{"meta":{"title":"Compact KEV index","description":"Array rows for fast client-side filtering: [cveID, vendor, product, name, dateAdded, dueDate, ransomware 0/1, cwes, url, vendorUrl, productUrl].","source":"CISA Known Exploited Vulnerabilities catalog (https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json)","catalogVersion":"2026.09.23","catalogDateReleased":"2026-09-23T12:51:35.821Z","referenceDate":"2026-09-23","publisher":"Telemetry","license":"https://creativecommons.org/licenses/by/4.0/","documentation":"https://glide-telemetry.pages.dev/api/","records":1721},"data":[["CVE-2026-94127","F5","BIG-IP APM","F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability","2026-09-22","2026-09-25",0,["CWE-122"],"/kev/cve-2026-94127/","/vendors/f5/",""],["CVE-2026-93952","Arista","VeloCloud Orchestrator","Arista VeloCloud Orchestrator Improper Input Validation Vulnerability","2026-09-22","2026-09-25",0,["CWE-20"],"/kev/cve-2026-93952/","",""],["CVE-2026-93616","Check Point","Multiple Products","Check Point Multiple Products Path Traversal Vulnerability","2026-09-22","2026-09-25",0,["CWE-22"],"/kev/cve-2026-93616/","/vendors/check-point/",""],["CVE-2026-85102","Check Point","Multiple Products","Check Point Multiple Products Improper Certificate Validation Vulnerability","2026-09-22","2026-09-25",0,["CWE-295"],"/kev/cve-2026-85102/","/vendors/check-point/",""],["CVE-2026-7273","Zyxel","GS1900 Series Switches","Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability","2026-09-21","2026-09-24",0,["CWE-121"],"/kev/cve-2026-7273/","/vendors/zyxel/",""],["CVE-2026-53266","Linux","Kernel","Linux Kernel Out-of-Bounds Write Vulnerability","2026-09-18","2026-09-21",0,["CWE-787"],"/kev/cve-2026-53266/","/vendors/linux/","/products/linux-kernel/"],["CVE-2025-39964","Linux","Kernel","Linux Kernel Race Condition Vulnerability","2026-09-18","2026-09-21",0,["CWE-362"],"/kev/cve-2025-39964/","/vendors/linux/","/products/linux-kernel/"],["CVE-2025-39682","Linux","Kernel","Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability","2026-09-18","2026-09-21",0,["CWE-754"],"/kev/cve-2025-39682/","/vendors/linux/","/products/linux-kernel/"],["CVE-2026-87886","Acronis","Backup","Acronis Backup Incorrect Default Permissions Vulnerability","2026-09-16","2026-09-19",0,["CWE-276"],"/kev/cve-2026-87886/","",""],["CVE-2026-76460","Cisco","Identity Services Engine","Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability","2026-09-16","2026-09-19",0,["CWE-648"],"/kev/cve-2026-76460/","/vendors/cisco/","/products/cisco-identity-services-engine/"],["CVE-2026-58704","Google","Pixel","Google Pixel Improper Authorization Vulnerability","2026-09-16","2026-09-19",0,["CWE-693"],"/kev/cve-2026-58704/","/vendors/google/",""],["CVE-2026-76461","Cisco","Secure Email Gateway","Cisco Secure Email Gateway SQL Injection Vulnerability","2026-09-14","2026-09-17",0,["CWE-89"],"/kev/cve-2026-76461/","/vendors/cisco/",""],["CVE-2026-85706","GitLab","Community Edition and Enterprise Edition","GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability","2026-09-11","2026-09-14",0,["CWE-35"],"/kev/cve-2026-85706/","/vendors/gitlab/",""],["CVE-2026-84869","ConnectWise","ScreenConnect","ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability","2026-09-11","2026-09-14",0,["CWE-269","CWE-862"],"/kev/cve-2026-84869/","","/products/connectwise-screenconnect/"],["CVE-2026-42018","JFrog","Artifactory","JFrog Artifactory Improper Authentication Vulnerability","2026-09-11","2026-09-25",0,["CWE-287"],"/kev/cve-2026-42018/","","/products/jfrog-artifactory/"],["CVE-2026-42016","JFrog","Artifactory","JFrog Artifactory Incorrect Authorization Vulnerability","2026-09-11","2026-09-25",0,["CWE-863"],"/kev/cve-2026-42016/","","/products/jfrog-artifactory/"],["CVE-2026-86060","MikroTik","RouterOS","MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability","2026-09-10","2026-09-13",0,["CWE-88"],"/kev/cve-2026-86060/","","/products/mikrotik-routeros/"],["CVE-2026-67277","MikroTik","RouterOS","MikroTik RouterOS Missing Authentication for Critical Function Vulnerability","2026-09-10","2026-09-13",0,["CWE-306"],"/kev/cve-2026-67277/","","/products/mikrotik-routeros/"],["CVE-2026-87491","Google","Chromium V8","Google Chromium V8 Out of Bounds Write Vulnerability","2026-09-09","2026-09-23",0,["CWE-787"],"/kev/cve-2026-87491/","/vendors/google/","/products/google-chromium-v8/"],["CVE-2026-20079","Cisco","Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management","Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability","2026-09-09","2026-09-12",0,["CWE-288"],"/kev/cve-2026-20079/","/vendors/cisco/",""],["CVE-2026-19490","Citrix","NetScaler","Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability","2026-09-09","2026-09-12",0,["CWE-288"],"/kev/cve-2026-19490/","/vendors/citrix/","/products/citrix-netscaler/"],["CVE-2025-25249","Fortinet","Multiple Products","Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability","2026-09-09","2026-09-12",0,["CWE-122","CWE-787"],"/kev/cve-2025-25249/","/vendors/fortinet/","/products/fortinet-multiple-products/"],["CVE-2026-86218","N-able","N-central","N-able N-central Static Code Injection Vulnerability","2026-09-08","2026-09-11",0,["CWE-96"],"/kev/cve-2026-86218/","/vendors/n-able/","/products/n-able-n-central/"],["CVE-2026-85880","Microsoft","Windows","Microsoft Windows Heap-Based Buffer Overflow Vulnerability","2026-09-08","2026-09-22",0,["CWE-122","CWE-908"],"/kev/cve-2026-85880/","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2026-81963","Microsoft","Windows","Microsoft Windows Link Following Vulnerability","2026-09-08","2026-09-22",0,["CWE-59","CWE-284"],"/kev/cve-2026-81963/","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2026-75650","Adobe","Commerce and Magento","Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability","2026-09-08","2026-09-11",0,["CWE-1336"],"/kev/cve-2026-75650/","/vendors/adobe/",""],["CVE-2026-85046","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2026-09-04","2026-09-18",0,["CWE-843"],"/kev/cve-2026-85046/","/vendors/google/","/products/google-chromium-v8/"],["CVE-2026-9586","Sangoma","Switchvox","Sangoma Switchvox SQL Injection Vulnerability","2026-09-02","2026-09-05",0,["CWE-89"],"/kev/cve-2026-9586/","",""],["CVE-2026-83549","SonicWall","SMA1000 Appliances","SonicWall SMA1000 Appliances OS Command Injection Vulnerability","2026-09-02","2026-09-05",0,["CWE-78"],"/kev/cve-2026-83549/","/vendors/sonicwall/","/products/sonicwall-sma1000-appliances/"],["CVE-2026-83548","SonicWall","SMA1000 Appliances","SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","2026-09-02","2026-09-05",0,["CWE-918","CWE-441"],"/kev/cve-2026-83548/","/vendors/sonicwall/","/products/sonicwall-sma1000-appliances/"],["CVE-2026-82329","JFrog","Artifactory","JFrog Artifactory Improper Authentication Vulnerability","2026-09-02","2026-09-05",0,["CWE-287"],"/kev/cve-2026-82329/","","/products/jfrog-artifactory/"],["CVE-2026-59822","BerriAI","LiteLLM","BerriAI LiteLLM Improper Authentication Vulnerability","2026-09-02","2026-09-16",0,["CWE-287","CWE-306"],"/kev/cve-2026-59822/","","/products/berriai-litellm/"],["CVE-2026-49869","Kestra","Kestra OSS","Kestra OSS OS Command Injection Vulnerability","2026-09-02","2026-09-05",0,["CWE-78","CWE-184","CWE-287","CWE-918"],"/kev/cve-2026-49869/","",""],["CVE-2026-48710","Kludex","Starlette","Kludex Starlette HTTP Request/Response Smuggling Vulnerability","2026-09-02","2026-09-16",0,["CWE-444"],"/kev/cve-2026-48710/","",""],["CVE-2026-82078","PaperCut","NG/MF","PaperCut NG/MF Unsafe Reflection Vulnerability","2026-08-31","2026-09-14",0,["CWE-470"],"/kev/cve-2026-82078/","/vendors/papercut/","/products/papercut-ng-mf/"],["CVE-2026-81578","PaperCut","NG/MF","PaperCut NG/MF Missing Authentication for Critical Function Vulnerability","2026-08-31","2026-09-14",0,["CWE-306"],"/kev/cve-2026-81578/","/vendors/papercut/","/products/papercut-ng-mf/"],["CVE-2026-66384","JFrog","Artifactory","JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability","2026-08-27","2026-09-10",0,["CWE-22"],"/kev/cve-2026-66384/","","/products/jfrog-artifactory/"],["CVE-2026-53362","Linux","Kernel","Linux Kernel Unspecified Vulnerability","2026-08-27","2026-08-30",0,[],"/kev/cve-2026-53362/","/vendors/linux/","/products/linux-kernel/"],["CVE-2023-49105","ownCloud","ownCloud","ownCloud Improper Authentication Vulnerability","2026-08-27","2026-08-30",0,["CWE-287"],"/kev/cve-2023-49105/","",""],["CVE-2026-8452","Citrix","NetScaler ADC and NetScaler Gateway","Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","2026-08-26","2026-08-29",0,["CWE-119"],"/kev/cve-2026-8452/","/vendors/citrix/","/products/citrix-netscaler-adc-and-netscaler-gateway/"],["CVE-2022-0995","Linux","Kernel","Linux Kernel Out-of-Bounds Write Vulnerability","2026-08-26","2026-09-09",0,["CWE-787"],"/kev/cve-2022-0995/","/vendors/linux/","/products/linux-kernel/"],["CVE-2021-23758","Ajax.NET Professional","Ajax.NET Professional","Ajax.NET Professional Deserialization of Untrusted Data Vulnerability","2026-08-26","2026-09-09",0,["CWE-502"],"/kev/cve-2021-23758/","",""],["CVE-2019-1068","Microsoft","SQL Server","Microsoft SQL Server Remote Code Execution Vulnerability","2026-08-26","2026-08-29",0,[],"/kev/cve-2019-1068/","/vendors/microsoft/",""],["CVE-2015-5287","Red Hat","Automatic Bug Reporting Tool","Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability","2026-08-26","2026-09-09",0,[],"/kev/cve-2015-5287/","/vendors/red-hat/",""],["CVE-2015-3246","Red Hat","Libuser","Red Hat Libuser Race Condition Vulnerability","2026-08-26","2026-09-09",0,[],"/kev/cve-2015-3246/","/vendors/red-hat/",""],["CVE-2026-60004","Gitea","Gitea","Gitea Code Injection Vulnerability","2026-08-25","2026-08-28",0,["CWE-94"],"/kev/cve-2026-60004/","",""],["CVE-2026-21962","Oracle","HTTP Server and Oracle Weblogic Server Proxy Plug-in","Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability","2026-08-24","2026-08-27",0,["CWE-284"],"/kev/cve-2026-21962/","/vendors/oracle/",""],["CVE-2026-73570","Synacor","Zimbra Collaboration Suite (ZCS)","Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability","2026-08-21","2026-08-24",0,["CWE-78"],"/kev/cve-2026-73570/","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2026-72530","TrueConf","Server","TrueConf Server Code Injection Vulnerability","2026-08-20","2026-09-03",0,["CWE-94"],"/kev/cve-2026-72530/","",""],["CVE-2026-72529","TrueConf","Server","TrueConf Server Missing Authentication for Critical Function Vulnerability","2026-08-20","2026-08-23",0,["CWE-306"],"/kev/cve-2026-72529/","",""],["CVE-2026-64849","MLflow","MLflow","MLflow Server-Side Request Forgery Vulnerability","2026-08-19","2026-09-02",0,["CWE-918"],"/kev/cve-2026-64849/","",""],["CVE-2026-65400","Apple","macOS","Apple macOS Improper Authentication Vulnerability","2026-08-18","2026-08-21",0,["CWE-287"],"/kev/cve-2026-65400/","/vendors/apple/","/products/apple-macos/"],["CVE-2026-59310","Broadcom","VMware vCenter","Broadcom VMware vCenter Path Traversal Vulnerability","2026-08-18","2026-08-21",1,["CWE-22"],"/kev/cve-2026-59310/","/vendors/broadcom/",""],["CVE-2026-55040","Microsoft","SharePoint","Microsoft SharePoint Weak Authentication Vulnerability","2026-08-18","2026-08-21",0,["CWE-1390"],"/kev/cve-2026-55040/","/vendors/microsoft/","/products/microsoft-sharepoint/"],["CVE-2026-33824","Microsoft","Internet Key Exchange (IKE) Service Extensions","Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability","2026-08-18","2026-08-21",0,["CWE-415"],"/kev/cve-2026-33824/","/vendors/microsoft/",""],["CVE-2025-62593","Ray-Project","Ray","Ray-Project Ray Code Injection Vulnerability","2026-08-17","2026-08-20",0,["CWE-94","CWE-352"],"/kev/cve-2025-62593/","",""],["CVE-2026-72898","Metabase","Metabase","Metabase SQL Injection Vulnerability","2026-08-11","2026-08-14",0,["CWE-89"],"/kev/cve-2026-72898/","",""],["CVE-2026-68820","Microsoft","Windows Ancillary Function Driver for WinSock ","Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","2026-08-11","2026-08-25",0,["CWE-416"],"/kev/cve-2026-68820/","/vendors/microsoft/",""],["CVE-2026-20349","Cisco","Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) ","Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability","2026-08-11","2026-08-14",0,["CWE-244"],"/kev/cve-2026-20349/","/vendors/cisco/",""],["CVE-2026-8037","Progress","LoadMaster","Progress LoadMaster Command Injection Vulnerability","2026-08-07","2026-08-10",0,["CWE-77"],"/kev/cve-2026-8037/","/vendors/progress/",""],["CVE-2026-63077","JetBrains","TeamCity","JetBrains TeamCity Deserialization of Untrusted Data Vulnerability","2026-08-05","2026-08-08",1,["CWE-502"],"/kev/cve-2026-63077/","","/products/jetbrains-teamcity/"],["CVE-2026-9198","IBM","Langflow","IBM Langflow Code Injection Vulnerability","2026-08-04","2026-08-07",0,["CWE-94"],"/kev/cve-2026-9198/","/vendors/ibm/",""],["CVE-2026-34486","Apache","Tomcat","Apache Tomcat Missing Encryption of Sensitive Data Vulnerability","2026-08-04","2026-08-07",0,["CWE-311"],"/kev/cve-2026-34486/","/vendors/apache/","/products/apache-tomcat/"],["CVE-2026-18556","N-able","N-central","N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability","2026-08-04","2026-08-07",0,["CWE-288"],"/kev/cve-2026-18556/","/vendors/n-able/","/products/n-able-n-central/"],["CVE-2026-18577","N-able","N-central","N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability","2026-08-03","2026-08-06",0,["CWE-288"],"/kev/cve-2026-18577/","/vendors/n-able/","/products/n-able-n-central/"],["CVE-2026-20316","Cisco","Secure Firewall Management Center (FMC)","Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability","2026-07-29","2026-08-01",1,["CWE-259"],"/kev/cve-2026-20316/","/vendors/cisco/",""],["CVE-2026-16812","Arista","VeloCloud Orchestrator","Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability","2026-07-27","2026-07-30",0,["CWE-78"],"/kev/cve-2026-16812/","",""],["CVE-2025-68686","Fortinet","FortiOS","Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","2026-07-27","2026-08-10",0,["CWE-200"],"/kev/cve-2025-68686/","/vendors/fortinet/","/products/fortinet-fortios/"],["CVE-2026-50522","Microsoft","SharePoint","Microsoft SharePoint Deserialization of Untrusted Data Vulnerability ","2026-07-22","2026-07-25",0,["CWE-502"],"/kev/cve-2026-50522/","/vendors/microsoft/","/products/microsoft-sharepoint/"],["CVE-2026-16232","Check Point","SmartConsole","Check Point SmartConsole Improper Authentication Vulnerability","2026-07-22","2026-07-25",0,["CWE-287"],"/kev/cve-2026-16232/","/vendors/check-point/",""],["CVE-2026-63030","WordPress","Core","WordPress Core Interpretation Conflict Vulnerability","2026-07-21","2026-07-24",0,["CWE-436"],"/kev/cve-2026-63030/","/vendors/wordpress/",""],["CVE-2026-60137","WordPress","Core","WordPress Core SQL Injection Vulnerability","2026-07-21","2026-08-04",0,["CWE-89"],"/kev/cve-2026-60137/","/vendors/wordpress/",""],["CVE-2026-0770","Langflow","Langflow","Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability","2026-07-21","2026-07-24",0,["CWE-829"],"/kev/cve-2026-0770/","/vendors/langflow/","/products/langflow-langflow/"],["CVE-2021-27137","DD-WRT","DD-WRT","DD-WRT Stack-Based Buffer Overflow Vulnerability","2026-07-21","2026-07-24",0,["CWE-121"],"/kev/cve-2021-27137/","",""],["CVE-2026-58644","Microsoft","SharePoint","Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","2026-07-16","2026-07-19",0,["CWE-502"],"/kev/cve-2026-58644/","/vendors/microsoft/","/products/microsoft-sharepoint/"],["CVE-2026-39808","Fortinet","FortiSandbox","Fortinet FortiSandbox OS Command Injection Vulnerability","2026-07-16","2026-07-19",0,["CWE-78"],"/kev/cve-2026-39808/","/vendors/fortinet/",""],["CVE-2026-25089","Fortinet","FortiSandbox","Fortinet FortiSandbox OS Command Injection Vulnerability","2026-07-16","2026-07-19",0,["CWE-78"],"/kev/cve-2026-25089/","/vendors/fortinet/",""],["CVE-2026-46817","Oracle","E-Business Suite","Oracle E-Business Suite Improper Privilege Management Vulnerability","2026-07-15","2026-07-18",0,["CWE-269","CWE-287","CWE-306"],"/kev/cve-2026-46817/","/vendors/oracle/","/products/oracle-e-business-suite/"],["CVE-2023-4346","KNX Association","KNX Protocol Connection Authorization Option 1","KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability","2026-07-15","2026-07-29",0,["CWE-645"],"/kev/cve-2023-4346/","",""],["CVE-2026-56164","Microsoft","SharePoint Server","Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability","2026-07-14","2026-07-17",0,["CWE-306"],"/kev/cve-2026-56164/","/vendors/microsoft/","/products/microsoft-sharepoint-server/"],["CVE-2026-56155","Microsoft","Active Directory Federation Services","Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability ","2026-07-14","2026-07-28",0,["CWE-1220"],"/kev/cve-2026-56155/","/vendors/microsoft/",""],["CVE-2026-15410","SonicWall","SMA1000 Appliances","SonicWall SMA1000 Appliances Code Injection Vulnerability","2026-07-14","2026-07-17",1,["CWE-94"],"/kev/cve-2026-15410/","/vendors/sonicwall/","/products/sonicwall-sma1000-appliances/"],["CVE-2026-15409","SonicWall","SMA1000 Appliances","SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","2026-07-14","2026-07-17",1,["CWE-918"],"/kev/cve-2026-15409/","/vendors/sonicwall/","/products/sonicwall-sma1000-appliances/"],["CVE-2008-4128","Cisco","IOS","Cisco IOS Cross-Site Request Forgery Vulnerability","2026-07-13","2026-07-16",0,["CWE-352"],"/kev/cve-2008-4128/","/vendors/cisco/",""],["CVE-2026-56291","Balbooa","Forms","Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability","2026-07-10","2026-07-13",0,["CWE-434"],"/kev/cve-2026-56291/","",""],["CVE-2026-48939","iCagenda","iCagenda","iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability","2026-07-10","2026-07-13",0,["CWE-434"],"/kev/cve-2026-48939/","",""],["CVE-2026-56290","Joomlack","Page Builder","Joomlack Page Builder Improper Access Control Vulnerability","2026-07-07","2026-07-10",0,["CWE-284"],"/kev/cve-2026-56290/","",""],["CVE-2026-55255","Langflow","Langflow","Langflow Authorization Bypass Through User-Controlled Key Vulnerability","2026-07-07","2026-07-10",0,["CWE-639"],"/kev/cve-2026-55255/","/vendors/langflow/","/products/langflow-langflow/"],["CVE-2026-48908","JoomShaper","SP Page Builder","JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability","2026-07-07","2026-07-10",0,["CWE-434"],"/kev/cve-2026-48908/","",""],["CVE-2026-48282","Adobe","ColdFusion","Adobe ColdFusion Path Traversal Vulnerability","2026-07-07","2026-07-10",0,["CWE-22"],"/kev/cve-2026-48282/","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2026-45659","Microsoft","SharePoint Server","Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability","2026-07-01","2026-07-04",1,["CWE-502"],"/kev/cve-2026-45659/","/vendors/microsoft/","/products/microsoft-sharepoint-server/"],["CVE-2026-48558","SimpleHelp ","SimpleHelp","SimpleHelp Authentication Bypass Vulnerability","2026-06-29","2026-07-02",0,["CWE-347"],"/kev/cve-2026-48558/","","/products/simplehelp-simplehelp/"],["CVE-2026-20230","Cisco","Unified Communications Manager","Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability","2026-06-25","2026-06-28",0,["CWE-918"],"/kev/cve-2026-20230/","/vendors/cisco/",""],["CVE-2026-12569","PTC","Windchill and FlexPLM","PTC Windchill and FlexPLM Improper Input Validation Vulnerability","2026-06-25","2026-06-28",1,["CWE-20","CWE-502"],"/kev/cve-2026-12569/","",""],["CVE-2026-34910","Ubiquiti","UniFi OS","Ubiquiti UniFi OS Improper Input Validation Vulnerability","2026-06-23","2026-06-26",0,["CWE-20"],"/kev/cve-2026-34910/","","/products/ubiquiti-unifi-os/"],["CVE-2026-34909","Ubiquiti","UniFi OS","Ubiquiti UniFi OS Path Traversal Vulnerability","2026-06-23","2026-06-26",0,["CWE-22"],"/kev/cve-2026-34909/","","/products/ubiquiti-unifi-os/"],["CVE-2026-34908","Ubiquiti","UniFi OS","Ubiquiti UniFi OS Improper Access Control Vulnerability","2026-06-23","2026-06-26",0,["CWE-284"],"/kev/cve-2026-34908/","","/products/ubiquiti-unifi-os/"],["CVE-2025-67038","Lantronix","EDS5000","Lantronix EDS5000 Code Injection Vulnerability","2026-06-23","2026-06-26",0,["CWE-78","CWE-94"],"/kev/cve-2025-67038/","",""],["CVE-2026-20253","Splunk","Enterprise","Splunk Enterprise Missing Authentication for Critical Function Vulnerability","2026-06-18","2026-06-21",0,["CWE-306"],"/kev/cve-2026-20253/","",""],["CVE-2026-48907","Widget Factory","Joomla Content Editor ","Widget Factory Joomla Content Editor Improper Access Control Vulnerability","2026-06-16","2026-06-19",0,["CWE-284"],"/kev/cve-2026-48907/","",""],["CVE-2026-54420","LiteSpeed","cPanel Plugin","LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability","2026-06-15","2026-06-18",0,["CWE-61"],"/kev/2026/#cve-2026-54420","",""],["CVE-2026-20262","Cisco","Catalyst SD-WAN Manager","Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability","2026-06-15","2026-06-29",0,["CWE-22"],"/kev/2026/#cve-2026-20262","/vendors/cisco/","/products/cisco-catalyst-sd-wan-manager/"],["CVE-2026-35273","Oracle"," PeopleSoft Enterprise PeopleTools","Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability","2026-06-12","2026-06-15",1,["CWE-306"],"/kev/2026/#cve-2026-35273","/vendors/oracle/",""],["CVE-2026-10520","Ivanti","Sentry","Ivanti Sentry OS Command Injection Vulnerability","2026-06-11","2026-06-14",0,["CWE-78"],"/kev/2026/#cve-2026-10520","/vendors/ivanti/",""],["CVE-2026-7473","Arista","Extensible Operating System","Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability","2026-06-09","2026-06-23",0,["CWE-1023"],"/kev/2026/#cve-2026-7473","",""],["CVE-2026-20245","Cisco","Catalyst SD-WAN Manager","Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability","2026-06-09","2026-06-23",0,["CWE-116"],"/kev/2026/#cve-2026-20245","/vendors/cisco/","/products/cisco-catalyst-sd-wan-manager/"],["CVE-2026-11645","Google","Chromium V8","Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","2026-06-09","2026-06-23",0,["CWE-787","CWE-125"],"/kev/2026/#cve-2026-11645","/vendors/google/","/products/google-chromium-v8/"],["CVE-2026-50751","Check Point","Security Gateway","Check Point Security Gateway Improper Authentication Vulnerability","2026-06-08","2026-06-11",1,["CWE-287"],"/kev/2026/#cve-2026-50751","/vendors/check-point/",""],["CVE-2026-42271","BerriAI","LiteLLM","BerriAI LiteLLM Command Injection Vulnerability","2026-06-08","2026-06-22",0,["CWE-78","CWE-77"],"/kev/2026/#cve-2026-42271","","/products/berriai-litellm/"],["CVE-2026-28318","SolarWinds","Serv-U","SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability","2026-06-05","2026-06-19",0,["CWE-400"],"/kev/2026/#cve-2026-28318","/vendors/solarwinds/","/products/solarwinds-serv-u/"],["CVE-2026-45247","Mirasvit","Mirasvit Full Page Cache Warmer","Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability","2026-06-03","2026-06-06",0,["CWE-502"],"/kev/2026/#cve-2026-45247","",""],["CVE-2025-48595","Android","Framework","Android Framework Integer Overflow Vulnerability","2026-06-02","2026-06-05",0,["CWE-190"],"/kev/2026/#cve-2025-48595","/vendors/android/","/products/android-framework/"],["CVE-2022-0492","Linux","Kernel","Linux Kernel Improper Authentication Vulnerability","2026-06-02","2026-06-05",0,["CWE-287","CWE-862"],"/kev/2026/#cve-2022-0492","/vendors/linux/","/products/linux-kernel/"],["CVE-2024-21182","Oracle","WebLogic Server","Oracle WebLogic Server Unspecified Vulnerability","2026-06-01","2026-06-04",0,[],"/kev/2026/#cve-2024-21182","/vendors/oracle/","/products/oracle-weblogic-server/"],["CVE-2026-0257","Palo Alto Networks","PAN-OS","Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","2026-05-29","2026-06-01",1,["CWE-565"],"/kev/2026/#cve-2026-0257","/vendors/palo-alto-networks/","/products/palo-alto-networks-pan-os/"],["CVE-2026-8398","Daemon","Daemon Tools Lite","Daemon Tools Lite Embedded Malicious Code Vulnerability","2026-05-27","2026-05-30",0,["CWE-506"],"/kev/2026/#cve-2026-8398","",""],["CVE-2026-48027","Nx","Nx Console","Nx Console Embedded Malicious Code Vulnerability","2026-05-27","2026-06-10",1,["CWE-506"],"/kev/2026/#cve-2026-48027","",""],["CVE-2026-45321","TanStack","TanStack","TanStack Unspecified Vulnerability","2026-05-27","2026-06-10",1,[],"/kev/2026/#cve-2026-45321","",""],["CVE-2026-48172","LiteSpeed","cPanel Plugin","LiteSpeed cPanel Plugin Privilege Escalation Vulnerability","2026-05-26","2026-05-29",0,["CWE-266"],"/kev/2026/#cve-2026-48172","",""],["CVE-2026-9082","Drupal","Core","Drupal Core SQL Injection Vulnerability","2026-05-22","2026-05-27",0,["CWE-89"],"/kev/2026/#cve-2026-9082","/vendors/drupal/","/products/drupal-core/"],["CVE-2026-34926","Trend Micro","Apex One","Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability","2026-05-21","2026-06-04",0,["CWE-23"],"/kev/2026/#cve-2026-34926","/vendors/trend-micro/",""],["CVE-2025-34291","Langflow","Langflow","Langflow Origin Validation Error Vulnerability","2026-05-21","2026-06-04",0,["CWE-346"],"/kev/2026/#cve-2025-34291","/vendors/langflow/","/products/langflow-langflow/"],["CVE-2026-45498","Microsoft","Defender","Microsoft Defender Denial of Service Vulnerability","2026-05-20","2026-06-03",0,[],"/kev/2026/#cve-2026-45498","/vendors/microsoft/","/products/microsoft-defender/"],["CVE-2026-41091","Microsoft","Defender","Microsoft Defender Link Following Vulnerability","2026-05-20","2026-06-03",0,["CWE-59"],"/kev/2026/#cve-2026-41091","/vendors/microsoft/","/products/microsoft-defender/"],["CVE-2010-0806","Microsoft","Internet Explorer","Microsoft Internet Explorer Use-After-Free Vulnerability","2026-05-20","2026-06-03",0,["CWE-399"],"/kev/2026/#cve-2010-0806","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2010-0249","Microsoft","Internet Explorer","Microsoft Internet Explorer Use-After-Free Vulnerability","2026-05-20","2026-06-03",0,["CWE-416"],"/kev/2026/#cve-2010-0249","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2009-3459","Adobe","Acrobat and Reader","Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability","2026-05-20","2026-06-03",0,["CWE-119"],"/kev/2026/#cve-2009-3459","/vendors/adobe/","/products/adobe-acrobat-and-reader/"],["CVE-2009-1537","Microsoft","DirectX","Microsoft DirectX NULL Byte Overwrite Vulnerability","2026-05-20","2026-06-03",0,[],"/kev/2026/#cve-2009-1537","/vendors/microsoft/",""],["CVE-2008-4250","Microsoft","Windows","Microsoft Windows Buffer Overflow Vulnerability","2026-05-20","2026-06-03",0,["CWE-94"],"/kev/2026/#cve-2008-4250","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2026-42897","Microsoft","Microsoft","Microsoft Exchange Server Cross-Site Scripting Vulnerability","2026-05-15","2026-05-29",0,["CWE-79"],"/kev/2026/#cve-2026-42897","/vendors/microsoft/",""],["CVE-2026-20182","Cisco","Catalyst SD-WAN","Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability","2026-05-14","2026-05-17",0,["CWE-287"],"/kev/2026/#cve-2026-20182","/vendors/cisco/",""],["CVE-2026-42208","BerriAI","LiteLLM","BerriAI LiteLLM SQL Injection Vulnerability","2026-05-08","2026-05-11",0,["CWE-89"],"/kev/2026/#cve-2026-42208","","/products/berriai-litellm/"],["CVE-2026-6973","Ivanti","Endpoint Manager Mobile (EPMM)","Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability","2026-05-07","2026-05-10",0,["CWE-20"],"/kev/2026/#cve-2026-6973","/vendors/ivanti/","/products/ivanti-endpoint-manager-mobile-epmm/"],["CVE-2026-0300","Palo Alto Networks","PAN-OS","Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability","2026-05-06","2026-05-09",0,["CWE-787"],"/kev/2026/#cve-2026-0300","/vendors/palo-alto-networks/","/products/palo-alto-networks-pan-os/"],["CVE-2026-31431","Linux","Kernel","Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability","2026-05-01","2026-05-15",0,["CWE-669"],"/kev/2026/#cve-2026-31431","/vendors/linux/","/products/linux-kernel/"],["CVE-2026-41940","WebPros","cPanel & WHM and WP2 (WordPress Squared)","WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability","2026-04-30","2026-05-03",1,["CWE-306"],"/kev/2026/#cve-2026-41940","",""],["CVE-2026-32202","Microsoft","Windows","Microsoft Windows Protection Mechanism Failure Vulnerability","2026-04-28","2026-05-12",0,["CWE-693"],"/kev/2026/#cve-2026-32202","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-1708","ConnectWise","ScreenConnect","ConnectWise ScreenConnect Path Traversal Vulnerability","2026-04-28","2026-05-12",1,["CWE-22"],"/kev/2026/#cve-2024-1708","","/products/connectwise-screenconnect/"],["CVE-2025-29635","D-Link","DIR-823X","D-Link DIR-823X Command Injection Vulnerability","2026-04-24","2026-05-08",0,["CWE-77"],"/kev/2026/#cve-2025-29635","/vendors/d-link/",""],["CVE-2024-7399","Samsung","MagicINFO 9 Server","Samsung MagicINFO 9 Server Path Traversal Vulnerability","2026-04-24","2026-05-08",0,["CWE-22","CWE-434"],"/kev/2026/#cve-2024-7399","/vendors/samsung/",""],["CVE-2024-57728","SimpleHelp ","SimpleHelp","SimpleHelp Path Traversal Vulnerability","2026-04-24","2026-05-08",1,["CWE-22"],"/kev/2026/#cve-2024-57728","","/products/simplehelp-simplehelp/"],["CVE-2024-57726","SimpleHelp ","SimpleHelp","SimpleHelp Missing Authorization Vulnerability","2026-04-24","2026-05-08",1,["CWE-862"],"/kev/2026/#cve-2024-57726","","/products/simplehelp-simplehelp/"],["CVE-2026-39987","Marimo","Marimo","Marimo Remote Code Execution Vulnerability","2026-04-23","2026-05-07",0,["CWE-306"],"/kev/2026/#cve-2026-39987","",""],["CVE-2026-33825","Microsoft","Defender","Microsoft Defender Insufficient Granularity of Access Control Vulnerability","2026-04-22","2026-05-06",1,["CWE-1220"],"/kev/2026/#cve-2026-33825","/vendors/microsoft/","/products/microsoft-defender/"],["CVE-2026-20133","Cisco","Catalyst SD-WAN Manager","Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","2026-04-20","2026-04-23",0,["CWE-200"],"/kev/2026/#cve-2026-20133","/vendors/cisco/","/products/cisco-catalyst-sd-wan-manager/"],["CVE-2026-20128","Cisco","Catalyst SD-WAN Manager","Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability","2026-04-20","2026-04-23",0,["CWE-257"],"/kev/2026/#cve-2026-20128","/vendors/cisco/","/products/cisco-catalyst-sd-wan-manager/"],["CVE-2026-20122","Cisco","Catalyst SD-WAN Manger","Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability","2026-04-20","2026-04-23",0,["CWE-648"],"/kev/2026/#cve-2026-20122","/vendors/cisco/",""],["CVE-2025-48700","Synacor","Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","2026-04-20","2026-04-23",0,["CWE-79"],"/kev/2026/#cve-2025-48700","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2025-32975","Quest","KACE Systems Management Appliance (SMA)","Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability","2026-04-20","2026-05-04",0,["CWE-287"],"/kev/2026/#cve-2025-32975","",""],["CVE-2025-2749","Kentico","Kentico Xperience","Kentico Xperience Path Traversal Vulnerability","2026-04-20","2026-05-04",0,["CWE-22","CWE-434"],"/kev/2026/#cve-2025-2749","",""],["CVE-2024-27199","JetBrains","TeamCity","JetBrains TeamCity Relative Path Traversal Vulnerability","2026-04-20","2026-05-04",1,["CWE-23"],"/kev/2026/#cve-2024-27199","","/products/jetbrains-teamcity/"],["CVE-2023-27351","PaperCut","NG/MF","PaperCut NG/MF Improper Authentication Vulnerability","2026-04-20","2026-05-04",1,["CWE-287"],"/kev/2026/#cve-2023-27351","/vendors/papercut/","/products/papercut-ng-mf/"],["CVE-2026-34197","Apache","ActiveMQ","Apache ActiveMQ Improper Input Validation Vulnerability","2026-04-16","2026-04-30",0,["CWE-20","CWE-94"],"/kev/2026/#cve-2026-34197","/vendors/apache/","/products/apache-activemq/"],["CVE-2026-32201","Microsoft","SharePoint Server","Microsoft SharePoint Server Improper Input Validation Vulnerability","2026-04-14","2026-04-28",0,["CWE-20"],"/kev/2026/#cve-2026-32201","/vendors/microsoft/","/products/microsoft-sharepoint-server/"],["CVE-2009-0238","Microsoft","Office","Microsoft Office Remote Code Execution","2026-04-14","2026-04-28",0,["CWE-94"],"/kev/2026/#cve-2009-0238","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2026-34621","Adobe","Acrobat and Reader","Adobe Acrobat and Reader Prototype Pollution Vulnerability","2026-04-13","2026-04-27",0,["CWE-1321"],"/kev/2026/#cve-2026-34621","/vendors/adobe/","/products/adobe-acrobat-and-reader/"],["CVE-2026-21643","Fortinet","FortiClient EMS","Fortinet FortiClient EMS SQL Injection Vulnerability","2026-04-13","2026-04-16",0,["CWE-89"],"/kev/2026/#cve-2026-21643","/vendors/fortinet/","/products/fortinet-forticlient-ems/"],["CVE-2025-60710","Microsoft","Windows","Microsoft Windows Link Following Vulnerability","2026-04-13","2026-04-27",1,["CWE-59"],"/kev/2026/#cve-2025-60710","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2023-36424","Microsoft","Windows","Microsoft Windows Out-of-Bounds Read Vulnerability","2026-04-13","2026-04-27",0,["CWE-125"],"/kev/2026/#cve-2023-36424","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2023-21529","Microsoft","Exchange Server","Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","2026-04-13","2026-04-27",1,["CWE-502"],"/kev/2026/#cve-2023-21529","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2020-9715","Adobe","Acrobat","Adobe Acrobat Use-After-Free Vulnerability","2026-04-13","2026-04-27",0,["CWE-416"],"/kev/2026/#cve-2020-9715","/vendors/adobe/",""],["CVE-2012-1854","Microsoft","Visual Basic for Applications (VBA)","Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability","2026-04-13","2026-04-27",0,["CWE-426"],"/kev/2026/#cve-2012-1854","/vendors/microsoft/",""],["CVE-2026-1340","Ivanti","Endpoint Manager Mobile (EPMM)","Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","2026-04-08","2026-04-11",0,["CWE-94"],"/kev/2026/#cve-2026-1340","/vendors/ivanti/","/products/ivanti-endpoint-manager-mobile-epmm/"],["CVE-2026-35616","Fortinet","FortiClient EMS","Fortinet FortiClient EMS Improper Access Control Vulnerability","2026-04-06","2026-04-09",0,["CWE-284"],"/kev/2026/#cve-2026-35616","/vendors/fortinet/","/products/fortinet-forticlient-ems/"],["CVE-2026-3502","TrueConf","Client","TrueConf Client Download of Code Without Integrity Check Vulnerability","2026-04-02","2026-04-16",0,["CWE-494"],"/kev/2026/#cve-2026-3502","",""],["CVE-2026-5281","Google","Dawn","Google Dawn Use-After-Free Vulnerability","2026-04-01","2026-04-15",0,["CWE-416"],"/kev/2026/#cve-2026-5281","/vendors/google/",""],["CVE-2026-3055","Citrix","NetScaler","Citrix NetScaler Out-of-Bounds Read Vulnerability","2026-03-30","2026-04-02",0,["CWE-125"],"/kev/2026/#cve-2026-3055","/vendors/citrix/","/products/citrix-netscaler/"],["CVE-2025-53521","F5","BIG-IP","F5 BIG-IP Stack-Based Buffer Overflow Vulnerability","2026-03-27","2026-03-30",0,["CWE-121"],"/kev/2026/#cve-2025-53521","/vendors/f5/","/products/f5-big-ip/"],["CVE-2026-33634","Aquasecurity","Trivy","Aquasecurity Trivy Embedded Malicious Code Vulnerability","2026-03-26","2026-04-09",0,["CWE-506"],"/kev/2026/#cve-2026-33634","",""],["CVE-2026-33017","Langflow","Langflow","Langflow Code Injection Vulnerability","2026-03-25","2026-04-08",0,["CWE-94","CWE-95","CWE-306"],"/kev/2026/#cve-2026-33017","/vendors/langflow/","/products/langflow-langflow/"],["CVE-2025-54068","Laravel","Livewire","Laravel Livewire Code Injection Vulnerability","2026-03-20","2026-04-03",0,["CWE-94"],"/kev/2026/#cve-2025-54068","",""],["CVE-2025-43520","Apple","Multiple Products","Apple Multiple Products Classic Buffer Overflow Vulnerability","2026-03-20","2026-04-03",0,["CWE-120"],"/kev/2026/#cve-2025-43520","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2025-43510","Apple","Multiple Products","Apple Multiple Products Improper Locking Vulnerability","2026-03-20","2026-04-03",0,["CWE-667"],"/kev/2026/#cve-2025-43510","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2025-32432","Craft CMS","Craft CMS","Craft CMS Code Injection Vulnerability","2026-03-20","2026-04-03",0,["CWE-94"],"/kev/2026/#cve-2025-32432","","/products/craft-cms-craft-cms/"],["CVE-2025-31277","Apple","Multiple Products","Apple Multiple Products Buffer Overflow Vulnerability","2026-03-20","2026-04-03",0,["CWE-119"],"/kev/2026/#cve-2025-31277","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2026-20131","Cisco","Secure Firewall Management Center (FMC)","Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability","2026-03-19","2026-03-22",1,["CWE-502"],"/kev/2026/#cve-2026-20131","/vendors/cisco/",""],["CVE-2026-20963","Microsoft","SharePoint","Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","2026-03-18","2026-03-21",0,["CWE-502"],"/kev/2026/#cve-2026-20963","/vendors/microsoft/","/products/microsoft-sharepoint/"],["CVE-2025-66376","Synacor","Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability","2026-03-18","2026-04-01",0,["CWE-79"],"/kev/2026/#cve-2025-66376","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2025-47813","Wing FTP Server","Wing FTP Server","Wing FTP Server Information Disclosure Vulnerability","2026-03-16","2026-03-30",0,["CWE-209"],"/kev/2026/#cve-2025-47813","",""],["CVE-2026-3910","Google","Chromium V8","Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability","2026-03-13","2026-03-27",0,["CWE-119"],"/kev/2026/#cve-2026-3910","/vendors/google/","/products/google-chromium-v8/"],["CVE-2026-3909","Google","Skia","Google Skia Out-of-Bounds Write Vulnerability","2026-03-13","2026-03-27",0,["CWE-787"],"/kev/2026/#cve-2026-3909","/vendors/google/",""],["CVE-2025-68613","n8n","n8n","n8n Improper Control of Dynamically-Managed Code Resources Vulnerability","2026-03-11","2026-03-25",0,["CWE-913"],"/kev/2026/#cve-2025-68613","",""],["CVE-2026-1603","Ivanti"," Endpoint Manager (EPM)","Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability","2026-03-09","2026-03-23",0,["CWE-288"],"/kev/2026/#cve-2026-1603","/vendors/ivanti/",""],["CVE-2025-26399","SolarWinds","Web Help Desk","SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","2026-03-09","2026-03-12",1,["CWE-502"],"/kev/2026/#cve-2025-26399","/vendors/solarwinds/","/products/solarwinds-web-help-desk/"],["CVE-2021-22054","Omnissa","Workspace One UEM","Omnissa Workspace ONE Server-Side Request Forgery","2026-03-09","2026-03-23",0,["CWE-918"],"/kev/2026/#cve-2021-22054","",""],["CVE-2023-43000","Apple","Multiple Products","Apple Multiple products Use-After-Free Vulnerability","2026-03-05","2026-03-26",0,["CWE-416"],"/kev/2026/#cve-2023-43000","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-41974","Apple","iOS and iPadOS","Apple iOS and iPadOS Use-After-Free Vulnerability","2026-03-05","2026-03-26",0,["CWE-416"],"/kev/2026/#cve-2023-41974","/vendors/apple/","/products/apple-ios-and-ipados/"],["CVE-2021-30952","Apple","Multiple Products","Apple Multiple Products Integer Overflow or Wraparound Vulnerability","2026-03-05","2026-03-26",0,["CWE-190"],"/kev/2026/#cve-2021-30952","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2021-22681","Rockwell","Multiple Products","Rockwell Multiple Products Insufficient Protected Credentials Vulnerability","2026-03-05","2026-03-26",0,["CWE-522"],"/kev/2026/#cve-2021-22681","",""],["CVE-2017-7921","Hikvision","Multiple Products","Hikvision Multiple Products Improper Authentication Vulnerability","2026-03-05","2026-03-26",0,["CWE-287"],"/kev/2026/#cve-2017-7921","",""],["CVE-2026-22719","Broadcom","VMware Aria Operations","Broadcom VMware Aria Operations Command Injection Vulnerability","2026-03-03","2026-03-24",0,["CWE-77"],"/kev/2026/#cve-2026-22719","/vendors/broadcom/",""],["CVE-2026-21385","Qualcomm","Multiple Chipsets","Qualcomm Multiple Chipsets Memory Corruption Vulnerability","2026-03-03","2026-03-24",0,["CWE-190"],"/kev/2026/#cve-2026-21385","/vendors/qualcomm/","/products/qualcomm-multiple-chipsets/"],["CVE-2026-20127","Cisco","Catalyst SD-WAN Controller and Manager","Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability","2026-02-25","2026-02-27",0,["CWE-287"],"/kev/2026/#cve-2026-20127","/vendors/cisco/",""],["CVE-2022-20775","Cisco","SD-WAN","Cisco SD-WAN Path Traversal Vulnerability","2026-02-25","2026-02-27",0,["CWE-25","CWE-282"],"/kev/2026/#cve-2022-20775","/vendors/cisco/",""],["CVE-2026-25108","Soliton Systems K.K","FileZen","Soliton Systems K.K FileZen OS Command Injection Vulnerability","2026-02-24","2026-03-17",0,["CWE-78"],"/kev/2026/#cve-2026-25108","",""],["CVE-2025-68461","Roundcube","Webmail","RoundCube