January 2020 · Band 1
Exploited in the wild
7 CVEs · 7 exploited
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Each square is a CVE listed by CISA as exploited. The named ones are the most likely to be exploited again.
- exploited in the wild
- 7
Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.
- A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.
- OpenSMTPD 6.4.0-6.6.1 - Remote Code Execution
- Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0,…
- Oracle WebLogic Server - Remote Code Execution
- A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by…
- A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. E…
- An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain executi…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.