1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 15 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2023-36036Microsoft / WindowsMicrosoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnera…2023-11-14
16.7%
CVE-2023-36844Juniper / Junos OSJuniper Junos OS EX Series PHP External Variable Modification Vulnerability2023-11-13
90.0%
CVE-2023-36845Juniper / Junos OSJuniper Junos OS EX Series and SRX Series PHP External Variable Modification …2023-11-13
95.1%
CVE-2023-36846Juniper / Junos OSJuniper Junos OS SRX Series Missing Authentication for Critical Function Vuln…2023-11-13
93.5%
CVE-2023-36847Juniper / Junos OSJuniper Junos OS EX Series Missing Authentication for Critical Function Vulne…2023-11-13
83.5%
CVE-2023-36851Juniper / Junos OSJuniper Junos OS SRX Series Missing Authentication for Critical Function Vuln…2023-11-13
1.1%
CVE-2023-47246SysAid / SysAid ServerSysAid Server Path Traversal Vulnerability2023-11-13
98.9%
CVE-2023-29552IETF / Service Location Protocol (SLP)Service Location Protocol (SLP) Denial-of-Service Vulnerability2023-11-08
64.0%
CVE-2023-22518Atlassian / Confluence Data Center and ServerAtlassian Confluence Data Center and Server Improper Authorization Vulnerability2023-11-07
100.0%
CVE-2023-46604Apache / ActiveMQApache ActiveMQ Deserialization of Untrusted Data Vulnerability2023-11-02
99.9%
CVE-2023-46747F5 / BIG-IP Configuration UtilityF5 BIG-IP Configuration Utility Authentication Bypass Vulnerability2023-10-31
96.5%
CVE-2023-46748F5 / BIG-IP Configuration UtilityF5 BIG-IP Configuration Utility SQL Injection Vulnerability2023-10-31
4.5%
CVE-2023-5631Roundcube / WebmailRoundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability2023-10-26
75.9%
CVE-2023-20273Cisco / Cisco IOS XE Web UICisco IOS XE Web UI Command Injection Vulnerability2023-10-23
89.6%
CVE-2023-4966Citrix / NetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability2023-10-18
100.0%
CVE-2023-20198Cisco / IOS XE Web UICisco IOS XE Web UI Privilege Escalation Vulnerability2023-10-16
99.6%
CVE-2023-20109Cisco / IOS and IOS XECisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulner…2023-10-10
2.5%
CVE-2023-21608Adobe / Acrobat and ReaderAdobe Acrobat and Reader Use-After-Free Vulnerability2023-10-10
61.5%
CVE-2023-36563Microsoft / WordPadMicrosoft WordPad Information Disclosure Vulnerability2023-10-10
20.7%
CVE-2023-41763Microsoft / Skype for BusinessMicrosoft Skype for Business Privilege Escalation Vulnerability2023-10-10
90.4%
CVE-2023-44487IETF / HTTP/2HTTP/2 Rapid Reset Attack Vulnerability2023-10-10
100.0%
CVE-2023-22515Atlassian / Confluence Data Center and ServerAtlassian Confluence Data Center and Server Broken Access Control Vulnerability2023-10-05
99.2%
CVE-2023-40044Progress / WS_FTP ServerProgress WS_FTP Server Deserialization of Untrusted Data Vulnerability2023-10-05
90.4%
CVE-2023-42824Apple / iOS and iPadOSApple iOS and iPadOS Kernel Privilege Escalation Vulnerability2023-10-05
1.1%
CVE-2023-28229Microsoft / Windows CNG Key Isolation ServiceMicrosoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability2023-10-04
1.7%
CVE-2023-42793JetBrains / TeamCityJetBrains TeamCity Authentication Bypass Vulnerability2023-10-04
100.0%
CVE-2023-4211Arm / Mali GPU Kernel DriverArm Mali GPU Kernel Driver Use-After-Free Vulnerability2023-10-03
1.1%
CVE-2023-5217Google / Chromium libvpxGoogle Chromium libvpx Heap Buffer Overflow Vulnerability2023-10-02
49.0%
CVE-2018-14667Red Hat / JBoss RichFaces FrameworkRed Hat JBoss RichFaces Framework Expression Language Injection Vulnerability2023-09-28
74.2%
CVE-2023-41991Apple / Multiple ProductsApple Multiple Products Improper Certificate Validation Vulnerability2023-09-25
13.4%
CVE-2023-41992Apple / Multiple ProductsApple Multiple Products Kernel Privilege Escalation Vulnerability2023-09-25
9.5%
CVE-2023-41993Apple / Multiple ProductsApple Multiple Products WebKit Code Execution Vulnerability2023-09-25
24.3%
CVE-2023-41179Trend Micro / Apex One and Worry-Free Business SecurityTrend Micro Apex One and Worry-Free Business Security Remote Code Execution V…2023-09-21
4.3%
CVE-2023-28434MinIO / MinIOMinIO Security Feature Bypass Vulnerability2023-09-19
7.9%
CVE-2014-8361Realtek / SDKRealtek SDK Improper Input Validation Vulnerability2023-09-18
100.0%
CVE-2017-6884Zyxel / EMG2926 RoutersZyxel EMG2926 Routers Command Injection Vulnerability2023-09-18
34.6%
CVE-2021-3129Laravel / IgnitionLaravel Ignition File Upload Vulnerability2023-09-18
99.9%
CVE-2022-22265Samsung / Mobile DevicesSamsung Mobile Devices Use-After-Free Vulnerability2023-09-18
0.4%
CVE-2023-26369Adobe / Acrobat and ReaderAdobe Acrobat and Reader Out-of-Bounds Write Vulnerability2023-09-14
6.7%
CVE-2023-20269Cisco / Adaptive Security Appliance and Firepower Threat DefenseCisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized A…2023-09-13
25.5%
CVE-2023-35674Android / FrameworkAndroid Framework Privilege Escalation Vulnerability2023-09-13
2.6%
CVE-2023-4863Google / Chromium WebPGoogle Chromium WebP Heap-Based Buffer Overflow Vulnerability2023-09-13
100.0%
CVE-2023-36761Microsoft / WordMicrosoft Word Information Disclosure Vulnerability2023-09-12
19.6%
CVE-2023-36802Microsoft / Streaming Service ProxyMicrosoft Streaming Service Proxy Privilege Escalation Vulnerability2023-09-12
27.9%
CVE-2023-41061Apple / iOS, iPadOS, and watchOSApple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability2023-09-11
4.4%
CVE-2023-41064Apple / iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability2023-09-11
53.4%
CVE-2023-33246Apache / RocketMQApache RocketMQ Command Execution Vulnerability2023-09-06
96.6%
CVE-2023-32315Ignite Realtime / OpenfireIgnite Realtime Openfire Path Traversal Vulnerability2023-08-24
100.0%
CVE-2023-38831RARLAB / WinRARRARLAB WinRAR Code Execution Vulnerability2023-08-24
99.8%
CVE-2023-27532Veeam / Backup & ReplicationVeeam Backup & Replication Cloud Connect Missing Authentication for Critical …2023-08-22
81.3%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.