Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2014-6271 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability HIGH N/A 100.00% cvelistv5 2014-09-30
cve-2014-1776 Microsoft Internet Explorer Memory Corruption Vulnerability HIGH N/A 82.68% cvelistv5 2014-04-27
cve-2021-35247 SolarWinds Serv-U Improper Input Validation Vulnerability HIGH N/A 3.67% cvelistv5 2022-01-19
cve-2018-8453 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 70.04% cvelistv5 2018-08-17
cve-2012-0391 Apache Struts 2 Improper Input Validation Vulnerability HIGH N/A 75.60% cvelistv5 2021-10-13
cve-2006-1547 Apache Struts 1 ActionForm Denial-of-Service Vulnerability HIGH N/A 54.63% cvelistv5 2022-01-21
cve-2021-40870 Aviatrix Controller Unrestricted Upload of File CRITICAL 9.8 93.02% cvelistv5 2021-12-21
cve-2021-33766 Microsoft Exchange Server Information Disclosure HIGH N/A 98.18% cvelistv5 2021-12-21
cve-2021-32648 October CMS Improper Authentication HIGH N/A 91.12% cvelistv5 2022-01-18
cve-2021-25298 Nagios XI OS Command Injection HIGH N/A 73.64% cvelistv5 2021-06-01
cve-2021-25297 Nagios XI OS Command Injection HIGH 8.8 56.66% cvelistv5 2021-06-01
cve-2021-25296 Nagios XI OS Command Injection HIGH N/A 71.94% cvelistv5 2021-06-01
cve-2021-22991 F5 BIG-IP Traffic Management Microkernel Buffer Overflow HIGH N/A 62.42% cvelistv5 2021-06-01
cve-2021-21975 VMware Server Side Request Forgery in vRealize Operations Manager API HIGH 7.5 78.00% cvelistv5 2021-06-01
cve-2021-21315 System Information Library for Node.JS Command Injection HIGH 7.1 90.67% cvelistv5 2021-06-01
cve-2020-14864 Oracle Business Intelligence Enterprise Edition Path Transversal HIGH 7.5 97.23% cvelistv5 2022-01-18
cve-2020-13927 Apache Airflow's Experimental API Authentication Bypass CRITICAL 9.8 99.78% cvelistv5 2022-01-18
cve-2020-13671 Drupal core Un-restricted Upload of File CRITICAL N/A 36.17% cvelistv5 2021-04-12
cve-2020-11978 Apache Airflow Command Injection HIGH 8.8 99.19% cvelistv5 2022-01-18
cve-2021-36260 Hikvision Improper Input Validation CRITICAL 9.8 99.87% cvelistv5 2021-12-06
cve-2021-27860 FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit HIGH N/A 39.68% cvelistv5 2022-01-10
cve-2021-22017 VMware vCenter Server Improper Access Control MEDIUM 5.3 49.18% cvelistv5 2022-01-10
cve-2020-6572 Google Chrome Media Use-After-Free Vulnerability HIGH 8.8 10.59% cvelistv5 2020-04-01
cve-2019-9670 Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference CRITICAL 9.8 99.99% cvelistv5 2020-07-16
cve-2019-7609 Kibana Arbitrary Code Execution HIGH N/A 95.34% cvelistv5 2021-05-07
cve-2019-2725 Oracle WebLogic Server, Injection CRITICAL 9.8 99.98% cvelistv5 2019-04-30
cve-2019-1579 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability HIGH 8.1 44.16% cvelistv5 2019-10-02
cve-2019-1458 Microsoft Win32k Privilege Escalation Vulnerability CRITICAL N/A 74.44% cvelistv5 2019-12-10
cve-2019-10149 Exim Mail Transfer Agent (MTA) Improper Input Validation HIGH N/A 99.96% cvelistv5 2019-12-27
cve-2018-13383 Fortinet FortiOS and FortiProxy Out-of-bounds Write CRITICAL N/A 32.47% cvelistv5 2019-10-02