Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,709 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2015-3113 Adobe Flash Player Heap-Based Buffer Overflow Vulnerability Adobe · Flash Player
- CVE-2015-2502 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2015-0313 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2015-0311 Adobe Flash Player Remote Code Execution Vulnerability Adobe · Flash Player
- CVE-2014-9163 Adobe Flash Player Stack-Based Buffer Overflow Vulnerability Adobe · Flash Player
- CVE-2022-23176 WatchGuard Firebox and XTM Privilege Escalation Vulnerability WatchGuard · Firebox and XTM
- CVE-2021-42287 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft · Active Directory
- CVE-2021-42278 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft · Active Directory
- CVE-2021-39793 Google Pixel Out-of-Bounds Write Vulnerability Google · Pixel
- CVE-2021-27852 Checkbox Survey Deserialization of Untrusted Data Vulnerability Checkbox · Checkbox Survey
- CVE-2021-22600 Linux Kernel Privilege Escalation Vulnerability Linux · Kernel
- CVE-2020-2509 QNAP Network-Attached Storage (NAS) Command Injection Vulnerability QNAP · QNAP Network-Attached Storage (NAS)
- CVE-2017-11317 Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability Telerik · User Interface (UI) for ASP.NET AJAX
- CVE-2021-3156 Sudo Heap-Based Buffer Overflow Vulnerability Sudo · Sudo
- CVE-2021-31166 Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability Microsoft · HTTP Protocol Stack
- CVE-2017-0148 Microsoft SMBv1 Server Remote Code Execution Vulnerability Microsoft · SMBv1 server
- CVE-2022-22965 Spring Framework JDK 9+ Remote Code Execution Vulnerability VMware · Spring Framework
- CVE-2022-22675 Apple macOS Out-of-Bounds Write Vulnerability Apple · macOS
- CVE-2022-22674 Apple macOS Out-of-Bounds Read Vulnerability Apple · macOS
- CVE-2021-45382 D-Link Multiple Routers Remote Code Execution Vulnerability D-Link · Multiple Routers
- CVE-2022-26871 Trend Micro Apex Central Arbitrary File Upload Vulnerability Trend Micro · Apex Central
- CVE-2022-1040 Sophos Firewall Authentication Bypass Vulnerability Sophos · Firewall
- CVE-2021-34484 Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-28799 QNAP NAS Improper Authorization Vulnerability QNAP · Network Attached Storage (NAS)
- CVE-2021-21551 Dell dbutil Driver Insufficient Access Control Vulnerability Dell · dbutil Driver
- CVE-2018-10562 Dasan GPON Routers Command Injection Vulnerability Dasan · Gigabit Passive Optical Network (GPON) Routers
- CVE-2018-10561 Dasan GPON Routers Authentication Bypass Vulnerability Dasan · Gigabit Passive Optical Network (GPON) Routers
- CVE-2022-1096 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2022-0543 Debian-specific Redis Server Lua Sandbox Escape Vulnerability Redis · Debian-specific Redis Servers
- CVE-2021-38646 Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability Microsoft · Office
- CVE-2021-34486 Microsoft Windows Event Tracing Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-26085 Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability Atlassian · Confluence Server
- CVE-2021-20028 SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability SonicWall · Secure Remote Access (SRA)
- CVE-2019-7483 SonicWall SMA100 Directory Traversal Vulnerability SonicWall · SMA100
- CVE-2018-8440 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-8406 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability Microsoft · DirectX Graphics Kernel (DXGKRNL)
- CVE-2018-8405 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability Microsoft · DirectX Graphics Kernel (DXGKRNL)
- CVE-2017-0213 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2017-0059 Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft · Internet Explorer
- CVE-2017-0037 Microsoft Edge and Internet Explorer Type Confusion Vulnerability Microsoft · Edge and Internet Explorer
- CVE-2016-7201 Microsoft Edge Memory Corruption Vulnerability Microsoft · Edge
- CVE-2016-7200 Microsoft Edge Memory Corruption Vulnerability Microsoft · Edge
- CVE-2016-0189 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2016-0151 Microsoft Windows CSRSS Security Feature Bypass Vulnerability Microsoft · Client-Server Run-time Subsystem (CSRSS)
- CVE-2016-0040 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2015-2426 Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2015-2419 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2015-1770 Microsoft Office Uninitialized Memory Use Vulnerability Microsoft · Office
- CVE-2013-3660 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2013-2729 Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability Adobe · Reader and Acrobat
- CVE-2013-2551 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2013-2465 Oracle Java SE Unspecified Vulnerability Oracle · Java SE
- CVE-2013-1690 Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2012-5076 Oracle Java SE Sandbox Bypass Vulnerability Oracle · Java SE
- CVE-2012-2539 Microsoft Word Remote Code Execution Vulnerability Microsoft · Word
- CVE-2012-2034 Adobe Flash Player Memory Corruption Vulnerability Adobe · Flash Player
- CVE-2012-0518 Oracle Fusion Middleware Unspecified Vulnerability Oracle · Fusion Middleware
- CVE-2011-2005 Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability Microsoft · Ancillary Function Driver (afd.sys)
- CVE-2010-4398 Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2022-26318 WatchGuard Firebox and XTM Appliances Arbitrary Code Execution WatchGuard · Firebox and XTM Appliances
- CVE-2022-26143 MiCollab, MiVoice Business Express Access Control Vulnerability Mitel · MiCollab, MiVoice Business Express
- CVE-2022-21999 Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-42237 Sitecore XP Remote Command Execution Vulnerability Sitecore · XP
