Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2020-13927 | Apache Airflow's Experimental API | – | – | |
| CVE-2020-13671 | Drupal core | – | – | |
| CVE-2020-11978 | Apache Airflow | – | – | |
| CVE-2021-36260 | Hikvision Security cameras web server | – | – | |
| CVE-2021-27860 | FatPipe WARP, IPVPN, and MPVPN software | – | – | |
| CVE-2021-22017 | VMware vCenter Server | – | – | |
| CVE-2020-6572 | Google Chrome Media | – | – | |
| CVE-2019-9670 | Synacor Zimbra Collaboration Suite (ZCS) | – | – | |
| CVE-2019-7609 | Elastic Kibana | – | – | |
| CVE-2019-2725 | Oracle WebLogic Server | – | – | |
| CVE-2019-1579 | Palo Alto Networks PAN-OS | – | – | |
| CVE-2019-1458 | Microsoft Win32k | – | – | |
| CVE-2019-10149 | Exim Mail Transfer Agent (MTA) | – | – | |
| CVE-2018-13383 | Fortinet FortiOS and FortiProxy | – | – | |
| CVE-2018-13382 | Fortinet FortiOS and FortiProxy | – | – | |
| CVE-2017-1000486 | Primetek Primefaces Application | – | – | |
| CVE-2015-7450 | IBM WebSphere Application Server and Server Hypervisor Edition | – | – | |
| CVE-2013-3900 | Microsoft WinVerifyTrust function | – | – | |
| CVE-2021-43890 | Microsoft Windows | – | – | |
| CVE-2021-4102 | Google Chromium V8 | – | – | |
| CVE-2021-44515 | Zoho Desktop Central | – | – | |
| CVE-2021-44228 | Apache Log4j2 | – | – | |
| CVE-2021-44168 | Fortinet FortiOS | – | – | |
| CVE-2021-35394 | Realtek Jungle Software Development Kit (SDK) | – | – | |
| CVE-2020-8816 | Pi-hole AdminLTE | – | – | |
| CVE-2020-17463 | Fuel CMS | – | – | |
| CVE-2019-7238 | Sonatype Nexus Repository Manager | – | – | |
| CVE-2019-13272 | Linux Kernel | – | – | |
| CVE-2019-10758 | MongoDB mongo-express | – | – | |
| CVE-2019-0193 | Apache Solr | – | – | |
| CVE-2017-17562 | Embedthis GoAhead | – | – | |
| CVE-2017-12149 | Red Hat JBoss Application Server | – | – | |
| CVE-2010-1871 | Red Hat JBoss Seam 2 | – | – | |
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | – | – | |
| CVE-2021-40438 | Apache | – | – | |
| CVE-2021-37415 | Zoho ManageEngine ServiceDesk Plus (SDP) | – | – | |
| CVE-2020-11261 | Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | – | – | |
| CVE-2018-14847 | MikroTik RouterOS | – | – | |
| CVE-2021-42321 | Microsoft Exchange | – | – | |
| CVE-2021-42292 | Microsoft Office | – | – | |
| CVE-2021-40449 | Microsoft Windows | – | – | |
| CVE-2021-22204 | Perl Exiftool | – | – | |
| CVE-2021-42258 | BQE BillQuick Web Suite | – | – | |
| CVE-2021-42013 | Apache HTTP Server | – | – | |
| CVE-2021-41773 | Apache HTTP Server | – | – | |
| CVE-2021-40539 | Zoho ManageEngine | – | – | |
| CVE-2021-40444 | Microsoft MSHTML | – | – | |
| CVE-2021-38649 | Microsoft Open Management Infrastructure (OMI) | – | – | |
| CVE-2021-38648 | Microsoft Open Management Infrastructure (OMI) | – | – | |
| CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) | – | – |