Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,655 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2012-2539 Microsoft Word Remote Code Execution Vulnerability Microsoft · Word
- CVE-2012-2034 Adobe Flash Player Memory Corruption Vulnerability Adobe · Flash Player
- CVE-2012-0518 Oracle Fusion Middleware Unspecified Vulnerability Oracle · Fusion Middleware
- CVE-2011-2005 Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability Microsoft · Ancillary Function Driver (afd.sys)
- CVE-2010-4398 Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2022-26318 WatchGuard Firebox and XTM Appliances Arbitrary Code Execution WatchGuard · Firebox and XTM Appliances
- CVE-2022-26143 MiCollab, MiVoice Business Express Access Control Vulnerability Mitel · MiCollab, MiVoice Business Express
- CVE-2022-21999 Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-42237 Sitecore XP Remote Command Execution Vulnerability Sitecore · XP
- CVE-2021-22941 Citrix ShareFile Improper Access Control Vulnerability Citrix · ShareFile
- CVE-2020-9377 D-Link DIR-610 Devices Remote Command Execution D-Link · DIR-610 Devices
- CVE-2020-9054 Zyxel Multiple NAS Devices OS Command Injection Vulnerability Zyxel · Multiple Network-Attached Storage (NAS) Devices
- CVE-2020-7247 OpenSMTPD Remote Code Execution Vulnerability OpenBSD · OpenSMTPD
- CVE-2020-5410 VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability VMware Tanzu · Spring Cloud Configuration (Config) Server
- CVE-2020-25223 Sophos SG UTM Remote Code Execution Vulnerability Sophos · SG UTM
- CVE-2020-2506 QNAP Helpdesk Improper Access Control Vulnerability QNAP Systems · Helpdesk
- CVE-2020-2021 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks · PAN-OS
- CVE-2020-1956 Apache Kylin OS Command Injection Vulnerability Apache · Kylin
- CVE-2020-1631 Juniper Junos OS Path Traversal Vulnerability Juniper · Junos OS
- CVE-2019-6340 Drupal Core Remote Code Execution Vulnerability Drupal · Core
- CVE-2019-2616 Oracle BI Publisher Unauthorized Access Vulnerability Oracle · BI Publisher (Formerly XML Publisher)
- CVE-2019-16920 D-Link Multiple Routers Command Injection Vulnerability D-Link · Multiple Routers
- CVE-2019-15107 Webmin Command Injection Vulnerability Webmin · Webmin
- CVE-2019-12991 Citrix SD-WAN and NetScaler Command Injection Vulnerability Citrix · SD-WAN and NetScaler
- CVE-2019-12989 Citrix SD-WAN and NetScaler SQL Injection Vulnerability Citrix · SD-WAN and NetScaler
- CVE-2019-11043 PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability PHP · FastCGI Process Manager (FPM)
- CVE-2019-10068 Kentico Xperience Deserialization of Untrusted Data Vulnerability Kentico · Xperience
- CVE-2019-1003030 Jenkins Matrix Project Plugin Remote Code Execution Vulnerability Jenkins · Matrix Project Plugin
- CVE-2019-0903 Microsoft GDI Remote Code Execution Vulnerability Microsoft · Graphics Device Interface (GDI)
- CVE-2018-8414 Microsoft Windows Shell Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2018-8373 Microsoft Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer Scripting Engine
- CVE-2018-6961 VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability VMware · SD-WAN Edge
- CVE-2018-14839 LG N1A1 NAS Remote Command Execution Vulnerability LG · N1A1 NAS
- CVE-2018-1273 VMware Tanzu Spring Data Commons Property Binder Vulnerability VMware Tanzu · Spring Data Commons
- CVE-2018-11138 Quest KACE System Management Appliance Remote Command Execution Vulnerability Quest · KACE System Management Appliance
- CVE-2018-0147 Cisco Secure Access Control System Java Deserialization Vulnerability Cisco · Secure Access Control System (ACS)
- CVE-2018-0125 Cisco VPN Routers Remote Code Execution Vulnerability Cisco · VPN Routers
- CVE-2017-6334 NETGEAR DGN2200 Devices OS Command Injection Vulnerability NETGEAR · DGN2200 Devices
- CVE-2017-6316 Citrix Multiple Products Remote Code Execution Vulnerability Citrix · NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server
- CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability Cisco · IOS and IOS XE
- CVE-2017-12617 Apache Tomcat Remote Code Execution Vulnerability Apache · Tomcat
- CVE-2017-12615 Apache Tomcat on Windows Remote Code Execution Vulnerability Apache · Tomcat
- CVE-2017-0146 Microsoft Windows SMB Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2016-7892 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2016-4171 Adobe Flash Player Remote Code Execution Vulnerability Adobe · Flash Player
- CVE-2016-1555 NETGEAR Multiple WAP Devices Command Injection Vulnerability NETGEAR · Wireless Access Point (WAP) Devices
- CVE-2016-11021 D-Link DCS-930L Devices OS Command Injection Vulnerability D-Link · DCS-930L Devices
- CVE-2016-10174 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability NETGEAR · WNR2000v5 Router
- CVE-2016-0752 Ruby on Rails Directory Traversal Vulnerability Rails · Ruby on Rails
- CVE-2015-4068 Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability Arcserve · Unified Data Protection (UDP)
- CVE-2015-3035 TP-Link Multiple Archer Devices Directory Traversal Vulnerability TP-Link · Multiple Archer Devices
- CVE-2015-1427 Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability Elastic · Elasticsearch
- CVE-2015-1187 D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability D-Link and TRENDnet · Multiple Devices
- CVE-2015-0666 Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability Cisco · Prime Data Center Network Manager (DCNM)
- CVE-2014-6332 Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2014-6324 Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability Microsoft · Kerberos Key Distribution Center (KDC)
