Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,709 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2024-27443 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2025-27920 Srimax Output Messenger Directory Traversal Vulnerability Srimax · Output Messenger
- CVE-2024-11182 MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability MDaemon · Email Server
- CVE-2025-4428 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2025-4427 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2025-42999 SAP NetWeaver Deserialization Vulnerability SAP · NetWeaver
- CVE-2024-12987 DrayTek Vigor Routers OS Command Injection Vulnerability DrayTek · Vigor Routers
- CVE-2025-32756 Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability Fortinet · Multiple Products
- CVE-2025-32709 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-30397 Microsoft Windows Scripting Engine Type Confusion Vulnerability Microsoft · Windows
- CVE-2025-32706 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-32701 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-30400 Microsoft Windows DWM Core Library Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-47729 TeleMessage TM SGNL Hidden Functionality Vulnerability TeleMessage · TM SGNL
- CVE-2024-11120 GeoVision Devices OS Command Injection Vulnerability GeoVision · Multiple Devices
- CVE-2024-6047 GeoVision Devices OS Command Injection Vulnerability GeoVision · Multiple Devices
- CVE-2025-27363 FreeType Out-of-Bounds Write Vulnerability FreeType · FreeType
- CVE-2025-3248 Langflow Missing Authentication Vulnerability Langflow · Langflow
- CVE-2025-34028 Commvault Command Center Path Traversal Vulnerability Commvault · Command Center
- CVE-2024-58136 Yiiframework Yii Improper Protection of Alternate Path Vulnerability Yiiframework · Yii
- CVE-2024-38475 Apache HTTP Server Improper Escaping of Output Vulnerability Apache · HTTP Server
- CVE-2023-44221 SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall · SMA100 Appliances
- CVE-2025-31324 SAP NetWeaver Unrestricted File Upload Vulnerability SAP · NetWeaver
- CVE-2025-1976 Broadcom Brocade Fabric OS Code Injection Vulnerability Broadcom · Brocade Fabric OS
- CVE-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability Qualitia · Active! Mail
- CVE-2025-3928 Commvault Web Server Unspecified Vulnerability Commvault · Web Server
- CVE-2025-24054 Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability Microsoft · Windows
- CVE-2025-31201 Apple Multiple Products Arbitrary Read and Write Vulnerability Apple · Multiple Products
- CVE-2025-31200 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2021-20035 SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall · SMA100 Appliances
- CVE-2024-53150 Linux Kernel Out-of-Bounds Read Vulnerability Linux · Kernel
- CVE-2024-53197 Linux Kernel Out-of-Bounds Access Vulnerability Linux · Kernel
- CVE-2025-29824 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-30406 Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability Gladinet · CentreStack
- CVE-2025-31161 CrushFTP Authentication Bypass Vulnerability CrushFTP · CrushFTP
- CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti · Connect Secure, Policy Secure, and ZTA Gateways
- CVE-2025-24813 Apache Tomcat Path Equivalence Vulnerability Apache · Tomcat
- CVE-2024-20439 Cisco Smart Licensing Utility Static Credential Vulnerability Cisco · Smart Licensing Utility
- CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability Google · Chromium Mojo
- CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore · CMS and Experience Platform (XP)
- CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore · CMS and Experience Platform (XP)
- CVE-2025-30154 reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability reviewdog · action-setup GitHub Action
- CVE-2017-12637 SAP NetWeaver Directory Traversal Vulnerability SAP · NetWeaver
- CVE-2024-48248 NAKIVO Backup and Replication Absolute Path Traversal Vulnerability NAKIVO · Backup and Replication
- CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection Vulnerability Edimax · IC-7100 IP Camera
- CVE-2025-30066 tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability tj-actions · changed-files GitHub Action
- CVE-2025-24472 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet · FortiOS and FortiProxy
- CVE-2025-21590 Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability Juniper · Junos OS
- CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability Apple · Multiple Products
- CVE-2025-24993 Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-24991 Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability Microsoft · Windows
- CVE-2025-24985 Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability Microsoft · Windows
- CVE-2025-24984 Microsoft Windows NTFS Information Disclosure Vulnerability Microsoft · Windows
- CVE-2025-24983 Microsoft Windows Win32k Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-26633 Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability Microsoft · Windows
- CVE-2024-13161 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2024-13160 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2024-13159 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2024-57968 Advantive VeraCore Unrestricted File Upload Vulnerability Advantive · VeraCore
