Vulnerabilities attackers are exploiting now
504 vulnerabilities that attackers are exploiting, what each means and what to do. The newest first.
| CVE | Product | Since | |
|---|---|---|---|
| CVE-2026-87902 | WordPress Core | 2026-09-25 | |
| CVE-2026-71362 | Adobe Commerce and Magento | 2026-09-24 | |
| CVE-2026-85706 | GitLab Community Edition and Enterprise Edition | 2026-09-11 | |
| CVE-2026-42018 | JFrog Artifactory | 2026-09-11 | |
| CVE-2026-20079 | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | 2026-09-09 | |
| CVE-2026-86218 | N-able N-central | 2026-09-08 | |
| CVE-2026-9586 | Sangoma Switchvox | 2026-09-02 | |
| CVE-2026-83548 | SonicWall SMA1000 Appliances | 2026-09-02 | |
| CVE-2026-82329 | JFrog Artifactory | 2026-09-02 | |
| CVE-2026-48710 | Kludex Starlette | 2026-09-02 | |
| CVE-2026-81578 | PaperCut NG/MF | 2026-08-31 | |
| CVE-2026-60004 | Gitea | 2026-08-25 | |
| CVE-2026-73570 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-08-21 | |
| CVE-2026-64849 | MLflow | 2026-08-19 | |
| CVE-2026-55040 | Microsoft SharePoint | 2026-08-18 | |
| CVE-2025-62593 | Ray-Project Ray | 2026-08-17 | |
| CVE-2026-72898 | Metabase | 2026-08-11 | |
| CVE-2026-8037 | Progress LoadMaster | 2026-08-07 | |
| CVE-2026-63077 | JetBrains TeamCity | 2026-08-05 | Ransomware |
| CVE-2026-9198 | IBM Langflow | 2026-08-04 | |
| CVE-2026-34486 | Apache Tomcat | 2026-08-04 | |
| CVE-2026-18577 | N-able N-central | 2026-08-03 | |
| CVE-2026-16232 | Check Point SmartConsole | 2026-07-22 | |
| CVE-2026-63030 | WordPress Core | 2026-07-21 | |
| CVE-2026-0770 | Langflow | 2026-07-21 | |
| CVE-2026-58644 | Microsoft SharePoint | 2026-07-16 | |
| CVE-2026-39808 | Fortinet FortiSandbox | 2026-07-16 | |
| CVE-2026-15409 | SonicWall SMA1000 Appliances | 2026-07-14 | Ransomware |
| CVE-2026-56291 | Balbooa Forms | 2026-07-10 | |
| CVE-2026-48939 | iCagenda | 2026-07-10 | |
| CVE-2026-56290 | Joomlack Page Builder | 2026-07-07 | |
| CVE-2026-48908 | JoomShaper SP Page Builder | 2026-07-07 | |
| CVE-2026-48282 | Adobe ColdFusion | 2026-07-07 | |
| CVE-2026-48558 | SimpleHelp SimpleHelp | 2026-06-29 | |
| CVE-2026-34910 | Ubiquiti UniFi OS | 2026-06-23 | |
| CVE-2026-34908 | Ubiquiti UniFi OS | 2026-06-23 | |
| CVE-2026-20253 | Splunk Enterprise | 2026-06-18 | |
| CVE-2026-48907 | Widget Factory Joomla Content Editor | 2026-06-16 | |
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools | 2026-06-12 | Ransomware |
| CVE-2026-10520 | Ivanti Sentry | 2026-06-11 | |
| CVE-2026-50751 | Check Point Security Gateway | 2026-06-08 | Ransomware |
| CVE-2026-42271 | BerriAI LiteLLM | 2026-06-08 | |
| CVE-2026-0257 | Palo Alto Networks PAN-OS | 2026-05-29 | Ransomware |
| CVE-2026-9082 | Drupal Core | 2026-05-22 | |
| CVE-2025-34291 | Langflow | 2026-05-21 | |
| CVE-2026-42208 | BerriAI LiteLLM | 2026-05-08 | |
| CVE-2026-41940 | WebPros cPanel & WHM and WP2 (WordPress Squared) | 2026-04-30 | Ransomware |
| CVE-2024-1708 | ConnectWise ScreenConnect | 2026-04-28 | Ransomware |
| CVE-2025-29635 | D-Link DIR-823X | 2026-04-24 | |
| CVE-2024-7399 | Samsung MagicINFO 9 Server | 2026-04-24 | |
| CVE-2024-57728 | SimpleHelp SimpleHelp | 2026-04-24 | Ransomware |
| CVE-2024-57726 | SimpleHelp SimpleHelp | 2026-04-24 | Ransomware |
| CVE-2026-39987 | Marimo | 2026-04-23 | |
| CVE-2024-27199 | JetBrains TeamCity | 2026-04-20 | Ransomware |
| CVE-2023-27351 | PaperCut NG/MF | 2026-04-20 | Ransomware |
| CVE-2026-34197 | Apache ActiveMQ | 2026-04-16 | |
| CVE-2026-21643 | Fortinet FortiClient EMS | 2026-04-13 | |
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-04-08 | |
| CVE-2026-35616 | Fortinet FortiClient EMS | 2026-04-06 | |
| CVE-2026-3055 | Citrix NetScaler | 2026-03-30 | |
| CVE-2026-33017 | Langflow | 2026-03-25 | |
| CVE-2025-54068 | Laravel Livewire | 2026-03-20 | |
| CVE-2025-32432 | Craft CMS | 2026-03-20 | |
| CVE-2025-47813 | Wing FTP Server | 2026-03-16 | |
| CVE-2025-68613 | n8n | 2026-03-11 | |
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) | 2026-03-09 | |
