0.7%
actively
exploited
exploited
Focus on what’s exploited
Out of 350,184 known CVEs, only 0.7% show real-world exploitation signals.
Data from public sources (including CISA) plus private sensors, enriched with prioritization metadata.
2,501
Total Known exploited
352
Added this week
Search
Results update as you type.
⌘K
Added
Exploitability
Type to search. Filters apply instantly.
| CVE | Severity | Title |
|---|---|---|
| CVE-2019-10758 | 9.9 Critical |
mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to...
Remote
Low complexity
No user interaction
|
| CVE-2020-8816 | 9.1 Critical |
Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.
Remote
Low complexity
No user interaction
|
| CVE-2020-11261 | 7.8 High |
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto,...
Low complexity
No user interaction
|
| CVE-2021-44077 | 9.8 Critical |
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to...
Remote
Low complexity
No user interaction
|
| CVE-2021-40438 | 9.0 Critical |
mod_proxy SSRF
Remote
No user interaction
|
| CVE-2021-37415 | 9.8 Critical |
Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication.
Remote
Low complexity
No user interaction
|
| CVE-2018-14847 | 9.1 Critical |
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write...
Remote
Low complexity
No user interaction
|
| CVE-2021-40449 | 7.8 High |
Win32k Elevation of Privilege Vulnerability
Malware
Low complexity
No user interaction
|
| CVE-2021-42292 | 7.8 High |
Microsoft Excel Security Feature Bypass Vulnerability
Low complexity
|
| CVE-2021-42321 | 8.8 High |
Microsoft Exchange Server Remote Code Execution Vulnerability
Malware
Remote
Low complexity
No user interaction
|
| CVE-2021-22204 | 6.8 Medium |
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the...
Low complexity
No user interaction
|
| CVE-2020-16017 | 9.6 Critical |
Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to...
Remote
Low complexity
|
| CVE-2021-37976 | 6.5 Medium |
Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information...
Remote
Low complexity
|
| CVE-2020-16009 | 8.8 High |
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a...
Remote
Low complexity
|
| CVE-2021-30632 | 8.8 High |
Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted...
Remote
Low complexity
|
| CVE-2020-16013 | 8.8 High |
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a...
Remote
Low complexity
|
| CVE-2021-30633 | 9.6 Critical |
Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to...
Remote
Low complexity
|
| CVE-2021-21148 | 8.8 High |
Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted...
Remote
Low complexity
|
| CVE-2021-37973 | 9.6 Critical |
Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially...
Remote
Low complexity
|
| CVE-2021-30551 | 8.8 High |
Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Remote
Low complexity
|
| CVE-2021-37975 | 8.8 High |
Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Remote
Low complexity
|
| CVE-2020-6418 | 8.8 High |
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Remote
Low complexity
|
| CVE-2021-30554 | 8.8 High |
Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...
Remote
Low complexity
|
| CVE-2021-21206 | 8.8 High |
Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...
Remote
Low complexity
|
| CVE-2021-38000 | 6.1 Medium |
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily...
Remote
Low complexity
|
Displaying vulnerabilities 2051 - 2075 of 2501 in total