1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 19 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2022-41040Microsoft / Exchange ServerMicrosoft Exchange Server Server-Side Request Forgery Vulnerability2022-09-30
100.0%
CVE-2022-41082Microsoft / Exchange ServerMicrosoft Exchange Server Remote Code Execution Vulnerability2022-09-30
100.0%
CVE-2022-3236Sophos / FirewallSophos Firewall Code Injection Vulnerability2022-09-23
98.9%
CVE-2022-35405Zoho / ManageEngineZoho ManageEngine Multiple Products Remote Code Execution Vulnerability2022-09-22
99.9%
CVE-2010-2568Microsoft / WindowsMicrosoft Windows Remote Code Execution Vulnerability2022-09-15
91.3%
CVE-2013-2094Linux / KernelLinux Kernel Privilege Escalation Vulnerability2022-09-15
47.7%
CVE-2013-2596Linux / KernelLinux Kernel Integer Overflow Vulnerability2022-09-15
3.2%
CVE-2013-2597Code Aurora / ACDB Audio DriverCode Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability2022-09-15
1.5%
CVE-2013-6282Linux / KernelLinux Kernel Improper Input Validation Vulnerability2022-09-15
39.7%
CVE-2022-40139Trend Micro / Apex One and Apex One as a ServiceTrend Micro Apex One and Apex One as a Service Improper Validation Vulnerability2022-09-15
3.3%
CVE-2022-32917Apple / iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Remote Code Execution Vulnerability2022-09-14
5.6%
CVE-2022-37969Microsoft / WindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation V…2022-09-14
28.3%
CVE-2011-1823Android / Android OSAndroid OS Privilege Escalation Vulnerability2022-09-08
41.4%
CVE-2011-4723D-Link / DIR-300 RouterD-Link DIR-300 Router Cleartext Storage of a Password Vulnerability2022-09-08
3.1%
CVE-2017-5521NETGEAR / Multiple DevicesNETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability2022-09-08
89.2%
CVE-2018-13374Fortinet / FortiOS and FortiADCFortinet FortiOS and FortiADC Improper Access Control Vulnerability2022-09-08
38.1%
CVE-2018-2628Oracle / WebLogic ServerOracle WebLogic Server Unspecified Vulnerability2022-09-08
100.0%
CVE-2018-6530D-Link / Multiple RoutersD-Link Multiple Routers OS Command Injection Vulnerability2022-09-08
96.7%
CVE-2018-7445MikroTik / RouterOSMikroTik RouterOS Stack-Based Buffer Overflow Vulnerability2022-09-08
60.8%
CVE-2020-9934Apple / iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Input Validation Vulnerability2022-09-08
3.2%
CVE-2022-26258D-Link / DIR-820LD-Link DIR-820L Remote Code Execution Vulnerability2022-09-08
92.0%
CVE-2022-27593QNAP / Photo StationQNAP Photo Station Externally Controlled Reference Vulnerability2022-09-08
87.9%
CVE-2022-3075Google / Chromium MojoGoogle Chromium Mojo Insufficient Data Validation Vulnerability2022-09-08
5.8%
CVE-2020-28949PEAR / Archive_TarPEAR Archive_Tar Deserialization of Untrusted Data Vulnerability2022-08-25
84.6%
CVE-2020-36193PEAR / Archive_TarPEAR Archive_Tar Improper Link Resolution Vulnerability2022-08-25
70.6%
CVE-2021-31010Apple / iOS, macOS, watchOSApple iOS, macOS, watchOS Sandbox Bypass Vulnerability2022-08-25
3.7%
CVE-2021-38406Delta Electronics / DOPSoft 2Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability2022-08-25
76.4%
CVE-2021-39226Grafana Labs / GrafanaGrafana Authentication Bypass Vulnerability2022-08-25
99.9%
CVE-2022-2294WebRTC / WebRTCWebRTC Heap Buffer Overflow Vulnerability2022-08-25
70.5%
CVE-2022-22963VMware Tanzu / Spring CloudVMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability2022-08-25
99.9%
CVE-2022-24112Apache / APISIXApache APISIX Authentication Bypass Vulnerability2022-08-25
96.1%
CVE-2022-24706Apache / CouchDBApache CouchDB Insecure Default Initialization of Resource Vulnerability2022-08-25
92.5%
CVE-2022-26352dotCMS / dotCMSdotCMS Unrestricted Upload of File Vulnerability2022-08-25
91.2%
CVE-2022-0028Palo Alto Networks / PAN-OSPalo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerabi…2022-08-22
2.5%
CVE-2017-15944Palo Alto Networks / PAN-OSPalo Alto Networks PAN-OS Remote Code Execution Vulnerability2022-08-18
98.3%
CVE-2022-21971Microsoft / WindowsMicrosoft Windows Runtime Remote Code Execution Vulnerability2022-08-18
53.9%
CVE-2022-22536SAP / Multiple ProductsSAP Multiple Products HTTP Request Smuggling Vulnerability2022-08-18
97.9%
CVE-2022-26923Microsoft / Active DirectoryMicrosoft Active Directory Domain Services Privilege Escalation Vulnerability2022-08-18
83.5%
CVE-2022-2856Google / Chromium IntentsGoogle Chromium Intents Insufficient Input Validation Vulnerability2022-08-18
4.5%
CVE-2022-32893Apple / iOS and macOSApple iOS and macOS Out-of-Bounds Write Vulnerability2022-08-18
9.9%
CVE-2022-32894Apple / iOS and macOSApple iOS and macOS Out-of-Bounds Write Vulnerability2022-08-18
3.3%
CVE-2022-27925Synacor / Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability2022-08-11
98.7%
CVE-2022-37042Synacor / Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability2022-08-11
91.9%
CVE-2022-30333RARLAB / UnRARRARLAB UnRAR Directory Traversal Vulnerability2022-08-09
99.2%
CVE-2022-34713Microsoft / WindowsMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulner…2022-08-09
67.8%
CVE-2022-27924Synacor / Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability2022-08-04
93.9%
CVE-2022-26138Atlassian / ConfluenceAtlassian Questions For Confluence App Hard-coded Credentials Vulnerability2022-07-29
98.2%
CVE-2022-22047Microsoft / WindowsMicrosoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalatio…2022-07-12
18.8%
CVE-2022-26925Microsoft / WindowsMicrosoft Windows LSA Spoofing Vulnerability2022-07-01
10.5%
CVE-2018-4344Apple / Multiple ProductsApple Multiple Products Memory Corruption Vulnerability2022-06-27
2.4%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.
KEV explorer — Known Exploited Vulnerabilities | SQUR Knowledge Base