CISA Known Exploited Vulnerabilities
1,764 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2017-1000486 |
Primetek | Primefaces Application | — | 0.9410 | 2022-01-10 | 2022-07-10 | |
CVE-2019-7609 |
Elastic | Kibana | — | 0.9534 | 2022-01-10 | 2022-07-10 | |
CVE-2021-27860 |
FatPipe | WARP, IPVPN, and MPVPN software | — | 0.3968 | 2022-01-10 | 2022-01-24 | |
CVE-2021-43890 |
Microsoft | Windows | — | 0.1129 | 2021-12-15 | 2021-12-29 | RW |
CVE-2021-4102 |
Chromium V8 | — | 0.0784 | 2021-12-15 | 2021-12-29 | ||
CVE-2021-44515 |
Zoho | Desktop Central | — | 0.9987 | 2021-12-10 | 2021-12-24 | |
CVE-2019-13272 |
Linux | Kernel | — | 0.5220 | 2021-12-10 | 2022-06-10 | |
CVE-2021-35394 |
Realtek | Jungle Software Development Kit (SDK) | — | 0.9988 | 2021-12-10 | 2021-12-24 | |
CVE-2019-7238 |
Sonatype | Nexus Repository Manager | — | 0.7663 | 2021-12-10 | 2022-06-10 | |
CVE-2019-0193 |
Apache | Solr | — | 0.8355 | 2021-12-10 | 2022-06-10 | |
CVE-2021-44168 |
Fortinet | FortiOS | — | 0.0091 | 2021-12-10 | 2021-12-24 | |
CVE-2017-17562 |
Embedthis | GoAhead | — | 0.9713 | 2021-12-10 | 2022-06-10 | |
CVE-2017-12149 |
Red Hat | JBoss Application Server | — | 0.9071 | 2021-12-10 | 2022-06-10 | RW |
CVE-2010-1871 |
Red Hat | JBoss Seam 2 | — | 0.8340 | 2021-12-10 | 2022-06-10 | |
CVE-2020-17463 |
Fuel CMS | Fuel CMS | — | 0.8969 | 2021-12-10 | 2022-06-10 | |
CVE-2020-8816 |
Pi-hole | AdminLTE | — | 0.7834 | 2021-12-10 | 2022-06-10 | |
CVE-2019-10758 |
MongoDB | mongo-express | — | 0.8473 | 2021-12-10 | 2022-06-10 | |
CVE-2021-44228 |
Apache | Log4j2 | — | 1.0000 | 2021-12-10 | 2021-12-24 | RW |
CVE-2020-11261 |
Qualcomm | Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | — | 0.0160 | 2021-12-01 | 2022-06-01 | |
CVE-2018-14847 |
MikroTik | RouterOS | — | 0.9598 | 2021-12-01 | 2022-06-01 | |
CVE-2021-37415 |
Zoho | ManageEngine ServiceDesk Plus (SDP) | — | 0.9982 | 2021-12-01 | 2021-12-15 | |
CVE-2021-40438 |
Apache | Apache | — | 1.0000 | 2021-12-01 | 2021-12-15 | RW |
CVE-2021-44077 |
Zoho | ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | — | 0.9330 | 2021-12-01 | 2021-12-15 | |
CVE-2021-22204 |
Perl | Exiftool | — | 0.9998 | 2021-11-17 | 2021-12-01 | |
CVE-2021-40449 |
Microsoft | Windows | — | 0.8194 | 2021-11-17 | 2021-12-01 | RW |
CVE-2021-42321 |
Microsoft | Exchange | — | 0.9174 | 2021-11-17 | 2021-12-01 | RW |
CVE-2021-42292 |
Microsoft | Office | — | 0.4300 | 2021-11-17 | 2021-12-01 | |
CVE-2021-27104 |
Accellion | FTA | — | 0.5669 | 2021-11-03 | 2021-11-17 | RW |
CVE-2021-27102 |
Accellion | FTA | — | 0.0365 | 2021-11-03 | 2021-11-17 | RW |
CVE-2021-27101 |
Accellion | FTA | — | 0.0600 | 2021-11-03 | 2021-11-17 | RW |
CVE-2021-27103 |
Accellion | FTA | — | 0.1141 | 2021-11-03 | 2021-11-17 | RW |
CVE-2021-21017 |
Adobe | Acrobat and Reader | — | 0.8633 | 2021-11-03 | 2021-11-17 | |
CVE-2021-28550 |
Adobe | Acrobat and Reader | — | 0.5185 | 2021-11-03 | 2021-11-17 | |
CVE-2018-4939 |
Adobe | ColdFusion | — | 0.6178 | 2021-11-03 | 2022-05-03 | |
CVE-2018-15961 |
Adobe | ColdFusion | — | 0.9995 | 2021-11-03 | 2022-05-03 | |
CVE-2018-4878 |
Adobe | Flash Player | — | 0.9028 | 2021-11-03 | 2022-05-03 | RW |
CVE-2020-5735 |
Amcrest | Cameras and Network Video Recorder (NVR) | — | 0.3622 | 2021-11-03 | 2022-05-03 | |
CVE-2019-2215 |
Android | Android Kernel | — | 0.7210 | 2021-11-03 | 2022-05-03 | |
CVE-2020-0041 |
Android | Android Kernel | — | 0.0325 | 2021-11-03 | 2022-05-03 | |
CVE-2020-0069 |
MediaTek | Multiple Chipsets | — | 0.0137 | 2021-11-03 | 2022-05-03 | |
CVE-2017-9805 |
Apache | Struts | — | 0.9940 | 2021-11-03 | 2022-05-03 | |
CVE-2021-42013 |
Apache | HTTP Server | — | 0.9996 | 2021-11-03 | 2021-11-17 | RW |
CVE-2021-41773 |
Apache | HTTP Server | — | 0.9999 | 2021-11-03 | 2021-11-17 | RW |
CVE-2019-0211 |
Apache | HTTP Server | — | 0.6501 | 2021-11-03 | 2022-05-03 | |
CVE-2016-4437 |
Apache | Shiro | — | 0.9304 | 2021-11-03 | 2022-05-03 | |
CVE-2019-17558 |
Apache | Solr | — | 0.9857 | 2021-11-03 | 2022-05-03 | |
CVE-2020-17530 |
Apache | Struts | — | 0.9625 | 2021-11-03 | 2022-05-03 | |
CVE-2017-5638 |
Apache | Struts | — | 1.0000 | 2021-11-03 | 2022-05-03 | RW |
CVE-2018-11776 |
Apache | Struts | — | 1.0000 | 2021-11-03 | 2022-05-03 | |
CVE-2021-30858 |
Apple | iOS, iPadOS, and macOS | — | 0.1338 | 2021-11-03 | 2021-11-17 |