Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Nov 3, 2021 | CVE-2019-17026 | Mozilla · Firefox and Thunderbird | Mozilla Firefox And Thunderbird Type Confusion Vulnerability | High 8.8 | 46.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-16759 | vBulletin · vBulletin | vBulletin PHP Module Remote Code Execution Vulnerability | Critical 9.8 | 99.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-1653 | Cisco · Small Business RV320 and RV325 Routers | Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | High 7.5 | 99.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-16256 | SIMalliance · Toolbox Browser | SIMalliance Toolbox Browser Command Injection Vulnerability | Critical 9.8 | 4.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-15949 | Nagios · Nagios XI | Nagios XI Remote Code Execution Vulnerability | High 8.8 | 77.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-15752 | Docker · Desktop Community Edition | Docker Desktop Community Edition Privilege Escalation Vulnerability | High 7.8 | 48.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-1429 | Microsoft · Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | High 7.5 | 77.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-1367 Ransomware | Microsoft · Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | High 7.5 | 52.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-13608 Ransomware | Citrix · StoreFront Server | Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability | High 7.5 | 30.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-1215 Ransomware | Microsoft · Windows | Microsoft Windows Privilege Escalation Vulnerability | High 7.8 | 19.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-1214 | Microsoft · Windows | Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | High 7.8 | 1.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-11634 Ransomware | Citrix · Workspace Application and Receiver for Windows | Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability | Critical 9.8 | 8.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-11580 Ransomware | Atlassian · Crowd and Crowd Data Center | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | Critical 9.8 | 95.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-11539 Ransomware | Ivanti · Pulse Connect Secure and Pulse Policy Secure | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability | High 8.0 | 98.5% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-11510 Ransomware | Ivanti · Pulse Connect Secure | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | Critical 9.9 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-0863 | Microsoft · Windows | Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability | High 7.8 | 5.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-0859 Ransomware | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.8 | 4.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-0808 | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.8 | 53.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-0803 Ransomware | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.8 | 45.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-0797 | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.8 | 1.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-0708 Ransomware | Microsoft · Remote Desktop Services | Microsoft Remote Desktop Services Remote Code Execution Vulnerability | Critical 9.8 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-0604 Ransomware | Microsoft · SharePoint | Microsoft SharePoint Remote Code Execution Vulnerability | Critical 9.8 | 99.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-0541 | Microsoft · MSHTML | Microsoft MSHTML Remote Code Execution Vulnerability | High 8.8 | 53.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-0211 | Apache · HTTP Server | Apache HTTP Server Privilege Escalation Vulnerability | High 7.8 | 65.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-8653 | Microsoft · Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | High 7.5 | 29.6% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-7600 Ransomware | Drupal · Drupal Core | Drupal Core Remote Code Execution Vulnerability | Critical 9.8 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-6789 Ransomware | Exim · Exim | Exim Buffer Overflow Vulnerability | Critical 9.8 | 82.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-4939 | Adobe · ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 61.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-4878 Ransomware | Adobe · Flash Player | Adobe Flash Player Use-After-Free Vulnerability | High 7.8 | 90.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-2380 Ransomware | SAP · Customer Relationship Management (CRM) | SAP Customer Relationship Management (CRM) Path Traversal Vulnerability | Medium 6.6 | 28.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-20062 | ThinkPHP · noneCms | ThinkPHP "noneCms" Remote Code Execution Vulnerability | Critical 9.8 | 99.5% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-18325 | DotNetNuke (DNN) · DotNetNuke (DNN) | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | High 7.5 | 74.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-15961 | Adobe · ColdFusion | Adobe ColdFusion Unrestricted File Upload Vulnerability | Critical 9.8 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-15811 | DotNetNuke (DNN) · DotNetNuke (DNN) | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | High 7.5 | 76.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-14558 | Tenda · AC7, AC9, and AC10 Routers | Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability | Critical 9.8 | 8.5% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-13379 Ransomware | Fortinet · FortiOS | Fortinet FortiOS SSL VPN Path Traversal Vulnerability | Critical 9.1 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-11776 | Apache · Struts | Apache Struts Remote Code Execution Vulnerability | High 8.1 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-0802 Ransomware | Microsoft · Office | Microsoft Office Memory Corruption Vulnerability | High 7.8 | 93.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-0798 | Microsoft · Office | Microsoft Office Memory Corruption Vulnerability | High 8.8 | 95.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-0296 | Cisco · Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | High 7.5 | 99.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-0171 | Cisco · IOS and IOS XE | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | High 7.5 | 99.5% | May 3, 2022 |
| Nov 3, 2021 | CVE-2017-9822 Ransomware | DotNetNuke (DNN) · DotNetNuke (DNN) | DotNetNuke (DNN) Remote Code Execution Vulnerability | High 8.8 | 94.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2017-9805 | Apache · Struts | Apache Struts Deserialization of Untrusted Data Vulnerability | High 8.1 | 99.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2017-9248 | Progress · ASP.NET AJAX and Sitefinity | Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability | Critical 9.8 | 75.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2017-8759 | Microsoft · .NET Framework | Microsoft .NET Framework Remote Code Execution Vulnerability | High 7.8 | 88.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2017-7269 | Microsoft · Internet Information Services (IIS) | Microsoft Windows Server Buffer Overflow Vulnerability | Critical 9.8 | 99.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2017-6327 | Symantec · Symantec Messaging Gateway | Symantec Messaging Gateway Remote Code Execution Vulnerability | High 8.8 | 35.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2017-5638 Ransomware | Apache · Struts | Apache Struts Remote Code Execution Vulnerability | Critical 9.8 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2017-16651 | Roundcube · Roundcube Webmail | Roundcube Webmail File Disclosure Vulnerability | High 7.8 | 45.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2017-11882 Ransomware | Microsoft · Office | Microsoft Office Memory Corruption Vulnerability | High 7.8 | 99.9% | May 3, 2022 |