| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2023-38035 Ransomware
Ivanti Sentry Authentication Bypass Vulnerability |
Ivanti · Sentry | Aug 22, 2023 | Sep 12, 2023 | 100.0% | — |
| CVE-2018-15961
Adobe ColdFusion Unrestricted File Upload Vulnerability |
Adobe · ColdFusion | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2018-10562 Ransomware
Dasan GPON Routers Command Injection Vulnerability |
Dasan · Gigabit Passive Optical Network (GPON) Routers | Mar 31, 2022 | Apr 21, 2022 | 99.9% | — |
| CVE-2017-11882 Ransomware
Microsoft Office Memory Corruption Vulnerability |
Microsoft · Office | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2022-30525
Zyxel Multiple Firewalls OS Command Injection Vulnerability |
Zyxel · Multiple Firewalls | May 16, 2022 | Jun 6, 2022 | 99.9% | — |
| CVE-2021-3129 Ransomware
Laravel Ignition File Upload Vulnerability |
Laravel · Ignition | Sep 18, 2023 | Oct 9, 2023 | 99.9% | — |
| CVE-2025-24813
Apache Tomcat Path Equivalence Vulnerability |
Apache · Tomcat | Apr 1, 2025 | Apr 22, 2025 | 99.9% | — |
| CVE-2020-10189
Zoho ManageEngine Desktop Central File Upload Vulnerability |
Zoho · ManageEngine | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2014-7169
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability |
GNU · Bourne-Again Shell (Bash) | Jan 28, 2022 | Jul 28, 2022 | 99.9% | — |
| CVE-2024-29824
Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability |
Ivanti · Endpoint Manager (EPM) | Oct 2, 2024 | Oct 23, 2024 | 99.9% | — |
| CVE-2024-27198 Ransomware
JetBrains TeamCity Authentication Bypass Vulnerability |
JetBrains · TeamCity | Mar 7, 2024 | Mar 28, 2024 | 99.9% | — |
| CVE-2022-22963
VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability |
VMware Tanzu · Spring Cloud | Aug 25, 2022 | Sep 15, 2022 | 99.9% | — |
| CVE-2021-26085 Ransomware
Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability |
Atlassian · Confluence Server | Mar 28, 2022 | Apr 18, 2022 | 99.9% | — |
| CVE-2023-34362 Ransomware
Progress MOVEit Transfer SQL Injection Vulnerability |
Progress · MOVEit Transfer | Jun 2, 2023 | Jun 23, 2023 | 99.9% | — |
| CVE-2021-39226
Grafana Authentication Bypass Vulnerability |
Grafana Labs · Grafana | Aug 25, 2022 | Sep 15, 2022 | 99.9% | — |
| CVE-2021-38647 Ransomware
Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerabil… |
Microsoft · Open Management Infrastructure (OMI) | Nov 3, 2021 | Nov 17, 2021 | 99.9% | — |
| CVE-2022-24816
OSGeo GeoServer JAI-EXT Code Injection Vulnerability |
OSGeo · JAI-EXT | Jun 26, 2024 | Jul 17, 2024 | 99.9% | — |
| CVE-2025-4427
Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability |
Ivanti · Endpoint Manager Mobile (EPMM) | May 19, 2025 | Jun 9, 2025 | 99.9% | — |
| CVE-2021-1497
Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability |
Cisco · HyperFlex HX | Nov 3, 2021 | Nov 17, 2021 | 99.9% | — |
| CVE-2025-25257
Fortinet FortiWeb SQL Injection Vulnerability |
Fortinet · FortiWeb | Jul 18, 2025 | Aug 8, 2025 | 99.9% | 1 last Oct 14 |
| CVE-2026-10520
Ivanti Sentry OS Command Injection Vulnerability |
Ivanti · Sentry | Jun 11, 2026 | Jun 14, 2026 | 99.9% | — |
| CVE-2024-32113
Apache OFBiz Path Traversal Vulnerability |
Apache · OFBiz | Aug 7, 2024 | Aug 28, 2024 | 99.9% | — |
| CVE-2019-3396 Ransomware
Atlassian Confluence Server and Data Center Server-Side Template Injection Vuln… |
Atlassian · Confluence Server and Data Server | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2019-0604 Ransomware
Microsoft SharePoint Remote Code Execution Vulnerability |
Microsoft · SharePoint | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2021-20038 Ransomware
SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability |
