn.watch/i/smartbedded-meteobridge-cve-2025-4008) ([json](https://pwn.watch/i/smartbedded-meteobridge-cve-2025-4008.json)): high, closed, patched, started 2025-10-02, CVE-2025-4008
- [Fortra GoAnywhere MFT: GoAnywhere MFT Deserialization of Untrusted Data Vulnerability](https://pwn.watch/i/fortra-goanywhere-mft-cve-2025-10035) ([json](https://pwn.watch/i/fortra-goanywhere-mft-cve-2025-10035.json)): critical, closed, patched, started 2025-09-29, CVE-2025-10035
- [Cl0p extortion campaign via Oracle E-Business Suite zero-day (CVE-2025-61882)](https://pwn.watch/i/oracle-ebs-cl0p-extortion-cve-2025-61882) ([json](https://pwn.watch/i/oracle-ebs-cl0p-extortion-cve-2025-61882.json)): critical, closed, patched, started 2025-09-29, CVE-2025-61882
- [Sudo: Inclusion of Functionality from Untrusted Control Sphere Vulnerability](https://pwn.watch/i/sudo-cve-2025-32463) ([json](https://pwn.watch/i/sudo-cve-2025-32463.json)): critical, closed, patched, started 2025-09-29, CVE-2025-32463
- [Adminer: Server-Side Request Forgery Vulnerability](https://pwn.watch/i/adminer-cve-2021-21311) ([json](https://pwn.watch/i/adminer-cve-2021-21311.json)): high, closed, patched, started 2025-09-29, CVE-2021-21311
- [Cisco IOS and IOS XE: IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability](https://pwn.watch/i/cisco-ios-and-ios-xe-cve-2025-20352) ([json](https://pwn.watch/i/cisco-ios-and-ios-xe-cve-2025-20352.json)): high, closed, patched, started 2025-09-29, CVE-2025-20352
- [Libraesva Email Security Gateway: Email Security Gateway Command Injection Vulnerability](https://pwn.watch/i/libraesva-email-security-gateway-cve-2025-59689) ([json](https://pwn.watch/i/libraesva-email-security-gateway-cve-2025-59689.json)): medium, closed, patched, started 2025-09-29, CVE-2025-59689
- [Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense: 2 exploited vulnerabilities (CVE-2025-20333, CVE-2025-20362)](https://pwn.watch/i/cisco-secure-firewall-adaptive-security-appliance-and-s-cve-2025-20333) ([json](https://pwn.watch/i/cisco-secure-firewall-adaptive-security-appliance-and-s-cve-2025-20333.json)): critical, closed, patched, started 2025-09-25, CVE-2025-20333, CVE-2025-20362
- [Google Chromium V8: Chromium V8 Type Confusion Vulnerability](https://pwn.watch/i/google-chromium-v8-cve-2025-10585) ([json](https://pwn.watch/i/google-chromium-v8-cve-2025-10585.json)): high, closed, patched, started 2025-09-23, CVE-2025-10585
- [Dassault Systèmes DELMIA Apriso: DELMIA Apriso Deserialization of Untrusted Data Vulnerability](https://pwn.watch/i/dassault-systemes-delmia-apriso-cve-2025-5086) ([json](https://pwn.watch/i/dassault-systemes-delmia-apriso-cve-2025-5086.json)): critical, closed, patched, started 2025-09-11, CVE-2025-5086
- [Sitecore Multiple Products: Multiple Products Deserialization of Untrusted Data Vulnerability](https://pwn.watch/i/sitecore-multiple-products-cve-2025-53690) ([json](https://pwn.watch/i/sitecore-multiple-products-cve-2025-53690.json)): critical, closed, patched, started 2025-09-04, CVE-2025-53690
- [Android Runtime: Runtime Use-After-Free Vulnerability](https://pwn.watch/i/android-runtime-cve-2025-48543) ([json](https://pwn.watch/i/android-runtime-cve-2025-48543.json)): high, closed, patched, started 2025-09-04, CVE-2025-48543
- [Linux Kernel: Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability](https://pwn.watch/i/linux-kernel-cve-2025-38352) ([json](https://pwn.watch/i/linux-kernel-cve-2025-38352.json)): high, closed, patched, started 2025-09-04, CVE-2025-38352
- [TP-Link Multiple Routers: Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability](https://pwn.watch/i/tp-link-multiple-routers-cve-2025-9377) ([json](https://pwn.watch/i/tp-link-multiple-routers-cve-2025-9377.json)): high, closed, patched, started 2025-09-03, CVE-2025-9377
- [TP-Link TL-WR841N: TL-WR841N Authentication Bypass by Spoofing Vulnerability](https://pwn.watch/i/tp-link-tl-wr841n-cve-2023-50224) ([json](https://pwn.watch/i/tp-link-tl-wr841n-cve-2023-50224.json)): medium, closed, patched, started 2025-09-03, CVE-2023-50224
- [TP-Link TL-WA855RE: TL-WA855RE Missing Authentication for Critical Function Vulnerability](https://pwn.watch/i/tp-link-tl-wa855re-cve-2020-24363) ([json](https://pwn.watch/i/tp-link-tl-wa855re-cve-2020-24363.json)): high, closed, patched, started 2025-09-02, CVE-2020-24363
- [Meta Platforms WhatsApp: WhatsApp Incorrect Authorization Vulnerability](https://pwn.watch/i/meta-platforms-whatsapp-cve-2025-55177) ([json](https://pwn.watch/i/meta-platforms-whatsapp-cve-2025-55177.json)): medium, closed, patched, started 2025-09-02, CVE-2025-55177
- [Sangoma FreePBX: FreePBX Authentication Bypass Vulnerability](https://pwn.watch/i/sangoma-freepbx-cve-2025-57819) ([json](https://pwn.watch/i/sangoma-freepbx-cve-2025-57819.json)): critical, closed, patched, started 2025-08-29, CVE-2025-57819
- [Citrix NetScaler: NetScaler Memory Overflow Vulnerability](https://pwn.watch/i/citrix-netscaler-cve-2025-7775) ([json](https://pwn.watch/i/citrix-netscaler-cve-2025-7775.json)): critical, closed, patched, started 2025-08-26, CVE-2025-7775
- [Git: Link Following Vulnerability](https://pwn.watch/i/git-cve-2025-48384) ([json](https://pwn.watch/i/git-cve-2025-48384.json)): high, closed, patched, started 2025-08-25, CVE-2025-48384
- [Citrix Session Recording: 2 exploited vulnerabilities (CVE-2024-8068, CVE-2024-8069)](https://pwn.watch/i/citrix-session-recording-cve-2024-8068) ([json](https://pwn.watch/i/citrix-session-recording-cve-2024-8068.json)): medium, closed, patched, started 2025-08-25, CVE-2024-8068, CVE-2024-8069
- [Apple iOS, iPadOS, and macOS: iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability](https://pwn.watch/i/apple-ios-ipados-and-macos-cve-2025-43300) ([json](https://pwn.watch/i/apple-ios-ipados-and-macos-cve-2025-43300.json)): critical, closed, patched, started 2025-08-21, CVE-2025-43300
- [Trend Micro Apex One: Apex One OS Command Injection Vulnerability](https://pwn.watch/i/trend-micro-apex-one-cve-2025-54948) ([json](https://pwn.watch/i/trend-micro-apex-one-cve-2025-54948.json)): critical, closed, patched, started 2025-08-18, CVE-2025-54948
- [N-able N-Central: 2 exploited vulnerabilities (CVE-2025-8875, CVE-2025-8876)](https://pwn.watch/i/n-able-n-central-cve-2025-8875) ([json](https://pwn.watch/i/n-able-n-central-cve-2025-8875.json)): critical, closed, patched, started 2025-08-13, CVE-2025-8875, CVE-2025-8876
- [RARLAB WinRAR: WinRAR Path Traversal Vulnerability](https://pwn.watch/i/rarlab-winrar-cve-2025-8088) ([json](https://pwn.watch/i/rarlab-winrar-cve-2025-8088.json)): critical, closed, patched, started 2025-08-12, CVE-2025-8088
- [Microsoft Internet Explorer: Internet Explorer Resource Management Errors Vulnerability](https://pwn.watch/i/microsoft-internet-explorer-cve-2013-3893) ([json](https://pwn.watch/i/microsoft-internet-explorer-cve-2013-3893.json)): high, closed, patched, started 2025-08-12, CVE-2013-3893
- [Microsoft Office: Office Excel Remote Code Execution Vulnerability](https://pwn.watch/i/microsoft-office-cve-2007-0671) ([json](https://pwn.watch/i/microsoft-office-cve-2007-0671.json)): high, closed, patched, started 2025-08-12, CVE-2007-0671
- [D-Link DCS-2530L and DCS-2670L Devices: 2 exploited vulnerabilities (CVE-2020-25078, CVE-2020-25079)](https://pwn.watch/i/d-link-dcs-2530l-and-dcs-2670l-devices-cve-2020-25078) ([json](https://pwn.watch/i/d-link-dcs-2530l-and-dcs-2670l-devices-cve-2020-25078.json)): high, closed, patched, started 2025-08-05, CVE-2020-25078, CVE-2020-25079
- [D-Link DNR-322L: DNR-322L Download of Code Without Integrity Check Vulnerability](https://pwn.watch/i/d-link-dnr-322l-cve-2022-40799) ([json](https://pwn.watch/i/d-link-dnr-322l-cve-2022-40799.json)): high, closed, patched, started 2025-08-05, CVE-2022-40799
- [Cisco Identity Services Engine: 2 exploited vulnerabilities (CVE-2025-20281, CVE-2025-20337)](https://pwn.watch/i/cisco-identity-services-engine-cve-2025-20281) ([json](https://pwn.watch/i/cisco-identity-services-engine-cve-2025-20281.json)): critical, closed, patched, started 2025-07-28, CVE-2025-20281, CVE-2025-20337
- [PaperCut NG/MF: NG/MF Cross-Site Request Forgery (CSRF) Vulnerability](https://pwn.watch/i/papercut-ng-mf-cve-2023-2533) ([json](https://pwn.watch/i/papercut-ng-mf-cve-2023-2533.json)): high, closed, patched, started 2025-07-28, CVE-2023-2533
- [CrushFTP: CrushFTP Unprotected Alternate Channel Vulnerability](https://pwn.watch/i/crushftp-cve-2025-54309) ([json](https://pwn.watch/i/crushftp-cve-2025-54309.json)): critical, closed, patched, started 2025-07-22, CVE-2025-54309
- [SysAid On-Prem: 2 exploited vulnerabilities (CVE-2025-2775, CVE-2025-2776)](https://pwn.watch/i/sysaid-on-prem-cve-2025-2775) ([json](https://pwn.watch/i/sysaid-on-prem-cve-2025-2775.json)): critical, closed, patched, started 2025-07-22, CVE-2025-2775, CVE-2025-2776
- [Google Chromium: Chromium ANGLE and GPU Improper Input Validation Vulnerability](https://pwn.watch/i/google-chromium-cve-2025-6558) ([json](https://pwn.watch/i/google-chromium-cve-2025-6558.json)): high, closed, patched, started 2025-07-22, CVE-2025-6558
- [Fortinet FortiWeb: FortiWeb SQL Injection Vulnerability](https://pwn.watch/i/fortinet-fortiweb-cve-2025-25257) ([json](https://pwn.watch/i/fortinet-fortiweb-cve-2025-25257.json)): critical, closed, patched, started 2025-07-18, CVE-2025-25257
- [ToolShell: mass exploitation of on-prem SharePoint (CVE-2025-53770, CVE-2025-49704, CVE-2025-49706)](https://pwn.watch/i/toolshell-sharepoint-cve-2025-53770) ([json](https://pwn.watch/i/toolshell-sharepoint-cve-2025-53770.json)): critical, closed, patched, started 2025-07-18, CVE-2025-49704, CVE-2025-49706, CVE-2025-53770
- [Wing FTP Server: Improper Neutralization of Null Byte or NUL Character Vulnerability](https://pwn.watch/i/wing-ftp-server-cve-2025-47812) ([json](https://pwn.watch/i/wing-ftp-server-cve-2025-47812.json)): critical, closed, patched, started 2025-07-14, CVE-2025-47812
- [Looking Glass Multi-Router Looking Glass (MRLG): Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability](https://pwn.watch/i/looking-glass-multi-router-looking-glass-mrlg-cve-2014-3931) ([json](https://pwn.watch/i/looking-glass-multi-router-looking-glass-mrlg-cve-2014-3931.json)): critical, closed, patched, started 2025-07-07, CVE-2014-3931
- [PHPMailer: PHPMailer Command Injection Vulnerability](https://pwn.watch/i/phpmailer-cve-2016-10033) ([json](https://pwn.watch/i/phpmailer-cve-2016-10033.json)): critical, closed, patched, started 2025-07-07, CVE-2016-10033
- [Rails Ruby on Rails: Ruby on Rails Path Traversal Vulnerability](https://pwn.watch/i/rails-ruby-on-rails-cve-2019-5418) ([json](https://pwn.watch/i/rails-ruby-on-rails-cve-2019-5418.json)): high, closed, patched, started 2025-07-07, CVE-2019-5418
- [Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2019-9621) ([json](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2019-9621.json)): high, closed, patched, started 2025-07-07, CVE-2019-9621
- [Google Chromium V8: Chromium V8 Type Confusion Vulnerability](https://pwn.watch/i/google-chromium-v8-cve-2025-6554) ([json](https://pwn.watch/i/google-chromium-v8-cve-2025-6554.json)): high, closed, patched, started 2025-07-02, CVE-2025-6554
- [Citrix NetScaler ADC and Gateway: NetScaler ADC and Gateway Buffer Overflow Vulnerability](https://pwn.watch/i/citrix-netscaler-adc-and-gateway-cve-2025-6543) ([json](https://pwn.watch/i/citrix-netscaler-adc-and-gateway-cve-2025-6543.json)): critical, closed, patched, started 2025-06-30, CVE-2025-6543
- [AMI MegaRAC SPx: MegaRAC SPx Authentication Bypass by Spoofing Vulnerability](https://pwn.watch/i/ami-megarac-spx-cve-2024-54085) ([json](https://pwn.watch/i/ami-megarac-spx-cve-2024-54085.json)): critical, closed, patched, started 2025-06-25, CVE-2024-54085
- [Fortinet FortiOS: FortiOS Use of Hard-Coded Credentials Vulnerability](https://pwn.watch/i/fortinet-fortios-cve-2019-6693) ([json](https://pwn.watch/i/fortinet-fortios-cve-2019-6693.json)): critical, closed, patched, started 2025-06-25, CVE-2019-6693
- [D-Link DIR-859 Router: D-Link DIR-859 Router Path Traversal Vulnerability](https://pwn.watch/i/d-link-dir-859-router-cve-2024-0769) ([json](https://pwn.watch/i/d-link-dir-859-router-cve-2024-0769.json)): medium, closed, patched, started 2025-06-25, CVE-2024-0769
- [CitrixBleed 2: NetScaler memory leak exploited to hijack sessions](https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777) ([json](https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777.json)): critical, closed, patched, started 2025-06-17, CVE-2025-5777
- [Linux Kernel: Kernel Improper Ownership Management Vulnerability](https://pwn.watch/i/linux-kernel-cve-2023-0386) ([json](https://pwn.watch/i/linux-kernel-cve-2023-0386.json)): high, closed, patched, started 2025-06-17, CVE-2023-0386
- [TP-Link Multiple Routers: Multiple Routers Command Injection Vulnerability](https://pwn.watch/i/tp-link-multiple-routers-cve-2023-33538) ([json](https://pwn.watch/i/tp-link-multiple-routers-cve-2023-33538.json)): high, closed, patched, started 2025-06-16, CVE-2023-33538
- [Apple Multiple Products: Multiple Products Unspecified Vulnerability](https://pwn.watch/i/apple-multiple-products-cve-2025-43200) ([json](https://pwn.watch/i/apple-multiple-products-cve-2025-43200.json)): medium, closed, patched, started 2025-06-16, CVE-2025-43200
- [Wazuh Server: Server Deserialization of Untrusted Data Vulnerability](https://pwn.watch/i/wazuh-server-cve-2025-24016) ([json](https://pwn.watch/i/wazuh-server-cve-2025-24016.json)): critical, closed, patched, started 2025-06-10, CVE-2025-24016
