CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2014-1776 KEV |
[KEV] Use-After-Free in Microsoft Internet Explorer (CVE-2014-1776)
Vulnerability in Microsoft Internet Explorer (CVE-2014-1776). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-5689 KEV |
[KEV] Vulnerability in Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability (CVE-2017-5689)
Vulnerability in Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability (CVE-2017-5689). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-0787 KEV |
[KEV] Privilege Escalation in Microsoft Windows (CVE-2020-0787)
Vulnerability in Microsoft Windows (CVE-2020-0787). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-5722 KEV |
[KEV] SQL Injection in Grandstream UCM6200 (CVE-2020-5722)
SQL injection in Grandstream UCM6200 (CVE-2020-5722). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-20038 KEV |
[KEV] Vulnerability in SonicWall SMA 100 Appliances (CVE-2021-20038)
Vulnerability in SonicWall SMA 100 Appliances (CVE-2021-20038). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-22587 KEV |
[KEV] Vulnerability in Apple iOS and macOS (CVE-2022-22587)
Vulnerability in Apple iOS and macOS (CVE-2022-22587). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-35247 KEV |
[KEV] Vulnerability in SolarWinds Serv-U (CVE-2021-35247)
Vulnerability in SolarWinds Serv-U (CVE-2021-35247). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-8453 KEV |
[KEV] Vulnerability in Microsoft Win32k (CVE-2018-8453)
Vulnerability in Microsoft Win32k (CVE-2018-8453). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-0391 KEV |
[KEV] Vulnerability in Apache Struts 2 (CVE-2012-0391)
Vulnerability in Apache Struts 2 (CVE-2012-0391). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2006-1547 KEV |
[KEV] Vulnerability in Apache Struts 1 (CVE-2006-1547)
Vulnerability in Apache Struts 1 (CVE-2006-1547). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-13927 KEV |
[KEV] Vulnerability in Apache Airflows Experimental Api (CVE-2020-13927)
Vulnerability in Apache Airflows Experimental Api (CVE-2020-13927). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-11978 KEV |
[KEV] OS Command Injection in Apache Airflow (CVE-2020-11978)
OS command injection in Apache Airflow (CVE-2020-11978). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-13671 KEV |
[KEV] Unrestricted File Upload in Drupal Core (CVE-2020-13671)
Vulnerability in Drupal Core (CVE-2020-13671). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-14864 KEV |
[KEV] Path Traversal in Oracle Intelligence Enterprise Edition (CVE-2020-14864)
Path traversal in Oracle Intelligence Enterprise Edition (CVE-2020-14864). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-22991 KEV |
[KEV] Buffer Overflow in F5 BIG-IP Traffic Management Microkernel (CVE-2021-22991)
Vulnerability in F5 BIG-IP Traffic Management Microkernel (CVE-2021-22991). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-21315 KEV |
[KEV] OS Command Injection in Npm package systeminformation (CVE-2021-21315)
OS command injection in Npm package systeminformation (CVE-2021-21315). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to 5.3.1 or later.
|
|
| CVE-2021-21975 KEV |
[KEV] SSRF (Server-Side Request Forgery) in VMware vRealize Operations Manager API (CVE-2021-21975)
SSRF in VMware vRealize Operations Manager API (CVE-2021-21975). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-33766 KEV |
[KEV] Authentication Bypass in Microsoft Exchange Server (CVE-2021-33766)
Authentication bypass in Microsoft Exchange Server (CVE-2021-33766). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-40870 KEV |
[KEV] Vulnerability in Aviatrix Controller (CVE-2021-40870)
Vulnerability in Aviatrix Controller (CVE-2021-40870). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-25298 KEV |
[KEV] OS Command Injection in Nagios XI (CVE-2021-25298)
OS command injection in Nagios XI (CVE-2021-25298). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-25297 KEV |
[KEV] OS Command Injection in Nagios XI (CVE-2021-25297)
OS command injection in Nagios XI (CVE-2021-25297). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-25296 KEV |
[KEV] OS Command Injection in Nagios XI (CVE-2021-25296)
OS command injection in Nagios XI (CVE-2021-25296). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-32648 KEV |
[KEV] Authentication Bypass in October cms october/system (CVE-2021-32648)
Authentication bypass in October cms october/system (CVE-2021-32648). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited. Mitigation: upgrade to 1.1.5 or later.
