Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,655 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2025-10585 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2025-5086 Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability Dassault Systèmes · DELMIA Apriso
- CVE-2025-38352 Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability Linux · Kernel
- CVE-2025-48543 Android Runtime Use-After-Free Vulnerability Android · Runtime
- CVE-2025-53690 Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability Sitecore · Multiple Products
- CVE-2023-50224 TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability TP-Link · TL-WR841N
- CVE-2025-9377 TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability TP-Link · Multiple Routers
- CVE-2020-24363 TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability TP-Link · TL-WA855RE
- CVE-2025-55177 Meta Platforms WhatsApp Incorrect Authorization Vulnerability Meta Platforms · WhatsApp
- CVE-2025-57819 Sangoma FreePBX Authentication Bypass Vulnerability Sangoma · FreePBX
- CVE-2025-7775 Citrix NetScaler Memory Overflow Vulnerability Citrix · NetScaler
- CVE-2025-48384 Git Link Following Vulnerability Git · Git
- CVE-2024-8068 Citrix Session Recording Improper Privilege Management Vulnerability Citrix · Session Recording
- CVE-2024-8069 Citrix Session Recording Deserialization of Untrusted Data Vulnerability Citrix · Session Recording
- CVE-2025-43300 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2025-54948 Trend Micro Apex One OS Command Injection Vulnerability Trend Micro · Apex One
- CVE-2025-8876 N-able N-Central Command Injection Vulnerability N-able · N-Central
- CVE-2025-8875 N-able N-Central Insecure Deserialization Vulnerability N-able · N-Central
- CVE-2025-8088 RARLAB WinRAR Path Traversal Vulnerability RARLAB · WinRAR
- CVE-2007-0671 Microsoft Office Excel Remote Code Execution Vulnerability Microsoft · Office
- CVE-2013-3893 Microsoft Internet Explorer Resource Management Errors Vulnerability Microsoft · Internet Explorer
- CVE-2020-25078 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability D-Link · DCS-2530L and DCS-2670L Devices
- CVE-2020-25079 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability D-Link · DCS-2530L and DCS-2670L Devices
- CVE-2022-40799 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability D-Link · DNR-322L
- CVE-2023-2533 PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability PaperCut · NG/MF
- CVE-2025-20337 Cisco Identity Services Engine Injection Vulnerability Cisco · Identity Services Engine
- CVE-2025-20281 Cisco Identity Services Engine Injection Vulnerability Cisco · Identity Services Engine
- CVE-2025-2775 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability SysAid · SysAid On-Prem
- CVE-2025-2776 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability SysAid · SysAid On-Prem
- CVE-2025-6558 Google Chromium ANGLE and GPU Improper Input Validation Vulnerability Google · Chromium
- CVE-2025-54309 CrushFTP Unprotected Alternate Channel Vulnerability CrushFTP · CrushFTP
- CVE-2025-49704 Microsoft SharePoint Code Injection Vulnerability Microsoft · SharePoint
- CVE-2025-49706 Microsoft SharePoint Improper Authentication Vulnerability Microsoft · SharePoint
- CVE-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2025-25257 Fortinet FortiWeb SQL Injection Vulnerability Fortinet · FortiWeb
- CVE-2025-47812 Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability Wing FTP Server · Wing FTP Server
- CVE-2025-5777 Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Citrix · NetScaler ADC and Gateway
- CVE-2019-9621 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2019-5418 Rails Ruby on Rails Path Traversal Vulnerability Rails · Ruby on Rails
- CVE-2016-10033 PHPMailer Command Injection Vulnerability PHP · PHPMailer
- CVE-2014-3931 Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability Looking Glass · Multi-Router Looking Glass (MRLG)
- CVE-2025-6554 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2025-48928 TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability TeleMessage · TM SGNL
- CVE-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability TeleMessage · TM SGNL
- CVE-2025-6543 Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability Citrix · NetScaler ADC and Gateway
- CVE-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Fortinet · FortiOS
- CVE-2024-0769 D-Link DIR-859 Router Path Traversal Vulnerability D-Link · DIR-859 Router
- CVE-2024-54085 AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability AMI · MegaRAC SPx
- CVE-2023-0386 Linux Kernel Improper Ownership Management Vulnerability Linux · Kernel
- CVE-2023-33538 TP-Link Multiple Routers Command Injection Vulnerability TP-Link · Multiple Routers
- CVE-2025-43200 Apple Multiple Products Unspecified Vulnerability Apple · Multiple Products
- CVE-2025-33053 Microsoft Windows External Control of File Name or Path Vulnerability Microsoft · Windows
- CVE-2025-24016 Wazuh Server Deserialization of Untrusted Data Vulnerability Wazuh · Wazuh Server
- CVE-2024-42009 RoundCube Webmail Cross-Site Scripting Vulnerability Roundcube · Webmail
- CVE-2025-32433 Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability Erlang · Erlang/OTP
- CVE-2025-5419 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google · Chromium V8
- CVE-2025-21479 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Qualcomm · Multiple Chipsets
- CVE-2025-21480 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Qualcomm · Multiple Chipsets