- [Microsoft Windows: Microsoft Windows External Control of File Name or Path Vulnerability](https://pwn.watch/i/microsoft-windows-cve-2025-33053) ([json](https://pwn.watch/i/microsoft-windows-cve-2025-33053.json)): high, closed, patched, started 2025-06-10, CVE-2025-33053
- [Roundcube Webmail: Webmail Cross-Site Scripting Vulnerability](https://pwn.watch/i/roundcube-webmail-cve-2024-42009) ([json](https://pwn.watch/i/roundcube-webmail-cve-2024-42009.json)): critical, closed, patched, started 2025-06-09, CVE-2024-42009
- [Google Chromium V8: Chromium V8 Out-of-Bounds Read and Write Vulnerability](https://pwn.watch/i/google-chromium-v8-cve-2025-5419) ([json](https://pwn.watch/i/google-chromium-v8-cve-2025-5419.json)): high, closed, patched, started 2025-06-05, CVE-2025-5419
- [Qualcomm Multiple Chipsets: 3 exploited vulnerabilities (CVE-2025-21479, CVE-2025-21480, CVE-2025-27038)](https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2025-21479) ([json](https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2025-21479.json)): high, closed, patched, started 2025-06-03, CVE-2025-21479, CVE-2025-21480, CVE-2025-27038
- [ASUS Routers: Routers Improper Authentication Vulnerability](https://pwn.watch/i/asus-routers-cve-2021-32030) ([json](https://pwn.watch/i/asus-routers-cve-2021-32030.json)): critical, closed, patched, started 2025-06-02, CVE-2021-32030
- [Craft CMS: 2 exploited vulnerabilities (CVE-2024-56145, CVE-2025-35939)](https://pwn.watch/i/craft-cms-cve-2024-56145) ([json](https://pwn.watch/i/craft-cms-cve-2024-56145.json)): critical, closed, patched, started 2025-06-02, CVE-2024-56145, CVE-2025-35939
- [ASUS RT-AX55 Routers: RT-AX55 Routers OS Command Injection Vulnerability](https://pwn.watch/i/asus-rt-ax55-routers-cve-2023-39780) ([json](https://pwn.watch/i/asus-rt-ax55-routers-cve-2023-39780.json)): high, closed, patched, started 2025-06-02, CVE-2023-39780
- [ConnectWise ScreenConnect: ScreenConnect Improper Authentication Vulnerability](https://pwn.watch/i/connectwise-screenconnect-cve-2025-3935) ([json](https://pwn.watch/i/connectwise-screenconnect-cve-2025-3935.json)): high, closed, patched, started 2025-06-02, CVE-2025-3935
- [Samsung MagicINFO 9 Server: MagicINFO 9 Server Path Traversal Vulnerability](https://pwn.watch/i/samsung-magicinfo-9-server-cve-2025-4632) ([json](https://pwn.watch/i/samsung-magicinfo-9-server-cve-2025-4632.json)): critical, closed, patched, started 2025-05-22, CVE-2025-4632
- [Ivanti Endpoint Manager Mobile (EPMM): 2 exploited vulnerabilities (CVE-2025-4427, CVE-2025-4428)](https://pwn.watch/i/ivanti-endpoint-manager-mobile-epmm-cve-2025-4427) ([json](https://pwn.watch/i/ivanti-endpoint-manager-mobile-epmm-cve-2025-4427.json)): high, closed, patched, started 2025-05-19, CVE-2025-4427, CVE-2025-4428
- [Srimax Output Messenger: Output Messenger Directory Traversal Vulnerability](https://pwn.watch/i/srimax-output-messenger-cve-2025-27920) ([json](https://pwn.watch/i/srimax-output-messenger-cve-2025-27920.json)): high, closed, patched, started 2025-05-19, CVE-2025-27920
- [ZKTeco BioTime: BioTime Path Traversal Vulnerability](https://pwn.watch/i/zkteco-biotime-cve-2023-38950) ([json](https://pwn.watch/i/zkteco-biotime-cve-2023-38950.json)): high, closed, patched, started 2025-05-19, CVE-2023-38950
- [MDaemon Email Server: Email Server Cross-Site Scripting (XSS) Vulnerability](https://pwn.watch/i/mdaemon-email-server-cve-2024-11182) ([json](https://pwn.watch/i/mdaemon-email-server-cve-2024-11182.json)): medium, closed, patched, started 2025-05-19, CVE-2024-11182
- [Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2024-27443) ([json](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2024-27443.json)): medium, closed, patched, started 2025-05-19, CVE-2024-27443
- [SAP NetWeaver: NetWeaver Deserialization Vulnerability](https://pwn.watch/i/sap-netweaver-cve-2025-42999) ([json](https://pwn.watch/i/sap-netweaver-cve-2025-42999.json)): critical, closed, patched, started 2025-05-15, CVE-2025-42999
- [DrayTek Vigor Routers: Vigor Routers OS Command Injection Vulnerability](https://pwn.watch/i/draytek-vigor-routers-cve-2024-12987) ([json](https://pwn.watch/i/draytek-vigor-routers-cve-2024-12987.json)): medium, closed, patched, started 2025-05-15, CVE-2024-12987
- [Fortinet Multiple Products: Multiple Products Stack-Based Buffer Overflow Vulnerability](https://pwn.watch/i/fortinet-multiple-products-cve-2025-32756) ([json](https://pwn.watch/i/fortinet-multiple-products-cve-2025-32756.json)): critical, closed, patched, started 2025-05-14, CVE-2025-32756
- [Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709)](https://pwn.watch/i/microsoft-windows-cve-2025-30397) ([json](https://pwn.watch/i/microsoft-windows-cve-2025-30397.json)): high, closed, patched, started 2025-05-13, CVE-2025-30397, CVE-2025-30400, CVE-2025-32701…
- [TeleMessage TM SGNL: 3 exploited vulnerabilities (CVE-2025-47729, CVE-2025-48927, CVE-2025-48928)](https://pwn.watch/i/telemessage-tm-sgnl-cve-2025-47729) ([json](https://pwn.watch/i/telemessage-tm-sgnl-cve-2025-47729.json)): medium, closed, patched, started 2025-05-12, CVE-2025-47729, CVE-2025-48927, CVE-2025-48928
- [GeoVision Multiple Devices: 2 exploited vulnerabilities (CVE-2024-11120, CVE-2024-6047)](https://pwn.watch/i/geovision-multiple-devices-cve-2024-11120) ([json](https://pwn.watch/i/geovision-multiple-devices-cve-2024-11120.json)): critical, closed, patched, started 2025-05-07, CVE-2024-11120, CVE-2024-6047
- [FreeType: Out-of-Bounds Write Vulnerability](https://pwn.watch/i/freetype-cve-2025-27363) ([json](https://pwn.watch/i/freetype-cve-2025-27363.json)): high, closed, patched, started 2025-05-06, CVE-2025-27363
- [Langflow: Missing Authentication Vulnerability](https://pwn.watch/i/langflow-cve-2025-3248) ([json](https://pwn.watch/i/langflow-cve-2025-3248.json)): critical, closed, patched, started 2025-05-05, CVE-2025-3248
- [Commvault Command Center: Command Center Path Traversal Vulnerability](https://pwn.watch/i/commvault-command-center-cve-2025-34028) ([json](https://pwn.watch/i/commvault-command-center-cve-2025-34028.json)): critical, closed, patched, started 2025-05-02, CVE-2025-34028
- [Yiiframework Yii: Yii Improper Protection of Alternate Path Vulnerability](https://pwn.watch/i/yiiframework-yii-cve-2024-58136) ([json](https://pwn.watch/i/yiiframework-yii-cve-2024-58136.json)): critical, closed, patched, started 2025-05-02, CVE-2024-58136
- [Apache HTTP Server: HTTP Server Improper Escaping of Output Vulnerability](https://pwn.watch/i/apache-http-server-cve-2024-38475) ([json](https://pwn.watch/i/apache-http-server-cve-2024-38475.json)): critical, closed, patched, started 2025-05-01, CVE-2024-38475
- [SonicWall SMA100 Appliances: SMA100 Appliances OS Command Injection Vulnerability](https://pwn.watch/i/sonicwall-sma100-appliances-cve-2023-44221) ([json](https://pwn.watch/i/sonicwall-sma100-appliances-cve-2023-44221.json)): high, closed, patched, started 2025-05-01, CVE-2023-44221
- [Qualitia Active! Mail: Active! Mail Stack-Based Buffer Overflow Vulnerability](https://pwn.watch/i/qualitia-active-mail-cve-2025-42599) ([json](https://pwn.watch/i/qualitia-active-mail-cve-2025-42599.json)): critical, closed, patched, started 2025-04-28, CVE-2025-42599
- [Broadcom Brocade Fabric OS: Brocade Fabric OS Code Injection Vulnerability](https://pwn.watch/i/broadcom-brocade-fabric-os-cve-2025-1976) ([json](https://pwn.watch/i/broadcom-brocade-fabric-os-cve-2025-1976.json)): high, closed, patched, started 2025-04-28, CVE-2025-1976
- [Commvault Web Server: Web Server Unspecified Vulnerability](https://pwn.watch/i/commvault-web-server-cve-2025-3928) ([json](https://pwn.watch/i/commvault-web-server-cve-2025-3928.json)): high, closed, patched, started 2025-04-28, CVE-2025-3928
- [SAP NetWeaver Visual Composer zero-day: unauthenticated webshell uploads (CVE-2025-31324)](https://pwn.watch/i/sap-netweaver-visual-composer-zero-day-cve-2025-31324) ([json](https://pwn.watch/i/sap-netweaver-visual-composer-zero-day-cve-2025-31324.json)): critical, closed, patched, started 2025-04-24, CVE-2025-31324
- [Apple Multiple Products: 2 exploited vulnerabilities (CVE-2025-31200, CVE-2025-31201)](https://pwn.watch/i/apple-multiple-products-cve-2025-31200) ([json](https://pwn.watch/i/apple-multiple-products-cve-2025-31200.json)): critical, closed, patched, started 2025-04-17, CVE-2025-31200, CVE-2025-31201
- [Microsoft Windows: Windows NTLM Hash Disclosure Spoofing Vulnerability](https://pwn.watch/i/microsoft-windows-cve-2025-24054) ([json](https://pwn.watch/i/microsoft-windows-cve-2025-24054.json)): medium, closed, patched, started 2025-04-17, CVE-2025-24054
- [Erlang/OTP SSH: CVSS 10 unauthenticated RCE (CVE-2025-32433)](https://pwn.watch/i/erlang-otp-ssh-unauthenticated-rce-cve-2025-32433) ([json](https://pwn.watch/i/erlang-otp-ssh-unauthenticated-rce-cve-2025-32433.json)): critical, closed, patched, started 2025-04-16, CVE-2025-32433
- [SonicWall SMA100 Appliances: SMA100 Appliances OS Command Injection Vulnerability](https://pwn.watch/i/sonicwall-sma100-appliances-cve-2021-20035) ([json](https://pwn.watch/i/sonicwall-sma100-appliances-cve-2021-20035.json)): medium, closed, patched, started 2025-04-16, CVE-2021-20035
- [Linux Kernel: 2 exploited vulnerabilities (CVE-2024-53150, CVE-2024-53197)](https://pwn.watch/i/linux-kernel-cve-2024-53150) ([json](https://pwn.watch/i/linux-kernel-cve-2024-53150.json)): high, closed, patched, started 2025-04-09, CVE-2024-53150, CVE-2024-53197
- [Gladinet CentreStack: CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability](https://pwn.watch/i/gladinet-centrestack-cve-2025-30406) ([json](https://pwn.watch/i/gladinet-centrestack-cve-2025-30406.json)): critical, closed, patched, started 2025-04-08, CVE-2025-30406
- [Microsoft Windows: Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability](https://pwn.watch/i/microsoft-windows-cve-2025-29824) ([json](https://pwn.watch/i/microsoft-windows-cve-2025-29824.json)): critical, closed, patched, started 2025-04-08, CVE-2025-29824
- [CrushFTP: Authentication Bypass Vulnerability](https://pwn.watch/i/crushftp-cve-2025-31161) ([json](https://pwn.watch/i/crushftp-cve-2025-31161.json)): critical, closed, patched, started 2025-04-07, CVE-2025-31161
- [Ivanti Connect Secure, Policy Secure, and ZTA Gateways: Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability](https://pwn.watch/i/ivanti-connect-secure-policy-secure-and-zta-gateways-cve-2025-22457) ([json](https://pwn.watch/i/ivanti-connect-secure-policy-secure-and-zta-gateways-cve-2025-22457.json)): critical, closed, patched, started 2025-04-04, CVE-2025-22457
- [Apache Tomcat: Tomcat Path Equivalence Vulnerability](https://pwn.watch/i/apache-tomcat-cve-2025-24813) ([json](https://pwn.watch/i/apache-tomcat-cve-2025-24813.json)): critical, closed, patched, started 2025-04-01, CVE-2025-24813
- [Cisco Smart Licensing Utility: Smart Licensing Utility Static Credential Vulnerability](https://pwn.watch/i/cisco-smart-licensing-utility-cve-2024-20439) ([json](https://pwn.watch/i/cisco-smart-licensing-utility-cve-2024-20439.json)): critical, closed, patched, started 2025-03-31, CVE-2024-20439
- [Google Chromium Mojo: Chromium Mojo Sandbox Escape Vulnerability](https://pwn.watch/i/google-chromium-mojo-cve-2025-2783) ([json](https://pwn.watch/i/google-chromium-mojo-cve-2025-2783.json)): high, closed, patched, started 2025-03-27, CVE-2025-2783
- [Sitecore CMS and Experience Platform (XP): 2 exploited vulnerabilities (CVE-2019-9874, CVE-2019-9875)](https://pwn.watch/i/sitecore-cms-and-experience-platform-xp-cve-2019-9874) ([json](https://pwn.watch/i/sitecore-cms-and-experience-platform-xp-cve-2019-9874.json)): critical, closed, patched, started 2025-03-26, CVE-2019-9874, CVE-2019-9875
- [reviewdog action-setup GitHub Action: reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability](https://pwn.watch/i/reviewdog-action-setup-github-action-cve-2025-30154) ([json](https://pwn.watch/i/reviewdog-action-setup-github-action-cve-2025-30154.json)): high, closed, patched, started 2025-03-24, CVE-2025-30154
- [Edimax IC-7100 IP Camera: IC-7100 IP Camera OS Command Injection Vulnerability](https://pwn.watch/i/edimax-ic-7100-ip-camera-cve-2025-1316) ([json](https://pwn.watch/i/edimax-ic-7100-ip-camera-cve-2025-1316.json)): critical, closed, patched, started 2025-03-19, CVE-2025-1316
- [NAKIVO Backup and Replication: Backup and Replication Absolute Path Traversal Vulnerability](https://pwn.watch/i/nakivo-backup-and-replication-cve-2024-48248) ([json](https://pwn.watch/i/nakivo-backup-and-replication-cve-2024-48248.json)): high, closed, patched, started 2025-03-19, CVE-2024-48248
- [SAP NetWeaver: NetWeaver Directory Traversal Vulnerability](https://pwn.watch/i/sap-netweaver-cve-2017-12637) ([json](https://pwn.watch/i/sap-netweaver-cve-2017-12637.json)): high, closed, patched, started 2025-03-19, CVE-2017-12637
- [Fortinet FortiOS and FortiProxy: FortiOS and FortiProxy Authentication Bypass Vulnerability](https://pwn.watch/i/fortinet-fortios-and-fortiproxy-cve-2025-24472) ([json](https://pwn.watch/i/fortinet-fortios-and-fortiproxy-cve-2025-24472.json)): critical, closed, patched, started 2025-03-18, CVE-2025-24472
- [tj-actions/changed-files compromised: CI secrets dumped in 23,000+ repos' logs](https://pwn.watch/i/tj-actions-changed-files-supply-chain-cve-2025-30066) ([json](https://pwn.watch/i/tj-actions-changed-files-supply-chain-cve-2025-30066.json)): critical, closed, patched, started 2025-03-14, CVE-2025-30066
- [Apple Multiple Products: Multiple Products WebKit Out-of-Bounds Write Vulnerability](https://pwn.watch/i/apple-multiple-products-cve-2025-24201) ([json](https://pwn.watch/i/apple-multiple-products-cve-2025-24201.json)): critical, closed, patched, started 2025-03-13, CVE-2025-24201
