Live Threats

Adobe Reader and Acrobat Input Validation Vulnerability

Adobe · Acrobat and Reader

KEV added: 03 Mar 2022 · Due: 24 Mar 2022

Adobe ColdFusion Directory Traversal Vulnerability

Adobe · ColdFusion

KEV added: 25 Mar 2022 · Due: 15 Apr 2022

Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

Microsoft · MSCOMCTL.OCX

KEV added: 03 Nov 2021 · Due: 03 May 2022

PHP-CGI Query String Parameter Vulnerability

PHP · PHP

KEV added: 25 Mar 2022 · Due: 15 Apr 2022

Apache Struts Improper Input Validation Vulnerability

Apache · Struts

KEV added: 25 Mar 2022 · Due: 15 Apr 2022

OpenSSL Information Disclosure Vulnerability

OpenSSL · OpenSSL

KEV added: 04 May 2022 · Due: 25 May 2022

Adobe Flash Player Integer Underflow Vulnerablity

Adobe · Flash Player

KEV added: 17 Sep 2024 · Due: 08 Oct 2024

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU · Bourne-Again Shell (Bash)

KEV added: 28 Jan 2022 · Due: 28 Jul 2022

GNU Bash OS Command Injection Vulnerability

GNU · GNU Bash

KEV added: 02 Oct 2025 · Due: 23 Oct 2025

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU · Bourne-Again Shell (Bash)

KEV added: 28 Jan 2022 · Due: 28 Jul 2022

Realtek SDK Improper Input Validation Vulnerability

Realtek · SDK

KEV added: 18 Sep 2023 · Due: 09 Oct 2023

Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

Elastic · Elasticsearch

KEV added: 25 Mar 2022 · Due: 15 Apr 2022

Microsoft HTTP.sys Remote Code Execution Vulnerability

Microsoft · HTTP.sys

KEV added: 10 Feb 2022 · Due: 10 Aug 2022

Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

Adobe · Flash Player

KEV added: 13 Apr 2022 · Due: 04 May 2022

ISC BIND Data Processing Errors Vulnerability

ISC · BIND

KEV added: 08 Oct 2026 · Due: 11 Oct 2026

PHPMailer Command Injection Vulnerability

PHP · PHPMailer

KEV added: 07 Jul 2025 · Due: 28 Jul 2025

NETGEAR Multiple Routers Remote Code Execution Vulnerability

NETGEAR · Multiple Routers

KEV added: 07 Mar 2022 · Due: 07 Sep 2022

Microsoft Windows SMBv1 Information Disclosure Vulnerability

Microsoft · SMBv1 server

KEV added: 24 May 2022 · Due: 14 Jun 2022

Jenkins Remote Code Execution Vulnerability

Jenkins · Jenkins

KEV added: 02 Oct 2025 · Due: 23 Oct 2025

Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

Oracle · WebLogic Server

KEV added: 10 Feb 2022 · Due: 10 Aug 2022

Microsoft Office Memory Corruption Vulnerability

Microsoft · Office

KEV added: 03 Nov 2021 · Due: 03 May 2022

Apache Tomcat on Windows Remote Code Execution Vulnerability

Apache · Tomcat

KEV added: 25 Mar 2022 · Due: 15 Apr 2022

Apache Tomcat Remote Code Execution Vulnerability

Apache · Tomcat

KEV added: 25 Mar 2022 · Due: 15 Apr 2022

Apache Struts Remote Code Execution Vulnerability

Apache · Struts

KEV added: 03 Nov 2021 · Due: 03 May 2022

Microsoft Windows Server Buffer Overflow Vulnerability

Microsoft · Internet Information Services (IIS)

KEV added: 03 Nov 2021 · Due: 03 May 2022

Hikvision Multiple Products Improper Authentication Vulnerability

Hikvision · Multiple Products

KEV added: 05 Mar 2026 · Due: 26 Mar 2026

PHPUnit Command Injection Vulnerability

PHPUnit · PHPUnit

KEV added: 15 Feb 2022 · Due: 15 Aug 2022

Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability

Cisco · Adaptive Security Appliance (ASA)