Webmail Cross-site Scripting Vulnerability","2026-02-20","2026-03-13",0,["CWE-79"],"/kev/2026/#cve-2025-68461","/vendors/roundcube/","/products/roundcube-webmail/"],["CVE-2025-49113","Roundcube","Webmail","RoundCube Webmail Deserialization of Untrusted Data Vulnerability","2026-02-20","2026-03-13",0,["CWE-502"],"/kev/2026/#cve-2025-49113","/vendors/roundcube/","/products/roundcube-webmail/"],["CVE-2026-22769","Dell","RecoverPoint for Virtual Machines (RP4VMs)","Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability","2026-02-18","2026-02-21",0,["CWE-798"],"/kev/2026/#cve-2026-22769","",""],["CVE-2021-22175","GitLab","GitLab","GitLab Server-Side Request Forgery (SSRF) Vulnerability","2026-02-18","2026-03-11",0,["CWE-918"],"/kev/2026/#cve-2021-22175","/vendors/gitlab/",""],["CVE-2026-2441","Google","Chromium","Google Chromium CSS Use-After-Free Vulnerability","2026-02-17","2026-03-10",0,["CWE-416"],"/kev/2026/#cve-2026-2441","/vendors/google/","/products/google-chromium/"],["CVE-2024-7694","TeamT5","ThreatSonar Anti-Ransomware","TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability","2026-02-17","2026-03-10",0,["CWE-434"],"/kev/2026/#cve-2024-7694","",""],["CVE-2020-7796","Synacor","Zimbra Collaboration Suite","Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability","2026-02-17","2026-03-10",0,["CWE-918"],"/kev/2026/#cve-2020-7796","/vendors/synacor/",""],["CVE-2008-0015","Microsoft","Windows"," Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability","2026-02-17","2026-03-10",0,[],"/kev/2026/#cve-2008-0015","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2026-1731","BeyondTrust","Remote Support (RS) and Privileged Remote Access (PRA)","BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability","2026-02-13","2026-02-16",1,["CWE-78"],"/kev/2026/#cve-2026-1731","",""],["CVE-2026-20700","Apple","Multiple Products","Apple Multiple Buffer Overflow Vulnerability","2026-02-12","2026-03-05",0,["CWE-119"],"/kev/2026/#cve-2026-20700","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2025-40536","SolarWinds","Web Help Desk","SolarWinds Web Help Desk Security Control Bypass Vulnerability","2026-02-12","2026-02-15",0,["CWE-693"],"/kev/2026/#cve-2025-40536","/vendors/solarwinds/","/products/solarwinds-web-help-desk/"],["CVE-2025-15556","Notepad++","Notepad++","Notepad++ Download of Code Without Integrity Check Vulnerability","2026-02-12","2026-03-05",0,["CWE-494"],"/kev/2026/#cve-2025-15556","",""],["CVE-2024-43468","Microsoft","Configuration Manager","Microsoft Configuration Manager SQL Injection Vulnerability","2026-02-12","2026-03-05",0,["CWE-89"],"/kev/2026/#cve-2024-43468","/vendors/microsoft/",""],["CVE-2026-21533","Microsoft","Windows","Microsoft Windows Improper Privilege Management Vulnerability","2026-02-10","2026-03-03",0,["CWE-269"],"/kev/2026/#cve-2026-21533","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2026-21525","Microsoft","Windows","Microsoft Windows NULL Pointer Dereference Vulnerability","2026-02-10","2026-03-03",0,["CWE-476"],"/kev/2026/#cve-2026-21525","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2026-21519","Microsoft","Windows","Microsoft Windows Type Confusion Vulnerability","2026-02-10","2026-03-03",0,["CWE-843"],"/kev/2026/#cve-2026-21519","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2026-21514","Microsoft","Office","Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability","2026-02-10","2026-03-03",0,["CWE-807"],"/kev/2026/#cve-2026-21514","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2026-21513","Microsoft","Windows","Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability","2026-02-10","2026-03-03",0,["CWE-693"],"/kev/2026/#cve-2026-21513","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2026-21510","Microsoft","Windows","Microsoft Windows Shell Protection Mechanism Failure Vulnerability","2026-02-10","2026-03-03",0,["CWE-693"],"/kev/2026/#cve-2026-21510","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2026-24423","SmarterTools","SmarterMail","SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability","2026-02-05","2026-02-26",1,["CWE-306"],"/kev/2026/#cve-2026-24423","","/products/smartertools-smartermail/"],["CVE-2025-11953","React Native Community","CLI","React Native Community CLI OS Command Injection Vulnerability","2026-02-05","2026-02-26",0,["CWE-78"],"/kev/2026/#cve-2025-11953","",""],["CVE-2025-64328","Sangoma","FreePBX ","Sangoma FreePBX OS Command Injection Vulnerability","2026-02-03","2026-02-24",0,["CWE-78"],"/kev/2026/#cve-2025-64328","",""],["CVE-2025-40551","SolarWinds","Web Help Desk","SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","2026-02-03","2026-02-06",0,["CWE-502"],"/kev/2026/#cve-2025-40551","/vendors/solarwinds/","/products/solarwinds-web-help-desk/"],["CVE-2021-39935","GitLab","Community and Enterprise Editions","GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability","2026-02-03","2026-02-24",0,["CWE-918"],"/kev/2026/#cve-2021-39935","/vendors/gitlab/",""],["CVE-2019-19006","Sangoma","FreePBX"," Sangoma FreePBX Improper Authentication Vulnerability","2026-02-03","2026-02-24",0,["CWE-287"],"/kev/2026/#cve-2019-19006","",""],["CVE-2026-1281","Ivanti","Endpoint Manager Mobile (EPMM)","Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","2026-01-29","2026-02-01",0,["CWE-94"],"/kev/2026/#cve-2026-1281","/vendors/ivanti/","/products/ivanti-endpoint-manager-mobile-epmm/"],["CVE-2026-24858","Fortinet","Multiple Products","Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability","2026-01-27","2026-01-30",0,["CWE-288"],"/kev/2026/#cve-2026-24858","/vendors/fortinet/","/products/fortinet-multiple-products/"],["CVE-2026-24061","GNU","InetUtils","GNU InetUtils Argument Injection Vulnerability","2026-01-26","2026-02-16",0,["CWE-88"],"/kev/2026/#cve-2026-24061","/vendors/gnu/",""],["CVE-2026-23760","SmarterTools","SmarterMail","SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability","2026-01-26","2026-02-16",1,["CWE-288"],"/kev/2026/#cve-2026-23760","","/products/smartertools-smartermail/"],["CVE-2026-21509","Microsoft","Office","Microsoft Office Security Feature Bypass Vulnerability","2026-01-26","2026-02-16",0,["CWE-807"],"/kev/2026/#cve-2026-21509","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2025-52691","SmarterTools","SmarterMail","SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability","2026-01-26","2026-02-16",1,["CWE-434"],"/kev/2026/#cve-2025-52691","","/products/smartertools-smartermail/"],["CVE-2018-14634","Linux","Kernel","Linux Kernel Integer Overflow Vulnerability","2026-01-26","2026-02-16",0,["CWE-190"],"/kev/2026/#cve-2018-14634","/vendors/linux/","/products/linux-kernel/"],["CVE-2024-37079","Broadcom","VMware vCenter Server","Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability","2026-01-23","2026-02-13",0,["CWE-787"],"/kev/2026/#cve-2024-37079","/vendors/broadcom/",""],["CVE-2025-68645","Synacor"," Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability","2026-01-22","2026-02-12",0,["CWE-98"],"/kev/2026/#cve-2025-68645","/vendors/synacor/",""],["CVE-2025-54313","Prettier","eslint-config-prettier","Prettier eslint-config-prettier Embedded Malicious Code Vulnerability","2026-01-22","2026-02-12",0,["CWE-506"],"/kev/2026/#cve-2025-54313","",""],["CVE-2025-34026","Versa","Concerto","Versa Concerto Improper Authentication Vulnerability","2026-01-22","2026-02-12",0,["CWE-288"],"/kev/2026/#cve-2025-34026","",""],["CVE-2025-31125","Vite","Vitejs","Vite Vitejs Improper Access Control Vulnerability","2026-01-22","2026-02-12",0,["CWE-200","CWE-284"],"/kev/2026/#cve-2025-31125","",""],["CVE-2026-20045","Cisco","Unified Communications Manager","Cisco Unified Communications Products Code Injection Vulnerability","2026-01-21","2026-02-11",0,["CWE-94"],"/kev/2026/#cve-2026-20045","/vendors/cisco/",""],["CVE-2026-20805","Microsoft","Windows","Microsoft Windows Information Disclosure Vulnerability","2026-01-13","2026-02-03",0,["CWE-200"],"/kev/2026/#cve-2026-20805","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-8110","Gogs","Gogs","Gogs Path Traversal Vulnerability","2026-01-12","2026-02-02",0,["CWE-22"],"/kev/2026/#cve-2025-8110","",""],["CVE-2025-37164","Hewlett Packard Enterprise (HPE)","OneView","Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability","2026-01-07","2026-01-28",0,["CWE-94"],"/kev/2026/#cve-2025-37164","",""],["CVE-2009-0556","Microsoft","Office","Microsoft Office PowerPoint Code Injection Vulnerability","2026-01-07","2026-01-28",0,["CWE-94"],"/kev/2026/#cve-2009-0556","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2025-14847","MongoDB","MongoDB and MongoDB Server","MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability","2025-12-29","2026-01-19",0,["CWE-130"],"/kev/2025/#cve-2025-14847","",""],["CVE-2023-52163","Digiever","DS-2105 Pro","Digiever DS-2105 Pro Missing Authorization Vulnerability","2025-12-22","2026-01-12",0,["CWE-862"],"/kev/2025/#cve-2023-52163","",""],["CVE-2025-14733","WatchGuard","Firebox","WatchGuard Firebox Out of Bounds Write Vulnerability","2025-12-19","2025-12-26",1,["CWE-787"],"/kev/2025/#cve-2025-14733","",""],["CVE-2025-59374","ASUS","Live Update","ASUS Live Update Embedded Malicious Code Vulnerability","2025-12-17","2026-01-07",0,["CWE-506"],"/kev/2025/#cve-2025-59374","",""],["CVE-2025-40602","SonicWall","SMA1000 appliance","SonicWall SMA1000 Missing Authorization Vulnerability","2025-12-17","2025-12-24",0,["CWE-862","CWE-250"],"/kev/2025/#cve-2025-40602","/vendors/sonicwall/",""],["CVE-2025-20393","Cisco","Multiple Products","Cisco Multiple Products Improper Input Validation Vulnerability","2025-12-17","2025-12-24",0,["CWE-20"],"/kev/2025/#cve-2025-20393","/vendors/cisco/",""],["CVE-2025-59718","Fortinet","Multiple Products","Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability","2025-12-16","2025-12-23",0,["CWE-347"],"/kev/2025/#cve-2025-59718","/vendors/fortinet/","/products/fortinet-multiple-products/"],["CVE-2025-43529","Apple","Multiple Products","Apple Multiple Products Use-After-Free WebKit Vulnerability","2025-12-15","2026-01-05",0,["CWE-416"],"/kev/2025/#cve-2025-43529","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2025-14611","Gladinet","CentreStack and Triofox","Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability","2025-12-15","2026-01-05",0,["CWE-798"],"/kev/2025/#cve-2025-14611","",""],["CVE-2025-14174","Google","Chromium","Google Chromium Out of Bounds Memory Access Vulnerability","2025-12-12","2026-01-02",0,[],"/kev/2025/#cve-2025-14174","/vendors/google/","/products/google-chromium/"],["CVE-2018-4063","Sierra Wireless","AirLink ALEOS","Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability","2025-12-12","2026-01-02",0,["CWE-434"],"/kev/2025/#cve-2018-4063","",""],["CVE-2025-58360","OSGeo","GeoServer","OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability","2025-12-11","2026-01-01",0,["CWE-611"],"/kev/2025/#cve-2025-58360","",""],["CVE-2025-62221","Microsoft","Windows","Microsoft Windows Use After Free Vulnerability","2025-12-09","2025-12-30",0,["CWE-416"],"/kev/2025/#cve-2025-62221","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-6218","RARLAB","WinRAR","RARLAB WinRAR Path Traversal Vulnerability","2025-12-09","2025-12-30",0,["CWE-22"],"/kev/2025/#cve-2025-6218","/vendors/rarlab/","/products/rarlab-winrar/"],["CVE-2025-66644","Array Networks ","ArrayOS AG","Array Networks ArrayOS AG OS Command Injection Vulnerability","2025-12-08","2025-12-29",0,["CWE-78"],"/kev/2025/#cve-2025-66644","",""],["CVE-2022-37055","D-Link","Routers","D-Link Routers Buffer Overflow Vulnerability","2025-12-08","2025-12-29",0,["CWE-120"],"/kev/2025/#cve-2022-37055","/vendors/d-link/",""],["CVE-2025-55182","Meta","React Server Components","Meta React Server Components Remote Code Execution Vulnerability","2025-12-05","2025-12-12",1,[],"/kev/2025/#cve-2025-55182","",""],["CVE-2021-26828","OpenPLC","ScadaBR","OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability","2025-12-03","2025-12-24",0,["CWE-434"],"/kev/2025/#cve-2021-26828","",""],["CVE-2025-48633","Android","Framework","Android Framework Information Disclosure Vulnerability","2025-12-02","2025-12-23",0,[],"/kev/2025/#cve-2025-48633","/vendors/android/","/products/android-framework/"],["CVE-2025-48572","Android","Framework","Android Framework Privilege Escalation Vulnerability","2025-12-02","2025-12-23",0,[],"/kev/2025/#cve-2025-48572","/vendors/android/","/products/android-framework/"],["CVE-2021-26829","OpenPLC","ScadaBR","OpenPLC ScadaBR Cross-site Scripting Vulnerability","2025-11-28","2025-12-19",0,["CWE-79"],"/kev/2025/#cve-2021-26829","",""],["CVE-2025-61757","Oracle","Fusion Middleware","Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability","2025-11-21","2025-12-12",0,["CWE-306"],"/kev/2025/#cve-2025-61757","/vendors/oracle/","/products/oracle-fusion-middleware/"],["CVE-2025-13223","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2025-11-19","2025-12-10",0,["CWE-843"],"/kev/2025/#cve-2025-13223","/vendors/google/","/products/google-chromium-v8/"],["CVE-2025-58034","Fortinet","FortiWeb","Fortinet FortiWeb OS Command Injection Vulnerability","2025-11-18","2025-11-25",0,["CWE-78"],"/kev/2025/#cve-2025-58034","/vendors/fortinet/","/products/fortinet-fortiweb/"],["CVE-2025-64446","Fortinet","FortiWeb","Fortinet FortiWeb Path Traversal Vulnerability","2025-11-14","2025-11-21",0,["CWE-23"],"/kev/2025/#cve-2025-64446","/vendors/fortinet/","/products/fortinet-fortiweb/"],["CVE-2025-9242","WatchGuard","Firebox","WatchGuard Firebox Out-of-Bounds Write Vulnerability","2025-11-12","2025-12-03",0,["CWE-787"],"/kev/2025/#cve-2025-9242","",""],["CVE-2025-62215","Microsoft","Windows","Microsoft Windows Race Condition Vulnerability","2025-11-12","2025-12-03",0,["CWE-362"],"/kev/2025/#cve-2025-62215","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-12480","Gladinet","Triofox","Gladinet Triofox Improper Access Control Vulnerability","2025-11-12","2025-12-03",0,["CWE-284"],"/kev/2025/#cve-2025-12480","",""],["CVE-2025-21042","Samsung","Mobile Devices","Samsung Mobile Devices Out-of-Bounds Write Vulnerability","2025-11-10","2025-12-01",0,["CWE-787"],"/kev/2025/#cve-2025-21042","/vendors/samsung/","/products/samsung-mobile-devices/"],["CVE-2025-48703","CWP","Control Web Panel","CWP Control Web Panel OS Command Injection Vulnerability","2025-11-04","2025-11-25",0,["CWE-78"],"/kev/2025/#cve-2025-48703","",""],["CVE-2025-11371","Gladinet","CentreStack and Triofox","Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability","2025-11-04","2025-11-25",0,["CWE-552"],"/kev/2025/#cve-2025-11371","",""],["CVE-2025-41244","Broadcom","VMware Aria Operations and VMware Tools","Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability","2025-10-30","2025-11-20",0,["CWE-267"],"/kev/2025/#cve-2025-41244","/vendors/broadcom/",""],["CVE-2025-24893","XWiki","Platform","XWiki Platform Eval Injection Vulnerability","2025-10-30","2025-11-20",0,["CWE-95"],"/kev/2025/#cve-2025-24893","",""],["CVE-2025-6205","Dassault Systèmes","DELMIA Apriso","Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability","2025-10-28","2025-11-18",0,["CWE-862"],"/kev/2025/#cve-2025-6205","","/products/dassault-syst-mes-delmia-apriso/"],["CVE-2025-6204","Dassault Systèmes","DELMIA Apriso","Dassault Systèmes DELMIA Apriso Code Injection Vulnerability","2025-10-28","2025-11-18",0,["CWE-94"],"/kev/2025/#cve-2025-6204","","/products/dassault-syst-mes-delmia-apriso/"],["CVE-2025-59287","Microsoft","Windows","Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability","2025-10-24","2025-11-14",0,["CWE-502"],"/kev/2025/#cve-2025-59287","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-54236","Adobe","Commerce and Magento","Adobe Commerce and Magento Improper Input Validation Vulnerability","2025-10-24","2025-11-14",0,["CWE-20"],"/kev/2025/#cve-2025-54236","/vendors/adobe/",""],["CVE-2025-61932","Motex","LANSCOPE Endpoint Manager","Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability","2025-10-22","2025-11-12",0,["CWE-940"],"/kev/2025/#cve-2025-61932","",""],["CVE-2025-61884","Oracle","E-Business Suite","Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability","2025-10-20","2025-11-10",1,["CWE-918"],"/kev/2025/#cve-2025-61884","/vendors/oracle/","/products/oracle-e-business-suite/"],["CVE-2025-33073","Microsoft","Windows","Microsoft Windows SMB Client Improper Access Control Vulnerability","2025-10-20","2025-11-10",0,["CWE-284"],"/kev/2025/#cve-2025-33073","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-2747","Kentico","Xperience CMS","Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability","2025-10-20","2025-11-10",0,["CWE-288"],"/kev/2025/#cve-2025-2747","",""],["CVE-2025-2746","Kentico","Xperience CMS","Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability","2025-10-20","2025-11-10",0,["CWE-288"],"/kev/2025/#cve-2025-2746","",""],["CVE-2022-48503","Apple","Multiple Products","Apple Multiple Products Unspecified Vulnerability","2025-10-20","2025-11-10",0,[],"/kev/2025/#cve-2022-48503","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2025-54253","Adobe","Experience Manager (AEM) Forms","Adobe Experience Manager Forms Code Execution Vulnerability","2025-10-15","2025-11-05",0,[],"/kev/2025/#cve-2025-54253","/vendors/adobe/",""],["CVE-2025-59230","Microsoft","Windows","Microsoft Windows Improper Access Control Vulnerability","2025-10-14","2025-11-04",0,["CWE-284"],"/kev/2025/#cve-2025-59230","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-47827","IGEL","IGEL OS","IGEL OS Use of a Key Past its Expiration Date Vulnerability","2025-10-14","2025-11-04",0,["CWE-324"],"/kev/2025/#cve-2025-47827","",""],["CVE-2025-24990","Microsoft","Windows","Microsoft Windows Untrusted Pointer Dereference Vulnerability","2025-10-14","2025-11-04",0,["CWE-822"],"/kev/2025/#cve-2025-24990","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2016-7836","SKYSEA","Client View","SKYSEA Client View Improper Authentication Vulnerability","2025-10-14","2025-11-04",0,["CWE-287"],"/kev/2025/#cve-2016-7836","",""],["CVE-2021-43798","Grafana Labs","Grafana","Grafana Path Traversal Vulnerability","2025-10-09","2025-10-30",0,["CWE-22"],"/kev/2025/#cve-2021-43798","",""],["CVE-2025-27915","Synacor","Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","2025-10-07","2025-10-28",0,["CWE-79"],"/kev/2025/#cve-2025-27915","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2025-61882","Oracle","E-Business Suite","Oracle E-Business Suite Unspecified Vulnerability","2025-10-06","2025-10-27",1,[],"/kev/2025/#cve-2025-61882","/vendors/oracle/","/products/oracle-e-business-suite/"],["CVE-2021-43226","Microsoft","Windows","Microsoft Windows Privilege Escalation Vulnerability","2025-10-06","2025-10-27",1,[],"/kev/2025/#cve-2021-43226","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-22555","Linux","Kernel","Linux Kernel Heap Out-of-Bounds Write Vulnerability","2025-10-06","2025-10-27",0,["CWE-787"],"/kev/2025/#cve-2021-22555","/vendors/linux/","/products/linux-kernel/"],["CVE-2013-3918","Microsoft","Windows","Microsoft Windows Out-of-Bounds Write Vulnerability","2025-10-06","2025-10-27",0,[],"/kev/2025/#cve-2013-3918","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2011-3402","Microsoft","Windows","Microsoft Windows Remote Code Execution Vulnerability","2025-10-06","2025-10-27",0,[],"/kev/2025/#cve-2011-3402","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2010-3962","Microsoft","Internet Explorer","Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability","2025-10-06","2025-10-27",0,[],"/kev/2025/#cve-2010-3962","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2010-3765","Mozilla","Multiple Products","Mozilla Multiple Products Remote Code Execution Vulnerability","2025-10-06","2025-10-27",0,[],"/kev/2025/#cve-2010-3765","/vendors/mozilla/",""],["CVE-2025-4008","Smartbedded","Meteobridge","Smartbedded Meteobridge Command Injection Vulnerability","2025-10-02","2025-10-23",0,["CWE-306","CWE-77"],"/kev/2025/#cve-2025-4008","",""],["CVE-2025-21043","Samsung","Mobile Devices","Samsung Mobile Devices Out-of-Bounds Write Vulnerability","2025-10-02","2025-10-23",0,["CWE-787"],"/kev/2025/#cve-2025-21043","/vendors/samsung/","/products/samsung-mobile-devices/"],["CVE-2017-1000353","Jenkins","Jenkins","Jenkins Remote Code Execution Vulnerability","2025-10-02","2025-10-23",0,[],"/kev/2025/#cve-2017-1000353","/vendors/jenkins/",""],["CVE-2015-7755","Juniper","ScreenOS","Juniper ScreenOS Improper Authentication Vulnerability","2025-10-02","2025-10-23",0,["CWE-287"],"/kev/2025/#cve-2015-7755","/vendors/juniper/",""],["CVE-2014-6278","GNU","GNU Bash","GNU Bash OS Command Injection Vulnerability","2025-10-02","2025-10-23",0,["CWE-78"],"/kev/2025/#cve-2014-6278","/vendors/gnu/",""],["CVE-2025-59689","Libraesva","Email Security Gateway","Libraesva Email Security Gateway Command Injection Vulnerability","2025-09-29","2025-10-20",0,["CWE-77"],"/kev/2025/#cve-2025-59689","",""],["CVE-2025-32463","Sudo","Sudo","Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","2025-09-29","2025-10-20",0,["CWE-829"],"/kev/2025/#cve-2025-32463","",""],["CVE-2025-20352","Cisco","IOS and IOS XE","Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability","2025-09-29","2025-10-20",0,["CWE-121"],"/kev/2025/#cve-2025-20352","/vendors/cisco/","/products/cisco-ios-and-ios-xe/"],["CVE-2025-10035","Fortra","GoAnywhere MFT","Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability","2025-09-29","2025-10-20",1,["CWE-502","CWE-77"],"/kev/2025/#cve-2025-10035","",""],["CVE-2021-21311","Adminer","Adminer","Adminer Server-Side Request Forgery Vulnerability","2025-09-29","2025-10-20",0,["CWE-918"],"/kev/2025/#cve-2021-21311","",""],["CVE-2025-20362","Cisco","Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability","2025-09-25","2025-09-26",0,["CWE-862"],"/kev/2025/#cve-2025-20362","/vendors/cisco/",""],["CVE-2025-20333","Cisco","Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability","2025-09-25","2025-09-26",0,["CWE-120"],"/kev/2025/#cve-2025-20333","/vendors/cisco/",""],["CVE-2025-10585","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2025-09-23","2025-10-14",0,["CWE-843"],"/kev/2025/#cve-2025-10585","/vendors/google/","/products/google-chromium-v8/"],["CVE-2025-5086","Dassault Systèmes","DELMIA Apriso","Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability","2025-09-11","2025-10-02",0,["CWE-502"],"/kev/2025/#cve-2025-5086","","/products/dassault-syst-mes-delmia-apriso/"],["CVE-2025-53690","Sitecore","Multiple Products","Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability","2025-09-04","2025-09-25",0,["CWE-502"],"/kev/2025/#cve-2025-53690","",""],["CVE-2025-48543","Android","Runtime","Android Runtime Use-After-Free Vulnerability","2025-09-04","2025-09-25",0,[],"/kev/2025/#cve-2025-48543","/vendors/android/",""],["CVE-2025-38352","Linux","Kernel","Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability","2025-09-04","2025-09-25",0,["CWE-367"],"/kev/2025/#cve-2025-38352","/vendors/linux/","/products/linux-kernel/"],["CVE-2025-9377","TP-Link","Multiple Routers","TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability","2025-09-03","2025-09-24",0,["CWE-78"],"/kev/2025/#cve-2025-9377","/vendors/tp-link/",""],["CVE-2023-50224","TP-Link","TL-WR841N","TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability","2025-09-03","2025-09-24",0,["CWE-290"],"/kev/2025/#cve-2023-50224","/vendors/tp-link/",""],["CVE-2025-55177","Meta Platforms","WhatsApp","Meta Platforms WhatsApp Incorrect Authorization Vulnerability","2025-09-02","2025-09-23",0,["CWE-863"],"/kev/2025/#cve-2025-55177","","/products/meta-platforms-whatsapp/"],["CVE-2020-24363","TP-Link","TL-WA855RE","TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability","2025-09-02","2025-09-23",0,["CWE-306"],"/kev/2025/#cve-2020-24363","/vendors/tp-link/",""],["CVE-2025-57819","Sangoma","FreePBX","Sangoma FreePBX Authentication Bypass Vulnerability","2025-08-29","2025-09-19",0,["CWE-89","CWE-288"],"/kev/2025/#cve-2025-57819","",""],["CVE-2025-7775","Citrix","NetScaler","Citrix NetScaler Memory Overflow Vulnerability","2025-08-26","2025-08-28",0,["CWE-119"],"/kev/2025/#cve-2025-7775","/vendors/citrix/","/products/citrix-netscaler/"],["CVE-2025-48384","Git","Git","Git Link Following Vulnerability","2025-08-25","2025-09-15",0,["CWE-59","CWE-436"],"/kev/2025/#cve-2025-48384","",""],["CVE-2024-8069","Citrix","Session Recording","Citrix Session Recording Deserialization of Untrusted Data Vulnerability","2025-08-25","2025-09-15",0,["CWE-502"],"/kev/2025/#cve-2024-8069","/vendors/citrix/",""],["CVE-2024-8068","Citrix","Session Recording","Citrix Session Recording Improper Privilege Management Vulnerability","2025-08-25","2025-09-15",0,["CWE-269"],"/kev/2025/#cve-2024-8068","/vendors/citrix/",""],["CVE-2025-43300","Apple","iOS, iPadOS, and macOS","Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","2025-08-21","2025-09-11",0,["CWE-787"],"/kev/2025/#cve-2025-43300","/vendors/apple/","/products/apple-ios-ipados-and-macos/"],["CVE-2025-54948","Trend Micro","Apex One","Trend Micro Apex One OS Command Injection Vulnerability","2025-08-18","2025-09-08",0,["CWE-78"],"/kev/2025/#cve-2025-54948","/vendors/trend-micro/",""],["CVE-2025-8876","N-able","N-Central","N-able N-Central Command Injection Vulnerability","2025-08-13","2025-08-20",0,[],"/kev/2025/#cve-2025-8876","/vendors/n-able/",""],["CVE-2025-8875","N-able","N-Central","N-able N-Central Insecure Deserialization Vulnerability","2025-08-13","2025-08-20",0,[],"/kev/2025/#cve-2025-8875","/vendors/n-able/",""],["CVE-2025-8088","RARLAB","WinRAR","RARLAB WinRAR Path Traversal Vulnerability","2025-08-12","2025-09-02",1,["CWE-35"],"/kev/2025/#cve-2025-8088","/vendors/rarlab/","/products/rarlab-winrar/"],["CVE-2013-3893","Microsoft","Internet Explorer","Microsoft Internet Explorer Resource Management Errors Vulnerability","2025-08-12","2025-09-02",0,["CWE-399"],"/kev/2025/#cve-2013-3893","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2007-0671","Microsoft","Office","Microsoft Office Excel Remote Code Execution Vulnerability","2025-08-12","2025-09-02",0,[],"/kev/2025/#cve-2007-0671","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2022-40799","D-Link","DNR-322L","D-Link DNR-322L Download of Code Without Integrity Check Vulnerability","2025-08-05","2025-08-26",0,["CWE-494"],"/kev/2025/#cve-2022-40799","/vendors/d-link/",""],["CVE-2020-25079","D-Link","DCS-2530L and DCS-2670L Devices","D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability","2025-08-05","2025-08-26",0,["CWE-77"],"/kev/2025/#cve-2020-25079","/vendors/d-link/",""],["CVE-2020-25078","D-Link","DCS-2530L and DCS-2670L Devices","D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability","2025-08-05","2025-08-26",0,[],"/kev/2025/#cve-2020-25078","/vendors/d-link/",""],["CVE-2025-20337","Cisco","Identity Services Engine","Cisco Identity Services Engine Injection Vulnerability","2025-07-28","2025-08-18",0,["CWE-74"],"/kev/2025/#cve-2025-20337","/vendors/cisco/","/products/cisco-identity-services-engine/"],["CVE-2025-20281","Cisco","Identity Services Engine","Cisco Identity Services Engine Injection Vulnerability","2025-07-28","2025-08-18",0,["CWE-74"],"/kev/2025/#cve-2025-20281","/vendors/cisco/","/products/cisco-identity-services-engine/"],["CVE-2023-2533","PaperCut","NG/MF","PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability","2025-07-28","2025-08-18",0,["CWE-352"],"/kev/2025/#cve-2023-2533","/vendors/papercut/","/products/papercut-ng-mf/"],["CVE-2025-6558","Google","Chromium","Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","2025-07-22","2025-08-12",0,["CWE-20"],"/kev/2025/#cve-2025-6558","/vendors/google/","/products/google-chromium/"],["CVE-2025-54309","CrushFTP","CrushFTP"," CrushFTP Unprotected Alternate Channel Vulnerability","2025-07-22","2025-08-12",0,["CWE-420"],"/kev/2025/#cve-2025-54309","","/products/crushftp-crushftp/"],["CVE-2025-49706","Microsoft","SharePoint","Microsoft SharePoint Improper Authentication Vulnerability","2025-07-22","2025-07-23",1,["CWE-287"],"/kev/2025/#cve-2025-49706","/vendors/microsoft/","/products/microsoft-sharepoint/"],["CVE-2025-49704","Microsoft","SharePoint","Microsoft SharePoint Code Injection Vulnerability","2025-07-22","2025-07-23",1,["CWE-94"],"/kev/2025/#cve-2025-49704","/vendors/microsoft/","/products/microsoft-sharepoint/"],["CVE-2025-2776","SysAid","SysAid On-Prem","SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability","2025-07-22","2025-08-12",0,["CWE-611"],"/kev/2025/#cve-2025-2776","",""],["CVE-2025-2775","SysAid","SysAid On-Prem","SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability","2025-07-22","2025-08-12",0,["CWE-611"],"/kev/2025/#cve-2025-2775","",""],["CVE-2025-53770","Microsoft","SharePoint","Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","2025-07-20","2025-07-21",1,["CWE-502"],"/kev/2025/#cve-2025-53770","/vendors/microsoft/","/products/microsoft-sharepoint/"],["CVE-2025-25257","Fortinet","FortiWeb","Fortinet FortiWeb SQL Injection Vulnerability","2025-07-18","2025-08-08",0,["CWE-89"],"/kev/2025/#cve-2025-25257","/vendors/fortinet/","/products/fortinet-fortiweb/"],["CVE-2025-47812","Wing FTP Server","Wing FTP Server","Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability","2025-07-14","2025-08-04",0,["CWE-158"],"/kev/2025/#cve-2025-47812","",""],["CVE-2025-5777","Citrix","NetScaler ADC and Gateway","Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability","2025-07-10","2025-07-11",1,["CWE-125"],"/kev/2025/#cve-2025-5777","/vendors/citrix/",""],["CVE-2019-9621","Synacor","Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability","2025-07-07","2025-07-28",0,["CWE-918","CWE-807"],"/kev/2025/#cve-2019-9621","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2019-5418","Rails","Ruby on Rails","Rails Ruby on Rails Path Traversal Vulnerability","2025-07-07","2025-07-28",0,["CWE-22"],"/kev/2025/#cve-2019-5418","","/products/rails-ruby-on-rails/"],["CVE-2016-10033","PHP","PHPMailer","PHPMailer Command Injection Vulnerability","2025-07-07","2025-07-28",0,["CWE-77","CWE-88"],"/kev/2025/#cve-2016-10033","",""],["CVE-2014-3931","Looking Glass","Multi-Router Looking Glass (MRLG)","Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability","2025-07-07","2025-07-28",0,["CWE-119"],"/kev/2025/#cve-2014-3931","",""],["CVE-2025-6554","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2025-07-02","2025-07-23",0,["CWE-843"],"/kev/2025/#cve-2025-6554","/vendors/google/","/products/google-chromium-v8/"],["CVE-2025-48928","TeleMessage","TM SGNL","TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability","2025-07-01","2025-07-22",0,["CWE-528"],"/kev/2025/#cve-2025-48928","","/products/telemessage-tm-sgnl/"],["CVE-2025-48927","TeleMessage","TM SGNL","TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability","2025-07-01","2025-07-22",0,["CWE-1188"],"/kev/2025/#cve-2025-48927","","/products/telemessage-tm-sgnl/"],["CVE-2025-6543","Citrix","NetScaler ADC and Gateway","Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability","2025-06-30","2025-07-21",0,["CWE-119"],"/kev/2025/#cve-2025-6543","/vendors/citrix/",""],["CVE-2024-54085","AMI","MegaRAC SPx","AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability","2025-06-25","2025-07-16",0,["CWE-290"],"/kev/2025/#cve-2024-54085","",""],["CVE-2024-0769","D-Link","DIR-859 Router"," D-Link DIR-859 Router Path Traversal Vulnerability","2025-06-25","2025-07-16",0,["CWE-22"],"/kev/2025/#cve-2024-0769","/vendors/d-link/",""],["CVE-2019-6693","Fortinet","FortiOS","Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability","2025-06-25","2025-07-16",1,["CWE-798"],"/kev/2025/#cve-2019-6693","/vendors/fortinet/","/products/fortinet-fortios/"],["CVE-2023-0386","Linux","Kernel","Linux Kernel Improper Ownership Management Vulnerability","2025-06-17","2025-07-08",0,["CWE-282"],"/kev/2025/#cve-2023-0386","/vendors/linux/","/products/linux-kernel/"],["CVE-2025-43200","Apple","Multiple Products","Apple Multiple Products Unspecified Vulnerability","2025-06-16","2025-07-07",0,[],"/kev/2025/#cve-2025-43200","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-33538","TP-Link","Multiple Routers","TP-Link Multiple Routers Command Injection Vulnerability","2025-06-16","2025-07-07",0,["CWE-77"],"/kev/2025/#cve-2023-33538","/vendors/tp-link/",""],["CVE-2025-33053","Microsoft","Windows"," Microsoft Windows External Control of File Name or Path Vulnerability","2025-06-10","2025-07-01",0,["CWE-73"],"/kev/2025/#cve-2025-33053","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-24016","Wazuh","Wazuh Server","Wazuh Server Deserialization of Untrusted Data Vulnerability","2025-06-10","2025-07-01",0,["CWE-502"],"/kev/2025/#cve-2025-24016","",""],["CVE-2025-32433","Erlang","Erlang/OTP","Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability","2025-06-09","2025-06-30",0,["CWE-306"],"/kev/2025/#cve-2025-32433","",""],["CVE-2024-42009","Roundcube","Webmail","RoundCube Webmail Cross-Site Scripting Vulnerability","2025-06-09","2025-06-30",0,["CWE-79"],"/kev/2025/#cve-2024-42009","/vendors/roundcube/","/products/roundcube-webmail/"],["CVE-2025-5419","Google","Chromium V8","Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","2025-06-05","2025-06-26",0,["CWE-125","CWE-787"],"/kev/2025/#cve-2025-5419","/vendors/google/","/products/google-chromium-v8/"],["CVE-2025-27038","Qualcomm","Multiple Chipsets","Qualcomm Multiple Chipsets Use-After-Free Vulnerability","2025-06-03","2025-06-24",0,["CWE-416"],"/kev/2025/#cve-2025-27038","/vendors/qualcomm/","/products/qualcomm-multiple-chipsets/"],["CVE-2025-21480","Qualcomm","Multiple Chipsets","Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability","2025-06-03","2025-06-24",0,["CWE-863"],"/kev/2025/#cve-2025-21480","/vendors/qualcomm/","/products/qualcomm-multiple-chipsets/"],["CVE-2025-21479","Qualcomm","Multiple Chipsets","Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability","2025-06-03","2025-06-24",0,["CWE-863"],"/kev/2025/#cve-2025-21479","/vendors/qualcomm/","/products/qualcomm-multiple-chipsets/"],["CVE-2025-3935","ConnectWise","ScreenConnect","ConnectWise ScreenConnect Improper Authentication Vulnerability","2025-06-02","2025-06-23",0,["CWE-287"],"/kev/2025/#cve-2025-3935","","/products/connectwise-screenconnect/"],["CVE-2025-35939","Craft CMS","Craft CMS","Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability","2025-06-02","2025-06-23",0,["CWE-472"],"/kev/2025/#cve-2025-35939","","/products/craft-cms-craft-cms/"],["CVE-2024-56145","Craft CMS","Craft CMS","Craft CMS Code Injection Vulnerability","2025-06-02","2025-06-23",0,["CWE-94"],"/kev/2025/#cve-2024-56145","","/products/craft-cms-craft-cms/"],["CVE-2023-39780","ASUS","RT-AX55 Routers","ASUS RT-AX55 Routers OS Command Injection Vulnerability","2025-06-02","2025-06-23",0,["CWE-78"],"/kev/2025/#cve-2023-39780","",""],["CVE-2021-32030","ASUS","Routers","ASUS Routers Improper Authentication Vulnerability","2025-06-02","2025-06-23",0,["CWE-287"],"/kev/2025/#cve-2021-32030","",""],["CVE-2025-4632","Samsung","MagicINFO 9 Server","Samsung MagicINFO 9 Server Path Traversal Vulnerability","2025-05-22","2025-06-12",0,["CWE-22"],"/kev/2025/#cve-2025-4632","/vendors/samsung/",""],["CVE-2025-4428","Ivanti","Endpoint Manager Mobile (EPMM)","Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","2025-05-19","2025-06-09",0,["CWE-94"],"/kev/2025/#cve-2025-4428","/vendors/ivanti/","/products/ivanti-endpoint-manager-mobile-epmm/"],["CVE-2025-4427","Ivanti","Endpoint Manager Mobile (EPMM)","Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability","2025-05-19","2025-06-09",0,["CWE-288"],"/kev/2025/#cve-2025-4427","/vendors/ivanti/","/products/ivanti-endpoint-manager-mobile-epmm/"],["CVE-2025-27920","Srimax","Output Messenger","Srimax Output Messenger Directory Traversal Vulnerability","2025-05-19","2025-06-09",0,["CWE-22"],"/kev/2025/#cve-2025-27920","",""],["CVE-2024-27443","Synacor","Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","2025-05-19","2025-06-09",0,["CWE-79"],"/kev/2025/#cve-2024-27443","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2024-11182","MDaemon","Email Server","MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability","2025-05-19","2025-06-09",0,["CWE-79"],"/kev/2025/#cve-2024-11182","",""],["CVE-2023-38950","ZKTeco","BioTime","ZKTeco BioTime Path Traversal Vulnerability","2025-05-19","2025-06-09",0,["CWE-22"],"/kev/2025/#cve-2023-38950","",""],["CVE-2025-42999","SAP","NetWeaver","SAP NetWeaver Deserialization Vulnerability","2025-05-15","2025-06-05",1,["CWE-502"],"/kev/2025/#cve-2025-42999","/vendors/sap/","/products/sap-netweaver/"],["CVE-2024-12987","DrayTek","Vigor Routers","DrayTek Vigor Routers OS Command Injection Vulnerability","2025-05-15","2025-06-05",0,["CWE-78"],"/kev/2025/#cve-2024-12987","/vendors/draytek/",""],["CVE-2025-32756","Fortinet","Multiple Products","Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability","2025-05-14","2025-06-04",0,["CWE-124"],"/kev/2025/#cve-2025-32756","/vendors/fortinet/","/products/fortinet-multiple-products/"],["CVE-2025-32709","Microsoft","Windows","Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","2025-05-13","2025-06-03",0,["CWE-416"],"/kev/2025/#cve-2025-32709","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-32706","Microsoft","Windows","Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","2025-05-13","2025-06-03",0,["CWE-122"],"/kev/2025/#cve-2025-32706","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-32701","Microsoft","Windows","Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","2025-05-13","2025-06-03",0,["CWE-416"],"/kev/2025/#cve-2025-32701","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-30400","Microsoft","Windows","Microsoft Windows DWM Core Library Use-After-Free Vulnerability","2025-05-13","2025-06-03",0,["CWE-416"],"/kev/2025/#cve-2025-30400","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-30397","Microsoft","Windows","Microsoft Windows Scripting Engine Type Confusion Vulnerability","2025-05-13","2025-06-03",0,["CWE-843"],"/kev/2025/#cve-2025-30397","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-47729","TeleMessage","TM SGNL","TeleMessage TM SGNL Hidden Functionality Vulnerability","2025-05-12","2025-06-02",0,["CWE-912"],"/kev/2025/#cve-2025-47729","","/products/telemessage-tm-sgnl/"],["CVE-2024-6047","GeoVision","Multiple Devices","GeoVision Devices OS Command Injection Vulnerability","2025-05-07","2025-05-28",0,["CWE-78"],"/kev/2025/#cve-2024-6047","",""],["CVE-2024-11120","GeoVision","Multiple Devices","GeoVision Devices OS Command Injection Vulnerability","2025-05-07","2025-05-28",0,["CWE-78"],"/kev/2025/#cve-2024-11120","",""],["CVE-2025-27363","FreeType","FreeType","FreeType Out-of-Bounds Write Vulnerability","2025-05-06","2025-05-27",0,["CWE-787"],"/kev/2025/#cve-2025-27363","",""],["CVE-2025-3248","Langflow","Langflow","Langflow Missing Authentication Vulnerability","2025-05-05","2025-05-26",1,["CWE-306"],"/kev/2025/#cve-2025-3248","/vendors/langflow/","/products/langflow-langflow/"],["CVE-2025-34028","Commvault","Command Center","Commvault Command Center Path Traversal Vulnerability","2025-05-02","2025-05-23",0,["CWE-22"],"/kev/2025/#cve-2025-34028","",""],["CVE-2024-58136","Yiiframework","Yii","Yiiframework Yii Improper Protection of Alternate Path Vulnerability","2025-05-02","2025-05-23",0,["CWE-424"],"/kev/2025/#cve-2024-58136","",""],["CVE-2024-38475","Apache","HTTP Server","Apache HTTP Server Improper Escaping of Output Vulnerability","2025-05-01","2025-05-22",0,["CWE-116"],"/kev/2025/#cve-2024-38475","/vendors/apache/","/products/apache-http-server/"],["CVE-2023-44221","SonicWall","SMA100 Appliances","SonicWall SMA100 Appliances OS Command Injection Vulnerability","2025-05-01","2025-05-22",0,["CWE-78"],"/kev/2025/#cve-2023-44221","/vendors/sonicwall/",""],["CVE-2025-31324","SAP","NetWeaver","SAP NetWeaver Unrestricted File Upload Vulnerability","2025-04-29","2025-05-20",1,["CWE-434"],"/kev/2025/#cve-2025-31324","/vendors/sap/","/products/sap-netweaver/"],["CVE-2025-42599","Qualitia","Active! Mail","Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability","2025-04-28","2025-05-19",0,["CWE-121"],"/kev/2025/#cve-2025-42599","",""],["CVE-2025-3928","Commvault","Web