Vulnerabilities added to CISA KEV in 2021
311 entries, newest first.
| CVE | Name | Vendor | Added | Ransomware |
|---|---|---|---|---|
| CVE-2021-4102 | Google Chromium V8 Use-After-Free Vulnerability | 15 Dec 2021 | Unknown | |
| CVE-2021-43890 | Microsoft Windows AppX Installer Spoofing Vulnerability | Microsoft | 15 Dec 2021 | Known |
| CVE-2010-1871 | Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability | Red Hat | 10 Dec 2021 | Unknown |
| CVE-2017-12149 | Red Hat JBoss Application Server Remote Code Execution Vulnerability | Red Hat | 10 Dec 2021 | Known |
| CVE-2017-17562 | Embedthis GoAhead Remote Code Execution Vulnerability | Embedthis | 10 Dec 2021 | Unknown |
| CVE-2019-0193 | Apache Solr DataImportHandler Code Injection Vulnerability | Apache | 10 Dec 2021 | Unknown |
| CVE-2019-10758 | MongoDB mongo-express Remote Code Execution Vulnerability | MongoDB | 10 Dec 2021 | Unknown |
| CVE-2019-13272 | Linux Kernel Improper Privilege Management Vulnerability | Linux | 10 Dec 2021 | Unknown |
| CVE-2019-7238 | Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability | Sonatype | 10 Dec 2021 | Unknown |
| CVE-2020-17463 | Fuel CMS SQL Injection Vulnerability | Fuel CMS | 10 Dec 2021 | Unknown |
| CVE-2020-8816 | Pi-Hole AdminLTE Remote Code Execution Vulnerability | Pi-hole | 10 Dec 2021 | Unknown |
| CVE-2021-35394 | Realtek Jungle SDK Remote Code Execution Vulnerability | Realtek | 10 Dec 2021 | Unknown |
| CVE-2021-44168 | Fortinet FortiOS Arbitrary File Download | Fortinet | 10 Dec 2021 | Unknown |
| CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability | Apache | 10 Dec 2021 | Known |
| CVE-2021-44515 | Zoho Desktop Central Authentication Bypass Vulnerability | Zoho | 10 Dec 2021 | Unknown |
| CVE-2018-14847 | MikroTik Router OS Directory Traversal Vulnerability | MikroTik | 1 Dec 2021 | Unknown |
| CVE-2020-11261 | Qualcomm Multiple Chipsets Improper Input Validation Vulnerability | Qualcomm | 1 Dec 2021 | Unknown |
| CVE-2021-37415 | Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability | Zoho | 1 Dec 2021 | Unknown |
| CVE-2021-40438 | Apache HTTP Server-Side Request Forgery (SSRF) | Apache | 1 Dec 2021 | Known |
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability | Zoho | 1 Dec 2021 | Unknown |
| CVE-2021-22204 | ExifTool Remote Code Execution Vulnerability | Perl | 17 Nov 2021 | Unknown |
| CVE-2021-40449 | Microsoft Windows Win32k Privilege Escalation Vulnerability | Microsoft | 17 Nov 2021 | Known |
| CVE-2021-42292 | Microsoft Excel Security Feature Bypass | Microsoft | 17 Nov 2021 | Unknown |
| CVE-2021-42321 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | 17 Nov 2021 | Known |
| CVE-2010-5326 | SAP NetWeaver Remote Code Execution Vulnerability | SAP | 3 Nov 2021 | Unknown |
| CVE-2012-0158 | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2012-3152 | Oracle Fusion Middleware Unspecified Vulnerability | Oracle | 3 Nov 2021 | Unknown |
| CVE-2014-1812 | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2015-1641 | Microsoft Office Memory Corruption Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2015-4852 | Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability | Oracle | 3 Nov 2021 | Unknown |
| CVE-2016-0167 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2016-0185 | Microsoft Windows Media Center Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2016-3235 | Microsoft Office OLE DLL Side Loading Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2016-3643 | SolarWinds Virtualization Manager Privilege Escalation Vulnerability | SolarWinds | 3 Nov 2021 | Unknown |
| CVE-2016-3715 | ImageMagick Arbitrary File Deletion Vulnerability | ImageMagick | 3 Nov 2021 | Unknown |
| CVE-2016-3718 | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability | ImageMagick | 3 Nov 2021 | Unknown |
| CVE-2016-3976 | SAP NetWeaver Directory Traversal Vulnerability | SAP | 3 Nov 2021 | Unknown |
| CVE-2016-4437 | Apache Shiro Code Execution Vulnerability | Apache | 3 Nov 2021 | Unknown |
| CVE-2016-7255 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2016-9563 | SAP NetWeaver XML External Entity (XXE) Vulnerability | SAP | 3 Nov 2021 | Unknown |
