Complete index
Zero-Day Vulnerability Archive
Search all tracked zero-day vulnerabilities and narrow the results by year, vendor, software, weakness type, or presence in the CISA and ENISA known exploited vulnerability catalogs.
| CVE | Vendor / Product | Vulnerability | CWE | Discovered | KEV |
|---|---|---|---|---|---|
| CVE-2024-26234 | MicrosoftMicrosoft Windows | Improper access control in Microsoft Windows and Windows Server | CWE-284 | — | |
| CVE-2024-29988 | MicrosoftMicrosoft Windows | Protection mechanism failure in Microsoft Windows and Windows Server | CWE-693 | CISA KEVENISA KEV | |
| CVE-2024-29748 | GooglePixel | Improper input validation in Pixel | CWE-20 | CISA KEVENISA KEV | |
| CVE-2024-29745 | GooglePixel | Information exposure in Pixel | CWE-200 | CISA KEVENISA KEV | |
| CVE-2025-27920 | Srimax Software SystemOutput Messenger | Path traversal in Output Messenger | CWE-22 | CISA KEVENISA KEV | |
| CVE-2024-3094 | tukaani.orgXZ Utils | Embedded malicious code (backdoor) in XZ Utils | CWE-506 | — | |
| CVE-2024-26169 | MicrosoftMicrosoft Windows | Permissions, Privileges, and Access Controls in Microsoft Windows and Windows Server | CWE-264 | CISA KEVENISA KEV | |
| CVE-2024-23296 | Apple Inc.Apple iOS | Buffer overflow in iPadOS and Apple iOS | CWE-119 | CISA KEVENISA KEV | |
| CVE-2024-23225 | Apple Inc.Apple iOS | Buffer overflow in iPadOS and Apple iOS | CWE-119 | CISA KEVENISA KEV | |
| CVE-2024-21338 | MicrosoftMicrosoft Windows | Buffer overflow in Microsoft Windows and Windows Server | CWE-119 | CISA KEVENISA KEV | |
| CVE-2024-1709 | ConnectWiseScreenConnect | Authentication bypass using an alternate path or channel in ScreenConnect | CWE-288 | CISA KEVENISA KEV | |
| CVE-2024-21410 | MicrosoftMicrosoft Exchange Server | Exposure of Resource to Wrong Sphere in Microsoft Exchange Server | CWE-668 | CISA KEVENISA KEV | |
| CVE-2023-50358 | QNAP Systems, Inc.QNAP QTS | OS Command Injection in QuTS hero and QNAP QTS | CWE-78 | — | |
| CVE-2024-21412 | MicrosoftMicrosoft Windows | Security features bypass in Microsoft Windows and Windows Server | CWE-254 | CISA KEVENISA KEV | |
| CVE-2024-21351 | MicrosoftMicrosoft Windows | Security features bypass in Microsoft Windows and Windows Server | CWE-254 | CISA KEVENISA KEV | |
| CVE-2024-21762 | Fortinet, IncFortiOS | Out-of-bounds write in FortiOS | CWE-787 | CISA KEVENISA KEV | |
| CVE-2024-21893 | Pulse Secure moved to IvantiIvanti Connect Secure (formerly Pulse Connect Secure) | Server-Side Request Forgery (SSRF) in Ivanti Policy Secure (formerly Pulse Policy Secure) and Ivanti Connect Secure (formerly Pulse Connect Secure) | CWE-918 | CISA KEVENISA KEV | |
| CVE-2024-23842 | Hitron SystemsDVR LGUVR-16H | Use of default credentials in DVR LGUVR-16H | CWE-1392 | — | |
| CVE-2024-22772 | Hitron SystemsDVR LGUVR-8H | Use of default credentials in DVR LGUVR-8H | CWE-1392 | — | |
| CVE-2024-22771 | Hitron SystemsDVR LGUVR-4H | Use of default credentials in DVR LGUVR-4H | CWE-1392 | — |
Showing 281–300 of 1,025 results