| CVE-2025-26399 | SolarWinds Web Help Desk | 2026-03-09 | Ransomware |
| CVE-2021-22054 | Omnissa Workspace One UEM | 2026-03-09 | |
| CVE-2017-7921 | Hikvision Multiple Products | 2026-03-05 | |
| CVE-2025-49113 | Roundcube Webmail | 2026-02-20 | |
| CVE-2021-22175 | GitLab | 2026-02-18 | |
| CVE-2020-7796 | Synacor Zimbra Collaboration Suite | 2026-02-17 | |
| CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | 2026-02-13 | Ransomware |
| CVE-2025-40536 | SolarWinds Web Help Desk | 2026-02-12 | |
| CVE-2026-24423 | SmarterTools SmarterMail | 2026-02-05 | Ransomware |
| CVE-2025-11953 | React Native Community CLI | 2026-02-05 | |
| CVE-2025-64328 | Sangoma FreePBX | 2026-02-03 | |
| CVE-2025-40551 | SolarWinds Web Help Desk | 2026-02-03 | |
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-01-29 | |
| CVE-2026-23760 | SmarterTools SmarterMail | 2026-01-26 | Ransomware |
| CVE-2025-52691 | SmarterTools SmarterMail | 2026-01-26 | Ransomware |
| CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-01-22 | |
| CVE-2025-34026 | Versa Concerto | 2026-01-22 | |
| CVE-2025-31125 | Vite Vitejs | 2026-01-22 | |
| CVE-2025-8110 | Gogs | 2026-01-12 | |
| CVE-2025-37164 | Hewlett Packard Enterprise (HPE) OneView | 2026-01-07 | |
| CVE-2025-14847 | MongoDB and MongoDB Server | 2025-12-29 | |
| CVE-2023-52163 | Digiever DS-2105 Pro | 2025-12-22 | |
| CVE-2025-14611 | Gladinet CentreStack and Triofox | 2025-12-15 | |
| CVE-2025-58360 | OSGeo GeoServer | 2025-12-11 | |
| CVE-2025-55182 | Meta React Server Components | 2025-12-05 | Ransomware |
| CVE-2025-61757 | Oracle Fusion Middleware | 2025-11-21 | |
| CVE-2025-64446 | Fortinet FortiWeb | 2025-11-14 | |
| CVE-2025-12480 | Gladinet Triofox | 2025-11-12 | |
| CVE-2025-48703 | CWP Control Web Panel | 2025-11-04 | |
| CVE-2025-11371 | Gladinet CentreStack and Triofox | 2025-11-04 | |
| CVE-2025-24893 | XWiki Platform | 2025-10-30 | |
| CVE-2025-6205 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | |
| CVE-2025-6204 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | |
| CVE-2025-59287 | Microsoft Windows | 2025-10-24 | |
| CVE-2025-54236 | Adobe Commerce and Magento | 2025-10-24 | |
| CVE-2025-61884 | Oracle E-Business Suite | 2025-10-20 | Ransomware |
| CVE-2025-2747 | Kentico Xperience CMS | 2025-10-20 | |
| CVE-2025-2746 | Kentico Xperience CMS | 2025-10-20 | |
| CVE-2021-43798 | Grafana Labs Grafana | 2025-10-09 | |
| CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-10-07 | |
| CVE-2025-61882 | Oracle E-Business Suite | 2025-10-06 | Ransomware |
| CVE-2025-4008 | Smartbedded Meteobridge | 2025-10-02 | |
| CVE-2025-10035 | Fortra GoAnywhere MFT | 2025-09-29 | Ransomware |
| CVE-2021-21311 | Adminer | 2025-09-29 | |
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | |
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso | 2025-09-11 | |
| CVE-2025-57819 | Sangoma FreePBX | 2025-08-29 | |
| CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices | 2025-08-05 | |
| CVE-2025-20281 | Cisco Identity Services Engine | 2025-07-28 | |
| CVE-2025-49706 | Microsoft SharePoint | 2025-07-22 | Ransomware |
| CVE-2025-2776 | SysAid On-Prem | 2025-07-22 | |
| CVE-2025-2775 | SysAid On-Prem | 2025-07-22 | |
| CVE-2025-53770 | Microsoft SharePoint | 2025-07-20 | Ransomware |
| CVE-2025-25257 | Fortinet FortiWeb | 2025-07-18 | |
| CVE-2025-47812 | Wing FTP Server | 2025-07-14 | |
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway | 2025-07-10 | Ransomware |
| CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-07-07 | |
| CVE-2019-5418 | Rails Ruby on Rails | 2025-07-07 | |
| CVE-2016-10033 | PHP PHPMailer | 2025-07-07 | |
| CVE-2025-24016 | Wazuh Server | 2025-06-10 | |
| CVE-2024-42009 | Roundcube Webmail | 2025-06-09 | |
| CVE-2024-56145 | Craft CMS | 2025-06-02 | |
| CVE-2021-32030 | ASUS Routers | 2025-06-02 | |
| CVE-2025-4632 | Samsung MagicINFO 9 Server | 2025-05-22 | |
| CVE-2025-4427 | Ivanti Endpoint Manager Mobile (EPMM) | 2025-05-19 | |
| CVE-2024-27443 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-05-19 | |