| CVE-2017-0143 | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2017-0199 | Microsoft Office and WordPad Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2017-11774 | Microsoft Office Outlook Security Feature Bypass Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2017-11882 | Microsoft Office Memory Corruption Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2017-16651 | Roundcube Webmail File Disclosure Vulnerability | Roundcube | 3 Nov 2021 | Unknown |
| CVE-2017-5638 | Apache Struts Remote Code Execution Vulnerability | Apache | 3 Nov 2021 | Known |
| CVE-2017-6327 | Symantec Messaging Gateway Remote Code Execution Vulnerability | Symantec | 3 Nov 2021 | Unknown |
| CVE-2017-7269 | Microsoft Windows Server Buffer Overflow Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2017-8759 | Microsoft .NET Framework Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2017-9248 | Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability | Progress | 3 Nov 2021 | Unknown |
| CVE-2017-9805 | Apache Struts Deserialization of Untrusted Data Vulnerability | Apache | 3 Nov 2021 | Unknown |
| CVE-2017-9822 | DotNetNuke (DNN) Remote Code Execution Vulnerability | DotNetNuke (DNN) | 3 Nov 2021 | Known |
| CVE-2018-0171 | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | Cisco | 3 Nov 2021 | Unknown |
| CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | Cisco | 3 Nov 2021 | Unknown |
| CVE-2018-0798 | Microsoft Office Memory Corruption Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2018-0802 | Microsoft Office Memory Corruption Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2018-11776 | Apache Struts Remote Code Execution Vulnerability | Apache | 3 Nov 2021 | Unknown |
| CVE-2018-13379 | Fortinet FortiOS SSL VPN Path Traversal Vulnerability | Fortinet | 3 Nov 2021 | Known |
| CVE-2018-14558 | Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability | Tenda | 3 Nov 2021 | Unknown |
| CVE-2018-15811 | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | DotNetNuke (DNN) | 3 Nov 2021 | Unknown |
| CVE-2018-15961 | Adobe ColdFusion Unrestricted File Upload Vulnerability | Adobe | 3 Nov 2021 | Unknown |
| CVE-2018-18325 | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | DotNetNuke (DNN) | 3 Nov 2021 | Unknown |
| CVE-2018-20062 | ThinkPHP "noneCms" Remote Code Execution Vulnerability | ThinkPHP | 3 Nov 2021 | Unknown |
| CVE-2018-2380 | SAP Customer Relationship Management (CRM) Path Traversal Vulnerability | SAP | 3 Nov 2021 | Known |
| CVE-2018-4878 | Adobe Flash Player Use-After-Free Vulnerability | Adobe | 3 Nov 2021 | Known |
| CVE-2018-4939 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Adobe | 3 Nov 2021 | Unknown |
| CVE-2018-6789 | Exim Buffer Overflow Vulnerability | Exim | 3 Nov 2021 | Known |
| CVE-2018-7600 | Drupal Core Remote Code Execution Vulnerability | Drupal | 3 Nov 2021 | Known |
| CVE-2018-8653 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2019-0211 | Apache HTTP Server Privilege Escalation Vulnerability | Apache | 3 Nov 2021 | Unknown |
| CVE-2019-0541 | Microsoft MSHTML Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2019-0604 | Microsoft SharePoint Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2019-0708 | Microsoft Remote Desktop Services Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2019-0797 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2019-0803 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2019-0808 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2019-0859 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2019-0863 | Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2019-11510 | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | Ivanti | 3 Nov 2021 | Known |
| CVE-2019-11539 | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability | Ivanti | 3 Nov 2021 | Known |
| CVE-2019-11580 | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | Atlassian | 3 Nov 2021 | Known |
| CVE-2019-11634 | Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability | Citrix | 3 Nov 2021 | Known |
| CVE-2019-1214 | Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2019-1215 | Microsoft Windows Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2019-13608 | Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability | Citrix | 3 Nov 2021 | Known |
| CVE-2019-1367 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2019-1429 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2019-15752 | Docker Desktop Community Edition Privilege Escalation Vulnerability | Docker | 3 Nov 2021 | Unknown |
