CISA + EU · actively exploited
Known Exploited Vulnerabilities
KEV entries
1,769CISA + EU, exploited in the wild
In the EU KEV
78flagged by ENISA
Ransomware
361known campaign use
Due in 30 days
6CISA remediation deadline
Added in 30 days
41new to the catalog
| CVE | Vendor · product | Vulnerability | Source | Added | Due |
|---|---|---|---|---|---|
| CVE-2026-96656EUVD-2026-85370 | PlexMedia Server | Plex Media Server External Control of File Name or Path Vulnerability | CISA | 2026-10-20 | 1d left |
| CVE-2026-96655EUVD-2026-85369 | PlexMedia Server | Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | CISA | 2026-10-20 | 12d left |
| CVE-2026-96654EUVD-2026-85368 | PlexMedia Server | Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability | CISA | 2026-10-20 | 1d left |
| CVE-2026-96652EUVD-2026-85367 | PlexMedia Server | Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | CISA | 2026-10-20 | 12d left |
| CVE-2026-110936EUVD-2026-102072 | SiemensSoftware Center | Siemens Software Center Uncontrolled Search Path Element Vulnerability | CISAEU | 2026-10-20 | 12d left |
| CVE-2026-106931EUVD-2026-100814 | EG Secure SolutionsSiteGuard Server Edition | EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability | CISA | 2026-10-20 | 1d left |
| CVE-2026-102764EUVD-2026-102427 | BeyondTrustRemote Support | BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability | CISA | 2026-10-16 | 3d overdue |
| CVE-2025-61624EUVD-2025-209452 | FortinetMultiple Products | Fortinet Multiple Products Path Traversal Vulnerability | CISA | 2026-10-16 | 3d overdue |
| CVE-2026-21589EUVD-2026-92807 | AtlassianMultiple Products | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | CISA | 2026-10-15 | 4d overdue |
| CVE-2026-76519EUVD-2026-101420 | CiscoSecure Email Gateway | Cisco Secure Email Gateway Relative Path Traversal Vulnerability | CISA | 2026-10-14 | 5d overdue |
| CVE-2026-105134EUVD-2026-92078 | AhsayAhsayCBS | Ahsay AhsayCBS Command Injection Vulnerability | CISA | 2026-10-14 | 5d overdue |
| CVE-2026-105133EUVD-2026-92079 | AhsayAhsayCBS | Ahsay AhsayCBS Improper Authentication Vulnerability | CISA | 2026-10-14 | 5d overdue |
| CVE-2026-0322EUVD-2026-101495 | Palo Alto NetworksPAN-OS | Palo Alto Networks PAN-OS Code Injection Vulnerability | CISA | 2026-10-14 | 5d overdue |
| CVE-2026-96951EUVD-2026-100274 | MicrosoftWindows | Microsoft Windows Command Injection Vulnerability | CISA | 2026-10-13 | 6d overdue |
| CVE-2026-104935EUVD-2026-98816 | IvantiConnect Secure | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | CISA | 2026-10-13 | 6d overdue |
| CVE-2026-41901EUVD-2026-29872 | Unknown | Thymeleaf is a server-side Java template engine for web and standalone environments. Prior to 3.1.5.RELEASE, a… | EU | 2026-10-10 | No deadline |
| CVE-2026-40478EUVD-2026-23573 | Thymeleaf | Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3.RELEASE an… | EU | 2026-10-10 | No deadline |
| CVE-2026-40477EUVD-2026-23571 | Thymeleaf | Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3.RELEASE an… | EU | 2026-10-10 | No deadline |
| CVE-2023-22894EUVD-2023-1342 | StrapiStrapi | Strapi Cleartext Storage of Sensitive Information Vulnerability | CISA | 2026-10-08 | 11d overdue |
| CVE-2021-3199EUVD-2021-26539 | ONLYOFFICEDocs | ONLYOFFICE Docs Server Path Traversal Vulnerability | CISA | 2026-10-08 | 11d overdue |
| CVE-2016-3081EUVD-2022-3161 | ApacheStruts | Apache Struts Command Injection Vulnerability | CISA | 2026-10-08 | 11d overdue |
| CVE-2015-5477EUVD-2015-5432 | ISCBIND | ISC BIND Data Processing Errors Vulnerability | CISA | 2026-10-08 | 11d overdue |
| CVE-2015-3306EUVD-2015-3352 | ProFTPDProFTPD | ProFTPD Improper Access Control Vulnerability | CISA | 2026-10-08 | 11d overdue |
| CVE-2026-88779EUVD-2026-92065 | CitrixNetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | CISAEU | 2026-10-04 | 15d overdue |
| CVE-2026-102490EUVD-2026-90081 | Zammad GmbHZammad | Zammad GmbH Zammad Improper Privilege Management Vulnerability | CISAEU | 2026-10-02 | 17d overdue |
| CVE-2026-102489EUVD-2026-90080 | Zammad GmbHZammad | Zammad GmbH Zammad Session Fixation Vulnerability | CISAEU | 2026-10-02 | 17d overdue |
| CVE-2026-104286EUVD-2026-91042 | FortinetFortiMail | Fortinet FortiMail Path Traversal Vulnerability | CISAEU | 2026-10-01 | 18d overdue |
| CVE-2026-76504EUVD-2026-89950 | CiscoCatalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | CISA | 2026-09-30 | 19d overdue |
| CVE-2026-86950EUVD-2026-88445 | AppleMultiple Products | Apple Multiple Products Out-of-Bounds Write Vulnerability | CISAEU | 2026-09-29 | 9d overdue |
| CVE-2026-88772EUVD-2026-87959 | CitrixNetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | CISAEU | 2026-09-27 | 22d overdue |
| CVE-2026-88771EUVD-2026-87958 | CitrixNetScaler | Citrix NetScaler Improper Input Validation Vulnerability | CISAEU | 2026-09-27 | 22d overdue |
| CVE-2026-87902EUVD-2026-84555 | WordPressCore | WordPress Core Remote File Inclusion Vulnerability | CISAEU | 2026-09-25 | 24d overdue |
| CVE-2026-85103EUVD-2026-75010 | Unknown | A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to… | EU | 2026-09-25 | No deadline |
| CVE-2026-67279EUVD-2026-72027 | MikroTikRouterOS | Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability | CISAEU | 2026-09-25 | 24d overdue |
| CVE-2026-65660EUVD-2026-56431 | MicrosoftSharePoint | Microsoft SharePoint Code Injection Vulnerability | CISAEU | 2026-09-25 | 24d overdue |
| CVE-2026-71362EUVD-2026-56844 | AdobeCommerce and Magento | Adobe Commerce and Magento Incorrect Authorization Vulnerability | CISA | 2026-09-24 | 25d overdue |
| CVE-2026-5430EUVD-2026-53822 | WSO2Multiple Products | WSO2 Multiple Products Path Traversal Vulnerability | CISA | 2026-09-24 | 25d overdue |
| CVE-2026-94127EUVD-2026-84427 | F5BIG-IP APM | F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | CISAEU | 2026-09-22 | 27d overdue |
| CVE-2026-93952EUVD-2026-84296 | AristaVeloCloud Orchestrator | Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | CISAEU | 2026-09-22 | 27d overdue |
| CVE-2026-93616EUVD-2026-84375 | Check PointMultiple Products | Check Point Multiple Products Path Traversal Vulnerability | CISAEU | 2026-09-22 | 27d overdue |
| CVE-2026-85102EUVD-2026-75009 | Check PointMultiple Products | Check Point Multiple Products Improper Certificate Validation Vulnerability | CISAEU | 2026-09-22 | 27d overdue |
| CVE-2026-7273EUVD-2026-37030 | ZyxelGS1900 Series Switches | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | CISA | 2026-09-21 | 28d overdue |
| CVE-2026-53266EUVD-2026-39217 | LinuxKernel | Linux Kernel Out-of-Bounds Write Vulnerability | CISA | 2026-09-18 | 31d overdue |
| CVE-2025-39964EUVD-2025-34068 | LinuxKernel | Linux Kernel Race Condition Vulnerability | CISA | 2026-09-18 | 31d overdue |
| CVE-2025-39682EUVD-2025-31542 | LinuxKernel | Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability | CISA | 2026-09-18 | 31d overdue |
| CVE-2026-87886EUVD-2026-82595 | AcronisBackup | Acronis Backup Incorrect Default Permissions Vulnerability | CISA | 2026-09-16 | 33d overdue |
| CVE-2026-76460EUVD-2026-81122 | CiscoIdentity Services Engine | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | CISA | 2026-09-16 | 33d overdue |
| CVE-2026-58704EUVD-2026-79004 | GooglePixel | Google Pixel Improper Authorization Vulnerability | CISA | 2026-09-16 | 33d overdue |
| CVE-2026-76461EUVD-2026-77625 | CiscoSecure Email Gateway | Cisco Secure Email Gateway SQL Injection Vulnerability | CISA | 2026-09-14 | 35d overdue |
| CVE-2026-85706EUVD-2026-76779 | GitLabCommunity Edition and Enterprise Edition | GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability | CISA | 2026-09-11 | 38d overdue |
| CVE-2026-84869EUVD-2026-74053 | ConnectWiseScreenConnect | ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability | CISA | 2026-09-11 | 38d overdue |
| CVE-2026-42018EUVD-2026-57388 | JFrogArtifactory | JFrog Artifactory Improper Authentication Vulnerability | CISA | 2026-09-11 | 27d overdue |
| CVE-2026-42016EUVD-2026-49566 | JFrogArtifactory | JFrog Artifactory Incorrect Authorization Vulnerability | CISA | 2026-09-11 | 27d overdue |
| CVE-2026-86060EUVD-2026-72029 | MikroTikRouterOS | MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability | CISAEU | 2026-09-10 | 39d overdue |
| CVE-2026-67277EUVD-2026-72025 | MikroTikRouterOS | MikroTik RouterOS Missing Authentication for Critical Function Vulnerability | CISAEU | 2026-09-10 | 39d overdue |
| CVE-2026-87491EUVD-2026-74529 | GoogleChromium V8 | Google Chromium V8 Out of Bounds Write Vulnerability | CISA | 2026-09-09 | 29d overdue |
| CVE-2026-20079EUVD-2026-9438 | CiscoSecure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | CISAEU | 2026-09-09 | 40d overdue |
| CVE-2026-19490EUVD-2026-62395 | CitrixNetScaler | Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | CISA | 2026-09-09 | 40d overdue |
| CVE-2025-25249EUVD-2026-2223 | FortinetMultiple Products | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | CISA | 2026-09-09 | 40d overdue |
| CVE-2026-86218EUVD-2026-72041 | N-ableN-central | N-able N-central Static Code Injection Vulnerability | CISA | 2026-09-08 | 41d overdue |
| CVE-2026-85880EUVD-2026-73365 | MicrosoftWindows | Microsoft Windows Heap-Based Buffer Overflow Vulnerability | CISA | 2026-09-08 | 30d overdue |
| CVE-2026-81963EUVD-2026-73889 | MicrosoftWindows | Microsoft Windows Link Following Vulnerability | CISA | 2026-09-08 | 30d overdue |
| CVE-2026-75650EUVD-2026-72530 | AdobeCommerce and Magento | Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | CISA | 2026-09-08 | 41d overdue |
| CVE-2026-67276EUVD-2026-72024 | Mikrotik | RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an author… | EU | 2026-09-05 | No deadline |
| CVE-2026-85046EUVD-2026-70702 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2026-09-04 | 34d overdue |
| CVE-2026-9586EUVD-2026-45205 | SangomaSwitchvox | Sangoma Switchvox SQL Injection Vulnerability | CISA | 2026-09-02 | 47d overdue |
| CVE-2026-83549EUVD-2026-69707 | SonicWallSMA1000 Appliances | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | CISA | 2026-09-02 | 47d overdue |
| CVE-2026-83548EUVD-2026-69704 | SonicWallSMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | CISA | 2026-09-02 | 47d overdue |
| CVE-2026-82329EUVD-2026-67861 | JFrogArtifactory | JFrog Artifactory Improper Authentication Vulnerability | CISAEU | 2026-09-02 | 47d overdue |
| CVE-2026-63219EUVD-2026-70647 | Unknown | GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2… | EU | 2026-09-02 | No deadline |
| CVE-2026-59822EUVD-2026-42359 | BerriAILiteLLM | BerriAI LiteLLM Improper Authentication Vulnerability | CISA | 2026-09-02 | 36d overdue |
| CVE-2026-58400EUVD-2026-70645 | Unknown | GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2… | EU | 2026-09-02 | No deadline |
| CVE-2026-49869EUVD-2026-39922 | KestraKestra OSS | Kestra OSS OS Command Injection Vulnerability | CISA | 2026-09-02 | 47d overdue |
| CVE-2026-48710EUVD-2026-32016 | KludexStarlette | Kludex Starlette HTTP Request/Response Smuggling Vulnerability | CISA | 2026-09-02 | 36d overdue |
| CVE-2026-82078EUVD-2026-67714 | PaperCutNG/MF | PaperCut NG/MF Unsafe Reflection Vulnerability | CISAEU | 2026-08-31 | 38d overdue |
| CVE-2026-81578EUVD-2026-67713 | PaperCutNG/MF | PaperCut NG/MF Missing Authentication for Critical Function Vulnerability | CISAEU | 2026-08-31 | 38d overdue |
| CVE-2026-74233EUVD-2026-67000 | Unknown | Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbt… | EU | 2026-08-27 | No deadline |
| CVE-2026-74232EUVD-2026-66999 | Unknown | Zbtlink L3_V2_8 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007… | EU | 2026-08-27 | No deadline |
| CVE-2026-66384EUVD-2026-57256 | JFrogArtifactory | JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability | CISA | 2026-08-27 | 42d overdue |
| CVE-2026-53362EUVD-2026-41669 | LinuxKernel | Linux Kernel Unspecified Vulnerability | CISA | 2026-08-27 | 53d overdue |
| CVE-2023-49105EUVD-2023-53114 | ownCloudownCloud | ownCloud Improper Authentication Vulnerability | CISA | 2026-08-27 | 53d overdue |
| CVE-2026-8452EUVD-2026-40307 | CitrixNetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | CISA | 2026-08-26 | 54d overdue |
| CVE-2022-0995EUVD-2022-15988 | LinuxKernel | Linux Kernel Out-of-Bounds Write Vulnerability | CISA | 2026-08-26 | 54d overdue |
| CVE-2021-23758EUVD-2021-2466 | Ajax.NET ProfessionalAjax.NET Professional | Ajax.NET Professional Deserialization of Untrusted Data Vulnerability | CISA | 2026-08-26 | 43d overdue |
| CVE-2019-1068EUVD-2019-9650 | MicrosoftSQL Server | Microsoft SQL Server Remote Code Execution Vulnerability | CISA | 2026-08-26 | 54d overdue |
| CVE-2015-5287EUVD-2015-5264 | Red HatAutomatic Bug Reporting Tool | Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability | CISA | 2026-08-26 | 43d overdue |
| CVE-2015-3246EUVD-2015-3301 | Red HatLibuser | Red Hat Libuser Race Condition Vulnerability | CISA | 2026-08-26 | 43d overdue |
| CVE-2026-60004EUVD-2026-66708 | GiteaGitea | Gitea Code Injection Vulnerability | CISA | 2026-08-25 | 55d overdue |
| CVE-2026-21962EUVD-2026-3550 | OracleHTTP Server and Oracle Weblogic Server Proxy Plug-in | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability | CISA | 2026-08-24 | 56d overdue |
| CVE-2026-73570EUVD-2026-58069 | SynacorZimbra Collaboration Suite (ZCS) | Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability | CISAEU | 2026-08-21 | 59d overdue |
| CVE-2026-72530EUVD-2026-62588 | TrueConfServer | TrueConf Server Code Injection Vulnerability | CISA | 2026-08-20 | 49d overdue |
| CVE-2026-72529EUVD-2026-62587 | TrueConfServer | TrueConf Server Missing Authentication for Critical Function Vulnerability | CISA | 2026-08-20 | 60d overdue |
| CVE-2026-64849EUVD-2026-60473 | MLflowMLflow | MLflow Server-Side Request Forgery Vulnerability | CISA | 2026-08-19 | 50d overdue |
| CVE-2026-65400EUVD-2026-54216 | ApplemacOS | Apple macOS Improper Authentication Vulnerability | CISA | 2026-08-18 | 62d overdue |
| CVE-2026-59310EUVD-2026-51097 | BroadcomVMware vCenter | Broadcom VMware vCenter Path Traversal VulnerabilityRansomware | CISAEU | 2026-08-18 | 62d overdue |
| CVE-2026-55040EUVD-2026-44211 | MicrosoftSharePoint | Microsoft SharePoint Weak Authentication Vulnerability | CISA | 2026-08-18 | 62d overdue |
| CVE-2026-33824EUVD-2026-22641 | MicrosoftInternet Key Exchange (IKE) Service Extensions | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | CISA | 2026-08-18 | 62d overdue |
| CVE-2026-41679EUVD-2026-25166 | Paperclip | Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to v… | EU | 2026-08-17 | No deadline |
| CVE-2025-62593EUVD-2025-199754 | Ray-ProjectRay | Ray-Project Ray Code Injection Vulnerability | CISA | 2026-08-17 | 63d overdue |
| CVE-2026-72898EUVD-2026-55690 | MetabaseMetabase | Metabase SQL Injection Vulnerability | CISAEU | 2026-08-11 | 69d overdue |
| CVE-2026-68820EUVD-2026-56468 | MicrosoftWindows Ancillary Function Driver for WinSock | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | CISAEU | 2026-08-11 | 58d overdue |
| CVE-2026-20349EUVD-2026-56643 | CiscoSecure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | CISA | 2026-08-11 | 69d overdue |
| CVE-2026-8037EUVD-2026-34260 | ProgressLoadMaster | Progress LoadMaster Command Injection Vulnerability | CISA | 2026-08-07 | 73d overdue |
| CVE-2026-63077EUVD-2026-49369 | JetBrainsTeamCity | JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityRansomware | CISA | 2026-08-05 | 75d overdue |
| CVE-2026-9198EUVD-2026-45236 | IBMLangflow | IBM Langflow Code Injection Vulnerability | CISA | 2026-08-04 | 76d overdue |
| CVE-2026-34486EUVD-2026-21056 | ApacheTomcat | Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | CISA | 2026-08-04 | 76d overdue |
| CVE-2026-18556EUVD-2026-51918 | N-ableN-central | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | CISA | 2026-08-04 | 76d overdue |
| CVE-2026-18577EUVD-2026-52010 | N-ableN-central | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | CISA | 2026-08-03 | 77d overdue |
| CVE-2026-20316EUVD-2026-50404 | CiscoSecure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityRansomware | CISAEU | 2026-07-29 | 82d overdue |
| CVE-2026-16812EUVD-2026-49334 | AristaVeloCloud Orchestrator | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | CISA | 2026-07-27 | 84d overdue |
| CVE-2025-68686EUVD-2025-207440 | FortinetFortiOS | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | CISA | 2026-07-27 | 73d overdue |
| CVE-2026-50522EUVD-2026-43767 | MicrosoftSharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | CISA | 2026-07-22 | 89d overdue |
| CVE-2026-16232EUVD-2026-47700 | Check PointSmartConsole | Check Point SmartConsole Improper Authentication Vulnerability | CISA | 2026-07-22 | 89d overdue |
| CVE-2026-63030EUVD-2026-45280 | WordPressCore | WordPress Core Interpretation Conflict Vulnerability | CISAEU | 2026-07-21 | 90d overdue |
| CVE-2026-60137EUVD-2026-45279 | WordPressCore | WordPress Core SQL Injection Vulnerability | CISAEU | 2026-07-21 | 79d overdue |
| CVE-2026-0770EUVD-2026-4466 | LangflowLangflow | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | CISA | 2026-07-21 | 90d overdue |
| CVE-2021-27137EUVD-2021-34854 | DD-WRTDD-WRT | DD-WRT Stack-Based Buffer Overflow Vulnerability | CISA | 2026-07-21 | 90d overdue |
| CVE-2026-58644EUVD-2026-43779 | MicrosoftSharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | CISA | 2026-07-16 | 95d overdue |
| CVE-2026-39808EUVD-2026-22338 | FortinetFortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | CISA | 2026-07-16 | 95d overdue |
| CVE-2026-25089EUVD-2026-35443 | FortinetFortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | CISA | 2026-07-16 | 95d overdue |
| CVE-2026-46817EUVD-2026-33040 | OracleE-Business Suite | Oracle E-Business Suite Improper Privilege Management Vulnerability | CISA | 2026-07-15 | 96d overdue |
| CVE-2023-4346EUVD-2023-54211 | KNX AssociationKNX Protocol Connection Authorization Option 1 | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | CISA | 2026-07-15 | 85d overdue |
| CVE-2026-56164EUVD-2026-44043 | MicrosoftSharePoint Server | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | CISA | 2026-07-14 | 97d overdue |
| CVE-2026-56155EUVD-2026-44042 | MicrosoftActive Directory Federation Services | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | CISA | 2026-07-14 | 86d overdue |
| CVE-2026-15410EUVD-2026-44410 | SonicWallSMA1000 Appliances | SonicWall SMA1000 Appliances Code Injection VulnerabilityRansomware | CISA | 2026-07-14 | 97d overdue |
| CVE-2026-15409EUVD-2026-44404 | SonicWallSMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityRansomware | CISA | 2026-07-14 | 97d overdue |
| CVE-2008-4128EUVD-2008-4111 | CiscoIOS | Cisco IOS Cross-Site Request Forgery Vulnerability | CISA | 2026-07-13 | 98d overdue |
| CVE-2026-56291EUVD-2026-42573 | BalbooaForms | Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | CISA | 2026-07-10 | 101d overdue |
| CVE-2026-49049EUVD-2026-40122 | Ollyo | The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to delete arb… | EU | 2026-07-10 | No deadline |
| CVE-2026-48939EUVD-2026-38109 | iCagendaiCagenda | iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability | CISA | 2026-07-10 | 101d overdue |
| CVE-2026-56290EUVD-2026-40121 | JoomlackPage Builder | Joomlack Page Builder Improper Access Control Vulnerability | CISA | 2026-07-07 | 104d overdue |
| CVE-2026-55255EUVD-2026-38517 | LangflowLangflow | Langflow Authorization Bypass Through User-Controlled Key Vulnerability | CISA | 2026-07-07 | 104d overdue |
| CVE-2026-48908EUVD-2026-38110 | JoomShaperSP Page Builder | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability | CISAEU | 2026-07-07 | 104d overdue |
| CVE-2026-48282EUVD-2026-40339 | AdobeColdFusion | Adobe ColdFusion Path Traversal Vulnerability | CISA | 2026-07-07 | 104d overdue |
| CVE-2026-45659EUVD-2026-31518 | MicrosoftSharePoint Server | Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityRansomware | CISA | 2026-07-01 | 110d overdue |
| CVE-2026-48558EUVD-2026-36509 | SimpleHelp SimpleHelp | SimpleHelp Authentication Bypass Vulnerability | CISA | 2026-06-29 | 112d overdue |
| CVE-2026-20230EUVD-2026-34137 | CiscoUnified Communications Manager | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | CISA | 2026-06-25 | 116d overdue |
| CVE-2026-12569EUVD-2026-37831 | PTCWindchill and FlexPLM | PTC Windchill and FlexPLM Improper Input Validation VulnerabilityRansomware | CISAEU | 2026-06-25 | 116d overdue |
| CVE-2026-34910EUVD-2026-31382 | UbiquitiUniFi OS | Ubiquiti UniFi OS Improper Input Validation Vulnerability | CISA | 2026-06-23 | 118d overdue |
| CVE-2026-34909EUVD-2026-31384 | UbiquitiUniFi OS | Ubiquiti UniFi OS Path Traversal Vulnerability | CISA | 2026-06-23 | 118d overdue |
| CVE-2026-34908EUVD-2026-31383 | UbiquitiUniFi OS | Ubiquiti UniFi OS Improper Access Control Vulnerability | CISA | 2026-06-23 | 118d overdue |
| CVE-2025-67038EUVD-2025-208587 | LantronixEDS5000 | Lantronix EDS5000 Code Injection Vulnerability | CISA | 2026-06-23 | 118d overdue |
| CVE-2026-20253EUVD-2026-36088 | SplunkEnterprise | Splunk Enterprise Missing Authentication for Critical Function Vulnerability | CISA | 2026-06-18 | 123d overdue |
| CVE-2026-48907EUVD-2026-34789 | Widget FactoryJoomla Content Editor | Widget Factory Joomla Content Editor Improper Access Control Vulnerability | CISAEU | 2026-06-16 | 125d overdue |
| CVE-2026-54420EUVD-2026-36657 | LiteSpeedcPanel Plugin | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability | CISA | 2026-06-15 | 126d overdue |
| CVE-2026-20262EUVD-2026-36733 | CiscoCatalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | CISA | 2026-06-15 | 115d overdue |
| CVE-2026-35273EUVD-2026-36199 | Oracle PeopleSoft Enterprise PeopleTools | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityRansomware | CISA | 2026-06-12 | 129d overdue |
| CVE-2026-10520EUVD-2026-35440 | IvantiSentry | Ivanti Sentry OS Command Injection Vulnerability | CISA | 2026-06-11 | 130d overdue |
| CVE-2026-7473EUVD-2026-34858 | AristaExtensible Operating System | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | CISA | 2026-06-09 | 121d overdue |
| CVE-2026-20245EUVD-2026-34341 | CiscoCatalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | CISA | 2026-06-09 | 121d overdue |
| CVE-2026-11645EUVD-2026-35245 | GoogleChromium V8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | CISA | 2026-06-09 | 121d overdue |
| CVE-2026-50751EUVD-2026-35047 | Check PointSecurity Gateway | Check Point Security Gateway Improper Authentication VulnerabilityRansomware | CISA | 2026-06-08 | 133d overdue |
| CVE-2026-42271EUVD-2026-28507 | BerriAILiteLLM | BerriAI LiteLLM Command Injection Vulnerability | CISA | 2026-06-08 | 122d overdue |
| CVE-2026-28318EUVD-2026-34268 | SolarWindsServ-U | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | CISA | 2026-06-05 | 125d overdue |
| CVE-2026-45247EUVD-2026-31837 | MirasvitMirasvit Full Page Cache Warmer | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability | CISA | 2026-06-03 | 138d overdue |
| CVE-2025-48595EUVD-2025-210013 | AndroidFramework | Android Framework Integer Overflow Vulnerability | CISA | 2026-06-02 | 139d overdue |
| CVE-2022-0492EUVD-2022-15629 | LinuxKernel | Linux Kernel Improper Authentication Vulnerability | CISA | 2026-06-02 | 139d overdue |
| CVE-2024-21182EUVD-2024-18896 | OracleWebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | CISA | 2026-06-01 | 140d overdue |
| CVE-2026-0257EUVD-2026-30104 | Palo Alto NetworksPAN-OS | Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityRansomware | CISA | 2026-05-29 | 143d overdue |
| CVE-2026-8398EUVD-2026-30514 | DaemonDaemon Tools Lite | Daemon Tools Lite Embedded Malicious Code Vulnerability | CISA | 2026-05-27 | 145d overdue |
| CVE-2026-48027EUVD-2026-32550 | NxNx Console | Nx Console Embedded Malicious Code VulnerabilityRansomware | CISA | 2026-05-27 | 134d overdue |
| CVE-2026-45321EUVD-2026-29352 | TanStackTanStack | TanStack Unspecified VulnerabilityRansomware | CISA | 2026-05-27 | 134d overdue |
| CVE-2026-48172EUVD-2026-31204 | LiteSpeedcPanel Plugin | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | CISA | 2026-05-26 | 146d overdue |
| CVE-2026-9082EUVD-2026-31153 | DrupalCore | Drupal Core SQL Injection Vulnerability | CISA | 2026-05-22 | 148d overdue |
| CVE-2026-34926EUVD-2026-31284 | Trend MicroApex One | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | CISA | 2026-05-21 | 140d overdue |
| CVE-2025-34291EUVD-2025-201507 | LangflowLangflow | Langflow Origin Validation Error Vulnerability | CISA | 2026-05-21 | 140d overdue |
| CVE-2026-45498EUVD-2026-31102 | MicrosoftDefender | Microsoft Defender Denial of Service Vulnerability | CISA | 2026-05-20 | 141d overdue |
| CVE-2026-41091EUVD-2026-31101 | MicrosoftDefender | Microsoft Defender Link Following Vulnerability | CISA | 2026-05-20 | 141d overdue |
| CVE-2010-0806EUVD-2010-0832 | MicrosoftInternet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | CISA | 2026-05-20 | 141d overdue |
| CVE-2010-0249EUVD-2010-0280 | MicrosoftInternet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | CISA | 2026-05-20 | 141d overdue |
| CVE-2009-3459EUVD-2009-3441 | AdobeAcrobat and Reader | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | CISA | 2026-05-20 | 141d overdue |
| CVE-2009-1537EUVD-2009-1533 | MicrosoftDirectX | Microsoft DirectX NULL Byte Overwrite Vulnerability | CISA | 2026-05-20 | 141d overdue |
| CVE-2008-4250EUVD-2008-4233 | MicrosoftWindows | Microsoft Windows Buffer Overflow Vulnerability | CISA | 2026-05-20 | 141d overdue |
| CVE-2026-42897EUVD-2026-30343 | MicrosoftMicrosoft | Microsoft Exchange Server Cross-Site Scripting Vulnerability | CISAEU | 2026-05-15 | 146d overdue |
| CVE-2026-20182EUVD-2026-30324 | CiscoCatalyst SD-WAN | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | CISA | 2026-05-14 | 158d overdue |
| CVE-2026-42208EUVD-2026-28503 | BerriAILiteLLM | BerriAI LiteLLM SQL Injection Vulnerability | CISA | 2026-05-08 | 164d overdue |
| CVE-2026-6973EUVD-2026-28396 | IvantiEndpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | CISA | 2026-05-07 | 165d overdue |
| CVE-2026-0300EUVD-2026-27879 | Palo Alto NetworksPAN-OS | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | CISA | 2026-05-06 | 166d overdue |
| CVE-2026-31431EUVD-2026-24639 | LinuxKernel | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | CISA | 2026-05-01 | 160d overdue |
| CVE-2026-41940EUVD-2026-26246 | WebProscPanel & WHM and WP2 (WordPress Squared) | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityRansomware | CISAEU | 2026-04-30 | 172d overdue |
| CVE-2026-32202EUVD-2026-22589 | MicrosoftWindows | Microsoft Windows Protection Mechanism Failure Vulnerability | CISAEU | 2026-04-28 | 163d overdue |
| CVE-2024-1708EUVD-2024-17442 | ConnectWiseScreenConnect | ConnectWise ScreenConnect Path Traversal VulnerabilityRansomware | CISA | 2026-04-28 | 163d overdue |
| CVE-2025-29635EUVD-2025-14821 | D-LinkDIR-823X | D-Link DIR-823X Command Injection Vulnerability | CISA | 2026-04-24 | 167d overdue |
| CVE-2024-7399EUVD-2024-48330 | SamsungMagicINFO 9 Server | Samsung MagicINFO 9 Server Path Traversal Vulnerability | CISA | 2026-04-24 | 167d overdue |
| CVE-2024-57728EUVD-2024-53726 | SimpleHelp SimpleHelp | SimpleHelp Path Traversal VulnerabilityRansomware | CISA | 2026-04-24 | 167d overdue |
| CVE-2024-57726EUVD-2024-53724 | SimpleHelp SimpleHelp | SimpleHelp Missing Authorization VulnerabilityRansomware | CISA | 2026-04-24 | 167d overdue |
| CVE-2026-39987EUVD-2026-20980 | MarimoMarimo | Marimo Remote Code Execution Vulnerability | CISA | 2026-04-23 | 168d overdue |
| CVE-2026-33825EUVD-2026-22643 | MicrosoftDefender | Microsoft Defender Insufficient Granularity of Access Control VulnerabilityRansomware | CISA | 2026-04-22 | 169d overdue |
| CVE-2026-20133EUVD-2026-8678 | CiscoCatalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | CISA | 2026-04-20 | 182d overdue |
| CVE-2026-20128EUVD-2026-8676 | CiscoCatalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | CISA | 2026-04-20 | 182d overdue |
| CVE-2026-20122EUVD-2026-8673 | CiscoCatalyst SD-WAN Manger | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | CISA | 2026-04-20 | 182d overdue |
| CVE-2025-48700EUVD-2025-18891 | SynacorZimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | CISA | 2026-04-20 | 182d overdue |
| CVE-2025-32975EUVD-2025-19028 | QuestKACE Systems Management Appliance (SMA) | Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability | CISA | 2026-04-20 | 171d overdue |
| CVE-2025-2749EUVD-2025-8010 | KenticoKentico Xperience | Kentico Xperience Path Traversal Vulnerability | CISA | 2026-04-20 | 171d overdue |
| CVE-2024-27199EUVD-2024-24438 | JetBrainsTeamCity | JetBrains TeamCity Relative Path Traversal VulnerabilityRansomware | CISA | 2026-04-20 | 171d overdue |
| CVE-2023-27351EUVD-2023-31127 | PaperCutNG/MF | PaperCut NG/MF Improper Authentication VulnerabilityRansomware | CISA | 2026-04-20 | 171d overdue |
| CVE-2026-34197EUVD-2026-19588 | ApacheActiveMQ | Apache ActiveMQ Improper Input Validation Vulnerability | CISA | 2026-04-16 | 175d overdue |
| CVE-2026-32201EUVD-2026-22587 | MicrosoftSharePoint Server | Microsoft SharePoint Server Improper Input Validation Vulnerability | CISA | 2026-04-14 | 177d overdue |
| CVE-2009-0238EUVD-2009-0246 | MicrosoftOffice | Microsoft Office Remote Code Execution | CISA | 2026-04-14 | 177d overdue |
| CVE-2026-34621EUVD-2026-21675 | AdobeAcrobat and Reader | Adobe Acrobat and Reader Prototype Pollution Vulnerability | CISA | 2026-04-13 | 178d overdue |
| CVE-2026-21643EUVD-2026-5681 | FortinetFortiClient EMS | Fortinet FortiClient EMS SQL Injection Vulnerability | CISA | 2026-04-13 | 189d overdue |
| CVE-2025-60710EUVD-2025-93436 | MicrosoftWindows | Microsoft Windows Link Following VulnerabilityRansomware | CISA | 2026-04-13 | 178d overdue |
| CVE-2023-36424EUVD-2023-40389 | MicrosoftWindows | Microsoft Windows Out-of-Bounds Read Vulnerability | CISA | 2026-04-13 | 178d overdue |
| CVE-2023-21529EUVD-2023-25697 | MicrosoftExchange Server | Microsoft Exchange Server Deserialization of Untrusted Data VulnerabilityRansomware | CISA | 2026-04-13 | 178d overdue |
| CVE-2020-9715EUVD-2020-30495 | AdobeAcrobat | Adobe Acrobat Use-After-Free Vulnerability | CISA | 2026-04-13 | 178d overdue |
| CVE-2012-1854EUVD-2012-1864 | MicrosoftVisual Basic for Applications (VBA) | Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability | CISA | 2026-04-13 | 178d overdue |
| CVE-2026-1340EUVD-2026-4936 | IvantiEndpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | CISAEU | 2026-04-08 | 194d overdue |
| CVE-2026-35616EUVD-2026-18963 | FortinetFortiClient EMS | Fortinet FortiClient EMS Improper Access Control Vulnerability | CISA | 2026-04-06 | 196d overdue |
| CVE-2026-3502EUVD-2026-17162 | TrueConfClient | TrueConf Client Download of Code Without Integrity Check Vulnerability | CISA | 2026-04-02 | 189d overdue |
| CVE-2026-5281EUVD-2026-17795 | GoogleDawn | Google Dawn Use-After-Free Vulnerability | CISA | 2026-04-01 | 190d overdue |
| CVE-2026-3055EUVD-2026-14546 | CitrixNetScaler | Citrix NetScaler Out-of-Bounds Read Vulnerability | CISA | 2026-03-30 | 203d overdue |
| CVE-2025-53521EUVD-2025-34630 | F5BIG-IP | F5 BIG-IP Stack-Based Buffer Overflow Vulnerability | CISA | 2026-03-27 | 206d overdue |
| CVE-2026-33634EUVD-2026-14601 | AquasecurityTrivy | Aquasecurity Trivy Embedded Malicious Code Vulnerability | CISA | 2026-03-26 | 196d overdue |
| CVE-2026-33017EUVD-2026-13556 | LangflowLangflow | Langflow Code Injection Vulnerability | CISA | 2026-03-25 | 197d overdue |
