February 2021 · Band 1
Exploited in the wild
19 CVEs · 19 exploited
Each square is a CVE listed by CISA as exploited. The named ones are the most likely to be exploited again.
- exploited in the wild
- 19
Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.
- D-Link DNS-320 - Unauthenticated Remote Code Execution
- VMware vSphere Client (HTML5) - Remote Code Execution
- Adminer <4.7.9 - Server-Side Request Forgery
- Micro Focus Operations Bridge Reporter - Remote Code Execution
- Node.JS System Information Library <5.3.1 - Remote Command Injection
- VMware vSphere - Server-Side Request Forgery
- Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution
- Windows Win32k Elevation of Privilege Vulnerability
- Nagios XI 5.5.6-5.7.5 - Authenticated Remote Command Injection
- Nagios XI 5.5.6-5.7.5 - Authenticated Remote Command Injection
- Nagios 5.5.6-5.7.5 - Authenticated Remote Command Injection
- Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is FTA_9_12_380 and later.
- A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session re…
- Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version is FTA_9_12_416 and later.
- Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. The fixed version is FTA_9_12_380 and later.
- Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version is FTA_9_12_416 and later.
- improper access control vulnerability in Helpdesk
- McAfee Total Protection (MTP) privilege escalation vulnerability
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.