Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 11 of 30. 100 incidents from 23 April 2024 to 3 September 2024.
3 September 2024
- Draytek VigorConnect Path Traversal Vulnerability (CVE-2021-20123) High · Patch now · Closed
- Blooms Today data breach: 3.2M accounts exposed High · Breach · Closed
1 September 2024
- Assurance Retraite data breach: 70K accounts exposed Medium · Breach · Closed
- Market Moveis data breach: 28K accounts exposed Medium · Breach · Closed
30 August 2024
- Lookiero data breach: 5.0M accounts exposed Medium · Breach · Closed
28 August 2024
- Google Chromium V8 Inappropriate Implementation Vulnerability (CVE-2024-7965) High · Patch now · Closed
- Sport 2000 data breach: 3.2M accounts exposed Medium · Breach · Closed
27 August 2024
- Apache OFBiz Incorrect Authorization Vulnerability (CVE-2024-38856) Critical · Patch now · Closed
26 August 2024
- Google Chromium V8 Type Confusion Vulnerability (CVE-2024-7971) Critical · Patch now · Closed
25 August 2024
- Traderie data breach: 364K accounts exposed Medium · Breach · Closed
23 August 2024
- Versa Director Dangerous File Type Upload Vulnerability (CVE-2024-39717) High · Patch now · Closed
21 August 2024
- Dahua IP Camera Authentication Bypass Vulnerability (CVE-2021-33045) Critical · Patch now · Closed
- Dahua IP Camera Authentication Bypass Vulnerability (CVE-2021-33044) Critical · Patch now · Closed
- Microsoft Exchange Server Information Disclosure Vulnerability (CVE-2021-31196) High · Patch now · Closed
- Linux Kernel Heap-Based Buffer Overflow Vulnerability (CVE-2022-0185) High · Patch now · Closed
19 August 2024
- Jenkins Command Line Interface (CLI) Path Traversal Vulnerability (CVE-2024-23897) Critical · Patch now · Closed
- Explore Talent (August 2024) data breach: 8.9M accounts exposed Medium · Breach · Closed
- Tracki data breach: 372K accounts exposed Medium · Breach · Closed
15 August 2024
- SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability (CVE-2024-28986) Critical · Patch now · Closed
13 August 2024
- Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability (CVE-2024-38107) High · Patch now · Closed
- Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2024-38106) High · Patch now · Closed
- Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability (CVE-2024-38193) High · Patch now · Closed
- Microsoft Windows Scripting Engine Memory Corruption Vulnerability (CVE-2024-38178) High · Patch now · Closed
- Microsoft Project Remote Code Execution Vulnerability (CVE-2024-38189) High · Patch now · Closed
- Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2024-38213) Medium · Patch now · Closed
- LDLC data breach: 1.3M accounts exposed Medium · Breach · Closed
- Chris Leong data breach: 27K accounts exposed Medium · Breach · Closed
11 August 2024
- Shadow data breach: 543K accounts exposed Medium · Breach · Closed
9 August 2024
- Not SOCRadar data breach: 282.5M accounts exposed High · Breach · Closed
7 August 2024
- Apache OFBiz Path Traversal Vulnerability (CVE-2024-32113) Critical · Patch now · Closed
- Android Kernel Remote Code Execution Vulnerability (CVE-2024-36971) High · Patch now · Closed
5 August 2024
- Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability (CVE-2018-0824) High · Patch now · Closed
- Shoe Zone data breach: 46K accounts exposed High · Breach · Closed
2 August 2024
- LuLu data breach: 2.8M accounts exposed High · Breach · Closed
1 August 2024
- Stealer Logs Posted to Telegram data breach: 26.1M accounts exposed High · Breach · Closed
- Multiplayer.it data breach: 503K accounts exposed High · Breach · Closed
31 July 2024
- AnimeLeague data breach: 192K accounts exposed High · Breach · Closed
30 July 2024
- VMware ESXi Authentication Bypass Vulnerability (CVE-2024-37085) High · Patch now · Closed
- Spytech data breach: 5645 accounts exposed High · Breach · Closed
- Ubook data breach: 699K accounts exposed Medium · Breach · Closed
29 July 2024
- Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability (CVE-2023-45249) Critical · Patch now · Closed
- ServiceNow Incomplete List of Disallowed Inputs Vulnerability (CVE-2024-5217) Critical · Patch now · Closed
- ServiceNow Improper Input Validation Vulnerability (CVE-2024-4879) Critical · Patch now · Closed
25 July 2024
- Explore Talent (July 2024) data breach: 5.4M accounts exposed Medium · Breach · Closed
- Condo.com data breach: 1.5M accounts exposed Medium · Breach · Closed
23 July 2024
- Microsoft Internet Explorer Use-After-Free Vulnerability (CVE-2012-4792) High · Patch now · Closed
- Twilio Authy Information Disclosure Vulnerability (CVE-2024-39891) Medium · Patch now · Closed
20 July 2024
- Life360 data breach: 442K accounts exposed Medium · Breach · Closed
17 July 2024
- Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability (CVE-2024-34102) Critical · Patch now · Closed
- SolarWinds Serv-U Path Traversal Vulnerability (CVE-2024-28995) High · Patch now · Closed
- VMware vCenter Server Incorrect Default File Permissions Vulnerability (CVE-2022-22948) Medium · Patch now · Closed