KEV added: 03 Nov 2021 · Due: 03 May 2022

Dasan GPON Routers Command Injection Vulnerability

Dasan · Gigabit Passive Optical Network (GPON) Routers

KEV added: 31 Mar 2022 · Due: 21 Apr 2022

Apache Struts Remote Code Execution Vulnerability

Apache · Struts

KEV added: 03 Nov 2021 · Due: 03 May 2022

Fortinet FortiOS SSL VPN Path Traversal Vulnerability

Fortinet · FortiOS

KEV added: 03 Nov 2021 · Due: 03 May 2022

Adobe ColdFusion Unrestricted File Upload Vulnerability

Adobe · ColdFusion

KEV added: 03 Nov 2021 · Due: 03 May 2022

ThinkPHP "noneCms" Remote Code Execution Vulnerability

ThinkPHP · noneCms

KEV added: 03 Nov 2021 · Due: 03 May 2022

Oracle WebLogic Server Unspecified Vulnerability

Oracle · WebLogic Server

KEV added: 08 Sep 2022 · Due: 29 Sep 2022

Drupal Core Remote Code Execution Vulnerability

Drupal · Drupal Core

KEV added: 03 Nov 2021 · Due: 03 May 2022

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft · SharePoint

KEV added: 03 Nov 2021 · Due: 03 May 2022

Microsoft Remote Desktop Services Remote Code Execution Vulnerability

Microsoft · Remote Desktop Services

KEV added: 03 Nov 2021 · Due: 03 May 2022

Exim Mail Transfer Agent (MTA) Improper Input Validation

Exim · Mail Transfer Agent (MTA)

KEV added: 10 Jan 2022 · Due: 10 Jul 2022

PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

PHP · FastCGI Process Manager (FPM)

KEV added: 25 Mar 2022 · Due: 15 Apr 2022

Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability

Ivanti · Pulse Connect Secure

KEV added: 03 Nov 2021 · Due: 03 May 2022

Webmin Command Injection Vulnerability

Webmin · Webmin

KEV added: 25 Mar 2022 · Due: 15 Apr 2022

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

Cisco · Small Business RV320 and RV325 Routers

KEV added: 03 Nov 2021 · Due: 03 May 2022

vBulletin PHP Module Remote Code Execution Vulnerability

vBulletin · vBulletin

KEV added: 03 Nov 2021 · Due: 03 May 2022

D-Link Multiple Routers Command Injection Vulnerability

D-Link · Multiple Routers

KEV added: 25 Mar 2022 · Due: 15 Apr 2022

Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability

Progress · Telerik UI for ASP.NET AJAX

KEV added: 03 Nov 2021 · Due: 03 May 2022

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability

Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance

KEV added: 03 Nov 2021 · Due: 03 May 2022

Oracle WebLogic Server, Injection

Oracle · WebLogic Server

KEV added: 10 Jan 2022 · Due: 10 Jul 2022

Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability

Atlassian · Confluence Server and Data Server

KEV added: 03 Nov 2021 · Due: 03 May 2022

SonicWall SMA100 SQL Injection Vulnerability

SonicWall · SMA100

KEV added: 03 Nov 2021 · Due: 03 May 2022

Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

Synacor · Zimbra Collaboration Suite (ZCS)

