Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 21 of 30. 100 incidents from 17 November 2021 to 15 February 2022.
15 February 2022
- Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability (CVE-2018-8174) High · Patch now · Closed
- WinRAR Absolute Path Traversal Vulnerability (CVE-2018-20250) High · Patch now · Closed
- Adobe Flash Player Use-After-Free Vulnerability (CVE-2018-15982) High · Patch now · Closed
- Microsoft Word Memory Corruption Vulnerability (CVE-2014-1761) High · Patch now · Closed
- Microsoft Graphics Component Memory Corruption Vulnerability (CVE-2013-3906) High · Patch now · Closed
- GiveSendGo data breach: 89K accounts exposed Medium · Breach · Closed
11 February 2022
- Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability (CVE-2022-22620) High · Patch now · Closed
10 February 2022
- Microsoft SMBv3 Remote Code Execution Vulnerability (CVE-2020-0796) Critical · Patch now · Closed
- Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability (CVE-2018-1000861) Critical · Patch now · Closed
- Apache Struts 1 Improper Input Validation Vulnerability (CVE-2017-9791) Critical · Patch now · Closed
- Apache ActiveMQ Improper Input Validation Vulnerability (CVE-2016-3088) Critical · Patch now · Closed
- Microsoft HTTP.sys Remote Code Execution Vulnerability (CVE-2015-1635) Critical · Patch now · Closed
- Microsoft Windows SAM Local Privilege Escalation Vulnerability (CVE-2021-36934) High · Patch now · Closed
- Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability (CVE-2017-8464) High · Patch now · Closed
- Oracle Corporation WebLogic Server Remote Code Execution Vulnerability (CVE-2017-10271) High · Patch now · Closed
- Microsoft Win32k Privilege Escalation Vulnerability (CVE-2017-0263) High · Patch now · Closed
- Microsoft Office Remote Code Execution Vulnerability (CVE-2017-0262) High · Patch now · Closed
- Microsoft SMBv1 Remote Code Execution Vulnerability (CVE-2017-0145) High · Patch now · Closed
- Microsoft SMBv1 Remote Code Execution Vulnerability (CVE-2017-0144) High · Patch now · Closed
- D-Link DIR-645 Router Remote Code Execution Vulnerability (CVE-2015-2051) High · Patch now · Closed
- Apple OS X Authentication Bypass Vulnerability (CVE-2015-1130) High · Patch now · Closed
- Apple OS X Heap-Based Buffer Overflow Vulnerability (CVE-2014-4404) High · Patch now · Closed
4 February 2022
- Microsoft Win32k Privilege Escalation Vulnerability (CVE-2022-21882) High · Patch now · Closed
28 January 2022
- Apple Memory Corruption Vulnerability (CVE-2022-22587) Critical · Patch now · Closed
- SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability (CVE-2021-20038) Critical · Patch now · Closed
- Grandstream Networks UCM6200 Series SQL Injection Vulnerability (CVE-2020-5722) Critical · Patch now · Closed
- Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability (CVE-2017-5689) Critical · Patch now · Closed
- Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-1776) Critical · Patch now · Closed
- GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability (CVE-2014-6271) Critical · Patch now · Closed
- GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability (CVE-2014-7169) Critical · Patch now · Closed
- Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability (CVE-2020-0787) High · Patch now · Closed
- RedDoorz data breach: 5.9M accounts exposed High · Breach · Closed
27 January 2022
- BTC-Alpha data breach: 362K accounts exposed High · Breach · Closed
21 January 2022
- Apache Struts 2 Improper Input Validation Vulnerability (CVE-2012-0391) Critical · Patch now · Closed
- Apache Struts 1 ActionForm Denial-of-Service Vulnerability (CVE-2006-1547) High · Patch now · Closed
- Microsoft Win32k Privilege Escalation Vulnerability (CVE-2018-8453) High · Patch now · Closed
- SolarWinds Serv-U Improper Input Validation Vulnerability (CVE-2021-35247) Medium · Patch now · Closed
20 January 2022
- ShockGore data breach: 73K accounts exposed High · Breach · Closed
19 January 2022
- Upstox data breach: 111K accounts exposed High · Breach · Closed
- Open Subtitles data breach: 6.8M accounts exposed High · Breach · Closed
18 January 2022
- October CMS Improper Authentication (CVE-2021-32648) Critical · Patch now · Closed
- Aviatrix Controller Unrestricted Upload of File (CVE-2021-40870) Critical · Patch now · Closed
- F5 BIG-IP Traffic Management Microkernel Buffer Overflow (CVE-2021-22991) Critical · Patch now · Closed
- Apache Airflow's Experimental API Authentication Bypass (CVE-2020-13927) Critical · Patch now · Closed
- Nagios XI OS Command Injection (CVE-2021-25296) High · Patch now · Closed
- Nagios XI OS Command Injection (CVE-2021-25297) High · Patch now · Closed
- Nagios XI OS Command Injection (CVE-2021-25298) High · Patch now · Closed
- Microsoft Exchange Server Information Disclosure (CVE-2021-33766) High · Patch now · Closed
- VMware Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) High · Patch now · Closed
