CVE-20XX-?
agent?

Drop everything.

Critical CVEs that are confirmed exploited or very likely to be. Newest first.

4 CVEs · updated 2026-11-13 15:02 UTC

Reset all
  1. CVE-2021-22893

    Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway. This vulnerability has been exploited in the wild.

    Drop everything exploited Auth & access Browser & mail Ivanti Connect Secure

    10.0 CRITICAL 48% exploit odds Fix listed
  2. CVE-2014-1510

    The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call.

    Drop everything Auth & access Browser & mail Mozilla Firefox

    9.8 CRITICAL 82% exploit odds Fix listed
  3. CVE-2014-1511

    Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors.

    Drop everything Auth & access Browser & mail Mozilla Firefox

    9.8 CRITICAL 84% exploit odds Fix listed
  4. CVE-2012-3993

    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.

    Drop everything Auth & access Browser & mail Mozilla Firefox

    9.3 HIGH 43% exploit odds Fix listed

A CVE is listed as major when it is critical (CVSS 9.0 or higher) and either confirmed exploited in the wild with a real chance of more, or very likely to be exploited (EPSS 40% or more).