Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,655 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2021-40870 Aviatrix Controller Unrestricted Upload of File Aviatrix · Aviatrix Controller
- CVE-2021-33766 Microsoft Exchange Server Information Disclosure Microsoft · Exchange Server
- CVE-2021-21975 VMware Server Side Request Forgery in vRealize Operations Manager API VMware · vRealize Operations Manager API
- CVE-2021-21315 System Information Library for Node.JS Command Injection Npm package · System Information Library for Node.JS
- CVE-2021-22991 F5 BIG-IP Traffic Management Microkernel Buffer Overflow F5 · BIG-IP Traffic Management Microkernel
- CVE-2020-14864 Oracle Business Intelligence Enterprise Edition Path Transversal Oracle · Intelligence Enterprise Edition
- CVE-2020-13671 Drupal core Un-restricted Upload of File Drupal · Drupal core
- CVE-2020-11978 Apache Airflow Command Injection Apache · Airflow
- CVE-2020-13927 Apache Airflow's Experimental API Authentication Bypass Apache · Airflow's Experimental API
- CVE-2021-22017 VMware vCenter Server Improper Access Control VMware · vCenter Server
- CVE-2021-36260 Hikvision Improper Input Validation Hikvision · Security cameras web server
- CVE-2020-6572 Google Chrome Media Use-After-Free Vulnerability Google · Chrome Media
- CVE-2019-1458 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2013-3900 Microsoft WinVerifyTrust function Remote Code Execution Microsoft · WinVerifyTrust function
- CVE-2019-2725 Oracle WebLogic Server, Injection Oracle · WebLogic Server
- CVE-2019-9670 Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2018-13382 Fortinet FortiOS and FortiProxy Improper Authorization Fortinet · FortiOS and FortiProxy
- CVE-2018-13383 Fortinet FortiOS and FortiProxy Out-of-bounds Write Fortinet · FortiOS and FortiProxy
- CVE-2019-1579 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability Palo Alto Networks · PAN-OS
- CVE-2019-10149 Exim Mail Transfer Agent (MTA) Improper Input Validation Exim · Mail Transfer Agent (MTA)
- CVE-2015-7450 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. IBM · WebSphere Application Server and Server Hypervisor Edition
- CVE-2017-1000486 Primetek Primefaces Remote Code Execution Vulnerability Primetek · Primefaces Application
- CVE-2019-7609 Kibana Arbitrary Code Execution Elastic · Kibana
- CVE-2021-27860 FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit FatPipe · WARP, IPVPN, and MPVPN software
- CVE-2021-43890 Microsoft Windows AppX Installer Spoofing Vulnerability Microsoft · Windows
- CVE-2021-4102 Google Chromium V8 Use-After-Free Vulnerability Google · Chromium V8
- CVE-2021-44515 Zoho Desktop Central Authentication Bypass Vulnerability Zoho · Desktop Central
- CVE-2019-13272 Linux Kernel Improper Privilege Management Vulnerability Linux · Kernel
- CVE-2021-35394 Realtek Jungle SDK Remote Code Execution Vulnerability Realtek · Jungle Software Development Kit (SDK)
- CVE-2019-7238 Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability Sonatype · Nexus Repository Manager
- CVE-2019-0193 Apache Solr DataImportHandler Code Injection Vulnerability Apache · Solr
- CVE-2021-44168 Fortinet FortiOS Arbitrary File Download Fortinet · FortiOS
- CVE-2017-17562 Embedthis GoAhead Remote Code Execution Vulnerability Embedthis · GoAhead
- CVE-2017-12149 Red Hat JBoss Application Server Remote Code Execution Vulnerability Red Hat · JBoss Application Server
- CVE-2010-1871 Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability Red Hat · JBoss Seam 2
- CVE-2020-17463 Fuel CMS SQL Injection Vulnerability Fuel CMS · Fuel CMS
- CVE-2020-8816 Pi-Hole AdminLTE Remote Code Execution Vulnerability Pi-hole · AdminLTE
- CVE-2019-10758 MongoDB mongo-express Remote Code Execution Vulnerability MongoDB · mongo-express
- CVE-2021-44228 Apache Log4j2 Remote Code Execution Vulnerability Apache · Log4j2
- CVE-2020-11261 Qualcomm Multiple Chipsets Improper Input Validation Vulnerability Qualcomm · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2018-14847 MikroTik Router OS Directory Traversal Vulnerability MikroTik · RouterOS
- CVE-2021-37415 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability Zoho · ManageEngine ServiceDesk Plus (SDP)
- CVE-2021-40438 Apache HTTP Server-Side Request Forgery (SSRF) Apache · Apache
- CVE-2021-44077 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus
- CVE-2021-22204 ExifTool Remote Code Execution Vulnerability Perl · Exiftool
- CVE-2021-40449 Microsoft Windows Win32k Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-42321 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange
- CVE-2021-42292 Microsoft Excel Security Feature Bypass Microsoft · Office
- CVE-2021-27104 Accellion FTA OS Command Injection Vulnerability Accellion · FTA
- CVE-2021-27102 Accellion FTA OS Command Injection Vulnerability Accellion · FTA
- CVE-2021-27101 Accellion FTA SQL Injection Vulnerability Accellion · FTA
- CVE-2021-27103 Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability Accellion · FTA
- CVE-2021-21017 Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability Adobe · Acrobat and Reader
- CVE-2021-28550 Adobe Acrobat and Reader Use-After-Free Vulnerability Adobe · Acrobat and Reader
- CVE-2018-4939 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2018-15961 Adobe ColdFusion Unrestricted File Upload Vulnerability Adobe · ColdFusion
- CVE-2018-4878 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2020-5735 Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability Amcrest · Cameras and Network Video Recorder (NVR)
- CVE-2019-2215 Android Kernel Use-After-Free Vulnerability Android · Android Kernel