|
|
| CVE-2021-27860 KEV |
[KEV] Unrestricted File Upload in FatPipe WARP, IPVPN, and MPVPN software (CVE-2021-27860)
Vulnerability in FatPipe WARP, IPVPN, and MPVPN software (CVE-2021-27860). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-7609 KEV |
[KEV] Code Injection in Elastic Kibana (CVE-2019-7609)
Code injection in Elastic Kibana (CVE-2019-7609). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-1000486 KEV |
[KEV] Vulnerability in Primetek Primefaces Application (CVE-2017-1000486)
Vulnerability in Primetek Primefaces Application (CVE-2017-1000486). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-7450 KEV |
[KEV] Code Injection in IBM WebSphere Application Server and Server Hypervisor Edition (CVE-2015-7450)
Code injection in IBM WebSphere Application Server and Server Hypervisor Edition (CVE-2015-7450). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-10149 KEV |
[KEV] OS Command Injection in Exim Mail Transfer Agent Mta (CVE-2019-10149)
OS command injection in Exim Mail Transfer Agent Mta (CVE-2019-10149). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1579 KEV |
[KEV] Vulnerability in Palo Alto Networks PAN-OS (CVE-2019-1579)
Vulnerability in Palo Alto Networks PAN-OS (CVE-2019-1579). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-13383 KEV |
[KEV] Out-of-Bounds Write in Fortinet FortiOS and FortiProxy (CVE-2018-13383)
Out-of-bounds write in Fortinet FortiOS and FortiProxy (CVE-2018-13383). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-13382 KEV |
[KEV] Vulnerability in Fortinet FortiOS and FortiProxy (CVE-2018-13382)
Vulnerability in Fortinet FortiOS and FortiProxy (CVE-2018-13382). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-9670 KEV |
[KEV] XXE (XML External Entity) in Synacor Zimbra Collaboration Suite Zcs (CVE-2019-9670)
Vulnerability in Synacor Zimbra Collaboration Suite Zcs (CVE-2019-9670). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-2725 KEV |
[KEV] Vulnerability in Oracle WebLogic Server (CVE-2019-2725)
Vulnerability in Oracle WebLogic Server (CVE-2019-2725). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-3900 KEV |
[KEV] Vulnerability in Microsoft WinVerifyTrust function (CVE-2013-3900)
Vulnerability in Microsoft WinVerifyTrust function (CVE-2013-3900). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1458 KEV |
[KEV] Vulnerability in Microsoft Win32k (CVE-2019-1458)
Vulnerability in Microsoft Win32k (CVE-2019-1458). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-6572 KEV |
[KEV] Use-After-Free in Google Chrome Media (CVE-2020-6572)
Vulnerability in Google Chrome Media (CVE-2020-6572). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-36260 KEV |
[KEV] OS Command Injection in Hikvision Security cameras web server (CVE-2021-36260)
OS command injection in Hikvision Security cameras web server (CVE-2021-36260). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-22017 KEV |
[KEV] Vulnerability in VMware vCenter Server (CVE-2021-22017)
Vulnerability in VMware vCenter Server (CVE-2021-22017). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-4102 KEV |
[KEV] Use-After-Free in Google Chromium V8 (CVE-2021-4102)
Vulnerability in Google Chromium V8 (CVE-2021-4102). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-43890 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2021-43890)
Vulnerability in Microsoft Windows (CVE-2021-43890). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-44228 KEV |
[KEV] Vulnerability in Apache Log4j2 (CVE-2021-44228)
Vulnerability in Apache Log4j2 (CVE-2021-44228). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-10758 KEV |
[KEV] Vulnerability in MongoDB mongo-express (CVE-2019-10758)
Vulnerability in MongoDB mongo-express (CVE-2019-10758). Risk of unauthorized operations or information disclosure. Exploitable via toBSON. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-8816 KEV |
[KEV] OS Command Injection in Pi-hole AdminLTE (CVE-2020-8816)
OS command injection in Pi-hole AdminLTE (CVE-2020-8816). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-17463 KEV |
[KEV] SQL Injection in Fuel Cms (CVE-2020-17463)
SQL injection in Fuel Cms (CVE-2020-17463). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2010-1871 KEV |
[KEV] Vulnerability in Red Hat JBoss Seam 2 (CVE-2010-1871)
Vulnerability in Red Hat JBoss Seam 2 (CVE-2010-1871). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-12149 KEV |
[KEV] Unsafe Deserialization in Red Hat JBoss Application Server (CVE-2017-12149)
Vulnerability in Red Hat JBoss Application Server (CVE-2017-12149). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-17562 KEV |
[KEV] Vulnerability in Embedthis GoAhead (CVE-2017-17562)
Vulnerability in Embedthis GoAhead (CVE-2017-17562). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-44168 KEV |
[KEV] Vulnerability in Fortinet FortiOS (CVE-2021-44168)
Vulnerability in Fortinet FortiOS (CVE-2021-44168). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-0193 KEV |
[KEV] Code Injection in Apache Solr (CVE-2019-0193)
Code injection in Apache Solr (CVE-2019-0193). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-7238 KEV |
[KEV] Vulnerability in Sonatype Nexus Repository Manager (CVE-2019-7238)
Vulnerability in Sonatype Nexus Repository Manager (CVE-2019-7238). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
