Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 30, 07:38 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2018-20062NO
Nonecms
5none
9.8Nov 3May 3ThinkPHP "noneCms" Remote Code Execution Vulnerability
CVE-2018-0171CI
Cisco IOS and IOS XE
9.8Nov 3May 3Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
CVE-2018-15961CO
ColdFusion
Adobe
9.8Nov 3May 3Adobe ColdFusion Unrestricted File Upload Vulnerability
CVE-2018-14558AF
Ac10 Firmware
Tenda
9.8Nov 3May 3Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability
CVE-2018-13379
Ransomware
FO
FortiOS
Fortinet
9.8Nov 3May 3Fortinet FortiOS SSL VPN Path Traversal Vulnerability
CVE-2021-20090BW
Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3
9.8Nov 3Nov 17Arcadyan Buffalo Firmware Path Traversal Vulnerability
CVE-2021-20021
Ransomware
ES
Email Security
SonicWall
9.8Nov 3Nov 17SonicWall Email Security Improper Privilege Management Vulnerability
CVE-2021-20016
Ransomware
SS
SonicWall SMA100
SonicWall
9.8Nov 3Nov 17SonicWall SSLVPN SMA100 SQL Injection Vulnerability
CVE-2021-1871MA
macOS
Apple
9.8Nov 3Nov 17Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
CVE-2021-1870MA
macOS
Apple
9.8Nov 3Nov 17Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
CVE-2021-27561DM
Device Management
Yealink
9.8Nov 3Nov 17Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability
CVE-2021-27104
Ransomware
FT
FTA
Accellion
9.8Nov 3Nov 17Accellion FTA OS Command Injection Vulnerability
CVE-2021-1498CH
Cisco HyperFlex HX Data Platform
Cisco
9.8Nov 3Nov 17Cisco HyperFlex HX Command Injection Vulnerabilities
CVE-2021-1497CH
Cisco HyperFlex HX Data Platform
Cisco
9.8Nov 3Nov 17Cisco HyperFlex HX Command Injection Vulnerabilities
CVE-2021-27103
Ransomware
FT
FTA
Accellion
9.8Nov 3Nov 17Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability
CVE-2020-8657EY
Eyesofnetwork
Eyesofnetwork
9.8Nov 3May 3EyesOfNetwork Use of Hard-Coded Credentials Vulnerability
CVE-2021-30116
Ransomware
VA
Vsa Agent
Kaseya
9.8Nov 3Nov 17Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6
CVE-2020-8644PL
Playsms
Playsms
9.8Nov 3May 3PlaySMS Server-Side Template Injection Vulnerability
CVE-2020-8599AO
Apex One
Trend Micro
9.8Nov 3May 3Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
CVE-2020-8515VF
Vigor2960 Firmware
Draytek
9.8Nov 3May 3Multiple DrayTek Vigor Routers Web Management Page Vulnerability
CVE-2021-42258
Ransomware
BW
Billquick Web Suite
Bqe
9.8Nov 3Nov 17BQE BillQuick Web Suite SQL Injection Vulnerability
CVE-2021-42013
Ransomware
HS
HTTP Server
Apache
9.8Nov 3Nov 17Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
CVE-2021-41773
Ransomware
HS
HTTP Server
Apache
9.8Nov 3Nov 17Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
CVE-2020-7961LP
Liferay Portal
Liferay
9.8Nov 3May 3Liferay Portal Deserialization of Untrusted Data Vulnerability
CVE-2020-6207SS
SAP Solution Manager (User Experience Monitoring)
SAP SE
9.8Nov 3May 3SAP Solution Manager Missing Authentication for Critical Function Vulnerability
CVE-2020-5902
Ransomware
BI
BIG-IP
F5
9.8Nov 3May 3F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability
CVE-2020-5847UN
Unraid
Unraid
9.8Nov 3May 3Unraid Remote Code Execution Vulnerability
CVE-2021-40539
Ransomware
MA
ManageEngine ADSelfService Plus
Zoho
9.8Nov 3Nov 17Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
CVE-2020-4427DR
Data Risk Manager
IBM
9.8Nov 3May 3IBM Data Risk Manager Security Bypass Vulnerability
CVE-2020-3992
Ransomware
ES
ESXi
VMware
9.8Nov 3May 3VMware ESXi OpenSLP Use-After-Free Vulnerability
CVE-2020-3952VS
vCenter Server
VMware
9.8Nov 3May 3VMware vCenter Server Information Disclosure Vulnerability
CVE-2021-27101
Ransomware
FT
FTA
Accellion
9.8Nov 3Nov 17Accellion FTA SQL Injection Vulnerability
CVE-2015-4852WS
WebLogic Server
Oracle
9.8Nov 3May 3Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability
CVE-2020-3161CI
Cisco IP phone
Cisco
9.8Nov 3May 3Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability
CVE-2020-29583AF
Atp100 Firmware
Zyxel
9.8Nov 3May 3Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability
CVE-2020-29557DR
Dir-825 R1 Firmware
Dlink
9.8Nov 3May 3D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability
CVE-2020-26919JF
Jgs516pe Firmware
Netgear
9.8Nov 3May 3Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability
CVE-2020-2555UF
Utilities Framework
Oracle Corporation
9.8Nov 3May 3Oracle Multiple Products Remote Code Execution Vulnerability
CVE-2020-25506DF
Dns-320 Firmware
Dlink
9.8Nov 3May 3D-Link DNS-320 Device Command Injection Vulnerability
CVE-2020-25213WO
WordPress
WordPress
9.8Nov 3May 3WordPress File Manager Plugin Remote Code Execution Vulnerability
CVE-2020-17530ST
Struts
Apache
9.8Nov 3May 3Apache Struts Remote Code Execution Vulnerability
CVE-2020-17496VB
Vbulletin
Vbulletin
9.8Nov 3May 3vBulletin PHP Module Remote Code Execution Vulnerability
CVE-2020-16846DL
Debian Linux
Debian
9.8Nov 3May 3SaltStack Salt Shell Injection Vulnerability
CVE-2020-15505CO
Core
Mobileiron
9.8Nov 3May 3Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability
CVE-2020-14882WS
WebLogic Server
Oracle
9.8Nov 3May 3Oracle WebLogic Server Remote Code Execution Vulnerability
CVE-2020-14750WS
WebLogic Server
Oracle
9.8Nov 3May 3Oracle WebLogic Server Remote Code Execution Vulnerability
CVE-2020-12812
Ransomware
FO
FortiOS
Fortinet
9.8Nov 3May 3Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
CVE-2020-12271
Ransomware
FI
Firewall
Sophos
9.8Nov 3May 3Sophos SFOS SQL Injection Vulnerability
CVE-2016-4437AU
Aurora
Apache
9.8Nov 3May 3Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access…
CVE-2020-11651UL
Ubuntu Linux
Canonical
9.8Nov 3May 3SaltStack Salt Authentication Bypass Vulnerability
Page 31 of 36 · 1,765 total
1…303132…36