- [Juniper Junos OS: Junos OS Improper Isolation or Compartmentalization Vulnerability](https://pwn.watch/i/juniper-junos-os-cve-2025-21590) ([json](https://pwn.watch/i/juniper-junos-os-cve-2025-21590.json)): medium, closed, patched, started 2025-03-13, CVE-2025-21590
- [Microsoft Windows: 6 exploited vulnerabilities (CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993, CVE-2025-26633)](https://pwn.watch/i/microsoft-windows-cve-2025-24983) ([json](https://pwn.watch/i/microsoft-windows-cve-2025-24983.json)): critical, closed, patched, started 2025-03-11, CVE-2025-24983, CVE-2025-24984, CVE-2025-24985…
- [Advantive VeraCore: 2 exploited vulnerabilities (CVE-2024-57968, CVE-2025-25181)](https://pwn.watch/i/advantive-veracore-cve-2024-57968) ([json](https://pwn.watch/i/advantive-veracore-cve-2024-57968.json)): critical, closed, patched, started 2025-03-10, CVE-2024-57968, CVE-2025-25181
- [Ivanti Endpoint Manager (EPM): 3 exploited vulnerabilities (CVE-2024-13159, CVE-2024-13160, CVE-2024-13161)](https://pwn.watch/i/ivanti-endpoint-manager-epm-cve-2024-13159) ([json](https://pwn.watch/i/ivanti-endpoint-manager-epm-cve-2024-13159.json)): critical, closed, patched, started 2025-03-10, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161
- [VMware ESXi and Workstation: ESXi and Workstation TOCTOU Race Condition Vulnerability](https://pwn.watch/i/vmware-esxi-and-workstation-cve-2025-22224) ([json](https://pwn.watch/i/vmware-esxi-and-workstation-cve-2025-22224.json)): critical, closed, patched, started 2025-03-04, CVE-2025-22224
- [VMware ESXi: ESXi Arbitrary Write Vulnerability](https://pwn.watch/i/vmware-esxi-cve-2025-22225) ([json](https://pwn.watch/i/vmware-esxi-cve-2025-22225.json)): critical, closed, patched, started 2025-03-04, CVE-2025-22225
- [VMware ESXi, Workstation, and Fusion: ESXi, Workstation, and Fusion Information Disclosure Vulnerability](https://pwn.watch/i/vmware-esxi-workstation-and-fusion-cve-2025-22226) ([json](https://pwn.watch/i/vmware-esxi-workstation-and-fusion-cve-2025-22226.json)): high, closed, patched, started 2025-03-04, CVE-2025-22226
- [Linux Kernel: Kernel Use of Uninitialized Resource Vulnerability](https://pwn.watch/i/linux-kernel-cve-2024-50302) ([json](https://pwn.watch/i/linux-kernel-cve-2024-50302.json)): medium, closed, patched, started 2025-03-04, CVE-2024-50302
- [Microsoft Windows: Windows Win32k Improper Resource Shutdown or Release Vulnerability](https://pwn.watch/i/microsoft-windows-cve-2018-8639) ([json](https://pwn.watch/i/microsoft-windows-cve-2018-8639.json)): critical, closed, patched, started 2025-03-03, CVE-2018-8639
- [Progress WhatsUp Gold: WhatsUp Gold Path Traversal Vulnerability](https://pwn.watch/i/progress-whatsup-gold-cve-2024-4885) ([json](https://pwn.watch/i/progress-whatsup-gold-cve-2024-4885.json)): critical, closed, patched, started 2025-03-03, CVE-2024-4885
- [Hitachi Vantara Pentaho Business Analytics (BA) Server: 2 exploited vulnerabilities (CVE-2022-43769, CVE-2022-43939)](https://pwn.watch/i/hitachi-vantara-pentaho-business-analytics-ba-server-cve-2022-43769) ([json](https://pwn.watch/i/hitachi-vantara-pentaho-business-analytics-ba-server-cve-2022-43769.json)): high, closed, patched, started 2025-03-03, CVE-2022-43769, CVE-2022-43939
- [Cisco Small Business RV Series Routers: Small Business RV Series Routers Command Injection Vulnerability](https://pwn.watch/i/cisco-small-business-rv-series-routers-cve-2023-20118) ([json](https://pwn.watch/i/cisco-small-business-rv-series-routers-cve-2023-20118.json)): medium, closed, patched, started 2025-03-03, CVE-2023-20118
- [Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2023-34192) ([json](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2023-34192.json)): critical, closed, patched, started 2025-02-25, CVE-2023-34192
- [Microsoft Partner Center: Partner Center Improper Access Control Vulnerability](https://pwn.watch/i/microsoft-partner-center-cve-2024-49035) ([json](https://pwn.watch/i/microsoft-partner-center-cve-2024-49035.json)): high, closed, patched, started 2025-02-25, CVE-2024-49035
- [Adobe ColdFusion: ColdFusion Deserialization Vulnerability](https://pwn.watch/i/adobe-coldfusion-cve-2017-3066) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2017-3066.json)): critical, closed, patched, started 2025-02-24, CVE-2017-3066
- [Oracle Agile Product Lifecycle Management (PLM): Agile Product Lifecycle Management (PLM) Deserialization Vulnerability](https://pwn.watch/i/oracle-agile-product-lifecycle-management-plm-cve-2024-20953) ([json](https://pwn.watch/i/oracle-agile-product-lifecycle-management-plm-cve-2024-20953.json)): high, closed, patched, started 2025-02-24, CVE-2024-20953
- [Microsoft Power Pages: Power Pages Improper Access Control Vulnerability](https://pwn.watch/i/microsoft-power-pages-cve-2025-24989) ([json](https://pwn.watch/i/microsoft-power-pages-cve-2025-24989.json)): high, closed, patched, started 2025-02-21, CVE-2025-24989
- [Craft CMS: Code Injection Vulnerability](https://pwn.watch/i/craft-cms-cve-2025-23209) ([json](https://pwn.watch/i/craft-cms-cve-2025-23209.json)): high, closed, patched, started 2025-02-20, CVE-2025-23209
- [Palo Alto Networks PAN-OS: PAN-OS File Read Vulnerability](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2025-0111) ([json](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2025-0111.json)): high, closed, patched, started 2025-02-20, CVE-2025-0111
- [SonicWall SonicOS: SonicOS SSLVPN Improper Authentication Vulnerability](https://pwn.watch/i/sonicwall-sonicos-cve-2024-53704) ([json](https://pwn.watch/i/sonicwall-sonicos-cve-2024-53704.json)): critical, closed, patched, started 2025-02-18, CVE-2024-53704
- [Palo Alto Networks PAN-OS: PAN-OS Authentication Bypass Vulnerability](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2025-0108) ([json](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2025-0108.json)): high, closed, patched, started 2025-02-18, CVE-2025-0108
- [SimpleHelp: Path Traversal Vulnerability](https://pwn.watch/i/simplehelp-cve-2024-57727) ([json](https://pwn.watch/i/simplehelp-cve-2024-57727.json)): critical, closed, patched, started 2025-02-13, CVE-2024-57727
- [Apple iOS and iPadOS: iOS and iPadOS Incorrect Authorization Vulnerability](https://pwn.watch/i/apple-ios-and-ipados-cve-2025-24200) ([json](https://pwn.watch/i/apple-ios-and-ipados-cve-2025-24200.json)): medium, closed, patched, started 2025-02-12, CVE-2025-24200
- [Mitel SIP Phones: SIP Phones Argument Injection Vulnerability](https://pwn.watch/i/mitel-sip-phones-cve-2024-41710) ([json](https://pwn.watch/i/mitel-sip-phones-cve-2024-41710.json)): medium, closed, patched, started 2025-02-12, CVE-2024-41710
- [Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-21391, CVE-2025-21418)](https://pwn.watch/i/microsoft-windows-cve-2025-21391) ([json](https://pwn.watch/i/microsoft-windows-cve-2025-21391.json)): high, closed, patched, started 2025-02-11, CVE-2025-21391, CVE-2025-21418
- [Zyxel DSL CPE Devices: 2 exploited vulnerabilities (CVE-2024-40890, CVE-2024-40891)](https://pwn.watch/i/zyxel-dsl-cpe-devices-cve-2024-40890) ([json](https://pwn.watch/i/zyxel-dsl-cpe-devices-cve-2024-40890.json)): high, closed, unpatched, started 2025-02-11, CVE-2024-40890, CVE-2024-40891
- [Trimble Cityworks: Cityworks Deserialization Vulnerability](https://pwn.watch/i/trimble-cityworks-cve-2025-0994) ([json](https://pwn.watch/i/trimble-cityworks-cve-2025-0994.json)): high, closed, patched, started 2025-02-07, CVE-2025-0994
- [Microsoft Office Outlook: Outlook Improper Input Validation Vulnerability](https://pwn.watch/i/microsoft-office-outlook-cve-2024-21413) ([json](https://pwn.watch/i/microsoft-office-outlook-cve-2024-21413.json)): critical, closed, patched, started 2025-02-06, CVE-2024-21413
- [Sophos CyberoamOS: CyberoamOS (CROS) SQL Injection Vulnerability](https://pwn.watch/i/sophos-cyberoamos-cve-2020-29574) ([json](https://pwn.watch/i/sophos-cyberoamos-cve-2020-29574.json)): critical, closed, unpatched, started 2025-02-06, CVE-2020-29574
- [Sophos XG Firewall: XG Firewall Buffer Overflow Vulnerability](https://pwn.watch/i/sophos-xg-firewall-cve-2020-15069) ([json](https://pwn.watch/i/sophos-xg-firewall-cve-2020-15069.json)): critical, closed, patched, started 2025-02-06, CVE-2020-15069
- [7-Zip: Mark of the Web Bypass Vulnerability](https://pwn.watch/i/7-zip-cve-2025-0411) ([json](https://pwn.watch/i/7-zip-cve-2025-0411.json)): high, closed, patched, started 2025-02-06, CVE-2025-0411
- [Audinate Dante Discovery: Dante Discovery Process Control Vulnerability](https://pwn.watch/i/audinate-dante-discovery-cve-2022-23748) ([json](https://pwn.watch/i/audinate-dante-discovery-cve-2022-23748.json)): high, closed, patched, started 2025-02-06, CVE-2022-23748
- [Linux Kernel: Kernel Out-of-Bounds Write Vulnerability](https://pwn.watch/i/linux-kernel-cve-2024-53104) ([json](https://pwn.watch/i/linux-kernel-cve-2024-53104.json)): high, closed, patched, started 2025-02-05, CVE-2024-53104
- [Apache OFBiz: OFBiz Forced Browsing Vulnerability](https://pwn.watch/i/apache-ofbiz-cve-2024-45195) ([json](https://pwn.watch/i/apache-ofbiz-cve-2024-45195.json)): critical, closed, patched, started 2025-02-04, CVE-2024-45195
- [Paessler PRTG Network Monitor: 2 exploited vulnerabilities (CVE-2018-19410, CVE-2018-9276)](https://pwn.watch/i/paessler-prtg-network-monitor-cve-2018-19410) ([json](https://pwn.watch/i/paessler-prtg-network-monitor-cve-2018-19410.json)): critical, closed, patched, started 2025-02-04, CVE-2018-19410, CVE-2018-9276
- [Microsoft .NET Framework: .NET Framework Information Disclosure Vulnerability](https://pwn.watch/i/microsoft-net-framework-cve-2024-29059) ([json](https://pwn.watch/i/microsoft-net-framework-cve-2024-29059.json)): high, closed, patched, started 2025-02-04, CVE-2024-29059
- [Apple Multiple Products: Multiple Products Use-After-Free Vulnerability](https://pwn.watch/i/apple-multiple-products-cve-2025-24085) ([json](https://pwn.watch/i/apple-multiple-products-cve-2025-24085.json)): critical, closed, patched, started 2025-01-29, CVE-2025-24085
- [SonicWall SMA1000 Appliances: SMA1000 Appliances Deserialization Vulnerability](https://pwn.watch/i/sonicwall-sma1000-appliances-cve-2025-23006) ([json](https://pwn.watch/i/sonicwall-sma1000-appliances-cve-2025-23006.json)): critical, closed, patched, started 2025-01-24, CVE-2025-23006
- [JQuery: Cross-Site Scripting (XSS) Vulnerability](https://pwn.watch/i/jquery-cve-2020-11023) ([json](https://pwn.watch/i/jquery-cve-2020-11023.json)): medium, closed, patched, started 2025-01-23, CVE-2020-11023
- [Aviatrix Controllers: Controllers OS Command Injection Vulnerability](https://pwn.watch/i/aviatrix-controllers-cve-2024-50603) ([json](https://pwn.watch/i/aviatrix-controllers-cve-2024-50603.json)): critical, closed, patched, started 2025-01-16, CVE-2024-50603
- [Fortinet FortiOS and FortiProxy: FortiOS and FortiProxy Authentication Bypass Vulnerability](https://pwn.watch/i/fortinet-fortios-and-fortiproxy-cve-2024-55591) ([json](https://pwn.watch/i/fortinet-fortios-and-fortiproxy-cve-2024-55591.json)): critical, closed, patched, started 2025-01-14, CVE-2024-55591
- [Microsoft Windows: 3 exploited vulnerabilities (CVE-2025-21333, CVE-2025-21334, CVE-2025-21335)](https://pwn.watch/i/microsoft-windows-cve-2025-21333) ([json](https://pwn.watch/i/microsoft-windows-cve-2025-21333.json)): high, closed, patched, started 2025-01-14, CVE-2025-21333, CVE-2025-21334, CVE-2025-21335
- [Qlik Sense: Sense HTTP Tunneling Vulnerability](https://pwn.watch/i/qlik-sense-cve-2023-48365) ([json](https://pwn.watch/i/qlik-sense-cve-2023-48365.json)): critical, closed, patched, started 2025-01-13, CVE-2023-48365
- [BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS): Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability](https://pwn.watch/i/beyondtrust-privileged-remote-access-pra-and-remote-sup-cve-2024-12686) ([json](https://pwn.watch/i/beyondtrust-privileged-remote-access-pra-and-remote-sup-cve-2024-12686.json)): medium, closed, patched, started 2025-01-13, CVE-2024-12686
- [Ivanti Connect Secure zero-day exploited since mid-December 2024 (CVE-2025-0282)](https://pwn.watch/i/ivanti-connect-secure-zero-day-cve-2025-0282) ([json](https://pwn.watch/i/ivanti-connect-secure-zero-day-cve-2025-0282.json)): critical, closed, patched, started 2025-01-08, CVE-2025-0282
- [Mitel MiCollab: 2 exploited vulnerabilities (CVE-2024-41713, CVE-2024-55550)](https://pwn.watch/i/mitel-micollab-cve-2024-41713) ([json](https://pwn.watch/i/mitel-micollab-cve-2024-41713.json)): critical, closed, patched, started 2025-01-07, CVE-2024-41713, CVE-2024-55550
- [Oracle WebLogic Server: WebLogic Server Unspecified Vulnerability](https://pwn.watch/i/oracle-weblogic-server-cve-2020-2883) ([json](https://pwn.watch/i/oracle-weblogic-server-cve-2020-2883.json)): critical, closed, patched, started 2025-01-07, CVE-2020-2883
- [Palo Alto Networks PAN-OS Malicious DNS Packet](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2024-3393) ([json](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2024-3393.json)): high, closed, patched, started 2024-12-27, CVE-2024-3393
- [Acclaim Systems USAHERDS Use of Hard-Coded Credentials](https://pwn.watch/i/acclaim-systems-usaherds-cve-2021-44207) ([json](https://pwn.watch/i/acclaim-systems-usaherds-cve-2021-44207.json)): high, closed, patched, started 2024-12-23, CVE-2021-44207
- [NUUO NVRmini Devices OS Command Injection](https://pwn.watch/i/nuuo-nvrmini-devices-cve-2018-14933) ([json](https://pwn.watch/i/nuuo-nvrmini-devices-cve-2018-14933.json)): critical, closed, unpatched, started 2024-12-18, CVE-2018-14933
