1,734 totalEPSS avg 50.4%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 29 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2021-21975VMware / vRealize Operations Manager APIVMware Server Side Request Forgery in vRealize Operations Manager API2022-01-18
78.0%
CVE-2021-22991F5 / BIG-IP Traffic Management MicrokernelF5 BIG-IP Traffic Management Microkernel Buffer Overflow2022-01-18
61.1%
CVE-2021-25296Nagios / Nagios XINagios XI OS Command Injection2022-01-18
71.9%
CVE-2021-25297Nagios / Nagios XINagios XI OS Command Injection2022-01-18
56.7%
CVE-2021-25298Nagios / Nagios XINagios XI OS Command Injection2022-01-18
73.6%
CVE-2021-32648October CMS / October CMSOctober CMS Improper Authentication2022-01-18
90.4%
CVE-2021-33766Microsoft / Exchange ServerMicrosoft Exchange Server Information Disclosure2022-01-18
98.2%
CVE-2021-40870Aviatrix / Aviatrix ControllerAviatrix Controller Unrestricted Upload of File2022-01-18
93.0%
CVE-2013-3900microsoft / windows_10_1507CVE-2013-39002022-01-10
44.6%
CVE-2015-7450IBM / WebSphere Application Server and Server Hypervisor EditionIBM WebSphere Application Server and Server Hypervisor Edition Code Injection.2022-01-10
97.8%
CVE-2017-1000486Primetek / Primefaces ApplicationPrimetek Primefaces Remote Code Execution Vulnerability2022-01-10
94.1%
CVE-2018-13382Fortinet / FortiOS and FortiProxyFortinet FortiOS and FortiProxy Improper Authorization2022-01-10
81.7%
CVE-2018-13383Fortinet / FortiOS and FortiProxyFortinet FortiOS and FortiProxy Out-of-bounds Write2022-01-10
33.6%
CVE-2019-10149Exim / Mail Transfer Agent (MTA)Exim Mail Transfer Agent (MTA) Improper Input Validation2022-01-10
100.0%
CVE-2019-1458Microsoft / Win32kMicrosoft Win32k Privilege Escalation Vulnerability2022-01-10
74.4%
CVE-2019-1579Palo Alto Networks / PAN-OSPalo Alto Networks PAN-OS Remote Code Execution Vulnerability2022-01-10
46.2%
CVE-2019-2725Oracle / WebLogic ServerOracle WebLogic Server, Injection2022-01-10
100.0%
CVE-2019-7609Elastic / KibanaKibana Arbitrary Code Execution2022-01-10
95.3%
CVE-2019-9670Synacor / Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External…2022-01-10
100.0%
CVE-2020-6572Google / Chrome MediaGoogle Chrome Media Use-After-Free Vulnerability2022-01-10
10.6%
CVE-2021-22017VMware / vCenter ServerVMware vCenter Server Improper Access Control2022-01-10
49.2%
CVE-2021-27860FatPipe / WARP, IPVPN, and MPVPN softwareFatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit2022-01-10
39.8%
CVE-2021-36260Hikvision / Security cameras web serverHikvision Improper Input Validation2022-01-10
99.9%
CVE-2021-4102Google / Chromium V8Google Chromium V8 Use-After-Free Vulnerability2021-12-15
7.8%
CVE-2021-43890Microsoft / WindowsMicrosoft Windows AppX Installer Spoofing Vulnerability2021-12-15
11.3%
CVE-2010-1871Red Hat / JBoss Seam 2Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability2021-12-10
83.4%
CVE-2017-12149redhat / jboss_enterprise_application_platformCVE-2017-121492021-12-10
90.7%
CVE-2017-17562Embedthis / GoAheadEmbedthis GoAhead Remote Code Execution Vulnerability2021-12-10
96.3%
CVE-2019-0193Apache / SolrApache Solr DataImportHandler Code Injection Vulnerability2021-12-10
83.5%
CVE-2019-10758MongoDB / mongo-expressMongoDB mongo-express Remote Code Execution Vulnerability2021-12-10
84.7%
CVE-2019-13272Linux / KernelLinux Kernel Improper Privilege Management Vulnerability2021-12-10
52.2%
CVE-2019-7238Sonatype / Nexus Repository ManagerSonatype Nexus Repository Manager Incorrect Access Control Vulnerability2021-12-10
77.1%
CVE-2020-17463Fuel CMS / Fuel CMSFuel CMS SQL Injection Vulnerability2021-12-10
89.7%
CVE-2020-8816Pi-hole / AdminLTEPi-Hole AdminLTE Remote Code Execution Vulnerability2021-12-10
78.2%
CVE-2021-35394Realtek / Jungle Software Development Kit (SDK)Realtek Jungle SDK Remote Code Execution Vulnerability2021-12-10
99.9%
CVE-2021-44168Fortinet / FortiOSFortinet FortiOS Arbitrary File Download2021-12-10
0.9%
CVE-2021-44228Apache / Log4j2Apache Log4j2 Remote Code Execution Vulnerability2021-12-10
100.0%
CVE-2021-44515Zoho / Desktop CentralZoho Desktop Central Authentication Bypass Vulnerability2021-12-10
99.9%
CVE-2018-14847MikroTik / RouterOSMikroTik Router OS Directory Traversal Vulnerability2021-12-01
96.0%
CVE-2020-11261Qualcomm / Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesQualcomm Multiple Chipsets Improper Input Validation Vulnerability2021-12-01
1.6%
CVE-2021-37415Zoho / ManageEngine ServiceDesk Plus (SDP)Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability2021-12-01
99.8%
CVE-2021-40438Apache / ApacheApache HTTP Server-Side Request Forgery (SSRF)2021-12-01
100.0%
CVE-2021-44077Zoho / ManageEngine ServiceDesk Plus (SDP) / SupportCenter PlusZoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability2021-12-01
93.3%
CVE-2021-22204Perl / ExiftoolExifTool Remote Code Execution Vulnerability2021-11-17
100.0%
CVE-2021-40449Microsoft / WindowsMicrosoft Windows Win32k Privilege Escalation Vulnerability2021-11-17
74.1%
CVE-2021-42292Microsoft / OfficeMicrosoft Excel Security Feature Bypass2021-11-17
43.0%
CVE-2021-42321Microsoft / ExchangeMicrosoft Exchange Server Remote Code Execution Vulnerability2021-11-17
91.7%
CVE-2010-5326SAP / NetWeaverSAP NetWeaver Remote Code Execution Vulnerability2021-11-03
17.8%
CVE-2012-0158Microsoft / MSCOMCTL.OCXMicrosoft MSCOMCTL.OCX Remote Code Execution Vulnerability2021-11-03
100.0%
CVE-2012-3152Oracle / Fusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability2021-11-03
98.8%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.
KEV explorer — Known Exploited Vulnerabilities | SQUR Knowledge Base