1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 24 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2016-7201Microsoft / EdgeMicrosoft Edge Memory Corruption Vulnerability2022-03-28
80.0%
CVE-2017-0037Microsoft / Edge and Internet ExplorerMicrosoft Edge and Internet Explorer Type Confusion Vulnerability2022-03-28
80.4%
CVE-2017-0059Microsoft / Internet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability2022-03-28
62.0%
CVE-2017-0213Microsoft / WindowsMicrosoft Windows Privilege Escalation Vulnerability2022-03-28
84.1%
CVE-2018-8405Microsoft / DirectX Graphics Kernel (DXGKRNL)Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability2022-03-28
3.4%
CVE-2018-8406Microsoft / DirectX Graphics Kernel (DXGKRNL)Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability2022-03-28
3.4%
CVE-2018-8440Microsoft / WindowsMicrosoft Windows Privilege Escalation Vulnerability2022-03-28
18.4%
CVE-2019-7483SonicWall / SMA100SonicWall SMA100 Directory Traversal Vulnerability2022-03-28
4.0%
CVE-2021-20028SonicWall / Secure Remote Access (SRA)SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability2022-03-28
30.1%
CVE-2021-26085Atlassian / Confluence ServerAtlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability2022-03-28
99.9%
CVE-2021-34486Microsoft / WindowsMicrosoft Windows Event Tracing Privilege Escalation Vulnerability2022-03-28
9.3%
CVE-2021-38646Microsoft / OfficeMicrosoft Office Access Connectivity Engine Remote Code Execution Vulnerability2022-03-28
8.0%
CVE-2022-0543Redis / Debian-specific Redis ServersDebian-specific Redis Server Lua Sandbox Escape Vulnerability2022-03-28
99.4%
CVE-2022-1096Google / Chromium V8Google Chromium V8 Type Confusion Vulnerability2022-03-28
24.4%
CVE-2005-2773Hewlett Packard (HP) / OpenView Network Node ManagerHP OpenView Network Node Manager Remote Code Execution Vulnerability2022-03-25
74.6%
CVE-2009-0927Adobe / Reader and AcrobatAdobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability2022-03-25
96.6%
CVE-2009-1151phpMyAdmin / phpMyAdminphpMyAdmin Remote Code Execution Vulnerability2022-03-25
96.6%
CVE-2009-2055Cisco / IOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability2022-03-25
3.3%
CVE-2010-2861Adobe / ColdFusionAdobe ColdFusion Directory Traversal Vulnerability2022-03-25
99.7%
CVE-2010-3035Cisco / IOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability2022-03-25
5.7%
CVE-2010-4344Exim / EximExim Heap-Based Buffer Overflow Vulnerability2022-03-25
71.7%
CVE-2010-4345Exim / EximExim Privilege Escalation Vulnerability2022-03-25
18.0%
CVE-2012-1823PHP / PHPPHP-CGI Query String Parameter Vulnerability2022-03-25
100.0%
CVE-2013-2251Apache / StrutsApache Struts Improper Input Validation Vulnerability2022-03-25
100.0%
CVE-2013-4810Hewlett Packard (HP) / ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle ManagementHP Multiple Products Remote Code Execution Vulnerability2022-03-25
79.5%
CVE-2013-5223D-Link / DSL-2760UD-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability2022-03-25
50.8%
CVE-2014-0130Rails / Ruby on RailsRuby on Rails Directory Traversal Vulnerability2022-03-25
53.7%
CVE-2014-3120Elastic / ElasticsearchElasticsearch Remote Code Execution Vulnerability2022-03-25
88.6%
CVE-2014-6287Rejetto / HTTP File Server (HFS)Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability2022-03-25
99.3%
CVE-2014-6324Microsoft / Kerberos Key Distribution Center (KDC)Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnera…2022-03-25
87.3%
CVE-2014-6332Microsoft / WindowsMicrosoft Windows Object Linking & Embedding (OLE) Automation Array Remote Co…2022-03-25
94.9%
CVE-2015-0666Cisco / Prime Data Center Network Manager (DCNM)Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability2022-03-25
40.4%
CVE-2015-1187D-Link and TRENDnet / Multiple DevicesD-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability2022-03-25
82.9%
CVE-2015-1427Elastic / ElasticsearchElasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability2022-03-25
99.9%
CVE-2015-3035TP-Link / Multiple Archer DevicesTP-Link Multiple Archer Devices Directory Traversal Vulnerability2022-03-25
83.9%
CVE-2015-4068Arcserve / Unified Data Protection (UDP)Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability2022-03-25
63.6%
CVE-2016-0752Rails / Ruby on RailsRuby on Rails Directory Traversal Vulnerability2022-03-25
95.5%
CVE-2016-10174NETGEAR / WNR2000v5 RouterNETGEAR WNR2000v5 Router Buffer Overflow Vulnerability2022-03-25
83.3%
CVE-2016-11021D-Link / DCS-930L DevicesD-Link DCS-930L Devices OS Command Injection Vulnerability2022-03-25
68.9%
CVE-2016-1555NETGEAR / Wireless Access Point (WAP) DevicesNETGEAR Multiple WAP Devices Command Injection Vulnerability2022-03-25
98.3%
CVE-2016-4171Adobe / Flash PlayerAdobe Flash Player Remote Code Execution Vulnerability2022-03-25
20.1%
CVE-2016-7892Adobe / Flash PlayerAdobe Flash Player Use-After-Free Vulnerability2022-03-25
18.8%
CVE-2017-0146Microsoft / WindowsMicrosoft Windows SMB Remote Code Execution Vulnerability2022-03-25
89.9%
CVE-2017-12615Apache / TomcatApache Tomcat on Windows Remote Code Execution Vulnerability2022-03-25
99.6%
CVE-2017-12617Apache / TomcatApache Tomcat Remote Code Execution Vulnerability2022-03-25
100.0%
CVE-2017-3881Cisco / IOS and IOS XECisco IOS and IOS XE Remote Code Execution Vulnerability2022-03-25
99.0%
CVE-2017-6316Citrix / NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile ServerCitrix Multiple Products Remote Code Execution Vulnerability2022-03-25
73.0%
CVE-2017-6334NETGEAR / DGN2200 DevicesNETGEAR DGN2200 Devices OS Command Injection Vulnerability2022-03-25
72.6%
CVE-2018-0125Cisco / VPN RoutersCisco VPN Routers Remote Code Execution Vulnerability2022-03-25
55.2%
CVE-2018-0147Cisco / Secure Access Control System (ACS)Cisco Secure Access Control System Java Deserialization Vulnerability2022-03-25
18.2%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.