| CVE-2019-15949 | Nagios XI Remote Code Execution Vulnerability | Nagios | 3 Nov 2021 | Unknown |
| CVE-2019-16256 | SIMalliance Toolbox Browser Command Injection Vulnerability | SIMalliance | 3 Nov 2021 | Unknown |
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | Cisco | 3 Nov 2021 | Unknown |
| CVE-2019-16759 | vBulletin PHP Module Remote Code Execution Vulnerability | vBulletin | 3 Nov 2021 | Unknown |
| CVE-2019-17026 | Mozilla Firefox And Thunderbird Type Confusion Vulnerability | Mozilla | 3 Nov 2021 | Unknown |
| CVE-2019-17558 | Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability | Apache | 3 Nov 2021 | Unknown |
| CVE-2019-18187 | Trend Micro OfficeScan Directory Traversal Vulnerability | Trend Micro | 3 Nov 2021 | Unknown |
| CVE-2019-18935 | Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability | Progress | 3 Nov 2021 | Known |
| CVE-2019-18988 | TeamViewer Desktop Bypass Remote Login Vulnerability | TeamViewer | 3 Nov 2021 | Unknown |
| CVE-2019-19356 | Netis WF2419 Devices Remote Code Execution Vulnerability | Netis | 3 Nov 2021 | Unknown |
| CVE-2019-19781 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | Citrix | 3 Nov 2021 | Known |
| CVE-2019-20085 | TVT NVMS-1000 Directory Traversal Vulnerability | TVT | 3 Nov 2021 | Unknown |
| CVE-2019-2215 | Android Kernel Use-After-Free Vulnerability | Android | 3 Nov 2021 | Unknown |
| CVE-2019-3396 | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | Atlassian | 3 Nov 2021 | Known |
| CVE-2019-3398 | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | Atlassian | 3 Nov 2021 | Unknown |
| CVE-2019-4716 | IBM Planning Analytics Remote Code Execution Vulnerability | IBM | 3 Nov 2021 | Unknown |
| CVE-2019-5544 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability | VMware | 3 Nov 2021 | Known |
| CVE-2019-5591 | Fortinet FortiOS Default Configuration Vulnerability | Fortinet | 3 Nov 2021 | Known |
| CVE-2019-6223 | Apple iOS and macOS Group Facetime Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2019-7481 | SonicWall SMA100 SQL Injection Vulnerability | SonicWall | 3 Nov 2021 | Known |
| CVE-2019-8394 | Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability | Zoho | 3 Nov 2021 | Unknown |
| CVE-2019-9082 | ThinkPHP Remote Code Execution Vulnerability | ThinkPHP | 3 Nov 2021 | Unknown |
| CVE-2019-9978 | WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability | WordPress | 3 Nov 2021 | Unknown |
| CVE-2020-0041 | Android Kernel Out-of-Bounds Write Vulnerability | Android | 3 Nov 2021 | Unknown |
| CVE-2020-0069 | Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability | MediaTek | 3 Nov 2021 | Unknown |
| CVE-2020-0601 | Microsoft Windows CryptoAPI Spoofing Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2020-0646 | Microsoft .NET Framework Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2020-0674 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2020-0683 | Microsoft Windows Installer Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2020-0688 | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2020-0878 | Microsoft Edge and Internet Explorer Memory Corruption Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2020-0938 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2020-0968 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2020-0986 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2020-10148 | SolarWinds Orion Authentication Bypass Vulnerability | SolarWinds | 3 Nov 2021 | Unknown |
| CVE-2020-10181 | Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability | Sumavision | 3 Nov 2021 | Unknown |
| CVE-2020-10189 | Zoho ManageEngine Desktop Central File Upload Vulnerability | Zoho | 3 Nov 2021 | Unknown |
| CVE-2020-10199 | Sonatype Nexus Repository Remote Code Execution Vulnerability | Sonatype | 3 Nov 2021 | Unknown |
| CVE-2020-1020 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2020-10221 | rConfig OS Command Injection Vulnerability | rConfig | 3 Nov 2021 | Unknown |
| CVE-2020-1040 | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2020-1054 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability | Tenda | 3 Nov 2021 | Unknown |
| CVE-2020-1147 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2020-11651 | SaltStack Salt Authentication Bypass Vulnerability | SaltStack | 3 Nov 2021 | Unknown |
