Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2012-0779 | SUSE CVE CVE-2012-0779 | UNKNOWN | N/A | 87.09% | cvelistv5 | 2026-04-30 |
| cve-2012-0767 | Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability | HIGH | N/A | 6.42% | cvelistv5 | 2022-06-08 |
| cve-2012-0754 | Adobe Flash Player Memory Corruption Vulnerability | HIGH | N/A | 91.24% | cvelistv5 | 2022-06-08 |
| cve-2012-0518 | SUSE CVE CVE-2012-0518 | UNKNOWN | N/A | 4.69% | cvelistv5 | 2023-02-15 |
| cve-2012-0507 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | CRITICAL | N/A | 98.11% | cvelistv5 | 2022-03-03 |
| cve-2012-0391 | SUSE CVE CVE-2012-0391 | UNKNOWN | N/A | 75.60% | cvelistv5 | 2024-09-13 |
| cve-2012-0297 | The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data. | CRITICAL | 10.0 | 72.95% | cvelistv5 | 2026-06-16 |
| cve-2012-0158 | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability | HIGH | 8.8 | 99.98% | cvelistv5 | 2021-11-03 |
| cve-2012-0151 | Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability | HIGH | N/A | 87.72% | cvelistv5 | 2022-06-08 |
| cve-2011-5148 | CVE-2011-5148 | HIGH | N/A | 4.84% | cvelistv5 | |
| cve-2011-4862 | SUSE CVE CVE-2011-4862 | UNKNOWN | N/A | 94.98% | cvelistv5 | 2026-09-02 |
| cve-2011-4723 | D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | HIGH | N/A | 3.06% | cvelistv5 | 2022-09-08 |
| cve-2011-4369 | SUSE CVE CVE-2011-4369 | UNKNOWN | N/A | 7.52% | cvelistv5 | 2025-08-03 |
| cve-2011-4106 | TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload and execute arbitrary code via a URL containing a white-listed domain in the src parameter, then accessing it via a direct request to the file in the cache directory, as exploited in the wild in August 2011. | MEDIUM | 6.8 | 23.34% | cvelistv5 | 2026-06-16 |
| cve-2011-4075 | phpldapadmin: XSS and code injection vulnerabilities in <= 1.2.1.1 | UNKNOWN | N/A | 51.89% | cvelistv5 | 2026-06-27 |
| cve-2011-3600 | XML-RPC SAX parser information exposure | UNKNOWN | N/A | 15.91% | cvelistv5 | 2025-11-21 |
| cve-2011-3544 | SUSE CVE CVE-2011-3544 | CRITICAL | 9.8 | 96.71% | cvelistv5 | 2025-03-16 |
| cve-2011-3402 | Microsoft Windows Remote Code Execution Vulnerability | HIGH | N/A | 78.14% | cvelistv5 | 2025-10-06 |
| cve-2011-2900 | mongoose: stack-based buffer overflow flaw in put_dir() | UNKNOWN | N/A | 13.26% | cvelistv5 | 2025-11-21 |
| cve-2011-2462 | SUSE CVE CVE-2011-2462 | UNKNOWN | N/A | 88.52% | cvelistv5 | 2023-12-09 |
| cve-2011-2444 | SUSE CVE CVE-2011-2444 | UNKNOWN | N/A | 2.70% | cvelistv5 | 2023-12-09 |
| cve-2011-2110 | SUSE CVE CVE-2011-2110 | UNKNOWN | N/A | 86.42% | cvelistv5 | 2026-05-01 |
| cve-2011-2005 | Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability | HIGH | N/A | 31.53% | cvelistv5 | 2022-03-28 |
| cve-2011-1968 | CVE-2011-1968 | HIGH | N/A | 25.71% | cvelistv5 | |
| cve-2011-1950 | plone: Privilege escalation via plone.app.users (Plone v4.0 and v4.1 specific) | UNKNOWN | N/A | 2.35% | cvelistv5 | 2025-11-21 |
| cve-2011-1889 | Microsoft Forefront TMG Remote Code Execution Vulnerability | HIGH | N/A | 49.02% | cvelistv5 | 2022-03-03 |
| cve-2011-1823 | Android OS Privilege Escalation Vulnerability | HIGH | N/A | 41.37% | cvelistv5 | 2022-09-08 |
| cve-2011-1752 | SUSE CVE CVE-2011-1752 | UNKNOWN | N/A | 8.48% | cvelistv5 | 2025-10-08 |
| cve-2011-1722 | CVE-2011-1722 | HIGH | N/A | 1.30% | cvelistv5 | |
| cve-2011-1331 | CVE-2011-1331 | HIGH | N/A | 5.56% | cvelistv5 |