Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Mar 25, 2022 | CVE-2014-6287 | Rejetto · HTTP File Server (HFS) | Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability | Critical 9.8 | 99.3% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2014-3120 | Elastic · Elasticsearch | Elasticsearch Remote Code Execution Vulnerability | High 8.1 | 88.6% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2014-0130 | Rails · Ruby on Rails | Ruby on Rails Directory Traversal Vulnerability | High 7.5 | 53.7% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2013-5223 | D-Link · DSL-2760U | D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | Medium 5.4 | 50.8% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2013-4810 | Hewlett Packard (HP) · ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management | HP Multiple Products Remote Code Execution Vulnerability | Critical 9.8 | 79.5% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2013-2251 | Apache · Struts | Apache Struts Improper Input Validation Vulnerability | Critical 9.8 | 100.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2012-1823 | PHP · PHP | PHP-CGI Query String Parameter Vulnerability | Critical 9.8 | 100.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2010-4345 | Exim · Exim | Exim Privilege Escalation Vulnerability | High 7.8 | 18.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2010-4344 | Exim · Exim | Exim Heap-Based Buffer Overflow Vulnerability | Critical 9.8 | 71.7% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2010-3035 | Cisco · IOS XR | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | High 7.5 | 5.7% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2010-2861 Ransomware | Adobe · ColdFusion | Adobe ColdFusion Directory Traversal Vulnerability | High 7.5 | 99.7% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2009-2055 | Cisco · IOS XR | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | Medium 5.9 | 3.3% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2009-1151 | phpMyAdmin · phpMyAdmin | phpMyAdmin Remote Code Execution Vulnerability | Critical 9.8 | 96.6% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2009-0927 | Adobe · Reader and Acrobat | Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability | High 8.8 | 96.6% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2005-2773 | Hewlett Packard (HP) · OpenView Network Node Manager | HP OpenView Network Node Manager Remote Code Execution Vulnerability | Critical 9.8 | 74.6% | Apr 15, 2022 |
| Mar 15, 2022 | CVE-2020-5135 Ransomware | SonicWall · SonicOS | SonicWall SonicOS Buffer Overflow Vulnerability | Critical 9.8 | 26.9% | Apr 5, 2022 |
| Mar 15, 2022 | CVE-2019-1405 Ransomware | Microsoft · Windows | Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability | High 7.8 | 30.2% | Apr 5, 2022 |
| Mar 15, 2022 | CVE-2019-1322 Ransomware | Microsoft · Windows | Microsoft Windows Privilege Escalation Vulnerability | High 7.8 | 18.8% | Apr 5, 2022 |
| Mar 15, 2022 | CVE-2019-1315 Ransomware | Microsoft · Windows | Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability | High 7.8 | 3.5% | Apr 5, 2022 |
| Mar 15, 2022 | CVE-2019-1253 Ransomware | Microsoft · Windows | Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability | High 7.8 | 11.6% | Apr 5, 2022 |
| Mar 15, 2022 | CVE-2019-1132 | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.8 | 9.9% | Apr 5, 2022 |
| Mar 15, 2022 | CVE-2019-1129 Ransomware | Microsoft · Windows | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | High 7.8 | 1.8% | Apr 5, 2022 |
| Mar 15, 2022 | CVE-2019-1069 Ransomware | Microsoft · Task Scheduler | Microsoft Task Scheduler Privilege Escalation Vulnerability | High 7.8 | 6.2% | Apr 5, 2022 |
| Mar 15, 2022 | CVE-2019-1064 Ransomware | Microsoft · Windows | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | High 7.8 | 6.9% | Apr 5, 2022 |
