Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2013-2551 | Microsoft Internet Explorer | – | – | |
| CVE-2013-2465 | Oracle Java SE | – | – | |
| CVE-2013-1690 | Mozilla Firefox and Thunderbird | – | – | |
| CVE-2012-5076 | Oracle Java SE | – | – | |
| CVE-2012-2539 | Microsoft Word | – | – | |
| CVE-2012-2034 | Adobe Flash Player | – | – | |
| CVE-2012-0518 | Oracle Fusion Middleware | – | – | |
| CVE-2011-2005 | Microsoft Ancillary Function Driver (afd.sys) | – | – | |
| CVE-2010-4398 | Microsoft Windows | – | – | |
| CVE-2022-26318 | WatchGuard Firebox and XTM Appliances | – | – | |
| CVE-2022-26143 | Mitel MiCollab, MiVoice Business Express | – | – | |
| CVE-2022-21999 | Microsoft Windows | – | – | |
| CVE-2021-42237 | Sitecore XP | – | – | |
| CVE-2021-22941 | Citrix ShareFile | – | – | |
| CVE-2020-9377 | D-Link DIR-610 Devices | – | – | |
| CVE-2020-9054 | Zyxel Multiple Network-Attached Storage (NAS) Devices | – | – | |
| CVE-2020-7247 | OpenBSD OpenSMTPD | – | – | |
| CVE-2020-5410 | VMware Tanzu Spring Cloud Configuration (Config) Server | – | – | |
| CVE-2020-25223 | Sophos SG UTM | – | – | |
| CVE-2020-2506 | QNAP Systems Helpdesk | – | – | |
| CVE-2020-2021 | Palo Alto Networks PAN-OS | – | – | |
| CVE-2020-1956 | Apache Kylin | – | – | |
| CVE-2020-1631 | Juniper Junos OS | – | – | |
| CVE-2019-6340 | Drupal Core | – | – | |
| CVE-2019-2616 | Oracle BI Publisher (Formerly XML Publisher) | – | – | |
| CVE-2019-16920 | D-Link Multiple Routers | – | – | |
| CVE-2019-15107 | Webmin | – | – | |
| CVE-2019-12991 | Citrix SD-WAN and NetScaler | – | – | |
| CVE-2019-12989 | Citrix SD-WAN and NetScaler | – | – | |
| CVE-2019-11043 | PHP FastCGI Process Manager (FPM) | – | – | |
| CVE-2019-10068 | Kentico Xperience | – | – | |
| CVE-2019-1003030 | Jenkins Matrix Project Plugin | – | – | |
| CVE-2019-0903 | Microsoft Graphics Device Interface (GDI) | – | – | |
| CVE-2018-8414 | Microsoft Windows | – | – | |
| CVE-2018-8373 | Microsoft Internet Explorer Scripting Engine | – | – | |
| CVE-2018-6961 | VMware SD-WAN Edge | – | – | |
| CVE-2018-14839 | LG N1A1 NAS | – | – | |
| CVE-2018-1273 | VMware Tanzu Spring Data Commons | – | – | |
| CVE-2018-11138 | Quest KACE System Management Appliance | – | – | |
| CVE-2018-0147 | Cisco Secure Access Control System (ACS) | – | – | |
| CVE-2018-0125 | Cisco VPN Routers | – | – | |
| CVE-2017-6334 | NETGEAR DGN2200 Devices | – | – | |
| CVE-2017-6316 | Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | – | – | |
| CVE-2017-3881 | Cisco IOS and IOS XE | – | – | |
| CVE-2017-12617 | Apache Tomcat | – | – | |
| CVE-2017-12615 | Apache Tomcat | – | – | |
| CVE-2017-0146 | Microsoft Windows | – | – | |
| CVE-2016-7892 | Adobe Flash Player | – | – | |
| CVE-2016-4171 | Adobe Flash Player | – | – | |
| CVE-2016-1555 | NETGEAR Wireless Access Point (WAP) Devices | – | – |