| CVE-2023-38950 | ZKTeco BioTime | 2025-05-19 | |
| CVE-2024-12987 | DrayTek Vigor Routers | 2025-05-15 | |
| CVE-2025-3248 | Langflow | 2025-05-05 | Ransomware |
| CVE-2025-34028 | Commvault Command Center | 2025-05-02 | |
| CVE-2024-58136 | Yiiframework Yii | 2025-05-02 | |
| CVE-2024-38475 | Apache HTTP Server | 2025-05-01 | |
| CVE-2025-31324 | SAP NetWeaver | 2025-04-29 | Ransomware |
| CVE-2025-30406 | Gladinet CentreStack | 2025-04-08 | |
| CVE-2025-31161 | CrushFTP | 2025-04-07 | Ransomware |
| CVE-2025-24813 | Apache Tomcat | 2025-04-01 | |
| CVE-2024-20439 | Cisco Smart Licensing Utility | 2025-03-31 | |
| CVE-2019-9874 | Sitecore CMS and Experience Platform (XP) | 2025-03-26 | |
| CVE-2024-48248 | NAKIVO Backup and Replication | 2025-03-19 | |
| CVE-2017-12637 | SAP NetWeaver | 2025-03-19 | |
| CVE-2024-13161 | Ivanti Endpoint Manager (EPM) | 2025-03-10 | |
| CVE-2024-13160 | Ivanti Endpoint Manager (EPM) | 2025-03-10 | |
| CVE-2024-13159 | Ivanti Endpoint Manager (EPM) | 2025-03-10 | |
| CVE-2024-4885 | Progress WhatsUp Gold | 2025-03-03 | |
| CVE-2022-43939 | Hitachi Vantara Pentaho Business Analytics (BA) Server | 2025-03-03 | |
| CVE-2022-43769 | Hitachi Vantara Pentaho Business Analytics (BA) Server | 2025-03-03 | |
| CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-02-25 | |
| CVE-2025-0108 | Palo Alto Networks PAN-OS | 2025-02-18 | |
| CVE-2024-53704 | SonicWall SonicOS | 2025-02-18 | Ransomware |
| CVE-2024-57727 | SimpleHelp SimpleHelp | 2025-02-13 | Ransomware |
| CVE-2024-45195 | Apache OFBiz | 2025-02-04 | |
| CVE-2024-29059 | Microsoft .NET Framework | 2025-02-04 | |
| CVE-2018-19410 | Paessler PRTG Network Monitor | 2025-02-04 | |
| CVE-2024-50603 | Aviatrix Controllers | 2025-01-16 | |
| CVE-2024-55591 | Fortinet FortiOS and FortiProxy | 2025-01-14 | Ransomware |
| CVE-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | 2025-01-08 | Ransomware |
| CVE-2024-55550 | Mitel MiCollab | 2025-01-07 | Ransomware |
| CVE-2024-41713 | Mitel MiCollab | 2025-01-07 | Ransomware |
| CVE-2020-2883 | Oracle WebLogic Server | 2025-01-07 | |
| CVE-2018-14933 | NUUO NVRmini Devices | 2024-12-18 | |
| CVE-2024-55956 | Cleo Multiple Products | 2024-12-17 | Ransomware |
| CVE-2024-20767 | Adobe ColdFusion | 2024-12-16 | |
| CVE-2024-50623 | Cleo Multiple Products | 2024-12-13 | Ransomware |
| CVE-2024-51378 | CyberPersons CyberPanel | 2024-12-04 | Ransomware |
| CVE-2024-11680 | ProjectSend | 2024-12-03 | |
| CVE-2024-9474 | Palo Alto Networks PAN-OS | 2024-11-18 | Ransomware |
| CVE-2024-1212 | Progress Kemp LoadMaster | 2024-11-18 | |
| CVE-2024-0012 | Palo Alto Networks PAN-OS | 2024-11-18 | Ransomware |
| CVE-2024-9465 | Palo Alto Networks Expedition | 2024-11-14 | |
| CVE-2024-9463 | Palo Alto Networks Expedition | 2024-11-14 | |
| CVE-2021-41277 | Metabase | 2024-11-12 | |
| CVE-2021-26086 | Atlassian Jira Server and Data Center | 2024-11-12 | |
| CVE-2024-5910 | Palo Alto Networks Expedition | 2024-11-07 | |
| CVE-2024-51567 | CyberPersons CyberPanel | 2024-11-07 | Ransomware |
| CVE-2019-16278 | Nostromo nhttpd | 2024-11-07 | |
| CVE-2024-40711 | Veeam Backup & Replication | 2024-10-17 | Ransomware |
| CVE-2024-28987 | SolarWinds Web Help Desk | 2024-10-15 | |
| CVE-2024-45519 | Synacor Zimbra Collaboration Suite (ZCS) | 2024-10-03 | |
| CVE-2024-29824 | Ivanti Endpoint Manager (EPM) | 2024-10-02 | |
| CVE-2023-25280 | D-Link DIR-820 Router | 2024-09-30 | |
| CVE-2020-15415 | DrayTek Multiple Vigor Routers | 2024-09-30 | |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager | 2024-09-24 | |
| CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) | 2024-09-19 | |
| CVE-2024-27348 | Apache HugeGraph-Server | 2024-09-18 | |
| CVE-2020-14644 | Oracle WebLogic Server | 2024-09-18 | |
| CVE-2020-0618 | Microsoft SQL Server | 2024-09-18 | Ransomware |
| CVE-2024-6670 | Progress WhatsUp Gold | 2024-09-16 | Ransomware |
| CVE-2021-20124 | DrayTek VigorConnect | 2024-09-03 | |
| CVE-2021-20123 | DrayTek VigorConnect | 2024-09-03 | |
