Threat level Elevated
Contact

· Vulnerability feed · live

CVE feed

Aggregated from NVD and the CISA Known Exploited Vulnerabilities catalog, updated every 30 minutes. Scores use CVSS v3.1 where published.

RSS feed

Top vendors, last 30 days

1,521 published, 17 exploited
WeekMonthYear
  1. Google93 CVEs1 exploited
  2. Microsoft75 CVEs1 exploited
  3. Oracle66 CVEs
  4. ThemeREX66 CVEs
  5. Apache63 CVEs
  6. IBM48 CVEs
  7. TOTOLINK41 CVEs
  8. HPE36 CVEs
  9. Adobe35 CVEs
  10. Mozilla30 CVEs
  11. Wavlink26 CVEs
  12. Cisco23 CVEs2 exploited
  13. Hitachi18 CVEs
  14. Juniper Networks17 CVEs
  15. Progress Software13 CVEs
  16. Apple12 CVEs
  17. Splunk12 CVEs
  18. Linksys11 CVEs
  19. Linux11 CVEs
  20. axiomthemes10 CVEs

Most exploited: Ivanti 3Cisco 2PHP Group 2all 17 exploited

Filters
Severity
Status
Newly exploitedAdded to KEV, last 7 days4Added to KEV, last 30 days34
Vendor
23 results last 30 daysDell Progress Software Sort:NewestExploited firstLikely exploitedCVSS
9.0Dell Wyse Management Suite — cross-site scripting.EPSS 0.3%9.1Progress Software WS_FTP Server — missing authorization.EPSS 0.7%9.1Progress Software WS_FTP Server — path traversal.EPSS 0.5%9.0Progress Software WS_FTP Server — command injection.EPSS 1.1%9.1Progress Software WS_FTP Server — remote code execution.EPSS 0.7%9.9Progress Software WS_FTP Server — command injection.EPSS 1.5%10.0Progress Software WS_FTP Server — authentication bypass.EPSS 0.6%9.8Dell PowerProtect Data Domain — buffer overflow.EPSS 0.8%9.6Dell PowerProtect Data Domain Management Center — SQL injection.EPSS 0.4%9.6Dell PowerProtect Data Domain Management Center — missing authorization.EPSS 0.3%9.8Dell PowerProtect Data Domain — Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release…EPSS 0.5%9.8Dell PowerProtect Data Domain — authentication bypass.EPSS 0.9%9.1Dell PowerProtect Data Domain Management Center — authentication bypass.EPSS 0.2%9.8Dell PowerProtect Data Domain — missing authorization.EPSS 0.3%9.0Dell Terraform Provider for Redfish — improper certificate validation.EPSS 0.2%9.8Progress Software Moveit Transfer — Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module).EPSS 0.5%9.8Progress Software Moveit Transfer — Insufficient Session Expiration vulnerability in Progress MOVEit Transfer.EPSS 0.4%9.6Progress Software MarkLogic Server — Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not…EPSS 0.3%9.9Progress Software MarkLogic Server — privilege escalation.EPSS 0.6%9.6Progress Software MarkLogic Server — privilege escalation.EPSS 0.4%9.9Progress Software MarkLogic Server — privilege escalation.EPSS 0.4%9.9Progress Software MarkLogic Server — privilege escalation.EPSS 0.4%9.8Dell Policy Manager For Secure Connect Gateway — Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an…EPSS 0.3%