Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Nov 20, 2024 | CVE-2024-38813 | VMware · vCenter Server | VMware vCenter Server Privilege Escalation Vulnerability | High 7.5 | 17.4% | Dec 11, 2024 |
| Nov 20, 2024 | CVE-2024-38812 | VMware · vCenter Server | VMware vCenter Server Heap-Based Buffer Overflow Vulnerability | Critical 9.8 | 54.6% | Dec 11, 2024 |
| Nov 18, 2024 | CVE-2024-9474 Ransomware | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | Medium 6.9 | 93.8% | Dec 9, 2024 |
| Nov 18, 2024 | CVE-2024-1212 | Progress · Kemp LoadMaster | Progress Kemp LoadMaster OS Command Injection Vulnerability | Critical 10.0 | 95.4% | Dec 9, 2024 |
| Nov 18, 2024 | CVE-2024-0012 Ransomware | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability | Critical 9.3 | 99.8% | Dec 9, 2024 |
| Nov 14, 2024 | CVE-2024-9465 | Palo Alto Networks · Expedition | Palo Alto Networks Expedition SQL Injection Vulnerability | Critical 9.2 | 99.6% | Dec 5, 2024 |
| Nov 14, 2024 | CVE-2024-9463 | Palo Alto Networks · Expedition | Palo Alto Networks Expedition OS Command Injection Vulnerability | Critical 9.9 | 98.5% | Dec 5, 2024 |
| Nov 12, 2024 | CVE-2024-49039 Ransomware | Microsoft · Windows | Microsoft Windows Task Scheduler Privilege Escalation Vulnerability | High 8.8 | 14.2% | Dec 3, 2024 |
| Nov 12, 2024 | CVE-2024-43451 | Microsoft · Windows | Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability | Medium 6.5 | 84.3% | Dec 3, 2024 |
| Nov 12, 2024 | CVE-2021-41277 | Metabase · Metabase | Metabase GeoJSON API Local File Inclusion Vulnerability | Critical 10.0 | 97.2% | Dec 3, 2024 |
| Nov 12, 2024 | CVE-2021-26086 | Atlassian · Jira Server and Data Center | Atlassian Jira Server and Data Center Path Traversal Vulnerability | Medium 5.3 | 100.0% | Dec 3, 2024 |
| Nov 12, 2024 | CVE-2014-2120 | Cisco · Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability | Medium 5.4 | 22.6% | Dec 3, 2024 |
| Nov 7, 2024 | CVE-2024-5910 | Palo Alto Networks · Expedition | Palo Alto Networks Expedition Missing Authentication Vulnerability | Critical 9.3 | 91.7% | Nov 28, 2024 |
| Nov 7, 2024 | CVE-2024-51567 Ransomware | CyberPersons · CyberPanel | CyberPanel Incorrect Default Permissions Vulnerability | Critical 10.0 | 84.4% | Nov 28, 2024 |
| Nov 7, 2024 | CVE-2024-43093 | Android · Framework | Android Framework Privilege Escalation Vulnerability | High 7.3 | 0.7% | Nov 28, 2024 |
| Nov 7, 2024 | CVE-2019-16278 | Nostromo · nhttpd | Nostromo nhttpd Directory Traversal Vulnerability | Critical 9.8 | 99.0% | Nov 28, 2024 |
| Nov 4, 2024 | CVE-2024-8957 | PTZOptics · PT30X-SDI/NDI Cameras | PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability | High 7.2 | 79.8% | Nov 25, 2024 |
| Nov 4, 2024 | CVE-2024-8956 | PTZOptics · PT30X-SDI/NDI Cameras | PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability | Critical 9.1 | 58.8% | Nov 25, 2024 |
| Oct 24, 2024 | CVE-2024-37383 | Roundcube · Webmail | RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 74.0% | Nov 14, 2024 |
| Oct 24, 2024 | CVE-2024-20481 | Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Denial-of-Service Vulnerability | Medium 5.8 | 15.9% | Nov 14, 2024 |
| Oct 23, 2024 | CVE-2024-47575 | Fortinet · FortiManager | Fortinet FortiManager Missing Authentication Vulnerability | Critical 9.8 | 94.8% | Nov 13, 2024 |
| Oct 22, 2024 | CVE-2024-38094 Ransomware | Microsoft · SharePoint | Microsoft SharePoint Deserialization Vulnerability | High 7.2 | 50.9% | Nov 12, 2024 |
| Oct 21, 2024 | CVE-2024-9537 | ScienceLogic · SL1 | ScienceLogic SL1 Unspecified Vulnerability | Critical 9.8 | 3.8% | Nov 11, 2024 |
| Oct 17, 2024 | CVE-2024-40711 Ransomware | Veeam · Backup & Replication | Veeam Backup and Replication Deserialization Vulnerability | Critical 9.8 | 90.4% | Nov 7, 2024 |