| CVE-2025-54068EUVD-2025-21792 | LaravelLivewire | Laravel Livewire Code Injection Vulnerability | CISA | 2026-03-20 | 202d overdue |
| CVE-2025-43520EUVD-2025-203153 | AppleMultiple Products | Apple Multiple Products Classic Buffer Overflow Vulnerability | CISA | 2026-03-20 | 202d overdue |
| CVE-2025-43510EUVD-2025-203138 | AppleMultiple Products | Apple Multiple Products Improper Locking Vulnerability | CISA | 2026-03-20 | 202d overdue |
| CVE-2025-32432EUVD-2025-12521 | Craft CMSCraft CMS | Craft CMS Code Injection Vulnerability | CISA | 2026-03-20 | 202d overdue |
| CVE-2025-31277EUVD-2025-23063 | AppleMultiple Products | Apple Multiple Products Buffer Overflow Vulnerability | CISA | 2026-03-20 | 202d overdue |
| CVE-2026-20131EUVD-2026-9444 | CiscoSecure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityRansomware | CISA | 2026-03-19 | 214d overdue |
| CVE-2026-20963EUVD-2026-2114 | MicrosoftSharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | CISAEU | 2026-03-18 | 215d overdue |
| CVE-2025-66376EUVD-2026-0850 | SynacorZimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability | CISA | 2026-03-18 | 204d overdue |
| CVE-2025-47813EUVD-2025-21020 | Wing FTP ServerWing FTP Server | Wing FTP Server Information Disclosure Vulnerability | CISA | 2026-03-16 | 206d overdue |
| CVE-2026-3910EUVD-2026-11736 | GoogleChromium V8 | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | CISA | 2026-03-13 | 209d overdue |
| CVE-2026-3909EUVD-2026-11734 | GoogleSkia | Google Skia Out-of-Bounds Write Vulnerability | CISA | 2026-03-13 | 209d overdue |
| CVE-2025-68613EUVD-2025-204618 | n8nn8n | n8n Improper Control of Dynamically-Managed Code Resources Vulnerability | CISA | 2026-03-11 | 211d overdue |
| CVE-2026-1603EUVD-2026-6842 | Ivanti Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | CISA | 2026-03-09 | 213d overdue |
| CVE-2025-26399EUVD-2025-30842 | SolarWindsWeb Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityRansomware | CISA | 2026-03-09 | 224d overdue |
| CVE-2021-22054EUVD-2021-9219 | OmnissaWorkspace One UEM | Omnissa Workspace ONE Server-Side Request Forgery | CISA | 2026-03-09 | 213d overdue |
| CVE-2023-43000EUVD-2023-47421 | AppleMultiple Products | Apple Multiple products Use-After-Free Vulnerability | CISA | 2026-03-05 | 210d overdue |
| CVE-2023-41974EUVD-2023-46433 | AppleiOS and iPadOS | Apple iOS and iPadOS Use-After-Free Vulnerability | CISA | 2026-03-05 | 210d overdue |
| CVE-2021-30952EUVD-2021-17869 | AppleMultiple Products | Apple Multiple Products Integer Overflow or Wraparound Vulnerability | CISA | 2026-03-05 | 210d overdue |
| CVE-2021-22681EUVD-2021-9817 | RockwellMultiple Products | Rockwell Multiple Products Insufficient Protected Credentials Vulnerability | CISA | 2026-03-05 | 210d overdue |
| CVE-2017-7921EUVD-2017-16892 | HikvisionMultiple Products | Hikvision Multiple Products Improper Authentication Vulnerability | CISA | 2026-03-05 | 210d overdue |
| CVE-2026-22719EUVD-2026-8708 | BroadcomVMware Aria Operations | Broadcom VMware Aria Operations Command Injection Vulnerability | CISA | 2026-03-03 | 212d overdue |
| CVE-2026-21385EUVD-2026-9202 | QualcommMultiple Chipsets | Qualcomm Multiple Chipsets Memory Corruption Vulnerability | CISA | 2026-03-03 | 212d overdue |
| CVE-2026-20127EUVD-2026-8675 | CiscoCatalyst SD-WAN Controller and Manager | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | CISA | 2026-02-25 | 237d overdue |
| CVE-2022-20775EUVD-2022-26025 | CiscoSD-WAN | Cisco SD-WAN Path Traversal Vulnerability | CISA | 2026-02-25 | 237d overdue |
| CVE-2026-25108EUVD-2026-6172 | Soliton Systems K.KFileZen | Soliton Systems K.K FileZen OS Command Injection Vulnerability | CISA | 2026-02-24 | 219d overdue |
| CVE-2025-68461EUVD-2025-204035 | RoundcubeWebmail | RoundCube Webmail Cross-site Scripting Vulnerability | CISA | 2026-02-20 | 223d overdue |
| CVE-2025-49113EUVD-2025-16605 | RoundcubeWebmail | RoundCube Webmail Deserialization of Untrusted Data Vulnerability | CISA | 2026-02-20 | 223d overdue |
| CVE-2026-22769EUVD-2026-7966 | DellRecoverPoint for Virtual Machines (RP4VMs) | Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability | CISA | 2026-02-18 | 243d overdue |
| CVE-2021-22175EUVD-2021-9321 | GitLabGitLab | GitLab Server-Side Request Forgery (SSRF) Vulnerability | CISA | 2026-02-18 | 225d overdue |
| CVE-2026-2441EUVD-2026-6071 | GoogleChromium | Google Chromium CSS Use-After-Free Vulnerability | CISA | 2026-02-17 | 226d overdue |
| CVE-2024-7694EUVD-2024-48579 | TeamT5ThreatSonar Anti-Ransomware | TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability | CISA | 2026-02-17 | 226d overdue |
| CVE-2020-7796EUVD-2020-28728 | SynacorZimbra Collaboration Suite | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability | CISA | 2026-02-17 | 226d overdue |
| CVE-2008-0015EUVD-2008-0028 | MicrosoftWindows | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | CISA | 2026-02-17 | 226d overdue |
| CVE-2026-1731EUVD-2026-5559 | BeyondTrustRemote Support (RS) and Privileged Remote Access (PRA) | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection VulnerabilityRansomware | CISAEU | 2026-02-13 | 248d overdue |
| CVE-2026-20700EUVD-2026-6189 | AppleMultiple Products | Apple Multiple Buffer Overflow Vulnerability | CISA | 2026-02-12 | 231d overdue |
| CVE-2025-40536EUVD-2025-206418 | SolarWindsWeb Help Desk | SolarWinds Web Help Desk Security Control Bypass Vulnerability | CISA | 2026-02-12 | 249d overdue |
| CVE-2025-15556EUVD-2025-206661 | Notepad++Notepad++ | Notepad++ Download of Code Without Integrity Check Vulnerability | CISA | 2026-02-12 | 231d overdue |
| CVE-2024-43468EUVD-2024-40737 | MicrosoftConfiguration Manager | Microsoft Configuration Manager SQL Injection Vulnerability | CISA | 2026-02-12 | 231d overdue |
| CVE-2026-21533EUVD-2026-7343 | MicrosoftWindows | Microsoft Windows Improper Privilege Management Vulnerability | CISA | 2026-02-10 | 233d overdue |
| CVE-2026-21525EUVD-2026-7329 | MicrosoftWindows | Microsoft Windows NULL Pointer Dereference Vulnerability | CISA | 2026-02-10 | 233d overdue |
| CVE-2026-21519EUVD-2026-7358 | MicrosoftWindows | Microsoft Windows Type Confusion Vulnerability | CISA | 2026-02-10 | 233d overdue |
| CVE-2026-21514EUVD-2026-7334 | MicrosoftOffice | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability | CISA | 2026-02-10 | 233d overdue |
| CVE-2026-21513EUVD-2026-7342 | MicrosoftWindows | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | CISA | 2026-02-10 | 233d overdue |
| CVE-2026-21510EUVD-2026-7337 | MicrosoftWindows | Microsoft Windows Shell Protection Mechanism Failure Vulnerability | CISA | 2026-02-10 | 233d overdue |
| CVE-2026-24423EUVD-2026-4273 | SmarterToolsSmarterMail | SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityRansomware | CISA | 2026-02-05 | 238d overdue |
| CVE-2025-11953EUVD-2025-37505 | React Native CommunityCLI | React Native Community CLI OS Command Injection Vulnerability | CISA | 2026-02-05 | 238d overdue |
| CVE-2025-64328EUVD-2025-38232 | SangomaFreePBX | Sangoma FreePBX OS Command Injection Vulnerability | CISA | 2026-02-03 | 240d overdue |
| CVE-2025-40551EUVD-2025-206426 | SolarWindsWeb Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | CISA | 2026-02-03 | 258d overdue |
| CVE-2021-39935EUVD-2021-26291 | GitLabCommunity and Enterprise Editions | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability | CISA | 2026-02-03 | 240d overdue |
| CVE-2019-19006EUVD-2019-8659 | SangomaFreePBX | Sangoma FreePBX Improper Authentication Vulnerability | CISA | 2026-02-03 | 240d overdue |
| CVE-2026-1281EUVD-2026-4940 | IvantiEndpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | CISAEU | 2026-01-29 | 263d overdue |
| CVE-2026-24858EUVD-2026-4712 | FortinetMultiple Products | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | CISA | 2026-01-27 | 265d overdue |
| CVE-2025-59719EUVD-2025-202191 | Fortinet | An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 t… | EU | 2026-01-27 | No deadline |
| CVE-2026-24061EUVD-2026-3688 | GNUInetUtils | GNU InetUtils Argument Injection Vulnerability | CISA | 2026-01-26 | 248d overdue |
| CVE-2026-23760EUVD-2026-4143 | SmarterToolsSmarterMail | SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityRansomware | CISA | 2026-01-26 | 248d overdue |
| CVE-2026-21509EUVD-2026-4666 | MicrosoftOffice | Microsoft Office Security Feature Bypass Vulnerability | CISA | 2026-01-26 | 248d overdue |
| CVE-2025-52691EUVD-2025-205544 | SmarterToolsSmarterMail | SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityRansomware | CISA | 2026-01-26 | 248d overdue |
| CVE-2018-14634EUVD-2018-6537 | LinuxKernel | Linux Kernel Integer Overflow Vulnerability | CISA | 2026-01-26 | 248d overdue |
| CVE-2024-37079EUVD-2024-36412 | BroadcomVMware vCenter Server | Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability | CISA | 2026-01-23 | 251d overdue |
| CVE-2025-68645EUVD-2025-204719 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability | CISA | 2026-01-22 | 252d overdue |
| CVE-2025-54313EUVD-2025-21972 | Prettiereslint-config-prettier | Prettier eslint-config-prettier Embedded Malicious Code Vulnerability | CISA | 2026-01-22 | 252d overdue |
| CVE-2025-34026EUVD-2025-16087 | VersaConcerto | Versa Concerto Improper Authentication Vulnerability | CISA | 2026-01-22 | 252d overdue |
| CVE-2025-31125EUVD-2025-8866 | ViteVitejs | Vite Vitejs Improper Access Control Vulnerability | CISA | 2026-01-22 | 252d overdue |
| CVE-2026-20045EUVD-2026-3600 | CiscoUnified Communications Manager | Cisco Unified Communications Products Code Injection Vulnerability | CISA | 2026-01-21 | 253d overdue |
| CVE-2026-20805EUVD-2026-2073 | MicrosoftWindows | Microsoft Windows Information Disclosure Vulnerability | CISA | 2026-01-13 | 261d overdue |
| CVE-2025-8110EUVD-2025-202425 | GogsGogs | Gogs Path Traversal Vulnerability | CISA | 2026-01-12 | 262d overdue |
| CVE-2025-37164EUVD-2025-203803 | Hewlett Packard Enterprise (HPE)OneView | Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability | CISA | 2026-01-07 | 267d overdue |
| CVE-2009-0556EUVD-2009-0560 | MicrosoftOffice | Microsoft Office PowerPoint Code Injection Vulnerability | CISA | 2026-01-07 | 267d overdue |
| CVE-2025-14847EUVD-2025-204529 | MongoDBMongoDB and MongoDB Server | MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability | CISA | 2025-12-29 | 276d overdue |
| CVE-2023-52163EUVD-2023-56836 | DigieverDS-2105 Pro | Digiever DS-2105 Pro Missing Authorization Vulnerability | CISA | 2025-12-22 | 283d overdue |
| CVE-2025-14733EUVD-2025-204437 | WatchGuardFirebox | WatchGuard Firebox Out of Bounds Write VulnerabilityRansomware | CISA | 2025-12-19 | 300d overdue |
| CVE-2025-59374EUVD-2025-203872 | ASUSLive Update | ASUS Live Update Embedded Malicious Code Vulnerability | CISA | 2025-12-17 | 288d overdue |
| CVE-2025-40602EUVD-2025-204255 | SonicWallSMA1000 appliance | SonicWall SMA1000 Missing Authorization Vulnerability | CISA | 2025-12-17 | 302d overdue |
| CVE-2025-20393EUVD-2025-203911 | CiscoMultiple Products | Cisco Multiple Products Improper Input Validation Vulnerability | CISA | 2025-12-17 | 302d overdue |
| CVE-2025-59718EUVD-2025-202198 | FortinetMultiple Products | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability | CISAEU | 2025-12-16 | 303d overdue |
| CVE-2025-43529EUVD-2025-203963 | AppleMultiple Products | Apple Multiple Products Use-After-Free WebKit Vulnerability | CISA | 2025-12-15 | 290d overdue |
| CVE-2025-14611EUVD-2025-203165 | GladinetCentreStack and Triofox | Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability | CISA | 2025-12-15 | 290d overdue |
| CVE-2025-14174EUVD-2025-203113 | GoogleChromium | Google Chromium Out of Bounds Memory Access Vulnerability | CISA | 2025-12-12 | 293d overdue |
| CVE-2018-4063EUVD-2018-15849 | Sierra WirelessAirLink ALEOS | Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability | CISA | 2025-12-12 | 293d overdue |
| CVE-2025-58360EUVD-2025-199606 | OSGeoGeoServer | OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability | CISA | 2025-12-11 | 294d overdue |
| CVE-2025-62221EUVD-2025-202200 | MicrosoftWindows | Microsoft Windows Use After Free Vulnerability | CISA | 2025-12-09 | 296d overdue |
| CVE-2025-6218EUVD-2025-28706 | RARLABWinRAR | RARLAB WinRAR Path Traversal Vulnerability | CISA | 2025-12-09 | 296d overdue |
| CVE-2025-66644EUVD-2025-201500 | Array Networks ArrayOS AG | Array Networks ArrayOS AG OS Command Injection Vulnerability | CISA | 2025-12-08 | 297d overdue |
| CVE-2022-37055EUVD-2022-39709 | D-LinkRouters | D-Link Routers Buffer Overflow Vulnerability | CISA | 2025-12-08 | 297d overdue |
| CVE-2025-55182EUVD-2025-200983 | MetaReact Server Components | Meta React Server Components Remote Code Execution VulnerabilityRansomware | CISAEU | 2025-12-05 | 314d overdue |
| CVE-2021-26828EUVD-2021-13613 | OpenPLCScadaBR | OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability | CISA | 2025-12-03 | 302d overdue |
| CVE-2025-48633EUVD-2025-201737 | AndroidFramework | Android Framework Information Disclosure Vulnerability | CISA | 2025-12-02 | 303d overdue |
| CVE-2025-48572EUVD-2025-201776 | AndroidFramework | Android Framework Privilege Escalation Vulnerability | CISA | 2025-12-02 | 303d overdue |
| CVE-2021-26829EUVD-2021-13614 | OpenPLCScadaBR | OpenPLC ScadaBR Cross-site Scripting Vulnerability | CISA | 2025-11-28 | 307d overdue |
| CVE-2025-61757EUVD-2025-35253 | OracleFusion Middleware | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | CISA | 2025-11-21 | 314d overdue |
| CVE-2025-13223EUVD-2025-197896 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2025-11-19 | 316d overdue |
| CVE-2025-58034EUVD-2025-198020 | FortinetFortiWeb | Fortinet FortiWeb OS Command Injection Vulnerability | CISA | 2025-11-18 | 331d overdue |
| CVE-2025-64446EUVD-2025-197613 | FortinetFortiWeb | Fortinet FortiWeb Path Traversal Vulnerability | CISA | 2025-11-14 | 335d overdue |
| CVE-2025-9242EUVD-2025-29699 | WatchGuardFirebox | WatchGuard Firebox Out-of-Bounds Write Vulnerability | CISA | 2025-11-12 | 323d overdue |
| CVE-2025-62215EUVD-2025-93397 | MicrosoftWindows | Microsoft Windows Race Condition Vulnerability | CISA | 2025-11-12 | 323d overdue |
| CVE-2025-12480EUVD-2025-44062 | GladinetTriofox | Gladinet Triofox Improper Access Control Vulnerability | CISA | 2025-11-12 | 323d overdue |
| CVE-2025-21042EUVD-2025-29029 | SamsungMobile Devices | Samsung Mobile Devices Out-of-Bounds Write Vulnerability | CISA | 2025-11-10 | 325d overdue |
| CVE-2025-48703EUVD-2025-30324 | CWPControl Web Panel | CWP Control Web Panel OS Command Injection Vulnerability | CISA | 2025-11-04 | 331d overdue |
| CVE-2025-11371EUVD-2025-33408 | GladinetCentreStack and Triofox | Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability | CISA | 2025-11-04 | 331d overdue |
| CVE-2025-41244EUVD-2025-31589 | BroadcomVMware Aria Operations and VMware Tools | Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability | CISA | 2025-10-30 | 336d overdue |
| CVE-2025-24893EUVD-2025-4562 | XWikiPlatform | XWiki Platform Eval Injection Vulnerability | CISA | 2025-10-30 | 336d overdue |
| CVE-2025-6205EUVD-2025-23493 | Dassault SystèmesDELMIA Apriso | Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability | CISA | 2025-10-28 | 338d overdue |
| CVE-2025-6204EUVD-2025-23494 | Dassault SystèmesDELMIA Apriso | Dassault Systèmes DELMIA Apriso Code Injection Vulnerability | CISA | 2025-10-28 | 338d overdue |
| CVE-2025-59287EUVD-2025-34268 | MicrosoftWindows | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | CISA | 2025-10-24 | 342d overdue |
| CVE-2025-54236EUVD-2025-27277 | AdobeCommerce and Magento | Adobe Commerce and Magento Improper Input Validation Vulnerability | CISA | 2025-10-24 | 342d overdue |
| CVE-2025-61932EUVD-2025-35038 | MotexLANSCOPE Endpoint Manager | Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability | CISA | 2025-10-22 | 344d overdue |
| CVE-2025-61884EUVD-2025-33878 | OracleE-Business Suite | Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityRansomware | CISA | 2025-10-20 | 346d overdue |
| CVE-2025-33073EUVD-2025-17737 | MicrosoftWindows | Microsoft Windows SMB Client Improper Access Control Vulnerability | CISA | 2025-10-20 | 346d overdue |
| CVE-2025-2747EUVD-2025-8009 | KenticoXperience CMS | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | CISA | 2025-10-20 | 346d overdue |
| CVE-2025-2746EUVD-2025-8008 | KenticoXperience CMS | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | CISA | 2025-10-20 | 346d overdue |
| CVE-2022-48503EUVD-2022-51199 | AppleMultiple Products | Apple Multiple Products Unspecified Vulnerability | CISA | 2025-10-20 | 346d overdue |
| CVE-2025-54253EUVD-2025-23647 | AdobeExperience Manager (AEM) Forms | Adobe Experience Manager Forms Code Execution Vulnerability | CISA | 2025-10-15 | 351d overdue |
| CVE-2025-59230EUVD-2025-34258 | MicrosoftWindows | Microsoft Windows Improper Access Control Vulnerability | CISA | 2025-10-14 | 352d overdue |
| CVE-2025-47827EUVD-2025-16999 | IGELIGEL OS | IGEL OS Use of a Key Past its Expiration Date Vulnerability | CISA | 2025-10-14 | 352d overdue |
| CVE-2025-24990EUVD-2025-34257 | MicrosoftWindows | Microsoft Windows Untrusted Pointer Dereference Vulnerability | CISA | 2025-10-14 | 352d overdue |
| CVE-2016-7836EUVD-2016-8685 | SKYSEAClient View | SKYSEA Client View Improper Authentication Vulnerability | CISA | 2025-10-14 | 352d overdue |
| CVE-2021-43798EUVD-2024-0581 | Grafana LabsGrafana | Grafana Path Traversal Vulnerability | CISA | 2025-10-09 | 357d overdue |
| CVE-2025-27915EUVD-2025-7823 | SynacorZimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | CISA | 2025-10-07 | 359d overdue |
| CVE-2025-61882EUVD-2025-32142 | OracleE-Business Suite | Oracle E-Business Suite Unspecified VulnerabilityRansomware | CISA | 2025-10-06 | 360d overdue |
| CVE-2021-43226EUVD-2021-30170 | MicrosoftWindows | Microsoft Windows Privilege Escalation VulnerabilityRansomware | CISA | 2025-10-06 | 360d overdue |
| CVE-2021-22555EUVD-2021-9696 | LinuxKernel | Linux Kernel Heap Out-of-Bounds Write Vulnerability | CISA | 2025-10-06 | 360d overdue |
| CVE-2013-3918EUVD-2013-3850 | MicrosoftWindows | Microsoft Windows Out-of-Bounds Write Vulnerability | CISA | 2025-10-06 | 360d overdue |
| CVE-2011-3402EUVD-2011-3365 | MicrosoftWindows | Microsoft Windows Remote Code Execution Vulnerability | CISA | 2025-10-06 | 360d overdue |
| CVE-2010-3962EUVD-2010-3939 | MicrosoftInternet Explorer | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | CISA | 2025-10-06 | 360d overdue |
| CVE-2010-3765EUVD-2010-3744 | MozillaMultiple Products | Mozilla Multiple Products Remote Code Execution Vulnerability | CISA | 2025-10-06 | 360d overdue |
| CVE-2025-4008EUVD-2025-16032 | SmartbeddedMeteobridge | Smartbedded Meteobridge Command Injection Vulnerability | CISA | 2025-10-02 | 364d overdue |
| CVE-2025-21043EUVD-2025-29028 | SamsungMobile Devices | Samsung Mobile Devices Out-of-Bounds Write Vulnerability | CISA | 2025-10-02 | 364d overdue |
| CVE-2017-1000353EUVD-2022-1921 | JenkinsJenkins | Jenkins Remote Code Execution Vulnerability | CISA | 2025-10-02 | 364d overdue |
| CVE-2015-7755EUVD-2015-7655 | JuniperScreenOS | Juniper ScreenOS Improper Authentication Vulnerability | CISA | 2025-10-02 | 364d overdue |
| CVE-2014-6278EUVD-2014-6163 | GNUGNU Bash | GNU Bash OS Command Injection Vulnerability | CISA | 2025-10-02 | 364d overdue |
| CVE-2025-59689EUVD-2025-30249 | LibraesvaEmail Security Gateway | Libraesva Email Security Gateway Command Injection Vulnerability | CISA | 2025-09-29 | 367d overdue |
| CVE-2025-32463EUVD-2025-19673 | SudoSudo | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability | CISA | 2025-09-29 | 367d overdue |
| CVE-2025-20352EUVD-2025-31023 | CiscoIOS and IOS XE | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | CISA | 2025-09-29 | 367d overdue |
| CVE-2025-10035EUVD-2025-30225 | FortraGoAnywhere MFT | Fortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityRansomware | CISA | 2025-09-29 | 367d overdue |
| CVE-2021-21311EUVD-2021-0576 | AdminerAdminer | Adminer Server-Side Request Forgery Vulnerability | CISA | 2025-09-29 | 367d overdue |
| CVE-2025-20362EUVD-2025-31139 | CiscoSecure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | CISA | 2025-09-25 | 391d overdue |
| CVE-2025-20333EUVD-2025-31140 | CiscoSecure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | CISA | 2025-09-25 | 391d overdue |
| CVE-2025-10585EUVD-2025-31006 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2025-09-23 | 373d overdue |
| CVE-2025-5086EUVD-2025-16682 | Dassault SystèmesDELMIA Apriso | Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability | CISA | 2025-09-11 | 385d overdue |
| CVE-2025-25231EUVD-2025-24160 | Unknown | Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be… | EU | 2025-09-09 | No deadline |
| CVE-2025-53690EUVD-2025-26629 | SitecoreMultiple Products | Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability | CISA | 2025-09-04 | 392d overdue |
| CVE-2025-48543EUVD-2025-26791 | AndroidRuntime | Android Runtime Use-After-Free Vulnerability | CISA | 2025-09-04 | 392d overdue |
| CVE-2025-38352EUVD-2025-22297 | LinuxKernel | Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability | CISA | 2025-09-04 | 392d overdue |
| CVE-2025-9377EUVD-2025-26234 | TP-LinkMultiple Routers | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability | CISA | 2025-09-03 | 393d overdue |
| CVE-2023-50224EUVD-2023-55046 | TP-LinkTL-WR841N | TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability | CISA | 2025-09-03 | 393d overdue |
| CVE-2025-55177EUVD-2025-26214 | Meta PlatformsWhatsApp | Meta Platforms WhatsApp Incorrect Authorization Vulnerability | CISA | 2025-09-02 | 394d overdue |
| CVE-2020-24363EUVD-2020-17095 | TP-LinkTL-WA855RE | TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability | CISA | 2025-09-02 | 394d overdue |
| CVE-2025-57819EUVD-2025-26123 | SangomaFreePBX | Sangoma FreePBX Authentication Bypass Vulnerability | CISA | 2025-08-29 | 398d overdue |
| CVE-2025-7775EUVD-2025-25838 | CitrixNetScaler | Citrix NetScaler Memory Overflow Vulnerability | CISA | 2025-08-26 | 420d overdue |
| CVE-2025-48384EUVD-2025-20677 | GitGit | Git Link Following Vulnerability | CISA | 2025-08-25 | 402d overdue |
| CVE-2024-8069EUVD-2024-48915 | CitrixSession Recording | Citrix Session Recording Deserialization of Untrusted Data Vulnerability | CISA | 2025-08-25 | 402d overdue |
| CVE-2024-8068EUVD-2024-49530 | CitrixSession Recording | Citrix Session Recording Improper Privilege Management Vulnerability | CISA | 2025-08-25 | 402d overdue |
| CVE-2025-43300EUVD-2025-25409 | AppleiOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | CISA | 2025-08-21 | 406d overdue |
| CVE-2025-54948EUVD-2025-23621 | Trend MicroApex One | Trend Micro Apex One OS Command Injection Vulnerability | CISA | 2025-08-18 | 409d overdue |
| CVE-2025-8876EUVD-2025-24822 | N-ableN-Central | N-able N-Central Command Injection Vulnerability | CISA | 2025-08-13 | 428d overdue |
| CVE-2025-8875EUVD-2025-24823 | N-ableN-Central | N-able N-Central Insecure Deserialization Vulnerability | CISA | 2025-08-13 | 428d overdue |
| CVE-2025-8088EUVD-2025-23983 | RARLABWinRAR | RARLAB WinRAR Path Traversal VulnerabilityRansomware | CISA | 2025-08-12 | 415d overdue |
| CVE-2013-3893EUVD-2013-3825 | MicrosoftInternet Explorer | Microsoft Internet Explorer Resource Management Errors Vulnerability | CISA | 2025-08-12 | 415d overdue |
| CVE-2007-0671EUVD-2007-0668 | MicrosoftOffice | Microsoft Office Excel Remote Code Execution Vulnerability | CISA | 2025-08-12 | 415d overdue |
| CVE-2022-40799EUVD-2022-44065 | D-LinkDNR-322L | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | CISA | 2025-08-05 | 422d overdue |
| CVE-2020-25079EUVD-2020-17771 | D-LinkDCS-2530L and DCS-2670L Devices | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability | CISA | 2025-08-05 | 422d overdue |
| CVE-2020-25078EUVD-2020-17770 | D-LinkDCS-2530L and DCS-2670L Devices | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | CISA | 2025-08-05 | 422d overdue |
| CVE-2025-20337EUVD-2025-21708 | CiscoIdentity Services Engine | Cisco Identity Services Engine Injection Vulnerability | CISA | 2025-07-28 | 430d overdue |
| CVE-2025-20281EUVD-2025-19167 | CiscoIdentity Services Engine | Cisco Identity Services Engine Injection Vulnerability | CISA | 2025-07-28 | 430d overdue |
| CVE-2023-2533EUVD-2023-34012 | PaperCutNG/MF | PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability | CISA | 2025-07-28 | 430d overdue |
| CVE-2025-6558EUVD-2025-21546 | GoogleChromium | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability | CISA | 2025-07-22 | 436d overdue |
| CVE-2025-54309EUVD-2025-21909 | CrushFTPCrushFTP | CrushFTP Unprotected Alternate Channel Vulnerability | CISA | 2025-07-22 | 436d overdue |
| CVE-2025-49706EUVD-2025-20552 | MicrosoftSharePoint | Microsoft SharePoint Improper Authentication VulnerabilityRansomware | CISA | 2025-07-22 | 456d overdue |
| CVE-2025-49704EUVD-2025-20554 | MicrosoftSharePoint | Microsoft SharePoint Code Injection VulnerabilityRansomware | CISA | 2025-07-22 | 456d overdue |
| CVE-2025-2776EUVD-2025-13875 | SysAidSysAid On-Prem | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | CISA | 2025-07-22 | 436d overdue |
| CVE-2025-2775EUVD-2025-13878 | SysAidSysAid On-Prem | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | CISA | 2025-07-22 | 436d overdue |
| CVE-2025-53770EUVD-2025-23309 | MicrosoftSharePoint | Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityRansomware | CISAEU | 2025-07-20 | 458d overdue |
| CVE-2025-25257EUVD-2025-21785 | FortinetFortiWeb | Fortinet FortiWeb SQL Injection Vulnerability | CISA | 2025-07-18 | 440d overdue |
| CVE-2025-47812EUVD-2025-21009 | Wing FTP ServerWing FTP Server | Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability | CISA | 2025-07-14 | 444d overdue |
| CVE-2015-7501EUVD-2022-3799 | Red Hat | Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV)… | EU | 2025-07-14 | No deadline |
| CVE-2011-4085EUVD-2011-4036 | Red Hat | The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform bef… | EU | 2025-07-14 | No deadline |
| CVE-2025-5777EUVD-2025-18497 | CitrixNetScaler ADC and Gateway | Citrix NetScaler ADC and Gateway Out-of-Bounds Read VulnerabilityRansomware | CISA | 2025-07-10 | 468d overdue |
| CVE-2019-9621EUVD-2019-18992 | SynacorZimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability | CISA | 2025-07-07 | 451d overdue |
| CVE-2019-5418EUVD-2019-0375 | RailsRuby on Rails | Rails Ruby on Rails Path Traversal Vulnerability | CISA | 2025-07-07 | 451d overdue |
| CVE-2016-10033EUVD-2020-0331 | PHPPHPMailer | PHPMailer Command Injection Vulnerability | CISA | 2025-07-07 | 451d overdue |
| CVE-2014-3931EUVD-2014-3868 | Looking GlassMulti-Router Looking Glass (MRLG) | Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability | CISA | 2025-07-07 | 451d overdue |
| CVE-2025-6554EUVD-2025-19675 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2025-07-02 | 456d overdue |
| CVE-2025-48928EUVD-2025-16214 | TeleMessageTM SGNL | TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability | CISA | 2025-07-01 | 457d overdue |
| CVE-2025-48927EUVD-2025-16207 | TeleMessageTM SGNL | TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability | CISA | 2025-07-01 | 457d overdue |
| CVE-2025-6543EUVD-2025-19085 | CitrixNetScaler ADC and Gateway | Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability | CISAEU | 2025-06-30 | 458d overdue |
| CVE-2024-54085EUVD-2024-54252 | AMIMegaRAC SPx | AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability | CISA | 2025-06-25 | 463d overdue |
| CVE-2024-0769EUVD-2024-16557 | D-LinkDIR-859 Router | D-Link DIR-859 Router Path Traversal Vulnerability | CISA | 2025-06-25 | 463d overdue |
| CVE-2019-6693EUVD-2019-16251 | FortinetFortiOS | Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityRansomware | CISA | 2025-06-25 | 463d overdue |
| CVE-2023-0386EUVD-2023-12447 | LinuxKernel | Linux Kernel Improper Ownership Management Vulnerability | CISA | 2025-06-17 | 471d overdue |
| CVE-2025-43200EUVD-2025-18428 | AppleMultiple Products | Apple Multiple Products Unspecified Vulnerability | CISA | 2025-06-16 | 472d overdue |
| CVE-2023-33538EUVD-2023-37697 | TP-LinkMultiple Routers | TP-Link Multiple Routers Command Injection Vulnerability | CISA | 2025-06-16 | 472d overdue |
| CVE-2025-33053EUVD-2025-17721 | MicrosoftWindows | Microsoft Windows External Control of File Name or Path Vulnerability | CISA | 2025-06-10 | 478d overdue |
| CVE-2025-24016EUVD-2025-3595 | WazuhWazuh Server | Wazuh Server Deserialization of Untrusted Data Vulnerability | CISA | 2025-06-10 | 478d overdue |
| CVE-2025-32433EUVD-2025-11793 | ErlangErlang/OTP | Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability | CISA | 2025-06-09 | 479d overdue |
| CVE-2024-42009EUVD-2024-39391 | RoundcubeWebmail | RoundCube Webmail Cross-Site Scripting Vulnerability | CISAEU | 2025-06-09 | 479d overdue |
| CVE-2025-5419EUVD-2025-16695 | GoogleChromium V8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | CISA | 2025-06-05 | 483d overdue |
| CVE-2025-27038EUVD-2025-16700 | QualcommMultiple Chipsets | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | CISA | 2025-06-03 | 485d overdue |
| CVE-2025-21480EUVD-2025-16705 | QualcommMultiple Chipsets | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | CISA | 2025-06-03 | 485d overdue |
| CVE-2025-21479EUVD-2025-16710 | QualcommMultiple Chipsets | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | CISA | 2025-06-03 | 485d overdue |
| CVE-2025-3935EUVD-2025-12502 | ConnectWiseScreenConnect | ConnectWise ScreenConnect Improper Authentication Vulnerability | CISA | 2025-06-02 | 486d overdue |
| CVE-2025-35939EUVD-2025-13951 | Craft CMSCraft CMS | Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability | CISA | 2025-06-02 | 486d overdue |
| CVE-2024-56145EUVD-2024-3545 | Craft CMSCraft CMS | Craft CMS Code Injection Vulnerability | CISA | 2025-06-02 | 486d overdue |
| CVE-2023-39780EUVD-2023-43480 | ASUSRT-AX55 Routers | ASUS RT-AX55 Routers OS Command Injection Vulnerability | CISA | 2025-06-02 | 486d overdue |
| CVE-2021-32030EUVD-2021-18896 | ASUSRouters | ASUS Routers Improper Authentication Vulnerability | CISA | 2025-06-02 | 486d overdue |
| CVE-2025-4632EUVD-2025-14362 | SamsungMagicINFO 9 Server | Samsung MagicINFO 9 Server Path Traversal Vulnerability | CISA | 2025-05-22 | 497d overdue |
| CVE-2025-4428EUVD-2025-14387 | IvantiEndpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | CISAEU | 2025-05-19 | 500d overdue |
| CVE-2025-4427EUVD-2025-14388 | IvantiEndpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability | CISAEU | 2025-05-19 | 500d overdue |
| CVE-2025-27920EUVD-2025-13464 | SrimaxOutput Messenger | Srimax Output Messenger Directory Traversal Vulnerability | CISA | 2025-05-19 | 500d overdue |
| CVE-2024-27443EUVD-2024-24646 | SynacorZimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | CISA | 2025-05-19 | 500d overdue |
| CVE-2024-11182EUVD-2024-33681 | MDaemonEmail Server | MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability | CISA | 2025-05-19 | 500d overdue |
| CVE-2023-38950EUVD-2023-42710 | ZKTecoBioTime | ZKTeco BioTime Path Traversal Vulnerability | CISA | 2025-05-19 | 500d overdue |
| CVE-2025-42999EUVD-2025-14349 | SAPNetWeaver | SAP NetWeaver Deserialization VulnerabilityRansomware | CISA | 2025-05-15 | 504d overdue |
| CVE-2024-12987EUVD-2024-51246 | DrayTekVigor Routers | DrayTek Vigor Routers OS Command Injection Vulnerability | CISA | 2025-05-15 | 504d overdue |
