Library of exploited vulnerabilities
Every software flaw that attackers are known to have used, from the catalogue the US Cybersecurity and Infrastructure Security Agency (CISA) keeps since November 2021. Updated every hour.
- 1,764exploited vulnerabilities
- 361used by ransomware
- 291vendors
1,764 vulnerabilities
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Nov 3, 2021 | Privilege Escalation | Docker Desktop Community Edition | High 7.8 | 49% |
| Nov 3, 2021 | Scripting Engine Memory Corruption | Microsoft Internet Explorer | High 7.5 | 77% |
| Nov 3, 2021 | Scripting Engine Memory Corruption | Microsoft Internet Explorer | High 7.5 | 52% |
| Nov 3, 2021 | XML External Entity (XXE) Processing | Citrix StoreFront Server | High 7.5 | 30% |
| Nov 3, 2021 | Privilege Escalation | Microsoft Windows | High 7.8 | 19% |
| Nov 3, 2021 | Privilege Common Log File System (CLFS) Escalation | Microsoft Windows | High 7.8 | 1.4% |
| Nov 3, 2021 | Remote Code Execution | Citrix Workspace Application and Receiver for Windows | Critical 9.8 | 8.1% |
| Nov 3, 2021 | Remote Code Execution | Atlassian Crowd and Crowd Data Center | Critical 9.8 | 95% |
| Nov 3, 2021 | Pulse Connect Secure and Policy Secure Command Injection | Ivanti Pulse Connect Secure and Pulse Policy Secure | High 8.0 | 99% |
| Nov 3, 2021 | Arbitrary File Read | Ivanti Pulse Connect Secure | Critical 9.9 | >99.9% |
| Nov 3, 2021 | Error Reporting (WER) Privilege Escalation | Microsoft Windows | High 7.8 | 5.2% |
| Nov 3, 2021 | Privilege Escalation | Microsoft Win32k | High 7.8 | 4.2% |
| Nov 3, 2021 | Privilege Escalation | Microsoft Win32k | High 7.8 | 53% |
| Nov 3, 2021 | Privilege Escalation | Microsoft Win32k | High 7.8 | 45% |
| Nov 3, 2021 | Privilege Escalation | Microsoft Win32k | High 7.8 | 1.9% |
| Nov 3, 2021 | Remote Code Execution | Microsoft Remote Desktop Services | Critical 9.8 | >99.9% |
| Nov 3, 2021 | Remote Code Execution | Microsoft SharePoint | Critical 9.8 | 99.9% |
| Nov 3, 2021 | Remote Code Execution | Microsoft MSHTML | High 8.8 | 53% |
| Nov 3, 2021 | Privilege Escalation | Apache HTTP Server | High 7.8 | 65% |
| Nov 3, 2021 | Scripting Engine Memory Corruption | Microsoft Internet Explorer | High 7.5 | 30% |
| Nov 3, 2021 | Core Remote Code Execution | Drupal Drupal Core | Critical 9.8 | >99.9% |
| Nov 3, 2021 | Buffer Overflow | Exim Exim | Critical 9.8 | 82% |
| Nov 3, 2021 | Deserialization of Untrusted Data | Adobe ColdFusion | Critical 9.8 | 62% |
| Nov 3, 2021 | Use-After-Free | Adobe Flash Player | High 7.8 | 90% |
| Nov 3, 2021 | Path Traversal | SAP Customer Relationship Management (CRM) | Medium 6.6 | 29% |
| Nov 3, 2021 | "noneCms" Remote Code Execution | ThinkPHP noneCms | Critical 9.8 | 99.5% |
| Nov 3, 2021 | Inadequate Encryption Strength | DotNetNuke (DNN) DotNetNuke (DNN) | High 7.5 | 74% |
| Nov 3, 2021 | Unrestricted File Upload | Adobe ColdFusion | Critical 9.8 | >99.9% |
| Nov 3, 2021 | Inadequate Encryption Strength | DotNetNuke (DNN) DotNetNuke (DNN) | High 7.5 | 76% |
| Nov 3, 2021 | Command Injection | Tenda AC7, AC9, and AC10 Routers | Critical 9.8 | 8.5% |
| Nov 3, 2021 | SSL VPN Path Traversal | Fortinet FortiOS | Critical 9.1 | >99.9% |
| Nov 3, 2021 | Remote Code Execution | Apache Struts | High 8.1 | >99.9% |
| Nov 3, 2021 | Memory Corruption | Microsoft Office | High 7.8 | 93% |
| Nov 3, 2021 | Memory Corruption | Microsoft Office | High 8.8 | 95% |
| Nov 3, 2021 | Denial-of-Service | Cisco Adaptive Security Appliance (ASA) | High 7.5 | 99.9% |
| Nov 3, 2021 | Software Smart Install Remote Code Execution | Cisco IOS and IOS XE | High 7.5 | 99.5% |
| Nov 3, 2021 | Remote Code Execution | DotNetNuke (DNN) DotNetNuke (DNN) | High 8.8 | 95% |
| Nov 3, 2021 | Deserialization of Untrusted Data | Apache Struts | High 8.1 | 99.4% |
| Nov 3, 2021 | Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness | Progress ASP.NET AJAX and Sitefinity | Critical 9.8 | 75% |
| Nov 3, 2021 | Remote Code Execution | Microsoft .NET Framework | High 7.8 | 89% |
| Nov 3, 2021 | Windows Server Buffer Overflow | Microsoft Internet Information Services (IIS) | Critical 9.8 | 99.8% |
| Nov 3, 2021 | Messaging Gateway Remote Code Execution | Symantec Symantec Messaging Gateway | High 8.8 | 36% |
| Nov 3, 2021 | Remote Code Execution | Apache Struts | Critical 9.8 | >99.9% |
| Nov 3, 2021 | Webmail File Disclosure | Roundcube Roundcube Webmail | High 7.8 | 46% |
| Nov 3, 2021 | Memory Corruption | Microsoft Office | High 7.8 | 99.9% |
| Nov 3, 2021 | Outlook Security Feature Bypass | Microsoft Office | High 7.8 | 60% |
| Nov 3, 2021 | Remote Code Execution | Microsoft Office and WordPad | High 7.8 | 99.5% |
| Nov 3, 2021 | Server Message Block (SMBv1) Remote Code Execution | Microsoft Windows | High 8.8 | 93% |
| Nov 3, 2021 | XML External Entity (XXE) | SAP NetWeaver | Medium 6.5 | 24% |
| Nov 3, 2021 | Privilege Escalation | Microsoft Win32k | High 7.8 | 81% |
Most targeted vendors
- Microsoft 390
- Cisco 102
- Apple 95
- Adobe 83
- Google 76
- Oracle 46
- Apache 41
- Ivanti 36
- Linux 32
- Fortinet 32
- Citrix 27
- VMware 26
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.