Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2016-11021 | D-Link DCS-930L Devices | – | – | |
| CVE-2016-10174 | NETGEAR WNR2000v5 Router | – | – | |
| CVE-2016-0752 | Rails Ruby on Rails | – | – | |
| CVE-2015-4068 | Arcserve Unified Data Protection (UDP) | – | – | |
| CVE-2015-3035 | TP-Link Multiple Archer Devices | – | – | |
| CVE-2015-1427 | Elasticsearch | – | – | |
| CVE-2015-1187 | D-Link and TRENDnet Multiple Devices | – | – | |
| CVE-2015-0666 | Cisco Prime Data Center Network Manager (DCNM) | – | – | |
| CVE-2014-6332 | Microsoft Windows | – | – | |
| CVE-2014-6324 | Microsoft Kerberos Key Distribution Center (KDC) | – | – | |
| CVE-2014-6287 | Rejetto HTTP File Server (HFS) | – | – | |
| CVE-2014-3120 | Elasticsearch | – | – | |
| CVE-2014-0130 | Rails Ruby on Rails | – | – | |
| CVE-2013-5223 | D-Link DSL-2760U | – | – | |
| CVE-2013-4810 | Hewlett Packard (HP) ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management | – | – | |
| CVE-2013-2251 | Apache Struts | – | – | |
| CVE-2012-1823 | PHP | – | – | |
| CVE-2010-4345 | Exim | – | – | |
| CVE-2010-4344 | Exim | – | – | |
| CVE-2010-3035 | Cisco IOS XR | – | – | |
| CVE-2010-2861 | Adobe ColdFusion | – | – | |
| CVE-2009-2055 | Cisco IOS XR | – | – | |
| CVE-2009-1151 | phpMyAdmin | – | – | |
| CVE-2009-0927 | Adobe Reader and Acrobat | – | – | |
| CVE-2005-2773 | Hewlett Packard (HP) OpenView Network Node Manager | – | – | |
| CVE-2020-5135 | SonicWall SonicOS | – | – | |
| CVE-2019-1405 | Microsoft Windows | – | – | |
| CVE-2019-1322 | Microsoft Windows | – | – | |
| CVE-2019-1315 | Microsoft Windows | – | – | |
| CVE-2019-1253 | Microsoft Windows | – | – | |
| CVE-2019-1132 | Microsoft Win32k | – | – | |
| CVE-2019-1129 | Microsoft Windows | – | – | |
| CVE-2019-1069 | Microsoft Task Scheduler | – | – | |
| CVE-2019-1064 | Microsoft Windows | – | – | |
| CVE-2019-0841 | Microsoft Windows | – | – | |
| CVE-2019-0543 | Microsoft Windows | – | – | |
| CVE-2018-8120 | Microsoft Win32k | – | – | |
| CVE-2017-0101 | Microsoft Windows | – | – | |
| CVE-2016-3309 | Microsoft Windows | – | – | |
| CVE-2015-2546 | Microsoft Win32k | – | – | |
| CVE-2022-26486 | Mozilla Firefox | – | – | |
| CVE-2022-26485 | Mozilla Firefox | – | – | |
| CVE-2021-21973 | VMware vCenter Server and Cloud Foundation | – | – | |
| CVE-2020-8218 | Pulse Secure Pulse Connect Secure | – | – | |
| CVE-2019-11581 | Atlassian Jira Server and Data Center | – | – | |
| CVE-2017-6077 | NETGEAR Wireless Router DGN2200 | – | – | |
| CVE-2016-6277 | NETGEAR Multiple Routers | – | – | |
| CVE-2013-0631 | Adobe ColdFusion | – | – | |
| CVE-2013-0629 | Adobe ColdFusion | – | – | |
| CVE-2013-0625 | Adobe ColdFusion | – | – |