| Mar 15, 2022 | CVE-2019-0841 Ransomware | Microsoft · Windows | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | High 7.8 | 41.4% | Apr 5, 2022 |
| Mar 15, 2022 | CVE-2019-0543 Ransomware | Microsoft · Windows | Microsoft Windows Privilege Escalation Vulnerability | High 7.8 | 4.7% | Apr 5, 2022 |
| Mar 15, 2022 | CVE-2018-8120 Ransomware | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.0 | 73.3% | Apr 5, 2022 |
| Mar 15, 2022 | CVE-2017-0101 Ransomware | Microsoft · Windows | Microsoft Windows Transaction Manager Privilege Escalation Vulnerability | High 7.8 | 57.5% | Apr 5, 2022 |
| Mar 15, 2022 | CVE-2016-3309 Ransomware | Microsoft · Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | High 7.8 | 20.5% | Apr 5, 2022 |
| Mar 15, 2022 | CVE-2015-2546 Ransomware | Microsoft · Win32k | Microsoft Win32k Memory Corruption Vulnerability | High 8.2 | 10.1% | Apr 5, 2022 |
| Mar 7, 2022 | CVE-2022-26486 | Mozilla · Firefox | Mozilla Firefox Use-After-Free Vulnerability | Critical 9.6 | 2.4% | Mar 21, 2022 |
| Mar 7, 2022 | CVE-2022-26485 | Mozilla · Firefox | Mozilla Firefox Use-After-Free Vulnerability | High 8.8 | 14.3% | Mar 21, 2022 |
| Mar 7, 2022 | CVE-2021-21973 | VMware · vCenter Server and Cloud Foundation | VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability | Medium 5.3 | 88.0% | Mar 21, 2022 |
| Mar 7, 2022 | CVE-2020-8218 | Pulse Secure · Pulse Connect Secure | Pulse Connect Secure Code Injection Vulnerability | High 7.2 | 32.2% | Sep 7, 2022 |
| Mar 7, 2022 | CVE-2019-11581 | Atlassian · Jira Server and Data Center | Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability | Critical 9.8 | 84.6% | Sep 7, 2022 |
| Mar 7, 2022 | CVE-2017-6077 | NETGEAR · Wireless Router DGN2200 | NETGEAR DGN2200 Remote Code Execution Vulnerability | Critical 9.8 | 68.7% | Sep 7, 2022 |
| Mar 7, 2022 | CVE-2016-6277 | NETGEAR · Multiple Routers | NETGEAR Multiple Routers Remote Code Execution Vulnerability | High 8.8 | 99.8% | Sep 7, 2022 |
| Mar 7, 2022 | CVE-2013-0631 | Adobe · ColdFusion | Adobe ColdFusion Information Disclosure Vulnerability | High 7.5 | 66.4% | Sep 7, 2022 |
| Mar 7, 2022 | CVE-2013-0629 | Adobe · ColdFusion | Adobe ColdFusion Directory Traversal Vulnerability | High 7.5 | 65.8% | Sep 7, 2022 |
| Mar 7, 2022 | CVE-2013-0625 | Adobe · ColdFusion | Adobe ColdFusion Authentication Bypass Vulnerability | Critical 9.8 | 93.8% | Sep 7, 2022 |
| Mar 7, 2022 | CVE-2009-3960 Ransomware | Adobe · BlazeDS | Adobe BlazeDS Information Disclosure Vulnerability | Medium 6.5 | 90.1% | Sep 7, 2022 |
| Mar 3, 2022 | CVE-2022-20708 | Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Critical 10.0 | 14.9% | Mar 17, 2022 |
| Mar 3, 2022 | CVE-2022-20703 | Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Critical 10.0 | 9.2% | Mar 17, 2022 |
| Mar 3, 2022 | CVE-2022-20701 | Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Critical 10.0 | 9.7% | Mar 17, 2022 |
| Mar 3, 2022 | CVE-2022-20700 | Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Critical 10.0 | 5.7% | Mar 17, 2022 |
| Mar 3, 2022 | CVE-2022-20699 | Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Critical 10.0 | 72.5% | Mar 17, 2022 |
| Mar 3, 2022 | CVE-2021-41379 Ransomware | Microsoft · Windows | Microsoft Windows Installer Privilege Escalation Vulnerability | Medium 5.5 | 19.5% | Mar 17, 2022 |
| Mar 3, 2022 | CVE-2020-1938 | Apache · Tomcat | Apache Tomcat Improper Privilege Management Vulnerability | Critical 9.8 | 99.3% | Mar 17, 2022 |
| Mar 3, 2022 | CVE-2020-11899 | Treck TCP/IP stack · IPv6 | Treck TCP/IP stack Out-of-Bounds Read Vulnerability | Medium 5.4 | 18.4% | Mar 17, 2022 |
| Mar 3, 2022 | CVE-2019-16928 | Exim · Exim Internet Mailer | Exim Out-of-bounds Write Vulnerability | Critical 9.8 | 41.6% | Mar 17, 2022 |