Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2017-0145 Microsoft SMBv1 Remote Code Execution Vulnerability CRITICAL N/A 89.85% cvelistv5 2017-03-14
cve-2017-0144 Microsoft SMBv1 Remote Code Execution Vulnerability HIGH 8.8 99.23% cvelistv5 2022-02-10
cve-2016-3088 Apache ActiveMQ Improper Input Validation Vulnerability HIGH N/A 98.52% cvelistv5 2022-02-10
cve-2015-2051 D-Link DIR-645 Router Remote Code Execution Vulnerability HIGH 8.8 97.10% cvelistv5 2019-05-23
cve-2015-1635 Microsoft HTTP.sys Remote Code Execution Vulnerability CRITICAL 9.8 100.00% cvelistv5 2022-02-10
cve-2015-1130 Apple OS X Authentication Bypass Vulnerability HIGH 7.8 9.89% cvelistv5 2022-02-10
cve-2014-4404 Apple OS X Heap-Based Buffer Overflow Vulnerability HIGH N/A 48.92% cvelistv5 2022-02-10
cve-2022-21882 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.0 59.20% cvelistv5 2022-02-04
cve-2022-22587 Apple Memory Corruption Vulnerability CRITICAL 9.8 11.64% cvelistv5 2022-01-26
cve-2021-20038 SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability CRITICAL 9.8 99.91% cvelistv5 2022-01-28
cve-2020-5722 Grandstream Networks UCM6200 Series SQL Injection Vulnerability HIGH N/A 84.29% cvelistv5 2020-04-03
cve-2020-0787 Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability HIGH 7.8 42.52% cvelistv5 2021-02-25
cve-2017-5689 Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability HIGH N/A 92.19% cvelistv5 2021-08-17
cve-2014-7169 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability HIGH N/A 99.94% cvelistv5 2014-09-30
cve-2014-6271 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability HIGH N/A 100.00% cvelistv5 2014-09-30
cve-2014-1776 Microsoft Internet Explorer Memory Corruption Vulnerability HIGH N/A 82.68% cvelistv5 2014-04-27
cve-2021-35247 SolarWinds Serv-U Improper Input Validation Vulnerability HIGH N/A 3.67% cvelistv5 2022-01-19
cve-2018-8453 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 70.04% cvelistv5 2018-08-17
cve-2012-0391 Apache Struts 2 Improper Input Validation Vulnerability HIGH N/A 75.60% cvelistv5 2021-10-13
cve-2006-1547 Apache Struts 1 ActionForm Denial-of-Service Vulnerability HIGH N/A 54.63% cvelistv5 2022-01-21
cve-2021-40870 Aviatrix Controller Unrestricted Upload of File CRITICAL 9.8 93.02% cvelistv5 2021-12-21
cve-2021-33766 Microsoft Exchange Server Information Disclosure HIGH N/A 98.18% cvelistv5 2021-12-21
cve-2021-32648 October CMS Improper Authentication HIGH N/A 91.12% cvelistv5 2022-01-18
cve-2021-25298 Nagios XI OS Command Injection HIGH N/A 73.64% cvelistv5 2021-06-01
cve-2021-25297 Nagios XI OS Command Injection HIGH 8.8 56.66% cvelistv5 2021-06-01
cve-2021-25296 Nagios XI OS Command Injection HIGH N/A 71.94% cvelistv5 2021-06-01
cve-2021-22991 F5 BIG-IP Traffic Management Microkernel Buffer Overflow HIGH N/A 62.42% cvelistv5 2021-06-01
cve-2021-21975 VMware Server Side Request Forgery in vRealize Operations Manager API HIGH 7.5 78.00% cvelistv5 2021-06-01
cve-2021-21315 System Information Library for Node.JS Command Injection HIGH 7.1 90.67% cvelistv5 2022-01-18
cve-2020-14864 Oracle Business Intelligence Enterprise Edition Path Transversal HIGH 7.5 97.23% cvelistv5 2022-01-18