Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 22 of 30. 100 incidents from 3 November 2021 to 17 November 2021.
17 November 2021
- Microsoft Excel Security Feature Bypass (CVE-2021-42292) High · Patch now · Closed
- IDC Games data breach: 4.0M accounts exposed High · Breach · Closed
16 November 2021
- Ducks Unlimited data breach: 1.3M accounts exposed High · Breach · Closed
4 November 2021
- CyberServe data breach: 1.1M accounts exposed High · Breach · Closed
3 November 2021
- Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-26855) Critical · Patch now · Closed
- Microsoft SharePoint Remote Code Execution Vulnerability (CVE-2019-0604) Critical · Patch now · Closed
- Microsoft .NET Framework Remote Code Execution Vulnerability (CVE-2020-0646) Critical · Patch now · Closed
- Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability (CVE-2020-26919) Critical · Patch now · Closed
- Oracle Multiple Products Remote Code Execution Vulnerability (CVE-2020-2555) Critical · Patch now · Closed
- Oracle Fusion Middleware Unspecified Vulnerability (CVE-2012-3152) Critical · Patch now · Closed
- Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability (CVE-2020-14871) Critical · Patch now · Closed
- Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability (CVE-2015-4852) Critical · Patch now · Closed
- Oracle WebLogic Server Remote Code Execution Vulnerability (CVE-2020-14750) Critical · Patch now · Closed
- Oracle WebLogic Server Remote Code Execution Vulnerability (CVE-2020-14882) Critical · Patch now · Closed
- PlaySMS Server-Side Template Injection Vulnerability (CVE-2020-8644) Critical · Patch now · Closed
- Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability (CVE-2019-18935) Critical · Patch now · Closed
- Ivanti Pulse Connect Secure Use-After-Free Vulnerability (CVE-2021-22893) Critical · Patch now · Closed
- Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability (CVE-2019-11510) Critical · Patch now · Closed
- Realtek AP-Router SDK Buffer Overflow Vulnerability (CVE-2021-35395) Critical · Patch now · Closed
- SaltStack Salt Authentication Bypass Vulnerability (CVE-2020-11651) Critical · Patch now · Closed
- SaltStack Salt Shell Injection Vulnerability (CVE-2020-16846) Critical · Patch now · Closed
- SAP NetWeaver Remote Code Execution Vulnerability (CVE-2010-5326) Critical · Patch now · Closed
- SAP NetWeaver Missing Authentication for Critical Function Vulnerability (CVE-2020-6287) Critical · Patch now · Closed
- SAP Solution Manager Missing Authentication for Critical Function Vulnerability (CVE-2020-6207) Critical · Patch now · Closed
- SIMalliance Toolbox Browser Command Injection Vulnerability (CVE-2019-16256) Critical · Patch now · Closed
- SolarWinds Orion Authentication Bypass Vulnerability (CVE-2020-10148) Critical · Patch now · Closed
- SolarWinds Serv-U Remote Code Execution Vulnerability (CVE-2021-35211) Critical · Patch now · Closed
- SonicWall Email Security Improper Privilege Management Vulnerability (CVE-2021-20021) Critical · Patch now · Closed
- SonicWall SSLVPN SMA100 SQL Injection Vulnerability (CVE-2021-20016) Critical · Patch now · Closed
- Sophos SFOS SQL Injection Vulnerability (CVE-2020-12271) Critical · Patch now · Closed
- Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-10181) Critical · Patch now · Closed
- Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability (CVE-2017-9248) Critical · Patch now · Closed
- Tenda AC11 Router Stack Buffer Overflow Vulnerability (CVE-2021-31755) Critical · Patch now · Closed
- Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability (CVE-2020-10987) Critical · Patch now · Closed
- Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability (CVE-2018-14558) Critical · Patch now · Closed
- ThinkPHP "noneCms" Remote Code Execution Vulnerability (CVE-2018-20062) Critical · Patch now · Closed
- Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability (CVE-2020-8599) Critical · Patch now · Closed
- Unraid Remote Code Execution Vulnerability (CVE-2020-5847) Critical · Patch now · Closed
- vBulletin PHP Module Remote Code Execution Vulnerability (CVE-2019-16759) Critical · Patch now · Closed
- vBulletin PHP Module Remote Code Execution Vulnerability (CVE-2020-17496) Critical · Patch now · Closed
- VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability (CVE-2019-5544) Critical · Patch now · Closed
- VMware ESXi OpenSLP Use-After-Free Vulnerability (CVE-2020-3992) Critical · Patch now · Closed
- VMware vCenter Server File Upload Vulnerability (CVE-2021-22005) Critical · Patch now · Closed
- VMware vCenter Server Information Disclosure Vulnerability (CVE-2020-3952) Critical · Patch now · Closed
- VMware vCenter Server Remote Code Execution Vulnerability (CVE-2021-21972) Critical · Patch now · Closed
- VMware vCenter Server Improper Input Validation Vulnerability (CVE-2021-21985) Critical · Patch now · Closed
- Multiple VMware Products Command Injection Vulnerability (CVE-2020-4006) Critical · Patch now · Closed
- WordPress File Manager Plugin Remote Code Execution Vulnerability (CVE-2020-25213) Critical · Patch now · Closed
- Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-27561) Critical · Patch now · Closed
- Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability (CVE-2021-40539) Critical · Patch now · Closed
