Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 19 of 30. 100 incidents from 3 March 2022 to 25 March 2022.
25 March 2022
- MiCollab, MiVoice Business Express Access Control Vulnerability (CVE-2022-26143) Critical · Patch now · Closed
- Sitecore XP Remote Command Execution Vulnerability (CVE-2021-42237) Critical · Patch now · Closed
- Citrix ShareFile Improper Access Control Vulnerability (CVE-2021-22941) Critical · Patch now · Closed
- Zyxel Multiple NAS Devices OS Command Injection Vulnerability (CVE-2020-9054) Critical · Patch now · Closed
- OpenSMTPD Remote Code Execution Vulnerability (CVE-2020-7247) Critical · Patch now · Closed
- Sophos SG UTM Remote Code Execution Vulnerability (CVE-2020-25223) Critical · Patch now · Closed
- QNAP Helpdesk Improper Access Control Vulnerability (CVE-2020-2506) Critical · Patch now · Closed
- Palo Alto Networks PAN-OS Authentication Bypass Vulnerability (CVE-2020-2021) Critical · Patch now · Closed
- Juniper Junos OS Path Traversal Vulnerability (CVE-2020-1631) Critical · Patch now · Closed
- D-Link Multiple Routers Command Injection Vulnerability (CVE-2019-16920) Critical · Patch now · Closed
- Webmin Command Injection Vulnerability (CVE-2019-15107) Critical · Patch now · Closed
- Citrix SD-WAN and NetScaler SQL Injection Vulnerability (CVE-2019-12989) Critical · Patch now · Closed
- PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability (CVE-2019-11043) Critical · Patch now · Closed
- Kentico Xperience Deserialization of Untrusted Data Vulnerability (CVE-2019-10068) Critical · Patch now · Closed
- Jenkins Matrix Project Plugin Remote Code Execution Vulnerability (CVE-2019-1003030) Critical · Patch now · Closed
- LG N1A1 NAS Remote Command Execution Vulnerability (CVE-2018-14839) Critical · Patch now · Closed
- VMware Tanzu Spring Data Commons Property Binder Vulnerability (CVE-2018-1273) Critical · Patch now · Closed
- Quest KACE System Management Appliance Remote Command Execution Vulnerability (CVE-2018-11138) Critical · Patch now · Closed
- Cisco Secure Access Control System Java Deserialization Vulnerability (CVE-2018-0147) Critical · Patch now · Closed
- Cisco VPN Routers Remote Code Execution Vulnerability (CVE-2018-0125) Critical · Patch now · Closed
- Citrix Multiple Products Remote Code Execution Vulnerability (CVE-2017-6316) Critical · Patch now · Closed
- Cisco IOS and IOS XE Remote Code Execution Vulnerability (CVE-2017-3881) Critical · Patch now · Closed
- Adobe Flash Player Remote Code Execution Vulnerability (CVE-2016-4171) Critical · Patch now · Closed
- NETGEAR Multiple WAP Devices Command Injection Vulnerability (CVE-2016-1555) Critical · Patch now · Closed
- NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability (CVE-2016-10174) Critical · Patch now · Closed
- Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability (CVE-2015-4068) Critical · Patch now · Closed
- Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability (CVE-2015-1427) Critical · Patch now · Closed
- D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability (CVE-2015-1187) Critical · Patch now · Closed
- Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability (CVE-2014-6287) Critical · Patch now · Closed
- HP Multiple Products Remote Code Execution Vulnerability (CVE-2013-4810) Critical · Patch now · Closed
- Apache Struts Improper Input Validation Vulnerability (CVE-2013-2251) Critical · Patch now · Closed
- PHP-CGI Query String Parameter Vulnerability (CVE-2012-1823) Critical · Patch now · Closed
- Exim Heap-Based Buffer Overflow Vulnerability (CVE-2010-4344) Critical · Patch now · Closed
- Adobe ColdFusion Directory Traversal Vulnerability (CVE-2010-2861) Critical · Patch now · Closed
- phpMyAdmin Remote Code Execution Vulnerability (CVE-2009-1151) Critical · Patch now · Closed
- HP OpenView Network Node Manager Remote Code Execution Vulnerability (CVE-2005-2773) Critical · Patch now · Closed
- Microsoft Windows Print Spooler Privilege Escalation Vulnerability (CVE-2022-21999) High · Patch now · Closed
- D-Link DIR-610 Devices Remote Command Execution (CVE-2020-9377) High · Patch now · Closed
- VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability (CVE-2020-5410) High · Patch now · Closed
- Apache Kylin OS Command Injection Vulnerability (CVE-2020-1956) High · Patch now · Closed
- Drupal Core Remote Code Execution Vulnerability (CVE-2019-6340) High · Patch now · Closed
- Oracle BI Publisher Unauthorized Access Vulnerability (CVE-2019-2616) High · Patch now · Closed
- Citrix SD-WAN and NetScaler Command Injection Vulnerability (CVE-2019-12991) High · Patch now · Closed
- Microsoft GDI Remote Code Execution Vulnerability (CVE-2019-0903) High · Patch now · Closed
- Microsoft Windows Shell Remote Code Execution Vulnerability (CVE-2018-8414) High · Patch now · Closed
- Microsoft Scripting Engine Memory Corruption Vulnerability (CVE-2018-8373) High · Patch now · Closed
- VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability (CVE-2018-6961) High · Patch now · Closed
- NETGEAR DGN2200 Devices OS Command Injection Vulnerability (CVE-2017-6334) High · Patch now · Closed
- Apache Tomcat Remote Code Execution Vulnerability (CVE-2017-12617) High · Patch now · Closed
