Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 8 of 30. 100 incidents from 11 March 2025 to 7 July 2025.
7 July 2025
- Rails Ruby on Rails Path Traversal Vulnerability (CVE-2019-5418) High · Patch now · Closed
3 July 2025
- Catwatchful data breach: 61K accounts exposed High · Breach · Closed
2 July 2025
- Google Chromium V8 Type Confusion Vulnerability (CVE-2025-6554) High · Patch now · Closed
1 July 2025
- TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability (CVE-2025-48928) Medium · Patch now · Closed
- TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability (CVE-2025-48927) Medium · Patch now · Closed
30 June 2025
- Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability (CVE-2025-6543) Critical · Patch now · Closed
25 June 2025
- D-Link DIR-859 Router Path Traversal Vulnerability (CVE-2024-0769) Critical · Patch now · Closed
- AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability (CVE-2024-54085) Critical · Patch now · Closed
- Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability (CVE-2019-6693) Medium · Patch now · Closed
- Have Fun Teaching data breach: 27K accounts exposed Medium · Breach · Closed
- Robinsons Malls data breach: 195K accounts exposed Medium · Breach · Closed
17 June 2025
- Linux Kernel Improper Ownership Management Vulnerability (CVE-2023-0386) High · Patch now · Closed
16 June 2025
- TP-Link Multiple Routers Command Injection Vulnerability (CVE-2023-33538) High · Patch now · Closed
- Apple Multiple Products Unspecified Vulnerability (CVE-2025-43200) Medium · Patch now · Closed
13 June 2025
- Ualabee data breach: 472K accounts exposed Medium · Breach · Closed
10 June 2025
- Wazuh Server Deserialization of Untrusted Data Vulnerability (CVE-2025-24016) Critical · Patch now · Closed
- Microsoft Windows External Control of File Name or Path Vulnerability (CVE-2025-33053) High · Patch now · Closed
- WiredBucks data breach: 918K accounts exposed High · Breach · Closed
9 June 2025
- RoundCube Webmail Cross-Site Scripting Vulnerability (CVE-2024-42009) Critical · Patch now · Closed
- Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability (CVE-2025-32433) Critical · Patch now · Closed
7 June 2025
- Disk Union data breach: 690K accounts exposed High · Breach · Closed
5 June 2025
- Google Chromium V8 Out-of-Bounds Read and Write Vulnerability (CVE-2025-5419) High · Patch now · Closed
3 June 2025
- Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability (CVE-2025-21479) High · Patch now · Closed
- Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability (CVE-2025-21480) High · Patch now · Closed
- Qualcomm Multiple Chipsets Use-After-Free Vulnerability (CVE-2025-27038) High · Patch now · Closed
- ColoCrossing data breach: 7183 accounts exposed High · Breach · Closed
2 June 2025
- ASUS Routers Improper Authentication Vulnerability (CVE-2021-32030) Critical · Patch now · Closed
- Craft CMS Code Injection Vulnerability (CVE-2024-56145) Critical · Patch now · Closed
- ConnectWise ScreenConnect Improper Authentication Vulnerability (CVE-2025-3935) High · Patch now · Closed
- ASUS RT-AX55 Routers OS Command Injection Vulnerability (CVE-2023-39780) High · Patch now · Closed
- Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability (CVE-2025-35939) Medium · Patch now · Closed
27 May 2025
- Free data breach: 13.9M accounts exposed High · Breach · Closed
23 May 2025
- Operation Endgame 2.0 data breach: 15.4M accounts exposed High · Breach · Closed
22 May 2025
- Samsung MagicINFO 9 Server Path Traversal Vulnerability (CVE-2025-4632) Critical · Patch now · Closed
- Fédération Francaise de Rugby data breach: 281K accounts exposed Medium · Breach · Closed
19 May 2025
- ZKTeco BioTime Path Traversal Vulnerability (CVE-2023-38950) High · Patch now · Closed
- Srimax Output Messenger Directory Traversal Vulnerability (CVE-2025-27920) High · Patch now · Closed
- Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability (CVE-2025-4428) High · Patch now · Closed
- Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability (CVE-2025-4427) High · Patch now · Closed
- Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability (CVE-2024-27443) Medium · Patch now · Closed
- MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability (CVE-2024-11182) Medium · Patch now · Closed
15 May 2025
- SAP NetWeaver Deserialization Vulnerability (CVE-2025-42999) Critical · Patch now · Closed
- DrayTek Vigor Routers OS Command Injection Vulnerability (CVE-2024-12987) Critical · Patch now · Closed
14 May 2025
- Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability (CVE-2025-32756) Critical · Patch now · Closed
13 May 2025
- Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability (CVE-2025-32709) High · Patch now · Closed
- Microsoft Windows Scripting Engine Type Confusion Vulnerability (CVE-2025-30397) High · Patch now · Closed
- Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability (CVE-2025-32706) High · Patch now · Closed
- Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability (CVE-2025-32701) High · Patch now · Closed
- Microsoft Windows DWM Core Library Use-After-Free Vulnerability (CVE-2025-30400) High · Patch now · Closed
12 May 2025
- TeleMessage TM SGNL Hidden Functionality Vulnerability (CVE-2025-47729) Medium · Patch now · Closed