- System Information Library for Node.JS Command Injection (CVE-2021-21315) High · Patch now · Closed
- Oracle Business Intelligence Enterprise Edition Path Transversal (CVE-2020-14864) High · Patch now · Closed
- Drupal core Un-restricted Upload of File (CVE-2020-13671) High · Patch now · Closed
- Apache Airflow Command Injection (CVE-2020-11978) High · Patch now · Closed
16 January 2022
- Carding Mafia (December 2021) data breach: 303K accounts exposed High · Breach · Closed
15 January 2022
- Aditya Birla Fashion and Retail data breach: 5.5M accounts exposed High · Breach · Closed
13 January 2022
- Guns.com data breach: 375K accounts exposed High · Breach · Closed
10 January 2022
- Hikvision Improper Input Validation (CVE-2021-36260) Critical · Patch now · Closed
- Oracle WebLogic Server, Injection (CVE-2019-2725) Critical · Patch now · Closed
- Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference (CVE-2019-9670) Critical · Patch now · Closed
- Exim Mail Transfer Agent (MTA) Improper Input Validation (CVE-2019-10149) Critical · Patch now · Closed
- IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. (CVE-2015-7450) Critical · Patch now · Closed
- Primetek Primefaces Remote Code Execution Vulnerability (CVE-2017-1000486) Critical · Patch now · Closed
- Kibana Arbitrary Code Execution (CVE-2019-7609) Critical · Patch now · Closed
- Google Chrome Media Use-After-Free Vulnerability (CVE-2020-6572) High · Patch now · Closed
- Microsoft Win32k Privilege Escalation Vulnerability (CVE-2019-1458) High · Patch now · Closed
- Fortinet FortiOS and FortiProxy Improper Authorization (CVE-2018-13382) High · Patch now · Closed
- Palo Alto Networks PAN-OS Remote Code Execution Vulnerability (CVE-2019-1579) High · Patch now · Closed
- FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit (CVE-2021-27860) High · Patch now · Closed
- VMware vCenter Server Improper Access Control (CVE-2021-22017) Medium · Patch now · Closed
- Microsoft WinVerifyTrust function Remote Code Execution (CVE-2013-3900) Medium · Patch now · Closed
- Fortinet FortiOS and FortiProxy Out-of-bounds Write (CVE-2018-13383) Medium · Patch now · Closed
8 January 2022
- Doxbin data breach: 370K accounts exposed High · Breach · Closed
6 January 2022
- FlexBooker data breach: 3.8M accounts exposed High · Breach · Closed
4 January 2022
- DatPiff data breach: 7.5M accounts exposed High · Breach · Closed
30 December 2021
- RedLine Stealer data breach: 441K accounts exposed High · Breach · Closed
20 December 2021
- Protemps data breach: 49K accounts exposed High · Breach · Closed
15 December 2021
- Microsoft Windows AppX Installer Spoofing Vulnerability (CVE-2021-43890) High · Patch now · Closed
- Google Chromium V8 Use-After-Free Vulnerability (CVE-2021-4102) High · Patch now · Closed
10 December 2021
- Zoho Desktop Central Authentication Bypass Vulnerability (CVE-2021-44515) Critical · Patch now · Closed
- Realtek Jungle SDK Remote Code Execution Vulnerability (CVE-2021-35394) Critical · Patch now · Closed
- Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability (CVE-2019-7238) Critical · Patch now · Closed
- Red Hat JBoss Application Server Remote Code Execution Vulnerability (CVE-2017-12149) Critical · Patch now · Closed
- Fuel CMS SQL Injection Vulnerability (CVE-2020-17463) Critical · Patch now · Closed
- MongoDB mongo-express Remote Code Execution Vulnerability (CVE-2019-10758) Critical · Patch now · Closed
- Apache Log4j2 Remote Code Execution Vulnerability (CVE-2021-44228) Critical · Patch now · Closed
- Linux Kernel Improper Privilege Management Vulnerability (CVE-2019-13272) High · Patch now · Closed
- Apache Solr DataImportHandler Code Injection Vulnerability (CVE-2019-0193) High · Patch now · Closed
- Fortinet FortiOS Arbitrary File Download (CVE-2021-44168) High · Patch now · Closed
- Embedthis GoAhead Remote Code Execution Vulnerability (CVE-2017-17562) High · Patch now · Closed
- Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability (CVE-2010-1871) High · Patch now · Closed
- Pi-Hole AdminLTE Remote Code Execution Vulnerability (CVE-2020-8816) High · Patch now · Closed
5 December 2021
- Gravatar data breach: 114.0M accounts exposed High · Breach · Closed
1 December 2021
- MikroTik Router OS Directory Traversal Vulnerability (CVE-2018-14847) Critical · Patch now · Closed
- Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability (CVE-2021-37415) Critical · Patch now · Closed
- Apache HTTP Server-Side Request Forgery (SSRF) (CVE-2021-40438) Critical · Patch now · Closed
- Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability (CVE-2021-44077) Critical · Patch now · Closed
- Qualcomm Multiple Chipsets Improper Input Validation Vulnerability (CVE-2020-11261) High · Patch now · Closed
17 November 2021
- ExifTool Remote Code Execution Vulnerability (CVE-2021-22204) High · Patch now · Closed
- Microsoft Windows Win32k Privilege Escalation Vulnerability (CVE-2021-40449) High · Patch now · Closed
- Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-42321) High · Patch now · Closed