CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2021-21148 KEV |
[KEV] Vulnerability in Google Chromium V8 (CVE-2021-21148)
Vulnerability in Google Chromium V8 (CVE-2021-21148). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30633 KEV |
[KEV] Use-After-Free in Google Chromium Indexed DB API (CVE-2021-30633)
Vulnerability in Google Chromium Indexed DB API (CVE-2021-30633). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-16013 KEV |
[KEV] Out-of-Bounds Write in Google Chromium V8 (CVE-2020-16013)
Out-of-bounds write in Google Chromium V8 (CVE-2020-16013). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30632 KEV |
[KEV] Vulnerability in Google Chromium V8 (CVE-2021-30632)
Vulnerability in Google Chromium V8 (CVE-2021-30632). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-16009 KEV |
[KEV] Out-of-Bounds Write in Google Chromium V8 (CVE-2020-16009)
Out-of-bounds write in Google Chromium V8 (CVE-2020-16009). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-37976 KEV |
[KEV] Vulnerability in Google Chromium (CVE-2021-37976)
Vulnerability in Google Chromium (CVE-2021-37976). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-16017 KEV |
[KEV] Use-After-Free in Google Chrome (CVE-2020-16017)
Vulnerability in Google Chrome (CVE-2020-16017). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-21166 KEV |
[KEV] Vulnerability in Google Chromium (CVE-2021-21166)
Vulnerability in Google Chromium (CVE-2021-21166). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-15999 KEV |
[KEV] Out-of-Bounds Write in Google platform/external/freetype (CVE-2020-15999)
Out-of-bounds write in Google platform/external/freetype (CVE-2020-15999). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to 11:2021-01-01 or later.
|
|
| CVE-2020-16010 KEV |
[KEV] Out-of-Bounds Write in Google Chrome for Android UI (CVE-2020-16010)
Out-of-bounds write in Google Chrome for Android UI (CVE-2020-16010). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-13379 KEV |
[KEV] Path Traversal in Fortinet FortiOS (CVE-2018-13379)
Path traversal in Fortinet FortiOS (CVE-2018-13379). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-12812 KEV |
[KEV] Vulnerability in Fortinet FortiOS (CVE-2020-12812)
Vulnerability in Fortinet FortiOS (CVE-2020-12812). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-5591 KEV |
[KEV] Vulnerability in Fortinet FortiOS (CVE-2019-5591)
Vulnerability in Fortinet FortiOS (CVE-2019-5591). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-35464 KEV |
[KEV] Unsafe Deserialization in ForgeRock Access Management (AM) (CVE-2021-35464)
Vulnerability in ForgeRock Access Management (AM) (CVE-2021-35464). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-22986 KEV |
[KEV] Authorization Flaw in F5 BIG-IP and BIG-IQ Centralized Management (CVE-2021-22986)
Vulnerability in F5 BIG-IP and BIG-IQ Centralized Management (CVE-2021-22986). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-5902 KEV |
[KEV] Path Traversal in F5 BIG-IP (CVE-2020-5902)
Path traversal in F5 BIG-IP (CVE-2020-5902). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-8655 KEV |
[KEV] Privilege Escalation in Eyesofnetwork (CVE-2020-8655)
Vulnerability in Eyesofnetwork (CVE-2020-8655). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-8657 KEV |
[KEV] Vulnerability in Eyesofnetwork (CVE-2020-8657)
Vulnerability in Eyesofnetwork (CVE-2020-8657). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-6789 KEV |
[KEV] Buffer Overflow in Exim (CVE-2018-6789)
Vulnerability in Exim (CVE-2018-6789). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-22205 KEV |
[KEV] Vulnerability in GitLab Community and Enterprise Editions (CVE-2021-22205)
Vulnerability in GitLab Community and Enterprise Editions (CVE-2021-22205). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-7600 KEV |
[KEV] Vulnerability in Drupal Core (CVE-2018-7600)
Vulnerability in Drupal Core (CVE-2018-7600). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-8515 KEV |
[KEV] OS Command Injection in DrayTek Multiple Vigor Routers (CVE-2020-8515)
OS command injection in DrayTek Multiple Vigor Routers (CVE-2020-8515). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-15752 KEV |
[KEV] Vulnerability in Docker Desktop Community Edition (CVE-2019-15752)
Vulnerability in Docker Desktop Community Edition (CVE-2019-15752). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-9822 KEV |
[KEV] Vulnerability in DotNetNuke (DNN) (CVE-2017-9822)
Vulnerability in DotNetNuke (DNN) (CVE-2017-9822). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-18325 KEV |
[KEV] Vulnerability in Dotnetnuke (dnn) Dotnetnuke Dnn (CVE-2018-18325)
Vulnerability in Dotnetnuke (dnn) Dotnetnuke Dnn (CVE-2018-18325). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-15811 KEV |
[KEV] Vulnerability in Dotnetnuke (dnn) Dotnetnuke Dnn (CVE-2018-15811)
Vulnerability in Dotnetnuke (dnn) Dotnetnuke Dnn (CVE-2018-15811). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-25506 KEV |
[KEV] OS Command Injection in D-Link DNS-320 Device (CVE-2020-25506)