| CVE-2025-32756EUVD-2025-14705 | FortinetMultiple Products | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability | CISA | 2025-05-14 | 505d overdue |
| CVE-2025-32709EUVD-2025-14439 | MicrosoftWindows | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | CISA | 2025-05-13 | 506d overdue |
| CVE-2025-32706EUVD-2025-14441 | MicrosoftWindows | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | CISA | 2025-05-13 | 506d overdue |
| CVE-2025-32701EUVD-2025-14443 | MicrosoftWindows | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | CISA | 2025-05-13 | 506d overdue |
| CVE-2025-30400EUVD-2025-14444 | MicrosoftWindows | Microsoft Windows DWM Core Library Use-After-Free Vulnerability | CISA | 2025-05-13 | 506d overdue |
| CVE-2025-30397EUVD-2025-14411 | MicrosoftWindows | Microsoft Windows Scripting Engine Type Confusion Vulnerability | CISA | 2025-05-13 | 506d overdue |
| CVE-2025-47729EUVD-2025-14003 | TeleMessageTM SGNL | TeleMessage TM SGNL Hidden Functionality Vulnerability | CISA | 2025-05-12 | 507d overdue |
| CVE-2024-6047EUVD-2024-47205 | GeoVisionMultiple Devices | GeoVision Devices OS Command Injection Vulnerability | CISA | 2025-05-07 | 512d overdue |
| CVE-2024-11120EUVD-2024-33664 | GeoVisionMultiple Devices | GeoVision Devices OS Command Injection Vulnerability | CISA | 2025-05-07 | 512d overdue |
| CVE-2025-27363EUVD-2025-6367 | FreeTypeFreeType | FreeType Out-of-Bounds Write Vulnerability | CISA | 2025-05-06 | 513d overdue |
| CVE-2025-3248EUVD-2025-10011 | LangflowLangflow | Langflow Missing Authentication VulnerabilityRansomware | CISA | 2025-05-05 | 514d overdue |
| CVE-2025-34028EUVD-2025-12275 | CommvaultCommand Center | Commvault Command Center Path Traversal Vulnerability | CISA | 2025-05-02 | 517d overdue |
| CVE-2024-58136EUVD-2025-10502 | YiiframeworkYii | Yiiframework Yii Improper Protection of Alternate Path Vulnerability | CISA | 2025-05-02 | 517d overdue |
| CVE-2024-38475EUVD-2024-37356 | ApacheHTTP Server | Apache HTTP Server Improper Escaping of Output Vulnerability | CISA | 2025-05-01 | 518d overdue |
| CVE-2023-44221EUVD-2023-48580 | SonicWallSMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | CISA | 2025-05-01 | 518d overdue |
| CVE-2025-31324EUVD-2025-11987 | SAPNetWeaver | SAP NetWeaver Unrestricted File Upload VulnerabilityRansomware | CISA | 2025-04-29 | 520d overdue |
| CVE-2025-42599EUVD-2025-11849 | QualitiaActive! Mail | Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability | CISA | 2025-04-28 | 521d overdue |
| CVE-2025-3928EUVD-2025-12508 | CommvaultWeb Server | Commvault Web Server Unspecified Vulnerability | CISA | 2025-04-28 | 521d overdue |
| CVE-2025-1976EUVD-2025-12147 | BroadcomBrocade Fabric OS | Broadcom Brocade Fabric OS Code Injection Vulnerability | CISA | 2025-04-28 | 521d overdue |
| CVE-2025-31201EUVD-2025-11381 | AppleMultiple Products | Apple Multiple Products Arbitrary Read and Write Vulnerability | CISA | 2025-04-17 | 532d overdue |
| CVE-2025-31200EUVD-2025-11380 | AppleMultiple Products | Apple Multiple Products Memory Corruption Vulnerability | CISA | 2025-04-17 | 532d overdue |
| CVE-2025-24054EUVD-2025-6336 | MicrosoftWindows | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability | CISA | 2025-04-17 | 532d overdue |
| CVE-2021-20035EUVD-2021-7498 | SonicWallSMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | CISA | 2025-04-16 | 533d overdue |
| CVE-2024-53197EUVD-2024-51869 | LinuxKernel | Linux Kernel Out-of-Bounds Access Vulnerability | CISA | 2025-04-09 | 540d overdue |
| CVE-2024-53150EUVD-2024-51822 | LinuxKernel | Linux Kernel Out-of-Bounds Read Vulnerability | CISA | 2025-04-09 | 540d overdue |
| CVE-2025-30406EUVD-2025-9671 | GladinetCentreStack | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability | CISA | 2025-04-08 | 541d overdue |
| CVE-2025-29824EUVD-2025-10122 | MicrosoftWindows | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityRansomware | CISA | 2025-04-08 | 541d overdue |
| CVE-2025-31161EUVD-2025-9910 | CrushFTPCrushFTP | CrushFTP Authentication Bypass VulnerabilityRansomware | CISA | 2025-04-07 | 542d overdue |
| CVE-2025-22457EUVD-2025-9646 | IvantiConnect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityRansomware | CISAEU | 2025-04-04 | 559d overdue |
| CVE-2025-24813EUVD-2025-6498 | ApacheTomcat | Apache Tomcat Path Equivalence Vulnerability | CISA | 2025-04-01 | 548d overdue |
| CVE-2024-20439EUVD-2024-18154 | CiscoSmart Licensing Utility | Cisco Smart Licensing Utility Static Credential Vulnerability | CISA | 2025-03-31 | 549d overdue |
| CVE-2025-2783EUVD-2025-8225 | GoogleChromium Mojo | Google Chromium Mojo Sandbox Escape Vulnerability | CISA | 2025-03-27 | 553d overdue |
| CVE-2019-9875EUVD-2019-19231 | SitecoreCMS and Experience Platform (XP) | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | CISA | 2025-03-26 | 554d overdue |
| CVE-2019-9874EUVD-2019-19230 | SitecoreCMS and Experience Platform (XP) | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | CISA | 2025-03-26 | 554d overdue |
| CVE-2025-30154EUVD-2025-6724 | reviewdogaction-setup GitHub Action | reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability | CISA | 2025-03-24 | 556d overdue |
| CVE-2025-1316EUVD-2025-6192 | EdimaxIC-7100 IP Camera | Edimax IC-7100 IP Camera OS Command Injection Vulnerability | CISA | 2025-03-19 | 561d overdue |
| CVE-2024-48248EUVD-2024-54120 | NAKIVOBackup and Replication | NAKIVO Backup and Replication Absolute Path Traversal Vulnerability | CISA | 2025-03-19 | 561d overdue |
| CVE-2017-12637EUVD-2017-4176 | SAPNetWeaver | SAP NetWeaver Directory Traversal Vulnerability | CISA | 2025-03-19 | 561d overdue |
| CVE-2025-30066EUVD-2025-6565 | tj-actionschanged-files GitHub Action | tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability | CISA | 2025-03-18 | 562d overdue |
| CVE-2025-24472EUVD-2025-3725 | FortinetFortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityRansomware | CISA | 2025-03-18 | 562d overdue |
| CVE-2025-24201EUVD-2025-6302 | AppleMultiple Products | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability | CISA | 2025-03-13 | 567d overdue |
| CVE-2025-21590EUVD-2025-6303 | JuniperJunos OS | Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability | CISA | 2025-03-13 | 567d overdue |
| CVE-2025-26633EUVD-2025-6311 | MicrosoftWindows | Microsoft Windows Management Console (MMC) Improper Neutralization VulnerabilityRansomware | CISA | 2025-03-11 | 569d overdue |
| CVE-2025-24993EUVD-2025-6318 | MicrosoftWindows | Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability | CISA | 2025-03-11 | 569d overdue |
| CVE-2025-24991EUVD-2025-6320 | MicrosoftWindows | Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability | CISA | 2025-03-11 | 569d overdue |
| CVE-2025-24985EUVD-2025-6321 | MicrosoftWindows | Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability | CISA | 2025-03-11 | 569d overdue |
| CVE-2025-24984EUVD-2025-6322 | MicrosoftWindows | Microsoft Windows NTFS Information Disclosure Vulnerability | CISA | 2025-03-11 | 569d overdue |
| CVE-2025-24983EUVD-2025-6323 | MicrosoftWindows | Microsoft Windows Win32k Use-After-Free Vulnerability | CISA | 2025-03-11 | 569d overdue |
| CVE-2025-25181EUVD-2025-4072 | AdvantiveVeraCore | Advantive VeraCore SQL Injection Vulnerability | CISA | 2025-03-10 | 570d overdue |
| CVE-2024-57968EUVD-2024-53868 | AdvantiveVeraCore | Advantive VeraCore Unrestricted File Upload Vulnerability | CISA | 2025-03-10 | 570d overdue |
| CVE-2024-13161EUVD-2024-51387 | IvantiEndpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | CISA | 2025-03-10 | 570d overdue |
| CVE-2024-13160EUVD-2024-51386 | IvantiEndpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | CISA | 2025-03-10 | 570d overdue |
| CVE-2024-13159EUVD-2024-51385 | IvantiEndpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | CISA | 2025-03-10 | 570d overdue |
| CVE-2025-22226EUVD-2025-7605 | VMwareESXi, Workstation, and Fusion | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability | CISA | 2025-03-04 | 576d overdue |
| CVE-2025-22225EUVD-2025-7604 | VMwareESXi | VMware ESXi Arbitrary Write VulnerabilityRansomware | CISA | 2025-03-04 | 576d overdue |
| CVE-2025-22224EUVD-2025-7603 | VMwareESXi and Workstation | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability | CISA | 2025-03-04 | 576d overdue |
| CVE-2024-50302EUVD-2024-44804 | LinuxKernel | Linux Kernel Use of Uninitialized Resource Vulnerability | CISA | 2025-03-04 | 576d overdue |
| CVE-2024-4885EUVD-2024-44455 | ProgressWhatsUp Gold | Progress WhatsUp Gold Path Traversal Vulnerability | CISA | 2025-03-03 | 577d overdue |
| CVE-2023-20118EUVD-2023-24297 | CiscoSmall Business RV Series Routers | Cisco Small Business RV Series Routers Command Injection Vulnerability | CISA | 2025-03-03 | 577d overdue |
| CVE-2022-43939EUVD-2022-46909 | Hitachi VantaraPentaho Business Analytics (BA) Server | Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability | CISA | 2025-03-03 | 577d overdue |
| CVE-2022-43769EUVD-2022-46739 | Hitachi VantaraPentaho Business Analytics (BA) Server | Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability | CISA | 2025-03-03 | 577d overdue |
| CVE-2018-8639EUVD-2018-20250 | MicrosoftWindows | Microsoft Windows Win32k Improper Resource Shutdown or Release VulnerabilityRansomware | CISA | 2025-03-03 | 577d overdue |
| CVE-2024-49035EUVD-2024-43908 | MicrosoftPartner Center | Microsoft Partner Center Improper Access Control Vulnerability | CISA | 2025-02-25 | 583d overdue |
| CVE-2023-34192EUVD-2023-38291 | SynacorZimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | CISA | 2025-02-25 | 583d overdue |
| CVE-2024-20953EUVD-2024-18667 | OracleAgile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | CISA | 2025-02-24 | 584d overdue |
| CVE-2017-3066EUVD-2017-12207 | AdobeColdFusion | Adobe ColdFusion Deserialization Vulnerability | CISA | 2025-02-24 | 584d overdue |
| CVE-2025-24989EUVD-2025-4642 | MicrosoftPower Pages | Microsoft Power Pages Improper Access Control Vulnerability | CISA | 2025-02-21 | 587d overdue |
| CVE-2025-23209EUVD-2025-0208 | Craft CMSCraft CMS | Craft CMS Code Injection Vulnerability | CISA | 2025-02-20 | 588d overdue |
| CVE-2025-0111EUVD-2025-1508 | Palo Alto NetworksPAN-OS | Palo Alto Networks PAN-OS File Read Vulnerability | CISA | 2025-02-20 | 588d overdue |
| CVE-2025-0108EUVD-2025-1505 | Palo Alto NetworksPAN-OS | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | CISA | 2025-02-18 | 590d overdue |
| CVE-2024-53704EUVD-2024-52037 | SonicWallSonicOS | SonicWall SonicOS SSLVPN Improper Authentication VulnerabilityRansomware | CISA | 2025-02-18 | 590d overdue |
| CVE-2024-57727EUVD-2024-53725 | SimpleHelp SimpleHelp | SimpleHelp Path Traversal VulnerabilityRansomware | CISA | 2025-02-13 | 595d overdue |
| CVE-2025-24200EUVD-2025-3671 | AppleiOS and iPadOS | Apple iOS and iPadOS Incorrect Authorization Vulnerability | CISA | 2025-02-12 | 596d overdue |
| CVE-2024-41710EUVD-2024-39154 | MitelSIP Phones | Mitel SIP Phones Argument Injection Vulnerability | CISA | 2025-02-12 | 596d overdue |
| CVE-2025-21418EUVD-2025-2476 | MicrosoftWindows | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability | CISA | 2025-02-11 | 597d overdue |
| CVE-2025-21391EUVD-2025-2452 | MicrosoftWindows | Microsoft Windows Storage Link Following Vulnerability | CISA | 2025-02-11 | 597d overdue |
| CVE-2024-40891EUVD-2024-38851 | ZyxelDSL CPE Devices | Zyxel DSL CPE OS Command Injection Vulnerability | CISA | 2025-02-11 | 597d overdue |
| CVE-2024-40890EUVD-2024-38809 | ZyxelDSL CPE Devices | Zyxel DSL CPE OS Command Injection Vulnerability | CISA | 2025-02-11 | 597d overdue |
| CVE-2025-0994EUVD-2025-1955 | TrimbleCityworks | Trimble Cityworks Deserialization Vulnerability | CISA | 2025-02-07 | 601d overdue |
| CVE-2025-0411EUVD-2025-1658 | 7-Zip7-Zip | 7-Zip Mark of the Web Bypass Vulnerability | CISA | 2025-02-06 | 602d overdue |
| CVE-2024-21413EUVD-2024-19122 | MicrosoftOffice Outlook | Microsoft Outlook Improper Input Validation Vulnerability | CISA | 2025-02-06 | 602d overdue |
| CVE-2022-23748EUVD-2022-28684 | AudinateDante Discovery | Dante Discovery Process Control Vulnerability | CISA | 2025-02-06 | 602d overdue |
| CVE-2020-29574EUVD-2020-21936 | SophosCyberoamOS | CyberoamOS (CROS) SQL Injection VulnerabilityRansomware | CISA | 2025-02-06 | 602d overdue |
| CVE-2020-15069EUVD-2020-7197 | SophosXG Firewall | Sophos XG Firewall Buffer Overflow Vulnerability | CISA | 2025-02-06 | 602d overdue |
| CVE-2024-53104EUVD-2024-51776 | LinuxKernel | Linux Kernel Out-of-Bounds Write Vulnerability | CISA | 2025-02-05 | 603d overdue |
| CVE-2024-45195EUVD-2024-41762 | ApacheOFBiz | Apache OFBiz Forced Browsing Vulnerability | CISA | 2025-02-04 | 604d overdue |
| CVE-2024-29059EUVD-2024-26106 | Microsoft.NET Framework | Microsoft .NET Framework Information Disclosure Vulnerability | CISA | 2025-02-04 | 604d overdue |
| CVE-2018-9276EUVD-2018-20870 | PaesslerPRTG Network Monitor | Paessler PRTG Network Monitor OS Command Injection Vulnerability | CISA | 2025-02-04 | 604d overdue |
| CVE-2018-19410EUVD-2018-11103 | PaesslerPRTG Network Monitor | Paessler PRTG Network Monitor Local File Inclusion Vulnerability | CISA | 2025-02-04 | 604d overdue |
| CVE-2025-24085EUVD-2025-3607 | AppleMultiple Products | Apple Multiple Products Use-After-Free Vulnerability | CISA | 2025-01-29 | 610d overdue |
| CVE-2025-23006EUVD-2025-3070 | SonicWallSMA1000 Appliances | SonicWall SMA1000 Appliances Deserialization VulnerabilityRansomware | CISA | 2025-01-24 | 615d overdue |
| CVE-2020-11023EUVD-2020-0387 | JQueryJQuery | JQuery Cross-Site Scripting (XSS) Vulnerability | CISA | 2025-01-23 | 616d overdue |
| CVE-2024-50603EUVD-2024-44623 | AviatrixControllers | Aviatrix Controllers OS Command Injection Vulnerability | CISA | 2025-01-16 | 623d overdue |
| CVE-2025-21335EUVD-2025-2400 | MicrosoftWindows | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | CISA | 2025-01-14 | 625d overdue |
| CVE-2025-21334EUVD-2025-2399 | MicrosoftWindows | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | CISA | 2025-01-14 | 625d overdue |
| CVE-2025-21333EUVD-2025-2398 | MicrosoftWindows | Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability | CISA | 2025-01-14 | 625d overdue |
| CVE-2024-55591EUVD-2024-52819 | FortinetFortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityRansomware | CISAEU | 2025-01-14 | 639d overdue |
| CVE-2024-12686EUVD-2024-51049 | BeyondTrustPrivileged Remote Access (PRA) and Remote Support (RS) | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability | CISA | 2025-01-13 | 626d overdue |
| CVE-2023-48365EUVD-2023-52419 | QlikSense | Qlik Sense HTTP Tunneling VulnerabilityRansomware | CISA | 2025-01-13 | 626d overdue |
| CVE-2025-0282EUVD-2025-1580 | IvantiConnect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityRansomware | CISA | 2025-01-08 | 645d overdue |
| CVE-2024-55550EUVD-2024-52803 | MitelMiCollab | Mitel MiCollab Path Traversal VulnerabilityRansomware | CISA | 2025-01-07 | 632d overdue |
| CVE-2024-41713EUVD-2024-39339 | MitelMiCollab | Mitel MiCollab Path Traversal VulnerabilityRansomware | CISA | 2025-01-07 | 632d overdue |
| CVE-2020-2883EUVD-2020-22676 | OracleWebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | CISA | 2025-01-07 | 632d overdue |
| CVE-2024-3393EUVD-2024-31982 | Palo Alto NetworksPAN-OS | Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability | CISA | 2024-12-30 | 640d overdue |
| CVE-2021-44207EUVD-2021-31057 | Acclaim SystemsUSAHERDS | Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability | CISA | 2024-12-23 | 647d overdue |
| CVE-2024-12356EUVD-2024-50801 | BeyondTrustPrivileged Remote Access (PRA) and Remote Support (RS) | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability | CISA | 2024-12-19 | 664d overdue |
| CVE-2022-23227EUVD-2022-28314 | NUUONVRmini2 Devices | NUUO NVRmini2 Devices Missing Authentication Vulnerability | CISA | 2024-12-18 | 652d overdue |
| CVE-2021-40407EUVD-2021-27584 | ReolinkRLC-410W IP Camera | Reolink RLC-410W IP Camera OS Command Injection Vulnerability | CISA | 2024-12-18 | 652d overdue |
| CVE-2019-11001EUVD-2019-2715 | ReolinkMultiple IP Cameras | Reolink Multiple IP Cameras OS Command Injection Vulnerability | CISA | 2024-12-18 | 652d overdue |
| CVE-2018-14933EUVD-2018-6815 | NUUONVRmini Devices | NUUO NVRmini Devices OS Command Injection Vulnerability | CISA | 2024-12-18 | 652d overdue |
| CVE-2024-55956EUVD-2024-52864 | CleoMultiple Products | Cleo Multiple Products Unauthenticated File Upload VulnerabilityRansomware | CISA | 2024-12-17 | 653d overdue |
| CVE-2024-35250EUVD-2024-35761 | MicrosoftWindows | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability | CISA | 2024-12-16 | 654d overdue |
| CVE-2024-20767EUVD-2024-18482 | AdobeColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | CISA | 2024-12-16 | 654d overdue |
| CVE-2024-50623EUVD-2024-45217 | CleoMultiple Products | Cleo Multiple Products Unrestricted File Upload VulnerabilityRansomware | CISA | 2024-12-13 | 657d overdue |
| CVE-2024-49138EUVD-2024-43765 | MicrosoftWindows | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | CISA | 2024-12-10 | 660d overdue |
| CVE-2024-51378EUVD-2024-45807 | CyberPersonsCyberPanel | CyberPanel Incorrect Default Permissions VulnerabilityRansomware | CISA | 2024-12-04 | 666d overdue |
| CVE-2024-11680EUVD-2024-34152 | ProjectSendProjectSend | ProjectSend Improper Authentication Vulnerability | CISA | 2024-12-03 | 667d overdue |
| CVE-2024-11667EUVD-2024-34151 | ZyxelMultiple Firewalls | Zyxel Multiple Firewalls Path Traversal VulnerabilityRansomware | CISA | 2024-12-03 | 667d overdue |
| CVE-2023-45727EUVD-2023-50016 | North GridProself | North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability | CISA | 2024-12-03 | 667d overdue |
| CVE-2023-28461EUVD-2023-32140 | Array Networks AG/vxAG ArrayOS | Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function VulnerabilityRansomware | CISA | 2024-11-25 | 675d overdue |
| CVE-2024-44309EUVD-2024-41208 | AppleMultiple Products | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability | CISA | 2024-11-21 | 679d overdue |
| CVE-2024-44308EUVD-2024-41207 | AppleMultiple Products | Apple Multiple Products Code Execution Vulnerability | CISA | 2024-11-21 | 679d overdue |
| CVE-2024-21287EUVD-2024-19000 | OracleAgile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability | CISA | 2024-11-21 | 679d overdue |
| CVE-2024-38813EUVD-2024-37704 | VMwarevCenter Server | VMware vCenter Server Privilege Escalation Vulnerability | CISA | 2024-11-20 | 680d overdue |
| CVE-2024-38812EUVD-2024-37703 | VMwarevCenter Server | VMware vCenter Server Heap-Based Buffer Overflow Vulnerability | CISA | 2024-11-20 | 680d overdue |
| CVE-2024-9474EUVD-2024-50354 | Palo Alto NetworksPAN-OS | Palo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityRansomware | CISA | 2024-11-18 | 682d overdue |
| CVE-2024-1212EUVD-2024-16979 | ProgressKemp LoadMaster | Progress Kemp LoadMaster OS Command Injection Vulnerability | CISA | 2024-11-18 | 682d overdue |
| CVE-2024-0012EUVD-2024-15815 | Palo Alto NetworksPAN-OS | Palo Alto Networks PAN-OS Management Interface Authentication Bypass VulnerabilityRansomware | CISA | 2024-11-18 | 682d overdue |
| CVE-2024-9465EUVD-2024-49957 | Palo Alto NetworksExpedition | Palo Alto Networks Expedition SQL Injection Vulnerability | CISA | 2024-11-14 | 686d overdue |
| CVE-2024-9463EUVD-2024-49955 | Palo Alto NetworksExpedition | Palo Alto Networks Expedition OS Command Injection Vulnerability | CISA | 2024-11-14 | 686d overdue |
| CVE-2024-49039EUVD-2024-43910 | MicrosoftWindows | Microsoft Windows Task Scheduler Privilege Escalation VulnerabilityRansomware | CISA | 2024-11-12 | 688d overdue |
| CVE-2024-43451EUVD-2024-40720 | MicrosoftWindows | Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability | CISA | 2024-11-12 | 688d overdue |
| CVE-2021-41277EUVD-2021-28310 | MetabaseMetabase | Metabase GeoJSON API Local File Inclusion Vulnerability | CISA | 2024-11-12 | 688d overdue |
| CVE-2021-26086EUVD-2021-12907 | AtlassianJira Server and Data Center | Atlassian Jira Server and Data Center Path Traversal Vulnerability | CISA | 2024-11-12 | 688d overdue |
| CVE-2014-2120EUVD-2014-2160 | CiscoAdaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability | CISA | 2024-11-12 | 688d overdue |
| CVE-2024-5910EUVD-2024-47042 | Palo Alto NetworksExpedition | Palo Alto Networks Expedition Missing Authentication Vulnerability | CISA | 2024-11-07 | 693d overdue |
| CVE-2024-51567EUVD-2024-45733 | CyberPersonsCyberPanel | CyberPanel Incorrect Default Permissions VulnerabilityRansomware | CISA | 2024-11-07 | 693d overdue |
| CVE-2024-43093EUVD-2024-40034 | AndroidFramework | Android Framework Privilege Escalation Vulnerability | CISA | 2024-11-07 | 693d overdue |
| CVE-2019-16278EUVD-2019-7077 | Nostromonhttpd | Nostromo nhttpd Directory Traversal Vulnerability | CISA | 2024-11-07 | 693d overdue |
| CVE-2024-8957EUVD-2024-49506 | PTZOpticsPT30X-SDI/NDI Cameras | PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability | CISA | 2024-11-04 | 696d overdue |
| CVE-2024-8956EUVD-2024-49505 | PTZOpticsPT30X-SDI/NDI Cameras | PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability | CISA | 2024-11-04 | 696d overdue |
| CVE-2024-37383EUVD-2024-36625 | RoundcubeWebmail | RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability | CISA | 2024-10-24 | 707d overdue |
| CVE-2024-20481EUVD-2024-18196 | CiscoAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Denial-of-Service Vulnerability | CISA | 2024-10-24 | 707d overdue |
| CVE-2024-47575EUVD-2024-42531 | FortinetFortiManager | Fortinet FortiManager Missing Authentication Vulnerability | CISA | 2024-10-23 | 708d overdue |
| CVE-2024-38094EUVD-2024-37782 | MicrosoftSharePoint | Microsoft SharePoint Deserialization VulnerabilityRansomware | CISA | 2024-10-22 | 709d overdue |
| CVE-2024-9537EUVD-2024-49996 | ScienceLogicSL1 | ScienceLogic SL1 Unspecified Vulnerability | CISA | 2024-10-21 | 710d overdue |
| CVE-2024-40711EUVD-2024-38578 | VeeamBackup & Replication | Veeam Backup and Replication Deserialization VulnerabilityRansomware | CISA | 2024-10-17 | 714d overdue |
| CVE-2024-9680EUVD-2024-50087 | MozillaFirefox | Mozilla Firefox Use-After-Free VulnerabilityRansomware | CISA | 2024-10-15 | 716d overdue |
| CVE-2024-30088EUVD-2024-28025 | MicrosoftWindows | Microsoft Windows Kernel TOCTOU Race Condition VulnerabilityRansomware | CISA | 2024-10-15 | 716d overdue |
| CVE-2024-28987EUVD-2024-26049 | SolarWindsWeb Help Desk | SolarWinds Web Help Desk Hardcoded Credential Vulnerability | CISA | 2024-10-15 | 716d overdue |
| CVE-2024-9380EUVD-2024-49898 | IvantiCloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | CISAEU | 2024-10-09 | 722d overdue |
| CVE-2024-9379EUVD-2024-49897 | IvantiCloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | CISA | 2024-10-09 | 722d overdue |
| CVE-2024-23113EUVD-2024-20638 | FortinetMultiple Products | Fortinet Multiple Products Format String Vulnerability | CISA | 2024-10-09 | 722d overdue |
| CVE-2024-43573EUVD-2024-40327 | MicrosoftWindows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | CISA | 2024-10-08 | 723d overdue |
| CVE-2024-43572EUVD-2024-40326 | MicrosoftWindows | Microsoft Windows Management Console Remote Code Execution Vulnerability | CISA | 2024-10-08 | 723d overdue |
| CVE-2024-43047EUVD-2024-40024 | QualcommMultiple Chipsets | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | CISA | 2024-10-08 | 723d overdue |
| CVE-2024-45519EUVD-2024-41520 | SynacorZimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability | CISA | 2024-10-03 | 728d overdue |
| CVE-2024-29824EUVD-2024-26818 | IvantiEndpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | CISA | 2024-10-02 | 729d overdue |
| CVE-2023-25280EUVD-2023-29242 | D-LinkDIR-820 Router | D-Link DIR-820 Router OS Command Injection Vulnerability | CISA | 2024-09-30 | 731d overdue |
| CVE-2020-15415EUVD-2020-7408 | DrayTekMultiple Vigor Routers | DrayTek Multiple Vigor Routers OS Command Injection Vulnerability | CISA | 2024-09-30 | 731d overdue |
| CVE-2019-0344EUVD-2019-1117 | SAPCommerce Cloud | SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability | CISA | 2024-09-30 | 731d overdue |
| CVE-2024-7593EUVD-2024-48489 | IvantiVirtual Traffic Manager | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | CISA | 2024-09-24 | 737d overdue |
| CVE-2024-8963EUVD-2024-49510 | IvantiCloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | CISAEU | 2024-09-19 | 742d overdue |
| CVE-2024-27348EUVD-2024-1059 | ApacheHugeGraph-Server | Apache HugeGraph-Server Improper Access Control Vulnerability | CISA | 2024-09-18 | 743d overdue |
| CVE-2022-21445EUVD-2022-26669 | OracleADF Faces | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability | CISA | 2024-09-18 | 743d overdue |
| CVE-2020-14644EUVD-2020-6780 | OracleWebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | CISA | 2024-09-18 | 743d overdue |
| CVE-2020-0618EUVD-2020-2113 | MicrosoftSQL Server | Microsoft SQL Server Reporting Services Remote Code Execution VulnerabilityRansomware | CISA | 2024-09-18 | 743d overdue |
| CVE-2014-0502EUVD-2014-0533 | AdobeFlash Player | Adobe Flash Player Double Free Vulnerablity | CISA | 2024-09-17 | 744d overdue |
| CVE-2014-0497EUVD-2014-0528 | AdobeFlash Player | Adobe Flash Player Integer Underflow Vulnerablity | CISA | 2024-09-17 | 744d overdue |
| CVE-2013-0648EUVD-2013-0659 | AdobeFlash Player | Adobe Flash Player Code Execution Vulnerability | CISA | 2024-09-17 | 744d overdue |
| CVE-2013-0643EUVD-2013-0654 | AdobeFlash Player | Adobe Flash Player Incorrect Default Permissions Vulnerability | CISA | 2024-09-17 | 744d overdue |
| CVE-2024-6670EUVD-2024-48017 | ProgressWhatsUp Gold | Progress WhatsUp Gold SQL Injection VulnerabilityRansomware | CISA | 2024-09-16 | 745d overdue |
| CVE-2024-43461EUVD-2024-40730 | MicrosoftWindows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | CISA | 2024-09-16 | 745d overdue |
| CVE-2024-8190EUVD-2024-49004 | IvantiCloud Services Appliance | Ivanti Cloud Services Appliance OS Command Injection Vulnerability | CISAEU | 2024-09-13 | 748d overdue |
| CVE-2024-38226EUVD-2024-37192 | MicrosoftPublisher | Microsoft Publisher Protection Mechanism Failure Vulnerability | CISA | 2024-09-10 | 751d overdue |
| CVE-2024-38217EUVD-2024-37184 | MicrosoftWindows | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability | CISA | 2024-09-10 | 751d overdue |
| CVE-2024-38014EUVD-2024-37504 | MicrosoftWindows | Microsoft Windows Installer Improper Privilege Management Vulnerability | CISA | 2024-09-10 | 751d overdue |
| CVE-2024-40766EUVD-2024-38613 | SonicWallSonicOS | SonicWall SonicOS Improper Access Control VulnerabilityRansomware | CISA | 2024-09-09 | 752d overdue |
| CVE-2017-1000253EUVD-2017-1514 | LinuxKernel | Linux Kernel PIE Stack Buffer Corruption Vulnerability Ransomware | CISA | 2024-09-09 | 752d overdue |
| CVE-2016-3714EUVD-2016-4735 | ImageMagickImageMagick | ImageMagick Improper Input Validation Vulnerability | CISA | 2024-09-09 | 752d overdue |
| CVE-2024-7262EUVD-2024-48209 | KingsoftWPS Office | Kingsoft WPS Office Path Traversal Vulnerability | CISA | 2024-09-03 | 758d overdue |
| CVE-2021-20124EUVD-2021-7581 | DrayTekVigorConnect | Draytek VigorConnect Path Traversal Vulnerability | CISA | 2024-09-03 | 758d overdue |
| CVE-2021-20123EUVD-2021-7580 | DrayTekVigorConnect | Draytek VigorConnect Path Traversal Vulnerability | CISA | 2024-09-03 | 758d overdue |
| CVE-2024-7965EUVD-2024-48798 | GoogleChromium V8 | Google Chromium V8 Inappropriate Implementation Vulnerability | CISA | 2024-08-28 | 764d overdue |
| CVE-2024-38856EUVD-2024-37643 | ApacheOFBiz | Apache OFBiz Incorrect Authorization Vulnerability | CISA | 2024-08-27 | 765d overdue |
| CVE-2024-7971EUVD-2024-48804 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2024-08-26 | 766d overdue |
| CVE-2024-39717EUVD-2024-38202 | VersaDirector | Versa Director Dangerous File Type Upload Vulnerability | CISA | 2024-08-23 | 769d overdue |
| CVE-2022-0185EUVD-2022-15389 | LinuxKernel | Linux Kernel Heap-Based Buffer Overflow Vulnerability | CISA | 2024-08-21 | 771d overdue |
| CVE-2021-33045EUVD-2021-19760 | DahuaIP Camera Firmware | Dahua IP Camera Authentication Bypass Vulnerability | CISA | 2024-08-21 | 771d overdue |
| CVE-2021-33044EUVD-2021-19759 | DahuaIP Camera Firmware | Dahua IP Camera Authentication Bypass Vulnerability | CISA | 2024-08-21 | 771d overdue |
| CVE-2021-31196EUVD-2021-18109 | MicrosoftExchange Server | Microsoft Exchange Server Information Disclosure Vulnerability | CISA | 2024-08-21 | 771d overdue |
| CVE-2024-23897EUVD-2024-0270 | JenkinsJenkins Command Line Interface (CLI) | Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityRansomware | CISA | 2024-08-19 | 773d overdue |
| CVE-2024-28986EUVD-2024-26048 | SolarWindsWeb Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | CISA | 2024-08-15 | 777d overdue |
| CVE-2024-38213EUVD-2024-37180 | MicrosoftWindows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | CISA | 2024-08-13 | 779d overdue |
| CVE-2024-38193EUVD-2024-37161 | MicrosoftWindows | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability | CISA | 2024-08-13 | 779d overdue |
| CVE-2024-38189EUVD-2024-37158 | MicrosoftProject | Microsoft Project Remote Code Execution Vulnerability | CISA | 2024-08-13 | 779d overdue |
| CVE-2024-38178EUVD-2024-37148 | MicrosoftWindows | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | CISA | 2024-08-13 | 779d overdue |
| CVE-2024-38107EUVD-2024-37146 | MicrosoftWindows | Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability | CISA | 2024-08-13 | 779d overdue |
| CVE-2024-38106EUVD-2024-37137 | MicrosoftWindows | Microsoft Windows Kernel Privilege Escalation Vulnerability | CISA | 2024-08-13 | 779d overdue |
| CVE-2024-36971EUVD-2024-36321 | AndroidKernel | Android Kernel Remote Code Execution Vulnerability | CISA | 2024-08-07 | 785d overdue |
| CVE-2024-32113EUVD-2024-29935 | ApacheOFBiz | Apache OFBiz Path Traversal Vulnerability | CISA | 2024-08-07 | 785d overdue |
| CVE-2018-0824EUVD-2018-1629 | MicrosoftWindows | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability | CISA | 2024-08-05 | 787d overdue |
| CVE-2024-37085EUVD-2024-36416 | VMwareESXi | VMware ESXi Authentication Bypass VulnerabilityRansomware | CISA | 2024-07-30 | 793d overdue |
| CVE-2024-5217EUVD-2024-46457 | ServiceNowUtah, Vancouver, and Washington DC Now Platform | ServiceNow Incomplete List of Disallowed Inputs Vulnerability | CISA | 2024-07-29 | 794d overdue |
| CVE-2024-4879EUVD-2024-44451 | ServiceNowUtah, Vancouver, and Washington DC Now Platform | ServiceNow Improper Input Validation Vulnerability | CISA | 2024-07-29 | 794d overdue |
| CVE-2023-45249EUVD-2023-49555 | AcronisCyber Infrastructure (ACI) | Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability | CISA | 2024-07-29 | 794d overdue |
| CVE-2024-39891EUVD-2024-38291 | TwilioAuthy | Twilio Authy Information Disclosure Vulnerability | CISA | 2024-07-23 | 800d overdue |
| CVE-2012-4792EUVD-2012-4717 | MicrosoftInternet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | CISA | 2024-07-23 | 800d overdue |
| CVE-2024-34102EUVD-2024-2102 | AdobeCommerce and Magento Open Source | Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability | CISA | 2024-07-17 | 806d overdue |
| CVE-2024-28995EUVD-2024-26057 | SolarWindsServ-U | SolarWinds Serv-U Path Traversal Vulnerability | CISA | 2024-07-17 | 806d overdue |
