Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,655 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2025-26633 Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability Microsoft · Windows
- CVE-2024-13161 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2024-13160 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2024-13159 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2024-57968 Advantive VeraCore Unrestricted File Upload Vulnerability Advantive · VeraCore
- CVE-2025-25181 Advantive VeraCore SQL Injection Vulnerability Advantive · VeraCore
- CVE-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability VMware · ESXi, Workstation, and Fusion
- CVE-2025-22225 VMware ESXi Arbitrary Write Vulnerability VMware · ESXi
- CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability VMware · ESXi and Workstation
- CVE-2024-50302 Linux Kernel Use of Uninitialized Resource Vulnerability Linux · Kernel
- CVE-2024-4885 Progress WhatsUp Gold Path Traversal Vulnerability Progress · WhatsUp Gold
- CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability Microsoft · Windows
- CVE-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability Hitachi Vantara · Pentaho Business Analytics (BA) Server
- CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability Hitachi Vantara · Pentaho Business Analytics (BA) Server
- CVE-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability Cisco · Small Business RV Series Routers
- CVE-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability Microsoft · Partner Center
- CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability Oracle · Agile Product Lifecycle Management (PLM)
- CVE-2017-3066 Adobe ColdFusion Deserialization Vulnerability Adobe · ColdFusion
- CVE-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability Microsoft · Power Pages
- CVE-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability Palo Alto Networks · PAN-OS
- CVE-2025-23209 Craft CMS Code Injection Vulnerability Craft CMS · Craft CMS
- CVE-2025-0108 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks · PAN-OS
- CVE-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability SonicWall · SonicOS
- CVE-2024-57727 SimpleHelp Path Traversal Vulnerability SimpleHelp · SimpleHelp
- CVE-2025-24200 Apple iOS and iPadOS Incorrect Authorization Vulnerability Apple · iOS and iPadOS
- CVE-2024-41710 Mitel SIP Phones Argument Injection Vulnerability Mitel · SIP Phones
- CVE-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability Zyxel · DSL CPE Devices
- CVE-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability Zyxel · DSL CPE Devices
- CVE-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-21391 Microsoft Windows Storage Link Following Vulnerability Microsoft · Windows
- CVE-2025-0994 Trimble Cityworks Deserialization Vulnerability Trimble · Cityworks
- CVE-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability Sophos · XG Firewall
- CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability Sophos · CyberoamOS
- CVE-2024-21413 Microsoft Outlook Improper Input Validation Vulnerability Microsoft · Office Outlook
- CVE-2022-23748 Dante Discovery Process Control Vulnerability Audinate · Dante Discovery
- CVE-2025-0411 7-Zip Mark of the Web Bypass Vulnerability 7-Zip · 7-Zip
- CVE-2024-53104 Linux Kernel Out-of-Bounds Write Vulnerability Linux · Kernel
- CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability Paessler · PRTG Network Monitor
- CVE-2018-9276 Paessler PRTG Network Monitor OS Command Injection Vulnerability Paessler · PRTG Network Monitor
- CVE-2024-29059 Microsoft .NET Framework Information Disclosure Vulnerability Microsoft · .NET Framework
- CVE-2024-45195 Apache OFBiz Forced Browsing Vulnerability Apache · OFBiz
- CVE-2025-24085 Apple Multiple Products Use-After-Free Vulnerability Apple · Multiple Products
- CVE-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability SonicWall · SMA1000 Appliances
- CVE-2020-11023 JQuery Cross-Site Scripting (XSS) Vulnerability JQuery · JQuery
- CVE-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability Aviatrix · Controllers
- CVE-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet · FortiOS and FortiProxy
- CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability Qlik · Sense
- CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
- CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti · Connect Secure, Policy Secure, and ZTA Gateways
- CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server
- CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability Mitel · MiCollab
- CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability Mitel · MiCollab
- CVE-2024-3393 Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability Palo Alto Networks · PAN-OS
- CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability Acclaim Systems · USAHERDS
- CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
- CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability Reolink · RLC-410W IP Camera
- CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability Reolink · Multiple IP Cameras
- CVE-2022-23227 NUUO NVRmini2 Devices Missing Authentication Vulnerability NUUO · NVRmini2 Devices
- CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability NUUO · NVRmini Devices
- CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability Cleo · Multiple Products
- CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability Microsoft · Windows
- CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability Adobe · ColdFusion
- CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability Cleo · Multiple Products
- CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability CyberPersons · CyberPanel
- CVE-2024-11667 Zyxel Multiple Firewalls Path Traversal Vulnerability Zyxel · Multiple Firewalls
- CVE-2024-11680 ProjectSend Improper Authentication Vulnerability ProjectSend · ProjectSend
- CVE-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability North Grid · Proself
- CVE-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability Array Networks · AG/vxAG ArrayOS
- CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability Oracle · Agile Product Lifecycle Management (PLM)
- CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability Apple · Multiple Products
- CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability Apple · Multiple Products
- CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability VMware · vCenter Server
- CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability VMware · vCenter Server
- CVE-2024-9474 Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability Palo Alto Networks · PAN-OS
- CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability Palo Alto Networks · PAN-OS
- CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability Progress · Kemp LoadMaster
- CVE-2024-9465 Palo Alto Networks Expedition SQL Injection Vulnerability Palo Alto Networks · Expedition
- CVE-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability Palo Alto Networks · Expedition
- CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability Atlassian · Jira Server and Data Center
- CVE-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability Cisco · Adaptive Security Appliance (ASA)
- CVE-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability Metabase · Metabase
- CVE-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability Microsoft · Windows
- CVE-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-16278 Nostromo nhttpd Directory Traversal Vulnerability Nostromo · nhttpd
- CVE-2024-51567 CyberPanel Incorrect Default Permissions Vulnerability CyberPersons · CyberPanel
- CVE-2024-43093 Android Framework Privilege Escalation Vulnerability Android · Framework
- CVE-2024-5910 Palo Alto Networks Expedition Missing Authentication Vulnerability Palo Alto Networks · Expedition
- CVE-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability PTZOptics · PT30X-SDI/NDI Cameras
- CVE-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability PTZOptics · PT30X-SDI/NDI Cameras
- CVE-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability Fortinet · FortiManager
- CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability Microsoft · SharePoint
- CVE-2024-9537 ScienceLogic SL1 Unspecified Vulnerability ScienceLogic · SL1
- CVE-2024-40711 Veeam Backup and Replication Deserialization Vulnerability Veeam · Backup & Replication
- CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability SolarWinds · Web Help Desk
- CVE-2024-9680 Mozilla Firefox Use-After-Free Vulnerability Mozilla · Firefox
- CVE-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerability Microsoft · Windows
- CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability Ivanti · Cloud Services Appliance (CSA)
- CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability Ivanti · Cloud Services Appliance (CSA)
- CVE-2024-23113 Fortinet Multiple Products Format String Vulnerability Fortinet · Multiple Products
- CVE-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft · Windows
- CVE-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability SAP · Commerce Cloud
- CVE-2020-15415 DrayTek Multiple Vigor Routers OS Command Injection Vulnerability DrayTek · Multiple Vigor Routers
- CVE-2023-25280 D-Link DIR-820 Router OS Command Injection Vulnerability D-Link · DIR-820 Router
- CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability Ivanti · Virtual Traffic Manager
- CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability Ivanti · Cloud Services Appliance (CSA)
- CVE-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability Oracle · WebLogic Server
- CVE-2022-21445 Oracle ADF Faces Deserialization of Untrusted Data Vulnerability Oracle · ADF Faces
- CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability Microsoft · SQL Server
- CVE-2024-27348 Apache HugeGraph-Server Improper Access Control Vulnerability Apache · HugeGraph-Server
Nothing on this page matches that filter.