Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,655 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2023-7101 Spreadsheet::ParseExcel Remote Code Execution Vulnerability Spreadsheet::ParseExcel · Spreadsheet::ParseExcel
- CVE-2023-7024 Google Chromium WebRTC Heap Buffer Overflow Vulnerability Google · Chromium WebRTC
- CVE-2023-49897 FXC AE1021, AE1021PE OS Command Injection Vulnerability FXC · AE1021, AE1021PE
- CVE-2023-47565 QNAP VioStor NVR OS Command Injection Vulnerability QNAP · VioStor NVR
- CVE-2023-6448 Unitronics Vision PLC and HMI Insecure Default Password Vulnerability Unitronics · Vision PLC and HMI
- CVE-2023-41266 Qlik Sense Path Traversal Vulnerability Qlik · Sense
- CVE-2023-41265 Qlik Sense HTTP Tunneling Vulnerability Qlik · Sense
- CVE-2023-33107 Qualcomm Multiple Chipsets Integer Overflow Vulnerability Qualcomm · Multiple Chipsets
- CVE-2023-33106 Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability Qualcomm · Multiple Chipsets
- CVE-2023-33063 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2022-22071 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2023-42917 Apple Multiple Products WebKit Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2023-42916 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Apple · Multiple Products
- CVE-2023-6345 Google Skia Integer Overflow Vulnerability Google · Chromium Skia
- CVE-2023-49103 ownCloud graphapi Information Disclosure Vulnerability ownCloud · ownCloud graphapi
- CVE-2023-4911 GNU C Library Buffer Overflow Vulnerability GNU · GNU C Library
- CVE-2023-36584 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2023-1671 Sophos Web Appliance Command Injection Vulnerability Sophos · Web Appliance
- CVE-2020-2551 Oracle Fusion Middleware Unspecified Vulnerability Oracle · Fusion Middleware
- CVE-2023-36033 Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2023-36025 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2023-36036 Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2023-47246 SysAid Server Path Traversal Vulnerability SysAid · SysAid Server
- CVE-2023-36844 Juniper Junos OS EX Series PHP External Variable Modification Vulnerability Juniper · Junos OS
- CVE-2023-36845 Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability Juniper · Junos OS
- CVE-2023-36846 Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability Juniper · Junos OS
- CVE-2023-36847 Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability Juniper · Junos OS
- CVE-2023-36851 Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability Juniper · Junos OS
- CVE-2023-29552 Service Location Protocol (SLP) Denial-of-Service Vulnerability IETF · Service Location Protocol (SLP)
- CVE-2023-22518 Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Atlassian · Confluence Data Center and Server
- CVE-2023-46604 Apache ActiveMQ Deserialization of Untrusted Data Vulnerability Apache · ActiveMQ
- CVE-2023-46748 F5 BIG-IP Configuration Utility SQL Injection Vulnerability F5 · BIG-IP Configuration Utility
- CVE-2023-46747 F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability F5 · BIG-IP Configuration Utility
- CVE-2023-5631 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2023-20273 Cisco IOS XE Web UI Command Injection Vulnerability Cisco · Cisco IOS XE Web UI
- CVE-2023-4966 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2023-20198 Cisco IOS XE Web UI Privilege Escalation Vulnerability Cisco · IOS XE Web UI
- CVE-2023-21608 Adobe Acrobat and Reader Use-After-Free Vulnerability Adobe · Acrobat and Reader
- CVE-2023-20109 Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability Cisco · IOS and IOS XE
- CVE-2023-41763 Microsoft Skype for Business Privilege Escalation Vulnerability Microsoft · Skype for Business
- CVE-2023-36563 Microsoft WordPad Information Disclosure Vulnerability Microsoft · WordPad
- CVE-2023-44487 HTTP/2 Rapid Reset Attack Vulnerability IETF · HTTP/2
- CVE-2023-22515 Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Atlassian · Confluence Data Center and Server
- CVE-2023-40044 Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability Progress · WS_FTP Server
- CVE-2023-42824 Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability Apple · iOS and iPadOS
- CVE-2023-42793 JetBrains TeamCity Authentication Bypass Vulnerability JetBrains · TeamCity
- CVE-2023-28229 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability Microsoft · Windows CNG Key Isolation Service
- CVE-2023-4211 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm · Mali GPU Kernel Driver
- CVE-2023-5217 Google Chromium libvpx Heap Buffer Overflow Vulnerability Google · Chromium libvpx
- CVE-2018-14667 Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability Red Hat · JBoss RichFaces Framework
- CVE-2023-41991 Apple Multiple Products Improper Certificate Validation Vulnerability Apple · Multiple Products
- CVE-2023-41992 Apple Multiple Products Kernel Privilege Escalation Vulnerability Apple · Multiple Products
- CVE-2023-41993 Apple Multiple Products WebKit Code Execution Vulnerability Apple · Multiple Products
- CVE-2023-41179 Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability Trend Micro · Apex One and Worry-Free Business Security
- CVE-2023-28434 MinIO Security Feature Bypass Vulnerability MinIO · MinIO
- CVE-2022-22265 Samsung Mobile Devices Use-After-Free Vulnerability Samsung · Mobile Devices
- CVE-2014-8361 Realtek SDK Improper Input Validation Vulnerability Realtek · SDK
- CVE-2017-6884 Zyxel EMG2926 Routers Command Injection Vulnerability Zyxel · EMG2926 Routers
- CVE-2021-3129 Laravel Ignition File Upload Vulnerability Laravel · Ignition
