0.7%
actively
exploited
exploited
Focus on what’s exploited
Out of 350,187 known CVEs, only 0.7% show real-world exploitation signals.
Data from public sources (including CISA) plus private sensors, enriched with prioritization metadata.
2,503
Total Known exploited
426
Added this week
Search
Results update as you type.
⌘K
Added
Exploitability
Type to search. Filters apply instantly.
| CVE | Severity | Title |
|---|---|---|
| CVE-2019-1003030 | 9.9 Critical |
A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml,...
Remote
Low complexity
No user interaction
|
| CVE-2019-0903 | 8.8 High |
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+...
Remote
Low complexity
|
| CVE-2018-8414 | 8.8 High |
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution...
Remote
Low complexity
|
| CVE-2018-8373 | 7.5 High |
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting...
Remote
|
| CVE-2018-6961 | 8.1 High |
VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component...
Remote
No user interaction
|
| CVE-2018-14839 | 9.8 Critical |
LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with...
Remote
Low complexity
No user interaction
|
| CVE-2018-1273 | 9.8 Critical |
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability...
Malware
Remote
Low complexity
No user interaction
|
| CVE-2018-11138 | 9.8 Critical |
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be...
Malware
Remote
Low complexity
No user interaction
|
| CVE-2018-0125 | 9.8 Critical |
A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an...
Remote
Low complexity
No user interaction
|
| CVE-2017-6334 | 8.8 High |
dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via...
Remote
Low complexity
No user interaction
|
| CVE-2017-6316 | 9.8 Critical |
Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie....
Remote
Low complexity
No user interaction
|
| CVE-2017-3881 | 9.8 Critical |
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an...
Remote
Low complexity
No user interaction
|
| CVE-2017-12617 | 8.1 High |
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via...
Remote
No user interaction
|
| CVE-2017-12615 | 8.1 High |
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default...
Malware
Remote
No user interaction
|
| CVE-2017-0146 | 8.8 High |
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;...
Malware
Remote
Low complexity
No user interaction
|
| CVE-2016-7892 | 8.8 High |
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField...
Remote
Low complexity
|
| CVE-2018-8120 | 7.0 High |
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k...
Malware
No user interaction
|
| CVE-2019-1405 | 7.8 High |
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka...
Malware
Low complexity
No user interaction
|
| CVE-2019-1322 | 7.8 High |
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of...
Malware
Low complexity
No user interaction
|
| CVE-2019-1315 | 7.8 High |
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting...
Malware
Low complexity
No user interaction
|
| CVE-2019-1253 | 7.8 High |
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability,...
Malware
Low complexity
No user interaction
|
| CVE-2019-1132 | 7.8 High |
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k...
Low complexity
No user interaction
|
| CVE-2019-1129 | 7.8 High |
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation...
Malware
Low complexity
No user interaction
|
| CVE-2019-1069 | 7.8 High |
Task Scheduler Elevation of Privilege Vulnerability
Malware
Low complexity
No user interaction
|
| CVE-2019-1064 | 7.8 High |
Windows Elevation of Privilege Vulnerability
Malware
Low complexity
No user interaction
|
Displaying vulnerabilities 1826 - 1850 of 2503 in total