- CVE-2020-0041 Android Kernel Out-of-Bounds Write Vulnerability Android · Android Kernel
- CVE-2020-0069 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability MediaTek · Multiple Chipsets
- CVE-2017-9805 Apache Struts Deserialization of Untrusted Data Vulnerability Apache · Struts
- CVE-2021-42013 Apache HTTP Server Path Traversal Vulnerability Apache · HTTP Server
- CVE-2021-41773 Apache HTTP Server Path Traversal Vulnerability Apache · HTTP Server
- CVE-2019-0211 Apache HTTP Server Privilege Escalation Vulnerability Apache · HTTP Server
- CVE-2016-4437 Apache Shiro Code Execution Vulnerability Apache · Shiro
- CVE-2019-17558 Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability Apache · Solr
- CVE-2020-17530 Apache Struts Remote Code Execution Vulnerability Apache · Struts
- CVE-2017-5638 Apache Struts Remote Code Execution Vulnerability Apache · Struts
- CVE-2018-11776 Apache Struts Remote Code Execution Vulnerability Apache · Struts
- CVE-2021-30858 Apple iOS, iPadOS, macOS Use-After-Free Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2019-6223 Apple iOS and macOS Group Facetime Vulnerability Apple · iOS and macOS
- CVE-2021-30860 Apple Multiple Products Integer Overflow Vulnerability Apple · Multiple Products
- CVE-2020-27930 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2021-30807 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2020-27950 Apple Multiple Products Memory Initialization Vulnerability Apple · Multiple Products
- CVE-2020-27932 Apple Multiple Products Type Confusion Vulnerability Apple · Multiple Products
- CVE-2020-9818 Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability Apple · iOS, iPadOS, and watchOS
- CVE-2020-9819 Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability Apple · iOS, iPadOS, and watchOS
- CVE-2021-30762 Apple iOS WebKit Use-After-Free Vulnerability Apple · iOS
- CVE-2021-1782 Apple Multiple Products Race Condition Vulnerability Apple · Multiple Products
- CVE-2021-1870 Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2021-1871 Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2021-1879 Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability Apple · iOS, iPadOS, and watchOS
- CVE-2021-30661 Apple Multiple Products WebKit Storage Use-After-Free Vulnerability Apple · Multiple Products
- CVE-2021-30666 Apple iOS WebKit Buffer Overflow Vulnerability Apple · iOS
- CVE-2021-30713 Apple macOS Unspecified Vulnerability Apple · macOS
- CVE-2021-30657 Apple macOS Unspecified Vulnerability Apple · macOS
- CVE-2021-30665 Apple Multiple Products WebKit Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2021-30663 Apple Multiple Products WebKit Integer Overflow Vulnerability Apple · Multiple Products
- CVE-2021-30761 Apple iOS WebKit Memory Corruption Vulnerability Apple · iOS
- CVE-2021-30869 Apple iOS, iPadOS, and macOS Type Confusion Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2020-9859 Apple Multiple Products Code Execution Vulnerability Apple · Multiple Products
- CVE-2021-20090 Arcadyan Buffalo Firmware Path Traversal Vulnerability Arcadyan · Buffalo Firmware
- CVE-2021-27562 Arm Trusted Firmware Out-of-Bounds Write Vulnerability Arm · Trusted Firmware
- CVE-2021-28664 Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability Arm · Mali Graphics Processing Unit (GPU)
- CVE-2021-28663 Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability Arm · Mali Graphics Processing Unit (GPU)
- CVE-2019-3398 Atlassian Confluence Server and Data Center Path Traversal Vulnerability Atlassian · Confluence Server and Data Center
- CVE-2021-26084 Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Atlassian · Confluence Server and Data Center
- CVE-2019-11580 Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability Atlassian · Crowd and Crowd Data Center
- CVE-2019-3396 Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Atlassian · Confluence Server and Data Server
- CVE-2021-42258 BQE BillQuick Web Suite SQL Injection Vulnerability BQE · BillQuick Web Suite
- CVE-2020-3452 Cisco ASA and FTD Read-Only Path Traversal Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2020-3580 Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2021-1497 Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability Cisco · HyperFlex HX
- CVE-2021-1498 Cisco HyperFlex HX Data Platform Command Injection Vulnerability Cisco · HyperFlex HX
- CVE-2018-0171 Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability Cisco · IOS and IOS XE
- CVE-2020-3118 Cisco IOS XR Software Discovery Protocol Format String Vulnerability Cisco · IOS XR
- CVE-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Cisco · IOS XR
- CVE-2020-3569 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Cisco · IOS XR
- CVE-2020-3161 Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability Cisco · Cisco IP Phones
- CVE-2019-1653 Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability Cisco · Small Business RV320 and RV325 Routers
- CVE-2018-0296 Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability Cisco · Adaptive Security Appliance (ASA)
- CVE-2019-13608 Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability Citrix · StoreFront Server
- CVE-2020-8193 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2020-8195 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2020-8196 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2019-19781 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2019-11634 Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability Citrix · Workspace Application and Receiver for Windows
- CVE-2020-29557 D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability D-Link · DIR-825 R1 Devices
Nothing on this page matches that filter.