Library of exploited vulnerabilities
Every software flaw that attackers are known to have used, from the catalogue the US Cybersecurity and Infrastructure Security Agency (CISA) keeps since November 2021. Updated every hour.
- 1,762exploited vulnerabilities
- 361used by ransomware
- 291vendors
1,762 vulnerabilities
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 8, 2022 | OS Privilege Escalation | Android Android OS | High 7.8 | 41% |
| Aug 25, 2022 | Unrestricted Upload of File | dotCMS dotCMS | Critical 9.8 | 91% |
| Aug 25, 2022 | Insecure Default Initialization of Resource | Apache CouchDB | Critical 9.8 | 93% |
| Aug 25, 2022 | Authentication Bypass | Apache APISIX | Critical 9.8 | 96% |
| Aug 25, 2022 | Function Remote Code Execution | VMware Tanzu Spring Cloud | Critical 9.8 | 99.9% |
| Aug 25, 2022 | Heap Buffer Overflow | WebRTC WebRTC | High 8.8 | 71% |
| Aug 25, 2022 | Authentication Bypass | Grafana Labs Grafana | Critical 9.8 | 99.9% |
| Aug 25, 2022 | Improper Input Validation | Delta Electronics DOPSoft 2 | High 7.8 | 76% |
| Aug 25, 2022 | Sandbox Bypass | Apple iOS, macOS, watchOS | High 7.5 | 3.7% |
| Aug 25, 2022 | Improper Link Resolution | PEAR Archive_Tar | High 7.5 | 71% |
| Aug 25, 2022 | Deserialization of Untrusted Data | PEAR Archive_Tar | High 7.8 | 85% |
| Aug 22, 2022 | Reflected Amplification Denial-of-Service | Palo Alto Networks PAN-OS | High 8.6 | 2.7% |
| Aug 18, 2022 | Out-of-Bounds Write | Apple iOS and macOS | High 7.8 | 3.3% |
| Aug 18, 2022 | Out-of-Bounds Write | Apple iOS and macOS | High 8.8 | 9.9% |
| Aug 18, 2022 | Insufficient Input Validation | Google Chromium Intents | Medium 6.5 | 4.6% |
| Aug 18, 2022 | Domain Services Privilege Escalation | Microsoft Active Directory | High 8.8 | 84% |
| Aug 18, 2022 | HTTP Request Smuggling | SAP Multiple Products | Critical 9.8 | 98% |
| Aug 18, 2022 | Runtime Remote Code Execution | Microsoft Windows | High 7.8 | 54% |
| Aug 18, 2022 | Remote Code Execution | Palo Alto Networks PAN-OS | Critical 9.8 | 98% |
| Aug 11, 2022 | Authentication Bypass | Synacor Zimbra Collaboration Suite (ZCS) | Critical 9.8 | 92% |
| Aug 11, 2022 | Arbitrary File Upload | Synacor Zimbra Collaboration Suite (ZCS) | High 7.2 | 99% |
| Aug 9, 2022 | Support Diagnostic Tool (MSDT) Remote Code Execution | Microsoft Windows | High 7.8 | 68% |
| Aug 9, 2022 | Directory Traversal | RARLAB UnRAR | Critical 9.8 | 99.2% |
| Aug 4, 2022 | Command Injection | Synacor Zimbra Collaboration Suite (ZCS) | Critical 9.8 | 94% |
| Jul 29, 2022 | Questions For Confluence App Hard-coded Credentials | Atlassian Confluence | Critical 9.8 | 98% |
| Jul 12, 2022 | Client Server Runtime Subsystem (CSRSS) Privilege Escalation | Microsoft Windows | High 7.8 | 19% |
| Jul 1, 2022 | LSA Spoofing | Microsoft Windows | High 8.1 | 10% |
| Jun 27, 2022 | Data Validation | Mitel MiVoice Connect | Critical 9.8 | 55% |
| Jun 27, 2022 | Out-of-Bounds Read and Write | Red Hat Polkit | High 7.8 | 95% |
| Jun 27, 2022 | Buffer Overflow | Apple iOS and iPadOS | High 7.8 | 2.9% |
| Jun 27, 2022 | Security Bypass | Google Chromium PopupBlocker | Medium 6.5 | 17% |
| Jun 27, 2022 | Memory Corruption | Apple Multiple Products | High 7.8 | 3.2% |
| Jun 27, 2022 | Memory Corruption | Apple Multiple Products | High 7.8 | 15% |
| Jun 27, 2022 | Use-After-Free | Apple Multiple Products | High 7.8 | 18% |
| Jun 27, 2022 | Memory Corruption | Apple Multiple Products | High 7.8 | 2.4% |
| Jun 14, 2022 | Support Diagnostic Tool (MSDT) Remote Code Execution | Microsoft Windows | High 7.8 | 99.2% |
| Jun 9, 2022 | Unrestricted File Upload | SAP NetWeaver | Critical 9.9 | 37% |
| Jun 9, 2022 | Information Disclosure | SAP NetWeaver | Medium 5.3 | 52% |
| Jun 9, 2022 | SQL Injection | SAP NetWeaver | Critical 9.8 | 72% |
| Jun 8, 2022 | Path Traversal | QNAP Photo Station | Critical 9.8 | 89% |
| Jun 8, 2022 | Path Traversal | QNAP Photo Station | Critical 9.8 | 83% |
| Jun 8, 2022 | Improper Input Validation | QNAP QTS | Critical 9.8 | 14% |
| Jun 8, 2022 | Improper Access Control | QNAP Photo Station | Critical 9.8 | 88% |
| Jun 8, 2022 | Out-of-Bounds Write | Google Chromium V8 | Medium 6.5 | 56% |
| Jun 8, 2022 | Deserialization of Untrusted Data | Cisco RV Series Routers | High 8.8 | 5.5% |
| Jun 8, 2022 | Integer Overflow | Google Chromium V8 | High 8.8 | 60% |
| Jun 8, 2022 | Double Free | Adobe Acrobat and Reader | High 8.8 | 36% |
| Jun 8, 2022 | Out-of-Bounds Write | Google Chromium V8 | High 8.8 | 36% |
| Jun 8, 2022 | Remote Code Execution | Google Chromium V8 | High 8.8 | 85% |
| Jun 8, 2022 | Buffer Overflow | NETGEAR Multiple Devices | Critical 9.8 | 46% |
Most targeted vendors
- Microsoft 390
- Cisco 101
- Apple 95
- Adobe 83
- Google 76
- Oracle 46
- Apache 41
- Ivanti 36
- Fortinet 32
- Linux 32
- Citrix 27
- D-Link 26
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.