Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 13 of 30. 100 incidents from 25 July 2023 to 24 November 2023.
24 November 2023
- KitchenPal data breach: 98K accounts exposed High · Breach · Closed
21 November 2023
- GNU C Library Buffer Overflow Vulnerability (CVE-2023-4911) High · Patch now · Closed
20 November 2023
- OMGPOP data breach: 7.1M accounts exposed High · Breach · Closed
16 November 2023
- Sophos Web Appliance Command Injection Vulnerability (CVE-2023-1671) Critical · Patch now · Closed
- Oracle Fusion Middleware Unspecified Vulnerability (CVE-2020-2551) Critical · Patch now · Closed
- Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability (CVE-2023-36584) Medium · Patch now · Closed
14 November 2023
- Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability (CVE-2023-36033) High · Patch now · Closed
- Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2023-36025) High · Patch now · Closed
- Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability (CVE-2023-36036) High · Patch now · Closed
- Avito data breach: 2.7M accounts exposed Medium · Breach · Closed
13 November 2023
- SysAid Server Path Traversal Vulnerability (CVE-2023-47246) Critical · Patch now · Closed
- Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability (CVE-2023-36845) Critical · Patch now · Closed
- Juniper Junos OS EX Series PHP External Variable Modification Vulnerability (CVE-2023-36844) Medium · Patch now · Closed
- Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability (CVE-2023-36846) Medium · Patch now · Closed
- Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability (CVE-2023-36847) Medium · Patch now · Closed
- Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability (CVE-2023-36851) Medium · Patch now · Closed
10 November 2023
- Chess.com (2023) data breach: 1.3M accounts exposed Medium · Breach · Closed
8 November 2023
- Service Location Protocol (SLP) Denial-of-Service Vulnerability (CVE-2023-29552) High · Patch now · Closed
7 November 2023
- Atlassian Confluence Data Center and Server Improper Authorization Vulnerability (CVE-2023-22518) Critical · Patch now · Closed
5 November 2023
- GamingMonk data breach: 654K accounts exposed High · Breach · Closed
3 November 2023
- Fitmart data breach: 214K accounts exposed High · Breach · Closed
2 November 2023
- Apache ActiveMQ Deserialization of Untrusted Data Vulnerability (CVE-2023-46604) Critical · Patch now · Closed
31 October 2023
- F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability (CVE-2023-46747) Critical · Patch now · Closed
- F5 BIG-IP Configuration Utility SQL Injection Vulnerability (CVE-2023-46748) High · Patch now · Closed
30 October 2023
- GameSprite data breach: 6.2M accounts exposed High · Breach · Closed
29 October 2023
- MemeChat data breach: 4.3M accounts exposed Medium · Breach · Closed
27 October 2023
- Toumei data breach: 76K accounts exposed Medium · Breach · Closed
26 October 2023
- Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability (CVE-2023-5631) Medium · Patch now · Closed
23 October 2023
- Cisco IOS XE Web UI Command Injection Vulnerability (CVE-2023-20273) High · Patch now · Closed
21 October 2023
- Tunngle data breach: 8.2M accounts exposed High · Breach · Closed
20 October 2023
- Sphero data breach: 832K accounts exposed Medium · Breach · Closed
18 October 2023
- Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability (CVE-2023-4966) High · Patch now · Closed
17 October 2023
- Phoenix data breach: 74K accounts exposed High · Breach · Closed
- AndroidLista data breach: 6.6M accounts exposed High · Breach · Closed
16 October 2023
- Cisco IOS XE Web UI Privilege Escalation Vulnerability (CVE-2023-20198) Critical · Patch now · Closed
10 October 2023
- Adobe Acrobat and Reader Use-After-Free Vulnerability (CVE-2023-21608) High · Patch now · Closed
- HTTP/2 Rapid Reset Attack Vulnerability (CVE-2023-44487) High · Patch now · Closed
- Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability (CVE-2023-20109) Medium · Patch now · Closed
- Microsoft Skype for Business Privilege Escalation Vulnerability (CVE-2023-41763) Medium · Patch now · Closed
- Microsoft WordPad Information Disclosure Vulnerability (CVE-2023-36563) Medium · Patch now · Closed
9 October 2023
- Public Business Data data breach: 27.9M accounts exposed Medium · Breach · Closed
5 October 2023
- Atlassian Confluence Data Center and Server Broken Access Control Vulnerability (CVE-2023-22515) Critical · Patch now · Closed
- Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability (CVE-2023-40044) High · Patch now · Closed
- Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability (CVE-2023-42824) High · Patch now · Closed
- Hjedd data breach: 13.2M accounts exposed High · Breach · Closed
4 October 2023
- JetBrains TeamCity Authentication Bypass Vulnerability (CVE-2023-42793) Critical · Patch now · Closed
- Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability (CVE-2023-28229) High · Patch now · Closed
3 October 2023
- Arm Mali GPU Kernel Driver Use-After-Free Vulnerability (CVE-2023-4211) Medium · Patch now · Closed