Server","Commvault Web Server Unspecified Vulnerability","2025-04-28","2025-05-19",0,[],"/kev/2025/#cve-2025-3928","",""],["CVE-2025-1976","Broadcom","Brocade Fabric OS","Broadcom Brocade Fabric OS Code Injection Vulnerability","2025-04-28","2025-05-19",0,["CWE-94"],"/kev/2025/#cve-2025-1976","/vendors/broadcom/",""],["CVE-2025-31201","Apple","Multiple Products","Apple Multiple Products Arbitrary Read and Write Vulnerability","2025-04-17","2025-05-08",0,[],"/kev/2025/#cve-2025-31201","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2025-31200","Apple","Multiple Products","Apple Multiple Products Memory Corruption Vulnerability","2025-04-17","2025-05-08",0,[],"/kev/2025/#cve-2025-31200","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2025-24054","Microsoft","Windows","Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability","2025-04-17","2025-05-08",0,["CWE-73"],"/kev/2025/#cve-2025-24054","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-20035","SonicWall","SMA100 Appliances","SonicWall SMA100 Appliances OS Command Injection Vulnerability","2025-04-16","2025-05-07",0,["CWE-78"],"/kev/2025/#cve-2021-20035","/vendors/sonicwall/",""],["CVE-2024-53197","Linux","Kernel","Linux Kernel Out-of-Bounds Access Vulnerability","2025-04-09","2025-04-30",0,["CWE-787"],"/kev/2025/#cve-2024-53197","/vendors/linux/","/products/linux-kernel/"],["CVE-2024-53150","Linux","Kernel","Linux Kernel Out-of-Bounds Read Vulnerability","2025-04-09","2025-04-30",0,["CWE-125"],"/kev/2025/#cve-2024-53150","/vendors/linux/","/products/linux-kernel/"],["CVE-2025-30406","Gladinet","CentreStack","Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability","2025-04-08","2025-04-29",0,["CWE-321"],"/kev/2025/#cve-2025-30406","",""],["CVE-2025-29824","Microsoft","Windows","Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","2025-04-08","2025-04-29",1,["CWE-416"],"/kev/2025/#cve-2025-29824","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-31161","CrushFTP","CrushFTP","CrushFTP Authentication Bypass Vulnerability","2025-04-07","2025-04-28",1,["CWE-305"],"/kev/2025/#cve-2025-31161","","/products/crushftp-crushftp/"],["CVE-2025-22457","Ivanti","Connect Secure, Policy Secure, and ZTA Gateways","Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","2025-04-04","2025-04-11",1,["CWE-121"],"/kev/2025/#cve-2025-22457","/vendors/ivanti/",""],["CVE-2025-24813","Apache","Tomcat","Apache Tomcat Path Equivalence Vulnerability","2025-04-01","2025-04-22",0,["CWE-44","CWE-502"],"/kev/2025/#cve-2025-24813","/vendors/apache/","/products/apache-tomcat/"],["CVE-2024-20439","Cisco","Smart Licensing Utility","Cisco Smart Licensing Utility Static Credential Vulnerability","2025-03-31","2025-04-21",0,["CWE-912"],"/kev/2025/#cve-2024-20439","/vendors/cisco/",""],["CVE-2025-2783","Google","Chromium Mojo","Google Chromium Mojo Sandbox Escape Vulnerability","2025-03-27","2025-04-17",0,[],"/kev/2025/#cve-2025-2783","/vendors/google/",""],["CVE-2019-9875","Sitecore","CMS and Experience Platform (XP)","Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability","2025-03-26","2025-04-16",0,["CWE-502"],"/kev/2025/#cve-2019-9875","",""],["CVE-2019-9874","Sitecore","CMS and Experience Platform (XP)","Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability","2025-03-26","2025-04-16",0,["CWE-502"],"/kev/2025/#cve-2019-9874","",""],["CVE-2025-30154","reviewdog","action-setup GitHub Action","reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability","2025-03-24","2025-04-14",0,["CWE-506"],"/kev/2025/#cve-2025-30154","",""],["CVE-2025-1316","Edimax","IC-7100 IP Camera","Edimax IC-7100 IP Camera OS Command Injection Vulnerability","2025-03-19","2025-04-09",0,["CWE-78"],"/kev/2025/#cve-2025-1316","",""],["CVE-2024-48248","NAKIVO","Backup and Replication","NAKIVO Backup and Replication Absolute Path Traversal Vulnerability","2025-03-19","2025-04-09",0,["CWE-36"],"/kev/2025/#cve-2024-48248","",""],["CVE-2017-12637","SAP","NetWeaver","SAP NetWeaver Directory Traversal Vulnerability","2025-03-19","2025-04-09",0,["CWE-22"],"/kev/2025/#cve-2017-12637","/vendors/sap/","/products/sap-netweaver/"],["CVE-2025-30066","tj-actions","changed-files GitHub Action","tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability","2025-03-18","2025-04-08",0,["CWE-506"],"/kev/2025/#cve-2025-30066","",""],["CVE-2025-24472","Fortinet","FortiOS and FortiProxy","Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","2025-03-18","2025-04-08",1,["CWE-288"],"/kev/2025/#cve-2025-24472","/vendors/fortinet/","/products/fortinet-fortios-and-fortiproxy/"],["CVE-2025-24201","Apple","Multiple Products","Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","2025-03-13","2025-04-03",0,["CWE-787"],"/kev/2025/#cve-2025-24201","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2025-21590","Juniper","Junos OS","Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability","2025-03-13","2025-04-03",0,["CWE-653"],"/kev/2025/#cve-2025-21590","/vendors/juniper/","/products/juniper-junos-os/"],["CVE-2025-26633","Microsoft","Windows","Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability","2025-03-11","2025-04-01",1,["CWE-707"],"/kev/2025/#cve-2025-26633","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-24993","Microsoft","Windows","Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability","2025-03-11","2025-04-01",0,["CWE-122"],"/kev/2025/#cve-2025-24993","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-24991","Microsoft","Windows","Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability","2025-03-11","2025-04-01",0,["CWE-125"],"/kev/2025/#cve-2025-24991","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-24985","Microsoft","Windows","Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability","2025-03-11","2025-04-01",0,["CWE-190","CWE-122"],"/kev/2025/#cve-2025-24985","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-24984","Microsoft","Windows","Microsoft Windows NTFS Information Disclosure Vulnerability","2025-03-11","2025-04-01",0,["CWE-532"],"/kev/2025/#cve-2025-24984","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-24983","Microsoft","Windows","Microsoft Windows Win32k Use-After-Free Vulnerability","2025-03-11","2025-04-01",0,["CWE-416"],"/kev/2025/#cve-2025-24983","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-25181","Advantive","VeraCore"," Advantive VeraCore SQL Injection Vulnerability","2025-03-10","2025-03-31",0,["CWE-89"],"/kev/2025/#cve-2025-25181","",""],["CVE-2024-57968","Advantive","VeraCore","Advantive VeraCore Unrestricted File Upload Vulnerability","2025-03-10","2025-03-31",0,["CWE-434"],"/kev/2025/#cve-2024-57968","",""],["CVE-2024-13161","Ivanti","Endpoint Manager (EPM)","Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","2025-03-10","2025-03-31",0,["CWE-36"],"/kev/2025/#cve-2024-13161","/vendors/ivanti/","/products/ivanti-endpoint-manager-epm/"],["CVE-2024-13160","Ivanti","Endpoint Manager (EPM)","Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","2025-03-10","2025-03-31",0,["CWE-36"],"/kev/2025/#cve-2024-13160","/vendors/ivanti/","/products/ivanti-endpoint-manager-epm/"],["CVE-2024-13159","Ivanti","Endpoint Manager (EPM)","Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","2025-03-10","2025-03-31",0,["CWE-36"],"/kev/2025/#cve-2024-13159","/vendors/ivanti/","/products/ivanti-endpoint-manager-epm/"],["CVE-2025-22226","VMware","ESXi, Workstation, and Fusion","VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability","2025-03-04","2025-03-25",0,["CWE-125"],"/kev/2025/#cve-2025-22226","/vendors/vmware/",""],["CVE-2025-22225","VMware","ESXi","VMware ESXi Arbitrary Write Vulnerability","2025-03-04","2025-03-25",1,["CWE-123"],"/kev/2025/#cve-2025-22225","/vendors/vmware/","/products/vmware-esxi/"],["CVE-2025-22224","VMware","ESXi and Workstation","VMware ESXi and Workstation TOCTOU Race Condition Vulnerability","2025-03-04","2025-03-25",0,["CWE-367"],"/kev/2025/#cve-2025-22224","/vendors/vmware/",""],["CVE-2024-50302","Linux","Kernel","Linux Kernel Use of Uninitialized Resource Vulnerability","2025-03-04","2025-03-25",0,["CWE-908"],"/kev/2025/#cve-2024-50302","/vendors/linux/","/products/linux-kernel/"],["CVE-2024-4885","Progress","WhatsUp Gold","Progress WhatsUp Gold Path Traversal Vulnerability","2025-03-03","2025-03-24",0,["CWE-22"],"/kev/2025/#cve-2024-4885","/vendors/progress/",""],["CVE-2023-20118","Cisco","Small Business RV Series Routers","Cisco Small Business RV Series Routers Command Injection Vulnerability","2025-03-03","2025-03-24",0,["CWE-77"],"/kev/2025/#cve-2023-20118","/vendors/cisco/",""],["CVE-2022-43939","Hitachi Vantara","Pentaho Business Analytics (BA) Server","Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability","2025-03-03","2025-03-24",0,["CWE-647"],"/kev/2025/#cve-2022-43939","",""],["CVE-2022-43769","Hitachi Vantara","Pentaho Business Analytics (BA) Server","Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability","2025-03-03","2025-03-24",0,["CWE-74"],"/kev/2025/#cve-2022-43769","",""],["CVE-2018-8639","Microsoft","Windows","Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability","2025-03-03","2025-03-24",1,["CWE-404"],"/kev/2025/#cve-2018-8639","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-49035","Microsoft","Partner Center","Microsoft Partner Center Improper Access Control Vulnerability","2025-02-25","2025-03-18",0,["CWE-269"],"/kev/2025/#cve-2024-49035","/vendors/microsoft/",""],["CVE-2023-34192","Synacor","Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","2025-02-25","2025-03-18",0,["CWE-79"],"/kev/2025/#cve-2023-34192","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2024-20953","Oracle","Agile Product Lifecycle Management (PLM)","Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability","2025-02-24","2025-03-17",0,["CWE-502"],"/kev/2025/#cve-2024-20953","/vendors/oracle/",""],["CVE-2017-3066","Adobe","ColdFusion","Adobe ColdFusion Deserialization Vulnerability","2025-02-24","2025-03-17",0,["CWE-502"],"/kev/2025/#cve-2017-3066","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2025-24989","Microsoft","Power Pages","Microsoft Power Pages Improper Access Control Vulnerability","2025-02-21","2025-03-14",0,["CWE-284"],"/kev/2025/#cve-2025-24989","/vendors/microsoft/",""],["CVE-2025-23209","Craft CMS","Craft CMS","Craft CMS Code Injection Vulnerability","2025-02-20","2025-03-13",0,["CWE-94"],"/kev/2025/#cve-2025-23209","","/products/craft-cms-craft-cms/"],["CVE-2025-0111","Palo Alto Networks","PAN-OS","Palo Alto Networks PAN-OS File Read Vulnerability","2025-02-20","2025-03-13",0,["CWE-73"],"/kev/2025/#cve-2025-0111","/vendors/palo-alto-networks/","/products/palo-alto-networks-pan-os/"],["CVE-2025-0108","Palo Alto Networks","PAN-OS","Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","2025-02-18","2025-03-11",0,["CWE-306"],"/kev/2025/#cve-2025-0108","/vendors/palo-alto-networks/","/products/palo-alto-networks-pan-os/"],["CVE-2024-53704","SonicWall","SonicOS","SonicWall SonicOS SSLVPN Improper Authentication Vulnerability","2025-02-18","2025-03-11",1,["CWE-287"],"/kev/2025/#cve-2024-53704","/vendors/sonicwall/","/products/sonicwall-sonicos/"],["CVE-2024-57727","SimpleHelp ","SimpleHelp","SimpleHelp Path Traversal Vulnerability","2025-02-13","2025-03-06",1,["CWE-22"],"/kev/2025/#cve-2024-57727","","/products/simplehelp-simplehelp/"],["CVE-2025-24200","Apple","iOS and iPadOS","Apple iOS and iPadOS Incorrect Authorization Vulnerability","2025-02-12","2025-03-05",0,["CWE-863"],"/kev/2025/#cve-2025-24200","/vendors/apple/","/products/apple-ios-and-ipados/"],["CVE-2024-41710","Mitel","SIP Phones","Mitel SIP Phones Argument Injection Vulnerability","2025-02-12","2025-03-05",0,["CWE-88"],"/kev/2025/#cve-2024-41710","/vendors/mitel/",""],["CVE-2025-21418","Microsoft","Windows","Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability","2025-02-11","2025-03-04",0,["CWE-122"],"/kev/2025/#cve-2025-21418","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-21391","Microsoft","Windows","Microsoft Windows Storage Link Following Vulnerability","2025-02-11","2025-03-04",0,["CWE-59"],"/kev/2025/#cve-2025-21391","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-40891","Zyxel","DSL CPE Devices","Zyxel DSL CPE OS Command Injection Vulnerability","2025-02-11","2025-03-04",0,["CWE-78"],"/kev/2025/#cve-2024-40891","/vendors/zyxel/",""],["CVE-2024-40890","Zyxel","DSL CPE Devices","Zyxel DSL CPE OS Command Injection Vulnerability","2025-02-11","2025-03-04",0,["CWE-78"],"/kev/2025/#cve-2024-40890","/vendors/zyxel/",""],["CVE-2025-0994","Trimble","Cityworks","Trimble Cityworks Deserialization Vulnerability","2025-02-07","2025-02-28",0,["CWE-502"],"/kev/2025/#cve-2025-0994","",""],["CVE-2025-0411","7-Zip","7-Zip","7-Zip Mark of the Web Bypass Vulnerability","2025-02-06","2025-02-27",0,["CWE-693"],"/kev/2025/#cve-2025-0411","",""],["CVE-2024-21413","Microsoft","Office Outlook","Microsoft Outlook Improper Input Validation Vulnerability","2025-02-06","2025-02-27",0,["CWE-20"],"/kev/2025/#cve-2024-21413","/vendors/microsoft/",""],["CVE-2022-23748","Audinate","Dante Discovery","Dante Discovery Process Control Vulnerability","2025-02-06","2025-02-27",0,["CWE-114"],"/kev/2025/#cve-2022-23748","",""],["CVE-2020-29574","Sophos","CyberoamOS","CyberoamOS (CROS) SQL Injection Vulnerability","2025-02-06","2025-02-27",1,["CWE-89"],"/kev/2025/#cve-2020-29574","/vendors/sophos/",""],["CVE-2020-15069","Sophos","XG Firewall","Sophos XG Firewall Buffer Overflow Vulnerability","2025-02-06","2025-02-27",0,["CWE-120"],"/kev/2025/#cve-2020-15069","/vendors/sophos/",""],["CVE-2024-53104","Linux","Kernel","Linux Kernel Out-of-Bounds Write Vulnerability","2025-02-05","2025-02-26",0,["CWE-787"],"/kev/2025/#cve-2024-53104","/vendors/linux/","/products/linux-kernel/"],["CVE-2024-45195","Apache","OFBiz","Apache OFBiz Forced Browsing Vulnerability","2025-02-04","2025-02-25",0,["CWE-425"],"/kev/2025/#cve-2024-45195","/vendors/apache/","/products/apache-ofbiz/"],["CVE-2024-29059","Microsoft",".NET Framework","Microsoft .NET Framework Information Disclosure Vulnerability","2025-02-04","2025-02-25",0,["CWE-209"],"/kev/2025/#cve-2024-29059","/vendors/microsoft/","/products/microsoft-net-framework/"],["CVE-2018-9276","Paessler","PRTG Network Monitor","Paessler PRTG Network Monitor OS Command Injection Vulnerability","2025-02-04","2025-02-25",0,["CWE-78"],"/kev/2025/#cve-2018-9276","",""],["CVE-2018-19410","Paessler","PRTG Network Monitor","Paessler PRTG Network Monitor Local File Inclusion Vulnerability","2025-02-04","2025-02-25",0,[],"/kev/2025/#cve-2018-19410","",""],["CVE-2025-24085","Apple","Multiple Products","Apple Multiple Products Use-After-Free Vulnerability","2025-01-29","2025-02-19",0,["CWE-416"],"/kev/2025/#cve-2025-24085","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2025-23006","SonicWall","SMA1000 Appliances","SonicWall SMA1000 Appliances Deserialization Vulnerability","2025-01-24","2025-02-14",1,["CWE-502"],"/kev/2025/#cve-2025-23006","/vendors/sonicwall/","/products/sonicwall-sma1000-appliances/"],["CVE-2020-11023","JQuery","JQuery","JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","2025-02-13",0,["CWE-79"],"/kev/2025/#cve-2020-11023","",""],["CVE-2024-50603","Aviatrix","Controllers","Aviatrix Controllers OS Command Injection Vulnerability","2025-01-16","2025-02-06",0,["CWE-78"],"/kev/2025/#cve-2024-50603","",""],["CVE-2025-21335","Microsoft","Windows","Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","2025-01-14","2025-02-04",0,["CWE-416"],"/kev/2025/#cve-2025-21335","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-21334","Microsoft","Windows","Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","2025-01-14","2025-02-04",0,["CWE-416"],"/kev/2025/#cve-2025-21334","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2025-21333","Microsoft","Windows","Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability","2025-01-14","2025-02-04",0,["CWE-122"],"/kev/2025/#cve-2025-21333","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-55591","Fortinet","FortiOS and FortiProxy","Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","2025-01-14","2025-01-21",1,["CWE-288"],"/kev/2025/#cve-2024-55591","/vendors/fortinet/","/products/fortinet-fortios-and-fortiproxy/"],["CVE-2024-12686","BeyondTrust","Privileged Remote Access (PRA) and Remote Support (RS)","BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability","2025-01-13","2025-02-03",0,["CWE-78"],"/kev/2025/#cve-2024-12686","",""],["CVE-2023-48365","Qlik","Sense","Qlik Sense HTTP Tunneling Vulnerability","2025-01-13","2025-02-03",1,["CWE-444"],"/kev/2025/#cve-2023-48365","","/products/qlik-sense/"],["CVE-2025-0282","Ivanti","Connect Secure, Policy Secure, and ZTA Gateways","Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","2025-01-08","2025-01-15",1,["CWE-121"],"/kev/2025/#cve-2025-0282","/vendors/ivanti/",""],["CVE-2024-55550","Mitel","MiCollab","Mitel MiCollab Path Traversal Vulnerability","2025-01-07","2025-01-28",1,["CWE-22"],"/kev/2025/#cve-2024-55550","/vendors/mitel/",""],["CVE-2024-41713","Mitel","MiCollab","Mitel MiCollab Path Traversal Vulnerability","2025-01-07","2025-01-28",1,["CWE-22"],"/kev/2025/#cve-2024-41713","/vendors/mitel/",""],["CVE-2020-2883","Oracle","WebLogic Server","Oracle WebLogic Server Unspecified Vulnerability","2025-01-07","2025-01-28",0,[],"/kev/2025/#cve-2020-2883","/vendors/oracle/","/products/oracle-weblogic-server/"],["CVE-2024-3393","Palo Alto Networks","PAN-OS","Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability","2024-12-30","2025-01-20",0,["CWE-754"],"/kev/2024/#cve-2024-3393","/vendors/palo-alto-networks/","/products/palo-alto-networks-pan-os/"],["CVE-2021-44207","Acclaim Systems","USAHERDS","Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability ","2024-12-23","2025-01-13",0,["CWE-798"],"/kev/2024/#cve-2021-44207","",""],["CVE-2024-12356","BeyondTrust","Privileged Remote Access (PRA) and Remote Support (RS) ","BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability ","2024-12-19","2024-12-27",0,["CWE-77"],"/kev/2024/#cve-2024-12356","",""],["CVE-2022-23227","NUUO","NVRmini2 Devices","NUUO NVRmini2 Devices Missing Authentication Vulnerability ","2024-12-18","2025-01-08",0,["CWE-306"],"/kev/2024/#cve-2022-23227","",""],["CVE-2021-40407","Reolink","RLC-410W IP Camera","Reolink RLC-410W IP Camera OS Command Injection Vulnerability ","2024-12-18","2025-01-08",0,["CWE-78"],"/kev/2024/#cve-2021-40407","",""],["CVE-2019-11001","Reolink","Multiple IP Cameras","Reolink Multiple IP Cameras OS Command Injection Vulnerability","2024-12-18","2025-01-08",0,["CWE-78"],"/kev/2024/#cve-2019-11001","",""],["CVE-2018-14933","NUUO","NVRmini Devices","NUUO NVRmini Devices OS Command Injection Vulnerability ","2024-12-18","2025-01-08",0,["CWE-78"],"/kev/2024/#cve-2018-14933","",""],["CVE-2024-55956","Cleo","Multiple Products","Cleo Multiple Products Unauthenticated File Upload Vulnerability","2024-12-17","2025-01-07",1,["CWE-276"],"/kev/2024/#cve-2024-55956","",""],["CVE-2024-35250","Microsoft","Windows","Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability ","2024-12-16","2025-01-06",0,["CWE-822"],"/kev/2024/#cve-2024-35250","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-20767","Adobe","ColdFusion","Adobe ColdFusion Improper Access Control Vulnerability","2024-12-16","2025-01-06",0,["CWE-284"],"/kev/2024/#cve-2024-20767","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2024-50623","Cleo","Multiple Products","Cleo Multiple Products Unrestricted File Upload Vulnerability","2024-12-13","2025-01-03",1,["CWE-434"],"/kev/2024/#cve-2024-50623","",""],["CVE-2024-49138","Microsoft","Windows","Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","2024-12-10","2024-12-31",0,["CWE-122"],"/kev/2024/#cve-2024-49138","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-51378","CyberPersons","CyberPanel","CyberPanel Incorrect Default Permissions Vulnerability","2024-12-04","2024-12-25",1,["CWE-276"],"/kev/2024/#cve-2024-51378","",""],["CVE-2024-11680","ProjectSend","ProjectSend","ProjectSend Improper Authentication Vulnerability","2024-12-03","2024-12-24",0,["CWE-287"],"/kev/2024/#cve-2024-11680","",""],["CVE-2024-11667","Zyxel","Multiple Firewalls","Zyxel Multiple Firewalls Path Traversal Vulnerability","2024-12-03","2024-12-24",1,["CWE-22"],"/kev/2024/#cve-2024-11667","/vendors/zyxel/","/products/zyxel-multiple-firewalls/"],["CVE-2023-45727","North Grid","Proself","North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability","2024-12-03","2024-12-24",0,["CWE-611"],"/kev/2024/#cve-2023-45727","",""],["CVE-2023-28461","Array Networks ","AG/vxAG ArrayOS","Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability","2024-11-25","2024-12-16",1,["CWE-306"],"/kev/2024/#cve-2023-28461","",""],["CVE-2024-44309","Apple","Multiple Products","Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability","2024-11-21","2024-12-12",0,["CWE-79"],"/kev/2024/#cve-2024-44309","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2024-44308","Apple","Multiple Products","Apple Multiple Products Code Execution Vulnerability","2024-11-21","2024-12-12",0,[],"/kev/2024/#cve-2024-44308","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2024-21287","Oracle","Agile Product Lifecycle Management (PLM)","Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability","2024-11-21","2024-12-12",0,["CWE-863"],"/kev/2024/#cve-2024-21287","/vendors/oracle/",""],["CVE-2024-38813","VMware","vCenter Server","VMware vCenter Server Privilege Escalation Vulnerability","2024-11-20","2024-12-11",0,["CWE-250","CWE-273"],"/kev/2024/#cve-2024-38813","/vendors/vmware/","/products/vmware-vcenter-server/"],["CVE-2024-38812","VMware","vCenter Server","VMware vCenter Server Heap-Based Buffer Overflow Vulnerability","2024-11-20","2024-12-11",0,["CWE-122"],"/kev/2024/#cve-2024-38812","/vendors/vmware/","/products/vmware-vcenter-server/"],["CVE-2024-9474","Palo Alto Networks","PAN-OS","Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability","2024-11-18","2024-12-09",1,["CWE-77"],"/kev/2024/#cve-2024-9474","/vendors/palo-alto-networks/","/products/palo-alto-networks-pan-os/"],["CVE-2024-1212","Progress","Kemp LoadMaster","Progress Kemp LoadMaster OS Command Injection Vulnerability","2024-11-18","2024-12-09",0,["CWE-78"],"/kev/2024/#cve-2024-1212","/vendors/progress/",""],["CVE-2024-0012","Palo Alto Networks","PAN-OS","Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability","2024-11-18","2024-12-09",1,["CWE-306"],"/kev/2024/#cve-2024-0012","/vendors/palo-alto-networks/","/products/palo-alto-networks-pan-os/"],["CVE-2024-9465","Palo Alto Networks","Expedition","Palo Alto Networks Expedition SQL Injection Vulnerability","2024-11-14","2024-12-05",0,["CWE-89"],"/kev/2024/#cve-2024-9465","/vendors/palo-alto-networks/","/products/palo-alto-networks-expedition/"],["CVE-2024-9463","Palo Alto Networks","Expedition","Palo Alto Networks Expedition OS Command Injection Vulnerability","2024-11-14","2024-12-05",0,["CWE-78"],"/kev/2024/#cve-2024-9463","/vendors/palo-alto-networks/","/products/palo-alto-networks-expedition/"],["CVE-2024-49039","Microsoft","Windows","Microsoft Windows Task Scheduler Privilege Escalation Vulnerability","2024-11-12","2024-12-03",1,["CWE-287"],"/kev/2024/#cve-2024-49039","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-43451","Microsoft","Windows","Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability","2024-11-12","2024-12-03",0,["CWE-73"],"/kev/2024/#cve-2024-43451","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-41277","Metabase","Metabase","Metabase GeoJSON API Local File Inclusion Vulnerability","2024-11-12","2024-12-03",0,["CWE-200"],"/kev/2024/#cve-2021-41277","",""],["CVE-2021-26086","Atlassian","Jira Server and Data Center","Atlassian Jira Server and Data Center Path Traversal Vulnerability","2024-11-12","2024-12-03",0,["CWE-22"],"/kev/2024/#cve-2021-26086","/vendors/atlassian/",""],["CVE-2014-2120","Cisco","Adaptive Security Appliance (ASA)","Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","2024-11-12","2024-12-03",0,["CWE-79"],"/kev/2024/#cve-2014-2120","/vendors/cisco/","/products/cisco-adaptive-security-appliance-asa/"],["CVE-2024-5910","Palo Alto Networks","Expedition","Palo Alto Networks Expedition Missing Authentication Vulnerability","2024-11-07","2024-11-28",0,["CWE-306"],"/kev/2024/#cve-2024-5910","/vendors/palo-alto-networks/","/products/palo-alto-networks-expedition/"],["CVE-2024-51567","CyberPersons","CyberPanel","CyberPanel Incorrect Default Permissions Vulnerability","2024-11-07","2024-11-28",1,["CWE-276"],"/kev/2024/#cve-2024-51567","",""],["CVE-2024-43093","Android","Framework","Android Framework Privilege Escalation Vulnerability","2024-11-07","2024-11-28",0,[],"/kev/2024/#cve-2024-43093","/vendors/android/","/products/android-framework/"],["CVE-2019-16278","Nostromo","nhttpd","Nostromo nhttpd Directory Traversal Vulnerability","2024-11-07","2024-11-28",0,["CWE-22"],"/kev/2024/#cve-2019-16278","",""],["CVE-2024-8957","PTZOptics","PT30X-SDI/NDI Cameras","PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability","2024-11-04","2024-11-25",0,["CWE-78"],"/kev/2024/#cve-2024-8957","",""],["CVE-2024-8956","PTZOptics","PT30X-SDI/NDI Cameras","PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability","2024-11-04","2024-11-25",0,["CWE-287"],"/kev/2024/#cve-2024-8956","",""],["CVE-2024-37383","Roundcube","Webmail","RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability","2024-10-24","2024-11-14",0,["CWE-79"],"/kev/2024/#cve-2024-37383","/vendors/roundcube/","/products/roundcube-webmail/"],["CVE-2024-20481","Cisco","Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","Cisco ASA and FTD Denial-of-Service Vulnerability","2024-10-24","2024-11-14",0,["CWE-772"],"/kev/2024/#cve-2024-20481","/vendors/cisco/","/products/cisco-adaptive-security-appliance-asa-and-firepower-threat-defense-ftd/"],["CVE-2024-47575","Fortinet","FortiManager","Fortinet FortiManager Missing Authentication Vulnerability","2024-10-23","2024-11-13",0,["CWE-306"],"/kev/2024/#cve-2024-47575","/vendors/fortinet/",""],["CVE-2024-38094","Microsoft","SharePoint","Microsoft SharePoint Deserialization Vulnerability","2024-10-22","2024-11-12",1,["CWE-502"],"/kev/2024/#cve-2024-38094","/vendors/microsoft/","/products/microsoft-sharepoint/"],["CVE-2024-9537","ScienceLogic","SL1","ScienceLogic SL1 Unspecified Vulnerability","2024-10-21","2024-11-11",0,[],"/kev/2024/#cve-2024-9537","",""],["CVE-2024-40711","Veeam","Backup & Replication","Veeam Backup and Replication Deserialization Vulnerability","2024-10-17","2024-11-07",1,["CWE-502"],"/kev/2024/#cve-2024-40711","","/products/veeam-backup-and-replication/"],["CVE-2024-9680","Mozilla","Firefox","Mozilla Firefox Use-After-Free Vulnerability","2024-10-15","2024-11-05",1,["CWE-416"],"/kev/2024/#cve-2024-9680","/vendors/mozilla/","/products/mozilla-firefox/"],["CVE-2024-30088","Microsoft","Windows ","Microsoft Windows Kernel TOCTOU Race Condition Vulnerability","2024-10-15","2024-11-05",1,["CWE-367"],"/kev/2024/#cve-2024-30088","/vendors/microsoft/",""],["CVE-2024-28987","SolarWinds","Web Help Desk","SolarWinds Web Help Desk Hardcoded Credential Vulnerability","2024-10-15","2024-11-05",0,["CWE-798"],"/kev/2024/#cve-2024-28987","/vendors/solarwinds/","/products/solarwinds-web-help-desk/"],["CVE-2024-9380","Ivanti","Cloud Services Appliance (CSA)","Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability","2024-10-09","2024-10-30",0,["CWE-77"],"/kev/2024/#cve-2024-9380","/vendors/ivanti/","/products/ivanti-cloud-services-appliance-csa/"],["CVE-2024-9379","Ivanti","Cloud Services Appliance (CSA)","Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability","2024-10-09","2024-10-30",0,["CWE-89"],"/kev/2024/#cve-2024-9379","/vendors/ivanti/","/products/ivanti-cloud-services-appliance-csa/"],["CVE-2024-23113","Fortinet","Multiple Products","Fortinet Multiple Products Format String Vulnerability","2024-10-09","2024-10-30",0,["CWE-134"],"/kev/2024/#cve-2024-23113","/vendors/fortinet/","/products/fortinet-multiple-products/"],["CVE-2024-43573","Microsoft","Windows","Microsoft Windows MSHTML Platform Spoofing Vulnerability","2024-10-08","2024-10-29",0,["CWE-79"],"/kev/2024/#cve-2024-43573","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-43572","Microsoft","Windows","Microsoft Windows Management Console Remote Code Execution Vulnerability","2024-10-08","2024-10-29",0,["CWE-707"],"/kev/2024/#cve-2024-43572","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-43047","Qualcomm","Multiple Chipsets ","Qualcomm Multiple Chipsets Use-After-Free Vulnerability","2024-10-08","2024-10-29",0,["CWE-416"],"/kev/2024/#cve-2024-43047","/vendors/qualcomm/",""],["CVE-2024-45519","Synacor","Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability","2024-10-03","2024-10-24",0,["CWE-284"],"/kev/2024/#cve-2024-45519","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2024-29824","Ivanti","Endpoint Manager (EPM)","Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability","2024-10-02","2024-10-23",0,["CWE-89"],"/kev/2024/#cve-2024-29824","/vendors/ivanti/","/products/ivanti-endpoint-manager-epm/"],["CVE-2023-25280","D-Link","DIR-820 Router","D-Link DIR-820 Router OS Command Injection Vulnerability","2024-09-30","2024-10-21",0,["CWE-78"],"/kev/2024/#cve-2023-25280","/vendors/d-link/",""],["CVE-2020-15415","DrayTek","Multiple Vigor Routers","DrayTek Multiple Vigor Routers OS Command Injection Vulnerability","2024-09-30","2024-10-21",0,["CWE-78"],"/kev/2024/#cve-2020-15415","/vendors/draytek/",""],["CVE-2019-0344","SAP","Commerce Cloud","SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability","2024-09-30","2024-10-21",0,["CWE-502"],"/kev/2024/#cve-2019-0344","/vendors/sap/",""],["CVE-2024-7593","Ivanti","Virtual Traffic Manager","Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability","2024-09-24","2024-10-15",0,["CWE-287","CWE-303"],"/kev/2024/#cve-2024-7593","/vendors/ivanti/",""],["CVE-2024-8963","Ivanti","Cloud Services Appliance (CSA)","Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability","2024-09-19","2024-10-10",0,["CWE-22"],"/kev/2024/#cve-2024-8963","/vendors/ivanti/","/products/ivanti-cloud-services-appliance-csa/"],["CVE-2024-27348","Apache","HugeGraph-Server","Apache HugeGraph-Server Improper Access Control Vulnerability","2024-09-18","2024-10-09",0,["CWE-284"],"/kev/2024/#cve-2024-27348","/vendors/apache/",""],["CVE-2022-21445","Oracle","ADF Faces","Oracle ADF Faces Deserialization of Untrusted Data Vulnerability","2024-09-18","2024-10-09",0,["CWE-502"],"/kev/2024/#cve-2022-21445","/vendors/oracle/",""],["CVE-2020-14644","Oracle","WebLogic Server","Oracle WebLogic Server Remote Code Execution Vulnerability","2024-09-18","2024-10-09",0,[],"/kev/2024/#cve-2020-14644","/vendors/oracle/","/products/oracle-weblogic-server/"],["CVE-2020-0618","Microsoft","SQL Server","Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability","2024-09-18","2024-10-09",1,["CWE-502"],"/kev/2024/#cve-2020-0618","/vendors/microsoft/",""],["CVE-2014-0502","Adobe","Flash Player","Adobe Flash Player Double Free Vulnerablity","2024-09-17","2024-10-08",0,["CWE-399"],"/kev/2024/#cve-2014-0502","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2014-0497","Adobe","Flash Player","Adobe Flash Player Integer Underflow Vulnerablity","2024-09-17","2024-10-08",0,["CWE-191"],"/kev/2024/#cve-2014-0497","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2013-0648","Adobe","Flash Player","Adobe Flash Player Code Execution Vulnerability","2024-09-17","2024-10-08",0,[],"/kev/2024/#cve-2013-0648","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2013-0643","Adobe","Flash Player","Adobe Flash Player Incorrect Default Permissions Vulnerability","2024-09-17","2024-10-08",0,["CWE-264"],"/kev/2024/#cve-2013-0643","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2024-6670","Progress","WhatsUp Gold","Progress WhatsUp Gold SQL Injection Vulnerability","2024-09-16","2024-10-07",1,["CWE-89"],"/kev/2024/#cve-2024-6670","/vendors/progress/",""],["CVE-2024-43461","Microsoft","Windows","Microsoft Windows MSHTML Platform Spoofing Vulnerability","2024-09-16","2024-10-07",0,["CWE-451"],"/kev/2024/#cve-2024-43461","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-8190","Ivanti","Cloud Services Appliance","Ivanti Cloud Services Appliance OS Command Injection Vulnerability","2024-09-13","2024-10-04",0,["CWE-78"],"/kev/2024/#cve-2024-8190","/vendors/ivanti/",""],["CVE-2024-38226","Microsoft","Publisher","Microsoft Publisher Protection Mechanism Failure Vulnerability","2024-09-10","2024-10-01",0,["CWE-693"],"/kev/2024/#cve-2024-38226","/vendors/microsoft/",""],["CVE-2024-38217","Microsoft","Windows","Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability","2024-09-10","2024-10-01",0,["CWE-693"],"/kev/2024/#cve-2024-38217","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-38014","Microsoft","Windows","Microsoft Windows Installer Improper Privilege Management Vulnerability","2024-09-10","2024-10-01",0,["CWE-269"],"/kev/2024/#cve-2024-38014","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-40766","SonicWall","SonicOS","SonicWall SonicOS Improper Access Control Vulnerability","2024-09-09","2024-09-30",1,["CWE-284"],"/kev/2024/#cve-2024-40766","/vendors/sonicwall/","/products/sonicwall-sonicos/"],["CVE-2017-1000253","Linux","Kernel","Linux Kernel PIE Stack Buffer Corruption Vulnerability ","2024-09-09","2024-09-30",1,["CWE-119"],"/kev/2024/#cve-2017-1000253","/vendors/linux/","/products/linux-kernel/"],["CVE-2016-3714","ImageMagick","ImageMagick","ImageMagick Improper Input Validation Vulnerability","2024-09-09","2024-09-30",0,["CWE-20"],"/kev/2024/#cve-2016-3714","","/products/imagemagick-imagemagick/"],["CVE-2024-7262","Kingsoft","WPS Office","Kingsoft WPS Office Path Traversal Vulnerability","2024-09-03","2024-09-24",0,["CWE-22"],"/kev/2024/#cve-2024-7262","",""],["CVE-2021-20124","DrayTek","VigorConnect","Draytek VigorConnect Path Traversal Vulnerability ","2024-09-03","2024-09-24",0,["CWE-22"],"/kev/2024/#cve-2021-20124","/vendors/draytek/",""],["CVE-2021-20123","DrayTek","VigorConnect","Draytek VigorConnect Path Traversal Vulnerability ","2024-09-03","2024-09-24",0,["CWE-22"],"/kev/2024/#cve-2021-20123","/vendors/draytek/",""],["CVE-2024-7965","Google","Chromium V8","Google Chromium V8 Inappropriate Implementation Vulnerability","2024-08-28","2024-09-18",0,["CWE-358"],"/kev/2024/#cve-2024-7965","/vendors/google/","/products/google-chromium-v8/"],["CVE-2024-38856","Apache","OFBiz","Apache OFBiz Incorrect Authorization Vulnerability","2024-08-27","2024-09-17",0,["CWE-863"],"/kev/2024/#cve-2024-38856","/vendors/apache/","/products/apache-ofbiz/"],["CVE-2024-7971","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2024-08-26","2024-09-16",0,["CWE-843"],"/kev/2024/#cve-2024-7971","/vendors/google/","/products/google-chromium-v8/"],["CVE-2024-39717","Versa","Director","Versa Director Dangerous File Type Upload Vulnerability","2024-08-23","2024-09-13",0,["CWE-434"],"/kev/2024/#cve-2024-39717","",""],["CVE-2022-0185","Linux","Kernel","Linux Kernel Heap-Based Buffer Overflow Vulnerability","2024-08-21","2024-09-11",0,["CWE-190"],"/kev/2024/#cve-2022-0185","/vendors/linux/","/products/linux-kernel/"],["CVE-2021-33045","Dahua","IP Camera Firmware","Dahua IP Camera Authentication Bypass Vulnerability","2024-08-21","2024-09-11",0,["CWE-287"],"/kev/2024/#cve-2021-33045","",""],["CVE-2021-33044","Dahua","IP Camera Firmware","Dahua IP Camera Authentication Bypass Vulnerability","2024-08-21","2024-09-11",0,["CWE-287"],"/kev/2024/#cve-2021-33044","",""],["CVE-2021-31196","Microsoft","Exchange Server","Microsoft Exchange Server Information Disclosure Vulnerability","2024-08-21","2024-09-11",0,[],"/kev/2024/#cve-2021-31196","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2024-23897","Jenkins","Jenkins Command Line Interface (CLI)","Jenkins Command Line Interface (CLI) Path Traversal Vulnerability","2024-08-19","2024-09-09",1,["CWE-27"],"/kev/2024/#cve-2024-23897","/vendors/jenkins/",""],["CVE-2024-28986","SolarWinds","Web Help Desk","SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","2024-08-15","2024-09-05",0,["CWE-502"],"/kev/2024/#cve-2024-28986","/vendors/solarwinds/","/products/solarwinds-web-help-desk/"],["CVE-2024-38213","Microsoft","Windows","Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","2024-08-13","2024-09-03",0,["CWE-693"],"/kev/2024/#cve-2024-38213","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-38193","Microsoft","Windows","Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability","2024-08-13","2024-09-03",0,["CWE-416"],"/kev/2024/#cve-2024-38193","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-38189","Microsoft","Project","Microsoft Project Remote Code Execution Vulnerability ","2024-08-13","2024-09-03",0,["CWE-20"],"/kev/2024/#cve-2024-38189","/vendors/microsoft/",""],["CVE-2024-38178","Microsoft","Windows","Microsoft Windows Scripting Engine Memory Corruption Vulnerability","2024-08-13","2024-09-03",0,["CWE-843"],"/kev/2024/#cve-2024-38178","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-38107","Microsoft","Windows","Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability","2024-08-13","2024-09-03",0,["CWE-416"],"/kev/2024/#cve-2024-38107","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-38106","Microsoft","Windows","Microsoft Windows Kernel Privilege Escalation Vulnerability","2024-08-13","2024-09-03",0,["CWE-591"],"/kev/2024/#cve-2024-38106","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-36971","Android","Kernel","Android Kernel Remote Code Execution Vulnerability","2024-08-07","2024-08-28",0,["CWE-416"],"/kev/2024/#cve-2024-36971","/vendors/android/","/products/android-kernel/"],["CVE-2024-32113","Apache","OFBiz","Apache OFBiz Path Traversal Vulnerability","2024-08-07","2024-08-28",0,["CWE-22"],"/kev/2024/#cve-2024-32113","/vendors/apache/","/products/apache-ofbiz/"],["CVE-2018-0824","Microsoft","Windows","Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","2024-08-05","2024-08-26",0,["CWE-502"],"/kev/2024/#cve-2018-0824","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-37085","VMware","ESXi","VMware ESXi Authentication Bypass Vulnerability","2024-07-30","2024-08-20",1,["CWE-305"],"/kev/2024/#cve-2024-37085","/vendors/vmware/","/products/vmware-esxi/"],["CVE-2024-5217","ServiceNow","Utah, Vancouver, and Washington DC Now Platform","ServiceNow Incomplete List of Disallowed Inputs Vulnerability","2024-07-29","2024-08-19",0,["CWE-184"],"/kev/2024/#cve-2024-5217","",""],["CVE-2024-4879","ServiceNow","Utah, Vancouver, and Washington DC Now Platform","ServiceNow Improper Input Validation Vulnerability","2024-07-29","2024-08-19",0,["CWE-1287"],"/kev/2024/#cve-2024-4879","",""],["CVE-2023-45249","Acronis","Cyber Infrastructure (ACI)","Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability","2024-07-29","2024-08-19",0,["CWE-1393"],"/kev/2024/#cve-2023-45249","",""],["CVE-2024-39891","Twilio","Authy","Twilio Authy Information Disclosure Vulnerability","2024-07-23","2024-08-13",0,["CWE-203"],"/kev/2024/#cve-2024-39891","",""],["CVE-2012-4792","Microsoft","Internet Explorer","Microsoft Internet Explorer Use-After-Free Vulnerability","2024-07-23","2024-08-13",0,["CWE-416"],"/kev/2024/#cve-2012-4792","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2024-34102","Adobe","Commerce and Magento Open Source","Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability","2024-07-17","2024-08-07",0,["CWE-611"],"/kev/2024/#cve-2024-34102","/vendors/adobe/",""],["CVE-2024-28995","SolarWinds","Serv-U","SolarWinds Serv-U Path Traversal Vulnerability ","2024-07-17","2024-08-07",0,["CWE-22"],"/kev/2024/#cve-2024-28995","/vendors/solarwinds/","/products/solarwinds-serv-u/"],["CVE-2022-22948","VMware","vCenter Server","VMware vCenter Server Incorrect Default File Permissions Vulnerability ","2024-07-17","2024-08-07",0,["CWE-276"],"/kev/2024/#cve-2022-22948","/vendors/vmware/","/products/vmware-vcenter-server/"],["CVE-2024-36401","OSGeo","GeoServer","OSGeo GeoServer GeoTools Eval Injection Vulnerability","2024-07-15","2024-08-05",0,["CWE-95"],"/kev/2024/#cve-2024-36401","",""],["CVE-2024-38112","Microsoft","Windows","Microsoft Windows MSHTML