Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2010-1165 | CVE-2010-1165 | HIGH | N/A | 4.44% | cvelistv5 | |
| cve-2010-1164 | CVE-2010-1164 | HIGH | N/A | 2.23% | cvelistv5 | |
| cve-2010-0840 | OpenJDK Applet Trusted Methods Chaining Privilege Escalation Vulnerability (6904691) | UNKNOWN | N/A | 96.32% | cvelistv5 | 2026-06-28 |
| cve-2010-0806 | Microsoft Internet Explorer Use-After-Free Vulnerability | HIGH | 8.8 | 82.17% | cvelistv5 | 2026-05-20 |
| cve-2010-0738 | JBoss EAP jmx authentication bypass with crafted HTTP request | UNKNOWN | N/A | 79.42% | cvelistv5 | 2026-01-09 |
| cve-2010-0249 | Microsoft Internet Explorer Use-After-Free Vulnerability | HIGH | 8.8 | 91.94% | cvelistv5 | 2026-05-20 |
| cve-2010-0232 | Microsoft Windows Kernel Exception Handler Vulnerability | HIGH | 7.8 | 29.25% | cvelistv5 | 2022-03-03 |
| cve-2010-0219 | Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service. | CRITICAL | 10.0 | 90.85% | cvelistv5 | 2026-06-16 |
| cve-2010-0188 | acroread: unspecified code execution flaw | UNKNOWN | N/A | 88.25% | cvelistv5 | 2026-06-28 |
| cve-2009-5076 | CVE-2009-5076 | HIGH | N/A | 1.41% | cvelistv5 | |
| cve-2009-4324 | Adobe Acrobat and Reader Use-After-Free Vulnerability | HIGH | N/A | 81.93% | cvelistv5 | 2022-06-08 |
| cve-2009-3960 | Adobe BlazeDS Information Disclosure Vulnerability | MEDIUM | 6.5 | 90.01% | cvelistv5 | 2022-03-07 |
| cve-2009-3953 | SUSE CVE CVE-2009-3953 | UNKNOWN | N/A | 83.86% | cvelistv5 | 2025-07-29 |
| cve-2009-3459 | SUSE CVE CVE-2009-3459 | UNKNOWN | N/A | 86.58% | cvelistv5 | 2026-05-27 |
| cve-2009-3129 | Microsoft Excel Featheader Record Memory Corruption Vulnerability | HIGH | N/A | 85.61% | cvelistv5 | 2022-03-03 |
| cve-2009-3041 | CVE-2009-3041 | HIGH | N/A | 6.59% | cvelistv5 | |
| cve-2009-2265 | moin: embedded fckeditor multiple directory traversal vulns | UNKNOWN | N/A | 83.74% | cvelistv5 | 2025-11-21 |
| cve-2009-2055 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | HIGH | N/A | 3.31% | cvelistv5 | 2022-03-25 |
| cve-2009-1862 | Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability | HIGH | N/A | 24.92% | cvelistv5 | 2022-06-08 |
| cve-2009-1807 | CVE-2009-1807 | HIGH | N/A | 7.53% | cvelistv5 | |
| cve-2009-1800 | CVE-2009-1800 | HIGH | N/A | 10.90% | cvelistv5 | |
| cve-2009-1612 | CVE-2009-1612 | HIGH | N/A | 33.26% | cvelistv5 | |
| cve-2009-1537 | Microsoft DirectX NULL Byte Overwrite Vulnerability | HIGH | 8.8 | 51.21% | cvelistv5 | 2026-05-20 |
| cve-2009-1481 | CVE-2009-1481 | HIGH | N/A | 1.17% | cvelistv5 | |
| cve-2009-1391 | SUSE CVE CVE-2009-1391 | UNKNOWN | N/A | 7.44% | cvelistv5 | 2025-04-11 |
| cve-2009-1308 | SUSE CVE CVE-2009-1308 | UNKNOWN | N/A | 2.29% | cvelistv5 | 2026-08-27 |
| cve-2009-1151 | phpMyAdmin Remote Code Execution Vulnerability | HIGH | N/A | 96.56% | cvelistv5 | 2022-03-25 |
| cve-2009-1136 | CVE-2009-1136 | HIGH | N/A | 62.02% | cvelistv5 | |
| cve-2009-1123 | Microsoft Windows Improper Input Validation Vulnerability | HIGH | N/A | 4.88% | cvelistv5 | 2022-03-03 |
| cve-2009-1054 | CVE-2009-1054 | HIGH | N/A | 3.91% | cvelistv5 |