| Oct 15, 2024 | CVE-2024-9680 Ransomware | Mozilla · Firefox | Mozilla Firefox Use-After-Free Vulnerability | Critical 9.8 | 23.2% | Nov 5, 2024 |
| Oct 15, 2024 | CVE-2024-30088 Ransomware | Microsoft · Windows | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability | High 7.0 | 68.2% | Nov 5, 2024 |
| Oct 15, 2024 | CVE-2024-28987 | SolarWinds · Web Help Desk | SolarWinds Web Help Desk Hardcoded Credential Vulnerability | Critical 9.1 | 93.3% | Nov 5, 2024 |
| Oct 9, 2024 | CVE-2024-9380 | Ivanti · Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | High 7.2 | 58.3% | Oct 30, 2024 |
| Oct 9, 2024 | CVE-2024-9379 | Ivanti · Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | Medium 6.5 | 44.3% | Oct 30, 2024 |
| Oct 9, 2024 | CVE-2024-23113 | Fortinet · Multiple Products | Fortinet Multiple Products Format String Vulnerability | Critical 9.8 | 61.7% | Oct 30, 2024 |
| Oct 8, 2024 | CVE-2024-43573 | Microsoft · Windows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | Medium 6.5 | 46.1% | Oct 29, 2024 |
| Oct 8, 2024 | CVE-2024-43572 | Microsoft · Windows | Microsoft Windows Management Console Remote Code Execution Vulnerability | High 7.8 | 66.7% | Oct 29, 2024 |
| Oct 8, 2024 | CVE-2024-43047 | Qualcomm · Multiple Chipsets | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | High 7.8 | 0.7% | Oct 29, 2024 |
| Oct 3, 2024 | CVE-2024-45519 | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability | Critical 10.0 | 99.9% | Oct 24, 2024 |
| Oct 2, 2024 | CVE-2024-29824 | Ivanti · Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | Critical 9.6 | 99.9% | Oct 23, 2024 |
| Sep 30, 2024 | CVE-2023-25280 | D-Link · DIR-820 Router | D-Link DIR-820 Router OS Command Injection Vulnerability | Critical 9.8 | 97.9% | Oct 21, 2024 |
| Sep 30, 2024 | CVE-2020-15415 | DrayTek · Multiple Vigor Routers | DrayTek Multiple Vigor Routers OS Command Injection Vulnerability | Critical 9.8 | 84.5% | Oct 21, 2024 |
| Sep 30, 2024 | CVE-2019-0344 | SAP · Commerce Cloud | SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 7.5% | Oct 21, 2024 |
| Sep 24, 2024 | CVE-2024-7593 | Ivanti · Virtual Traffic Manager | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | Critical 9.8 | 100.0% | Oct 15, 2024 |
| Sep 19, 2024 | CVE-2024-8963 | Ivanti · Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | Critical 9.4 | 98.6% | Oct 10, 2024 |
| Sep 18, 2024 | CVE-2024-27348 | Apache · HugeGraph-Server | Apache HugeGraph-Server Improper Access Control Vulnerability | Critical 9.8 | 99.2% | Oct 9, 2024 |
| Sep 18, 2024 | CVE-2022-21445 | Oracle · ADF Faces | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 62.5% | Oct 9, 2024 |
| Sep 18, 2024 | CVE-2020-14644 | Oracle · WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | Critical 9.8 | 94.5% | Oct 9, 2024 |
| Sep 18, 2024 | CVE-2020-0618 Ransomware | Microsoft · SQL Server | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability | Critical 9.8 | 99.0% | Oct 9, 2024 |
| Sep 17, 2024 | CVE-2014-0502 | Adobe · Flash Player | Adobe Flash Player Double Free Vulnerablity | High 8.8 | 24.8% | Oct 8, 2024 |
| Sep 17, 2024 | CVE-2014-0497 | Adobe · Flash Player | Adobe Flash Player Integer Underflow Vulnerablity | High 8.8 | 99.9% | Oct 8, 2024 |
| Sep 17, 2024 | CVE-2013-0648 | Adobe · Flash Player | Adobe Flash Player Code Execution Vulnerability | High 8.8 | 11.1% | Oct 8, 2024 |
| Sep 17, 2024 | CVE-2013-0643 | Adobe · Flash Player | Adobe Flash Player Incorrect Default Permissions Vulnerability | High 8.8 | 10.5% | Oct 8, 2024 |
| Sep 16, 2024 | CVE-2024-6670 Ransomware | Progress · WhatsUp Gold | Progress WhatsUp Gold SQL Injection Vulnerability | Critical 9.8 | 92.9% | Oct 7, 2024 |
| Sep 16, 2024 | CVE-2024-43461 | Microsoft · Windows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | High 8.8 | 54.5% | Oct 7, 2024 |