Known Exploited Vulnerabilities
Page 13 of 18. 1731 CVEs confirmed as actively exploited, per the CISA KEV catalog.
Catalog Entries
1731 total| CVE | Vulnerability | CVSS | EPSS | Added | Due |
|---|---|---|---|---|---|
| CVE-2016-4171 | Adobe Flash Player Remote Code Execution Vulnerability | 7.8 | 20.1% | 2022-03-25 | 2022-04-15 |
| CVE-2016-1555 | NETGEAR Multiple WAP Devices Command Injection Vulnerability | 9.8 | 98.3% | 2022-03-25 | 2022-04-15 |
| CVE-2016-11021 | D-Link DCS-930L Devices OS Command Injection Vulnerability | 7.2 | 68.9% | 2022-03-25 | 2022-04-15 |
| CVE-2016-10174 | NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability | 9.8 | 83.3% | 2022-03-25 | 2022-04-15 |
| CVE-2016-0752 | Ruby on Rails Directory Traversal Vulnerability | 7.5 | 95.5% | 2022-03-25 | 2022-04-15 |
| CVE-2015-4068 | Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability | 9.1 | 63.6% | 2022-03-25 | 2022-04-15 |
| CVE-2015-3035 | TP-Link Multiple Archer Devices Directory Traversal Vulnerability | 7.5 | 83.9% | 2022-03-25 | 2022-04-15 |
| CVE-2015-1427 | Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability | 9.8 | 99.9% | 2022-03-25 | 2022-04-15 |
| CVE-2015-1187 | D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability | 9.8 | 82.9% | 2022-03-25 | 2022-04-15 |
| CVE-2015-0666 | Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability | 7.5 | 40.4% | 2022-03-25 | 2022-04-15 |
| CVE-2014-6332 | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability | 8.8 | 95.0% | 2022-03-25 | 2022-04-15 |
| CVE-2014-6324 | Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability | 8.8 | 87.3% | 2022-03-25 | 2022-04-15 |
| CVE-2014-6287 | Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability | 9.8 | 99.3% | 2022-03-25 | 2022-04-15 |
| CVE-2014-3120 | Elasticsearch Remote Code Execution Vulnerability | 8.1 | 88.6% | 2022-03-25 | 2022-04-15 |
| CVE-2014-0130 | Ruby on Rails Directory Traversal Vulnerability | 7.5 | 53.7% | 2022-03-25 | 2022-04-15 |
| CVE-2013-5223 | D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | 5.4 | 50.8% | 2022-03-25 | 2022-04-15 |
| CVE-2013-4810 | HP Multiple Products Remote Code Execution Vulnerability | 9.8 | 79.5% | 2022-03-25 | 2022-04-15 |
| CVE-2013-2251 | Apache Struts Improper Input Validation Vulnerability | 9.8 | 100.0% | 2022-03-25 | 2022-04-15 |
| CVE-2012-1823 | PHP-CGI Query String Parameter Vulnerability | 9.8 | 100.0% | 2022-03-25 | 2022-04-15 |
| CVE-2010-4345 | Exim Privilege Escalation Vulnerability | 7.8 | 18.0% | 2022-03-25 | 2022-04-15 |
| CVE-2010-4344 | Exim Heap-Based Buffer Overflow Vulnerability | 9.8 | 71.7% | 2022-03-25 | 2022-04-15 |
| CVE-2010-3035 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | 7.5 | 5.7% | 2022-03-25 | 2022-04-15 |
| CVE-2010-2861 | Adobe ColdFusion Directory Traversal Vulnerability Ransomware | 7.5 | 99.7% | 2022-03-25 | 2022-04-15 |
| CVE-2009-2055 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | 5.9 | 3.3% | 2022-03-25 | 2022-04-15 |
| CVE-2009-1151 | phpMyAdmin Remote Code Execution Vulnerability | 9.8 | 96.6% | 2022-03-25 | 2022-04-15 |
| CVE-2009-0927 | Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability | 8.8 | 96.6% | 2022-03-25 | 2022-04-15 |
| CVE-2005-2773 | HP OpenView Network Node Manager Remote Code Execution Vulnerability | 9.8 | 74.6% | 2022-03-25 | 2022-04-15 |
| CVE-2020-5135 | SonicWall SonicOS Buffer Overflow Vulnerability Ransomware | 9.8 | 26.9% | 2022-03-15 | 2022-04-05 |
| CVE-2019-1405 | Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability Ransomware | 7.8 | 29.9% | 2022-03-15 | 2022-04-05 |
| CVE-2019-1322 | Microsoft Windows Privilege Escalation Vulnerability Ransomware | 7.8 | 19.2% | 2022-03-15 | 2022-04-05 |
| CVE-2019-1315 | Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability Ransomware | 7.8 | 3.5% | 2022-03-15 | 2022-04-05 |
| CVE-2019-1253 | Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability Ransomware | 7.8 | 11.6% | 2022-03-15 | 2022-04-05 |
