Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2019-12991 Citrix SD-WAN and NetScaler Command Injection Vulnerability HIGH 8.8 N/A cvelistv5 2022-03-25
cve-2019-12989 Citrix SD-WAN and NetScaler SQL Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2022-03-25
cve-2019-11043 PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability CRITICAL N/A N/A cvelistv5 2022-03-25
cve-2019-10068 Kentico Xperience Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 N/A cvelistv5 2022-03-25
cve-2019-1003030 Jenkins Matrix Project Plugin Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2022-03-25
cve-2019-0903 Microsoft GDI Remote Code Execution Vulnerability HIGH 8.8 N/A cvelistv5 2022-03-25
cve-2018-8414 Microsoft Windows Shell Remote Code Execution Vulnerability HIGH 8.8 N/A cvelistv5 2022-03-25
cve-2018-8373 Microsoft Scripting Engine Memory Corruption Vulnerability HIGH 7.5 N/A cvelistv5 2022-03-25
cve-2018-6961 VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability HIGH 8.1 N/A cvelistv5 2022-03-25
cve-2018-14839 LG N1A1 NAS Remote Command Execution Vulnerability CRITICAL 9.8 N/A cvelistv5 2022-03-25
cve-2018-1273 VMware Tanzu Spring Data Commons Property Binder Vulnerability CRITICAL N/A N/A cvelistv5 2022-03-25
cve-2018-11138 Quest KACE System Management Appliance Remote Command Execution Vulnerability CRITICAL N/A N/A cvelistv5 2022-03-25
cve-2018-0147 Cisco Secure Access Control System Java Deserialization Vulnerability CRITICAL 9.8 N/A cvelistv5 2022-03-25
cve-2018-0125 Cisco VPN Routers Remote Code Execution Vulnerability CRITICAL 9.8 N/A cvelistv5 2022-03-25
cve-2017-6334 NETGEAR DGN2200 Devices OS Command Injection Vulnerability HIGH N/A 72.64% cvelistv5 2022-03-25
cve-2017-6316 Citrix Multiple Products Remote Code Execution Vulnerability HIGH N/A 73.03% cvelistv5 2022-03-25
cve-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability HIGH N/A 98.95% cvelistv5 2022-03-25
cve-2017-12617 Apache Tomcat Remote Code Execution Vulnerability HIGH N/A 99.99% cvelistv5 2022-03-25
cve-2017-12615 Apache Tomcat on Windows Remote Code Execution Vulnerability CRITICAL N/A 99.61% cvelistv5 2022-03-25
cve-2017-0146 Microsoft Windows SMB Remote Code Execution Vulnerability HIGH 8.8 89.86% cvelistv5 2022-03-25
cve-2016-7892 Adobe Flash Player Use-After-Free Vulnerability HIGH N/A 18.79% cvelistv5 2022-03-25
cve-2016-4171 Adobe Flash Player Remote Code Execution Vulnerability HIGH N/A 20.05% cvelistv5 2022-03-25
cve-2016-1555 NETGEAR Multiple WAP Devices Command Injection Vulnerability HIGH N/A 98.29% cvelistv5 2022-03-25
cve-2016-11021 D-Link DCS-930L Devices OS Command Injection Vulnerability HIGH 7.2 68.87% cvelistv5 2022-03-25
cve-2016-10174 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability HIGH N/A 83.33% cvelistv5 2022-03-25
cve-2016-0752 Ruby on Rails Directory Traversal Vulnerability HIGH N/A 95.54% cvelistv5 2022-03-25
cve-2015-4068 Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability CRITICAL 9.1 63.64% cvelistv5 2022-03-25
cve-2015-3035 TP-Link Multiple Archer Devices Directory Traversal Vulnerability HIGH 7.5 83.95% cvelistv5 2022-03-25
cve-2015-1427 Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability HIGH N/A 99.91% cvelistv5 2022-03-25
cve-2015-1187 D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability CRITICAL 9.8 82.86% cvelistv5 2022-03-25