- CVE-2025-27038 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2021-32030 ASUS Routers Improper Authentication Vulnerability ASUS · Routers
- CVE-2025-3935 ConnectWise ScreenConnect Improper Authentication Vulnerability ConnectWise · ScreenConnect
- CVE-2025-35939 Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability Craft CMS · Craft CMS
- CVE-2024-56145 Craft CMS Code Injection Vulnerability Craft CMS · Craft CMS
- CVE-2023-39780 ASUS RT-AX55 Routers OS Command Injection Vulnerability ASUS · RT-AX55 Routers
- CVE-2025-4632 Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung · MagicINFO 9 Server
- CVE-2023-38950 ZKTeco BioTime Path Traversal Vulnerability ZKTeco · BioTime
- CVE-2024-27443 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2025-27920 Srimax Output Messenger Directory Traversal Vulnerability Srimax · Output Messenger
- CVE-2024-11182 MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability MDaemon · Email Server
- CVE-2025-4428 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2025-4427 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2025-42999 SAP NetWeaver Deserialization Vulnerability SAP · NetWeaver
- CVE-2024-12987 DrayTek Vigor Routers OS Command Injection Vulnerability DrayTek · Vigor Routers
- CVE-2025-32756 Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability Fortinet · Multiple Products
- CVE-2025-32709 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-30397 Microsoft Windows Scripting Engine Type Confusion Vulnerability Microsoft · Windows
- CVE-2025-32706 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-32701 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-30400 Microsoft Windows DWM Core Library Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-47729 TeleMessage TM SGNL Hidden Functionality Vulnerability TeleMessage · TM SGNL
- CVE-2024-11120 GeoVision Devices OS Command Injection Vulnerability GeoVision · Multiple Devices
- CVE-2024-6047 GeoVision Devices OS Command Injection Vulnerability GeoVision · Multiple Devices
- CVE-2025-27363 FreeType Out-of-Bounds Write Vulnerability FreeType · FreeType
- CVE-2025-3248 Langflow Missing Authentication Vulnerability Langflow · Langflow
- CVE-2025-34028 Commvault Command Center Path Traversal Vulnerability Commvault · Command Center
- CVE-2024-58136 Yiiframework Yii Improper Protection of Alternate Path Vulnerability Yiiframework · Yii
- CVE-2024-38475 Apache HTTP Server Improper Escaping of Output Vulnerability Apache · HTTP Server
- CVE-2023-44221 SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall · SMA100 Appliances
- CVE-2025-31324 SAP NetWeaver Unrestricted File Upload Vulnerability SAP · NetWeaver
- CVE-2025-1976 Broadcom Brocade Fabric OS Code Injection Vulnerability Broadcom · Brocade Fabric OS
- CVE-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability Qualitia · Active! Mail
- CVE-2025-3928 Commvault Web Server Unspecified Vulnerability Commvault · Web Server
- CVE-2025-24054 Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability Microsoft · Windows
- CVE-2025-31201 Apple Multiple Products Arbitrary Read and Write Vulnerability Apple · Multiple Products
- CVE-2025-31200 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2021-20035 SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall · SMA100 Appliances
- CVE-2024-53150 Linux Kernel Out-of-Bounds Read Vulnerability Linux · Kernel
- CVE-2024-53197 Linux Kernel Out-of-Bounds Access Vulnerability Linux · Kernel
- CVE-2025-29824 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-30406 Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability Gladinet · CentreStack
- CVE-2025-31161 CrushFTP Authentication Bypass Vulnerability CrushFTP · CrushFTP
- CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti · Connect Secure, Policy Secure, and ZTA Gateways
- CVE-2025-24813 Apache Tomcat Path Equivalence Vulnerability Apache · Tomcat
- CVE-2024-20439 Cisco Smart Licensing Utility Static Credential Vulnerability Cisco · Smart Licensing Utility
- CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability Google · Chromium Mojo
- CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore · CMS and Experience Platform (XP)
- CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore · CMS and Experience Platform (XP)
- CVE-2025-30154 reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability reviewdog · action-setup GitHub Action
- CVE-2017-12637 SAP NetWeaver Directory Traversal Vulnerability SAP · NetWeaver
- CVE-2024-48248 NAKIVO Backup and Replication Absolute Path Traversal Vulnerability NAKIVO · Backup and Replication
- CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection Vulnerability Edimax · IC-7100 IP Camera
- CVE-2025-30066 tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability tj-actions · changed-files GitHub Action
- CVE-2025-24472 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet · FortiOS and FortiProxy
- CVE-2025-21590 Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability Juniper · Junos OS
- CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability Apple · Multiple Products
- CVE-2025-24993 Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-24991 Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability Microsoft · Windows
- CVE-2025-24985 Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability Microsoft · Windows
- CVE-2025-24984 Microsoft Windows NTFS Information Disclosure Vulnerability Microsoft · Windows
- CVE-2025-24983 Microsoft Windows Win32k Use-After-Free Vulnerability Microsoft · Windows
Nothing on this page matches that filter.