| CVE-2020-11652 | SaltStack Salt Path Traversal Vulnerability | SaltStack | 3 Nov 2021 | Unknown |
| CVE-2020-11738 | WordPress Snap Creek Duplicator Plugin File Download Vulnerability | WordPress | 3 Nov 2021 | Unknown |
| CVE-2020-12271 | Sophos SFOS SQL Injection Vulnerability | Sophos | 3 Nov 2021 | Known |
| CVE-2020-12812 | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | Fortinet | 3 Nov 2021 | Known |
| CVE-2020-1350 | Microsoft Windows DNS Server Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2020-1380 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2020-1464 | Microsoft Windows Spoofing Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2020-1472 | Microsoft Netlogon Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2020-14750 | Oracle WebLogic Server Remote Code Execution Vulnerability | Oracle | 3 Nov 2021 | Unknown |
| CVE-2020-14871 | Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | Oracle | 3 Nov 2021 | Unknown |
| CVE-2020-14882 | Oracle WebLogic Server Remote Code Execution Vulnerability | Oracle | 3 Nov 2021 | Unknown |
| CVE-2020-14883 | Oracle WebLogic Server Unspecified Vulnerability | Oracle | 3 Nov 2021 | Unknown |
| CVE-2020-15505 | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | Ivanti | 3 Nov 2021 | Unknown |
| CVE-2020-15999 | Google Chrome FreeType Heap Buffer Overflow Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2020-16009 | Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2020-16010 | Google Chrome for Android UI Heap Buffer Overflow Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2020-16013 | Google Chromium V8 Incorrect Implementation Vulnerabililty | 3 Nov 2021 | Unknown | |
| CVE-2020-16017 | Google Chrome Use-After-Free Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2020-16846 | SaltStack Salt Shell Injection Vulnerability | SaltStack | 3 Nov 2021 | Unknown |
| CVE-2020-17087 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2020-17144 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2020-17496 | vBulletin PHP Module Remote Code Execution Vulnerability | vBulletin | 3 Nov 2021 | Unknown |
| CVE-2020-17530 | Apache Struts Remote Code Execution Vulnerability | Apache | 3 Nov 2021 | Unknown |
| CVE-2020-24557 | Trend Micro Multiple Products Improper Access Control Vulnerability | Trend Micro | 3 Nov 2021 | Unknown |
| CVE-2020-25213 | WordPress File Manager Plugin Remote Code Execution Vulnerability | WordPress | 3 Nov 2021 | Unknown |
| CVE-2020-25506 | D-Link DNS-320 Device Command Injection Vulnerability | D-Link | 3 Nov 2021 | Unknown |
| CVE-2020-2555 | Oracle Multiple Products Remote Code Execution Vulnerability | Oracle | 3 Nov 2021 | Unknown |
| CVE-2020-26919 | Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability | NETGEAR | 3 Nov 2021 | Unknown |
| CVE-2020-27930 | Apple Multiple Products Memory Corruption Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2020-27932 | Apple Multiple Products Type Confusion Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2020-27950 | Apple Multiple Products Memory Initialization Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2020-29557 | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | D-Link | 3 Nov 2021 | Unknown |
| CVE-2020-29583 | Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | Zyxel | 3 Nov 2021 | Unknown |
| CVE-2020-3118 | Cisco IOS XR Software Discovery Protocol Format String Vulnerability | Cisco | 3 Nov 2021 | Unknown |
| CVE-2020-3161 | Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | Cisco | 3 Nov 2021 | Unknown |
| CVE-2020-3452 | Cisco ASA and FTD Read-Only Path Traversal Vulnerability | Cisco | 3 Nov 2021 | Unknown |
| CVE-2020-3566 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | Cisco | 3 Nov 2021 | Unknown |
| CVE-2020-3569 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | Cisco | 3 Nov 2021 | Unknown |
| CVE-2020-3580 | Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability | Cisco | 3 Nov 2021 | Known |
| CVE-2020-3950 | VMware Multiple Products Privilege Escalation Vulnerability | VMware | 3 Nov 2021 | Unknown |
| CVE-2020-3952 | VMware vCenter Server Information Disclosure Vulnerability | VMware | 3 Nov 2021 | Unknown |
| CVE-2020-3992 | VMware ESXi OpenSLP Use-After-Free Vulnerability | VMware | 3 Nov 2021 | Known |
