Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2019-5127 | CVE-2019-5127 | CRITICAL | 10.0 | 45.30% | cvelistv5 | |
| cve-2019-3929 | Crestron Multiple Products Command Injection Vulnerability | CRITICAL | 9.8 | 98.95% | cvelistv5 | 2022-04-15 |
| cve-2019-3396 | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | CRITICAL | 9.8 | 99.91% | cvelistv5 | 2021-11-03 |
| cve-2019-2725 | Oracle WebLogic Server, Injection | CRITICAL | 9.8 | 99.96% | cvelistv5 | 2022-01-10 |
| cve-2019-2616 | Oracle BI Publisher Unauthorized Access Vulnerability | HIGH | 7.2 | 92.18% | cvelistv5 | 2022-03-25 |
| cve-2019-25141 | CVE-2019-25141 | CRITICAL | 9.8 | 4.50% | cvelistv5 | |
| cve-2019-20933 | influxdb: authentication bypass because a JWT token may have an empty SharedSecret | HIGH | 8.6 | 30.92% | cvelistv5 | 2026-08-21 |
| cve-2019-19825 | CVE-2019-19825 | HIGH | N/A | 29.56% | cvelistv5 | |
| cve-2019-19824 | CVE-2019-19824 | HIGH | N/A | 25.14% | cvelistv5 | |
| cve-2019-19781 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | CRITICAL | 9.8 | 100.00% | cvelistv5 | 2021-11-03 |
| cve-2019-18952 | CVE-2019-18952 | HIGH | N/A | 45.36% | cvelistv5 | |
| cve-2019-18818 | CVE-2019-18818 | HIGH | N/A | 97.64% | cvelistv5 | |
| cve-2019-18394 | CVE-2019-18394 | HIGH | N/A | 32.30% | cvelistv5 | |
| cve-2019-1821 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities | HIGH | 8.8 | 98.05% | cvelistv5 | 2026-06-17 |
| cve-2019-17506 | CVE-2019-17506 | HIGH | N/A | 56.39% | cvelistv5 | |
| cve-2019-17270 | CVE-2019-17270 | HIGH | N/A | 58.88% | cvelistv5 | |
| cve-2019-16920 | D-Link Multiple Routers Command Injection Vulnerability | CRITICAL | 9.8 | 100.00% | cvelistv5 | 2022-03-25 |
| cve-2019-16662 | CVE-2019-16662 | HIGH | N/A | 97.70% | cvelistv5 | |
| cve-2019-1653 | Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | HIGH | 7.5 | 99.88% | cvelistv5 | 2021-11-03 |
| cve-2019-16278 | Nostromo nhttpd Directory Traversal Vulnerability | CRITICAL | 9.8 | 99.03% | cvelistv5 | 2024-11-07 |
| cve-2019-15642 | rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialise_variable makes an eval call. NOTE: the Webmin_Servers_Index documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must not be granted to un-trusted Webmin users." | HIGH | 8.8 | 34.80% | cvelistv5 | 2026-06-17 |
| cve-2019-15107 | Webmin Command Injection Vulnerability | CRITICAL | N/A | 99.77% | cvelistv5 | 2022-03-25 |
| cve-2019-14251 | CVE-2019-14251 | HIGH | N/A | 7.85% | cvelistv5 | |
| cve-2019-14223 | CVE-2019-14223 | HIGH | N/A | 4.47% | cvelistv5 | |
| cve-2019-13462 | Lansweeper before 7.1.117.4 allows unauthenticated SQL injection. | CRITICAL | 9.1 | 11.31% | cvelistv5 | 2026-06-17 |
| cve-2019-13372 | CVE-2019-13372 | HIGH | N/A | 82.49% | cvelistv5 | |
| cve-2019-13101 | CVE-2019-13101 | HIGH | N/A | 67.09% | cvelistv5 | |
| cve-2019-12990 | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal. | CRITICAL | 9.8 | 39.34% | cvelistv5 | 2026-06-17 |
| cve-2019-12989 | Citrix SD-WAN and NetScaler SQL Injection Vulnerability | HIGH | N/A | 94.13% | cvelistv5 | 2022-03-25 |
| cve-2019-12987 | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6). | CRITICAL | 9.8 | 42.55% | cvelistv5 | 2026-06-17 |