Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,709 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2021-40655 D-Link DIR-605 Router Information Disclosure Vulnerability D-Link · DIR-605 Router
- CVE-2014-100005 D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability D-Link · DIR-600 Router
- CVE-2024-30040 Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2024-30051 Microsoft DWM Core Library Privilege Escalation Vulnerability Microsoft · DWM Core Library
- CVE-2024-4671 Google Chromium Visuals Use-After-Free Vulnerability Google · Chromium
- CVE-2023-7028 GitLab Community and Enterprise Editions Improper Access Control Vulnerability GitLab · GitLab CE/EE
- CVE-2024-29988 Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability Microsoft · SmartScreen Prompt
- CVE-2024-4040 CrushFTP VFS Sandbox Escape Vulnerability CrushFTP · CrushFTP
- CVE-2024-20359 Cisco ASA and FTD Privilege Escalation Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2024-20353 Cisco ASA and FTD Denial of Service Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-3400 Palo Alto Networks PAN-OS Command Injection Vulnerability Palo Alto Networks · PAN-OS
- CVE-2024-3273 D-Link Multiple NAS Devices Command Injection Vulnerability D-Link · Multiple NAS Devices
- CVE-2024-3272 D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability D-Link · Multiple NAS Devices
- CVE-2024-29748 Android Pixel Privilege Escalation Vulnerability Android · Pixel
- CVE-2024-29745 Android Pixel Information Disclosure Vulnerability Android · Pixel
- CVE-2023-24955 Microsoft SharePoint Server Code Injection Vulnerability Microsoft · SharePoint Server
- CVE-2019-7256 Nice Linear eMerge E3-Series OS Command Injection Vulnerability Nice · Linear eMerge E3-Series
- CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA)
- CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet · FortiClient EMS
- CVE-2024-27198 JetBrains TeamCity Authentication Bypass Vulnerability JetBrains · TeamCity
- CVE-2024-23225 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2024-23296 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2023-21237 Android Pixel Information Disclosure Vulnerability Android · Pixel
- CVE-2021-36380 Sunhillo SureLine OS Command Injection Vulnerablity Sunhillo · SureLine
- CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability Microsoft · Windows
- CVE-2023-29360 Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability Microsoft · Streaming Service
- CVE-2024-1709 ConnectWise ScreenConnect Authentication Bypass Vulnerability ConnectWise · ScreenConnect
- CVE-2020-3259 Cisco ASA and FTD Information Disclosure Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2024-21410 Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft · Exchange Server
- CVE-2024-21412 Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2024-21351 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2023-43770 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2024-21762 Fortinet FortiOS Out-of-Bound Write Vulnerability Fortinet · FortiOS
- CVE-2023-4762 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2022-48618 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2024-21893 Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Ivanti · Connect Secure, Policy Secure, and Neurons
- CVE-2023-22527 Atlassian Confluence Data Center and Server Template Injection Vulnerability Atlassian · Confluence Data Center and Server
- CVE-2024-23222 Apple Multiple Products WebKit Type Confusion Vulnerability Apple · Multiple Products
- CVE-2023-34048 VMware vCenter Server Out-of-Bounds Write Vulnerability VMware · vCenter Server
- CVE-2023-35082 Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Ivanti · Endpoint Manager Mobile (EPMM) and MobileIron Core
- CVE-2024-0519 Google Chromium V8 Out-of-Bounds Memory Access Vulnerability Google · Chromium V8
- CVE-2023-6549 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2023-6548 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2018-15133 Laravel Deserialization of Untrusted Data Vulnerability Laravel · Laravel Framework
- CVE-2023-29357 Microsoft SharePoint Server Privilege Escalation Vulnerability Microsoft · SharePoint Server
- CVE-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Ivanti · Connect Secure and Policy Secure
- CVE-2024-21887 Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Ivanti · Connect Secure and Policy Secure
- CVE-2023-23752 Joomla! Improper Access Control Vulnerability Joomla! · Joomla!
