Known Exploited Vulnerabilities
Page 15 of 18. 1731 CVEs confirmed as actively exploited, per the CISA KEV catalog.
Catalog Entries
1731 total| CVE | Vulnerability | CVSS | EPSS | Added | Due |
|---|---|---|---|---|---|
| CVE-2021-21315 | System Information Library for Node.JS Command Injection | 7.1 | 90.7% | 2022-01-18 | 2022-02-01 |
| CVE-2020-14864 | Oracle Business Intelligence Enterprise Edition Path Transversal | 7.5 | 97.2% | 2022-01-18 | 2022-07-18 |
| CVE-2020-13927 | Apache Airflow's Experimental API Authentication Bypass | 9.8 | 99.8% | 2022-01-18 | 2022-07-18 |
| CVE-2020-13671 | Drupal core Un-restricted Upload of File | 8.8 | 35.4% | 2022-01-18 | 2022-07-18 |
| CVE-2020-11978 | Apache Airflow Command Injection | 8.8 | 99.2% | 2022-01-18 | 2022-07-18 |
| CVE-2021-36260 | Hikvision Improper Input Validation | 9.8 | 99.9% | 2022-01-10 | 2022-01-24 |
| CVE-2021-27860 | FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit | 9.8 | 39.8% | 2022-01-10 | 2022-01-24 |
| CVE-2021-22017 | VMware vCenter Server Improper Access Control | 5.3 | 49.2% | 2022-01-10 | 2022-01-24 |
| CVE-2020-6572 | Google Chrome Media Use-After-Free Vulnerability | 8.8 | 10.6% | 2022-01-10 | 2022-07-10 |
| CVE-2019-9670 | Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference | 9.8 | 100.0% | 2022-01-10 | 2022-07-10 |
| CVE-2019-7609 | Kibana Arbitrary Code Execution | 9.8 | 95.3% | 2022-01-10 | 2022-07-10 |
| CVE-2019-2725 | Oracle WebLogic Server, Injection Ransomware | 7.5 | 100.0% | 2022-01-10 | 2022-07-10 |
| CVE-2019-1579 | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability Ransomware | 8.1 | 46.2% | 2022-01-10 | 2022-07-10 |
| CVE-2019-1458 | Microsoft Win32k Privilege Escalation Vulnerability Ransomware | 7.8 | 74.3% | 2022-01-10 | 2022-07-10 |
| CVE-2019-10149 | Exim Mail Transfer Agent (MTA) Improper Input Validation | 9.0 | 100.0% | 2022-01-10 | 2022-07-10 |
| CVE-2018-13383 | Fortinet FortiOS and FortiProxy Out-of-bounds Write Ransomware | 4.3 | 33.6% | 2022-01-10 | 2022-07-10 |
| CVE-2018-13382 | Fortinet FortiOS and FortiProxy Improper Authorization Ransomware | 9.1 | 81.7% | 2022-01-10 | 2022-07-10 |
| CVE-2017-1000486 | Primetek Primefaces Remote Code Execution Vulnerability | 9.8 | 94.1% | 2022-01-10 | 2022-07-10 |
| CVE-2015-7450 | IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. | 9.8 | 97.8% | 2022-01-10 | 2022-07-10 |
| CVE-2013-3900 | Microsoft WinVerifyTrust function Remote Code Execution | 8.8 | 44.6% | 2022-01-10 | 2022-07-10 |
| CVE-2021-43890 | Microsoft Windows AppX Installer Spoofing Vulnerability Ransomware | 7.1 | 10.3% | 2021-12-15 | 2021-12-29 |
| CVE-2021-4102 | Google Chromium V8 Use-After-Free Vulnerability | 8.8 | 7.8% | 2021-12-15 | 2021-12-29 |
| CVE-2021-44515 | Zoho Desktop Central Authentication Bypass Vulnerability | 9.8 | 99.9% | 2021-12-10 | 2021-12-24 |
| CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability Ransomware | 10.0 | 100.0% | 2021-12-10 | 2021-12-24 |
| CVE-2021-44168 | Fortinet FortiOS Arbitrary File Download | 3.3 | 0.9% | 2021-12-10 | 2021-12-24 |
| CVE-2021-35394 | Realtek Jungle SDK Remote Code Execution Vulnerability | 9.8 | 99.9% | 2021-12-10 | 2021-12-24 |
| CVE-2020-8816 | Pi-Hole AdminLTE Remote Code Execution Vulnerability | 9.1 | 78.2% | 2021-12-10 | 2022-06-10 |
| CVE-2020-17463 | Fuel CMS SQL Injection Vulnerability | 9.8 | 89.7% | 2021-12-10 | 2022-06-10 |
| CVE-2019-7238 | Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability | 9.8 | 77.1% | 2021-12-10 | 2022-06-10 |
| CVE-2019-13272 | Linux Kernel Improper Privilege Management Vulnerability | 7.8 | 52.2% | 2021-12-10 | 2022-06-10 |
| CVE-2019-10758 | MongoDB mongo-express Remote Code Execution Vulnerability | 9.9 | 84.7% | 2021-12-10 | 2022-06-10 |
| CVE-2019-0193 | Apache Solr DataImportHandler Code Injection Vulnerability | 7.2 | 83.5% | 2021-12-10 | 2022-06-10 |
| CVE-2017-17562 | Embedthis GoAhead Remote Code Execution Vulnerability | 8.1 | 96.3% | 2021-12-10 | 2022-06-10 |
