December 2021 · Band 3
Likely to be exploited (10% or more)
47 CVEs
Each square is a CVE that EPSS gives a 10% or higher chance of exploitation in the next 30 days.
- likely to be exploited
- 47
Every one of the 47 is a mark on the map. Named now: 1 to 26, most at risk first.
- Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
- Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration
- Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier
- Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier
- An unrestricted file upload vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to write dangerous files.
- Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2
- Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenticated attacker to inject arbitrary comm…
- A command injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution.
- A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution.
- A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation.
- A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service.
- A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary code executio…
- Unrestricted Upload of Files in Patrowl
- Directory Traversal in Grafana
- Gerapy may contain remote code execution vulnerability
- Invalid handling of X509_verify_cert() internal errors in libssl
- Unexpected server crash in Next.js
- A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the appliance. This vulner…
- SQL Injection in wbce/wbce_cms
- Distributed Data Systems WebHM
- User privilege escalation in MinIO
- HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token (with the default operator:write permissions) i…
- A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request c…
- Prototype Pollution
- Improper Access Control in bookstackapp/bookstack
- A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute code as the 'nobody' user in…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.