| CVE-2024-38856 | Apache OFBiz | 2024-08-27 | |
| CVE-2021-33045 | Dahua IP Camera Firmware | 2024-08-21 | |
| CVE-2021-33044 | Dahua IP Camera Firmware | 2024-08-21 | |
| CVE-2024-23897 | Jenkins Command Line Interface (CLI) | 2024-08-19 | Ransomware |
| CVE-2024-28986 | SolarWinds Web Help Desk | 2024-08-15 | |
| CVE-2024-32113 | Apache OFBiz | 2024-08-07 | |
| CVE-2024-5217 | ServiceNow Utah, Vancouver, and Washington DC Now Platform | 2024-07-29 | |
| CVE-2024-4879 | ServiceNow Utah, Vancouver, and Washington DC Now Platform | 2024-07-29 | |
| CVE-2023-45249 | Acronis Cyber Infrastructure (ACI) | 2024-07-29 | |
| CVE-2024-34102 | Adobe Commerce and Magento Open Source | 2024-07-17 | |
| CVE-2024-28995 | SolarWinds Serv-U | 2024-07-17 | |
| CVE-2024-36401 | OSGeo GeoServer | 2024-07-15 | |
| CVE-2024-23692 | Rejetto HTTP File Server | 2024-07-09 | Ransomware |
| CVE-2022-24816 | OSGeo JAI-EXT | 2024-06-26 | |
| CVE-2024-4358 | Progress Telerik Report Server | 2024-06-13 | |
| CVE-2024-4577 | PHP Group PHP | 2024-06-12 | Ransomware |
| CVE-2017-3506 | Oracle WebLogic Server | 2024-06-03 | |
| CVE-2024-24919 | Check Point Quantum Security Gateways | 2024-05-30 | Ransomware |
| CVE-2020-17519 | Apache Flink | 2024-05-23 | |
| CVE-2023-43208 | NextGen Healthcare Mirth Connect | 2024-05-20 | Ransomware |
| CVE-2021-40655 | D-Link DIR-605 Router | 2024-05-16 | |
| CVE-2023-7028 | GitLab CE/EE | 2024-05-01 | |
| CVE-2024-4040 | CrushFTP | 2024-04-24 | |
| CVE-2024-3400 | Palo Alto Networks PAN-OS | 2024-04-12 | Ransomware |
| CVE-2024-3273 | D-Link Multiple NAS Devices | 2024-04-11 | |
| CVE-2024-3272 | D-Link Multiple NAS Devices | 2024-04-11 | |
| CVE-2023-48788 | Fortinet FortiClient EMS | 2024-03-25 | Ransomware |
| CVE-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) | 2024-03-25 | Ransomware |
| CVE-2019-7256 | Nice Linear eMerge E3-Series | 2024-03-25 | |
| CVE-2024-27198 | JetBrains TeamCity | 2024-03-07 | Ransomware |
| CVE-2021-36380 | Sunhillo SureLine | 2024-03-05 | |
| CVE-2024-1709 | ConnectWise ScreenConnect | 2024-02-22 | Ransomware |
| CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons | 2024-01-31 | Ransomware |
| CVE-2023-22527 | Atlassian Confluence Data Center and Server | 2024-01-24 | Ransomware |
| CVE-2023-34048 | VMware vCenter Server | 2024-01-22 | |
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core | 2024-01-18 | Ransomware |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway | 2024-01-17 | |
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure | 2024-01-10 | Ransomware |
| CVE-2023-46805 | Ivanti Connect Secure and Policy Secure | 2024-01-10 | Ransomware |
| CVE-2023-29357 | Microsoft SharePoint Server | 2024-01-10 | Ransomware |
| CVE-2023-38203 | Adobe ColdFusion | 2024-01-08 | Ransomware |
| CVE-2023-29300 | Adobe ColdFusion | 2024-01-08 | Ransomware |
| CVE-2023-27524 | Apache Superset | 2024-01-08 | |
| CVE-2023-23752 | Joomla! | 2024-01-08 | |
| CVE-2023-50164 | Apache Struts | 2023-12-12 | |
| CVE-2023-41266 | Qlik Sense | 2023-12-07 | Ransomware |
| CVE-2023-41265 | Qlik Sense | 2023-12-07 | Ransomware |
| CVE-2023-49103 | ownCloud graphapi | 2023-11-30 | |
| CVE-2023-1671 | Sophos Web Appliance | 2023-11-16 | |
| CVE-2020-2551 | Oracle Fusion Middleware | 2023-11-16 | |
| CVE-2023-47246 | SysAid Server | 2023-11-13 | Ransomware |
| CVE-2023-36845 | Juniper Junos OS | 2023-11-13 | |
| CVE-2023-36844 | Juniper Junos OS | 2023-11-13 | |
| CVE-2023-22518 | Atlassian Confluence Data Center and Server | 2023-11-07 | Ransomware |
| CVE-2023-46604 | Apache ActiveMQ | 2023-11-02 | Ransomware |
| CVE-2023-46747 | F5 BIG-IP Configuration Utility | 2023-10-31 | Ransomware |
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway | 2023-10-18 | Ransomware |
| CVE-2023-20198 | Cisco IOS XE Web UI | 2023-10-16 | |
| CVE-2023-41763 | Microsoft Skype for Business | 2023-10-10 | |
| CVE-2023-40044 | Progress WS_FTP Server | 2023-10-05 | Ransomware |
| CVE-2023-22515 | Atlassian Confluence Data Center and Server | 2023-10-05 | Ransomware |
