Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 30, 10:12 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2016-3088AC
ActiveMQ
Apache
9.8Feb 10Aug 10The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request
CVE-2017-9791ST
Struts
Apache
9.8Feb 10Aug 10The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage
CVE-2018-1000861JE
Jenkins
Jenkins
9.8Feb 10Aug 10A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in…
CVE-2017-0145
Ransomware
WS
Windows SMB
Microsoft Corporation
8.8Feb 10Aug 10Microsoft SMBv1 Remote Code Execution Vulnerability
CVE-2015-2051DF
Dir-645 Firmware
Dlink
8.8Feb 10Aug 10D-Link DIR-645 Router Remote Code Execution Vulnerability
CVE-2017-0144
Ransomware
WS
Windows SMB
Microsoft Corporation
8.8Feb 10Aug 10Microsoft SMBv1 Remote Code Execution Vulnerability
CVE-2017-8464WI
Windows
Microsoft
8.8Feb 10Aug 10Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
CVE-2017-0262OF
Office
Microsoft
7.8Feb 10Aug 10Microsoft Office Remote Code Execution Vulnerability
CVE-2015-1130MA
macOS
Apple
7.8Feb 10Aug 10Apple OS X Authentication Bypass Vulnerability
CVE-2021-36934WI
Windows
Microsoft
7.8Feb 10Feb 24Windows Elevation of Privilege Vulnerability
CVE-2017-0263WI
Windows
Microsoft
7.8Feb 10Aug 10Microsoft Win32k Privilege Escalation Vulnerability
CVE-2014-4404IO
iOS
Apple
7.8Feb 10Aug 10Apple OS X Heap-Based Buffer Overflow Vulnerability
CVE-2017-10271
Ransomware
WS
WebLogic Server
Oracle
7.5Feb 10Aug 10Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
CVE-2022-21882
Ransomware
W1
Windows 10 Version 1809
Microsoft
7.8Feb 4Feb 18Win32k Elevation of Privilege Vulnerability
CVE-2022-22587MA
macOS
Apple
9.8Jan 28Feb 11Apple Memory Corruption Vulnerability
CVE-2014-7169EO
Eos
Arista
9.8Jan 28Jul 28GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
CVE-2014-6271EO
Eos
Arista
9.8Jan 28Jul 28GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
CVE-2017-5689IA
Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability
Intel Corporation
9.8Jan 28Jul 28Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
CVE-2014-1776IE
Internet Explorer
Microsoft
9.8Jan 28Jul 28Microsoft Internet Explorer Memory Corruption Vulnerability
CVE-2020-5722GU
Grandstream UCM6200 Series
9.8Jan 28Jul 28Grandstream Networks UCM6200 Series SQL Injection Vulnerability
CVE-2021-20038
Ransomware
SS
SonicWall SMA100
SonicWall
9.8Jan 28Feb 11SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
CVE-2020-0787
Ransomware
WI
Windows
Microsoft
7.8Jan 28Jul 28Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability
CVE-2012-0391ST
Struts
Apache
9.8Jan 21Jul 21The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of…
CVE-2018-8453
Ransomware
WI
Windows
Microsoft
7.8Jan 21Jul 21Microsoft Win32k Privilege Escalation Vulnerability
CVE-2006-1547ST
Struts
Apache
7.5Jan 21Jul 21ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form…
CVE-2021-35247SE
Serv-U
SolarWinds
5.3Jan 21Feb 4Improper Input Validation Vulnerability in Serv-U
CVE-2021-40870CO
Controller
Aviatrix
9.8Jan 18Feb 1Aviatrix Controller Unrestricted Upload of File
CVE-2020-13927AA
Apache Airflow
9.8Jan 18Jul 18Apache Airflow's Experimental API Authentication Bypass
CVE-2021-22991BI
BIG-IP
F5
9.8Jan 18Feb 1F5 BIG-IP Traffic Management Microkernel Buffer Overflow
CVE-2021-32648OC
october
octobercms
9.1Jan 18Feb 1Account Takeover in Octobercms
CVE-2021-25296NX
Nagios XI
Nagios
8.8Jan 18Feb 1Nagios XI OS Command Injection
CVE-2021-25298NX
Nagios XI
Nagios
8.8Jan 18Feb 1Nagios XI OS Command Injection
CVE-2021-25297NX
Nagios XI
Nagios
8.8Jan 18Feb 1Nagios XI OS Command Injection
CVE-2020-13671DR
Drupal
Drupal
8.8Jan 18Jul 18Drupal core Un-restricted Upload of File
CVE-2020-11978AA
Apache Airflow
Apache Software Foundation
8.8Jan 18Jul 18Apache Airflow Command Injection
CVE-2021-21315SY
systeminformation
sebhildebrandt
7.8Jan 18Feb 1Command Injection Vulnerability
CVE-2021-21975
Ransomware
VV
VMware vRealize Operations
7.5Jan 18Feb 1VMware Server Side Request Forgery in vRealize Operations Manager API
CVE-2020-14864BI
Business Intelligence Enterprise Edition
Oracle Corporation
7.5Jan 18Jul 18Oracle Business Intelligence Enterprise Edition Path Transversal
CVE-2021-33766ES
Exchange Server
Microsoft
7.3Jan 18Feb 1Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2019-7609KI
Kibana
Elastic
10.0Jan 10Jul 10Kibana Arbitrary Code Execution
CVE-2015-7450SB
Sterling B2b Integrator
Ibm
9.8Jan 10Jul 10IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
CVE-2019-2725
Ransomware
WS
WebLogic Server
Oracle
9.8Jan 10Jul 10Oracle WebLogic Server, Injection
CVE-2019-10149EX
exim
exim
9.8Jan 10Jul 10Exim Mail Transfer Agent (MTA) Improper Input Validation
CVE-2017-1000486PR
Primefaces
Primetek
9.8Jan 10Jul 10Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
CVE-2021-36260DF
Ds-2cd2023g2-i(u) Firmware
Hikvision
9.8Jan 10Jan 24Hikvision Improper Input Validation
CVE-2019-9670ZC
Zimbra Collaboration Suite
Synacor
9.8Jan 10Jul 10Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
CVE-2021-27860IP
IPVPN
FatPipe
8.8Jan 10Jan 24Arbitrary file upload vulnerability in FatPipe software
CVE-2020-6572CH
Chrome
Google
8.8Jan 10Jul 10Google Chrome Media Use-After-Free Vulnerability
CVE-2019-1579
Ransomware
PA
PAN-OS
Palo Alto Networks
8.1Jan 10Jul 10Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
CVE-2019-1458
Ransomware
WI
Windows
Microsoft
7.8Jan 10Jul 10Microsoft Win32k Privilege Escalation Vulnerability
Page 29 of 36 · 1,765 total
1…282930…36