Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2014-8244 Linksys ea3500_firmware Exposure of Sensitive Information to an Unauthorized Actor HIGH N/A 4.01% cvelistv5 2021-04-12
cve-2014-3704 Drupal Drupal Core Improper Neutralization of Special Elements used in an SQL Command HIGH N/A 99.97% cvelistv5 2021-04-12
cve-2014-2617 HP Universal CMDB 10.01 and 10.10 Unknown Vector Remote Code Execution Vulnerability HIGH N/A 12.23% cvelistv5 2021-04-12
cve-2013-7389 D-Link DIR-645 Router Improper Neutralization of Input During Web Page Generation HIGH N/A 27.75% cvelistv5 2021-04-12
cve-2013-1599 D-Link dcs-3411_firmware Improper Neutralization of Special Elements used in an OS Command HIGH N/A 40.35% cvelistv5 2021-04-12
cve-2020-6287 SAP NetWeaver Missing Authentication for Critical Function Vulnerability CRITICAL 10.0 94.72% cvelistv5 2021-04-08
cve-2020-6207 SAP Solution Manager Missing Authentication for Critical Function Vulnerability HIGH N/A 98.13% cvelistv5 2021-04-08
cve-2018-2380 SAP Customer Relationship Management (CRM) Path Traversal Vulnerability MEDIUM 6.6 28.93% cvelistv5 2021-04-08
cve-2017-11610 supervisord supervisor Incorrect Default Permissions HIGH N/A 87.55% cvelistv5 2021-04-08
cve-2016-9563 SAP NetWeaver XML External Entity (XXE) Vulnerability HIGH N/A 24.23% cvelistv5 2021-04-08
cve-2016-3976 SAP NetWeaver Directory Traversal Vulnerability HIGH N/A 47.25% cvelistv5 2021-04-08
cve-2021-21206 Google Chromium Blink Use-After-Free Vulnerability HIGH N/A 9.31% cvelistv5 2021-04-07
cve-2021-24240 aivahthemes business_hours_pro Unrestricted Upload of File with Dangerous Type HIGH N/A 3.04% cvelistv5 2021-04-02
cve-2020-12812 Fortinet FortiOS SSL VPN Improper Authentication Vulnerability CRITICAL 9.8 45.38% cvelistv5 2021-04-02
cve-2019-5591 Fortinet FortiOS Default Configuration Vulnerability CRITICAL N/A 18.57% cvelistv5 2021-04-02
cve-2021-1879 Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability MEDIUM 6.1 7.08% cvelistv5 2021-03-26
cve-2021-24220 thrivethemes focusblog Unrestricted Upload of File with Dangerous Type HIGH N/A 3.95% cvelistv5 2021-03-24
cve-2021-24219 thrivethemes focusblog Improper Access Control HIGH N/A 2.37% cvelistv5 2021-03-24
cve-2021-24212 WooCommerce help_scout Unrestricted Upload of File with Dangerous Type HIGH N/A 7.91% cvelistv5 2021-03-21
cve-2021-3129 Laravel Ignition File Upload Vulnerability CRITICAL 9.8 N/A cvelistv5 2021-03-18
cve-2021-24206 elementor Website Builder Improper Neutralization of Input During Web Page Generation HIGH N/A 0.75% cvelistv5 2021-03-17
cve-2021-24204 elementor Website Builder Improper Neutralization of Input During Web Page Generation HIGH N/A 0.75% cvelistv5 2021-03-17
cve-2021-24202 elementor Website Builder Improper Neutralization of Input During Web Page Generation HIGH N/A 0.75% cvelistv5 2021-03-17
cve-2021-4367 flothemes flo_forms Improper Neutralization of Input During Web Page Generation MEDIUM 6.4 N/A cvelistv5 2021-03-16
cve-2021-27562 Arm Trusted Firmware Out-of-Bounds Write Vulnerability HIGH N/A 3.06% cvelistv5 2021-03-15
cve-2021-27561 Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability CRITICAL 9.8 82.86% cvelistv5 2021-03-15
cve-2021-24186 Themeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command HIGH N/A 1.25% cvelistv5 2021-03-15
cve-2021-24182 Themeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command HIGH N/A 1.74% cvelistv5 2021-03-15
cve-2021-22502 Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability CRITICAL 9.8 96.74% cvelistv5 2021-03-15
cve-2020-26919 Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability HIGH N/A 57.47% cvelistv5 2021-03-15