See what became
exploitable.

Latest CVEs, exploit intelligence and public PoC references, updated hourly.

Browse latest
Last sync 22:05 UTC 8 of 8 sources healthy

Known exploited

256–270 of 309 matching entries · 6717 total · live data

CVEVulnerabilityCVSSUpdatedProductPoCKEV
CVE-2018-9276KEVPaessler PRTG Network Monitor OS Command Injection Vulnerability9.019 Oct 202612:01 UTCPRTG Network MonitorSee original advisory25 sourcesVerifiedYesCVE-2018-7602KEVcore vulnerability9.82 Oct 202612:54 UTCcoreunspecified through before 7.59 (custom); unspecified through before 8.5.3 (custom); unspecified through before 8.4.8 (custom)625 sourcesVerifiedYesCVE-2018-7600KEVDrupal Core Remote Code Execution Vulnerability9.81 Oct 202618:13 UTCDrupal CoreSee original advisory4387 sourcesVerifiedYesCVE-2018-6882KEVn/a vulnerability6.11 Oct 202618:17 UTCn/an/a141 sourcesVerifiedYesCVE-2018-6789KEVExim Buffer Overflow Vulnerability9.82 Oct 202604:18 UTCEximSee original advisory440 sourcesVerifiedYesCVE-2018-1273KEVVMware Tanzu Spring Data Commons Property Binder Vulnerability9.89 Oct 202613:00 UTCSpring Data CommonsSee original advisory353 sourcesCandidateYesCVE-2017-12615KEVApache Tomcat on Windows Remote Code Execution Vulnerability0.08 Oct 202622:00 UTCTomcatSee original advisory66 sourcesVerifiedYesCVE-2017-12149KEVjbossas vulnerability9.87 Oct 202615:58 UTCjbossasn/a639 sourcesCandidateYesCVE-2017-11882KEVMicrosoft Office Memory Corruption Vulnerability0.012 Oct 202622:00 UTCOfficeSee original advisory666 sourcesVerifiedYesCVE-2017-10271KEVOracle Corporation WebLogic Server Remote Code Execution Vulnerability0.07 Oct 202622:00 UTCWebLogic ServerSee original advisory1554 sourcesVerifiedYesCVE-2017-9841KEVPHPUnit Command Injection Vulnerability9.830 Sep 202622:00 UTCPHPUnitSee original advisory1533 sourcesVerifiedYesCVE-2017-9805KEVApache Struts Deserialization of Untrusted Data Vulnerability8.116 Jun 202623:28 UTCStrutsApache Struts before 2.3.34 and 2.5.x before 2.5.1323 sourcesVerifiedYesCVE-2017-8759KEVMicrosoft .NET Framework Remote Code Execution Vulnerability9.330 Sep 202616:15 UTC.NET FrameworkSee original advisory680 sourcesVerifiedYesCVE-2017-7921KEVHikvision Multiple Products Improper Authentication Vulnerability9.813 Oct 202622:00 UTCMultiple ProductsSee original advisory481 sourcesCandidateYesCVE-2017-7494KEVSamba Remote Code Execution Vulnerability10.08 Oct 202600:27 UTCSambaSee original advisory1061 sourcesVerifiedYes

Signals, not noise.

Every item keeps its source trail. Confidence describes evidence quality; severity describes potential impact. They remain separate throughout the product.

01

Collect

Incremental source connectors preserve timestamps, URLs, and content hashes.

02

Correlate

CVE, GHSA, product, repository, and advisory identifiers are deduplicated.

03

Verify

Source quality, consistency, and independent references form the confidence score.

Get the signal.

Save your watch preferences in this browser. Email delivery is not connected.