September 2021 · Band 3
Likely to be exploited (10% or more)
51 CVEs
Each square is a CVE that EPSS gives a 10% or higher chance of exploitation in the next 30 days.
- likely to be exploited
- 51
Every one of the 51 is a mark on the map. Named now: 1 to 26, most at risk first.
- Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution.
- An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting…
- Deserialization of Untrusted Data in Resource Controls Remote Code Execution
- UDP Technology/Geutebrück camera devices: Authentication Bypass
- Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API.
- Adobe Acrobat Reader XObject Out-of-Bound Write Vulnerability
- Chart Endpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
- Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass
- Insecure Deserialization of untrusted data causing Remote code execution vulnerability.
- ActionPluginBaseView Deserialization of Untrusted Data RCE
- Adobe Acrobat Reader DC AcroForm buttonGetIcon Use-After-Free Remote Code Execution Vulnerability
- UDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCE
- Adobe Acrobat Reader heap corruption vulnerability could lead to arbitrary code execution
- Adobe Acrobat Reader DC AcroForm getItemAt Use-After-Free Remote Code Execution Vulnerability
- Adobe Acrobat Reader DC AcroForm buttonGetCaption Use-After-Free Remote Code Execution Vulnerability
- Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution Vulnerability
- NULL pointer dereference in httpd core
- mod_proxy_uwsgi out of bound read
- Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability
- UDP Technology/Geutebrück camera devices: Command injection in appfile.filename parameter leading to RCE
- UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE
- UDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE
- An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all confi…
- Visual Studio Remote Code Execution Vulnerability
- UDP Technology/Geutebrück camera devices: Command injection in command parameter leading to RCE
- UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.