Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,655 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2018-0156 Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability Cisco · IOS Software and Cisco IOS XE Software
- CVE-2018-0155 Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability Cisco · Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches
- CVE-2018-0154 Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability Cisco · IOS Software
- CVE-2018-0151 Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-8540 Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability Microsoft · Malware Protection Engine
- CVE-2017-6744 Cisco IOS Software SNMP Remote Code Execution Vulnerability Cisco · IOS software
- CVE-2017-6743 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6740 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6739 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6738 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6737 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6663 Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6627 Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-12319 Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability Cisco · IOS XE Software
- CVE-2017-12240 Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-12238 Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability Cisco · Catalyst 6800 Series Switches
- CVE-2017-12237 Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-12235 Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability Cisco · IOS software
- CVE-2017-12234 Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability Cisco · IOS software
- CVE-2017-12233 Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability Cisco · IOS software
- CVE-2017-12232 Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability Cisco · IOS software
- CVE-2017-12231 Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability Cisco · IOS software
- CVE-2017-11826 Microsoft Office Remote Code Execution Vulnerability Microsoft · Office
- CVE-2017-11292 Adobe Flash Player Type Confusion Vulnerability Adobe · Flash Player
- CVE-2017-0261 Microsoft Office Use-After-Free Vulnerability Microsoft · Office
- CVE-2017-0001 Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability Microsoft · Graphics Device Interface (GDI)
- CVE-2016-8562 Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability Siemens · SIMATIC CP
- CVE-2016-7855 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2016-7262 Microsoft Office Security Feature Bypass Vulnerability Microsoft · Excel
- CVE-2016-7193 Microsoft Office Memory Corruption Vulnerability Microsoft · Office
- CVE-2016-5195 Linux Kernel Race Condition Vulnerability Linux · Kernel
- CVE-2016-4117 Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe · Flash Player
- CVE-2016-1019 Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe · Flash Player
- CVE-2016-0099 Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2015-7645 Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe · Flash Player
- CVE-2015-5119 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2015-4902 Oracle Java SE Integrity Check Vulnerability Oracle · Java SE
- CVE-2015-3043 Adobe Flash Player Memory Corruption Vulnerability Adobe · Flash Player
- CVE-2015-2590 Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability Oracle · Java SE
- CVE-2015-2545 Microsoft Office Malformed EPS File Vulnerability Microsoft · Office
- CVE-2015-2424 Microsoft PowerPoint Memory Corruption Vulnerability Microsoft · PowerPoint
- CVE-2015-2387 Microsoft ATM Font Driver Privilege Escalation Vulnerability Microsoft · ATM Font Driver
- CVE-2015-1701 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2015-1642 Microsoft Office Memory Corruption Vulnerability Microsoft · Office
- CVE-2014-4114 Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2014-0496 Adobe Reader and Acrobat Use-After-Free Vulnerability Adobe · Reader and Acrobat
- CVE-2013-5065 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2013-3897 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2013-3346 Adobe Reader and Acrobat Memory Corruption Vulnerability Adobe · Reader and Acrobat
- CVE-2013-1675 Mozilla Firefox Information Disclosure Vulnerability Mozilla · Firefox
- CVE-2013-1347 Microsoft Internet Explorer Remote Code Execution Vulnerability Microsoft · Internet Explorer
- CVE-2013-0641 Adobe Reader Buffer Overflow Vulnerability Adobe · Reader
- CVE-2013-0640 Adobe Reader and Acrobat Memory Corruption Vulnerability Adobe · Reader and Acrobat
- CVE-2013-0632 Adobe ColdFusion Authentication Bypass Vulnerability Adobe · ColdFusion
- CVE-2012-4681 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle · Java SE
- CVE-2012-1856 Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability Microsoft · Office
- CVE-2012-1723 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle · Java SE
- CVE-2012-1535 Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe · Flash Player
- CVE-2012-0507 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle · Java SE
- CVE-2011-3544 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle · Java SE JDK and JRE
