Library of exploited vulnerabilities
Every software flaw that attackers are known to have used, from the catalogue the US Cybersecurity and Infrastructure Security Agency (CISA) keeps since November 2021. Updated every hour.
- 1,762exploited vulnerabilities
- 361used by ransomware
- 291vendors
1,762 vulnerabilities
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jun 9, 2025 | SSH Server Missing Authentication for Critical Function | Erlang Erlang/OTP | Critical 10.0 | 99% |
| Jun 9, 2025 | Cross-Site Scripting | Roundcube Webmail | Critical 9.3 | 83% |
| Jun 5, 2025 | Out-of-Bounds Read and Write | Google Chromium V8 | High 8.8 | 7.8% |
| Jun 3, 2025 | Use-After-Free | Qualcomm Multiple Chipsets | High 7.5 | 1.1% |
| Jun 3, 2025 | Incorrect Authorization | Qualcomm Multiple Chipsets | High 8.6 | 0.5% |
| Jun 3, 2025 | Incorrect Authorization | Qualcomm Multiple Chipsets | High 8.6 | 0.8% |
| Jun 2, 2025 | Improper Authentication | ConnectWise ScreenConnect | High 8.1 | 3.6% |
| Jun 2, 2025 | External Control of Assumed-Immutable Web Parameter | Craft CMS Craft CMS | Medium 6.9 | 1.3% |
| Jun 2, 2025 | Code Injection | Craft CMS Craft CMS | Critical 9.3 | 97% |
| Jun 2, 2025 | OS Command Injection | ASUS RT-AX55 Routers | High 8.8 | 40% |
| Jun 2, 2025 | Improper Authentication | ASUS Routers | Critical 9.8 | 99.4% |
| May 22, 2025 | Path Traversal | Samsung MagicINFO 9 Server | Critical 9.8 | 24% |
| May 19, 2025 | Code Injection | Ivanti Endpoint Manager Mobile (EPMM) | High 7.2 | 88% |
| May 19, 2025 | Authentication Bypass | Ivanti Endpoint Manager Mobile (EPMM) | Medium 5.3 | 99.9% |
| May 19, 2025 | Directory Traversal | Srimax Output Messenger | High 7.2 | 1.9% |
| May 19, 2025 | Cross-Site Scripting (XSS) | Synacor Zimbra Collaboration Suite (ZCS) | Medium 6.1 | 25% |
| May 19, 2025 | Cross-Site Scripting (XSS) | MDaemon Email Server | Medium 5.3 | 33% |
| May 19, 2025 | Path Traversal | ZKTeco BioTime | High 7.5 | 92% |
| May 15, 2025 | Deserialization | SAP NetWeaver | Critical 9.1 | 13% |
| May 15, 2025 | OS Command Injection | DrayTek Vigor Routers | Medium 6.9 | 98% |
| May 14, 2025 | Stack-Based Buffer Overflow | Fortinet Multiple Products | Critical 9.6 | 31% |
| May 13, 2025 | Ancillary Function Driver for WinSock Use-After-Free | Microsoft Windows | High 7.8 | 1.8% |
| May 13, 2025 | Common Log File System (CLFS) Driver Heap-Based Buffer Overflow | Microsoft Windows | High 7.8 | 2.3% |
| May 13, 2025 | Common Log File System (CLFS) Driver Use-After-Free | Microsoft Windows | High 7.8 | 1.4% |
| May 13, 2025 | DWM Core Library Use-After-Free | Microsoft Windows | High 7.8 | 1.9% |
| May 13, 2025 | Scripting Engine Type Confusion | Microsoft Windows | High 7.5 | 27% |
| May 12, 2025 | Hidden Functionality | TeleMessage TM SGNL | Low 1.9 | 0.4% |
| May 7, 2025 | Devices OS Command Injection | GeoVision Multiple Devices | Critical 9.8 | 10% |
| May 7, 2025 | Devices OS Command Injection | GeoVision Multiple Devices | Critical 9.8 | 28% |
| May 6, 2025 | Out-of-Bounds Write | FreeType FreeType | High 8.1 | 28% |
| May 5, 2025 | Missing Authentication | Langflow Langflow | Critical 9.8 | >99.9% |
| May 2, 2025 | Path Traversal | Commvault Command Center | Critical 9.3 | 98% |
| May 2, 2025 | Improper Protection of Alternate Path | Yiiframework Yii | Critical 9.0 | 88% |
| May 1, 2025 | Improper Escaping of Output | Apache HTTP Server | Critical 9.1 | >99.9% |
| May 1, 2025 | OS Command Injection | SonicWall SMA100 Appliances | High 7.2 | 76% |
| Apr 29, 2025 | Unrestricted File Upload | SAP NetWeaver | Critical 10.0 | 99.5% |
| Apr 28, 2025 | Stack-Based Buffer Overflow | Qualitia Active! Mail | Critical 9.8 | 3.4% |
| Apr 28, 2025 | Unspecified | Commvault Web Server | High 8.7 | 2.5% |
| Apr 28, 2025 | Code Injection | Broadcom Brocade Fabric OS | High 8.6 | 0.7% |
| Apr 17, 2025 | Arbitrary Read and Write | Apple Multiple Products | Critical 9.8 | 14% |
| Apr 17, 2025 | Memory Corruption | Apple Multiple Products | Critical 9.8 | 21% |
| Apr 17, 2025 | NTLM Hash Disclosure Spoofing | Microsoft Windows | Medium 6.5 | 62% |
| Apr 16, 2025 | OS Command Injection | SonicWall SMA100 Appliances | Medium 6.5 | 4.4% |
| Apr 9, 2025 | Out-of-Bounds Access | Linux Kernel | High 7.8 | 4.1% |
| Apr 9, 2025 | Out-of-Bounds Read | Linux Kernel | High 7.1 | 1.4% |
| Apr 8, 2025 | and Triofox Use of Hard-coded Cryptographic Key | Gladinet CentreStack | Critical 9.0 | 94% |
| Apr 8, 2025 | Common Log File System (CLFS) Driver Use-After-Free | Microsoft Windows | High 7.8 | 19% |
| Apr 7, 2025 | Authentication Bypass | CrushFTP CrushFTP | Critical 9.8 | >99.9% |
| Apr 4, 2025 | Stack-Based Buffer Overflow | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | Critical 9.0 | >99.9% |
| Apr 1, 2025 | Path Equivalence | Apache Tomcat | Critical 10.0 | 99.9% |
Most targeted vendors
- Microsoft 390
- Cisco 101
- Apple 95
- Adobe 83
- Google 76
- Oracle 46
- Apache 41
- Ivanti 36
- Fortinet 32
- Linux 32
- Citrix 27
- VMware 26
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.