Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,709 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2009-3129 Microsoft Excel Featheader Record Memory Corruption Vulnerability Microsoft · Excel
- CVE-2009-1123 Microsoft Windows Improper Input Validation Vulnerability Microsoft · Windows
- CVE-2008-3431 Oracle VirtualBox Insufficient Input Validation Vulnerability Oracle · VirtualBox
- CVE-2008-2992 Adobe Reader and Acrobat Input Validation Vulnerability Adobe · Acrobat and Reader
- CVE-2004-0210 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2002-0367 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-24682 Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability Synacor · Zimbra Collaborate Suite (ZCS)
- CVE-2017-8570 Microsoft Office Remote Code Execution Vulnerability Microsoft · Office
- CVE-2017-0222 Microsoft Internet Explorer Remote Code Execution Vulnerability Microsoft · Internet Explorer
- CVE-2014-6352 Microsoft Windows Code Injection Vulnerability Microsoft · Windows
- CVE-2022-23131 Zabbix Frontend Authentication Bypass Vulnerability Zabbix · Frontend
- CVE-2022-23134 Zabbix Frontend Improper Access Control Vulnerability Zabbix · Frontend
- CVE-2022-24086 Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability Adobe · Commerce and Magento Open Source
- CVE-2022-0609 Google Chromium Animation Use-After-Free Vulnerability Google · Chromium Animation
- CVE-2019-0752 Microsoft Internet Explorer Type Confusion Vulnerability Microsoft · Internet Explorer
- CVE-2018-8174 Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability Microsoft · Windows
- CVE-2018-20250 WinRAR Absolute Path Traversal Vulnerability RARLAB · WinRAR
- CVE-2018-15982 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2017-9841 PHPUnit Command Injection Vulnerability PHPUnit · PHPUnit
- CVE-2014-1761 Microsoft Word Memory Corruption Vulnerability Microsoft · Word
- CVE-2013-3906 Microsoft Graphics Component Memory Corruption Vulnerability Microsoft · Graphics Component
- CVE-2022-22620 Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2021-36934 Microsoft Windows SAM Local Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-0796 Microsoft SMBv3 Remote Code Execution Vulnerability Microsoft · SMBv3
- CVE-2018-1000861 Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability Jenkins · Jenkins Stapler Web Framework
- CVE-2017-9791 Apache Struts 1 Improper Input Validation Vulnerability Apache · Struts 1
- CVE-2017-8464 Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2017-10271 Oracle Corporation WebLogic Server Remote Code Execution Vulnerability Oracle · WebLogic Server
- CVE-2017-0263 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2017-0262 Microsoft Office Remote Code Execution Vulnerability Microsoft · Office
- CVE-2017-0145 Microsoft SMBv1 Remote Code Execution Vulnerability Microsoft · SMBv1
- CVE-2017-0144 Microsoft SMBv1 Remote Code Execution Vulnerability Microsoft · SMBv1
- CVE-2016-3088 Apache ActiveMQ Improper Input Validation Vulnerability Apache · ActiveMQ
- CVE-2015-2051 D-Link DIR-645 Router Remote Code Execution Vulnerability D-Link · DIR-645 Router
- CVE-2015-1635 Microsoft HTTP.sys Remote Code Execution Vulnerability Microsoft · HTTP.sys
- CVE-2015-1130 Apple OS X Authentication Bypass Vulnerability Apple · OS X
- CVE-2014-4404 Apple OS X Heap-Based Buffer Overflow Vulnerability Apple · OS X
- CVE-2022-21882 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2022-22587 Apple Memory Corruption Vulnerability Apple · iOS and macOS
- CVE-2021-20038 SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability SonicWall · SMA 100 Appliances
- CVE-2020-5722 Grandstream Networks UCM6200 Series SQL Injection Vulnerability Grandstream · UCM6200
- CVE-2020-0787 Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2017-5689 Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability Intel · Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability
- CVE-2014-1776 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2014-6271 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability GNU · Bourne-Again Shell (Bash)
- CVE-2014-7169 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability GNU · Bourne-Again Shell (Bash)
- CVE-2006-1547 Apache Struts 1 ActionForm Denial-of-Service Vulnerability Apache · Struts 1
- CVE-2012-0391 Apache Struts 2 Improper Input Validation Vulnerability Apache · Struts 2
- CVE-2018-8453 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-35247 SolarWinds Serv-U Improper Input Validation Vulnerability SolarWinds · Serv-U
- CVE-2021-32648 October CMS Improper Authentication October CMS · October CMS
- CVE-2021-25296 Nagios XI OS Command Injection Nagios · Nagios XI
- CVE-2021-25297 Nagios XI OS Command Injection Nagios · Nagios XI
- CVE-2021-25298 Nagios XI OS Command Injection Nagios · Nagios XI
- CVE-2021-40870 Aviatrix Controller Unrestricted Upload of File Aviatrix · Aviatrix Controller
- CVE-2021-33766 Microsoft Exchange Server Information Disclosure Microsoft · Exchange Server
- CVE-2021-21975 VMware Server Side Request Forgery in vRealize Operations Manager API VMware · vRealize Operations Manager API
- CVE-2021-21315 System Information Library for Node.JS Command Injection Npm package · System Information Library for Node.JS
- CVE-2021-22991 F5 BIG-IP Traffic Management Microkernel Buffer Overflow F5 · BIG-IP Traffic Management Microkernel
- CVE-2020-14864 Oracle Business Intelligence Enterprise Edition Path Transversal Oracle · Intelligence Enterprise Edition
