Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 10 of 30. 100 incidents from 3 September 2024 to 15 December 2024.
15 December 2024
- MC2 Data data breach: 2.1M accounts exposed High · Breach · Closed
14 December 2024
- Yonéma data breach: 35K accounts exposed High · Breach · Closed
- Tibber data breach: 50K accounts exposed Medium · Breach · Closed
13 December 2024
- Cleo Multiple Products Unrestricted File Upload Vulnerability (CVE-2024-50623) Critical · Patch now · Closed
10 December 2024
9 December 2024
- Ladies.com data breach: 118K accounts exposed High · Breach · Closed
- Senior Dating data breach: 765K accounts exposed High · Breach · Closed
4 December 2024
- CyberPanel Incorrect Default Permissions Vulnerability (CVE-2024-51378) Critical · Patch now · Closed
3 December 2024
- Zyxel Multiple Firewalls Path Traversal Vulnerability (CVE-2024-11667) Critical · Patch now · Closed
- ProjectSend Improper Authentication Vulnerability (CVE-2024-11680) Critical · Patch now · Closed
- North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability (CVE-2023-45727) High · Patch now · Closed
25 November 2024
- Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability (CVE-2023-28461) Critical · Patch now · Closed
22 November 2024
- The Real World data breach: 324K accounts exposed Medium · Breach · Closed
21 November 2024
- Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability (CVE-2024-21287) High · Patch now · Closed
- Apple Multiple Products Code Execution Vulnerability (CVE-2024-44308) High · Patch now · Closed
- Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability (CVE-2024-44309) Medium · Patch now · Closed
20 November 2024
- VMware vCenter Server Privilege Escalation Vulnerability (CVE-2024-38813) Critical · Patch now · Closed
- VMware vCenter Server Heap-Based Buffer Overflow Vulnerability (CVE-2024-38812) Critical · Patch now · Closed
- FlipaClip data breach: 892K accounts exposed Medium · Breach · Closed
19 November 2024
- Finsure data breach: 296K accounts exposed Medium · Breach · Closed
18 November 2024
- Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability (CVE-2024-0012) Critical · Patch now · Closed
- Progress Kemp LoadMaster OS Command Injection Vulnerability (CVE-2024-1212) Critical · Patch now · Closed
- Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability (CVE-2024-9474) High · Patch now · Closed
14 November 2024
- Palo Alto Networks Expedition SQL Injection Vulnerability (CVE-2024-9465) Critical · Patch now · Closed
- Palo Alto Networks Expedition OS Command Injection Vulnerability (CVE-2024-9463) High · Patch now · Closed
13 November 2024
- DemandScience by Pure Incubation data breach: 121.8M accounts exposed High · Breach · Closed
12 November 2024
- Metabase GeoJSON API Local File Inclusion Vulnerability (CVE-2021-41277) High · Patch now · Closed
- Microsoft Windows Task Scheduler Privilege Escalation Vulnerability (CVE-2024-49039) High · Patch now · Closed
- Atlassian Jira Server and Data Center Path Traversal Vulnerability (CVE-2021-26086) Medium · Patch now · Closed
- Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability (CVE-2014-2120) Medium · Patch now · Closed
- Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability (CVE-2024-43451) Medium · Patch now · Closed
11 November 2024
- Hot Topic data breach: 56.9M accounts exposed High · Breach · Closed
7 November 2024
- Nostromo nhttpd Directory Traversal Vulnerability (CVE-2019-16278) Critical · Patch now · Closed
- CyberPanel Incorrect Default Permissions Vulnerability (CVE-2024-51567) Critical · Patch now · Closed
- Palo Alto Networks Expedition Missing Authentication Vulnerability (CVE-2024-5910) Critical · Patch now · Closed
- Android Framework Privilege Escalation Vulnerability (CVE-2024-43093) High · Patch now · Closed
- Earth 2 data breach: 420K accounts exposed Medium · Breach · Closed
5 November 2024
- Altenen data breach: 1.3M accounts exposed High · Breach · Closed
- Dennis Kirk data breach: 1.4M accounts exposed Medium · Breach · Closed
4 November 2024
- PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability (CVE-2024-8956) Critical · Patch now · Closed
- PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability (CVE-2024-8957) High · Patch now · Closed
- Z-lib data breach: 9.7M accounts exposed High · Breach · Closed
31 October 2024
- Stalker Online data breach: 1.4M accounts exposed High · Breach · Closed
30 October 2024
- VimeWorld data breach: 3.1M accounts exposed High · Breach · Closed
- TNAFlix data breach: 1.4M accounts exposed High · Breach · Closed
27 October 2024
- StreamCraft data breach: 1.8M accounts exposed High · Breach · Closed
26 October 2024
- The Club Penguin Experience data breach: 6342 accounts exposed High · Breach · Closed
25 October 2024
- digiDirect data breach: 304K accounts exposed Medium · Breach · Closed
24 October 2024
- RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability (CVE-2024-37383) Medium · Patch now · Closed
- Cisco ASA and FTD Denial-of-Service Vulnerability (CVE-2024-20481) Medium · Patch now · Closed
23 October 2024
- Fortinet FortiManager Missing Authentication Vulnerability (CVE-2024-47575) Critical · Patch now · Closed
