CVEs
All CVEs
Every published CVE, 406,571 of them, not only those in the news: browse by vendor and product or weakness, by year and month, or by how likely each is to be exploited.
YearAny year
BandExploited, check or likely
Exploited, with a check, or likely to be exploited · 20,436 CVEs · the first 2,000 are paged here; narrow by month or band, or see every one on the Atlas · most likely exploited first; narrow the list to sort it by date or CVSS
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-109619In CISA KEVExploitedPHP 8.2 < 8.2.35, 8.3 < 8.3.36, 8.4 < 8.4.27, 8.5 < 8.5.12 - Use-After-Free Remote Code ExecutionPHP Group · PHP · CVSS 9.2 · 2026-10-21 | 9.2 | 100% | 2026-10-21 |
| CVE-2026-109618In CISA KEVExploitedPHP2Shell (CVE-2026-109618/CVE-2026-109619) - Active Crash DetectionPHP Group · PHP · CVSS 9.2 · 2026-10-21 | 9.2 | 100% | 2026-10-21 |
| CVE-2025-53770In CISA KEVExploitedMicrosoft SharePoint Server - Remote Code Execution (ToolShell)Microsoft · Microsoft SharePoint Enterprise Server 2016 · CVSS 9.8 · 2025-07-20 | 9.8 | 100% | 2025-07-20 |
| CVE-2024-7593In CISA KEVExploitedIvanti vTM - Authentication BypassIvanti · vTM · CVSS 9.8 · 2024-08-13 | 9.8 | 100% | 2024-08-13 |
| CVE-2024-3400In CISA KEVExploitedGlobalProtect - OS Command InjectionPalo Alto Networks · PAN-OS · CVSS 10 · 2024-04-12 | 10.0 | 100% | 2024-04-12 |
| CVE-2024-23897In CISA KEVExploitedJenkins < 2.441 - Arbitrary File ReadJenkins Project · Jenkins · CVSS 9.8 · 2024-01-24 | 9.8 | 100% | 2024-01-24 |
| CVE-2024-21893In CISA KEVExploitedIvanti SAML - Server Side Request Forgery (SSRF)Ivanti · ICS · CVSS 8.2 · 2024-01-31 | 8.2 | 100% | 2024-01-31 |
| CVE-2024-21887In CISA KEVExploitedIvanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) - Command InjectionIvanti · ICS · CVSS 9.1 · 2024-01-12 | 9.1 | 100% | 2024-01-12 |
| CVE-2023-4966In CISA KEVExploitedCitrix Bleed - Leaking Session TokensCitrix · NetScaler ADC · CVSS 9.4 · 2023-10-10 | 9.4 | 100% | 2023-10-10 |
| CVE-2023-44487In CISA KEVExploitedThe HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August throug…IETF · HTTP/2 · CVSS 7.5 · 2023-10-10 | 7.5 | 100% | 2023-10-10 |
| CVE-2023-35082In CISA KEVExploitedMobileIron Core - Remote Unauthenticated API AccessIvanti · EPMM · CVSS 10 · 2023-08-15 | 10.0 | 100% | 2023-08-15 |
| CVE-2023-35078In CISA KEVExploitedIvanti Endpoint Manager Mobile (EPMM) - Authentication BypassIvanti · Endpoint Manager Mobile · CVSS 10 · 2023-07-25 | 10.0 | 100% | 2023-07-25 |
| CVE-2023-32315In CISA KEVExploitedOpenfire Administration Console - Authentication Bypassigniterealtime · Openfire · CVSS 8.6 · 2023-05-26 | 8.6 | 100% | 2023-05-26 |
| CVE-2023-27350In CISA KEVExploitedPaperCut - Unauthenticated Remote Code ExecutionPaperCut · NG · CVSS 9.8 · 2023-04-20 | 9.8 | 100% | 2023-04-20 |
| CVE-2023-22518In CISA KEVExploitedAtlassian Confluence Server - Improper AuthorizationAtlassian · Confluence Data Center · CVSS 10 · 2023-10-31 | 10.0 | 100% | 2023-10-31 |