| CVE-2019-1132 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 9.8% | 2022-03-15 | 2022-04-05 |
| CVE-2019-1129 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability Ransomware | 7.8 | 1.8% | 2022-03-15 | 2022-04-05 |
| CVE-2019-1069 | Microsoft Task Scheduler Privilege Escalation Vulnerability Ransomware | 7.8 | 6.1% | 2022-03-15 | 2022-04-05 |
| CVE-2019-1064 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability Ransomware | 7.8 | 6.9% | 2022-03-15 | 2022-04-05 |
| CVE-2019-0841 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability Ransomware | 7.8 | 41.4% | 2022-03-15 | 2022-04-05 |
| CVE-2019-0543 | Microsoft Windows Privilege Escalation Vulnerability Ransomware | 7.8 | 4.7% | 2022-03-15 | 2022-04-05 |
| CVE-2018-8120 | Microsoft Win32k Privilege Escalation Vulnerability Ransomware | 7.0 | 73.4% | 2022-03-15 | 2022-04-05 |
| CVE-2017-0101 | Microsoft Windows Transaction Manager Privilege Escalation Vulnerability Ransomware | 7.8 | 57.5% | 2022-03-15 | 2022-04-05 |
| CVE-2016-3309 | Microsoft Windows Kernel Privilege Escalation Vulnerability Ransomware | 7.8 | 20.5% | 2022-03-15 | 2022-04-05 |
| CVE-2015-2546 | Microsoft Win32k Memory Corruption Vulnerability Ransomware | 8.2 | 10.1% | 2022-03-15 | 2022-04-05 |
| CVE-2022-26486 | Mozilla Firefox Use-After-Free Vulnerability | 9.6 | 2.3% | 2022-03-07 | 2022-03-21 |
| CVE-2022-26485 | Mozilla Firefox Use-After-Free Vulnerability | 8.8 | 14.3% | 2022-03-07 | 2022-03-21 |
| CVE-2021-21973 | VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability | 5.3 | 87.6% | 2022-03-07 | 2022-03-21 |
| CVE-2020-8218 | Pulse Connect Secure Code Injection Vulnerability | 7.2 | 32.3% | 2022-03-07 | 2022-09-07 |
| CVE-2019-11581 | Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability | 9.8 | 84.6% | 2022-03-07 | 2022-09-07 |
| CVE-2017-6077 | NETGEAR DGN2200 Remote Code Execution Vulnerability | 9.8 | 68.7% | 2022-03-07 | 2022-09-07 |
| CVE-2016-6277 | NETGEAR Multiple Routers Remote Code Execution Vulnerability | 8.8 | 99.8% | 2022-03-07 | 2022-09-07 |
| CVE-2013-0631 | Adobe ColdFusion Information Disclosure Vulnerability | 7.5 | 66.4% | 2022-03-07 | 2022-09-07 |
| CVE-2013-0629 | Adobe ColdFusion Directory Traversal Vulnerability | 7.5 | 65.8% | 2022-03-07 | 2022-09-07 |
| CVE-2013-0625 | Adobe ColdFusion Authentication Bypass Vulnerability | 9.8 | 93.8% | 2022-03-07 | 2022-09-07 |
| CVE-2009-3960 | Adobe BlazeDS Information Disclosure Vulnerability Ransomware | 6.5 | 90.1% | 2022-03-07 | 2022-09-07 |
| CVE-2022-20708 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 10.0 | 14.9% | 2022-03-03 | 2022-03-17 |
| CVE-2022-20703 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 10.0 | 9.2% | 2022-03-03 | 2022-03-17 |
| CVE-2022-20701 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 10.0 | 9.7% | 2022-03-03 | 2022-03-17 |
| CVE-2022-20700 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 10.0 | 5.7% | 2022-03-03 | 2022-03-17 |
| CVE-2022-20699 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 10.0 | 72.5% | 2022-03-03 | 2022-03-17 |
| CVE-2021-41379 | Microsoft Windows Installer Privilege Escalation Vulnerability Ransomware | 5.5 | 19.5% | 2022-03-03 | 2022-03-17 |
| CVE-2020-1938 | Apache Tomcat Improper Privilege Management Vulnerability | 9.8 | 99.3% | 2022-03-03 | 2022-03-17 |
| CVE-2020-11899 | Treck TCP/IP stack Out-of-Bounds Read Vulnerability | 5.4 | 18.6% | 2022-03-03 | 2022-03-17 |
| CVE-2019-16928 | Exim Out-of-bounds Write Vulnerability | 9.8 | 41.6% | 2022-03-03 | 2022-03-17 |
| CVE-2019-1652 | Cisco Small Business Routers Improper Input Validation Vulnerability | 7.2 | 95.9% | 2022-03-03 | 2022-03-17 |
| CVE-2019-1297 | Microsoft Excel Remote Code Execution Vulnerability | 8.8 | 21.8% | 2022-03-03 | 2022-03-17 |
| CVE-2018-8581 | Microsoft Exchange Server Privilege Escalation Vulnerability Ransomware | 7.4 | 27.4% | 2022-03-03 | 2022-03-17 |
| CVE-2018-8298 | ChakraCore Scripting Engine Type Confusion Vulnerability | 7.5 | 74.5% | 2022-03-03 | 2022-03-17 |
