Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2019-8526 Apple macOS Use-After-Free Vulnerability HIGH 7.8 0.70% cvelistv5 2023-04-17
cve-2019-8506 Apple Multiple Products Type Confusion Vulnerability HIGH N/A 16.16% cvelistv5 2022-05-04
cve-2019-8451 CVE-2019-8451 HIGH N/A 94.45% cvelistv5
cve-2019-8446 CVE-2019-8446 HIGH N/A 17.55% cvelistv5
cve-2019-8442 CVE-2019-8442 HIGH N/A 59.83% cvelistv5
cve-2019-8394 Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability HIGH 7.5 63.34% cvelistv5 2021-11-03
cve-2019-8387 MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component. CRITICAL 9.8 55.72% cvelistv5 2026-06-17
cve-2019-7609 Kibana Arbitrary Code Execution HIGH N/A 95.34% cvelistv5 2022-01-10
cve-2019-7483 SonicWall SMA100 Directory Traversal Vulnerability HIGH N/A 4.01% cvelistv5 2022-03-28
cve-2019-7481 SonicWall SMA100 SQL Injection Vulnerability HIGH 7.5 99.91% cvelistv5 2021-11-03
cve-2019-7287 Apple iOS Memory Corruption Vulnerability HIGH N/A 4.58% cvelistv5 2022-05-23
cve-2019-7286 Apple Multiple Products Memory Corruption Vulnerability HIGH N/A 15.94% cvelistv5 2022-05-23
cve-2019-7256 Nice Linear eMerge E3-Series OS Command Injection Vulnerability HIGH N/A 97.08% cvelistv5 2024-03-25
cve-2019-7254 CVE-2019-7254 HIGH N/A 82.29% cvelistv5
cve-2019-7238 Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability CRITICAL 9.8 77.15% cvelistv5 2021-12-10
cve-2019-7195 QNAP Photo Station Path Traversal Vulnerability CRITICAL 9.8 89.68% cvelistv5 2022-06-08
cve-2019-7194 QNAP Photo Station Path Traversal Vulnerability CRITICAL 9.8 83.12% cvelistv5 2022-06-08
cve-2019-7193 QNAP QTS Improper Input Validation Vulnerability CRITICAL 9.8 14.37% cvelistv5 2022-06-08
cve-2019-7192 QNAP Photo Station Improper Access Control Vulnerability CRITICAL N/A 88.10% cvelistv5 2022-06-08
cve-2019-6703 Incorrect access control in migla_ajax_functions.php in the Calmar Webmedia Total Donations plugin through 2.0.5 for WordPress allows unauthenticated attackers to update arbitrary WordPress option values, leading to site takeover. These attackers can send requests to wp-admin/admin-ajax.php to call the miglaA_update_me action to change arbitrary options on affected sites. This can be used to enable new user registration and set the default role for new users to Administrator. CRITICAL 9.8 26.08% cvelistv5 2026-06-17
cve-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability CRITICAL N/A 5.83% cvelistv5 2025-06-25
cve-2019-6340 Drupal Core Remote Code Execution Vulnerability HIGH N/A 92.02% cvelistv5 2022-03-25
cve-2019-6223 Apple iOS and macOS Group Facetime Vulnerability HIGH 7.5 2.63% cvelistv5 2021-11-03
cve-2019-5825 Google Chromium V8 Out-of-Bounds Write Vulnerability HIGH N/A 55.93% cvelistv5 2022-06-08
cve-2019-5786 Google Chrome Blink Use-After-Free Vulnerability HIGH N/A 62.24% cvelistv5 2022-05-23
cve-2019-5591 Fortinet FortiOS Default Configuration Vulnerability MEDIUM 6.5 18.42% cvelistv5 2021-11-03
cve-2019-5544 VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability CRITICAL N/A 97.26% cvelistv5 2021-11-03
cve-2019-5434 An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" parameter in the "openads.spc" RPC method. Such vulnerability could be used to perform various types of attacks, e.g. exploit serialize-related PHP vulnerabilities or PHP object injection. It is possible, although unconfirmed, that the vulnerability has been used by some attackers in order to gain access to some Revive Adserver instances and deliver malware through them to third party websites. This vulnerability was addressed in version 4.2.0. CRITICAL 9.8 57.02% cvelistv5 2026-06-17
cve-2019-5418 Rails Ruby on Rails Path Traversal Vulnerability HIGH N/A 98.51% cvelistv5 2025-07-07
cve-2019-5129 CVE-2019-5129 CRITICAL 10.0 38.53% cvelistv5