OS command injection in D-Link DNS-320 Device (CVE-2020-25506). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-29557 KEV |
[KEV] Buffer Overflow in D-Link DIR-825 R1 Devices (CVE-2020-29557)
Vulnerability in D-Link DIR-825 R1 Devices (CVE-2020-29557). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-11634 KEV |
[KEV] Vulnerability in Citrix Workspace Application and Receiver for Windows (CVE-2019-11634)
Vulnerability in Citrix Workspace Application and Receiver for Windows (CVE-2019-11634). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-19781 KEV |
[KEV] Path Traversal in Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance (CVE-2019-19781)
Path traversal in Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance (CVE-2019-19781). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-8196 KEV |
[KEV] Vulnerability in Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance (CVE-2020-8196)
Vulnerability in Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance (CVE-2020-8196). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-8195 KEV |
[KEV] Vulnerability in Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance (CVE-2020-8195)
Vulnerability in Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance (CVE-2020-8195). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-8193 KEV |
[KEV] Vulnerability in Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance (CVE-2020-8193)
Vulnerability in Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance (CVE-2020-8193). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-13608 KEV |
[KEV] XXE (XML External Entity) in Citrix StoreFront Server (CVE-2019-13608)
Vulnerability in Citrix StoreFront Server (CVE-2019-13608). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-0296 KEV |
[KEV] Vulnerability in Cisco Adaptive Security Appliance (ASA) (CVE-2018-0296)
Vulnerability in Cisco Adaptive Security Appliance (ASA) (CVE-2018-0296). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1653 KEV |
[KEV] Vulnerability in Cisco Small Business RV320 and RV325 Routers (CVE-2019-1653)
Vulnerability in Cisco Small Business RV320 and RV325 Routers (CVE-2019-1653). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-3161 KEV |
[KEV] Vulnerability in Cisco IP Phones (CVE-2020-3161)
Vulnerability in Cisco IP Phones (CVE-2020-3161). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-3569 KEV |
[KEV] Vulnerability in Cisco IOS XR (CVE-2020-3569)
Vulnerability in Cisco IOS XR (CVE-2020-3569). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-3566 KEV |
[KEV] Vulnerability in Cisco IOS XR (CVE-2020-3566)
Vulnerability in Cisco IOS XR (CVE-2020-3566). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-3118 KEV |
[KEV] Vulnerability in Cisco IOS XR (CVE-2020-3118)
Vulnerability in Cisco IOS XR (CVE-2020-3118). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-0171 KEV |
[KEV] Vulnerability in Cisco IOS and IOS XE (CVE-2018-0171)
Vulnerability in Cisco IOS and IOS XE (CVE-2018-0171). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-1498 KEV |
[KEV] OS Command Injection in Cisco HyperFlex HX (CVE-2021-1498)
OS command injection in Cisco HyperFlex HX (CVE-2021-1498). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-1497 KEV |
[KEV] OS Command Injection in Cisco HyperFlex HX (CVE-2021-1497)
OS command injection in Cisco HyperFlex HX (CVE-2021-1497). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-3580 KEV |
[KEV] Cross-Site Scripting (XSS) in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) (CVE-2020-3580)
Cross-site scripting in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) (CVE-2020-3580). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-3452 KEV |
[KEV] Vulnerability in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) (CVE-2020-3452)
Vulnerability in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) (CVE-2020-3452). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-42258 KEV |
[KEV] SQL Injection in BQE BillQuick Web Suite (CVE-2021-42258)
SQL injection in BQE BillQuick Web Suite (CVE-2021-42258). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-3396 KEV |
[KEV] Path Traversal in Atlassian Confluence Server and Data Server (CVE-2019-3396)
Path traversal in Atlassian Confluence Server and Data Server (CVE-2019-3396). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-11580 KEV |
[KEV] Vulnerability in Atlassian Crowd and Crowd Data Center (CVE-2019-11580)
Vulnerability in Atlassian Crowd and Crowd Data Center (CVE-2019-11580). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-26084 KEV |
[KEV] Vulnerability in Atlassian Confluence Server and Data Center (CVE-2021-26084)
Vulnerability in Atlassian Confluence Server and Data Center (CVE-2021-26084). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-3398 KEV |
[KEV] Path Traversal in Atlassian Confluence Server and Data Center (CVE-2019-3398)
Path traversal in Atlassian Confluence Server and Data Center (CVE-2019-3398). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
