Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,709 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2019-17558 Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability Apache · Solr
- CVE-2020-17530 Apache Struts Remote Code Execution Vulnerability Apache · Struts
- CVE-2017-5638 Apache Struts Remote Code Execution Vulnerability Apache · Struts
- CVE-2018-11776 Apache Struts Remote Code Execution Vulnerability Apache · Struts
- CVE-2021-30858 Apple iOS, iPadOS, macOS Use-After-Free Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2019-6223 Apple iOS and macOS Group Facetime Vulnerability Apple · iOS and macOS
- CVE-2021-30860 Apple Multiple Products Integer Overflow Vulnerability Apple · Multiple Products
- CVE-2020-27930 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2021-30807 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2020-27950 Apple Multiple Products Memory Initialization Vulnerability Apple · Multiple Products
- CVE-2020-27932 Apple Multiple Products Type Confusion Vulnerability Apple · Multiple Products
- CVE-2020-9818 Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability Apple · iOS, iPadOS, and watchOS
- CVE-2020-9819 Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability Apple · iOS, iPadOS, and watchOS
- CVE-2021-30762 Apple iOS WebKit Use-After-Free Vulnerability Apple · iOS
- CVE-2021-1782 Apple Multiple Products Race Condition Vulnerability Apple · Multiple Products
- CVE-2021-1870 Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2021-1871 Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2021-1879 Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability Apple · iOS, iPadOS, and watchOS
- CVE-2021-30661 Apple Multiple Products WebKit Storage Use-After-Free Vulnerability Apple · Multiple Products
- CVE-2021-30666 Apple iOS WebKit Buffer Overflow Vulnerability Apple · iOS
- CVE-2021-30713 Apple macOS Unspecified Vulnerability Apple · macOS
- CVE-2021-30657 Apple macOS Unspecified Vulnerability Apple · macOS
- CVE-2021-30665 Apple Multiple Products WebKit Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2021-30663 Apple Multiple Products WebKit Integer Overflow Vulnerability Apple · Multiple Products
- CVE-2021-30761 Apple iOS WebKit Memory Corruption Vulnerability Apple · iOS
- CVE-2021-30869 Apple iOS, iPadOS, and macOS Type Confusion Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2020-9859 Apple Multiple Products Code Execution Vulnerability Apple · Multiple Products
- CVE-2021-20090 Arcadyan Buffalo Firmware Path Traversal Vulnerability Arcadyan · Buffalo Firmware
- CVE-2021-27562 Arm Trusted Firmware Out-of-Bounds Write Vulnerability Arm · Trusted Firmware
- CVE-2021-28664 Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability Arm · Mali Graphics Processing Unit (GPU)
- CVE-2021-28663 Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability Arm · Mali Graphics Processing Unit (GPU)
- CVE-2019-3398 Atlassian Confluence Server and Data Center Path Traversal Vulnerability Atlassian · Confluence Server and Data Center
- CVE-2021-26084 Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Atlassian · Confluence Server and Data Center
- CVE-2019-11580 Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability Atlassian · Crowd and Crowd Data Center
- CVE-2019-3396 Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Atlassian · Confluence Server and Data Server
- CVE-2021-42258 BQE BillQuick Web Suite SQL Injection Vulnerability BQE · BillQuick Web Suite
- CVE-2020-3452 Cisco ASA and FTD Read-Only Path Traversal Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2020-3580 Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2021-1497 Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability Cisco · HyperFlex HX
- CVE-2021-1498 Cisco HyperFlex HX Data Platform Command Injection Vulnerability Cisco · HyperFlex HX
- CVE-2018-0171 Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability Cisco · IOS and IOS XE
- CVE-2020-3118 Cisco IOS XR Software Discovery Protocol Format String Vulnerability Cisco · IOS XR
- CVE-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Cisco · IOS XR
- CVE-2020-3569 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Cisco · IOS XR
- CVE-2020-3161 Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability Cisco · Cisco IP Phones
- CVE-2019-1653 Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability Cisco · Small Business RV320 and RV325 Routers
- CVE-2018-0296 Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability Cisco · Adaptive Security Appliance (ASA)
- CVE-2019-13608 Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability Citrix · StoreFront Server
- CVE-2020-8193 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2020-8195 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2020-8196 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2019-19781 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2019-11634 Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability Citrix · Workspace Application and Receiver for Windows
- CVE-2020-29557 D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability D-Link · DIR-825 R1 Devices
- CVE-2020-25506 D-Link DNS-320 Device Command Injection Vulnerability D-Link · DNS-320 Device
- CVE-2018-15811 DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability DotNetNuke (DNN) · DotNetNuke (DNN)
- CVE-2018-18325 DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability DotNetNuke (DNN) · DotNetNuke (DNN)
- CVE-2017-9822 DotNetNuke (DNN) Remote Code Execution Vulnerability DotNetNuke (DNN) · DotNetNuke (DNN)
- CVE-2019-15752 Docker Desktop Community Edition Privilege Escalation Vulnerability Docker · Desktop Community Edition