- Activision data breach: 16K accounts exposed Medium · Breach · Closed
2 October 2023
- Google Chromium libvpx Heap Buffer Overflow Vulnerability (CVE-2023-5217) High · Patch now · Closed
- Horse Isle data breach: 27K accounts exposed High · Breach · Closed
28 September 2023
- Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability (CVE-2018-14667) Critical · Patch now · Closed
25 September 2023
- Apple Multiple Products Kernel Privilege Escalation Vulnerability (CVE-2023-41992) High · Patch now · Closed
- Apple Multiple Products WebKit Code Execution Vulnerability (CVE-2023-41993) High · Patch now · Closed
- Apple Multiple Products Improper Certificate Validation Vulnerability (CVE-2023-41991) Medium · Patch now · Closed
21 September 2023
20 September 2023
- dBforums data breach: 363K accounts exposed High · Breach · Closed
19 September 2023
- MinIO Security Feature Bypass Vulnerability (CVE-2023-28434) High · Patch now · Closed
18 September 2023
- Realtek SDK Improper Input Validation Vulnerability (CVE-2014-8361) Critical · Patch now · Closed
- Laravel Ignition File Upload Vulnerability (CVE-2021-3129) Critical · Patch now · Closed
- Samsung Mobile Devices Use-After-Free Vulnerability (CVE-2022-22265) High · Patch now · Closed
- Zyxel EMG2926 Routers Command Injection Vulnerability (CVE-2017-6884) High · Patch now · Closed
14 September 2023
- Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability (CVE-2023-26369) High · Patch now · Closed
- MalindoAir data breach: 4.3M accounts exposed Medium · Breach · Closed
13 September 2023
- Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability (CVE-2023-20269) Critical · Patch now · Closed
- Android Framework Privilege Escalation Vulnerability (CVE-2023-35674) High · Patch now · Closed
- Google Chromium WebP Heap-Based Buffer Overflow Vulnerability (CVE-2023-4863) High · Patch now · Closed
12 September 2023
- Microsoft Streaming Service Proxy Privilege Escalation Vulnerability (CVE-2023-36802) High · Patch now · Closed
- Microsoft Word Information Disclosure Vulnerability (CVE-2023-36761) Medium · Patch now · Closed
11 September 2023
- Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability (CVE-2023-41064) High · Patch now · Closed
- Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability (CVE-2023-41061) High · Patch now · Closed
- Viva Air data breach: 932K accounts exposed High · Breach · Closed
8 September 2023
- Dymocks data breach: 836K accounts exposed Medium · Breach · Closed
6 September 2023
- Apache RocketMQ Command Execution Vulnerability (CVE-2023-33246) Critical · Patch now · Closed
31 August 2023
- PlayCyberGames data breach: 3.7M accounts exposed High · Breach · Closed
- Pampling data breach: 383K accounts exposed High · Breach · Closed
- Phished Data via CERT Poland data breach: 67K accounts exposed High · Breach · Closed
29 August 2023
- Qakbot data breach: 6.4M accounts exposed High · Breach · Closed
24 August 2023
- RARLAB WinRAR Code Execution Vulnerability (CVE-2023-38831) High · Patch now · Closed
- Ignite Realtime Openfire Path Traversal Vulnerability (CVE-2023-32315) High · Patch now · Closed
- SevenRooms data breach: 1.2M accounts exposed Medium · Breach · Closed
23 August 2023
- Duolingo data breach: 2.7M accounts exposed Medium · Breach · Closed
22 August 2023
- Ivanti Sentry Authentication Bypass Vulnerability (CVE-2023-38035) Critical · Patch now · Closed
- Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability (CVE-2023-27532) High · Patch now · Closed
- Atmeltomo data breach: 580K accounts exposed High · Breach · Closed
21 August 2023
- Adobe ColdFusion Deserialization of Untrusted Data Vulnerability (CVE-2023-26359) Critical · Patch now · Closed
- ECCIE data breach: 536K accounts exposed High · Breach · Closed
17 August 2023
- iMenu360 data breach: 3.4M accounts exposed Medium · Breach · Closed
16 August 2023
- Citrix Content Collaboration ShareFile Improper Access Control Vulnerability (CVE-2023-24489) Critical · Patch now · Closed
15 August 2023
- Jobzone data breach: 29K accounts exposed Medium · Breach · Closed
10 August 2023
- Rightbiz data breach: 65K accounts exposed Medium · Breach · Closed
9 August 2023
- Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability (CVE-2023-38180) High · Patch now · Closed
8 August 2023
- CraftRise data breach: 2.5M accounts exposed High · Breach · Closed
7 August 2023
- Zyxel P660HN-T1A Routers Command Injection Vulnerability (CVE-2017-18368) Critical · Patch now · Closed
2 August 2023
- MagicDuel data breach: 138K accounts exposed High · Breach · Closed
31 July 2023
- Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability (CVE-2023-35081) High · Patch now · Closed
27 July 2023
- Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability (CVE-2023-37580) Medium · Patch now · Closed
26 July 2023
- BreachForums data breach: 212K accounts exposed High · Breach · Closed
- Apple Multiple Products Kernel Unspecified Vulnerability (CVE-2023-38606) Medium · Patch now · Closed
25 July 2023
- Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability (CVE-2023-35078) Critical · Patch now · Closed