Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2019-10758 MongoDB mongo-express Remote Code Execution Vulnerability HIGH N/A 84.73% cvelistv5 2021-12-10
cve-2019-1069 Microsoft Task Scheduler Privilege Escalation Vulnerability HIGH 7.8 6.12% cvelistv5 2022-03-15
cve-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability HIGH 8.8 52.84% cvelistv5 2026-08-26
cve-2019-10655 CVE-2019-10655 HIGH N/A 15.47% cvelistv5
cve-2019-1064 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability HIGH 7.8 6.89% cvelistv5 2022-03-15
cve-2019-10149 SUSE CVE CVE-2019-10149 CRITICAL 9.8 99.96% cvelistv5 2025-04-25
cve-2019-10068 Kentico Xperience Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 95.07% cvelistv5 2022-03-25
cve-2019-1003030 Jenkins Matrix Project Plugin Remote Code Execution Vulnerability HIGH N/A 96.87% cvelistv5 2022-03-25
cve-2019-1003029 Jenkins Script Security Plugin Sandbox Bypass Vulnerability HIGH N/A 73.85% cvelistv5 2022-04-25
cve-2019-0903 Microsoft GDI Remote Code Execution Vulnerability HIGH 8.8 21.71% cvelistv5 2022-03-25
cve-2019-0880 Microsoft Windows Privilege Escalation Vulnerability HIGH 7.8 2.29% cvelistv5 2022-05-23
cve-2019-0863 Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability HIGH 7.8 5.21% cvelistv5 2021-11-03
cve-2019-0859 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 4.15% cvelistv5 2021-11-03
cve-2019-0841 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability HIGH 7.8 41.40% cvelistv5 2022-03-15
cve-2019-0808 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 53.02% cvelistv5 2021-11-03
cve-2019-0803 Microsoft Win32k Privilege Escalation Vulnerability CRITICAL N/A 44.95% cvelistv5 2021-11-03
cve-2019-0797 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 1.89% cvelistv5 2021-11-03
cve-2019-0752 Microsoft Internet Explorer Type Confusion Vulnerability HIGH 7.5 81.55% cvelistv5 2022-02-15
cve-2019-0708 Microsoft Remote Desktop Services Remote Code Execution Vulnerability CRITICAL 9.8 100.00% cvelistv5 2021-11-03
cve-2019-0703 Microsoft Windows SMB Information Disclosure Vulnerability MEDIUM 6.5 9.64% cvelistv5 2022-05-23
cve-2019-0676 Microsoft Internet Explorer Information Disclosure Vulnerability HIGH N/A 8.11% cvelistv5 2022-05-23
cve-2019-0604 Microsoft SharePoint Remote Code Execution Vulnerability CRITICAL 9.8 99.91% cvelistv5 2021-11-03
cve-2019-0543 Microsoft Windows Privilege Escalation Vulnerability HIGH 7.8 4.72% cvelistv5 2022-03-15
cve-2019-0541 Microsoft MSHTML Remote Code Execution Vulnerability HIGH 8.8 53.20% cvelistv5 2021-11-03
cve-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 7.08% cvelistv5 2024-09-30
cve-2019-0211 Apache HTTP Server Privilege Escalation Vulnerability HIGH N/A 65.00% cvelistv5 2021-11-03
cve-2019-0193 Apache Solr DataImportHandler Code Injection Vulnerability HIGH N/A 83.55% cvelistv5 2021-12-10
cve-2018-9995 TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin" header, as demonstrated by a device.rsp?opt=user&cmd=list request that provides credentials within JSON data in a response. CRITICAL 9.8 82.32% cvelistv5 2026-06-17
cve-2018-9866 A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier. CRITICAL 9.8 4.50% cvelistv5 2026-06-17
cve-2018-9276 PRTG Network Monitor: PRTG Network Monitor OS Command Injection Vulnerability HIGH 7.2 87.00% cvelistv5 2025-11-21