Cyber Risk Directory
Public-source intelligence across vulnerabilities, ransomware activity, industries and countries. Updated continuously.
Known-exploited vulnerabilities (1,767 tracked)
Newest first: by CVE year, then by how likely exploitation is (EPSS).
| CVE | Name | EPSS | Ransomware |
|---|---|---|---|
| CVE-2023-29552 | Service Location Protocol (SLP) Denial-of-Service Vulnerability | 64.0% | No |
| CVE-2023-4911 | GNU C Library Buffer Overflow Vulnerability | 63.8% | No |
| CVE-2023-43770 | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | 63.7% | No |
| CVE-2023-35081 | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | 63.6% | No |
| CVE-2023-21608 | Adobe Acrobat and Reader Use-After-Free Vulnerability | 59.4% | No |
| CVE-2023-21529 | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerabil | 59.3% | Yes |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerabili | 57.6% | No |
| CVE-2023-20118 | Cisco Small Business RV Series Routers Command Injection Vulnerability | 54.1% | No |
| CVE-2023-45249 | Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerabi | 53.5% | No |
| CVE-2023-41064 | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability | 53.4% | No |
| CVE-2023-32434 | Apple Multiple Products Integer Overflow Vulnerability | 51.5% | No |
| CVE-2023-49897 | FXC AE1021, AE1021PE OS Command Injection Vulnerability | 50.4% | No |
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vu | 49.1% | No |
| CVE-2023-5217 | Google Chromium libvpx Heap Buffer Overflow Vulnerability | 49.0% | No |
| CVE-2023-28252 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escal | 48.9% | Yes |
| CVE-2023-48365 | Qlik Sense HTTP Tunneling Vulnerability | 47.7% | Yes |
| CVE-2023-49105 | ownCloud Improper Authentication Vulnerability | 43.2% | No |
| CVE-2023-36874 | Microsoft Windows Error Reporting Service Privilege Escalation Vulnera | 42.6% | No |
| CVE-2023-33538 | TP-Link Multiple Routers Command Injection Vulnerability | 41.6% | No |
| CVE-2023-4762 | Google Chromium V8 Type Confusion Vulnerability | 41.4% | No |
621–640 of 1,767
Sources: CISA KEV catalog · FIRST EPSS
Ransomware groups
thegentlemen (393)
qilin (387)
N0n (182)
akira (108)
incransom (107)
clop (92)
Storm (89)
krybit (86)
lockbit5 (73)
settra (71)
SilentRansomGroup (70)
safepay (67)
direwolf (65)
everest (62)
Orova (62)
emperador (61)
play (53)
nightspire (51)
AuditTeam (50)
Majinahanashi (50)
Booba Project (47)
Panzer (46)
Wallstreet (42)
rhysida (40)
dragonforce (40)
Dark Project (33)
aurora (32)
BrainCipher (29)
L Group (28)
metaencryptor (27)
Source: Ransomware.live
Company security profiles (2,420 analyzed)
Cyber Exposure Scores computed from public signals — email authentication, DNS, TLS, internet exposure and breach history. Newly analyzed domains appear here automatically.
Country risk profiles
The United States (1142)
Germany (167)
The United Kingdom (123)
Italy (107)
Brazil (92)
Canada (85)
India (72)
France (64)
Mexico (62)
Spain (56)
Australia (49)
Argentina (47)
South Korea (44)
Japan (42)
Turkey (40)
TW (38)
Switzerland (37)
Sweden (35)
Singapore (31)
MY (30)
TH (26)
The Netherlands (25)
The United Arab Emirates (25)
South Africa (23)
CO (21)
CL (21)
ID (20)
HK (18)
PH (18)
PE (17)
Industry risk profiles
Manufacturing (432)
Technology (401)
Professional Services (346)
Healthcare (267)
Retail (219)
Finance (152)
Education (112)
Transportation (97)
Agriculture and Food Production (87)
Government (80)
Energy (79)
Hospitality (65)
Telecommunications (33)
Entertainment (20)
Real Estate (18)
Information (8)
Defense (2)
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.