- [NUUO NVRmini2 Devices Missing Authentication](https://pwn.watch/i/nuuo-nvrmini2-devices-cve-2022-23227) ([json](https://pwn.watch/i/nuuo-nvrmini2-devices-cve-2022-23227.json)): critical, closed, unpatched, started 2024-12-18, CVE-2022-23227
- [Reolink RLC-410W IP Camera OS Command Injection](https://pwn.watch/i/reolink-rlc-410w-ip-camera-cve-2021-40407) ([json](https://pwn.watch/i/reolink-rlc-410w-ip-camera-cve-2021-40407.json)): critical, closed, partial, started 2024-12-18, CVE-2021-40407
- [Reolink Multiple IP Cameras OS Command Injection](https://pwn.watch/i/reolink-multiple-ip-cameras-cve-2019-11001) ([json](https://pwn.watch/i/reolink-multiple-ip-cameras-cve-2019-11001.json)): high, closed, partial, started 2024-12-18, CVE-2019-11001
- [Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow](https://pwn.watch/i/microsoft-windows-cve-2024-49138) ([json](https://pwn.watch/i/microsoft-windows-cve-2024-49138.json)): high, closed, patched, started 2024-12-10, CVE-2024-49138
- [BeyondTrust Remote Support breach reaches US Treasury (CVE-2024-12356)](https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356) ([json](https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356.json)): critical, closed, patched, started 2024-12-05, CVE-2024-12356
- [Cleo file transfer zero-days exploited by Clop for data theft](https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956) ([json](https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956.json)): critical, closed, patched, started 2024-12-03, CVE-2024-50623, CVE-2024-55956
- [North Grid Proself Improper Restriction of XML External Entity (XXE) Reference](https://pwn.watch/i/north-grid-proself-cve-2023-45727) ([json](https://pwn.watch/i/north-grid-proself-cve-2023-45727.json)): high, closed, patched, started 2024-12-03, CVE-2023-45727
- [Zyxel Multiple Firewalls Path Traversal](https://pwn.watch/i/zyxel-multiple-firewalls-cve-2024-11667) ([json](https://pwn.watch/i/zyxel-multiple-firewalls-cve-2024-11667.json)): high, closed, patched, started 2024-11-27, CVE-2024-11667
- [ProjectSend Improper Authentication](https://pwn.watch/i/projectsend-cve-2024-11680) ([json](https://pwn.watch/i/projectsend-cve-2024-11680.json)): critical, closed, patched, started 2024-11-26, CVE-2024-11680
- [Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function](https://pwn.watch/i/array-networks-ag-vxag-arrayos-cve-2023-28461) ([json](https://pwn.watch/i/array-networks-ag-vxag-arrayos-cve-2023-28461.json)): critical, closed, patched, started 2024-11-25, CVE-2023-28461
- [Apple Multiple Products: 2 actively exploited vulnerabilities](https://pwn.watch/i/apple-multiple-products-cve-2024-44308-44309) ([json](https://pwn.watch/i/apple-multiple-products-cve-2024-44308-44309.json)): high, closed, patched, started 2024-11-19, CVE-2024-44308, CVE-2024-44309
- [Palo Alto PAN-OS management interface auth bypass + privilege escalation](https://pwn.watch/i/palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474) ([json](https://pwn.watch/i/palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474.json)): critical, closed, patched, started 2024-11-18, CVE-2024-0012, CVE-2024-9474
- [Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization](https://pwn.watch/i/oracle-agile-product-lifecycle-management-plm-cve-2024-21287) ([json](https://pwn.watch/i/oracle-agile-product-lifecycle-management-plm-cve-2024-21287.json)): high, closed, patched, started 2024-11-18, CVE-2024-21287
- [Metabase GeoJSON API Local File Inclusion](https://pwn.watch/i/metabase-cve-2021-41277) ([json](https://pwn.watch/i/metabase-cve-2021-41277.json)): critical, closed, patched, started 2024-11-12, CVE-2021-41277
- [Microsoft November 2024: 2 actively exploited zero-days](https://pwn.watch/i/microsoft-zero-days-november-2024-43451-49039) ([json](https://pwn.watch/i/microsoft-zero-days-november-2024-43451-49039.json)): high, closed, patched, started 2024-11-12, CVE-2024-43451, CVE-2024-49039
- [Atlassian Jira Server and Data Center Path Traversal](https://pwn.watch/i/atlassian-jira-server-and-data-center-cve-2021-26086) ([json](https://pwn.watch/i/atlassian-jira-server-and-data-center-cve-2021-26086.json)): medium, closed, patched, started 2024-11-12, CVE-2021-26086
- [Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS)](https://pwn.watch/i/cisco-adaptive-security-appliance-asa-cve-2014-2120) ([json](https://pwn.watch/i/cisco-adaptive-security-appliance-asa-cve-2014-2120.json)): medium, closed, patched, started 2024-11-12, CVE-2014-2120
- [Nostromo nhttpd Directory Traversal](https://pwn.watch/i/nostromo-nhttpd-cve-2019-16278) ([json](https://pwn.watch/i/nostromo-nhttpd-cve-2019-16278.json)): critical, closed, patched, started 2024-11-07, CVE-2019-16278
- [Android Framework Privilege Escalation](https://pwn.watch/i/android-framework-cve-2024-43093) ([json](https://pwn.watch/i/android-framework-cve-2024-43093.json)): high, closed, patched, started 2024-11-07, CVE-2024-43093
- [CyberPersons CyberPanel: 2 actively exploited vulnerabilities](https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378) ([json](https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378.json)): critical, closed, patched, started 2024-10-29, CVE-2024-51567, CVE-2024-51378
- [FortiManager 'FortiJump' missing authentication zero-day (CVE-2024-47575)](https://pwn.watch/i/fortinet-fortimanager-fortijump-cve-2024-47575) ([json](https://pwn.watch/i/fortinet-fortimanager-fortijump-cve-2024-47575.json)): critical, closed, patched, started 2024-10-23, CVE-2024-47575
- [Cisco ASA and FTD Denial-of-Service](https://pwn.watch/i/cisco-adaptive-security-appliance-asa-and-firepowe-cve-2024-20481) ([json](https://pwn.watch/i/cisco-adaptive-security-appliance-asa-and-firepowe-cve-2024-20481.json)): medium, closed, patched, started 2024-10-23, CVE-2024-20481
- [ScienceLogic SL1 Unspecified](https://pwn.watch/i/sciencelogic-sl1-cve-2024-9537) ([json](https://pwn.watch/i/sciencelogic-sl1-cve-2024-9537.json)): critical, closed, patched, started 2024-10-18, CVE-2024-9537
- [Mozilla Firefox Use-After-Free](https://pwn.watch/i/mozilla-firefox-cve-2024-9680) ([json](https://pwn.watch/i/mozilla-firefox-cve-2024-9680.json)): critical, closed, patched, started 2024-10-09, CVE-2024-9680
- [Microsoft October 2024: 2 actively exploited zero-days](https://pwn.watch/i/microsoft-zero-days-october-2024-43572-43573) ([json](https://pwn.watch/i/microsoft-zero-days-october-2024-43572-43573.json)): high, closed, patched, started 2024-10-08, CVE-2024-43572, CVE-2024-43573
- [Qualcomm Multiple Chipsets Use-After-Free](https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2024-43047) ([json](https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2024-43047.json)): high, closed, patched, started 2024-10-07, CVE-2024-43047
- [Synacor Zimbra Collaboration Suite (ZCS) Command Execution](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2024-45519) ([json](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2024-45519.json)): critical, closed, patched, started 2024-10-02, CVE-2024-45519
- [D-Link DIR-820 Router OS Command Injection](https://pwn.watch/i/d-link-dir-820-router-cve-2023-25280) ([json](https://pwn.watch/i/d-link-dir-820-router-cve-2023-25280.json)): critical, closed, unpatched, started 2024-09-30, CVE-2023-25280
- [DrayTek Multiple Vigor Routers OS Command Injection](https://pwn.watch/i/draytek-multiple-vigor-routers-cve-2020-15415) ([json](https://pwn.watch/i/draytek-multiple-vigor-routers-cve-2020-15415.json)): critical, closed, patched, started 2024-09-30, CVE-2020-15415
- [SAP Commerce Cloud Deserialization of Untrusted Data](https://pwn.watch/i/sap-commerce-cloud-cve-2019-0344) ([json](https://pwn.watch/i/sap-commerce-cloud-cve-2019-0344.json)): critical, closed, patched, started 2024-09-30, CVE-2019-0344
- [Microsoft SQL Server Reporting Services Remote Code Execution](https://pwn.watch/i/microsoft-sql-server-cve-2020-0618) ([json](https://pwn.watch/i/microsoft-sql-server-cve-2020-0618.json)): critical, closed, patched, started 2024-09-18, CVE-2020-0618
- [Oracle ADF Faces Deserialization of Untrusted Data](https://pwn.watch/i/oracle-adf-faces-cve-2022-21445) ([json](https://pwn.watch/i/oracle-adf-faces-cve-2022-21445.json)): critical, closed, patched, started 2024-09-18, CVE-2022-21445
- [Oracle WebLogic Server Remote Code Execution](https://pwn.watch/i/oracle-weblogic-server-cve-2020-14644) ([json](https://pwn.watch/i/oracle-weblogic-server-cve-2020-14644.json)): critical, closed, patched, started 2024-09-18, CVE-2020-14644
- [PTZOptics PT30X-SDI/NDI Cameras: 2 actively exploited vulnerabilities](https://pwn.watch/i/ptzoptics-pt30x-sdi-ndi-cameras-cve-2024-8956-8957) ([json](https://pwn.watch/i/ptzoptics-pt30x-sdi-ndi-cameras-cve-2024-8956-8957.json)): critical, closed, patched, started 2024-09-17, CVE-2024-8956, CVE-2024-8957
- [VMware vCenter Server: 2 actively exploited vulnerabilities](https://pwn.watch/i/vmware-vcenter-server-cve-2024-38812-38813) ([json](https://pwn.watch/i/vmware-vcenter-server-cve-2024-38812-38813.json)): critical, closed, patched, started 2024-09-17, CVE-2024-38812, CVE-2024-38813
- [Adobe Flash Player: 4 actively exploited vulnerabilities](https://pwn.watch/i/adobe-flash-player-cve-2013-0643-cve-2013-0648) ([json](https://pwn.watch/i/adobe-flash-player-cve-2013-0643-cve-2013-0648.json)): high, closed, unpatched, started 2024-09-17, CVE-2013-0643, CVE-2013-0648, CVE-2014-0497…
- [Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor](https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380) ([json](https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380.json)): critical, closed, patched, started 2024-09-10, CVE-2024-8190, CVE-2024-8963, CVE-2024-9379…
- [Microsoft Windows MSHTML Platform Spoofing](https://pwn.watch/i/microsoft-windows-cve-2024-43461) ([json](https://pwn.watch/i/microsoft-windows-cve-2024-43461.json)): high, closed, patched, started 2024-09-10, CVE-2024-43461
- [Microsoft September 2024: 3 actively exploited zero-days](https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more) ([json](https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more.json)): high, closed, patched, started 2024-09-10, CVE-2024-38014, CVE-2024-38217, CVE-2024-38226
- [ImageMagick Improper Input Validation](https://pwn.watch/i/imagemagick-cve-2016-3714) ([json](https://pwn.watch/i/imagemagick-cve-2016-3714.json)): high, closed, patched, started 2024-09-09, CVE-2016-3714
- [Linux Kernel PIE Stack Buffer Corruption](https://pwn.watch/i/linux-kernel-cve-2017-1000253) ([json](https://pwn.watch/i/linux-kernel-cve-2017-1000253.json)): high, closed, patched, started 2024-09-09, CVE-2017-1000253
- [Veeam Backup and Replication Deserialization](https://pwn.watch/i/veeam-backup-replication-cve-2024-40711) ([json](https://pwn.watch/i/veeam-backup-replication-cve-2024-40711.json)): critical, closed, patched, started 2024-09-07, CVE-2024-40711
- [DrayTek VigorConnect: 2 actively exploited vulnerabilities](https://pwn.watch/i/draytek-vigorconnect-cve-2021-20123-20124) ([json](https://pwn.watch/i/draytek-vigorconnect-cve-2021-20123-20124.json)): high, closed, patched, started 2024-09-03, CVE-2021-20123, CVE-2021-20124
- [Progress WhatsUp Gold SQL Injection](https://pwn.watch/i/progress-whatsup-gold-cve-2024-6670) ([json](https://pwn.watch/i/progress-whatsup-gold-cve-2024-6670.json)): critical, closed, patched, started 2024-08-29, CVE-2024-6670
- [SonicWall SonicOS Improper Access Control](https://pwn.watch/i/sonicwall-sonicos-cve-2024-40766) ([json](https://pwn.watch/i/sonicwall-sonicos-cve-2024-40766.json)): critical, closed, patched, started 2024-08-23, CVE-2024-40766
- [Versa Director Dangerous File Type Upload](https://pwn.watch/i/versa-director-cve-2024-39717) ([json](https://pwn.watch/i/versa-director-cve-2024-39717.json)): medium, closed, patched, started 2024-08-22, CVE-2024-39717
- [Dahua IP Camera Firmware: 2 actively exploited vulnerabilities](https://pwn.watch/i/dahua-ip-camera-firmware-cve-2021-33044-33045) ([json](https://pwn.watch/i/dahua-ip-camera-firmware-cve-2021-33044-33045.json)): critical, closed, patched, started 2024-08-21, CVE-2021-33044, CVE-2021-33045
- [SolarWinds Web Help Desk Hardcoded Credential](https://pwn.watch/i/solarwinds-web-help-desk-cve-2024-28987) ([json](https://pwn.watch/i/solarwinds-web-help-desk-cve-2024-28987.json)): critical, closed, patched, started 2024-08-21, CVE-2024-28987
- [Google Chromium V8 Inappropriate Implementation](https://pwn.watch/i/google-chromium-v8-cve-2024-7965) ([json](https://pwn.watch/i/google-chromium-v8-cve-2024-7965.json)): high, closed, patched, started 2024-08-21, CVE-2024-7965
- [Google Chromium V8 Type Confusion](https://pwn.watch/i/google-chromium-v8-cve-2024-7971) ([json](https://pwn.watch/i/google-chromium-v8-cve-2024-7971.json)): high, closed, patched, started 2024-08-21, CVE-2024-7971
- [Linux Kernel Heap-Based Buffer Overflow](https://pwn.watch/i/linux-kernel-cve-2022-0185) ([json](https://pwn.watch/i/linux-kernel-cve-2022-0185.json)): high, closed, patched, started 2024-08-21, CVE-2022-0185
- [Microsoft Exchange Server Information Disclosure](https://pwn.watch/i/microsoft-exchange-server-cve-2021-31196) ([json](https://pwn.watch/i/microsoft-exchange-server-cve-2021-31196.json)): high, closed, patched, started 2024-08-21, CVE-2021-31196
- [Kingsoft WPS Office Path Traversal](https://pwn.watch/i/kingsoft-wps-office-cve-2024-7262) ([json](https://pwn.watch/i/kingsoft-wps-office-cve-2024-7262.json)): critical, closed, patched, started 2024-08-15, CVE-2024-7262
