Exploited vulnerabilities
The vulnerabilities attackers actually use, gathered from public sources and ranked by priority. Updated automatically, every day.
1,784exploited vulnerabilities tracked
7added in 7 days
36added in 30 days
38rising fast
361used by ransomware
665to fix within 24 h
| CVE | Product | EPSS |
|---|---|---|
| CVE-2023-48365 | Qlik Sense HTTP Tunneling Vulnerability | 47.7% |
| CVE-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | 99.98% |
| CVE-2024-55550 | Mitel MiCollab Path Traversal Vulnerability | 38.2% |
| CVE-2024-41713 | Mitel MiCollab Path Traversal Vulnerability | 97.2% |
| CVE-2020-2883 | Oracle WebLogic Server Unspecified Vulnerability | 94.6% |
| CVE-2024-3393 | Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability | 29.1% |
| CVE-2021-44207 | Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability | 17.6% |
| CVE-2024-12356 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability | 87.4% |
| CVE-2022-23227 | NUUO NVRmini2 Devices Missing Authentication Vulnerability | 48.5% |
| CVE-2021-40407 | Reolink RLC-410W IP Camera OS Command Injection Vulnerability | 47.6% |
| CVE-2019-11001 | Reolink Multiple IP Cameras OS Command Injection Vulnerability | 37.5% |
| CVE-2018-14933 | NUUO NVRmini Devices OS Command Injection Vulnerability | 94.8% |
| CVE-2024-55956 | Cleo Multiple Products Unauthenticated File Upload Vulnerability | 94.0% |
| CVE-2024-35250 | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability | 25.2% |
| CVE-2024-20767 | Adobe ColdFusion Improper Access Control Vulnerability | 98.5% |
| CVE-2024-50623 | Cleo Multiple Products Unrestricted File Upload Vulnerability | 98.6% |
| CVE-2024-49138 | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | 26.2% |
| CVE-2024-51378 | CyberPanel Incorrect Default Permissions VulnerabilityCyberPersons | 94.7% |
| CVE-2024-11680 | ProjectSend Improper Authentication Vulnerability | 91.8% |
| CVE-2024-11667 | Zyxel Multiple Firewalls Path Traversal Vulnerability | 2.9% |
| CVE-2023-45727 | North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability | 4.8% |
| CVE-2023-28461 | Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability | 68.1% |
| CVE-2024-44309 | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability | 21.9% |
| CVE-2024-44308 | Apple Multiple Products Code Execution Vulnerability | 9.9% |
| CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability | 1.7% |
| CVE-2024-38813 | VMware vCenter Server Privilege Escalation Vulnerability | 17.4% |
| CVE-2024-38812 | VMware vCenter Server Heap-Based Buffer Overflow Vulnerability | 54.6% |
| CVE-2024-9474 | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | 93.8% |
| CVE-2024-1212 | Progress Kemp LoadMaster OS Command Injection Vulnerability | 95.4% |
| CVE-2024-0012 | Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability | 99.8% |
How we rank vulnerabilities
A vulnerability joins this list as soon as CISA adds it to its KEV catalog or ENISA flags it as exploited in the EUVD.
The CheckOps priority index, out of 10, combines severity (CVSS), the probability of exploitation within 30 days (EPSS, FIRST) and public exploitation signals.
Above 8, we recommend patching within 24 hours; above 6, or as soon as a vulnerability is exploited, within 7 days.
Sources: CISA KEV · ENISA EUVD · FIRST EPSS · OSV. Public data aggregated by CheckOps, updated automatically. Source texts remain the property of their authors.