Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2019-5128 CVE-2019-5128 CRITICAL 10.0 30.17% cvelistv5
cve-2019-5127 CVE-2019-5127 CRITICAL 10.0 45.30% cvelistv5
cve-2019-4716 IBM Planning Analytics Remote Code Execution Vulnerability CRITICAL 10.0 86.44% cvelistv5 2021-11-03
cve-2019-4061 CVE-2019-4061 MEDIUM 5.3 22.55% cvelistv5
cve-2019-3929 Crestron Multiple Products Command Injection Vulnerability CRITICAL 9.8 98.95% cvelistv5 2022-04-15
cve-2019-3914 Remote command injection vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows a remote, authenticated attacker to execute arbitrary commands on the target device by adding an access control rule for a network object with a crafted hostname. HIGH 7.2 29.89% cvelistv5 2026-06-17
cve-2019-3568 WhatsApp VOIP Stack Buffer Overflow Vulnerability HIGH N/A 30.08% cvelistv5 2022-04-19
cve-2019-3495 CVE-2019-3495 HIGH N/A 4.95% cvelistv5
cve-2019-3398 Atlassian Confluence Server and Data Center Path Traversal Vulnerability HIGH 8.8 96.84% cvelistv5 2021-11-03
cve-2019-3396 Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability CRITICAL 9.8 99.91% cvelistv5 2021-11-03
cve-2019-3010 Oracle Solaris Privilege Escalation Vulnerability HIGH 8.8 13.40% cvelistv5 2022-05-25
cve-2019-2768 Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher (formerly XML Publisher). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher (formerly XML Publisher) accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). HIGH 7.5 1.71% cvelistv5 2026-06-17
cve-2019-2725 Oracle WebLogic Server, Injection CRITICAL 9.8 99.96% cvelistv5 2022-01-10
cve-2019-2618 Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data as well as unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N). MEDIUM 5.5 32.88% cvelistv5 2026-06-17
cve-2019-2616 Oracle BI Publisher Unauthorized Access Vulnerability HIGH 7.2 92.18% cvelistv5 2022-03-25
cve-2019-2588 Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise BI Publisher (formerly XML Publisher). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher (formerly XML Publisher) accessible data. CVSS 3.0 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N). MEDIUM 4.9 36.79% cvelistv5 2026-06-17
cve-2019-25141 CVE-2019-25141 CRITICAL 9.8 4.50% cvelistv5
cve-2019-2215 SUSE CVE CVE-2019-2215 UNKNOWN N/A 72.10% cvelistv5 2025-10-07
cve-2019-20933 influxdb: authentication bypass because a JWT token may have an empty SharedSecret HIGH 8.6 30.92% cvelistv5 2026-08-21
cve-2019-20504 CVE-2019-20504 HIGH N/A 9.55% cvelistv5
cve-2019-20500 D-Link DWL-2600AP Access Point Command Injection Vulnerability HIGH 7.8 97.11% cvelistv5 2023-06-29
cve-2019-20085 TVT NVMS-1000 Directory Traversal Vulnerability HIGH 7.5 96.07% cvelistv5 2021-11-03
cve-2019-20074 On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cgi page. HIGH 8.8 1.40% cvelistv5 2026-06-17
cve-2019-19915 CVE-2019-19915 CRITICAL 9.0 0.86% cvelistv5
cve-2019-19825 CVE-2019-19825 HIGH N/A 29.56% cvelistv5
cve-2019-19824 CVE-2019-19824 HIGH N/A 25.14% cvelistv5
cve-2019-19781 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability CRITICAL 9.8 100.00% cvelistv5 2021-11-03
cve-2019-19356 Netis WF2419 Devices Remote Code Execution Vulnerability HIGH 7.5 28.17% cvelistv5 2021-11-03
cve-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability HIGH N/A 55.95% cvelistv5 2026-02-03
cve-2019-18988 TeamViewer Desktop Bypass Remote Login Vulnerability HIGH 7.0 4.71% cvelistv5 2021-11-03