Actively exploited vulnerabilities

    Vulnerabilities from CISA's Known Exploited Vulnerabilities (KEV) catalog that are confirmed to be exploited. Close these gaps before anything else.

    1,772 CVEs in the CISA KEV catalog · How we calculate priority

    Export (max. 1,000 rows):CSVJSON

    Entries in the CISA KEV catalog
    SeverityCVETitlePriority (0–325)Published (CVE)
    CriticalCVE-2020-14644Oracle WebLogic Server Remote Code Execution Vulnerability228.8
    CriticalCVE-2020-2883Oracle WebLogic Server Unspecified Vulnerability228.8
    CriticalCVE-2019-12989Citrix SD-WAN and NetScaler SQL Injection Vulnerability228.8
    CriticalCVE-2019-10068Kentico Xperience Deserialization of Untrusted Data Vulnerability228.8
    CriticalCVE-2018-14933NUUO NVRmini Devices OS Command Injection Vulnerability228.8
    CriticalCVE-2015-4852Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability228.8
    CriticalCVE-2023-33010Zyxel Multiple Firewalls Buffer Overflow Vulnerability228.8
    CriticalCVE-2017-18368Zyxel P660HN-T1A Routers Command Injection Vulnerability228.8
    CriticalCVE-2017-1000486Primetek Primefaces Remote Code Execution Vulnerability228.8
    CriticalCVE-2022-37055D-Link Routers Buffer Overflow Vulnerability228.7
    CriticalCVE-2021-44077Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability228.7
    CriticalCVE-2020-7796Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability228.7
    CriticalCVE-2013-0625Adobe ColdFusion Authentication Bypass Vulnerability228.7
    CriticalCVE-2021-40870Aviatrix Controller Unrestricted Upload of File228.7
    CriticalCVE-2020-2551Oracle Fusion Middleware Unspecified Vulnerability228.7
    CriticalCVE-2018-10561Dasan GPON Routers Authentication Bypass Vulnerability228.7
    CriticalCVE-2016-4437Apache Shiro Code Execution Vulnerability228.7
    CriticalCVE-2013-0632Adobe ColdFusion Authentication Bypass Vulnerability228.7
    CriticalCVE-2020-10148SolarWinds Orion Authentication Bypass Vulnerability228.7
    CriticalCVE-2020-8657EyesOfNetwork Use of Hard-Coded Credentials Vulnerability228.7
    CriticalCVE-2017-5689Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability: Privilege Escalation228.7
    CriticalCVE-2016-3427Oracle Java SE and JRockit Unspecified Vulnerability228.7
    CriticalCVE-2023-33009Zyxel Multiple Firewalls Buffer Overflow Vulnerability228.7
    CriticalCVE-2019-1003029Jenkins Script Security Plugin Sandbox Bypass Vulnerability228.7
    CriticalCVE-2012-5076Oracle Java SE Sandbox Bypass Vulnerability228.7
    CriticalCVE-2020-29583Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability228.7
    CriticalCVE-2020-3952VMware vCenter Server Information Disclosure Vulnerability228.7
    CriticalCVE-2019-17621D-Link DIR-859 Router Command Execution Vulnerability228.7
    CriticalCVE-2017-3066Adobe ColdFusion Deserialization Vulnerability228.7
    CriticalCVE-2016-8735Apache Tomcat Remote Code Execution Vulnerability228.7
    CriticalCVE-2020-17463Fuel CMS SQL Injection Vulnerability228.7
    CriticalCVE-2018-14839LG N1A1 NAS Remote Command Execution Vulnerability228.7
    CriticalCVE-2011-2462Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability228.7
    CriticalCVE-2020-17496vBulletin PHP Module Remote Code Execution Vulnerability228.6
    CriticalCVE-2023-24880Windows SmartScreen Security Feature Bypass Vulnerability228.6
    CriticalCVE-2015-5122Adobe Flash Player Use-After-Free Vulnerability228.6
    CriticalCVE-2021-31755Tenda AC11 Router Stack Buffer Overflow Vulnerability228.6
    CriticalCVE-2020-8644PlaySMS Server-Side Template Injection Vulnerability228.6
    CriticalCVE-2015-0311Adobe Flash Player Remote Code Execution Vulnerability228.6
    CriticalCVE-2024-43461Windows MSHTML Platform Spoofing Vulnerability228.6
    CriticalCVE-2019-11581Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability228.5
    CriticalCVE-2018-19321GIGABYTE Multiple Products Privilege Escalation Vulnerability228.5
    CriticalCVE-2020-15415DrayTek Multiple Vigor Routers OS Command Injection Vulnerability228.5
    CriticalCVE-2020-12641Roundcube Webmail Remote Code Execution Vulnerability228.5
    CriticalCVE-2020-5722Grandstream Networks UCM6200 Series SQL Injection Vulnerability228.5
    CriticalCVE-2017-11317Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability228.5
    CriticalCVE-2020-3161Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability228.5
    CriticalCVE-2019-9874Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability228.5
    CriticalCVE-2019-11708Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability228.5
    CriticalCVE-2016-10174NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability228.5