Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2019-15107 Webmin Command Injection Vulnerability CRITICAL N/A N/A cvelistv5 2022-03-25
cve-2019-1458 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2022-01-10
cve-2019-1429 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability HIGH 7.5 N/A cvelistv5 2021-11-03
cve-2019-14251 CVE-2019-14251 HIGH N/A N/A cvelistv5
cve-2019-14223 CVE-2019-14223 HIGH N/A N/A cvelistv5
cve-2019-1405 Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2022-03-15
cve-2019-1388 Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2023-04-07
cve-2019-1385 Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2022-05-23
cve-2019-13720 SUSE CVE CVE-2019-13720 HIGH 8.8 N/A cvelistv5 2025-03-15
cve-2019-1367 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability CRITICAL N/A N/A cvelistv5 2021-11-03
cve-2019-13608 Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability HIGH 7.5 N/A cvelistv5 2021-11-03
cve-2019-13462 Lansweeper before 7.1.117.4 allows unauthenticated SQL injection. CRITICAL 9.1 N/A cvelistv5 2026-06-17
cve-2019-13396 FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the form_include parameter in an index.php?q=system-handle-form-submit POST request because of an include_once in system_handle_form_submit in modules/system/system.module. MEDIUM 5.3 N/A cvelistv5 2026-06-17
cve-2019-13372 CVE-2019-13372 HIGH N/A N/A cvelistv5
cve-2019-13272 SUSE CVE CVE-2019-13272 HIGH 7.4 N/A cvelistv5 2026-07-25
cve-2019-1322 Microsoft Windows Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2022-03-15
cve-2019-1315 Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2022-03-15
cve-2019-13101 CVE-2019-13101 HIGH N/A N/A cvelistv5
cve-2019-12991 Citrix SD-WAN and NetScaler Command Injection Vulnerability HIGH 8.8 N/A cvelistv5 2022-03-25
cve-2019-12990 Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal. CRITICAL 9.8 N/A cvelistv5 2026-06-17
cve-2019-12989 Citrix SD-WAN and NetScaler SQL Injection Vulnerability HIGH N/A N/A cvelistv5 2022-03-25
cve-2019-12987 Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6). CRITICAL 9.8 N/A cvelistv5 2026-06-17
cve-2019-12986 Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6). CRITICAL 9.8 N/A cvelistv5 2026-06-17
cve-2019-12985 Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6). CRITICAL 9.8 N/A cvelistv5 2026-06-17
cve-2019-1297 Microsoft Excel Remote Code Execution Vulnerability HIGH 8.8 N/A cvelistv5 2022-03-03
cve-2019-12780 The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. A simple POST request to /upnp/control/basicevent1 can allow an attacker to execute commands without authentication. CRITICAL 9.8 N/A cvelistv5 2026-06-17
cve-2019-12593 IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal. HIGH 7.5 N/A cvelistv5 2026-06-17
cve-2019-1253 Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2022-03-15
cve-2019-12314 Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI. CRITICAL 9.8 N/A cvelistv5 2026-06-17
cve-2019-12276 A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests. A patch for this issue was made on 2019-05-30 in GrandNode 4.40. HIGH 7.5 N/A cvelistv5 2026-06-17