Platform Spoofing Vulnerability","2024-07-09","2024-07-30",0,["CWE-451"],"/kev/2024/#cve-2024-38112","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-38080","Microsoft","Windows ","Microsoft Windows Hyper-V Privilege Escalation Vulnerability","2024-07-09","2024-07-30",0,["CWE-190"],"/kev/2024/#cve-2024-38080","/vendors/microsoft/",""],["CVE-2024-23692","Rejetto","HTTP File Server","Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability","2024-07-09","2024-07-30",1,["CWE-1336"],"/kev/2024/#cve-2024-23692","",""],["CVE-2024-20399","Cisco","NX-OS","Cisco NX-OS Command Injection Vulnerability","2024-07-02","2024-07-23",0,["CWE-78"],"/kev/2024/#cve-2024-20399","/vendors/cisco/",""],["CVE-2022-2586","Linux","Kernel","Linux Kernel Use-After-Free Vulnerability","2024-06-26","2024-07-17",0,["CWE-416"],"/kev/2024/#cve-2022-2586","/vendors/linux/","/products/linux-kernel/"],["CVE-2022-24816","OSGeo","JAI-EXT","OSGeo GeoServer JAI-EXT Code Injection Vulnerability","2024-06-26","2024-07-17",0,["CWE-94"],"/kev/2024/#cve-2022-24816","",""],["CVE-2020-13965","Roundcube","Webmail","Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","2024-06-26","2024-07-17",0,["CWE-80"],"/kev/2024/#cve-2020-13965","/vendors/roundcube/","/products/roundcube-webmail/"],["CVE-2024-4358","Progress","Telerik Report Server","Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability","2024-06-13","2024-07-04",0,["CWE-290"],"/kev/2024/#cve-2024-4358","/vendors/progress/",""],["CVE-2024-32896","Android","Pixel","Android Pixel Privilege Escalation Vulnerability","2024-06-13","2024-07-04",0,["CWE-783"],"/kev/2024/#cve-2024-32896","/vendors/android/","/products/android-pixel/"],["CVE-2024-26169","Microsoft","Windows","Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability","2024-06-13","2024-07-04",1,["CWE-269"],"/kev/2024/#cve-2024-26169","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-4610","Arm","Mali GPU Kernel Driver","Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","2024-06-12","2024-07-03",0,["CWE-416"],"/kev/2024/#cve-2024-4610","/vendors/arm/",""],["CVE-2024-4577","PHP Group","PHP","PHP-CGI OS Command Injection Vulnerability","2024-06-12","2024-07-03",1,["CWE-78"],"/kev/2024/#cve-2024-4577","",""],["CVE-2017-3506","Oracle","WebLogic Server","Oracle WebLogic Server OS Command Injection Vulnerability","2024-06-03","2024-06-24",0,["CWE-78"],"/kev/2024/#cve-2017-3506","/vendors/oracle/","/products/oracle-weblogic-server/"],["CVE-2024-24919","Check Point","Quantum Security Gateways","Check Point Quantum Security Gateways Information Disclosure Vulnerability","2024-05-30","2024-06-20",1,["CWE-200"],"/kev/2024/#cve-2024-24919","/vendors/check-point/",""],["CVE-2024-1086","Linux","Kernel","Linux Kernel Use-After-Free Vulnerability","2024-05-30","2024-06-20",1,["CWE-416"],"/kev/2024/#cve-2024-1086","/vendors/linux/","/products/linux-kernel/"],["CVE-2024-4978","Justice AV Solutions","Viewer ","Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability","2024-05-29","2024-06-19",0,["CWE-506"],"/kev/2024/#cve-2024-4978","",""],["CVE-2024-5274","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2024-05-28","2024-06-18",0,["CWE-843"],"/kev/2024/#cve-2024-5274","/vendors/google/","/products/google-chromium-v8/"],["CVE-2020-17519","Apache","Flink","Apache Flink Improper Access Control Vulnerability","2024-05-23","2024-06-13",0,["CWE-552"],"/kev/2024/#cve-2020-17519","/vendors/apache/",""],["CVE-2024-4947","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2024-05-20","2024-06-10",0,["CWE-843"],"/kev/2024/#cve-2024-4947","/vendors/google/","/products/google-chromium-v8/"],["CVE-2023-43208","NextGen Healthcare","Mirth Connect","NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability","2024-05-20","2024-06-10",1,["CWE-502"],"/kev/2024/#cve-2023-43208","",""],["CVE-2024-4761","Google","Chromium V8","Google Chromium V8 Out-of-Bounds Memory Write Vulnerability","2024-05-16","2024-06-06",0,["CWE-787"],"/kev/2024/#cve-2024-4761","/vendors/google/","/products/google-chromium-v8/"],["CVE-2021-40655","D-Link","DIR-605 Router","D-Link DIR-605 Router Information Disclosure Vulnerability","2024-05-16","2024-06-06",0,["CWE-863"],"/kev/2024/#cve-2021-40655","/vendors/d-link/",""],["CVE-2014-100005","D-Link","DIR-600 Router","D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability","2024-05-16","2024-06-06",0,["CWE-352"],"/kev/2024/#cve-2014-100005","/vendors/d-link/",""],["CVE-2024-30051","Microsoft","DWM Core Library"," Microsoft DWM Core Library Privilege Escalation Vulnerability","2024-05-14","2024-06-04",1,["CWE-122"],"/kev/2024/#cve-2024-30051","/vendors/microsoft/",""],["CVE-2024-30040","Microsoft","Windows","Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability","2024-05-14","2024-06-04",0,["CWE-20"],"/kev/2024/#cve-2024-30040","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-4671","Google","Chromium","Google Chromium Visuals Use-After-Free Vulnerability","2024-05-13","2024-06-03",0,["CWE-416"],"/kev/2024/#cve-2024-4671","/vendors/google/","/products/google-chromium/"],["CVE-2023-7028","GitLab","GitLab CE/EE","GitLab Community and Enterprise Editions Improper Access Control Vulnerability","2024-05-01","2024-05-22",0,["CWE-284"],"/kev/2024/#cve-2023-7028","/vendors/gitlab/",""],["CVE-2024-29988","Microsoft","SmartScreen Prompt","Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability","2024-04-30","2024-05-21",0,["CWE-693"],"/kev/2024/#cve-2024-29988","/vendors/microsoft/",""],["CVE-2024-4040","CrushFTP","CrushFTP","CrushFTP VFS Sandbox Escape Vulnerability","2024-04-24","2024-05-01",0,["CWE-1336"],"/kev/2024/#cve-2024-4040","","/products/crushftp-crushftp/"],["CVE-2024-20359","Cisco","Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","Cisco ASA and FTD Privilege Escalation Vulnerability","2024-04-24","2024-05-01",0,["CWE-94"],"/kev/2024/#cve-2024-20359","/vendors/cisco/","/products/cisco-adaptive-security-appliance-asa-and-firepower-threat-defense-ftd/"],["CVE-2024-20353","Cisco","Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","Cisco ASA and FTD Denial of Service Vulnerability","2024-04-24","2024-05-01",0,["CWE-835"],"/kev/2024/#cve-2024-20353","/vendors/cisco/","/products/cisco-adaptive-security-appliance-asa-and-firepower-threat-defense-ftd/"],["CVE-2022-38028","Microsoft","Windows","Microsoft Windows Print Spooler Privilege Escalation Vulnerability ","2024-04-23","2024-05-14",0,[],"/kev/2024/#cve-2022-38028","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-3400","Palo Alto Networks","PAN-OS","Palo Alto Networks PAN-OS Command Injection Vulnerability","2024-04-12","2024-04-19",1,["CWE-20","CWE-77"],"/kev/2024/#cve-2024-3400","/vendors/palo-alto-networks/","/products/palo-alto-networks-pan-os/"],["CVE-2024-3273","D-Link","Multiple NAS Devices","D-Link Multiple NAS Devices Command Injection Vulnerability","2024-04-11","2024-05-02",0,["CWE-77"],"/kev/2024/#cve-2024-3273","/vendors/d-link/",""],["CVE-2024-3272","D-Link","Multiple NAS Devices","D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability","2024-04-11","2024-05-02",0,["CWE-798"],"/kev/2024/#cve-2024-3272","/vendors/d-link/",""],["CVE-2024-29748","Android","Pixel","Android Pixel Privilege Escalation Vulnerability","2024-04-04","2024-04-25",0,["CWE-280"],"/kev/2024/#cve-2024-29748","/vendors/android/","/products/android-pixel/"],["CVE-2024-29745","Android","Pixel","Android Pixel Information Disclosure Vulnerability","2024-04-04","2024-04-25",0,["CWE-908"],"/kev/2024/#cve-2024-29745","/vendors/android/","/products/android-pixel/"],["CVE-2023-24955","Microsoft","SharePoint Server","Microsoft SharePoint Server Code Injection Vulnerability","2024-03-26","2024-04-16",1,["CWE-94"],"/kev/2024/#cve-2023-24955","/vendors/microsoft/","/products/microsoft-sharepoint-server/"],["CVE-2023-48788","Fortinet","FortiClient EMS","Fortinet FortiClient EMS SQL Injection Vulnerability","2024-03-25","2024-04-15",1,["CWE-89"],"/kev/2024/#cve-2023-48788","/vendors/fortinet/","/products/fortinet-forticlient-ems/"],["CVE-2021-44529","Ivanti","Endpoint Manager Cloud Service Appliance (EPM CSA)","Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability ","2024-03-25","2024-04-15",1,["CWE-94"],"/kev/2024/#cve-2021-44529","/vendors/ivanti/",""],["CVE-2019-7256","Nice","Linear eMerge E3-Series","Nice Linear eMerge E3-Series OS Command Injection Vulnerability","2024-03-25","2024-04-15",0,["CWE-78"],"/kev/2024/#cve-2019-7256","",""],["CVE-2024-27198","JetBrains","TeamCity","JetBrains TeamCity Authentication Bypass Vulnerability","2024-03-07","2024-03-28",1,["CWE-288"],"/kev/2024/#cve-2024-27198","","/products/jetbrains-teamcity/"],["CVE-2024-23296","Apple","Multiple Products","Apple Multiple Products Memory Corruption Vulnerability","2024-03-06","2024-03-27",0,["CWE-787"],"/kev/2024/#cve-2024-23296","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2024-23225","Apple","Multiple Products","Apple Multiple Products Memory Corruption Vulnerability","2024-03-06","2024-03-27",0,["CWE-787"],"/kev/2024/#cve-2024-23225","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-21237","Android","Pixel","Android Pixel Information Disclosure Vulnerability ","2024-03-05","2024-03-26",0,["CWE-200"],"/kev/2024/#cve-2023-21237","/vendors/android/","/products/android-pixel/"],["CVE-2021-36380","Sunhillo","SureLine","Sunhillo SureLine OS Command Injection Vulnerablity","2024-03-05","2024-03-26",0,["CWE-78"],"/kev/2024/#cve-2021-36380","",""],["CVE-2024-21338","Microsoft","Windows","Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability","2024-03-04","2024-03-25",1,["CWE-822"],"/kev/2024/#cve-2024-21338","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2023-29360","Microsoft","Streaming Service","Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability","2024-02-29","2024-03-21",0,["CWE-822"],"/kev/2024/#cve-2023-29360","/vendors/microsoft/",""],["CVE-2024-1709","ConnectWise","ScreenConnect","ConnectWise ScreenConnect Authentication Bypass Vulnerability","2024-02-22","2024-02-29",1,["CWE-288"],"/kev/2024/#cve-2024-1709","","/products/connectwise-screenconnect/"],["CVE-2024-21410","Microsoft","Exchange Server","Microsoft Exchange Server Privilege Escalation Vulnerability","2024-02-15","2024-03-07",0,["CWE-287"],"/kev/2024/#cve-2024-21410","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2020-3259","Cisco","Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","Cisco ASA and FTD Information Disclosure Vulnerability","2024-02-15","2024-03-07",1,["CWE-200"],"/kev/2024/#cve-2020-3259","/vendors/cisco/","/products/cisco-adaptive-security-appliance-asa-and-firepower-threat-defense-ftd/"],["CVE-2024-21412","Microsoft","Windows","Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability","2024-02-13","2024-03-05",1,["CWE-693"],"/kev/2024/#cve-2024-21412","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2024-21351","Microsoft","Windows","Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","2024-02-13","2024-03-05",0,["CWE-94"],"/kev/2024/#cve-2024-21351","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2023-43770","Roundcube","Webmail","Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","2024-02-12","2024-03-04",0,["CWE-79"],"/kev/2024/#cve-2023-43770","/vendors/roundcube/","/products/roundcube-webmail/"],["CVE-2024-21762","Fortinet","FortiOS","Fortinet FortiOS Out-of-Bound Write Vulnerability","2024-02-09","2024-02-16",1,["CWE-787"],"/kev/2024/#cve-2024-21762","/vendors/fortinet/","/products/fortinet-fortios/"],["CVE-2023-4762","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2024-02-06","2024-02-27",0,["CWE-843"],"/kev/2024/#cve-2023-4762","/vendors/google/","/products/google-chromium-v8/"],["CVE-2024-21893","Ivanti","Connect Secure, Policy Secure, and Neurons","Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability","2024-01-31","2024-02-02",1,["CWE-918"],"/kev/2024/#cve-2024-21893","/vendors/ivanti/",""],["CVE-2022-48618","Apple","Multiple Products","Apple Multiple Products Memory Corruption Vulnerability","2024-01-31","2024-02-21",0,["CWE-367"],"/kev/2024/#cve-2022-48618","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-22527","Atlassian","Confluence Data Center and Server","Atlassian Confluence Data Center and Server Template Injection Vulnerability","2024-01-24","2024-02-14",1,["CWE-74"],"/kev/2024/#cve-2023-22527","/vendors/atlassian/","/products/atlassian-confluence-data-center-and-server/"],["CVE-2024-23222","Apple","Multiple Products","Apple Multiple Products WebKit Type Confusion Vulnerability","2024-01-23","2024-02-13",0,["CWE-843"],"/kev/2024/#cve-2024-23222","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-34048","VMware","vCenter Server","VMware vCenter Server Out-of-Bounds Write Vulnerability","2024-01-22","2024-02-12",0,["CWE-787"],"/kev/2024/#cve-2023-34048","/vendors/vmware/","/products/vmware-vcenter-server/"],["CVE-2023-35082","Ivanti","Endpoint Manager Mobile (EPMM) and MobileIron Core","Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability","2024-01-18","2024-02-08",1,["CWE-287"],"/kev/2024/#cve-2023-35082","/vendors/ivanti/",""],["CVE-2024-0519","Google","Chromium V8","Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","2024-01-17","2024-02-07",0,["CWE-787"],"/kev/2024/#cve-2024-0519","/vendors/google/","/products/google-chromium-v8/"],["CVE-2023-6549","Citrix","NetScaler ADC and NetScaler Gateway","Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","2024-01-17","2024-02-07",0,["CWE-119"],"/kev/2024/#cve-2023-6549","/vendors/citrix/","/products/citrix-netscaler-adc-and-netscaler-gateway/"],["CVE-2023-6548","Citrix","NetScaler ADC and NetScaler Gateway","Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","2024-01-17","2024-01-24",0,["CWE-94"],"/kev/2024/#cve-2023-6548","/vendors/citrix/","/products/citrix-netscaler-adc-and-netscaler-gateway/"],["CVE-2018-15133","Laravel","Laravel Framework","Laravel Deserialization of Untrusted Data Vulnerability","2024-01-16","2024-02-06",0,["CWE-502"],"/kev/2024/#cve-2018-15133","",""],["CVE-2024-21887","Ivanti","Connect Secure and Policy Secure","Ivanti Connect Secure and Policy Secure Command Injection Vulnerability","2024-01-10","2024-01-22",1,["CWE-77"],"/kev/2024/#cve-2024-21887","/vendors/ivanti/",""],["CVE-2023-46805","Ivanti","Connect Secure and Policy Secure","Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability","2024-01-10","2024-01-22",1,["CWE-287"],"/kev/2024/#cve-2023-46805","/vendors/ivanti/",""],["CVE-2023-29357","Microsoft","SharePoint Server","Microsoft SharePoint Server Privilege Escalation Vulnerability","2024-01-10","2024-01-31",1,["CWE-303"],"/kev/2024/#cve-2023-29357","/vendors/microsoft/","/products/microsoft-sharepoint-server/"],["CVE-2023-41990","Apple","Multiple Products","Apple Multiple Products Code Execution Vulnerability","2024-01-08","2024-01-29",0,[],"/kev/2024/#cve-2023-41990","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-38203","Adobe","ColdFusion","Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","2024-01-08","2024-01-29",1,["CWE-502"],"/kev/2024/#cve-2023-38203","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2023-29300","Adobe","ColdFusion","Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","2024-01-08","2024-01-29",1,["CWE-502"],"/kev/2024/#cve-2023-29300","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2023-27524","Apache","Superset","Apache Superset Insecure Default Initialization of Resource Vulnerability","2024-01-08","2024-01-29",0,["CWE-1188"],"/kev/2024/#cve-2023-27524","/vendors/apache/",""],["CVE-2023-23752","Joomla!","Joomla!","Joomla! Improper Access Control Vulnerability","2024-01-08","2024-01-29",0,["CWE-284"],"/kev/2024/#cve-2023-23752","",""],["CVE-2016-20017","D-Link","DSL-2750B Devices","D-Link DSL-2750B Devices Command Injection Vulnerability","2024-01-08","2024-01-29",0,["CWE-77"],"/kev/2024/#cve-2016-20017","/vendors/d-link/",""],["CVE-2023-7101","Spreadsheet::ParseExcel","Spreadsheet::ParseExcel","Spreadsheet::ParseExcel Remote Code Execution Vulnerability","2024-01-02","2024-01-23",0,["CWE-95"],"/kev/2024/#cve-2023-7101","",""],["CVE-2023-7024","Google","Chromium WebRTC","Google Chromium WebRTC Heap Buffer Overflow Vulnerability","2024-01-02","2024-01-23",0,["CWE-787"],"/kev/2024/#cve-2023-7024","/vendors/google/",""],["CVE-2023-49897","FXC","AE1021, AE1021PE","FXC AE1021, AE1021PE OS Command Injection Vulnerability","2023-12-21","2024-01-11",0,["CWE-78"],"/kev/2023/#cve-2023-49897","",""],["CVE-2023-47565","QNAP","VioStor NVR","QNAP VioStor NVR OS Command Injection Vulnerability","2023-12-21","2024-01-11",0,["CWE-78"],"/kev/2023/#cve-2023-47565","/vendors/qnap/",""],["CVE-2023-6448","Unitronics","Vision PLC and HMI","Unitronics Vision PLC and HMI Insecure Default Password Vulnerability","2023-12-11","2023-12-18",0,["CWE-1188"],"/kev/2023/#cve-2023-6448","",""],["CVE-2023-41266","Qlik","Sense","Qlik Sense Path Traversal Vulnerability","2023-12-07","2023-12-28",1,["CWE-20"],"/kev/2023/#cve-2023-41266","","/products/qlik-sense/"],["CVE-2023-41265","Qlik","Sense","Qlik Sense HTTP Tunneling Vulnerability","2023-12-07","2023-12-28",1,["CWE-444"],"/kev/2023/#cve-2023-41265","","/products/qlik-sense/"],["CVE-2023-33107","Qualcomm","Multiple Chipsets","Qualcomm Multiple Chipsets Integer Overflow Vulnerability","2023-12-05","2023-12-26",0,["CWE-190"],"/kev/2023/#cve-2023-33107","/vendors/qualcomm/","/products/qualcomm-multiple-chipsets/"],["CVE-2023-33106","Qualcomm","Multiple Chipsets","Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability","2023-12-05","2023-12-26",0,["CWE-823"],"/kev/2023/#cve-2023-33106","/vendors/qualcomm/","/products/qualcomm-multiple-chipsets/"],["CVE-2023-33063","Qualcomm","Multiple Chipsets","Qualcomm Multiple Chipsets Use-After-Free Vulnerability","2023-12-05","2023-12-26",0,["CWE-416"],"/kev/2023/#cve-2023-33063","/vendors/qualcomm/","/products/qualcomm-multiple-chipsets/"],["CVE-2022-22071","Qualcomm","Multiple Chipsets","Qualcomm Multiple Chipsets Use-After-Free Vulnerability","2023-12-05","2023-12-26",0,["CWE-416"],"/kev/2023/#cve-2022-22071","/vendors/qualcomm/","/products/qualcomm-multiple-chipsets/"],["CVE-2023-42917","Apple","Multiple Products","Apple Multiple Products WebKit Memory Corruption Vulnerability","2023-12-04","2023-12-25",0,["CWE-787"],"/kev/2023/#cve-2023-42917","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-42916","Apple","Multiple Products","Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","2023-12-04","2023-12-25",0,["CWE-125"],"/kev/2023/#cve-2023-42916","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-6345","Google","Chromium Skia","Google Skia Integer Overflow Vulnerability","2023-11-30","2023-12-21",0,["CWE-190"],"/kev/2023/#cve-2023-6345","/vendors/google/",""],["CVE-2023-49103","ownCloud","ownCloud graphapi","ownCloud graphapi Information Disclosure Vulnerability","2023-11-30","2023-12-21",0,[],"/kev/2023/#cve-2023-49103","",""],["CVE-2023-4911","GNU","GNU C Library","GNU C Library Buffer Overflow Vulnerability","2023-11-21","2023-12-12",0,["CWE-122"],"/kev/2023/#cve-2023-4911","/vendors/gnu/",""],["CVE-2023-36584","Microsoft","Windows","Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","2023-11-16","2023-12-07",0,[],"/kev/2023/#cve-2023-36584","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2023-1671","Sophos","Web Appliance","Sophos Web Appliance Command Injection Vulnerability","2023-11-16","2023-12-07",0,["CWE-77"],"/kev/2023/#cve-2023-1671","/vendors/sophos/",""],["CVE-2020-2551","Oracle","Fusion Middleware","Oracle Fusion Middleware Unspecified Vulnerability","2023-11-16","2023-12-07",0,[],"/kev/2023/#cve-2020-2551","/vendors/oracle/","/products/oracle-fusion-middleware/"],["CVE-2023-36036","Microsoft","Windows","Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability","2023-11-14","2023-12-05",0,["CWE-122"],"/kev/2023/#cve-2023-36036","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2023-36033","Microsoft","Windows","Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","2023-11-14","2023-12-05",0,["CWE-822"],"/kev/2023/#cve-2023-36033","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2023-36025","Microsoft","Windows","Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","2023-11-14","2023-12-05",0,[],"/kev/2023/#cve-2023-36025","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2023-47246","SysAid","SysAid Server","SysAid Server Path Traversal Vulnerability","2023-11-13","2023-12-04",1,["CWE-22"],"/kev/2023/#cve-2023-47246","",""],["CVE-2023-36851","Juniper","Junos OS","Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","2023-11-13","2023-11-17",0,["CWE-306"],"/kev/2023/#cve-2023-36851","/vendors/juniper/","/products/juniper-junos-os/"],["CVE-2023-36847","Juniper","Junos OS","Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability","2023-11-13","2023-11-17",0,["CWE-306"],"/kev/2023/#cve-2023-36847","/vendors/juniper/","/products/juniper-junos-os/"],["CVE-2023-36846","Juniper","Junos OS","Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","2023-11-13","2023-11-17",0,["CWE-306"],"/kev/2023/#cve-2023-36846","/vendors/juniper/","/products/juniper-junos-os/"],["CVE-2023-36845","Juniper","Junos OS","Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability","2023-11-13","2023-11-17",0,["CWE-473"],"/kev/2023/#cve-2023-36845","/vendors/juniper/","/products/juniper-junos-os/"],["CVE-2023-36844","Juniper","Junos OS","Juniper Junos OS EX Series PHP External Variable Modification Vulnerability","2023-11-13","2023-11-17",0,["CWE-473"],"/kev/2023/#cve-2023-36844","/vendors/juniper/","/products/juniper-junos-os/"],["CVE-2023-29552","IETF","Service Location Protocol (SLP)","Service Location Protocol (SLP) Denial-of-Service Vulnerability","2023-11-08","2023-11-29",0,[],"/kev/2023/#cve-2023-29552","",""],["CVE-2023-22518","Atlassian","Confluence Data Center and Server","Atlassian Confluence Data Center and Server Improper Authorization Vulnerability","2023-11-07","2023-11-28",1,["CWE-863"],"/kev/2023/#cve-2023-22518","/vendors/atlassian/","/products/atlassian-confluence-data-center-and-server/"],["CVE-2023-46604","Apache","ActiveMQ","Apache ActiveMQ Deserialization of Untrusted Data Vulnerability","2023-11-02","2023-11-23",1,["CWE-502"],"/kev/2023/#cve-2023-46604","/vendors/apache/","/products/apache-activemq/"],["CVE-2023-46748","F5","BIG-IP Configuration Utility","F5 BIG-IP Configuration Utility SQL Injection Vulnerability","2023-10-31","2023-11-21",0,["CWE-89"],"/kev/2023/#cve-2023-46748","/vendors/f5/",""],["CVE-2023-46747","F5","BIG-IP Configuration Utility","F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability","2023-10-31","2023-11-21",1,["CWE-288"],"/kev/2023/#cve-2023-46747","/vendors/f5/",""],["CVE-2023-5631","Roundcube","Webmail","Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","2023-10-26","2023-11-16",0,["CWE-79"],"/kev/2023/#cve-2023-5631","/vendors/roundcube/","/products/roundcube-webmail/"],["CVE-2023-20273","Cisco","Cisco IOS XE Web UI","Cisco IOS XE Web UI Command Injection Vulnerability","2023-10-23","2023-10-27",0,["CWE-78"],"/kev/2023/#cve-2023-20273","/vendors/cisco/",""],["CVE-2023-4966","Citrix","NetScaler ADC and NetScaler Gateway","Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","2023-10-18","2023-11-08",1,["CWE-119"],"/kev/2023/#cve-2023-4966","/vendors/citrix/","/products/citrix-netscaler-adc-and-netscaler-gateway/"],["CVE-2023-20198","Cisco","IOS XE Web UI","Cisco IOS XE Web UI Privilege Escalation Vulnerability","2023-10-16","2023-10-20",0,["CWE-420"],"/kev/2023/#cve-2023-20198","/vendors/cisco/",""],["CVE-2023-44487","IETF","HTTP/2","HTTP/2 Rapid Reset Attack Vulnerability","2023-10-10","2023-10-31",0,["CWE-400"],"/kev/2023/#cve-2023-44487","",""],["CVE-2023-41763","Microsoft","Skype for Business","Microsoft Skype for Business Privilege Escalation Vulnerability","2023-10-10","2023-10-31",0,["CWE-918"],"/kev/2023/#cve-2023-41763","/vendors/microsoft/",""],["CVE-2023-36563","Microsoft","WordPad","Microsoft WordPad Information Disclosure Vulnerability","2023-10-10","2023-10-31",0,["CWE-20"],"/kev/2023/#cve-2023-36563","/vendors/microsoft/",""],["CVE-2023-21608","Adobe","Acrobat and Reader","Adobe Acrobat and Reader Use-After-Free Vulnerability","2023-10-10","2023-10-31",0,["CWE-416"],"/kev/2023/#cve-2023-21608","/vendors/adobe/","/products/adobe-acrobat-and-reader/"],["CVE-2023-20109","Cisco","IOS and IOS XE","Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability","2023-10-10","2023-10-31",0,["CWE-787"],"/kev/2023/#cve-2023-20109","/vendors/cisco/","/products/cisco-ios-and-ios-xe/"],["CVE-2023-42824","Apple","iOS and iPadOS","Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability","2023-10-05","2023-10-26",0,[],"/kev/2023/#cve-2023-42824","/vendors/apple/","/products/apple-ios-and-ipados/"],["CVE-2023-40044","Progress","WS_FTP Server","Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability","2023-10-05","2023-10-26",1,["CWE-502"],"/kev/2023/#cve-2023-40044","/vendors/progress/",""],["CVE-2023-22515","Atlassian","Confluence Data Center and Server","Atlassian Confluence Data Center and Server Broken Access Control Vulnerability","2023-10-05","2023-10-13",1,[],"/kev/2023/#cve-2023-22515","/vendors/atlassian/","/products/atlassian-confluence-data-center-and-server/"],["CVE-2023-42793","JetBrains","TeamCity","JetBrains TeamCity Authentication Bypass Vulnerability","2023-10-04","2023-10-25",1,["CWE-288"],"/kev/2023/#cve-2023-42793","","/products/jetbrains-teamcity/"],["CVE-2023-28229","Microsoft","Windows CNG Key Isolation Service","Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability","2023-10-04","2023-10-25",0,["CWE-591"],"/kev/2023/#cve-2023-28229","/vendors/microsoft/",""],["CVE-2023-4211","Arm","Mali GPU Kernel Driver","Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","2023-10-03","2023-10-24",0,["CWE-416"],"/kev/2023/#cve-2023-4211","/vendors/arm/",""],["CVE-2023-5217","Google","Chromium libvpx","Google Chromium libvpx Heap Buffer Overflow Vulnerability","2023-10-02","2023-10-23",0,["CWE-787"],"/kev/2023/#cve-2023-5217","/vendors/google/",""],["CVE-2018-14667","Red Hat","JBoss RichFaces Framework","Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability","2023-09-28","2023-10-19",0,["CWE-94"],"/kev/2023/#cve-2018-14667","/vendors/red-hat/",""],["CVE-2023-41993","Apple","Multiple Products","Apple Multiple Products WebKit Code Execution Vulnerability","2023-09-25","2023-10-16",0,["CWE-754"],"/kev/2023/#cve-2023-41993","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-41992","Apple","Multiple Products","Apple Multiple Products Kernel Privilege Escalation Vulnerability","2023-09-25","2023-10-16",0,["CWE-754"],"/kev/2023/#cve-2023-41992","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-41991","Apple","Multiple Products","Apple Multiple Products Improper Certificate Validation Vulnerability","2023-09-25","2023-10-16",0,["CWE-295"],"/kev/2023/#cve-2023-41991","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-41179","Trend Micro","Apex One and Worry-Free Business Security","Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability","2023-09-21","2023-10-12",0,[],"/kev/2023/#cve-2023-41179","/vendors/trend-micro/",""],["CVE-2023-28434","MinIO","MinIO","MinIO Security Feature Bypass Vulnerability","2023-09-19","2023-10-10",0,["CWE-269"],"/kev/2023/#cve-2023-28434","",""],["CVE-2022-22265","Samsung","Mobile Devices","Samsung Mobile Devices Use-After-Free Vulnerability","2023-09-18","2023-10-09",0,["CWE-703"],"/kev/2023/#cve-2022-22265","/vendors/samsung/","/products/samsung-mobile-devices/"],["CVE-2021-3129","Laravel","Ignition","Laravel Ignition File Upload Vulnerability","2023-09-18","2023-10-09",1,[],"/kev/2023/#cve-2021-3129","",""],["CVE-2017-6884","Zyxel","EMG2926 Routers","Zyxel EMG2926 Routers Command Injection Vulnerability","2023-09-18","2023-10-09",1,["CWE-78"],"/kev/2023/#cve-2017-6884","/vendors/zyxel/",""],["CVE-2014-8361","Realtek","SDK","Realtek SDK Improper Input Validation Vulnerability","2023-09-18","2023-10-09",0,["CWE-20"],"/kev/2023/#cve-2014-8361","",""],["CVE-2023-26369","Adobe","Acrobat and Reader","Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability","2023-09-14","2023-10-05",0,["CWE-787"],"/kev/2023/#cve-2023-26369","/vendors/adobe/","/products/adobe-acrobat-and-reader/"],["CVE-2023-4863","Google","Chromium WebP","Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","2023-09-13","2023-10-04",0,["CWE-787"],"/kev/2023/#cve-2023-4863","/vendors/google/",""],["CVE-2023-35674","Android","Framework","Android Framework Privilege Escalation Vulnerability","2023-09-13","2023-10-04",0,[],"/kev/2023/#cve-2023-35674","/vendors/android/","/products/android-framework/"],["CVE-2023-20269","Cisco","Adaptive Security Appliance and Firepower Threat Defense","Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability","2023-09-13","2023-10-04",1,["CWE-288"],"/kev/2023/#cve-2023-20269","/vendors/cisco/",""],["CVE-2023-36802","Microsoft","Streaming Service Proxy","Microsoft Streaming Service Proxy Privilege Escalation Vulnerability","2023-09-12","2023-10-03",0,["CWE-416"],"/kev/2023/#cve-2023-36802","/vendors/microsoft/",""],["CVE-2023-36761","Microsoft","Word","Microsoft Word Information Disclosure Vulnerability","2023-09-12","2023-10-03",0,["CWE-668"],"/kev/2023/#cve-2023-36761","/vendors/microsoft/","/products/microsoft-word/"],["CVE-2023-41064","Apple","iOS, iPadOS, and macOS","Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability","2023-09-11","2023-10-02",0,["CWE-120"],"/kev/2023/#cve-2023-41064","/vendors/apple/","/products/apple-ios-ipados-and-macos/"],["CVE-2023-41061","Apple","iOS, iPadOS, and watchOS","Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability","2023-09-11","2023-10-02",0,[],"/kev/2023/#cve-2023-41061","/vendors/apple/","/products/apple-ios-ipados-and-watchos/"],["CVE-2023-33246","Apache","RocketMQ","Apache RocketMQ Command Execution Vulnerability","2023-09-06","2023-09-27",0,["CWE-94"],"/kev/2023/#cve-2023-33246","/vendors/apache/",""],["CVE-2023-38831","RARLAB","WinRAR","RARLAB WinRAR Code Execution Vulnerability","2023-08-24","2023-09-14",1,["CWE-351"],"/kev/2023/#cve-2023-38831","/vendors/rarlab/","/products/rarlab-winrar/"],["CVE-2023-32315","Ignite Realtime","Openfire","Ignite Realtime Openfire Path Traversal Vulnerability","2023-08-24","2023-09-14",0,["CWE-22"],"/kev/2023/#cve-2023-32315","",""],["CVE-2023-38035","Ivanti","Sentry","Ivanti Sentry Authentication Bypass Vulnerability","2023-08-22","2023-09-12",1,["CWE-863"],"/kev/2023/#cve-2023-38035","/vendors/ivanti/",""],["CVE-2023-27532","Veeam","Backup & Replication","Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability","2023-08-22","2023-09-12",1,["CWE-306"],"/kev/2023/#cve-2023-27532","","/products/veeam-backup-and-replication/"],["CVE-2023-26359","Adobe","ColdFusion","Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","2023-08-21","2023-09-11",0,["CWE-502"],"/kev/2023/#cve-2023-26359","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2023-24489","Citrix","Content Collaboration","Citrix Content Collaboration ShareFile Improper Access Control Vulnerability","2023-08-16","2023-09-06",0,["CWE-284"],"/kev/2023/#cve-2023-24489","/vendors/citrix/",""],["CVE-2023-38180","Microsoft",".NET Core and Visual Studio","Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability","2023-08-09","2023-08-30",0,[],"/kev/2023/#cve-2023-38180","/vendors/microsoft/",""],["CVE-2017-18368","Zyxel","P660HN-T1A Routers","Zyxel P660HN-T1A Routers Command Injection Vulnerability","2023-08-07","2023-08-28",0,["CWE-78"],"/kev/2023/#cve-2017-18368","/vendors/zyxel/",""],["CVE-2023-35081","Ivanti","Endpoint Manager Mobile (EPMM)","Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability","2023-07-31","2023-08-21",0,["CWE-22"],"/kev/2023/#cve-2023-35081","/vendors/ivanti/","/products/ivanti-endpoint-manager-mobile-epmm/"],["CVE-2023-37580","Synacor","Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","2023-07-27","2023-08-17",0,["CWE-79"],"/kev/2023/#cve-2023-37580","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2023-38606","Apple","Multiple Products","Apple Multiple Products Kernel Unspecified Vulnerability","2023-07-26","2023-08-16",0,[],"/kev/2023/#cve-2023-38606","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-35078","Ivanti","Endpoint Manager Mobile (EPMM)","Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability","2023-07-25","2023-08-15",1,["CWE-287"],"/kev/2023/#cve-2023-35078","/vendors/ivanti/","/products/ivanti-endpoint-manager-mobile-epmm/"],["CVE-2023-38205","Adobe","ColdFusion","Adobe ColdFusion Improper Access Control Vulnerability","2023-07-20","2023-08-10",0,["CWE-284"],"/kev/2023/#cve-2023-38205","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2023-29298","Adobe","ColdFusion","Adobe ColdFusion Improper Access Control Vulnerability","2023-07-20","2023-08-10",0,["CWE-284"],"/kev/2023/#cve-2023-29298","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2023-3519","Citrix","NetScaler ADC and NetScaler Gateway","Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","2023-07-19","2023-08-09",1,["CWE-94"],"/kev/2023/#cve-2023-3519","/vendors/citrix/","/products/citrix-netscaler-adc-and-netscaler-gateway/"],["CVE-2023-36884","Microsoft","Windows","Microsoft Windows Search Remote Code Execution Vulnerability","2023-07-17","2023-08-29",1,["CWE-362"],"/kev/2023/#cve-2023-36884","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2023-37450","Apple","Multiple Products","Apple Multiple Products WebKit Code Execution Vulnerability","2023-07-13","2023-08-03",0,[],"/kev/2023/#cve-2023-37450","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2022-29303","SolarView","Compact","SolarView Compact Command Injection Vulnerability","2023-07-13","2023-08-03",0,["CWE-78"],"/kev/2023/#cve-2022-29303","",""],["CVE-2023-36874","Microsoft","Windows","Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability","2023-07-11","2023-08-01",0,["CWE-59"],"/kev/2023/#cve-2023-36874","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2023-35311","Microsoft","Outlook","Microsoft Outlook Security Feature Bypass Vulnerability","2023-07-11","2023-08-01",0,["CWE-367"],"/kev/2023/#cve-2023-35311","/vendors/microsoft/",""],["CVE-2023-32049","Microsoft","Windows","Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability","2023-07-11","2023-08-01",0,[],"/kev/2023/#cve-2023-32049","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2023-32046","Microsoft","Windows","Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability","2023-07-11","2023-08-01",0,[],"/kev/2023/#cve-2023-32046","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-31199","Netwrix","Auditor","Netwrix Auditor Insecure Object Deserialization Vulnerability","2023-07-11","2023-08-01",1,["CWE-502","CWE-122"],"/kev/2023/#cve-2022-31199","",""],["CVE-2021-29256","Arm","Mali Graphics Processing Unit (GPU)","Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","2023-07-07","2023-07-28",0,["CWE-416"],"/kev/2023/#cve-2021-29256","/vendors/arm/","/products/arm-mali-graphics-processing-unit-gpu/"],["CVE-2021-25489","Samsung","Mobile Devices","Samsung Mobile Devices Improper Input Validation Vulnerability","2023-06-29","2023-07-20",0,["CWE-20"],"/kev/2023/#cve-2021-25489","/vendors/samsung/","/products/samsung-mobile-devices/"],["CVE-2021-25487","Samsung","Mobile Devices","Samsung Mobile Devices Out-of-Bounds Read Vulnerability","2023-06-29","2023-07-20",0,["CWE-125"],"/kev/2023/#cve-2021-25487","/vendors/samsung/","/products/samsung-mobile-devices/"],["CVE-2021-25395","Samsung","Mobile Devices","Samsung Mobile Devices Race Condition Vulnerability","2023-06-29","2023-07-20",0,["CWE-362"],"/kev/2023/#cve-2021-25395","/vendors/samsung/","/products/samsung-mobile-devices/"],["CVE-2021-25394","Samsung","Mobile Devices","Samsung Mobile Devices Race Condition Vulnerability","2023-06-29","2023-07-20",0,["CWE-416"],"/kev/2023/#cve-2021-25394","/vendors/samsung/","/products/samsung-mobile-devices/"],["CVE-2021-25372","Samsung","Mobile Devices","Samsung Mobile Devices Improper Boundary Check Vulnerability","2023-06-29","2023-07-20",0,["CWE-787"],"/kev/2023/#cve-2021-25372","/vendors/samsung/","/products/samsung-mobile-devices/"],["CVE-2021-25371","Samsung","Mobile Devices","Samsung Mobile Devices Unspecified Vulnerability","2023-06-29","2023-07-20",0,["CWE-912"],"/kev/2023/#cve-2021-25371","/vendors/samsung/","/products/samsung-mobile-devices/"],["CVE-2019-20500","D-Link","DWL-2600AP Access Point","D-Link DWL-2600AP Access Point Command Injection Vulnerability","2023-06-29","2023-07-20",0,["CWE-78"],"/kev/2023/#cve-2019-20500","/vendors/d-link/",""],["CVE-2019-17621","D-Link","DIR-859 Router","D-Link DIR-859 Router Command Execution Vulnerability","2023-06-29","2023-07-20",0,["CWE-78"],"/kev/2023/#cve-2019-17621","/vendors/d-link/",""],["CVE-2023-32439","Apple","Multiple Products","Apple Multiple Products WebKit Type Confusion Vulnerability","2023-06-23","2023-07-14",0,["CWE-843"],"/kev/2023/#cve-2023-32439","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-32435","Apple","Multiple Products","Apple Multiple Products WebKit Memory Corruption Vulnerability","2023-06-23","2023-07-14",0,["CWE-787"],"/kev/2023/#cve-2023-32435","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-32434","Apple","Multiple Products","Apple Multiple Products Integer Overflow Vulnerability","2023-06-23","2023-07-14",0,["CWE-190"],"/kev/2023/#cve-2023-32434","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-27992","Zyxel","Multiple Network-Attached Storage (NAS) Devices","Zyxel Multiple NAS Devices Command Injection Vulnerability","2023-06-23","2023-07-14",0,["CWE-78"],"/kev/2023/#cve-2023-27992","/vendors/zyxel/",""],["CVE-2023-20867","VMware","Tools","VMware Tools Authentication Bypass Vulnerability","2023-06-23","2023-07-14",0,["CWE-287"],"/kev/2023/#cve-2023-20867","/vendors/vmware/",""],["CVE-2023-20887","VMware","Aria Operations for Networks","Vmware Aria Operations for Networks Command Injection Vulnerability","2023-06-22","2023-07-13",0,["CWE-77"],"/kev/2023/#cve-2023-20887","/vendors/vmware/",""],["CVE-2021-44026","Roundcube","Roundcube Webmail","Roundcube Webmail SQL Injection Vulnerability","2023-06-22","2023-07-13",0,["CWE-89"],"/kev/2023/#cve-2021-44026","/vendors/roundcube/","/products/roundcube-roundcube-webmail/"],["CVE-2020-35730","Roundcube","Roundcube Webmail","Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","2023-06-22","2023-07-13",0,["CWE-79"],"/kev/2023/#cve-2020-35730","/vendors/roundcube/","/products/roundcube-roundcube-webmail/"],["CVE-2020-12641","Roundcube","Roundcube Webmail","Roundcube Webmail Remote Code Execution Vulnerability","2023-06-22","2023-07-13",0,["CWE-78"],"/kev/2023/#cve-2020-12641","/vendors/roundcube/","/products/roundcube-roundcube-webmail/"],["CVE-2016-9079","Mozilla","Firefox, Firefox ESR, and Thunderbird","Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","2023-06-22","2023-07-13",0,["CWE-416"],"/kev/2023/#cve-2016-9079","/vendors/mozilla/",""],["CVE-2016-0165","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2023-06-22","2023-07-13",0,["CWE-264"],"/kev/2023/#cve-2016-0165","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2023-27997","Fortinet","FortiOS and FortiProxy SSL-VPN","Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability","2023-06-13","2023-07-04",1,["CWE-122"],"/kev/2023/#cve-2023-27997","/vendors/fortinet/",""],["CVE-2023-3079","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2023-06-07","2023-06-28",0,["CWE-843"],"/kev/2023/#cve-2023-3079","/vendors/google/","/products/google-chromium-v8/"],["CVE-2023-33010","Zyxel","Multiple Firewalls","Zyxel Multiple Firewalls Buffer Overflow Vulnerability","2023-06-05","2023-06-26",0,["CWE-120"],"/kev/2023/#cve-2023-33010","/vendors/zyxel/","/products/zyxel-multiple-firewalls/"],["CVE-2023-33009","Zyxel","Multiple Firewalls","Zyxel Multiple Firewalls Buffer Overflow Vulnerability","2023-06-05","2023-06-26",0,["CWE-120"],"/kev/2023/#cve-2023-33009","/vendors/zyxel/","/products/zyxel-multiple-firewalls/"],["CVE-2023-34362","Progress","MOVEit Transfer","Progress MOVEit Transfer SQL Injection Vulnerability","2023-06-02","2023-06-23",1,["CWE-89"],"/kev/2023/#cve-2023-34362","/vendors/progress/",""],["CVE-2023-28771","Zyxel","Multiple