| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2018-8406 Ransomware
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability |
Microsoft · DirectX Graphics Kernel (DXGKRNL) | Mar 28, 2022 | Apr 18, 2022 | 3.4% | — |
| CVE-2018-8440 Ransomware
Microsoft Windows Privilege Escalation Vulnerability |
Microsoft · Windows | Mar 28, 2022 | Apr 18, 2022 | 18.5% | — |
| CVE-2019-7483
SonicWall SMA100 Directory Traversal Vulnerability |
SonicWall · SMA100 | Mar 28, 2022 | Apr 18, 2022 | 4.0% | — |
| CVE-2021-20028 Ransomware
SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability |
SonicWall · Secure Remote Access (SRA) | Mar 28, 2022 | Apr 18, 2022 | 30.1% | — |
| CVE-2021-26085 Ransomware
Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability |
Atlassian · Confluence Server | Mar 28, 2022 | Apr 18, 2022 | 99.9% | — |
| CVE-2021-34486
Microsoft Windows Event Tracing Privilege Escalation Vulnerability |
Microsoft · Windows | Mar 28, 2022 | Apr 18, 2022 | 9.3% | — |
| CVE-2021-38646 Ransomware
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability |
Microsoft · Office | Mar 28, 2022 | Apr 18, 2022 | 8.0% | — |
| CVE-2022-0543
Debian-specific Redis Server Lua Sandbox Escape Vulnerability |
Redis · Debian-specific Redis Servers | Mar 28, 2022 | Apr 18, 2022 | 99.4% | — |
| CVE-2022-1096
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Mar 28, 2022 | Apr 18, 2022 | 24.7% | — |
| CVE-2005-2773
HP OpenView Network Node Manager Remote Code Execution Vulnerability |
Hewlett Packard (HP) · OpenView Network Node Manager | Mar 25, 2022 | Apr 15, 2022 | 74.4% | — |
| CVE-2009-0927
Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability |
Adobe · Reader and Acrobat | Mar 25, 2022 | Apr 15, 2022 | 96.6% | — |
| CVE-2009-1151
phpMyAdmin Remote Code Execution Vulnerability |
phpMyAdmin · phpMyAdmin | Mar 25, 2022 | Apr 15, 2022 | 96.6% | — |
| CVE-2009-2055
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability |
Cisco · IOS XR | Mar 25, 2022 | Apr 15, 2022 | 3.3% | — |
| CVE-2010-2861 Ransomware
Adobe ColdFusion Directory Traversal Vulnerability |
Adobe · ColdFusion | Mar 25, 2022 | Apr 15, 2022 | 99.7% | — |
| CVE-2010-3035
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability |
Cisco · IOS XR | Mar 25, 2022 | Apr 15, 2022 | 5.7% | — |
| CVE-2010-4344
Exim Heap-Based Buffer Overflow Vulnerability |
Exim · Exim | Mar 25, 2022 | Apr 15, 2022 | 71.7% | — |
| CVE-2010-4345
Exim Privilege Escalation Vulnerability |
Exim · Exim | Mar 25, 2022 | Apr 15, 2022 | 18.0% | — |
| CVE-2012-1823
PHP-CGI Query String Parameter Vulnerability |
PHP · PHP | Mar 25, 2022 | Apr 15, 2022 | 100.0% | — |
| CVE-2013-2251
Apache Struts Improper Input Validation Vulnerability |
Apache · Struts | Mar 25, 2022 | Apr 15, 2022 | 100.0% | — |
| CVE-2013-4810
HP Multiple Products Remote Code Execution Vulnerability |
Hewlett Packard (HP) · ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management | Mar 25, 2022 | Apr 15, 2022 | 79.5% | — |
| CVE-2013-5223
D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability |
D-Link · DSL-2760U | Mar 25, 2022 | Apr 15, 2022 | 50.8% | — |
| CVE-2014-0130
Ruby on Rails Directory Traversal Vulnerability |
Rails · Ruby on Rails | Mar 25, 2022 | Apr 15, 2022 | 53.7% | — |
| CVE-2014-3120
Elasticsearch Remote Code Execution Vulnerability |
Elastic · Elasticsearch | Mar 25, 2022 | Apr 15, 2022 | 88.6% | — |
| CVE-2014-6287
Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability |
Rejetto · HTTP File Server (HFS) | Mar 25, 2022 | Apr 15, 2022 | 99.3% | — |
| CVE-2014-6324
Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerabi… |
Microsoft · Kerberos Key Distribution Center (KDC) | Mar 25, 2022 | Apr 15, 2022 | 87.3% | — |
| CVE-2014-6332
Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code… |
