Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 9 of 30. 100 incidents from 16 December 2024 to 10 March 2025.
10 March 2025
- Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability (CVE-2024-13161) High · Patch now · Closed
- Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability (CVE-2024-13160) High · Patch now · Closed
- Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability (CVE-2024-13159) High · Patch now · Closed
- Advantive VeraCore Unrestricted File Upload Vulnerability (CVE-2024-57968) High · Patch now · Closed
- Advantive VeraCore SQL Injection Vulnerability (CVE-2025-25181) High · Patch now · Closed
4 March 2025
- VMware ESXi Arbitrary Write Vulnerability (CVE-2025-22225) High · Patch now · Closed
- VMware ESXi and Workstation TOCTOU Race Condition Vulnerability (CVE-2025-22224) High · Patch now · Closed
- VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability (CVE-2025-22226) Medium · Patch now · Closed
- Linux Kernel Use of Uninitialized Resource Vulnerability (CVE-2024-50302) Medium · Patch now · Closed
3 March 2025
- Progress WhatsUp Gold Path Traversal Vulnerability (CVE-2024-4885) Critical · Patch now · Closed
- Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability (CVE-2022-43939) Critical · Patch now · Closed
- Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability (CVE-2018-8639) High · Patch now · Closed
- Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability (CVE-2022-43769) High · Patch now · Closed
- Cisco Small Business RV Series Routers Command Injection Vulnerability (CVE-2023-20118) High · Patch now · Closed
- Color Dating data breach: 220K accounts exposed High · Breach · Closed
2 March 2025
- Flat Earth Sun, Moon and Zodiac App data breach: 33K accounts exposed High · Breach · Closed
27 February 2025
- Orange Romania data breach: 556K accounts exposed High · Breach · Closed
- Spyzie data breach: 518K accounts exposed High · Breach · Closed
25 February 2025
- Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability (CVE-2023-34192) Critical · Patch now · Closed
- Microsoft Partner Center Improper Access Control Vulnerability (CVE-2024-49035) Critical · Patch now · Closed
- ALIEN TXTBASE Stealer Logs data breach: 284.1M accounts exposed Critical · Breach · Closed
24 February 2025
- Adobe ColdFusion Deserialization Vulnerability (CVE-2017-3066) Critical · Patch now · Closed
- Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability (CVE-2024-20953) High · Patch now · Closed
21 February 2025
- Microsoft Power Pages Improper Access Control Vulnerability (CVE-2025-24989) Critical · Patch now · Closed
20 February 2025
- Craft CMS Code Injection Vulnerability (CVE-2025-23209) High · Patch now · Closed
- Cocospy data breach: 1.8M accounts exposed High · Breach · Closed
- Spyic data breach: 875K accounts exposed High · Breach · Closed
- Palo Alto Networks PAN-OS File Read Vulnerability (CVE-2025-0111) Medium · Patch now · Closed
18 February 2025
- Palo Alto Networks PAN-OS Authentication Bypass Vulnerability (CVE-2025-0108) Critical · Patch now · Closed
- SonicWall SonicOS SSLVPN Improper Authentication Vulnerability (CVE-2024-53704) Critical · Patch now · Closed
16 February 2025
- Storenvy data breach: 11.1M accounts exposed High · Breach · Closed
13 February 2025
- SimpleHelp Path Traversal Vulnerability (CVE-2024-57727) High · Patch now · Closed
- Doxbin (TOoDA) data breach: 136K accounts exposed High · Breach · Closed
12 February 2025
- Mitel SIP Phones Argument Injection Vulnerability (CVE-2024-41710) High · Patch now · Closed
- Zacks (2024) data breach: 12.0M accounts exposed High · Breach · Closed
- Apple iOS and iPadOS Incorrect Authorization Vulnerability (CVE-2025-24200) Medium · Patch now · Closed
11 February 2025
- Zyxel DSL CPE OS Command Injection Vulnerability (CVE-2024-40891) High · Patch now · Closed
- Zyxel DSL CPE OS Command Injection Vulnerability (CVE-2024-40890) High · Patch now · Closed
- Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability (CVE-2025-21418) High · Patch now · Closed
- Microsoft Windows Storage Link Following Vulnerability (CVE-2025-21391) High · Patch now · Closed
- LandAirSea data breach: 337K accounts exposed High · Breach · Closed
10 February 2025
- Adopt Me Trading Values data breach: 86K accounts exposed High · Breach · Closed
9 February 2025
- Youthmanual data breach: 937K accounts exposed High · Breach · Closed
7 February 2025
- Trimble Cityworks Deserialization Vulnerability (CVE-2025-0994) High · Patch now · Closed
6 February 2025
- Sophos XG Firewall Buffer Overflow Vulnerability (CVE-2020-15069) Critical · Patch now · Closed
- CyberoamOS (CROS) SQL Injection Vulnerability (CVE-2020-29574) Critical · Patch now · Closed
- Microsoft Outlook Improper Input Validation Vulnerability (CVE-2024-21413) Critical · Patch now · Closed
- Dante Discovery Process Control Vulnerability (CVE-2022-23748) High · Patch now · Closed
- 7-Zip Mark of the Web Bypass Vulnerability (CVE-2025-0411) High · Patch now · Closed
