Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,655 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2014-0502 Adobe Flash Player Double Free Vulnerablity Adobe · Flash Player
- CVE-2013-0648 Adobe Flash Player Code Execution Vulnerability Adobe · Flash Player
- CVE-2013-0643 Adobe Flash Player Incorrect Default Permissions Vulnerability Adobe · Flash Player
- CVE-2014-0497 Adobe Flash Player Integer Underflow Vulnerablity Adobe · Flash Player
- CVE-2024-6670 Progress WhatsUp Gold SQL Injection Vulnerability Progress · WhatsUp Gold
- CVE-2024-43461 Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft · Windows
- CVE-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability Ivanti · Cloud Services Appliance
- CVE-2024-38217 Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2024-38014 Microsoft Windows Installer Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2024-38226 Microsoft Publisher Protection Mechanism Failure Vulnerability Microsoft · Publisher
- CVE-2024-40766 SonicWall SonicOS Improper Access Control Vulnerability SonicWall · SonicOS
- CVE-2017-1000253 Linux Kernel PIE Stack Buffer Corruption Vulnerability Linux · Kernel
- CVE-2016-3714 ImageMagick Improper Input Validation Vulnerability ImageMagick · ImageMagick
- CVE-2024-7262 Kingsoft WPS Office Path Traversal Vulnerability Kingsoft · WPS Office
- CVE-2021-20124 Draytek VigorConnect Path Traversal Vulnerability DrayTek · VigorConnect
- CVE-2021-20123 Draytek VigorConnect Path Traversal Vulnerability DrayTek · VigorConnect
- CVE-2024-7965 Google Chromium V8 Inappropriate Implementation Vulnerability Google · Chromium V8
- CVE-2024-38856 Apache OFBiz Incorrect Authorization Vulnerability Apache · OFBiz
- CVE-2024-7971 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2024-39717 Versa Director Dangerous File Type Upload Vulnerability Versa · Director
- CVE-2021-31196 Microsoft Exchange Server Information Disclosure Vulnerability Microsoft · Exchange Server
- CVE-2022-0185 Linux Kernel Heap-Based Buffer Overflow Vulnerability Linux · Kernel
- CVE-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability Dahua · IP Camera Firmware
- CVE-2021-33044 Dahua IP Camera Authentication Bypass Vulnerability Dahua · IP Camera Firmware
- CVE-2024-23897 Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Jenkins · Jenkins Command Line Interface (CLI)
- CVE-2024-28986 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds · Web Help Desk
- CVE-2024-38107 Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38106 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability Microsoft · Windows
- CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability Microsoft · Project
- CVE-2024-32113 Apache OFBiz Path Traversal Vulnerability Apache · OFBiz
- CVE-2024-36971 Android Kernel Remote Code Execution Vulnerability Android · Kernel
- CVE-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability Microsoft · Windows
- CVE-2024-37085 VMware ESXi Authentication Bypass Vulnerability VMware · ESXi
- CVE-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability Acronis · Cyber Infrastructure (ACI)
- CVE-2024-5217 ServiceNow Incomplete List of Disallowed Inputs Vulnerability ServiceNow · Utah, Vancouver, and Washington DC Now Platform
- CVE-2024-4879 ServiceNow Improper Input Validation Vulnerability ServiceNow · Utah, Vancouver, and Washington DC Now Platform
- CVE-2024-39891 Twilio Authy Information Disclosure Vulnerability Twilio · Authy
- CVE-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2022-22948 VMware vCenter Server Incorrect Default File Permissions Vulnerability VMware · vCenter Server
- CVE-2024-28995 SolarWinds Serv-U Path Traversal Vulnerability SolarWinds · Serv-U
- CVE-2024-34102 Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability Adobe · Commerce and Magento Open Source
- CVE-2024-36401 OSGeo GeoServer GeoTools Eval Injection Vulnerability OSGeo · GeoServer
- CVE-2024-23692 Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Rejetto · HTTP File Server
- CVE-2024-38080 Microsoft Windows Hyper-V Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38112 Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft · Windows
- CVE-2024-20399 Cisco NX-OS Command Injection Vulnerability Cisco · NX-OS
- CVE-2020-13965 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2022-2586 Linux Kernel Use-After-Free Vulnerability Linux · Kernel
- CVE-2022-24816 OSGeo GeoServer JAI-EXT Code Injection Vulnerability OSGeo · JAI-EXT
- CVE-2024-4358 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability Progress · Telerik Report Server
- CVE-2024-26169 Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2024-32896 Android Pixel Privilege Escalation Vulnerability Android · Pixel
- CVE-2024-4577 PHP-CGI OS Command Injection Vulnerability PHP Group · PHP
- CVE-2024-4610 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm · Mali GPU Kernel Driver
- CVE-2017-3506 Oracle WebLogic Server OS Command Injection Vulnerability Oracle · WebLogic Server
- CVE-2024-1086 Linux Kernel Use-After-Free Vulnerability Linux · Kernel
- CVE-2024-24919 Check Point Quantum Security Gateways Information Disclosure Vulnerability Check Point · Quantum Security Gateways
- CVE-2024-4978 Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability Justice AV Solutions · Viewer