- Zoho ManageEngine Desktop Central File Upload Vulnerability (CVE-2020-10189) Critical · Patch now · Closed
- Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability (CVE-2020-29583) Critical · Patch now · Closed
- Accellion FTA OS Command Injection Vulnerability (CVE-2021-27104) Critical · Patch now · Closed
- Accellion FTA SQL Injection Vulnerability (CVE-2021-27101) Critical · Patch now · Closed
- Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-27103) Critical · Patch now · Closed
- Adobe ColdFusion Deserialization of Untrusted Data Vulnerability (CVE-2018-4939) Critical · Patch now · Closed
- Adobe ColdFusion Unrestricted File Upload Vulnerability (CVE-2018-15961) Critical · Patch now · Closed
- Apache HTTP Server Path Traversal Vulnerability (CVE-2021-42013) Critical · Patch now · Closed
- Apache HTTP Server Path Traversal Vulnerability (CVE-2021-41773) Critical · Patch now · Closed
- Apache Shiro Code Execution Vulnerability (CVE-2016-4437) Critical · Patch now · Closed
- Apache Struts Remote Code Execution Vulnerability (CVE-2020-17530) Critical · Patch now · Closed
- Apache Struts Remote Code Execution Vulnerability (CVE-2017-5638) Critical · Patch now · Closed
- Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability (CVE-2021-1870) Critical · Patch now · Closed
- Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability (CVE-2021-1871) Critical · Patch now · Closed
- Arcadyan Buffalo Firmware Path Traversal Vulnerability (CVE-2021-20090) Critical · Patch now · Closed
- Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability (CVE-2021-26084) Critical · Patch now · Closed
- Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability (CVE-2019-11580) Critical · Patch now · Closed
- Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability (CVE-2019-3396) Critical · Patch now · Closed
- BQE BillQuick Web Suite SQL Injection Vulnerability (CVE-2021-42258) Critical · Patch now · Closed
- Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability (CVE-2021-1497) Critical · Patch now · Closed
- Cisco HyperFlex HX Data Platform Command Injection Vulnerability (CVE-2021-1498) Critical · Patch now · Closed
- Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability (CVE-2018-0171) Critical · Patch now · Closed
- Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability (CVE-2020-3161) Critical · Patch now · Closed
- Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability (CVE-2019-19781) Critical · Patch now · Closed
- Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability (CVE-2019-11634) Critical · Patch now · Closed
- D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability (CVE-2020-29557) Critical · Patch now · Closed
- D-Link DNS-320 Device Command Injection Vulnerability (CVE-2020-25506) Critical · Patch now · Closed
- Multiple DrayTek Vigor Routers Web Management Page Vulnerability (CVE-2020-8515) Critical · Patch now · Closed
- Drupal Core Remote Code Execution Vulnerability (CVE-2018-7600) Critical · Patch now · Closed
- GitLab Community and Enterprise Editions Remote Code Execution Vulnerability (CVE-2021-22205) Critical · Patch now · Closed
- Exim Buffer Overflow Vulnerability (CVE-2018-6789) Critical · Patch now · Closed
- EyesOfNetwork Use of Hard-Coded Credentials Vulnerability (CVE-2020-8657) Critical · Patch now · Closed
- F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability (CVE-2020-5902) Critical · Patch now · Closed
- F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability (CVE-2021-22986) Critical · Patch now · Closed
- ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability (CVE-2021-35464) Critical · Patch now · Closed
- Fortinet FortiOS SSL VPN Improper Authentication Vulnerability (CVE-2020-12812) Critical · Patch now · Closed
- Fortinet FortiOS SSL VPN Path Traversal Vulnerability (CVE-2018-13379) Critical · Patch now · Closed
- Google Chrome for Android UI Heap Buffer Overflow Vulnerability (CVE-2020-16010) Critical · Patch now · Closed
- Google Chrome FreeType Heap Buffer Overflow Vulnerability (CVE-2020-15999) Critical · Patch now · Closed
- Google Chrome Use-After-Free Vulnerability (CVE-2020-16017) Critical · Patch now · Closed
- Google Chromium Indexed DB API Use-After-Free Vulnerability (CVE-2021-30633) Critical · Patch now · Closed
- Google Chromium Portals Use-After-Free Vulnerability (CVE-2021-37973) Critical · Patch now · Closed
- IBM Data Risk Manager Security Bypass Vulnerability (CVE-2020-4427) Critical · Patch now · Closed
- IBM Data Risk Manager Remote Code Execution Vulnerability (CVE-2020-4428) Critical · Patch now · Closed
- IBM Planning Analytics Remote Code Execution Vulnerability (CVE-2019-4716) Critical · Patch now · Closed
- Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability (CVE-2020-15505) Critical · Patch now · Closed
- Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability (CVE-2021-30116) Critical · Patch now · Closed
- Liferay Portal Deserialization of Untrusted Data Vulnerability (CVE-2020-7961) Critical · Patch now · Closed
- Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability (CVE-2021-22502) Critical · Patch now · Closed
- Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability (CVE-2021-38647) Critical · Patch now · Closed