Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,709 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2022-44877 CWP Control Web Panel OS Command Injection Vulnerability CWP · Control Web Panel
- CVE-2022-41080 Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft · Exchange Server
- CVE-2023-21674 Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-5430 TIBCO JasperReports Server Information Disclosure Vulnerability TIBCO · JasperReports
- CVE-2018-18809 TIBCO JasperReports Library Directory Traversal Vulnerability TIBCO · JasperReports
- CVE-2022-42856 Apple iOS Type Confusion Vulnerability Apple · iOS
- CVE-2022-42475 Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability Fortinet · FortiOS
- CVE-2022-44698 Microsoft Defender SmartScreen Security Feature Bypass Vulnerability Microsoft · Defender
- CVE-2022-27518 Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability Citrix · Application Delivery Controller (ADC) and Gateway
- CVE-2022-26500 Veeam Backup & Replication Remote Code Execution Vulnerability Veeam · Backup & Replication
- CVE-2022-26501 Veeam Backup & Replication Remote Code Execution Vulnerability Veeam · Backup & Replication
- CVE-2022-4262 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2021-35587 Oracle Fusion Middleware Unspecified Vulnerability Oracle · Fusion Middleware
- CVE-2022-4135 Google Chromium GPU Heap Buffer Overflow Vulnerability Google · Chromium GPU
- CVE-2022-41049 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2022-41091 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2022-41073 Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-41125 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-41128 Microsoft Windows Scripting Languages Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2021-25337 Samsung Mobile Devices Improper Access Control Vulnerability Samsung · Mobile Devices
- CVE-2021-25369 Samsung Mobile Devices Improper Access Control Vulnerability Samsung · Mobile Devices
- CVE-2021-25370 Samsung Mobile Devices Memory Corruption Vulnerability Samsung · Mobile Devices
- CVE-2022-3723 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2022-42827 Apple iOS and iPadOS Out-of-Bounds Write Vulnerability Apple · iOS and iPadOS
- CVE-2020-3433 Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability Cisco · AnyConnect Secure
- CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability Cisco · AnyConnect Secure
- CVE-2018-19323 GIGABYTE Multiple Products Privilege Escalation Vulnerability GIGABYTE · Multiple Products
- CVE-2018-19322 GIGABYTE Multiple Products Code Execution Vulnerability GIGABYTE · Multiple Products
- CVE-2018-19321 GIGABYTE Multiple Products Privilege Escalation Vulnerability GIGABYTE · Multiple Products
- CVE-2018-19320 GIGABYTE Multiple Products Unspecified Vulnerability GIGABYTE · Multiple Products
- CVE-2022-41352 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2021-3493 Linux Kernel Privilege Escalation Vulnerability Linux · Kernel
- CVE-2022-40684 Fortinet Multiple Products Authentication Bypass Vulnerability Fortinet · Multiple Products
- CVE-2022-41033 Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability Microsoft · Windows COM+ Event System Service
- CVE-2022-41082 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2022-41040 Microsoft Exchange Server Server-Side Request Forgery Vulnerability Microsoft · Exchange Server
- CVE-2022-36804 Atlassian Bitbucket Server and Data Center Command Injection Vulnerability Atlassian · Bitbucket Server and Data Center
- CVE-2022-3236 Sophos Firewall Code Injection Vulnerability Sophos · Firewall
- CVE-2022-35405 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Zoho · ManageEngine
- CVE-2022-40139 Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability Trend Micro · Apex One and Apex One as a Service
- CVE-2013-6282 Linux Kernel Improper Input Validation Vulnerability Linux · Kernel
- CVE-2013-2597 Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability Code Aurora · ACDB Audio Driver
- CVE-2013-2596 Linux Kernel Integer Overflow Vulnerability Linux · Kernel
- CVE-2013-2094 Linux Kernel Privilege Escalation Vulnerability Linux · Kernel
- CVE-2010-2568 Microsoft Windows Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2022-37969 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-32917 Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2022-3075 Google Chromium Mojo Insufficient Data Validation Vulnerability Google · Chromium Mojo
- CVE-2022-27593 QNAP Photo Station Externally Controlled Reference Vulnerability QNAP · Photo Station
- CVE-2022-26258 D-Link DIR-820L Remote Code Execution Vulnerability D-Link · DIR-820L
- CVE-2020-9934 Apple iOS, iPadOS, and macOS Input Validation Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2018-7445 MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability MikroTik · RouterOS
- CVE-2018-6530 D-Link Multiple Routers OS Command Injection Vulnerability D-Link · Multiple Routers
- CVE-2018-2628 Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server
- CVE-2018-13374 Fortinet FortiOS and FortiADC Improper Access Control Vulnerability Fortinet · FortiOS and FortiADC
- CVE-2017-5521 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability NETGEAR · Multiple Devices
- CVE-2011-4723 D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability D-Link · DIR-300 Router
- CVE-2011-1823 Android OS Privilege Escalation Vulnerability Android · Android OS