| CVE-2022-22948EUVD-2022-28072 | VMwarevCenter Server | VMware vCenter Server Incorrect Default File Permissions Vulnerability | CISA | 2024-07-17 | 806d overdue |
| CVE-2024-36401EUVD-2024-2280 | OSGeoGeoServer | OSGeo GeoServer GeoTools Eval Injection Vulnerability | CISA | 2024-07-15 | 808d overdue |
| CVE-2024-38112EUVD-2024-37791 | MicrosoftWindows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | CISA | 2024-07-09 | 814d overdue |
| CVE-2024-38080EUVD-2024-37774 | MicrosoftWindows | Microsoft Windows Hyper-V Privilege Escalation Vulnerability | CISA | 2024-07-09 | 814d overdue |
| CVE-2024-23692EUVD-2024-21153 | RejettoHTTP File Server | Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityRansomware | CISA | 2024-07-09 | 814d overdue |
| CVE-2024-20399EUVD-2024-18114 | CiscoNX-OS | Cisco NX-OS Command Injection Vulnerability | CISA | 2024-07-02 | 821d overdue |
| CVE-2022-2586EUVD-2022-34835 | LinuxKernel | Linux Kernel Use-After-Free Vulnerability | CISA | 2024-06-26 | 827d overdue |
| CVE-2022-24816EUVD-2023-2600 | OSGeoJAI-EXT | OSGeo GeoServer JAI-EXT Code Injection Vulnerability | CISA | 2024-06-26 | 827d overdue |
| CVE-2020-13965EUVD-2020-6139 | RoundcubeWebmail | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | CISA | 2024-06-26 | 827d overdue |
| CVE-2024-4358EUVD-2024-43994 | ProgressTelerik Report Server | Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability | CISA | 2024-06-13 | 840d overdue |
| CVE-2024-32896EUVD-2024-30666 | AndroidPixel | Android Pixel Privilege Escalation Vulnerability | CISA | 2024-06-13 | 840d overdue |
| CVE-2024-26169EUVD-2024-23445 | MicrosoftWindows | Microsoft Windows Error Reporting Service Improper Privilege Management VulnerabilityRansomware | CISA | 2024-06-13 | 840d overdue |
| CVE-2024-4610EUVD-2024-44219 | ArmMali GPU Kernel Driver | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | CISA | 2024-06-12 | 841d overdue |
| CVE-2024-4577EUVD-2024-44188 | PHP GroupPHP | PHP-CGI OS Command Injection VulnerabilityRansomware | CISA | 2024-06-12 | 841d overdue |
| CVE-2017-3506EUVD-2017-12627 | OracleWebLogic Server | Oracle WebLogic Server OS Command Injection Vulnerability | CISA | 2024-06-03 | 850d overdue |
| CVE-2024-24919EUVD-2024-22282 | Check PointQuantum Security Gateways | Check Point Quantum Security Gateways Information Disclosure VulnerabilityRansomware | CISA | 2024-05-30 | 854d overdue |
| CVE-2024-1086EUVD-2024-16861 | LinuxKernel | Linux Kernel Use-After-Free VulnerabilityRansomware | CISA | 2024-05-30 | 854d overdue |
| CVE-2024-4978EUVD-2024-44535 | Justice AV SolutionsViewer | Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability | CISA | 2024-05-29 | 855d overdue |
| CVE-2024-5274EUVD-2024-46510 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2024-05-28 | 856d overdue |
| CVE-2020-17519EUVD-2021-0481 | ApacheFlink | Apache Flink Improper Access Control Vulnerability | CISA | 2024-05-23 | 861d overdue |
| CVE-2024-4947EUVD-2024-44509 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2024-05-20 | 864d overdue |
| CVE-2023-43208EUVD-2023-47627 | NextGen HealthcareMirth Connect | NextGen Healthcare Mirth Connect Deserialization of Untrusted Data VulnerabilityRansomware | CISA | 2024-05-20 | 864d overdue |
| CVE-2024-4761EUVD-2024-44358 | GoogleChromium V8 | Google Chromium V8 Out-of-Bounds Memory Write Vulnerability | CISA | 2024-05-16 | 868d overdue |
| CVE-2021-40655EUVD-2021-27829 | D-LinkDIR-605 Router | D-Link DIR-605 Router Information Disclosure Vulnerability | CISA | 2024-05-16 | 868d overdue |
| CVE-2014-100005EUVD-2014-1036 | D-LinkDIR-600 Router | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | CISA | 2024-05-16 | 868d overdue |
| CVE-2024-30051EUVD-2024-27989 | MicrosoftDWM Core Library | Microsoft DWM Core Library Privilege Escalation VulnerabilityRansomware | CISA | 2024-05-14 | 870d overdue |
| CVE-2024-30040EUVD-2024-27980 | MicrosoftWindows | Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability | CISA | 2024-05-14 | 870d overdue |
| CVE-2024-4671EUVD-2024-44272 | GoogleChromium | Google Chromium Visuals Use-After-Free Vulnerability | CISA | 2024-05-13 | 871d overdue |
| CVE-2023-7028EUVD-2023-59219 | GitLabGitLab CE/EE | GitLab Community and Enterprise Editions Improper Access Control Vulnerability | CISA | 2024-05-01 | 883d overdue |
| CVE-2024-29988EUVD-2024-26960 | MicrosoftSmartScreen Prompt | Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability | CISA | 2024-04-30 | 884d overdue |
| CVE-2024-4040EUVD-2024-32605 | CrushFTPCrushFTP | CrushFTP VFS Sandbox Escape Vulnerability | CISA | 2024-04-24 | 904d overdue |
| CVE-2024-20359EUVD-2024-18074 | CiscoAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Privilege Escalation Vulnerability | CISA | 2024-04-24 | 904d overdue |
| CVE-2024-20353EUVD-2024-18068 | CiscoAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Denial of Service Vulnerability | CISA | 2024-04-24 | 904d overdue |
| CVE-2022-38028EUVD-2022-40634 | MicrosoftWindows | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | CISA | 2024-04-23 | 891d overdue |
| CVE-2024-3400EUVD-2024-31989 | Palo Alto NetworksPAN-OS | Palo Alto Networks PAN-OS Command Injection VulnerabilityRansomware | CISA | 2024-04-12 | 916d overdue |
| CVE-2024-3273EUVD-2024-31863 | D-LinkMultiple NAS Devices | D-Link Multiple NAS Devices Command Injection Vulnerability | CISA | 2024-04-11 | 903d overdue |
| CVE-2024-3272EUVD-2024-31862 | D-LinkMultiple NAS Devices | D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability | CISA | 2024-04-11 | 903d overdue |
| CVE-2024-29748EUVD-2024-26743 | AndroidPixel | Android Pixel Privilege Escalation Vulnerability | CISA | 2024-04-04 | 910d overdue |
| CVE-2024-29745EUVD-2024-26740 | AndroidPixel | Android Pixel Information Disclosure Vulnerability | CISA | 2024-04-04 | 910d overdue |
| CVE-2023-24955EUVD-2023-28942 | MicrosoftSharePoint Server | Microsoft SharePoint Server Code Injection VulnerabilityRansomware | CISA | 2024-03-26 | 919d overdue |
| CVE-2023-48788EUVD-2023-52821 | FortinetFortiClient EMS | Fortinet FortiClient EMS SQL Injection VulnerabilityRansomware | CISAEU | 2024-03-25 | 920d overdue |
| CVE-2021-44529EUVD-2021-31360 | IvantiEndpoint Manager Cloud Service Appliance (EPM CSA) | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ransomware | CISA | 2024-03-25 | 920d overdue |
| CVE-2019-7256EUVD-2019-16800 | NiceLinear eMerge E3-Series | Nice Linear eMerge E3-Series OS Command Injection Vulnerability | CISA | 2024-03-25 | 920d overdue |
| CVE-2024-27198EUVD-2024-24437 | JetBrainsTeamCity | JetBrains TeamCity Authentication Bypass VulnerabilityRansomware | CISA | 2024-03-07 | 938d overdue |
| CVE-2024-23296EUVD-2024-20815 | AppleMultiple Products | Apple Multiple Products Memory Corruption Vulnerability | CISA | 2024-03-06 | 939d overdue |
| CVE-2024-23225EUVD-2024-20744 | AppleMultiple Products | Apple Multiple Products Memory Corruption Vulnerability | CISA | 2024-03-06 | 939d overdue |
| CVE-2023-21237EUVD-2023-25405 | AndroidPixel | Android Pixel Information Disclosure Vulnerability | CISA | 2024-03-05 | 940d overdue |
| CVE-2021-36380EUVD-2021-22996 | SunhilloSureLine | Sunhillo SureLine OS Command Injection Vulnerablity | CISA | 2024-03-05 | 940d overdue |
| CVE-2024-21338EUVD-2024-19050 | MicrosoftWindows | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control VulnerabilityRansomware | CISA | 2024-03-04 | 941d overdue |
| CVE-2023-29360EUVD-2023-32933 | MicrosoftStreaming Service | Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability | CISA | 2024-02-29 | 945d overdue |
| CVE-2024-1709EUVD-2024-17443 | ConnectWiseScreenConnect | ConnectWise ScreenConnect Authentication Bypass VulnerabilityRansomware | CISA | 2024-02-22 | 966d overdue |
| CVE-2024-21410EUVD-2024-19119 | MicrosoftExchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability | CISA | 2024-02-15 | 959d overdue |
| CVE-2020-3259EUVD-2020-24530 | CiscoAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Information Disclosure VulnerabilityRansomware | CISA | 2024-02-15 | 959d overdue |
| CVE-2024-21412EUVD-2024-19121 | MicrosoftWindows | Microsoft Windows Internet Shortcut Files Security Feature Bypass VulnerabilityRansomware | CISA | 2024-02-13 | 961d overdue |
| CVE-2024-21351EUVD-2024-19063 | MicrosoftWindows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | CISA | 2024-02-13 | 961d overdue |
| CVE-2023-43770EUVD-2023-48147 | RoundcubeWebmail | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | CISA | 2024-02-12 | 962d overdue |
| CVE-2024-21762EUVD-2024-19376 | FortinetFortiOS | Fortinet FortiOS Out-of-Bound Write VulnerabilityRansomware | CISA | 2024-02-09 | 979d overdue |
| CVE-2023-4762EUVD-2023-54609 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2024-02-06 | 968d overdue |
| CVE-2024-21893EUVD-2024-19504 | IvantiConnect Secure, Policy Secure, and Neurons | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityRansomware | CISA | 2024-01-31 | 993d overdue |
| CVE-2022-48618EUVD-2022-51313 | AppleMultiple Products | Apple Multiple Products Memory Corruption Vulnerability | CISA | 2024-01-31 | 974d overdue |
| CVE-2023-22527EUVD-2023-26667 | AtlassianConfluence Data Center and Server | Atlassian Confluence Data Center and Server Template Injection VulnerabilityRansomware | CISA | 2024-01-24 | 981d overdue |
| CVE-2024-23222EUVD-2024-20741 | AppleMultiple Products | Apple Multiple Products WebKit Type Confusion Vulnerability | CISA | 2024-01-23 | 982d overdue |
| CVE-2023-34048EUVD-2023-38166 | VMwarevCenter Server | VMware vCenter Server Out-of-Bounds Write Vulnerability | CISA | 2024-01-22 | 983d overdue |
| CVE-2023-35082EUVD-2023-39117 | IvantiEndpoint Manager Mobile (EPMM) and MobileIron Core | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass VulnerabilityRansomware | CISA | 2024-01-18 | 987d overdue |
| CVE-2024-0519EUVD-2024-16314 | GoogleChromium V8 | Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | CISA | 2024-01-17 | 988d overdue |
| CVE-2023-6549EUVD-2023-58779 | CitrixNetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | CISA | 2024-01-17 | 988d overdue |
| CVE-2023-6548EUVD-2023-58778 | CitrixNetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | CISA | 2024-01-17 | 1002d overdue |
| CVE-2018-15133EUVD-2022-5039 | LaravelLaravel Framework | Laravel Deserialization of Untrusted Data Vulnerability | CISA | 2024-01-16 | 989d overdue |
| CVE-2024-21887EUVD-2024-19498 | IvantiConnect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Command Injection VulnerabilityRansomware | CISA | 2024-01-10 | 1004d overdue |
| CVE-2023-46805EUVD-2023-50971 | IvantiConnect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Authentication Bypass VulnerabilityRansomware | CISA | 2024-01-10 | 1004d overdue |
| CVE-2023-29357EUVD-2023-32930 | MicrosoftSharePoint Server | Microsoft SharePoint Server Privilege Escalation VulnerabilityRansomware | CISA | 2024-01-10 | 995d overdue |
| CVE-2023-41990EUVD-2023-46449 | AppleMultiple Products | Apple Multiple Products Code Execution Vulnerability | CISA | 2024-01-08 | 997d overdue |
| CVE-2023-38203EUVD-2023-42023 | AdobeColdFusion | Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityRansomware | CISA | 2024-01-08 | 997d overdue |
| CVE-2023-29300EUVD-2023-32875 | AdobeColdFusion | Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityRansomware | CISA | 2024-01-08 | 997d overdue |
| CVE-2023-27524EUVD-2023-1207 | ApacheSuperset | Apache Superset Insecure Default Initialization of Resource Vulnerability | CISA | 2024-01-08 | 997d overdue |
| CVE-2023-23752EUVD-2023-27838 | Joomla!Joomla! | Joomla! Improper Access Control Vulnerability | CISA | 2024-01-08 | 997d overdue |
| CVE-2016-20017EUVD-2016-3105 | D-LinkDSL-2750B Devices | D-Link DSL-2750B Devices Command Injection Vulnerability | CISA | 2024-01-08 | 997d overdue |
| CVE-2023-7101EUVD-2023-59285 | Spreadsheet::ParseExcelSpreadsheet::ParseExcel | Spreadsheet::ParseExcel Remote Code Execution Vulnerability | CISA | 2024-01-02 | 1003d overdue |
| CVE-2023-7024EUVD-2023-59215 | GoogleChromium WebRTC | Google Chromium WebRTC Heap Buffer Overflow Vulnerability | CISA | 2024-01-02 | 1003d overdue |
| CVE-2023-49897EUVD-2023-53797 | FXCAE1021, AE1021PE | FXC AE1021, AE1021PE OS Command Injection Vulnerability | CISA | 2023-12-21 | 1015d overdue |
| CVE-2023-47565EUVD-2023-51676 | QNAPVioStor NVR | QNAP VioStor NVR OS Command Injection Vulnerability | CISA | 2023-12-21 | 1015d overdue |
| CVE-2023-6448EUVD-2023-58685 | UnitronicsVision PLC and HMI | Unitronics Vision PLC and HMI Insecure Default Password Vulnerability | CISA | 2023-12-11 | 1039d overdue |
| CVE-2023-41266EUVD-2023-45783 | QlikSense | Qlik Sense Path Traversal VulnerabilityRansomware | CISA | 2023-12-07 | 1029d overdue |
| CVE-2023-41265EUVD-2023-45782 | QlikSense | Qlik Sense HTTP Tunneling VulnerabilityRansomware | CISA | 2023-12-07 | 1029d overdue |
| CVE-2023-33107EUVD-2023-37296 | QualcommMultiple Chipsets | Qualcomm Multiple Chipsets Integer Overflow Vulnerability | CISA | 2023-12-05 | 1031d overdue |
| CVE-2023-33106EUVD-2023-37295 | QualcommMultiple Chipsets | Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability | CISA | 2023-12-05 | 1031d overdue |
| CVE-2023-33063EUVD-2023-37252 | QualcommMultiple Chipsets | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | CISA | 2023-12-05 | 1031d overdue |
| CVE-2022-22071EUVD-2022-27225 | QualcommMultiple Chipsets | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | CISA | 2023-12-05 | 1031d overdue |
| CVE-2023-42917EUVD-2023-47338 | AppleMultiple Products | Apple Multiple Products WebKit Memory Corruption Vulnerability | CISA | 2023-12-04 | 1032d overdue |
| CVE-2023-42916EUVD-2023-47337 | AppleMultiple Products | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | CISA | 2023-12-04 | 1032d overdue |
| CVE-2023-6345EUVD-2023-58586 | GoogleChromium Skia | Google Skia Integer Overflow Vulnerability | CISA | 2023-11-30 | 1036d overdue |
| CVE-2023-49103EUVD-2023-53112 | ownCloudownCloud graphapi | ownCloud graphapi Information Disclosure Vulnerability | CISA | 2023-11-30 | 1036d overdue |
| CVE-2023-4911EUVD-2023-54750 | GNUGNU C Library | GNU C Library Buffer Overflow Vulnerability | CISA | 2023-11-21 | 1045d overdue |
| CVE-2023-36584EUVD-2023-40529 | MicrosoftWindows | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | CISA | 2023-11-16 | 1050d overdue |
| CVE-2023-1671EUVD-2023-23899 | SophosWeb Appliance | Sophos Web Appliance Command Injection Vulnerability | CISA | 2023-11-16 | 1050d overdue |
| CVE-2020-2551EUVD-2020-22344 | OracleFusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | CISA | 2023-11-16 | 1050d overdue |
| CVE-2023-36036EUVD-2023-40020 | MicrosoftWindows | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | CISA | 2023-11-14 | 1052d overdue |
| CVE-2023-36033EUVD-2023-40017 | MicrosoftWindows | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | CISA | 2023-11-14 | 1052d overdue |
| CVE-2023-36025EUVD-2023-40009 | MicrosoftWindows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | CISA | 2023-11-14 | 1052d overdue |
| CVE-2023-47246EUVD-2023-51378 | SysAidSysAid Server | SysAid Server Path Traversal VulnerabilityRansomware | CISA | 2023-11-13 | 1053d overdue |
| CVE-2023-36851EUVD-2023-40771 | JuniperJunos OS | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | CISA | 2023-11-13 | 1070d overdue |
| CVE-2023-36847EUVD-2023-40767 | JuniperJunos OS | Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability | CISA | 2023-11-13 | 1070d overdue |
| CVE-2023-36846EUVD-2023-40766 | JuniperJunos OS | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | CISA | 2023-11-13 | 1070d overdue |
| CVE-2023-36845EUVD-2023-40765 | JuniperJunos OS | Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability | CISA | 2023-11-13 | 1070d overdue |
| CVE-2023-36844EUVD-2023-40764 | JuniperJunos OS | Juniper Junos OS EX Series PHP External Variable Modification Vulnerability | CISA | 2023-11-13 | 1070d overdue |
| CVE-2023-29552EUVD-2023-33094 | IETFService Location Protocol (SLP) | Service Location Protocol (SLP) Denial-of-Service Vulnerability | CISA | 2023-11-08 | 1058d overdue |
| CVE-2023-22518EUVD-2023-26658 | AtlassianConfluence Data Center and Server | Atlassian Confluence Data Center and Server Improper Authorization VulnerabilityRansomware | CISA | 2023-11-07 | 1059d overdue |
| CVE-2023-46604EUVD-2023-2719 | ApacheActiveMQ | Apache ActiveMQ Deserialization of Untrusted Data VulnerabilityRansomware | CISAEU | 2023-11-02 | 1064d overdue |
| CVE-2023-46748EUVD-2023-50917 | F5BIG-IP Configuration Utility | F5 BIG-IP Configuration Utility SQL Injection Vulnerability | CISA | 2023-10-31 | 1066d overdue |
| CVE-2023-46747EUVD-2023-50916 | F5BIG-IP Configuration Utility | F5 BIG-IP Configuration Utility Authentication Bypass VulnerabilityRansomware | CISAEU | 2023-10-31 | 1066d overdue |
| CVE-2023-5631EUVD-2023-57924 | RoundcubeWebmail | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | CISA | 2023-10-26 | 1071d overdue |
| CVE-2023-20273EUVD-2023-24452 | CiscoCisco IOS XE Web UI | Cisco IOS XE Web UI Command Injection Vulnerability | CISA | 2023-10-23 | 1091d overdue |
| CVE-2023-4966EUVD-2023-54802 | CitrixNetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow VulnerabilityRansomware | CISA | 2023-10-18 | 1079d overdue |
| CVE-2023-20198EUVD-2023-24377 | CiscoIOS XE Web UI | Cisco IOS XE Web UI Privilege Escalation Vulnerability | CISA | 2023-10-16 | 1098d overdue |
| CVE-2023-44487EUVD-2023-2795 | IETFHTTP/2 | HTTP/2 Rapid Reset Attack Vulnerability | CISA | 2023-10-10 | 1087d overdue |
| CVE-2023-41763EUVD-2023-46255 | MicrosoftSkype for Business | Microsoft Skype for Business Privilege Escalation Vulnerability | CISA | 2023-10-10 | 1087d overdue |
| CVE-2023-36563EUVD-2023-40509 | MicrosoftWordPad | Microsoft WordPad Information Disclosure Vulnerability | CISA | 2023-10-10 | 1087d overdue |
| CVE-2023-21608EUVD-2023-25775 | AdobeAcrobat and Reader | Adobe Acrobat and Reader Use-After-Free Vulnerability | CISA | 2023-10-10 | 1087d overdue |
| CVE-2023-20109EUVD-2023-24288 | CiscoIOS and IOS XE | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | CISA | 2023-10-10 | 1087d overdue |
| CVE-2023-42824EUVD-2023-47245 | AppleiOS and iPadOS | Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability | CISA | 2023-10-05 | 1092d overdue |
| CVE-2023-40044EUVD-2023-44651 | ProgressWS_FTP Server | Progress WS_FTP Server Deserialization of Untrusted Data VulnerabilityRansomware | CISA | 2023-10-05 | 1092d overdue |
| CVE-2023-22515EUVD-2023-26655 | AtlassianConfluence Data Center and Server | Atlassian Confluence Data Center and Server Broken Access Control VulnerabilityRansomware | CISAEU | 2023-10-05 | 1105d overdue |
| CVE-2023-42793EUVD-2023-47222 | JetBrainsTeamCity | JetBrains TeamCity Authentication Bypass VulnerabilityRansomware | CISA | 2023-10-04 | 1093d overdue |
| CVE-2023-28229EUVD-2023-31937 | MicrosoftWindows CNG Key Isolation Service | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | CISA | 2023-10-04 | 1093d overdue |
| CVE-2023-4211EUVD-2023-54085 | ArmMali GPU Kernel Driver | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | CISA | 2023-10-03 | 1094d overdue |
| CVE-2023-5217EUVD-2023-2578 | GoogleChromium libvpx | Google Chromium libvpx Heap Buffer Overflow Vulnerability | CISA | 2023-10-02 | 1095d overdue |
| CVE-2018-14667EUVD-2022-4307 | Red HatJBoss RichFaces Framework | Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability | CISA | 2023-09-28 | 1099d overdue |
| CVE-2023-41993EUVD-2023-46452 | AppleMultiple Products | Apple Multiple Products WebKit Code Execution Vulnerability | CISA | 2023-09-25 | 1102d overdue |
| CVE-2023-41992EUVD-2023-46451 | AppleMultiple Products | Apple Multiple Products Kernel Privilege Escalation Vulnerability | CISA | 2023-09-25 | 1102d overdue |
| CVE-2023-41991EUVD-2023-46450 | AppleMultiple Products | Apple Multiple Products Improper Certificate Validation Vulnerability | CISA | 2023-09-25 | 1102d overdue |
| CVE-2023-41179EUVD-2023-45696 | Trend MicroApex One and Worry-Free Business Security | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability | CISA | 2023-09-21 | 1106d overdue |
| CVE-2023-28434EUVD-2023-2395 | MinIOMinIO | MinIO Security Feature Bypass Vulnerability | CISA | 2023-09-19 | 1108d overdue |
| CVE-2022-22265EUVD-2022-27412 | SamsungMobile Devices | Samsung Mobile Devices Use-After-Free Vulnerability | CISA | 2023-09-18 | 1109d overdue |
| CVE-2021-3129EUVD-2021-0599 | LaravelIgnition | Laravel Ignition File Upload VulnerabilityRansomware | CISA | 2023-09-18 | 1109d overdue |
| CVE-2017-6884EUVD-2017-15938 | ZyxelEMG2926 Routers | Zyxel EMG2926 Routers Command Injection VulnerabilityRansomware | CISA | 2023-09-18 | 1109d overdue |
| CVE-2014-8361EUVD-2014-8198 | RealtekSDK | Realtek SDK Improper Input Validation Vulnerability | CISA | 2023-09-18 | 1109d overdue |
| CVE-2023-26369EUVD-2023-30189 | AdobeAcrobat and Reader | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | CISA | 2023-09-14 | 1113d overdue |
| CVE-2023-4863EUVD-2023-2533 | GoogleChromium WebP | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | CISA | 2023-09-13 | 1114d overdue |
| CVE-2023-35674EUVD-2023-39674 | AndroidFramework | Android Framework Privilege Escalation Vulnerability | CISA | 2023-09-13 | 1114d overdue |
| CVE-2023-20269EUVD-2023-24448 | CiscoAdaptive Security Appliance and Firepower Threat Defense | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityRansomware | CISA | 2023-09-13 | 1114d overdue |
| CVE-2023-36802EUVD-2023-40740 | MicrosoftStreaming Service Proxy | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | CISA | 2023-09-12 | 1115d overdue |
| CVE-2023-36761EUVD-2023-40704 | MicrosoftWord | Microsoft Word Information Disclosure Vulnerability | CISA | 2023-09-12 | 1115d overdue |
| CVE-2023-41064EUVD-2023-45585 | AppleiOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability | CISA | 2023-09-11 | 1116d overdue |
| CVE-2023-41061EUVD-2023-45582 | AppleiOS, iPadOS, and watchOS | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability | CISA | 2023-09-11 | 1116d overdue |
| CVE-2023-33246EUVD-2023-2175 | ApacheRocketMQ | Apache RocketMQ Command Execution Vulnerability | CISA | 2023-09-06 | 1121d overdue |
| CVE-2023-38831EUVD-2023-42604 | RARLABWinRAR | RARLAB WinRAR Code Execution VulnerabilityRansomware | CISA | 2023-08-24 | 1134d overdue |
| CVE-2023-32315EUVD-2023-1548 | Ignite RealtimeOpenfire | Ignite Realtime Openfire Path Traversal Vulnerability | CISA | 2023-08-24 | 1134d overdue |
| CVE-2023-38035EUVD-2023-41862 | IvantiSentry | Ivanti Sentry Authentication Bypass VulnerabilityRansomware | CISA | 2023-08-22 | 1136d overdue |
| CVE-2023-27532EUVD-2023-31287 | VeeamBackup & Replication | Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function VulnerabilityRansomware | CISA | 2023-08-22 | 1136d overdue |
| CVE-2023-26359EUVD-2023-30180 | AdobeColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | CISA | 2023-08-21 | 1137d overdue |
| CVE-2023-24489EUVD-2023-28507 | CitrixContent Collaboration | Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | CISA | 2023-08-16 | 1142d overdue |
| CVE-2023-38180EUVD-2023-2363 | Microsoft.NET Core and Visual Studio | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability | CISA | 2023-08-09 | 1149d overdue |
| CVE-2017-18368EUVD-2017-9484 | ZyxelP660HN-T1A Routers | Zyxel P660HN-T1A Routers Command Injection Vulnerability | CISA | 2023-08-07 | 1151d overdue |
| CVE-2023-35081EUVD-2023-39116 | IvantiEndpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | CISA | 2023-07-31 | 1158d overdue |
| CVE-2023-37580EUVD-2023-41465 | SynacorZimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | CISA | 2023-07-27 | 1162d overdue |
| CVE-2023-38606EUVD-2023-42405 | AppleMultiple Products | Apple Multiple Products Kernel Unspecified Vulnerability | CISA | 2023-07-26 | 1163d overdue |
| CVE-2023-35078EUVD-2023-39113 | IvantiEndpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile Authentication Bypass VulnerabilityRansomware | CISA | 2023-07-25 | 1164d overdue |
| CVE-2023-38205EUVD-2023-42025 | AdobeColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | CISA | 2023-07-20 | 1169d overdue |
| CVE-2023-29298EUVD-2023-32873 | AdobeColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | CISA | 2023-07-20 | 1169d overdue |
| CVE-2023-3519EUVD-2023-44176 | CitrixNetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Code Injection VulnerabilityRansomware | CISAEU | 2023-07-19 | 1170d overdue |
| CVE-2023-36884EUVD-2023-40804 | MicrosoftWindows | Microsoft Windows Search Remote Code Execution VulnerabilityRansomware | CISA | 2023-07-17 | 1150d overdue |
| CVE-2023-37450EUVD-2023-41350 | AppleMultiple Products | Apple Multiple Products WebKit Code Execution Vulnerability | CISA | 2023-07-13 | 1176d overdue |
| CVE-2022-29303EUVD-2022-33646 | SolarViewCompact | SolarView Compact Command Injection Vulnerability | CISA | 2023-07-13 | 1176d overdue |
| CVE-2023-36874EUVD-2023-40794 | MicrosoftWindows | Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | CISA | 2023-07-11 | 1178d overdue |
| CVE-2023-35311EUVD-2023-39314 | MicrosoftOutlook | Microsoft Outlook Security Feature Bypass Vulnerability | CISA | 2023-07-11 | 1178d overdue |
| CVE-2023-32049EUVD-2023-36336 | MicrosoftWindows | Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | CISA | 2023-07-11 | 1178d overdue |
| CVE-2023-32046EUVD-2023-36333 | MicrosoftWindows | Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | CISA | 2023-07-11 | 1178d overdue |
| CVE-2022-31199EUVD-2022-53293 | NetwrixAuditor | Netwrix Auditor Insecure Object Deserialization VulnerabilityRansomware | CISA | 2023-07-11 | 1178d overdue |
| CVE-2021-29256EUVD-2021-15895 | ArmMali Graphics Processing Unit (GPU) | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | CISA | 2023-07-07 | 1182d overdue |
| CVE-2021-25489EUVD-2021-12385 | SamsungMobile Devices | Samsung Mobile Devices Improper Input Validation Vulnerability | CISA | 2023-06-29 | 1190d overdue |
| CVE-2021-25487EUVD-2021-12383 | SamsungMobile Devices | Samsung Mobile Devices Out-of-Bounds Read Vulnerability | CISA | 2023-06-29 | 1190d overdue |
| CVE-2021-25395EUVD-2021-12291 | SamsungMobile Devices | Samsung Mobile Devices Race Condition Vulnerability | CISA | 2023-06-29 | 1190d overdue |
| CVE-2021-25394EUVD-2021-12290 | SamsungMobile Devices | Samsung Mobile Devices Race Condition Vulnerability | CISA | 2023-06-29 | 1190d overdue |
| CVE-2021-25372EUVD-2021-12268 | SamsungMobile Devices | Samsung Mobile Devices Improper Boundary Check Vulnerability | CISA | 2023-06-29 | 1190d overdue |
| CVE-2021-25371EUVD-2021-12267 | SamsungMobile Devices | Samsung Mobile Devices Unspecified Vulnerability | CISA | 2023-06-29 | 1190d overdue |
| CVE-2019-20500EUVD-2019-11044 | D-LinkDWL-2600AP Access Point | D-Link DWL-2600AP Access Point Command Injection Vulnerability | CISA | 2023-06-29 | 1190d overdue |
| CVE-2019-17621EUVD-2019-7939 | D-LinkDIR-859 Router | D-Link DIR-859 Router Command Execution Vulnerability | CISA | 2023-06-29 | 1190d overdue |
| CVE-2023-32439EUVD-2023-36683 | AppleMultiple Products | Apple Multiple Products WebKit Type Confusion Vulnerability | CISA | 2023-06-23 | 1196d overdue |
| CVE-2023-32435EUVD-2023-36679 | AppleMultiple Products | Apple Multiple Products WebKit Memory Corruption Vulnerability | CISA | 2023-06-23 | 1196d overdue |
| CVE-2023-32434EUVD-2023-36678 | AppleMultiple Products | Apple Multiple Products Integer Overflow Vulnerability | CISA | 2023-06-23 | 1196d overdue |
| CVE-2023-27992EUVD-2023-31717 | ZyxelMultiple Network-Attached Storage (NAS) Devices | Zyxel Multiple NAS Devices Command Injection Vulnerability | CISA | 2023-06-23 | 1196d overdue |
| CVE-2023-20867EUVD-2023-25040 | VMwareTools | VMware Tools Authentication Bypass Vulnerability | CISA | 2023-06-23 | 1196d overdue |
| CVE-2023-20887EUVD-2023-25058 | VMwareAria Operations for Networks | Vmware Aria Operations for Networks Command Injection Vulnerability | CISA | 2023-06-22 | 1197d overdue |
| CVE-2021-44026EUVD-2021-30885 | RoundcubeRoundcube Webmail | Roundcube Webmail SQL Injection Vulnerability | CISA | 2023-06-22 | 1197d overdue |
| CVE-2020-35730EUVD-2020-23386 | RoundcubeRoundcube Webmail | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | CISA | 2023-06-22 | 1197d overdue |
| CVE-2020-12641EUVD-2020-4942 | RoundcubeRoundcube Webmail | Roundcube Webmail Remote Code Execution Vulnerability | CISA | 2023-06-22 | 1197d overdue |
| CVE-2016-9079EUVD-2016-9900 | MozillaFirefox, Firefox ESR, and Thunderbird | Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability | CISA | 2023-06-22 | 1197d overdue |
| CVE-2016-0165EUVD-2016-0203 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation Vulnerability | CISA | 2023-06-22 | 1197d overdue |
| CVE-2023-27997EUVD-2023-31722 | FortinetFortiOS and FortiProxy SSL-VPN | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow VulnerabilityRansomware | CISAEU | 2023-06-13 | 1206d overdue |
| CVE-2023-3079EUVD-2023-43770 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2023-06-07 | 1212d overdue |
| CVE-2023-33010EUVD-2023-37199 | ZyxelMultiple Firewalls | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | CISA | 2023-06-05 | 1214d overdue |
| CVE-2023-33009EUVD-2023-37198 | ZyxelMultiple Firewalls | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | CISA | 2023-06-05 | 1214d overdue |
| CVE-2023-34362EUVD-2023-38442 | ProgressMOVEit Transfer | Progress MOVEit Transfer SQL Injection VulnerabilityRansomware | CISA | 2023-06-02 | 1217d overdue |
| CVE-2023-28771EUVD-2023-32406 | ZyxelMultiple Firewalls | Zyxel Multiple Firewalls OS Command Injection Vulnerability | CISA | 2023-05-31 | 1219d overdue |
| CVE-2023-2868EUVD-2023-34316 | Barracuda NetworksEmail Security Gateway (ESG) Appliance | Barracuda Networks ESG Appliance Improper Input Validation Vulnerability | CISA | 2023-05-26 | 1224d overdue |
| CVE-2023-32409EUVD-2023-36653 | AppleMultiple Products | Apple Multiple Products WebKit Sandbox Escape Vulnerability | CISA | 2023-05-22 | 1228d overdue |
| CVE-2023-32373EUVD-2023-36617 | AppleMultiple Products | Apple Multiple Products WebKit Use-After-Free Vulnerability | CISA | 2023-05-22 | 1228d overdue |
| CVE-2023-28204EUVD-2023-31912 | AppleMultiple Products | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | CISA | 2023-05-22 | 1228d overdue |
| CVE-2023-21492EUVD-2023-25660 | SamsungMobile Devices | Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability | CISA | 2023-05-19 | 1231d overdue |
| CVE-2016-6415EUVD-2016-7338 | CiscoIOS, IOS XR, and IOS XE | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability | CISA | 2023-05-19 | 1231d overdue |
| CVE-2004-1464EUVD-2004-1458 | CiscoIOS | Cisco IOS Denial-of-Service Vulnerability | CISA | 2023-05-19 | 1231d overdue |
| CVE-2023-25717EUVD-2023-29627 | Ruckus WirelessMultiple Products | Multiple Ruckus Wireless Products CSRF and RCE Vulnerability | CISA | 2023-05-12 | 1238d overdue |
| CVE-2021-3560EUVD-2021-26871 | Red HatPolkit | Red Hat Polkit Incorrect Authorization Vulnerability | CISA | 2023-05-12 | 1238d overdue |
| CVE-2016-8735EUVD-2022-3642 | ApacheTomcat | Apache Tomcat Remote Code Execution Vulnerability | CISA | 2023-05-12 | 1238d overdue |
| CVE-2016-3427EUVD-2016-4453 | OracleJava SE and JRockit | Oracle Java SE and JRockit Unspecified Vulnerability | CISA | 2023-05-12 | 1238d overdue |
| CVE-2015-5317EUVD-2015-5288 | JenkinsJenkins User Interface (UI) | Jenkins User Interface (UI) Information Disclosure Vulnerability | CISA | 2023-05-12 | 1238d overdue |
| CVE-2014-0196EUVD-2014-0247 | LinuxKernel | Linux Kernel Race Condition Vulnerability | CISA | 2023-05-12 | 1238d overdue |
