Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2019-13608 | Citrix StoreFront Server contains an XML External Entity (XXE) processing vulnerability that may allow an unauthenticated attacker to… | Citrix / StoreFront Server | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-1367 | Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful… | Microsoft / Internet Explorer | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-1429 | Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the… | Microsoft / Internet Explorer | Nov 3, 2021 | — | View → |
| CVE-2019-15752 | Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse… | Docker / Desktop Community Edition | Nov 3, 2021 | — | View → |
| CVE-2019-15949 | Nagios XI contains a remote code execution vulnerability in which a user can modify the check_plugin executable and insert malicious… | Nagios / Nagios XI | Nov 3, 2021 | — | View → |
| CVE-2019-16256 | SIMalliance Toolbox Browser contains an command injection vulnerability that could allow remote attackers to retrieve location and IMEI… | SIMalliance / Toolbox Browser | Nov 3, 2021 | — | View → |
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an… | Cisco / Small Business RV320 and RV325 Routers | Nov 3, 2021 | — | View → |
| CVE-2019-16759 | The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via the widgetConfig[code]… | vBulletin / vBulletin | Nov 3, 2021 | — | View → |
| CVE-2019-17026 | Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler… | Mozilla / Firefox and Thunderbird | Nov 3, 2021 | — | View → |
| CVE-2019-17558 | The Apache Solr VelocityResponseWriter plug-in contains an unspecified vulnerability which can allow for remote code execution. | Apache / Solr | Nov 3, 2021 | — | View → |
| CVE-2019-18187 | Trend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a specific folder on the… | Trend Micro / OfficeScan | Nov 3, 2021 | — | View → |
| CVE-2019-18935 | Progress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted data vulnerability through RadAsyncUpload which leads to code… | Progress / Telerik UI for ASP.NET AJAX | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-18988 | TeamViewer Desktop allows for bypass of remote-login access control because the same AES key is used for different customers'… | TeamViewer / Desktop | Nov 3, 2021 | — | View → |
| CVE-2019-19356 | Netis WF2419 devices contains an unspecified vulnerability that allows an attacker to perform remote code execution as root through the… | Netis / WF2419 Devices | Nov 3, 2021 | — | View → |
| CVE-2019-19781 | Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an… | Citrix / Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-20085 | TVT devices utilizing NVMS-1000 software contain a directory traversal vulnerability via GET /.. requests. | TVT / NVMS-1000 | Nov 3, 2021 | — | View → |
| CVE-2019-2215 | Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux… | Android / Android Kernel | Nov 3, 2021 | — | View → |
| CVE-2019-3396 | Atlassian Confluence Server and Data Center contain a server-side template injection vulnerability that may allow an attacker to achieve… | Atlassian / Confluence Server and Data Server | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-3398 | Atlassian Confluence Server and Data Center contain a path traversal vulnerability in the downloadallattachments resource that may allow a… | Atlassian / Confluence Server and Data Center | Nov 3, 2021 | — | View → |
| CVE-2019-4716 | IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then… | IBM / Planning Analytics | Nov 3, 2021 | — | View → |