Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,709 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2023-41061 Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability Apple · iOS, iPadOS, and watchOS
- CVE-2023-33246 Apache RocketMQ Command Execution Vulnerability Apache · RocketMQ
- CVE-2023-38831 RARLAB WinRAR Code Execution Vulnerability RARLAB · WinRAR
- CVE-2023-32315 Ignite Realtime Openfire Path Traversal Vulnerability Ignite Realtime · Openfire
- CVE-2023-38035 Ivanti Sentry Authentication Bypass Vulnerability Ivanti · Sentry
- CVE-2023-27532 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability Veeam · Backup & Replication
- CVE-2023-26359 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2023-24489 Citrix Content Collaboration ShareFile Improper Access Control Vulnerability Citrix · Content Collaboration
- CVE-2023-38180 Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability Microsoft · .NET Core and Visual Studio
- CVE-2017-18368 Zyxel P660HN-T1A Routers Command Injection Vulnerability Zyxel · P660HN-T1A Routers
- CVE-2023-35081 Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2023-37580 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2023-38606 Apple Multiple Products Kernel Unspecified Vulnerability Apple · Multiple Products
- CVE-2023-35078 Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2023-29298 Adobe ColdFusion Improper Access Control Vulnerability Adobe · ColdFusion
- CVE-2023-38205 Adobe ColdFusion Improper Access Control Vulnerability Adobe · ColdFusion
- CVE-2023-3519 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2022-29303 SolarView Compact Command Injection Vulnerability SolarView · Compact
- CVE-2023-37450 Apple Multiple Products WebKit Code Execution Vulnerability Apple · Multiple Products
- CVE-2023-32046 Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2023-32049 Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2023-35311 Microsoft Outlook Security Feature Bypass Vulnerability Microsoft · Outlook
- CVE-2023-36874 Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-31199 Netwrix Auditor Insecure Object Deserialization Vulnerability Netwrix · Auditor
- CVE-2021-29256 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm · Mali Graphics Processing Unit (GPU)
- CVE-2019-17621 D-Link DIR-859 Router Command Execution Vulnerability D-Link · DIR-859 Router
- CVE-2019-20500 D-Link DWL-2600AP Access Point Command Injection Vulnerability D-Link · DWL-2600AP Access Point
- CVE-2021-25487 Samsung Mobile Devices Out-of-Bounds Read Vulnerability Samsung · Mobile Devices
- CVE-2021-25489 Samsung Mobile Devices Improper Input Validation Vulnerability Samsung · Mobile Devices
- CVE-2021-25394 Samsung Mobile Devices Race Condition Vulnerability Samsung · Mobile Devices
- CVE-2021-25395 Samsung Mobile Devices Race Condition Vulnerability Samsung · Mobile Devices
- CVE-2021-25371 Samsung Mobile Devices Unspecified Vulnerability Samsung · Mobile Devices
- CVE-2021-25372 Samsung Mobile Devices Improper Boundary Check Vulnerability Samsung · Mobile Devices
- CVE-2023-32434 Apple Multiple Products Integer Overflow Vulnerability Apple · Multiple Products
- CVE-2023-32435 Apple Multiple Products WebKit Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2023-32439 Apple Multiple Products WebKit Type Confusion Vulnerability Apple · Multiple Products
- CVE-2023-20867 VMware Tools Authentication Bypass Vulnerability VMware · Tools
- CVE-2023-27992 Zyxel Multiple NAS Devices Command Injection Vulnerability Zyxel · Multiple Network-Attached Storage (NAS) Devices
- CVE-2023-20887 Vmware Aria Operations for Networks Command Injection Vulnerability VMware · Aria Operations for Networks
- CVE-2020-35730 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube · Roundcube Webmail
- CVE-2020-12641 Roundcube Webmail Remote Code Execution Vulnerability Roundcube · Roundcube Webmail
- CVE-2021-44026 Roundcube Webmail SQL Injection Vulnerability Roundcube · Roundcube Webmail
- CVE-2016-9079 Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability Mozilla · Firefox, Firefox ESR, and Thunderbird
- CVE-2016-0165 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2023-27997 Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability Fortinet · FortiOS and FortiProxy SSL-VPN
- CVE-2023-3079 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2023-33009 Zyxel Multiple Firewalls Buffer Overflow Vulnerability Zyxel · Multiple Firewalls
- CVE-2023-33010 Zyxel Multiple Firewalls Buffer Overflow Vulnerability Zyxel · Multiple Firewalls
- CVE-2023-34362 Progress MOVEit Transfer SQL Injection Vulnerability Progress · MOVEit Transfer
- CVE-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability Zyxel · Multiple Firewalls
- CVE-2023-2868 Barracuda Networks ESG Appliance Improper Input Validation Vulnerability Barracuda Networks · Email Security Gateway (ESG) Appliance
- CVE-2023-32409 Apple Multiple Products WebKit Sandbox Escape Vulnerability Apple · Multiple Products
- CVE-2023-28204 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Apple · Multiple Products
- CVE-2023-32373 Apple Multiple Products WebKit Use-After-Free Vulnerability Apple · Multiple Products
- CVE-2004-1464 Cisco IOS Denial-of-Service Vulnerability Cisco · IOS
- CVE-2016-6415 Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability Cisco · IOS, IOS XR, and IOS XE
- CVE-2023-21492 Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability Samsung · Mobile Devices