- CVE-2011-1889 Microsoft Forefront TMG Remote Code Execution Vulnerability Microsoft · Forefront Threat Management Gateway (TMG)
- CVE-2011-0611 Adobe Flash Player Remote Code Execution Vulnerability Adobe · Flash Player
- CVE-2010-3333 Microsoft Office Stack-based Buffer Overflow Vulnerability Microsoft · Office
- CVE-2010-0232 Microsoft Windows Kernel Exception Handler Vulnerability Microsoft · Windows
- CVE-2010-0188 Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability Adobe · Reader and Acrobat
- CVE-2009-3129 Microsoft Excel Featheader Record Memory Corruption Vulnerability Microsoft · Excel
- CVE-2009-1123 Microsoft Windows Improper Input Validation Vulnerability Microsoft · Windows
- CVE-2008-3431 Oracle VirtualBox Insufficient Input Validation Vulnerability Oracle · VirtualBox
- CVE-2008-2992 Adobe Reader and Acrobat Input Validation Vulnerability Adobe · Acrobat and Reader
- CVE-2004-0210 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2002-0367 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-24682 Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability Synacor · Zimbra Collaborate Suite (ZCS)
- CVE-2017-8570 Microsoft Office Remote Code Execution Vulnerability Microsoft · Office
- CVE-2017-0222 Microsoft Internet Explorer Remote Code Execution Vulnerability Microsoft · Internet Explorer
- CVE-2014-6352 Microsoft Windows Code Injection Vulnerability Microsoft · Windows
- CVE-2022-23131 Zabbix Frontend Authentication Bypass Vulnerability Zabbix · Frontend
- CVE-2022-23134 Zabbix Frontend Improper Access Control Vulnerability Zabbix · Frontend
- CVE-2022-24086 Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability Adobe · Commerce and Magento Open Source
- CVE-2022-0609 Google Chromium Animation Use-After-Free Vulnerability Google · Chromium Animation
- CVE-2019-0752 Microsoft Internet Explorer Type Confusion Vulnerability Microsoft · Internet Explorer
- CVE-2018-8174 Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability Microsoft · Windows
- CVE-2018-20250 WinRAR Absolute Path Traversal Vulnerability RARLAB · WinRAR
- CVE-2018-15982 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2017-9841 PHPUnit Command Injection Vulnerability PHPUnit · PHPUnit
- CVE-2014-1761 Microsoft Word Memory Corruption Vulnerability Microsoft · Word
- CVE-2013-3906 Microsoft Graphics Component Memory Corruption Vulnerability Microsoft · Graphics Component
- CVE-2022-22620 Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2021-36934 Microsoft Windows SAM Local Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-0796 Microsoft SMBv3 Remote Code Execution Vulnerability Microsoft · SMBv3
- CVE-2018-1000861 Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability Jenkins · Jenkins Stapler Web Framework
- CVE-2017-9791 Apache Struts 1 Improper Input Validation Vulnerability Apache · Struts 1
- CVE-2017-8464 Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2017-10271 Oracle Corporation WebLogic Server Remote Code Execution Vulnerability Oracle · WebLogic Server
- CVE-2017-0263 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2017-0262 Microsoft Office Remote Code Execution Vulnerability Microsoft · Office
- CVE-2017-0145 Microsoft SMBv1 Remote Code Execution Vulnerability Microsoft · SMBv1
- CVE-2017-0144 Microsoft SMBv1 Remote Code Execution Vulnerability Microsoft · SMBv1
- CVE-2016-3088 Apache ActiveMQ Improper Input Validation Vulnerability Apache · ActiveMQ
- CVE-2015-2051 D-Link DIR-645 Router Remote Code Execution Vulnerability D-Link · DIR-645 Router
- CVE-2015-1635 Microsoft HTTP.sys Remote Code Execution Vulnerability Microsoft · HTTP.sys
- CVE-2015-1130 Apple OS X Authentication Bypass Vulnerability Apple · OS X
- CVE-2014-4404 Apple OS X Heap-Based Buffer Overflow Vulnerability Apple · OS X
- CVE-2022-21882 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2022-22587 Apple Memory Corruption Vulnerability Apple · iOS and macOS
- CVE-2021-20038 SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability SonicWall · SMA 100 Appliances
- CVE-2020-5722 Grandstream Networks UCM6200 Series SQL Injection Vulnerability Grandstream · UCM6200
- CVE-2020-0787 Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2017-5689 Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability Intel · Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability
- CVE-2014-1776 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2014-6271 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability GNU · Bourne-Again Shell (Bash)
- CVE-2014-7169 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability GNU · Bourne-Again Shell (Bash)
- CVE-2006-1547 Apache Struts 1 ActionForm Denial-of-Service Vulnerability Apache · Struts 1
- CVE-2012-0391 Apache Struts 2 Improper Input Validation Vulnerability Apache · Struts 2
- CVE-2018-8453 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-35247 SolarWinds Serv-U Improper Input Validation Vulnerability SolarWinds · Serv-U
- CVE-2021-32648 October CMS Improper Authentication October CMS · October CMS
- CVE-2021-25296 Nagios XI OS Command Injection Nagios · Nagios XI
- CVE-2021-25297 Nagios XI OS Command Injection Nagios · Nagios XI
- CVE-2021-25298 Nagios XI OS Command Injection Nagios · Nagios XI
Nothing on this page matches that filter.