CISA Known Exploited Vulnerabilities

1,779 results · Feed

• Critical 9.8
  CVE-2021-22502 Exploited Public exploit Scanner template EPSS 97%

  Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. Th…

  Feb 8, 2021

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2021-22205 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validat…

  GitLab GitLab gitlab Web / CMS Ubuntu
  Apr 23, 2021

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2021-22893 Exploited · Ransomware Public exploit EPSS 48%

  Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Wind…

  Apr 23, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-22986 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12…

  Mar 31, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-22894 Exploited EPSS 41%

  A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker t…

  May 27, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-22005 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with net…

  Virtualization
  Sep 23, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-22899 Exploited EPSS 23%

  A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker…

  May 27, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-26084 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an u…

  Atlassian Confluence Data Center Confluence Server Web / CMS
  Aug 30, 2021

  KEV Nov 3, 2021
• Critical 9.1
  CVE-2021-26855 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-26411 Exploited · Ransomware Public exploit EPSS 82%

  Internet Explorer Memory Corruption Vulnerability

  Internet Explorer Memory Corruption Vulnerability

  Microsoft Internet Explorer 11 Internet Explorer 9 Microsoft Edge (EdgeHTML-based) Browsers
  Mar 11, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-26858 Exploited · Ransomware EPSS 94%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-26857 Exploited · Ransomware Public exploit EPSS 96%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• Medium 4.9
  CVE-2021-20023 Exploited · Ransomware EPSS 52%

  SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an…

  SonicWall Email Security Network devices
  Apr 20, 2021

  KEV Nov 3, 2021
• High 7.2
  CVE-2021-20022 Exploited · Ransomware EPSS 17%

  SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload …

  SonicWall Email Security Network devices
  Apr 9, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-20016 Exploited · Ransomware EPSS 40%

  A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perfor…

  SonicWall SonicWall SMA100 Network devices
  Feb 3, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-20090 Exploited Scanner template EPSS 100%

  A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3…

  Apr 29, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-20021 Exploited · Ransomware Public exploit Scanner template EPSS 89%

  A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account…

  SonicWall Email Security Network devices
  Apr 9, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0211 Exploited Public exploit EPSS 65%

  In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileg…

  Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Apr 8, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0863 Exploited Public exploit

  An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Err…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  May 16, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0859 Exploited · Ransomware Public exploit

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Apr 9, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0808 Exploited Public exploit EPSS 53%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Apr 9, 2019

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-0541 Exploited Public exploit EPSS 53%

  A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML …

  Microsoft Microsoft Office Internet Explorer 11 Internet Explorer 9
  Jan 8, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-0708 Exploited · Ransomware Public exploit EPSS 100%

  A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an una…

  Microsoft Windows Windows Server Windows
  May 16, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0803 Exploited · Ransomware Public exploit EPSS 45%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Apr 9, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-0604 Exploited · Ransomware Public exploit EPSS 100%

  A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…

  Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation
  Mar 6, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0797 Exploited

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Apr 9, 2019

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-18187 Exploited EPSS 25%

  Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vu…

  Trend Micro Trend Micro OfficeScan
  Oct 28, 2019

  KEV Nov 3, 2021
• High 7.0
  CVE-2019-18988 Exploited Public exploit

  TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for di…

  Feb 7, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-18935 Exploited · Ransomware Public exploit EPSS 100%

  Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncU…

  Dec 11, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-16759 Exploited Public exploit Scanner template EPSS 100%

  vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widg…

  Sep 24, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-16256 Exploited

  Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote at…

  Sep 12, 2019

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-7481 Exploited · Ransomware Scanner template EPSS 100%

  Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This v…

  SonicWall SMA100 Network devices
  Dec 17, 2019

  KEV Nov 3, 2021
• Critical 9.9
  CVE-2019-11510 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthen…

  May 8, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-11634 Exploited · Ransomware

  Citrix Workspace App before 1904 for Windows has Incorrect Access Control.

  May 22, 2019

  KEV Nov 3, 2021
• High 8.0
  CVE-2019-11539 Exploited · Ransomware Public exploit EPSS 99%

  In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1…

  Apr 26, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-11580 Exploited · Ransomware Public exploit Scanner template EPSS 95%

  Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Atta…

  Atlassian Crowd
  Jun 3, 2019

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-1429 Exploited Public exploit EPSS 77%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10 Windows
  Nov 12, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-1215 Exploited · Ransomware Public exploit EPSS 19%

  An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Wi…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Sep 11, 2019

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-1653 Exploited Public exploit Scanner template EPSS 100%

  Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

  A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls …

  Cisco Cisco Small Business RV Series Router Firmware Network devices
  Jan 24, 2019

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-1367 Exploited · Ransomware Public exploit EPSS 52%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 9 Windows
  Sep 23, 2019

  KEV Nov 3, 2021