- [Ivanti Virtual Traffic Manager Authentication Bypass](https://pwn.watch/i/ivanti-virtual-traffic-manager-cve-2024-7593) ([json](https://pwn.watch/i/ivanti-virtual-traffic-manager-cve-2024-7593.json)): critical, closed, patched, started 2024-08-13, CVE-2024-7593
- [SolarWinds Web Help Desk Deserialization of Untrusted Data](https://pwn.watch/i/solarwinds-web-help-desk-cve-2024-28986) ([json](https://pwn.watch/i/solarwinds-web-help-desk-cve-2024-28986.json)): critical, closed, patched, started 2024-08-13, CVE-2024-28986
- [Microsoft August 2024: 6 actively exploited zero-days](https://pwn.watch/i/microsoft-zero-days-august-2024-38106-38107-and-4-more) ([json](https://pwn.watch/i/microsoft-zero-days-august-2024-38106-38107-and-4-more.json)): high, closed, patched, started 2024-08-13, CVE-2024-38106, CVE-2024-38107, CVE-2024-38178…
- [Apache OFBiz Incorrect Authorization](https://pwn.watch/i/apache-ofbiz-cve-2024-38856) ([json](https://pwn.watch/i/apache-ofbiz-cve-2024-38856.json)): high, closed, patched, started 2024-08-05, CVE-2024-38856
- [Microsoft COM for Windows Deserialization of Untrusted Data](https://pwn.watch/i/microsoft-windows-cve-2018-0824) ([json](https://pwn.watch/i/microsoft-windows-cve-2018-0824.json)): high, closed, patched, started 2024-08-05, CVE-2018-0824
- [Acronis Cyber Infrastructure (ACI) Insecure Default Password](https://pwn.watch/i/acronis-cyber-infrastructure-aci-cve-2023-45249) ([json](https://pwn.watch/i/acronis-cyber-infrastructure-aci-cve-2023-45249.json)): critical, closed, patched, started 2024-07-24, CVE-2023-45249
- [Microsoft Internet Explorer Use-After-Free](https://pwn.watch/i/microsoft-internet-explorer-cve-2012-4792) ([json](https://pwn.watch/i/microsoft-internet-explorer-cve-2012-4792.json)): high, closed, unpatched, started 2024-07-23, CVE-2012-4792
- [VMware vCenter Server Incorrect Default File Permissions](https://pwn.watch/i/vmware-vcenter-server-cve-2022-22948) ([json](https://pwn.watch/i/vmware-vcenter-server-cve-2022-22948.json)): medium, closed, patched, started 2024-07-17, CVE-2022-22948
- [Palo Alto Networks Expedition: 3 actively exploited vulnerabilities](https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465) ([json](https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465.json)): critical, closed, patched, started 2024-07-10, CVE-2024-5910, CVE-2024-9463, CVE-2024-9465
- [ServiceNow Utah, Vancouver, and Washington DC Now Platform: 2 actively exploited vulnerabilities](https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217) ([json](https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217.json)): critical, closed, patched, started 2024-07-10, CVE-2024-4879, CVE-2024-5217
- [Microsoft SharePoint Deserialization](https://pwn.watch/i/microsoft-sharepoint-cve-2024-38094) ([json](https://pwn.watch/i/microsoft-sharepoint-cve-2024-38094.json)): high, closed, patched, started 2024-07-09, CVE-2024-38094
- [Microsoft July 2024: 2 actively exploited zero-days](https://pwn.watch/i/microsoft-zero-days-july-2024-38080-38112) ([json](https://pwn.watch/i/microsoft-zero-days-july-2024-38080-38112.json)): high, closed, patched, started 2024-07-09, CVE-2024-38080, CVE-2024-38112
- [Twilio Authy Information Disclosure](https://pwn.watch/i/twilio-authy-cve-2024-39891) ([json](https://pwn.watch/i/twilio-authy-cve-2024-39891.json)): medium, closed, patched, started 2024-07-02, CVE-2024-39891
- [OSGeo GeoServer GeoTools Eval Injection](https://pwn.watch/i/osgeo-geoserver-cve-2024-36401) ([json](https://pwn.watch/i/osgeo-geoserver-cve-2024-36401.json)): critical, closed, patched, started 2024-07-01, CVE-2024-36401
- [Cisco NX-OS Command Injection](https://pwn.watch/i/cisco-nx-os-cve-2024-20399) ([json](https://pwn.watch/i/cisco-nx-os-cve-2024-20399.json)): medium, closed, patched, started 2024-07-01, CVE-2024-20399
- [OSGeo GeoServer JAI-EXT Code Injection](https://pwn.watch/i/osgeo-jai-ext-cve-2022-24816) ([json](https://pwn.watch/i/osgeo-jai-ext-cve-2022-24816.json)): critical, closed, patched, started 2024-06-26, CVE-2022-24816
- [Roundcube Webmail Cross-Site Scripting (XSS)](https://pwn.watch/i/roundcube-webmail-cve-2020-13965) ([json](https://pwn.watch/i/roundcube-webmail-cve-2020-13965.json)): medium, closed, patched, started 2024-06-26, CVE-2020-13965
- [VMware ESXi Authentication Bypass](https://pwn.watch/i/vmware-esxi-cve-2024-37085) ([json](https://pwn.watch/i/vmware-esxi-cve-2024-37085.json)): medium, closed, patched, started 2024-06-25, CVE-2024-37085
- [Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE)](https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102) ([json](https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102.json)): critical, closed, patched, started 2024-06-13, CVE-2024-34102
- [Android Pixel Privilege Escalation](https://pwn.watch/i/android-pixel-cve-2024-32896) ([json](https://pwn.watch/i/android-pixel-cve-2024-32896.json)): high, closed, patched, started 2024-06-13, CVE-2024-32896
- [Microsoft Windows Kernel TOCTOU Race Condition](https://pwn.watch/i/microsoft-windows-cve-2024-30088) ([json](https://pwn.watch/i/microsoft-windows-cve-2024-30088.json)): high, closed, patched, started 2024-06-11, CVE-2024-30088
- [Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference](https://pwn.watch/i/microsoft-windows-cve-2024-35250) ([json](https://pwn.watch/i/microsoft-windows-cve-2024-35250.json)): high, closed, patched, started 2024-06-11, CVE-2024-35250
- [Android Kernel Remote Code Execution](https://pwn.watch/i/android-kernel-cve-2024-36971) ([json](https://pwn.watch/i/android-kernel-cve-2024-36971.json)): high, closed, patched, started 2024-06-10, CVE-2024-36971
- [Arm Mali GPU Kernel Driver Use-After-Free](https://pwn.watch/i/arm-mali-gpu-kernel-driver-cve-2024-4610) ([json](https://pwn.watch/i/arm-mali-gpu-kernel-driver-cve-2024-4610.json)): high, closed, patched, started 2024-06-07, CVE-2024-4610
- [RoundCube Webmail Cross-Site Scripting (XSS)](https://pwn.watch/i/roundcube-webmail-cve-2024-37383) ([json](https://pwn.watch/i/roundcube-webmail-cve-2024-37383.json)): medium, closed, patched, started 2024-06-07, CVE-2024-37383
- [PHP-CGI argument injection on Windows (CVE-2024-4577)](https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577) ([json](https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577.json)): critical, closed, patched, started 2024-06-06, CVE-2024-4577
- [SolarWinds Serv-U Path Traversal](https://pwn.watch/i/solarwinds-serv-u-cve-2024-28995) ([json](https://pwn.watch/i/solarwinds-serv-u-cve-2024-28995.json)): high, closed, patched, started 2024-06-06, CVE-2024-28995
- [Oracle WebLogic Server OS Command Injection](https://pwn.watch/i/oracle-weblogic-server-cve-2017-3506) ([json](https://pwn.watch/i/oracle-weblogic-server-cve-2017-3506.json)): high, closed, patched, started 2024-06-03, CVE-2017-3506
- [Ivanti Endpoint Manager (EPM) SQL Injection](https://pwn.watch/i/ivanti-endpoint-manager-epm-cve-2024-29824) ([json](https://pwn.watch/i/ivanti-endpoint-manager-epm-cve-2024-29824.json)): critical, closed, patched, started 2024-05-31, CVE-2024-29824
- [Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine](https://pwn.watch/i/rejetto-http-file-server-cve-2024-23692) ([json](https://pwn.watch/i/rejetto-http-file-server-cve-2024-23692.json)): critical, closed, patched, started 2024-05-31, CVE-2024-23692
- [Progress Telerik Report Server Authentication Bypass by Spoofing](https://pwn.watch/i/progress-telerik-report-server-cve-2024-4358) ([json](https://pwn.watch/i/progress-telerik-report-server-cve-2024-4358.json)): critical, closed, patched, started 2024-05-29, CVE-2024-4358
- [Check Point VPN gateway arbitrary file read (CVE-2024-24919) exploited](https://pwn.watch/i/check-point-quantum-gateway-info-disclosure-cve-2024-24919) ([json](https://pwn.watch/i/check-point-quantum-gateway-info-disclosure-cve-2024-24919.json)): high, closed, patched, started 2024-05-28, CVE-2024-24919
- [Google Chromium V8 Type Confusion](https://pwn.watch/i/google-chromium-v8-cve-2024-5274) ([json](https://pwn.watch/i/google-chromium-v8-cve-2024-5274.json)): high, closed, patched, started 2024-05-28, CVE-2024-5274
- [Apache Flink Improper Access Control](https://pwn.watch/i/apache-flink-cve-2020-17519) ([json](https://pwn.watch/i/apache-flink-cve-2020-17519.json)): critical, closed, patched, started 2024-05-23, CVE-2020-17519
- [Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code](https://pwn.watch/i/justice-av-solutions-viewer-cve-2024-4978) ([json](https://pwn.watch/i/justice-av-solutions-viewer-cve-2024-4978.json)): high, closed, patched, started 2024-05-23, CVE-2024-4978
- [NextGen Healthcare Mirth Connect Deserialization of Untrusted Data](https://pwn.watch/i/nextgen-healthcare-mirth-connect-cve-2023-43208) ([json](https://pwn.watch/i/nextgen-healthcare-mirth-connect-cve-2023-43208.json)): critical, closed, patched, started 2024-05-20, CVE-2023-43208
- [D-Link DIR-600 Router Cross-Site Request Forgery (CSRF)](https://pwn.watch/i/d-link-dir-600-router-cve-2014-100005) ([json](https://pwn.watch/i/d-link-dir-600-router-cve-2014-100005.json)): high, closed, unpatched, started 2024-05-16, CVE-2014-100005
- [D-Link DIR-605 Router Information Disclosure](https://pwn.watch/i/d-link-dir-605-router-cve-2021-40655) ([json](https://pwn.watch/i/d-link-dir-605-router-cve-2021-40655.json)): high, closed, unpatched, started 2024-05-16, CVE-2021-40655
- [Google Chromium V8 Type Confusion](https://pwn.watch/i/google-chromium-v8-cve-2024-4947) ([json](https://pwn.watch/i/google-chromium-v8-cve-2024-4947.json)): critical, closed, patched, started 2024-05-15, CVE-2024-4947
- [Google Chromium V8 Out-of-Bounds Memory Write](https://pwn.watch/i/google-chromium-v8-cve-2024-4761) ([json](https://pwn.watch/i/google-chromium-v8-cve-2024-4761.json)): high, closed, patched, started 2024-05-14, CVE-2024-4761
- [Microsoft May 2024: 2 actively exploited zero-days](https://pwn.watch/i/microsoft-zero-days-may-2024-30040-30051) ([json](https://pwn.watch/i/microsoft-zero-days-may-2024-30040-30051.json)): high, closed, patched, started 2024-05-14, CVE-2024-30040, CVE-2024-30051
- [Google Chromium Visuals Use-After-Free](https://pwn.watch/i/google-chromium-cve-2024-4671) ([json](https://pwn.watch/i/google-chromium-cve-2024-4671.json)): critical, closed, patched, started 2024-05-09, CVE-2024-4671
- [Apache OFBiz Path Traversal](https://pwn.watch/i/apache-ofbiz-cve-2024-32113) ([json](https://pwn.watch/i/apache-ofbiz-cve-2024-32113.json)): critical, closed, patched, started 2024-05-08, CVE-2024-32113
- [Cisco ASA/FTD zero-days used in the ArcaneDoor espionage campaign](https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359) ([json](https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359.json)): high, closed, patched, started 2024-04-24, CVE-2024-20353, CVE-2024-20359
- [Microsoft Windows Print Spooler Privilege Escalation](https://pwn.watch/i/microsoft-windows-cve-2022-38028) ([json](https://pwn.watch/i/microsoft-windows-cve-2022-38028.json)): high, closed, patched, started 2024-04-23, CVE-2022-38028
- [Apache HugeGraph-Server Improper Access Control](https://pwn.watch/i/apache-hugegraph-server-cve-2024-27348) ([json](https://pwn.watch/i/apache-hugegraph-server-cve-2024-27348.json)): critical, closed, patched, started 2024-04-22, CVE-2024-27348
- [CrushFTP VFS Sandbox Escape](https://pwn.watch/i/crushftp-cve-2024-4040) ([json](https://pwn.watch/i/crushftp-cve-2024-4040.json)): critical, closed, patched, started 2024-04-22, CVE-2024-4040
- [Palo Alto PAN-OS GlobalProtect zero-day (CVE-2024-3400)](https://pwn.watch/i/palo-alto-pan-os-globalprotect-zero-day-cve-2024-3400) ([json](https://pwn.watch/i/palo-alto-pan-os-globalprotect-zero-day-cve-2024-3400.json)): critical, closed, patched, started 2024-04-12, CVE-2024-3400
- [Microsoft SmartScreen Prompt Security Feature Bypass](https://pwn.watch/i/microsoft-smartscreen-prompt-cve-2024-29988) ([json](https://pwn.watch/i/microsoft-smartscreen-prompt-cve-2024-29988.json)): high, closed, patched, started 2024-04-09, CVE-2024-29988
- [D-Link Multiple NAS Devices: 2 actively exploited vulnerabilities](https://pwn.watch/i/d-link-multiple-nas-devices-cve-2024-3272-3273) ([json](https://pwn.watch/i/d-link-multiple-nas-devices-cve-2024-3272-3273.json)): critical, closed, unpatched, started 2024-04-04, CVE-2024-3272, CVE-2024-3273
- [Android Pixel: 2 actively exploited vulnerabilities](https://pwn.watch/i/android-pixel-cve-2024-29745-29748) ([json](https://pwn.watch/i/android-pixel-cve-2024-29745-29748.json)): high, closed, patched, started 2024-04-04, CVE-2024-29745, CVE-2024-29748
- [Microsoft SharePoint Server Code Injection](https://pwn.watch/i/microsoft-sharepoint-server-cve-2023-24955) ([json](https://pwn.watch/i/microsoft-sharepoint-server-cve-2023-24955.json)): high, closed, patched, started 2024-03-26, CVE-2023-24955
- [Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection](https://pwn.watch/i/ivanti-endpoint-manager-cloud-service-appliance-ep-cve-2021-44529) ([json](https://pwn.watch/i/ivanti-endpoint-manager-cloud-service-appliance-ep-cve-2021-44529.json)): critical, closed, patched, started 2024-03-25, CVE-2021-44529
- [Nice Linear eMerge E3-Series OS Command Injection](https://pwn.watch/i/nice-linear-emerge-e3-series-cve-2019-7256) ([json](https://pwn.watch/i/nice-linear-emerge-e3-series-cve-2019-7256.json)): critical, closed, patched, started 2024-03-25, CVE-2019-7256
- [Adobe ColdFusion Improper Access Control](https://pwn.watch/i/adobe-coldfusion-cve-2024-20767) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2024-20767.json)): high, closed, patched, started 2024-03-18, CVE-2024-20767
- [Fortinet FortiClient EMS SQL Injection](https://pwn.watch/i/fortinet-forticlient-ems-cve-2023-48788) ([json](https://pwn.watch/i/fortinet-forticlient-ems-cve-2023-48788.json)): critical, closed, patched, started 2024-03-12, CVE-2023-48788