- CVE-2025-25181 Advantive VeraCore SQL Injection Vulnerability Advantive · VeraCore
- CVE-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability VMware · ESXi, Workstation, and Fusion
- CVE-2025-22225 VMware ESXi Arbitrary Write Vulnerability VMware · ESXi
- CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability VMware · ESXi and Workstation
- CVE-2024-50302 Linux Kernel Use of Uninitialized Resource Vulnerability Linux · Kernel
- CVE-2024-4885 Progress WhatsUp Gold Path Traversal Vulnerability Progress · WhatsUp Gold
- CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability Microsoft · Windows
- CVE-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability Hitachi Vantara · Pentaho Business Analytics (BA) Server
- CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability Hitachi Vantara · Pentaho Business Analytics (BA) Server
- CVE-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability Cisco · Small Business RV Series Routers
- CVE-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability Microsoft · Partner Center
- CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability Oracle · Agile Product Lifecycle Management (PLM)
- CVE-2017-3066 Adobe ColdFusion Deserialization Vulnerability Adobe · ColdFusion
- CVE-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability Microsoft · Power Pages
- CVE-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability Palo Alto Networks · PAN-OS
- CVE-2025-23209 Craft CMS Code Injection Vulnerability Craft CMS · Craft CMS
- CVE-2025-0108 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks · PAN-OS
- CVE-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability SonicWall · SonicOS
- CVE-2024-57727 SimpleHelp Path Traversal Vulnerability SimpleHelp · SimpleHelp
- CVE-2025-24200 Apple iOS and iPadOS Incorrect Authorization Vulnerability Apple · iOS and iPadOS
- CVE-2024-41710 Mitel SIP Phones Argument Injection Vulnerability Mitel · SIP Phones
- CVE-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability Zyxel · DSL CPE Devices
- CVE-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability Zyxel · DSL CPE Devices
- CVE-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-21391 Microsoft Windows Storage Link Following Vulnerability Microsoft · Windows
- CVE-2025-0994 Trimble Cityworks Deserialization Vulnerability Trimble · Cityworks
- CVE-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability Sophos · XG Firewall
- CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability Sophos · CyberoamOS
- CVE-2024-21413 Microsoft Outlook Improper Input Validation Vulnerability Microsoft · Office Outlook
- CVE-2022-23748 Dante Discovery Process Control Vulnerability Audinate · Dante Discovery
- CVE-2025-0411 7-Zip Mark of the Web Bypass Vulnerability 7-Zip · 7-Zip
- CVE-2024-53104 Linux Kernel Out-of-Bounds Write Vulnerability Linux · Kernel
- CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability Paessler · PRTG Network Monitor
- CVE-2018-9276 Paessler PRTG Network Monitor OS Command Injection Vulnerability Paessler · PRTG Network Monitor
- CVE-2024-29059 Microsoft .NET Framework Information Disclosure Vulnerability Microsoft · .NET Framework
- CVE-2024-45195 Apache OFBiz Forced Browsing Vulnerability Apache · OFBiz
- CVE-2025-24085 Apple Multiple Products Use-After-Free Vulnerability Apple · Multiple Products
- CVE-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability SonicWall · SMA1000 Appliances
- CVE-2020-11023 JQuery Cross-Site Scripting (XSS) Vulnerability JQuery · JQuery
- CVE-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability Aviatrix · Controllers
- CVE-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet · FortiOS and FortiProxy
- CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability Qlik · Sense
- CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
- CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti · Connect Secure, Policy Secure, and ZTA Gateways
- CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server
- CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability Mitel · MiCollab
- CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability Mitel · MiCollab
- CVE-2024-3393 Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability Palo Alto Networks · PAN-OS
- CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability Acclaim Systems · USAHERDS
- CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
- CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability Reolink · RLC-410W IP Camera
- CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability Reolink · Multiple IP Cameras
- CVE-2022-23227 NUUO NVRmini2 Devices Missing Authentication Vulnerability NUUO · NVRmini2 Devices
- CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability NUUO · NVRmini Devices
- CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability Cleo · Multiple Products
- CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability Microsoft · Windows
- CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability Adobe · ColdFusion
Nothing on this page matches that filter.