HackZoneLabs News
Newsletter

Known exploited vulnerabilities

From CISA’s Known Exploited Vulnerabilities catalogue: flaws that attackers are using now, when each was added, and the date federal agencies were told to fix it by.

Feed of new additions

In the catalogue
1781
Added in the last 7 days
12
Used in ransomware
361

The catalogue, newest first

CVEVendorProductNameAddedFix dueRansomware
CVE-2017-8570MicrosoftOfficeMicrosoft Office Remote Code Execution Vulnerability25 Feb 202225 Aug 2022Unknown
CVE-2022-24682SynacorZimbra Collaborate Suite (ZCS)Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability25 Feb 202211 Mar 2022Known
CVE-2022-23131ZabbixFrontendZabbix Frontend Authentication Bypass Vulnerability22 Feb 20228 Mar 2022Unknown
CVE-2022-23134ZabbixFrontendZabbix Frontend Improper Access Control Vulnerability22 Feb 20228 Mar 2022Unknown
CVE-2013-3906MicrosoftGraphics ComponentMicrosoft Graphics Component Memory Corruption Vulnerability15 Feb 202215 Aug 2022Unknown
CVE-2014-1761MicrosoftWordMicrosoft Word Memory Corruption Vulnerability15 Feb 202215 Aug 2022Unknown
CVE-2017-9841PHPUnitPHPUnitPHPUnit Command Injection Vulnerability15 Feb 202215 Aug 2022Unknown
CVE-2018-15982AdobeFlash PlayerAdobe Flash Player Use-After-Free Vulnerability15 Feb 202215 Aug 2022Known
CVE-2018-20250RARLABWinRARWinRAR Absolute Path Traversal Vulnerability15 Feb 202215 Aug 2022Known
CVE-2018-8174MicrosoftWindowsMicrosoft Windows VBScript Engine Out-of-Bounds Write Vulnerability15 Feb 202215 Aug 2022Known
CVE-2019-0752MicrosoftInternet ExplorerMicrosoft Internet Explorer Type Confusion Vulnerability15 Feb 202215 Aug 2022Known
CVE-2022-0609GoogleChromium AnimationGoogle Chromium Animation Use-After-Free Vulnerability15 Feb 20221 Mar 2022Unknown
CVE-2022-24086AdobeCommerce and Magento Open SourceAdobe Commerce and Magento Open Source Improper Input Validation Vulnerability15 Feb 20221 Mar 2022Unknown
CVE-2022-22620AppleiOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability11 Feb 202225 Feb 2022Unknown
CVE-2014-4404AppleOS XApple OS X Heap-Based Buffer Overflow Vulnerability10 Feb 202210 Aug 2022Unknown
CVE-2015-1130AppleOS XApple OS X Authentication Bypass Vulnerability10 Feb 202210 Aug 2022Unknown
CVE-2015-1635MicrosoftHTTP.sysMicrosoft HTTP.sys Remote Code Execution Vulnerability10 Feb 202210 Aug 2022Unknown
CVE-2015-2051D-LinkDIR-645 RouterD-Link DIR-645 Router Remote Code Execution Vulnerability10 Feb 202210 Aug 2022Unknown
CVE-2016-3088ApacheActiveMQApache ActiveMQ Improper Input Validation Vulnerability10 Feb 202210 Aug 2022Unknown
CVE-2017-0144MicrosoftSMBv1Microsoft SMBv1 Remote Code Execution Vulnerability10 Feb 202210 Aug 2022Known
CVE-2017-0145MicrosoftSMBv1Microsoft SMBv1 Remote Code Execution Vulnerability10 Feb 202210 Aug 2022Known
CVE-2017-0262MicrosoftOfficeMicrosoft Office Remote Code Execution Vulnerability10 Feb 202210 Aug 2022Unknown
CVE-2017-0263MicrosoftWin32kMicrosoft Win32k Privilege Escalation Vulnerability10 Feb 202210 Aug 2022Unknown
