1,734 totalEPSS avg 50.4%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 30 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2014-1812Microsoft / WindowsMicrosoft Windows Group Policy Preferences Password Privilege Escalation Vuln…2021-11-03
64.9%
CVE-2015-1641Microsoft / OfficeMicrosoft Office Memory Corruption Vulnerability2021-11-03
96.7%
CVE-2015-4852Oracle / WebLogic ServerOracle WebLogic Server Deserialization of Untrusted Data Vulnerability2021-11-03
96.0%
CVE-2016-0167Microsoft / Win32kMicrosoft Win32k Privilege Escalation Vulnerability2021-11-03
5.7%
CVE-2016-0185Microsoft / WindowsMicrosoft Windows Media Center Remote Code Execution Vulnerability2021-11-03
69.8%
CVE-2016-3235Microsoft / OfficeMicrosoft Office OLE DLL Side Loading Vulnerability2021-11-03
43.3%
CVE-2016-3643SolarWinds / Virtualization ManagerSolarWinds Virtualization Manager Privilege Escalation Vulnerability2021-11-03
3.7%
CVE-2016-3715ImageMagick / ImageMagickImageMagick Arbitrary File Deletion Vulnerability2021-11-03
75.3%
CVE-2016-3718ImageMagick / ImageMagickImageMagick Server-Side Request Forgery (SSRF) Vulnerability2021-11-03
76.7%
CVE-2016-3976SAP / NetWeaverSAP NetWeaver Directory Traversal Vulnerability2021-11-03
47.3%
CVE-2016-4437Apache / ShiroApache Shiro Code Execution Vulnerability2021-11-03
93.0%
CVE-2016-7255Microsoft / Win32kMicrosoft Win32k Privilege Escalation Vulnerability2021-11-03
81.0%
CVE-2016-9563SAP / NetWeaverSAP NetWeaver XML External Entity (XXE) Vulnerability2021-11-03
24.2%
CVE-2017-0143Microsoft / WindowsMicrosoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerab…2021-11-03
93.3%
CVE-2017-0199Microsoft / Office and WordPadMicrosoft Office and WordPad Remote Code Execution Vulnerability2021-11-03
99.5%
CVE-2017-11774Microsoft / OfficeMicrosoft Office Outlook Security Feature Bypass Vulnerability2021-11-03
59.6%
CVE-2017-11882Microsoft / OfficeMicrosoft Office Memory Corruption Vulnerability2021-11-03
99.9%
CVE-2017-16651Roundcube / Roundcube WebmailRoundcube Webmail File Disclosure Vulnerability2021-11-03
45.7%
CVE-2017-5638Apache / StrutsApache Struts Remote Code Execution Vulnerability2021-11-03
100.0%
CVE-2017-6327Symantec / Symantec Messaging GatewaySymantec Messaging Gateway Remote Code Execution Vulnerability2021-11-03
35.9%
CVE-2017-7269Microsoft / Internet Information Services (IIS)Microsoft Windows Server Buffer Overflow Vulnerability2021-11-03
99.8%
CVE-2017-8759Microsoft / .NET FrameworkMicrosoft .NET Framework Remote Code Execution Vulnerability2021-11-03
88.7%
CVE-2017-9248Progress / ASP.NET AJAX and SitefinityProgress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vu…2021-11-03
75.1%
CVE-2017-9805Apache / StrutsApache Struts Deserialization of Untrusted Data Vulnerability2021-11-03
99.4%
CVE-2017-9822DotNetNuke (DNN) / DotNetNuke (DNN)DotNetNuke (DNN) Remote Code Execution Vulnerability2021-11-03
94.8%
CVE-2018-0171Cisco / IOS and IOS XECisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability2021-11-03
99.5%
CVE-2018-0296Cisco / Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability2021-11-03
99.9%
CVE-2018-0798Microsoft / OfficeMicrosoft Office Memory Corruption Vulnerability2021-11-03
95.1%
CVE-2018-0802Microsoft / OfficeMicrosoft Office Memory Corruption Vulnerability2021-11-03
93.3%
CVE-2018-11776Apache / StrutsApache Struts Remote Code Execution Vulnerability2021-11-03
100.0%
CVE-2018-13379Fortinet / FortiOSFortinet FortiOS SSL VPN Path Traversal Vulnerability2021-11-03
100.0%
CVE-2018-14558Tenda / AC7, AC9, and AC10 RoutersTenda AC7, AC9, and AC10 Routers Command Injection Vulnerability2021-11-03
8.5%
CVE-2018-15811DotNetNuke (DNN) / DotNetNuke (DNN)DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability2021-11-03
76.1%
CVE-2018-15961Adobe / ColdFusionAdobe ColdFusion Unrestricted File Upload Vulnerability2021-11-03
100.0%
CVE-2018-18325DotNetNuke (DNN) / DotNetNuke (DNN)DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability2021-11-03
73.9%
CVE-2018-20062ThinkPHP / noneCmsThinkPHP "noneCms" Remote Code Execution Vulnerability2021-11-03
99.5%
CVE-2018-2380SAP / Customer Relationship Management (CRM)SAP Customer Relationship Management (CRM) Path Traversal Vulnerability2021-11-03
28.9%
CVE-2018-4878Adobe / Flash PlayerAdobe Flash Player Use-After-Free Vulnerability2021-11-03
89.5%
CVE-2018-4939Adobe / ColdFusionAdobe ColdFusion Deserialization of Untrusted Data Vulnerability2021-11-03
62.0%
CVE-2018-6789Exim / EximExim Buffer Overflow Vulnerability2021-11-03
82.1%
CVE-2018-7600Drupal / Drupal CoreDrupal Core Remote Code Execution Vulnerability2021-11-03
100.0%
CVE-2018-8653Microsoft / Internet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability2021-11-03
29.6%
CVE-2019-0211Apache / HTTP ServerApache HTTP Server Privilege Escalation Vulnerability2021-11-03
65.0%
CVE-2019-0541Microsoft / MSHTMLMicrosoft MSHTML Remote Code Execution Vulnerability2021-11-03
53.2%
CVE-2019-0604Microsoft / SharePointMicrosoft SharePoint Remote Code Execution Vulnerability2021-11-03
99.9%
CVE-2019-0708Microsoft / Remote Desktop ServicesMicrosoft Remote Desktop Services Remote Code Execution Vulnerability2021-11-03
100.0%
CVE-2019-0797Microsoft / Win32kMicrosoft Win32k Privilege Escalation Vulnerability2021-11-03
1.9%
CVE-2019-0803Microsoft / Win32kMicrosoft Win32k Privilege Escalation Vulnerability2021-11-03
45.2%
CVE-2019-0808Microsoft / Win32kMicrosoft Win32k Privilege Escalation Vulnerability2021-11-03
53.0%
CVE-2019-0859Microsoft / Win32kMicrosoft Win32k Privilege Escalation Vulnerability2021-11-03
4.2%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.