Skip to content
BackEsc
Sign in

No weakness recorded · Band 1

Exploited CVEs: no weakness recorded

202 CVEs · 202 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE whose record names no weakness (CWE) and that CISA lists as exploited. The named ones are the most at risk.

exploited in the wild
202

Every one of the 202 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Oracle Weblogic Server - Remote Command ExecutionCVE-2020-14882Oracle Corporation · CVSS 9.8 · 100% likelycovered by CyberSIXT

    Oracle

  2. Apache Struts2 S2-057 - Remote Code ExecutionCVE-2018-11776Apache Software Foundation · CVSS 8.1 · 100% likely

    Apache

  3. Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2021-34523Microsoft · CVSS 9 · 100% likely

    MicrosoftAPT35

  4. The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.CVE-2014-8361Realtek · CVSS 9.8 · 100% likelycovered by CyberSIXT

    Realtek2 articles

  5. Laravel with Ignition <= v8.4.2 Debug Mode - Remote Code ExecutionCVE-2021-3129Laravel · CVSS 9.8 · 100% likely

    Laravel

  6. Microsoft Open Management Infrastructure - Remote Code ExecutionCVE-2021-38647Microsoft · CVSS 9.8 · 100% likely

    Microsoft

  7. ElasticSearch - Remote Code ExecutionCVE-2015-1427Elastic · CVSS 9.8 · 100% likely

    Elastic

  8. Zoho ManageEngine Desktop Central - Remote Code ExecutionCVE-2021-44515Zoho · CVSS 9.8 · 100% likely

    Zoho (ManageEngine)

  9. Sophos Firewall <=18.5 MR3 - Remote Code ExecutionCVE-2022-1040Sophos · CVSS 9.8 · 100% likely

    Sophos

  10. Windows Print Spooler Remote Code Execution VulnerabilityCVE-2021-34527Microsoft · CVSS 8.8 · 100% likely

    Microsoft

  11. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0147Microsoft Corporation · CVSS 7.5 · 100% likely

    Microsoft

  12. ThinkPHP 5.0.23 - Remote Code ExecutionCVE-2018-20062ThinkPHP · CVSS 9.8 · 100% likely

    ThinkPHP

  13. Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Window…CVE-2017-0199Microsoft Corporation · CVSS 7.8 · 99% likely

    MicrosoftAPT37APT41

  14. Netlogon Elevation of Privilege VulnerabilityCVE-2020-1472Microsoft · CVSS 5.5 · 99% likely

    MicrosoftBerserk BearFIN7

  15. Ghostcat - Apache Tomcat - AJP File Read/Inclusion VulnerabilityCVE-2020-1938Apache · CVSS 9.8 · 99% likely

    Apache

  16. Oracle WebLogic Server - Remote Command ExecutionCVE-2020-14750Oracle Corporation · CVSS 9.8 · 99% likely

    Oracle

  17. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0144Microsoft Corporation · CVSS 8.8 · 99% likelycovered by CyberSIXT

    Microsoft

  18. Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality…CVE-2012-3152Oracle · CVSS 9.1 · 99% likely

    Oracle

  19. Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityCVE-2022-30190Microsoft · CVSS 7.8 · 98% likely

    Microsoft

  20. Microsoft Exchange - Authentication BypassCVE-2021-33766Microsoft · CVSS 7.3 · 98% likely

    Microsoft

  21. RealTek Jungle SDK - Arbitrary Command InjectionCVE-2021-35395Realtek · CVSS 9.8 · 98% likely

    Realtek

  22. PRTG Network Monitor - Local File InclusionCVE-2018-19410Paessler · CVSS 9.8 · 98% likely

    Paessler

  23. Oracle Fusion Middleware WebLogic Server Administration Console - Remote Code ExecutionCVE-2020-14883Oracle Corporation · CVSS 7.2 · 98% likely

    Oracle

  24. D-Link DCS-2530L/DCS-2670L - Administrator Password DisclosureCVE-2020-25078D-Link · CVSS 7.5 · 98% likely

    D-Link

  25. Embedthis GoAhead <3.6.5 - Remote Code ExecutionCVE-2017-17562Embedthis · CVSS 8.1 · 97% likely

    EmbedThis

  26. An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a r…CVE-2020-11651SaltStack · CVSS 9.8 · 97% likely

    SaltStack

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in