| CVE-2023-42793 | JetBrains TeamCity | 2023-10-04 | Ransomware |
| CVE-2021-3129 | Laravel Ignition | 2023-09-18 | Ransomware |
| CVE-2023-33246 | Apache RocketMQ | 2023-09-06 | |
| CVE-2023-32315 | Ignite Realtime Openfire | 2023-08-24 | |
| CVE-2023-38035 | Ivanti Sentry | 2023-08-22 | Ransomware |
| CVE-2023-24489 | Citrix Content Collaboration | 2023-08-16 | |
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) | 2023-07-27 | |
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile (EPMM) | 2023-07-25 | Ransomware |
| CVE-2023-38205 | Adobe ColdFusion | 2023-07-20 | |
| CVE-2023-29298 | Adobe ColdFusion | 2023-07-20 | |
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway | 2023-07-19 | Ransomware |
| CVE-2022-29303 | SolarView Compact | 2023-07-13 | |
| CVE-2023-20887 | VMware Aria Operations for Networks | 2023-06-22 | |
| CVE-2020-12641 | Roundcube Webmail | 2023-06-22 | |
| CVE-2023-34362 | Progress MOVEit Transfer | 2023-06-02 | Ransomware |
| CVE-2023-2868 | Barracuda Networks Email Security Gateway (ESG) Appliance | 2023-05-26 | |
| CVE-2023-25717 | Ruckus Wireless Multiple Products | 2023-05-12 | |
| CVE-2023-21839 | Oracle WebLogic Server | 2023-05-01 | |
| CVE-2023-1389 | TP-Link Archer AX21 | 2023-05-01 | |
| CVE-2021-45046 | Apache Log4j2 | 2023-05-01 | Ransomware |
| CVE-2023-28432 | MinIO | 2023-04-21 | |
| CVE-2023-27350 | PaperCut MF/NG | 2023-04-21 | Ransomware |
| CVE-2021-27877 | Veritas Backup Exec Agent | 2023-04-07 | Ransomware |
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) | 2023-04-03 | |
| CVE-2023-26360 | Adobe ColdFusion | 2023-03-15 | |
| CVE-2021-39144 | XStream | 2023-03-10 | |
| CVE-2022-35914 | Teclib GLPI | 2023-03-07 | |
| CVE-2022-33891 | Apache Spark | 2023-03-07 | |
| CVE-2022-36537 | ZK Framework AuUploader | 2023-02-27 | Ransomware |
| CVE-2022-47986 | IBM Aspera Faspex | 2023-02-21 | Ransomware |
| CVE-2022-46169 | Cacti | 2023-02-16 | |
| CVE-2023-0669 | Fortra GoAnywhere MFT | 2023-02-10 | Ransomware |
| CVE-2022-24990 | TerraMaster OS | 2023-02-10 | Ransomware |
| CVE-2023-22952 | SugarCRM Multiple Products | 2023-02-02 | |
| CVE-2022-21587 | Oracle E-Business Suite | 2023-02-02 | Ransomware |
| CVE-2022-47966 | Zoho ManageEngine | 2023-01-23 | Ransomware |
| CVE-2022-44877 | CWP Control Web Panel | 2023-01-17 | |
| CVE-2018-18809 | TIBCO JasperReports | 2022-12-29 | |
| CVE-2022-42475 | Fortinet FortiOS | 2022-12-13 | Ransomware |
| CVE-2021-35587 | Oracle Fusion Middleware | 2022-11-28 | |
| CVE-2022-41352 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-10-20 | Ransomware |
| CVE-2022-40684 | Fortinet Multiple Products | 2022-10-11 | Ransomware |
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center | 2022-09-30 | |
| CVE-2022-3236 | Sophos Firewall | 2022-09-23 | |
| CVE-2022-35405 | Zoho ManageEngine | 2022-09-22 | |
| CVE-2022-27593 | QNAP Photo Station | 2022-09-08 | Ransomware |
| CVE-2018-6530 | D-Link Multiple Routers | 2022-09-08 | Ransomware |
| CVE-2018-2628 | Oracle WebLogic Server | 2022-09-08 | |
| CVE-2017-5521 | NETGEAR Multiple Devices | 2022-09-08 | |
| CVE-2022-26352 | dotCMS | 2022-08-25 | Ransomware |
| CVE-2022-24706 | Apache CouchDB | 2022-08-25 | |
| CVE-2022-24112 | Apache APISIX | 2022-08-25 | |
| CVE-2022-22963 | VMware Tanzu Spring Cloud | 2022-08-25 | |
| CVE-2021-39226 | Grafana Labs Grafana | 2022-08-25 | |
| CVE-2022-22536 | SAP Multiple Products | 2022-08-18 | |
| CVE-2017-15944 | Palo Alto Networks PAN-OS | 2022-08-18 | |
| CVE-2022-37042 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-11 | Ransomware |
| CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-04 | Ransomware |
| CVE-2022-26138 | Atlassian Confluence | 2022-07-29 | |
| CVE-2019-7195 | QNAP Photo Station | 2022-06-08 | Ransomware |
| CVE-2019-7194 | QNAP Photo Station | 2022-06-08 | Ransomware |
| CVE-2019-7192 | QNAP Photo Station | 2022-06-08 | Ransomware |
| CVE-2022-26134 | Atlassian Confluence Server/Data Center | 2022-06-02 | Ransomware |
