Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2021-20022 SonicWall Email Security Unrestricted Upload of File Vulnerability HIGH 7.2 16.64% cvelistv5 2021-04-20
cve-2021-20021 SonicWall Email Security Improper Privilege Management Vulnerability CRITICAL N/A 88.78% cvelistv5 2021-04-20
cve-2021-20016 SonicWall SSLVPN SMA100 SQL Injection Vulnerability CRITICAL 9.8 40.04% cvelistv5 2021-04-29
cve-2021-1906 Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability MEDIUM 6.2 0.52% cvelistv5 2020-11-17
cve-2021-1905 Qualcomm Multiple Chipsets Use-After-Free Vulnerability HIGH N/A 1.54% cvelistv5 2020-11-17
cve-2021-1879 Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability MEDIUM 6.1 7.08% cvelistv5 2021-03-26
cve-2021-1871 webkitgtk: Logic issue leading to arbitrary code execution CRITICAL 9.8 7.00% cvelistv5 2025-11-21
cve-2021-1870 webkitgtk: Logic issue leading to arbitrary code execution CRITICAL 9.8 7.71% cvelistv5 2025-11-21
cve-2021-1782 Apple Multiple Products Race Condition Vulnerability HIGH 7.0 2.22% cvelistv5 2021-01-26
cve-2021-1732 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 78.38% cvelistv5 2020-12-10
cve-2021-1675 Microsoft Windows Print Spooler Remote Code Execution Vulnerability CRITICAL N/A 85.30% cvelistv5 2021-08-10
cve-2021-1647 Microsoft Defender Remote Code Execution Vulnerability HIGH N/A 39.65% cvelistv5 2021-01-12
cve-2021-1498 Cisco HyperFlex HX Data Platform Command Injection Vulnerability CRITICAL 9.8 100.00% cvelistv5 2021-06-24
cve-2021-1497 Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability HIGH N/A 99.93% cvelistv5 2021-08-06
cve-2020-9859 Apple Multiple Products Code Execution Vulnerability HIGH 7.8 0.83% cvelistv5 2021-11-03
cve-2020-9819 Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability HIGH N/A 2.23% cvelistv5 2020-04-22
cve-2020-9818 Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability HIGH N/A 2.34% cvelistv5 2020-04-22
cve-2020-8657 CVE-2020-8657 CRITICAL 9.8 91.87% cvelistv5
cve-2020-8655 An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7. HIGH 7.8 60.08% cvelistv5 2026-06-17
cve-2020-8644 PlaySMS before 1.4.3 does not sanitize inputs from a malicious string. CRITICAL 9.8 86.69% cvelistv5 2026-06-17
cve-2020-8599 Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability CRITICAL 9.8 11.86% cvelistv5 2021-11-03
cve-2020-8515 Multiple DrayTek Vigor Routers Web Management Page Vulnerability CRITICAL 9.8 99.99% cvelistv5 2020-04-03
cve-2020-8468 Trend Micro Multiple Products Content Validation Escape Vulnerability HIGH N/A 6.17% cvelistv5 2020-03-16
cve-2020-8467 Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability HIGH N/A 10.90% cvelistv5 2020-03-16
cve-2020-8260 Ivanti Pulse Connect Secure Code Execution Vulnerability HIGH 7.2 96.48% cvelistv5 2021-04-20
cve-2020-8243 Ivanti Pulse Connect Secure Code Execution Vulnerability HIGH 7.2 90.76% cvelistv5 2021-04-20
cve-2020-8196 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability MEDIUM 4.3 26.33% cvelistv5 2020-09-15
cve-2020-8195 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability CRITICAL N/A 33.03% cvelistv5 2020-09-15
cve-2020-8193 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability HIGH N/A 88.27% cvelistv5 2020-09-15
cve-2020-7961 Liferay Portal Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 99.91% cvelistv5 2021-01-14