- CVE-2024-5274 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2020-17519 Apache Flink Improper Access Control Vulnerability Apache · Flink
- CVE-2024-4947 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2023-43208 NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability NextGen Healthcare · Mirth Connect
- CVE-2024-4761 Google Chromium V8 Out-of-Bounds Memory Write Vulnerability Google · Chromium V8
- CVE-2021-40655 D-Link DIR-605 Router Information Disclosure Vulnerability D-Link · DIR-605 Router
- CVE-2014-100005 D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability D-Link · DIR-600 Router
- CVE-2024-30040 Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2024-30051 Microsoft DWM Core Library Privilege Escalation Vulnerability Microsoft · DWM Core Library
- CVE-2024-4671 Google Chromium Visuals Use-After-Free Vulnerability Google · Chromium
- CVE-2023-7028 GitLab Community and Enterprise Editions Improper Access Control Vulnerability GitLab · GitLab CE/EE
- CVE-2024-29988 Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability Microsoft · SmartScreen Prompt
- CVE-2024-4040 CrushFTP VFS Sandbox Escape Vulnerability CrushFTP · CrushFTP
- CVE-2024-20359 Cisco ASA and FTD Privilege Escalation Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2024-20353 Cisco ASA and FTD Denial of Service Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-3400 Palo Alto Networks PAN-OS Command Injection Vulnerability Palo Alto Networks · PAN-OS
- CVE-2024-3273 D-Link Multiple NAS Devices Command Injection Vulnerability D-Link · Multiple NAS Devices
- CVE-2024-3272 D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability D-Link · Multiple NAS Devices
- CVE-2024-29748 Android Pixel Privilege Escalation Vulnerability Android · Pixel
- CVE-2024-29745 Android Pixel Information Disclosure Vulnerability Android · Pixel
- CVE-2023-24955 Microsoft SharePoint Server Code Injection Vulnerability Microsoft · SharePoint Server
- CVE-2019-7256 Nice Linear eMerge E3-Series OS Command Injection Vulnerability Nice · Linear eMerge E3-Series
- CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA)
- CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet · FortiClient EMS
- CVE-2024-27198 JetBrains TeamCity Authentication Bypass Vulnerability JetBrains · TeamCity
- CVE-2024-23225 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2024-23296 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2023-21237 Android Pixel Information Disclosure Vulnerability Android · Pixel
- CVE-2021-36380 Sunhillo SureLine OS Command Injection Vulnerablity Sunhillo · SureLine
- CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability Microsoft · Windows
- CVE-2023-29360 Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability Microsoft · Streaming Service
- CVE-2024-1709 ConnectWise ScreenConnect Authentication Bypass Vulnerability ConnectWise · ScreenConnect
- CVE-2020-3259 Cisco ASA and FTD Information Disclosure Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2024-21410 Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft · Exchange Server
- CVE-2024-21412 Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2024-21351 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2023-43770 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2024-21762 Fortinet FortiOS Out-of-Bound Write Vulnerability Fortinet · FortiOS
- CVE-2023-4762 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2022-48618 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2024-21893 Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Ivanti · Connect Secure, Policy Secure, and Neurons
- CVE-2023-22527 Atlassian Confluence Data Center and Server Template Injection Vulnerability Atlassian · Confluence Data Center and Server
- CVE-2024-23222 Apple Multiple Products WebKit Type Confusion Vulnerability Apple · Multiple Products
- CVE-2023-34048 VMware vCenter Server Out-of-Bounds Write Vulnerability VMware · vCenter Server
- CVE-2023-35082 Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Ivanti · Endpoint Manager Mobile (EPMM) and MobileIron Core
- CVE-2024-0519 Google Chromium V8 Out-of-Bounds Memory Access Vulnerability Google · Chromium V8
- CVE-2023-6549 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2023-6548 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2018-15133 Laravel Deserialization of Untrusted Data Vulnerability Laravel · Laravel Framework
- CVE-2023-29357 Microsoft SharePoint Server Privilege Escalation Vulnerability Microsoft · SharePoint Server
- CVE-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Ivanti · Connect Secure and Policy Secure
- CVE-2024-21887 Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Ivanti · Connect Secure and Policy Secure
- CVE-2023-23752 Joomla! Improper Access Control Vulnerability Joomla! · Joomla!
- CVE-2016-20017 D-Link DSL-2750B Devices Command Injection Vulnerability D-Link · DSL-2750B Devices
- CVE-2023-41990 Apple Multiple Products Code Execution Vulnerability Apple · Multiple Products
- CVE-2023-27524 Apache Superset Insecure Default Initialization of Resource Vulnerability Apache · Superset
- CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2023-38203 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
Nothing on this page matches that filter.