| CVE-2018-0180 | Cisco IOS Software Denial-of-Service Vulnerability | 6.8 | 4.9% | 2022-03-03 | 2022-03-17 |
| CVE-2018-0179 | Cisco IOS Software Denial-of-Service Vulnerability | 6.8 | 4.9% | 2022-03-03 | 2022-03-17 |
| CVE-2018-0175 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | 8.0 | 3.5% | 2022-03-03 | 2022-03-17 |
| CVE-2018-0174 | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability | 8.6 | 7.6% | 2022-03-03 | 2022-03-17 |
| CVE-2018-0173 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | 8.6 | 7.6% | 2022-03-03 | 2022-03-17 |
| CVE-2018-0172 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | 8.6 | 7.8% | 2022-03-03 | 2022-03-17 |
| CVE-2018-0167 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | 8.8 | 3.4% | 2022-03-03 | 2022-03-17 |
| CVE-2018-0161 | Cisco IOS Software Resource Management Errors Vulnerability | 6.3 | 4.1% | 2022-03-03 | 2022-03-17 |
| CVE-2018-0159 | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability | 7.5 | 6.9% | 2022-03-03 | 2022-03-17 |
| CVE-2018-0158 | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability | 8.6 | 7.2% | 2022-03-03 | 2022-03-17 |
| CVE-2018-0156 | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability | 7.5 | 9.4% | 2022-03-03 | 2022-03-17 |
| CVE-2018-0155 | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability | 8.6 | 7.7% | 2022-03-03 | 2022-03-17 |
| CVE-2018-0154 | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability | 7.5 | 7.1% | 2022-03-03 | 2022-03-17 |
| CVE-2018-0151 | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability | 9.8 | 14.2% | 2022-03-03 | 2022-03-17 |
| CVE-2017-8540 | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability | 7.8 | 71.9% | 2022-03-03 | 2022-03-24 |
| CVE-2017-6744 | Cisco IOS Software SNMP Remote Code Execution Vulnerability | 8.8 | 7.3% | 2022-03-03 | 2022-03-24 |
| CVE-2017-6743 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 8.8 | 10.9% | 2022-03-03 | 2022-03-24 |
| CVE-2017-6740 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 8.8 | 11.1% | 2022-03-03 | 2022-03-24 |
| CVE-2017-6739 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 8.8 | 10.9% | 2022-03-03 | 2022-03-24 |
| CVE-2017-6738 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 8.8 | 10.9% | 2022-03-03 | 2022-03-24 |
| CVE-2017-6737 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 8.8 | 45.2% | 2022-03-03 | 2022-03-24 |
| CVE-2017-6736 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 8.8 | 70.4% | 2022-03-03 | 2022-03-24 |
| CVE-2017-6663 | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability | 6.5 | 2.1% | 2022-03-03 | 2022-03-24 |
| CVE-2017-6627 | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability | 7.5 | 6.2% | 2022-03-03 | 2022-03-24 |
| CVE-2017-12319 | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability | 5.9 | 5.2% | 2022-03-03 | 2022-03-24 |
| CVE-2017-12240 | Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability | 9.8 | 13.8% | 2022-03-03 | 2022-03-24 |
| CVE-2017-12238 | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability | 6.5 | 2.0% | 2022-03-03 | 2022-03-24 |
| CVE-2017-12237 | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability | 7.5 | 7.1% | 2022-03-03 | 2022-03-24 |
| CVE-2017-12235 | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability | 7.5 | 7.1% | 2022-03-03 | 2022-03-24 |
| CVE-2017-12234 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | 7.5 | 7.1% | 2022-03-03 | 2022-03-24 |
| CVE-2017-12233 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | 7.5 | 7.1% | 2022-03-03 | 2022-03-24 |
| CVE-2017-12232 | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability | 6.5 | 2.2% | 2022-03-03 | 2022-03-24 |
| CVE-2017-12231 | Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability | 7.5 | 7.1% | 2022-03-03 | 2022-03-24 |
| CVE-2017-11826 | Microsoft Office Remote Code Execution Vulnerability | 7.8 | 81.2% | 2022-03-03 | 2022-03-24 |