Firewalls","Zyxel Multiple Firewalls OS Command Injection Vulnerability","2023-05-31","2023-06-21",0,["CWE-78"],"/kev/2023/#cve-2023-28771","/vendors/zyxel/","/products/zyxel-multiple-firewalls/"],["CVE-2023-2868","Barracuda Networks","Email Security Gateway (ESG) Appliance","Barracuda Networks ESG Appliance Improper Input Validation Vulnerability","2023-05-26","2023-06-16",0,["CWE-20"],"/kev/2023/#cve-2023-2868","",""],["CVE-2023-32409","Apple","Multiple Products","Apple Multiple Products WebKit Sandbox Escape Vulnerability","2023-05-22","2023-06-12",0,[],"/kev/2023/#cve-2023-32409","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-32373","Apple","Multiple Products","Apple Multiple Products WebKit Use-After-Free Vulnerability","2023-05-22","2023-06-12",0,["CWE-416"],"/kev/2023/#cve-2023-32373","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-28204","Apple","Multiple Products","Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","2023-05-22","2023-06-12",0,["CWE-125"],"/kev/2023/#cve-2023-28204","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-21492","Samsung","Mobile Devices","Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability","2023-05-19","2023-06-09",0,["CWE-532"],"/kev/2023/#cve-2023-21492","/vendors/samsung/","/products/samsung-mobile-devices/"],["CVE-2016-6415","Cisco","IOS, IOS XR, and IOS XE","Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability","2023-05-19","2023-06-09",0,["CWE-200"],"/kev/2023/#cve-2016-6415","/vendors/cisco/",""],["CVE-2004-1464","Cisco","IOS","Cisco IOS Denial-of-Service Vulnerability","2023-05-19","2023-06-09",0,[],"/kev/2023/#cve-2004-1464","/vendors/cisco/",""],["CVE-2023-25717","Ruckus Wireless","Multiple Products","Multiple Ruckus Wireless Products CSRF and RCE Vulnerability","2023-05-12","2023-06-02",0,["CWE-94"],"/kev/2023/#cve-2023-25717","",""],["CVE-2021-3560","Red Hat","Polkit","Red Hat Polkit Incorrect Authorization Vulnerability","2023-05-12","2023-06-02",0,["CWE-863"],"/kev/2023/#cve-2021-3560","/vendors/red-hat/",""],["CVE-2016-8735","Apache","Tomcat","Apache Tomcat Remote Code Execution Vulnerability","2023-05-12","2023-06-02",0,["CWE-284"],"/kev/2023/#cve-2016-8735","/vendors/apache/","/products/apache-tomcat/"],["CVE-2016-3427","Oracle","Java SE and JRockit","Oracle Java SE and JRockit Unspecified Vulnerability","2023-05-12","2023-06-02",0,[],"/kev/2023/#cve-2016-3427","/vendors/oracle/",""],["CVE-2015-5317","Jenkins","Jenkins User Interface (UI)","Jenkins User Interface (UI) Information Disclosure Vulnerability","2023-05-12","2023-06-02",0,["CWE-200"],"/kev/2023/#cve-2015-5317","/vendors/jenkins/",""],["CVE-2014-0196","Linux","Kernel","Linux Kernel Race Condition Vulnerability","2023-05-12","2023-06-02",0,["CWE-362"],"/kev/2023/#cve-2014-0196","/vendors/linux/","/products/linux-kernel/"],["CVE-2010-3904","Linux","Kernel","Linux Kernel Improper Input Validation Vulnerability","2023-05-12","2023-06-02",0,["CWE-20"],"/kev/2023/#cve-2010-3904","/vendors/linux/","/products/linux-kernel/"],["CVE-2023-29336","Microsoft","Win32k","Microsoft Win32K Privilege Escalation Vulnerability","2023-05-09","2023-05-30",0,["CWE-416"],"/kev/2023/#cve-2023-29336","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2023-21839","Oracle","WebLogic Server","Oracle WebLogic Server Unspecified Vulnerability","2023-05-01","2023-05-22",0,[],"/kev/2023/#cve-2023-21839","/vendors/oracle/","/products/oracle-weblogic-server/"],["CVE-2023-1389","TP-Link","Archer AX21","TP-Link Archer AX-21 Command Injection Vulnerability","2023-05-01","2023-05-22",0,["CWE-77"],"/kev/2023/#cve-2023-1389","/vendors/tp-link/",""],["CVE-2021-45046","Apache","Log4j2","Apache Log4j2 Deserialization of Untrusted Data Vulnerability","2023-05-01","2023-05-22",1,["CWE-917"],"/kev/2023/#cve-2021-45046","/vendors/apache/",""],["CVE-2023-28432","MinIO","MinIO","MinIO Information Disclosure Vulnerability","2023-04-21","2023-05-12",0,["CWE-200"],"/kev/2023/#cve-2023-28432","",""],["CVE-2023-27350","PaperCut","MF/NG","PaperCut MF/NG Improper Access Control Vulnerability","2023-04-21","2023-05-12",1,["CWE-284"],"/kev/2023/#cve-2023-27350","/vendors/papercut/",""],["CVE-2023-2136","Google","Chromium Skia","Google Chrome Skia Integer Overflow Vulnerability","2023-04-21","2023-05-12",0,["CWE-190"],"/kev/2023/#cve-2023-2136","/vendors/google/",""],["CVE-2017-6742","Cisco","IOS and IOS XE Software","Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","2023-04-19","2023-05-10",0,["CWE-119"],"/kev/2023/#cve-2017-6742","/vendors/cisco/","/products/cisco-ios-and-ios-xe-software/"],["CVE-2023-2033","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2023-04-17","2023-05-08",0,["CWE-843"],"/kev/2023/#cve-2023-2033","/vendors/google/","/products/google-chromium-v8/"],["CVE-2019-8526","Apple","macOS","Apple macOS Use-After-Free Vulnerability","2023-04-17","2023-05-08",0,["CWE-416"],"/kev/2023/#cve-2019-8526","/vendors/apple/","/products/apple-macos/"],["CVE-2023-29492","Novi Survey","Novi Survey","Novi Survey Insecure Deserialization Vulnerability","2023-04-13","2023-05-04",0,["CWE-94"],"/kev/2023/#cve-2023-29492","",""],["CVE-2023-20963","Android","Framework","Android Framework Privilege Escalation Vulnerability","2023-04-13","2023-05-04",0,["CWE-295"],"/kev/2023/#cve-2023-20963","/vendors/android/","/products/android-framework/"],["CVE-2023-28252","Microsoft","Windows","Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","2023-04-11","2023-05-02",1,["CWE-122"],"/kev/2023/#cve-2023-28252","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2023-28206","Apple","iOS, iPadOS, and macOS","Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability","2023-04-10","2023-05-01",0,["CWE-787"],"/kev/2023/#cve-2023-28206","/vendors/apple/","/products/apple-ios-ipados-and-macos/"],["CVE-2023-28205","Apple","Multiple Products","Apple Multiple Products WebKit Use-After-Free Vulnerability","2023-04-10","2023-05-01",0,["CWE-416"],"/kev/2023/#cve-2023-28205","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-26083","Arm","Mali Graphics Processing Unit (GPU)","Arm Mali GPU Kernel Driver Information Disclosure Vulnerability","2023-04-07","2023-04-28",0,["CWE-401"],"/kev/2023/#cve-2023-26083","/vendors/arm/","/products/arm-mali-graphics-processing-unit-gpu/"],["CVE-2021-27878","Veritas","Backup Exec Agent","Veritas Backup Exec Agent Command Execution Vulnerability","2023-04-07","2023-04-28",1,["CWE-287"],"/kev/2023/#cve-2021-27878","","/products/veritas-backup-exec-agent/"],["CVE-2021-27877","Veritas","Backup Exec Agent","Veritas Backup Exec Agent Improper Authentication Vulnerability","2023-04-07","2023-04-28",1,["CWE-287"],"/kev/2023/#cve-2021-27877","","/products/veritas-backup-exec-agent/"],["CVE-2021-27876","Veritas","Backup Exec Agent","Veritas Backup Exec Agent File Access Vulnerability","2023-04-07","2023-04-28",1,["CWE-287"],"/kev/2023/#cve-2021-27876","","/products/veritas-backup-exec-agent/"],["CVE-2019-1388","Microsoft","Windows","Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability","2023-04-07","2023-04-28",1,["CWE-269"],"/kev/2023/#cve-2019-1388","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-27926","Synacor","Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","2023-04-03","2023-04-24",0,["CWE-79","CWE-138"],"/kev/2023/#cve-2022-27926","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2023-0266","Linux","Kernel","Linux Kernel Use-After-Free Vulnerability","2023-03-30","2023-04-20",0,["CWE-416"],"/kev/2023/#cve-2023-0266","/vendors/linux/","/products/linux-kernel/"],["CVE-2022-42948","Fortra","Cobalt Strike","Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability","2023-03-30","2023-04-20",0,["CWE-79","CWE-116"],"/kev/2023/#cve-2022-42948","",""],["CVE-2022-39197","Fortra","Cobalt Strike","Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability","2023-03-30","2023-04-20",0,["CWE-20","CWE-79"],"/kev/2023/#cve-2022-39197","",""],["CVE-2022-38181","Arm","Mali Graphics Processing Unit (GPU)","Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","2023-03-30","2023-04-20",0,["CWE-416"],"/kev/2023/#cve-2022-38181","/vendors/arm/","/products/arm-mali-graphics-processing-unit-gpu/"],["CVE-2022-3038","Google","Chromium Network Service","Google Chromium Network Service Use-After-Free Vulnerability","2023-03-30","2023-04-20",0,["CWE-416"],"/kev/2023/#cve-2022-3038","/vendors/google/",""],["CVE-2022-22706","Arm","Mali Graphics Processing Unit (GPU)","Arm Mali GPU Kernel Driver Unspecified Vulnerability","2023-03-30","2023-04-20",0,["CWE-119"],"/kev/2023/#cve-2022-22706","/vendors/arm/","/products/arm-mali-graphics-processing-unit-gpu/"],["CVE-2021-30900","Apple","iOS, iPadOS, and macOS","Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","2023-03-30","2023-04-20",0,["CWE-20","CWE-787"],"/kev/2023/#cve-2021-30900","/vendors/apple/","/products/apple-ios-ipados-and-macos/"],["CVE-2017-7494","Samba","Samba","Samba Remote Code Execution Vulnerability","2023-03-30","2023-04-20",1,["CWE-94"],"/kev/2023/#cve-2017-7494","",""],["CVE-2013-3163","Microsoft","Internet Explorer","Microsoft Internet Explorer Memory Corruption Vulnerability","2023-03-30","2023-04-20",0,["CWE-94"],"/kev/2023/#cve-2013-3163","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2023-26360","Adobe","ColdFusion","Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","2023-03-15","2023-04-05",0,["CWE-284"],"/kev/2023/#cve-2023-26360","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2023-24880","Microsoft","Windows","Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","2023-03-14","2023-04-04",1,["CWE-863"],"/kev/2023/#cve-2023-24880","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2023-23397","Microsoft","Office","Microsoft Office Outlook Privilege Escalation Vulnerability","2023-03-14","2023-04-04",0,["CWE-294"],"/kev/2023/#cve-2023-23397","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2022-41328","Fortinet","FortiOS","Fortinet FortiOS Path Traversal Vulnerability","2023-03-14","2023-04-04",0,["CWE-22"],"/kev/2023/#cve-2022-41328","/vendors/fortinet/","/products/fortinet-fortios/"],["CVE-2021-39144","XStream","XStream","XStream Remote Code Execution Vulnerability","2023-03-10","2023-03-31",0,["CWE-94","CWE-502"],"/kev/2023/#cve-2021-39144","",""],["CVE-2020-5741","Plex","Media Server","Plex Media Server Remote Code Execution Vulnerability","2023-03-10","2023-03-31",0,["CWE-502"],"/kev/2023/#cve-2020-5741","",""],["CVE-2022-35914","Teclib","GLPI","Teclib GLPI Remote Code Execution Vulnerability","2023-03-07","2023-03-28",0,["CWE-74"],"/kev/2023/#cve-2022-35914","",""],["CVE-2022-33891","Apache","Spark","Apache Spark Command Injection Vulnerability","2023-03-07","2023-03-28",0,["CWE-78"],"/kev/2023/#cve-2022-33891","/vendors/apache/",""],["CVE-2022-28810","Zoho","ManageEngine","Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability","2023-03-07","2023-03-28",0,["CWE-78","CWE-259"],"/kev/2023/#cve-2022-28810","/vendors/zoho/","/products/zoho-manageengine/"],["CVE-2022-36537","ZK Framework","AuUploader","ZK Framework AuUploader Unspecified Vulnerability","2023-02-27","2023-03-20",1,["CWE-441"],"/kev/2023/#cve-2022-36537","",""],["CVE-2022-47986","IBM","Aspera Faspex","IBM Aspera Faspex Code Execution Vulnerability","2023-02-21","2023-03-14",1,["CWE-502"],"/kev/2023/#cve-2022-47986","/vendors/ibm/",""],["CVE-2022-41223","Mitel","MiVoice Connect","Mitel MiVoice Connect Code Injection Vulnerability","2023-02-21","2023-03-14",1,["CWE-94"],"/kev/2023/#cve-2022-41223","/vendors/mitel/","/products/mitel-mivoice-connect/"],["CVE-2022-40765","Mitel","MiVoice Connect","Mitel MiVoice Connect Command Injection Vulnerability","2023-02-21","2023-03-14",1,["CWE-77"],"/kev/2023/#cve-2022-40765","/vendors/mitel/","/products/mitel-mivoice-connect/"],["CVE-2022-46169","Cacti","Cacti","Cacti Command Injection Vulnerability","2023-02-16","2023-03-09",0,["CWE-74"],"/kev/2023/#cve-2022-46169","",""],["CVE-2023-23529","Apple","Multiple Products","Apple Multiple Products WebKit Type Confusion Vulnerability","2023-02-14","2023-03-07",0,["CWE-843"],"/kev/2023/#cve-2023-23529","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2023-23376","Microsoft","Windows","Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","2023-02-14","2023-03-07",1,["CWE-122"],"/kev/2023/#cve-2023-23376","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2023-21823","Microsoft","Windows","Microsoft Windows Graphic Component Privilege Escalation Vulnerability","2023-02-14","2023-03-07",0,["CWE-190"],"/kev/2023/#cve-2023-21823","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2023-21715","Microsoft","Office","Microsoft Office Publisher Security Feature Bypass Vulnerability","2023-02-14","2023-03-07",0,["CWE-863"],"/kev/2023/#cve-2023-21715","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2023-0669","Fortra","GoAnywhere MFT","Fortra GoAnywhere MFT Remote Code Execution Vulnerability","2023-02-10","2023-03-03",1,["CWE-502"],"/kev/2023/#cve-2023-0669","",""],["CVE-2022-24990","TerraMaster","TerraMaster OS","TerraMaster OS Remote Command Execution Vulnerability","2023-02-10","2023-03-03",1,["CWE-306"],"/kev/2023/#cve-2022-24990","",""],["CVE-2015-2291","Intel","Ethernet Diagnostics Driver for Windows","Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability","2023-02-10","2023-03-03",1,["CWE-20"],"/kev/2023/#cve-2015-2291","",""],["CVE-2023-22952","SugarCRM","Multiple Products","Multiple SugarCRM Products Remote Code Execution Vulnerability","2023-02-02","2023-02-23",0,["CWE-20"],"/kev/2023/#cve-2023-22952","",""],["CVE-2022-21587","Oracle","E-Business Suite","Oracle E-Business Suite Unspecified Vulnerability","2023-02-02","2023-02-23",1,["CWE-306"],"/kev/2023/#cve-2022-21587","/vendors/oracle/","/products/oracle-e-business-suite/"],["CVE-2017-11357","Telerik","User Interface (UI) for ASP.NET AJAX","Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability","2023-01-26","2023-02-16",1,["CWE-20"],"/kev/2023/#cve-2017-11357","",""],["CVE-2022-47966","Zoho","ManageEngine","Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","2023-01-23","2023-02-13",1,[],"/kev/2023/#cve-2022-47966","/vendors/zoho/","/products/zoho-manageengine/"],["CVE-2022-44877","CWP","Control Web Panel","CWP Control Web Panel OS Command Injection Vulnerability","2023-01-17","2023-02-07",0,["CWE-78"],"/kev/2023/#cve-2022-44877","",""],["CVE-2023-21674","Microsoft","Windows","Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability","2023-01-10","2023-01-31",0,["CWE-416"],"/kev/2023/#cve-2023-21674","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-41080","Microsoft","Exchange Server","Microsoft Exchange Server Privilege Escalation Vulnerability","2023-01-10","2023-01-31",1,[],"/kev/2023/#cve-2022-41080","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2018-5430","TIBCO","JasperReports","TIBCO JasperReports Server Information Disclosure Vulnerability","2022-12-29","2023-01-19",0,["CWE-22"],"/kev/2022/#cve-2018-5430","",""],["CVE-2018-18809","TIBCO","JasperReports","TIBCO JasperReports Library Directory Traversal Vulnerability","2022-12-29","2023-01-19",0,["CWE-22"],"/kev/2022/#cve-2018-18809","",""],["CVE-2022-42856","Apple","iOS","Apple iOS Type Confusion Vulnerability","2022-12-14","2023-01-04",0,["CWE-843"],"/kev/2022/#cve-2022-42856","/vendors/apple/","/products/apple-ios/"],["CVE-2022-44698","Microsoft","Defender","Microsoft Defender SmartScreen Security Feature Bypass Vulnerability","2022-12-13","2023-01-03",1,["CWE-755"],"/kev/2022/#cve-2022-44698","/vendors/microsoft/","/products/microsoft-defender/"],["CVE-2022-42475","Fortinet","FortiOS","Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","2022-12-13","2023-01-03",1,["CWE-197"],"/kev/2022/#cve-2022-42475","/vendors/fortinet/","/products/fortinet-fortios/"],["CVE-2022-27518","Citrix","Application Delivery Controller (ADC) and Gateway","Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability","2022-12-13","2023-01-03",0,["CWE-664"],"/kev/2022/#cve-2022-27518","/vendors/citrix/",""],["CVE-2022-26501","Veeam","Backup & Replication","Veeam Backup & Replication Remote Code Execution Vulnerability","2022-12-13","2023-01-03",1,["CWE-306"],"/kev/2022/#cve-2022-26501","","/products/veeam-backup-and-replication/"],["CVE-2022-26500","Veeam","Backup & Replication","Veeam Backup & Replication Remote Code Execution Vulnerability","2022-12-13","2023-01-03",1,["CWE-22"],"/kev/2022/#cve-2022-26500","","/products/veeam-backup-and-replication/"],["CVE-2022-4262","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2022-12-05","2022-12-26",0,["CWE-122","CWE-843"],"/kev/2022/#cve-2022-4262","/vendors/google/","/products/google-chromium-v8/"],["CVE-2022-4135","Google","Chromium GPU","Google Chromium GPU Heap Buffer Overflow Vulnerability","2022-11-28","2022-12-19",0,["CWE-787"],"/kev/2022/#cve-2022-4135","/vendors/google/",""],["CVE-2021-35587","Oracle","Fusion Middleware","Oracle Fusion Middleware Unspecified Vulnerability","2022-11-28","2022-12-19",0,["CWE-502","CWE-790"],"/kev/2022/#cve-2021-35587","/vendors/oracle/","/products/oracle-fusion-middleware/"],["CVE-2022-41049","Microsoft","Windows","Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","2022-11-14","2022-12-09",0,["CWE-274"],"/kev/2022/#cve-2022-41049","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-41128","Microsoft","Windows","Microsoft Windows Scripting Languages Remote Code Execution Vulnerability","2022-11-08","2022-12-09",0,["CWE-787"],"/kev/2022/#cve-2022-41128","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-41125","Microsoft","Windows","Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability","2022-11-08","2022-12-09",0,["CWE-787"],"/kev/2022/#cve-2022-41125","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-41091","Microsoft","Windows","Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","2022-11-08","2022-12-09",1,["CWE-863"],"/kev/2022/#cve-2022-41091","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-41073","Microsoft","Windows","Microsoft Windows Print Spooler Privilege Escalation Vulnerability","2022-11-08","2022-12-09",1,["CWE-787"],"/kev/2022/#cve-2022-41073","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-25370","Samsung","Mobile Devices","Samsung Mobile Devices Memory Corruption Vulnerability","2022-11-08","2022-11-29",0,["CWE-416"],"/kev/2022/#cve-2021-25370","/vendors/samsung/","/products/samsung-mobile-devices/"],["CVE-2021-25369","Samsung","Mobile Devices","Samsung Mobile Devices Improper Access Control Vulnerability","2022-11-08","2022-11-29",0,["CWE-200"],"/kev/2022/#cve-2021-25369","/vendors/samsung/","/products/samsung-mobile-devices/"],["CVE-2021-25337","Samsung","Mobile Devices","Samsung Mobile Devices Improper Access Control Vulnerability","2022-11-08","2022-11-29",0,["CWE-269"],"/kev/2022/#cve-2021-25337","/vendors/samsung/","/products/samsung-mobile-devices/"],["CVE-2022-3723","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2022-10-28","2022-11-18",0,["CWE-122","CWE-843"],"/kev/2022/#cve-2022-3723","/vendors/google/","/products/google-chromium-v8/"],["CVE-2022-42827","Apple","iOS and iPadOS","Apple iOS and iPadOS Out-of-Bounds Write Vulnerability","2022-10-25","2022-11-15",0,["CWE-20","CWE-787"],"/kev/2022/#cve-2022-42827","/vendors/apple/","/products/apple-ios-and-ipados/"],["CVE-2020-3433","Cisco","AnyConnect Secure","Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability","2022-10-24","2022-11-14",1,["CWE-427"],"/kev/2022/#cve-2020-3433","/vendors/cisco/",""],["CVE-2020-3153","Cisco","AnyConnect Secure","Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability","2022-10-24","2022-11-14",1,["CWE-427"],"/kev/2022/#cve-2020-3153","/vendors/cisco/",""],["CVE-2018-19323","GIGABYTE","Multiple Products","GIGABYTE Multiple Products Privilege Escalation Vulnerability","2022-10-24","2022-11-14",1,[],"/kev/2022/#cve-2018-19323","","/products/gigabyte-multiple-products/"],["CVE-2018-19322","GIGABYTE","Multiple Products","GIGABYTE Multiple Products Code Execution Vulnerability","2022-10-24","2022-11-14",1,["CWE-749"],"/kev/2022/#cve-2018-19322","","/products/gigabyte-multiple-products/"],["CVE-2018-19321","GIGABYTE","Multiple Products","GIGABYTE Multiple Products Privilege Escalation Vulnerability","2022-10-24","2022-11-14",1,[],"/kev/2022/#cve-2018-19321","","/products/gigabyte-multiple-products/"],["CVE-2018-19320","GIGABYTE","Multiple Products","GIGABYTE Multiple Products Unspecified Vulnerability","2022-10-24","2022-11-14",1,[],"/kev/2022/#cve-2018-19320","","/products/gigabyte-multiple-products/"],["CVE-2022-41352","Synacor","Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","2022-10-20","2022-11-10",1,["CWE-22"],"/kev/2022/#cve-2022-41352","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2021-3493","Linux","Kernel","Linux Kernel Privilege Escalation Vulnerability","2022-10-20","2022-11-10",0,["CWE-862"],"/kev/2022/#cve-2021-3493","/vendors/linux/","/products/linux-kernel/"],["CVE-2022-41033","Microsoft","Windows COM+ Event System Service","Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability","2022-10-11","2022-11-01",0,["CWE-843"],"/kev/2022/#cve-2022-41033","/vendors/microsoft/",""],["CVE-2022-40684","Fortinet","Multiple Products","Fortinet Multiple Products Authentication Bypass Vulnerability","2022-10-11","2022-11-01",1,["CWE-288"],"/kev/2022/#cve-2022-40684","/vendors/fortinet/","/products/fortinet-multiple-products/"],["CVE-2022-41082","Microsoft","Exchange Server","Microsoft Exchange Server Remote Code Execution Vulnerability","2022-09-30","2022-10-21",1,["CWE-502"],"/kev/2022/#cve-2022-41082","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2022-41040","Microsoft","Exchange Server","Microsoft Exchange Server Server-Side Request Forgery Vulnerability","2022-09-30","2022-10-21",1,["CWE-918"],"/kev/2022/#cve-2022-41040","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2022-36804","Atlassian","Bitbucket Server and Data Center","Atlassian Bitbucket Server and Data Center Command Injection Vulnerability","2022-09-30","2022-10-21",0,["CWE-78","CWE-88","CWE-158"],"/kev/2022/#cve-2022-36804","/vendors/atlassian/",""],["CVE-2022-3236","Sophos","Firewall","Sophos Firewall Code Injection Vulnerability","2022-09-23","2022-10-14",0,["CWE-94"],"/kev/2022/#cve-2022-3236","/vendors/sophos/",""],["CVE-2022-35405","Zoho","ManageEngine","Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","2022-09-22","2022-10-13",0,["CWE-502"],"/kev/2022/#cve-2022-35405","/vendors/zoho/","/products/zoho-manageengine/"],["CVE-2022-40139","Trend Micro","Apex One and Apex One as a Service","Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability","2022-09-15","2022-10-06",0,["CWE-353","CWE-641"],"/kev/2022/#cve-2022-40139","/vendors/trend-micro/",""],["CVE-2013-6282","Linux","Kernel","Linux Kernel Improper Input Validation Vulnerability","2022-09-15","2022-10-06",0,["CWE-20"],"/kev/2022/#cve-2013-6282","/vendors/linux/","/products/linux-kernel/"],["CVE-2013-2597","Code Aurora","ACDB Audio Driver","Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability","2022-09-15","2022-10-06",0,["CWE-119"],"/kev/2022/#cve-2013-2597","",""],["CVE-2013-2596","Linux","Kernel","Linux Kernel Integer Overflow Vulnerability","2022-09-15","2022-10-06",0,["CWE-189"],"/kev/2022/#cve-2013-2596","/vendors/linux/","/products/linux-kernel/"],["CVE-2013-2094","Linux","Kernel","Linux Kernel Privilege Escalation Vulnerability","2022-09-15","2022-10-06",0,["CWE-189"],"/kev/2022/#cve-2013-2094","/vendors/linux/","/products/linux-kernel/"],["CVE-2010-2568","Microsoft","Windows","Microsoft Windows Remote Code Execution Vulnerability","2022-09-15","2022-10-06",0,["CWE-20"],"/kev/2022/#cve-2010-2568","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-37969","Microsoft","Windows","Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","2022-09-14","2022-10-05",1,["CWE-20","CWE-787"],"/kev/2022/#cve-2022-37969","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-32917","Apple","iOS, iPadOS, and macOS","Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability","2022-09-14","2022-10-05",0,["CWE-20","CWE-787"],"/kev/2022/#cve-2022-32917","/vendors/apple/","/products/apple-ios-ipados-and-macos/"],["CVE-2022-3075","Google","Chromium Mojo","Google Chromium Mojo Insufficient Data Validation Vulnerability","2022-09-08","2022-09-29",0,["CWE-20"],"/kev/2022/#cve-2022-3075","/vendors/google/",""],["CVE-2022-27593","QNAP","Photo Station","QNAP Photo Station Externally Controlled Reference Vulnerability","2022-09-08","2022-09-29",1,["CWE-610"],"/kev/2022/#cve-2022-27593","/vendors/qnap/","/products/qnap-photo-station/"],["CVE-2022-26258","D-Link","DIR-820L","D-Link DIR-820L Remote Code Execution Vulnerability","2022-09-08","2022-09-29",0,["CWE-78"],"/kev/2022/#cve-2022-26258","/vendors/d-link/",""],["CVE-2020-9934","Apple","iOS, iPadOS, and macOS","Apple iOS, iPadOS, and macOS Input Validation Vulnerability","2022-09-08","2022-09-29",0,[],"/kev/2022/#cve-2020-9934","/vendors/apple/","/products/apple-ios-ipados-and-macos/"],["CVE-2018-7445","MikroTik","RouterOS","MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability","2022-09-08","2022-09-29",0,["CWE-119"],"/kev/2022/#cve-2018-7445","","/products/mikrotik-routeros/"],["CVE-2018-6530","D-Link","Multiple Routers","D-Link Multiple Routers OS Command Injection Vulnerability","2022-09-08","2022-09-29",1,["CWE-78"],"/kev/2022/#cve-2018-6530","/vendors/d-link/","/products/d-link-multiple-routers/"],["CVE-2018-2628","Oracle","WebLogic Server","Oracle WebLogic Server Unspecified Vulnerability","2022-09-08","2022-09-29",0,["CWE-502"],"/kev/2022/#cve-2018-2628","/vendors/oracle/","/products/oracle-weblogic-server/"],["CVE-2018-13374","Fortinet","FortiOS and FortiADC","Fortinet FortiOS and FortiADC Improper Access Control Vulnerability","2022-09-08","2022-09-29",1,["CWE-732"],"/kev/2022/#cve-2018-13374","/vendors/fortinet/",""],["CVE-2017-5521","NETGEAR","Multiple Devices","NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability","2022-09-08","2022-09-29",0,["CWE-200"],"/kev/2022/#cve-2017-5521","/vendors/netgear/",""],["CVE-2011-4723","D-Link","DIR-300 Router","D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability","2022-09-08","2022-09-29",0,["CWE-310"],"/kev/2022/#cve-2011-4723","/vendors/d-link/",""],["CVE-2011-1823","Android","Android OS","Android OS Privilege Escalation Vulnerability","2022-09-08","2022-09-29",0,["CWE-189"],"/kev/2022/#cve-2011-1823","/vendors/android/",""],["CVE-2022-26352","dotCMS","dotCMS","dotCMS Unrestricted Upload of File Vulnerability","2022-08-25","2022-09-15",1,["CWE-22","CWE-138"],"/kev/2022/#cve-2022-26352","",""],["CVE-2022-24706","Apache","CouchDB","Apache CouchDB Insecure Default Initialization of Resource Vulnerability","2022-08-25","2022-09-15",0,["CWE-1188"],"/kev/2022/#cve-2022-24706","/vendors/apache/",""],["CVE-2022-24112","Apache","APISIX","Apache APISIX Authentication Bypass Vulnerability","2022-08-25","2022-09-15",0,["CWE-290"],"/kev/2022/#cve-2022-24112","/vendors/apache/",""],["CVE-2022-22963","VMware Tanzu","Spring Cloud","VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability","2022-08-25","2022-09-15",0,["CWE-94"],"/kev/2022/#cve-2022-22963","",""],["CVE-2022-2294","WebRTC","WebRTC","WebRTC Heap Buffer Overflow Vulnerability","2022-08-25","2022-09-15",1,["CWE-122"],"/kev/2022/#cve-2022-2294","",""],["CVE-2021-39226","Grafana Labs","Grafana","Grafana Authentication Bypass Vulnerability","2022-08-25","2022-09-15",0,["CWE-287"],"/kev/2022/#cve-2021-39226","",""],["CVE-2021-38406","Delta Electronics","DOPSoft 2","Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability","2022-08-25","2022-09-15",0,["CWE-787"],"/kev/2022/#cve-2021-38406","",""],["CVE-2021-31010","Apple","iOS, macOS, watchOS","Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability","2022-08-25","2022-09-15",0,["CWE-20","CWE-502"],"/kev/2022/#cve-2021-31010","/vendors/apple/",""],["CVE-2020-36193","PEAR","Archive_Tar","PEAR Archive_Tar Improper Link Resolution Vulnerability","2022-08-25","2022-09-15",0,["CWE-22","CWE-59"],"/kev/2022/#cve-2020-36193","",""],["CVE-2020-28949","PEAR","Archive_Tar","PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability","2022-08-25","2022-09-15",0,["CWE-74"],"/kev/2022/#cve-2020-28949","",""],["CVE-2022-0028","Palo Alto Networks","PAN-OS","Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability","2022-08-22","2022-09-12",0,["CWE-940"],"/kev/2022/#cve-2022-0028","/vendors/palo-alto-networks/","/products/palo-alto-networks-pan-os/"],["CVE-2022-32894","Apple","iOS and macOS","Apple iOS and macOS Out-of-Bounds Write Vulnerability","2022-08-18","2022-09-08",0,["CWE-20","CWE-787"],"/kev/2022/#cve-2022-32894","/vendors/apple/","/products/apple-ios-and-macos/"],["CVE-2022-32893","Apple","iOS and macOS","Apple iOS and macOS Out-of-Bounds Write Vulnerability","2022-08-18","2022-09-08",0,["CWE-20","CWE-787"],"/kev/2022/#cve-2022-32893","/vendors/apple/","/products/apple-ios-and-macos/"],["CVE-2022-2856","Google","Chromium Intents","Google Chromium Intents Insufficient Input Validation Vulnerability","2022-08-18","2022-09-08",0,["CWE-20"],"/kev/2022/#cve-2022-2856","/vendors/google/",""],["CVE-2022-26923","Microsoft","Active Directory","Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","2022-08-18","2022-09-08",0,["CWE-295"],"/kev/2022/#cve-2022-26923","/vendors/microsoft/","/products/microsoft-active-directory/"],["CVE-2022-22536","SAP","Multiple Products","SAP Multiple Products HTTP Request Smuggling Vulnerability","2022-08-18","2022-09-08",0,["CWE-444"],"/kev/2022/#cve-2022-22536","/vendors/sap/",""],["CVE-2022-21971","Microsoft","Windows","Microsoft Windows Runtime Remote Code Execution Vulnerability","2022-08-18","2022-09-08",0,["CWE-824"],"/kev/2022/#cve-2022-21971","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2017-15944","Palo Alto Networks","PAN-OS","Palo Alto Networks PAN-OS Remote Code Execution Vulnerability","2022-08-18","2022-09-08",0,[],"/kev/2022/#cve-2017-15944","/vendors/palo-alto-networks/","/products/palo-alto-networks-pan-os/"],["CVE-2022-37042","Synacor","Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability","2022-08-11","2022-09-01",1,["CWE-23"],"/kev/2022/#cve-2022-37042","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2022-27925","Synacor","Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","2022-08-11","2022-09-01",1,["CWE-22"],"/kev/2022/#cve-2022-27925","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2022-34713","Microsoft","Windows","Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability","2022-08-09","2022-08-30",0,[],"/kev/2022/#cve-2022-34713","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-30333","RARLAB","UnRAR","RARLAB UnRAR Directory Traversal Vulnerability","2022-08-09","2022-08-30",1,["CWE-22","CWE-59"],"/kev/2022/#cve-2022-30333","/vendors/rarlab/",""],["CVE-2022-27924","Synacor","Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability","2022-08-04","2022-08-25",1,["CWE-93"],"/kev/2022/#cve-2022-27924","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2022-26138","Atlassian","Confluence","Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability","2022-07-29","2022-08-19",0,["CWE-798"],"/kev/2022/#cve-2022-26138","/vendors/atlassian/",""],["CVE-2022-22047","Microsoft","Windows","Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability","2022-07-12","2022-08-02",0,["CWE-426"],"/kev/2022/#cve-2022-22047","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-26925","Microsoft","Windows","Microsoft Windows LSA Spoofing Vulnerability","2022-07-01","2022-07-22",0,["CWE-306"],"/kev/2022/#cve-2022-26925","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-29499","Mitel","MiVoice Connect","Mitel MiVoice Connect Data Validation Vulnerability","2022-06-27","2022-07-18",1,["CWE-20"],"/kev/2022/#cve-2022-29499","/vendors/mitel/","/products/mitel-mivoice-connect/"],["CVE-2021-4034","Red Hat","Polkit","Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","2022-06-27","2022-07-18",1,["CWE-787"],"/kev/2022/#cve-2021-4034","/vendors/red-hat/",""],["CVE-2021-30983","Apple","iOS and iPadOS","Apple iOS and iPadOS Buffer Overflow Vulnerability","2022-06-27","2022-07-18",0,["CWE-119"],"/kev/2022/#cve-2021-30983","/vendors/apple/","/products/apple-ios-and-ipados/"],["CVE-2021-30533","Google","Chromium PopupBlocker","Google Chromium PopupBlocker Security Bypass Vulnerability","2022-06-27","2022-07-18",0,["CWE-863"],"/kev/2022/#cve-2021-30533","/vendors/google/",""],["CVE-2020-9907","Apple","Multiple Products","Apple Multiple Products Memory Corruption Vulnerability","2022-06-27","2022-07-18",0,["CWE-787"],"/kev/2022/#cve-2020-9907","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2020-3837","Apple","Multiple Products","Apple Multiple Products Memory Corruption Vulnerability","2022-06-27","2022-07-18",0,["CWE-787"],"/kev/2022/#cve-2020-3837","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2019-8605","Apple","Multiple Products","Apple Multiple Products Use-After-Free Vulnerability","2022-06-27","2022-07-18",0,["CWE-416"],"/kev/2022/#cve-2019-8605","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2018-4344","Apple","Multiple Products","Apple Multiple Products Memory Corruption Vulnerability","2022-06-27","2022-07-18",0,["CWE-119"],"/kev/2022/#cve-2018-4344","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2022-30190","Microsoft","Windows","Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability","2022-06-14","2022-07-05",1,["CWE-610"],"/kev/2022/#cve-2022-30190","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-38163","SAP","NetWeaver","SAP NetWeaver Unrestricted File Upload Vulnerability","2022-06-09","2022-06-30",0,["CWE-23"],"/kev/2022/#cve-2021-38163","/vendors/sap/","/products/sap-netweaver/"],["CVE-2016-2388","SAP","NetWeaver","SAP NetWeaver Information Disclosure Vulnerability","2022-06-09","2022-06-30",0,["CWE-200"],"/kev/2022/#cve-2016-2388","/vendors/sap/","/products/sap-netweaver/"],["CVE-2016-2386","SAP","NetWeaver","SAP NetWeaver SQL Injection Vulnerability","2022-06-09","2022-06-30",0,["CWE-89"],"/kev/2022/#cve-2016-2386","/vendors/sap/","/products/sap-netweaver/"],["CVE-2019-7195","QNAP","Photo Station","QNAP Photo Station Path Traversal Vulnerability","2022-06-08","2022-06-22",1,["CWE-22"],"/kev/2022/#cve-2019-7195","/vendors/qnap/","/products/qnap-photo-station/"],["CVE-2019-7194","QNAP","Photo Station","QNAP Photo Station Path Traversal Vulnerability","2022-06-08","2022-06-22",1,["CWE-22"],"/kev/2022/#cve-2019-7194","/vendors/qnap/","/products/qnap-photo-station/"],["CVE-2019-7193","QNAP","QTS","QNAP QTS Improper Input Validation Vulnerability","2022-06-08","2022-06-22",1,["CWE-20"],"/kev/2022/#cve-2019-7193","/vendors/qnap/",""],["CVE-2019-7192","QNAP","Photo Station","QNAP Photo Station Improper Access Control Vulnerability","2022-06-08","2022-06-22",1,["CWE-863"],"/kev/2022/#cve-2019-7192","/vendors/qnap/","/products/qnap-photo-station/"],["CVE-2019-5825","Google","Chromium V8","Google Chromium V8 Out-of-Bounds Write Vulnerability","2022-06-08","2022-06-22",0,["CWE-787"],"/kev/2022/#cve-2019-5825","/vendors/google/","/products/google-chromium-v8/"],["CVE-2019-15271","Cisco","RV Series Routers","Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability","2022-06-08","2022-06-22",0,["CWE-502"],"/kev/2022/#cve-2019-15271","/vendors/cisco/",""],["CVE-2018-6065","Google","Chromium V8","Google Chromium V8 Integer Overflow Vulnerability","2022-06-08","2022-06-22",0,["CWE-190","CWE-787"],"/kev/2022/#cve-2018-6065","/vendors/google/","/products/google-chromium-v8/"],["CVE-2018-4990","Adobe","Acrobat and Reader","Adobe Acrobat and Reader Double Free Vulnerability","2022-06-08","2022-06-22",0,["CWE-415"],"/kev/2022/#cve-2018-4990","/vendors/adobe/","/products/adobe-acrobat-and-reader/"],["CVE-2018-17480","Google","Chromium V8","Google Chromium V8 Out-of-Bounds Write Vulnerability","2022-06-08","2022-06-22",0,["CWE-787"],"/kev/2022/#cve-2018-17480","/vendors/google/","/products/google-chromium-v8/"],["CVE-2018-17463","Google","Chromium V8","Google Chromium V8 Remote Code Execution Vulnerability","2022-06-08","2022-06-22",0,[],"/kev/2022/#cve-2018-17463","/vendors/google/","/products/google-chromium-v8/"],["CVE-2017-6862","NETGEAR","Multiple Devices","NETGEAR Multiple Devices Buffer Overflow Vulnerability","2022-06-08","2022-06-22",0,["CWE-119"],"/kev/2022/#cve-2017-6862","/vendors/netgear/",""],["CVE-2017-5070","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2022-06-08","2022-06-22",0,["CWE-843"],"/kev/2022/#cve-2017-5070","/vendors/google/","/products/google-chromium-v8/"],["CVE-2017-5030","Google","Chromium V8","Google Chromium V8 Memory Corruption Vulnerability","2022-06-08","2022-06-22",0,["CWE-125"],"/kev/2022/#cve-2017-5030","/vendors/google/","/products/google-chromium-v8/"],["CVE-2016-5198","Google","Chromium V8","Google Chromium V8 Out-of-Bounds Memory Vulnerability","2022-06-08","2022-06-22",0,["CWE-125","CWE-787"],"/kev/2022/#cve-2016-5198","/vendors/google/","/products/google-chromium-v8/"],["CVE-2016-1646","Google","Chromium V8","Google Chromium V8 Out-of-Bounds Read Vulnerability","2022-06-08","2022-06-22",0,["CWE-119"],"/kev/2022/#cve-2016-1646","/vendors/google/","/products/google-chromium-v8/"],["CVE-2013-1331","Microsoft","Office","Microsoft Office Buffer Overflow Vulnerability","2022-06-08","2022-06-22",0,["CWE-119"],"/kev/2022/#cve-2013-1331","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2012-5054","Adobe","Flash Player","Adobe Flash Player Integer Overflow Vulnerability","2022-06-08","2022-06-22",0,["CWE-189"],"/kev/2022/#cve-2012-5054","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2012-4969","Microsoft","Internet Explorer","Microsoft Internet Explorer Use-After-Free Vulnerability","2022-06-08","2022-06-22",0,[],"/kev/2022/#cve-2012-4969","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2012-1889","Microsoft","XML Core Services","Microsoft XML Core Services Memory Corruption Vulnerability","2022-06-08","2022-06-22",0,["CWE-119"],"/kev/2022/#cve-2012-1889","/vendors/microsoft/",""],["CVE-2012-0767","Adobe","Flash Player","Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","2022-06-08","2022-06-22",0,["CWE-79"],"/kev/2022/#cve-2012-0767","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2012-0754","Adobe","Flash Player","Adobe Flash Player Memory Corruption Vulnerability","2022-06-08","2022-06-22",0,["CWE-787"],"/kev/2022/#cve-2012-0754","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2012-0151","Microsoft","Windows","Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability","2022-06-08","2022-06-22",0,["CWE-20"],"/kev/2022/#cve-2012-0151","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2011-2462","Adobe","Reader and Acrobat","Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability","2022-06-08","2022-06-22",0,["CWE-787"],"/kev/2022/#cve-2011-2462","/vendors/adobe/","/products/adobe-reader-and-acrobat/"],["CVE-2011-0609","Adobe","Flash Player","Adobe Flash Player Unspecified Vulnerability","2022-06-08","2022-06-22",0,[],"/kev/2022/#cve-2011-0609","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2010-2883","Adobe","Acrobat and Reader","Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability","2022-06-08","2022-06-22",0,["CWE-119"],"/kev/2022/#cve-2010-2883","/vendors/adobe/","/products/adobe-acrobat-and-reader/"],["CVE-2010-2572","Microsoft","PowerPoint","Microsoft PowerPoint Buffer Overflow Vulnerability","2022-06-08","2022-06-22",0,["CWE-119"],"/kev/2022/#cve-2010-2572","/vendors/microsoft/",""],["CVE-2010-1297","Adobe","Flash Player","Adobe Flash Player Memory Corruption Vulnerability","2022-06-08","2022-06-22",0,["CWE-787"],"/kev/2022/#cve-2010-1297","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2009-4324","Adobe","Acrobat and Reader","Adobe Acrobat and Reader Use-After-Free Vulnerability","2022-06-08","2022-06-22",0,["CWE-399"],"/kev/2022/#cve-2009-4324","/vendors/adobe/","/products/adobe-acrobat-and-reader/"],["CVE-2009-3953","Adobe","Acrobat and Reader","Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability","2022-06-08","2022-06-22",0,["CWE-119"],"/kev/2022/#cve-2009-3953","/vendors/adobe/","/products/adobe-acrobat-and-reader/"],["CVE-2009-1862","Adobe","Acrobat