CISA KEV
Known exploited
The government must-patch list, mapped to our product index so you can go straight to the product affected.
Updated Oct 30, 13:47 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
| CVE | Product | CVSS | Added | Summary |
|---|---|---|---|---|
| CVE-2015-0666 | PD Prime Data Center Network Manager Cisco | 7.5 | Mar 25 | Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability |
| CVE-2018-8373 | IE Internet Explorer 10 Microsoft | 7.5 | Mar 25 | Microsoft Scripting Engine Memory Corruption Vulnerability |
| CVE-2010-3035 | IX Ios XR Cisco | 7.5 | Mar 25 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability |
| CVE-2014-0130 | EL Enterprise Linux Server Redhat | 7.5 | Mar 25 | Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x… |
| CVE-2020-5410 | SC Spring Cloud Config Spring by VMware | 7.5 | Mar 25 | Directory Traversal with spring-cloud-config-server |
| CVE-2015-3035 | AC Archer C5 Firmware Tp-link | 7.5 | Mar 25 | TP-Link Multiple Archer Devices Directory Traversal Vulnerability |
| CVE-2016-0752 | DL Debian Linux Debian | 7.5 | Mar 25 | Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows… |
| CVE-2019-2616 | BP BI Publisher (formerly XML Publisher) Oracle Corporation | 7.2 | Mar 25 | Oracle BI Publisher Unauthorized Access Vulnerability |
| CVE-2016-11021 | DF Dcs-930l Firmware Dlink | 7.2 | Mar 25 | D-Link DCS-930L Devices OS Command Injection Vulnerability |
| CVE-2009-2055 | IX Ios XR Cisco | 5.9 | Mar 25 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability |
| CVE-2013-5223 | DF Dsl-2760u Firmware Dlink | 5.4 | Mar 25 | D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability |
| CVE-2020-5135 Ransomware | SO SonicOS SonicWall | 9.8 | Mar 15 | SonicWall SonicOS Buffer Overflow Vulnerability |
| CVE-2015-2546 Ransomware | W1 Windows 10 1507 Microsoft | 8.2 | Mar 15 | Microsoft Win32k Memory Corruption Vulnerability |
| CVE-2019-1322 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows Privilege Escalation Vulnerability |
| CVE-2019-1315 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability |
| CVE-2019-1129 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability |
| CVE-2019-1405 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability |
| CVE-2017-0101 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows Transaction Manager Privilege Escalation Vulnerability |
| CVE-2019-0841 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability |
| CVE-2019-1132 | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2019-1253 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability |
| CVE-2019-1069 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2019-1064 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Windows Elevation of Privilege Vulnerability |
| CVE-2019-0543 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows Privilege Escalation Vulnerability |
| CVE-2016-3309 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| CVE-2018-8120 Ransomware | W7 Windows 7 Microsoft | 7.0 | Mar 15 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2019-11581 | JI Jira Atlassian | 9.8 | Mar 7 | Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability |
| CVE-2017-6077 | DF Dgn2200 Firmware Netgear | 9.8 | Mar 7 | NETGEAR DGN2200 Remote Code Execution Vulnerability |
| CVE-2013-0625 | CO ColdFusion Adobe | 9.8 | Mar 7 | Adobe ColdFusion Authentication Bypass Vulnerability |
| CVE-2022-26486 | FI Firefox Mozilla | 9.6 | Mar 7 | Mozilla Firefox Use-After-Free Vulnerability |
| CVE-2022-26485 | FI Firefox Mozilla | 8.8 | Mar 7 | Mozilla Firefox Use-After-Free Vulnerability |
| CVE-2016-6277 | DF D6220 Firmware Netgear | 8.8 | Mar 7 | NETGEAR Multiple Routers Remote Code Execution Vulnerability |
| CVE-2013-0631 | CO ColdFusion Adobe | 7.5 | Mar 7 | Adobe ColdFusion Information Disclosure Vulnerability |
| CVE-2013-0629 | CO ColdFusion Adobe | 7.5 | Mar 7 | Adobe ColdFusion Directory Traversal Vulnerability |
| CVE-2020-8218 | CS Connect Secure Ivanti | 7.2 | Mar 7 | Pulse Connect Secure Code Injection Vulnerability |
| CVE-2009-3960 Ransomware | CO ColdFusion Adobe | 6.5 | Mar 7 | Adobe BlazeDS Information Disclosure Vulnerability |
| CVE-2021-21973 | VS vCenter Server VMware | 5.3 | Mar 7 | VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability |
| CVE-2013-3346 | AC Acrobat Adobe | 9.8 | Mar 3 | Adobe Reader and Acrobat Memory Corruption Vulnerability |
| CVE-2019-16928 | UL Ubuntu Linux Canonical | 9.8 | Mar 3 | Exim Out-of-bounds Write Vulnerability |
| CVE-2022-20699 | CS Cisco Small Business RV Series Router Firmware Cisco | 9.8 | Mar 3 | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20700 | CS Cisco Small Business RV Series Router Firmware Cisco | 9.8 | Mar 3 | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2016-4117 Ransomware | FP Flash Player Adobe | 9.8 | Mar 3 | Adobe Flash Player Arbitrary Code Execution Vulnerability |
| CVE-2013-0632 | CO ColdFusion Adobe | 9.8 | Mar 3 | Adobe ColdFusion Authentication Bypass Vulnerability |
| CVE-2017-12240 | CI Cisco IOS and IOS XE | 9.8 | Mar 3 | Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability |
| CVE-2020-1938 | TO Tomcat Apache | 9.8 | Mar 3 | Apache Tomcat Improper Privilege Management Vulnerability |
| CVE-2012-4681 Ransomware | JD Jdk Oracle | 9.8 | Mar 3 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
| CVE-2012-1723 Ransomware | JD Jdk Oracle | 9.8 | Mar 3 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
| CVE-2012-0507 Ransomware | DL Debian Linux Debian | 9.8 | Mar 3 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
| CVE-2011-3544 | UL Ubuntu Linux Canonical | 9.8 | Mar 3 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
| CVE-2011-1889 | FT Forefront Threat Management Gateway Microsoft | 9.8 | Mar 3 | Microsoft Forefront TMG Remote Code Execution Vulnerability |
