Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2018-2380 SAP Customer Relationship Management (CRM) Path Traversal Vulnerability MEDIUM 6.6 28.93% cvelistv5 2021-11-03
cve-2018-20062 ThinkPHP "noneCms" Remote Code Execution Vulnerability CRITICAL 9.8 99.53% cvelistv5 2021-11-03
cve-2018-18325 DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811. HIGH 7.5 74.05% cvelistv5 2026-06-17
cve-2018-15961 Adobe ColdFusion Unrestricted File Upload Vulnerability CRITICAL 9.8 99.95% cvelistv5 2021-11-03
cve-2018-15811 DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters. HIGH 7.5 76.30% cvelistv5 2026-06-17
cve-2018-14558 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability HIGH N/A 8.74% cvelistv5 2021-11-03
cve-2018-13379 Fortinet FortiOS SSL VPN Path Traversal Vulnerability CRITICAL 9.1 100.00% cvelistv5 2021-11-03
cve-2018-11776 struts2: Using specific results and namespaces can result in a remote code execution CRITICAL 9.8 99.99% cvelistv5 2025-11-21
cve-2018-0802 Microsoft Office Memory Corruption Vulnerability HIGH 7.8 93.29% cvelistv5 2021-11-03
cve-2018-0798 Microsoft Office Memory Corruption Vulnerability HIGH 8.8 95.12% cvelistv5 2021-11-03
cve-2018-0296 Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability HIGH 7.5 99.91% cvelistv5 2021-11-03
cve-2018-0171 Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability HIGH N/A 99.48% cvelistv5 2021-11-03
cve-2017-9822 DotNetNuke (DNN) Remote Code Execution Vulnerability HIGH 8.8 94.79% cvelistv5 2021-11-03
cve-2017-9805 struts: RCE attack via REST plugin with XStream handler to deserialise XML requests HIGH 8.1 99.40% cvelistv5 2025-11-21
cve-2017-9248 Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability CRITICAL 9.8 75.10% cvelistv5 2021-11-03
cve-2017-8759 Microsoft .NET Framework Remote Code Execution Vulnerability HIGH 7.8 88.70% cvelistv5 2021-11-03
cve-2017-7269 Microsoft Windows Server Buffer Overflow Vulnerability CRITICAL 9.8 99.82% cvelistv5 2021-11-03
cve-2017-6327 Symantec Messaging Gateway Remote Code Execution Vulnerability HIGH N/A 35.91% cvelistv5 2021-11-03
cve-2017-5638 struts2: RCE when performing file upload based on Jakarta Multipart parser CRITICAL 9.8 100.00% cvelistv5 2025-11-21
cve-2017-16651 roundcubemail: Unauthorized access to arbitrary files MEDIUM 4.3 45.74% cvelistv5 2025-11-21
cve-2017-11882 Microsoft Office Memory Corruption Vulnerability HIGH 7.8 99.94% cvelistv5 2021-11-03
cve-2017-11774 Microsoft Office Outlook Security Feature Bypass Vulnerability HIGH N/A 59.63% cvelistv5 2021-11-03
cve-2017-0199 Microsoft Office and WordPad Remote Code Execution Vulnerability CRITICAL N/A 99.50% cvelistv5 2021-11-03
cve-2017-0143 Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability HIGH 8.8 93.31% cvelistv5 2021-11-03
cve-2016-9563 SAP NetWeaver XML External Entity (XXE) Vulnerability HIGH N/A 24.23% cvelistv5 2021-11-03
cve-2016-7255 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.... HIGH 7.8 80.97% cvelistv5 2026-09-10
cve-2016-4437 shiro: Security constraint bypass HIGH 7.3 93.04% cvelistv5 2025-11-21
cve-2016-3976 SAP NetWeaver Directory Traversal Vulnerability HIGH N/A 47.25% cvelistv5 2021-11-03
cve-2016-3718 ImageMagick: SSRF vulnerability UNKNOWN N/A 76.74% cvelistv5 2025-11-21
cve-2016-3715 ImageMagick: File deletion UNKNOWN N/A 75.31% cvelistv5 2025-11-21