Cyber Risk Directory
Public-source intelligence across vulnerabilities, ransomware activity, industries and countries. Updated continuously.
Known-exploited vulnerabilities (1,760 tracked)
Newest first: by CVE year, then by how likely exploitation is (EPSS).
| CVE | Name | EPSS | Ransomware |
|---|---|---|---|
| CVE-2015-3306 | ProFTPD Improper Access Control Vulnerability | 99.5% | No |
| CVE-2015-5119 | Adobe Flash Player Use-After-Free Vulnerability | 98.6% | No |
| CVE-2015-7450 | IBM WebSphere Application Server and Server Hypervisor Edition Code In | 97.8% | No |
| CVE-2015-1641 | Microsoft Office Memory Corruption Vulnerability | 97.2% | No |
| CVE-2015-2051 | D-Link DIR-645 Router Remote Code Execution Vulnerability | 97.1% | No |
| CVE-2015-0313 | Adobe Flash Player Use-After-Free Vulnerability | 95.3% | No |
| CVE-2015-4852 | Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability | 95.0% | No |
| CVE-2015-5122 | Adobe Flash Player Use-After-Free Vulnerability | 87.0% | No |
| CVE-2015-2426 | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vul | 86.6% | No |
| CVE-2015-2545 | Microsoft Office Malformed EPS File Vulnerability | 85.9% | No |
| CVE-2015-0311 | Adobe Flash Player Remote Code Execution Vulnerability | 85.6% | No |
| CVE-2015-3035 | TP-Link Multiple Archer Devices Directory Traversal Vulnerability | 83.9% | No |
| CVE-2015-1187 | D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerabili | 82.9% | No |
| CVE-2015-0016 | Microsoft Windows TS WebProxy Directory Traversal Vulnerability | 75.8% | No |
| CVE-2015-3043 | Adobe Flash Player Memory Corruption Vulnerability | 73.9% | No |
| CVE-2015-4495 | Mozilla Firefox Security Feature Bypass Vulnerability | 68.6% | No |
| CVE-2015-8651 | Adobe Flash Player Integer Overflow Vulnerability | 67.7% | No |
| CVE-2015-7645 | Adobe Flash Player Arbitrary Code Execution Vulnerability | 65.3% | Yes |
| CVE-2015-4068 | Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerabili | 63.6% | No |
| CVE-2015-7755 | Juniper ScreenOS Improper Authentication Vulnerability | 61.1% | No |
1,561–1,580 of 1,760
Sources: CISA KEV catalog · FIRST EPSS
Ransomware groups
qilin (358)
thegentlemen (343)
N0n (164)
incransom (100)
akira (96)
clop (92)
Storm (89)
krybit (85)
lockbit5 (70)
direwolf (63)
settra (63)
everest (62)
SilentRansomGroup (57)
safepay (57)
emperador (56)
Orova (55)
play (53)
Majinahanashi (49)
nightspire (49)
AuditTeam (45)
Panzer (45)
Wallstreet (40)
dragonforce (39)
Booba Project (36)
Dark Project (33)
rhysida (32)
BrainCipher (29)
L Group (28)
aurora (28)
metaencryptor (27)
Source: Ransomware.live
Company security profiles (2,251 analyzed)
Cyber Exposure Scores computed from public signals — email authentication, DNS, TLS, internet exposure and breach history. Newly analyzed domains appear here automatically.
Country risk profiles
The United States (1051)
Germany (152)
The United Kingdom (115)
Italy (101)
Brazil (92)
Canada (83)
India (70)
France (60)
Mexico (53)
Spain (51)
Australia (46)
Argentina (44)
Japan (39)
South Korea (38)
Switzerland (36)
Turkey (36)
TW (35)
Sweden (31)
Singapore (26)
TH (25)
The Netherlands (24)
MY (24)
The United Arab Emirates (23)
South Africa (22)
CL (20)
CO (19)
HK (18)
ID (18)
China (17)
PE (16)
Industry risk profiles
Manufacturing (404)
Technology (364)
Professional Services (319)
Healthcare (248)
Retail (210)
Finance (141)
Education (102)
Transportation (92)
Agriculture and Food Production (86)
Energy (74)
Government (72)
Hospitality (62)
Telecommunications (33)
Entertainment (17)
Real Estate (15)
Information (8)
Defense (2)
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.