- CVE-2014-6287 Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability Rejetto · HTTP File Server (HFS)
- CVE-2014-3120 Elasticsearch Remote Code Execution Vulnerability Elastic · Elasticsearch
- CVE-2014-0130 Ruby on Rails Directory Traversal Vulnerability Rails · Ruby on Rails
- CVE-2013-5223 D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability D-Link · DSL-2760U
- CVE-2013-4810 HP Multiple Products Remote Code Execution Vulnerability Hewlett Packard (HP) · ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management
- CVE-2013-2251 Apache Struts Improper Input Validation Vulnerability Apache · Struts
- CVE-2012-1823 PHP-CGI Query String Parameter Vulnerability PHP · PHP
- CVE-2010-4345 Exim Privilege Escalation Vulnerability Exim · Exim
- CVE-2010-4344 Exim Heap-Based Buffer Overflow Vulnerability Exim · Exim
- CVE-2010-3035 Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability Cisco · IOS XR
- CVE-2010-2861 Adobe ColdFusion Directory Traversal Vulnerability Adobe · ColdFusion
- CVE-2009-2055 Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability Cisco · IOS XR
- CVE-2009-1151 phpMyAdmin Remote Code Execution Vulnerability phpMyAdmin · phpMyAdmin
- CVE-2009-0927 Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability Adobe · Reader and Acrobat
- CVE-2005-2773 HP OpenView Network Node Manager Remote Code Execution Vulnerability Hewlett Packard (HP) · OpenView Network Node Manager
- CVE-2020-5135 SonicWall SonicOS Buffer Overflow Vulnerability SonicWall · SonicOS
- CVE-2019-1405 Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1322 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1315 Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1253 Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1132 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2019-1129 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1069 Microsoft Task Scheduler Privilege Escalation Vulnerability Microsoft · Task Scheduler
- CVE-2019-1064 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-0841 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-0543 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-8120 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2017-0101 Microsoft Windows Transaction Manager Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2016-3309 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2015-2546 Microsoft Win32k Memory Corruption Vulnerability Microsoft · Win32k
- CVE-2022-26486 Mozilla Firefox Use-After-Free Vulnerability Mozilla · Firefox
- CVE-2022-26485 Mozilla Firefox Use-After-Free Vulnerability Mozilla · Firefox
- CVE-2021-21973 VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability VMware · vCenter Server and Cloud Foundation
- CVE-2020-8218 Pulse Connect Secure Code Injection Vulnerability Pulse Secure · Pulse Connect Secure
- CVE-2019-11581 Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability Atlassian · Jira Server and Data Center
- CVE-2017-6077 NETGEAR DGN2200 Remote Code Execution Vulnerability NETGEAR · Wireless Router DGN2200
- CVE-2016-6277 NETGEAR Multiple Routers Remote Code Execution Vulnerability NETGEAR · Multiple Routers
- CVE-2013-0631 Adobe ColdFusion Information Disclosure Vulnerability Adobe · ColdFusion
- CVE-2013-0629 Adobe ColdFusion Directory Traversal Vulnerability Adobe · ColdFusion
- CVE-2013-0625 Adobe ColdFusion Authentication Bypass Vulnerability Adobe · ColdFusion
- CVE-2009-3960 Adobe BlazeDS Information Disclosure Vulnerability Adobe · BlazeDS
- CVE-2022-20708 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
- CVE-2022-20703 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
- CVE-2022-20701 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
- CVE-2022-20700 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
- CVE-2022-20699 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
- CVE-2021-41379 Microsoft Windows Installer Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-1938 Apache Tomcat Improper Privilege Management Vulnerability Apache · Tomcat
- CVE-2020-11899 Treck TCP/IP stack Out-of-Bounds Read Vulnerability Treck TCP/IP stack · IPv6
- CVE-2019-16928 Exim Out-of-bounds Write Vulnerability Exim · Exim Internet Mailer
- CVE-2019-1652 Cisco Small Business Routers Improper Input Validation Vulnerability Cisco · Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers
- CVE-2019-1297 Microsoft Excel Remote Code Execution Vulnerability Microsoft · Excel
- CVE-2018-8581 Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft · Exchange Server
- CVE-2018-8298 ChakraCore Scripting Engine Type Confusion Vulnerability ChakraCore · ChakraCore scripting engine
- CVE-2018-0180 Cisco IOS Software Denial-of-Service Vulnerability Cisco · IOS Software
- CVE-2018-0179 Cisco IOS Software Denial-of-Service Vulnerability Cisco · IOS Software
- CVE-2018-0175 Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Cisco · IOS, XR, and XE Software
- CVE-2018-0174 Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability Cisco · IOS XE Software
- CVE-2018-0173 Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Cisco · IOS and IOS XE Software
- CVE-2018-0172 Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Cisco · IOS and IOS XE Software
- CVE-2018-0167 Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Cisco · IOS, XR, and XE Software
- CVE-2018-0161 Cisco IOS Software Resource Management Errors Vulnerability Cisco · IOS Software
- CVE-2018-0159 Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability Cisco · IOS Software and Cisco IOS XE Software
- CVE-2018-0158 Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability Cisco · IOS Software and Cisco IOS XE Software
Nothing on this page matches that filter.