| CVE-2020-4006 | Multiple VMware Products Command Injection Vulnerability | VMware | 3 Nov 2021 | Unknown |
| CVE-2020-4427 | IBM Data Risk Manager Security Bypass Vulnerability | IBM | 3 Nov 2021 | Unknown |
| CVE-2020-4428 | IBM Data Risk Manager Remote Code Execution Vulnerability | IBM | 3 Nov 2021 | Unknown |
| CVE-2020-4430 | IBM Data Risk Manager Directory Traversal Vulnerability | IBM | 3 Nov 2021 | Unknown |
| CVE-2020-5735 | Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability | Amcrest | 3 Nov 2021 | Unknown |
| CVE-2020-5847 | Unraid Remote Code Execution Vulnerability | Unraid | 3 Nov 2021 | Unknown |
| CVE-2020-5849 | Unraid Authentication Bypass Vulnerability | Unraid | 3 Nov 2021 | Unknown |
| CVE-2020-5902 | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | F5 | 3 Nov 2021 | Known |
| CVE-2020-6207 | SAP Solution Manager Missing Authentication for Critical Function Vulnerability | SAP | 3 Nov 2021 | Unknown |
| CVE-2020-6287 | SAP NetWeaver Missing Authentication for Critical Function Vulnerability | SAP | 3 Nov 2021 | Unknown |
| CVE-2020-6418 | Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2020-6819 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | Mozilla | 3 Nov 2021 | Unknown |
| CVE-2020-6820 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | Mozilla | 3 Nov 2021 | Unknown |
| CVE-2020-7961 | Liferay Portal Deserialization of Untrusted Data Vulnerability | Liferay | 3 Nov 2021 | Unknown |
| CVE-2020-8193 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | Citrix | 3 Nov 2021 | Unknown |
| CVE-2020-8195 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | Citrix | 3 Nov 2021 | Unknown |
| CVE-2020-8196 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | Citrix | 3 Nov 2021 | Unknown |
| CVE-2020-8243 | Ivanti Pulse Connect Secure Code Execution Vulnerability | Ivanti | 3 Nov 2021 | Unknown |
| CVE-2020-8260 | Ivanti Pulse Connect Secure Code Execution Vulnerability | Ivanti | 3 Nov 2021 | Unknown |
| CVE-2020-8467 | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | Trend Micro | 3 Nov 2021 | Unknown |
| CVE-2020-8468 | Trend Micro Multiple Products Content Validation Escape Vulnerability | Trend Micro | 3 Nov 2021 | Unknown |
| CVE-2020-8515 | Multiple DrayTek Vigor Routers Web Management Page Vulnerability | DrayTek | 3 Nov 2021 | Unknown |
| CVE-2020-8599 | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | Trend Micro | 3 Nov 2021 | Unknown |
| CVE-2020-8644 | PlaySMS Server-Side Template Injection Vulnerability | PlaySMS | 3 Nov 2021 | Unknown |
| CVE-2020-8655 | EyesOfNetwork Improper Privilege Management Vulnerability | EyesOfNetwork | 3 Nov 2021 | Unknown |
| CVE-2020-8657 | EyesOfNetwork Use of Hard-Coded Credentials Vulnerability | EyesOfNetwork | 3 Nov 2021 | Unknown |
| CVE-2020-9818 | Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2020-9819 | Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2020-9859 | Apple Multiple Products Code Execution Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-1497 | Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | Cisco | 3 Nov 2021 | Unknown |
| CVE-2021-1498 | Cisco HyperFlex HX Data Platform Command Injection Vulnerability | Cisco | 3 Nov 2021 | Unknown |
| CVE-2021-1647 | Microsoft Defender Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-1675 | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2021-1732 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2021-1782 | Apple Multiple Products Race Condition Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-1870 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-1871 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-1879 | Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-1905 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | Qualcomm | 3 Nov 2021 | Unknown |
| CVE-2021-1906 | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability | Qualcomm | 3 Nov 2021 | Unknown |
| CVE-2021-20016 | SonicWall SSLVPN SMA100 SQL Injection Vulnerability | SonicWall | 3 Nov 2021 | Known |
| CVE-2021-20021 | SonicWall Email Security Improper Privilege Management Vulnerability | SonicWall | 3 Nov 2021 | Known |
| CVE-2021-20022 | SonicWall Email Security Unrestricted Upload of File Vulnerability | SonicWall | 3 Nov 2021 | Known |
| CVE-2021-20023 | SonicWall Email Security Path Traversal Vulnerability | SonicWall | 3 Nov 2021 | Known |