| CVE-2023-1671In CISA KEVExploitedSophos Web Appliance - Remote Code ExecutionSophos · Sophos Web Appliance · CVSS 9.8 · 2023-04-04 | 9.8 | 100% | 2023-04-04 |
| CVE-2023-1389In CISA KEVExploitedTP-Link Archer AX21 (AX1800) - Unauthenticated Command InjectionTP-Link · TP-Link Archer AX21 (AX1800) · CVSS 8.8 · 2023-03-15 | 8.8 | 100% | 2023-03-15 |
| CVE-2023-0669In CISA KEVExploitedFortra GoAnywhere MFT - Remote Code ExecutionFortra · Goanywhere MFT · CVSS 7.2 · 2023-02-06 | 7.2 | 100% | 2023-02-06 |
| CVE-2022-29464In CISA KEVExploitedWSO2 Management - Arbitrary File Upload & Remote Code ExecutionWSO2 · Multiple Products · CVSS 9.8 · 2022-04-18 | 9.8 | 100% | 2022-04-18 |
| CVE-2022-26134In CISA KEVExploitedConfluence - Remote Code ExecutionAtlassian · Confluence Data Center · CVSS 9.8 · 2022-06-03 | 9.8 | 100% | 2022-06-03 |
| CVE-2021-44228In CISA KEVExploitedApache Log4j2 Remote Code InjectionApache Software Foundation · Apache Log4j2 · CVSS 10 · 2021-12-10 | 10.0 | 100% | 2021-12-10 |
| CVE-2021-40438In CISA KEVExploitedApache <= 2.4.48 Mod_Proxy - Server-Side Request ForgeryApache Software Foundation · Apache HTTP Server · CVSS 9 · 2021-09-16 | 9.0 | 100% | 2021-09-16 |
| CVE-2021-35464In CISA KEVExploitedForgeRock OpenAM <7.0 - Remote Code ExecutionForgeRock · Access Management (AM) · CVSS 9.8 · 2021-07-22 | 9.8 | 100% | 2021-07-22 |
| CVE-2021-34473In CISA KEVExploitedExchange Server - Remote Code ExecutionMicrosoft · Microsoft Exchange Server 2013 Cumulative Update 23 · CVSS 9.1 · 2021-07-14 | 9.1 | 100% | 2021-07-14 |
| CVE-2021-26086In CISA KEVExploitedAtlassian Jira Limited - Local File InclusionAtlassian · Jira Server · CVSS 5.3 · 2021-08-16 | 5.3 | 100% | 2021-08-16 |
| CVE-2021-26084In CISA KEVExploitedConfluence Server - Remote Code ExecutionAtlassian · Confluence Server · CVSS 9.8 · 2021-08-30 | 9.8 | 100% | 2021-08-30 |
| CVE-2021-22005In CISA KEVExploitedVMware vCenter Server - Arbitrary File UploadVMware · VMware vCenter Server, VMware Cloud Foundation · CVSS 9.8 · 2021-09-23 | 9.8 | 100% | 2021-09-23 |
| CVE-2021-21985In CISA KEVExploitedVMware vSphere Client (HTML5) - Remote Code ExecutionVMware · VMware vCenter Server and VMware Cloud Foundation · CVSS 9.8 · 2021-05-26 | 9.8 | 100% | 2021-05-26 |
| CVE-2021-1498In CISA KEVExploitedCisco HyperFlex HX Data Platform - Remote Command ExecutionCisco · Cisco HyperFlex HX Data Platform · CVSS 9.8 · 2021-05-06 | 9.8 | 100% | 2021-05-06 |
| CVE-2020-5902In CISA KEVExploitedF5 BIG-IP TMUI - Remote Code ExecutionF5 · BIG-IP · CVSS 9.8 · 2020-07-01 | 9.8 | 100% | 2020-07-01 |
| CVE-2019-19781In CISA KEVExploitedCitrix ADC and Gateway - Directory TraversalCitrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance · CVSS 9.8 · 2019-12-27 | 9.8 | 100% | 2019-12-27 |
| CVE-2019-11510In CISA KEVExploitedPulse Connect Secure SSL VPN Arbitrary File ReadIvanti · Pulse Connect Secure · CVSS 9.9 · 2019-05-08 | 9.9 | 100% | 2019-05-08 |
| CVE-2019-0708In CISA KEVExploitedA remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RD…Microsoft · Windows · CVSS 9.8 · 2019-05-16 | 9.8 | 100% | 2019-05-16 |