| CVE-2017-12149 | Red Hat JBoss Application Server Remote Code Execution Vulnerability Ransomware | 9.8 | 90.7% | 2021-12-10 | 2022-06-10 |
| CVE-2010-1871 | Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability | 8.8 | 83.4% | 2021-12-10 | 2022-06-10 |
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability | 9.8 | 93.3% | 2021-12-01 | 2021-12-15 |
| CVE-2021-40438 | Apache HTTP Server-Side Request Forgery (SSRF) Ransomware | 9.0 | 100.0% | 2021-12-01 | 2021-12-15 |
| CVE-2021-37415 | Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability | 9.8 | 99.8% | 2021-12-01 | 2021-12-15 |
| CVE-2020-11261 | Qualcomm Multiple Chipsets Improper Input Validation Vulnerability | 7.8 | 1.6% | 2021-12-01 | 2022-06-01 |
| CVE-2018-14847 | MikroTik Router OS Directory Traversal Vulnerability | 9.1 | 96.1% | 2021-12-01 | 2022-06-01 |
| CVE-2021-42321 | Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | 8.8 | 91.7% | 2021-11-17 | 2021-12-01 |
| CVE-2021-42292 | Microsoft Excel Security Feature Bypass | 7.8 | 43.0% | 2021-11-17 | 2021-12-01 |
| CVE-2021-40449 | Microsoft Windows Win32k Privilege Escalation Vulnerability Ransomware | 7.8 | 74.1% | 2021-11-17 | 2021-12-01 |
| CVE-2021-22204 | ExifTool Remote Code Execution Vulnerability | 6.8 | 100.0% | 2021-11-17 | 2021-12-01 |
| CVE-2021-42258 | BQE BillQuick Web Suite SQL Injection Vulnerability Ransomware | 9.8 | 74.4% | 2021-11-03 | 2021-11-17 |
| CVE-2021-42013 | Apache HTTP Server Path Traversal Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-41773 | Apache HTTP Server Path Traversal Vulnerability Ransomware | 7.5 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-40539 | Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability Ransomware | 9.8 | 99.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-40444 | Microsoft MSHTML Remote Code Execution Vulnerability Ransomware | 8.8 | 97.5% | 2021-11-03 | 2021-11-17 |
| CVE-2021-38649 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 7.0 | 2.9% | 2021-11-03 | 2021-11-17 |
| CVE-2021-38648 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 7.8 | 11.4% | 2021-11-03 | 2021-11-17 |
| CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability Ransomware | 9.8 | 99.9% | 2021-11-03 | 2021-11-17 |
| CVE-2021-38645 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 7.8 | 2.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-38003 | Google Chromium V8 Memory Corruption Vulnerability | 8.8 | 38.6% | 2021-11-03 | 2021-11-17 |
| CVE-2021-38000 | Google Chromium Intents Improper Input Validation Vulnerability | 6.1 | 4.9% | 2021-11-03 | 2021-11-17 |
| CVE-2021-37976 | Google Chromium Information Disclosure Vulnerability | 6.5 | 19.9% | 2021-11-03 | 2021-11-17 |
| CVE-2021-37975 | Google Chromium V8 Use-After-Free Vulnerability | 8.8 | 34.9% | 2021-11-03 | 2021-11-17 |
| CVE-2021-37973 | Google Chromium Portals Use-After-Free Vulnerability | 9.6 | 11.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-36955 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Ransomware | 7.8 | 4.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-36948 | Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | 7.8 | 23.3% | 2021-11-03 | 2021-11-17 |
| CVE-2021-36942 | Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability Ransomware | 7.5 | 66.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-36742 | Trend Micro Multiple Products Improper Input Validation Vulnerability | 7.8 | 1.5% | 2021-11-03 | 2021-11-17 |
| CVE-2021-36741 | Trend Micro Multiple Products Improper Input Validation Vulnerability | 8.8 | 5.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-35464 | ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-35395 | Realtek AP-Router SDK Buffer Overflow Vulnerability | 9.8 | 98.1% | 2021-11-03 | 2021-11-17 |
| CVE-2021-35211 | SolarWinds Serv-U Remote Code Execution Vulnerability Ransomware | 9.0 | 91.2% | 2021-11-03 | 2021-11-17 |
| CVE-2021-34527 | Microsoft Windows Print Spooler Remote Code Execution Vulnerability Ransomware | 8.8 | 99.8% | 2021-11-03 | 2022-05-03 |
