Library of exploited vulnerabilities
Every software flaw that attackers are known to have used, from the catalogue the US Cybersecurity and Infrastructure Security Agency (CISA) keeps since November 2021. Updated every hour.
- 1,764exploited vulnerabilities
- 361used by ransomware
- 291vendors
1,764 vulnerabilities
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Mar 3, 2022 | Denial-of-Service | Cisco IOS Software | Medium 6.8 | 4.9% |
| Mar 3, 2022 | Buffer Overflow | Cisco IOS, XR, and XE Software | High 8.0 | 3.5% |
| Mar 3, 2022 | IOS Software and Cisco IOS XE Software Improper Input Validation | Cisco IOS XE Software | High 8.6 | 7.6% |
| Mar 3, 2022 | Improper Input Validation | Cisco IOS and IOS XE Software | High 8.6 | 7.6% |
| Mar 3, 2022 | Improper Input Validation | Cisco IOS and IOS XE Software | High 8.6 | 7.8% |
| Mar 3, 2022 | Buffer Overflow | Cisco IOS, XR, and XE Software | High 8.8 | 3.4% |
| Mar 3, 2022 | Resource Management Errors | Cisco IOS Software | Medium 6.3 | 4.1% |
| Mar 3, 2022 | IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service | Cisco IOS Software and Cisco IOS XE Software | High 7.5 | 6.9% |
| Mar 3, 2022 | IOS and XE Software Internet Key Exchange Memory Leak | Cisco IOS Software and Cisco IOS XE Software | High 8.6 | 7.2% |
| Mar 3, 2022 | Smart Install Denial-of-Service | Cisco IOS Software and Cisco IOS XE Software | High 7.5 | 9.4% |
| Mar 3, 2022 | Catalyst Bidirectional Forwarding Detection Denial-of-Service | Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | High 8.6 | 7.7% |
| Mar 3, 2022 | Integrated Services Module for VPN Denial-of-Service | Cisco IOS Software | High 7.5 | 7.1% |
| Mar 3, 2022 | IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution | Cisco IOS and IOS XE Software | Critical 9.8 | 14% |
| Mar 3, 2022 | Improper Restriction of Operations | Microsoft Malware Protection Engine | High 7.8 | 72% |
| Mar 3, 2022 | SNMP Remote Code Execution | Cisco IOS software | High 8.8 | 7.3% |
| Mar 3, 2022 | SNMP Remote Code Execution | Cisco IOS and IOS XE Software | High 8.8 | 11% |
| Mar 3, 2022 | SNMP Remote Code Execution | Cisco IOS and IOS XE Software | High 8.8 | 11% |
| Mar 3, 2022 | SNMP Remote Code Execution | Cisco IOS and IOS XE Software | High 8.8 | 11% |
| Mar 3, 2022 | SNMP Remote Code Execution | Cisco IOS and IOS XE Software | High 8.8 | 11% |
| Mar 3, 2022 | SNMP Remote Code Execution | Cisco IOS and IOS XE Software | High 8.8 | 45% |
| Mar 3, 2022 | SNMP Remote Code Execution | Cisco IOS and IOS XE Software | High 8.8 | 70% |
| Mar 3, 2022 | IOS Software and Cisco IOS XE Software Denial-of-Service | Cisco IOS and IOS XE Software | Medium 6.5 | 2.1% |
| Mar 3, 2022 | IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service | Cisco IOS and IOS XE Software | High 7.5 | 6.2% |
| Mar 3, 2022 | Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service | Cisco IOS XE Software | Medium 5.9 | 5.2% |
| Mar 3, 2022 | DHCP Remote Code Execution | Cisco IOS and IOS XE Software | Critical 9.8 | 14% |
| Mar 3, 2022 | VPLS Denial-of-Service | Cisco Catalyst 6800 Series Switches | Medium 6.5 | 2.0% |
| Mar 3, 2022 | Internet Key Exchange Denial-of-Service | Cisco IOS and IOS XE Software | High 7.5 | 7.1% |
| Mar 3, 2022 | for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service | Cisco IOS software | High 7.5 | 7.1% |
| Mar 3, 2022 | Common Industrial Protocol Request Denial-of-Service | Cisco IOS software | High 7.5 | 7.1% |
| Mar 3, 2022 | Common Industrial Protocol Request Denial-of-Service | Cisco IOS software | High 7.5 | 7.1% |
| Mar 3, 2022 | for Cisco Integrated Services Routers Denial-of-Service | Cisco IOS software | Medium 6.5 | 2.2% |
| Mar 3, 2022 | Network Address Translation Denial-of-Service | Cisco IOS software | High 7.5 | 7.1% |
| Mar 3, 2022 | Remote Code Execution | Microsoft Office | High 7.8 | 81% |
| Mar 3, 2022 | Type Confusion | Adobe Flash Player | High 8.8 | 12% |
| Mar 3, 2022 | Use-After-Free | Microsoft Office | High 7.8 | 78% |
| Mar 3, 2022 | Privilege Escalation | Microsoft Graphics Device Interface (GDI) | High 7.8 | 3.1% |
| Mar 3, 2022 | 1543-1 Improper Privilege Management | Siemens SIMATIC CP | High 7.5 | 3.6% |
| Mar 3, 2022 | Use-After-Free | Adobe Flash Player | High 8.8 | 25% |
| Mar 3, 2022 | Office Security Feature Bypass | Microsoft Excel | High 7.8 | 58% |
| Mar 3, 2022 | Memory Corruption | Microsoft Office | High 7.8 | 58% |
| Mar 3, 2022 | Race Condition | Linux Kernel | High 7.0 | 84% |
| Mar 3, 2022 | Arbitrary Code Execution | Adobe Flash Player | High 7.8 | 94% |
| Mar 3, 2022 | Arbitrary Code Execution | Adobe Flash Player | High 7.8 | 22% |
| Mar 3, 2022 | Secondary Logon Service Privilege Escalation | Microsoft Windows | High 7.8 | 37% |
| Mar 3, 2022 | Arbitrary Code Execution | Adobe Flash Player | High 7.8 | 65% |
| Mar 3, 2022 | Use-After-Free | Adobe Flash Player | High 7.8 | 99% |
| Mar 3, 2022 | Integrity Check | Oracle Java SE | Medium 5.3 | 14% |
| Mar 3, 2022 | Memory Corruption | Adobe Flash Player | High 7.8 | 74% |
| Mar 3, 2022 | and Java SE Embedded Remote Code Execution | Oracle Java SE | Critical 9.8 | 25% |
| Mar 3, 2022 | Malformed EPS File | Microsoft Office | High 7.8 | 86% |
Most targeted vendors
- Microsoft 390
- Cisco 102
- Apple 95
- Adobe 83
- Google 76
- Oracle 46
- Apache 41
- Ivanti 36
- Fortinet 32
- Linux 32
- Citrix 27
- D-Link 26
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.