- CVE-2020-13671 Drupal core Un-restricted Upload of File Drupal · Drupal core
- CVE-2020-11978 Apache Airflow Command Injection Apache · Airflow
- CVE-2020-13927 Apache Airflow's Experimental API Authentication Bypass Apache · Airflow's Experimental API
- CVE-2021-22017 VMware vCenter Server Improper Access Control VMware · vCenter Server
- CVE-2021-36260 Hikvision Improper Input Validation Hikvision · Security cameras web server
- CVE-2020-6572 Google Chrome Media Use-After-Free Vulnerability Google · Chrome Media
- CVE-2019-1458 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2013-3900 Microsoft WinVerifyTrust function Remote Code Execution Microsoft · WinVerifyTrust function
- CVE-2019-2725 Oracle WebLogic Server, Injection Oracle · WebLogic Server
- CVE-2019-9670 Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2018-13382 Fortinet FortiOS and FortiProxy Improper Authorization Fortinet · FortiOS and FortiProxy
- CVE-2018-13383 Fortinet FortiOS and FortiProxy Out-of-bounds Write Fortinet · FortiOS and FortiProxy
- CVE-2019-1579 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability Palo Alto Networks · PAN-OS
- CVE-2019-10149 Exim Mail Transfer Agent (MTA) Improper Input Validation Exim · Mail Transfer Agent (MTA)
- CVE-2015-7450 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. IBM · WebSphere Application Server and Server Hypervisor Edition
- CVE-2017-1000486 Primetek Primefaces Remote Code Execution Vulnerability Primetek · Primefaces Application
- CVE-2019-7609 Kibana Arbitrary Code Execution Elastic · Kibana
- CVE-2021-27860 FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit FatPipe · WARP, IPVPN, and MPVPN software
- CVE-2021-43890 Microsoft Windows AppX Installer Spoofing Vulnerability Microsoft · Windows
- CVE-2021-4102 Google Chromium V8 Use-After-Free Vulnerability Google · Chromium V8
- CVE-2021-44515 Zoho Desktop Central Authentication Bypass Vulnerability Zoho · Desktop Central
- CVE-2019-13272 Linux Kernel Improper Privilege Management Vulnerability Linux · Kernel
- CVE-2021-35394 Realtek Jungle SDK Remote Code Execution Vulnerability Realtek · Jungle Software Development Kit (SDK)
- CVE-2019-7238 Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability Sonatype · Nexus Repository Manager
- CVE-2019-0193 Apache Solr DataImportHandler Code Injection Vulnerability Apache · Solr
- CVE-2021-44168 Fortinet FortiOS Arbitrary File Download Fortinet · FortiOS
- CVE-2017-17562 Embedthis GoAhead Remote Code Execution Vulnerability Embedthis · GoAhead
- CVE-2017-12149 Red Hat JBoss Application Server Remote Code Execution Vulnerability Red Hat · JBoss Application Server
- CVE-2010-1871 Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability Red Hat · JBoss Seam 2
- CVE-2020-17463 Fuel CMS SQL Injection Vulnerability Fuel CMS · Fuel CMS
- CVE-2020-8816 Pi-Hole AdminLTE Remote Code Execution Vulnerability Pi-hole · AdminLTE
- CVE-2019-10758 MongoDB mongo-express Remote Code Execution Vulnerability MongoDB · mongo-express
- CVE-2021-44228 Apache Log4j2 Remote Code Execution Vulnerability Apache · Log4j2
- CVE-2020-11261 Qualcomm Multiple Chipsets Improper Input Validation Vulnerability Qualcomm · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2018-14847 MikroTik Router OS Directory Traversal Vulnerability MikroTik · RouterOS
- CVE-2021-37415 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability Zoho · ManageEngine ServiceDesk Plus (SDP)
- CVE-2021-40438 Apache HTTP Server-Side Request Forgery (SSRF) Apache · Apache
- CVE-2021-44077 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus
- CVE-2021-22204 ExifTool Remote Code Execution Vulnerability Perl · Exiftool
- CVE-2021-40449 Microsoft Windows Win32k Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-42321 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange
- CVE-2021-42292 Microsoft Excel Security Feature Bypass Microsoft · Office
- CVE-2021-27104 Accellion FTA OS Command Injection Vulnerability Accellion · FTA
- CVE-2021-27102 Accellion FTA OS Command Injection Vulnerability Accellion · FTA
- CVE-2021-27101 Accellion FTA SQL Injection Vulnerability Accellion · FTA
- CVE-2021-27103 Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability Accellion · FTA
- CVE-2021-21017 Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability Adobe · Acrobat and Reader
- CVE-2021-28550 Adobe Acrobat and Reader Use-After-Free Vulnerability Adobe · Acrobat and Reader
- CVE-2018-4939 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2018-15961 Adobe ColdFusion Unrestricted File Upload Vulnerability Adobe · ColdFusion
- CVE-2018-4878 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2020-5735 Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability Amcrest · Cameras and Network Video Recorder (NVR)
- CVE-2019-2215 Android Kernel Use-After-Free Vulnerability Android · Android Kernel
- CVE-2020-0041 Android Kernel Out-of-Bounds Write Vulnerability Android · Android Kernel
- CVE-2020-0069 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability MediaTek · Multiple Chipsets
- CVE-2017-9805 Apache Struts Deserialization of Untrusted Data Vulnerability Apache · Struts
- CVE-2021-42013 Apache HTTP Server Path Traversal Vulnerability Apache · HTTP Server
- CVE-2021-41773 Apache HTTP Server Path Traversal Vulnerability Apache · HTTP Server
- CVE-2019-0211 Apache HTTP Server Privilege Escalation Vulnerability Apache · HTTP Server
- CVE-2016-4437 Apache Shiro Code Execution Vulnerability Apache · Shiro
Nothing on this page matches that filter.