CISA – Known Exploited Vulnerabilities (KEV)

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 14:14 UTC 2026-10-21 14:14 UTC 0 - W/"ea28426db6e3daf822f8973000a8a7e18220e986453336acb8f1520560aa59aa" -

Letzte Eintraege

1755 Eintraege · 50 pro Seite · Seite 29 von 36

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2022-02-10 00:00

CVE-2017-8464 — Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability

CVE-2017-8464

HIGH
2022-02-10 00:00

CVE-2016-3088 — Apache ActiveMQ Improper Input Validation Vulnerability

CVE-2016-3088

CRITICAL
2022-02-10 00:00

CVE-2017-9791 — Apache Struts 1 Improper Input Validation Vulnerability

CVE-2017-9791

CRITICAL
2022-02-04 00:00

CVE-2022-21882 — Microsoft Win32k Privilege Escalation Vulnerability

CVE-2022-21882

HIGH
2022-01-28 00:00

CVE-2014-7169 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

CVE-2014-6271
CVE-2014-7169

CRITICAL
2022-01-28 00:00

CVE-2021-20038 — SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability

CVE-2021-20038

CRITICAL
2022-01-28 00:00

CVE-2014-1776 — Microsoft Internet Explorer Memory Corruption Vulnerability

CVE-2014-1776

CRITICAL
2022-01-28 00:00

CVE-2014-6271 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

CVE-2014-6271

CRITICAL
2022-01-28 00:00

CVE-2017-5689 — Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability

CVE-2017-5689

CRITICAL
2022-01-28 00:00

CVE-2020-0787 — Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

CVE-2020-0787

HIGH
2022-01-28 00:00

CVE-2020-5722 — Grandstream Networks UCM6200 Series SQL Injection Vulnerability

CVE-2020-5722

CRITICAL
2022-01-28 00:00

CVE-2022-22587 — Apple Memory Corruption Vulnerability

CVE-2022-22587

CRITICAL
2022-01-21 00:00

CVE-2018-8453 — Microsoft Win32k Privilege Escalation Vulnerability

CVE-2018-8453

HIGH
2022-01-21 00:00

CVE-2006-1547 — Apache Struts 1 ActionForm Denial-of-Service Vulnerability

CVE-2006-1547

HIGH
2022-01-21 00:00

CVE-2012-0391 — Apache Struts 2 Improper Input Validation Vulnerability

CVE-2012-0391

CRITICAL
2022-01-21 00:00

CVE-2021-35247 — SolarWinds Serv-U Improper Input Validation Vulnerability

CVE-2021-35247

MEDIUM
2022-01-18 00:00

CVE-2021-32648 — October CMS Improper Authentication

CVE-2021-32648

HIGH
2022-01-18 00:00

CVE-2021-33766 — Microsoft Exchange Server Information Disclosure

CVE-2021-33766

HIGH
2022-01-18 00:00

CVE-2021-25297 — Nagios XI OS Command Injection

CVE-2021-25297

HIGH
2022-01-18 00:00

CVE-2021-25296 — Nagios XI OS Command Injection

CVE-2021-25296

HIGH
2022-01-18 00:00

CVE-2021-25298 — Nagios XI OS Command Injection

CVE-2021-25298

HIGH
2022-01-18 00:00

CVE-2021-40870 — Aviatrix Controller Unrestricted Upload of File

CVE-2021-40870

CRITICAL
2022-01-18 00:00

CVE-2020-13927 — Apache Airflow's Experimental API Authentication Bypass

CVE-2020-13927

CRITICAL
2022-01-18 00:00

CVE-2020-14864 — Oracle Business Intelligence Enterprise Edition Path Transversal

CVE-2020-14864

HIGH
2022-01-18 00:00

CVE-2021-22991 — F5 BIG-IP Traffic Management Microkernel Buffer Overflow

CVE-2021-22991

CRITICAL
2022-01-18 00:00

CVE-2021-21315 — System Information Library for Node.JS Command Injection

CVE-2021-21315

HIGH
2022-01-18 00:00

CVE-2020-11978 — Apache Airflow Command Injection

CVE-2020-11978

HIGH
2022-01-18 00:00

CVE-2020-13671 — Drupal core Un-restricted Upload of File

CVE-2020-13671

HIGH
2022-01-18 00:00

CVE-2021-21975 — VMware Server Side Request Forgery in vRealize Operations Manager API

CVE-2021-21975

HIGH
2022-01-10 00:00

CVE-2021-22017 — VMware vCenter Server Improper Access Control

CVE-2021-22017

MEDIUM
2022-01-10 00:00

CVE-2019-7609 — Kibana Arbitrary Code Execution

CVE-2019-7609

CRITICAL
2022-01-10 00:00

CVE-2021-36260 — Hikvision Improper Input Validation

CVE-2021-36260

CRITICAL
2022-01-10 00:00

CVE-2021-27860 — FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit

CVE-2021-27860

CRITICAL
2022-01-10 00:00

CVE-2020-6572 — Google Chrome Media Use-After-Free Vulnerability

CVE-2020-6572

HIGH
2022-01-10 00:00

CVE-2019-9670 — Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

CVE-2019-9670

CRITICAL
2022-01-10 00:00

CVE-2019-2725 — Oracle WebLogic Server, Injection

CVE-2019-2725

HIGH
2022-01-10 00:00

CVE-2019-1579 — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

CVE-2019-1579

HIGH
2022-01-10 00:00

CVE-2019-1458 — Microsoft Win32k Privilege Escalation Vulnerability

CVE-2019-1458

HIGH
2022-01-10 00:00

CVE-2019-10149 — Exim Mail Transfer Agent (MTA) Improper Input Validation

CVE-2019-10149

CRITICAL
2022-01-10 00:00

CVE-2018-13383 — Fortinet FortiOS and FortiProxy Out-of-bounds Write

CVE-2018-13383

MEDIUM
2022-01-10 00:00

CVE-2018-13382 — Fortinet FortiOS and FortiProxy Improper Authorization

CVE-2018-13382

CRITICAL
2022-01-10 00:00

CVE-2017-1000486 — Primetek Primefaces Remote Code Execution Vulnerability

CVE-2017-1000486

CRITICAL
2022-01-10 00:00

CVE-2015-7450 — IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.

CVE-2015-7450

CRITICAL
2022-01-10 00:00

CVE-2013-3900 — Microsoft WinVerifyTrust function Remote Code Execution

CVE-2013-3900

HIGH
2021-12-15 00:00

CVE-2021-43890 — Microsoft Windows AppX Installer Spoofing Vulnerability

CVE-2021-43890

HIGH
2021-12-15 00:00

CVE-2021-4102 — Google Chromium V8 Use-After-Free Vulnerability

CVE-2021-4102

HIGH
2021-12-10 00:00

CVE-2017-17562 — Embedthis GoAhead Remote Code Execution Vulnerability

CVE-2017-17562

HIGH
2021-12-10 00:00

CVE-2019-0193 — Apache Solr DataImportHandler Code Injection Vulnerability

CVE-2019-0193

HIGH
2021-12-10 00:00

CVE-2020-8816 — Pi-Hole AdminLTE Remote Code Execution Vulnerability

CVE-2020-8816

CRITICAL
2021-12-10 00:00

CVE-2017-12149 — Red Hat JBoss Application Server Remote Code Execution Vulnerability

CVE-2017-12149

CRITICAL