Library of exploited vulnerabilities
Every software flaw that attackers are known to have used, from the catalogue the US Cybersecurity and Infrastructure Security Agency (CISA) keeps since November 2021. Updated every hour.
- 1,764exploited vulnerabilities
- 361used by ransomware
- 291vendors
1,764 vulnerabilities
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Nov 3, 2021 | Code Execution | Apache Shiro | Critical 9.8 | 93% |
| Nov 3, 2021 | Directory Traversal | SAP NetWeaver | High 7.5 | 47% |
| Nov 3, 2021 | Server-Side Request Forgery (SSRF) | ImageMagick ImageMagick | Medium 5.5 | 76% |
| Nov 3, 2021 | Arbitrary File Deletion | ImageMagick ImageMagick | Medium 5.5 | 75% |
| Nov 3, 2021 | Privilege Escalation | SolarWinds Virtualization Manager | High 7.8 | 3.7% |
| Nov 3, 2021 | OLE DLL Side Loading | Microsoft Office | High 7.8 | 43% |
| Nov 3, 2021 | Media Center Remote Code Execution | Microsoft Windows | High 7.8 | 70% |
| Nov 3, 2021 | Privilege Escalation | Microsoft Win32k | High 7.8 | 5.7% |
| Nov 3, 2021 | Deserialization of Untrusted Data | Oracle WebLogic Server | Critical 9.8 | 95% |
| Nov 3, 2021 | Memory Corruption | Microsoft Office | High 7.8 | 97% |
| Nov 3, 2021 | Group Policy Preferences Password Privilege Escalation | Microsoft Windows | High 8.8 | 65% |
| Nov 3, 2021 | Unspecified | Oracle Fusion Middleware | Critical 9.1 | 99% |
| Nov 3, 2021 | Remote Code Execution | Microsoft MSCOMCTL.OCX | High 8.8 | >99.9% |
| Nov 3, 2021 | Remote Code Execution | SAP NetWeaver | Critical 10.0 | 18% |
Most targeted vendors
- Microsoft 390
- Cisco 102
- Apple 95
- Adobe 83
- Google 76
- Oracle 46
- Apache 41
- Ivanti 36
- Fortinet 32
- Linux 32
- Citrix 27
- VMware 26
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.