| CVE-2021-34523 | Microsoft Exchange Server Privilege Escalation Vulnerability Ransomware | 9.0 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-34473 | Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | 9.1 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-34448 | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | 6.8 | 40.1% | 2021-11-03 | 2021-11-17 |
| CVE-2021-33771 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 10.2% | 2021-11-03 | 2021-11-17 |
| CVE-2021-33742 | Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability | 7.5 | 59.4% | 2021-11-03 | 2021-11-17 |
| CVE-2021-33739 | Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 8.4 | 6.6% | 2021-11-03 | 2021-11-17 |
| CVE-2021-31979 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 4.5% | 2021-11-03 | 2021-11-17 |
| CVE-2021-31956 | Microsoft Windows NTFS Privilege Escalation Vulnerability | 7.8 | 22.3% | 2021-11-03 | 2021-11-17 |
| CVE-2021-31955 | Microsoft Windows Kernel Information Disclosure Vulnerability | 5.5 | 81.1% | 2021-11-03 | 2021-11-17 |
| CVE-2021-31755 | Tenda AC11 Router Stack Buffer Overflow Vulnerability | 9.8 | 86.9% | 2021-11-03 | 2021-11-17 |
| CVE-2021-31207 | Microsoft Exchange Server Security Feature Bypass Vulnerability Ransomware | 6.6 | 99.8% | 2021-11-03 | 2021-11-17 |
| CVE-2021-31201 | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 5.2 | 2.6% | 2021-11-03 | 2021-11-17 |
| CVE-2021-31199 | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 5.2 | 3.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30869 | Apple iOS, iPadOS, and macOS Type Confusion Vulnerability | 7.8 | 4.1% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30860 | Apple Multiple Products Integer Overflow Vulnerability | 7.8 | 76.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30858 | Apple iOS, iPadOS, macOS Use-After-Free Vulnerability | 8.8 | 13.4% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30807 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 28.8% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30762 | Apple iOS WebKit Use-After-Free Vulnerability | 8.8 | 11.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30761 | Apple iOS WebKit Memory Corruption Vulnerability | 8.8 | 10.5% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30713 | Apple macOS Unspecified Vulnerability | 7.8 | 7.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30666 | Apple iOS WebKit Buffer Overflow Vulnerability | 8.8 | 3.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30665 | Apple Multiple Products WebKit Memory Corruption Vulnerability | 8.8 | 3.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30663 | Apple Multiple Products WebKit Integer Overflow Vulnerability | 7.8 | 3.5% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30661 | Apple Multiple Products WebKit Storage Use-After-Free Vulnerability | 8.8 | 4.5% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30657 | Apple macOS Unspecified Vulnerability | 5.5 | 68.5% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30633 | Google Chromium Indexed DB API Use-After-Free Vulnerability | 9.6 | 33.2% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30632 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 8.8 | 63.2% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30563 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 8.9% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30554 | Google Chromium WebGL Use-After-Free Vulnerability | 8.8 | 7.4% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30551 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 64.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30116 | Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability Ransomware | 10.0 | 85.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-28664 | Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability | 8.8 | 5.4% | 2021-11-03 | 2021-11-17 |
| CVE-2021-28663 | Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability | 8.8 | 12.1% | 2021-11-03 | 2021-11-17 |