- CVE-2023-26369 Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability Adobe · Acrobat and Reader
- CVE-2023-35674 Android Framework Privilege Escalation Vulnerability Android · Framework
- CVE-2023-20269 Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Cisco · Adaptive Security Appliance and Firepower Threat Defense
- CVE-2023-4863 Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Google · Chromium WebP
- CVE-2023-36761 Microsoft Word Information Disclosure Vulnerability Microsoft · Word
- CVE-2023-36802 Microsoft Streaming Service Proxy Privilege Escalation Vulnerability Microsoft · Streaming Service Proxy
- CVE-2023-41064 Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2023-41061 Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability Apple · iOS, iPadOS, and watchOS
- CVE-2023-33246 Apache RocketMQ Command Execution Vulnerability Apache · RocketMQ
- CVE-2023-38831 RARLAB WinRAR Code Execution Vulnerability RARLAB · WinRAR
- CVE-2023-32315 Ignite Realtime Openfire Path Traversal Vulnerability Ignite Realtime · Openfire
- CVE-2023-38035 Ivanti Sentry Authentication Bypass Vulnerability Ivanti · Sentry
- CVE-2023-27532 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability Veeam · Backup & Replication
- CVE-2023-26359 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2023-24489 Citrix Content Collaboration ShareFile Improper Access Control Vulnerability Citrix · Content Collaboration
- CVE-2023-38180 Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability Microsoft · .NET Core and Visual Studio
- CVE-2017-18368 Zyxel P660HN-T1A Routers Command Injection Vulnerability Zyxel · P660HN-T1A Routers
- CVE-2023-35081 Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2023-37580 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2023-38606 Apple Multiple Products Kernel Unspecified Vulnerability Apple · Multiple Products
- CVE-2023-35078 Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2023-29298 Adobe ColdFusion Improper Access Control Vulnerability Adobe · ColdFusion
- CVE-2023-38205 Adobe ColdFusion Improper Access Control Vulnerability Adobe · ColdFusion
- CVE-2023-3519 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2022-29303 SolarView Compact Command Injection Vulnerability SolarView · Compact
- CVE-2023-37450 Apple Multiple Products WebKit Code Execution Vulnerability Apple · Multiple Products
- CVE-2023-32046 Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2023-32049 Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2023-35311 Microsoft Outlook Security Feature Bypass Vulnerability Microsoft · Outlook
- CVE-2023-36874 Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-31199 Netwrix Auditor Insecure Object Deserialization Vulnerability Netwrix · Auditor
- CVE-2021-29256 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm · Mali Graphics Processing Unit (GPU)
- CVE-2019-17621 D-Link DIR-859 Router Command Execution Vulnerability D-Link · DIR-859 Router
- CVE-2019-20500 D-Link DWL-2600AP Access Point Command Injection Vulnerability D-Link · DWL-2600AP Access Point
- CVE-2021-25487 Samsung Mobile Devices Out-of-Bounds Read Vulnerability Samsung · Mobile Devices
- CVE-2021-25489 Samsung Mobile Devices Improper Input Validation Vulnerability Samsung · Mobile Devices
- CVE-2021-25394 Samsung Mobile Devices Race Condition Vulnerability Samsung · Mobile Devices
- CVE-2021-25395 Samsung Mobile Devices Race Condition Vulnerability Samsung · Mobile Devices
- CVE-2021-25371 Samsung Mobile Devices Unspecified Vulnerability Samsung · Mobile Devices
- CVE-2021-25372 Samsung Mobile Devices Improper Boundary Check Vulnerability Samsung · Mobile Devices
- CVE-2023-32434 Apple Multiple Products Integer Overflow Vulnerability Apple · Multiple Products
- CVE-2023-32435 Apple Multiple Products WebKit Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2023-32439 Apple Multiple Products WebKit Type Confusion Vulnerability Apple · Multiple Products
- CVE-2023-20867 VMware Tools Authentication Bypass Vulnerability VMware · Tools
- CVE-2023-27992 Zyxel Multiple NAS Devices Command Injection Vulnerability Zyxel · Multiple Network-Attached Storage (NAS) Devices
- CVE-2023-20887 Vmware Aria Operations for Networks Command Injection Vulnerability VMware · Aria Operations for Networks
- CVE-2020-35730 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube · Roundcube Webmail
- CVE-2020-12641 Roundcube Webmail Remote Code Execution Vulnerability Roundcube · Roundcube Webmail
- CVE-2021-44026 Roundcube Webmail SQL Injection Vulnerability Roundcube · Roundcube Webmail
- CVE-2016-9079 Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability Mozilla · Firefox, Firefox ESR, and Thunderbird
- CVE-2016-0165 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2023-27997 Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability Fortinet · FortiOS and FortiProxy SSL-VPN
- CVE-2023-3079 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2023-33009 Zyxel Multiple Firewalls Buffer Overflow Vulnerability Zyxel · Multiple Firewalls
- CVE-2023-33010 Zyxel Multiple Firewalls Buffer Overflow Vulnerability Zyxel · Multiple Firewalls
- CVE-2023-34362 Progress MOVEit Transfer SQL Injection Vulnerability Progress · MOVEit Transfer
- CVE-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability Zyxel · Multiple Firewalls
- CVE-2023-2868 Barracuda Networks ESG Appliance Improper Input Validation Vulnerability Barracuda Networks · Email Security Gateway (ESG) Appliance
- CVE-2023-32409 Apple Multiple Products WebKit Sandbox Escape Vulnerability Apple · Multiple Products
- CVE-2023-28204 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Apple · Multiple Products
Nothing on this page matches that filter.