Cyber Risk Directory
Public-source intelligence across vulnerabilities, ransomware activity, industries and countries. Updated continuously.
Known-exploited vulnerabilities (1,760 tracked)
Newest first: by CVE year, then by how likely exploitation is (EPSS).
| CVE | Name | EPSS | Ransomware |
|---|---|---|---|
| CVE-2015-3246 | Red Hat Libuser Race Condition Vulnerability | 8.5% | No |
| CVE-2015-6175 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 5.3% | No |
| CVE-2015-5287 | Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerabilit | 5.0% | No |
| CVE-2015-1769 | Microsoft Windows Mount Manager Privilege Escalation Vulnerability | 4.1% | No |
| CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | 100.0% | No |
| CVE-2014-0160 | OpenSSL Information Disclosure Vulnerability | 100.0% | No |
| CVE-2014-8361 | Realtek SDK Improper Input Validation Vulnerability | 100.0% | No |
| CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | 99.9% | No |
| CVE-2014-0497 | Adobe Flash Player Integer Underflow Vulnerablity | 99.9% | No |
| CVE-2014-6278 | GNU Bash OS Command Injection Vulnerability | 99.7% | No |
| CVE-2014-6287 | Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability | 99.3% | No |
| CVE-2014-6332 | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Re | 94.9% | No |
| CVE-2014-3120 | Elasticsearch Remote Code Execution Vulnerability | 88.6% | No |
| CVE-2014-6324 | Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation | 87.3% | No |
| CVE-2014-4113 | Microsoft Win32k Privilege Escalation Vulnerability | 86.6% | No |
| CVE-2014-0322 | Microsoft Internet Explorer Use-After-Free Vulnerability | 85.1% | No |
| CVE-2014-1776 | Microsoft Internet Explorer Memory Corruption Vulnerability | 82.7% | No |
| CVE-2014-4114 | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Executi | 81.6% | No |
| CVE-2014-1761 | Microsoft Word Memory Corruption Vulnerability | 77.7% | No |
| CVE-2014-6352 | Microsoft Windows Code Injection Vulnerability | 77.5% | No |
1,601–1,620 of 1,760
Sources: CISA KEV catalog · FIRST EPSS
Ransomware groups
qilin (358)
thegentlemen (343)
N0n (164)
incransom (100)
akira (96)
clop (92)
Storm (89)
krybit (85)
lockbit5 (70)
settra (63)
direwolf (63)
everest (62)
safepay (57)
SilentRansomGroup (57)
emperador (56)
Orova (55)
play (53)
Majinahanashi (49)
nightspire (49)
Panzer (45)
AuditTeam (45)
Wallstreet (40)
dragonforce (39)
Booba Project (36)
Dark Project (33)
rhysida (32)
BrainCipher (29)
aurora (28)
L Group (28)
metaencryptor (27)
Source: Ransomware.live
Company security profiles (2,251 analyzed)
Cyber Exposure Scores computed from public signals — email authentication, DNS, TLS, internet exposure and breach history. Newly analyzed domains appear here automatically.
Country risk profiles
The United States (1051)
Germany (152)
The United Kingdom (115)
Italy (101)
Brazil (92)
Canada (83)
India (70)
France (60)
Mexico (53)
Spain (51)
Australia (46)
Argentina (44)
Japan (39)
South Korea (38)
Turkey (36)
Switzerland (36)
TW (35)
Sweden (31)
Singapore (26)
TH (25)
MY (24)
The Netherlands (24)
The United Arab Emirates (23)
South Africa (22)
CL (20)
CO (19)
HK (18)
ID (18)
China (17)
PE (16)
Industry risk profiles
Manufacturing (404)
Technology (364)
Professional Services (318)
Healthcare (248)
Retail (210)
Finance (141)
Education (102)
Transportation (92)
Agriculture and Food Production (86)
Energy (74)
Government (72)
Hospitality (62)
Telecommunications (33)
Entertainment (17)
Real Estate (15)
Information (8)
Defense (2)
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.