Exploited vulnerabilities
The vulnerabilities attackers actually use, gathered from public sources and ranked by priority. Updated automatically, every day.
1,784exploited vulnerabilities tracked
7added in 7 days
36added in 30 days
38rising fast
361used by ransomware
665to fix within 24 h
| CVE | Product | EPSS |
|---|---|---|
| CVE-2023-25280 | D-Link DIR-820 Router OS Command Injection Vulnerability | 97.9% |
| CVE-2020-15415 | DrayTek Multiple Vigor Routers OS Command Injection Vulnerability | 84.5% |
| CVE-2019-0344 | SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability | 7.5% |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | 100.00% |
| CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | 98.6% |
| CVE-2024-27348 | Apache HugeGraph-Server Improper Access Control Vulnerability | 99.2% |
| CVE-2022-21445 | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability | 62.5% |
| CVE-2020-14644 | Oracle WebLogic Server Remote Code Execution Vulnerability | 94.5% |
| CVE-2020-0618 | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability | 99.0% |
| CVE-2014-0502 | Adobe Flash Player Double Free Vulnerablity | 24.8% |
| CVE-2014-0497 | Adobe Flash Player Integer Underflow Vulnerablity | 99.9% |
| CVE-2013-0648 | Adobe Flash Player Code Execution Vulnerability | 11.1% |
| CVE-2013-0643 | Adobe Flash Player Incorrect Default Permissions Vulnerability | 10.5% |
| CVE-2024-43461 | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 54.5% |
| CVE-2024-6670 | Progress WhatsUp Gold SQL Injection Vulnerability | 92.9% |
| CVE-2024-8190 | Ivanti Cloud Services Appliance OS Command Injection Vulnerability | 88.5% |
| CVE-2024-38226 | Microsoft Publisher Protection Mechanism Failure Vulnerability | 2.7% |
| CVE-2024-38217 | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability | 10.0% |
| CVE-2024-38014 | Microsoft Windows Installer Improper Privilege Management Vulnerability | 6.3% |
| CVE-2024-40766 | SonicWall SonicOS Improper Access Control Vulnerability | 18.4% |
| CVE-2017-1000253 | Linux Kernel PIE Stack Buffer Corruption Vulnerability | 10.7% |
| CVE-2016-3714 | ImageMagick Improper Input Validation Vulnerability | 97.5% |
| CVE-2024-7262 | Kingsoft WPS Office Path Traversal Vulnerability | 3.1% |
| CVE-2021-20124 | Draytek VigorConnect Path Traversal Vulnerability | 95.9% |
| CVE-2021-20123 | Draytek VigorConnect Path Traversal Vulnerability | 89.7% |
| CVE-2024-7965 | Google Chromium V8 Inappropriate Implementation Vulnerability | 18.5% |
| CVE-2024-38856 | Apache OFBiz Incorrect Authorization Vulnerability | 99.4% |
| CVE-2024-7971 | Google Chromium V8 Type Confusion Vulnerability | 21.0% |
| CVE-2024-39717 | Versa Director Dangerous File Type Upload Vulnerability | 4.0% |
| CVE-2022-0185 | Linux Kernel Heap-Based Buffer Overflow Vulnerability | 25.2% |
How we rank vulnerabilities
A vulnerability joins this list as soon as CISA adds it to its KEV catalog or ENISA flags it as exploited in the EUVD.
The CheckOps priority index, out of 10, combines severity (CVSS), the probability of exploitation within 30 days (EPSS, FIRST) and public exploitation signals.
Above 8, we recommend patching within 24 hours; above 6, or as soon as a vulnerability is exploited, within 7 days.
Sources: CISA KEV · ENISA EUVD · FIRST EPSS · OSV. Public data aggregated by CheckOps, updated automatically. Source texts remain the property of their authors.