Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2022-23134 | Zabbix Frontend | – | – | |
| CVE-2022-23131 | Zabbix Frontend | – | – | |
| CVE-2022-24086 | Adobe Commerce and Magento Open Source | – | – | |
| CVE-2022-0609 | Google Chromium Animation | – | – | |
| CVE-2019-0752 | Microsoft Internet Explorer | – | – | |
| CVE-2018-8174 | Microsoft Windows | – | – | |
| CVE-2018-20250 | RARLAB WinRAR | – | – | |
| CVE-2018-15982 | Adobe Flash Player | – | – | |
| CVE-2017-9841 | PHPUnit | – | – | |
| CVE-2014-1761 | Microsoft Word | – | – | |
| CVE-2013-3906 | Microsoft Graphics Component | – | – | |
| CVE-2022-22620 | Apple iOS, iPadOS, and macOS | – | – | |
| CVE-2021-36934 | Microsoft Windows | – | – | |
| CVE-2020-0796 | Microsoft SMBv3 | – | – | |
| CVE-2018-1000861 | Jenkins Stapler Web Framework | – | – | |
| CVE-2017-9791 | Apache Struts 1 | – | – | |
| CVE-2017-8464 | Microsoft Windows | – | – | |
| CVE-2017-10271 | Oracle WebLogic Server | – | – | |
| CVE-2017-0263 | Microsoft Win32k | – | – | |
| CVE-2017-0262 | Microsoft Office | – | – | |
| CVE-2017-0145 | Microsoft SMBv1 | – | – | |
| CVE-2017-0144 | Microsoft SMBv1 | – | – | |
| CVE-2016-3088 | Apache ActiveMQ | – | – | |
| CVE-2015-2051 | D-Link DIR-645 Router | – | – | |
| CVE-2015-1635 | Microsoft HTTP.sys | – | – | |
| CVE-2015-1130 | Apple OS X | – | – | |
| CVE-2014-4404 | Apple OS X | – | – | |
| CVE-2022-21882 | Microsoft Win32k | – | – | |
| CVE-2022-22587 | Apple iOS and macOS | – | – | |
| CVE-2021-20038 | SonicWall SMA 100 Appliances | – | – | |
| CVE-2020-5722 | Grandstream UCM6200 | – | – | |
| CVE-2020-0787 | Microsoft Windows | – | – | |
| CVE-2017-5689 | Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability | – | – | |
| CVE-2014-7169 | GNU Bourne-Again Shell (Bash) | – | – | |
| CVE-2014-6271 | GNU Bourne-Again Shell (Bash) | – | – | |
| CVE-2014-1776 | Microsoft Internet Explorer | – | – | |
| CVE-2021-35247 | SolarWinds Serv-U | – | – | |
| CVE-2018-8453 | Microsoft Win32k | – | – | |
| CVE-2012-0391 | Apache Struts 2 | – | – | |
| CVE-2006-1547 | Apache Struts 1 | – | – | |
| CVE-2021-40870 | Aviatrix Controller | – | – | |
| CVE-2021-33766 | Microsoft Exchange Server | – | – | |
| CVE-2021-32648 | October CMS | – | – | |
| CVE-2021-25298 | Nagios XI | – | – | |
| CVE-2021-25297 | Nagios XI | – | – | |
| CVE-2021-25296 | Nagios XI | – | – | |
| CVE-2021-22991 | F5 BIG-IP Traffic Management Microkernel | – | – | |
| CVE-2021-21975 | VMware vRealize Operations Manager API | – | – | |
| CVE-2021-21315 | Npm package System Information Library for Node.JS | – | – | |
| CVE-2020-14864 | Oracle Intelligence Enterprise Edition | – | – |