Complete index
Zero-Day Vulnerability Archive
Search all tracked zero-day vulnerabilities and narrow the results by year, vendor, software, weakness type, or presence in the CISA and ENISA known exploited vulnerability catalogs.
| CVE | Vendor / Product | Vulnerability | CWE | Discovered | KEV |
|---|---|---|---|---|---|
| CVE-2024-21887 | Pulse Secure moved to IvantiIvanti Connect Secure (formerly Pulse Connect Secure) | OS Command Injection in Ivanti Policy Secure (formerly Pulse Policy Secure) and Ivanti Connect Secure (formerly Pulse Connect Secure) | CWE-78 | CISA KEVENISA KEV | |
| CVE-2023-46805 | Pulse Secure moved to IvantiIvanti Connect Secure (formerly Pulse Connect Secure) | Improper Authentication in Ivanti Policy Secure (formerly Pulse Policy Secure) and Ivanti Connect Secure (formerly Pulse Connect Secure) | CWE-287 | CISA KEVENISA KEV | |
| CVE-2023-7024 | GoogleGoogle Chrome | Heap-based buffer overflow in Google Chromium | CWE-122 | CISA KEVENISA KEV | |
| CVE-2023-47565 | QNAP Systems, Inc.QVR | OS Command Injection in QVR | CWE-78 | CISA KEVENISA KEV | |
| CVE-2023-49897 | FXCAE1021 | OS Command Injection in AE1021PE and AE1021 | CWE-78 | CISA KEVENISA KEV | |
| CVE-2023-42917 | Apple Inc.Apple iOS | Buffer overflow in WebKitGTK+ and WPE WebKit | CWE-119 | CISA KEVENISA KEV | |
| CVE-2023-42916 | Apple Inc.Apple iOS | Out-of-bounds read in WebKitGTK+ and WPE WebKit | CWE-125 | CISA KEVENISA KEV | |
| CVE-2023-6345 | GoogleGoogle Chrome | Integer overflow in Google Chromium | CWE-190 | CISA KEVENISA KEV | |
| CVE-2023-6448 | UnitronicsUnitronics Vision | Use of default credentials in Unitronics Vision | CWE-1392 | CISA KEVENISA KEV | |
| CVE-2023-36033 | MicrosoftMicrosoft Windows | Buffer overflow in Microsoft Windows and Windows Server | CWE-119 | CISA KEVENISA KEV | |
| CVE-2023-36025 | MicrosoftMicrosoft Windows | Security features bypass in Microsoft Windows and Windows Server | CWE-254 | CISA KEVENISA KEV | |
| CVE-2023-36036 | MicrosoftMicrosoft Windows | Buffer overflow in Microsoft Windows and Windows Server | CWE-119 | CISA KEVENISA KEV | |
| CVE-2023-47246 | SysAidSysAid | Path traversal in SysAid | CWE-22 | CISA KEVENISA KEV | |
| CVE-2023-34048 | BroadcomvCenter Server | Out-of-bounds write in vCenter Server | CWE-787 | CISA KEVENISA KEV | |
| CVE-2023-4966 | CitrixCitrix NetScaler Gateway | Buffer overflow in Citrix Netscaler ADC and Citrix NetScaler Gateway | CWE-119 | CISA KEVENISA KEV | |
| CVE-2023-20198 | Cisco Systems, IncCisco IOS XE | Improper Privilege Management in Cisco IOS XE | CWE-269 | CISA KEVENISA KEV | |
| CVE-2023-5631 | RoundcubeRoundcube Webmail | Cross-site scripting in Roundcube Webmail | CWE-79 | CISA KEVENISA KEV | |
| CVE-2023-36563 | MicrosoftMicrosoft Windows | Information disclosure in Microsoft Windows and Windows Server | CWE-200 | CISA KEVENISA KEV | |
| CVE-2023-41763 | MicrosoftSkype for Business Server | Information disclosure in Skype for Business Server | CWE-200 | CISA KEVENISA KEV | |
| CVE-2023-22515 | AtlassianConfluence Data Center | Improper Authentication in Confluence Data Center | CWE-287 | CISA KEVENISA KEV |
Showing 261–280 of 699 results