| CVE-2018-13379In CISA KEVExploitedFortinet FortiOS - Credentials DisclosureFortinet · Fortinet FortiOS, FortiProxy · CVSS 9.1 · 2019-06-04 | 9.1 | 100% | 2019-06-04 |
| CVE-2017-9841In CISA KEVExploitedPHPUnit - Remote Code ExecutionPHPUnit · PHPUnit · CVSS 9.8 · 2017-06-27 | 9.8 | 100% | 2017-06-27 |
| CVE-2017-5638In CISA KEVExploitedApache Struts 2 - Remote Command ExecutionApache Software Foundation · Apache Struts · CVSS 9.8 · 2017-03-11 | 9.8 | 100% | 2017-03-11 |
| CVE-2015-1635In CISA KEVExploitedMicrosoft Windows 'HTTP.sys' - Remote Code ExecutionMicrosoft · HTTP.sys · CVSS 9.8 · 2015-04-14 | 9.8 | 100% | 2015-04-14 |
| CVE-2014-6271In CISA KEVExploitedShellShock - Remote Code ExecutionGNU · Bourne-Again Shell (Bash) · CVSS 9.8 · 2014-09-24 | 9.8 | 100% | 2014-09-24 |
| CVE-2014-0160In CISA KEVExploitedThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive infor…OpenSSL · OpenSSL · CVSS 7.5 · 2014-04-07 | 7.5 | 100% | 2014-04-07 |
| CVE-2022-22954In CISA KEVExploitedVMware Workspace ONE Access - Server-Side Template InjectionVMware · VMware Workspace ONE Access and Identity Manager · CVSS 9.8 · 2022-04-11 | 9.8 | 100% | 2022-04-11 |
| CVE-2017-7921In CISA KEVExploitedHikvision - Authentication BypassHikvision · Hikvision Cameras · CVSS 9.8 · 2017-05-06 | 9.8 | 100% | 2017-05-06 |
| CVE-2013-2251In CISA KEVExploitedApache Struts 2 - DefaultActionMapper Prefixes OGNL Code ExecutionApache · Struts · CVSS 9.8 · 2013-07-18 | 9.8 | 100% | 2013-07-18 |
| CVE-2012-1823In CISA KEVExploitedPHP CGI v5.3.12/5.4.2 Remote Code ExecutionPHP · PHP · CVSS 9.8 · 2012-05-11 | 9.8 | 100% | 2012-05-11 |
| CVE-2020-14882In CISA KEVExploitedOracle Weblogic Server - Remote Command ExecutionOracle Corporation · WebLogic Server · CVSS 9.8 · 2020-10-21 | 9.8 | 100% | 2020-10-21 |
| CVE-2025-49704In CISA KEVExploitedMicrosoft SharePoint Remote Code Execution VulnerabilityMicrosoft · Microsoft SharePoint Enterprise Server 2016 · CVSS 8.8 · 2025-07-08 | 8.8 | 100% | 2025-07-08 |
| CVE-2021-26855In CISA KEVExploitedMicrosoft Exchange Server SSRF VulnerabilityMicrosoft · Microsoft Exchange Server 2013 Cumulative Update 21 · CVSS 9.1 · 2021-03-02 | 9.1 | 100% | 2021-03-02 |
| CVE-2019-16920In CISA KEVExploitedD-Link Routers - Remote Code ExecutionD-Link · Multiple Routers · CVSS 9.8 · 2019-09-27 | 9.8 | 100% | 2019-09-27 |
| CVE-2018-11776In CISA KEVExploitedApache Struts2 S2-057 - Remote Code ExecutionApache Software Foundation · Apache Struts · CVSS 8.1 · 2018-08-22 | 8.1 | 100% | 2018-08-22 |
| CVE-2024-3273In CISA KEVExploitedD-Link Network Attached Storage - Command Injection and Backdoor AccountD-Link · DNS-320L · CVSS 7.3 · 2024-04-04 | 7.3 | 100% | 2024-04-04 |
| CVE-2022-44877In CISA KEVExploitedCentOS Web Panel 7 <0.9.8.1147 - Remote Code ExecutionCWP · Control Web Panel · CVSS 9.8 · 2023-01-05 | 9.8 | 100% | 2023-01-05 |
Bands: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. A vendor is listed once it has five CVEs or one exploited. Data as of 2026-11-14.