Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,709 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability Cleo · Multiple Products
- CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability CyberPersons · CyberPanel
- CVE-2024-11667 Zyxel Multiple Firewalls Path Traversal Vulnerability Zyxel · Multiple Firewalls
- CVE-2024-11680 ProjectSend Improper Authentication Vulnerability ProjectSend · ProjectSend
- CVE-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability North Grid · Proself
- CVE-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability Array Networks · AG/vxAG ArrayOS
- CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability Oracle · Agile Product Lifecycle Management (PLM)
- CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability Apple · Multiple Products
- CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability Apple · Multiple Products
- CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability VMware · vCenter Server
- CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability VMware · vCenter Server
- CVE-2024-9474 Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability Palo Alto Networks · PAN-OS
- CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability Palo Alto Networks · PAN-OS
- CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability Progress · Kemp LoadMaster
- CVE-2024-9465 Palo Alto Networks Expedition SQL Injection Vulnerability Palo Alto Networks · Expedition
- CVE-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability Palo Alto Networks · Expedition
- CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability Atlassian · Jira Server and Data Center
- CVE-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability Cisco · Adaptive Security Appliance (ASA)
- CVE-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability Metabase · Metabase
- CVE-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability Microsoft · Windows
- CVE-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-16278 Nostromo nhttpd Directory Traversal Vulnerability Nostromo · nhttpd
- CVE-2024-51567 CyberPanel Incorrect Default Permissions Vulnerability CyberPersons · CyberPanel
- CVE-2024-43093 Android Framework Privilege Escalation Vulnerability Android · Framework
- CVE-2024-5910 Palo Alto Networks Expedition Missing Authentication Vulnerability Palo Alto Networks · Expedition
- CVE-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability PTZOptics · PT30X-SDI/NDI Cameras
- CVE-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability PTZOptics · PT30X-SDI/NDI Cameras
- CVE-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability Fortinet · FortiManager
- CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability Microsoft · SharePoint
- CVE-2024-9537 ScienceLogic SL1 Unspecified Vulnerability ScienceLogic · SL1
- CVE-2024-40711 Veeam Backup and Replication Deserialization Vulnerability Veeam · Backup & Replication
- CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability SolarWinds · Web Help Desk
- CVE-2024-9680 Mozilla Firefox Use-After-Free Vulnerability Mozilla · Firefox
- CVE-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerability Microsoft · Windows
- CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability Ivanti · Cloud Services Appliance (CSA)
- CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability Ivanti · Cloud Services Appliance (CSA)
- CVE-2024-23113 Fortinet Multiple Products Format String Vulnerability Fortinet · Multiple Products
- CVE-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft · Windows
- CVE-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability SAP · Commerce Cloud
- CVE-2020-15415 DrayTek Multiple Vigor Routers OS Command Injection Vulnerability DrayTek · Multiple Vigor Routers
- CVE-2023-25280 D-Link DIR-820 Router OS Command Injection Vulnerability D-Link · DIR-820 Router
- CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability Ivanti · Virtual Traffic Manager
- CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability Ivanti · Cloud Services Appliance (CSA)
- CVE-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability Oracle · WebLogic Server
- CVE-2022-21445 Oracle ADF Faces Deserialization of Untrusted Data Vulnerability Oracle · ADF Faces
- CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability Microsoft · SQL Server
- CVE-2024-27348 Apache HugeGraph-Server Improper Access Control Vulnerability Apache · HugeGraph-Server
- CVE-2014-0502 Adobe Flash Player Double Free Vulnerablity Adobe · Flash Player
- CVE-2013-0648 Adobe Flash Player Code Execution Vulnerability Adobe · Flash Player
- CVE-2013-0643 Adobe Flash Player Incorrect Default Permissions Vulnerability Adobe · Flash Player
- CVE-2014-0497 Adobe Flash Player Integer Underflow Vulnerablity Adobe · Flash Player
- CVE-2024-6670 Progress WhatsUp Gold SQL Injection Vulnerability Progress · WhatsUp Gold
- CVE-2024-43461 Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft · Windows
- CVE-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability Ivanti · Cloud Services Appliance