| CVE-2010-3904EUVD-2010-3882 | LinuxKernel | Linux Kernel Improper Input Validation Vulnerability | CISA | 2023-05-12 | 1238d overdue |
| CVE-2023-29336EUVD-2023-32910 | MicrosoftWin32k | Microsoft Win32K Privilege Escalation Vulnerability | CISA | 2023-05-09 | 1241d overdue |
| CVE-2023-21839EUVD-2023-26005 | OracleWebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | CISA | 2023-05-01 | 1249d overdue |
| CVE-2023-1389EUVD-2023-23645 | TP-LinkArcher AX21 | TP-Link Archer AX-21 Command Injection Vulnerability | CISA | 2023-05-01 | 1249d overdue |
| CVE-2021-45046EUVD-2021-34769 | ApacheLog4j2 | Apache Log4j2 Deserialization of Untrusted Data VulnerabilityRansomware | CISA | 2023-05-01 | 1249d overdue |
| CVE-2023-28432EUVD-2023-32124 | MinIOMinIO | MinIO Information Disclosure Vulnerability | CISA | 2023-04-21 | 1259d overdue |
| CVE-2023-27350EUVD-2023-31126 | PaperCutMF/NG | PaperCut MF/NG Improper Access Control VulnerabilityRansomware | CISA | 2023-04-21 | 1259d overdue |
| CVE-2023-2136EUVD-2023-33656 | GoogleChromium Skia | Google Chrome Skia Integer Overflow Vulnerability | CISA | 2023-04-21 | 1259d overdue |
| CVE-2017-6742EUVD-2017-15796 | CiscoIOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | CISA | 2023-04-19 | 1261d overdue |
| CVE-2023-2033EUVD-2023-33560 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2023-04-17 | 1263d overdue |
| CVE-2019-8526EUVD-2019-17916 | ApplemacOS | Apple macOS Use-After-Free Vulnerability | CISA | 2023-04-17 | 1263d overdue |
| CVE-2023-29492EUVD-2023-33059 | Novi SurveyNovi Survey | Novi Survey Insecure Deserialization Vulnerability | CISA | 2023-04-13 | 1267d overdue |
| CVE-2023-20963EUVD-2023-25131 | AndroidFramework | Android Framework Privilege Escalation Vulnerability | CISA | 2023-04-13 | 1267d overdue |
| CVE-2023-28252EUVD-2023-31960 | MicrosoftWindows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityRansomware | CISA | 2023-04-11 | 1269d overdue |
| CVE-2023-28206EUVD-2023-31914 | AppleiOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability | CISA | 2023-04-10 | 1270d overdue |
| CVE-2023-28205EUVD-2023-31913 | AppleMultiple Products | Apple Multiple Products WebKit Use-After-Free Vulnerability | CISA | 2023-04-10 | 1270d overdue |
| CVE-2023-26083EUVD-2023-29957 | ArmMali Graphics Processing Unit (GPU) | Arm Mali GPU Kernel Driver Information Disclosure Vulnerability | CISA | 2023-04-07 | 1273d overdue |
| CVE-2021-27878EUVD-2021-14616 | VeritasBackup Exec Agent | Veritas Backup Exec Agent Command Execution VulnerabilityRansomware | CISA | 2023-04-07 | 1273d overdue |
| CVE-2021-27877EUVD-2021-14615 | VeritasBackup Exec Agent | Veritas Backup Exec Agent Improper Authentication VulnerabilityRansomware | CISA | 2023-04-07 | 1273d overdue |
| CVE-2021-27876EUVD-2021-14614 | VeritasBackup Exec Agent | Veritas Backup Exec Agent File Access VulnerabilityRansomware | CISA | 2023-04-07 | 1273d overdue |
| CVE-2019-1388EUVD-2019-9945 | MicrosoftWindows | Microsoft Windows Certificate Dialog Privilege Escalation VulnerabilityRansomware | CISA | 2023-04-07 | 1273d overdue |
| CVE-2022-27926EUVD-2022-32414 | SynacorZimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | CISA | 2023-04-03 | 1277d overdue |
| CVE-2023-0266EUVD-2023-12345 | LinuxKernel | Linux Kernel Use-After-Free Vulnerability | CISA | 2023-03-30 | 1281d overdue |
| CVE-2022-42948EUVD-2022-46004 | FortraCobalt Strike | Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability | CISA | 2023-03-30 | 1281d overdue |
| CVE-2022-39197EUVD-2022-41742 | FortraCobalt Strike | Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability | CISA | 2023-03-30 | 1281d overdue |
| CVE-2022-38181EUVD-2022-40775 | ArmMali Graphics Processing Unit (GPU) | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | CISA | 2023-03-30 | 1281d overdue |
| CVE-2022-3038EUVD-2022-42470 | GoogleChromium Network Service | Google Chromium Network Service Use-After-Free Vulnerability | CISA | 2023-03-30 | 1281d overdue |
| CVE-2022-22706EUVD-2022-27849 | ArmMali Graphics Processing Unit (GPU) | Arm Mali GPU Kernel Driver Unspecified Vulnerability | CISA | 2023-03-30 | 1281d overdue |
| CVE-2021-30900EUVD-2021-17817 | AppleiOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | CISA | 2023-03-30 | 1281d overdue |
| CVE-2017-7494EUVD-2017-16511 | SambaSamba | Samba Remote Code Execution VulnerabilityRansomware | CISA | 2023-03-30 | 1281d overdue |
| CVE-2013-3163EUVD-2013-3101 | MicrosoftInternet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | CISA | 2023-03-30 | 1281d overdue |
| CVE-2023-26360EUVD-2023-30181 | AdobeColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | CISA | 2023-03-15 | 1296d overdue |
| CVE-2023-24880EUVD-2023-28870 | MicrosoftWindows | Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityRansomware | CISA | 2023-03-14 | 1297d overdue |
| CVE-2023-23397EUVD-2023-27497 | MicrosoftOffice | Microsoft Office Outlook Privilege Escalation Vulnerability | CISA | 2023-03-14 | 1297d overdue |
| CVE-2022-41328EUVD-2022-44535 | FortinetFortiOS | Fortinet FortiOS Path Traversal Vulnerability | CISA | 2023-03-14 | 1297d overdue |
| CVE-2021-39144EUVD-2021-1771 | XStreamXStream | XStream Remote Code Execution Vulnerability | CISA | 2023-03-10 | 1301d overdue |
| CVE-2020-5741EUVD-2020-26900 | PlexMedia Server | Plex Media Server Remote Code Execution Vulnerability | CISA | 2023-03-10 | 1301d overdue |
| CVE-2022-35914EUVD-2022-38785 | TeclibGLPI | Teclib GLPI Remote Code Execution Vulnerability | CISA | 2023-03-07 | 1304d overdue |
| CVE-2022-33891EUVD-2022-0217 | ApacheSpark | Apache Spark Command Injection Vulnerability | CISA | 2023-03-07 | 1304d overdue |
| CVE-2022-28810EUVD-2022-33248 | ZohoManageEngine | Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability | CISA | 2023-03-07 | 1304d overdue |
| CVE-2022-36537EUVD-2022-6491 | ZK FrameworkAuUploader | ZK Framework AuUploader Unspecified VulnerabilityRansomware | CISA | 2023-02-27 | 1312d overdue |
| CVE-2022-47986EUVD-2022-50700 | IBMAspera Faspex | IBM Aspera Faspex Code Execution VulnerabilityRansomware | CISA | 2023-02-21 | 1318d overdue |
| CVE-2022-41223EUVD-2022-44464 | MitelMiVoice Connect | Mitel MiVoice Connect Code Injection VulnerabilityRansomware | CISA | 2023-02-21 | 1318d overdue |
| CVE-2022-40765EUVD-2022-44031 | MitelMiVoice Connect | Mitel MiVoice Connect Command Injection VulnerabilityRansomware | CISA | 2023-02-21 | 1318d overdue |
| CVE-2022-46169EUVD-2022-48996 | CactiCacti | Cacti Command Injection Vulnerability | CISA | 2023-02-16 | 1323d overdue |
| CVE-2023-23529EUVD-2023-27629 | AppleMultiple Products | Apple Multiple Products WebKit Type Confusion Vulnerability | CISA | 2023-02-14 | 1325d overdue |
| CVE-2023-23376EUVD-2023-27476 | MicrosoftWindows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityRansomware | CISA | 2023-02-14 | 1325d overdue |
| CVE-2023-21823EUVD-2023-25989 | MicrosoftWindows | Microsoft Windows Graphic Component Privilege Escalation Vulnerability | CISA | 2023-02-14 | 1325d overdue |
| CVE-2023-21715EUVD-2023-25882 | MicrosoftOffice | Microsoft Office Publisher Security Feature Bypass Vulnerability | CISA | 2023-02-14 | 1325d overdue |
| CVE-2023-0669EUVD-2023-0644 | FortraGoAnywhere MFT | Fortra GoAnywhere MFT Remote Code Execution VulnerabilityRansomware | CISA | 2023-02-10 | 1329d overdue |
| CVE-2022-24990EUVD-2022-29737 | TerraMasterTerraMaster OS | TerraMaster OS Remote Command Execution VulnerabilityRansomware | CISA | 2023-02-10 | 1329d overdue |
| CVE-2015-2291EUVD-2015-2389 | IntelEthernet Diagnostics Driver for Windows | Intel Ethernet Diagnostics Driver for Windows Denial-of-Service VulnerabilityRansomware | CISA | 2023-02-10 | 1329d overdue |
| CVE-2023-22952EUVD-2023-27053 | SugarCRMMultiple Products | Multiple SugarCRM Products Remote Code Execution Vulnerability | CISA | 2023-02-02 | 1337d overdue |
| CVE-2022-21587EUVD-2022-26811 | OracleE-Business Suite | Oracle E-Business Suite Unspecified VulnerabilityRansomware | CISA | 2023-02-02 | 1337d overdue |
| CVE-2017-11357EUVD-2017-2986 | TelerikUser Interface (UI) for ASP.NET AJAX | Telerik UI for ASP.NET AJAX Insecure Direct Object Reference VulnerabilityRansomware | CISA | 2023-01-26 | 1344d overdue |
| CVE-2022-47966EUVD-2022-50684 | ZohoManageEngine | Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityRansomware | CISA | 2023-01-23 | 1347d overdue |
| CVE-2022-44877EUVD-2022-47807 | CWPControl Web Panel | CWP Control Web Panel OS Command Injection Vulnerability | CISA | 2023-01-17 | 1353d overdue |
| CVE-2023-21674EUVD-2023-25841 | MicrosoftWindows | Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability | CISA | 2023-01-10 | 1360d overdue |
| CVE-2022-41080EUVD-2022-44324 | MicrosoftExchange Server | Microsoft Exchange Server Privilege Escalation VulnerabilityRansomware | CISA | 2023-01-10 | 1360d overdue |
| CVE-2018-5430EUVD-2018-17200 | TIBCOJasperReports | TIBCO JasperReports Server Information Disclosure Vulnerability | CISA | 2022-12-29 | 1372d overdue |
| CVE-2018-18809EUVD-2018-10525 | TIBCOJasperReports | TIBCO JasperReports Library Directory Traversal Vulnerability | CISA | 2022-12-29 | 1372d overdue |
| CVE-2022-42856EUVD-2022-45919 | AppleiOS | Apple iOS Type Confusion Vulnerability | CISA | 2022-12-14 | 1387d overdue |
| CVE-2022-44698EUVD-2022-47632 | MicrosoftDefender | Microsoft Defender SmartScreen Security Feature Bypass VulnerabilityRansomware | CISA | 2022-12-13 | 1388d overdue |
| CVE-2022-42475EUVD-2022-45545 | FortinetFortiOS | Fortinet FortiOS Heap-Based Buffer Overflow VulnerabilityRansomware | CISA | 2022-12-13 | 1388d overdue |
| CVE-2022-27518EUVD-2022-32019 | CitrixApplication Delivery Controller (ADC) and Gateway | Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | CISA | 2022-12-13 | 1388d overdue |
| CVE-2022-26501EUVD-2022-31059 | VeeamBackup & Replication | Veeam Backup & Replication Remote Code Execution VulnerabilityRansomware | CISA | 2022-12-13 | 1388d overdue |
| CVE-2022-26500EUVD-2022-31058 | VeeamBackup & Replication | Veeam Backup & Replication Remote Code Execution VulnerabilityRansomware | CISA | 2022-12-13 | 1388d overdue |
| CVE-2022-4262EUVD-2022-51618 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2022-12-05 | 1396d overdue |
| CVE-2022-4135EUVD-2022-7297 | GoogleChromium GPU | Google Chromium GPU Heap Buffer Overflow Vulnerability | CISA | 2022-11-28 | 1403d overdue |
| CVE-2021-35587EUVD-2021-22223 | OracleFusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | CISA | 2022-11-28 | 1403d overdue |
| CVE-2022-41049EUVD-2022-44294 | MicrosoftWindows | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | CISA | 2022-11-14 | 1413d overdue |
| CVE-2022-41128EUVD-2022-44371 | MicrosoftWindows | Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | CISA | 2022-11-08 | 1413d overdue |
| CVE-2022-41125EUVD-2022-44368 | MicrosoftWindows | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | CISA | 2022-11-08 | 1413d overdue |
| CVE-2022-41091EUVD-2022-44334 | MicrosoftWindows | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass VulnerabilityRansomware | CISA | 2022-11-08 | 1413d overdue |
| CVE-2022-41073EUVD-2022-44317 | MicrosoftWindows | Microsoft Windows Print Spooler Privilege Escalation VulnerabilityRansomware | CISA | 2022-11-08 | 1413d overdue |
| CVE-2021-25370EUVD-2021-12266 | SamsungMobile Devices | Samsung Mobile Devices Memory Corruption Vulnerability | CISA | 2022-11-08 | 1423d overdue |
| CVE-2021-25369EUVD-2021-12265 | SamsungMobile Devices | Samsung Mobile Devices Improper Access Control Vulnerability | CISA | 2022-11-08 | 1423d overdue |
| CVE-2021-25337EUVD-2021-12233 | SamsungMobile Devices | Samsung Mobile Devices Improper Access Control Vulnerability | CISA | 2022-11-08 | 1423d overdue |
| CVE-2022-3723EUVD-2022-43079 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2022-10-28 | 1434d overdue |
| CVE-2022-42827EUVD-2022-45890 | AppleiOS and iPadOS | Apple iOS and iPadOS Out-of-Bounds Write Vulnerability | CISA | 2022-10-25 | 1437d overdue |
| CVE-2020-3433EUVD-2020-24704 | CiscoAnyConnect Secure | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityRansomware | CISA | 2022-10-24 | 1438d overdue |
| CVE-2020-3153EUVD-2020-24424 | CiscoAnyConnect Secure | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityRansomware | CISA | 2022-10-24 | 1438d overdue |
| CVE-2018-19323EUVD-2018-11021 | GIGABYTEMultiple Products | GIGABYTE Multiple Products Privilege Escalation VulnerabilityRansomware | CISA | 2022-10-24 | 1438d overdue |
| CVE-2018-19322EUVD-2018-11020 | GIGABYTEMultiple Products | GIGABYTE Multiple Products Code Execution VulnerabilityRansomware | CISA | 2022-10-24 | 1438d overdue |
| CVE-2018-19321EUVD-2018-11019 | GIGABYTEMultiple Products | GIGABYTE Multiple Products Privilege Escalation VulnerabilityRansomware | CISA | 2022-10-24 | 1438d overdue |
| CVE-2018-19320EUVD-2018-11018 | GIGABYTEMultiple Products | GIGABYTE Multiple Products Unspecified VulnerabilityRansomware | CISA | 2022-10-24 | 1438d overdue |
| CVE-2022-41352EUVD-2022-44557 | SynacorZimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityRansomware | CISA | 2022-10-20 | 1442d overdue |
| CVE-2021-3493EUVD-2021-26815 | LinuxKernel | Linux Kernel Privilege Escalation Vulnerability | CISA | 2022-10-20 | 1442d overdue |
| CVE-2022-41033EUVD-2022-44278 | MicrosoftWindows COM+ Event System Service | Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability | CISA | 2022-10-11 | 1451d overdue |
| CVE-2022-40684EUVD-2022-43955 | FortinetMultiple Products | Fortinet Multiple Products Authentication Bypass VulnerabilityRansomware | CISA | 2022-10-11 | 1451d overdue |
| CVE-2022-41082EUVD-2022-44326 | MicrosoftExchange Server | Microsoft Exchange Server Remote Code Execution VulnerabilityRansomware | CISA | 2022-09-30 | 1462d overdue |
| CVE-2022-41040EUVD-2022-44285 | MicrosoftExchange Server | Microsoft Exchange Server Server-Side Request Forgery VulnerabilityRansomware | CISA | 2022-09-30 | 1462d overdue |
| CVE-2022-36804EUVD-2022-39504 | AtlassianBitbucket Server and Data Center | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | CISA | 2022-09-30 | 1462d overdue |
| CVE-2022-3236EUVD-2022-42644 | SophosFirewall | Sophos Firewall Code Injection Vulnerability | CISA | 2022-09-23 | 1469d overdue |
| CVE-2022-35405EUVD-2022-38295 | ZohoManageEngine | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | CISA | 2022-09-22 | 1470d overdue |
| CVE-2022-40139EUVD-2022-43457 | Trend MicroApex One and Apex One as a Service | Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability | CISA | 2022-09-15 | 1477d overdue |
| CVE-2013-6282EUVD-2013-6110 | LinuxKernel | Linux Kernel Improper Input Validation Vulnerability | CISA | 2022-09-15 | 1477d overdue |
| CVE-2013-2597EUVD-2013-2539 | Code AuroraACDB Audio Driver | Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability | CISA | 2022-09-15 | 1477d overdue |
| CVE-2013-2596EUVD-2013-2538 | LinuxKernel | Linux Kernel Integer Overflow Vulnerability | CISA | 2022-09-15 | 1477d overdue |
| CVE-2013-2094EUVD-2013-2068 | LinuxKernel | Linux Kernel Privilege Escalation Vulnerability | CISA | 2022-09-15 | 1477d overdue |
| CVE-2010-2568EUVD-2010-2572 | MicrosoftWindows | Microsoft Windows Remote Code Execution Vulnerability | CISA | 2022-09-15 | 1477d overdue |
| CVE-2022-37969EUVD-2022-40576 | MicrosoftWindows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityRansomware | CISA | 2022-09-14 | 1478d overdue |
| CVE-2022-32917EUVD-2022-35983 | AppleiOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability | CISA | 2022-09-14 | 1478d overdue |
| CVE-2022-3075EUVD-2022-42504 | GoogleChromium Mojo | Google Chromium Mojo Insufficient Data Validation Vulnerability | CISA | 2022-09-08 | 1484d overdue |
| CVE-2022-27593EUVD-2022-32094 | QNAPPhoto Station | QNAP Photo Station Externally Controlled Reference VulnerabilityRansomware | CISA | 2022-09-08 | 1484d overdue |
| CVE-2022-26258EUVD-2022-30821 | D-LinkDIR-820L | D-Link DIR-820L Remote Code Execution Vulnerability | CISA | 2022-09-08 | 1484d overdue |
| CVE-2020-9934EUVD-2020-30713 | AppleiOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Input Validation Vulnerability | CISA | 2022-09-08 | 1484d overdue |
| CVE-2018-7445EUVD-2018-19176 | MikroTikRouterOS | MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability | CISA | 2022-09-08 | 1484d overdue |
| CVE-2018-6530EUVD-2018-18282 | D-LinkMultiple Routers | D-Link Multiple Routers OS Command Injection VulnerabilityRansomware | CISA | 2022-09-08 | 1484d overdue |
| CVE-2018-2628EUVD-2018-14483 | OracleWebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | CISA | 2022-09-08 | 1484d overdue |
| CVE-2018-13374EUVD-2018-5318 | FortinetFortiOS and FortiADC | Fortinet FortiOS and FortiADC Improper Access Control VulnerabilityRansomware | CISA | 2022-09-08 | 1484d overdue |
| CVE-2017-5521EUVD-2017-14625 | NETGEARMultiple Devices | NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability | CISA | 2022-09-08 | 1484d overdue |
| CVE-2011-4723EUVD-2011-4641 | D-LinkDIR-300 Router | D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | CISA | 2022-09-08 | 1484d overdue |
| CVE-2011-1823EUVD-2011-1821 | AndroidAndroid OS | Android OS Privilege Escalation Vulnerability | CISA | 2022-09-08 | 1484d overdue |
| CVE-2022-26352EUVD-2022-30911 | dotCMSdotCMS | dotCMS Unrestricted Upload of File VulnerabilityRansomware | CISA | 2022-08-25 | 1498d overdue |
| CVE-2022-24706EUVD-2022-29572 | ApacheCouchDB | Apache CouchDB Insecure Default Initialization of Resource Vulnerability | CISA | 2022-08-25 | 1498d overdue |
| CVE-2022-24112EUVD-2022-29024 | ApacheAPISIX | Apache APISIX Authentication Bypass Vulnerability | CISA | 2022-08-25 | 1498d overdue |
| CVE-2022-22963EUVD-2022-1654 | VMware TanzuSpring Cloud | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability | CISA | 2022-08-25 | 1498d overdue |
| CVE-2022-2294EUVD-2022-34567 | WebRTCWebRTC | WebRTC Heap Buffer Overflow VulnerabilityRansomware | CISA | 2022-08-25 | 1498d overdue |
| CVE-2021-39226EUVD-2021-2169 | Grafana LabsGrafana | Grafana Authentication Bypass Vulnerability | CISA | 2022-08-25 | 1498d overdue |
| CVE-2021-38406EUVD-2021-24858 | Delta ElectronicsDOPSoft 2 | Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability | CISA | 2022-08-25 | 1498d overdue |
| CVE-2021-31010EUVD-2021-17927 | AppleiOS, macOS, watchOS | Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability | CISA | 2022-08-25 | 1498d overdue |
| CVE-2020-36193EUVD-2021-0874 | PEARArchive_Tar | PEAR Archive_Tar Improper Link Resolution Vulnerability | CISA | 2022-08-25 | 1498d overdue |
| CVE-2020-28949EUVD-2021-0783 | PEARArchive_Tar | PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability | CISA | 2022-08-25 | 1498d overdue |
| CVE-2022-0028EUVD-2022-15249 | Palo Alto NetworksPAN-OS | Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability | CISA | 2022-08-22 | 1501d overdue |
| CVE-2022-32894EUVD-2022-35960 | AppleiOS and macOS | Apple iOS and macOS Out-of-Bounds Write Vulnerability | CISA | 2022-08-18 | 1505d overdue |
| CVE-2022-32893EUVD-2022-35959 | AppleiOS and macOS | Apple iOS and macOS Out-of-Bounds Write Vulnerability | CISA | 2022-08-18 | 1505d overdue |
| CVE-2022-2856EUVD-2022-35090 | GoogleChromium Intents | Google Chromium Intents Insufficient Input Validation Vulnerability | CISA | 2022-08-18 | 1505d overdue |
| CVE-2022-26923EUVD-2022-31469 | MicrosoftActive Directory | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | CISA | 2022-08-18 | 1505d overdue |
| CVE-2022-22536EUVD-2022-27682 | SAPMultiple Products | SAP Multiple Products HTTP Request Smuggling Vulnerability | CISA | 2022-08-18 | 1505d overdue |
| CVE-2022-21971EUVD-2022-27126 | MicrosoftWindows | Microsoft Windows Runtime Remote Code Execution Vulnerability | CISA | 2022-08-18 | 1505d overdue |
| CVE-2017-15944EUVD-2017-7360 | Palo Alto NetworksPAN-OS | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | CISA | 2022-08-18 | 1505d overdue |
| CVE-2022-37042EUVD-2022-39696 | SynacorZimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass VulnerabilityRansomware | CISA | 2022-08-11 | 1512d overdue |
| CVE-2022-27925EUVD-2022-32413 | SynacorZimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityRansomware | CISA | 2022-08-11 | 1512d overdue |
| CVE-2022-34713EUVD-2022-37663 | MicrosoftWindows | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | CISA | 2022-08-09 | 1514d overdue |
| CVE-2022-30333EUVD-2022-52276 | RARLABUnRAR | RARLAB UnRAR Directory Traversal VulnerabilityRansomware | CISA | 2022-08-09 | 1514d overdue |
| CVE-2022-27924EUVD-2022-32412 | SynacorZimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Command Injection VulnerabilityRansomware | CISA | 2022-08-04 | 1519d overdue |
| CVE-2022-26138EUVD-2022-30705 | AtlassianConfluence | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | CISA | 2022-07-29 | 1525d overdue |
| CVE-2022-22047EUVD-2022-27201 | MicrosoftWindows | Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability | CISA | 2022-07-12 | 1542d overdue |
| CVE-2022-26925EUVD-2022-31470 | MicrosoftWindows | Microsoft Windows LSA Spoofing Vulnerability | CISA | 2022-07-01 | 1553d overdue |
| CVE-2022-29499EUVD-2022-33836 | MitelMiVoice Connect | Mitel MiVoice Connect Data Validation VulnerabilityRansomware | CISA | 2022-06-27 | 1557d overdue |
| CVE-2021-4034EUVD-2021-33934 | Red HatPolkit | Red Hat Polkit Out-of-Bounds Read and Write VulnerabilityRansomware | CISA | 2022-06-27 | 1557d overdue |
| CVE-2021-30983EUVD-2021-17900 | AppleiOS and iPadOS | Apple iOS and iPadOS Buffer Overflow Vulnerability | CISA | 2022-06-27 | 1557d overdue |
| CVE-2021-30533EUVD-2021-17454 | GoogleChromium PopupBlocker | Google Chromium PopupBlocker Security Bypass Vulnerability | CISA | 2022-06-27 | 1557d overdue |
| CVE-2020-9907EUVD-2020-30686 | AppleMultiple Products | Apple Multiple Products Memory Corruption Vulnerability | CISA | 2022-06-27 | 1557d overdue |
| CVE-2020-3837EUVD-2020-25102 | AppleMultiple Products | Apple Multiple Products Memory Corruption Vulnerability | CISA | 2022-06-27 | 1557d overdue |
| CVE-2019-8605EUVD-2019-17995 | AppleMultiple Products | Apple Multiple Products Use-After-Free Vulnerability | CISA | 2022-06-27 | 1557d overdue |
| CVE-2018-4344EUVD-2018-16130 | AppleMultiple Products | Apple Multiple Products Memory Corruption Vulnerability | CISA | 2022-06-27 | 1557d overdue |
| CVE-2022-30190EUVD-2022-35396 | MicrosoftWindows | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityRansomware | CISA | 2022-06-14 | 1570d overdue |
| CVE-2021-38163EUVD-2021-24633 | SAPNetWeaver | SAP NetWeaver Unrestricted File Upload Vulnerability | CISA | 2022-06-09 | 1575d overdue |
| CVE-2016-2388EUVD-2016-3472 | SAPNetWeaver | SAP NetWeaver Information Disclosure Vulnerability | CISA | 2022-06-09 | 1575d overdue |
| CVE-2016-2386EUVD-2016-3470 | SAPNetWeaver | SAP NetWeaver SQL Injection Vulnerability | CISA | 2022-06-09 | 1575d overdue |
| CVE-2019-7195EUVD-2019-16739 | QNAPPhoto Station | QNAP Photo Station Path Traversal VulnerabilityRansomware | CISA | 2022-06-08 | 1583d overdue |
| CVE-2019-7194EUVD-2019-16738 | QNAPPhoto Station | QNAP Photo Station Path Traversal VulnerabilityRansomware | CISA | 2022-06-08 | 1583d overdue |
| CVE-2019-7193EUVD-2019-16737 | QNAPQTS | QNAP QTS Improper Input Validation VulnerabilityRansomware | CISA | 2022-06-08 | 1583d overdue |
| CVE-2019-7192EUVD-2019-16736 | QNAPPhoto Station | QNAP Photo Station Improper Access Control VulnerabilityRansomware | CISA | 2022-06-08 | 1583d overdue |
| CVE-2019-5825EUVD-2019-15396 | GoogleChromium V8 | Google Chromium V8 Out-of-Bounds Write Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2019-15271EUVD-2019-6279 | CiscoRV Series Routers | Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2018-6065EUVD-2018-17828 | GoogleChromium V8 | Google Chromium V8 Integer Overflow Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2018-4990EUVD-2018-16775 | AdobeAcrobat and Reader | Adobe Acrobat and Reader Double Free Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2018-17480EUVD-2018-9233 | GoogleChromium V8 | Google Chromium V8 Out-of-Bounds Write Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2018-17463EUVD-2018-9216 | GoogleChromium V8 | Google Chromium V8 Remote Code Execution Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2017-6862EUVD-2017-15916 | NETGEARMultiple Devices | NETGEAR Multiple Devices Buffer Overflow Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2017-5070EUVD-2017-14179 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2017-5030EUVD-2017-14139 | GoogleChromium V8 | Google Chromium V8 Memory Corruption Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2016-5198EUVD-2016-6149 | GoogleChromium V8 | Google Chromium V8 Out-of-Bounds Memory Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2016-1646EUVD-2016-2741 | GoogleChromium V8 | Google Chromium V8 Out-of-Bounds Read Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2013-1331EUVD-2013-1371 | MicrosoftOffice | Microsoft Office Buffer Overflow Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2012-5054EUVD-2012-4978 | AdobeFlash Player | Adobe Flash Player Integer Overflow Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2012-4969EUVD-2012-4893 | MicrosoftInternet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2012-1889EUVD-2012-1899 | MicrosoftXML Core Services | Microsoft XML Core Services Memory Corruption Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2012-0767EUVD-2012-0799 | AdobeFlash Player | Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2012-0754EUVD-2012-0786 | AdobeFlash Player | Adobe Flash Player Memory Corruption Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2012-0151EUVD-2012-0189 | MicrosoftWindows | Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2011-2462EUVD-2011-2451 | AdobeReader and Acrobat | Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2011-0609EUVD-2011-0627 | AdobeFlash Player | Adobe Flash Player Unspecified Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2010-2883EUVD-2010-2887 | AdobeAcrobat and Reader | Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2010-2572EUVD-2010-2576 | MicrosoftPowerPoint | Microsoft PowerPoint Buffer Overflow Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2010-1297EUVD-2010-1326 | AdobeFlash Player | Adobe Flash Player Memory Corruption Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2009-4324EUVD-2009-4292 | AdobeAcrobat and Reader | Adobe Acrobat and Reader Use-After-Free Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2009-3953EUVD-2009-3924 | AdobeAcrobat and Reader | Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2009-1862EUVD-2009-1857 | AdobeAcrobat and Reader, Flash Player | Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2009-0563EUVD-2009-0567 | MicrosoftOffice | Microsoft Office Buffer Overflow Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2009-0557EUVD-2009-0561 | MicrosoftOffice | Microsoft Office Object Record Corruption Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2008-0655EUVD-2008-0665 | AdobeAcrobat and Reader | Adobe Acrobat and Reader Unspecified Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2007-5659EUVD-2007-5631 | AdobeAcrobat and Reader | Adobe Acrobat and Reader Buffer Overflow Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2006-2492EUVD-2006-2492 | MicrosoftWord | Microsoft Word Malformed Object Pointer Vulnerability | CISA | 2022-06-08 | 1583d overdue |
| CVE-2022-26134EUVD-2022-30701 | AtlassianConfluence Server/Data Center | Atlassian Confluence Server and Data Center Remote Code Execution VulnerabilityRansomware | CISAEU | 2022-06-02 | 1599d overdue |
| CVE-2019-3010EUVD-2019-12649 | OracleSolaris | Oracle Solaris Privilege Escalation Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2016-7256EUVD-2016-8112 | MicrosoftWindows | Microsoft Windows Open Type Font Remote Code Execution Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2016-3393EUVD-2016-4419 | MicrosoftWindows | Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2016-1010EUVD-2016-2114 | AdobeFlash Player and AIR | Adobe Flash Player and AIR Integer Overflow Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2016-0984EUVD-2016-0994 | AdobeFlash Player and AIR | Adobe Flash Player and AIR Use-After-Free Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2016-0034EUVD-2016-0072 | MicrosoftSilverlight | Microsoft Silverlight Runtime Remote Code Execution VulnerabilityRansomware | CISA | 2022-05-25 | 1590d overdue |
| CVE-2015-8651EUVD-2015-8528 | AdobeFlash Player | Adobe Flash Player Integer Overflow Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2015-6175EUVD-2015-6118 | MicrosoftWindows | Microsoft Windows Kernel Privilege Escalation Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2015-4495EUVD-2015-4515 | MozillaFirefox | Mozilla Firefox Security Feature Bypass Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2015-2425EUVD-2015-2518 | MicrosoftInternet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2015-2360EUVD-2015-2453 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2015-1769EUVD-2015-1899 | MicrosoftWindows | Microsoft Windows Mount Manager Privilege Escalation Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2015-1671EUVD-2015-1801 | MicrosoftWindows | Microsoft Windows Remote Code Execution Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2015-0310EUVD-2015-0323 | AdobeFlash Player | Adobe Flash Player ASLR Bypass Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2015-0071EUVD-2015-0109 | MicrosoftInternet Explorer | Microsoft Internet Explorer ASLR Bypass Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2015-0016EUVD-2015-0054 | MicrosoftWindows | Microsoft Windows TS WebProxy Directory Traversal Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2014-8439EUVD-2014-8276 | AdobeFlash Player | Adobe Flash Player Dereferenced Pointer Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2014-4148EUVD-2014-4079 | MicrosoftWindows | Microsoft Windows Remote Code Execution Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2014-4123EUVD-2014-4054 | MicrosoftInternet Explorer | Microsoft Internet Explorer Privilege Escalation Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2014-4077EUVD-2014-4008 | MicrosoftInput Method Editor (IME) Japanese | Microsoft IME Japanese Privilege Escalation Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2014-3153EUVD-2014-3171 | LinuxKernel | Linux Kernel Privilege Escalation Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2014-2817EUVD-2014-2844 | MicrosoftInternet Explorer | Microsoft Internet Explorer Privilege Escalation Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2014-0546EUVD-2014-0577 | AdobeReader and Acrobat | Adobe Reader and Acrobat Sandbox Bypass Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2013-7331EUVD-2013-7105 | MicrosoftInternet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2013-3993EUVD-2013-3925 | IBMInfoSphere BigInsights | IBM InfoSphere BigInsights Invalid Input VulnerabilityRansomware | CISA | 2022-05-25 | 1590d overdue |
| CVE-2013-3896EUVD-2013-3828 | MicrosoftSilverlight | Microsoft Silverlight Information Disclosure Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2013-2423EUVD-2013-2369 | OracleJava Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2013-0431EUVD-2013-0442 | OracleJava Runtime Environment (JRE) | Oracle JRE Sandbox Bypass VulnerabilityRansomware | CISA | 2022-05-25 | 1590d overdue |
| CVE-2013-0422EUVD-2013-0433 | OracleJava Runtime Environment (JRE) | Oracle JRE Remote Code Execution VulnerabilityRansomware | CISA | 2022-05-25 | 1590d overdue |
