| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2024-34102
Adobe Commerce and Magento Open Source Improper Restriction of XML External Ent… |
Adobe · Commerce and Magento Open Source | Jul 17, 2024 | Aug 7, 2024 | 100.0% | — |
| CVE-2017-10271 Ransomware
Oracle Corporation WebLogic Server Remote Code Execution Vulnerability |
Oracle · WebLogic Server | Feb 10, 2022 | Aug 10, 2022 | 100.0% | — |
| CVE-2025-3248 Ransomware
Langflow Missing Authentication Vulnerability |
Langflow · Langflow | May 5, 2025 | May 26, 2025 | 100.0% | — |
| CVE-2024-13159
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability |
Ivanti · Endpoint Manager (EPM) | Mar 10, 2025 | Mar 31, 2025 | 100.0% | — |
| CVE-2020-8515
Multiple DrayTek Vigor Routers Web Management Page Vulnerability |
DrayTek · Multiple Vigor Routers | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2023-46604 Ransomware
Apache ActiveMQ Deserialization of Untrusted Data Vulnerability |
Apache · ActiveMQ | Nov 2, 2023 | Nov 23, 2023 | 100.0% | — |
| CVE-2021-41773 Ransomware
Apache HTTP Server Path Traversal Vulnerability |
Apache · HTTP Server | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2020-3452
Cisco ASA and FTD Read-Only Path Traversal Vulnerability |
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2024-27199 Ransomware
JetBrains TeamCity Relative Path Traversal Vulnerability |
JetBrains · TeamCity | Apr 20, 2026 | May 4, 2026 | 100.0% | — |
| CVE-2023-29300 Ransomware
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
Adobe · ColdFusion | Jan 8, 2024 | Jan 29, 2024 | 100.0% | — |
| CVE-2018-7600 Ransomware
Drupal Core Remote Code Execution Vulnerability |
Drupal · Drupal Core | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2021-34523 Ransomware
Microsoft Exchange Server Privilege Escalation Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2021-33044
Dahua IP Camera Authentication Bypass Vulnerability |
Dahua · IP Camera Firmware | Aug 21, 2024 | Sep 11, 2024 | 100.0% | — |
| CVE-2020-9054
Zyxel Multiple NAS Devices OS Command Injection Vulnerability |
Zyxel · Multiple Network-Attached Storage (NAS) Devices | Mar 25, 2022 | Apr 15, 2022 | 100.0% | — |
| CVE-2024-4577 Ransomware
PHP-CGI OS Command Injection Vulnerability |
PHP Group · PHP | Jun 12, 2024 | Jul 3, 2024 | 100.0% | — |
| CVE-2023-42793 Ransomware
JetBrains TeamCity Authentication Bypass Vulnerability |
JetBrains · TeamCity | Oct 4, 2023 | Oct 25, 2023 | 100.0% | — |
| CVE-2019-9670
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External E… |
Synacor · Zimbra Collaboration Suite (ZCS) | Jan 10, 2022 | Jul 10, 2022 | 100.0% | — |
| CVE-2023-22527 Ransomware
Atlassian Confluence Data Center and Server Template Injection Vulnerability |
Atlassian · Confluence Data Center and Server | Jan 24, 2024 | Feb 14, 2024 | 100.0% | — |
| CVE-2023-29357 Ransomware
Microsoft SharePoint Server Privilege Escalation Vulnerability |
Microsoft · SharePoint Server | Jan 10, 2024 | Jan 31, 2024 | 100.0% | — |
| CVE-2023-46805 Ransomware
Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability |
Ivanti · Connect Secure and Policy Secure | Jan 10, 2024 | Jan 22, 2024 | 100.0% | 1 last Oct 15 |
| CVE-2022-40684 Ransomware
Fortinet Multiple Products Authentication Bypass Vulnerability |
Fortinet · Multiple Products | Oct 11, 2022 | Nov 1, 2022 | 100.0% | — |
| CVE-2024-45195
Apache OFBiz Forced Browsing Vulnerability |
Apache · OFBiz | Feb 4, 2025 | Feb 25, 2025 | 100.0% | — |
| CVE-2024-1709 Ransomware
ConnectWise ScreenConnect Authentication Bypass Vulnerability |
ConnectWise · ScreenConnect | Feb 22, 2024 | Feb 29, 2024 | 100.0% | — |
| CVE-2021-20090
Arcadyan Buffalo Firmware Path Traversal Vulnerability |
Arcadyan · Buffalo Firmware | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2025-22457 Ransomware
