Cyber Risk Directory
Public-source intelligence across vulnerabilities, ransomware activity, industries and countries. Updated continuously.
Known-exploited vulnerabilities (1,758 tracked)
Newest first: by CVE year, then by how likely exploitation is (EPSS).
| CVE | Name | EPSS | Ransomware |
|---|---|---|---|
| CVE-2011-0609 | Adobe Flash Player Unspecified Vulnerability | 63.5% | No |
| CVE-2011-1889 | Microsoft Forefront TMG Remote Code Execution Vulnerability | 49.0% | No |
| CVE-2011-1823 | Android OS Privilege Escalation Vulnerability | 41.4% | No |
| CVE-2011-2005 | Microsoft Ancillary Function Driver (afd.sys) Improper Input Validatio | 31.8% | No |
| CVE-2011-4723 | D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | 3.1% | No |
| CVE-2010-2861 | Adobe ColdFusion Directory Traversal Vulnerability | 99.7% | Yes |
| CVE-2010-3962 | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerabil | 96.8% | No |
| CVE-2010-0840 | Oracle JRE Unspecified Vulnerability | 96.3% | No |
| CVE-2010-0249 | Microsoft Internet Explorer Use-After-Free Vulnerability | 91.9% | No |
| CVE-2010-2568 | Microsoft Windows Remote Code Execution Vulnerability | 89.6% | No |
| CVE-2010-3333 | Microsoft Office Stack-based Buffer Overflow Vulnerability | 89.4% | No |
| CVE-2010-0188 | Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability | 88.2% | Yes |
| CVE-2010-1871 | Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability | 83.4% | No |
| CVE-2010-3765 | Mozilla Multiple Products Remote Code Execution Vulnerability | 83.2% | No |
| CVE-2010-1297 | Adobe Flash Player Memory Corruption Vulnerability | 82.5% | No |
| CVE-2010-0806 | Microsoft Internet Explorer Use-After-Free Vulnerability | 82.2% | No |
| CVE-2010-2883 | Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability | 81.4% | No |
| CVE-2010-0738 | Red Hat JBoss Authentication Bypass Vulnerability | 73.8% | Yes |
| CVE-2010-4344 | Exim Heap-Based Buffer Overflow Vulnerability | 71.7% | No |
| CVE-2010-2572 | Microsoft PowerPoint Buffer Overflow Vulnerability | 58.6% | No |
1,701–1,720 of 1,758
Sources: CISA KEV catalog · FIRST EPSS
Ransomware groups
qilin (356)
thegentlemen (343)
N0n (163)
incransom (100)
akira (96)
clop (92)
Storm (89)
krybit (85)
lockbit5 (70)
settra (63)
direwolf (62)
safepay (57)
SilentRansomGroup (57)
Orova (55)
emperador (55)
everest (54)
Majinahanashi (49)
nightspire (49)
play (46)
Panzer (45)
AuditTeam (45)
Wallstreet (39)
dragonforce (39)
Dark Project (33)
rhysida (31)
BrainCipher (29)
L Group (28)
aurora (27)
metaencryptor (27)
shinyhunters (26)
Source: Ransomware.live
Company security profiles (2,230 analyzed)
Cyber Exposure Scores computed from public signals — email authentication, DNS, TLS, internet exposure and breach history. Newly analyzed domains appear here automatically.
Country risk profiles
The United States (1038)
Germany (152)
The United Kingdom (114)
Italy (99)
Brazil (92)
Canada (81)
India (70)
France (60)
Mexico (52)
Spain (51)
Australia (46)
Argentina (44)
Japan (39)
South Korea (38)
Turkey (36)
Switzerland (36)
TW (35)
Sweden (31)
Singapore (25)
TH (25)
The Netherlands (24)
MY (23)
South Africa (22)
The United Arab Emirates (22)
CL (20)
CO (19)
HK (18)
ID (18)
China (17)
PE (16)
Industry risk profiles
Manufacturing (404)
Technology (362)
Professional Services (317)
Healthcare (242)
Retail (208)
Finance (138)
Education (100)
Transportation (91)
Agriculture and Food Production (86)
Energy (73)
Government (70)
Hospitality (62)
Telecommunications (33)
Entertainment (17)
Real Estate (15)
Information (8)
Defense (2)
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.