Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2021-36260 Hikvision Improper Input Validation CRITICAL 9.8 99.87% cvelistv5 2022-01-10
cve-2021-27860 FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit CRITICAL 9.8 39.82% cvelistv5 2022-01-10
cve-2021-22017 VMware vCenter Server Improper Access Control MEDIUM 5.3 49.18% cvelistv5 2022-01-10
cve-2020-6572 Google Chrome Media Use-After-Free Vulnerability HIGH 8.8 10.59% cvelistv5 2022-01-10
cve-2019-9670 Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference CRITICAL 9.8 99.99% cvelistv5 2022-01-10
cve-2019-7609 kibana: Arbitrary code execution flaw in the Timelion visualizer HIGH 7.5 95.34% cvelistv5 2026-02-23
cve-2019-2725 Oracle WebLogic Server, Injection CRITICAL 9.8 99.96% cvelistv5 2022-01-10
cve-2019-1579 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability HIGH 8.1 46.24% cvelistv5 2022-01-10
cve-2019-1458 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 74.26% cvelistv5 2022-01-10
cve-2019-10149 exim: Remote command execution in deliver_message() function in /src/deliver.c CRITICAL 9.0 99.96% cvelistv5 2025-11-21
cve-2018-13383 Fortinet FortiOS and FortiProxy Out-of-bounds Write MEDIUM 4.3 33.65% cvelistv5 2022-01-10
cve-2018-13382 Fortinet FortiOS and FortiProxy Improper Authorization CRITICAL 9.1 81.69% cvelistv5 2022-01-10
cve-2017-1000486 Primetek Primefaces Remote Code Execution Vulnerability CRITICAL 9.8 94.10% cvelistv5 2022-01-10
cve-2015-7450 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. HIGH N/A 97.76% cvelistv5 2022-01-10
cve-2013-3900 Microsoft WinVerifyTrust function Remote Code Execution HIGH 8.8 44.65% cvelistv5 2022-01-10
cve-2021-43890 Microsoft Windows AppX Installer Spoofing Vulnerability HIGH 7.1 10.29% cvelistv5 2021-12-15
cve-2021-4102 Google Chromium V8 Use-After-Free Vulnerability HIGH N/A 7.84% cvelistv5 2021-12-15
cve-2021-44515 Zoho Desktop Central Authentication Bypass Vulnerability CRITICAL 9.8 99.87% cvelistv5 2021-12-10
cve-2021-44228 SUSE CVE CVE-2021-44228 CRITICAL 9.8 100.00% cvelistv5 2026-08-31
cve-2021-44168 Fortinet FortiOS Arbitrary File Download LOW 3.3 0.87% cvelistv5 2021-12-10
cve-2021-35394 Realtek Jungle SDK Remote Code Execution Vulnerability CRITICAL 9.8 99.86% cvelistv5 2021-12-10
cve-2020-8816 Pi-Hole AdminLTE Remote Code Execution Vulnerability CRITICAL 9.1 78.19% cvelistv5 2021-12-10
cve-2020-17463 Fuel CMS SQL Injection Vulnerability CRITICAL 9.8 89.69% cvelistv5 2021-12-10
cve-2019-7238 Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability CRITICAL 9.8 77.15% cvelistv5 2021-12-10
cve-2019-13272 kernel: broken permission and object lifetime handling for PTRACE_TRACEME HIGH 7.8 52.20% cvelistv5 2026-06-28
cve-2019-10758 MongoDB mongo-express Remote Code Execution Vulnerability HIGH N/A 84.73% cvelistv5 2021-12-10
cve-2019-0193 solr: Remote Code Execution via DataImportHandler CRITICAL 9.1 83.55% cvelistv5 2026-08-04
cve-2017-17562 Embedthis GoAhead Remote Code Execution Vulnerability HIGH N/A 96.26% cvelistv5 2021-12-10
cve-2017-12149 Red Hat JBoss Application Server Remote Code Execution Vulnerability CRITICAL N/A 90.71% cvelistv5 2021-12-10
cve-2010-1871 Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability HIGH N/A 83.40% cvelistv5 2021-12-10