Library of exploited vulnerabilities
Every software flaw that attackers are known to have used, from the catalogue the US Cybersecurity and Infrastructure Security Agency (CISA) keeps since November 2021. Updated every hour.
- 1,764exploited vulnerabilities
- 361used by ransomware
- 291vendors
1,764 vulnerabilities
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Mar 25, 2022 | Improper Input Validation | Apache Struts | Critical 9.8 | >99.9% |
| Mar 25, 2022 | PHP-CGI Query String Parameter | PHP PHP | Critical 9.8 | >99.9% |
| Mar 25, 2022 | Privilege Escalation | Exim Exim | High 7.8 | 18% |
| Mar 25, 2022 | Heap-Based Buffer Overflow | Exim Exim | Critical 9.8 | 72% |
| Mar 25, 2022 | Border Gateway Protocol (BGP) Denial-of-Service | Cisco IOS XR | High 7.5 | 5.7% |
| Mar 25, 2022 | Directory Traversal | Adobe ColdFusion | High 7.5 | 99.7% |
| Mar 25, 2022 | Border Gateway Protocol (BGP) Denial-of-Service | Cisco IOS XR | Medium 5.9 | 3.3% |
| Mar 25, 2022 | Remote Code Execution | phpMyAdmin phpMyAdmin | Critical 9.8 | 97% |
| Mar 25, 2022 | Reader and Adobe Acrobat Stack-Based Buffer Overflow | Adobe Reader and Acrobat | High 8.8 | 97% |
| Mar 25, 2022 | HP OpenView Network Node Manager Remote Code Execution | Hewlett Packard (HP) OpenView Network Node Manager | Critical 9.8 | 75% |
| Mar 15, 2022 | Buffer Overflow | SonicWall SonicOS | Critical 9.8 | 27% |
| Mar 15, 2022 | Universal Plug and Play (UPnP) Service Privilege Escalation | Microsoft Windows | High 7.8 | 30% |
| Mar 15, 2022 | Privilege Escalation | Microsoft Windows | High 7.8 | 19% |
| Mar 15, 2022 | Error Reporting Manager Privilege Escalation | Microsoft Windows | High 7.8 | 3.5% |
| Mar 15, 2022 | AppX Deployment Server Privilege Escalation | Microsoft Windows | High 7.8 | 12% |
| Mar 15, 2022 | Privilege Escalation | Microsoft Win32k | High 7.8 | 9.9% |
| Mar 15, 2022 | AppX Deployment Service (AppXSVC) Privilege Escalation | Microsoft Windows | High 7.8 | 1.8% |
| Mar 15, 2022 | Privilege Escalation | Microsoft Task Scheduler | High 7.8 | 6.1% |
| Mar 15, 2022 | AppX Deployment Service (AppXSVC) Privilege Escalation | Microsoft Windows | High 7.8 | 6.9% |
| Mar 15, 2022 | AppX Deployment Service (AppXSVC) Privilege Escalation | Microsoft Windows | High 7.8 | 41% |
| Mar 15, 2022 | Privilege Escalation | Microsoft Windows | High 7.8 | 4.7% |
| Mar 15, 2022 | Privilege Escalation | Microsoft Win32k | High 7.0 | 73% |
| Mar 15, 2022 | Transaction Manager Privilege Escalation | Microsoft Windows | High 7.8 | 57% |
| Mar 15, 2022 | Kernel Privilege Escalation | Microsoft Windows | High 7.8 | 20% |
| Mar 15, 2022 | Memory Corruption | Microsoft Win32k | High 8.2 | 10% |
| Mar 7, 2022 | Use-After-Free | Mozilla Firefox | Critical 9.6 | 2.4% |
| Mar 7, 2022 | Use-After-Free | Mozilla Firefox | High 8.8 | 14% |
| Mar 7, 2022 | Server Side Request Forgery (SSRF) | VMware vCenter Server and Cloud Foundation | Medium 5.3 | 88% |
| Mar 7, 2022 | Code Injection | Pulse Secure Pulse Connect Secure | High 7.2 | 32% |
| Mar 7, 2022 | Server-Side Template Injection | Atlassian Jira Server and Data Center | Critical 9.8 | 85% |
| Mar 7, 2022 | DGN2200 Remote Code Execution | NETGEAR Wireless Router DGN2200 | Critical 9.8 | 69% |
| Mar 7, 2022 | Remote Code Execution | NETGEAR Multiple Routers | High 8.8 | 99.8% |
| Mar 7, 2022 | Information Disclosure | Adobe ColdFusion | High 7.5 | 66% |
| Mar 7, 2022 | Directory Traversal | Adobe ColdFusion | High 7.5 | 66% |
| Mar 7, 2022 | Authentication Bypass | Adobe ColdFusion | Critical 9.8 | 94% |
| Mar 7, 2022 | Information Disclosure | Adobe BlazeDS | Medium 6.5 | 90% |
| Mar 3, 2022 | Small Business RV Series Routers Stack-based Buffer Overflow | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | Critical 10.0 | 15% |
| Mar 3, 2022 | Small Business RV Series Routers Stack-based Buffer Overflow | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | Critical 10.0 | 9.2% |
| Mar 3, 2022 | Small Business RV Series Routers Stack-based Buffer Overflow | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | Critical 10.0 | 9.7% |
| Mar 3, 2022 | Small Business RV Series Routers Stack-based Buffer Overflow | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | Critical 10.0 | 5.7% |
| Mar 3, 2022 | Small Business RV Series Routers Stack-based Buffer Overflow | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | Critical 10.0 | 72% |
| Mar 3, 2022 | Installer Privilege Escalation | Microsoft Windows | Medium 5.5 | 19% |
| Mar 3, 2022 | Improper Privilege Management | Apache Tomcat | Critical 9.8 | 99.3% |
| Mar 3, 2022 | Out-of-Bounds Read | Treck TCP/IP stack IPv6 | Medium 5.4 | 18% |
| Mar 3, 2022 | Out-of-bounds Write | Exim Exim Internet Mailer | Critical 9.8 | 42% |
| Mar 3, 2022 | Small Business Routers Improper Input Validation | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | High 7.2 | 96% |
| Mar 3, 2022 | Remote Code Execution | Microsoft Excel | High 8.8 | 22% |
| Mar 3, 2022 | Privilege Escalation | Microsoft Exchange Server | High 7.4 | 27% |
| Mar 3, 2022 | Scripting Engine Type Confusion | ChakraCore ChakraCore scripting engine | High 7.5 | 75% |
| Mar 3, 2022 | Denial-of-Service | Cisco IOS Software | Medium 6.8 | 4.9% |
Most targeted vendors
- Microsoft 390
- Cisco 102
- Apple 95
- Adobe 83
- Google 76
- Oracle 46
- Apache 41
- Ivanti 36
- Fortinet 32
- Linux 32
- Citrix 27
- D-Link 26
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.