Known Exploited Vulnerabilities
Page 17 of 18. 1731 CVEs confirmed as actively exploited, per the CISA KEV catalog.
Catalog Entries
1731 total| CVE | Vulnerability | CVSS | EPSS | Added | Due |
|---|---|---|---|---|---|
| CVE-2020-17496 | vBulletin PHP Module Remote Code Execution Vulnerability | 9.8 | 87.4% | 2021-11-03 | 2022-05-03 |
| CVE-2020-17144 | Microsoft Exchange Server Remote Code Execution Vulnerability | 8.4 | 36.5% | 2021-11-03 | 2022-05-03 |
| CVE-2020-17087 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 5.4% | 2021-11-03 | 2022-05-03 |
| CVE-2020-16846 | SaltStack Salt Shell Injection Vulnerability | 9.8 | 99.6% | 2021-11-03 | 2022-05-03 |
| CVE-2020-16017 | Google Chrome Use-After-Free Vulnerability | 9.6 | 2.7% | 2021-11-03 | 2022-05-03 |
| CVE-2020-16013 | Google Chromium V8 Incorrect Implementation Vulnerabililty | 8.8 | 2.8% | 2021-11-03 | 2022-05-03 |
| CVE-2020-16010 | Google Chrome for Android UI Heap Buffer Overflow Vulnerability | 9.6 | 6.4% | 2021-11-03 | 2022-05-03 |
| CVE-2020-16009 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 48.3% | 2021-11-03 | 2022-05-03 |
| CVE-2020-15999 | Google Chrome FreeType Heap Buffer Overflow Vulnerability | 9.6 | 44.3% | 2021-11-03 | 2021-11-17 |
| CVE-2020-15505 | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | 9.8 | 99.7% | 2021-11-03 | 2022-05-03 |
| CVE-2020-14883 | Oracle WebLogic Server Unspecified Vulnerability | 7.2 | 97.9% | 2021-11-03 | 2022-05-03 |
| CVE-2020-14882 | Oracle WebLogic Server Remote Code Execution Vulnerability | 9.8 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-14871 | Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | 10.0 | 80.2% | 2021-11-03 | 2022-05-03 |
| CVE-2020-14750 | Oracle WebLogic Server Remote Code Execution Vulnerability | 9.8 | 99.3% | 2021-11-03 | 2022-05-03 |
| CVE-2020-1472 | Microsoft Netlogon Privilege Escalation Vulnerability Ransomware | 5.5 | 99.4% | 2021-11-03 | 2022-05-03 |
| CVE-2020-1464 | Microsoft Windows Spoofing Vulnerability | 7.8 | 38.9% | 2021-11-03 | 2022-05-03 |
| CVE-2020-1380 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.8 | 24.2% | 2021-11-03 | 2022-05-03 |
| CVE-2020-1350 | Microsoft Windows DNS Server Remote Code Execution Vulnerability | 10.0 | 96.7% | 2021-11-03 | 2022-05-03 |
| CVE-2020-12812 | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability Ransomware | 7.5 | 49.3% | 2021-11-03 | 2022-05-03 |
| CVE-2020-12271 | Sophos SFOS SQL Injection Vulnerability Ransomware | 10.0 | 42.4% | 2021-11-03 | 2022-05-03 |
| CVE-2020-11738 | WordPress Snap Creek Duplicator Plugin File Download Vulnerability | 7.5 | 97.8% | 2021-11-03 | 2022-05-03 |
| CVE-2020-11652 | SaltStack Salt Path Traversal Vulnerability | 6.5 | 86.2% | 2021-11-03 | 2022-05-03 |
| CVE-2020-11651 | SaltStack Salt Authentication Bypass Vulnerability | 9.8 | 96.6% | 2021-11-03 | 2022-05-03 |
| CVE-2020-1147 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | 7.8 | 94.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability | 9.8 | 79.8% | 2021-11-03 | 2022-05-03 |
| CVE-2020-1054 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 54.2% | 2021-11-03 | 2022-05-03 |
| CVE-2020-1040 | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | 9.0 | 7.4% | 2021-11-03 | 2022-05-03 |
| CVE-2020-10221 | rConfig OS Command Injection Vulnerability | 8.8 | 77.1% | 2021-11-03 | 2022-05-03 |
| CVE-2020-1020 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 8.8 | 65.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-10199 | Sonatype Nexus Repository Remote Code Execution Vulnerability | 8.8 | 99.1% | 2021-11-03 | 2022-05-03 |
| CVE-2020-10189 | Zoho ManageEngine Desktop Central File Upload Vulnerability | 9.8 | 99.9% | 2021-11-03 | 2022-05-03 |
| CVE-2020-10181 | Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability | 9.8 | 14.7% | 2021-11-03 | 2022-05-03 |
