Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2021-38648 | Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing… | Microsoft / Open Management Infrastructure (OMI) | Nov 3, 2021 | — | View → |
| CVE-2021-38649 | Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing… | Microsoft / Open Management Infrastructure (OMI) | Nov 3, 2021 | — | View → |
| CVE-2021-40444 | Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution. | Microsoft / MSHTML | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-40539 | Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote… | Zoho / ManageEngine | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-41773 | Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside… | Apache / HTTP Server | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-42013 | Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside… | Apache / HTTP Server | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-42258 | BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated,… | BQE / BillQuick Web Suite | Nov 3, 2021 | Ransomware | View → |
1761–1767 of 1767
PrevNext