| CVE-2021-20090 | Arcadyan Buffalo Firmware Path Traversal Vulnerability | Arcadyan | 3 Nov 2021 | Unknown |
| CVE-2021-21017 | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | Adobe | 3 Nov 2021 | Unknown |
| CVE-2021-21148 | Google Chromium V8 Heap Buffer Overflow Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-21166 | Google Chromium Race Condition Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-21193 | Google Chromium Blink Use-After-Free Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-21206 | Google Chromium Blink Use-After-Free Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-21220 | Google Chromium V8 Improper Input Validation Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-21224 | Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-21972 | VMware vCenter Server Remote Code Execution Vulnerability | VMware | 3 Nov 2021 | Known |
| CVE-2021-21985 | VMware vCenter Server Improper Input Validation Vulnerability | VMware | 3 Nov 2021 | Known |
| CVE-2021-22005 | VMware vCenter Server File Upload Vulnerability | VMware | 3 Nov 2021 | Known |
| CVE-2021-22205 | GitLab Community and Enterprise Editions Remote Code Execution Vulnerability | GitLab | 3 Nov 2021 | Known |
| CVE-2021-22502 | Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability | Micro Focus | 3 Nov 2021 | Unknown |
| CVE-2021-22506 | Micro Focus Access Manager Information Leakage Vulnerability | Micro Focus | 3 Nov 2021 | Unknown |
| CVE-2021-22893 | Ivanti Pulse Connect Secure Use-After-Free Vulnerability | Ivanti | 3 Nov 2021 | Known |
| CVE-2021-22894 | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | Ivanti | 3 Nov 2021 | Unknown |
| CVE-2021-22899 | Ivanti Pulse Connect Secure Command Injection Vulnerability | Ivanti | 3 Nov 2021 | Unknown |
| CVE-2021-22900 | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | Ivanti | 3 Nov 2021 | Unknown |
| CVE-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | F5 | 3 Nov 2021 | Known |
| CVE-2021-23874 | McAfee Total Protection (MTP) Improper Privilege Management Vulnerability | McAfee | 3 Nov 2021 | Unknown |
| CVE-2021-26084 | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | Atlassian | 3 Nov 2021 | Known |
| CVE-2021-26411 | Microsoft Internet Explorer Memory Corruption Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2021-26855 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2021-26857 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2021-26858 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2021-27059 | Microsoft Office Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-27065 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2021-27085 | Microsoft Internet Explorer Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-27101 | Accellion FTA SQL Injection Vulnerability | Accellion | 3 Nov 2021 | Known |
| CVE-2021-27102 | Accellion FTA OS Command Injection Vulnerability | Accellion | 3 Nov 2021 | Known |
| CVE-2021-27103 | Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability | Accellion | 3 Nov 2021 | Known |
| CVE-2021-27104 | Accellion FTA OS Command Injection Vulnerability | Accellion | 3 Nov 2021 | Known |
| CVE-2021-27561 | Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability | Yealink | 3 Nov 2021 | Unknown |
| CVE-2021-27562 | Arm Trusted Firmware Out-of-Bounds Write Vulnerability | Arm | 3 Nov 2021 | Unknown |
| CVE-2021-28310 | Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-28550 | Adobe Acrobat and Reader Use-After-Free Vulnerability | Adobe | 3 Nov 2021 | Unknown |
| CVE-2021-28663 | Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability | Arm | 3 Nov 2021 | Unknown |
| CVE-2021-28664 | Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability | Arm | 3 Nov 2021 | Unknown |
| CVE-2021-30116 | Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability | Kaseya | 3 Nov 2021 | Known |
