Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,655 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2019-0604 Microsoft SharePoint Remote Code Execution Vulnerability Microsoft · SharePoint
- CVE-2020-0646 Microsoft .NET Framework Remote Code Execution Vulnerability Microsoft · .NET Framework
- CVE-2019-0808 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-26857 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2020-1147 Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability Microsoft · .NET Framework, SharePoint, Visual Studio
- CVE-2019-1214 Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability Microsoft · Windows
- CVE-2016-3235 Microsoft Office OLE DLL Side Loading Vulnerability Microsoft · Office
- CVE-2019-0863 Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-36955 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-38648 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability Microsoft · Open Management Infrastructure (OMI)
- CVE-2020-6819 Mozilla Firefox And Thunderbird Use-After-Free Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2020-6820 Mozilla Firefox And Thunderbird Use-After-Free Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2019-17026 Mozilla Firefox And Thunderbird Type Confusion Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2019-15949 Nagios XI Remote Code Execution Vulnerability Nagios · Nagios XI
- CVE-2020-26919 Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability NETGEAR · JGS516PE Devices
- CVE-2019-19356 Netis WF2419 Devices Remote Code Execution Vulnerability Netis · WF2419 Devices
- CVE-2020-2555 Oracle Multiple Products Remote Code Execution Vulnerability Oracle · Multiple Products
- CVE-2012-3152 Oracle Fusion Middleware Unspecified Vulnerability Oracle · Fusion Middleware
- CVE-2020-14871 Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability Oracle · Solaris and Zettabyte File System (ZFS)
- CVE-2015-4852 Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability Oracle · WebLogic Server
- CVE-2020-14750 Oracle WebLogic Server Remote Code Execution Vulnerability Oracle · WebLogic Server
- CVE-2020-14882 Oracle WebLogic Server Remote Code Execution Vulnerability Oracle · WebLogic Server
- CVE-2020-14883 Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server
- CVE-2020-8644 PlaySMS Server-Side Template Injection Vulnerability PlaySMS · PlaySMS
- CVE-2019-18935 Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Progress · Telerik UI for ASP.NET AJAX
- CVE-2021-22893 Ivanti Pulse Connect Secure Use-After-Free Vulnerability Ivanti · Pulse Connect Secure
- CVE-2020-8243 Ivanti Pulse Connect Secure Code Execution Vulnerability Ivanti · Pulse Connect Secure
- CVE-2021-22900 Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability Ivanti · Pulse Connect Secure
- CVE-2021-22894 Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability Ivanti · Pulse Connect Secure
- CVE-2020-8260 Ivanti Pulse Connect Secure Code Execution Vulnerability Ivanti · Pulse Connect Secure
- CVE-2021-22899 Ivanti Pulse Connect Secure Command Injection Vulnerability Ivanti · Pulse Connect Secure
- CVE-2019-11510 Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability Ivanti · Pulse Connect Secure
- CVE-2019-11539 Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability Ivanti · Pulse Connect Secure and Pulse Policy Secure
- CVE-2021-1906 Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability Qualcomm · Multiple Chipsets
- CVE-2021-1905 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2020-10221 rConfig OS Command Injection Vulnerability rConfig · rConfig
- CVE-2021-35395 Realtek AP-Router SDK Buffer Overflow Vulnerability Realtek · AP-Router SDK
- CVE-2017-16651 Roundcube Webmail File Disclosure Vulnerability Roundcube · Roundcube Webmail
- CVE-2020-11652 SaltStack Salt Path Traversal Vulnerability SaltStack · Salt
- CVE-2020-11651 SaltStack Salt Authentication Bypass Vulnerability SaltStack · Salt
- CVE-2020-16846 SaltStack Salt Shell Injection Vulnerability SaltStack · Salt
- CVE-2018-2380 SAP Customer Relationship Management (CRM) Path Traversal Vulnerability SAP · Customer Relationship Management (CRM)
- CVE-2010-5326 SAP NetWeaver Remote Code Execution Vulnerability SAP · NetWeaver
- CVE-2016-9563 SAP NetWeaver XML External Entity (XXE) Vulnerability SAP · NetWeaver
- CVE-2020-6287 SAP NetWeaver Missing Authentication for Critical Function Vulnerability SAP · NetWeaver
- CVE-2020-6207 SAP Solution Manager Missing Authentication for Critical Function Vulnerability SAP · Solution Manager
- CVE-2016-3976 SAP NetWeaver Directory Traversal Vulnerability SAP · NetWeaver
- CVE-2019-16256 SIMalliance Toolbox Browser Command Injection Vulnerability SIMalliance · Toolbox Browser
- CVE-2020-10148 SolarWinds Orion Authentication Bypass Vulnerability SolarWinds · Orion