- CVE-2020-8515 Multiple DrayTek Vigor Routers Web Management Page Vulnerability DrayTek · Multiple Vigor Routers
- CVE-2018-7600 Drupal Core Remote Code Execution Vulnerability Drupal · Drupal Core
- CVE-2021-22205 GitLab Community and Enterprise Editions Remote Code Execution Vulnerability GitLab · Community and Enterprise Editions
- CVE-2018-6789 Exim Buffer Overflow Vulnerability Exim · Exim
- CVE-2020-8657 EyesOfNetwork Use of Hard-Coded Credentials Vulnerability EyesOfNetwork · EyesOfNetwork
- CVE-2020-8655 EyesOfNetwork Improper Privilege Management Vulnerability EyesOfNetwork · EyesOfNetwork
- CVE-2020-5902 F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability F5 · BIG-IP
- CVE-2021-22986 F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability F5 · BIG-IP and BIG-IQ Centralized Management
- CVE-2021-35464 ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability ForgeRock · Access Management (AM)
- CVE-2019-5591 Fortinet FortiOS Default Configuration Vulnerability Fortinet · FortiOS
- CVE-2020-12812 Fortinet FortiOS SSL VPN Improper Authentication Vulnerability Fortinet · FortiOS
- CVE-2018-13379 Fortinet FortiOS SSL VPN Path Traversal Vulnerability Fortinet · FortiOS
- CVE-2020-16010 Google Chrome for Android UI Heap Buffer Overflow Vulnerability Google · Chrome for Android UI
- CVE-2020-15999 Google Chrome FreeType Heap Buffer Overflow Vulnerability Google · Chrome FreeType
- CVE-2021-21166 Google Chromium Race Condition Vulnerability Google · Chromium
- CVE-2020-16017 Google Chrome Use-After-Free Vulnerability Google · Chrome
- CVE-2021-37976 Google Chromium Information Disclosure Vulnerability Google · Chromium
- CVE-2020-16009 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2021-30632 Google Chromium V8 Out-of-Bounds Write Vulnerability Google · Chromium V8
- CVE-2020-16013 Google Chromium V8 Incorrect Implementation Vulnerabililty Google · Chromium V8
- CVE-2021-30633 Google Chromium Indexed DB API Use-After-Free Vulnerability Google · Chromium Indexed DB API
- CVE-2021-21148 Google Chromium V8 Heap Buffer Overflow Vulnerability Google · Chromium V8
- CVE-2021-37973 Google Chromium Portals Use-After-Free Vulnerability Google · Chromium Portals
- CVE-2021-30551 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2021-37975 Google Chromium V8 Use-After-Free Vulnerability Google · Chromium V8
- CVE-2020-6418 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2021-30554 Google Chromium WebGL Use-After-Free Vulnerability Google · Chromium WebGL
- CVE-2021-21206 Google Chromium Blink Use-After-Free Vulnerability Google · Chromium Blink
- CVE-2021-38000 Google Chromium Intents Improper Input Validation Vulnerability Google · Chromium Intents
- CVE-2021-38003 Google Chromium V8 Memory Corruption Vulnerability Google · Chromium V8
- CVE-2021-21224 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2021-21193 Google Chromium Blink Use-After-Free Vulnerability Google · Chromium Blink
- CVE-2021-21220 Google Chromium V8 Improper Input Validation Vulnerability Google · Chromium V8
- CVE-2021-30563 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2020-4430 IBM Data Risk Manager Directory Traversal Vulnerability IBM · Data Risk Manager
- CVE-2020-4427 IBM Data Risk Manager Security Bypass Vulnerability IBM · Data Risk Manager
- CVE-2020-4428 IBM Data Risk Manager Remote Code Execution Vulnerability IBM · Data Risk Manager
- CVE-2019-4716 IBM Planning Analytics Remote Code Execution Vulnerability IBM · Planning Analytics
- CVE-2016-3715 ImageMagick Arbitrary File Deletion Vulnerability ImageMagick · ImageMagick
- CVE-2016-3718 ImageMagick Server-Side Request Forgery (SSRF) Vulnerability ImageMagick · ImageMagick
- CVE-2020-15505 Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability Ivanti · MobileIron Multiple Products
- CVE-2021-30116 Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability Kaseya · Virtual System/Server Administrator (VSA)
- CVE-2020-7961 Liferay Portal Deserialization of Untrusted Data Vulnerability Liferay · Liferay Portal
- CVE-2021-23874 McAfee Total Protection (MTP) Improper Privilege Management Vulnerability McAfee · McAfee Total Protection (MTP)
- CVE-2021-22506 Micro Focus Access Manager Information Leakage Vulnerability Micro Focus · Micro Focus Access Manager
- CVE-2021-22502 Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability Micro Focus · Operation Bridge Reporter (OBR)
- CVE-2014-1812 Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-38647 Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability Microsoft · Open Management Infrastructure (OMI)
- CVE-2016-0167 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2020-0878 Microsoft Edge and Internet Explorer Memory Corruption Vulnerability Microsoft · Edge and Internet Explorer
- CVE-2021-31955 Microsoft Windows Kernel Information Disclosure Vulnerability Microsoft · Windows
- CVE-2021-1647 Microsoft Defender Remote Code Execution Vulnerability Microsoft · Defender
- CVE-2021-33739 Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2016-0185 Microsoft Windows Media Center Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2020-0683 Microsoft Windows Installer Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-17087 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-33742 Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2021-31199 Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability Microsoft · Enhanced Cryptographic Provider
- CVE-2021-33771 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-31956 Microsoft Windows NTFS Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-31201 Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability Microsoft · Enhanced Cryptographic Provider
Nothing on this page matches that filter.