| CVE-2013-0074EUVD-2013-0117 | MicrosoftSilverlight | Microsoft Silverlight Double Dereference VulnerabilityRansomware | CISA | 2022-05-25 | 1590d overdue |
| CVE-2012-1710EUVD-2012-1720 | OracleFusion Middleware | Oracle Fusion Middleware Unspecified VulnerabilityRansomware | CISA | 2022-05-25 | 1590d overdue |
| CVE-2010-1428EUVD-2010-1456 | Red HatJBoss | Red Hat JBoss Information Disclosure VulnerabilityRansomware | CISA | 2022-05-25 | 1590d overdue |
| CVE-2010-0840EUVD-2010-0865 | OracleJava Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability | CISA | 2022-05-25 | 1590d overdue |
| CVE-2010-0738EUVD-2010-0764 | Red HatJBoss | Red Hat JBoss Authentication Bypass VulnerabilityRansomware | CISAEU | 2022-05-25 | 1590d overdue |
| CVE-2018-8611EUVD-2018-20226 | MicrosoftWindows | Microsoft Windows Kernel Privilege Escalation Vulnerability | CISA | 2022-05-24 | 1591d overdue |
| CVE-2018-19953EUVD-2018-11624 | QNAPNetwork Attached Storage (NAS) | QNAP NAS File Station Cross-Site Scripting VulnerabilityRansomware | CISA | 2022-05-24 | 1591d overdue |
| CVE-2018-19949EUVD-2018-11620 | QNAPNetwork Attached Storage (NAS) | QNAP NAS File Station Command Injection VulnerabilityRansomware | CISA | 2022-05-24 | 1591d overdue |
| CVE-2018-19943EUVD-2018-11614 | QNAPNetwork Attached Storage (NAS) | QNAP NAS File Station Cross-Site Scripting VulnerabilityRansomware | CISA | 2022-05-24 | 1591d overdue |
| CVE-2017-8543EUVD-2017-17493 | MicrosoftWindows | Microsoft Windows Search Remote Code Execution Vulnerability | CISA | 2022-05-24 | 1591d overdue |
| CVE-2017-8291EUVD-2017-17253 | ArtifexGhostscript | Artifex Ghostscript Type Confusion Vulnerability | CISA | 2022-05-24 | 1591d overdue |
| CVE-2017-18362EUVD-2017-9480 | KaseyaVirtual System/Server Administrator (VSA) | Kaseya VSA SQL Injection VulnerabilityRansomware | CISA | 2022-05-24 | 1591d overdue |
| CVE-2017-0210EUVD-2017-0576 | MicrosoftInternet Explorer | Microsoft Internet Explorer Privilege Escalation Vulnerability | CISA | 2022-05-24 | 1591d overdue |
| CVE-2017-0149EUVD-2017-0516 | MicrosoftInternet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | CISA | 2022-05-24 | 1591d overdue |
| CVE-2017-0147EUVD-2017-0514 | MicrosoftSMBv1 server | Microsoft Windows SMBv1 Information Disclosure VulnerabilityRansomware | CISA | 2022-05-24 | 1591d overdue |
| CVE-2017-0022EUVD-2017-0389 | MicrosoftXML Core Services | Microsoft XML Core Services Information Disclosure Vulnerability | CISA | 2022-05-24 | 1591d overdue |
| CVE-2017-0005EUVD-2017-0372 | MicrosoftWindows | Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability | CISA | 2022-05-24 | 1591d overdue |
| CVE-2016-6367EUVD-2016-7290 | CiscoAdaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability | CISA | 2022-05-24 | 1591d overdue |
| CVE-2016-6366EUVD-2016-7289 | CiscoAdaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability | CISA | 2022-05-24 | 1591d overdue |
| CVE-2016-4657EUVD-2016-5643 | AppleiOS | Apple iOS Webkit Memory Corruption Vulnerability | CISA | 2022-05-24 | 1591d overdue |
| CVE-2016-4656EUVD-2016-5642 | AppleiOS | Apple iOS Memory Corruption Vulnerability | CISA | 2022-05-24 | 1591d overdue |
| CVE-2016-4655EUVD-2016-5641 | AppleiOS | Apple iOS Information Disclosure Vulnerability | CISA | 2022-05-24 | 1591d overdue |
| CVE-2016-3351EUVD-2016-4382 | MicrosoftInternet Explorer and Edge | Microsoft Internet Explorer and Edge Information Disclosure VulnerabilityRansomware | CISA | 2022-05-24 | 1591d overdue |
| CVE-2016-3298EUVD-2016-4330 | MicrosoftInternet Explorer | Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability | CISA | 2022-05-24 | 1591d overdue |
| CVE-2016-0162EUVD-2016-0200 | MicrosoftInternet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | CISA | 2022-05-24 | 1591d overdue |
| CVE-2022-20821EUVD-2022-26071 | CiscoIOS XR | Cisco IOS XR Open Port Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2021-30883EUVD-2021-17800 | AppleMultiple Products | Apple Multiple Products Memory Corruption Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2021-1048EUVD-2021-6515 | AndroidKernel | Android Kernel Use-After-Free Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2021-0920EUVD-2021-3539 | AndroidKernel | Android Kernel Race Condition Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2020-1027EUVD-2020-11922 | MicrosoftWindows | Microsoft Windows Kernel Privilege Escalation Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2020-0638EUVD-2020-2132 | MicrosoftUpdate Notification Manager | Microsoft Update Notification Manager Privilege Escalation VulnerabilityRansomware | CISA | 2022-05-23 | 1592d overdue |
| CVE-2019-8720EUVD-2019-18110 | WebKitGTKWebKitGTK | WebKitGTK Memory Corruption Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2019-7287EUVD-2019-16831 | AppleiOS | Apple iOS Memory Corruption Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2019-7286EUVD-2019-16830 | AppleMultiple Products | Apple Multiple Products Memory Corruption Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2019-5786EUVD-2020-0957 | GoogleChrome Blink | Google Chrome Blink Use-After-Free Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2019-18426EUVD-2019-8195 | Meta PlatformsWhatsApp | WhatsApp Cross-Site Scripting Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2019-1385EUVD-2019-9942 | MicrosoftWindows | Microsoft Windows AppX Deployment Extensions Privilege Escalation VulnerabilityRansomware | CISA | 2022-05-23 | 1592d overdue |
| CVE-2019-13720EUVD-2019-5139 | GoogleChrome WebAudio | Google Chrome WebAudio Use-After-Free Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2019-11708EUVD-2019-3378 | MozillaFirefox and Thunderbird | Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2019-11707EUVD-2019-3377 | MozillaFirefox and Thunderbird | Mozilla Firefox and Thunderbird Type Confusion Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2019-1130EUVD-2019-9707 | MicrosoftWindows | Microsoft Windows AppX Deployment Service Privilege Escalation VulnerabilityRansomware | CISA | 2022-05-23 | 1592d overdue |
| CVE-2019-0880EUVD-2019-1629 | MicrosoftWindows | Microsoft Windows Privilege Escalation Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2019-0703EUVD-2019-1463 | MicrosoftWindows | Microsoft Windows SMB Information Disclosure Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2019-0676EUVD-2019-1436 | MicrosoftInternet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2018-8589EUVD-2018-20204 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2018-5002EUVD-2018-16788 | AdobeFlash Player | Adobe Flash Player Stack-based Buffer Overflow Vulnerability | CISA | 2022-05-23 | 1592d overdue |
| CVE-2022-30525EUVD-2022-52385 | ZyxelMultiple Firewalls | Zyxel Multiple Firewalls OS Command Injection Vulnerability | CISA | 2022-05-16 | 1599d overdue |
| CVE-2022-22947EUVD-2022-1288 | VMwareSpring Cloud Gateway | VMware Spring Cloud Gateway Code Injection Vulnerability | CISA | 2022-05-16 | 1599d overdue |
| CVE-2022-1388EUVD-2022-24705 | F5BIG-IP | F5 BIG-IP Missing Authentication VulnerabilityRansomware | CISA | 2022-05-10 | 1605d overdue |
| CVE-2021-1789EUVD-2021-7253 | AppleMultiple Products | Apple Multiple Products Type Confusion Vulnerability | CISA | 2022-05-04 | 1611d overdue |
| CVE-2019-8506EUVD-2019-17896 | AppleMultiple Products | Apple Multiple Products Type Confusion Vulnerability | CISA | 2022-05-04 | 1611d overdue |
| CVE-2014-4113EUVD-2014-4044 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation Vulnerability | CISA | 2022-05-04 | 1611d overdue |
| CVE-2014-0322EUVD-2014-0360 | MicrosoftInternet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | CISA | 2022-05-04 | 1611d overdue |
| CVE-2014-0160EUVD-2014-0217 | OpenSSLOpenSSL | OpenSSL Information Disclosure Vulnerability | CISA | 2022-05-04 | 1611d overdue |
| CVE-2022-29464EUVD-2022-33802 | WSO2Multiple Products | WSO2 Multiple Products Unrestrictive Upload of File VulnerabilityRansomware | CISA | 2022-04-25 | 1620d overdue |
| CVE-2022-26904EUVD-2022-31451 | MicrosoftWindows | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | CISA | 2022-04-25 | 1620d overdue |
| CVE-2022-21919EUVD-2022-27075 | MicrosoftWindows | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | CISA | 2022-04-25 | 1620d overdue |
| CVE-2022-0847EUVD-2022-15890 | LinuxKernel | Linux Kernel Privilege Escalation Vulnerability | CISA | 2022-04-25 | 1620d overdue |
| CVE-2021-41357EUVD-2021-28385 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation Vulnerability | CISA | 2022-04-25 | 1620d overdue |
| CVE-2021-40450EUVD-2021-27627 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation Vulnerability | CISA | 2022-04-25 | 1620d overdue |
| CVE-2019-1003029EUVD-2022-5866 | JenkinsScript Security Plugin | Jenkins Script Security Plugin Sandbox Bypass Vulnerability | CISA | 2022-04-25 | 1620d overdue |
| CVE-2022-22718EUVD-2022-27861 | MicrosoftWindows | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | CISA | 2022-04-19 | 1626d overdue |
| CVE-2019-3568EUVD-2019-13204 | Meta PlatformsWhatsApp | WhatsApp VOIP Stack Buffer Overflow Vulnerability | CISA | 2022-04-19 | 1626d overdue |
| CVE-2018-6882EUVD-2018-18627 | SynacorZimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityRansomware | CISA | 2022-04-19 | 1626d overdue |
| CVE-2022-22960EUVD-2022-28083 | VMwareMultiple Products | VMware Multiple Products Privilege Escalation Vulnerability | CISA | 2022-04-15 | 1630d overdue |
| CVE-2022-1364EUVD-2022-24685 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2022-04-15 | 1630d overdue |
| CVE-2019-3929EUVD-2019-13536 | CrestronMultiple Products | Crestron Multiple Products Command Injection Vulnerability | CISA | 2022-04-15 | 1630d overdue |
| CVE-2019-16057EUVD-2019-6920 | D-LinkDNS-320 Storage Device | D-Link DNS-320 Remote Code Execution VulnerabilityRansomware | CISA | 2022-04-15 | 1630d overdue |
| CVE-2018-7841EUVD-2018-19553 | Schneider ElectricU.motion Builder | Schneider Electric U.motion Builder SQL Injection Vulnerability | CISA | 2022-04-15 | 1630d overdue |
| CVE-2016-4523EUVD-2016-5510 | TrihedralVTScada (formerly VTS) | Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability | CISA | 2022-04-15 | 1630d overdue |
| CVE-2014-0780EUVD-2014-0811 | InduSoftWeb Studio | InduSoft Web Studio NTWebServer Directory Traversal Vulnerability | CISA | 2022-04-15 | 1630d overdue |
| CVE-2010-5330EUVD-2010-5287 | UbiquitiAirOS | Ubiquiti AirOS Command Injection Vulnerability | CISA | 2022-04-15 | 1630d overdue |
| CVE-2007-3010EUVD-2007-3002 | AlcatelOmniPCX Enterprise | Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability | CISA | 2022-04-15 | 1630d overdue |
| CVE-2022-22954EUVD-2022-28077 | VMwareWorkspace ONE Access and Identity Manager | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection VulnerabilityRansomware | CISA | 2022-04-14 | 1631d overdue |
| CVE-2022-24521EUVD-2022-29401 | MicrosoftWindows | Microsoft Windows CLFS Driver Privilege Escalation VulnerabilityRansomware | CISA | 2022-04-13 | 1632d overdue |
| CVE-2018-7602EUVD-2024-1058 | DrupalCore | Drupal Core Remote Code Execution VulnerabilityRansomware | CISA | 2022-04-13 | 1632d overdue |
| CVE-2018-20753EUVD-2018-13296 | KaseyaVirtual System/Server Administrator (VSA) | Kaseya VSA Remote Code Execution VulnerabilityRansomware | CISA | 2022-04-13 | 1632d overdue |
| CVE-2015-5123EUVD-2015-5138 | AdobeFlash Player | Adobe Flash Player Use-After-Free Vulnerability | CISA | 2022-04-13 | 1632d overdue |
| CVE-2015-5122EUVD-2015-5137 | AdobeFlash Player | Adobe Flash Player Use-After-Free Vulnerability | CISA | 2022-04-13 | 1632d overdue |
| CVE-2015-3113EUVD-2015-3194 | AdobeFlash Player | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability | CISA | 2022-04-13 | 1632d overdue |
| CVE-2015-2502EUVD-2015-2595 | MicrosoftInternet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | CISA | 2022-04-13 | 1632d overdue |
| CVE-2015-0313EUVD-2015-0326 | AdobeFlash Player | Adobe Flash Player Use-After-Free Vulnerability | CISA | 2022-04-13 | 1632d overdue |
| CVE-2015-0311EUVD-2015-0324 | AdobeFlash Player | Adobe Flash Player Remote Code Execution Vulnerability | CISA | 2022-04-13 | 1632d overdue |
| CVE-2014-9163EUVD-2014-8988 | AdobeFlash Player | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability | CISA | 2022-04-13 | 1632d overdue |
| CVE-2022-23176EUVD-2022-28267 | WatchGuardFirebox and XTM | WatchGuard Firebox and XTM Privilege Escalation Vulnerability | CISA | 2022-04-11 | 1634d overdue |
| CVE-2021-42287EUVD-2021-29262 | MicrosoftActive Directory | Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityRansomware | CISA | 2022-04-11 | 1634d overdue |
| CVE-2021-42278EUVD-2021-29254 | MicrosoftActive Directory | Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityRansomware | CISA | 2022-04-11 | 1634d overdue |
| CVE-2021-39793EUVD-2021-26150 | GooglePixel | Google Pixel Out-of-Bounds Write Vulnerability | CISA | 2022-04-11 | 1634d overdue |
| CVE-2021-27852EUVD-2021-14590 | CheckboxCheckbox Survey | Checkbox Survey Deserialization of Untrusted Data Vulnerability | CISA | 2022-04-11 | 1634d overdue |
| CVE-2021-22600EUVD-2021-9736 | LinuxKernel | Linux Kernel Privilege Escalation Vulnerability | CISA | 2022-04-11 | 1634d overdue |
| CVE-2020-2509EUVD-2020-22302 | QNAPQNAP Network-Attached Storage (NAS) | QNAP Network-Attached Storage (NAS) Command Injection Vulnerability | CISA | 2022-04-11 | 1634d overdue |
| CVE-2017-11317EUVD-2017-2951 | TelerikUser Interface (UI) for ASP.NET AJAX | Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability | CISA | 2022-04-11 | 1634d overdue |
| CVE-2021-3156EUVD-2021-26500 | SudoSudo | Sudo Heap-Based Buffer Overflow Vulnerability | CISA | 2022-04-06 | 1639d overdue |
| CVE-2021-31166EUVD-2021-18079 | MicrosoftHTTP Protocol Stack | Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability | CISA | 2022-04-06 | 1639d overdue |
| CVE-2017-0148EUVD-2017-0515 | MicrosoftSMBv1 server | Microsoft SMBv1 Server Remote Code Execution VulnerabilityRansomware | CISA | 2022-04-06 | 1639d overdue |
| CVE-2022-22965EUVD-2022-1283 | VMwareSpring Framework | Spring Framework JDK 9+ Remote Code Execution Vulnerability | CISA | 2022-04-04 | 1641d overdue |
| CVE-2022-22675EUVD-2022-27820 | ApplemacOS | Apple macOS Out-of-Bounds Write Vulnerability | CISA | 2022-04-04 | 1641d overdue |
| CVE-2022-22674EUVD-2022-27819 | ApplemacOS | Apple macOS Out-of-Bounds Read Vulnerability | CISA | 2022-04-04 | 1641d overdue |
| CVE-2021-45382EUVD-2021-32155 | D-LinkMultiple Routers | D-Link Multiple Routers Remote Code Execution Vulnerability | CISA | 2022-04-04 | 1641d overdue |
| CVE-2022-26871EUVD-2022-31420 | Trend MicroApex Central | Trend Micro Apex Central Arbitrary File Upload Vulnerability | CISA | 2022-03-31 | 1645d overdue |
| CVE-2022-1040EUVD-2022-24387 | SophosFirewall | Sophos Firewall Authentication Bypass Vulnerability | CISA | 2022-03-31 | 1645d overdue |
| CVE-2021-34484EUVD-2021-21139 | MicrosoftWindows | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | CISA | 2022-03-31 | 1645d overdue |
| CVE-2021-28799EUVD-2021-15455 | QNAPNetwork Attached Storage (NAS) | QNAP NAS Improper Authorization VulnerabilityRansomware | CISA | 2022-03-31 | 1645d overdue |
| CVE-2021-21551EUVD-2021-8823 | Delldbutil Driver | Dell dbutil Driver Insufficient Access Control Vulnerability | CISA | 2022-03-31 | 1645d overdue |
| CVE-2018-10562EUVD-2018-2634 | DasanGigabit Passive Optical Network (GPON) Routers | Dasan GPON Routers Command Injection VulnerabilityRansomware | CISA | 2022-03-31 | 1645d overdue |
| CVE-2018-10561EUVD-2018-2633 | DasanGigabit Passive Optical Network (GPON) Routers | Dasan GPON Routers Authentication Bypass Vulnerability | CISA | 2022-03-31 | 1645d overdue |
| CVE-2022-1096EUVD-2022-24439 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2022-0543EUVD-2022-15665 | RedisDebian-specific Redis Servers | Debian-specific Redis Server Lua Sandbox Escape Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2021-38646EUVD-2021-25085 | MicrosoftOffice | Microsoft Office Access Connectivity Engine Remote Code Execution VulnerabilityRansomware | CISA | 2022-03-28 | 1648d overdue |
| CVE-2021-34486EUVD-2021-21140 | MicrosoftWindows | Microsoft Windows Event Tracing Privilege Escalation Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2021-26085EUVD-2021-12906 | AtlassianConfluence Server | Atlassian Confluence Server Pre-Authorization Arbitrary File Read VulnerabilityRansomware | CISA | 2022-03-28 | 1648d overdue |
| CVE-2021-20028EUVD-2021-7491 | SonicWallSecure Remote Access (SRA) | SonicWall Secure Remote Access (SRA) SQL Injection VulnerabilityRansomware | CISA | 2022-03-28 | 1648d overdue |
| CVE-2019-7483EUVD-2019-17025 | SonicWallSMA100 | SonicWall SMA100 Directory Traversal Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2018-8440EUVD-2018-20076 | MicrosoftWindows | Microsoft Windows Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-28 | 1648d overdue |
| CVE-2018-8406EUVD-2018-20044 | MicrosoftDirectX Graphics Kernel (DXGKRNL) | Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-28 | 1648d overdue |
| CVE-2018-8405EUVD-2018-20043 | MicrosoftDirectX Graphics Kernel (DXGKRNL) | Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-28 | 1648d overdue |
| CVE-2017-0213EUVD-2017-0579 | MicrosoftWindows | Microsoft Windows Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-28 | 1648d overdue |
| CVE-2017-0059EUVD-2017-0426 | MicrosoftInternet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2017-0037EUVD-2017-0404 | MicrosoftEdge and Internet Explorer | Microsoft Edge and Internet Explorer Type Confusion Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2016-7201EUVD-2022-2363 | MicrosoftEdge | Microsoft Edge Memory Corruption Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2016-7200EUVD-2022-2667 | MicrosoftEdge | Microsoft Edge Memory Corruption Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2016-0189EUVD-2016-0226 | MicrosoftInternet Explorer | Microsoft Internet Explorer Memory Corruption VulnerabilityRansomware | CISA | 2022-03-28 | 1648d overdue |
| CVE-2016-0151EUVD-2016-0189 | MicrosoftClient-Server Run-time Subsystem (CSRSS) | Microsoft Windows CSRSS Security Feature Bypass VulnerabilityRansomware | CISA | 2022-03-28 | 1648d overdue |
| CVE-2016-0040EUVD-2016-0078 | MicrosoftWindows | Microsoft Windows Kernel Privilege Escalation Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2015-2426EUVD-2015-2519 | MicrosoftWindows | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2015-2419EUVD-2015-2512 | MicrosoftInternet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2015-1770EUVD-2015-1900 | MicrosoftOffice | Microsoft Office Uninitialized Memory Use Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2013-3660EUVD-2013-3593 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2013-2729EUVD-2013-2668 | AdobeReader and Acrobat | Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2013-2551EUVD-2013-2493 | MicrosoftInternet Explorer | Microsoft Internet Explorer Use-After-Free VulnerabilityRansomware | CISA | 2022-03-28 | 1648d overdue |
| CVE-2013-2465EUVD-2013-2411 | OracleJava SE | Oracle Java SE Unspecified VulnerabilityRansomware | CISA | 2022-03-28 | 1648d overdue |
| CVE-2013-1690EUVD-2013-1717 | MozillaFirefox and Thunderbird | Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2012-5076EUVD-2012-4999 | OracleJava SE | Oracle Java SE Sandbox Bypass Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2012-2539EUVD-2012-2525 | MicrosoftWord | Microsoft Word Remote Code Execution Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2012-2034EUVD-2012-2040 | AdobeFlash Player | Adobe Flash Player Memory Corruption Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2012-0518EUVD-2012-0550 | OracleFusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2011-2005EUVD-2011-1999 | MicrosoftAncillary Function Driver (afd.sys) | Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability | CISA | 2022-03-28 | 1648d overdue |
| CVE-2010-4398EUVD-2010-4367 | MicrosoftWindows | Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability | CISA | 2022-03-28 | 1645d overdue |
| CVE-2022-26318EUVD-2022-30879 | WatchGuardFirebox and XTM Appliances | WatchGuard Firebox and XTM Appliances Arbitrary Code Execution | CISA | 2022-03-25 | 1651d overdue |
| CVE-2022-26143EUVD-2022-30710 | MitelMiCollab, MiVoice Business Express | MiCollab, MiVoice Business Express Access Control Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2022-21999EUVD-2022-27153 | MicrosoftWindows | Microsoft Windows Print Spooler Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-25 | 1651d overdue |
| CVE-2021-42237EUVD-2021-29215 | SitecoreXP | Sitecore XP Remote Command Execution VulnerabilityRansomware | CISA | 2022-03-25 | 1651d overdue |
| CVE-2021-22941EUVD-2021-10070 | CitrixShareFile | Citrix ShareFile Improper Access Control VulnerabilityRansomware | CISA | 2022-03-25 | 1651d overdue |
| CVE-2020-9377EUVD-2020-30198 | D-LinkDIR-610 Devices | D-Link DIR-610 Devices Remote Command Execution | CISA | 2022-03-25 | 1651d overdue |
| CVE-2020-9054EUVD-2020-29883 | ZyxelMultiple Network-Attached Storage (NAS) Devices | Zyxel Multiple NAS Devices OS Command Injection Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2020-7247EUVD-2020-28374 | OpenBSDOpenSMTPD | OpenSMTPD Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2020-5410EUVD-2020-0451 | VMware TanzuSpring Cloud Configuration (Config) Server | VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2020-25223EUVD-2020-17913 | SophosSG UTM | Sophos SG UTM Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2020-2506EUVD-2020-22299 | QNAP SystemsHelpdesk | QNAP Helpdesk Improper Access Control Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2020-2021EUVD-2020-22049 | Palo Alto NetworksPAN-OS | Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityRansomware | CISA | 2022-03-25 | 1651d overdue |
| CVE-2020-1956EUVD-2020-0557 | ApacheKylin | Apache Kylin OS Command Injection Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2020-1631EUVD-2020-12499 | JuniperJunos OS | Juniper Junos OS Path Traversal Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2019-6340EUVD-2022-2184 | DrupalCore | Drupal Core Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2019-2616EUVD-2019-12256 | OracleBI Publisher (Formerly XML Publisher) | Oracle BI Publisher Unauthorized Access Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2019-16920EUVD-2019-7414 | D-LinkMultiple Routers | D-Link Multiple Routers Command Injection Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2019-15107EUVD-2019-6178 | WebminWebmin | Webmin Command Injection VulnerabilityRansomware | CISA | 2022-03-25 | 1651d overdue |
| CVE-2019-12991EUVD-2019-4566 | CitrixSD-WAN and NetScaler | Citrix SD-WAN and NetScaler Command Injection Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2019-12989EUVD-2019-4564 | CitrixSD-WAN and NetScaler | Citrix SD-WAN and NetScaler SQL Injection Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2019-11043EUVD-2019-2751 | PHPFastCGI Process Manager (FPM) | PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityRansomware | CISA | 2022-03-25 | 1651d overdue |
| CVE-2019-10068EUVD-2019-2129 | KenticoXperience | Kentico Xperience Deserialization of Untrusted Data Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2019-1003030EUVD-2022-5117 | JenkinsMatrix Project Plugin | Jenkins Matrix Project Plugin Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2019-0903EUVD-2019-1652 | MicrosoftGraphics Device Interface (GDI) | Microsoft GDI Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2018-8414EUVD-2018-20051 | MicrosoftWindows | Microsoft Windows Shell Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2018-8373EUVD-2018-20017 | MicrosoftInternet Explorer Scripting Engine | Microsoft Scripting Engine Memory Corruption Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2018-6961EUVD-2018-18705 | VMwareSD-WAN Edge | VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2018-14839EUVD-2018-6722 | LGN1A1 NAS | LG N1A1 NAS Remote Command Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2018-1273EUVD-2018-0500 | VMware TanzuSpring Data Commons | VMware Tanzu Spring Data Commons Property Binder VulnerabilityRansomware | CISA | 2022-03-25 | 1651d overdue |
| CVE-2018-11138EUVD-2018-3180 | QuestKACE System Management Appliance | Quest KACE System Management Appliance Remote Command Execution VulnerabilityRansomware | CISA | 2022-03-25 | 1651d overdue |
| CVE-2018-0147EUVD-2018-0970 | CiscoSecure Access Control System (ACS) | Cisco Secure Access Control System Java Deserialization Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2018-0125EUVD-2018-0948 | CiscoVPN Routers | Cisco VPN Routers Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2017-6334EUVD-2017-15395 | NETGEARDGN2200 Devices | NETGEAR DGN2200 Devices OS Command Injection Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2017-6316EUVD-2017-15377 | CitrixNetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | Citrix Multiple Products Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2017-3881EUVD-2017-12998 | CiscoIOS and IOS XE | Cisco IOS and IOS XE Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2017-12617EUVD-2022-5811 | ApacheTomcat | Apache Tomcat Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2017-12615EUVD-2018-0654 | ApacheTomcat | Apache Tomcat on Windows Remote Code Execution VulnerabilityRansomware | CISA | 2022-03-25 | 1651d overdue |
| CVE-2017-0146EUVD-2017-0513 | MicrosoftWindows | Microsoft Windows SMB Remote Code Execution VulnerabilityRansomware | CISA | 2022-03-25 | 1651d overdue |
| CVE-2016-7892EUVD-2016-8741 | AdobeFlash Player | Adobe Flash Player Use-After-Free Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2016-4171EUVD-2016-5172 | AdobeFlash Player | Adobe Flash Player Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2016-1555EUVD-2016-2650 | NETGEARWireless Access Point (WAP) Devices | NETGEAR Multiple WAP Devices Command Injection Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2016-11021EUVD-2016-2012 | D-LinkDCS-930L Devices | D-Link DCS-930L Devices OS Command Injection Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2016-10174EUVD-2016-1361 | NETGEARWNR2000v5 Router | NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2016-0752EUVD-2017-0333 | RailsRuby on Rails | Ruby on Rails Directory Traversal Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2015-4068EUVD-2015-4094 | ArcserveUnified Data Protection (UDP) | Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2015-3035EUVD-2015-3116 | TP-LinkMultiple Archer Devices | TP-Link Multiple Archer Devices Directory Traversal Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2015-1427EUVD-2022-5539 | ElasticElasticsearch | Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2015-1187EUVD-2015-1329 | D-Link and TRENDnetMultiple Devices | D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2015-0666EUVD-2015-0679 | CiscoPrime Data Center Network Manager (DCNM) | Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2014-6332EUVD-2014-6216 | MicrosoftWindows | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2014-6324EUVD-2014-6208 | MicrosoftKerberos Key Distribution Center (KDC) | Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2014-6287EUVD-2014-6172 | RejettoHTTP File Server (HFS) | Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2014-3120EUVD-2022-5879 | ElasticElasticsearch | Elasticsearch Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2014-0130EUVD-2017-0180 | RailsRuby on Rails | Ruby on Rails Directory Traversal Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2013-5223EUVD-2013-5063 | D-LinkDSL-2760U | D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2013-4810EUVD-2013-4655 | Hewlett Packard (HP)ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management | HP Multiple Products Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2013-2251EUVD-2022-2328 | ApacheStruts | Apache Struts Improper Input Validation Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2012-1823EUVD-2012-1833 | PHPPHP | PHP-CGI Query String Parameter Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2010-4345EUVD-2010-4314 | EximExim | Exim Privilege Escalation Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2010-4344EUVD-2010-4313 | EximExim | Exim Heap-Based Buffer Overflow Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2010-3035EUVD-2010-3037 | CiscoIOS XR | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2010-2861EUVD-2010-2865 | AdobeColdFusion | Adobe ColdFusion Directory Traversal VulnerabilityRansomware | CISA | 2022-03-25 | 1651d overdue |
| CVE-2009-2055EUVD-2009-2051 | CiscoIOS XR | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2009-1151EUVD-2009-1151 | phpMyAdminphpMyAdmin | phpMyAdmin Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2009-0927EUVD-2009-0924 | AdobeReader and Acrobat | Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2005-2773EUVD-2005-2774 | Hewlett Packard (HP)OpenView Network Node Manager | HP OpenView Network Node Manager Remote Code Execution Vulnerability | CISA | 2022-03-25 | 1651d overdue |
| CVE-2020-5135EUVD-2020-26382 | SonicWallSonicOS | SonicWall SonicOS Buffer Overflow VulnerabilityRansomware | CISA | 2022-03-15 | 1661d overdue |
| CVE-2019-1405EUVD-2019-9962 | MicrosoftWindows | Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-15 | 1661d overdue |
| CVE-2019-1322EUVD-2019-9881 | MicrosoftWindows | Microsoft Windows Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-15 | 1661d overdue |
| CVE-2019-1315EUVD-2019-9874 | MicrosoftWindows | Microsoft Windows Error Reporting Manager Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-15 | 1661d overdue |
| CVE-2019-1253EUVD-2019-9819 | MicrosoftWindows | Microsoft Windows AppX Deployment Server Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-15 | 1661d overdue |
| CVE-2019-1132EUVD-2019-9708 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation Vulnerability | CISA | 2022-03-15 | 1661d overdue |
| CVE-2019-1129EUVD-2019-9706 | MicrosoftWindows | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-15 | 1661d overdue |
| CVE-2019-1069EUVD-2019-9651 | MicrosoftTask Scheduler | Microsoft Task Scheduler Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-15 | 1661d overdue |
| CVE-2019-1064EUVD-2019-9646 | MicrosoftWindows | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-15 | 1661d overdue |
| CVE-2019-0841EUVD-2019-1592 | MicrosoftWindows | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-15 | 1661d overdue |
| CVE-2019-0543EUVD-2019-1314 | MicrosoftWindows | Microsoft Windows Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-15 | 1661d overdue |
| CVE-2018-8120EUVD-2018-19796 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-15 | 1661d overdue |
| CVE-2017-0101EUVD-2017-0468 | MicrosoftWindows | Microsoft Windows Transaction Manager Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-15 | 1661d overdue |
| CVE-2016-3309EUVD-2016-4341 | MicrosoftWindows | Microsoft Windows Kernel Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-15 | 1661d overdue |
| CVE-2015-2546EUVD-2015-2639 | MicrosoftWin32k | Microsoft Win32k Memory Corruption VulnerabilityRansomware | CISA | 2022-03-15 | 1661d overdue |
| CVE-2022-26486EUVD-2022-31044 | MozillaFirefox | Mozilla Firefox Use-After-Free Vulnerability | CISA | 2022-03-07 | 1676d overdue |
| CVE-2022-26485EUVD-2022-31043 | MozillaFirefox | Mozilla Firefox Use-After-Free Vulnerability | CISA | 2022-03-07 | 1676d overdue |