- [Microsoft Windows Error Reporting Service Improper Privilege Management](https://pwn.watch/i/microsoft-windows-cve-2024-26169) ([json](https://pwn.watch/i/microsoft-windows-cve-2024-26169.json)): high, closed, patched, started 2024-03-12, CVE-2024-26169
- [Sunhillo SureLine OS Command Injection](https://pwn.watch/i/sunhillo-sureline-cve-2021-36380) ([json](https://pwn.watch/i/sunhillo-sureline-cve-2021-36380.json)): critical, closed, patched, started 2024-03-05, CVE-2021-36380
- [Apple Multiple Products: 2 actively exploited vulnerabilities](https://pwn.watch/i/apple-multiple-products-cve-2024-23225-23296) ([json](https://pwn.watch/i/apple-multiple-products-cve-2024-23225-23296.json)): high, closed, patched, started 2024-03-05, CVE-2024-23225, CVE-2024-23296
- [Android Pixel Information Disclosure](https://pwn.watch/i/android-pixel-cve-2023-21237) ([json](https://pwn.watch/i/android-pixel-cve-2023-21237.json)): medium, closed, patched, started 2024-03-05, CVE-2023-21237
- [JetBrains TeamCity on-prem auth bypass (CVE-2024-27198) exploited](https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2024-27198-27199) ([json](https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2024-27198-27199.json)): critical, closed, patched, started 2024-03-04, CVE-2024-27198, CVE-2024-27199
- [Microsoft Streaming Service Untrusted Pointer Dereference](https://pwn.watch/i/microsoft-streaming-service-cve-2023-29360) ([json](https://pwn.watch/i/microsoft-streaming-service-cve-2023-29360.json)): high, closed, patched, started 2024-02-29, CVE-2023-29360
- [Progress Kemp LoadMaster OS Command Injection](https://pwn.watch/i/progress-kemp-loadmaster-cve-2024-1212) ([json](https://pwn.watch/i/progress-kemp-loadmaster-cve-2024-1212.json)): critical, closed, patched, started 2024-02-21, CVE-2024-1212
- [ConnectWise ScreenConnect auth bypass mass-exploited](https://pwn.watch/i/connectwise-screenconnect-auth-bypass-cve-2024-1709) ([json](https://pwn.watch/i/connectwise-screenconnect-auth-bypass-cve-2024-1709.json)): critical, closed, patched, started 2024-02-19, CVE-2024-1709, CVE-2024-1708
- [Fortinet Multiple Products Format String](https://pwn.watch/i/fortinet-multiple-products-cve-2024-23113) ([json](https://pwn.watch/i/fortinet-multiple-products-cve-2024-23113.json)): critical, closed, patched, started 2024-02-15, CVE-2024-23113
- [Cisco ASA and FTD Information Disclosure](https://pwn.watch/i/cisco-adaptive-security-appliance-asa-and-firepowe-cve-2020-3259) ([json](https://pwn.watch/i/cisco-adaptive-security-appliance-asa-and-firepowe-cve-2020-3259.json)): high, closed, patched, started 2024-02-15, CVE-2020-3259
- [Microsoft Exchange Server Privilege Escalation](https://pwn.watch/i/microsoft-exchange-server-cve-2024-21410) ([json](https://pwn.watch/i/microsoft-exchange-server-cve-2024-21410.json)): critical, closed, patched, started 2024-02-13, CVE-2024-21410
- [Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control](https://pwn.watch/i/microsoft-windows-cve-2024-21338) ([json](https://pwn.watch/i/microsoft-windows-cve-2024-21338.json)): high, closed, patched, started 2024-02-13, CVE-2024-21338
- [Microsoft February 2024: 2 actively exploited zero-days](https://pwn.watch/i/microsoft-zero-days-february-2024-21351-21412) ([json](https://pwn.watch/i/microsoft-zero-days-february-2024-21351-21412.json)): high, closed, patched, started 2024-02-13, CVE-2024-21351, CVE-2024-21412
- [Roundcube Webmail Persistent Cross-Site Scripting (XSS)](https://pwn.watch/i/roundcube-webmail-cve-2023-43770) ([json](https://pwn.watch/i/roundcube-webmail-cve-2023-43770.json)): medium, closed, patched, started 2024-02-12, CVE-2023-43770
- [Fortinet FortiOS Out-of-Bound Write](https://pwn.watch/i/fortinet-fortios-cve-2024-21762) ([json](https://pwn.watch/i/fortinet-fortios-cve-2024-21762.json)): critical, closed, patched, started 2024-02-09, CVE-2024-21762
- [Google Chromium V8 Type Confusion](https://pwn.watch/i/google-chromium-v8-cve-2023-4762) ([json](https://pwn.watch/i/google-chromium-v8-cve-2023-4762.json)): high, closed, patched, started 2024-02-06, CVE-2023-4762
- [Linux kernel nf_tables use-after-free (CVE-2024-1086) used for root](https://pwn.watch/i/linux-kernel-nf-tables-use-after-free-cve-2024-1086) ([json](https://pwn.watch/i/linux-kernel-nf-tables-use-after-free-cve-2024-1086.json)): high, closed, patched, started 2024-01-31, CVE-2024-1086
- [Jenkins CLI arbitrary file read (CVE-2024-23897) leads to RCE](https://pwn.watch/i/jenkins-cli-arbitrary-file-read-cve-2024-23897) ([json](https://pwn.watch/i/jenkins-cli-arbitrary-file-read-cve-2024-23897.json)): critical, closed, patched, started 2024-01-24, CVE-2024-23897
- [Apple Multiple Products WebKit Type Confusion](https://pwn.watch/i/apple-multiple-products-cve-2024-23222) ([json](https://pwn.watch/i/apple-multiple-products-cve-2024-23222.json)): high, closed, patched, started 2024-01-23, CVE-2024-23222
- [VMware vCenter Server Out-of-Bounds Write](https://pwn.watch/i/vmware-vcenter-server-cve-2023-34048) ([json](https://pwn.watch/i/vmware-vcenter-server-cve-2023-34048.json)): critical, closed, patched, started 2024-01-22, CVE-2023-34048
- [Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass](https://pwn.watch/i/ivanti-endpoint-manager-mobile-epmm-and-mobileiron-cve-2023-35082) ([json](https://pwn.watch/i/ivanti-endpoint-manager-mobile-epmm-and-mobileiron-cve-2023-35082.json)): critical, closed, patched, started 2024-01-18, CVE-2023-35082
- [Citrix NetScaler ADC and NetScaler Gateway: 2 actively exploited vulnerabilities](https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549) ([json](https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549.json)): high, closed, patched, started 2024-01-17, CVE-2023-6548, CVE-2023-6549
- [Atlassian Confluence Data Center and Server Template Injection](https://pwn.watch/i/atlassian-confluence-data-center-and-server-cve-2023-22527) ([json](https://pwn.watch/i/atlassian-confluence-data-center-and-server-cve-2023-22527.json)): critical, closed, patched, started 2024-01-16, CVE-2023-22527
- [Google Chromium V8 Out-of-Bounds Memory Access](https://pwn.watch/i/google-chromium-v8-cve-2024-0519) ([json](https://pwn.watch/i/google-chromium-v8-cve-2024-0519.json)): high, closed, patched, started 2024-01-16, CVE-2024-0519
- [Laravel Deserialization of Untrusted Data](https://pwn.watch/i/laravel-framework-cve-2018-15133) ([json](https://pwn.watch/i/laravel-framework-cve-2018-15133.json)): high, closed, patched, started 2024-01-16, CVE-2018-15133
- [GitLab Community and Enterprise Editions Improper Access Control](https://pwn.watch/i/gitlab-ce-ee-cve-2023-7028) ([json](https://pwn.watch/i/gitlab-ce-ee-cve-2023-7028.json)): critical, closed, patched, started 2024-01-12, CVE-2023-7028
- [Ivanti Connect Secure zero-days chained for mass VPN compromise](https://pwn.watch/i/ivanti-connect-secure-zero-days-cve-2023-46805-cve-2024-21887-21893) ([json](https://pwn.watch/i/ivanti-connect-secure-zero-days-cve-2023-46805-cve-2024-21887-21893.json)): critical, closed, patched, started 2024-01-10, CVE-2023-46805, CVE-2024-21887, CVE-2024-21893
- [Microsoft SharePoint Server Privilege Escalation](https://pwn.watch/i/microsoft-sharepoint-server-cve-2023-29357) ([json](https://pwn.watch/i/microsoft-sharepoint-server-cve-2023-29357.json)): critical, closed, patched, started 2024-01-10, CVE-2023-29357
- [Apple Multiple Products Memory Corruption](https://pwn.watch/i/apple-multiple-products-cve-2022-48618) ([json](https://pwn.watch/i/apple-multiple-products-cve-2022-48618.json)): high, closed, patched, started 2024-01-09, CVE-2022-48618
- [Adobe ColdFusion: 2 actively exploited vulnerabilities](https://pwn.watch/i/adobe-coldfusion-cve-2023-29300-38203) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2023-29300-38203.json)): critical, closed, patched, started 2024-01-08, CVE-2023-29300, CVE-2023-38203
- [D-Link DSL-2750B Devices Command Injection](https://pwn.watch/i/d-link-dsl-2750b-devices-cve-2016-20017) ([json](https://pwn.watch/i/d-link-dsl-2750b-devices-cve-2016-20017.json)): critical, closed, patched, started 2024-01-08, CVE-2016-20017
- [Apache Superset Insecure Default Initialization of Resource](https://pwn.watch/i/apache-superset-cve-2023-27524) ([json](https://pwn.watch/i/apache-superset-cve-2023-27524.json)): high, closed, patched, started 2024-01-08, CVE-2023-27524
- [Apple Multiple Products Code Execution](https://pwn.watch/i/apple-multiple-products-cve-2023-41990) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-41990.json)): high, closed, patched, started 2024-01-08, CVE-2023-41990
- [Joomla! Improper Access Control](https://pwn.watch/i/joomla-cve-2023-23752) ([json](https://pwn.watch/i/joomla-cve-2023-23752.json)): medium, closed, patched, started 2024-01-08, CVE-2023-23752
- [Linux Kernel Use-After-Free](https://pwn.watch/i/linux-kernel-cve-2022-2586) ([json](https://pwn.watch/i/linux-kernel-cve-2022-2586.json)): medium, closed, patched, started 2024-01-08, CVE-2022-2586
- [Google Chromium WebRTC Heap Buffer Overflow](https://pwn.watch/i/google-chromium-webrtc-cve-2023-7024) ([json](https://pwn.watch/i/google-chromium-webrtc-cve-2023-7024.json)): high, closed, patched, started 2024-01-02, CVE-2023-7024
- [Spreadsheet::ParseExcel Remote Code Execution](https://pwn.watch/i/spreadsheet-parseexcel-cve-2023-7101) ([json](https://pwn.watch/i/spreadsheet-parseexcel-cve-2023-7101.json)): high, closed, patched, started 2024-01-02, CVE-2023-7101
- [FXC AE1021, AE1021PE: OS Command Injection (CVE-2023-49897)](https://pwn.watch/i/fxc-ae1021-ae1021pe-cve-2023-49897) ([json](https://pwn.watch/i/fxc-ae1021-ae1021pe-cve-2023-49897.json)): high, closed, patched, started 2023-12-21, CVE-2023-49897
- [QNAP VioStor NVR: OS Command Injection (CVE-2023-47565)](https://pwn.watch/i/qnap-viostor-nvr-cve-2023-47565) ([json](https://pwn.watch/i/qnap-viostor-nvr-cve-2023-47565.json)): high, closed, patched, started 2023-12-21, CVE-2023-47565
- [Unitronics Vision PLC and HMI: Insecure Default Password (CVE-2023-6448)](https://pwn.watch/i/unitronics-vision-plc-and-hmi-cve-2023-6448) ([json](https://pwn.watch/i/unitronics-vision-plc-and-hmi-cve-2023-6448.json)): critical, closed, patched, started 2023-12-11, CVE-2023-6448
- [Qlik Sense: 2 exploited vulnerabilities (CVE-2023-41265, CVE-2023-41266)](https://pwn.watch/i/qlik-sense-cve-2023-41265-41266) ([json](https://pwn.watch/i/qlik-sense-cve-2023-41265-41266.json)): critical, closed, patched, started 2023-12-07, CVE-2023-41265, CVE-2023-41266
- [Qualcomm Multiple Chipsets: 4 exploited vulnerabilities](https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2022-22071-and-3-more) ([json](https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2022-22071-and-3-more.json)): high, closed, patched, started 2023-12-05, CVE-2022-22071, CVE-2023-33063, CVE-2023-33106…
- [Apple Multiple Products: 2 exploited vulnerabilities (CVE-2023-42916, CVE-2023-42917)](https://pwn.watch/i/apple-multiple-products-cve-2023-42916-42917) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-42916-42917.json)): high, closed, patched, started 2023-12-04, CVE-2023-42916, CVE-2023-42917
- [Google Chromium Skia: Integer Overflow (CVE-2023-6345)](https://pwn.watch/i/google-chromium-skia-cve-2023-6345) ([json](https://pwn.watch/i/google-chromium-skia-cve-2023-6345.json)): critical, closed, patched, started 2023-11-30, CVE-2023-6345
- [ownCloud graphapi: Information Disclosure (CVE-2023-49103)](https://pwn.watch/i/owncloud-graphapi-cve-2023-49103) ([json](https://pwn.watch/i/owncloud-graphapi-cve-2023-49103.json)): high, closed, patched, started 2023-11-30, CVE-2023-49103
- [Sophos Web Appliance: Command Injection (CVE-2023-1671)](https://pwn.watch/i/sophos-web-appliance-cve-2023-1671) ([json](https://pwn.watch/i/sophos-web-appliance-cve-2023-1671.json)): critical, closed, patched, started 2023-11-16, CVE-2023-1671
- [Microsoft Windows: Mark of the Web (MOTW) Security Feature Bypass (CVE-2023-36584)](https://pwn.watch/i/microsoft-windows-cve-2023-36584) ([json](https://pwn.watch/i/microsoft-windows-cve-2023-36584.json)): medium, closed, patched, started 2023-11-16, CVE-2023-36584
- [Microsoft Windows: 3 exploited vulnerabilities (CVE-2023-36025, CVE-2023-36033, CVE-2023-36036)](https://pwn.watch/i/microsoft-windows-cve-2023-36025-36033-36036) ([json](https://pwn.watch/i/microsoft-windows-cve-2023-36025-36033-36036.json)): high, closed, patched, started 2023-11-14, CVE-2023-36025, CVE-2023-36033, CVE-2023-36036
- [Juniper Junos OS: 5 exploited vulnerabilities](https://pwn.watch/i/juniper-junos-os-cve-2023-36844-and-4-more) ([json](https://pwn.watch/i/juniper-junos-os-cve-2023-36844-and-4-more.json)): critical, closed, patched, started 2023-11-13, CVE-2023-36844, CVE-2023-36845, CVE-2023-36846…
- [SysAid Server: Path Traversal (CVE-2023-47246)](https://pwn.watch/i/sysaid-server-cve-2023-47246) ([json](https://pwn.watch/i/sysaid-server-cve-2023-47246.json)): critical, closed, patched, started 2023-11-13, CVE-2023-47246
- [IETF Service Location Protocol (SLP): Denial-of-Service (CVE-2023-29552)](https://pwn.watch/i/ietf-service-location-protocol-slp-cve-2023-29552) ([json](https://pwn.watch/i/ietf-service-location-protocol-slp-cve-2023-29552.json)): high, closed, patched, started 2023-11-08, CVE-2023-29552
- [Confluence Data Center/Server reset-and-takeover bug exploited for Cerber ransomware (CVE-2023-22518)](https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518) ([json](https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518.json)): critical, closed, patched, started 2023-10-31, CVE-2023-22518