- CVE-2023-25717 Multiple Ruckus Wireless Products CSRF and RCE Vulnerability Ruckus Wireless · Multiple Products
- CVE-2021-3560 Red Hat Polkit Incorrect Authorization Vulnerability Red Hat · Polkit
- CVE-2014-0196 Linux Kernel Race Condition Vulnerability Linux · Kernel
- CVE-2010-3904 Linux Kernel Improper Input Validation Vulnerability Linux · Kernel
- CVE-2015-5317 Jenkins User Interface (UI) Information Disclosure Vulnerability Jenkins · Jenkins User Interface (UI)
- CVE-2016-3427 Oracle Java SE and JRockit Unspecified Vulnerability Oracle · Java SE and JRockit
- CVE-2016-8735 Apache Tomcat Remote Code Execution Vulnerability Apache · Tomcat
- CVE-2023-29336 Microsoft Win32K Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2023-1389 TP-Link Archer AX-21 Command Injection Vulnerability TP-Link · Archer AX21
- CVE-2021-45046 Apache Log4j2 Deserialization of Untrusted Data Vulnerability Apache · Log4j2
- CVE-2023-21839 Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server
- CVE-2023-28432 MinIO Information Disclosure Vulnerability MinIO · MinIO
- CVE-2023-27350 PaperCut MF/NG Improper Access Control Vulnerability PaperCut · MF/NG
- CVE-2023-2136 Google Chrome Skia Integer Overflow Vulnerability Google · Chromium Skia
- CVE-2017-6742 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2019-8526 Apple macOS Use-After-Free Vulnerability Apple · macOS
- CVE-2023-2033 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2023-20963 Android Framework Privilege Escalation Vulnerability Android · Framework
- CVE-2023-29492 Novi Survey Insecure Deserialization Vulnerability Novi Survey · Novi Survey
- CVE-2023-28252 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2023-28205 Apple Multiple Products WebKit Use-After-Free Vulnerability Apple · Multiple Products
- CVE-2023-28206 Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2021-27876 Veritas Backup Exec Agent File Access Vulnerability Veritas · Backup Exec Agent
- CVE-2021-27877 Veritas Backup Exec Agent Improper Authentication Vulnerability Veritas · Backup Exec Agent
- CVE-2021-27878 Veritas Backup Exec Agent Command Execution Vulnerability Veritas · Backup Exec Agent
- CVE-2019-1388 Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2023-26083 Arm Mali GPU Kernel Driver Information Disclosure Vulnerability Arm · Mali Graphics Processing Unit (GPU)
- CVE-2022-27926 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2013-3163 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2017-7494 Samba Remote Code Execution Vulnerability Samba · Samba
- CVE-2022-42948 Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability Fortra · Cobalt Strike
- CVE-2022-39197 Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability Fortra · Cobalt Strike
- CVE-2021-30900 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2022-38181 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm · Mali Graphics Processing Unit (GPU)
- CVE-2023-0266 Linux Kernel Use-After-Free Vulnerability Linux · Kernel
- CVE-2022-3038 Google Chromium Network Service Use-After-Free Vulnerability Google · Chromium Network Service
- CVE-2022-22706 Arm Mali GPU Kernel Driver Unspecified Vulnerability Arm · Mali Graphics Processing Unit (GPU)
- CVE-2023-26360 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2023-23397 Microsoft Office Outlook Privilege Escalation Vulnerability Microsoft · Office
- CVE-2023-24880 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2022-41328 Fortinet FortiOS Path Traversal Vulnerability Fortinet · FortiOS
- CVE-2021-39144 XStream Remote Code Execution Vulnerability XStream · XStream
- CVE-2020-5741 Plex Media Server Remote Code Execution Vulnerability Plex · Media Server
- CVE-2022-28810 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability Zoho · ManageEngine
- CVE-2022-33891 Apache Spark Command Injection Vulnerability Apache · Spark
- CVE-2022-35914 Teclib GLPI Remote Code Execution Vulnerability Teclib · GLPI
- CVE-2022-36537 ZK Framework AuUploader Unspecified Vulnerability ZK Framework · AuUploader
- CVE-2022-47986 IBM Aspera Faspex Code Execution Vulnerability IBM · Aspera Faspex
- CVE-2022-41223 Mitel MiVoice Connect Code Injection Vulnerability Mitel · MiVoice Connect
- CVE-2022-40765 Mitel MiVoice Connect Command Injection Vulnerability Mitel · MiVoice Connect
- CVE-2022-46169 Cacti Command Injection Vulnerability Cacti · Cacti
- CVE-2023-21715 Microsoft Office Publisher Security Feature Bypass Vulnerability Microsoft · Office
- CVE-2023-23376 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2023-23529 Apple Multiple Products WebKit Type Confusion Vulnerability Apple · Multiple Products
- CVE-2023-21823 Microsoft Windows Graphic Component Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2015-2291 Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability Intel · Ethernet Diagnostics Driver for Windows
- CVE-2022-24990 TerraMaster OS Remote Command Execution Vulnerability TerraMaster · TerraMaster OS
- CVE-2023-0669 Fortra GoAnywhere MFT Remote Code Execution Vulnerability Fortra · GoAnywhere MFT
- CVE-2022-21587 Oracle E-Business Suite Unspecified Vulnerability Oracle · E-Business Suite
- CVE-2023-22952 Multiple SugarCRM Products Remote Code Execution Vulnerability SugarCRM · Multiple Products
- CVE-2017-11357 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability Telerik · User Interface (UI) for ASP.NET AJAX
- CVE-2022-47966 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Zoho · ManageEngine
Nothing on this page matches that filter.