Microsoft · Windows | Mar 25, 2022 | Apr 15, 2022 | 94.9% | — |
| CVE-2015-0666
Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability |
Cisco · Prime Data Center Network Manager (DCNM) | Mar 25, 2022 | Apr 15, 2022 | 40.4% | — |
| CVE-2015-1187
D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability |
D-Link and TRENDnet · Multiple Devices | Mar 25, 2022 | Apr 15, 2022 | 82.7% | — |
| CVE-2015-1427
Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability |
Elastic · Elasticsearch | Mar 25, 2022 | Apr 15, 2022 | 99.9% | — |
| CVE-2015-3035
TP-Link Multiple Archer Devices Directory Traversal Vulnerability |
TP-Link · Multiple Archer Devices | Mar 25, 2022 | Apr 15, 2022 | 83.9% | — |
| CVE-2015-4068
Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability |
Arcserve · Unified Data Protection (UDP) | Mar 25, 2022 | Apr 15, 2022 | 63.6% | — |
| CVE-2016-0752
Ruby on Rails Directory Traversal Vulnerability |
Rails · Ruby on Rails | Mar 25, 2022 | Apr 15, 2022 | 95.5% | — |
| CVE-2016-10174
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability |
NETGEAR · WNR2000v5 Router | Mar 25, 2022 | Apr 15, 2022 | 83.3% | — |
| CVE-2016-11021
D-Link DCS-930L Devices OS Command Injection Vulnerability |
D-Link · DCS-930L Devices | Mar 25, 2022 | Apr 15, 2022 | 69.6% | — |
| CVE-2016-1555
NETGEAR Multiple WAP Devices Command Injection Vulnerability |
NETGEAR · Wireless Access Point (WAP) Devices | Mar 25, 2022 | Apr 15, 2022 | 98.3% | — |
| CVE-2016-4171
Adobe Flash Player Remote Code Execution Vulnerability |
Adobe · Flash Player | Mar 25, 2022 | Apr 15, 2022 | 20.1% | — |
| CVE-2016-7892
Adobe Flash Player Use-After-Free Vulnerability |
Adobe · Flash Player | Mar 25, 2022 | Apr 15, 2022 | 19.1% | — |
| CVE-2017-0146 Ransomware
Microsoft Windows SMB Remote Code Execution Vulnerability |
Microsoft · Windows | Mar 25, 2022 | Apr 15, 2022 | 89.9% | — |
| CVE-2017-12615 Ransomware
Apache Tomcat on Windows Remote Code Execution Vulnerability |
Apache · Tomcat | Mar 25, 2022 | Apr 15, 2022 | 99.7% | — |
| CVE-2017-12617
Apache Tomcat Remote Code Execution Vulnerability |
Apache · Tomcat | Mar 25, 2022 | Apr 15, 2022 | 100.0% | — |
| CVE-2017-3881
Cisco IOS and IOS XE Remote Code Execution Vulnerability |
Cisco · IOS and IOS XE | Mar 25, 2022 | Apr 15, 2022 | 99.0% | — |
| CVE-2017-6316
Citrix Multiple Products Remote Code Execution Vulnerability |
Citrix · NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | Mar 25, 2022 | Apr 15, 2022 | 73.0% | — |
| CVE-2017-6334
NETGEAR DGN2200 Devices OS Command Injection Vulnerability |
NETGEAR · DGN2200 Devices | Mar 25, 2022 | Apr 15, 2022 | 72.6% | — |
| CVE-2018-0125
Cisco VPN Routers Remote Code Execution Vulnerability |
Cisco · VPN Routers | Mar 25, 2022 | Apr 15, 2022 | 55.2% | — |
| CVE-2018-0147
Cisco Secure Access Control System Java Deserialization Vulnerability |
Cisco · Secure Access Control System (ACS) | Mar 25, 2022 | Apr 15, 2022 | 18.2% | — |
| CVE-2018-11138 Ransomware
Quest KACE System Management Appliance Remote Command Execution Vulnerability |
Quest · KACE System Management Appliance | Mar 25, 2022 | Apr 15, 2022 | 91.6% | — |
| CVE-2018-1273 Ransomware
VMware Tanzu Spring Data Commons Property Binder Vulnerability |
VMware Tanzu · Spring Data Commons | Mar 25, 2022 | Apr 15, 2022 | 97.0% | — |
| CVE-2018-14839
LG N1A1 NAS Remote Command Execution Vulnerability |
LG · N1A1 NAS | Mar 25, 2022 | Apr 15, 2022 | 89.2% | — |
| CVE-2018-6961
VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability |
VMware · SD-WAN Edge | Mar 25, 2022 | Apr 15, 2022 | 85.5% | — |
| CVE-2018-8373
Microsoft Scripting Engine Memory Corruption Vulnerability |
Microsoft · Internet Explorer Scripting Engine | Mar 25, 2022 | Apr 15, 2022 | 61.8% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.