Free CVE feed
Known exploited vulnerabilities, by vendor
Every vendor in CISA's Known Exploited Vulnerabilities catalog, with how many of its vulnerabilities attackers have used and how many fed ransomware campaigns. Open a vendor for the full list.
The short answer
CISA's catalog lists 1,779 vulnerabilities with confirmed exploitation across 294 vendors. The most listed are Microsoft (391), Cisco (103), Apple (96), which says as much about how widely they are deployed as about their code.
Vendors
- Microsoft391117 ransomware
- Cisco1037 ransomware
- Apple96
- Adobe8311 ransomware
- Google77
- Oracle4613 ransomware
- Apache418 ransomware
- Ivanti3812 ransomware
- Fortinet3214 ransomware
- Linux322 ransomware
- Citrix277 ransomware
- D-Link262 ransomware
- VMware269 ransomware
- SonicWall2013 ransomware
- Synacor196 ransomware
- Android17
- Palo Alto Networks166 ransomware
- Samsung15
- Atlassian148 ransomware
- SAP143 ransomware
- Mozilla131 ransomware
- Zyxel132 ransomware
- Qualcomm12
- Trend Micro12
- QNAP119 ransomware
- Roundcube11
- SolarWinds112 ransomware
- Arm9
- IBM92 ransomware
- Progress94 ransomware
- Red Hat94 ransomware
- Zoho92 ransomware
- F584 ransomware
- Juniper8
- NETGEAR8
- Mitel75 ransomware
- Sophos72 ransomware
- WordPress7
- Broadcom61 ransomware
- GitLab61 ransomware
- Jenkins61 ransomware
- TP-Link6
- Check Point52 ransomware
- DrayTek5
- Drupal52 ransomware
- Exim51 ransomware
- GNU5
- Langflow51 ransomware
- MikroTik5
- N-able5
- PaperCut52 ransomware
- Plex5
- RARLAB54 ransomware
- Accellion44 ransomware
- Arista4
- BeyondTrust41 ransomware
- ConnectWise42 ransomware
- Craft CMS4
- Fortra42 ransomware
- GIGABYTE44 ransomware
- Gladinet4
- JetBrains44 ransomware
- JFrog4
- Kentico4
- Nagios4
- Sangoma4
- SimpleHelp43 ransomware
- Sitecore41 ransomware
- Ubiquiti4
- Veeam44 ransomware
- WatchGuard41 ransomware
- ASUS3
- Barracuda Networks3
- BerriAI3
- CrushFTP31 ransomware
- Dassault Systèmes3
- DotNetNuke (DNN)31 ransomware
- Elastic3
- ImageMagick3
- Kaseya33 ransomware
- Laravel31 ransomware
- Meta Platforms3
- OSGeo3
- PHP31 ransomware
- PHP Group31 ransomware
- Qlik33 ransomware
- Rails3
- Realtek3
- SaltStack3
- SmarterTools33 ransomware
- SysAid31 ransomware
- TeleMessage3
- Tenda3
- TrueConf3
- Veritas33 ransomware
- VMware Tanzu31 ransomware
- Acronis2
- Advantive2
- Ahsay2
- Array Networks21 ransomware
- Aviatrix2
- Cleo22 ransomware
- Commvault2
- CWP2
- CyberPersons22 ransomware
- Dahua2
- Dasan21 ransomware
- Dell2
- EyesOfNetwork2
- GeoVision2
- Grafana Labs2
- Hewlett Packard (HP)2
- Hikvision2
- Hitachi Vantara2
- IETF2
- Intel21 ransomware
- LiteSpeed2
- Metabase2
- Micro Focus2
- MinIO2
- MongoDB2
- NUUO2
- OpenBSD2
- OpenPLC2
- ownCloud2
- Paessler2
- PEAR2
- PTZOptics2
- Quest21 ransomware
- Rejetto21 ransomware
- Reolink2
- ServiceNow2
- Siemens2
- Sonatype2
- Sudo2
- Telerik21 ransomware
- ThinkPHP2
- TIBCO2
- Unraid2
- vBulletin2
- Versa2
- Wing FTP Server2
- WSO221 ransomware
- Zabbix2
- Zammad GmbH2
- 7-Zip1
- Acclaim Systems1
- Adminer1
- Ajax.NET Professional1
- Alcatel1
- Amcrest1
- AMI1
- Aquasecurity1
- Arcadyan1
- Arcserve1
- Artifex1
- Audinate1
- Balbooa1
- BQE11 ransomware
- Cacti1
- ChakraCore1
- Checkbox1
- Code Aurora1
- Collabora1
- Crestron1
- D-Link and TRENDnet1
- Daemon1
- DD-WRT1
- Delta Electronics1
- Digiever1
- Docker1
- dotCMS11 ransomware
- Edimax1
- EG Secure Solutions1
- Embedthis1
- Erlang1
- FatPipe1
- ForgeRock11 ransomware
- FreeType1
- Fuel CMS1
- FXC1
- Git1
- Gitea1
- Gogs1
- GPUStack1
- Grandstream1
- Hewlett Packard Enterprise (HPE)1
- iCagenda1
- IGEL1
- Ignite Realtime1
- InduSoft1
- ISC1
- Joomla!1
- Joomlack1
- JoomShaper1
- JQuery1
- Justice AV Solutions1
- Kestra1
- Kingsoft1
- Kludex1
- KNX Association1
- Lantronix1
- LG1
- Libraesva1
- Liferay1
- Looking Glass1
- Marimo1
- McAfee1
- MDaemon1
- MediaTek1
- Meta11 ransomware
- Mirasvit1
- MLflow1
- Motex1
- n8n1
- NAKIVO1
- Netis1
- Netwrix11 ransomware
- NextGen Healthcare11 ransomware
- Nice1
- North Grid1
- Nostromo1
- Notepad++1
- Novi Survey1
- Npm package1
- Nx11 ransomware
- October CMS1
- Omnissa1
- ONLYOFFICE1
- OpenSSL1
- Openwave Messaging Limited1
- Perl1
- phpMyAdmin1
- PHPUnit1
- Pi-hole1
- PlaySMS1
- Prettier1
- Primetek1
- ProFTPD1
- ProjectSend1
- PTC11 ransomware
- Pulse Secure1
- QNAP Systems1
- Qualitia1
- Ray-Project1
- rConfig1
- React Native Community1
- Redis1
- reviewdog1
- Rockwell1
- Ruckus Wireless1
- Samba11 ransomware
- Schneider Electric1
- ScienceLogic1
- Sierra Wireless1
- SignalWire1
- SIMalliance1
- SKYSEA1
- Smartbedded1
- SolarView1
- Soliton Systems K.K1
- Splunk1
- Spreadsheet::ParseExcel1
- Srimax1
- Strapi1
- SugarCRM1
- Sumavision1
- Sunhillo1
- Symantec1
- TanStack11 ransomware
- TeamT51
- TeamViewer1
- Teclib1
- TerraMaster11 ransomware
- tj-actions1
- Treck TCP/IP stack1
- Trihedral1
- Trimble1
- TVT1
- Twilio1
- Unitronics1
- Vite1
- Wazuh1
- WebKitGTK1
- Webmin11 ransomware
- WebPros11 ransomware
- WebRTC11 ransomware
- Widget Factory1
- XStream1
- XWiki1
- Yealink1
- Yiiframework1
- ZK Framework11 ransomware
- ZKTeco1
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.