and Reader, Flash Player","Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability","2022-06-08","2022-06-22",0,["CWE-94"],"/kev/2022/#cve-2009-1862","/vendors/adobe/",""],["CVE-2009-0563","Microsoft","Office","Microsoft Office Buffer Overflow Vulnerability","2022-06-08","2022-06-22",0,["CWE-119"],"/kev/2022/#cve-2009-0563","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2009-0557","Microsoft","Office","Microsoft Office Object Record Corruption Vulnerability","2022-06-08","2022-06-22",0,["CWE-94"],"/kev/2022/#cve-2009-0557","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2008-0655","Adobe","Acrobat and Reader","Adobe Acrobat and Reader Unspecified Vulnerability","2022-06-08","2022-06-22",0,[],"/kev/2022/#cve-2008-0655","/vendors/adobe/","/products/adobe-acrobat-and-reader/"],["CVE-2007-5659","Adobe","Acrobat and Reader","Adobe Acrobat and Reader Buffer Overflow Vulnerability","2022-06-08","2022-06-22",0,["CWE-119"],"/kev/2022/#cve-2007-5659","/vendors/adobe/","/products/adobe-acrobat-and-reader/"],["CVE-2006-2492","Microsoft","Word","Microsoft Word Malformed Object Pointer Vulnerability","2022-06-08","2022-06-22",0,["CWE-120"],"/kev/2022/#cve-2006-2492","/vendors/microsoft/","/products/microsoft-word/"],["CVE-2022-26134","Atlassian","Confluence Server/Data Center","Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","2022-06-02","2022-06-06",1,["CWE-917"],"/kev/2022/#cve-2022-26134","/vendors/atlassian/",""],["CVE-2019-3010","Oracle","Solaris","Oracle Solaris Privilege Escalation Vulnerability","2022-05-25","2022-06-15",0,[],"/kev/2022/#cve-2019-3010","/vendors/oracle/",""],["CVE-2016-7256","Microsoft","Windows","Microsoft Windows Open Type Font Remote Code Execution Vulnerability","2022-05-25","2022-06-15",0,["CWE-284"],"/kev/2022/#cve-2016-7256","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2016-3393","Microsoft","Windows","Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability","2022-05-25","2022-06-15",0,["CWE-284"],"/kev/2022/#cve-2016-3393","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2016-1010","Adobe","Flash Player and AIR","Adobe Flash Player and AIR Integer Overflow Vulnerability","2022-05-25","2022-06-15",0,["CWE-190"],"/kev/2022/#cve-2016-1010","/vendors/adobe/",""],["CVE-2016-0984","Adobe","Flash Player and AIR","Adobe Flash Player and AIR Use-After-Free Vulnerability","2022-05-25","2022-06-15",0,["CWE-416"],"/kev/2022/#cve-2016-0984","/vendors/adobe/",""],["CVE-2016-0034","Microsoft","Silverlight","Microsoft Silverlight Runtime Remote Code Execution Vulnerability","2022-05-25","2022-06-15",1,["CWE-20"],"/kev/2022/#cve-2016-0034","/vendors/microsoft/","/products/microsoft-silverlight/"],["CVE-2015-8651","Adobe","Flash Player","Adobe Flash Player Integer Overflow Vulnerability","2022-05-25","2022-06-15",0,["CWE-189"],"/kev/2022/#cve-2015-8651","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2015-6175","Microsoft","Windows","Microsoft Windows Kernel Privilege Escalation Vulnerability","2022-05-25","2022-06-15",0,["CWE-264"],"/kev/2022/#cve-2015-6175","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2015-4495","Mozilla","Firefox","Mozilla Firefox Security Feature Bypass Vulnerability","2022-05-25","2022-06-15",0,["CWE-200"],"/kev/2022/#cve-2015-4495","/vendors/mozilla/","/products/mozilla-firefox/"],["CVE-2015-2425","Microsoft","Internet Explorer","Microsoft Internet Explorer Memory Corruption Vulnerability","2022-05-25","2022-06-15",0,["CWE-119"],"/kev/2022/#cve-2015-2425","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2015-2360","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2022-05-25","2022-06-15",0,["CWE-119"],"/kev/2022/#cve-2015-2360","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2015-1769","Microsoft","Windows","Microsoft Windows Mount Manager Privilege Escalation Vulnerability","2022-05-25","2022-06-15",0,["CWE-264"],"/kev/2022/#cve-2015-1769","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2015-1671","Microsoft","Windows","Microsoft Windows Remote Code Execution Vulnerability","2022-05-25","2022-06-15",0,["CWE-19"],"/kev/2022/#cve-2015-1671","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2015-0310","Adobe","Flash Player","Adobe Flash Player ASLR Bypass Vulnerability","2022-05-25","2022-06-15",0,["CWE-264"],"/kev/2022/#cve-2015-0310","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2015-0071","Microsoft","Internet Explorer","Microsoft Internet Explorer ASLR Bypass Vulnerability","2022-05-25","2022-06-15",0,["CWE-264"],"/kev/2022/#cve-2015-0071","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2015-0016","Microsoft","Windows","Microsoft Windows TS WebProxy Directory Traversal Vulnerability","2022-05-25","2022-06-15",0,["CWE-22"],"/kev/2022/#cve-2015-0016","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2014-8439","Adobe","Flash Player","Adobe Flash Player Dereferenced Pointer Vulnerability","2022-05-25","2022-06-15",0,["CWE-119"],"/kev/2022/#cve-2014-8439","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2014-4148","Microsoft","Windows","Microsoft Windows Remote Code Execution Vulnerability","2022-05-25","2022-06-15",0,["CWE-94"],"/kev/2022/#cve-2014-4148","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2014-4123","Microsoft","Internet Explorer","Microsoft Internet Explorer Privilege Escalation Vulnerability","2022-05-25","2022-06-15",0,["CWE-264"],"/kev/2022/#cve-2014-4123","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2014-4077","Microsoft","Input Method Editor (IME) Japanese","Microsoft IME Japanese Privilege Escalation Vulnerability","2022-05-25","2022-06-15",0,["CWE-264"],"/kev/2022/#cve-2014-4077","/vendors/microsoft/",""],["CVE-2014-3153","Linux","Kernel","Linux Kernel Privilege Escalation Vulnerability","2022-05-25","2022-06-15",0,["CWE-269"],"/kev/2022/#cve-2014-3153","/vendors/linux/","/products/linux-kernel/"],["CVE-2014-2817","Microsoft","Internet Explorer","Microsoft Internet Explorer Privilege Escalation Vulnerability","2022-05-25","2022-06-15",0,["CWE-264"],"/kev/2022/#cve-2014-2817","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2014-0546","Adobe","Reader and Acrobat","Adobe Reader and Acrobat Sandbox Bypass Vulnerability","2022-05-25","2022-06-15",0,[],"/kev/2022/#cve-2014-0546","/vendors/adobe/","/products/adobe-reader-and-acrobat/"],["CVE-2013-7331","Microsoft","Internet Explorer","Microsoft Internet Explorer Information Disclosure Vulnerability","2022-05-25","2022-06-15",0,["CWE-200"],"/kev/2022/#cve-2013-7331","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2013-3993","IBM","InfoSphere BigInsights","IBM InfoSphere BigInsights Invalid Input Vulnerability","2022-05-25","2022-06-15",1,["CWE-264"],"/kev/2022/#cve-2013-3993","/vendors/ibm/",""],["CVE-2013-3896","Microsoft","Silverlight","Microsoft Silverlight Information Disclosure Vulnerability","2022-05-25","2022-06-15",0,["CWE-20"],"/kev/2022/#cve-2013-3896","/vendors/microsoft/","/products/microsoft-silverlight/"],["CVE-2013-2423","Oracle","Java Runtime Environment (JRE)","Oracle JRE Unspecified Vulnerability","2022-05-25","2022-06-15",0,[],"/kev/2022/#cve-2013-2423","/vendors/oracle/","/products/oracle-java-runtime-environment-jre/"],["CVE-2013-0431","Oracle","Java Runtime Environment (JRE)","Oracle JRE Sandbox Bypass Vulnerability","2022-05-25","2022-06-15",1,[],"/kev/2022/#cve-2013-0431","/vendors/oracle/","/products/oracle-java-runtime-environment-jre/"],["CVE-2013-0422","Oracle","Java Runtime Environment (JRE)","Oracle JRE Remote Code Execution Vulnerability","2022-05-25","2022-06-15",1,["CWE-264"],"/kev/2022/#cve-2013-0422","/vendors/oracle/","/products/oracle-java-runtime-environment-jre/"],["CVE-2013-0074","Microsoft","Silverlight","Microsoft Silverlight Double Dereference Vulnerability","2022-05-25","2022-06-15",1,[],"/kev/2022/#cve-2013-0074","/vendors/microsoft/","/products/microsoft-silverlight/"],["CVE-2012-1710","Oracle","Fusion Middleware","Oracle Fusion Middleware Unspecified Vulnerability","2022-05-25","2022-06-15",1,[],"/kev/2022/#cve-2012-1710","/vendors/oracle/","/products/oracle-fusion-middleware/"],["CVE-2010-1428","Red Hat","JBoss","Red Hat JBoss Information Disclosure Vulnerability","2022-05-25","2022-06-15",1,["CWE-264"],"/kev/2022/#cve-2010-1428","/vendors/red-hat/",""],["CVE-2010-0840","Oracle","Java Runtime Environment (JRE)","Oracle JRE Unspecified Vulnerability","2022-05-25","2022-06-15",0,[],"/kev/2022/#cve-2010-0840","/vendors/oracle/","/products/oracle-java-runtime-environment-jre/"],["CVE-2010-0738","Red Hat","JBoss","Red Hat JBoss Authentication Bypass Vulnerability","2022-05-25","2022-06-15",1,["CWE-264"],"/kev/2022/#cve-2010-0738","/vendors/red-hat/",""],["CVE-2018-8611","Microsoft","Windows","Microsoft Windows Kernel Privilege Escalation Vulnerability","2022-05-24","2022-06-14",0,["CWE-404"],"/kev/2022/#cve-2018-8611","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2018-19953","QNAP","Network Attached Storage (NAS)","QNAP NAS File Station Cross-Site Scripting Vulnerability","2022-05-24","2022-06-14",1,["CWE-79","CWE-80"],"/kev/2022/#cve-2018-19953","/vendors/qnap/","/products/qnap-network-attached-storage-nas/"],["CVE-2018-19949","QNAP","Network Attached Storage (NAS)","QNAP NAS File Station Command Injection Vulnerability","2022-05-24","2022-06-14",1,["CWE-20","CWE-77","CWE-78"],"/kev/2022/#cve-2018-19949","/vendors/qnap/","/products/qnap-network-attached-storage-nas/"],["CVE-2018-19943","QNAP","Network Attached Storage (NAS)","QNAP NAS File Station Cross-Site Scripting Vulnerability","2022-05-24","2022-06-14",1,["CWE-79","CWE-80"],"/kev/2022/#cve-2018-19943","/vendors/qnap/","/products/qnap-network-attached-storage-nas/"],["CVE-2017-8543","Microsoft","Windows","Microsoft Windows Search Remote Code Execution Vulnerability","2022-05-24","2022-06-14",0,["CWE-281"],"/kev/2022/#cve-2017-8543","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2017-8291","Artifex","Ghostscript","Artifex Ghostscript Type Confusion Vulnerability","2022-05-24","2022-06-14",0,["CWE-704"],"/kev/2022/#cve-2017-8291","",""],["CVE-2017-18362","Kaseya","Virtual System/Server Administrator (VSA)","Kaseya VSA SQL Injection Vulnerability","2022-05-24","2022-06-14",1,["CWE-89"],"/kev/2022/#cve-2017-18362","","/products/kaseya-virtual-system-server-administrator-vsa/"],["CVE-2017-0210","Microsoft","Internet Explorer","Microsoft Internet Explorer Privilege Escalation Vulnerability","2022-05-24","2022-06-14",0,[],"/kev/2022/#cve-2017-0210","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2017-0149","Microsoft","Internet Explorer","Microsoft Internet Explorer Memory Corruption Vulnerability","2022-05-24","2022-06-14",0,["CWE-119"],"/kev/2022/#cve-2017-0149","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2017-0147","Microsoft","SMBv1 server","Microsoft Windows SMBv1 Information Disclosure Vulnerability","2022-05-24","2022-06-14",1,["CWE-200"],"/kev/2022/#cve-2017-0147","/vendors/microsoft/",""],["CVE-2017-0022","Microsoft","XML Core Services","Microsoft XML Core Services Information Disclosure Vulnerability","2022-05-24","2022-06-14",0,["CWE-200"],"/kev/2022/#cve-2017-0022","/vendors/microsoft/",""],["CVE-2017-0005","Microsoft","Windows","Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability","2022-05-24","2022-06-14",0,["CWE-119"],"/kev/2022/#cve-2017-0005","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2016-6367","Cisco","Adaptive Security Appliance (ASA)","Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability","2022-05-24","2022-06-14",0,["CWE-77"],"/kev/2022/#cve-2016-6367","/vendors/cisco/","/products/cisco-adaptive-security-appliance-asa/"],["CVE-2016-6366","Cisco","Adaptive Security Appliance (ASA)","Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability","2022-05-24","2022-06-14",0,["CWE-119"],"/kev/2022/#cve-2016-6366","/vendors/cisco/","/products/cisco-adaptive-security-appliance-asa/"],["CVE-2016-4657","Apple","iOS","Apple iOS Webkit Memory Corruption Vulnerability","2022-05-24","2022-06-14",0,["CWE-119"],"/kev/2022/#cve-2016-4657","/vendors/apple/","/products/apple-ios/"],["CVE-2016-4656","Apple","iOS","Apple iOS Memory Corruption Vulnerability","2022-05-24","2022-06-14",0,["CWE-264"],"/kev/2022/#cve-2016-4656","/vendors/apple/","/products/apple-ios/"],["CVE-2016-4655","Apple","iOS","Apple iOS Information Disclosure Vulnerability","2022-05-24","2022-06-14",0,["CWE-200"],"/kev/2022/#cve-2016-4655","/vendors/apple/","/products/apple-ios/"],["CVE-2016-3351","Microsoft","Internet Explorer and Edge","Microsoft Internet Explorer and Edge Information Disclosure Vulnerability","2022-05-24","2022-06-14",1,["CWE-200"],"/kev/2022/#cve-2016-3351","/vendors/microsoft/",""],["CVE-2016-3298","Microsoft","Internet Explorer","Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability","2022-05-24","2022-06-14",0,["CWE-200"],"/kev/2022/#cve-2016-3298","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2016-0162","Microsoft","Internet Explorer","Microsoft Internet Explorer Information Disclosure Vulnerability","2022-05-24","2022-06-14",0,["CWE-200"],"/kev/2022/#cve-2016-0162","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2022-20821","Cisco","IOS XR","Cisco IOS XR Open Port Vulnerability","2022-05-23","2022-06-13",0,["CWE-923"],"/kev/2022/#cve-2022-20821","/vendors/cisco/","/products/cisco-ios-xr/"],["CVE-2021-30883","Apple","Multiple Products","Apple Multiple Products Memory Corruption Vulnerability","2022-05-23","2022-06-13",0,["CWE-787"],"/kev/2022/#cve-2021-30883","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2021-1048","Android","Kernel","Android Kernel Use-After-Free Vulnerability","2022-05-23","2022-06-13",0,["CWE-416"],"/kev/2022/#cve-2021-1048","/vendors/android/","/products/android-kernel/"],["CVE-2021-0920","Android","Kernel","Android Kernel Race Condition Vulnerability","2022-05-23","2022-06-13",0,["CWE-362","CWE-416"],"/kev/2022/#cve-2021-0920","/vendors/android/","/products/android-kernel/"],["CVE-2020-1027","Microsoft","Windows","Microsoft Windows Kernel Privilege Escalation Vulnerability","2022-05-23","2022-06-13",0,["CWE-787"],"/kev/2022/#cve-2020-1027","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2020-0638","Microsoft","Update Notification Manager","Microsoft Update Notification Manager Privilege Escalation Vulnerability","2022-05-23","2022-06-13",1,[],"/kev/2022/#cve-2020-0638","/vendors/microsoft/",""],["CVE-2019-8720","WebKitGTK","WebKitGTK","WebKitGTK Memory Corruption Vulnerability","2022-05-23","2022-06-13",0,["CWE-119"],"/kev/2022/#cve-2019-8720","",""],["CVE-2019-7287","Apple","iOS","Apple iOS Memory Corruption Vulnerability","2022-05-23","2022-06-13",0,["CWE-787"],"/kev/2022/#cve-2019-7287","/vendors/apple/","/products/apple-ios/"],["CVE-2019-7286","Apple","Multiple Products","Apple Multiple Products Memory Corruption Vulnerability","2022-05-23","2022-06-13",0,["CWE-787"],"/kev/2022/#cve-2019-7286","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2019-5786","Google","Chrome Blink","Google Chrome Blink Use-After-Free Vulnerability","2022-05-23","2022-06-13",0,["CWE-416"],"/kev/2022/#cve-2019-5786","/vendors/google/",""],["CVE-2019-18426","Meta Platforms","WhatsApp","WhatsApp Cross-Site Scripting Vulnerability","2022-05-23","2022-06-13",0,["CWE-79"],"/kev/2022/#cve-2019-18426","","/products/meta-platforms-whatsapp/"],["CVE-2019-1385","Microsoft","Windows","Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability","2022-05-23","2022-06-13",1,["CWE-59"],"/kev/2022/#cve-2019-1385","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2019-13720","Google","Chrome WebAudio","Google Chrome WebAudio Use-After-Free Vulnerability","2022-05-23","2022-06-13",0,["CWE-416"],"/kev/2022/#cve-2019-13720","/vendors/google/",""],["CVE-2019-11708","Mozilla","Firefox and Thunderbird","Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","2022-05-23","2022-06-13",0,["CWE-20"],"/kev/2022/#cve-2019-11708","/vendors/mozilla/","/products/mozilla-firefox-and-thunderbird/"],["CVE-2019-11707","Mozilla","Firefox and Thunderbird","Mozilla Firefox and Thunderbird Type Confusion Vulnerability","2022-05-23","2022-06-13",0,["CWE-843"],"/kev/2022/#cve-2019-11707","/vendors/mozilla/","/products/mozilla-firefox-and-thunderbird/"],["CVE-2019-1130","Microsoft","Windows","Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability","2022-05-23","2022-06-13",1,["CWE-59"],"/kev/2022/#cve-2019-1130","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2019-0880","Microsoft","Windows","Microsoft Windows Privilege Escalation Vulnerability","2022-05-23","2022-06-13",0,[],"/kev/2022/#cve-2019-0880","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2019-0703","Microsoft","Windows","Microsoft Windows SMB Information Disclosure Vulnerability","2022-05-23","2022-06-13",0,[],"/kev/2022/#cve-2019-0703","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2019-0676","Microsoft","Internet Explorer","Microsoft Internet Explorer Information Disclosure Vulnerability","2022-05-23","2022-06-13",0,[],"/kev/2022/#cve-2019-0676","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2018-8589","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2022-05-23","2022-06-13",0,[],"/kev/2022/#cve-2018-8589","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2018-5002","Adobe","Flash Player","Adobe Flash Player Stack-based Buffer Overflow Vulnerability","2022-05-23","2022-06-13",0,["CWE-787"],"/kev/2022/#cve-2018-5002","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2022-30525","Zyxel","Multiple Firewalls","Zyxel Multiple Firewalls OS Command Injection Vulnerability","2022-05-16","2022-06-06",0,["CWE-78"],"/kev/2022/#cve-2022-30525","/vendors/zyxel/","/products/zyxel-multiple-firewalls/"],["CVE-2022-22947","VMware","Spring Cloud Gateway","VMware Spring Cloud Gateway Code Injection Vulnerability","2022-05-16","2022-06-06",0,["CWE-94"],"/kev/2022/#cve-2022-22947","/vendors/vmware/",""],["CVE-2022-1388","F5","BIG-IP","F5 BIG-IP Missing Authentication Vulnerability","2022-05-10","2022-05-31",1,["CWE-306"],"/kev/2022/#cve-2022-1388","/vendors/f5/","/products/f5-big-ip/"],["CVE-2021-1789","Apple","Multiple Products","Apple Multiple Products Type Confusion Vulnerability","2022-05-04","2022-05-25",0,["CWE-843"],"/kev/2022/#cve-2021-1789","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2019-8506","Apple","Multiple Products","Apple Multiple Products Type Confusion Vulnerability","2022-05-04","2022-05-25",0,["CWE-843"],"/kev/2022/#cve-2019-8506","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2014-4113","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2022-05-04","2022-05-25",0,["CWE-264"],"/kev/2022/#cve-2014-4113","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2014-0322","Microsoft","Internet Explorer","Microsoft Internet Explorer Use-After-Free Vulnerability","2022-05-04","2022-05-25",0,["CWE-416"],"/kev/2022/#cve-2014-0322","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2014-0160","OpenSSL","OpenSSL","OpenSSL Information Disclosure Vulnerability","2022-05-04","2022-05-25",0,["CWE-125"],"/kev/2022/#cve-2014-0160","",""],["CVE-2022-29464","WSO2","Multiple Products","WSO2 Multiple Products Unrestrictive Upload of File Vulnerability","2022-04-25","2022-05-16",1,["CWE-22"],"/kev/2022/#cve-2022-29464","",""],["CVE-2022-26904","Microsoft","Windows","Microsoft Windows User Profile Service Privilege Escalation Vulnerability","2022-04-25","2022-05-16",0,["CWE-362"],"/kev/2022/#cve-2022-26904","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-21919","Microsoft","Windows","Microsoft Windows User Profile Service Privilege Escalation Vulnerability","2022-04-25","2022-05-16",0,["CWE-1386"],"/kev/2022/#cve-2022-21919","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-0847","Linux","Kernel","Linux Kernel Privilege Escalation Vulnerability","2022-04-25","2022-05-16",0,["CWE-665"],"/kev/2022/#cve-2022-0847","/vendors/linux/","/products/linux-kernel/"],["CVE-2021-41357","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2022-04-25","2022-05-16",0,[],"/kev/2022/#cve-2021-41357","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2021-40450","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2022-04-25","2022-05-16",0,[],"/kev/2022/#cve-2021-40450","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2019-1003029","Jenkins","Script Security Plugin","Jenkins Script Security Plugin Sandbox Bypass Vulnerability","2022-04-25","2022-05-16",0,[],"/kev/2022/#cve-2019-1003029","/vendors/jenkins/",""],["CVE-2022-22718","Microsoft","Windows","Microsoft Windows Print Spooler Privilege Escalation Vulnerability","2022-04-19","2022-05-10",0,[],"/kev/2022/#cve-2022-22718","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2019-3568","Meta Platforms","WhatsApp","WhatsApp VOIP Stack Buffer Overflow Vulnerability","2022-04-19","2022-05-10",0,["CWE-122"],"/kev/2022/#cve-2019-3568","","/products/meta-platforms-whatsapp/"],["CVE-2018-6882","Synacor","Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","2022-04-19","2022-05-10",1,["CWE-79"],"/kev/2022/#cve-2018-6882","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2022-22960","VMware","Multiple Products","VMware Multiple Products Privilege Escalation Vulnerability","2022-04-15","2022-05-06",0,["CWE-250"],"/kev/2022/#cve-2022-22960","/vendors/vmware/","/products/vmware-multiple-products/"],["CVE-2022-1364","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2022-04-15","2022-05-06",0,["CWE-843"],"/kev/2022/#cve-2022-1364","/vendors/google/","/products/google-chromium-v8/"],["CVE-2019-3929","Crestron","Multiple Products","Crestron Multiple Products Command Injection Vulnerability","2022-04-15","2022-05-06",0,["CWE-79"],"/kev/2022/#cve-2019-3929","",""],["CVE-2019-16057","D-Link","DNS-320 Storage Device","D-Link DNS-320 Remote Code Execution Vulnerability","2022-04-15","2022-05-06",1,["CWE-78"],"/kev/2022/#cve-2019-16057","/vendors/d-link/",""],["CVE-2018-7841","Schneider Electric","U.motion Builder","Schneider Electric U.motion Builder SQL Injection Vulnerability","2022-04-15","2022-05-06",0,["CWE-89"],"/kev/2022/#cve-2018-7841","",""],["CVE-2016-4523","Trihedral","VTScada (formerly VTS)","Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability","2022-04-15","2022-05-06",0,["CWE-119"],"/kev/2022/#cve-2016-4523","",""],["CVE-2014-0780","InduSoft","Web Studio","InduSoft Web Studio NTWebServer Directory Traversal Vulnerability","2022-04-15","2022-05-06",0,["CWE-22"],"/kev/2022/#cve-2014-0780","",""],["CVE-2010-5330","Ubiquiti","AirOS","Ubiquiti AirOS Command Injection Vulnerability","2022-04-15","2022-05-06",0,["CWE-77"],"/kev/2022/#cve-2010-5330","",""],["CVE-2007-3010","Alcatel","OmniPCX Enterprise","Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability","2022-04-15","2022-05-06",0,["CWE-20"],"/kev/2022/#cve-2007-3010","",""],["CVE-2022-22954","VMware","Workspace ONE Access and Identity Manager","VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability","2022-04-14","2022-05-05",1,["CWE-94"],"/kev/2022/#cve-2022-22954","/vendors/vmware/",""],["CVE-2022-24521","Microsoft","Windows","Microsoft Windows CLFS Driver Privilege Escalation Vulnerability","2022-04-13","2022-05-04",1,["CWE-787","CWE-1285"],"/kev/2022/#cve-2022-24521","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2018-7602","Drupal","Core","Drupal Core Remote Code Execution Vulnerability","2022-04-13","2022-05-04",1,[],"/kev/2022/#cve-2018-7602","/vendors/drupal/","/products/drupal-core/"],["CVE-2018-20753","Kaseya","Virtual System/Server Administrator (VSA)","Kaseya VSA Remote Code Execution Vulnerability","2022-04-13","2022-05-04",1,[],"/kev/2022/#cve-2018-20753","","/products/kaseya-virtual-system-server-administrator-vsa/"],["CVE-2015-5123","Adobe","Flash Player","Adobe Flash Player Use-After-Free Vulnerability","2022-04-13","2022-05-04",0,["CWE-416"],"/kev/2022/#cve-2015-5123","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2015-5122","Adobe","Flash Player","Adobe Flash Player Use-After-Free Vulnerability","2022-04-13","2022-05-04",0,["CWE-416"],"/kev/2022/#cve-2015-5122","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2015-3113","Adobe","Flash Player","Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","2022-04-13","2022-05-04",0,["CWE-119"],"/kev/2022/#cve-2015-3113","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2015-2502","Microsoft","Internet Explorer","Microsoft Internet Explorer Memory Corruption Vulnerability","2022-04-13","2022-05-04",0,["CWE-119"],"/kev/2022/#cve-2015-2502","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2015-0313","Adobe","Flash Player","Adobe Flash Player Use-After-Free Vulnerability","2022-04-13","2022-05-04",0,["CWE-416"],"/kev/2022/#cve-2015-0313","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2015-0311","Adobe","Flash Player","Adobe Flash Player Remote Code Execution Vulnerability","2022-04-13","2022-05-04",0,[],"/kev/2022/#cve-2015-0311","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2014-9163","Adobe","Flash Player","Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","2022-04-13","2022-05-04",0,[],"/kev/2022/#cve-2014-9163","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2022-23176","WatchGuard","Firebox and XTM","WatchGuard Firebox and XTM Privilege Escalation Vulnerability","2022-04-11","2022-05-02",0,[],"/kev/2022/#cve-2022-23176","",""],["CVE-2021-42287","Microsoft","Active Directory","Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","2022-04-11","2022-05-02",1,["CWE-269"],"/kev/2022/#cve-2021-42287","/vendors/microsoft/","/products/microsoft-active-directory/"],["CVE-2021-42278","Microsoft","Active Directory","Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","2022-04-11","2022-05-02",1,["CWE-20"],"/kev/2022/#cve-2021-42278","/vendors/microsoft/","/products/microsoft-active-directory/"],["CVE-2021-39793","Google","Pixel","Google Pixel Out-of-Bounds Write Vulnerability","2022-04-11","2022-05-02",0,["CWE-787"],"/kev/2022/#cve-2021-39793","/vendors/google/",""],["CVE-2021-27852","Checkbox","Checkbox Survey","Checkbox Survey Deserialization of Untrusted Data Vulnerability","2022-04-11","2022-05-02",0,["CWE-502"],"/kev/2022/#cve-2021-27852","",""],["CVE-2021-22600","Linux","Kernel","Linux Kernel Privilege Escalation Vulnerability","2022-04-11","2022-05-02",0,["CWE-415"],"/kev/2022/#cve-2021-22600","/vendors/linux/","/products/linux-kernel/"],["CVE-2020-2509","QNAP","QNAP Network-Attached Storage (NAS)","QNAP Network-Attached Storage (NAS) Command Injection Vulnerability","2022-04-11","2022-05-02",0,["CWE-77","CWE-78"],"/kev/2022/#cve-2020-2509","/vendors/qnap/",""],["CVE-2017-11317","Telerik","User Interface (UI) for ASP.NET AJAX","Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability","2022-04-11","2022-05-02",0,["CWE-326"],"/kev/2022/#cve-2017-11317","",""],["CVE-2021-3156","Sudo","Sudo","Sudo Heap-Based Buffer Overflow Vulnerability","2022-04-06","2022-04-27",0,["CWE-122","CWE-193"],"/kev/2022/#cve-2021-3156","",""],["CVE-2021-31166","Microsoft","HTTP Protocol Stack","Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability","2022-04-06","2022-04-27",0,["CWE-416"],"/kev/2022/#cve-2021-31166","/vendors/microsoft/",""],["CVE-2017-0148","Microsoft","SMBv1 server","Microsoft SMBv1 Server Remote Code Execution Vulnerability","2022-04-06","2022-04-27",1,["CWE-20"],"/kev/2022/#cve-2017-0148","/vendors/microsoft/",""],["CVE-2022-22965","VMware","Spring Framework","Spring Framework JDK 9+ Remote Code Execution Vulnerability","2022-04-04","2022-04-25",0,["CWE-94"],"/kev/2022/#cve-2022-22965","/vendors/vmware/",""],["CVE-2022-22675","Apple","macOS","Apple macOS Out-of-Bounds Write Vulnerability","2022-04-04","2022-04-25",0,["CWE-20","CWE-125"],"/kev/2022/#cve-2022-22675","/vendors/apple/","/products/apple-macos/"],["CVE-2022-22674","Apple","macOS","Apple macOS Out-of-Bounds Read Vulnerability","2022-04-04","2022-04-25",0,["CWE-20","CWE-125"],"/kev/2022/#cve-2022-22674","/vendors/apple/","/products/apple-macos/"],["CVE-2021-45382","D-Link","Multiple Routers","D-Link Multiple Routers Remote Code Execution Vulnerability","2022-04-04","2022-04-25",0,["CWE-78"],"/kev/2022/#cve-2021-45382","/vendors/d-link/","/products/d-link-multiple-routers/"],["CVE-2022-26871","Trend Micro","Apex Central","Trend Micro Apex Central Arbitrary File Upload Vulnerability","2022-03-31","2022-04-21",0,["CWE-184"],"/kev/2022/#cve-2022-26871","/vendors/trend-micro/",""],["CVE-2022-1040","Sophos","Firewall","Sophos Firewall Authentication Bypass Vulnerability","2022-03-31","2022-04-21",0,["CWE-158"],"/kev/2022/#cve-2022-1040","/vendors/sophos/",""],["CVE-2021-34484","Microsoft","Windows","Microsoft Windows User Profile Service Privilege Escalation Vulnerability","2022-03-31","2022-04-21",0,["CWE-269"],"/kev/2022/#cve-2021-34484","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-28799","QNAP","Network Attached Storage (NAS)","QNAP NAS Improper Authorization Vulnerability","2022-03-31","2022-04-21",1,["CWE-285"],"/kev/2022/#cve-2021-28799","/vendors/qnap/","/products/qnap-network-attached-storage-nas/"],["CVE-2021-21551","Dell","dbutil Driver","Dell dbutil Driver Insufficient Access Control Vulnerability","2022-03-31","2022-04-21",0,["CWE-782"],"/kev/2022/#cve-2021-21551","",""],["CVE-2018-10562","Dasan","Gigabit Passive Optical Network (GPON) Routers","Dasan GPON Routers Command Injection Vulnerability","2022-03-31","2022-04-21",1,["CWE-78"],"/kev/2022/#cve-2018-10562","",""],["CVE-2018-10561","Dasan","Gigabit Passive Optical Network (GPON) Routers","Dasan GPON Routers Authentication Bypass Vulnerability","2022-03-31","2022-04-21",0,["CWE-287"],"/kev/2022/#cve-2018-10561","",""],["CVE-2022-1096","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2022-03-28","2022-04-18",0,["CWE-843"],"/kev/2022/#cve-2022-1096","/vendors/google/","/products/google-chromium-v8/"],["CVE-2022-0543","Redis","Debian-specific Redis Servers","Debian-specific Redis Server Lua Sandbox Escape Vulnerability","2022-03-28","2022-04-18",0,["CWE-862"],"/kev/2022/#cve-2022-0543","",""],["CVE-2021-38646","Microsoft","Office","Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability","2022-03-28","2022-04-18",1,[],"/kev/2022/#cve-2021-38646","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2021-34486","Microsoft","Windows","Microsoft Windows Event Tracing Privilege Escalation Vulnerability","2022-03-28","2022-04-18",0,["CWE-416"],"/kev/2022/#cve-2021-34486","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-26085","Atlassian","Confluence Server","Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability","2022-03-28","2022-04-18",1,["CWE-425"],"/kev/2022/#cve-2021-26085","/vendors/atlassian/",""],["CVE-2021-20028","SonicWall","Secure Remote Access (SRA)","SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability","2022-03-28","2022-04-18",1,["CWE-89"],"/kev/2022/#cve-2021-20028","/vendors/sonicwall/",""],["CVE-2019-7483","SonicWall","SMA100","SonicWall SMA100 Directory Traversal Vulnerability","2022-03-28","2022-04-18",0,["CWE-22"],"/kev/2022/#cve-2019-7483","/vendors/sonicwall/",""],["CVE-2018-8440","Microsoft","Windows","Microsoft Windows Privilege Escalation Vulnerability","2022-03-28","2022-04-18",1,[],"/kev/2022/#cve-2018-8440","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2018-8406","Microsoft","DirectX Graphics Kernel (DXGKRNL)","Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability","2022-03-28","2022-04-18",1,["CWE-404"],"/kev/2022/#cve-2018-8406","/vendors/microsoft/",""],["CVE-2018-8405","Microsoft","DirectX Graphics Kernel (DXGKRNL)","Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability","2022-03-28","2022-04-18",1,["CWE-404"],"/kev/2022/#cve-2018-8405","/vendors/microsoft/",""],["CVE-2017-0213","Microsoft","Windows","Microsoft Windows Privilege Escalation Vulnerability","2022-03-28","2022-04-18",1,[],"/kev/2022/#cve-2017-0213","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2017-0059","Microsoft","Internet Explorer","Microsoft Internet Explorer Information Disclosure Vulnerability","2022-03-28","2022-04-18",0,["CWE-200"],"/kev/2022/#cve-2017-0059","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2017-0037","Microsoft","Edge and Internet Explorer","Microsoft Edge and Internet Explorer Type Confusion Vulnerability","2022-03-28","2022-04-18",0,["CWE-704"],"/kev/2022/#cve-2017-0037","/vendors/microsoft/",""],["CVE-2016-7201","Microsoft","Edge","Microsoft Edge Memory Corruption Vulnerability","2022-03-28","2022-04-18",0,["CWE-119"],"/kev/2022/#cve-2016-7201","/vendors/microsoft/",""],["CVE-2016-7200","Microsoft","Edge","Microsoft Edge Memory Corruption Vulnerability","2022-03-28","2022-04-18",0,["CWE-119"],"/kev/2022/#cve-2016-7200","/vendors/microsoft/",""],["CVE-2016-0189","Microsoft","Internet Explorer","Microsoft Internet Explorer Memory Corruption Vulnerability","2022-03-28","2022-04-18",1,["CWE-119"],"/kev/2022/#cve-2016-0189","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2016-0151","Microsoft","Client-Server Run-time Subsystem (CSRSS)","Microsoft Windows CSRSS Security Feature Bypass Vulnerability","2022-03-28","2022-04-18",1,["CWE-264"],"/kev/2022/#cve-2016-0151","/vendors/microsoft/",""],["CVE-2016-0040","Microsoft","Windows","Microsoft Windows Kernel Privilege Escalation Vulnerability","2022-03-28","2022-04-18",0,["CWE-264"],"/kev/2022/#cve-2016-0040","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2015-2426","Microsoft","Windows","Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability","2022-03-28","2022-04-18",0,["CWE-119"],"/kev/2022/#cve-2015-2426","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2015-2419","Microsoft","Internet Explorer","Microsoft Internet Explorer Memory Corruption Vulnerability","2022-03-28","2022-04-18",0,["CWE-119"],"/kev/2022/#cve-2015-2419","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2015-1770","Microsoft","Office","Microsoft Office Uninitialized Memory Use Vulnerability","2022-03-28","2022-04-18",0,["CWE-19"],"/kev/2022/#cve-2015-1770","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2013-3660","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2022-03-28","2022-04-18",0,["CWE-119"],"/kev/2022/#cve-2013-3660","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2013-2729","Adobe","Reader and Acrobat","Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","2022-03-28","2022-04-18",0,["CWE-189"],"/kev/2022/#cve-2013-2729","/vendors/adobe/","/products/adobe-reader-and-acrobat/"],["CVE-2013-2551","Microsoft","Internet Explorer","Microsoft Internet Explorer Use-After-Free Vulnerability","2022-03-28","2022-04-18",1,["CWE-416"],"/kev/2022/#cve-2013-2551","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2013-2465","Oracle","Java SE","Oracle Java SE Unspecified Vulnerability","2022-03-28","2022-04-18",1,[],"/kev/2022/#cve-2013-2465","/vendors/oracle/","/products/oracle-java-se/"],["CVE-2013-1690","Mozilla","Firefox and Thunderbird","Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","2022-03-28","2022-04-18",0,["CWE-119"],"/kev/2022/#cve-2013-1690","/vendors/mozilla/","/products/mozilla-firefox-and-thunderbird/"],["CVE-2012-5076","Oracle","Java SE","Oracle Java SE Sandbox Bypass Vulnerability","2022-03-28","2022-04-18",0,[],"/kev/2022/#cve-2012-5076","/vendors/oracle/","/products/oracle-java-se/"],["CVE-2012-2539","Microsoft","Word","Microsoft Word Remote Code Execution Vulnerability","2022-03-28","2022-04-18",0,["CWE-399"],"/kev/2022/#cve-2012-2539","/vendors/microsoft/","/products/microsoft-word/"],["CVE-2012-2034","Adobe","Flash Player","Adobe Flash Player Memory Corruption Vulnerability","2022-03-28","2022-04-18",0,["CWE-119"],"/kev/2022/#cve-2012-2034","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2012-0518","Oracle","Fusion Middleware","Oracle Fusion Middleware Unspecified Vulnerability","2022-03-28","2022-04-18",0,["CWE-601"],"/kev/2022/#cve-2012-0518","/vendors/oracle/","/products/oracle-fusion-middleware/"],["CVE-2011-2005","Microsoft","Ancillary Function Driver (afd.sys)","Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability","2022-03-28","2022-04-18",0,["CWE-264"],"/kev/2022/#cve-2011-2005","/vendors/microsoft/",""],["CVE-2010-4398","Microsoft","Windows","Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability","2022-03-28","2022-04-21",0,["CWE-119"],"/kev/2022/#cve-2010-4398","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-26318","WatchGuard","Firebox and XTM Appliances","WatchGuard Firebox and XTM Appliances Arbitrary Code Execution","2022-03-25","2022-04-15",0,["CWE-122"],"/kev/2022/#cve-2022-26318","",""],["CVE-2022-26143","Mitel","MiCollab, MiVoice Business Express","MiCollab, MiVoice Business Express Access Control Vulnerability","2022-03-25","2022-04-15",0,["CWE-306","CWE-406"],"/kev/2022/#cve-2022-26143","/vendors/mitel/",""],["CVE-2022-21999","Microsoft","Windows","Microsoft Windows Print Spooler Privilege Escalation Vulnerability","2022-03-25","2022-04-15",1,["CWE-40","CWE-1386"],"/kev/2022/#cve-2022-21999","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-42237","Sitecore","XP","Sitecore XP Remote Command Execution Vulnerability","2022-03-25","2022-04-15",1,["CWE-502"],"/kev/2022/#cve-2021-42237","",""],["CVE-2021-22941","Citrix","ShareFile","Citrix ShareFile Improper Access Control Vulnerability","2022-03-25","2022-04-15",1,["CWE-284"],"/kev/2022/#cve-2021-22941","/vendors/citrix/",""],["CVE-2020-9377","D-Link","DIR-610 Devices","D-Link DIR-610 Devices Remote Command Execution","2022-03-25","2022-04-15",0,["CWE-78"],"/kev/2022/#cve-2020-9377","/vendors/d-link/",""],["CVE-2020-9054","Zyxel","Multiple Network-Attached Storage (NAS) Devices","Zyxel Multiple NAS Devices OS Command Injection Vulnerability","2022-03-25","2022-04-15",0,["CWE-78"],"/kev/2022/#cve-2020-9054","/vendors/zyxel/",""],["CVE-2020-7247","OpenBSD","OpenSMTPD","OpenSMTPD Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-755","CWE-78"],"/kev/2022/#cve-2020-7247","",""],["CVE-2020-5410","VMware Tanzu","Spring Cloud Configuration (Config) Server","VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability","2022-03-25","2022-04-15",0,["CWE-23"],"/kev/2022/#cve-2020-5410","",""],["CVE-2020-25223","Sophos","SG UTM","Sophos SG UTM Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-78"],"/kev/2022/#cve-2020-25223","/vendors/sophos/",""],["CVE-2020-2506","QNAP Systems","Helpdesk","QNAP Helpdesk Improper Access Control Vulnerability","2022-03-25","2022-04-15",0,["CWE-284"],"/kev/2022/#cve-2020-2506","",""],["CVE-2020-2021","Palo Alto Networks","PAN-OS","Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","2022-03-25","2022-04-15",1,["CWE-347"],"/kev/2022/#cve-2020-2021","/vendors/palo-alto-networks/","/products/palo-alto-networks-pan-os/"],["CVE-2020-1956","Apache","Kylin","Apache Kylin OS Command Injection Vulnerability","2022-03-25","2022-04-15",0,["CWE-78"],"/kev/2022/#cve-2020-1956","/vendors/apache/",""],["CVE-2020-1631","Juniper","Junos OS","Juniper Junos OS Path Traversal Vulnerability","2022-03-25","2022-04-15",0,["CWE-22","CWE-73"],"/kev/2022/#cve-2020-1631","/vendors/juniper/","/products/juniper-junos-os/"],["CVE-2019-6340","Drupal","Core","Drupal Core Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-502"],"/kev/2022/#cve-2019-6340","/vendors/drupal/","/products/drupal-core/"],["CVE-2019-2616","Oracle","BI Publisher (Formerly XML Publisher)","Oracle BI Publisher Unauthorized Access Vulnerability","2022-03-25","2022-04-15",0,[],"/kev/2022/#cve-2019-2616","/vendors/oracle/",""],["CVE-2019-16920","D-Link","Multiple Routers","D-Link Multiple Routers Command Injection Vulnerability","2022-03-25","2022-04-15",0,["CWE-78"],"/kev/2022/#cve-2019-16920","/vendors/d-link/","/products/d-link-multiple-routers/"],["CVE-2019-15107","Webmin","Webmin","Webmin Command Injection Vulnerability","2022-03-25","2022-04-15",1,["CWE-78"],"/kev/2022/#cve-2019-15107","",""],["CVE-2019-12991","Citrix","SD-WAN and NetScaler","Citrix SD-WAN and NetScaler Command Injection Vulnerability","2022-03-25","2022-04-15",0,["CWE-78"],"/kev/2022/#cve-2019-12991","/vendors/citrix/",""],["CVE-2019-12989","Citrix","SD-WAN and NetScaler","Citrix SD-WAN and NetScaler SQL Injection Vulnerability","2022-03-25","2022-04-15",0,["CWE-89"],"/kev/2022/#cve-2019-12989","/vendors/citrix/",""],["CVE-2019-11043","PHP","FastCGI