- [F5 BIG-IP Configuration Utility: 2 exploited vulnerabilities (CVE-2023-46747, CVE-2023-46748)](https://pwn.watch/i/f5-big-ip-configuration-utility-cve-2023-46747-46748) ([json](https://pwn.watch/i/f5-big-ip-configuration-utility-cve-2023-46747-46748.json)): critical, closed, patched, started 2023-10-31, CVE-2023-46747, CVE-2023-46748
- [Apache ActiveMQ OpenWire RCE exploited for HelloKitty ransomware (CVE-2023-46604)](https://pwn.watch/i/apache-activemq-openwire-rce-cve-2023-46604) ([json](https://pwn.watch/i/apache-activemq-openwire-rce-cve-2023-46604.json)): critical, closed, patched, started 2023-10-27, CVE-2023-46604
- [Roundcube Webmail: Persistent Cross-Site Scripting (XSS) (CVE-2023-5631)](https://pwn.watch/i/roundcube-webmail-cve-2023-5631) ([json](https://pwn.watch/i/roundcube-webmail-cve-2023-5631.json)): medium, closed, patched, started 2023-10-26, CVE-2023-5631
- [Citrix Bleed: NetScaler session token leak (CVE-2023-4966)](https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966) ([json](https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966.json)): critical, closed, patched, started 2023-10-10, CVE-2023-4966
- [Adobe Acrobat and Reader: Use-After-Free (CVE-2023-21608)](https://pwn.watch/i/adobe-acrobat-and-reader-cve-2023-21608) ([json](https://pwn.watch/i/adobe-acrobat-and-reader-cve-2023-21608.json)): high, closed, patched, started 2023-10-10, CVE-2023-21608
- [Cisco IOS and IOS XE: Group Encrypted Transport VPN Out-of-Bounds Write (CVE-2023-20109)](https://pwn.watch/i/cisco-ios-and-ios-xe-cve-2023-20109) ([json](https://pwn.watch/i/cisco-ios-and-ios-xe-cve-2023-20109.json)): medium, closed, patched, started 2023-10-10, CVE-2023-20109
- [Microsoft Skype for Business: Privilege Escalation (CVE-2023-41763)](https://pwn.watch/i/microsoft-skype-for-business-cve-2023-41763) ([json](https://pwn.watch/i/microsoft-skype-for-business-cve-2023-41763.json)): medium, closed, patched, started 2023-10-10, CVE-2023-41763
- [Microsoft WordPad: Information Disclosure (CVE-2023-36563)](https://pwn.watch/i/microsoft-wordpad-cve-2023-36563) ([json](https://pwn.watch/i/microsoft-wordpad-cve-2023-36563.json)): medium, closed, patched, started 2023-10-10, CVE-2023-36563
- [Apple iOS and iPadOS: Kernel Privilege Escalation (CVE-2023-42824)](https://pwn.watch/i/apple-ios-and-ipados-cve-2023-42824) ([json](https://pwn.watch/i/apple-ios-and-ipados-cve-2023-42824.json)): high, closed, patched, started 2023-10-05, CVE-2023-42824
- [Progress WS_FTP Server: Deserialization of Untrusted Data (CVE-2023-40044)](https://pwn.watch/i/progress-ws-ftp-server-cve-2023-40044) ([json](https://pwn.watch/i/progress-ws-ftp-server-cve-2023-40044.json)): high, closed, patched, started 2023-10-05, CVE-2023-40044
- [Confluence Data Center/Server zero-day lets attackers create admins (CVE-2023-22515)](https://pwn.watch/i/atlassian-confluence-admin-creation-cve-2023-22515) ([json](https://pwn.watch/i/atlassian-confluence-admin-creation-cve-2023-22515.json)): critical, closed, patched, started 2023-10-04, CVE-2023-22515
- [Microsoft Windows CNG Key Isolation Service: Privilege Escalation (CVE-2023-28229)](https://pwn.watch/i/microsoft-windows-cng-key-isolation-service-cve-2023-28229) ([json](https://pwn.watch/i/microsoft-windows-cng-key-isolation-service-cve-2023-28229.json)): high, closed, patched, started 2023-10-04, CVE-2023-28229
- [Looney Tunables: glibc ld.so local root on most Linux distros (CVE-2023-4911)](https://pwn.watch/i/glibc-looney-tunables-cve-2023-4911) ([json](https://pwn.watch/i/glibc-looney-tunables-cve-2023-4911.json)): high, closed, patched, started 2023-10-03, CVE-2023-4911
- [Arm Mali GPU Kernel Driver: Use-After-Free (CVE-2023-4211)](https://pwn.watch/i/arm-mali-gpu-kernel-driver-cve-2023-4211) ([json](https://pwn.watch/i/arm-mali-gpu-kernel-driver-cve-2023-4211.json)): medium, closed, patched, started 2023-10-03, CVE-2023-4211
- [Google Chromium libvpx: Heap Buffer Overflow (CVE-2023-5217)](https://pwn.watch/i/google-chromium-libvpx-cve-2023-5217) ([json](https://pwn.watch/i/google-chromium-libvpx-cve-2023-5217.json)): high, closed, patched, started 2023-10-02, CVE-2023-5217
- [Apple Multiple Products: 3 exploited vulnerabilities (CVE-2023-41991, CVE-2023-41992, CVE-2023-41993)](https://pwn.watch/i/apple-multiple-products-cve-2023-41991-41992-41993) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-41991-41992-41993.json)): high, closed, patched, started 2023-09-25, CVE-2023-41991, CVE-2023-41992, CVE-2023-41993
- [Trend Micro Apex One and Worry-Free Business Security: Remote Code Execution (CVE-2023-41179)](https://pwn.watch/i/trend-micro-apex-one-and-worry-free-business-cve-2023-41179) ([json](https://pwn.watch/i/trend-micro-apex-one-and-worry-free-business-cve-2023-41179.json)): high, closed, patched, started 2023-09-21, CVE-2023-41179
- [MinIO: Security Feature Bypass (CVE-2023-28434)](https://pwn.watch/i/minio-cve-2023-28434) ([json](https://pwn.watch/i/minio-cve-2023-28434.json)): high, closed, patched, started 2023-09-19, CVE-2023-28434
- [Cisco IOS XE web UI zero-days: implants on tens of thousands of devices](https://pwn.watch/i/cisco-ios-xe-web-ui-implants-cve-2023-20198) ([json](https://pwn.watch/i/cisco-ios-xe-web-ui-implants-cve-2023-20198.json)): critical, closed, patched, started 2023-09-18, CVE-2023-20198, CVE-2023-20273
- [TeamCity On-Premises auth bypass to RCE, exploited by North Korea and Russia (CVE-2023-42793)](https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2023-42793) ([json](https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2023-42793.json)): critical, closed, patched, started 2023-09-18, CVE-2023-42793
- [Samsung Mobile Devices: Use-After-Free (CVE-2022-22265)](https://pwn.watch/i/samsung-mobile-devices-cve-2022-22265) ([json](https://pwn.watch/i/samsung-mobile-devices-cve-2022-22265.json)): high, closed, patched, started 2023-09-18, CVE-2022-22265
- [Adobe Acrobat and Reader: Out-of-Bounds Write (CVE-2023-26369)](https://pwn.watch/i/adobe-acrobat-and-reader-cve-2023-26369) ([json](https://pwn.watch/i/adobe-acrobat-and-reader-cve-2023-26369.json)): high, closed, patched, started 2023-09-14, CVE-2023-26369
- [Cisco Adaptive Security Appliance and Firepower Threat Defense: Unauthorized Access (CVE-2023-20269)](https://pwn.watch/i/cisco-adaptive-security-appliance-and-threat-cve-2023-20269) ([json](https://pwn.watch/i/cisco-adaptive-security-appliance-and-threat-cve-2023-20269.json)): critical, closed, patched, started 2023-09-13, CVE-2023-20269
- [Android Framework: Privilege Escalation (CVE-2023-35674)](https://pwn.watch/i/android-framework-cve-2023-35674) ([json](https://pwn.watch/i/android-framework-cve-2023-35674.json)): high, closed, patched, started 2023-09-13, CVE-2023-35674
- [Microsoft Streaming Service Proxy: Privilege Escalation (CVE-2023-36802)](https://pwn.watch/i/microsoft-streaming-service-proxy-cve-2023-36802) ([json](https://pwn.watch/i/microsoft-streaming-service-proxy-cve-2023-36802.json)): high, closed, patched, started 2023-09-12, CVE-2023-36802
- [Microsoft Word: Information Disclosure (CVE-2023-36761)](https://pwn.watch/i/microsoft-word-cve-2023-36761) ([json](https://pwn.watch/i/microsoft-word-cve-2023-36761.json)): medium, closed, patched, started 2023-09-12, CVE-2023-36761
- [libwebp heap overflow exploited in the wild (CVE-2023-4863)](https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863) ([json](https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863.json)): high, closed, patched, started 2023-09-11, CVE-2023-4863
- [BLASTPASS: NSO zero-click iPhone exploit chain (CVE-2023-41064, CVE-2023-41061)](https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061) ([json](https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061.json)): high, closed, patched, started 2023-09-07, CVE-2023-41064, CVE-2023-41061
- [Apache RocketMQ: Command Execution (CVE-2023-33246)](https://pwn.watch/i/apache-rocketmq-cve-2023-33246) ([json](https://pwn.watch/i/apache-rocketmq-cve-2023-33246.json)): critical, closed, patched, started 2023-09-06, CVE-2023-33246
- [HTTP/2 Rapid Reset: record-breaking DDoS attacks (CVE-2023-44487)](https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487) ([json](https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487.json)): high, closed, patched, started 2023-08-25, CVE-2023-44487
- [Ignite Realtime Openfire: Path Traversal (CVE-2023-32315)](https://pwn.watch/i/ignite-realtime-openfire-cve-2023-32315) ([json](https://pwn.watch/i/ignite-realtime-openfire-cve-2023-32315.json)): high, closed, patched, started 2023-08-24, CVE-2023-32315
- [Ivanti Sentry: Authentication Bypass (CVE-2023-38035)](https://pwn.watch/i/ivanti-sentry-cve-2023-38035) ([json](https://pwn.watch/i/ivanti-sentry-cve-2023-38035.json)): critical, closed, patched, started 2023-08-22, CVE-2023-38035
- [Veeam Backup & Replication: Cloud Connect Missing Authentication for Critical Function (CVE-2023-27532)](https://pwn.watch/i/veeam-backup-replication-cve-2023-27532) ([json](https://pwn.watch/i/veeam-backup-replication-cve-2023-27532.json)): high, closed, patched, started 2023-08-22, CVE-2023-27532
- [Adobe ColdFusion: Deserialization of Untrusted Data (CVE-2023-26359)](https://pwn.watch/i/adobe-coldfusion-cve-2023-26359) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2023-26359.json)): critical, closed, patched, started 2023-08-21, CVE-2023-26359
- [Citrix Content Collaboration: ShareFile Improper Access Control (CVE-2023-24489)](https://pwn.watch/i/citrix-content-collaboration-cve-2023-24489) ([json](https://pwn.watch/i/citrix-content-collaboration-cve-2023-24489.json)): critical, closed, patched, started 2023-08-16, CVE-2023-24489
- [Microsoft .NET Core and Visual Studio: Denial-of-Service (CVE-2023-38180)](https://pwn.watch/i/microsoft-net-core-and-visual-studio-cve-2023-38180) ([json](https://pwn.watch/i/microsoft-net-core-and-visual-studio-cve-2023-38180.json)): high, closed, patched, started 2023-08-09, CVE-2023-38180
- [WinRAR zero-day used against traders, then state hackers (CVE-2023-38831)](https://pwn.watch/i/winrar-zero-day-cve-2023-38831) ([json](https://pwn.watch/i/winrar-zero-day-cve-2023-38831.json)): high, closed, patched, started 2023-08-02, CVE-2023-38831
- [Synacor Zimbra Collaboration Suite (ZCS): Cross-Site Scripting (XSS) (CVE-2023-37580)](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2023-37580) ([json](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2023-37580.json)): medium, closed, patched, started 2023-07-27, CVE-2023-37580
- [Ivanti EPMM zero-days used to breach 12 Norwegian ministries](https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078) ([json](https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078.json)): critical, closed, patched, started 2023-07-24, CVE-2023-35078, CVE-2023-35081
- [Adobe ColdFusion: 2 exploited vulnerabilities (CVE-2023-29298, CVE-2023-38205)](https://pwn.watch/i/adobe-coldfusion-cve-2023-29298-38205) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2023-29298-38205.json)): high, closed, patched, started 2023-07-20, CVE-2023-29298, CVE-2023-38205
- [NetScaler ADC/Gateway unauthenticated RCE (CVE-2023-3519)](https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519) ([json](https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519.json)): critical, closed, patched, started 2023-07-18, CVE-2023-3519
- [Microsoft Windows: Search Remote Code Execution (CVE-2023-36884)](https://pwn.watch/i/microsoft-windows-cve-2023-36884) ([json](https://pwn.watch/i/microsoft-windows-cve-2023-36884.json)): high, closed, patched, started 2023-07-17, CVE-2023-36884
- [SolarView Compact: Command Injection (CVE-2022-29303)](https://pwn.watch/i/solarview-compact-cve-2022-29303) ([json](https://pwn.watch/i/solarview-compact-cve-2022-29303.json)): critical, closed, patched, started 2023-07-13, CVE-2022-29303
- [Apple Multiple Products: WebKit Code Execution (CVE-2023-37450)](https://pwn.watch/i/apple-multiple-products-cve-2023-37450) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-37450.json)): high, closed, patched, started 2023-07-13, CVE-2023-37450
- [Netwrix Auditor: Insecure Object Deserialization (CVE-2022-31199)](https://pwn.watch/i/netwrix-auditor-cve-2022-31199) ([json](https://pwn.watch/i/netwrix-auditor-cve-2022-31199.json)): critical, closed, patched, started 2023-07-11, CVE-2022-31199
- [Microsoft Outlook: Security Feature Bypass (CVE-2023-35311)](https://pwn.watch/i/microsoft-outlook-cve-2023-35311) ([json](https://pwn.watch/i/microsoft-outlook-cve-2023-35311.json)): high, closed, patched, started 2023-07-11, CVE-2023-35311
- [Microsoft Windows: 3 exploited vulnerabilities (CVE-2023-32046, CVE-2023-32049, CVE-2023-36874)](https://pwn.watch/i/microsoft-windows-cve-2023-32046-32049-36874) ([json](https://pwn.watch/i/microsoft-windows-cve-2023-32046-32049-36874.json)): high, closed, patched, started 2023-07-11, CVE-2023-32046, CVE-2023-32049, CVE-2023-36874
- [Zyxel Multiple Network-Attached Storage (NAS) Devices: Command Injection (CVE-2023-27992)](https://pwn.watch/i/zyxel-multiple-network-attached-storage-nas-cve-2023-27992) ([json](https://pwn.watch/i/zyxel-multiple-network-attached-storage-nas-cve-2023-27992.json)): critical, closed, patched, started 2023-06-23, CVE-2023-27992
- [Apple Multiple Products: WebKit Type Confusion (CVE-2023-32439)](https://pwn.watch/i/apple-multiple-products-cve-2023-32439) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-32439.json)): high, closed, patched, started 2023-06-23, CVE-2023-32439
- [VMware Tools: Authentication Bypass (CVE-2023-20867)](https://pwn.watch/i/vmware-tools-cve-2023-20867) ([json](https://pwn.watch/i/vmware-tools-cve-2023-20867.json)): low, closed, patched, started 2023-06-23, CVE-2023-20867