SonicWall · SMA 100 Appliances | Jan 28, 2022 | Feb 11, 2022 | 99.9% | — |
| CVE-2024-45519
Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability |
Synacor · Zimbra Collaboration Suite (ZCS) | Oct 3, 2024 | Oct 24, 2024 | 99.9% | — |
| CVE-2015-1427
Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability |
Elastic · Elasticsearch | Mar 25, 2022 | Apr 15, 2022 | 99.9% | — |
| CVE-2019-7481 Ransomware
SonicWall SMA100 SQL Injection Vulnerability |
SonicWall · SMA100 | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2020-7961
Liferay Portal Deserialization of Untrusted Data Vulnerability |
Liferay · Liferay Portal | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2023-21839
Oracle WebLogic Server Unspecified Vulnerability |
Oracle · WebLogic Server | May 1, 2023 | May 22, 2023 | 99.9% | — |
| CVE-2018-0296
Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability |
Cisco · Adaptive Security Appliance (ASA) | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2021-22986 Ransomware
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution… |
F5 · BIG-IP and BIG-IQ Centralized Management | Nov 3, 2021 | Nov 17, 2021 | 99.9% | — |
| CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity |
Adobe · Flash Player | Sep 17, 2024 | Oct 8, 2024 | 99.9% | — |
| CVE-2019-1653
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerabili… |
Cisco · Small Business RV320 and RV325 Routers | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2021-27065 Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2022-35405
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability |
Zoho · ManageEngine | Sep 22, 2022 | Oct 13, 2022 | 99.9% | — |
| CVE-2021-35394
Realtek Jungle SDK Remote Code Execution Vulnerability |
Realtek · Jungle Software Development Kit (SDK) | Dec 10, 2021 | Dec 24, 2021 | 99.9% | — |
| CVE-2021-44515
Zoho Desktop Central Authentication Bypass Vulnerability |
Zoho · Desktop Central | Dec 10, 2021 | Dec 24, 2021 | 99.9% | — |
| CVE-2021-36260
Hikvision Improper Input Validation |
Hikvision · Security cameras web server | Jan 10, 2022 | Jan 24, 2022 | 99.9% | — |
| CVE-2021-31166
Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability |
Microsoft · HTTP Protocol Stack | Apr 6, 2022 | Apr 27, 2022 | 99.9% | — |
| CVE-2021-21972 Ransomware
VMware vCenter Server Remote Code Execution Vulnerability |
VMware · vCenter Server | Nov 3, 2021 | Nov 17, 2021 | 99.9% | — |
| CVE-2022-35914
Teclib GLPI Remote Code Execution Vulnerability |
Teclib · GLPI | Mar 7, 2023 | Mar 28, 2023 | 99.9% | — |
| CVE-2022-46169
Cacti Command Injection Vulnerability |
Cacti · Cacti | Feb 16, 2023 | Mar 9, 2023 | 99.8% | — |
| CVE-2021-37415
Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability |
Zoho · ManageEngine ServiceDesk Plus (SDP) | Dec 1, 2021 | Dec 15, 2021 | 99.8% | — |
| CVE-2025-10035 Ransomware
Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability |
Fortra · GoAnywhere MFT | Sep 29, 2025 | Oct 20, 2025 | 99.8% | — |
| CVE-2017-7269
Microsoft Windows Server Buffer Overflow Vulnerability |
Microsoft · Internet Information Services (IIS) | Nov 3, 2021 | May 3, 2022 | 99.8% | — |
| CVE-2023-38831 Ransomware
RARLAB WinRAR Code Execution Vulnerability |
RARLAB · WinRAR | Aug 24, 2023 | Sep 14, 2023 | 99.8% | — |
| CVE-2024-36401
OSGeo GeoServer GeoTools Eval Injection Vulnerability |
OSGeo · GeoServer | Jul 15, 2024 | Aug 5, 2024 | 99.8% | — |
| CVE-2015-3113
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability |
Adobe · Flash Player | Apr 13, 2022 | May 4, 2022 | 99.8% | — |
| CVE-2020-0796 Ransomware
Microsoft SMBv3 Remote Code Execution Vulnerability |
Microsoft · SMBv3 | Feb 10, 2022 | Aug 10, 2022 | 99.8% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.