- Hakko Corporation data breach: 9665 accounts exposed High · Breach · Closed
- Thermomix Recipe World Forum data breach: 3.1M accounts exposed Medium · Breach · Closed
5 February 2025
- Linux Kernel Out-of-Bounds Write Vulnerability (CVE-2024-53104) High · Patch now · Closed
4 February 2025
- Paessler PRTG Network Monitor Local File Inclusion Vulnerability (CVE-2018-19410) Critical · Patch now · Closed
- Paessler PRTG Network Monitor OS Command Injection Vulnerability (CVE-2018-9276) High · Patch now · Closed
- Microsoft .NET Framework Information Disclosure Vulnerability (CVE-2024-29059) High · Patch now · Closed
- Apache OFBiz Forced Browsing Vulnerability (CVE-2024-45195) High · Patch now · Closed
- PoinCampus data breach: 89K accounts exposed Medium · Breach · Closed
3 February 2025
- DragonNest data breach: 511K accounts exposed High · Breach · Closed
- 1win data breach: 96.2M accounts exposed High · Breach · Closed
2 February 2025
- 9Lives data breach: 109K accounts exposed High · Breach · Closed
29 January 2025
- Apple Multiple Products Use-After-Free Vulnerability (CVE-2025-24085) Critical · Patch now · Closed
28 January 2025
- Doxbin Scrape data breach: 435K accounts exposed High · Breach · Closed
- HeatGames data breach: 647K accounts exposed High · Breach · Closed
24 January 2025
- SonicWall SMA1000 Appliances Deserialization Vulnerability (CVE-2025-23006) Critical · Patch now · Closed
23 January 2025
- JQuery Cross-Site Scripting (XSS) Vulnerability (CVE-2020-11023) Medium · Patch now · Closed
22 January 2025
- Welhof data breach: 107K accounts exposed Medium · Breach · Closed
- Frame & Optic data breach: 15K accounts exposed Medium · Breach · Closed
18 January 2025
- Otelier data breach: 436K accounts exposed High · Breach · Closed
17 January 2025
- MSI data breach: 249K accounts exposed Medium · Breach · Closed
16 January 2025
- Aviatrix Controllers OS Command Injection Vulnerability (CVE-2024-50603) Critical · Patch now · Closed
- Le Coq Sportif Columbia data breach: 79K accounts exposed High · Breach · Closed
14 January 2025
- Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability (CVE-2024-55591) Critical · Patch now · Closed
- Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability (CVE-2025-21335) High · Patch now · Closed
- Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability (CVE-2025-21334) High · Patch now · Closed
- Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability (CVE-2025-21333) High · Patch now · Closed
13 January 2025
- Qlik Sense HTTP Tunneling Vulnerability (CVE-2023-48365) Critical · Patch now · Closed
- BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability (CVE-2024-12686) High · Patch now · Closed
- Stealer Logs, Jan 2025 data breach: 71.0M accounts exposed High · Breach · Closed
- Scholastic data breach: 4.2M accounts exposed Medium · Breach · Closed
12 January 2025
- SuperDraft data breach: 300K accounts exposed High · Breach · Closed
8 January 2025
- Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability (CVE-2025-0282) Critical · Patch now · Closed
7 January 2025
- Oracle WebLogic Server Unspecified Vulnerability (CVE-2020-2883) Critical · Patch now · Closed
- Mitel MiCollab Path Traversal Vulnerability (CVE-2024-41713) Critical · Patch now · Closed
- Mitel MiCollab Path Traversal Vulnerability (CVE-2024-55550) Low · Patch now · Closed
3 January 2025
- GLAMIRA data breach: 874K accounts exposed Medium · Breach · Closed
30 December 2024
- Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (CVE-2024-3393) High · Patch now · Closed
23 December 2024
- Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability (CVE-2021-44207) High · Patch now · Closed
20 December 2024
- French Citizens data breach: 28.4M accounts exposed High · Breach · Closed
19 December 2024
- BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability (CVE-2024-12356) Critical · Patch now · Closed
- BitView data breach: 63K accounts exposed High · Breach · Closed
- schenkYOU data breach: 237K accounts exposed High · Breach · Closed
- Young Living Essential Oils data breach: 1.1M accounts exposed Medium · Breach · Closed
18 December 2024
- NUUO NVRmini2 Devices Missing Authentication Vulnerability (CVE-2022-23227) Critical · Patch now · Closed
- NUUO NVRmini Devices OS Command Injection Vulnerability (CVE-2018-14933) Critical · Patch now · Closed
- Reolink RLC-410W IP Camera OS Command Injection Vulnerability (CVE-2021-40407) High · Patch now · Closed
- Reolink Multiple IP Cameras OS Command Injection Vulnerability (CVE-2019-11001) High · Patch now · Closed
17 December 2024
- Cleo Multiple Products Unauthenticated File Upload Vulnerability (CVE-2024-55956) Critical · Patch now · Closed
16 December 2024
- Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability (CVE-2024-35250) High · Patch now · Closed
- Adobe ColdFusion Improper Access Control Vulnerability (CVE-2024-20767) High · Patch now · Closed
- Hopamedia data breach: 23.8M accounts exposed Medium · Breach · Closed