Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2017-17562 | Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. | Embedthis / GoAhead | Dec 10, 2021 | — | View → |
| CVE-2019-0193 | The optional Apache Solr module DataImportHandler contains a code injection vulnerability. | Apache / Solr | Dec 10, 2021 | — | View → |
| CVE-2019-10758 | mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. | MongoDB / mongo-express | Dec 10, 2021 | — | View → |
| CVE-2019-13272 | Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root… | Linux / Kernel | Dec 10, 2021 | — | View → |
| CVE-2019-7238 | Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code… | Sonatype / Nexus Repository Manager | Dec 10, 2021 | — | View → |
| CVE-2020-17463 | FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. | Fuel CMS / Fuel CMS | Dec 10, 2021 | — | View → |
| CVE-2020-8816 | Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease. | Pi-hole / AdminLTE | Dec 10, 2021 | — | View → |
| CVE-2021-35394 | RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution. | Realtek / Jungle Software Development Kit (SDK) | Dec 10, 2021 | — | View → |
| CVE-2021-44168 | Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files. | Fortinet / FortiOS | Dec 10, 2021 | — | View → |
| CVE-2021-44228 | Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for… | Apache / Log4j2 | Dec 10, 2021 | Ransomware | View → |
| CVE-2021-44515 | Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop… | Zoho / Desktop Central | Dec 10, 2021 | — | View → |
| CVE-2018-14847 | MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write… | MikroTik / RouterOS | Dec 1, 2021 | — | View → |
| CVE-2020-11261 | Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon… | Qualcomm / Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | Dec 1, 2021 | — | View → |
| CVE-2021-37415 | Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without… | Zoho / ManageEngine ServiceDesk Plus (SDP) | Dec 1, 2021 | — | View → |
| CVE-2021-40438 | A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects… | Apache / Apache | Dec 1, 2021 | Ransomware | View → |
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to… | Zoho / ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | Dec 1, 2021 | — | View → |
| CVE-2021-22204 | Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing… | Perl / Exiftool | Nov 17, 2021 | — | View → |
| CVE-2021-40449 | Unspecified vulnerability allows for an authenticated user to escalate privileges. | Microsoft / Windows | Nov 17, 2021 | Ransomware | View → |
| CVE-2021-42292 | A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution. | Microsoft / Office | Nov 17, 2021 | — | View → |
| CVE-2021-42321 | An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code… | Microsoft / Exchange | Nov 17, 2021 | Ransomware | View → |