CVE-2017-10271OracleWebLogic ServerOracle Corporation WebLogic Server Remote Code Execution Vulnerability10 Feb 202210 Aug 2022Known
CVE-2017-8464MicrosoftWindowsMicrosoft Windows Shell (.lnk) Remote Code Execution Vulnerability10 Feb 202210 Aug 2022Unknown
CVE-2017-9791ApacheStruts 1Apache Struts 1 Improper Input Validation Vulnerability10 Feb 202210 Aug 2022Unknown
CVE-2018-1000861JenkinsJenkins Stapler Web FrameworkJenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability10 Feb 202210 Aug 2022Unknown
CVE-2020-0796MicrosoftSMBv3Microsoft SMBv3 Remote Code Execution Vulnerability10 Feb 202210 Aug 2022Known
CVE-2021-36934MicrosoftWindowsMicrosoft Windows SAM Local Privilege Escalation Vulnerability10 Feb 202224 Feb 2022Unknown
CVE-2022-21882MicrosoftWin32kMicrosoft Win32k Privilege Escalation Vulnerability4 Feb 202218 Feb 2022Known
CVE-2014-1776MicrosoftInternet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability28 Jan 202228 Jul 2022Unknown
CVE-2014-6271GNUBourne-Again Shell (Bash)GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability28 Jan 202228 Jul 2022Unknown
CVE-2014-7169GNUBourne-Again Shell (Bash)GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability28 Jan 202228 Jul 2022Unknown
CVE-2017-5689IntelActive Management Technology (AMT), Small Business Technology (SBT), and Standard ManageabilityIntel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability28 Jan 202228 Jul 2022Unknown
CVE-2020-0787MicrosoftWindowsMicrosoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability28 Jan 202228 Jul 2022Known
CVE-2020-5722GrandstreamUCM6200Grandstream Networks UCM6200 Series SQL Injection Vulnerability28 Jan 202228 Jul 2022Unknown
CVE-2021-20038SonicWallSMA 100 AppliancesSonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability28 Jan 202211 Feb 2022Known
CVE-2022-22587AppleiOS and macOSApple Memory Corruption Vulnerability28 Jan 202211 Feb 2022Unknown
CVE-2006-1547ApacheStruts 1Apache Struts 1 ActionForm Denial-of-Service Vulnerability21 Jan 202221 Jul 2022Unknown
CVE-2012-0391ApacheStruts 2Apache Struts 2 Improper Input Validation Vulnerability21 Jan 202221 Jul 2022Unknown
CVE-2018-8453MicrosoftWin32kMicrosoft Win32k Privilege Escalation Vulnerability21 Jan 202221 Jul 2022Known
CVE-2021-35247SolarWindsServ-USolarWinds Serv-U Improper Input Validation Vulnerability21 Jan 20224 Feb 2022Unknown
CVE-2020-11978ApacheAirflowApache Airflow Command Injection18 Jan 202218 Jul 2022Unknown
CVE-2020-13671DrupalDrupal coreDrupal core Un-restricted Upload of File18 Jan 202218 Jul 2022Unknown
CVE-2020-13927ApacheAirflow's Experimental APIApache Airflow's Experimental API Authentication Bypass18 Jan 202218 Jul 2022Unknown
CVE-2020-14864OracleIntelligence Enterprise EditionOracle Business Intelligence Enterprise Edition Path Transversal18 Jan 202218 Jul 2022Unknown
CVE-2021-21315Npm packageSystem Information Library for Node.JSSystem Information Library for Node.JS Command Injection18 Jan 20221 Feb 2022Unknown
CVE-2021-21975VMwarevRealize Operations Manager APIVMware Server Side Request Forgery in vRealize Operations Manager API18 Jan 20221 Feb 2022Known
