Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2020-13927 Apache Airflow's Experimental API Authentication Bypass CRITICAL 9.8 99.78% cvelistv5 2022-01-18
cve-2020-13671 Drupal core Un-restricted Upload of File HIGH N/A 36.17% cvelistv5 2022-01-18
cve-2020-11978 Apache Airflow Command Injection HIGH 8.8 99.19% cvelistv5 2022-01-18
cve-2021-36260 Hikvision Improper Input Validation CRITICAL 9.8 99.87% cvelistv5 2022-01-10
cve-2021-27860 FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit HIGH N/A 39.68% cvelistv5 2022-01-10
cve-2021-22017 VMware vCenter Server Improper Access Control MEDIUM 5.3 49.18% cvelistv5 2022-01-10
cve-2020-6572 Google Chrome Media Use-After-Free Vulnerability HIGH 8.8 10.59% cvelistv5 2022-01-10
cve-2019-9670 Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference CRITICAL 9.8 99.99% cvelistv5 2022-01-10
cve-2019-7609 Kibana Arbitrary Code Execution HIGH N/A 95.34% cvelistv5 2022-01-10
cve-2019-2725 Oracle WebLogic Server, Injection CRITICAL 9.8 99.98% cvelistv5 2022-01-10
cve-2019-1579 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability HIGH 8.1 44.16% cvelistv5 2022-01-10
cve-2019-1458 Microsoft Win32k Privilege Escalation Vulnerability CRITICAL N/A 74.44% cvelistv5 2022-01-10
cve-2019-10149 Exim Mail Transfer Agent (MTA) Improper Input Validation HIGH N/A 99.96% cvelistv5 2022-01-10
cve-2018-13383 Fortinet FortiOS and FortiProxy Out-of-bounds Write CRITICAL N/A 32.47% cvelistv5 2022-01-10
cve-2018-13382 Fortinet FortiOS and FortiProxy Improper Authorization CRITICAL 9.1 81.69% cvelistv5 2022-01-10
cve-2017-1000486 Primetek Primefaces Remote Code Execution Vulnerability CRITICAL 9.8 94.10% cvelistv5 2022-01-10
cve-2015-7450 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. HIGH N/A 97.76% cvelistv5 2022-01-10
cve-2013-3900 Microsoft WinVerifyTrust function Remote Code Execution MEDIUM 5.5 44.65% cvelistv5 2022-01-10
cve-2021-43890 Microsoft Windows AppX Installer Spoofing Vulnerability CRITICAL N/A 11.29% cvelistv5 2021-12-15
cve-2021-4102 Google Chromium V8 Use-After-Free Vulnerability HIGH N/A 7.84% cvelistv5 2021-12-09
cve-2021-44515 Zoho Desktop Central Authentication Bypass Vulnerability CRITICAL 9.8 99.87% cvelistv5 2021-12-10
cve-2021-44228 Apache Log4j2 Remote Code Execution Vulnerability CRITICAL N/A 100.00% cvelistv5 2021-12-06
cve-2021-44168 Fortinet FortiOS Arbitrary File Download HIGH N/A 0.91% cvelistv5 2021-12-10
cve-2021-35394 Realtek Jungle SDK Remote Code Execution Vulnerability HIGH N/A 99.88% cvelistv5 2021-12-10
cve-2020-8816 Pi-Hole AdminLTE Remote Code Execution Vulnerability HIGH N/A 78.34% cvelistv5 2020-12-14
cve-2020-17463 Fuel CMS SQL Injection Vulnerability CRITICAL 9.8 89.69% cvelistv5 2020-12-14
cve-2019-7238 Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability HIGH N/A 76.63% cvelistv5 2019-06-12
cve-2019-13272 Linux Kernel Improper Privilege Management Vulnerability HIGH N/A 52.20% cvelistv5 2021-12-10
cve-2019-10758 MongoDB mongo-express Remote Code Execution Vulnerability HIGH N/A 84.73% cvelistv5 2020-11-06
cve-2019-0193 Apache Solr DataImportHandler Code Injection Vulnerability HIGH N/A 83.55% cvelistv5 2021-12-10