| CVE-2021-21973EUVD-2021-9144 | VMwarevCenter Server and Cloud Foundation | VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability | CISA | 2022-03-07 | 1676d overdue |
| CVE-2020-8218EUVD-2020-29091 | Pulse SecurePulse Connect Secure | Pulse Connect Secure Code Injection Vulnerability | CISA | 2022-03-07 | 1506d overdue |
| CVE-2019-11581EUVD-2019-3251 | AtlassianJira Server and Data Center | Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability | CISA | 2022-03-07 | 1506d overdue |
| CVE-2017-6077EUVD-2017-15144 | NETGEARWireless Router DGN2200 | NETGEAR DGN2200 Remote Code Execution Vulnerability | CISA | 2022-03-07 | 1506d overdue |
| CVE-2016-6277EUVD-2016-7207 | NETGEARMultiple Routers | NETGEAR Multiple Routers Remote Code Execution Vulnerability | CISA | 2022-03-07 | 1506d overdue |
| CVE-2013-0631EUVD-2013-0642 | AdobeColdFusion | Adobe ColdFusion Information Disclosure Vulnerability | CISA | 2022-03-07 | 1506d overdue |
| CVE-2013-0629EUVD-2013-0640 | AdobeColdFusion | Adobe ColdFusion Directory Traversal Vulnerability | CISA | 2022-03-07 | 1506d overdue |
| CVE-2013-0625EUVD-2013-0636 | AdobeColdFusion | Adobe ColdFusion Authentication Bypass Vulnerability | CISA | 2022-03-07 | 1506d overdue |
| CVE-2009-3960EUVD-2009-3931 | AdobeBlazeDS | Adobe BlazeDS Information Disclosure VulnerabilityRansomware | CISA | 2022-03-07 | 1506d overdue |
| CVE-2022-20708EUVD-2022-25958 | CiscoSmall Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2022-20703EUVD-2022-25953 | CiscoSmall Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2022-20701EUVD-2022-25951 | CiscoSmall Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2022-20700EUVD-2022-25950 | CiscoSmall Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2022-20699EUVD-2022-25949 | CiscoSmall Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2021-41379EUVD-2021-28407 | MicrosoftWindows | Microsoft Windows Installer Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-03 | 1680d overdue |
| CVE-2020-1938EUVD-2020-0481 | ApacheTomcat | Apache Tomcat Improper Privilege Management Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2020-11899EUVD-2020-4236 | Treck TCP/IP stackIPv6 | Treck TCP/IP stack Out-of-Bounds Read Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2019-16928EUVD-2019-7422 | EximExim Internet Mailer | Exim Out-of-bounds Write Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2019-1652EUVD-2019-10209 | CiscoSmall Business RV320 and RV325 Dual Gigabit WAN VPN Routers | Cisco Small Business Routers Improper Input Validation Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2019-1297EUVD-2019-9862 | MicrosoftExcel | Microsoft Excel Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-8581EUVD-2018-20198 | MicrosoftExchange Server | Microsoft Exchange Server Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-8298EUVD-2022-5575 | ChakraCoreChakraCore scripting engine | ChakraCore Scripting Engine Type Confusion Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-0180EUVD-2018-1003 | CiscoIOS Software | Cisco IOS Software Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-0179EUVD-2018-1002 | CiscoIOS Software | Cisco IOS Software Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-0175EUVD-2018-0998 | CiscoIOS, XR, and XE Software | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-0174EUVD-2018-0997 | CiscoIOS XE Software | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-0173EUVD-2018-0996 | CiscoIOS and IOS XE Software | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-0172EUVD-2018-0995 | CiscoIOS and IOS XE Software | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-0167EUVD-2018-0990 | CiscoIOS, XR, and XE Software | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-0161EUVD-2018-0984 | CiscoIOS Software | Cisco IOS Software Resource Management Errors Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-0159EUVD-2018-0982 | CiscoIOS Software and Cisco IOS XE Software | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-0158EUVD-2018-0981 | CiscoIOS Software and Cisco IOS XE Software | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-0156EUVD-2018-0979 | CiscoIOS Software and Cisco IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-0155EUVD-2018-0978 | CiscoCatalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-0154EUVD-2018-0977 | CiscoIOS Software | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2018-0151EUVD-2018-0974 | CiscoIOS and IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1680d overdue |
| CVE-2017-8540EUVD-2017-17490 | MicrosoftMalware Protection Engine | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-6744EUVD-2017-15798 | CiscoIOS software | Cisco IOS Software SNMP Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-6743EUVD-2017-15797 | CiscoIOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-6740EUVD-2017-15794 | CiscoIOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-6739EUVD-2017-15793 | CiscoIOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-6738EUVD-2017-15792 | CiscoIOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-6737EUVD-2017-15791 | CiscoIOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-6736EUVD-2017-15790 | CiscoIOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-6663EUVD-2017-15717 | CiscoIOS and IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-6627EUVD-2017-15681 | CiscoIOS and IOS XE Software | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-12319EUVD-2017-3892 | CiscoIOS XE Software | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-12240EUVD-2017-3813 | CiscoIOS and IOS XE Software | Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-12238EUVD-2017-3811 | CiscoCatalyst 6800 Series Switches | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-12237EUVD-2017-3810 | CiscoIOS and IOS XE Software | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-12235EUVD-2017-3808 | CiscoIOS software | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-12234EUVD-2017-3807 | CiscoIOS software | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-12233EUVD-2017-3806 | CiscoIOS software | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-12232EUVD-2017-3805 | CiscoIOS software | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-12231EUVD-2017-3804 | CiscoIOS software | Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-11826EUVD-2017-3426 | MicrosoftOffice | Microsoft Office Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-11292EUVD-2017-2926 | AdobeFlash Player | Adobe Flash Player Type Confusion Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-0261EUVD-2017-0617 | MicrosoftOffice | Microsoft Office Use-After-Free Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2017-0001EUVD-2017-0368 | MicrosoftGraphics Device Interface (GDI) | Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2016-8562EUVD-2016-9410 | SiemensSIMATIC CP | Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2016-7855EUVD-2016-8704 | AdobeFlash Player | Adobe Flash Player Use-After-Free Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2016-7262EUVD-2016-8118 | MicrosoftExcel | Microsoft Office Security Feature Bypass Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2016-7193EUVD-2016-8058 | MicrosoftOffice | Microsoft Office Memory Corruption Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2016-5195EUVD-2016-6146 | LinuxKernel | Linux Kernel Race Condition Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2016-4117EUVD-2016-5118 | AdobeFlash Player | Adobe Flash Player Arbitrary Code Execution VulnerabilityRansomware | CISA | 2022-03-03 | 1673d overdue |
| CVE-2016-1019EUVD-2016-2123 | AdobeFlash Player | Adobe Flash Player Arbitrary Code Execution VulnerabilityRansomware | CISA | 2022-03-03 | 1673d overdue |
| CVE-2016-0099EUVD-2016-0137 | MicrosoftWindows | Microsoft Windows Secondary Logon Service Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-03 | 1673d overdue |
| CVE-2015-7645EUVD-2015-7548 | AdobeFlash Player | Adobe Flash Player Arbitrary Code Execution VulnerabilityRansomware | CISA | 2022-03-03 | 1673d overdue |
| CVE-2015-5119EUVD-2015-5134 | AdobeFlash Player | Adobe Flash Player Use-After-Free Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2015-4902EUVD-2015-4919 | OracleJava SE | Oracle Java SE Integrity Check Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2015-3043EUVD-2015-3124 | AdobeFlash Player | Adobe Flash Player Memory Corruption Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2015-2590EUVD-2015-2682 | OracleJava SE | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2015-2545EUVD-2015-2638 | MicrosoftOffice | Microsoft Office Malformed EPS File Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2015-2424EUVD-2015-2517 | MicrosoftPowerPoint | Microsoft PowerPoint Memory Corruption Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2015-2387EUVD-2015-2480 | MicrosoftATM Font Driver | Microsoft ATM Font Driver Privilege Escalation Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2015-1701EUVD-2015-1831 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation VulnerabilityRansomware | CISA | 2022-03-03 | 1673d overdue |
| CVE-2015-1642EUVD-2015-1772 | MicrosoftOffice | Microsoft Office Memory Corruption Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2014-4114EUVD-2014-4045 | MicrosoftWindows | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2014-0496EUVD-2014-0527 | AdobeReader and Acrobat | Adobe Reader and Acrobat Use-After-Free Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2013-5065EUVD-2013-4907 | MicrosoftWindows | Microsoft Windows Kernel Privilege Escalation Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2013-3897EUVD-2013-3829 | MicrosoftInternet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2013-3346EUVD-2013-3282 | AdobeReader and Acrobat | Adobe Reader and Acrobat Memory Corruption Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2013-1675EUVD-2013-1702 | MozillaFirefox | Mozilla Firefox Information Disclosure Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2013-1347EUVD-2013-1387 | MicrosoftInternet Explorer | Microsoft Internet Explorer Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2013-0641EUVD-2013-0652 | AdobeReader | Adobe Reader Buffer Overflow Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2013-0640EUVD-2013-0651 | AdobeReader and Acrobat | Adobe Reader and Acrobat Memory Corruption Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2013-0632EUVD-2013-0643 | AdobeColdFusion | Adobe ColdFusion Authentication Bypass Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2012-4681EUVD-2012-4606 | OracleJava SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityRansomware | CISA | 2022-03-03 | 1673d overdue |
| CVE-2012-1856EUVD-2012-1866 | MicrosoftOffice | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2012-1723EUVD-2012-1733 | OracleJava SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityRansomware | CISA | 2022-03-03 | 1673d overdue |
| CVE-2012-1535EUVD-2012-1553 | AdobeFlash Player | Adobe Flash Player Arbitrary Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2012-0507EUVD-2012-0539 | OracleJava SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityRansomware | CISA | 2022-03-03 | 1673d overdue |
| CVE-2011-3544EUVD-2011-3507 | OracleJava SE JDK and JRE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2011-1889EUVD-2011-1887 | MicrosoftForefront Threat Management Gateway (TMG) | Microsoft Forefront TMG Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2011-0611EUVD-2011-0629 | AdobeFlash Player | Adobe Flash Player Remote Code Execution Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2010-3333EUVD-2010-3331 | MicrosoftOffice | Microsoft Office Stack-based Buffer Overflow Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2010-0232EUVD-2010-0263 | MicrosoftWindows | Microsoft Windows Kernel Exception Handler Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2010-0188EUVD-2010-0219 | AdobeReader and Acrobat | Adobe Reader and Acrobat Arbitrary Code Execution VulnerabilityRansomware | CISA | 2022-03-03 | 1673d overdue |
| CVE-2009-3129EUVD-2009-3112 | MicrosoftExcel | Microsoft Excel Featheader Record Memory Corruption Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2009-1123EUVD-2009-1124 | MicrosoftWindows | Microsoft Windows Improper Input Validation Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2008-3431EUVD-2008-3417 | OracleVirtualBox | Oracle VirtualBox Insufficient Input Validation Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2008-2992EUVD-2008-2982 | AdobeAcrobat and Reader | Adobe Reader and Acrobat Input Validation VulnerabilityRansomware | CISA | 2022-03-03 | 1673d overdue |
| CVE-2004-0210EUVD-2004-0210 | MicrosoftWindows | Microsoft Windows Privilege Escalation Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2002-0367EUVD-2002-0364 | MicrosoftWindows | Microsoft Windows Privilege Escalation Vulnerability | CISA | 2022-03-03 | 1673d overdue |
| CVE-2022-24682EUVD-2022-29554 | SynacorZimbra Collaborate Suite (ZCS) | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilityRansomware | CISA | 2022-02-25 | 1686d overdue |
| CVE-2017-8570EUVD-2017-17520 | MicrosoftOffice | Microsoft Office Remote Code Execution Vulnerability | CISA | 2022-02-25 | 1519d overdue |
| CVE-2017-0222EUVD-2017-0588 | MicrosoftInternet Explorer | Microsoft Internet Explorer Remote Code Execution Vulnerability | CISA | 2022-02-25 | 1519d overdue |
| CVE-2014-6352EUVD-2014-6236 | MicrosoftWindows | Microsoft Windows Code Injection Vulnerability | CISA | 2022-02-25 | 1519d overdue |
| CVE-2022-23134EUVD-2022-28225 | ZabbixFrontend | Zabbix Frontend Improper Access Control Vulnerability | CISA | 2022-02-22 | 1689d overdue |
| CVE-2022-23131EUVD-2022-28222 | ZabbixFrontend | Zabbix Frontend Authentication Bypass Vulnerability | CISA | 2022-02-22 | 1689d overdue |
| CVE-2022-24086EUVD-2022-0975 | AdobeCommerce and Magento Open Source | Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability | CISA | 2022-02-15 | 1696d overdue |
| CVE-2022-0609EUVD-2022-1213 | GoogleChromium Animation | Google Chromium Animation Use-After-Free Vulnerability | CISA | 2022-02-15 | 1696d overdue |
| CVE-2019-0752EUVD-2019-1511 | MicrosoftInternet Explorer | Microsoft Internet Explorer Type Confusion VulnerabilityRansomware | CISA | 2022-02-15 | 1529d overdue |
| CVE-2018-8174EUVD-2018-19844 | MicrosoftWindows | Microsoft Windows VBScript Engine Out-of-Bounds Write VulnerabilityRansomware | CISA | 2022-02-15 | 1529d overdue |
| CVE-2018-20250EUVD-2018-12813 | RARLABWinRAR | WinRAR Absolute Path Traversal VulnerabilityRansomware | CISA | 2022-02-15 | 1529d overdue |
| CVE-2018-15982EUVD-2018-7838 | AdobeFlash Player | Adobe Flash Player Use-After-Free VulnerabilityRansomware | CISA | 2022-02-15 | 1529d overdue |
| CVE-2017-9841EUVD-2022-1528 | PHPUnitPHPUnit | PHPUnit Command Injection Vulnerability | CISA | 2022-02-15 | 1529d overdue |
| CVE-2014-1761EUVD-2014-1835 | MicrosoftWord | Microsoft Word Memory Corruption Vulnerability | CISA | 2022-02-15 | 1529d overdue |
| CVE-2013-3906EUVD-2013-3838 | MicrosoftGraphics Component | Microsoft Graphics Component Memory Corruption Vulnerability | CISA | 2022-02-15 | 1529d overdue |
| CVE-2022-22620EUVD-2022-27765 | AppleiOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability | CISA | 2022-02-11 | 1700d overdue |
| CVE-2021-36934EUVD-2021-23510 | MicrosoftWindows | Microsoft Windows SAM Local Privilege Escalation Vulnerability | CISA | 2022-02-10 | 1701d overdue |
| CVE-2020-0796EUVD-2020-2283 | MicrosoftSMBv3 | Microsoft SMBv3 Remote Code Execution VulnerabilityRansomware | CISA | 2022-02-10 | 1534d overdue |
| CVE-2018-1000861EUVD-2022-4161 | JenkinsJenkins Stapler Web Framework | Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability | CISA | 2022-02-10 | 1534d overdue |
| CVE-2017-9791EUVD-2022-1954 | ApacheStruts 1 | Apache Struts 1 Improper Input Validation Vulnerability | CISA | 2022-02-10 | 1534d overdue |
| CVE-2017-8464EUVD-2017-17414 | MicrosoftWindows | Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability | CISA | 2022-02-10 | 1534d overdue |
| CVE-2017-10271EUVD-2017-1918 | OracleWebLogic Server | Oracle Corporation WebLogic Server Remote Code Execution VulnerabilityRansomware | CISAEU | 2022-02-10 | 1534d overdue |
| CVE-2017-0263EUVD-2017-0619 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation Vulnerability | CISA | 2022-02-10 | 1534d overdue |
| CVE-2017-0262EUVD-2017-0618 | MicrosoftOffice | Microsoft Office Remote Code Execution Vulnerability | CISA | 2022-02-10 | 1534d overdue |
| CVE-2017-0145EUVD-2017-0512 | MicrosoftSMBv1 | Microsoft SMBv1 Remote Code Execution VulnerabilityRansomware | CISA | 2022-02-10 | 1534d overdue |
| CVE-2017-0144EUVD-2017-0511 | MicrosoftSMBv1 | Microsoft SMBv1 Remote Code Execution VulnerabilityRansomware | CISAEU | 2022-02-10 | 1534d overdue |
| CVE-2016-3088EUVD-2022-5255 | ApacheActiveMQ | Apache ActiveMQ Improper Input Validation Vulnerability | CISA | 2022-02-10 | 1534d overdue |
| CVE-2015-2051EUVD-2015-2164 | D-LinkDIR-645 Router | D-Link DIR-645 Router Remote Code Execution Vulnerability | CISA | 2022-02-10 | 1534d overdue |
| CVE-2015-1635EUVD-2015-1765 | MicrosoftHTTP.sys | Microsoft HTTP.sys Remote Code Execution Vulnerability | CISA | 2022-02-10 | 1534d overdue |
| CVE-2015-1130EUVD-2015-1273 | AppleOS X | Apple OS X Authentication Bypass Vulnerability | CISA | 2022-02-10 | 1534d overdue |
| CVE-2014-4404EUVD-2014-4331 | AppleOS X | Apple OS X Heap-Based Buffer Overflow Vulnerability | CISA | 2022-02-10 | 1534d overdue |
| CVE-2022-21882EUVD-2022-27038 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation VulnerabilityRansomware | CISA | 2022-02-04 | 1707d overdue |
| CVE-2022-22587EUVD-2022-27732 | AppleiOS and macOS | Apple Memory Corruption Vulnerability | CISA | 2022-01-28 | 1714d overdue |
| CVE-2021-20038EUVD-2021-7501 | SonicWallSMA 100 Appliances | SonicWall SMA 100 Appliances Stack-Based Buffer Overflow VulnerabilityRansomware | CISA | 2022-01-28 | 1714d overdue |
| CVE-2020-5722EUVD-2020-26881 | GrandstreamUCM6200 | Grandstream Networks UCM6200 Series SQL Injection Vulnerability | CISA | 2022-01-28 | 1547d overdue |
| CVE-2020-0787EUVD-2020-2274 | MicrosoftWindows | Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management VulnerabilityRansomware | CISAEU | 2022-01-28 | 1547d overdue |
| CVE-2017-5689EUVD-2017-14766 | IntelActive Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability | Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability | CISA | 2022-01-28 | 1547d overdue |
| CVE-2014-7169EUVD-2014-7046 | GNUBourne-Again Shell (Bash) | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | CISA | 2022-01-28 | 1547d overdue |
| CVE-2014-6271EUVD-2014-6157 | GNUBourne-Again Shell (Bash) | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | CISA | 2022-01-28 | 1547d overdue |
| CVE-2014-1776EUVD-2014-1850 | MicrosoftInternet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | CISA | 2022-01-28 | 1547d overdue |
| CVE-2021-35247EUVD-2021-21890 | SolarWindsServ-U | SolarWinds Serv-U Improper Input Validation Vulnerability | CISA | 2022-01-21 | 1721d overdue |
| CVE-2018-8453EUVD-2018-20088 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation VulnerabilityRansomware | CISA | 2022-01-21 | 1554d overdue |
| CVE-2012-0391EUVD-2022-2464 | ApacheStruts 2 | Apache Struts 2 Improper Input Validation Vulnerability | CISA | 2022-01-21 | 1554d overdue |
| CVE-2006-1547EUVD-2022-3054 | ApacheStruts 1 | Apache Struts 1 ActionForm Denial-of-Service Vulnerability | CISA | 2022-01-21 | 1554d overdue |
| CVE-2021-40870EUVD-2021-28025 | AviatrixAviatrix Controller | Aviatrix Controller Unrestricted Upload of File | CISA | 2022-01-18 | 1724d overdue |
| CVE-2021-33766EUVD-2021-20443 | MicrosoftExchange Server | Microsoft Exchange Server Information Disclosure | CISA | 2022-01-18 | 1724d overdue |
| CVE-2021-32648EUVD-2021-1808 | October CMSOctober CMS | October CMS Improper Authentication | CISA | 2022-01-18 | 1724d overdue |
| CVE-2021-25298EUVD-2021-12198 | NagiosNagios XI | Nagios XI OS Command Injection | CISA | 2022-01-18 | 1724d overdue |
| CVE-2021-25297EUVD-2021-12197 | NagiosNagios XI | Nagios XI OS Command Injection | CISA | 2022-01-18 | 1724d overdue |
| CVE-2021-25296EUVD-2021-12196 | NagiosNagios XI | Nagios XI OS Command Injection | CISA | 2022-01-18 | 1724d overdue |
| CVE-2021-22991EUVD-2021-10109 | F5BIG-IP Traffic Management Microkernel | F5 BIG-IP Traffic Management Microkernel Buffer Overflow | CISA | 2022-01-18 | 1724d overdue |
| CVE-2021-21975EUVD-2021-9146 | VMwarevRealize Operations Manager API | VMware Server Side Request Forgery in vRealize Operations Manager APIRansomware | CISA | 2022-01-18 | 1724d overdue |
| CVE-2021-21315EUVD-2021-0527 | Npm packageSystem Information Library for Node.JS | System Information Library for Node.JS Command Injection | CISA | 2022-01-18 | 1724d overdue |
| CVE-2020-14864EUVD-2020-7000 | OracleIntelligence Enterprise Edition | Oracle Business Intelligence Enterprise Edition Path Transversal | CISA | 2022-01-18 | 1557d overdue |
| CVE-2020-13927EUVD-2020-0037 | ApacheAirflow's Experimental API | Apache Airflow's Experimental API Authentication Bypass | CISA | 2022-01-18 | 1557d overdue |
| CVE-2020-13671EUVD-2021-2168 | DrupalDrupal core | Drupal core Un-restricted Upload of File | CISA | 2022-01-18 | 1557d overdue |
| CVE-2020-11978EUVD-2020-0032 | ApacheAirflow | Apache Airflow Command Injection | CISA | 2022-01-18 | 1557d overdue |
| CVE-2021-36260EUVD-2021-22880 | HikvisionSecurity cameras web server | Hikvision Improper Input Validation | CISA | 2022-01-10 | 1732d overdue |
| CVE-2021-27860EUVD-2021-14598 | FatPipeWARP, IPVPN, and MPVPN software | FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit | CISA | 2022-01-10 | 1732d overdue |
| CVE-2021-22017EUVD-2021-9186 | VMwarevCenter Server | VMware vCenter Server Improper Access Control | CISA | 2022-01-10 | 1732d overdue |
| CVE-2020-6572EUVD-2020-27721 | GoogleChrome Media | Google Chrome Media Use-After-Free Vulnerability | CISA | 2022-01-10 | 1565d overdue |
| CVE-2019-9670EUVD-2019-19036 | SynacorZimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference | CISA | 2022-01-10 | 1565d overdue |
| CVE-2019-7609EUVD-2019-17147 | ElasticKibana | Kibana Arbitrary Code Execution | CISA | 2022-01-10 | 1565d overdue |
| CVE-2019-2725EUVD-2019-12364 | OracleWebLogic Server | Oracle WebLogic Server, InjectionRansomware | CISA | 2022-01-10 | 1565d overdue |
| CVE-2019-1579EUVD-2019-10136 | Palo Alto NetworksPAN-OS | Palo Alto Networks PAN-OS Remote Code Execution VulnerabilityRansomware | CISA | 2022-01-10 | 1565d overdue |
| CVE-2019-1458EUVD-2019-10015 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation VulnerabilityRansomware | CISA | 2022-01-10 | 1565d overdue |
| CVE-2019-10149EUVD-2019-2187 | EximMail Transfer Agent (MTA) | Exim Mail Transfer Agent (MTA) Improper Input Validation | CISA | 2022-01-10 | 1565d overdue |
| CVE-2018-13383EUVD-2018-5327 | FortinetFortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Out-of-bounds WriteRansomware | CISA | 2022-01-10 | 1565d overdue |
| CVE-2018-13382EUVD-2018-5326 | FortinetFortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Improper AuthorizationRansomware | CISA | 2022-01-10 | 1565d overdue |
| CVE-2017-1000486EUVD-2021-1339 | PrimetekPrimefaces Application | Primetek Primefaces Remote Code Execution Vulnerability | CISA | 2022-01-10 | 1565d overdue |
| CVE-2015-7450EUVD-2015-7374 | IBMWebSphere Application Server and Server Hypervisor Edition | IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. | CISA | 2022-01-10 | 1565d overdue |
| CVE-2013-3900EUVD-2013-3832 | MicrosoftWinVerifyTrust function | Microsoft WinVerifyTrust function Remote Code Execution | CISA | 2022-01-10 | 1565d overdue |
| CVE-2021-43890EUVD-2021-30752 | MicrosoftWindows | Microsoft Windows AppX Installer Spoofing VulnerabilityRansomware | CISA | 2021-12-15 | 1758d overdue |
| CVE-2021-4102EUVD-2021-33987 | GoogleChromium V8 | Google Chromium V8 Use-After-Free Vulnerability | CISA | 2021-12-15 | 1758d overdue |
| CVE-2021-44515EUVD-2021-31348 | ZohoDesktop Central | Zoho Desktop Central Authentication Bypass Vulnerability | CISA | 2021-12-10 | 1763d overdue |
| CVE-2021-44228EUVD-2021-34768 | ApacheLog4j2 | Apache Log4j2 Remote Code Execution VulnerabilityRansomware | CISA | 2021-12-10 | 1763d overdue |
| CVE-2021-44168EUVD-2021-31018 | FortinetFortiOS | Fortinet FortiOS Arbitrary File Download | CISA | 2021-12-10 | 1763d overdue |
| CVE-2021-35394EUVD-2021-22037 | RealtekJungle Software Development Kit (SDK) | Realtek Jungle SDK Remote Code Execution Vulnerability | CISA | 2021-12-10 | 1763d overdue |
| CVE-2020-8816EUVD-2020-29664 | Pi-holeAdminLTE | Pi-Hole AdminLTE Remote Code Execution Vulnerability | CISA | 2021-12-10 | 1595d overdue |
| CVE-2020-17463EUVD-2020-9415 | Fuel CMSFuel CMS | Fuel CMS SQL Injection Vulnerability | CISA | 2021-12-10 | 1595d overdue |
| CVE-2019-7238EUVD-2019-16782 | SonatypeNexus Repository Manager | Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability | CISA | 2021-12-10 | 1595d overdue |
| CVE-2019-13272EUVD-2019-4779 | LinuxKernel | Linux Kernel Improper Privilege Management Vulnerability | CISA | 2021-12-10 | 1595d overdue |
| CVE-2019-10758EUVD-2019-0791 | MongoDBmongo-express | MongoDB mongo-express Remote Code Execution Vulnerability | CISA | 2021-12-10 | 1595d overdue |
| CVE-2019-0193EUVD-2019-0615 | ApacheSolr | Apache Solr DataImportHandler Code Injection Vulnerability | CISA | 2021-12-10 | 1595d overdue |
| CVE-2017-17562EUVD-2017-8720 | EmbedthisGoAhead | Embedthis GoAhead Remote Code Execution Vulnerability | CISA | 2021-12-10 | 1595d overdue |
| CVE-2017-12149EUVD-2017-3733 | Red HatJBoss Application Server | Red Hat JBoss Application Server Remote Code Execution VulnerabilityRansomware | CISAEU | 2021-12-10 | 1595d overdue |
| CVE-2010-1871EUVD-2010-1890 | Red HatJBoss Seam 2 | Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability | CISA | 2021-12-10 | 1595d overdue |
| CVE-2021-44077EUVD-2021-30936 | ZohoManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability | CISA | 2021-12-01 | 1772d overdue |
| CVE-2021-40438EUVD-2021-27615 | ApacheApache | Apache HTTP Server-Side Request Forgery (SSRF)Ransomware | CISA | 2021-12-01 | 1772d overdue |
| CVE-2021-37415EUVD-2021-23980 | ZohoManageEngine ServiceDesk Plus (SDP) | Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability | CISA | 2021-12-01 | 1772d overdue |
| CVE-2020-11261EUVD-2020-3615 | QualcommSnapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | Qualcomm Multiple Chipsets Improper Input Validation Vulnerability | CISA | 2021-12-01 | 1604d overdue |
| CVE-2018-14847EUVD-2018-6729 | MikroTikRouterOS | MikroTik Router OS Directory Traversal Vulnerability | CISA | 2021-12-01 | 1604d overdue |
| CVE-2021-42321EUVD-2021-29296 | MicrosoftExchange | Microsoft Exchange Server Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-17 | 1786d overdue |
| CVE-2021-42292EUVD-2021-29267 | MicrosoftOffice | Microsoft Excel Security Feature Bypass | CISA | 2021-11-17 | 1786d overdue |
| CVE-2021-40449EUVD-2021-27626 | MicrosoftWindows | Microsoft Windows Win32k Privilege Escalation VulnerabilityRansomware | CISA | 2021-11-17 | 1786d overdue |
| CVE-2021-22204EUVD-2021-9350 | PerlExiftool | ExifTool Remote Code Execution Vulnerability | CISA | 2021-11-17 | 1786d overdue |
