1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 18 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2022-40765Mitel / MiVoice ConnectMitel MiVoice Connect Command Injection Vulnerability2023-02-21
10.6%
CVE-2022-41223Mitel / MiVoice ConnectMitel MiVoice Connect Code Injection Vulnerability2023-02-21
10.7%
CVE-2022-47986IBM / Aspera FaspexIBM Aspera Faspex Code Execution Vulnerability2023-02-21
100.0%
CVE-2022-46169Cacti / CactiCacti Command Injection Vulnerability2023-02-16
99.8%
CVE-2023-21715Microsoft / OfficeMicrosoft Office Publisher Security Feature Bypass Vulnerability2023-02-14
12.0%
CVE-2023-21823Microsoft / WindowsMicrosoft Windows Graphic Component Privilege Escalation Vulnerability2023-02-14
5.6%
CVE-2023-23376Microsoft / WindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation V…2023-02-14
10.9%
CVE-2023-23529Apple / Multiple ProductsApple Multiple Products WebKit Type Confusion Vulnerability2023-02-14
9.5%
CVE-2015-2291Intel / Ethernet Diagnostics Driver for WindowsIntel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability2023-02-10
9.0%
CVE-2022-24990TerraMaster / TerraMaster OSTerraMaster OS Remote Command Execution Vulnerability2023-02-10
83.2%
CVE-2023-0669Fortra / GoAnywhere MFTFortra GoAnywhere MFT Remote Code Execution Vulnerability2023-02-10
100.0%
CVE-2022-21587Oracle / E-Business SuiteOracle E-Business Suite Unspecified Vulnerability2023-02-02
98.3%
CVE-2023-22952SugarCRM / Multiple ProductsMultiple SugarCRM Products Remote Code Execution Vulnerability2023-02-02
80.1%
CVE-2017-11357Telerik / User Interface (UI) for ASP.NET AJAXTelerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability2023-01-26
77.7%
CVE-2022-47966Zoho / ManageEngineZoho ManageEngine Multiple Products Remote Code Execution Vulnerability2023-01-23
99.8%
CVE-2022-44877CWP / Control Web PanelCWP Control Web Panel OS Command Injection Vulnerability2023-01-17
100.0%
CVE-2022-41080Microsoft / Exchange ServerMicrosoft Exchange Server Privilege Escalation Vulnerability2023-01-10
77.3%
CVE-2023-21674Microsoft / WindowsMicrosoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation V…2023-01-10
41.0%
CVE-2018-18809TIBCO / JasperReportsTIBCO JasperReports Library Directory Traversal Vulnerability2022-12-29
79.1%
CVE-2018-5430TIBCO / JasperReportsTIBCO JasperReports Server Information Disclosure Vulnerability2022-12-29
49.0%
CVE-2022-42856Apple / iOSApple iOS Type Confusion Vulnerability2022-12-14
8.5%
CVE-2022-26500Veeam / Backup & ReplicationVeeam Backup & Replication Remote Code Execution Vulnerability2022-12-13
5.8%
CVE-2022-26501Veeam / Backup & ReplicationVeeam Backup & Replication Remote Code Execution Vulnerability2022-12-13
4.1%
CVE-2022-27518Citrix / Application Delivery Controller (ADC) and GatewayCitrix Application Delivery Controller (ADC) and Gateway Authentication Bypas…2022-12-13
6.7%
CVE-2022-42475Fortinet / FortiOSFortinet FortiOS Heap-Based Buffer Overflow Vulnerability2022-12-13
99.5%
CVE-2022-44698Microsoft / DefenderMicrosoft Defender SmartScreen Security Feature Bypass Vulnerability2022-12-13
76.3%
CVE-2022-4262Google / Chromium V8Google Chromium V8 Type Confusion Vulnerability2022-12-05
23.5%
CVE-2021-35587Oracle / Fusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability2022-11-28
96.3%
CVE-2022-4135Google / Chromium GPUGoogle Chromium GPU Heap Buffer Overflow Vulnerability2022-11-28
31.9%
CVE-2022-41049Microsoft / WindowsMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability2022-11-14
2.5%
CVE-2021-25337Samsung / Mobile DevicesSamsung Mobile Devices Improper Access Control Vulnerability2022-11-08
2.8%
CVE-2021-25369Samsung / Mobile DevicesSamsung Mobile Devices Improper Access Control Vulnerability2022-11-08
1.1%
CVE-2021-25370Samsung / Mobile DevicesSamsung Mobile Devices Memory Corruption Vulnerability2022-11-08
0.9%
CVE-2022-41073Microsoft / WindowsMicrosoft Windows Print Spooler Privilege Escalation Vulnerability2022-11-08
2.3%
CVE-2022-41091Microsoft / WindowsMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability2022-11-08
1.8%
CVE-2022-41125Microsoft / WindowsMicrosoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability2022-11-08
3.0%
CVE-2022-41128Microsoft / WindowsMicrosoft Windows Scripting Languages Remote Code Execution Vulnerability2022-11-08
24.6%
CVE-2022-3723Google / Chromium V8Google Chromium V8 Type Confusion Vulnerability2022-10-28
7.9%
CVE-2022-42827Apple / iOS and iPadOSApple iOS and iPadOS Out-of-Bounds Write Vulnerability2022-10-25
1.1%
CVE-2018-19320GIGABYTE / Multiple ProductsGIGABYTE Multiple Products Unspecified Vulnerability2022-10-24
3.6%
CVE-2018-19321GIGABYTE / Multiple ProductsGIGABYTE Multiple Products Privilege Escalation Vulnerability2022-10-24
3.7%
CVE-2018-19322GIGABYTE / Multiple ProductsGIGABYTE Multiple Products Code Execution Vulnerability2022-10-24
1.8%
CVE-2018-19323GIGABYTE / Multiple ProductsGIGABYTE Multiple Products Privilege Escalation Vulnerability2022-10-24
8.4%
CVE-2020-3153Cisco / AnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path …2022-10-24
28.3%
CVE-2020-3433Cisco / AnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability2022-10-24
10.0%
CVE-2021-3493Linux / KernelLinux Kernel Privilege Escalation Vulnerability2022-10-20
49.2%
CVE-2022-41352Synacor / Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability2022-10-20
95.5%
CVE-2022-40684Fortinet / Multiple ProductsFortinet Multiple Products Authentication Bypass Vulnerability2022-10-11
100.0%
CVE-2022-41033Microsoft / Windows COM+ Event System ServiceMicrosoft Windows COM+ Event System Service Privilege Escalation Vulnerability2022-10-11
1.7%
CVE-2022-36804Atlassian / Bitbucket Server and Data CenterAtlassian Bitbucket Server and Data Center Command Injection Vulnerability2022-09-30
99.2%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.