Exploited vulnerabilities
The vulnerabilities attackers actually use, gathered from public sources and ranked by priority. Updated automatically, every day.
1,786exploited vulnerabilities tracked
5added in 7 days
38added in 30 days
38rising fast
361used by ransomware
667to fix within 24 h
| CVE | Product | EPSS |
|---|---|---|
| CVE-2019-1003030 | Jenkins Matrix Project Plugin Remote Code Execution Vulnerability | 97.1% |
| CVE-2019-16920 | D-Link Multiple Routers Command Injection Vulnerability | 100.00% |
| CVE-2019-15107 | Webmin Command Injection Vulnerability | 99.7% |
| CVE-2019-12991 | Citrix SD-WAN and NetScaler Command Injection Vulnerability | 74.5% |
| CVE-2019-12989 | Citrix SD-WAN and NetScaler SQL Injection Vulnerability | 95.0% |
| CVE-2019-11043 | PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability | 99.8% |
| CVE-2019-10068 | Kentico Xperience Deserialization of Untrusted Data Vulnerability | 95.1% |
| CVE-2019-6340 | Drupal Core Remote Code Execution Vulnerability | 92.0% |
| CVE-2019-2616 | Oracle BI Publisher Unauthorized Access Vulnerability | 92.2% |
| CVE-2019-0903 | Microsoft GDI Remote Code Execution Vulnerability | 21.7% |
| CVE-2018-14839 | LG N1A1 NAS Remote Command Execution Vulnerability | 89.2% |
| CVE-2018-11138 | Quest KACE System Management Appliance Remote Command Execution Vulnerability | 91.7% |
| CVE-2018-8414 | Microsoft Windows Shell Remote Code Execution Vulnerability | 72.6% |
| CVE-2018-8373 | Microsoft Scripting Engine Memory Corruption Vulnerability | 61.8% |
| CVE-2018-6961 | VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability | 85.3% |
| CVE-2018-1273 | VMware Tanzu Spring Data Commons Property Binder Vulnerability | 97.0% |
| CVE-2018-0147 | Cisco Secure Access Control System Java Deserialization Vulnerability | 18.2% |
| CVE-2018-0125 | Cisco VPN Routers Remote Code Execution Vulnerability | 55.2% |
| CVE-2017-12617 | Apache Tomcat Remote Code Execution Vulnerability | 99.97% |
| CVE-2017-12615 | Apache Tomcat on Windows Remote Code Execution Vulnerability | 99.7% |
| CVE-2017-6334 | NETGEAR DGN2200 Devices OS Command Injection Vulnerability | 72.6% |
| CVE-2017-6316 | Citrix Multiple Products Remote Code Execution Vulnerability | 73.0% |
| CVE-2017-3881 | Cisco IOS and IOS XE Remote Code Execution Vulnerability | 99.0% |
| CVE-2017-0146 | Microsoft Windows SMB Remote Code Execution Vulnerability | 89.9% |
| CVE-2016-11021 | D-Link DCS-930L Devices OS Command Injection Vulnerability | 69.6% |
| CVE-2016-10174 | NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability | 83.3% |
| CVE-2016-7892 | Adobe Flash Player Use-After-Free Vulnerability | 18.8% |
| CVE-2016-4171 | Adobe Flash Player Remote Code Execution Vulnerability | 20.1% |
| CVE-2016-1555 | NETGEAR Multiple WAP Devices Command Injection Vulnerability | 98.3% |
| CVE-2016-0752 | Ruby on Rails Directory Traversal Vulnerability | 95.5% |
How we rank vulnerabilities
A vulnerability joins this list as soon as CISA adds it to its KEV catalog or ENISA flags it as exploited in the EUVD.
The CheckOps priority index, out of 10, combines severity (CVSS), the probability of exploitation within 30 days (EPSS, FIRST) and public exploitation signals.
Above 8, we recommend patching within 24 hours; above 6, or as soon as a vulnerability is exploited, within 7 days.
Sources: CISA KEV · ENISA EUVD · FIRST EPSS · OSV. Public data aggregated by CheckOps, updated automatically. Source texts remain the property of their authors.