| CVE-2017-18362 | Kaseya Virtual System/Server Administrator (VSA) | 2022-05-24 | Ransomware |
| CVE-2022-30525 | Zyxel Multiple Firewalls | 2022-05-16 | |
| CVE-2022-22947 | VMware Spring Cloud Gateway | 2022-05-16 | |
| CVE-2022-1388 | F5 BIG-IP | 2022-05-10 | Ransomware |
| CVE-2014-0160 | OpenSSL | 2022-05-04 | |
| CVE-2022-29464 | WSO2 Multiple Products | 2022-04-25 | Ransomware |
| CVE-2022-0847 | Linux Kernel | 2022-04-25 | |
| CVE-2018-6882 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-04-19 | Ransomware |
| CVE-2019-3929 | Crestron Multiple Products | 2022-04-15 | |
| CVE-2019-16057 | D-Link DNS-320 Storage Device | 2022-04-15 | Ransomware |
| CVE-2018-7841 | Schneider Electric U.motion Builder | 2022-04-15 | |
| CVE-2007-3010 | Alcatel OmniPCX Enterprise | 2022-04-15 | |
| CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager | 2022-04-14 | Ransomware |
| CVE-2018-7602 | Drupal Core | 2022-04-13 | Ransomware |
| CVE-2022-22965 | VMware Spring Framework | 2022-04-04 | |
| CVE-2021-45382 | D-Link Multiple Routers | 2022-04-04 | |
| CVE-2022-1040 | Sophos Firewall | 2022-03-31 | |
| CVE-2021-28799 | QNAP Network Attached Storage (NAS) | 2022-03-31 | Ransomware |
| CVE-2018-10562 | Dasan Gigabit Passive Optical Network (GPON) Routers | 2022-03-31 | Ransomware |
| CVE-2022-0543 | Redis Debian-specific Redis Servers | 2022-03-28 | |
| CVE-2021-26085 | Atlassian Confluence Server | 2022-03-28 | Ransomware |
| CVE-2022-26143 | Mitel MiCollab, MiVoice Business Express | 2022-03-25 | |
| CVE-2021-42237 | Sitecore XP | 2022-03-25 | Ransomware |
| CVE-2020-9054 | Zyxel Multiple Network-Attached Storage (NAS) Devices | 2022-03-25 | |
| CVE-2020-7247 | OpenBSD OpenSMTPD | 2022-03-25 | |
| CVE-2020-5410 | VMware Tanzu Spring Cloud Configuration (Config) Server | 2022-03-25 | |
| CVE-2020-25223 | Sophos SG UTM | 2022-03-25 | |
| CVE-2020-1956 | Apache Kylin | 2022-03-25 | |
| CVE-2019-6340 | Drupal Core | 2022-03-25 | |
| CVE-2019-2616 | Oracle BI Publisher (Formerly XML Publisher) | 2022-03-25 | |
| CVE-2019-16920 | D-Link Multiple Routers | 2022-03-25 | |
| CVE-2019-15107 | Webmin | 2022-03-25 | Ransomware |
| CVE-2019-12989 | Citrix SD-WAN and NetScaler | 2022-03-25 | |
| CVE-2019-11043 | PHP FastCGI Process Manager (FPM) | 2022-03-25 | Ransomware |
| CVE-2019-10068 | Kentico Xperience | 2022-03-25 | |
| CVE-2019-1003030 | Jenkins Matrix Project Plugin | 2022-03-25 | |
| CVE-2018-6961 | VMware SD-WAN Edge | 2022-03-25 | |
| CVE-2018-1273 | VMware Tanzu Spring Data Commons | 2022-03-25 | Ransomware |
| CVE-2018-11138 | Quest KACE System Management Appliance | 2022-03-25 | Ransomware |
| CVE-2017-3881 | Cisco IOS and IOS XE | 2022-03-25 | |
| CVE-2017-12617 | Apache Tomcat | 2022-03-25 | |
| CVE-2017-12615 | Apache Tomcat | 2022-03-25 | Ransomware |
| CVE-2016-1555 | NETGEAR Wireless Access Point (WAP) Devices | 2022-03-25 | |
| CVE-2015-3035 | TP-Link Multiple Archer Devices | 2022-03-25 | |
| CVE-2015-1427 | Elastic Elasticsearch | 2022-03-25 | |
| CVE-2014-6287 | Rejetto HTTP File Server (HFS) | 2022-03-25 | |
| CVE-2014-3120 | Elastic Elasticsearch | 2022-03-25 | |
| CVE-2013-2251 | Apache Struts | 2022-03-25 | |
| CVE-2012-1823 | PHP | 2022-03-25 | |
| CVE-2010-2861 | Adobe ColdFusion | 2022-03-25 | Ransomware |
| CVE-2009-1151 | phpMyAdmin | 2022-03-25 | |
| CVE-2021-21973 | VMware vCenter Server and Cloud Foundation | 2022-03-07 | |
| CVE-2019-11581 | Atlassian Jira Server and Data Center | 2022-03-07 | |
| CVE-2016-6277 | NETGEAR Multiple Routers | 2022-03-07 | |
| CVE-2020-1938 | Apache Tomcat | 2022-03-03 | |
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) | 2022-02-25 | Ransomware |
| CVE-2022-23134 | Zabbix Frontend | 2022-02-22 | |
| CVE-2022-23131 | Zabbix Frontend | 2022-02-22 | |
| CVE-2022-24086 | Adobe Commerce and Magento Open Source | 2022-02-15 | |
| CVE-2017-9841 | PHPUnit | 2022-02-15 | |
| CVE-2020-0796 | Microsoft SMBv3 | 2022-02-10 | Ransomware |
| CVE-2018-1000861 | Jenkins Stapler Web Framework | 2022-02-10 | |
