Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,739 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2021-35395 Realtek AP-Router SDK Buffer Overflow Vulnerability Realtek · AP-Router SDK
- CVE-2017-16651 Roundcube Webmail File Disclosure Vulnerability Roundcube · Roundcube Webmail
- CVE-2020-11652 SaltStack Salt Path Traversal Vulnerability SaltStack · Salt
- CVE-2020-11651 SaltStack Salt Authentication Bypass Vulnerability SaltStack · Salt
- CVE-2020-16846 SaltStack Salt Shell Injection Vulnerability SaltStack · Salt
- CVE-2018-2380 SAP Customer Relationship Management (CRM) Path Traversal Vulnerability SAP · Customer Relationship Management (CRM)
- CVE-2010-5326 SAP NetWeaver Remote Code Execution Vulnerability SAP · NetWeaver
- CVE-2016-9563 SAP NetWeaver XML External Entity (XXE) Vulnerability SAP · NetWeaver
- CVE-2020-6287 SAP NetWeaver Missing Authentication for Critical Function Vulnerability SAP · NetWeaver
- CVE-2020-6207 SAP Solution Manager Missing Authentication for Critical Function Vulnerability SAP · Solution Manager
- CVE-2016-3976 SAP NetWeaver Directory Traversal Vulnerability SAP · NetWeaver
- CVE-2019-16256 SIMalliance Toolbox Browser Command Injection Vulnerability SIMalliance · Toolbox Browser
- CVE-2020-10148 SolarWinds Orion Authentication Bypass Vulnerability SolarWinds · Orion
- CVE-2021-35211 SolarWinds Serv-U Remote Code Execution Vulnerability SolarWinds · Serv-U
- CVE-2016-3643 SolarWinds Virtualization Manager Privilege Escalation Vulnerability SolarWinds · Virtualization Manager
- CVE-2020-10199 Sonatype Nexus Repository Remote Code Execution Vulnerability Sonatype · Nexus Repository
- CVE-2021-20021 SonicWall Email Security Improper Privilege Management Vulnerability SonicWall · SonicWall Email Security
- CVE-2019-7481 SonicWall SMA100 SQL Injection Vulnerability SonicWall · SMA100
- CVE-2021-20022 SonicWall Email Security Unrestricted Upload of File Vulnerability SonicWall · SonicWall Email Security
- CVE-2021-20023 SonicWall Email Security Path Traversal Vulnerability SonicWall · SonicWall Email Security
- CVE-2021-20016 SonicWall SSLVPN SMA100 SQL Injection Vulnerability SonicWall · SSLVPN SMA100
- CVE-2020-12271 Sophos SFOS SQL Injection Vulnerability Sophos · SFOS
- CVE-2020-10181 Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability Sumavision · Enhanced Multimedia Router (EMR)
- CVE-2017-6327 Symantec Messaging Gateway Remote Code Execution Vulnerability Symantec · Symantec Messaging Gateway
- CVE-2019-18988 TeamViewer Desktop Bypass Remote Login Vulnerability TeamViewer · Desktop
- CVE-2017-9248 Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability Progress · ASP.NET AJAX and Sitefinity
- CVE-2021-31755 Tenda AC11 Router Stack Buffer Overflow Vulnerability Tenda · AC11 Router
- CVE-2020-10987 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability Tenda · AC1900 Router AC15 Model
- CVE-2018-14558 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability Tenda · AC7, AC9, and AC10 Routers
- CVE-2018-20062 ThinkPHP "noneCms" Remote Code Execution Vulnerability ThinkPHP · noneCms
- CVE-2019-9082 ThinkPHP Remote Code Execution Vulnerability ThinkPHP · ThinkPHP
- CVE-2019-18187 Trend Micro OfficeScan Directory Traversal Vulnerability Trend Micro · OfficeScan
- CVE-2020-8467 Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability Trend Micro · Apex One and OfficeScan
- CVE-2020-8468 Trend Micro Multiple Products Content Validation Escape Vulnerability Trend Micro · Apex One, OfficeScan and Worry-Free Business Security Agents
- CVE-2020-24557 Trend Micro Multiple Products Improper Access Control Vulnerability Trend Micro · Apex One, OfficeScan, and Worry-Free Business Security
- CVE-2020-8599 Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability Trend Micro · Apex One and OfficeScan
- CVE-2021-36742 Trend Micro Multiple Products Improper Input Validation Vulnerability Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security
- CVE-2021-36741 Trend Micro Multiple Products Improper Input Validation Vulnerability Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security
- CVE-2019-20085 TVT NVMS-1000 Directory Traversal Vulnerability TVT · NVMS-1000
- CVE-2020-5849 Unraid Authentication Bypass Vulnerability Unraid · Unraid
- CVE-2020-5847 Unraid Remote Code Execution Vulnerability Unraid · Unraid
- CVE-2019-16759 vBulletin PHP Module Remote Code Execution Vulnerability vBulletin · vBulletin
- CVE-2020-17496 vBulletin PHP Module Remote Code Execution Vulnerability vBulletin · vBulletin
- CVE-2019-5544 VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability VMware · VMware ESXi and Horizon DaaS
- CVE-2020-3992 VMware ESXi OpenSLP Use-After-Free Vulnerability VMware · ESXi
- CVE-2020-3950 VMware Multiple Products Privilege Escalation Vulnerability VMware · Multiple Products
- CVE-2021-22005 VMware vCenter Server File Upload Vulnerability VMware · vCenter Server
- CVE-2020-3952 VMware vCenter Server Information Disclosure Vulnerability VMware · vCenter Server
- CVE-2021-21972 VMware vCenter Server Remote Code Execution Vulnerability VMware · vCenter Server
- CVE-2021-21985 VMware vCenter Server Improper Input Validation Vulnerability VMware · vCenter Server
- CVE-2020-4006 Multiple VMware Products Command Injection Vulnerability VMware · Multiple Products
- CVE-2020-25213 WordPress File Manager Plugin Remote Code Execution Vulnerability WordPress · File Manager Plugin
- CVE-2020-11738 WordPress Snap Creek Duplicator Plugin File Download Vulnerability WordPress · Snap Creek Duplicator Plugin
- CVE-2019-9978 WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability WordPress · Social Warfare Plugin
- CVE-2021-27561 Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability Yealink · Device Management
- CVE-2021-40539 Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability Zoho · ManageEngine
- CVE-2020-10189 Zoho ManageEngine Desktop Central File Upload Vulnerability Zoho · ManageEngine
- CVE-2019-8394 Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability Zoho · ManageEngine
- CVE-2020-29583 Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability Zyxel · Multiple Products
Nothing on this page matches that filter.