CVE-2021-22991F5BIG-IP Traffic Management MicrokernelF5 BIG-IP Traffic Management Microkernel Buffer Overflow18 Jan 20221 Feb 2022Unknown
CVE-2021-25296NagiosNagios XINagios XI OS Command Injection18 Jan 20221 Feb 2022Unknown
CVE-2021-25297NagiosNagios XINagios XI OS Command Injection18 Jan 20221 Feb 2022Unknown
CVE-2021-25298NagiosNagios XINagios XI OS Command Injection18 Jan 20221 Feb 2022Unknown
CVE-2021-32648October CMSOctober CMSOctober CMS Improper Authentication18 Jan 20221 Feb 2022Unknown
CVE-2021-33766MicrosoftExchange ServerMicrosoft Exchange Server Information Disclosure18 Jan 20221 Feb 2022Unknown
CVE-2021-40870AviatrixAviatrix ControllerAviatrix Controller Unrestricted Upload of File18 Jan 20221 Feb 2022Unknown
CVE-2013-3900MicrosoftWinVerifyTrust functionMicrosoft WinVerifyTrust function Remote Code Execution10 Jan 202210 Jul 2022Unknown
CVE-2015-7450IBMWebSphere Application Server and Server Hypervisor EditionIBM WebSphere Application Server and Server Hypervisor Edition Code Injection.10 Jan 202210 Jul 2022Unknown
CVE-2017-1000486PrimetekPrimefaces ApplicationPrimetek Primefaces Remote Code Execution Vulnerability10 Jan 202210 Jul 2022Unknown
CVE-2018-13382FortinetFortiOS and FortiProxyFortinet FortiOS and FortiProxy Improper Authorization10 Jan 202210 Jul 2022Known
CVE-2018-13383FortinetFortiOS and FortiProxyFortinet FortiOS and FortiProxy Out-of-bounds Write10 Jan 202210 Jul 2022Known
CVE-2019-10149EximMail Transfer Agent (MTA)Exim Mail Transfer Agent (MTA) Improper Input Validation10 Jan 202210 Jul 2022Unknown
CVE-2019-1458MicrosoftWin32kMicrosoft Win32k Privilege Escalation Vulnerability10 Jan 202210 Jul 2022Known
CVE-2019-1579Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Remote Code Execution Vulnerability10 Jan 202210 Jul 2022Known
CVE-2019-2725OracleWebLogic ServerOracle WebLogic Server, Injection10 Jan 202210 Jul 2022Known
CVE-2019-7609ElasticKibanaKibana Arbitrary Code Execution10 Jan 202210 Jul 2022Unknown
CVE-2019-9670SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference10 Jan 202210 Jul 2022Unknown
CVE-2020-6572GoogleChrome MediaGoogle Chrome Media Use-After-Free Vulnerability10 Jan 202210 Jul 2022Unknown
CVE-2021-22017VMwarevCenter ServerVMware vCenter Server Improper Access Control10 Jan 202224 Jan 2022Unknown
CVE-2021-27860FatPipeWARP, IPVPN, and MPVPN softwareFatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit10 Jan 202224 Jan 2022Unknown
CVE-2021-36260HikvisionSecurity cameras web serverHikvision Improper Input Validation10 Jan 202224 Jan 2022Unknown
CVE-2021-4102GoogleChromium V8Google Chromium V8 Use-After-Free Vulnerability15 Dec 202129 Dec 2021Unknown
CVE-2021-43890MicrosoftWindowsMicrosoft Windows AppX Installer Spoofing Vulnerability15 Dec 202129 Dec 2021Known
CVE-2010-1871Red HatJBoss Seam 2Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability10 Dec 202110 Jun 2022Unknown
CVE-2017-12149Red HatJBoss Application ServerRed Hat JBoss Application Server Remote Code Execution Vulnerability10 Dec 202110 Jun 2022Known