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overf… |
Ivanti · Connect Secure, Policy Secure, and ZTA Gateways | Apr 4, 2025 | Apr 11, 2025 | 100.0% | — |
| CVE-2025-0282 Ransomware
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overf… |
Ivanti · Connect Secure, Policy Secure, and ZTA Gateways | Jan 8, 2025 | Jan 15, 2025 | 100.0% | — |
| CVE-2021-22204
ExifTool Remote Code Execution Vulnerability |
Perl · Exiftool | Nov 17, 2021 | Dec 1, 2021 | 100.0% | — |
| CVE-2025-59287
Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Dat… |
Microsoft · Windows | Oct 24, 2025 | Nov 14, 2025 | 100.0% | — |
| CVE-2023-4863
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability |
Google · Chromium WebP | Sep 13, 2023 | Oct 4, 2023 | 100.0% | — |
| CVE-2024-24919 Ransomware
Check Point Quantum Security Gateways Information Disclosure Vulnerability |
Check Point · Quantum Security Gateways | May 30, 2024 | Jun 20, 2024 | 100.0% | — |
| CVE-2021-45046 Ransomware
Apache Log4j2 Deserialization of Untrusted Data Vulnerability |
Apache · Log4j2 | May 1, 2023 | May 22, 2023 | 100.0% | — |
| CVE-2019-2725 Ransomware
Oracle WebLogic Server, Injection |
Oracle · WebLogic Server | Jan 10, 2022 | Jul 10, 2022 | 100.0% | — |
| CVE-2024-4879
ServiceNow Improper Input Validation Vulnerability |
ServiceNow · Utah, Vancouver, and Washington DC Now Platform | Jul 29, 2024 | Aug 19, 2024 | 100.0% | — |
| CVE-2012-0158 Ransomware
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability |
Microsoft · MSCOMCTL.OCX | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2025-24893
XWiki Platform Eval Injection Vulnerability |
XWiki · Platform | Oct 30, 2025 | Nov 20, 2025 | 100.0% | — |
| CVE-2014-8361
Realtek SDK Improper Input Validation Vulnerability |
Realtek · SDK | Sep 18, 2023 | Oct 9, 2023 | 100.0% | — |
| CVE-2022-41082 Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft · Exchange Server | Sep 30, 2022 | Oct 21, 2022 | 100.0% | — |
| CVE-2025-31161 Ransomware
CrushFTP Authentication Bypass Vulnerability |
CrushFTP · CrushFTP | Apr 7, 2025 | Apr 28, 2025 | 100.0% | — |
| CVE-2017-12617
Apache Tomcat Remote Code Execution Vulnerability |
Apache · Tomcat | Mar 25, 2022 | Apr 15, 2022 | 100.0% | — |
| CVE-2020-25506
D-Link DNS-320 Device Command Injection Vulnerability |
D-Link · DNS-320 Device | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2022-47986 Ransomware
IBM Aspera Faspex Code Execution Vulnerability |
IBM · Aspera Faspex | Feb 21, 2023 | Mar 14, 2023 | 100.0% | — |
| CVE-2025-5777 Ransomware
Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability |
Citrix · NetScaler ADC and Gateway | Jul 10, 2025 | Jul 11, 2025 | 100.0% | — |
| CVE-2021-42013 Ransomware
Apache HTTP Server Path Traversal Vulnerability |
Apache · HTTP Server | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2021-3156
Sudo Heap-Based Buffer Overflow Vulnerability |
Sudo · Sudo | Apr 6, 2022 | Apr 27, 2022 | 100.0% | — |
| CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation |
Exim · Mail Transfer Agent (MTA) | Jan 10, 2022 | Jul 10, 2022 | 100.0% | — |
| CVE-2018-2628
Oracle WebLogic Server Unspecified Vulnerability |
Oracle · WebLogic Server | Sep 8, 2022 | Sep 29, 2022 | 100.0% | — |
| CVE-2024-38475
Apache HTTP Server Improper Escaping of Output Vulnerability |
Apache · HTTP Server | May 1, 2025 | May 22, 2025 | 100.0% | — |
| CVE-2022-41040 Ransomware
Microsoft Exchange Server Server-Side Request Forgery Vulnerability |
Microsoft · Exchange Server | Sep 30, 2022 | Oct 21, 2022 | 100.0% | — |
| CVE-2020-0688 Ransomware
Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2022-1388 Ransomware
F5 BIG-IP Missing Authentication Vulnerability |
F5 · BIG-IP | May 10, 2022 | May 31, 2022 | 100.0% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.