No vendor recorded · 2018
No vendor recorded: 2018
8,824 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE whose record names no vendor, published in 2018. The named ones are the most at risk.
- check available
- 139
- likely to be exploited
- 499
Every one of the 8,824 is a mark on the map. Named now: 1 to 26, most at risk first.
- Zoho manageengine - Cross-Site Scripting
- PhpMyAdmin <4.8.2 - Local File Inclusion
- Splunk <=7.0.1 - Information Disclosure
- Argus Surveillance DVR 4.0.0.0 - Local File Inclusion
- cgit < 1.2.1 - Directory Traversal
- Oturia WordPress Smart Google Code Inserter <3.5 - Authentication Bypass
- Jenkins GitHub Plugin <=1.29.1 - Server-Side Request Forgery
- Dell iDRAC7/8 Devices - Remote Code Injection
- WP GDPR Compliance < 1.4.3 - Unauthenticated Call Any Action or Update Any Option
- Western Digital MyCloud NAS - Authentication Bypass
- Dolibarr <7.0.2 - Cross-Site Scripting
- Joomla! JCK Editor SQL Injection
- FUEL CMS 1.4.1 - Remote Code Execution
- TBK DVR4104/DVR4216 Devices - Authentication Bypass
- Cisco RV132W/RV134W Router - Information Disclosure
- D-Link Routers - Remote Command Injection
- Responsive filemanager 9.13.1 Server-Side Request Forgery
- DedeCMS 5.7SP2 - Cross-Site Request Forgery/Remote Code Execution
- Jolokia Agent - JNDI Code Injection
- GitList < 0.6.0 Remote Code Execution
- Anchor CMS 0.12.3 - Error Log Exposure
- ACME mini_httpd <1.30 - Local File Inclusion
- Centos Web Panel 0.9.8.480 - Local File Inclusion
- uWSGI PHP Plugin Local File Inclusion
- Kentico - Installer Privilege Escalation
- Zoho ManageEngine OpManager - SQL Injection
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.