Exploited vulnerabilities
The vulnerabilities attackers actually use, gathered from public sources and ranked by priority. Updated automatically, every day.
1,786exploited vulnerabilities tracked
5added in 7 days
38added in 30 days
38rising fast
361used by ransomware
667to fix within 24 h
| CVE | Product | EPSS |
|---|---|---|
| CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | 99.9% |
| CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | 100.00% |
| CVE-2014-1776 | Microsoft Internet Explorer Memory Corruption Vulnerability | 82.7% |
| CVE-2021-35247 | SolarWinds Serv-U Improper Input Validation Vulnerability | 3.7% |
| CVE-2018-8453 | Microsoft Win32k Privilege Escalation Vulnerability | 70.0% |
| CVE-2012-0391 | Apache Struts 2 Improper Input Validation Vulnerability | 75.6% |
| CVE-2006-1547 | Apache Struts 1 ActionForm Denial-of-Service Vulnerability | 54.6% |
| CVE-2021-40870 | Aviatrix Controller Unrestricted Upload of File | 93.0% |
| CVE-2021-33766 | Microsoft Exchange Server Information Disclosure | 98.2% |
| CVE-2021-32648 | October CMS Improper Authentication | 91.1% |
| CVE-2021-25298 | Nagios XI OS Command Injection | 73.6% |
| CVE-2021-25297 | Nagios XI OS Command Injection | 56.7% |
| CVE-2021-25296 | Nagios XI OS Command Injection | 71.9% |
| CVE-2021-22991 | F5 BIG-IP Traffic Management Microkernel Buffer Overflow | 62.4% |
| CVE-2021-21975 | VMware Server Side Request Forgery in vRealize Operations Manager API | 78.0% |
| CVE-2021-21315 | System Information Library for Node.JS Command InjectionNpm package | 90.7% |
| CVE-2020-14864 | Oracle Business Intelligence Enterprise Edition Path Transversal | 97.2% |
| CVE-2020-13927 | Apache Airflow's Experimental API Authentication Bypass | 99.8% |
| CVE-2020-13671 | Drupal core Un-restricted Upload of File | 36.2% |
| CVE-2020-11978 | Apache Airflow Command Injection | 99.2% |
| CVE-2021-36260 | Hikvision Improper Input Validation | 99.9% |
| CVE-2021-27860 | FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit | 39.7% |
| CVE-2021-22017 | VMware vCenter Server Improper Access Control | 49.2% |
| CVE-2020-6572 | Google Chrome Media Use-After-Free Vulnerability | 10.6% |
| CVE-2019-10149 | Exim Mail Transfer Agent (MTA) Improper Input Validation | 99.96% |
| CVE-2019-9670 | Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference | 99.99% |
| CVE-2019-7609 | Kibana Arbitrary Code ExecutionElastic | 95.3% |
| CVE-2019-2725 | Oracle WebLogic Server, Injection | 99.98% |
| CVE-2019-1579 | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | 44.2% |
| CVE-2019-1458 | Microsoft Win32k Privilege Escalation Vulnerability | 74.4% |
How we rank vulnerabilities
A vulnerability joins this list as soon as CISA adds it to its KEV catalog or ENISA flags it as exploited in the EUVD.
The CheckOps priority index, out of 10, combines severity (CVSS), the probability of exploitation within 30 days (EPSS, FIRST) and public exploitation signals.
Above 8, we recommend patching within 24 hours; above 6, or as soon as a vulnerability is exploited, within 7 days.
Sources: CISA KEV · ENISA EUVD · FIRST EPSS · OSV. Public data aggregated by CheckOps, updated automatically. Source texts remain the property of their authors.