15 July 2024
- OSGeo GeoServer GeoTools Eval Injection Vulnerability (CVE-2024-36401) Critical · Patch now · Closed
11 July 2024
- mSpy (2024) data breach: 2.4M accounts exposed High · Breach · Closed
10 July 2024
- The Heritage Foundation data breach: 72K accounts exposed High · Breach · Closed
9 July 2024
- Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability (CVE-2024-23692) Critical · Patch now · Closed
- Microsoft Windows Hyper-V Privilege Escalation Vulnerability (CVE-2024-38080) High · Patch now · Closed
- Microsoft Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-38112) High · Patch now · Closed
- Neiman Marcus data breach: 31.2M accounts exposed High · Breach · Closed
7 July 2024
- Husky Owners data breach: 16K accounts exposed Medium · Breach · Closed
6 July 2024
- FNTECH data breach: 10K accounts exposed Medium · Breach · Closed
4 July 2024
- Date Hot Brunettes data breach: 1.5M accounts exposed High · Breach · Closed
2 July 2024
- Cisco NX-OS Command Injection Vulnerability (CVE-2024-20399) Medium · Patch now · Closed
26 June 2024
- OSGeo GeoServer JAI-EXT Code Injection Vulnerability (CVE-2022-24816) Critical · Patch now · Closed
- Linux Kernel Use-After-Free Vulnerability (CVE-2022-2586) High · Patch now · Closed
- Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability (CVE-2020-13965) Medium · Patch now · Closed
24 June 2024
- Advance Auto Parts data breach: 79.2M accounts exposed High · Breach · Closed
17 June 2024
- Zadig & Voltaire data breach: 586K accounts exposed Medium · Breach · Closed
13 June 2024
- Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability (CVE-2024-4358) Critical · Patch now · Closed
- Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability (CVE-2024-26169) High · Patch now · Closed
- Android Pixel Privilege Escalation Vulnerability (CVE-2024-32896) High · Patch now · Closed
12 June 2024
- PHP-CGI OS Command Injection Vulnerability (CVE-2024-4577) Critical · Patch now · Closed
- Arm Mali GPU Kernel Driver Use-After-Free Vulnerability (CVE-2024-4610) High · Patch now · Closed
3 June 2024
- Combolists Posted to Telegram data breach: 361.5M accounts exposed Critical · Breach · Closed
- Oracle WebLogic Server OS Command Injection Vulnerability (CVE-2017-3506) High · Patch now · Closed
30 May 2024
- Linux Kernel Use-After-Free Vulnerability (CVE-2024-1086) High · Patch now · Closed
- Check Point Quantum Security Gateways Information Disclosure Vulnerability (CVE-2024-24919) High · Patch now · Closed
- Operation Endgame data breach: 16.5M accounts exposed High · Breach · Closed
29 May 2024
- Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability (CVE-2024-4978) High · Patch now · Closed
28 May 2024
- Google Chromium V8 Type Confusion Vulnerability (CVE-2024-5274) Critical · Patch now · Closed
25 May 2024
- pcTattletale data breach: 138K accounts exposed High · Breach · Closed
23 May 2024
- Apache Flink Improper Access Control Vulnerability (CVE-2020-17519) High · Patch now · Closed
- Dota2 data breach: 1.9M accounts exposed High · Breach · Closed
20 May 2024
- Google Chromium V8 Type Confusion Vulnerability (CVE-2024-4947) Critical · Patch now · Closed
- NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability (CVE-2023-43208) Critical · Patch now · Closed
16 May 2024
- Google Chromium V8 Out-of-Bounds Memory Write Vulnerability (CVE-2024-4761) High · Patch now · Closed
- D-Link DIR-605 Router Information Disclosure Vulnerability (CVE-2021-40655) High · Patch now · Closed
- D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-100005) High · Patch now · Closed
14 May 2024
- Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability (CVE-2024-30040) High · Patch now · Closed
- Microsoft DWM Core Library Privilege Escalation Vulnerability (CVE-2024-30051) High · Patch now · Closed
13 May 2024
- Google Chromium Visuals Use-After-Free Vulnerability (CVE-2024-4671) Critical · Patch now · Closed
10 May 2024
- The Post Millennial data breach: 57.0M accounts exposed High · Breach · Closed
9 May 2024
- Tappware data breach: 94K accounts exposed Medium · Breach · Closed
1 May 2024
- GitLab Community and Enterprise Editions Improper Access Control Vulnerability (CVE-2023-7028) Critical · Patch now · Closed
30 April 2024
- Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability (CVE-2024-29988) High · Patch now · Closed
- MovieBoxPro data breach: 6.0M accounts exposed Medium · Breach · Closed
26 April 2024
- Piping Rock data breach: 2.1M accounts exposed Medium · Breach · Closed
24 April 2024
- CrushFTP VFS Sandbox Escape Vulnerability (CVE-2024-4040) Critical · Patch now · Closed
- Cisco ASA and FTD Denial of Service Vulnerability (CVE-2024-20353) High · Patch now · Closed
- Cisco ASA and FTD Privilege Escalation Vulnerability (CVE-2024-20359) Medium · Patch now · Closed
23 April 2024
- Microsoft Windows Print Spooler Privilege Escalation Vulnerability (CVE-2022-38028) High · Patch now · Closed