- CVE-2021-22941 Citrix ShareFile Improper Access Control Vulnerability Citrix · ShareFile
- CVE-2020-9377 D-Link DIR-610 Devices Remote Command Execution D-Link · DIR-610 Devices
- CVE-2020-9054 Zyxel Multiple NAS Devices OS Command Injection Vulnerability Zyxel · Multiple Network-Attached Storage (NAS) Devices
- CVE-2020-7247 OpenSMTPD Remote Code Execution Vulnerability OpenBSD · OpenSMTPD
- CVE-2020-5410 VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability VMware Tanzu · Spring Cloud Configuration (Config) Server
- CVE-2020-25223 Sophos SG UTM Remote Code Execution Vulnerability Sophos · SG UTM
- CVE-2020-2506 QNAP Helpdesk Improper Access Control Vulnerability QNAP Systems · Helpdesk
- CVE-2020-2021 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks · PAN-OS
- CVE-2020-1956 Apache Kylin OS Command Injection Vulnerability Apache · Kylin
- CVE-2020-1631 Juniper Junos OS Path Traversal Vulnerability Juniper · Junos OS
- CVE-2019-6340 Drupal Core Remote Code Execution Vulnerability Drupal · Core
- CVE-2019-2616 Oracle BI Publisher Unauthorized Access Vulnerability Oracle · BI Publisher (Formerly XML Publisher)
- CVE-2019-16920 D-Link Multiple Routers Command Injection Vulnerability D-Link · Multiple Routers
- CVE-2019-15107 Webmin Command Injection Vulnerability Webmin · Webmin
- CVE-2019-12991 Citrix SD-WAN and NetScaler Command Injection Vulnerability Citrix · SD-WAN and NetScaler
- CVE-2019-12989 Citrix SD-WAN and NetScaler SQL Injection Vulnerability Citrix · SD-WAN and NetScaler
- CVE-2019-11043 PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability PHP · FastCGI Process Manager (FPM)
- CVE-2019-10068 Kentico Xperience Deserialization of Untrusted Data Vulnerability Kentico · Xperience
- CVE-2019-1003030 Jenkins Matrix Project Plugin Remote Code Execution Vulnerability Jenkins · Matrix Project Plugin
- CVE-2019-0903 Microsoft GDI Remote Code Execution Vulnerability Microsoft · Graphics Device Interface (GDI)
- CVE-2018-8414 Microsoft Windows Shell Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2018-8373 Microsoft Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer Scripting Engine
- CVE-2018-6961 VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability VMware · SD-WAN Edge
- CVE-2018-14839 LG N1A1 NAS Remote Command Execution Vulnerability LG · N1A1 NAS
- CVE-2018-1273 VMware Tanzu Spring Data Commons Property Binder Vulnerability VMware Tanzu · Spring Data Commons
- CVE-2018-11138 Quest KACE System Management Appliance Remote Command Execution Vulnerability Quest · KACE System Management Appliance
- CVE-2018-0147 Cisco Secure Access Control System Java Deserialization Vulnerability Cisco · Secure Access Control System (ACS)
- CVE-2018-0125 Cisco VPN Routers Remote Code Execution Vulnerability Cisco · VPN Routers
- CVE-2017-6334 NETGEAR DGN2200 Devices OS Command Injection Vulnerability NETGEAR · DGN2200 Devices
- CVE-2017-6316 Citrix Multiple Products Remote Code Execution Vulnerability Citrix · NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server
- CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability Cisco · IOS and IOS XE
- CVE-2017-12617 Apache Tomcat Remote Code Execution Vulnerability Apache · Tomcat
- CVE-2017-12615 Apache Tomcat on Windows Remote Code Execution Vulnerability Apache · Tomcat
- CVE-2017-0146 Microsoft Windows SMB Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2016-7892 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2016-4171 Adobe Flash Player Remote Code Execution Vulnerability Adobe · Flash Player
- CVE-2016-1555 NETGEAR Multiple WAP Devices Command Injection Vulnerability NETGEAR · Wireless Access Point (WAP) Devices
- CVE-2016-11021 D-Link DCS-930L Devices OS Command Injection Vulnerability D-Link · DCS-930L Devices
- CVE-2016-10174 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability NETGEAR · WNR2000v5 Router
- CVE-2016-0752 Ruby on Rails Directory Traversal Vulnerability Rails · Ruby on Rails
- CVE-2015-4068 Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability Arcserve · Unified Data Protection (UDP)
- CVE-2015-3035 TP-Link Multiple Archer Devices Directory Traversal Vulnerability TP-Link · Multiple Archer Devices
- CVE-2015-1427 Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability Elastic · Elasticsearch
- CVE-2015-1187 D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability D-Link and TRENDnet · Multiple Devices
- CVE-2015-0666 Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability Cisco · Prime Data Center Network Manager (DCNM)
- CVE-2014-6332 Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2014-6324 Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability Microsoft · Kerberos Key Distribution Center (KDC)
- CVE-2014-6287 Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability Rejetto · HTTP File Server (HFS)
- CVE-2014-3120 Elasticsearch Remote Code Execution Vulnerability Elastic · Elasticsearch
- CVE-2014-0130 Ruby on Rails Directory Traversal Vulnerability Rails · Ruby on Rails
- CVE-2013-5223 D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability D-Link · DSL-2760U
- CVE-2013-4810 HP Multiple Products Remote Code Execution Vulnerability Hewlett Packard (HP) · ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management
- CVE-2013-2251 Apache Struts Improper Input Validation Vulnerability Apache · Struts
- CVE-2012-1823 PHP-CGI Query String Parameter Vulnerability PHP · PHP
- CVE-2010-4345 Exim Privilege Escalation Vulnerability Exim · Exim
- CVE-2010-4344 Exim Heap-Based Buffer Overflow Vulnerability Exim · Exim
- CVE-2010-3035 Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability Cisco · IOS XR
Nothing on this page matches that filter.