Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2020-0787 | Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can… | Microsoft / Windows | Jan 28, 2022 | Ransomware | View → |
| CVE-2020-5722 | Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for… | Grandstream / UCM6200 | Jan 28, 2022 | — | View → |
| CVE-2021-20038 | SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in… | SonicWall / SMA 100 Appliances | Jan 28, 2022 | Ransomware | View → |
| CVE-2022-22587 | Apple IOMobileFrameBuffer contains a memory corruption vulnerability which can allow a malicious application to execute arbitrary code… | Apple / iOS and macOS | Jan 28, 2022 | — | View → |
| CVE-2006-1547 | ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability that allows for denial-of-service (DoS). | Apache / Struts 1 | Jan 21, 2022 | — | View → |
| CVE-2012-0391 | The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability that allows for… | Apache / Struts 2 | Jan 21, 2022 | — | View → |
| CVE-2018-8453 | Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges. | Microsoft / Win32k | Jan 21, 2022 | Ransomware | View → |
| CVE-2021-35247 | SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability that allows attackers to build and send… | SolarWinds / Serv-U | Jan 21, 2022 | — | View → |
| CVE-2020-11978 | A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow. | Apache / Airflow | Jan 18, 2022 | — | View → |
| CVE-2020-13671 | Improper sanitization in the extension file names is present in Drupal core. | Drupal / Drupal core | Jan 18, 2022 | — | View → |
| CVE-2020-13927 | The previous default setting for Airflow's Experimental API was to allow all API requests without authentication. | Apache / Airflow's Experimental API | Jan 18, 2022 | — | View → |
| CVE-2020-14864 | Path traversal vulnerability, where an attacker can target the preview FilePath parameter of the getPreviewImage function to get access to… | Oracle / Intelligence Enterprise Edition | Jan 18, 2022 | — | View → |
| CVE-2021-21315 | In this vulnerability, an attacker can send a malicious payload that will exploit the name parameter. After successful exploitation,… | Npm package / System Information Library for Node.JS | Jan 18, 2022 | — | View → |
| CVE-2021-21975 | Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the… | VMware / vRealize Operations Manager API | Jan 18, 2022 | Ransomware | View → |
| CVE-2021-22991 | The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overflow vulnerability, leading to a bypassing of URL-based… | F5 / BIG-IP Traffic Management Microkernel | Jan 18, 2022 | — | View → |
| CVE-2021-25296 | Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server. | Nagios / Nagios XI | Jan 18, 2022 | — | View → |
| CVE-2021-25297 | Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server. | Nagios / Nagios XI | Jan 18, 2022 | — | View → |
| CVE-2021-25298 | Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server. | Nagios / Nagios XI | Jan 18, 2022 | — | View → |
| CVE-2021-32648 | In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account… | October CMS / October CMS | Jan 18, 2022 | — | View → |
| CVE-2021-33766 | Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email… | Microsoft / Exchange Server | Jan 18, 2022 | — | View → |