Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,709 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2025-66644 Array Networks ArrayOS AG OS Command Injection Vulnerability Array Networks · ArrayOS AG
- CVE-2025-55182 Meta React Server Components Remote Code Execution Vulnerability Meta · React Server Components
- CVE-2021-26828 OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability OpenPLC · ScadaBR
- CVE-2025-48633 Android Framework Information Disclosure Vulnerability Android · Framework
- CVE-2025-48572 Android Framework Privilege Escalation Vulnerability Android · Framework
- CVE-2021-26829 OpenPLC ScadaBR Cross-site Scripting Vulnerability OpenPLC · ScadaBR
- CVE-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability Oracle · Fusion Middleware
- CVE-2025-13223 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2025-58034 Fortinet FortiWeb OS Command Injection Vulnerability Fortinet · FortiWeb
- CVE-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability Fortinet · FortiWeb
- CVE-2025-12480 Gladinet Triofox Improper Access Control Vulnerability Gladinet · Triofox
- CVE-2025-62215 Microsoft Windows Race Condition Vulnerability Microsoft · Windows
- CVE-2025-9242 WatchGuard Firebox Out-of-Bounds Write Vulnerability WatchGuard · Firebox
- CVE-2025-21042 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung · Mobile Devices
- CVE-2025-48703 CWP Control Web Panel OS Command Injection Vulnerability CWP · Control Web Panel
- CVE-2025-11371 Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability Gladinet · CentreStack and Triofox
- CVE-2025-41244 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Broadcom · VMware Aria Operations and VMware Tools
- CVE-2025-24893 XWiki Platform Eval Injection Vulnerability XWiki · Platform
- CVE-2025-6204 Dassault Systèmes DELMIA Apriso Code Injection Vulnerability Dassault Systèmes · DELMIA Apriso
- CVE-2025-6205 Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability Dassault Systèmes · DELMIA Apriso
- CVE-2025-54236 Adobe Commerce and Magento Improper Input Validation Vulnerability Adobe · Commerce and Magento
- CVE-2025-59287 Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability Microsoft · Windows
- CVE-2025-61932 Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability Motex · LANSCOPE Endpoint Manager
- CVE-2022-48503 Apple Multiple Products Unspecified Vulnerability Apple · Multiple Products
- CVE-2025-2746 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Kentico · Xperience CMS
- CVE-2025-2747 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Kentico · Xperience CMS
- CVE-2025-33073 Microsoft Windows SMB Client Improper Access Control Vulnerability Microsoft · Windows
- CVE-2025-61884 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Oracle · E-Business Suite
- CVE-2025-54253 Adobe Experience Manager Forms Code Execution Vulnerability Adobe · Experience Manager (AEM) Forms
- CVE-2025-47827 IGEL OS Use of a Key Past its Expiration Date Vulnerability IGEL · IGEL OS
- CVE-2025-24990 Microsoft Windows Untrusted Pointer Dereference Vulnerability Microsoft · Windows
- CVE-2025-59230 Microsoft Windows Improper Access Control Vulnerability Microsoft · Windows
- CVE-2016-7836 SKYSEA Client View Improper Authentication Vulnerability SKYSEA · Client View
- CVE-2021-43798 Grafana Path Traversal Vulnerability Grafana Labs · Grafana
- CVE-2025-27915 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2021-22555 Linux Kernel Heap Out-of-Bounds Write Vulnerability Linux · Kernel
- CVE-2010-3962 Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2021-43226 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2013-3918 Microsoft Windows Out-of-Bounds Write Vulnerability Microsoft · Windows
- CVE-2011-3402 Microsoft Windows Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2010-3765 Mozilla Multiple Products Remote Code Execution Vulnerability Mozilla · Multiple Products
- CVE-2025-61882 Oracle E-Business Suite Unspecified Vulnerability Oracle · E-Business Suite
- CVE-2014-6278 GNU Bash OS Command Injection Vulnerability GNU · GNU Bash
- CVE-2017-1000353 Jenkins Remote Code Execution Vulnerability Jenkins · Jenkins
- CVE-2015-7755 Juniper ScreenOS Improper Authentication Vulnerability Juniper · ScreenOS
- CVE-2025-21043 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung · Mobile Devices
- CVE-2025-4008 Smartbedded Meteobridge Command Injection Vulnerability Smartbedded · Meteobridge
- CVE-2025-32463 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability Sudo · Sudo
- CVE-2025-59689 Libraesva Email Security Gateway Command Injection Vulnerability Libraesva · Email Security Gateway
- CVE-2025-10035 Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Fortra · GoAnywhere MFT
- CVE-2025-20352 Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Cisco · IOS and IOS XE
- CVE-2021-21311 Adminer Server-Side Request Forgery Vulnerability Adminer · Adminer
- CVE-2025-20362 Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
- CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
- CVE-2025-10585 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2025-5086 Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability Dassault Systèmes · DELMIA Apriso
- CVE-2025-38352 Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability Linux · Kernel
- CVE-2025-48543 Android Runtime Use-After-Free Vulnerability Android · Runtime
- CVE-2025-53690 Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability Sitecore · Multiple Products
- CVE-2023-50224 TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability TP-Link · TL-WR841N