| CVE-2021-42258EUVD-2021-29234 | BQEBillQuick Web Suite | BQE BillQuick Web Suite SQL Injection VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-42013EUVD-2021-29001 | ApacheHTTP Server | Apache HTTP Server Path Traversal VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-41773EUVD-2021-28781 | ApacheHTTP Server | Apache HTTP Server Path Traversal VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-40539EUVD-2021-27714 | ZohoManageEngine | Zoho ManageEngine ADSelfService Plus Authentication Bypass VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-40444EUVD-2021-27621 | MicrosoftMSHTML | Microsoft MSHTML Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-38649EUVD-2021-25088 | MicrosoftOpen Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-38648EUVD-2021-25087 | MicrosoftOpen Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-38647EUVD-2021-25086 | MicrosoftOpen Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-38645EUVD-2021-25084 | MicrosoftOpen Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-38003EUVD-2021-24476 | GoogleChromium V8 | Google Chromium V8 Memory Corruption Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-38000EUVD-2021-24473 | GoogleChromium Intents | Google Chromium Intents Improper Input Validation Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-37976EUVD-2021-24449 | GoogleChromium | Google Chromium Information Disclosure Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-37975EUVD-2021-24448 | GoogleChromium V8 | Google Chromium V8 Use-After-Free Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-37973EUVD-2021-24446 | GoogleChromium Portals | Google Chromium Portals Use-After-Free Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-36955EUVD-2021-23531 | MicrosoftWindows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-36948EUVD-2021-23524 | MicrosoftWindows | Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-36942EUVD-2021-23518 | MicrosoftWindows | Microsoft Windows Local Security Authority (LSA) Spoofing VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-36742EUVD-2021-23332 | Trend MicroApex One, Apex One as a Service, and Worry-Free Business Security | Trend Micro Multiple Products Improper Input Validation Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-36741EUVD-2021-23331 | Trend MicroApex One, Apex One as a Service, and Worry-Free Business Security | Trend Micro Multiple Products Improper Input Validation Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-35464EUVD-2021-22106 | ForgeRockAccess Management (AM) | ForgeRock Access Management (AM) Core Server Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-35395EUVD-2021-22038 | RealtekAP-Router SDK | Realtek AP-Router SDK Buffer Overflow Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-35211EUVD-2021-21854 | SolarWindsServ-U | SolarWinds Serv-U Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-34527EUVD-2021-21181 | MicrosoftWindows | Microsoft Windows Print Spooler Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2021-34523EUVD-2021-21177 | MicrosoftExchange Server | Microsoft Exchange Server Privilege Escalation VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-34473EUVD-2021-21128 | MicrosoftExchange Server | Microsoft Exchange Server Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-34448EUVD-2021-21103 | MicrosoftWindows | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-33771EUVD-2021-20448 | MicrosoftWindows | Microsoft Windows Kernel Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-33742EUVD-2021-20419 | MicrosoftWindows | Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-33739EUVD-2021-20416 | MicrosoftWindows | Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-31979EUVD-2021-18851 | MicrosoftWindows | Microsoft Windows Kernel Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-31956EUVD-2021-18829 | MicrosoftWindows | Microsoft Windows NTFS Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-31955EUVD-2021-18828 | MicrosoftWindows | Microsoft Windows Kernel Information Disclosure Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-31755EUVD-2021-18639 | TendaAC11 Router | Tenda AC11 Router Stack Buffer Overflow Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-31207EUVD-2021-18120 | MicrosoftExchange Server | Microsoft Exchange Server Security Feature Bypass VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-31201EUVD-2021-18114 | MicrosoftEnhanced Cryptographic Provider | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-31199EUVD-2021-18112 | MicrosoftEnhanced Cryptographic Provider | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30869EUVD-2021-17786 | AppleiOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Type Confusion Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30860EUVD-2021-17777 | AppleMultiple Products | Apple Multiple Products Integer Overflow Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30858EUVD-2021-17775 | AppleiOS, iPadOS, and macOS | Apple iOS, iPadOS, macOS Use-After-Free Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30807EUVD-2021-17724 | AppleMultiple Products | Apple Multiple Products Memory Corruption Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30762EUVD-2021-17679 | AppleiOS | Apple iOS WebKit Use-After-Free Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30761EUVD-2021-17678 | AppleiOS | Apple iOS WebKit Memory Corruption Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30713EUVD-2021-17630 | ApplemacOS | Apple macOS Unspecified Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30666EUVD-2021-17583 | AppleiOS | Apple iOS WebKit Buffer Overflow Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30665EUVD-2021-17582 | AppleMultiple Products | Apple Multiple Products WebKit Memory Corruption Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30663EUVD-2021-17580 | AppleMultiple Products | Apple Multiple Products WebKit Integer Overflow Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30661EUVD-2021-17578 | AppleMultiple Products | Apple Multiple Products WebKit Storage Use-After-Free Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30657EUVD-2021-17574 | ApplemacOS | Apple macOS Unspecified Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30633EUVD-2021-17553 | GoogleChromium Indexed DB API | Google Chromium Indexed DB API Use-After-Free Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30632EUVD-2021-17552 | GoogleChromium V8 | Google Chromium V8 Out-of-Bounds Write Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30563EUVD-2021-17483 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30554EUVD-2021-17475 | GoogleChromium WebGL | Google Chromium WebGL Use-After-Free Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30551EUVD-2021-17472 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-30116EUVD-2021-17056 | KaseyaVirtual System/Server Administrator (VSA) | Kaseya Virtual System/Server Administrator (VSA) Information Disclosure VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-28664EUVD-2021-15328 | ArmMali Graphics Processing Unit (GPU) | Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-28663EUVD-2021-15327 | ArmMali Graphics Processing Unit (GPU) | Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-28550EUVD-2021-15226 | AdobeAcrobat and Reader | Adobe Acrobat and Reader Use-After-Free Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-28310EUVD-2021-14995 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-27562EUVD-2021-14313 | ArmTrusted Firmware | Arm Trusted Firmware Out-of-Bounds Write Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-27561EUVD-2021-14312 | YealinkDevice Management | Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-27104EUVD-2021-13874 | AccellionFTA | Accellion FTA OS Command Injection VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-27103EUVD-2021-13873 | AccellionFTA | Accellion FTA Server-Side Request Forgery (SSRF) VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-27102EUVD-2021-13872 | AccellionFTA | Accellion FTA OS Command Injection VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-27101EUVD-2021-13871 | AccellionFTA | Accellion FTA SQL Injection VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-27085EUVD-2021-13856 | MicrosoftInternet Explorer | Microsoft Internet Explorer Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-27065EUVD-2021-13836 | MicrosoftExchange Server | Microsoft Exchange Server Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2021-27059EUVD-2021-13830 | MicrosoftOffice | Microsoft Office Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-26858EUVD-2021-13642 | MicrosoftExchange Server | Microsoft Exchange Server Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2021-26857EUVD-2021-13641 | MicrosoftExchange Server | Microsoft Exchange Server Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2021-26855EUVD-2021-13639 | MicrosoftExchange Server | Microsoft Exchange Server Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2021-26411EUVD-2021-13217 | MicrosoftInternet Explorer | Microsoft Internet Explorer Memory Corruption VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-26084EUVD-2021-12905 | AtlassianConfluence Server and Data Center | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-23874EUVD-2021-10800 | McAfeeMcAfee Total Protection (MTP) | McAfee Total Protection (MTP) Improper Privilege Management Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-22986EUVD-2021-10104 | F5BIG-IP and BIG-IQ Centralized Management | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-22900EUVD-2021-10032 | IvantiPulse Connect Secure | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2021-22899EUVD-2021-10031 | IvantiPulse Connect Secure | Ivanti Pulse Connect Secure Command Injection Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2021-22894EUVD-2021-10026 | IvantiPulse Connect Secure | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2021-22893EUVD-2021-10025 | IvantiPulse Connect Secure | Ivanti Pulse Connect Secure Use-After-Free VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2021-22506EUVD-2021-9652 | Micro FocusMicro Focus Access Manager | Micro Focus Access Manager Information Leakage Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-22502EUVD-2021-9648 | Micro FocusOperation Bridge Reporter (OBR) | Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-22205EUVD-2021-9351 | GitLabCommunity and Enterprise Editions | GitLab Community and Enterprise Editions Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-22005EUVD-2021-9174 | VMwarevCenter Server | VMware vCenter Server File Upload VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-21985EUVD-2021-9156 | VMwarevCenter Server | VMware vCenter Server Improper Input Validation VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-21972EUVD-2021-9143 | VMwarevCenter Server | VMware vCenter Server Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-21224EUVD-2021-8615 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-21220EUVD-2021-8611 | GoogleChromium V8 | Google Chromium V8 Improper Input Validation Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-21206EUVD-2021-8597 | GoogleChromium Blink | Google Chromium Blink Use-After-Free Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-21193EUVD-2021-8584 | GoogleChromium Blink | Google Chromium Blink Use-After-Free Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-21166EUVD-2021-8557 | GoogleChromium | Google Chromium Race Condition Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-21148EUVD-2021-8539 | GoogleChromium V8 | Google Chromium V8 Heap Buffer Overflow Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-21017EUVD-2021-8423 | AdobeAcrobat and Reader | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-20090EUVD-2021-7547 | ArcadyanBuffalo Firmware | Arcadyan Buffalo Firmware Path Traversal Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-20023EUVD-2021-7486 | SonicWallSonicWall Email Security | SonicWall Email Security Path Traversal VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-20022EUVD-2021-7485 | SonicWallSonicWall Email Security | SonicWall Email Security Unrestricted Upload of File VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-20021EUVD-2021-7484 | SonicWallSonicWall Email Security | SonicWall Email Security Improper Privilege Management VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-20016EUVD-2021-7479 | SonicWallSSLVPN SMA100 | SonicWall SSLVPN SMA100 SQL Injection VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-1906EUVD-2021-7370 | QualcommMultiple Chipsets | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-1905EUVD-2021-7369 | QualcommMultiple Chipsets | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2021-1879EUVD-2021-7343 | AppleiOS, iPadOS, and watchOS | Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-1871EUVD-2021-7335 | AppleiOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-1870EUVD-2021-7334 | AppleiOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-1782EUVD-2021-7246 | AppleMultiple Products | Apple Multiple Products Race Condition Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-1732EUVD-2021-7196 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-1675EUVD-2021-7142 | MicrosoftWindows | Microsoft Windows Print Spooler Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-1647EUVD-2021-7114 | MicrosoftDefender | Microsoft Defender Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-1498EUVD-2021-6965 | CiscoHyperFlex HX | Cisco HyperFlex HX Data Platform Command Injection Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2021-1497EUVD-2021-6964 | CiscoHyperFlex HX | Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2020-9859EUVD-2020-30638 | AppleMultiple Products | Apple Multiple Products Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-9819EUVD-2020-30598 | AppleiOS, iPadOS, and watchOS | Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-9818EUVD-2020-30597 | AppleiOS, iPadOS, and watchOS | Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-8657EUVD-2020-29505 | EyesOfNetworkEyesOfNetwork | EyesOfNetwork Use of Hard-Coded Credentials Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-8655EUVD-2020-29503 | EyesOfNetworkEyesOfNetwork | EyesOfNetwork Improper Privilege Management Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-8644EUVD-2020-29492 | PlaySMSPlaySMS | PlaySMS Server-Side Template Injection Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-8599EUVD-2020-29447 | Trend MicroApex One and OfficeScan | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-8515EUVD-2020-29381 | DrayTekMultiple Vigor Routers | Multiple DrayTek Vigor Routers Web Management Page Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-8468EUVD-2020-29334 | Trend MicroApex One, OfficeScan and Worry-Free Business Security Agents | Trend Micro Multiple Products Content Validation Escape Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-8467EUVD-2020-29333 | Trend MicroApex One and OfficeScan | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-8260EUVD-2020-29130 | IvantiPulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-8243EUVD-2020-29114 | IvantiPulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-8196EUVD-2020-29073 | CitrixApplication Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-8195EUVD-2020-29072 | CitrixApplication Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-8193EUVD-2020-29070 | CitrixApplication Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-7961EUVD-2022-5527 | LiferayLiferay Portal | Liferay Portal Deserialization of Untrusted Data Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-6820EUVD-2020-27964 | MozillaFirefox and Thunderbird | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-6819EUVD-2020-27963 | MozillaFirefox and Thunderbird | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-6418EUVD-2020-27568 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-6287EUVD-2020-27437 | SAPNetWeaver | SAP NetWeaver Missing Authentication for Critical Function Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-6207EUVD-2020-27357 | SAPSolution Manager | SAP Solution Manager Missing Authentication for Critical Function Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-5902EUVD-2020-27056 | F5BIG-IP | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-5849EUVD-2020-27003 | UnraidUnraid | Unraid Authentication Bypass Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-5847EUVD-2020-27001 | UnraidUnraid | Unraid Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-5735EUVD-2020-26894 | AmcrestCameras and Network Video Recorder (NVR) | Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-4430EUVD-2020-25677 | IBMData Risk Manager | IBM Data Risk Manager Directory Traversal Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-4428EUVD-2020-25675 | IBMData Risk Manager | IBM Data Risk Manager Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-4427EUVD-2020-25674 | IBMData Risk Manager | IBM Data Risk Manager Security Bypass Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-4006EUVD-2020-25271 | VMwareMultiple Products | Multiple VMware Products Command Injection Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-3992EUVD-2020-25257 | VMwareESXi | VMware ESXi OpenSLP Use-After-Free VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-3952EUVD-2020-25217 | VMwarevCenter Server | VMware vCenter Server Information Disclosure Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-3950EUVD-2020-25215 | VMwareMultiple Products | VMware Multiple Products Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-3580EUVD-2020-24851 | CiscoAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Cross-Site Scripting (XSS) VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-3569EUVD-2020-24840 | CiscoIOS XR | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-3566EUVD-2020-24837 | CiscoIOS XR | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-3452EUVD-2020-24723 | CiscoAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Read-Only Path Traversal Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-3161EUVD-2020-24432 | CiscoCisco IP Phones | Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-3118EUVD-2020-24389 | CiscoIOS XR | Cisco IOS XR Software Discovery Protocol Format String Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-29583EUVD-2020-21944 | ZyxelMultiple Products | Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-29557EUVD-2020-21920 | D-LinkDIR-825 R1 Devices | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-27950EUVD-2020-20443 | AppleMultiple Products | Apple Multiple Products Memory Initialization Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-27932EUVD-2020-20425 | AppleMultiple Products | Apple Multiple Products Type Confusion Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-27930EUVD-2020-20423 | AppleMultiple Products | Apple Multiple Products Memory Corruption Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-26919EUVD-2020-19449 | NETGEARJGS516PE Devices | Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-2555EUVD-2020-22348 | OracleMultiple Products | Oracle Multiple Products Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-25506EUVD-2020-18191 | D-LinkDNS-320 Device | D-Link DNS-320 Device Command Injection Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-25213EUVD-2020-17903 | WordPressFile Manager Plugin | WordPress File Manager Plugin Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-24557EUVD-2020-17276 | Trend MicroApex One, OfficeScan, and Worry-Free Business Security | Trend Micro Multiple Products Improper Access Control Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-17530EUVD-2022-1073 | ApacheStruts | Apache Struts Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-17496EUVD-2020-9444 | vBulletinvBulletin | vBulletin PHP Module Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-17144EUVD-2020-9098 | MicrosoftExchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-17087EUVD-2020-9042 | MicrosoftWindows | Microsoft Windows Kernel Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-16846EUVD-2020-0173 | SaltStackSalt | SaltStack Salt Shell Injection Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-16017EUVD-2020-1456 | GoogleChrome | Google Chrome Use-After-Free Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-16013EUVD-2020-1474 | GoogleChromium V8 | Google Chromium V8 Incorrect Implementation Vulnerabililty | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-16010EUVD-2020-7979 | GoogleChrome for Android UI | Google Chrome for Android UI Heap Buffer Overflow Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-16009EUVD-2020-1500 | GoogleChromium V8 | Google Chromium V8 Type Confusion Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-15999EUVD-2020-1435 | GoogleChrome FreeType | Google Chrome FreeType Heap Buffer Overflow Vulnerability | CISA | 2021-11-03 | 1800d overdue |
| CVE-2020-15505EUVD-2020-7497 | IvantiMobileIron Multiple Products | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-14883EUVD-2020-7019 | OracleWebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-14882EUVD-2020-7018 | OracleWebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-14871EUVD-2020-7007 | OracleSolaris and Zettabyte File System (ZFS) | Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-14750EUVD-2020-6886 | OracleWebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-1472EUVD-2020-12346 | MicrosoftNetlogon | Microsoft Netlogon Privilege Escalation VulnerabilityRansomware | CISAEU | 2021-11-03 | 1633d overdue |
| CVE-2020-1464EUVD-2020-12339 | MicrosoftWindows | Microsoft Windows Spoofing Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-1380EUVD-2020-12256 | MicrosoftInternet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-1350EUVD-2020-12226 | MicrosoftWindows | Microsoft Windows DNS Server Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-12812EUVD-2020-5095 | FortinetFortiOS | Fortinet FortiOS SSL VPN Improper Authentication VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-12271EUVD-2020-4584 | SophosSFOS | Sophos SFOS SQL Injection VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-11738EUVD-2020-4080 | WordPressSnap Creek Duplicator Plugin | WordPress Snap Creek Duplicator Plugin File Download Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-11652EUVD-2020-0172 | SaltStackSalt | SaltStack Salt Path Traversal Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-11651EUVD-2020-0171 | SaltStackSalt | SaltStack Salt Authentication Bypass Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-1147EUVD-2022-3898 | Microsoft.NET Framework, SharePoint, Visual Studio | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-10987EUVD-2020-3386 | TendaAC1900 Router AC15 Model | Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-1054EUVD-2020-11947 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-1040EUVD-2020-11934 | MicrosoftHyper-V RemoteFX | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-10221EUVD-2020-2679 | rConfigrConfig | rConfig OS Command Injection Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-1020EUVD-2020-11916 | MicrosoftWindows | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-10199EUVD-2020-0379 | SonatypeNexus Repository | Sonatype Nexus Repository Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-10189EUVD-2020-2650 | ZohoManageEngine | Zoho ManageEngine Desktop Central File Upload Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-10181EUVD-2020-2643 | SumavisionEnhanced Multimedia Router (EMR) | Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-10148EUVD-2020-2611 | SolarWindsOrion | SolarWinds Orion Authentication Bypass Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-0986EUVD-2020-2452 | MicrosoftWindows | Microsoft Windows Kernel Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-0968EUVD-2020-2436 | MicrosoftInternet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-0938EUVD-2020-2406 | MicrosoftWindows | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-0878EUVD-2020-2346 | MicrosoftEdge and Internet Explorer | Microsoft Edge and Internet Explorer Memory Corruption VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-0688EUVD-2020-2181 | MicrosoftExchange Server | Microsoft Exchange Server Validation Key Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-0683EUVD-2020-2176 | MicrosoftWindows | Microsoft Windows Installer Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-0674EUVD-2020-2167 | MicrosoftInternet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-0646EUVD-2020-2140 | Microsoft.NET Framework | Microsoft .NET Framework Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-0601EUVD-2020-2099 | MicrosoftWindows | Microsoft Windows CryptoAPI Spoofing Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-0069EUVD-2020-1576 | MediaTekMultiple Chipsets | Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2020-0041EUVD-2020-1548 | AndroidAndroid Kernel | Android Kernel Out-of-Bounds Write Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-9978EUVD-2019-19332 | WordPressSocial Warfare Plugin | WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-9082EUVD-2019-18467 | ThinkPHPThinkPHP | ThinkPHP Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-8394EUVD-2019-17784 | ZohoManageEngine | Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-7481EUVD-2019-17023 | SonicWallSMA100 | SonicWall SMA100 SQL Injection VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-6223EUVD-2019-15790 | AppleiOS and macOS | Apple iOS and macOS Group Facetime Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-5591EUVD-2019-15166 | FortinetFortiOS | Fortinet FortiOS Default Configuration VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-5544EUVD-2019-15119 | VMwareVMware ESXi and Horizon DaaS | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-4716EUVD-2019-14323 | IBMPlanning Analytics | IBM Planning Analytics Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-3398EUVD-2019-13037 | AtlassianConfluence Server and Data Center | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-3396EUVD-2019-13035 | AtlassianConfluence Server and Data Server | Atlassian Confluence Server and Data Center Server-Side Template Injection VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-2215EUVD-2019-11857 | AndroidAndroid Kernel | Android Kernel Use-After-Free Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-20085EUVD-2019-10641 | TVTNVMS-1000 | TVT NVMS-1000 Directory Traversal Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-19781EUVD-2019-9380 | CitrixApplication Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-19356EUVD-2019-8977 | NetisWF2419 Devices | Netis WF2419 Devices Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-18988EUVD-2019-8642 | TeamViewerDesktop | TeamViewer Desktop Bypass Remote Login Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-18935EUVD-2019-8608 | ProgressTelerik UI for ASP.NET AJAX | Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-18187EUVD-2019-7990 | Trend MicroOfficeScan | Trend Micro OfficeScan Directory Traversal Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-17558EUVD-2020-0320 | ApacheSolr | Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-17026EUVD-2019-7500 | MozillaFirefox and Thunderbird | Mozilla Firefox And Thunderbird Type Confusion Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-16759EUVD-2019-7294 | vBulletinvBulletin | vBulletin PHP Module Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-1653EUVD-2019-10210 | CiscoSmall Business RV320 and RV325 Routers | Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-16256EUVD-2019-7062 | SIMallianceToolbox Browser | SIMalliance Toolbox Browser Command Injection Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-15949EUVD-2019-6850 | NagiosNagios XI | Nagios XI Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-15752EUVD-2019-6687 | DockerDesktop Community Edition | Docker Desktop Community Edition Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-1429EUVD-2019-9986 | MicrosoftInternet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-1367EUVD-2019-9924 | MicrosoftInternet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-13608EUVD-2019-5046 | CitrixStoreFront Server | Citrix StoreFront Server XML External Entity (XXE) Processing VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-1215EUVD-2019-9783 | MicrosoftWindows | Microsoft Windows Privilege Escalation VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-1214EUVD-2019-9782 | MicrosoftWindows | Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-11634EUVD-2019-3304 | CitrixWorkspace Application and Receiver for Windows | Citrix Workspace Application and Receiver for Windows Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-11580EUVD-2019-3250 | AtlassianCrowd and Crowd Data Center | Atlassian Crowd and Crowd Data Center Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-11539EUVD-2019-3210 | IvantiPulse Connect Secure and Pulse Policy Secure | Ivanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-11510EUVD-2019-3183 | IvantiPulse Connect Secure | Ivanti Pulse Connect Secure Arbitrary File Read VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-0863EUVD-2019-1612 | MicrosoftWindows | Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-0859EUVD-2019-1610 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-0808EUVD-2019-1563 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-0803EUVD-2019-1559 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-0797EUVD-2019-1553 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-0708EUVD-2019-1468 | MicrosoftRemote Desktop Services | Microsoft Remote Desktop Services Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-0604EUVD-2019-1370 | MicrosoftSharePoint | Microsoft SharePoint Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-0541EUVD-2019-1313 | MicrosoftMSHTML | Microsoft MSHTML Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2019-0211EUVD-2019-1002 | ApacheHTTP Server | Apache HTTP Server Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-8653EUVD-2018-20264 | MicrosoftInternet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-7600EUVD-2022-2985 | DrupalDrupal Core | Drupal Core Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-6789EUVD-2018-18536 | EximExim | Exim Buffer Overflow VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-4939EUVD-2018-16724 | AdobeColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-4878EUVD-2018-16663 | AdobeFlash Player | Adobe Flash Player Use-After-Free VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-2380EUVD-2018-14235 | SAPCustomer Relationship Management (CRM) | SAP Customer Relationship Management (CRM) Path Traversal VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-20062EUVD-2018-12637 | ThinkPHPnoneCms | ThinkPHP "noneCms" Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-18325EUVD-2019-0595 | DotNetNuke (DNN)DotNetNuke (DNN) | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-15961EUVD-2018-7817 | AdobeColdFusion | Adobe ColdFusion Unrestricted File Upload Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-15811EUVD-2019-0590 | DotNetNuke (DNN)DotNetNuke (DNN) | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-14558EUVD-2018-6467 | TendaAC7, AC9, and AC10 Routers | Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-13379EUVD-2018-5323 | FortinetFortiOS | Fortinet FortiOS SSL VPN Path Traversal VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-11776EUVD-2018-0582 | ApacheStruts | Apache Struts Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-0802EUVD-2018-1608 | MicrosoftOffice | Microsoft Office Memory Corruption VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-0798EUVD-2018-1604 | MicrosoftOffice | Microsoft Office Memory Corruption Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-0296EUVD-2018-1119 | CiscoAdaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2018-0171EUVD-2018-0994 | CiscoIOS and IOS XE | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2017-9822EUVD-2018-0710 | DotNetNuke (DNN)DotNetNuke (DNN) | DotNetNuke (DNN) Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2017-9805EUVD-2018-0602 | ApacheStruts | Apache Struts Deserialization of Untrusted Data Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2017-9248EUVD-2017-18184 | ProgressASP.NET AJAX and Sitefinity | Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2017-8759EUVD-2017-17705 | Microsoft.NET Framework | Microsoft .NET Framework Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2017-7269EUVD-2017-16299 | MicrosoftInternet Information Services (IIS) | Microsoft Windows Server Buffer Overflow Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2017-6327EUVD-2017-15388 | SymantecSymantec Messaging Gateway | Symantec Messaging Gateway Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2017-5638EUVD-2018-0625 | ApacheStruts | Apache Struts Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2017-16651EUVD-2017-7838 | RoundcubeRoundcube Webmail | Roundcube Webmail File Disclosure Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2017-11882EUVD-2017-3478 | MicrosoftOffice | Microsoft Office Memory Corruption VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2017-11774EUVD-2017-3382 | MicrosoftOffice | Microsoft Office Outlook Security Feature Bypass Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2017-0199EUVD-2017-0566 | MicrosoftOffice and WordPad | Microsoft Office and WordPad Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2017-0143EUVD-2017-0510 | MicrosoftWindows | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2016-9563EUVD-2016-10369 | SAPNetWeaver | SAP NetWeaver XML External Entity (XXE) Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2016-7255EUVD-2016-8111 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2016-4437EUVD-2022-4711 | ApacheShiro | Apache Shiro Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2016-3976EUVD-2016-4985 | SAPNetWeaver | SAP NetWeaver Directory Traversal Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2016-3718EUVD-2016-4739 | ImageMagickImageMagick | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2016-3715EUVD-2016-4736 | ImageMagickImageMagick | ImageMagick Arbitrary File Deletion Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2016-3643EUVD-2016-4668 | SolarWindsVirtualization Manager | SolarWinds Virtualization Manager Privilege Escalation Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2016-3235EUVD-2016-4273 | MicrosoftOffice | Microsoft Office OLE DLL Side Loading Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2016-0185EUVD-2016-0223 | MicrosoftWindows | Microsoft Windows Media Center Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2016-0167EUVD-2016-0205 | MicrosoftWin32k | Microsoft Win32k Privilege Escalation VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2015-4852EUVD-2015-4869 | OracleWebLogic Server | Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2015-1641EUVD-2015-1771 | MicrosoftOffice | Microsoft Office Memory Corruption Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2014-1812EUVD-2014-1886 | MicrosoftWindows | Microsoft Windows Group Policy Preferences Password Privilege Escalation VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2012-3152EUVD-2012-3130 | OracleFusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | CISA | 2021-11-03 | 1633d overdue |
| CVE-2012-0158EUVD-2012-0196 | MicrosoftMSCOMCTL.OCX | Microsoft MSCOMCTL.OCX Remote Code Execution VulnerabilityRansomware | CISA | 2021-11-03 | 1633d overdue |
| CVE-2010-5326EUVD-2010-5284 | SAPNetWeaver | SAP NetWeaver Remote Code Execution Vulnerability | CISA | 2021-11-03 | 1633d overdue |
No entry matches these filters
Clear the search or turn a filter off.
Sources: CISA Known Exploited Vulnerabilities Catalog and the EU KEV via the ENISA European Vulnerability Database. EUVD ids link to ENISA. Countdown is relative to today (UTC).