KEV added: 10 Jan 2022 · Due: 10 Jul 2022

Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

Microsoft · Exchange Server

KEV added: 03 Nov 2021 · Due: 03 May 2022

Microsoft SMBv3 Remote Code Execution Vulnerability

Microsoft · SMBv3

KEV added: 10 Feb 2022 · Due: 10 Aug 2022

Zoho ManageEngine Desktop Central File Upload Vulnerability

Zoho · ManageEngine

KEV added: 03 Nov 2021 · Due: 03 May 2022

Apache Airflow's Experimental API Authentication Bypass

Apache · Airflow's Experimental API

KEV added: 18 Jan 2022 · Due: 18 Jul 2022

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle · WebLogic Server

KEV added: 03 Nov 2021 · Due: 03 May 2022

Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability

Ivanti · MobileIron Multiple Products

KEV added: 03 Nov 2021 · Due: 03 May 2022

SaltStack Salt Shell Injection Vulnerability

SaltStack · Salt

KEV added: 03 Nov 2021 · Due: 03 May 2022

D-Link DNS-320 Device Command Injection Vulnerability

D-Link · DNS-320 Device

KEV added: 03 Nov 2021 · Due: 03 May 2022

Cisco ASA and FTD Read-Only Path Traversal Vulnerability

Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

KEV added: 03 Nov 2021 · Due: 03 May 2022

F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability

F5 · BIG-IP

KEV added: 03 Nov 2021 · Due: 03 May 2022

Liferay Portal Deserialization of Untrusted Data Vulnerability

Liferay · Liferay Portal

KEV added: 03 Nov 2021 · Due: 03 May 2022

Multiple DrayTek Vigor Routers Web Management Page Vulnerability

DrayTek · Multiple Vigor Routers

KEV added: 03 Nov 2021 · Due: 03 May 2022

Zyxel Multiple NAS Devices OS Command Injection Vulnerability

Zyxel · Multiple Network-Attached Storage (NAS) Devices

KEV added: 25 Mar 2022 · Due: 15 Apr 2022

Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability

Cisco · HyperFlex HX

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

Cisco HyperFlex HX Data Platform Command Injection Vulnerability

Cisco · HyperFlex HX

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability

SonicWall · SMA 100 Appliances

KEV added: 28 Jan 2022 · Due: 11 Feb 2022

Arcadyan Buffalo Firmware Path Traversal Vulnerability

Arcadyan · Buffalo Firmware

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

VMware vCenter Server Remote Code Execution Vulnerability

VMware · vCenter Server

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

VMware vCenter Server Improper Input Validation Vulnerability

VMware · vCenter Server

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

VMware vCenter Server File Upload Vulnerability

VMware · vCenter Server

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

Omnissa Workspace ONE Server-Side Request Forgery

Omnissa · Workspace One UEM

KEV added: 09 Mar 2026 · Due: 23 Mar 2026

ExifTool Remote Code Execution Vulnerability

Perl · Exiftool

KEV added: 17 Nov 2021 · Due: 01 Dec 2021

GitLab Community and Enterprise Editions Remote Code Execution Vulnerability

GitLab · Community and Enterprise Editions

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability

F5 · BIG-IP and BIG-IQ Centralized Management

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability

Atlassian · Confluence Server and Data Center

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability

Atlassian · Confluence Server

KEV added: 28 Mar 2022 · Due: 18 Apr 2022

Atlassian Jira Server and Data Center Path Traversal Vulnerability

Atlassian · Jira Server and Data Center

KEV added: 12 Nov 2024 · Due: 03 Dec 2024

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server

KEV added: 03 Nov 2021 · Due: 03 May 2022

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server

KEV added: 03 Nov 2021 · Due: 03 May 2022

Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

Microsoft · HTTP Protocol Stack

KEV added: 06 Apr 2022 · Due: 27 Apr 2022

Microsoft Exchange Server Security Feature Bypass Vulnerability

Microsoft · Exchange Server

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

Laravel Ignition File Upload Vulnerability

Laravel · Ignition

KEV added: 18 Sep 2023 · Due: 09 Oct 2023

Sudo Heap-Based Buffer Overflow Vulnerability

Sudo · Sudo

KEV added: 06 Apr 2022 · Due: 27 Apr 2022

Dahua IP Camera Authentication Bypass Vulnerability

Dahua · IP Camera Firmware

KEV added: 21 Aug 2024 · Due: 11 Sep 2024

Dahua IP Camera Authentication Bypass Vulnerability

Dahua · IP Camera Firmware

KEV added: 21 Aug 2024 · Due: 11 Sep 2024

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft · Exchange Server

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

Microsoft Windows Print Spooler Remote Code Execution Vulnerability

Microsoft · Windows

KEV added: 03 Nov 2021 · Due: 03 May 2022

Realtek Jungle SDK Remote Code Execution Vulnerability

Realtek · Jungle Software Development Kit (SDK)

KEV added: 10 Dec 2021 · Due: 24 Dec 2021

ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability

ForgeRock · Access Management (AM)

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

Hikvision Improper Input Validation

Hikvision · Security cameras web server

KEV added: 10 Jan 2022 · Due: 24 Jan 2022

Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability

Zoho · ManageEngine ServiceDesk Plus (SDP)

KEV added: 01 Dec 2021 · Due: 15 Dec 2021

Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Microsoft · Open Management Infrastructure (OMI)

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

Grafana Authentication Bypass Vulnerability

Grafana Labs · Grafana

KEV added: 25 Aug 2022 · Due: 15 Sep 2022

Apache HTTP Server-Side Request Forgery (SSRF)

Apache · Apache

KEV added: 01 Dec 2021 · Due: 15 Dec 2021

Apache HTTP Server Path Traversal Vulnerability

Apache · HTTP Server

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

Apache HTTP Server Path Traversal Vulnerability

Apache · HTTP Server

KEV added: 03 Nov 2021 · Due: 17 Nov 2021

Apache Log4j2 Remote Code Execution Vulnerability

Apache · Log4j2

KEV added: 10 Dec 2021 · Due: 24 Dec 2021

Zoho Desktop Central Authentication Bypass Vulnerability

Zoho · Desktop Central

KEV added: 10 Dec 2021 · Due: 24 Dec 2021

Apache Log4j2 Deserialization of Untrusted Data Vulnerability

Apache · Log4j2

KEV added: 01 May 2023 · Due: 22 May 2023