Process Manager (FPM)","PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","2022-03-25","2022-04-15",1,["CWE-120"],"/kev/2022/#cve-2019-11043","",""],["CVE-2019-10068","Kentico","Xperience","Kentico Xperience Deserialization of Untrusted Data Vulnerability","2022-03-25","2022-04-15",0,["CWE-502"],"/kev/2022/#cve-2019-10068","",""],["CVE-2019-1003030","Jenkins","Matrix Project Plugin","Jenkins Matrix Project Plugin Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,[],"/kev/2022/#cve-2019-1003030","/vendors/jenkins/",""],["CVE-2019-0903","Microsoft","Graphics Device Interface (GDI)","Microsoft GDI Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,[],"/kev/2022/#cve-2019-0903","/vendors/microsoft/",""],["CVE-2018-8414","Microsoft","Windows","Microsoft Windows Shell Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-20"],"/kev/2022/#cve-2018-8414","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2018-8373","Microsoft","Internet Explorer Scripting Engine","Microsoft Scripting Engine Memory Corruption Vulnerability","2022-03-25","2022-04-15",0,["CWE-787"],"/kev/2022/#cve-2018-8373","/vendors/microsoft/",""],["CVE-2018-6961","VMware","SD-WAN Edge","VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability","2022-03-25","2022-04-15",0,["CWE-78"],"/kev/2022/#cve-2018-6961","/vendors/vmware/",""],["CVE-2018-14839","LG","N1A1 NAS","LG N1A1 NAS Remote Command Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-78"],"/kev/2022/#cve-2018-14839","",""],["CVE-2018-1273","VMware Tanzu","Spring Data Commons","VMware Tanzu Spring Data Commons Property Binder Vulnerability","2022-03-25","2022-04-15",1,["CWE-94"],"/kev/2022/#cve-2018-1273","",""],["CVE-2018-11138","Quest","KACE System Management Appliance","Quest KACE System Management Appliance Remote Command Execution Vulnerability","2022-03-25","2022-04-15",1,["CWE-78"],"/kev/2022/#cve-2018-11138","",""],["CVE-2018-0147","Cisco","Secure Access Control System (ACS)","Cisco Secure Access Control System Java Deserialization Vulnerability","2022-03-25","2022-04-15",0,["CWE-20"],"/kev/2022/#cve-2018-0147","/vendors/cisco/",""],["CVE-2018-0125","Cisco","VPN Routers","Cisco VPN Routers Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-20"],"/kev/2022/#cve-2018-0125","/vendors/cisco/",""],["CVE-2017-6334","NETGEAR","DGN2200 Devices","NETGEAR DGN2200 Devices OS Command Injection Vulnerability","2022-03-25","2022-04-15",0,["CWE-78"],"/kev/2022/#cve-2017-6334","/vendors/netgear/",""],["CVE-2017-6316","Citrix","NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server","Citrix Multiple Products Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-20"],"/kev/2022/#cve-2017-6316","/vendors/citrix/",""],["CVE-2017-3881","Cisco","IOS and IOS XE","Cisco IOS and IOS XE Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-20"],"/kev/2022/#cve-2017-3881","/vendors/cisco/","/products/cisco-ios-and-ios-xe/"],["CVE-2017-12617","Apache","Tomcat","Apache Tomcat Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-434"],"/kev/2022/#cve-2017-12617","/vendors/apache/","/products/apache-tomcat/"],["CVE-2017-12615","Apache","Tomcat","Apache Tomcat on Windows Remote Code Execution Vulnerability","2022-03-25","2022-04-15",1,["CWE-434"],"/kev/2022/#cve-2017-12615","/vendors/apache/","/products/apache-tomcat/"],["CVE-2017-0146","Microsoft","Windows","Microsoft Windows SMB Remote Code Execution Vulnerability","2022-03-25","2022-04-15",1,["CWE-20"],"/kev/2022/#cve-2017-0146","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2016-7892","Adobe","Flash Player","Adobe Flash Player Use-After-Free Vulnerability","2022-03-25","2022-04-15",0,["CWE-416"],"/kev/2022/#cve-2016-7892","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2016-4171","Adobe","Flash Player","Adobe Flash Player Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,[],"/kev/2022/#cve-2016-4171","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2016-1555","NETGEAR","Wireless Access Point (WAP) Devices","NETGEAR Multiple WAP Devices Command Injection Vulnerability","2022-03-25","2022-04-15",0,["CWE-77"],"/kev/2022/#cve-2016-1555","/vendors/netgear/",""],["CVE-2016-11021","D-Link","DCS-930L Devices","D-Link DCS-930L Devices OS Command Injection Vulnerability","2022-03-25","2022-04-15",0,["CWE-78"],"/kev/2022/#cve-2016-11021","/vendors/d-link/",""],["CVE-2016-10174","NETGEAR","WNR2000v5 Router","NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability","2022-03-25","2022-04-15",0,["CWE-119"],"/kev/2022/#cve-2016-10174","/vendors/netgear/",""],["CVE-2016-0752","Rails","Ruby on Rails","Ruby on Rails Directory Traversal Vulnerability","2022-03-25","2022-04-15",0,["CWE-22"],"/kev/2022/#cve-2016-0752","","/products/rails-ruby-on-rails/"],["CVE-2015-4068","Arcserve","Unified Data Protection (UDP)","Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability","2022-03-25","2022-04-15",0,["CWE-22"],"/kev/2022/#cve-2015-4068","",""],["CVE-2015-3035","TP-Link","Multiple Archer Devices","TP-Link Multiple Archer Devices Directory Traversal Vulnerability","2022-03-25","2022-04-15",0,["CWE-22"],"/kev/2022/#cve-2015-3035","/vendors/tp-link/",""],["CVE-2015-1427","Elastic","Elasticsearch","Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-284"],"/kev/2022/#cve-2015-1427","",""],["CVE-2015-1187","D-Link and TRENDnet","Multiple Devices","D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-287"],"/kev/2022/#cve-2015-1187","",""],["CVE-2015-0666","Cisco","Prime Data Center Network Manager (DCNM)","Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability","2022-03-25","2022-04-15",0,["CWE-22"],"/kev/2022/#cve-2015-0666","/vendors/cisco/",""],["CVE-2014-6332","Microsoft","Windows","Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-119"],"/kev/2022/#cve-2014-6332","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2014-6324","Microsoft","Kerberos Key Distribution Center (KDC)","Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability","2022-03-25","2022-04-15",0,["CWE-264"],"/kev/2022/#cve-2014-6324","/vendors/microsoft/",""],["CVE-2014-6287","Rejetto","HTTP File Server (HFS)","Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-94"],"/kev/2022/#cve-2014-6287","",""],["CVE-2014-3120","Elastic","Elasticsearch","Elasticsearch Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-284"],"/kev/2022/#cve-2014-3120","",""],["CVE-2014-0130","Rails","Ruby on Rails","Ruby on Rails Directory Traversal Vulnerability","2022-03-25","2022-04-15",0,["CWE-22"],"/kev/2022/#cve-2014-0130","","/products/rails-ruby-on-rails/"],["CVE-2013-5223","D-Link","DSL-2760U","D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability","2022-03-25","2022-04-15",0,["CWE-79"],"/kev/2022/#cve-2013-5223","/vendors/d-link/",""],["CVE-2013-4810","Hewlett Packard (HP)","ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management","HP Multiple Products Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-94"],"/kev/2022/#cve-2013-4810","",""],["CVE-2013-2251","Apache","Struts","Apache Struts Improper Input Validation Vulnerability","2022-03-25","2022-04-15",0,["CWE-20"],"/kev/2022/#cve-2013-2251","/vendors/apache/","/products/apache-struts/"],["CVE-2012-1823","PHP","PHP","PHP-CGI Query String Parameter Vulnerability","2022-03-25","2022-04-15",0,["CWE-20"],"/kev/2022/#cve-2012-1823","",""],["CVE-2010-4345","Exim","Exim","Exim Privilege Escalation Vulnerability","2022-03-25","2022-04-15",0,["CWE-264"],"/kev/2022/#cve-2010-4345","/vendors/exim/","/products/exim-exim/"],["CVE-2010-4344","Exim","Exim","Exim Heap-Based Buffer Overflow Vulnerability","2022-03-25","2022-04-15",0,["CWE-119"],"/kev/2022/#cve-2010-4344","/vendors/exim/","/products/exim-exim/"],["CVE-2010-3035","Cisco","IOS XR","Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","2022-03-25","2022-04-15",0,["CWE-20"],"/kev/2022/#cve-2010-3035","/vendors/cisco/","/products/cisco-ios-xr/"],["CVE-2010-2861","Adobe","ColdFusion","Adobe ColdFusion Directory Traversal Vulnerability","2022-03-25","2022-04-15",1,["CWE-22"],"/kev/2022/#cve-2010-2861","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2009-2055","Cisco","IOS XR","Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","2022-03-25","2022-04-15",0,["CWE-20"],"/kev/2022/#cve-2009-2055","/vendors/cisco/","/products/cisco-ios-xr/"],["CVE-2009-1151","phpMyAdmin","phpMyAdmin","phpMyAdmin Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,["CWE-94"],"/kev/2022/#cve-2009-1151","",""],["CVE-2009-0927","Adobe","Reader and Acrobat","Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability","2022-03-25","2022-04-15",0,["CWE-20"],"/kev/2022/#cve-2009-0927","/vendors/adobe/","/products/adobe-reader-and-acrobat/"],["CVE-2005-2773","Hewlett Packard (HP)","OpenView Network Node Manager","HP OpenView Network Node Manager Remote Code Execution Vulnerability","2022-03-25","2022-04-15",0,[],"/kev/2022/#cve-2005-2773","",""],["CVE-2020-5135","SonicWall","SonicOS","SonicWall SonicOS Buffer Overflow Vulnerability","2022-03-15","2022-04-05",1,["CWE-120"],"/kev/2022/#cve-2020-5135","/vendors/sonicwall/","/products/sonicwall-sonicos/"],["CVE-2019-1405","Microsoft","Windows","Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability","2022-03-15","2022-04-05",1,[],"/kev/2022/#cve-2019-1405","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2019-1322","Microsoft","Windows","Microsoft Windows Privilege Escalation Vulnerability","2022-03-15","2022-04-05",1,[],"/kev/2022/#cve-2019-1322","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2019-1315","Microsoft","Windows","Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability","2022-03-15","2022-04-05",1,["CWE-59"],"/kev/2022/#cve-2019-1315","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2019-1253","Microsoft","Windows","Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability","2022-03-15","2022-04-05",1,["CWE-59"],"/kev/2022/#cve-2019-1253","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2019-1132","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2022-03-15","2022-04-05",0,[],"/kev/2022/#cve-2019-1132","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2019-1129","Microsoft","Windows","Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","2022-03-15","2022-04-05",1,["CWE-59"],"/kev/2022/#cve-2019-1129","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2019-1069","Microsoft","Task Scheduler","Microsoft Task Scheduler Privilege Escalation Vulnerability","2022-03-15","2022-04-05",1,["CWE-59"],"/kev/2022/#cve-2019-1069","/vendors/microsoft/",""],["CVE-2019-1064","Microsoft","Windows","Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","2022-03-15","2022-04-05",1,["CWE-59"],"/kev/2022/#cve-2019-1064","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2019-0841","Microsoft","Windows","Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","2022-03-15","2022-04-05",1,["CWE-59"],"/kev/2022/#cve-2019-0841","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2019-0543","Microsoft","Windows","Microsoft Windows Privilege Escalation Vulnerability","2022-03-15","2022-04-05",1,["CWE-287"],"/kev/2022/#cve-2019-0543","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2018-8120","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2022-03-15","2022-04-05",1,["CWE-404"],"/kev/2022/#cve-2018-8120","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2017-0101","Microsoft","Windows","Microsoft Windows Transaction Manager Privilege Escalation Vulnerability","2022-03-15","2022-04-05",1,["CWE-119"],"/kev/2022/#cve-2017-0101","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2016-3309","Microsoft","Windows","Microsoft Windows Kernel Privilege Escalation Vulnerability","2022-03-15","2022-04-05",1,["CWE-264"],"/kev/2022/#cve-2016-3309","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2015-2546","Microsoft","Win32k","Microsoft Win32k Memory Corruption Vulnerability","2022-03-15","2022-04-05",1,["CWE-119"],"/kev/2022/#cve-2015-2546","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2022-26486","Mozilla","Firefox","Mozilla Firefox Use-After-Free Vulnerability","2022-03-07","2022-03-21",0,["CWE-416"],"/kev/2022/#cve-2022-26486","/vendors/mozilla/","/products/mozilla-firefox/"],["CVE-2022-26485","Mozilla","Firefox","Mozilla Firefox Use-After-Free Vulnerability","2022-03-07","2022-03-21",0,["CWE-416"],"/kev/2022/#cve-2022-26485","/vendors/mozilla/","/products/mozilla-firefox/"],["CVE-2021-21973","VMware","vCenter Server and Cloud Foundation","VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability","2022-03-07","2022-03-21",0,["CWE-20","CWE-918"],"/kev/2022/#cve-2021-21973","/vendors/vmware/",""],["CVE-2020-8218","Pulse Secure","Pulse Connect Secure","Pulse Connect Secure Code Injection Vulnerability","2022-03-07","2022-09-07",0,["CWE-94"],"/kev/2022/#cve-2020-8218","",""],["CVE-2019-11581","Atlassian","Jira Server and Data Center","Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability","2022-03-07","2022-09-07",0,["CWE-74"],"/kev/2022/#cve-2019-11581","/vendors/atlassian/",""],["CVE-2017-6077","NETGEAR","Wireless Router DGN2200","NETGEAR DGN2200 Remote Code Execution Vulnerability","2022-03-07","2022-09-07",0,["CWE-78"],"/kev/2022/#cve-2017-6077","/vendors/netgear/",""],["CVE-2016-6277","NETGEAR","Multiple Routers","NETGEAR Multiple Routers Remote Code Execution Vulnerability","2022-03-07","2022-09-07",0,["CWE-352"],"/kev/2022/#cve-2016-6277","/vendors/netgear/",""],["CVE-2013-0631","Adobe","ColdFusion","Adobe ColdFusion Information Disclosure Vulnerability","2022-03-07","2022-09-07",0,["CWE-200"],"/kev/2022/#cve-2013-0631","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2013-0629","Adobe","ColdFusion","Adobe ColdFusion Directory Traversal Vulnerability","2022-03-07","2022-09-07",0,["CWE-264"],"/kev/2022/#cve-2013-0629","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2013-0625","Adobe","ColdFusion","Adobe ColdFusion Authentication Bypass Vulnerability","2022-03-07","2022-09-07",0,["CWE-255"],"/kev/2022/#cve-2013-0625","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2009-3960","Adobe","BlazeDS","Adobe BlazeDS Information Disclosure Vulnerability","2022-03-07","2022-09-07",1,[],"/kev/2022/#cve-2009-3960","/vendors/adobe/",""],["CVE-2022-20708","Cisco","Small Business RV160, RV260, RV340, and RV345 Series Routers","Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","2022-03-03","2022-03-17",0,["CWE-121"],"/kev/2022/#cve-2022-20708","/vendors/cisco/","/products/cisco-small-business-rv160-rv260-rv340-and-rv345-series-routers/"],["CVE-2022-20703","Cisco","Small Business RV160, RV260, RV340, and RV345 Series Routers","Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","2022-03-03","2022-03-17",0,["CWE-347"],"/kev/2022/#cve-2022-20703","/vendors/cisco/","/products/cisco-small-business-rv160-rv260-rv340-and-rv345-series-routers/"],["CVE-2022-20701","Cisco","Small Business RV160, RV260, RV340, and RV345 Series Routers","Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","2022-03-03","2022-03-17",0,["CWE-121"],"/kev/2022/#cve-2022-20701","/vendors/cisco/","/products/cisco-small-business-rv160-rv260-rv340-and-rv345-series-routers/"],["CVE-2022-20700","Cisco","Small Business RV160, RV260, RV340, and RV345 Series Routers","Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","2022-03-03","2022-03-17",0,["CWE-121"],"/kev/2022/#cve-2022-20700","/vendors/cisco/","/products/cisco-small-business-rv160-rv260-rv340-and-rv345-series-routers/"],["CVE-2022-20699","Cisco","Small Business RV160, RV260, RV340, and RV345 Series Routers","Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","2022-03-03","2022-03-17",0,["CWE-785"],"/kev/2022/#cve-2022-20699","/vendors/cisco/","/products/cisco-small-business-rv160-rv260-rv340-and-rv345-series-routers/"],["CVE-2021-41379","Microsoft","Windows","Microsoft Windows Installer Privilege Escalation Vulnerability","2022-03-03","2022-03-17",1,["CWE-1386"],"/kev/2022/#cve-2021-41379","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2020-1938","Apache","Tomcat","Apache Tomcat Improper Privilege Management Vulnerability","2022-03-03","2022-03-17",0,[],"/kev/2022/#cve-2020-1938","/vendors/apache/","/products/apache-tomcat/"],["CVE-2020-11899","Treck TCP/IP stack","IPv6","Treck TCP/IP stack Out-of-Bounds Read Vulnerability","2022-03-03","2022-03-17",0,["CWE-125"],"/kev/2022/#cve-2020-11899","",""],["CVE-2019-16928","Exim","Exim Internet Mailer","Exim Out-of-bounds Write Vulnerability","2022-03-03","2022-03-17",0,["CWE-787"],"/kev/2022/#cve-2019-16928","/vendors/exim/",""],["CVE-2019-1652","Cisco","Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers","Cisco Small Business Routers Improper Input Validation Vulnerability","2022-03-03","2022-03-17",0,["CWE-20"],"/kev/2022/#cve-2019-1652","/vendors/cisco/",""],["CVE-2019-1297","Microsoft","Excel","Microsoft Excel Remote Code Execution Vulnerability","2022-03-03","2022-03-17",0,[],"/kev/2022/#cve-2019-1297","/vendors/microsoft/","/products/microsoft-excel/"],["CVE-2018-8581","Microsoft","Exchange Server","Microsoft Exchange Server Privilege Escalation Vulnerability","2022-03-03","2022-03-17",1,[],"/kev/2022/#cve-2018-8581","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2018-8298","ChakraCore","ChakraCore scripting engine","ChakraCore Scripting Engine Type Confusion Vulnerability","2022-03-03","2022-03-17",0,["CWE-843"],"/kev/2022/#cve-2018-8298","",""],["CVE-2018-0180","Cisco","IOS Software","Cisco IOS Software Denial-of-Service Vulnerability","2022-03-03","2022-03-17",0,["CWE-399"],"/kev/2022/#cve-2018-0180","/vendors/cisco/","/products/cisco--ios-software/"],["CVE-2018-0179","Cisco","IOS Software","Cisco IOS Software Denial-of-Service Vulnerability","2022-03-03","2022-03-17",0,["CWE-399"],"/kev/2022/#cve-2018-0179","/vendors/cisco/","/products/cisco--ios-software/"],["CVE-2018-0175","Cisco","IOS, XR, and XE Software","Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","2022-03-03","2022-03-17",0,["CWE-119"],"/kev/2022/#cve-2018-0175","/vendors/cisco/",""],["CVE-2018-0174","Cisco","IOS XE Software","Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability","2022-03-03","2022-03-17",0,["CWE-20"],"/kev/2022/#cve-2018-0174","/vendors/cisco/",""],["CVE-2018-0173","Cisco","IOS and IOS XE Software","Cisco IOS and IOS XE Software Improper Input Validation Vulnerability","2022-03-03","2022-03-17",0,["CWE-20"],"/kev/2022/#cve-2018-0173","/vendors/cisco/","/products/cisco-ios-and-ios-xe-software/"],["CVE-2018-0172","Cisco","IOS and IOS XE Software","Cisco IOS and IOS XE Software Improper Input Validation Vulnerability","2022-03-03","2022-03-17",0,["CWE-20"],"/kev/2022/#cve-2018-0172","/vendors/cisco/","/products/cisco-ios-and-ios-xe-software/"],["CVE-2018-0167","Cisco","IOS, XR, and XE Software","Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","2022-03-03","2022-03-17",0,["CWE-119"],"/kev/2022/#cve-2018-0167","/vendors/cisco/",""],["CVE-2018-0161","Cisco","IOS Software","Cisco IOS Software Resource Management Errors Vulnerability","2022-03-03","2022-03-17",0,["CWE-399"],"/kev/2022/#cve-2018-0161","/vendors/cisco/","/products/cisco--ios-software/"],["CVE-2018-0159","Cisco","IOS Software and Cisco IOS XE Software","Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability","2022-03-03","2022-03-17",0,["CWE-20"],"/kev/2022/#cve-2018-0159","/vendors/cisco/","/products/cisco-ios-software-and-cisco-ios-xe-software/"],["CVE-2018-0158","Cisco","IOS Software and Cisco IOS XE Software","Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability","2022-03-03","2022-03-17",0,["CWE-20"],"/kev/2022/#cve-2018-0158","/vendors/cisco/","/products/cisco-ios-software-and-cisco-ios-xe-software/"],["CVE-2018-0156","Cisco","IOS Software and Cisco IOS XE Software","Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability","2022-03-03","2022-03-17",0,["CWE-399"],"/kev/2022/#cve-2018-0156","/vendors/cisco/","/products/cisco-ios-software-and-cisco-ios-xe-software/"],["CVE-2018-0155","Cisco","Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches","Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability","2022-03-03","2022-03-17",0,["CWE-388"],"/kev/2022/#cve-2018-0155","/vendors/cisco/",""],["CVE-2018-0154","Cisco","IOS Software","Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability","2022-03-03","2022-03-17",0,["CWE-399"],"/kev/2022/#cve-2018-0154","/vendors/cisco/","/products/cisco--ios-software/"],["CVE-2018-0151","Cisco","IOS and IOS XE Software","Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability","2022-03-03","2022-03-17",0,["CWE-119"],"/kev/2022/#cve-2018-0151","/vendors/cisco/","/products/cisco-ios-and-ios-xe-software/"],["CVE-2017-8540","Microsoft","Malware Protection Engine","Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2017-8540","/vendors/microsoft/",""],["CVE-2017-6744","Cisco","IOS software","Cisco IOS Software SNMP Remote Code Execution Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2017-6744","/vendors/cisco/","/products/cisco-ios-software/"],["CVE-2017-6743","Cisco","IOS and IOS XE Software","Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2017-6743","/vendors/cisco/","/products/cisco-ios-and-ios-xe-software/"],["CVE-2017-6740","Cisco","IOS and IOS XE Software","Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2017-6740","/vendors/cisco/","/products/cisco-ios-and-ios-xe-software/"],["CVE-2017-6739","Cisco","IOS and IOS XE Software","Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2017-6739","/vendors/cisco/","/products/cisco-ios-and-ios-xe-software/"],["CVE-2017-6738","Cisco","IOS and IOS XE Software","Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2017-6738","/vendors/cisco/","/products/cisco-ios-and-ios-xe-software/"],["CVE-2017-6737","Cisco","IOS and IOS XE Software","Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2017-6737","/vendors/cisco/","/products/cisco-ios-and-ios-xe-software/"],["CVE-2017-6736","Cisco","IOS and IOS XE Software","Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2017-6736","/vendors/cisco/","/products/cisco-ios-and-ios-xe-software/"],["CVE-2017-6663","Cisco","IOS and IOS XE Software","Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability","2022-03-03","2022-03-24",0,[],"/kev/2022/#cve-2017-6663","/vendors/cisco/","/products/cisco-ios-and-ios-xe-software/"],["CVE-2017-6627","Cisco","IOS and IOS XE Software","Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability","2022-03-03","2022-03-24",0,["CWE-399"],"/kev/2022/#cve-2017-6627","/vendors/cisco/","/products/cisco-ios-and-ios-xe-software/"],["CVE-2017-12319","Cisco","IOS XE Software","Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability","2022-03-03","2022-03-24",0,["CWE-20"],"/kev/2022/#cve-2017-12319","/vendors/cisco/",""],["CVE-2017-12240","Cisco","IOS and IOS XE Software","Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability","2022-03-03","2022-03-24",0,["CWE-20"],"/kev/2022/#cve-2017-12240","/vendors/cisco/","/products/cisco-ios-and-ios-xe-software/"],["CVE-2017-12238","Cisco","Catalyst 6800 Series Switches","Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability","2022-03-03","2022-03-24",0,["CWE-399"],"/kev/2022/#cve-2017-12238","/vendors/cisco/",""],["CVE-2017-12237","Cisco","IOS and IOS XE Software","Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability","2022-03-03","2022-03-24",0,["CWE-399"],"/kev/2022/#cve-2017-12237","/vendors/cisco/","/products/cisco-ios-and-ios-xe-software/"],["CVE-2017-12235","Cisco","IOS software","Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability","2022-03-03","2022-03-24",0,["CWE-20"],"/kev/2022/#cve-2017-12235","/vendors/cisco/","/products/cisco-ios-software/"],["CVE-2017-12234","Cisco","IOS software","Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability","2022-03-03","2022-03-24",0,["CWE-20"],"/kev/2022/#cve-2017-12234","/vendors/cisco/","/products/cisco-ios-software/"],["CVE-2017-12233","Cisco","IOS software","Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability","2022-03-03","2022-03-24",0,["CWE-20"],"/kev/2022/#cve-2017-12233","/vendors/cisco/","/products/cisco-ios-software/"],["CVE-2017-12232","Cisco","IOS software","Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability","2022-03-03","2022-03-24",0,["CWE-399"],"/kev/2022/#cve-2017-12232","/vendors/cisco/","/products/cisco-ios-software/"],["CVE-2017-12231","Cisco","IOS software","Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability","2022-03-03","2022-03-24",0,["CWE-399"],"/kev/2022/#cve-2017-12231","/vendors/cisco/","/products/cisco-ios-software/"],["CVE-2017-11826","Microsoft","Office","Microsoft Office Remote Code Execution Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2017-11826","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2017-11292","Adobe","Flash Player","Adobe Flash Player Type Confusion Vulnerability","2022-03-03","2022-03-24",0,["CWE-843"],"/kev/2022/#cve-2017-11292","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2017-0261","Microsoft","Office","Microsoft Office Use-After-Free Vulnerability","2022-03-03","2022-03-24",0,["CWE-416"],"/kev/2022/#cve-2017-0261","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2017-0001","Microsoft","Graphics Device Interface (GDI)","Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability","2022-03-03","2022-03-24",0,[],"/kev/2022/#cve-2017-0001","/vendors/microsoft/",""],["CVE-2016-8562","Siemens","SIMATIC CP","Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability","2022-03-03","2022-03-24",0,["CWE-20"],"/kev/2022/#cve-2016-8562","",""],["CVE-2016-7855","Adobe","Flash Player","Adobe Flash Player Use-After-Free Vulnerability","2022-03-03","2022-03-24",0,["CWE-416"],"/kev/2022/#cve-2016-7855","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2016-7262","Microsoft","Excel","Microsoft Office Security Feature Bypass Vulnerability","2022-03-03","2022-03-24",0,["CWE-20"],"/kev/2022/#cve-2016-7262","/vendors/microsoft/","/products/microsoft-excel/"],["CVE-2016-7193","Microsoft","Office","Microsoft Office Memory Corruption Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2016-7193","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2016-5195","Linux","Kernel","Linux Kernel Race Condition Vulnerability","2022-03-03","2022-03-24",0,["CWE-362"],"/kev/2022/#cve-2016-5195","/vendors/linux/","/products/linux-kernel/"],["CVE-2016-4117","Adobe","Flash Player","Adobe Flash Player Arbitrary Code Execution Vulnerability","2022-03-03","2022-03-24",1,[],"/kev/2022/#cve-2016-4117","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2016-1019","Adobe","Flash Player","Adobe Flash Player Arbitrary Code Execution Vulnerability","2022-03-03","2022-03-24",1,[],"/kev/2022/#cve-2016-1019","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2016-0099","Microsoft","Windows","Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability","2022-03-03","2022-03-24",1,["CWE-264"],"/kev/2022/#cve-2016-0099","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2015-7645","Adobe","Flash Player","Adobe Flash Player Arbitrary Code Execution Vulnerability","2022-03-03","2022-03-24",1,[],"/kev/2022/#cve-2015-7645","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2015-5119","Adobe","Flash Player","Adobe Flash Player Use-After-Free Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2015-5119","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2015-4902","Oracle","Java SE","Oracle Java SE Integrity Check Vulnerability","2022-03-03","2022-03-24",0,[],"/kev/2022/#cve-2015-4902","/vendors/oracle/","/products/oracle-java-se/"],["CVE-2015-3043","Adobe","Flash Player","Adobe Flash Player Memory Corruption Vulnerability","2022-03-03","2022-03-24",0,["CWE-787"],"/kev/2022/#cve-2015-3043","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2015-2590","Oracle","Java SE","Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","2022-03-03","2022-03-24",0,[],"/kev/2022/#cve-2015-2590","/vendors/oracle/","/products/oracle-java-se/"],["CVE-2015-2545","Microsoft","Office","Microsoft Office Malformed EPS File Vulnerability","2022-03-03","2022-03-24",0,["CWE-20"],"/kev/2022/#cve-2015-2545","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2015-2424","Microsoft","PowerPoint","Microsoft PowerPoint Memory Corruption Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2015-2424","/vendors/microsoft/",""],["CVE-2015-2387","Microsoft","ATM Font Driver","Microsoft ATM Font Driver Privilege Escalation Vulnerability","2022-03-03","2022-03-24",0,["CWE-264"],"/kev/2022/#cve-2015-2387","/vendors/microsoft/",""],["CVE-2015-1701","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2022-03-03","2022-03-24",1,["CWE-264"],"/kev/2022/#cve-2015-1701","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2015-1642","Microsoft","Office","Microsoft Office Memory Corruption Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2015-1642","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2014-4114","Microsoft","Windows","Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability","2022-03-03","2022-03-24",0,["CWE-20"],"/kev/2022/#cve-2014-4114","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2014-0496","Adobe","Reader and Acrobat","Adobe Reader and Acrobat Use-After-Free Vulnerability","2022-03-03","2022-03-24",0,["CWE-399"],"/kev/2022/#cve-2014-0496","/vendors/adobe/","/products/adobe-reader-and-acrobat/"],["CVE-2013-5065","Microsoft","Windows","Microsoft Windows Kernel Privilege Escalation Vulnerability","2022-03-03","2022-03-24",0,["CWE-20"],"/kev/2022/#cve-2013-5065","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2013-3897","Microsoft","Internet Explorer","Microsoft Internet Explorer Use-After-Free Vulnerability","2022-03-03","2022-03-24",0,["CWE-399"],"/kev/2022/#cve-2013-3897","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2013-3346","Adobe","Reader and Acrobat","Adobe Reader and Acrobat Memory Corruption Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2013-3346","/vendors/adobe/","/products/adobe-reader-and-acrobat/"],["CVE-2013-1675","Mozilla","Firefox","Mozilla Firefox Information Disclosure Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2013-1675","/vendors/mozilla/","/products/mozilla-firefox/"],["CVE-2013-1347","Microsoft","Internet Explorer","Microsoft Internet Explorer Remote Code Execution Vulnerability","2022-03-03","2022-03-24",0,["CWE-94"],"/kev/2022/#cve-2013-1347","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2013-0641","Adobe","Reader","Adobe Reader Buffer Overflow Vulnerability","2022-03-03","2022-03-24",0,["CWE-120"],"/kev/2022/#cve-2013-0641","/vendors/adobe/",""],["CVE-2013-0640","Adobe","Reader and Acrobat","Adobe Reader and Acrobat Memory Corruption Vulnerability","2022-03-03","2022-03-24",0,["CWE-787"],"/kev/2022/#cve-2013-0640","/vendors/adobe/","/products/adobe-reader-and-acrobat/"],["CVE-2013-0632","Adobe","ColdFusion","Adobe ColdFusion Authentication Bypass Vulnerability","2022-03-03","2022-03-24",0,["CWE-200"],"/kev/2022/#cve-2013-0632","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2012-4681","Oracle","Java SE","Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","2022-03-03","2022-03-24",1,[],"/kev/2022/#cve-2012-4681","/vendors/oracle/","/products/oracle-java-se/"],["CVE-2012-1856","Microsoft","Office","Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability","2022-03-03","2022-03-24",0,["CWE-94"],"/kev/2022/#cve-2012-1856","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2012-1723","Oracle","Java SE","Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","2022-03-03","2022-03-24",1,[],"/kev/2022/#cve-2012-1723","/vendors/oracle/","/products/oracle-java-se/"],["CVE-2012-1535","Adobe","Flash Player","Adobe Flash Player Arbitrary Code Execution Vulnerability","2022-03-03","2022-03-24",0,[],"/kev/2022/#cve-2012-1535","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2012-0507","Oracle","Java SE","Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","2022-03-03","2022-03-24",1,[],"/kev/2022/#cve-2012-0507","/vendors/oracle/","/products/oracle-java-se/"],["CVE-2011-3544","Oracle","Java SE JDK and JRE","Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","2022-03-03","2022-03-24",0,[],"/kev/2022/#cve-2011-3544","/vendors/oracle/",""],["CVE-2011-1889","Microsoft","Forefront Threat Management Gateway (TMG)","Microsoft Forefront TMG Remote Code Execution Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2011-1889","/vendors/microsoft/",""],["CVE-2011-0611","Adobe","Flash Player","Adobe Flash Player Remote Code Execution Vulnerability","2022-03-03","2022-03-24",0,["CWE-843"],"/kev/2022/#cve-2011-0611","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2010-3333","Microsoft","Office","Microsoft Office Stack-based Buffer Overflow Vulnerability","2022-03-03","2022-03-24",0,["CWE-119"],"/kev/2022/#cve-2010-3333","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2010-0232","Microsoft","Windows","Microsoft Windows Kernel Exception Handler Vulnerability","2022-03-03","2022-03-24",0,["CWE-264"],"/kev/2022/#cve-2010-0232","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2010-0188","Adobe","Reader and Acrobat","Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability","2022-03-03","2022-03-24",1,["CWE-94"],"/kev/2022/#cve-2010-0188","/vendors/adobe/","/products/adobe-reader-and-acrobat/"],["CVE-2009-3129","Microsoft","Excel","Microsoft Excel Featheader Record Memory Corruption Vulnerability","2022-03-03","2022-03-24",0,["CWE-94"],"/kev/2022/#cve-2009-3129","/vendors/microsoft/","/products/microsoft-excel/"],["CVE-2009-1123","Microsoft","Windows","Microsoft Windows Improper Input Validation Vulnerability","2022-03-03","2022-03-24",0,["CWE-20"],"/kev/2022/#cve-2009-1123","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2008-3431","Oracle","VirtualBox","Oracle VirtualBox Insufficient Input Validation Vulnerability","2022-03-03","2022-03-24",0,["CWE-264"],"/kev/2022/#cve-2008-3431","/vendors/oracle/",""],["CVE-2008-2992","Adobe","Acrobat and Reader","Adobe Reader and Acrobat Input Validation Vulnerability","2022-03-03","2022-03-24",1,["CWE-119"],"/kev/2022/#cve-2008-2992","/vendors/adobe/","/products/adobe-acrobat-and-reader/"],["CVE-2004-0210","Microsoft","Windows","Microsoft Windows Privilege Escalation Vulnerability","2022-03-03","2022-03-24",0,["CWE-120"],"/kev/2022/#cve-2004-0210","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2002-0367","Microsoft","Windows","Microsoft Windows Privilege Escalation Vulnerability","2022-03-03","2022-03-24",0,[],"/kev/2022/#cve-2002-0367","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-24682","Synacor","Zimbra Collaborate Suite (ZCS)","Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","2022-02-25","2022-03-11",1,["CWE-79","CWE-116"],"/kev/2022/#cve-2022-24682","/vendors/synacor/",""],["CVE-2017-8570","Microsoft","Office","Microsoft Office Remote Code Execution Vulnerability","2022-02-25","2022-08-25",0,[],"/kev/2022/#cve-2017-8570","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2017-0222","Microsoft","Internet Explorer","Microsoft Internet Explorer Remote Code Execution Vulnerability","2022-02-25","2022-08-25",0,["CWE-119"],"/kev/2022/#cve-2017-0222","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2014-6352","Microsoft","Windows","Microsoft Windows Code Injection Vulnerability","2022-02-25","2022-08-25",0,["CWE-94"],"/kev/2022/#cve-2014-6352","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2022-23134","Zabbix","Frontend","Zabbix Frontend Improper Access Control Vulnerability","2022-02-22","2022-03-08",0,["CWE-284"],"/kev/2022/#cve-2022-23134","",""],["CVE-2022-23131","Zabbix","Frontend","Zabbix Frontend Authentication Bypass Vulnerability","2022-02-22","2022-03-08",0,["CWE-290"],"/kev/2022/#cve-2022-23131","",""],["CVE-2022-24086","Adobe","Commerce and Magento Open Source","Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability","2022-02-15","2022-03-01",0,["CWE-20"],"/kev/2022/#cve-2022-24086","/vendors/adobe/",""],["CVE-2022-0609","Google","Chromium Animation","Google Chromium Animation Use-After-Free Vulnerability","2022-02-15","2022-03-01",0,["CWE-416"],"/kev/2022/#cve-2022-0609","/vendors/google/",""],["CVE-2019-0752","Microsoft","Internet Explorer","Microsoft Internet Explorer Type Confusion Vulnerability","2022-02-15","2022-08-15",1,["CWE-843"],"/kev/2022/#cve-2019-0752","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2018-8174","Microsoft","Windows","Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability","2022-02-15","2022-08-15",1,["CWE-787"],"/kev/2022/#cve-2018-8174","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2018-20250","RARLAB","WinRAR","WinRAR Absolute Path Traversal Vulnerability","2022-02-15","2022-08-15",1,["CWE-36"],"/kev/2022/#cve-2018-20250","/vendors/rarlab/","/products/rarlab-winrar/"],["CVE-2018-15982","Adobe","Flash Player","Adobe Flash Player Use-After-Free Vulnerability","2022-02-15","2022-08-15",1,["CWE-416"],"/kev/2022/#cve-2018-15982","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2017-9841","PHPUnit","PHPUnit","PHPUnit Command Injection Vulnerability","2022-02-15","2022-08-15",0,["CWE-94"],"/kev/2022/#cve-2017-9841","",""],["CVE-2014-1761","Microsoft","Word","Microsoft Word Memory Corruption Vulnerability","2022-02-15","2022-08-15",0,["CWE-119"],"/kev/2022/#cve-2014-1761","/vendors/microsoft/","/products/microsoft-word/"],["CVE-2013-3906","Microsoft","Graphics Component","Microsoft Graphics Component Memory Corruption Vulnerability","2022-02-15","2022-08-15",0,["CWE-94"],"/kev/2022/#cve-2013-3906","/vendors/microsoft/",""],["CVE-2022-22620","Apple","iOS, iPadOS, and macOS","Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability","2022-02-11","2022-02-25",0,["CWE-416"],"/kev/2022/#cve-2022-22620","/vendors/apple/","/products/apple-ios-ipados-and-macos/"],["CVE-2021-36934","Microsoft","Windows","Microsoft Windows SAM Local Privilege Escalation Vulnerability","2022-02-10","2022-02-24",0,["CWE-1220"],"/kev/2022/#cve-2021-36934","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2020-0796","Microsoft","SMBv3","Microsoft SMBv3 Remote Code Execution Vulnerability","2022-02-10","2022-08-10",1,["CWE-119"],"/kev/2022/#cve-2020-0796","/vendors/microsoft/",""],["CVE-2018-1000861","Jenkins","Jenkins Stapler Web Framework","Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability","2022-02-10","2022-08-10",0,["CWE-502"],"/kev/2022/#cve-2018-1000861","/vendors/jenkins/",""],["CVE-2017-9791","Apache","Struts 1","Apache Struts 1 Improper Input Validation Vulnerability","2022-02-10","2022-08-10",0,["CWE-20"],"/kev/2022/#cve-2017-9791","/vendors/apache/",""],["CVE-2017-8464","Microsoft","Windows","Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability","2022-02-10","2022-08-10",0,[],"/kev/2022/#cve-2017-8464","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2017-10271","Oracle","WebLogic Server","Oracle Corporation WebLogic Server Remote Code Execution Vulnerability","2022-02-10","2022-08-10",1,[],"/kev/2022/#cve-2017-10271","/vendors/oracle/","/products/oracle-weblogic-server/"],["CVE-2017-0263","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2022-02-10","2022-08-10",0,["CWE-416"],"/kev/2022/#cve-2017-0263","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2017-0262","Microsoft","Office","Microsoft Office Remote Code Execution Vulnerability","2022-02-10","2022-08-10",0,[],"/kev/2022/#cve-2017-0262","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2017-0145","Microsoft","SMBv1","Microsoft SMBv1 Remote Code Execution Vulnerability","2022-02-10","2022-08-10",1,["CWE-20"],"/kev/2022/#cve-2017-0145","/vendors/microsoft/",""],["CVE-2017-0144","Microsoft","SMBv1","Microsoft SMBv1 Remote Code Execution Vulnerability","2022-02-10","2022-08-10",1,["CWE-20"],"/kev/2022/#cve-2017-0144","/vendors/microsoft/",""],["CVE-2016-3088","Apache","ActiveMQ","Apache ActiveMQ Improper Input Validation Vulnerability","2022-02-10","2022-08-10",0,["CWE-20"],"/kev/2022/#cve-2016-3088","/vendors/apache/","/products/apache-activemq/"],["CVE-2015-2051","D-Link","DIR-645 Router","D-Link DIR-645 Router Remote Code Execution Vulnerability","2022-02-10","2022-08-10",0,["CWE-77"],"/kev/2022/#cve-2015-2051","/vendors/d-link/",""],["CVE-2015-1635","Microsoft","HTTP.sys","Microsoft HTTP.sys Remote Code Execution Vulnerability","2022-02-10","2022-08-10",0,["CWE-94"],"/kev/2022/#cve-2015-1635","/vendors/microsoft/",""],["CVE-2015-1130","Apple","OS