- Apache Tomcat on Windows Remote Code Execution Vulnerability (CVE-2017-12615) High · Patch now · Closed
- Microsoft Windows SMB Remote Code Execution Vulnerability (CVE-2017-0146) High · Patch now · Closed
- Adobe Flash Player Use-After-Free Vulnerability (CVE-2016-7892) High · Patch now · Closed
- D-Link DCS-930L Devices OS Command Injection Vulnerability (CVE-2016-11021) High · Patch now · Closed
- Ruby on Rails Directory Traversal Vulnerability (CVE-2016-0752) High · Patch now · Closed
- TP-Link Multiple Archer Devices Directory Traversal Vulnerability (CVE-2015-3035) High · Patch now · Closed
- Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability (CVE-2015-0666) High · Patch now · Closed
- Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability (CVE-2014-6332) High · Patch now · Closed
- Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability (CVE-2014-6324) High · Patch now · Closed
- Elasticsearch Remote Code Execution Vulnerability (CVE-2014-3120) High · Patch now · Closed
- Ruby on Rails Directory Traversal Vulnerability (CVE-2014-0130) High · Patch now · Closed
- Exim Privilege Escalation Vulnerability (CVE-2010-4345) High · Patch now · Closed
- Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability (CVE-2010-3035) High · Patch now · Closed
- Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability (CVE-2009-0927) High · Patch now · Closed
- D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability (CVE-2013-5223) Medium · Patch now · Closed
- Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability (CVE-2009-2055) Medium · Patch now · Closed
19 March 2022
- ZAP-Hosting data breach: 746K accounts exposed Medium · Breach · Closed
15 March 2022
- SonicWall SonicOS Buffer Overflow Vulnerability (CVE-2020-5135) Critical · Patch now · Closed
- Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability (CVE-2019-1405) High · Patch now · Closed
- Microsoft Windows Privilege Escalation Vulnerability (CVE-2019-1322) High · Patch now · Closed
- Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability (CVE-2019-1315) High · Patch now · Closed
- Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability (CVE-2019-1253) High · Patch now · Closed
- Microsoft Win32k Privilege Escalation Vulnerability (CVE-2019-1132) High · Patch now · Closed
- Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability (CVE-2019-1129) High · Patch now · Closed
- Microsoft Task Scheduler Privilege Escalation Vulnerability (CVE-2019-1069) High · Patch now · Closed
- Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability (CVE-2019-1064) High · Patch now · Closed
- Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability (CVE-2019-0841) High · Patch now · Closed
- Microsoft Windows Privilege Escalation Vulnerability (CVE-2019-0543) High · Patch now · Closed
- Microsoft Win32k Privilege Escalation Vulnerability (CVE-2018-8120) High · Patch now · Closed
- Microsoft Windows Transaction Manager Privilege Escalation Vulnerability (CVE-2017-0101) High · Patch now · Closed
- Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2016-3309) High · Patch now · Closed
- Microsoft Win32k Memory Corruption Vulnerability (CVE-2015-2546) High · Patch now · Closed
7 March 2022
- Mozilla Firefox Use-After-Free Vulnerability (CVE-2022-26486) Critical · Patch now · Closed
- Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability (CVE-2019-11581) Critical · Patch now · Closed
- NETGEAR DGN2200 Remote Code Execution Vulnerability (CVE-2017-6077) Critical · Patch now · Closed
- Adobe ColdFusion Authentication Bypass Vulnerability (CVE-2013-0625) Critical · Patch now · Closed
- Mozilla Firefox Use-After-Free Vulnerability (CVE-2022-26485) High · Patch now · Closed
- Pulse Connect Secure Code Injection Vulnerability (CVE-2020-8218) High · Patch now · Closed
- NETGEAR Multiple Routers Remote Code Execution Vulnerability (CVE-2016-6277) High · Patch now · Closed
- Adobe ColdFusion Information Disclosure Vulnerability (CVE-2013-0631) High · Patch now · Closed
- Adobe ColdFusion Directory Traversal Vulnerability (CVE-2013-0629) High · Patch now · Closed
- VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability (CVE-2021-21973) Medium · Patch now · Closed
- Adobe BlazeDS Information Disclosure Vulnerability (CVE-2009-3960) Medium · Patch now · Closed
3 March 2022
- Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability (CVE-2022-20700) Critical · Patch now · Closed
- Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability (CVE-2022-20699) Critical · Patch now · Closed
- Apache Tomcat Improper Privilege Management Vulnerability (CVE-2020-1938) Critical · Patch now · Closed
- Exim Out-of-bounds Write Vulnerability (CVE-2019-16928) Critical · Patch now · Closed
- Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability (CVE-2018-0151) Critical · Patch now · Closed
- Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability (CVE-2017-12240) Critical · Patch now · Closed
- Adobe Flash Player Arbitrary Code Execution Vulnerability (CVE-2016-4117) Critical · Patch now · Closed
- Adobe Flash Player Arbitrary Code Execution Vulnerability (CVE-2016-1019) Critical · Patch now · Closed