CVE-2021-21985
Unknown● ACTIVELY EXPLOITEDRansomware use reported
VMware vCenter Server Improper Input Validation Vulnerability
VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution.
CVSS SCORENot ratedEPSS 30-DAY100.00%ASSET TYPE*Servers
CISA mitigation guidance
Apply updates per vendor instructions.
CVE-2021-22005
Unknown● ACTIVELY EXPLOITEDRansomware use reported
VMware vCenter Server File Upload Vulnerability
VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.
CVSS SCORENot ratedEPSS 30-DAY100.00%ASSET TYPE*Network
CISA mitigation guidance
Apply updates per vendor instructions.
CVE-2019-11510
Unknown● ACTIVELY EXPLOITEDRansomware use reported
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI.
CVSS SCORENot ratedEPSS 30-DAY100.00%ASSET TYPE*Network
CISA mitigation guidance
Apply updates per vendor instructions.
CVE-2022-29464
Unknown● ACTIVELY EXPLOITEDRansomware use reported
WSO2 Multiple Products Unrestrictive Upload of File Vulnerability
Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.
CVSS SCORENot ratedEPSS 30-DAY100.00%ASSET TYPE*Other
CISA mitigation guidance
Apply updates per vendor instructions.
CVE-2014-0160
Unknown● ACTIVELY EXPLOITED
OpenSSL Information Disclosure Vulnerability
The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.
CVSS SCORENot ratedEPSS 30-DAY100.00%ASSET TYPE*Other
CISA mitigation guidance
Apply updates per vendor instructions.
CVE-2022-26134
Unknown● ACTIVELY EXPLOITEDRansomware use reported
Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.
CVSS SCORENot ratedEPSS 30-DAY100.00%ASSET TYPE*Servers
CISA mitigation guidance
Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.
CVE-2012-1823
Unknown● ACTIVELY EXPLOITED
PHP-CGI Query String Parameter Vulnerability
sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.
CVSS SCORENot ratedEPSS 30-DAY100.00%ASSET TYPE*Web
CISA mitigation guidance
Apply updates per vendor instructions.
CVE-2013-2251
Unknown● ACTIVELY EXPLOITED
Apache Struts Improper Input Validation Vulnerability
Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.
CVSS SCORENot ratedEPSS 30-DAY100.00%ASSET TYPE*Other
CISA mitigation guidance
Apply updates per vendor instructions.
CVE-2022-22954
Unknown● ACTIVELY EXPLOITEDRansomware use reported
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.
CVSS SCORENot ratedEPSS 30-DAY100.00%ASSET TYPE*Servers
CISA mitigation guidance
Apply updates per vendor instructions.
CVE-2020-14882
Unknown● ACTIVELY EXPLOITED
Oracle WebLogic Server Remote Code Execution Vulnerability
Oracle WebLogic Server contains an unspecified vulnerability, which is assessed to allow for remote code execution, based on this vulnerability being related to CVE-2020-14750.
CVSS SCORENot ratedEPSS 30-DAY100.00%ASSET TYPE*Servers
CISA mitigation guidance
Apply updates per vendor instructions.
CVE-2019-16920
Unknown● ACTIVELY EXPLOITED
D-Link Multiple Routers Command Injection Vulnerability
Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise.
CVSS SCORENot ratedEPSS 30-DAY100.00%ASSET TYPE*Network
CISA mitigation guidance
The impacted product is end-of-life and should be disconnected if still in use.
CVE-2020-9054
Unknown● ACTIVELY EXPLOITED
Zyxel Multiple NAS Devices OS Command Injection Vulnerability
Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code.
CVSS SCORENot ratedEPSS 30-DAY99.99%ASSET TYPE*Network
CISA mitigation guidance
Apply updates per vendor instructions.
CISA KEV catalog last checked: 2026-10-20 17:09:52 UTC. Reports reflect upstream publications and may lag; confirm affected versions and patch instructions with the original vendor. Asset categories are automatically inferred, not verified inventories.