1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 25 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2018-11138Quest / KACE System Management ApplianceQuest KACE System Management Appliance Remote Command Execution Vulnerability2022-03-25
91.7%
CVE-2018-1273VMware Tanzu / Spring Data CommonsVMware Tanzu Spring Data Commons Property Binder Vulnerability2022-03-25
97.0%
CVE-2018-14839LG / N1A1 NASLG N1A1 NAS Remote Command Execution Vulnerability2022-03-25
89.4%
CVE-2018-6961VMware / SD-WAN EdgeVMware SD-WAN Edge by VeloCloud Command Injection Vulnerability2022-03-25
86.3%
CVE-2018-8373Microsoft / Internet Explorer Scripting EngineMicrosoft Scripting Engine Memory Corruption Vulnerability2022-03-25
61.9%
CVE-2018-8414Microsoft / WindowsMicrosoft Windows Shell Remote Code Execution Vulnerability2022-03-25
72.9%
CVE-2019-0903Microsoft / Graphics Device Interface (GDI)Microsoft GDI Remote Code Execution Vulnerability2022-03-25
21.7%
CVE-2019-1003030Jenkins / Matrix Project PluginJenkins Matrix Project Plugin Remote Code Execution Vulnerability2022-03-25
97.1%
CVE-2019-10068Kentico / XperienceKentico Xperience Deserialization of Untrusted Data Vulnerability2022-03-25
95.1%
CVE-2019-11043PHP / FastCGI Process Manager (FPM)PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability2022-03-25
99.8%
CVE-2019-12989Citrix / SD-WAN and NetScalerCitrix SD-WAN and NetScaler SQL Injection Vulnerability2022-03-25
95.0%
CVE-2019-12991Citrix / SD-WAN and NetScalerCitrix SD-WAN and NetScaler Command Injection Vulnerability2022-03-25
74.1%
CVE-2019-15107Webmin / WebminWebmin Command Injection Vulnerability2022-03-25
99.7%
CVE-2019-16920D-Link / Multiple RoutersD-Link Multiple Routers Command Injection Vulnerability2022-03-25
100.0%
CVE-2019-2616Oracle / BI Publisher (Formerly XML Publisher)Oracle BI Publisher Unauthorized Access Vulnerability2022-03-25
92.2%
CVE-2019-6340Drupal / CoreDrupal Core Remote Code Execution Vulnerability2022-03-25
92.0%
CVE-2020-1631Juniper / Junos OSJuniper Junos OS Path Traversal Vulnerability2022-03-25
4.8%
CVE-2020-1956Apache / KylinApache Kylin OS Command Injection Vulnerability2022-03-25
97.3%
CVE-2020-2021Palo Alto Networks / PAN-OSPalo Alto Networks PAN-OS Authentication Bypass Vulnerability2022-03-25
4.4%
CVE-2020-2506QNAP Systems / HelpdeskQNAP Helpdesk Improper Access Control Vulnerability2022-03-25
2.0%
CVE-2020-25223Sophos / SG UTMSophos SG UTM Remote Code Execution Vulnerability2022-03-25
96.8%
CVE-2020-5410VMware Tanzu / Spring Cloud Configuration (Config) ServerVMware Tanzu Spring Cloud Config Directory Traversal Vulnerability2022-03-25
95.6%
CVE-2020-7247OpenBSD / OpenSMTPDOpenSMTPD Remote Code Execution Vulnerability2022-03-25
99.0%
CVE-2020-9054zyxel / nas326_firmwareCVE-2020-90542022-03-25
100.0%
CVE-2020-9377D-Link / DIR-610 DevicesD-Link DIR-610 Devices Remote Command Execution2022-03-25
21.3%
CVE-2021-22941Citrix / ShareFileCitrix ShareFile Improper Access Control Vulnerability2022-03-25
53.6%
CVE-2021-42237Sitecore / XPSitecore XP Remote Command Execution Vulnerability2022-03-25
97.6%
CVE-2022-21999Microsoft / WindowsMicrosoft Windows Print Spooler Privilege Escalation Vulnerability2022-03-25
41.0%
CVE-2022-26143Mitel / MiCollab, MiVoice Business ExpressMiCollab, MiVoice Business Express Access Control Vulnerability2022-03-25
87.3%
CVE-2022-26318WatchGuard / Firebox and XTM AppliancesWatchGuard Firebox and XTM Appliances Arbitrary Code Execution2022-03-25
78.2%
CVE-2015-2546Microsoft / Win32kMicrosoft Win32k Memory Corruption Vulnerability2022-03-15
10.1%
CVE-2016-3309Microsoft / WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability2022-03-15
20.5%
CVE-2017-0101Microsoft / WindowsMicrosoft Windows Transaction Manager Privilege Escalation Vulnerability2022-03-15
57.5%
CVE-2018-8120Microsoft / Win32kMicrosoft Win32k Privilege Escalation Vulnerability2022-03-15
73.4%
CVE-2019-0543Microsoft / WindowsMicrosoft Windows Privilege Escalation Vulnerability2022-03-15
4.7%
CVE-2019-0841Microsoft / WindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vuln…2022-03-15
41.4%
CVE-2019-1064Microsoft / WindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vuln…2022-03-15
6.9%
CVE-2019-1069Microsoft / Task SchedulerMicrosoft Task Scheduler Privilege Escalation Vulnerability2022-03-15
6.1%
CVE-2019-1129Microsoft / WindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vuln…2022-03-15
1.8%
CVE-2019-1132Microsoft / Win32kMicrosoft Win32k Privilege Escalation Vulnerability2022-03-15
9.8%
CVE-2019-1253Microsoft / WindowsMicrosoft Windows AppX Deployment Server Privilege Escalation Vulnerability2022-03-15
11.6%
CVE-2019-1315Microsoft / WindowsMicrosoft Windows Error Reporting Manager Privilege Escalation Vulnerability2022-03-15
3.5%
CVE-2019-1322Microsoft / WindowsMicrosoft Windows Privilege Escalation Vulnerability2022-03-15
19.2%
CVE-2019-1405Microsoft / WindowsMicrosoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation…2022-03-15
30.2%
CVE-2020-5135SonicWall / SonicOSSonicWall SonicOS Buffer Overflow Vulnerability2022-03-15
26.9%
CVE-2009-3960Adobe / BlazeDSAdobe BlazeDS Information Disclosure Vulnerability2022-03-07
90.1%
CVE-2013-0625Adobe / ColdFusionAdobe ColdFusion Authentication Bypass Vulnerability2022-03-07
93.8%
CVE-2013-0629Adobe / ColdFusionAdobe ColdFusion Directory Traversal Vulnerability2022-03-07
65.8%
CVE-2013-0631Adobe / ColdFusionAdobe ColdFusion Information Disclosure Vulnerability2022-03-07
66.4%
CVE-2016-6277NETGEAR / Multiple RoutersNETGEAR Multiple Routers Remote Code Execution Vulnerability2022-03-07
99.8%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.
KEV explorer — Known Exploited Vulnerabilities | SQUR Knowledge Base