| CVE-2017-9791 | Apache Struts 1 | 2022-02-10 | |
| CVE-2017-10271 | Oracle WebLogic Server | 2022-02-10 | Ransomware |
| CVE-2016-3088 | Apache ActiveMQ | 2022-02-10 | |
| CVE-2015-1635 | Microsoft HTTP.sys | 2022-02-10 | |
| CVE-2021-20038 | SonicWall SMA 100 Appliances | 2022-01-28 | Ransomware |
| CVE-2020-5722 | Grandstream UCM6200 | 2022-01-28 | |
| CVE-2017-5689 | Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability | 2022-01-28 | |
| CVE-2014-6271 | GNU Bourne-Again Shell (Bash) | 2022-01-28 | |
| CVE-2021-40870 | Aviatrix Controller | 2022-01-18 | |
| CVE-2021-33766 | Microsoft Exchange Server | 2022-01-18 | |
| CVE-2021-32648 | October CMS | 2022-01-18 | |
| CVE-2021-25298 | Nagios XI | 2022-01-18 | |
| CVE-2021-25297 | Nagios XI | 2022-01-18 | |
| CVE-2021-25296 | Nagios XI | 2022-01-18 | |
| CVE-2021-21975 | VMware vRealize Operations Manager API | 2022-01-18 | Ransomware |
| CVE-2021-21315 | Npm package System Information Library for Node.JS | 2022-01-18 | |
| CVE-2020-14864 | Oracle Intelligence Enterprise Edition | 2022-01-18 | |
| CVE-2020-13927 | Apache Airflow's Experimental API | 2022-01-18 | |
| CVE-2020-11978 | Apache Airflow | 2022-01-18 | |
| CVE-2021-36260 | Hikvision Security cameras web server | 2022-01-10 | |
| CVE-2021-22017 | VMware vCenter Server | 2022-01-10 | |
| CVE-2019-9670 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-01-10 | |
| CVE-2019-7609 | Elastic Kibana | 2022-01-10 | |
| CVE-2019-2725 | Oracle WebLogic Server | 2022-01-10 | Ransomware |
| CVE-2017-1000486 | Primetek Primefaces Application | 2022-01-10 | |
| CVE-2015-7450 | IBM WebSphere Application Server and Server Hypervisor Edition | 2022-01-10 | |
| CVE-2021-44515 | Zoho Desktop Central | 2021-12-10 | |
| CVE-2021-44228 | Apache Log4j2 | 2021-12-10 | Ransomware |
| CVE-2021-35394 | Realtek Jungle Software Development Kit (SDK) | 2021-12-10 | |
| CVE-2020-17463 | Fuel CMS | 2021-12-10 | |
| CVE-2019-7238 | Sonatype Nexus Repository Manager | 2021-12-10 | |
| CVE-2019-10758 | MongoDB mongo-express | 2021-12-10 | |
| CVE-2019-0193 | Apache Solr | 2021-12-10 | |
| CVE-2017-17562 | Embedthis GoAhead | 2021-12-10 | |
| CVE-2017-12149 | Red Hat JBoss Application Server | 2021-12-10 | Ransomware |
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | 2021-12-01 | |
| CVE-2021-40438 | Apache | 2021-12-01 | Ransomware |
| CVE-2021-37415 | Zoho ManageEngine ServiceDesk Plus (SDP) | 2021-12-01 | |
| CVE-2021-42258 | BQE BillQuick Web Suite | 2021-11-03 | Ransomware |
| CVE-2021-42013 | Apache HTTP Server | 2021-11-03 | Ransomware |
| CVE-2021-41773 | Apache HTTP Server | 2021-11-03 | Ransomware |
| CVE-2021-40539 | Zoho ManageEngine | 2021-11-03 | Ransomware |
| CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) | 2021-11-03 | Ransomware |
| CVE-2021-35464 | ForgeRock Access Management (AM) | 2021-11-03 | Ransomware |
| CVE-2021-35395 | Realtek AP-Router SDK | 2021-11-03 | |
| CVE-2021-35211 | SolarWinds Serv-U | 2021-11-03 | Ransomware |
| CVE-2021-34473 | Microsoft Exchange Server | 2021-11-03 | Ransomware |
| CVE-2021-31755 | Tenda AC11 Router | 2021-11-03 | |
| CVE-2021-30116 | Kaseya Virtual System/Server Administrator (VSA) | 2021-11-03 | Ransomware |
| CVE-2021-27561 | Yealink Device Management | 2021-11-03 | |
| CVE-2021-26855 | Microsoft Exchange Server | 2021-11-03 | Ransomware |
| CVE-2021-26084 | Atlassian Confluence Server and Data Center | 2021-11-03 | Ransomware |
| CVE-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Management | 2021-11-03 | Ransomware |
| CVE-2021-22502 | Micro Focus Operation Bridge Reporter (OBR) | 2021-11-03 | |
| CVE-2021-22205 | GitLab Community and Enterprise Editions | 2021-11-03 | Ransomware |
| CVE-2021-22005 | VMware vCenter Server | 2021-11-03 | Ransomware |
| CVE-2021-21985 | VMware vCenter Server | 2021-11-03 | Ransomware |
| CVE-2021-21972 | VMware vCenter Server | 2021-11-03 | Ransomware |
| CVE-2021-20090 | Arcadyan Buffalo Firmware | 2021-11-03 | |
| CVE-2021-20021 | SonicWall Email Security | 2021-11-03 | Ransomware |
