Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
11 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2023-47565 | QNAP | QNAP VioStor NVR OS Command Injection Vulnerability | Severity: High CVSS 8.8 | Dec 21, 2023 | Not known |
| CVE-2022-27593 | QNAP | QNAP Photo Station Externally Controlled Reference Vulnerability | Severity: Critical CVSS 9.1 | Sep 8, 2022 | Known |
| CVE-2019-7192 | QNAP | QNAP Photo Station Improper Access Control Vulnerability | Severity: Critical CVSS 9.8 | Jun 8, 2022 | Known |
| CVE-2019-7193 | QNAP | QNAP QTS Improper Input Validation Vulnerability | Severity: Critical CVSS 9.8 | Jun 8, 2022 | Known |
| CVE-2019-7194 | QNAP | QNAP Photo Station Path Traversal Vulnerability | Severity: Critical CVSS 9.8 | Jun 8, 2022 | Known |
| CVE-2019-7195 | QNAP | QNAP Photo Station Path Traversal Vulnerability | Severity: Critical CVSS 9.8 | Jun 8, 2022 | Known |
| CVE-2018-19949 | QNAP | QNAP NAS File Station Command Injection Vulnerability | Severity: Critical CVSS 9.8 | May 24, 2022 | Known |
| CVE-2018-19953 | QNAP | QNAP NAS File Station Cross-Site Scripting Vulnerability | Severity: Elevated CVSS 6.1 | May 24, 2022 | Known |
| CVE-2018-19943 | QNAP | QNAP NAS File Station Cross-Site Scripting Vulnerability | Severity: Elevated CVSS 5.4 | May 24, 2022 | Known |
| CVE-2020-2509 | QNAP | QNAP Network-Attached Storage (NAS) Command Injection Vulnerability | Severity: Critical CVSS 9.8 | Apr 11, 2022 | Not known |
| CVE-2021-28799 | QNAP | QNAP NAS Improper Authorization Vulnerability | Severity: Critical CVSS 9.8 | Mar 31, 2022 | Known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.