Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2019-4716 | IBM Planning Analytics | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-3929 | Crestron Multiple Products | 2022-04-15 | 2022-05-06 | ||
| CVE-2019-3568 | Meta Platforms WhatsApp | 2022-04-19 | 2022-05-10 | ||
| CVE-2019-3398 | Atlassian Confluence Server and Data Center | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-3010 | Oracle Solaris | 2022-05-25 | 2022-06-15 | ||
| CVE-2019-2616 | Oracle BI Publisher (Formerly XML Publisher) | 2022-03-25 | 2022-04-15 | ||
| CVE-2019-2215 | Android Android Kernel | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-20500 | D-Link DWL-2600AP Access Point | 2023-06-29 | 2023-07-20 | ||
| CVE-2019-20085 | TVT NVMS-1000 | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-1971 | Cisco Enterprise Nfv Infrastructure Software | 9.8critical | — | — | |
| CVE-2019-19356 | Netis WF2419 Devices | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-19006 | Sangoma FreePBX | 2026-02-03 | 2026-02-24 | ||
| CVE-2019-18988 | TeamViewer Desktop | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-1895 | Cisco Enterprise Nfv Infrastructure Software | 9.8critical | — | — | |
| CVE-2019-18426 | Meta Platforms WhatsApp | 2022-05-23 | 2022-06-13 | ||
| CVE-2019-18187 | Trend Micro OfficeScan | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-17621 | D-Link DIR-859 Router | 2023-06-29 | 2023-07-20 | ||
| CVE-2019-17558 | Apache Solr | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-17026 | Mozilla Firefox and Thunderbird | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-16928 | Exim Exim Internet Mailer | 2022-03-03 | 2022-03-17 | ||
| CVE-2019-16920 | D-Link Multiple Routers | 2022-03-25 | 2022-04-15 | ||
| CVE-2019-16759 | vBulletin vBulletin | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-1652 | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | 2022-03-03 | 2022-03-17 | ||
| CVE-2019-16278 | Nostromo nhttpd | 2024-11-07 | 2024-11-28 |