| CVE-2021-1498 | Cisco HyperFlex HX | 2021-11-03 | |
| CVE-2021-1497 | Cisco HyperFlex HX | 2021-11-03 | |
| CVE-2020-8657 | EyesOfNetwork | 2021-11-03 | |
| CVE-2020-8644 | PlaySMS | 2021-11-03 | |
| CVE-2020-8515 | DrayTek Multiple Vigor Routers | 2021-11-03 | |
| CVE-2020-8193 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | |
| CVE-2020-7961 | Liferay Portal | 2021-11-03 | |
| CVE-2020-6287 | SAP NetWeaver | 2021-11-03 | |
| CVE-2020-6207 | SAP Solution Manager | 2021-11-03 | |
| CVE-2020-5902 | F5 BIG-IP | 2021-11-03 | Ransomware |
| CVE-2020-5847 | Unraid | 2021-11-03 | |
| CVE-2020-4427 | IBM Data Risk Manager | 2021-11-03 | |
| CVE-2020-3952 | VMware vCenter Server | 2021-11-03 | |
| CVE-2020-3580 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2021-11-03 | Ransomware |
| CVE-2020-3452 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2021-11-03 | |
| CVE-2020-29583 | Zyxel Multiple Products | 2021-11-03 | |
| CVE-2020-26919 | NETGEAR JGS516PE Devices | 2021-11-03 | |
| CVE-2020-25506 | D-Link DNS-320 Device | 2021-11-03 | |
| CVE-2020-25213 | WordPress File Manager Plugin | 2021-11-03 | |
| CVE-2020-17530 | Apache Struts | 2021-11-03 | |
| CVE-2020-17496 | vBulletin | 2021-11-03 | |
| CVE-2020-16846 | SaltStack Salt | 2021-11-03 | |
| CVE-2020-15505 | Ivanti MobileIron Multiple Products | 2021-11-03 | |
| CVE-2020-14883 | Oracle WebLogic Server | 2021-11-03 | |
| CVE-2020-14882 | Oracle WebLogic Server | 2021-11-03 | |
| CVE-2020-14750 | Oracle WebLogic Server | 2021-11-03 | |
| CVE-2020-1472 | Microsoft Netlogon | 2021-11-03 | Ransomware |
| CVE-2020-11738 | WordPress Snap Creek Duplicator Plugin | 2021-11-03 | |
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model | 2021-11-03 | |
| CVE-2020-10221 | rConfig | 2021-11-03 | |
| CVE-2020-10199 | Sonatype Nexus Repository | 2021-11-03 | |
| CVE-2020-10189 | Zoho ManageEngine | 2021-11-03 | |
| CVE-2020-10148 | SolarWinds Orion | 2021-11-03 | |
| CVE-2019-9978 | WordPress Social Warfare Plugin | 2021-11-03 | |
| CVE-2019-9082 | ThinkPHP | 2021-11-03 | |
| CVE-2019-7481 | SonicWall SMA100 | 2021-11-03 | Ransomware |
| CVE-2019-5591 | Fortinet FortiOS | 2021-11-03 | Ransomware |
| CVE-2019-5544 | VMware ESXi and Horizon DaaS | 2021-11-03 | Ransomware |
| CVE-2019-4716 | IBM Planning Analytics | 2021-11-03 | |
| CVE-2019-3398 | Atlassian Confluence Server and Data Center | 2021-11-03 | |
| CVE-2019-3396 | Atlassian Confluence Server and Data Server | 2021-11-03 | Ransomware |
| CVE-2019-20085 | TVT NVMS-1000 | 2021-11-03 | |
| CVE-2019-19781 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | Ransomware |
| CVE-2019-17558 | Apache Solr | 2021-11-03 | |
| CVE-2019-16759 | vBulletin | 2021-11-03 | |
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers | 2021-11-03 | |
| CVE-2019-13608 | Citrix StoreFront Server | 2021-11-03 | Ransomware |
| CVE-2019-11580 | Atlassian Crowd and Crowd Data Center | 2021-11-03 | Ransomware |
| CVE-2019-11510 | Ivanti Pulse Connect Secure | 2021-11-03 | Ransomware |
| CVE-2018-7600 | Drupal Core | 2021-11-03 | Ransomware |
| CVE-2018-20062 | ThinkPHP noneCms | 2021-11-03 | |
| CVE-2018-18325 | DotNetNuke (DNN) | 2021-11-03 | |
| CVE-2018-15961 | Adobe ColdFusion | 2021-11-03 | |
| CVE-2018-15811 | DotNetNuke (DNN) | 2021-11-03 | |
| CVE-2018-13379 | Fortinet FortiOS | 2021-11-03 | Ransomware |
| CVE-2018-11776 | Apache Struts | 2021-11-03 | |
| CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) | 2021-11-03 | |
| CVE-2018-0171 | Cisco IOS and IOS XE | 2021-11-03 | |
| CVE-2017-9822 | DotNetNuke (DNN) | 2021-11-03 | Ransomware |
| CVE-2017-9805 | Apache Struts | 2021-11-03 | |
| CVE-2017-7269 | Microsoft Internet Information Services (IIS) | 2021-11-03 | |
| CVE-2017-5638 | Apache Struts | 2021-11-03 | Ransomware |
| CVE-2016-4437 | Apache Shiro | 2021-11-03 |
Know before an attacker does
Vardion checks your servers, websites, domains and leaked staff accounts on the schedule you set and tells you what to fix first, in plain words.