Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2019-11539 Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability HIGH 8.0 98.54% cvelistv5 2021-11-03
cve-2019-11510 Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability CRITICAL 9.9 100.00% cvelistv5 2021-11-03
cve-2019-0863 Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability HIGH 7.8 5.21% cvelistv5 2021-11-03
cve-2019-0859 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 4.15% cvelistv5 2021-11-03
cve-2019-0808 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 53.02% cvelistv5 2021-11-03
cve-2019-0803 Microsoft Win32k Privilege Escalation Vulnerability CRITICAL N/A 44.95% cvelistv5 2021-11-03
cve-2019-0797 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 1.89% cvelistv5 2021-11-03
cve-2019-0708 Microsoft Remote Desktop Services Remote Code Execution Vulnerability CRITICAL 9.8 100.00% cvelistv5 2021-11-03
cve-2019-0604 Microsoft SharePoint Remote Code Execution Vulnerability CRITICAL 9.8 99.91% cvelistv5 2021-11-03
cve-2019-0541 Microsoft MSHTML Remote Code Execution Vulnerability HIGH 8.8 53.20% cvelistv5 2021-11-03
cve-2019-0211 Apache HTTP Server Privilege Escalation Vulnerability HIGH N/A 65.00% cvelistv5 2021-11-03
cve-2018-8653 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability HIGH N/A 29.61% cvelistv5 2021-11-03
cve-2018-7600 drupal: Unsanitized requests allow remote attackers to execute arbitrary code CRITICAL 9.8 99.99% cvelistv5 2025-11-21
cve-2018-6789 exim: buffer overflow in b64decode() function, possibly leading to remote code execution HIGH 8.1 82.14% cvelistv5 2026-01-09
cve-2018-4939 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 62.08% cvelistv5 2021-11-03
cve-2018-4878 flash-plugin: use-after-free causing remote code execution (APSB18-03) HIGH 8.8 89.53% cvelistv5 2026-06-28
cve-2018-2380 SAP Customer Relationship Management (CRM) Path Traversal Vulnerability MEDIUM 6.6 28.93% cvelistv5 2021-11-03
cve-2018-20062 ThinkPHP "noneCms" Remote Code Execution Vulnerability CRITICAL 9.8 99.53% cvelistv5 2021-11-03
cve-2018-18325 DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability HIGH 7.5 74.05% cvelistv5 2021-11-03
cve-2018-15961 Adobe ColdFusion Unrestricted File Upload Vulnerability CRITICAL 9.8 99.95% cvelistv5 2021-11-03
cve-2018-15811 DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability HIGH 7.5 74.05% cvelistv5 2021-11-03
cve-2018-14558 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability HIGH N/A 8.74% cvelistv5 2021-11-03
cve-2018-13379 Fortinet FortiOS SSL VPN Path Traversal Vulnerability CRITICAL 9.1 100.00% cvelistv5 2021-11-03
cve-2018-11776 struts2: Using specific results and namespaces can result in a remote code execution CRITICAL 9.8 99.99% cvelistv5 2025-11-21
cve-2018-0802 Microsoft Office Memory Corruption Vulnerability HIGH 7.8 93.29% cvelistv5 2021-11-03
cve-2018-0798 Microsoft Office Memory Corruption Vulnerability HIGH 8.8 95.12% cvelistv5 2021-11-03
cve-2018-0296 Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability HIGH 7.5 99.91% cvelistv5 2021-11-03
cve-2018-0171 Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability HIGH N/A 99.48% cvelistv5 2021-11-03
cve-2017-9822 DotNetNuke (DNN) Remote Code Execution Vulnerability HIGH 8.8 94.79% cvelistv5 2021-11-03
cve-2017-9805 SUSE CVE CVE-2017-9805 UNKNOWN N/A 99.40% cvelistv5 2025-10-07