| CVE-2020-10148 | SolarWinds Orion Authentication Bypass Vulnerability | 9.8 | 92.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-0986 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 16.3% | 2021-11-03 | 2022-05-03 |
| CVE-2020-0968 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Ransomware | 7.5 | 30.7% | 2021-11-03 | 2022-05-03 |
| CVE-2020-0938 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 7.8 | 69.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-0878 | Microsoft Edge and Internet Explorer Memory Corruption Vulnerability Ransomware | 4.2 | 2.7% | 2021-11-03 | 2022-05-03 |
| CVE-2020-0688 | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability Ransomware | 8.8 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-0683 | Microsoft Windows Installer Privilege Escalation Vulnerability | 7.8 | 7.6% | 2021-11-03 | 2022-05-03 |
| CVE-2020-0674 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.5 | 86.9% | 2021-11-03 | 2022-05-03 |
| CVE-2020-0646 | Microsoft .NET Framework Remote Code Execution Vulnerability | 9.8 | 99.2% | 2021-11-03 | 2022-05-03 |
| CVE-2020-0601 | Microsoft Windows CryptoAPI Spoofing Vulnerability | 8.1 | 89.4% | 2021-11-03 | 2022-05-03 |
| CVE-2020-0069 | Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability | 7.8 | 1.4% | 2021-11-03 | 2022-05-03 |
| CVE-2020-0041 | Android Kernel Out-of-Bounds Write Vulnerability | 7.8 | 3.1% | 2021-11-03 | 2022-05-03 |
| CVE-2019-9978 | WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability | 6.1 | 72.9% | 2021-11-03 | 2022-05-03 |
| CVE-2019-9082 | ThinkPHP Remote Code Execution Vulnerability | 8.8 | 97.4% | 2021-11-03 | 2022-05-03 |
| CVE-2019-8394 | Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability | 7.5 | 63.3% | 2021-11-03 | 2022-05-03 |
| CVE-2019-7481 | SonicWall SMA100 SQL Injection Vulnerability Ransomware | 7.5 | 99.9% | 2021-11-03 | 2022-05-03 |
| CVE-2019-6223 | Apple iOS and macOS Group Facetime Vulnerability | 7.5 | 2.6% | 2021-11-03 | 2022-05-03 |
| CVE-2019-5591 | Fortinet FortiOS Default Configuration Vulnerability Ransomware | 6.5 | 18.4% | 2021-11-03 | 2022-05-03 |
| CVE-2019-5544 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Ransomware | 9.8 | 97.3% | 2021-11-03 | 2022-05-03 |
| CVE-2019-4716 | IBM Planning Analytics Remote Code Execution Vulnerability | 10.0 | 86.4% | 2021-11-03 | 2022-05-03 |
| CVE-2019-3398 | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | 8.8 | 96.8% | 2021-11-03 | 2022-05-03 |
| CVE-2019-3396 | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Ransomware | 9.8 | 99.9% | 2021-11-03 | 2022-05-03 |
| CVE-2019-2215 | Android Kernel Use-After-Free Vulnerability | 7.8 | 72.1% | 2021-11-03 | 2022-05-03 |
| CVE-2019-20085 | TVT NVMS-1000 Directory Traversal Vulnerability | 7.5 | 96.1% | 2021-11-03 | 2022-05-03 |
| CVE-2019-19781 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2019-19356 | Netis WF2419 Devices Remote Code Execution Vulnerability | 7.5 | 28.2% | 2021-11-03 | 2022-05-03 |
| CVE-2019-18988 | TeamViewer Desktop Bypass Remote Login Vulnerability | 7.0 | 4.7% | 2021-11-03 | 2022-05-03 |
| CVE-2019-18935 | Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Ransomware | 9.8 | 99.7% | 2021-11-03 | 2022-05-03 |
| CVE-2019-18187 | Trend Micro OfficeScan Directory Traversal Vulnerability | 8.8 | 25.1% | 2021-11-03 | 2022-05-03 |
| CVE-2019-17558 | Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability | 7.5 | 98.6% | 2021-11-03 | 2022-05-03 |
| CVE-2019-17026 | Mozilla Firefox And Thunderbird Type Confusion Vulnerability | 8.8 | 46.3% | 2021-11-03 | 2022-05-03 |
| CVE-2019-16759 | vBulletin PHP Module Remote Code Execution Vulnerability | 9.8 | 99.7% | 2021-11-03 | 2022-05-03 |
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | 7.5 | 99.9% | 2021-11-03 | 2022-05-03 |
| CVE-2019-16256 | SIMalliance Toolbox Browser Command Injection Vulnerability | 9.8 | 4.9% | 2021-11-03 | 2022-05-03 |
| CVE-2019-15949 | Nagios XI Remote Code Execution Vulnerability | 8.8 | 77.0% | 2021-11-03 | 2022-05-03 |