CVE-2017-17562EmbedthisGoAheadEmbedthis GoAhead Remote Code Execution Vulnerability10 Dec 202110 Jun 2022Unknown
CVE-2019-0193ApacheSolrApache Solr DataImportHandler Code Injection Vulnerability10 Dec 202110 Jun 2022Unknown
CVE-2019-10758MongoDBmongo-expressMongoDB mongo-express Remote Code Execution Vulnerability10 Dec 202110 Jun 2022Unknown
CVE-2019-13272LinuxKernelLinux Kernel Improper Privilege Management Vulnerability10 Dec 202110 Jun 2022Unknown
CVE-2019-7238SonatypeNexus Repository ManagerSonatype Nexus Repository Manager Incorrect Access Control Vulnerability10 Dec 202110 Jun 2022Unknown
CVE-2020-17463Fuel CMSFuel CMSFuel CMS SQL Injection Vulnerability10 Dec 202110 Jun 2022Unknown
CVE-2020-8816Pi-holeAdminLTEPi-Hole AdminLTE Remote Code Execution Vulnerability10 Dec 202110 Jun 2022Unknown
CVE-2021-35394RealtekJungle Software Development Kit (SDK)Realtek Jungle SDK Remote Code Execution Vulnerability10 Dec 202124 Dec 2021Unknown
CVE-2021-44168FortinetFortiOSFortinet FortiOS Arbitrary File Download10 Dec 202124 Dec 2021Unknown
CVE-2021-44228ApacheLog4j2Apache Log4j2 Remote Code Execution Vulnerability10 Dec 202124 Dec 2021Known
CVE-2021-44515ZohoDesktop CentralZoho Desktop Central Authentication Bypass Vulnerability10 Dec 202124 Dec 2021Unknown
CVE-2018-14847MikroTikRouterOSMikroTik Router OS Directory Traversal Vulnerability1 Dec 20211 Jun 2022Unknown
CVE-2020-11261QualcommSnapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesQualcomm Multiple Chipsets Improper Input Validation Vulnerability1 Dec 20211 Jun 2022Unknown
CVE-2021-37415ZohoManageEngine ServiceDesk Plus (SDP)Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability1 Dec 202115 Dec 2021Unknown
CVE-2021-40438ApacheApacheApache HTTP Server-Side Request Forgery (SSRF)1 Dec 202115 Dec 2021Known
CVE-2021-44077ZohoManageEngine ServiceDesk Plus (SDP) / SupportCenter PlusZoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability1 Dec 202115 Dec 2021Unknown
CVE-2021-22204PerlExiftoolExifTool Remote Code Execution Vulnerability17 Nov 20211 Dec 2021Unknown
CVE-2021-40449MicrosoftWindowsMicrosoft Windows Win32k Privilege Escalation Vulnerability17 Nov 20211 Dec 2021Known
CVE-2021-42292MicrosoftOfficeMicrosoft Excel Security Feature Bypass17 Nov 20211 Dec 2021Unknown
CVE-2021-42321MicrosoftExchangeMicrosoft Exchange Server Remote Code Execution Vulnerability17 Nov 20211 Dec 2021Known
CVE-2010-5326SAPNetWeaverSAP NetWeaver Remote Code Execution Vulnerability3 Nov 20213 May 2022Unknown
CVE-2012-0158MicrosoftMSCOMCTL.OCXMicrosoft MSCOMCTL.OCX Remote Code Execution Vulnerability3 Nov 20213 May 2022Known
CVE-2012-3152OracleFusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability3 Nov 20213 May 2022Unknown
CVE-2014-1812MicrosoftWindowsMicrosoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability3 Nov 20213 May 2022Known
CVE-2015-1641MicrosoftOfficeMicrosoft Office Memory Corruption Vulnerability3 Nov 20213 May 2022Unknown
CVE-2015-4852OracleWebLogic ServerOracle WebLogic Server Deserialization of Untrusted Data Vulnerability3 Nov 20213 May 2022Unknown