8 May 2025
- OnRPG data breach: 1.0M accounts exposed High · Breach · Closed
7 May 2025
- GeoVision Devices OS Command Injection Vulnerability (CVE-2024-11120) Critical · Patch now · Closed
- GeoVision Devices OS Command Injection Vulnerability (CVE-2024-6047) Critical · Patch now · Closed
6 May 2025
- FreeType Out-of-Bounds Write Vulnerability (CVE-2025-27363) High · Patch now · Closed
5 May 2025
- Langflow Missing Authentication Vulnerability (CVE-2025-3248) Critical · Patch now · Closed
2 May 2025
- Commvault Command Center Path Traversal Vulnerability (CVE-2025-34028) Critical · Patch now · Closed
- Yiiframework Yii Improper Protection of Alternate Path Vulnerability (CVE-2024-58136) Critical · Patch now · Closed
1 May 2025
- Apache HTTP Server Improper Escaping of Output Vulnerability (CVE-2024-38475) Critical · Patch now · Closed
- SonicWall SMA100 Appliances OS Command Injection Vulnerability (CVE-2023-44221) High · Patch now · Closed
- TehetségKapu data breach: 54K accounts exposed Medium · Breach · Closed
29 April 2025
- SAP NetWeaver Unrestricted File Upload Vulnerability (CVE-2025-31324) Critical · Patch now · Closed
28 April 2025
- Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability (CVE-2025-42599) Critical · Patch now · Closed
- Commvault Web Server Unspecified Vulnerability (CVE-2025-3928) High · Patch now · Closed
- Broadcom Brocade Fabric OS Code Injection Vulnerability (CVE-2025-1976) Medium · Patch now · Closed
17 April 2025
- Apple Multiple Products Arbitrary Read and Write Vulnerability (CVE-2025-31201) Critical · Patch now · Closed
- Apple Multiple Products Memory Corruption Vulnerability (CVE-2025-31200) Critical · Patch now · Closed
- Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability (CVE-2025-24054) Medium · Patch now · Closed
16 April 2025
- SonicWall SMA100 Appliances OS Command Injection Vulnerability (CVE-2021-20035) Medium · Patch now · Closed
13 April 2025
- Samsung Germany Customer Tickets data breach: 216K accounts exposed Medium · Breach · Closed
9 April 2025
- Linux Kernel Out-of-Bounds Read Vulnerability (CVE-2024-53150) High · Patch now · Closed
- Linux Kernel Out-of-Bounds Access Vulnerability (CVE-2024-53197) High · Patch now · Closed
- Qraved data breach: 984K accounts exposed High · Breach · Closed
8 April 2025
- Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability (CVE-2025-30406) Critical · Patch now · Closed
- Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability (CVE-2025-29824) High · Patch now · Closed
- Boulanger data breach: 2.1M accounts exposed Medium · Breach · Closed
7 April 2025
- CrushFTP Authentication Bypass Vulnerability (CVE-2025-31161) Critical · Patch now · Closed
4 April 2025
- Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability (CVE-2025-22457) Critical · Patch now · Closed
1 April 2025
- Apache Tomcat Path Equivalence Vulnerability (CVE-2025-24813) Critical · Patch now · Closed
31 March 2025
- Cisco Smart Licensing Utility Static Credential Vulnerability (CVE-2024-20439) Critical · Patch now · Closed
30 March 2025
- German Doner Kebab data breach: 162K accounts exposed Medium · Breach · Closed
27 March 2025
- Google Chromium Mojo Sandbox Escape Vulnerability (CVE-2025-2783) High · Patch now · Closed
26 March 2025
- Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability (CVE-2019-9874) Critical · Patch now · Closed
- Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability (CVE-2019-9875) High · Patch now · Closed
25 March 2025
- Troy Hunt's Mailchimp List data breach: 16K accounts exposed Medium · Breach · Closed
24 March 2025
- reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability (CVE-2025-30154) High · Patch now · Closed
19 March 2025
- Edimax IC-7100 IP Camera OS Command Injection Vulnerability (CVE-2025-1316) Critical · Patch now · Closed
- SAP NetWeaver Directory Traversal Vulnerability (CVE-2017-12637) High · Patch now · Closed
- NAKIVO Backup and Replication Absolute Path Traversal Vulnerability (CVE-2024-48248) High · Patch now · Closed
- Lexipol data breach: 672K accounts exposed High · Breach · Closed
- SpyX data breach: 2.0M accounts exposed High · Breach · Closed
18 March 2025
- tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability (CVE-2025-30066) High · Patch now · Closed
- Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability (CVE-2025-24472) High · Patch now · Closed
13 March 2025
- Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability (CVE-2025-24201) Critical · Patch now · Closed
- Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability (CVE-2025-21590) Medium · Patch now · Closed
11 March 2025
- Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability (CVE-2025-24993) High · Patch now · Closed
- Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability (CVE-2025-24985) High · Patch now · Closed
- Microsoft Windows Win32k Use-After-Free Vulnerability (CVE-2025-24983) High · Patch now · Closed
- Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability (CVE-2025-26633) High · Patch now · Closed
- Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability (CVE-2025-24991) Medium · Patch now · Closed
- Microsoft Windows NTFS Information Disclosure Vulnerability (CVE-2025-24984) Medium · Patch now · Closed