0.7%
actively
exploited
exploited
Focus on what’s exploited
Out of 350,131 known CVEs, only 0.7% show real-world exploitation signals.
Data from public sources (including CISA) plus private sensors, enriched with prioritization metadata.
2,501
Total Known exploited
353
Added this week
Search
Results update as you type.
⌘K
Added
Exploitability
Type to search. Filters apply instantly.
| CVE | Severity | Title |
|---|---|---|
| CVE-2020-29557 | 9.8 Critical |
An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to...
Remote
Low complexity
No user interaction
|
| CVE-2020-25506 | 9.8 Critical |
D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code...
Remote
Low complexity
No user interaction
|
| CVE-2018-15811 | 7.5 High |
DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.
Remote
Low complexity
No user interaction
|
| CVE-2018-18325 | 7.5 High |
DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an...
Remote
Low complexity
No user interaction
|
| CVE-2017-9822 | 8.8 High |
DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."
Malware
Remote
Low complexity
No user interaction
|
| CVE-2019-15752 | 7.8 High |
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file...
Low complexity
|
| CVE-2020-8515 | 9.8 Critical |
DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as...
Remote
Low complexity
No user interaction
|
| CVE-2018-7600 | 9.8 Critical |
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an...
Malware
Remote
Low complexity
No user interaction
|
| CVE-2021-22205 | 10.0 Critical |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were...
Malware
Remote
Low complexity
No user interaction
|
| CVE-2018-6789 | 9.8 Critical |
An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may...
Malware
Remote
Low complexity
No user interaction
|
| CVE-2020-8657 | 9.8 Critical |
An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API...
Remote
Low complexity
No user interaction
|
| CVE-2020-8655 | 7.8 High |
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user...
Low complexity
|
| CVE-2020-5902 | 9.8 Critical |
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface...
Malware
Remote
Low complexity
No user interaction
|
| CVE-2021-22986 | 9.8 Critical |
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd...
Malware
Remote
Low complexity
No user interaction
|
| CVE-2021-35464 | 9.8 Critical |
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does...
Malware
Remote
Low complexity
No user interaction
|
| CVE-2019-5591 | 6.5 Medium |
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by...
Low complexity
No user interaction
|
| CVE-2020-12812 | 9.8 Critical |
An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in...
Malware
Remote
Low complexity
No user interaction
|
| CVE-2018-13379 | 9.1 Critical |
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to...
Malware
Remote
Low complexity
No user interaction
|
| CVE-2020-16010 | 9.6 Critical |
Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to...
Remote
Low complexity
|
| CVE-2020-15999 | 9.6 Critical |
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a...
Remote
Low complexity
|
| CVE-2021-21166 | 8.8 High |
Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Remote
Low complexity
|
| CVE-2021-34473 | 9.1 Critical |
Microsoft Exchange Server Remote Code Execution Vulnerability
Malware
Remote
Low complexity
No user interaction
|
| CVE-2020-1464 | 7.8 High |
Windows Spoofing Vulnerability
Low complexity
No user interaction
|
| CVE-2021-1732 | 7.8 High |
Windows Win32k Elevation of Privilege Vulnerability
Malware
Low complexity
No user interaction
|
| CVE-2021-34527 | 8.8 High |
Windows Print Spooler Remote Code Execution Vulnerability
Malware
Remote
Low complexity
No user interaction
|
Displaying vulnerabilities 2201 - 2225 of 2501 in total