| CVE-2019-15752 | Docker Desktop Community Edition Privilege Escalation Vulnerability | 7.8 | 48.6% | 2021-11-03 | 2022-05-03 |
| CVE-2019-1429 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.5 | 77.3% | 2021-11-03 | 2022-05-03 |
| CVE-2019-1367 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Ransomware | 7.5 | 52.4% | 2021-11-03 | 2022-05-03 |
| CVE-2019-13608 | Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability Ransomware | 7.5 | 30.0% | 2021-11-03 | 2022-05-03 |
| CVE-2019-1215 | Microsoft Windows Privilege Escalation Vulnerability Ransomware | 7.8 | 19.3% | 2021-11-03 | 2022-05-03 |
| CVE-2019-1214 | Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | 7.8 | 1.4% | 2021-11-03 | 2022-05-03 |
| CVE-2019-11634 | Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability Ransomware | 9.8 | 8.0% | 2021-11-03 | 2022-05-03 |
| CVE-2019-11580 | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability Ransomware | 9.8 | 95.4% | 2021-11-03 | 2022-05-03 |
| CVE-2019-11539 | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability Ransomware | 8.0 | 98.5% | 2021-11-03 | 2022-05-03 |
| CVE-2019-11510 | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability Ransomware | 9.9 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2019-0863 | Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability | 7.8 | 5.2% | 2021-11-03 | 2022-05-03 |
| CVE-2019-0859 | Microsoft Win32k Privilege Escalation Vulnerability Ransomware | 7.8 | 4.2% | 2021-11-03 | 2022-05-03 |
| CVE-2019-0808 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 53.0% | 2021-11-03 | 2022-05-03 |
| CVE-2019-0803 | Microsoft Win32k Privilege Escalation Vulnerability Ransomware | 7.8 | 45.0% | 2021-11-03 | 2022-05-03 |
| CVE-2019-0797 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 1.9% | 2021-11-03 | 2022-05-03 |
| CVE-2019-0708 | Microsoft Remote Desktop Services Remote Code Execution Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2019-0604 | Microsoft SharePoint Remote Code Execution Vulnerability Ransomware | 9.8 | 99.9% | 2021-11-03 | 2022-05-03 |
| CVE-2019-0541 | Microsoft MSHTML Remote Code Execution Vulnerability | 8.8 | 53.2% | 2021-11-03 | 2022-05-03 |
| CVE-2019-0211 | Apache HTTP Server Privilege Escalation Vulnerability | 7.8 | 65.0% | 2021-11-03 | 2022-05-03 |
| CVE-2018-8653 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.5 | 29.6% | 2021-11-03 | 2022-05-03 |
| CVE-2018-7600 | Drupal Core Remote Code Execution Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2018-6789 | Exim Buffer Overflow Vulnerability Ransomware | 9.8 | 82.1% | 2021-11-03 | 2022-05-03 |
| CVE-2018-4939 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 9.8 | 61.7% | 2021-11-03 | 2022-05-03 |
| CVE-2018-4878 | Adobe Flash Player Use-After-Free Vulnerability Ransomware | 7.8 | 89.5% | 2021-11-03 | 2022-05-03 |
| CVE-2018-2380 | SAP Customer Relationship Management (CRM) Path Traversal Vulnerability Ransomware | 6.6 | 28.9% | 2021-11-03 | 2022-05-03 |
| CVE-2018-20062 | ThinkPHP "noneCms" Remote Code Execution Vulnerability | 9.8 | 99.5% | 2021-11-03 | 2022-05-03 |
| CVE-2018-18325 | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 7.5 | 73.9% | 2021-11-03 | 2022-05-03 |
| CVE-2018-15961 | Adobe ColdFusion Unrestricted File Upload Vulnerability | 9.8 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2018-15811 | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 7.5 | 76.1% | 2021-11-03 | 2022-05-03 |
| CVE-2018-14558 | Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability | 9.8 | 8.7% | 2021-11-03 | 2022-05-03 |
| CVE-2018-13379 | Fortinet FortiOS SSL VPN Path Traversal Vulnerability Ransomware | 9.1 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2018-11776 | Apache Struts Remote Code Execution Vulnerability | 8.1 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2018-0802 | Microsoft Office Memory Corruption Vulnerability Ransomware | 7.8 | 93.3% | 2021-11-03 | 2022-05-03 |