- CVE-2021-35211 SolarWinds Serv-U Remote Code Execution Vulnerability SolarWinds · Serv-U
- CVE-2016-3643 SolarWinds Virtualization Manager Privilege Escalation Vulnerability SolarWinds · Virtualization Manager
- CVE-2020-10199 Sonatype Nexus Repository Remote Code Execution Vulnerability Sonatype · Nexus Repository
- CVE-2021-20021 SonicWall Email Security Improper Privilege Management Vulnerability SonicWall · SonicWall Email Security
- CVE-2019-7481 SonicWall SMA100 SQL Injection Vulnerability SonicWall · SMA100
- CVE-2021-20022 SonicWall Email Security Unrestricted Upload of File Vulnerability SonicWall · SonicWall Email Security
- CVE-2021-20023 SonicWall Email Security Path Traversal Vulnerability SonicWall · SonicWall Email Security
- CVE-2021-20016 SonicWall SSLVPN SMA100 SQL Injection Vulnerability SonicWall · SSLVPN SMA100
- CVE-2020-12271 Sophos SFOS SQL Injection Vulnerability Sophos · SFOS
- CVE-2020-10181 Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability Sumavision · Enhanced Multimedia Router (EMR)
- CVE-2017-6327 Symantec Messaging Gateway Remote Code Execution Vulnerability Symantec · Symantec Messaging Gateway
- CVE-2019-18988 TeamViewer Desktop Bypass Remote Login Vulnerability TeamViewer · Desktop
- CVE-2017-9248 Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability Progress · ASP.NET AJAX and Sitefinity
- CVE-2021-31755 Tenda AC11 Router Stack Buffer Overflow Vulnerability Tenda · AC11 Router
- CVE-2020-10987 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability Tenda · AC1900 Router AC15 Model
- CVE-2018-14558 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability Tenda · AC7, AC9, and AC10 Routers
- CVE-2018-20062 ThinkPHP "noneCms" Remote Code Execution Vulnerability ThinkPHP · noneCms
- CVE-2019-9082 ThinkPHP Remote Code Execution Vulnerability ThinkPHP · ThinkPHP
- CVE-2019-18187 Trend Micro OfficeScan Directory Traversal Vulnerability Trend Micro · OfficeScan
- CVE-2020-8467 Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability Trend Micro · Apex One and OfficeScan
- CVE-2020-8468 Trend Micro Multiple Products Content Validation Escape Vulnerability Trend Micro · Apex One, OfficeScan and Worry-Free Business Security Agents
- CVE-2020-24557 Trend Micro Multiple Products Improper Access Control Vulnerability Trend Micro · Apex One, OfficeScan, and Worry-Free Business Security
- CVE-2020-8599 Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability Trend Micro · Apex One and OfficeScan
- CVE-2021-36742 Trend Micro Multiple Products Improper Input Validation Vulnerability Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security
- CVE-2021-36741 Trend Micro Multiple Products Improper Input Validation Vulnerability Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security
- CVE-2019-20085 TVT NVMS-1000 Directory Traversal Vulnerability TVT · NVMS-1000
- CVE-2020-5849 Unraid Authentication Bypass Vulnerability Unraid · Unraid
- CVE-2020-5847 Unraid Remote Code Execution Vulnerability Unraid · Unraid
- CVE-2019-16759 vBulletin PHP Module Remote Code Execution Vulnerability vBulletin · vBulletin
- CVE-2020-17496 vBulletin PHP Module Remote Code Execution Vulnerability vBulletin · vBulletin
- CVE-2019-5544 VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability VMware · VMware ESXi and Horizon DaaS
- CVE-2020-3992 VMware ESXi OpenSLP Use-After-Free Vulnerability VMware · ESXi
- CVE-2020-3950 VMware Multiple Products Privilege Escalation Vulnerability VMware · Multiple Products
- CVE-2021-22005 VMware vCenter Server File Upload Vulnerability VMware · vCenter Server
- CVE-2020-3952 VMware vCenter Server Information Disclosure Vulnerability VMware · vCenter Server
- CVE-2021-21972 VMware vCenter Server Remote Code Execution Vulnerability VMware · vCenter Server
- CVE-2021-21985 VMware vCenter Server Improper Input Validation Vulnerability VMware · vCenter Server
- CVE-2020-4006 Multiple VMware Products Command Injection Vulnerability VMware · Multiple Products
- CVE-2020-25213 WordPress File Manager Plugin Remote Code Execution Vulnerability WordPress · File Manager Plugin
- CVE-2020-11738 WordPress Snap Creek Duplicator Plugin File Download Vulnerability WordPress · Snap Creek Duplicator Plugin
- CVE-2019-9978 WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability WordPress · Social Warfare Plugin
- CVE-2021-27561 Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability Yealink · Device Management
- CVE-2021-40539 Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability Zoho · ManageEngine
- CVE-2020-10189 Zoho ManageEngine Desktop Central File Upload Vulnerability Zoho · ManageEngine
- CVE-2019-8394 Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability Zoho · ManageEngine
- CVE-2020-29583 Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability Zyxel · Multiple Products
Nothing on this page matches that filter.