Complete index
Zero-Day Vulnerability Archive
Search all tracked zero-day vulnerabilities and narrow the results by year, vendor, software, weakness type, or presence in the CISA and ENISA known exploited vulnerability catalogs.
| CVE | Vendor / Product | Vulnerability | CWE | Discovered | KEV |
|---|---|---|---|---|---|
| CVE-2024-23842 | Hitron SystemsDVR LGUVR-16H | Use of default credentials in DVR LGUVR-16H | CWE-1392 | — | |
| CVE-2024-22772 | Hitron SystemsDVR LGUVR-8H | Use of default credentials in DVR LGUVR-8H | CWE-1392 | — | |
| CVE-2024-22771 | Hitron SystemsDVR LGUVR-4H | Use of default credentials in DVR LGUVR-4H | CWE-1392 | — | |
| CVE-2024-22770 | Hitron SystemsDVR HVR-16781 | Use of default credentials in DVR HVR-16781 | CWE-1392 | — | |
| CVE-2024-22769 | Hitron SystemsDVR HVR-8781 | Use of default credentials in DVR HVR-8781 | CWE-1392 | — | |
| CVE-2024-22768 | Hitron SystemsDVR HVR-4781 | Use of default credentials in DVR HVR-4781 | CWE-1392 | — | |
| CVE-2023-7102 | Barracuda NetworksEmail Security Gateway (ESG) | Exposed dangerous method or function in Email Security Gateway (ESG) | CWE-749 | — | |
| #VU84436 | Ledger SASconnect-kit | Embedded malicious code (backdoor) in connect-kit | CWE-506 | — | |
| CVE-2023-5360 | WP RoyalRoyal Elementor Addons | Arbitrary file upload in Royal Elementor Addons | CWE-434 | — | |
| CVE-2024-25461 | CreatioTerrasoft CRM | Path traversal in Terrasoft CRM | CWE-22 | — | |
| #VU88961 | MicroWorld TechnologieseScan | Cleartext transmission of sensitive information in eScan | CWE-319 | — | |
| CVE-2023-3595 | Rockwell Automation1756-EN2T Series A | Out-of-bounds write in Rockwell Automation products | CWE-787 | — | |
| CVE-2023-3460 | Ultimate MemberUltimate Member - User Profile & Membership Plugin | Improper Authorization in Ultimate Member - User Profile & Membership Plugin | CWE-285 | — | |
| CVE-2023-38198 | Neilpang (neil)acme.sh | OS Command Injection in acme.sh | CWE-78 | — | |
| #VU76737 | GIGABYTE GlobalUEFI firmware | Embedded malicious code (backdoor) in GIGABYTE Global products | CWE-506 | — | |
| #VU76599 | MediaBrowserEmby Server | Missing Authorization in Emby Server | CWE-862 | — | |
| CVE-2023-24932 | MicrosoftMicrosoft Windows | Security features bypass in Microsoft Windows and Windows Server | CWE-254 | — | |
| CVE-2023-29059 | 3CXElectron Mac App, Electron Windows App | Embedded malicious code (backdoor) in Electron Mac App and Electron Windows App | CWE-506 | — | |
| CVE-2023-45797 | Dream SecurityMagicLine4NX | Buffer overflow in MagicLine4NX | CWE-119 | — | |
| CVE-2023-28725 | General BytesCrypto Application Server (CAS) | Improper access control in Crypto Application Server (CAS) | CWE-284 | — |
Showing 41–60 of 325 results