| CVE-2021-30551 | Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-30554 | Google Chromium WebGL Use-After-Free Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-30563 | Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-30632 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-30633 | Google Chromium Indexed DB API Use-After-Free Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-30657 | Apple macOS Unspecified Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-30661 | Apple Multiple Products WebKit Storage Use-After-Free Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-30663 | Apple Multiple Products WebKit Integer Overflow Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-30665 | Apple Multiple Products WebKit Memory Corruption Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-30666 | Apple iOS WebKit Buffer Overflow Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-30713 | Apple macOS Unspecified Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-30761 | Apple iOS WebKit Memory Corruption Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-30762 | Apple iOS WebKit Use-After-Free Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-30807 | Apple Multiple Products Memory Corruption Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-30858 | Apple iOS, iPadOS, macOS Use-After-Free Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-30860 | Apple Multiple Products Integer Overflow Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-30869 | Apple iOS, iPadOS, and macOS Type Confusion Vulnerability | Apple | 3 Nov 2021 | Unknown |
| CVE-2021-31199 | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-31201 | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-31207 | Microsoft Exchange Server Security Feature Bypass Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2021-31755 | Tenda AC11 Router Stack Buffer Overflow Vulnerability | Tenda | 3 Nov 2021 | Unknown |
| CVE-2021-31955 | Microsoft Windows Kernel Information Disclosure Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-31956 | Microsoft Windows NTFS Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-31979 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-33739 | Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-33742 | Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-33771 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-34448 | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-34473 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2021-34523 | Microsoft Exchange Server Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2021-34527 | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2021-35211 | SolarWinds Serv-U Remote Code Execution Vulnerability | SolarWinds | 3 Nov 2021 | Known |
| CVE-2021-35395 | Realtek AP-Router SDK Buffer Overflow Vulnerability | Realtek | 3 Nov 2021 | Unknown |
| CVE-2021-35464 | ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability | ForgeRock | 3 Nov 2021 | Known |
| CVE-2021-36741 | Trend Micro Multiple Products Improper Input Validation Vulnerability | Trend Micro | 3 Nov 2021 | Unknown |
| CVE-2021-36742 | Trend Micro Multiple Products Improper Input Validation Vulnerability | Trend Micro | 3 Nov 2021 | Unknown |
| CVE-2021-36942 | Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2021-36948 | Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-36955 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2021-37973 | Google Chromium Portals Use-After-Free Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-37975 | Google Chromium V8 Use-After-Free Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-37976 | Google Chromium Information Disclosure Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-38000 | Google Chromium Intents Improper Input Validation Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-38003 | Google Chromium V8 Memory Corruption Vulnerability | 3 Nov 2021 | Unknown | |
| CVE-2021-38645 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2021-38648 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-38649 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | Microsoft | 3 Nov 2021 | Unknown |
| CVE-2021-40444 | Microsoft MSHTML Remote Code Execution Vulnerability | Microsoft | 3 Nov 2021 | Known |
| CVE-2021-40539 | Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability | Zoho | 3 Nov 2021 | Known |
| CVE-2021-41773 | Apache HTTP Server Path Traversal Vulnerability | Apache | 3 Nov 2021 | Known |
| CVE-2021-42013 | Apache HTTP Server Path Traversal Vulnerability | Apache | 3 Nov 2021 | Known |
| CVE-2021-42258 | BQE BillQuick Web Suite SQL Injection Vulnerability | BQE | 3 Nov 2021 | Known |
Source: CISA Known Exploited Vulnerabilities (KEV) catalog, 2026.10.28, as of 28 Oct 2026. About the data.