1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 16 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2023-38035Ivanti / SentryIvanti Sentry Authentication Bypass Vulnerability2023-08-22
100.0%
CVE-2023-26359Adobe / ColdFusionAdobe ColdFusion Deserialization of Untrusted Data Vulnerability2023-08-21
17.0%
CVE-2023-24489Citrix / Content CollaborationCitrix Content Collaboration ShareFile Improper Access Control Vulnerability2023-08-16
97.3%
CVE-2023-38180Microsoft / .NET Core and Visual StudioMicrosoft .NET Core and Visual Studio Denial-of-Service Vulnerability2023-08-09
14.0%
CVE-2017-18368Zyxel / P660HN-T1A RoutersZyxel P660HN-T1A Routers Command Injection Vulnerability2023-08-07
94.4%
CVE-2023-35081Ivanti / Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability2023-07-31
63.6%
CVE-2023-37580Synacor / Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerabi…2023-07-27
49.1%
CVE-2023-38606Apple / Multiple ProductsApple Multiple Products Kernel Unspecified Vulnerability2023-07-26
2.9%
CVE-2023-35078Ivanti / Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability2023-07-25
100.0%
CVE-2023-29298Adobe / ColdFusionAdobe ColdFusion Improper Access Control Vulnerability2023-07-20
99.8%
CVE-2023-38205Adobe / ColdFusionAdobe ColdFusion Improper Access Control Vulnerability2023-07-20
99.8%
CVE-2023-3519Citrix / NetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability2023-07-19
99.7%
CVE-2023-36884Microsoft / WindowsMicrosoft Windows Search Remote Code Execution Vulnerability2023-07-17
98.9%
CVE-2022-29303SolarView / CompactSolarView Compact Command Injection Vulnerability2023-07-13
98.0%
CVE-2023-37450Apple / Multiple ProductsApple Multiple Products WebKit Code Execution Vulnerability2023-07-13
18.9%
CVE-2022-31199Netwrix / AuditorNetwrix Auditor Insecure Object Deserialization Vulnerability2023-07-11
36.0%
CVE-2023-32046Microsoft / WindowsMicrosoft Windows MSHTML Platform Privilege Escalation Vulnerability2023-07-11
10.0%
CVE-2023-32049Microsoft / WindowsMicrosoft Windows Defender SmartScreen Security Feature Bypass Vulnerability2023-07-11
4.2%
CVE-2023-35311microsoft / 365_appsCVE-2023-353112023-07-11
15.5%
CVE-2023-36874Microsoft / WindowsMicrosoft Windows Error Reporting Service Privilege Escalation Vulnerability2023-07-11
42.6%
CVE-2021-29256Arm / Mali Graphics Processing Unit (GPU)Arm Mali GPU Kernel Driver Use-After-Free Vulnerability2023-07-07
3.0%
CVE-2019-17621D-Link / DIR-859 RouterD-Link DIR-859 Router Command Execution Vulnerability2023-06-29
89.6%
CVE-2019-20500D-Link / DWL-2600AP Access PointD-Link DWL-2600AP Access Point Command Injection Vulnerability2023-06-29
96.7%
CVE-2021-25371Samsung / Mobile DevicesSamsung Mobile Devices Unspecified Vulnerability2023-06-29
0.8%
CVE-2021-25372Samsung / Mobile DevicesSamsung Mobile Devices Improper Boundary Check Vulnerability2023-06-29
0.8%
CVE-2021-25394Samsung / Mobile DevicesSamsung Mobile Devices Race Condition Vulnerability2023-06-29
0.4%
CVE-2021-25395Samsung / Mobile DevicesSamsung Mobile Devices Race Condition Vulnerability2023-06-29
0.4%
CVE-2021-25487Samsung / Mobile DevicesSamsung Mobile Devices Out-of-Bounds Read Vulnerability2023-06-29
0.6%
CVE-2021-25489Samsung / Mobile DevicesSamsung Mobile Devices Improper Input Validation Vulnerability2023-06-29
0.5%
CVE-2023-20867VMware / ToolsVMware Tools Authentication Bypass Vulnerability2023-06-23
13.5%
CVE-2023-27992Zyxel / Multiple Network-Attached Storage (NAS) DevicesZyxel Multiple NAS Devices Command Injection Vulnerability2023-06-23
82.8%
CVE-2023-32434Apple / Multiple ProductsApple Multiple Products Integer Overflow Vulnerability2023-06-23
51.5%
CVE-2023-32435Apple / Multiple ProductsApple Multiple Products WebKit Memory Corruption Vulnerability2023-06-23
23.0%
CVE-2023-32439Apple / Multiple ProductsApple Multiple Products WebKit Type Confusion Vulnerability2023-06-23
24.0%
CVE-2016-0165Microsoft / Win32kMicrosoft Win32k Privilege Escalation Vulnerability2023-06-22
13.7%
CVE-2016-9079Mozilla / Firefox, Firefox ESR, and ThunderbirdMozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability2023-06-22
87.5%
CVE-2020-12641Roundcube / Roundcube WebmailRoundcube Webmail Remote Code Execution Vulnerability2023-06-22
84.3%
CVE-2020-35730Roundcube / Roundcube WebmailRoundcube Webmail Cross-Site Scripting (XSS) Vulnerability2023-06-22
32.9%
CVE-2021-44026Roundcube / Roundcube WebmailRoundcube Webmail SQL Injection Vulnerability2023-06-22
69.9%
CVE-2023-20887VMware / Aria Operations for NetworksVmware Aria Operations for Networks Command Injection Vulnerability2023-06-22
98.3%
CVE-2023-27997Fortinet / FortiOS and FortiProxy SSL-VPNFortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability2023-06-13
85.7%
CVE-2023-3079Google / Chromium V8Google Chromium V8 Type Confusion Vulnerability2023-06-07
32.1%
CVE-2023-33009Zyxel / Multiple FirewallsZyxel Multiple Firewalls Buffer Overflow Vulnerability2023-06-05
28.1%
CVE-2023-33010Zyxel / Multiple FirewallsZyxel Multiple Firewalls Buffer Overflow Vulnerability2023-06-05
29.0%
CVE-2023-34362Progress / MOVEit TransferProgress MOVEit Transfer SQL Injection Vulnerability2023-06-02
99.9%
CVE-2023-28771Zyxel / Multiple FirewallsZyxel Multiple Firewalls OS Command Injection Vulnerability2023-05-31
99.3%
CVE-2023-2868Barracuda Networks / Email Security Gateway (ESG) ApplianceBarracuda Networks ESG Appliance Improper Input Validation Vulnerability2023-05-26
87.7%
CVE-2023-28204Apple / Multiple ProductsApple Multiple Products WebKit Out-of-Bounds Read Vulnerability2023-05-22
14.3%
CVE-2023-32373Apple / Multiple ProductsApple Multiple Products WebKit Use-After-Free Vulnerability2023-05-22
12.2%
CVE-2023-32409Apple / Multiple ProductsApple Multiple Products WebKit Sandbox Escape Vulnerability2023-05-22
16.5%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.