- [VMware Aria Operations for Networks: Command Injection (CVE-2023-20887)](https://pwn.watch/i/vmware-aria-operations-for-networks-cve-2023-20887) ([json](https://pwn.watch/i/vmware-aria-operations-for-networks-cve-2023-20887.json)): critical, closed, patched, started 2023-06-22, CVE-2023-20887
- [FortiOS SSL-VPN pre-auth heap overflow (XORtigate, CVE-2023-27997)](https://pwn.watch/i/fortinet-fortios-ssl-vpn-xortigate-cve-2023-27997) ([json](https://pwn.watch/i/fortinet-fortios-ssl-vpn-xortigate-cve-2023-27997.json)): critical, closed, patched, started 2023-06-12, CVE-2023-27997
- [Google Chromium V8: Type Confusion (CVE-2023-3079)](https://pwn.watch/i/google-chromium-v8-cve-2023-3079) ([json](https://pwn.watch/i/google-chromium-v8-cve-2023-3079.json)): high, closed, patched, started 2023-06-07, CVE-2023-3079
- [Zyxel Multiple Firewalls: 2 exploited vulnerabilities (CVE-2023-33009, CVE-2023-33010)](https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-33009-33010) ([json](https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-33009-33010.json)): critical, closed, patched, started 2023-06-05, CVE-2023-33009, CVE-2023-33010
- [Operation Triangulation: zero-click iMessage spyware on Kaspersky's iPhones](https://pwn.watch/i/operation-triangulation-ios-zero-click-2023) ([json](https://pwn.watch/i/operation-triangulation-ios-zero-click-2023.json)): high, closed, patched, started 2023-06-01, CVE-2023-32434, CVE-2023-32435, CVE-2023-38606
- [Zyxel Multiple Firewalls: OS Command Injection (CVE-2023-28771)](https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-28771) ([json](https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-28771.json)): critical, closed, patched, started 2023-05-31, CVE-2023-28771
- [MOVEit Transfer zero-day: Cl0p mass data theft](https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023) ([json](https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023.json)): critical, closed, patched, started 2023-05-27, CVE-2023-34362, CVE-2023-35036, CVE-2023-35708
- [Apple Multiple Products: 3 exploited vulnerabilities (CVE-2023-28204, CVE-2023-32373, CVE-2023-32409)](https://pwn.watch/i/apple-multiple-products-cve-2023-28204-32373-32409) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-28204-32373-32409.json)): high, closed, patched, started 2023-05-22, CVE-2023-28204, CVE-2023-32373, CVE-2023-32409
- [Samsung Mobile Devices: Insertion of Sensitive Information Into Log File (CVE-2023-21492)](https://pwn.watch/i/samsung-mobile-devices-cve-2023-21492) ([json](https://pwn.watch/i/samsung-mobile-devices-cve-2023-21492.json)): medium, closed, patched, started 2023-05-19, CVE-2023-21492
- [Barracuda Email Security Gateway zero-day (CVE-2023-2868)](https://pwn.watch/i/barracuda-esg-zero-day-cve-2023-2868) ([json](https://pwn.watch/i/barracuda-esg-zero-day-cve-2023-2868.json)): critical, closed, patched, started 2023-05-18, CVE-2023-2868
- [Ruckus Wireless Multiple Products: CSRF and RCE (CVE-2023-25717)](https://pwn.watch/i/ruckus-wireless-multiple-products-cve-2023-25717) ([json](https://pwn.watch/i/ruckus-wireless-multiple-products-cve-2023-25717.json)): critical, closed, patched, started 2023-05-12, CVE-2023-25717
- [Microsoft Win32k: Privilege Escalation (CVE-2023-29336)](https://pwn.watch/i/microsoft-win32k-cve-2023-29336) ([json](https://pwn.watch/i/microsoft-win32k-cve-2023-29336.json)): high, closed, patched, started 2023-05-09, CVE-2023-29336
- [Oracle WebLogic Server: Unspecified (CVE-2023-21839)](https://pwn.watch/i/oracle-weblogic-server-cve-2023-21839) ([json](https://pwn.watch/i/oracle-weblogic-server-cve-2023-21839.json)): high, closed, patched, started 2023-05-01, CVE-2023-21839
- [TP-Link Archer AX21: AX-21 Command Injection (CVE-2023-1389)](https://pwn.watch/i/tp-link-archer-ax21-cve-2023-1389) ([json](https://pwn.watch/i/tp-link-archer-ax21-cve-2023-1389.json)): high, closed, patched, started 2023-05-01, CVE-2023-1389
- [Google Chromium Skia: Chrome Skia Integer Overflow (CVE-2023-2136)](https://pwn.watch/i/google-chromium-skia-cve-2023-2136) ([json](https://pwn.watch/i/google-chromium-skia-cve-2023-2136.json)): critical, closed, patched, started 2023-04-21, CVE-2023-2136
- [PaperCut MF/NG auth bypass to SYSTEM RCE, used by Cl0p and LockBit (CVE-2023-27350)](https://pwn.watch/i/papercut-mf-ng-auth-bypass-cve-2023-27350) ([json](https://pwn.watch/i/papercut-mf-ng-auth-bypass-cve-2023-27350.json)): critical, closed, patched, started 2023-04-21, CVE-2023-27350
- [MinIO: Information Disclosure (CVE-2023-28432)](https://pwn.watch/i/minio-cve-2023-28432) ([json](https://pwn.watch/i/minio-cve-2023-28432.json)): high, closed, patched, started 2023-04-21, CVE-2023-28432
- [Google Chromium V8: Type Confusion (CVE-2023-2033)](https://pwn.watch/i/google-chromium-v8-cve-2023-2033) ([json](https://pwn.watch/i/google-chromium-v8-cve-2023-2033.json)): high, closed, patched, started 2023-04-17, CVE-2023-2033
- [Novi Survey: Insecure Deserialization (CVE-2023-29492)](https://pwn.watch/i/novi-survey-cve-2023-29492) ([json](https://pwn.watch/i/novi-survey-cve-2023-29492.json)): critical, closed, patched, started 2023-04-13, CVE-2023-29492
- [Android Framework: Privilege Escalation (CVE-2023-20963)](https://pwn.watch/i/android-framework-cve-2023-20963) ([json](https://pwn.watch/i/android-framework-cve-2023-20963.json)): high, closed, patched, started 2023-04-13, CVE-2023-20963
- [Microsoft Windows: Common Log File System (CLFS) Driver Privilege Escalation (CVE-2023-28252)](https://pwn.watch/i/microsoft-windows-cve-2023-28252) ([json](https://pwn.watch/i/microsoft-windows-cve-2023-28252.json)): high, closed, patched, started 2023-04-11, CVE-2023-28252
- [Apple iOS, iPadOS, and macOS: IOSurfaceAccelerator Out-of-Bounds Write (CVE-2023-28206)](https://pwn.watch/i/apple-ios-ipados-and-macos-cve-2023-28206) ([json](https://pwn.watch/i/apple-ios-ipados-and-macos-cve-2023-28206.json)): high, closed, patched, started 2023-04-10, CVE-2023-28206
- [Apple Multiple Products: WebKit Use-After-Free (CVE-2023-28205)](https://pwn.watch/i/apple-multiple-products-cve-2023-28205) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-28205.json)): high, closed, patched, started 2023-04-10, CVE-2023-28205
- [Arm Mali Graphics Processing Unit (GPU): Kernel Driver Information Disclosure (CVE-2023-26083)](https://pwn.watch/i/arm-mali-graphics-processing-unit-gpu-cve-2023-26083) ([json](https://pwn.watch/i/arm-mali-graphics-processing-unit-gpu-cve-2023-26083.json)): low, closed, patched, started 2023-04-07, CVE-2023-26083
- [Synacor Zimbra Collaboration Suite (ZCS): Cross-Site Scripting (XSS) (CVE-2022-27926)](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2022-27926) ([json](https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2022-27926.json)): medium, closed, patched, started 2023-04-03, CVE-2022-27926
- [Fortra Cobalt Strike: 2 exploited vulnerabilities (CVE-2022-39197, CVE-2022-42948)](https://pwn.watch/i/fortra-cobalt-strike-cve-2022-39197-42948) ([json](https://pwn.watch/i/fortra-cobalt-strike-cve-2022-39197-42948.json)): critical, closed, patched, started 2023-03-30, CVE-2022-39197, CVE-2022-42948
- [Arm Mali Graphics Processing Unit (GPU): 2 exploited vulnerabilities (CVE-2022-22706, CVE-2022-38181)](https://pwn.watch/i/arm-mali-graphics-processing-unit-gpu-cve-2022-22706-38181) ([json](https://pwn.watch/i/arm-mali-graphics-processing-unit-gpu-cve-2022-22706-38181.json)): high, closed, patched, started 2023-03-30, CVE-2022-22706, CVE-2022-38181
- [Google Chromium Network Service: Use-After-Free (CVE-2022-3038)](https://pwn.watch/i/google-chromium-network-service-cve-2022-3038) ([json](https://pwn.watch/i/google-chromium-network-service-cve-2022-3038.json)): high, closed, patched, started 2023-03-30, CVE-2022-3038
- [Linux Kernel: Use-After-Free (CVE-2023-0266)](https://pwn.watch/i/linux-kernel-cve-2023-0266) ([json](https://pwn.watch/i/linux-kernel-cve-2023-0266.json)): high, closed, patched, started 2023-03-30, CVE-2023-0266
- [Adobe ColdFusion: Deserialization of Untrusted Data (CVE-2023-26360)](https://pwn.watch/i/adobe-coldfusion-cve-2023-26360) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2023-26360.json)): high, closed, patched, started 2023-03-15, CVE-2023-26360
- [Outlook zero-click NTLM hash leak used by Russian state hackers (CVE-2023-23397)](https://pwn.watch/i/microsoft-outlook-ntlm-leak-cve-2023-23397) ([json](https://pwn.watch/i/microsoft-outlook-ntlm-leak-cve-2023-23397.json)): critical, closed, patched, started 2023-03-14, CVE-2023-23397
- [Fortinet FortiOS: Path Traversal (CVE-2022-41328)](https://pwn.watch/i/fortinet-fortios-cve-2022-41328) ([json](https://pwn.watch/i/fortinet-fortios-cve-2022-41328.json)): high, closed, patched, started 2023-03-14, CVE-2022-41328
- [Microsoft Windows: SmartScreen Security Feature Bypass (CVE-2023-24880)](https://pwn.watch/i/microsoft-windows-cve-2023-24880) ([json](https://pwn.watch/i/microsoft-windows-cve-2023-24880.json)): medium, closed, patched, started 2023-03-14, CVE-2023-24880
- [Teclib GLPI: Remote Code Execution (CVE-2022-35914)](https://pwn.watch/i/teclib-glpi-cve-2022-35914) ([json](https://pwn.watch/i/teclib-glpi-cve-2022-35914.json)): critical, closed, patched, started 2023-03-07, CVE-2022-35914
- [Apache Spark: Command Injection (CVE-2022-33891)](https://pwn.watch/i/apache-spark-cve-2022-33891) ([json](https://pwn.watch/i/apache-spark-cve-2022-33891.json)): high, closed, patched, started 2023-03-07, CVE-2022-33891
- [Zoho ManageEngine: ADSelfService Plus Remote Code Execution (CVE-2022-28810)](https://pwn.watch/i/zoho-manageengine-cve-2022-28810) ([json](https://pwn.watch/i/zoho-manageengine-cve-2022-28810.json)): medium, closed, patched, started 2023-03-07, CVE-2022-28810
- [ZK Framework AuUploader: Unspecified (CVE-2022-36537)](https://pwn.watch/i/zk-framework-auuploader-cve-2022-36537) ([json](https://pwn.watch/i/zk-framework-auuploader-cve-2022-36537.json)): high, closed, patched, started 2023-02-27, CVE-2022-36537
- [IBM Aspera Faspex: Code Execution (CVE-2022-47986)](https://pwn.watch/i/ibm-aspera-faspex-cve-2022-47986) ([json](https://pwn.watch/i/ibm-aspera-faspex-cve-2022-47986.json)): critical, closed, patched, started 2023-02-21, CVE-2022-47986
- [Mitel MiVoice Connect: 2 exploited vulnerabilities (CVE-2022-40765, CVE-2022-41223)](https://pwn.watch/i/mitel-mivoice-connect-cve-2022-40765-41223) ([json](https://pwn.watch/i/mitel-mivoice-connect-cve-2022-40765-41223.json)): medium, closed, patched, started 2023-02-21, CVE-2022-40765, CVE-2022-41223
- [Cacti: Command Injection (CVE-2022-46169)](https://pwn.watch/i/cacti-cve-2022-46169) ([json](https://pwn.watch/i/cacti-cve-2022-46169.json)): critical, closed, patched, started 2023-02-16, CVE-2022-46169
- [Apple Multiple Products: WebKit Type Confusion (CVE-2023-23529)](https://pwn.watch/i/apple-multiple-products-cve-2023-23529) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-23529.json)): high, closed, patched, started 2023-02-14, CVE-2023-23529
- [Microsoft Office: Publisher Security Feature Bypass (CVE-2023-21715)](https://pwn.watch/i/microsoft-office-cve-2023-21715) ([json](https://pwn.watch/i/microsoft-office-cve-2023-21715.json)): high, closed, patched, started 2023-02-14, CVE-2023-21715
- [Microsoft Windows: 2 exploited vulnerabilities (CVE-2023-21823, CVE-2023-23376)](https://pwn.watch/i/microsoft-windows-cve-2023-21823-23376) ([json](https://pwn.watch/i/microsoft-windows-cve-2023-21823-23376.json)): high, closed, patched, started 2023-02-14, CVE-2023-21823, CVE-2023-23376
- [TerraMaster OS: Remote Command Execution (CVE-2022-24990)](https://pwn.watch/i/terramaster-os-cve-2022-24990) ([json](https://pwn.watch/i/terramaster-os-cve-2022-24990.json)): high, closed, patched, started 2023-02-10, CVE-2022-24990
- [Oracle E-Business Suite: Unspecified (CVE-2022-21587)](https://pwn.watch/i/oracle-e-business-suite-cve-2022-21587) ([json](https://pwn.watch/i/oracle-e-business-suite-cve-2022-21587.json)): critical, closed, patched, started 2023-02-02, CVE-2022-21587
- [SugarCRM Multiple Products: Remote Code Execution (CVE-2023-22952)](https://pwn.watch/i/sugarcrm-multiple-products-cve-2023-22952) ([json](https://pwn.watch/i/sugarcrm-multiple-products-cve-2023-22952.json)): high, closed, patched, started 2023-02-02, CVE-2023-22952
- [Fortra GoAnywhere MFT zero-day: Cl0p claims 130 victims](https://pwn.watch/i/goanywhere-mft-cl0p-cve-2023-0669) ([json](https://pwn.watch/i/goanywhere-mft-cl0p-cve-2023-0669.json)): high, closed, patched, started 2023-02-01, CVE-2023-0669
- [Zoho ManageEngine: Remote Code Execution (CVE-2022-47966)](https://pwn.watch/i/zoho-manageengine-cve-2022-47966) ([json](https://pwn.watch/i/zoho-manageengine-cve-2022-47966.json)): critical, closed, patched, started 2023-01-23, CVE-2022-47966
- [CWP Control Web Panel: OS Command Injection (CVE-2022-44877)](https://pwn.watch/i/cwp-control-web-panel-cve-2022-44877) ([json](https://pwn.watch/i/cwp-control-web-panel-cve-2022-44877.json)): critical, closed, patched, started 2023-01-17, CVE-2022-44877
- [Microsoft Exchange Server: Privilege Escalation (CVE-2022-41080)](https://pwn.watch/i/microsoft-exchange-server-cve-2022-41080) ([json](https://pwn.watch/i/microsoft-exchange-server-cve-2022-41080.json)): high, closed, patched, started 2023-01-10, CVE-2022-41080
- [Microsoft Windows: Advanced Local Procedure Call (ALPC) Privilege Escalation (CVE-2023-21674)](https://pwn.watch/i/microsoft-windows-cve-2023-21674) ([json](https://pwn.watch/i/microsoft-windows-cve-2023-21674.json)): high, closed, patched, started 2023-01-10, CVE-2023-21674