Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2019-18952 CVE-2019-18952 HIGH N/A N/A cvelistv5
cve-2019-18935 Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 N/A cvelistv5 2021-11-03
cve-2019-18818 CVE-2019-18818 HIGH N/A N/A cvelistv5
cve-2019-18426 WhatsApp Cross-Site Scripting Vulnerability HIGH 8.2 N/A cvelistv5 2022-05-23
cve-2019-18394 CVE-2019-18394 HIGH N/A N/A cvelistv5
cve-2019-18393 CVE-2019-18393 HIGH N/A N/A cvelistv5
cve-2019-18371 CVE-2019-18371 HIGH N/A N/A cvelistv5
cve-2019-1821 Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities HIGH 8.8 N/A cvelistv5 2026-06-17
cve-2019-18187 Trend Micro OfficeScan Directory Traversal Vulnerability HIGH 8.8 N/A cvelistv5 2021-11-03
cve-2019-17621 D-Link DIR-859 Router Command Execution Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-06-29
cve-2019-17558 solr: Remote Code Execution through the VelocityResponseWriter HIGH 7.5 N/A cvelistv5 2026-08-04
cve-2019-17506 CVE-2019-17506 HIGH N/A N/A cvelistv5
cve-2019-17503 CVE-2019-17503 HIGH N/A N/A cvelistv5
cve-2019-17270 CVE-2019-17270 HIGH N/A N/A cvelistv5
cve-2019-17026 Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement HIGH 8.8 N/A cvelistv5 2025-11-21
cve-2019-16932 CVE-2019-16932 HIGH N/A N/A cvelistv5
cve-2019-16928 exim: remotely triggerable buffer overflow in string_vformat() CRITICAL 9.8 N/A cvelistv5 2026-02-20
cve-2019-16920 D-Link Multiple Routers Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2022-03-25
cve-2019-16759 vBulletin PHP Module Remote Code Execution Vulnerability CRITICAL 9.8 N/A cvelistv5 2021-11-03
cve-2019-16662 CVE-2019-16662 HIGH N/A N/A cvelistv5
cve-2019-1653 Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability HIGH 7.5 N/A cvelistv5 2021-11-03
cve-2019-1652 Cisco Small Business Routers Improper Input Validation Vulnerability HIGH 7.2 N/A cvelistv5 2022-03-03
cve-2019-16278 Nostromo nhttpd Directory Traversal Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-11-07
cve-2019-16256 SIMalliance Toolbox Browser Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2021-11-03
cve-2019-16057 D-Link DNS-320 Remote Code Execution Vulnerability CRITICAL N/A N/A cvelistv5 2022-04-15
cve-2019-15949 Nagios XI Remote Code Execution Vulnerability HIGH 8.8 N/A cvelistv5 2021-11-03
cve-2019-1579 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability HIGH 8.1 N/A cvelistv5 2022-01-10
cve-2019-15752 Docker Desktop Community Edition Privilege Escalation Vulnerability HIGH N/A N/A cvelistv5 2021-11-03
cve-2019-15642 rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialise_variable makes an eval call. NOTE: the Webmin_Servers_Index documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must not be granted to un-trusted Webmin users." HIGH 8.8 N/A cvelistv5 2026-06-17
cve-2019-15271 Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability HIGH N/A N/A cvelistv5 2022-06-08