- CVE-2016-20017 D-Link DSL-2750B Devices Command Injection Vulnerability D-Link · DSL-2750B Devices
- CVE-2023-41990 Apple Multiple Products Code Execution Vulnerability Apple · Multiple Products
- CVE-2023-27524 Apache Superset Insecure Default Initialization of Resource Vulnerability Apache · Superset
- CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2023-38203 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2023-7101 Spreadsheet::ParseExcel Remote Code Execution Vulnerability Spreadsheet::ParseExcel · Spreadsheet::ParseExcel
- CVE-2023-7024 Google Chromium WebRTC Heap Buffer Overflow Vulnerability Google · Chromium WebRTC
- CVE-2023-49897 FXC AE1021, AE1021PE OS Command Injection Vulnerability FXC · AE1021, AE1021PE
- CVE-2023-47565 QNAP VioStor NVR OS Command Injection Vulnerability QNAP · VioStor NVR
- CVE-2023-6448 Unitronics Vision PLC and HMI Insecure Default Password Vulnerability Unitronics · Vision PLC and HMI
- CVE-2023-41266 Qlik Sense Path Traversal Vulnerability Qlik · Sense
- CVE-2023-41265 Qlik Sense HTTP Tunneling Vulnerability Qlik · Sense
- CVE-2023-33107 Qualcomm Multiple Chipsets Integer Overflow Vulnerability Qualcomm · Multiple Chipsets
- CVE-2023-33106 Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability Qualcomm · Multiple Chipsets
- CVE-2023-33063 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2022-22071 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2023-42917 Apple Multiple Products WebKit Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2023-42916 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Apple · Multiple Products
- CVE-2023-6345 Google Skia Integer Overflow Vulnerability Google · Chromium Skia
- CVE-2023-49103 ownCloud graphapi Information Disclosure Vulnerability ownCloud · ownCloud graphapi
- CVE-2023-4911 GNU C Library Buffer Overflow Vulnerability GNU · GNU C Library
- CVE-2023-36584 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2023-1671 Sophos Web Appliance Command Injection Vulnerability Sophos · Web Appliance
- CVE-2020-2551 Oracle Fusion Middleware Unspecified Vulnerability Oracle · Fusion Middleware
- CVE-2023-36033 Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2023-36025 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2023-36036 Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2023-47246 SysAid Server Path Traversal Vulnerability SysAid · SysAid Server
- CVE-2023-36844 Juniper Junos OS EX Series PHP External Variable Modification Vulnerability Juniper · Junos OS
- CVE-2023-36845 Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability Juniper · Junos OS
- CVE-2023-36846 Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability Juniper · Junos OS
- CVE-2023-36847 Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability Juniper · Junos OS
- CVE-2023-36851 Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability Juniper · Junos OS
- CVE-2023-29552 Service Location Protocol (SLP) Denial-of-Service Vulnerability IETF · Service Location Protocol (SLP)
- CVE-2023-22518 Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Atlassian · Confluence Data Center and Server
- CVE-2023-46604 Apache ActiveMQ Deserialization of Untrusted Data Vulnerability Apache · ActiveMQ
- CVE-2023-46748 F5 BIG-IP Configuration Utility SQL Injection Vulnerability F5 · BIG-IP Configuration Utility
- CVE-2023-46747 F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability F5 · BIG-IP Configuration Utility
- CVE-2023-5631 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2023-20273 Cisco IOS XE Web UI Command Injection Vulnerability Cisco · Cisco IOS XE Web UI
- CVE-2023-4966 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2023-20198 Cisco IOS XE Web UI Privilege Escalation Vulnerability Cisco · IOS XE Web UI
- CVE-2023-21608 Adobe Acrobat and Reader Use-After-Free Vulnerability Adobe · Acrobat and Reader
- CVE-2023-20109 Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability Cisco · IOS and IOS XE
- CVE-2023-41763 Microsoft Skype for Business Privilege Escalation Vulnerability Microsoft · Skype for Business
- CVE-2023-36563 Microsoft WordPad Information Disclosure Vulnerability Microsoft · WordPad
- CVE-2023-44487 HTTP/2 Rapid Reset Attack Vulnerability IETF · HTTP/2
- CVE-2023-22515 Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Atlassian · Confluence Data Center and Server
- CVE-2023-40044 Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability Progress · WS_FTP Server
- CVE-2023-42824 Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability Apple · iOS and iPadOS
- CVE-2023-42793 JetBrains TeamCity Authentication Bypass Vulnerability JetBrains · TeamCity
- CVE-2023-28229 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability Microsoft · Windows CNG Key Isolation Service
- CVE-2023-4211 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm · Mali GPU Kernel Driver
- CVE-2023-5217 Google Chromium libvpx Heap Buffer Overflow Vulnerability Google · Chromium libvpx
- CVE-2018-14667 Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability Red Hat · JBoss RichFaces Framework
- CVE-2023-41991 Apple Multiple Products Improper Certificate Validation Vulnerability Apple · Multiple Products
- CVE-2023-41992 Apple Multiple Products Kernel Privilege Escalation Vulnerability Apple · Multiple Products
- CVE-2023-41993 Apple Multiple Products WebKit Code Execution Vulnerability Apple · Multiple Products
- CVE-2023-41179 Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability Trend Micro · Apex One and Worry-Free Business Security
- CVE-2023-28434 MinIO Security Feature Bypass Vulnerability MinIO · MinIO
- CVE-2022-22265 Samsung Mobile Devices Use-After-Free Vulnerability Samsung · Mobile Devices
- CVE-2014-8361 Realtek SDK Improper Input Validation Vulnerability Realtek · SDK
- CVE-2017-6884 Zyxel EMG2926 Routers Command Injection Vulnerability Zyxel · EMG2926 Routers
- CVE-2021-3129 Laravel Ignition File Upload Vulnerability Laravel · Ignition
- CVE-2023-26369 Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability Adobe · Acrobat and Reader
- CVE-2023-35674 Android Framework Privilege Escalation Vulnerability Android · Framework
- CVE-2023-20269 Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Cisco · Adaptive Security Appliance and Firepower Threat Defense
- CVE-2023-4863 Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Google · Chromium WebP
- CVE-2023-36761 Microsoft Word Information Disclosure Vulnerability Microsoft · Word
- CVE-2023-36802 Microsoft Streaming Service Proxy Privilege Escalation Vulnerability Microsoft · Streaming Service Proxy
- CVE-2023-41064 Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability Apple · iOS, iPadOS, and macOS
Nothing on this page matches that filter.