- CVE-2024-38217 Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2024-38014 Microsoft Windows Installer Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2024-38226 Microsoft Publisher Protection Mechanism Failure Vulnerability Microsoft · Publisher
- CVE-2024-40766 SonicWall SonicOS Improper Access Control Vulnerability SonicWall · SonicOS
- CVE-2017-1000253 Linux Kernel PIE Stack Buffer Corruption Vulnerability Linux · Kernel
- CVE-2016-3714 ImageMagick Improper Input Validation Vulnerability ImageMagick · ImageMagick
- CVE-2024-7262 Kingsoft WPS Office Path Traversal Vulnerability Kingsoft · WPS Office
- CVE-2021-20124 Draytek VigorConnect Path Traversal Vulnerability DrayTek · VigorConnect
- CVE-2021-20123 Draytek VigorConnect Path Traversal Vulnerability DrayTek · VigorConnect
- CVE-2024-7965 Google Chromium V8 Inappropriate Implementation Vulnerability Google · Chromium V8
- CVE-2024-38856 Apache OFBiz Incorrect Authorization Vulnerability Apache · OFBiz
- CVE-2024-7971 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2024-39717 Versa Director Dangerous File Type Upload Vulnerability Versa · Director
- CVE-2021-31196 Microsoft Exchange Server Information Disclosure Vulnerability Microsoft · Exchange Server
- CVE-2022-0185 Linux Kernel Heap-Based Buffer Overflow Vulnerability Linux · Kernel
- CVE-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability Dahua · IP Camera Firmware
- CVE-2021-33044 Dahua IP Camera Authentication Bypass Vulnerability Dahua · IP Camera Firmware
- CVE-2024-23897 Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Jenkins · Jenkins Command Line Interface (CLI)
- CVE-2024-28986 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds · Web Help Desk
- CVE-2024-38107 Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38106 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability Microsoft · Windows
- CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability Microsoft · Project
- CVE-2024-32113 Apache OFBiz Path Traversal Vulnerability Apache · OFBiz
- CVE-2024-36971 Android Kernel Remote Code Execution Vulnerability Android · Kernel
- CVE-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability Microsoft · Windows
- CVE-2024-37085 VMware ESXi Authentication Bypass Vulnerability VMware · ESXi
- CVE-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability Acronis · Cyber Infrastructure (ACI)
- CVE-2024-5217 ServiceNow Incomplete List of Disallowed Inputs Vulnerability ServiceNow · Utah, Vancouver, and Washington DC Now Platform
- CVE-2024-4879 ServiceNow Improper Input Validation Vulnerability ServiceNow · Utah, Vancouver, and Washington DC Now Platform
- CVE-2024-39891 Twilio Authy Information Disclosure Vulnerability Twilio · Authy
- CVE-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2022-22948 VMware vCenter Server Incorrect Default File Permissions Vulnerability VMware · vCenter Server
- CVE-2024-28995 SolarWinds Serv-U Path Traversal Vulnerability SolarWinds · Serv-U
- CVE-2024-34102 Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability Adobe · Commerce and Magento Open Source
- CVE-2024-36401 OSGeo GeoServer GeoTools Eval Injection Vulnerability OSGeo · GeoServer
- CVE-2024-23692 Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Rejetto · HTTP File Server
- CVE-2024-38080 Microsoft Windows Hyper-V Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38112 Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft · Windows
- CVE-2024-20399 Cisco NX-OS Command Injection Vulnerability Cisco · NX-OS
- CVE-2020-13965 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2022-2586 Linux Kernel Use-After-Free Vulnerability Linux · Kernel
- CVE-2022-24816 OSGeo GeoServer JAI-EXT Code Injection Vulnerability OSGeo · JAI-EXT
- CVE-2024-4358 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability Progress · Telerik Report Server
- CVE-2024-26169 Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2024-32896 Android Pixel Privilege Escalation Vulnerability Android · Pixel
- CVE-2024-4577 PHP-CGI OS Command Injection Vulnerability PHP Group · PHP
- CVE-2024-4610 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm · Mali GPU Kernel Driver
- CVE-2017-3506 Oracle WebLogic Server OS Command Injection Vulnerability Oracle · WebLogic Server
- CVE-2024-1086 Linux Kernel Use-After-Free Vulnerability Linux · Kernel
- CVE-2024-24919 Check Point Quantum Security Gateways Information Disclosure Vulnerability Check Point · Quantum Security Gateways
- CVE-2024-4978 Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability Justice AV Solutions · Viewer
- CVE-2024-5274 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2020-17519 Apache Flink Improper Access Control Vulnerability Apache · Flink
- CVE-2024-4947 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2023-43208 NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability NextGen Healthcare · Mirth Connect
- CVE-2024-4761 Google Chromium V8 Out-of-Bounds Memory Write Vulnerability Google · Chromium V8
Nothing on this page matches that filter.