22 October 2024
- Microsoft SharePoint Deserialization Vulnerability (CVE-2024-38094) High · Patch now · Closed
21 October 2024
- ScienceLogic SL1 Unspecified Vulnerability (CVE-2024-9537) Critical · Patch now · Closed
- Fair Vote Canada data breach: 134K accounts exposed Medium · Breach · Closed
17 October 2024
- Veeam Backup and Replication Deserialization Vulnerability (CVE-2024-40711) Critical · Patch now · Closed
- AlpineReplay data breach: 898K accounts exposed High · Breach · Closed
15 October 2024
- SolarWinds Web Help Desk Hardcoded Credential Vulnerability (CVE-2024-28987) Critical · Patch now · Closed
- Mozilla Firefox Use-After-Free Vulnerability (CVE-2024-9680) Critical · Patch now · Closed
- Microsoft Windows Kernel TOCTOU Race Condition Vulnerability (CVE-2024-30088) High · Patch now · Closed
9 October 2024
- Fortinet Multiple Products Format String Vulnerability (CVE-2024-23113) Critical · Patch now · Closed
- Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability (CVE-2024-9380) High · Patch now · Closed
- Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability (CVE-2024-9379) High · Patch now · Closed
- Internet Archive data breach: 31.1M accounts exposed High · Breach · Closed
8 October 2024
- Microsoft Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43573) High · Patch now · Closed
- Microsoft Windows Management Console Remote Code Execution Vulnerability (CVE-2024-43572) High · Patch now · Closed
- Qualcomm Multiple Chipsets Use-After-Free Vulnerability (CVE-2024-43047) High · Patch now · Closed
- Muah.AI data breach: 1.9M accounts exposed High · Breach · Closed
5 October 2024
- Switch data breach: 5397 accounts exposed Low · Breach · Closed
3 October 2024
- Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability (CVE-2024-45519) Critical · Patch now · Closed
2 October 2024
- Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability (CVE-2024-29824) High · Patch now · Closed
1 October 2024
- BudTrader data breach: 2.7M accounts exposed High · Breach · Closed
30 September 2024
- SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability (CVE-2019-0344) Critical · Patch now · Closed
- DrayTek Multiple Vigor Routers OS Command Injection Vulnerability (CVE-2020-15415) Critical · Patch now · Closed
- D-Link DIR-820 Router OS Command Injection Vulnerability (CVE-2023-25280) Critical · Patch now · Closed
- Central Tickets data breach: 722K accounts exposed High · Breach · Closed
24 September 2024
- Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability (CVE-2024-7593) Critical · Patch now · Closed
23 September 2024
- GameVN data breach: 1.4M accounts exposed High · Breach · Closed
19 September 2024
- Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability (CVE-2024-8963) Critical · Patch now · Closed
- HuntStand data breach: 2.8M accounts exposed Medium · Breach · Closed
18 September 2024
- Oracle WebLogic Server Remote Code Execution Vulnerability (CVE-2020-14644) Critical · Patch now · Closed
- Oracle ADF Faces Deserialization of Untrusted Data Vulnerability (CVE-2022-21445) Critical · Patch now · Closed
- Apache HugeGraph-Server Improper Access Control Vulnerability (CVE-2024-27348) Critical · Patch now · Closed
- Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability (CVE-2020-0618) High · Patch now · Closed
17 September 2024
- Adobe Flash Player Integer Underflow Vulnerablity (CVE-2014-0497) Critical · Patch now · Closed
- Adobe Flash Player Double Free Vulnerablity (CVE-2014-0502) High · Patch now · Closed
- Adobe Flash Player Code Execution Vulnerability (CVE-2013-0648) High · Patch now · Closed
- Adobe Flash Player Incorrect Default Permissions Vulnerability (CVE-2013-0643) High · Patch now · Closed
16 September 2024
- Progress WhatsUp Gold SQL Injection Vulnerability (CVE-2024-6670) Critical · Patch now · Closed
- Microsoft Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461) High · Patch now · Closed
- Instituto Nacional de Deportes de Chile data breach: 319K accounts exposed High · Breach · Closed
15 September 2024
- Games Box data breach: 1.4M accounts exposed High · Breach · Closed
13 September 2024
- Ivanti Cloud Services Appliance OS Command Injection Vulnerability (CVE-2024-8190) High · Patch now · Closed
10 September 2024
- Microsoft Windows Installer Improper Privilege Management Vulnerability (CVE-2024-38014) High · Patch now · Closed
- Microsoft Publisher Protection Mechanism Failure Vulnerability (CVE-2024-38226) High · Patch now · Closed
- Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability (CVE-2024-38217) Medium · Patch now · Closed
9 September 2024
- SonicWall SonicOS Improper Access Control Vulnerability (CVE-2024-40766) Critical · Patch now · Closed
- Linux Kernel PIE Stack Buffer Corruption Vulnerability (CVE-2017-1000253) High · Patch now · Closed
- ImageMagick Improper Input Validation Vulnerability (CVE-2016-3714) High · Patch now · Closed
3 September 2024
- Kingsoft WPS Office Path Traversal Vulnerability (CVE-2024-7262) High · Patch now · Closed
- Draytek VigorConnect Path Traversal Vulnerability (CVE-2021-20124) High · Patch now · Closed