Home / CVEs
Exploited vulnerabilities (CISA KEV)
CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.
CVE-2025-37164
Critical · 9.8
KEV Urgent · 83 Public exploit CWE-94 Dec 16, 2025
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
A remote code execution issue exists in HPE OneView.
CVE-2017-5689
Critical · 9.8
KEV Urgent · 83 Public exploit CWE-269 May 2, 2017
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
CVE-2015-5477
High · 7.5
KEV Urgent · 79 Public exploit CWE-19 Jul 29, 2015
ISC BIND Data Processing Errors Vulnerability
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.