- CVE-2022-26352 dotCMS Unrestricted Upload of File Vulnerability dotCMS · dotCMS
- CVE-2022-24706 Apache CouchDB Insecure Default Initialization of Resource Vulnerability Apache · CouchDB
- CVE-2022-24112 Apache APISIX Authentication Bypass Vulnerability Apache · APISIX
- CVE-2022-22963 VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability VMware Tanzu · Spring Cloud
- CVE-2022-2294 WebRTC Heap Buffer Overflow Vulnerability WebRTC · WebRTC
- CVE-2021-39226 Grafana Authentication Bypass Vulnerability Grafana Labs · Grafana
- CVE-2021-38406 Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability Delta Electronics · DOPSoft 2
- CVE-2021-31010 Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability Apple · iOS, macOS, watchOS
- CVE-2020-36193 PEAR Archive_Tar Improper Link Resolution Vulnerability PEAR · Archive_Tar
- CVE-2020-28949 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability PEAR · Archive_Tar
- CVE-2022-0028 Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability Palo Alto Networks · PAN-OS
- CVE-2022-22536 SAP Multiple Products HTTP Request Smuggling Vulnerability SAP · Multiple Products
- CVE-2022-32894 Apple iOS and macOS Out-of-Bounds Write Vulnerability Apple · iOS and macOS
- CVE-2022-32893 Apple iOS and macOS Out-of-Bounds Write Vulnerability Apple · iOS and macOS
- CVE-2022-2856 Google Chromium Intents Insufficient Input Validation Vulnerability Google · Chromium Intents
- CVE-2022-26923 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft · Active Directory
- CVE-2022-21971 Microsoft Windows Runtime Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2017-15944 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability Palo Alto Networks · PAN-OS
- CVE-2022-27925 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2022-37042 Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2022-34713 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2022-30333 RARLAB UnRAR Directory Traversal Vulnerability RARLAB · UnRAR
- CVE-2022-27924 Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2022-26138 Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability Atlassian · Confluence
- CVE-2022-22047 Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-26925 Microsoft Windows LSA Spoofing Vulnerability Microsoft · Windows
- CVE-2022-29499 Mitel MiVoice Connect Data Validation Vulnerability Mitel · MiVoice Connect
- CVE-2021-30533 Google Chromium PopupBlocker Security Bypass Vulnerability Google · Chromium PopupBlocker
- CVE-2021-4034 Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Red Hat · Polkit
- CVE-2021-30983 Apple iOS and iPadOS Buffer Overflow Vulnerability Apple · iOS and iPadOS
- CVE-2020-3837 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2020-9907 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2019-8605 Apple Multiple Products Use-After-Free Vulnerability Apple · Multiple Products
- CVE-2018-4344 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2022-30190 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2021-38163 SAP NetWeaver Unrestricted File Upload Vulnerability SAP · NetWeaver
- CVE-2016-2386 SAP NetWeaver SQL Injection Vulnerability SAP · NetWeaver
- CVE-2016-2388 SAP NetWeaver Information Disclosure Vulnerability SAP · NetWeaver
- CVE-2019-7195 QNAP Photo Station Path Traversal Vulnerability QNAP · Photo Station
- CVE-2019-7194 QNAP Photo Station Path Traversal Vulnerability QNAP · Photo Station
- CVE-2019-7193 QNAP QTS Improper Input Validation Vulnerability QNAP · QTS
- CVE-2019-7192 QNAP Photo Station Improper Access Control Vulnerability QNAP · Photo Station
- CVE-2019-5825 Google Chromium V8 Out-of-Bounds Write Vulnerability Google · Chromium V8
- CVE-2019-15271 Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability Cisco · RV Series Routers
- CVE-2018-6065 Google Chromium V8 Integer Overflow Vulnerability Google · Chromium V8
- CVE-2018-4990 Adobe Acrobat and Reader Double Free Vulnerability Adobe · Acrobat and Reader
- CVE-2018-17480 Google Chromium V8 Out-of-Bounds Write Vulnerability Google · Chromium V8
- CVE-2018-17463 Google Chromium V8 Remote Code Execution Vulnerability Google · Chromium V8
- CVE-2017-6862 NETGEAR Multiple Devices Buffer Overflow Vulnerability NETGEAR · Multiple Devices
- CVE-2017-5070 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2017-5030 Google Chromium V8 Memory Corruption Vulnerability Google · Chromium V8
- CVE-2016-5198 Google Chromium V8 Out-of-Bounds Memory Vulnerability Google · Chromium V8
- CVE-2016-1646 Google Chromium V8 Out-of-Bounds Read Vulnerability Google · Chromium V8
- CVE-2013-1331 Microsoft Office Buffer Overflow Vulnerability Microsoft · Office
- CVE-2012-5054 Adobe Flash Player Integer Overflow Vulnerability Adobe · Flash Player
- CVE-2012-4969 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2012-1889 Microsoft XML Core Services Memory Corruption Vulnerability Microsoft · XML Core Services
- CVE-2012-0767 Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability Adobe · Flash Player
- CVE-2012-0754 Adobe Flash Player Memory Corruption Vulnerability Adobe · Flash Player
- CVE-2012-0151 Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2011-2462 Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability Adobe · Reader and Acrobat
- CVE-2011-0609 Adobe Flash Player Unspecified Vulnerability Adobe · Flash Player
Nothing on this page matches that filter.