- CVE-2025-9377 TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability TP-Link · Multiple Routers
- CVE-2020-24363 TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability TP-Link · TL-WA855RE
- CVE-2025-55177 Meta Platforms WhatsApp Incorrect Authorization Vulnerability Meta Platforms · WhatsApp
- CVE-2025-57819 Sangoma FreePBX Authentication Bypass Vulnerability Sangoma · FreePBX
- CVE-2025-7775 Citrix NetScaler Memory Overflow Vulnerability Citrix · NetScaler
- CVE-2025-48384 Git Link Following Vulnerability Git · Git
- CVE-2024-8068 Citrix Session Recording Improper Privilege Management Vulnerability Citrix · Session Recording
- CVE-2024-8069 Citrix Session Recording Deserialization of Untrusted Data Vulnerability Citrix · Session Recording
- CVE-2025-43300 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2025-54948 Trend Micro Apex One OS Command Injection Vulnerability Trend Micro · Apex One
- CVE-2025-8876 N-able N-Central Command Injection Vulnerability N-able · N-Central
- CVE-2025-8875 N-able N-Central Insecure Deserialization Vulnerability N-able · N-Central
- CVE-2025-8088 RARLAB WinRAR Path Traversal Vulnerability RARLAB · WinRAR
- CVE-2007-0671 Microsoft Office Excel Remote Code Execution Vulnerability Microsoft · Office
- CVE-2013-3893 Microsoft Internet Explorer Resource Management Errors Vulnerability Microsoft · Internet Explorer
- CVE-2020-25078 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability D-Link · DCS-2530L and DCS-2670L Devices
- CVE-2020-25079 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability D-Link · DCS-2530L and DCS-2670L Devices
- CVE-2022-40799 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability D-Link · DNR-322L
- CVE-2023-2533 PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability PaperCut · NG/MF
- CVE-2025-20337 Cisco Identity Services Engine Injection Vulnerability Cisco · Identity Services Engine
- CVE-2025-20281 Cisco Identity Services Engine Injection Vulnerability Cisco · Identity Services Engine
- CVE-2025-2775 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability SysAid · SysAid On-Prem
- CVE-2025-2776 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability SysAid · SysAid On-Prem
- CVE-2025-6558 Google Chromium ANGLE and GPU Improper Input Validation Vulnerability Google · Chromium
- CVE-2025-54309 CrushFTP Unprotected Alternate Channel Vulnerability CrushFTP · CrushFTP
- CVE-2025-49704 Microsoft SharePoint Code Injection Vulnerability Microsoft · SharePoint
- CVE-2025-49706 Microsoft SharePoint Improper Authentication Vulnerability Microsoft · SharePoint
- CVE-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2025-25257 Fortinet FortiWeb SQL Injection Vulnerability Fortinet · FortiWeb
- CVE-2025-47812 Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability Wing FTP Server · Wing FTP Server
- CVE-2025-5777 Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Citrix · NetScaler ADC and Gateway
- CVE-2019-9621 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2019-5418 Rails Ruby on Rails Path Traversal Vulnerability Rails · Ruby on Rails
- CVE-2016-10033 PHPMailer Command Injection Vulnerability PHP · PHPMailer
- CVE-2014-3931 Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability Looking Glass · Multi-Router Looking Glass (MRLG)
- CVE-2025-6554 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2025-48928 TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability TeleMessage · TM SGNL
- CVE-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability TeleMessage · TM SGNL
- CVE-2025-6543 Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability Citrix · NetScaler ADC and Gateway
- CVE-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Fortinet · FortiOS
- CVE-2024-0769 D-Link DIR-859 Router Path Traversal Vulnerability D-Link · DIR-859 Router
- CVE-2024-54085 AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability AMI · MegaRAC SPx
- CVE-2023-0386 Linux Kernel Improper Ownership Management Vulnerability Linux · Kernel
- CVE-2023-33538 TP-Link Multiple Routers Command Injection Vulnerability TP-Link · Multiple Routers
- CVE-2025-43200 Apple Multiple Products Unspecified Vulnerability Apple · Multiple Products
- CVE-2025-33053 Microsoft Windows External Control of File Name or Path Vulnerability Microsoft · Windows
- CVE-2025-24016 Wazuh Server Deserialization of Untrusted Data Vulnerability Wazuh · Wazuh Server
- CVE-2024-42009 RoundCube Webmail Cross-Site Scripting Vulnerability Roundcube · Webmail
- CVE-2025-32433 Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability Erlang · Erlang/OTP
- CVE-2025-5419 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google · Chromium V8
- CVE-2025-21479 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Qualcomm · Multiple Chipsets
- CVE-2025-21480 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Qualcomm · Multiple Chipsets
- CVE-2025-27038 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2021-32030 ASUS Routers Improper Authentication Vulnerability ASUS · Routers
- CVE-2025-3935 ConnectWise ScreenConnect Improper Authentication Vulnerability ConnectWise · ScreenConnect
- CVE-2025-35939 Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability Craft CMS · Craft CMS
- CVE-2024-56145 Craft CMS Code Injection Vulnerability Craft CMS · Craft CMS
- CVE-2023-39780 ASUS RT-AX55 Routers OS Command Injection Vulnerability ASUS · RT-AX55 Routers
- CVE-2025-4632 Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung · MagicINFO 9 Server
- CVE-2023-38950 ZKTeco BioTime Path Traversal Vulnerability ZKTeco · BioTime
Nothing on this page matches that filter.