CISA Known Exploited Vulnerabilities
1,764 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2020-9054 |
Zyxel | Multiple Network-Attached Storage (NAS) Devices | — | 0.9999 | 2022-03-25 | 2022-04-15 | |
CVE-2020-7247 |
OpenBSD | OpenSMTPD | — | 0.9897 | 2022-03-25 | 2022-04-15 | |
CVE-2020-5410 |
VMware Tanzu | Spring Cloud Configuration (Config) Server | — | 0.9559 | 2022-03-25 | 2022-04-15 | |
CVE-2020-25223 |
Sophos | SG UTM | — | 0.9675 | 2022-03-25 | 2022-04-15 | |
CVE-2020-2506 |
QNAP Systems | Helpdesk | — | 0.0201 | 2022-03-25 | 2022-04-15 | |
CVE-2020-2021 |
Palo Alto Networks | PAN-OS | — | 0.0436 | 2022-03-25 | 2022-04-15 | RW |
CVE-2020-1956 |
Apache | Kylin | — | 0.9739 | 2022-03-25 | 2022-04-15 | |
CVE-2020-1631 |
Juniper | Junos OS | — | 0.0486 | 2022-03-25 | 2022-04-15 | |
CVE-2019-6340 |
Drupal | Core | — | 0.9202 | 2022-03-25 | 2022-04-15 | |
CVE-2019-2616 |
Oracle | BI Publisher (Formerly XML Publisher) | — | 0.9218 | 2022-03-25 | 2022-04-15 | |
CVE-2019-16920 |
D-Link | Multiple Routers | — | 1.0000 | 2022-03-25 | 2022-04-15 | |
CVE-2019-15107 |
Webmin | Webmin | — | 0.9971 | 2022-03-25 | 2022-04-15 | RW |
CVE-2019-12991 |
Citrix | SD-WAN and NetScaler | — | 0.7446 | 2022-03-25 | 2022-04-15 | |
CVE-2019-12989 |
Citrix | SD-WAN and NetScaler | — | 0.9496 | 2022-03-25 | 2022-04-15 | |
CVE-2019-11043 |
PHP | FastCGI Process Manager (FPM) | — | 0.9978 | 2022-03-25 | 2022-04-15 | RW |
CVE-2019-10068 |
Kentico | Xperience | — | 0.9507 | 2022-03-25 | 2022-04-15 | |
CVE-2019-1003030 |
Jenkins | Matrix Project Plugin | — | 0.9706 | 2022-03-25 | 2022-04-15 | |
CVE-2019-0903 |
Microsoft | Graphics Device Interface (GDI) | — | 0.2171 | 2022-03-25 | 2022-04-15 | |
CVE-2018-8414 |
Microsoft | Windows | — | 0.7262 | 2022-03-25 | 2022-04-15 | |
CVE-2018-8373 |
Microsoft | Internet Explorer Scripting Engine | — | 0.6151 | 2022-03-25 | 2022-04-15 | |
CVE-2018-6961 |
VMware | SD-WAN Edge | — | 0.8534 | 2022-03-25 | 2022-04-15 | |
CVE-2018-14839 |
LG | N1A1 NAS | — | 0.8925 | 2022-03-25 | 2022-04-15 | |
CVE-2018-1273 |
VMware Tanzu | Spring Data Commons | — | 0.9696 | 2022-03-25 | 2022-04-15 | RW |
CVE-2018-11138 |
Quest | KACE System Management Appliance | — | 0.9172 | 2022-03-25 | 2022-04-15 | RW |
CVE-2018-0147 |
Cisco | Secure Access Control System (ACS) | — | 0.1821 | 2022-03-25 | 2022-04-15 | |
CVE-2018-0125 |
Cisco | VPN Routers | — | 0.5519 | 2022-03-25 | 2022-04-15 | |
CVE-2017-6334 |
NETGEAR | DGN2200 Devices | — | 0.7264 | 2022-03-25 | 2022-04-15 | |
CVE-2017-6316 |
Citrix | NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | — | 0.7303 | 2022-03-25 | 2022-04-15 | |
CVE-2017-3881 |
Cisco | IOS and IOS XE | — | 0.9895 | 2022-03-25 | 2022-04-15 | |
CVE-2017-12617 |
Apache | Tomcat | — | 0.9997 | 2022-03-25 | 2022-04-15 | |
CVE-2017-12615 |
Apache | Tomcat | — | 0.9971 | 2022-03-25 | 2022-04-15 | RW |
CVE-2017-0146 |
Microsoft | Windows | — | 0.8975 | 2022-03-25 | 2022-04-15 | RW |
CVE-2016-7892 |
Adobe | Flash Player | — | 0.1879 | 2022-03-25 | 2022-04-15 | |
CVE-2016-4171 |
Adobe | Flash Player | — | 0.2006 | 2022-03-25 | 2022-04-15 | |
CVE-2016-1555 |
NETGEAR | Wireless Access Point (WAP) Devices | — | 0.9829 | 2022-03-25 | 2022-04-15 | |
CVE-2016-11021 |
D-Link | DCS-930L Devices | — | 0.6958 | 2022-03-25 | 2022-04-15 | |
CVE-2016-10174 |
NETGEAR | WNR2000v5 Router | — | 0.8333 | 2022-03-25 | 2022-04-15 | |
CVE-2016-0752 |
Rails | Ruby on Rails | — | 0.9554 | 2022-03-25 | 2022-04-15 | |
CVE-2015-4068 |
Arcserve | Unified Data Protection (UDP) | — | 0.6364 | 2022-03-25 | 2022-04-15 | |
CVE-2015-3035 |
TP-Link | Multiple Archer Devices | — | 0.8395 | 2022-03-25 | 2022-04-15 | |
CVE-2015-1427 |
Elastic | Elasticsearch | — | 0.9991 | 2022-03-25 | 2022-04-15 | |
CVE-2015-1187 |
D-Link and TRENDnet | Multiple Devices | — | 0.8286 | 2022-03-25 | 2022-04-15 | |
CVE-2015-0666 |
Cisco | Prime Data Center Network Manager (DCNM) | — | 0.4038 | 2022-03-25 | 2022-04-15 | |
CVE-2014-6332 |
Microsoft | Windows | — | 0.9492 | 2022-03-25 | 2022-04-15 | |
CVE-2014-6324 |
Microsoft | Kerberos Key Distribution Center (KDC) | — | 0.8733 | 2022-03-25 | 2022-04-15 | |
CVE-2014-6287 |
Rejetto | HTTP File Server (HFS) | — | 0.9932 | 2022-03-25 | 2022-04-15 | |
CVE-2014-3120 |
Elastic | Elasticsearch | — | 0.8856 | 2022-03-25 | 2022-04-15 | |
CVE-2014-0130 |
Rails | Ruby on Rails | — | 0.5370 | 2022-03-25 | 2022-04-15 | |
CVE-2013-5223 |
D-Link | DSL-2760U | — | 0.5083 | 2022-03-25 | 2022-04-15 | |
CVE-2013-4810 |
Hewlett Packard (HP) | ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management | — | 0.7947 | 2022-03-25 | 2022-04-15 |