X","Apple OS X Authentication Bypass Vulnerability","2022-02-10","2022-08-10",0,["CWE-254"],"/kev/2022/#cve-2015-1130","/vendors/apple/",""],["CVE-2014-4404","Apple","OS X","Apple OS X Heap-Based Buffer Overflow Vulnerability","2022-02-10","2022-08-10",0,["CWE-119"],"/kev/2022/#cve-2014-4404","/vendors/apple/",""],["CVE-2022-21882","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2022-02-04","2022-02-18",1,["CWE-787"],"/kev/2022/#cve-2022-21882","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2022-22587","Apple","iOS and macOS","Apple Memory Corruption Vulnerability","2022-01-28","2022-02-11",0,["CWE-20","CWE-787"],"/kev/2022/#cve-2022-22587","/vendors/apple/","/products/apple-ios-and-macos/"],["CVE-2021-20038","SonicWall","SMA 100 Appliances","SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability","2022-01-28","2022-02-11",1,["CWE-121"],"/kev/2022/#cve-2021-20038","/vendors/sonicwall/",""],["CVE-2020-5722","Grandstream","UCM6200","Grandstream Networks UCM6200 Series SQL Injection Vulnerability","2022-01-28","2022-07-28",0,["CWE-89"],"/kev/2022/#cve-2020-5722","",""],["CVE-2020-0787","Microsoft","Windows","Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability","2022-01-28","2022-07-28",1,["CWE-269","CWE-59"],"/kev/2022/#cve-2020-0787","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2017-5689","Intel","Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability","Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability","2022-01-28","2022-07-28",0,[],"/kev/2022/#cve-2017-5689","",""],["CVE-2014-7169","GNU","Bourne-Again Shell (Bash)","GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","2022-07-28",0,["CWE-78"],"/kev/2022/#cve-2014-7169","/vendors/gnu/",""],["CVE-2014-6271","GNU","Bourne-Again Shell (Bash)","GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","2022-07-28",0,["CWE-78"],"/kev/2022/#cve-2014-6271","/vendors/gnu/",""],["CVE-2014-1776","Microsoft","Internet Explorer","Microsoft Internet Explorer Memory Corruption Vulnerability","2022-01-28","2022-07-28",0,["CWE-416"],"/kev/2022/#cve-2014-1776","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2021-35247","SolarWinds","Serv-U","SolarWinds Serv-U Improper Input Validation Vulnerability","2022-01-21","2022-02-04",0,["CWE-20"],"/kev/2022/#cve-2021-35247","/vendors/solarwinds/","/products/solarwinds-serv-u/"],["CVE-2018-8453","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2022-01-21","2022-07-21",1,["CWE-404"],"/kev/2022/#cve-2018-8453","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2012-0391","Apache","Struts 2","Apache Struts 2 Improper Input Validation Vulnerability","2022-01-21","2022-07-21",0,["CWE-20"],"/kev/2022/#cve-2012-0391","/vendors/apache/",""],["CVE-2006-1547","Apache","Struts 1","Apache Struts 1 ActionForm Denial-of-Service Vulnerability","2022-01-21","2022-07-21",0,[],"/kev/2022/#cve-2006-1547","/vendors/apache/",""],["CVE-2021-40870","Aviatrix","Aviatrix Controller","Aviatrix Controller Unrestricted Upload of File","2022-01-18","2022-02-01",0,["CWE-25","CWE-96"],"/kev/2022/#cve-2021-40870","",""],["CVE-2021-33766","Microsoft","Exchange Server","Microsoft Exchange Server Information Disclosure","2022-01-18","2022-02-01",0,["CWE-287"],"/kev/2022/#cve-2021-33766","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2021-32648","October CMS","October CMS","October CMS Improper Authentication","2022-01-18","2022-02-01",0,["CWE-287"],"/kev/2022/#cve-2021-32648","",""],["CVE-2021-25298","Nagios","Nagios XI","Nagios XI OS Command Injection","2022-01-18","2022-02-01",0,["CWE-78","CWE-138"],"/kev/2022/#cve-2021-25298","","/products/nagios-nagios-xi/"],["CVE-2021-25297","Nagios","Nagios XI","Nagios XI OS Command Injection","2022-01-18","2022-02-01",0,["CWE-78","CWE-138"],"/kev/2022/#cve-2021-25297","","/products/nagios-nagios-xi/"],["CVE-2021-25296","Nagios","Nagios XI","Nagios XI OS Command Injection","2022-01-18","2022-02-01",0,["CWE-78","CWE-138"],"/kev/2022/#cve-2021-25296","","/products/nagios-nagios-xi/"],["CVE-2021-22991","F5","BIG-IP Traffic Management Microkernel","F5 BIG-IP Traffic Management Microkernel Buffer Overflow","2022-01-18","2022-02-01",0,["CWE-119"],"/kev/2022/#cve-2021-22991","/vendors/f5/",""],["CVE-2021-21975","VMware","vRealize Operations Manager API","VMware Server Side Request Forgery in vRealize Operations Manager API","2022-01-18","2022-02-01",1,["CWE-918"],"/kev/2022/#cve-2021-21975","/vendors/vmware/",""],["CVE-2021-21315","Npm package","System Information Library for Node.JS","System Information Library for Node.JS Command Injection","2022-01-18","2022-02-01",0,["CWE-78"],"/kev/2022/#cve-2021-21315","",""],["CVE-2020-14864","Oracle","Intelligence Enterprise Edition","Oracle Business Intelligence Enterprise Edition Path Transversal","2022-01-18","2022-07-18",0,["CWE-22"],"/kev/2022/#cve-2020-14864","/vendors/oracle/",""],["CVE-2020-13927","Apache","Airflow's Experimental API","Apache Airflow's Experimental API Authentication Bypass","2022-01-18","2022-07-18",0,["CWE-1188","CWE-306"],"/kev/2022/#cve-2020-13927","/vendors/apache/",""],["CVE-2020-13671","Drupal","Drupal core","Drupal core Un-restricted Upload of File","2022-01-18","2022-07-18",0,["CWE-434"],"/kev/2022/#cve-2020-13671","/vendors/drupal/",""],["CVE-2020-11978","Apache","Airflow","Apache Airflow Command Injection","2022-01-18","2022-07-18",0,["CWE-78"],"/kev/2022/#cve-2020-11978","/vendors/apache/",""],["CVE-2021-36260","Hikvision","Security cameras web server","Hikvision Improper Input Validation","2022-01-10","2022-01-24",0,["CWE-78"],"/kev/2022/#cve-2021-36260","",""],["CVE-2021-27860","FatPipe","WARP, IPVPN, and MPVPN software","FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit","2022-01-10","2022-01-24",0,["CWE-434"],"/kev/2022/#cve-2021-27860","",""],["CVE-2021-22017","VMware","vCenter Server","VMware vCenter Server Improper Access Control","2022-01-10","2022-01-24",0,["CWE-23"],"/kev/2022/#cve-2021-22017","/vendors/vmware/","/products/vmware-vcenter-server/"],["CVE-2020-6572","Google","Chrome Media","Google Chrome Media Use-After-Free Vulnerability","2022-01-10","2022-07-10",0,["CWE-416"],"/kev/2022/#cve-2020-6572","/vendors/google/",""],["CVE-2019-9670","Synacor","Zimbra Collaboration Suite (ZCS)","Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference","2022-01-10","2022-07-10",0,["CWE-611"],"/kev/2022/#cve-2019-9670","/vendors/synacor/","/products/synacor-zimbra-collaboration-suite-zcs/"],["CVE-2019-7609","Elastic","Kibana","Kibana Arbitrary Code Execution","2022-01-10","2022-07-10",0,["CWE-94"],"/kev/2022/#cve-2019-7609","",""],["CVE-2019-2725","Oracle","WebLogic Server","Oracle WebLogic Server, Injection","2022-01-10","2022-07-10",1,["CWE-74"],"/kev/2022/#cve-2019-2725","/vendors/oracle/","/products/oracle-weblogic-server/"],["CVE-2019-1579","Palo Alto Networks","PAN-OS","Palo Alto Networks PAN-OS Remote Code Execution Vulnerability","2022-01-10","2022-07-10",1,["CWE-134"],"/kev/2022/#cve-2019-1579","/vendors/palo-alto-networks/","/products/palo-alto-networks-pan-os/"],["CVE-2019-1458","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2022-01-10","2022-07-10",1,[],"/kev/2022/#cve-2019-1458","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2019-10149","Exim","Mail Transfer Agent (MTA)","Exim Mail Transfer Agent (MTA) Improper Input Validation","2022-01-10","2022-07-10",0,["CWE-78"],"/kev/2022/#cve-2019-10149","/vendors/exim/",""],["CVE-2018-13383","Fortinet","FortiOS and FortiProxy","Fortinet FortiOS and FortiProxy Out-of-bounds Write","2022-01-10","2022-07-10",1,["CWE-787"],"/kev/2022/#cve-2018-13383","/vendors/fortinet/","/products/fortinet-fortios-and-fortiproxy/"],["CVE-2018-13382","Fortinet","FortiOS and FortiProxy","Fortinet FortiOS and FortiProxy Improper Authorization","2022-01-10","2022-07-10",1,["CWE-285"],"/kev/2022/#cve-2018-13382","/vendors/fortinet/","/products/fortinet-fortios-and-fortiproxy/"],["CVE-2017-1000486","Primetek","Primefaces Application","Primetek Primefaces Remote Code Execution Vulnerability","2022-01-10","2022-07-10",0,["CWE-326"],"/kev/2022/#cve-2017-1000486","",""],["CVE-2015-7450","IBM","WebSphere Application Server and Server Hypervisor Edition","IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.","2022-01-10","2022-07-10",0,["CWE-94"],"/kev/2022/#cve-2015-7450","/vendors/ibm/",""],["CVE-2013-3900","Microsoft","WinVerifyTrust function","Microsoft WinVerifyTrust function Remote Code Execution","2022-01-10","2022-07-10",0,["CWE-20"],"/kev/2022/#cve-2013-3900","/vendors/microsoft/",""],["CVE-2021-43890","Microsoft","Windows","Microsoft Windows AppX Installer Spoofing Vulnerability","2021-12-15","2021-12-29",1,[],"/kev/2021/#cve-2021-43890","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-4102","Google","Chromium V8","Google Chromium V8 Use-After-Free Vulnerability","2021-12-15","2021-12-29",0,["CWE-416"],"/kev/2021/#cve-2021-4102","/vendors/google/","/products/google-chromium-v8/"],["CVE-2021-44515","Zoho","Desktop Central","Zoho Desktop Central Authentication Bypass Vulnerability","2021-12-10","2021-12-24",0,[],"/kev/2021/#cve-2021-44515","/vendors/zoho/",""],["CVE-2021-44228","Apache","Log4j2","Apache Log4j2 Remote Code Execution Vulnerability","2021-12-10","2021-12-24",1,["CWE-20","CWE-400","CWE-502"],"/kev/2021/#cve-2021-44228","/vendors/apache/",""],["CVE-2021-44168","Fortinet","FortiOS","Fortinet FortiOS Arbitrary File Download","2021-12-10","2021-12-24",0,["CWE-494"],"/kev/2021/#cve-2021-44168","/vendors/fortinet/","/products/fortinet-fortios/"],["CVE-2021-35394","Realtek","Jungle Software Development Kit (SDK)","Realtek Jungle SDK Remote Code Execution Vulnerability","2021-12-10","2021-12-24",0,["CWE-78","CWE-138"],"/kev/2021/#cve-2021-35394","",""],["CVE-2020-8816","Pi-hole","AdminLTE","Pi-Hole AdminLTE Remote Code Execution Vulnerability","2021-12-10","2022-06-10",0,["CWE-78"],"/kev/2021/#cve-2020-8816","",""],["CVE-2020-17463","Fuel CMS","Fuel CMS","Fuel CMS SQL Injection Vulnerability","2021-12-10","2022-06-10",0,["CWE-89"],"/kev/2021/#cve-2020-17463","",""],["CVE-2019-7238","Sonatype","Nexus Repository Manager","Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability","2021-12-10","2022-06-10",0,[],"/kev/2021/#cve-2019-7238","",""],["CVE-2019-13272","Linux","Kernel","Linux Kernel Improper Privilege Management Vulnerability","2021-12-10","2022-06-10",0,["CWE-269"],"/kev/2021/#cve-2019-13272","/vendors/linux/","/products/linux-kernel/"],["CVE-2019-10758","MongoDB","mongo-express","MongoDB mongo-express Remote Code Execution Vulnerability","2021-12-10","2022-06-10",0,[],"/kev/2021/#cve-2019-10758","",""],["CVE-2019-0193","Apache","Solr","Apache Solr DataImportHandler Code Injection Vulnerability","2021-12-10","2022-06-10",0,["CWE-94"],"/kev/2021/#cve-2019-0193","/vendors/apache/",""],["CVE-2017-17562","Embedthis","GoAhead","Embedthis GoAhead Remote Code Execution Vulnerability","2021-12-10","2022-06-10",0,["CWE-20"],"/kev/2021/#cve-2017-17562","",""],["CVE-2017-12149","Red Hat","JBoss Application Server","Red Hat JBoss Application Server Remote Code Execution Vulnerability","2021-12-10","2022-06-10",1,["CWE-502"],"/kev/2021/#cve-2017-12149","/vendors/red-hat/",""],["CVE-2010-1871","Red Hat","JBoss Seam 2","Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","2021-12-10","2022-06-10",0,["CWE-20"],"/kev/2021/#cve-2010-1871","/vendors/red-hat/",""],["CVE-2021-44077","Zoho","ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus","Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability","2021-12-01","2021-12-15",0,["CWE-306"],"/kev/2021/#cve-2021-44077","/vendors/zoho/",""],["CVE-2021-40438","Apache","Apache","Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01","2021-12-15",1,["CWE-918"],"/kev/2021/#cve-2021-40438","/vendors/apache/",""],["CVE-2021-37415","Zoho","ManageEngine ServiceDesk Plus (SDP)","Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability","2021-12-01","2021-12-15",0,["CWE-306"],"/kev/2021/#cve-2021-37415","/vendors/zoho/",""],["CVE-2020-11261","Qualcomm","Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","Qualcomm Multiple Chipsets Improper Input Validation Vulnerability","2021-12-01","2022-06-01",0,["CWE-20"],"/kev/2021/#cve-2020-11261","/vendors/qualcomm/",""],["CVE-2018-14847","MikroTik","RouterOS","MikroTik Router OS Directory Traversal Vulnerability","2021-12-01","2022-06-01",0,["CWE-22"],"/kev/2021/#cve-2018-14847","","/products/mikrotik-routeros/"],["CVE-2021-42321","Microsoft","Exchange","Microsoft Exchange Server Remote Code Execution Vulnerability","2021-11-17","2021-12-01",1,["CWE-184","CWE-502"],"/kev/2021/#cve-2021-42321","/vendors/microsoft/",""],["CVE-2021-42292","Microsoft","Office","Microsoft Excel Security Feature Bypass","2021-11-17","2021-12-01",0,["CWE-357"],"/kev/2021/#cve-2021-42292","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2021-40449","Microsoft","Windows","Microsoft Windows Win32k Privilege Escalation Vulnerability","2021-11-17","2021-12-01",1,["CWE-416"],"/kev/2021/#cve-2021-40449","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-22204","Perl","Exiftool","ExifTool Remote Code Execution Vulnerability","2021-11-17","2021-12-01",0,["CWE-95"],"/kev/2021/#cve-2021-22204","",""],["CVE-2021-42258","BQE","BillQuick Web Suite","BQE BillQuick Web Suite SQL Injection Vulnerability","2021-11-03","2021-11-17",1,["CWE-89"],"/kev/2021/#cve-2021-42258","",""],["CVE-2021-42013","Apache","HTTP Server","Apache HTTP Server Path Traversal Vulnerability","2021-11-03","2021-11-17",1,["CWE-22"],"/kev/2021/#cve-2021-42013","/vendors/apache/","/products/apache-http-server/"],["CVE-2021-41773","Apache","HTTP Server","Apache HTTP Server Path Traversal Vulnerability","2021-11-03","2021-11-17",1,["CWE-22"],"/kev/2021/#cve-2021-41773","/vendors/apache/","/products/apache-http-server/"],["CVE-2021-40539","Zoho","ManageEngine","Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability","2021-11-03","2021-11-17",1,["CWE-55"],"/kev/2021/#cve-2021-40539","/vendors/zoho/","/products/zoho-manageengine/"],["CVE-2021-40444","Microsoft","MSHTML","Microsoft MSHTML Remote Code Execution Vulnerability","2021-11-03","2021-11-17",1,["CWE-22"],"/kev/2021/#cve-2021-40444","/vendors/microsoft/",""],["CVE-2021-38649","Microsoft","Open Management Infrastructure (OMI)","Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","2021-11-03","2021-11-17",0,[],"/kev/2021/#cve-2021-38649","/vendors/microsoft/","/products/microsoft-open-management-infrastructure-omi/"],["CVE-2021-38648","Microsoft","Open Management Infrastructure (OMI)","Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","2021-11-03","2021-11-17",0,["CWE-1390"],"/kev/2021/#cve-2021-38648","/vendors/microsoft/","/products/microsoft-open-management-infrastructure-omi/"],["CVE-2021-38647","Microsoft","Open Management Infrastructure (OMI)","Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability","2021-11-03","2021-11-17",1,["CWE-1390"],"/kev/2021/#cve-2021-38647","/vendors/microsoft/","/products/microsoft-open-management-infrastructure-omi/"],["CVE-2021-38645","Microsoft","Open Management Infrastructure (OMI)","Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","2021-11-03","2021-11-17",0,[],"/kev/2021/#cve-2021-38645","/vendors/microsoft/","/products/microsoft-open-management-infrastructure-omi/"],["CVE-2021-38003","Google","Chromium V8","Google Chromium V8 Memory Corruption Vulnerability","2021-11-03","2021-11-17",0,["CWE-122","CWE-755"],"/kev/2021/#cve-2021-38003","/vendors/google/","/products/google-chromium-v8/"],["CVE-2021-38000","Google","Chromium Intents","Google Chromium Intents Improper Input Validation Vulnerability","2021-11-03","2021-11-17",0,["CWE-20"],"/kev/2021/#cve-2021-38000","/vendors/google/",""],["CVE-2021-37976","Google","Chromium","Google Chromium Information Disclosure Vulnerability","2021-11-03","2021-11-17",0,["CWE-862"],"/kev/2021/#cve-2021-37976","/vendors/google/","/products/google-chromium/"],["CVE-2021-37975","Google","Chromium V8","Google Chromium V8 Use-After-Free Vulnerability","2021-11-03","2021-11-17",0,["CWE-416"],"/kev/2021/#cve-2021-37975","/vendors/google/","/products/google-chromium-v8/"],["CVE-2021-37973","Google","Chromium Portals","Google Chromium Portals Use-After-Free Vulnerability","2021-11-03","2021-11-17",0,["CWE-416"],"/kev/2021/#cve-2021-37973","/vendors/google/",""],["CVE-2021-36955","Microsoft","Windows","Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","2021-11-03","2021-11-17",1,[],"/kev/2021/#cve-2021-36955","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-36948","Microsoft","Windows","Microsoft Windows Update Medic Service Privilege Escalation Vulnerability","2021-11-03","2021-11-17",0,[],"/kev/2021/#cve-2021-36948","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-36942","Microsoft","Windows","Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability","2021-11-03","2021-11-17",1,["CWE-749"],"/kev/2021/#cve-2021-36942","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-36742","Trend Micro","Apex One, Apex One as a Service, and Worry-Free Business Security","Trend Micro Multiple Products Improper Input Validation Vulnerability","2021-11-03","2021-11-17",0,["CWE-20"],"/kev/2021/#cve-2021-36742","/vendors/trend-micro/",""],["CVE-2021-36741","Trend Micro","Apex One, Apex One as a Service, and Worry-Free Business Security","Trend Micro Multiple Products Improper Input Validation Vulnerability","2021-11-03","2021-11-17",0,["CWE-22"],"/kev/2021/#cve-2021-36741","/vendors/trend-micro/",""],["CVE-2021-35464","ForgeRock","Access Management (AM)","ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability","2021-11-03","2021-11-17",1,["CWE-502"],"/kev/2021/#cve-2021-35464","",""],["CVE-2021-35395","Realtek","AP-Router SDK","Realtek AP-Router SDK Buffer Overflow Vulnerability","2021-11-03","2021-11-17",0,["CWE-20","CWE-122"],"/kev/2021/#cve-2021-35395","",""],["CVE-2021-35211","SolarWinds","Serv-U","SolarWinds Serv-U Remote Code Execution Vulnerability","2021-11-03","2021-11-17",1,["CWE-787"],"/kev/2021/#cve-2021-35211","/vendors/solarwinds/","/products/solarwinds-serv-u/"],["CVE-2021-34527","Microsoft","Windows","Microsoft Windows Print Spooler Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,["CWE-269"],"/kev/2021/#cve-2021-34527","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-34523","Microsoft","Exchange Server","Microsoft Exchange Server Privilege Escalation Vulnerability","2021-11-03","2021-11-17",1,["CWE-287"],"/kev/2021/#cve-2021-34523","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2021-34473","Microsoft","Exchange Server","Microsoft Exchange Server Remote Code Execution Vulnerability","2021-11-03","2021-11-17",1,["CWE-918"],"/kev/2021/#cve-2021-34473","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2021-34448","Microsoft","Windows","Microsoft Windows Scripting Engine Memory Corruption Vulnerability","2021-11-03","2021-11-17",0,["CWE-787"],"/kev/2021/#cve-2021-34448","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-33771","Microsoft","Windows","Microsoft Windows Kernel Privilege Escalation Vulnerability","2021-11-03","2021-11-17",0,["CWE-119"],"/kev/2021/#cve-2021-33771","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-33742","Microsoft","Windows","Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability","2021-11-03","2021-11-17",0,["CWE-787","CWE-823"],"/kev/2021/#cve-2021-33742","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-33739","Microsoft","Windows","Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","2021-11-03","2021-11-17",0,[],"/kev/2021/#cve-2021-33739","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-31979","Microsoft","Windows","Microsoft Windows Kernel Privilege Escalation Vulnerability","2021-11-03","2021-11-17",0,["CWE-119"],"/kev/2021/#cve-2021-31979","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-31956","Microsoft","Windows","Microsoft Windows NTFS Privilege Escalation Vulnerability","2021-11-03","2021-11-17",0,["CWE-191","CWE-787"],"/kev/2021/#cve-2021-31956","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-31955","Microsoft","Windows","Microsoft Windows Kernel Information Disclosure Vulnerability","2021-11-03","2021-11-17",0,["CWE-497"],"/kev/2021/#cve-2021-31955","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-31755","Tenda","AC11 Router","Tenda AC11 Router Stack Buffer Overflow Vulnerability","2021-11-03","2021-11-17",0,["CWE-787"],"/kev/2021/#cve-2021-31755","",""],["CVE-2021-31207","Microsoft","Exchange Server","Microsoft Exchange Server Security Feature Bypass Vulnerability","2021-11-03","2021-11-17",1,["CWE-20","CWE-434"],"/kev/2021/#cve-2021-31207","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2021-31201","Microsoft","Enhanced Cryptographic Provider","Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability","2021-11-03","2021-11-17",0,[],"/kev/2021/#cve-2021-31201","/vendors/microsoft/",""],["CVE-2021-31199","Microsoft","Enhanced Cryptographic Provider","Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability","2021-11-03","2021-11-17",0,[],"/kev/2021/#cve-2021-31199","/vendors/microsoft/",""],["CVE-2021-30869","Apple","iOS, iPadOS, and macOS","Apple iOS, iPadOS, and macOS Type Confusion Vulnerability","2021-11-03","2021-11-17",0,["CWE-843"],"/kev/2021/#cve-2021-30869","/vendors/apple/","/products/apple-ios-ipados-and-macos/"],["CVE-2021-30860","Apple","Multiple Products","Apple Multiple Products Integer Overflow Vulnerability","2021-11-03","2021-11-17",0,["CWE-20","CWE-190"],"/kev/2021/#cve-2021-30860","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2021-30858","Apple","iOS, iPadOS, and macOS","Apple iOS, iPadOS, macOS Use-After-Free Vulnerability","2021-11-03","2021-11-17",0,["CWE-416"],"/kev/2021/#cve-2021-30858","/vendors/apple/","/products/apple-ios-ipados-and-macos/"],["CVE-2021-30807","Apple","Multiple Products","Apple Multiple Products Memory Corruption Vulnerability","2021-11-03","2021-11-17",0,["CWE-787"],"/kev/2021/#cve-2021-30807","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2021-30762","Apple","iOS","Apple iOS WebKit Use-After-Free Vulnerability","2021-11-03","2021-11-17",0,["CWE-416"],"/kev/2021/#cve-2021-30762","/vendors/apple/","/products/apple-ios/"],["CVE-2021-30761","Apple","iOS","Apple iOS WebKit Memory Corruption Vulnerability","2021-11-03","2021-11-17",0,["CWE-787"],"/kev/2021/#cve-2021-30761","/vendors/apple/","/products/apple-ios/"],["CVE-2021-30713","Apple","macOS","Apple macOS Unspecified Vulnerability","2021-11-03","2021-11-17",0,["CWE-862"],"/kev/2021/#cve-2021-30713","/vendors/apple/","/products/apple-macos/"],["CVE-2021-30666","Apple","iOS","Apple iOS WebKit Buffer Overflow Vulnerability","2021-11-03","2021-11-17",0,["CWE-119"],"/kev/2021/#cve-2021-30666","/vendors/apple/","/products/apple-ios/"],["CVE-2021-30665","Apple","Multiple Products","Apple Multiple Products WebKit Memory Corruption Vulnerability","2021-11-03","2021-11-17",0,["CWE-787"],"/kev/2021/#cve-2021-30665","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2021-30663","Apple","Multiple Products","Apple Multiple Products WebKit Integer Overflow Vulnerability","2021-11-03","2021-11-17",0,["CWE-20","CWE-190"],"/kev/2021/#cve-2021-30663","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2021-30661","Apple","Multiple Products","Apple Multiple Products WebKit Storage Use-After-Free Vulnerability","2021-11-03","2021-11-17",0,["CWE-416"],"/kev/2021/#cve-2021-30661","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2021-30657","Apple","macOS","Apple macOS Unspecified Vulnerability","2021-11-03","2021-11-17",0,["CWE-862"],"/kev/2021/#cve-2021-30657","/vendors/apple/","/products/apple-macos/"],["CVE-2021-30633","Google","Chromium Indexed DB API","Google Chromium Indexed DB API Use-After-Free Vulnerability","2021-11-03","2021-11-17",0,["CWE-416"],"/kev/2021/#cve-2021-30633","/vendors/google/",""],["CVE-2021-30632","Google","Chromium V8","Google Chromium V8 Out-of-Bounds Write Vulnerability","2021-11-03","2021-11-17",0,["CWE-122"],"/kev/2021/#cve-2021-30632","/vendors/google/","/products/google-chromium-v8/"],["CVE-2021-30563","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2021-11-03","2021-11-17",0,["CWE-122","CWE-843"],"/kev/2021/#cve-2021-30563","/vendors/google/","/products/google-chromium-v8/"],["CVE-2021-30554","Google","Chromium WebGL","Google Chromium WebGL Use-After-Free Vulnerability","2021-11-03","2021-11-17",0,["CWE-416"],"/kev/2021/#cve-2021-30554","/vendors/google/",""],["CVE-2021-30551","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2021-11-03","2021-11-17",0,["CWE-122","CWE-843"],"/kev/2021/#cve-2021-30551","/vendors/google/","/products/google-chromium-v8/"],["CVE-2021-30116","Kaseya","Virtual System/Server Administrator (VSA)","Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability","2021-11-03","2021-11-17",1,["CWE-522"],"/kev/2021/#cve-2021-30116","","/products/kaseya-virtual-system-server-administrator-vsa/"],["CVE-2021-28664","Arm","Mali Graphics Processing Unit (GPU)","Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability","2021-11-03","2021-11-17",0,["CWE-787"],"/kev/2021/#cve-2021-28664","/vendors/arm/","/products/arm-mali-graphics-processing-unit-gpu/"],["CVE-2021-28663","Arm","Mali Graphics Processing Unit (GPU)","Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability","2021-11-03","2021-11-17",0,["CWE-416"],"/kev/2021/#cve-2021-28663","/vendors/arm/","/products/arm-mali-graphics-processing-unit-gpu/"],["CVE-2021-28550","Adobe","Acrobat and Reader","Adobe Acrobat and Reader Use-After-Free Vulnerability","2021-11-03","2021-11-17",0,["CWE-416"],"/kev/2021/#cve-2021-28550","/vendors/adobe/","/products/adobe-acrobat-and-reader/"],["CVE-2021-28310","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2021-11-03","2021-11-17",0,["CWE-787"],"/kev/2021/#cve-2021-28310","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2021-27562","Arm","Trusted Firmware","Arm Trusted Firmware Out-of-Bounds Write Vulnerability","2021-11-03","2021-11-17",0,["CWE-787"],"/kev/2021/#cve-2021-27562","/vendors/arm/",""],["CVE-2021-27561","Yealink","Device Management","Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability","2021-11-03","2021-11-17",0,["CWE-78"],"/kev/2021/#cve-2021-27561","",""],["CVE-2021-27104","Accellion","FTA","Accellion FTA OS Command Injection Vulnerability","2021-11-03","2021-11-17",1,["CWE-20","CWE-78"],"/kev/2021/#cve-2021-27104","","/products/accellion-fta/"],["CVE-2021-27103","Accellion","FTA","Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability","2021-11-03","2021-11-17",1,["CWE-918"],"/kev/2021/#cve-2021-27103","","/products/accellion-fta/"],["CVE-2021-27102","Accellion","FTA","Accellion FTA OS Command Injection Vulnerability","2021-11-03","2021-11-17",1,["CWE-20","CWE-78"],"/kev/2021/#cve-2021-27102","","/products/accellion-fta/"],["CVE-2021-27101","Accellion","FTA","Accellion FTA SQL Injection Vulnerability","2021-11-03","2021-11-17",1,["CWE-89","CWE-138"],"/kev/2021/#cve-2021-27101","","/products/accellion-fta/"],["CVE-2021-27085","Microsoft","Internet Explorer","Microsoft Internet Explorer Remote Code Execution Vulnerability","2021-11-03","2021-11-17",0,[],"/kev/2021/#cve-2021-27085","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2021-27065","Microsoft","Exchange Server","Microsoft Exchange Server Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,["CWE-39"],"/kev/2021/#cve-2021-27065","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2021-27059","Microsoft","Office","Microsoft Office Remote Code Execution Vulnerability","2021-11-03","2021-11-17",0,[],"/kev/2021/#cve-2021-27059","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2021-26858","Microsoft","Exchange Server","Microsoft Exchange Server Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,[],"/kev/2021/#cve-2021-26858","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2021-26857","Microsoft","Exchange Server","Microsoft Exchange Server Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,["CWE-502"],"/kev/2021/#cve-2021-26857","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2021-26855","Microsoft","Exchange Server","Microsoft Exchange Server Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,["CWE-918"],"/kev/2021/#cve-2021-26855","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2021-26411","Microsoft","Internet Explorer","Microsoft Internet Explorer Memory Corruption Vulnerability","2021-11-03","2021-11-17",1,["CWE-416"],"/kev/2021/#cve-2021-26411","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2021-26084","Atlassian","Confluence Server and Data Center","Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability","2021-11-03","2021-11-17",1,["CWE-917"],"/kev/2021/#cve-2021-26084","/vendors/atlassian/",""],["CVE-2021-23874","McAfee","McAfee Total Protection (MTP)","McAfee Total Protection (MTP) Improper Privilege Management Vulnerability","2021-11-03","2021-11-17",0,["CWE-284"],"/kev/2021/#cve-2021-23874","",""],["CVE-2021-22986","F5","BIG-IP and BIG-IQ Centralized Management","F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability","2021-11-03","2021-11-17",1,["CWE-863"],"/kev/2021/#cve-2021-22986","/vendors/f5/",""],["CVE-2021-22900","Ivanti","Pulse Connect Secure","Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability","2021-11-03","2022-05-03",0,["CWE-94"],"/kev/2021/#cve-2021-22900","/vendors/ivanti/","/products/ivanti-pulse-connect-secure/"],["CVE-2021-22899","Ivanti","Pulse Connect Secure","Ivanti Pulse Connect Secure Command Injection Vulnerability","2021-11-03","2022-05-03",0,["CWE-77"],"/kev/2021/#cve-2021-22899","/vendors/ivanti/","/products/ivanti-pulse-connect-secure/"],["CVE-2021-22894","Ivanti","Pulse Connect Secure","Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability","2021-11-03","2022-05-03",0,["CWE-94"],"/kev/2021/#cve-2021-22894","/vendors/ivanti/","/products/ivanti-pulse-connect-secure/"],["CVE-2021-22893","Ivanti","Pulse Connect Secure","Ivanti Pulse Connect Secure Use-After-Free Vulnerability","2021-11-03","2022-05-03",1,["CWE-287"],"/kev/2021/#cve-2021-22893","/vendors/ivanti/","/products/ivanti-pulse-connect-secure/"],["CVE-2021-22506","Micro Focus","Micro Focus Access Manager","Micro Focus Access Manager Information Leakage Vulnerability","2021-11-03","2021-11-17",0,[],"/kev/2021/#cve-2021-22506","",""],["CVE-2021-22502","Micro Focus","Operation Bridge Reporter (OBR)","Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability","2021-11-03","2021-11-17",0,["CWE-20","CWE-78"],"/kev/2021/#cve-2021-22502","",""],["CVE-2021-22205","GitLab","Community and Enterprise Editions","GitLab Community and Enterprise Editions Remote Code Execution Vulnerability","2021-11-03","2021-11-17",1,["CWE-20","CWE-95"],"/kev/2021/#cve-2021-22205","/vendors/gitlab/",""],["CVE-2021-22005","VMware","vCenter Server","VMware vCenter Server File Upload Vulnerability","2021-11-03","2021-11-17",1,["CWE-23"],"/kev/2021/#cve-2021-22005","/vendors/vmware/","/products/vmware-vcenter-server/"],["CVE-2021-21985","VMware","vCenter Server","VMware vCenter Server Improper Input Validation Vulnerability","2021-11-03","2021-11-17",1,["CWE-20","CWE-470","CWE-918"],"/kev/2021/#cve-2021-21985","/vendors/vmware/","/products/vmware-vcenter-server/"],["CVE-2021-21972","VMware","vCenter Server","VMware vCenter Server Remote Code Execution Vulnerability","2021-11-03","2021-11-17",1,["CWE-23"],"/kev/2021/#cve-2021-21972","/vendors/vmware/","/products/vmware-vcenter-server/"],["CVE-2021-21224","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2021-11-03","2021-11-17",0,["CWE-843"],"/kev/2021/#cve-2021-21224","/vendors/google/","/products/google-chromium-v8/"],["CVE-2021-21220","Google","Chromium V8","Google Chromium V8 Improper Input Validation Vulnerability","2021-11-03","2021-11-17",0,["CWE-20","CWE-122"],"/kev/2021/#cve-2021-21220","/vendors/google/","/products/google-chromium-v8/"],["CVE-2021-21206","Google","Chromium Blink","Google Chromium Blink Use-After-Free Vulnerability","2021-11-03","2021-11-17",0,["CWE-416"],"/kev/2021/#cve-2021-21206","/vendors/google/",""],["CVE-2021-21193","Google","Chromium Blink","Google Chromium Blink Use-After-Free Vulnerability","2021-11-03","2021-11-17",0,["CWE-416"],"/kev/2021/#cve-2021-21193","/vendors/google/",""],["CVE-2021-21166","Google","Chromium","Google Chromium Race Condition Vulnerability","2021-11-03","2021-11-17",0,["CWE-122","CWE-362"],"/kev/2021/#cve-2021-21166","/vendors/google/","/products/google-chromium/"],["CVE-2021-21148","Google","Chromium V8","Google Chromium V8 Heap Buffer Overflow Vulnerability","2021-11-03","2021-11-17",0,["CWE-122"],"/kev/2021/#cve-2021-21148","/vendors/google/","/products/google-chromium-v8/"],["CVE-2021-21017","Adobe","Acrobat and Reader","Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability","2021-11-03","2021-11-17",0,["CWE-122"],"/kev/2021/#cve-2021-21017","/vendors/adobe/","/products/adobe-acrobat-and-reader/"],["CVE-2021-20090","Arcadyan","Buffalo Firmware","Arcadyan Buffalo Firmware Path Traversal Vulnerability","2021-11-03","2021-11-17",0,["CWE-22"],"/kev/2021/#cve-2021-20090","",""],["CVE-2021-20023","SonicWall","SonicWall Email Security","SonicWall Email Security Path Traversal Vulnerability","2021-11-03","2021-11-17",1,["CWE-22"],"/kev/2021/#cve-2021-20023","/vendors/sonicwall/","/products/sonicwall-sonicwall-email-security/"],["CVE-2021-20022","SonicWall","SonicWall Email Security","SonicWall Email Security Unrestricted Upload of File Vulnerability","2021-11-03","2021-11-17",1,["CWE-434"],"/kev/2021/#cve-2021-20022","/vendors/sonicwall/","/products/sonicwall-sonicwall-email-security/"],["CVE-2021-20021","SonicWall","SonicWall Email Security","SonicWall Email Security Improper Privilege Management Vulnerability","2021-11-03","2021-11-17",1,["CWE-306"],"/kev/2021/#cve-2021-20021","/vendors/sonicwall/","/products/sonicwall-sonicwall-email-security/"],["CVE-2021-20016","SonicWall","SSLVPN SMA100","SonicWall SSLVPN SMA100 SQL Injection Vulnerability","2021-11-03","2021-11-17",1,["CWE-89"],"/kev/2021/#cve-2021-20016","/vendors/sonicwall/",""],["CVE-2021-1906","Qualcomm","Multiple Chipsets","Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability","2021-11-03","2021-11-17",0,["CWE-390"],"/kev/2021/#cve-2021-1906","/vendors/qualcomm/","/products/qualcomm-multiple-chipsets/"],["CVE-2021-1905","Qualcomm","Multiple Chipsets","Qualcomm Multiple Chipsets Use-After-Free Vulnerability","2021-11-03","2022-05-03",0,["CWE-416"],"/kev/2021/#cve-2021-1905","/vendors/qualcomm/","/products/qualcomm-multiple-chipsets/"],["CVE-2021-1879","Apple","iOS, iPadOS, and watchOS","Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability","2021-11-03","2021-11-17",0,["CWE-79"],"/kev/2021/#cve-2021-1879","/vendors/apple/","/products/apple-ios-ipados-and-watchos/"],["CVE-2021-1871","Apple","iOS, iPadOS, and macOS","Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","2021-11-03","2021-11-17",0,["CWE-1173"],"/kev/2021/#cve-2021-1871","/vendors/apple/","/products/apple-ios-ipados-and-macos/"],["CVE-2021-1870","Apple","iOS, iPadOS, and macOS","Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","2021-11-03","2021-11-17",0,["CWE-1173"],"/kev/2021/#cve-2021-1870","/vendors/apple/","/products/apple-ios-ipados-and-macos/"],["CVE-2021-1782","Apple","Multiple Products","Apple Multiple Products Race Condition Vulnerability","2021-11-03","2021-11-17",0,["CWE-362","CWE-667"],"/kev/2021/#cve-2021-1782","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2021-1732","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2021-11-03","2021-11-17",1,["CWE-787"],"/kev/2021/#cve-2021-1732","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2021-1675","Microsoft","Windows","Microsoft Windows Print Spooler Remote Code Execution Vulnerability","2021-11-03","2021-11-17",1,["CWE-285"],"/kev/2021/#cve-2021-1675","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2021-1647","Microsoft","Defender","Microsoft Defender Remote Code Execution Vulnerability","2021-11-03","2021-11-17",0,["CWE-122","CWE-1285"],"/kev/2021/#cve-2021-1647","/vendors/microsoft/","/products/microsoft-defender/"],["CVE-2021-1498","Cisco","HyperFlex HX","Cisco HyperFlex HX Data Platform Command Injection Vulnerability","2021-11-03","2021-11-17",0,["CWE-78"],"/kev/2021/#cve-2021-1498","/vendors/cisco/",""],["CVE-2021-1497","Cisco","HyperFlex HX","Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability","2021-11-03","2021-11-17",0,["CWE-78"],"/kev/2021/#cve-2021-1497","/vendors/cisco/",""],["CVE-2020-9859","Apple","Multiple Products","Apple Multiple Products Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-415"],"/kev/2021/#cve-2020-9859","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2020-9819","Apple","iOS, iPadOS, and watchOS","Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability","2021-11-03","2022-05-03",0,["CWE-787"],"/kev/2021/#cve-2020-9819","/vendors/apple/","/products/apple-ios-ipados-and-watchos/"],["CVE-2020-9818","Apple","iOS, iPadOS, and watchOS","Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability","2021-11-03","2022-05-03",0,["CWE-787"],"/kev/2021/#cve-2020-9818","/vendors/apple/","/products/apple-ios-ipados-and-watchos/"],["CVE-2020-8657","EyesOfNetwork","EyesOfNetwork","EyesOfNetwork Use of Hard-Coded Credentials Vulnerability","2021-11-03","2022-05-03",0,["CWE-798"],"/kev/2021/#cve-2020-8657","",""],["CVE-2020-8655","EyesOfNetwork","EyesOfNetwork","EyesOfNetwork Improper Privilege Management Vulnerability","2021-11-03","2022-05-03",0,["CWE-269"],"/kev/2021/#cve-2020-8655","",""],["CVE-2020-8644","PlaySMS","PlaySMS","PlaySMS Server-Side Template Injection Vulnerability","2021-11-03","2022-05-03",0,["CWE-94"],"/kev/2021/#cve-2020-8644","",""],["CVE-2020-8599","Trend Micro","Apex One and OfficeScan","Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2020-8599","/vendors/trend-micro/",""],["CVE-2020-8515","DrayTek","Multiple Vigor Routers","Multiple DrayTek Vigor Routers Web Management Page Vulnerability","2021-11-03","2022-05-03",0,["CWE-78"],"/kev/2021/#cve-2020-8515","/vendors/draytek/",""],["CVE-2020-8468","Trend Micro","Apex One, OfficeScan and Worry-Free Business Security Agents","Trend Micro Multiple Products Content Validation Escape Vulnerability","2021-11-03","2022-05-03",0,["CWE-74"],"/kev/2021/#cve-2020-8468","/vendors/trend-micro/",""],["CVE-2020-8467","Trend Micro","Apex One and OfficeScan","Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2020-8467","/vendors/trend-micro/",""],["CVE-2020-8260","Ivanti","Pulse Connect Secure","Ivanti Pulse Connect Secure Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-434"],"/kev/2021/#cve-2020-8260","/vendors/ivanti/","/products/ivanti-pulse-connect-secure/"],["CVE-2020-8243","Ivanti","Pulse Connect Secure","Ivanti Pulse Connect Secure Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-94"],"/kev/2021/#cve-2020-8243","/vendors/ivanti/","/products/ivanti-pulse-connect-secure/"],["CVE-2020-8196","Citrix","Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","2021-11-03","2022-05-03",0,["CWE-284"],"/kev/2021/#cve-2020-8196","/vendors/citrix/","/products/citrix-application-delivery-controller-adc-gateway-and-sd-wan-wanop-appliance/"],["CVE-2020-8195","Citrix","Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","2021-11-03","2022-05-03",0,["CWE-20"],"/kev/2021/#cve-2020-8195","/vendors/citrix/","/products/citrix-application-delivery-controller-adc-gateway-and-sd-wan-wanop-appliance/"],["CVE-2020-8193","Citrix","Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","2021-11-03","2022-05-03",0,["CWE-284"],"/kev/2021/#cve-2020-8193","/vendors/citrix/","/products/citrix-application-delivery-controller-adc-gateway-and-sd-wan-wanop-appliance/"],["CVE-2020-7961","Liferay","Liferay Portal","Liferay Portal Deserialization of Untrusted Data Vulnerability","2021-11-03","2022-05-03",0,["CWE-502"],"/kev/2021/#cve-2020-7961","",""],["CVE-2020-6820","Mozilla","Firefox and Thunderbird","Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","2021-11-03","2022-05-03",0,["CWE-362"],"/kev/2021/#cve-2020-6820","/vendors/mozilla/","/products/mozilla-firefox-and-thunderbird/"],["CVE-2020-6819","Mozilla","Firefox and Thunderbird","Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","2021-11-03","2022-05-03",0,["CWE-362","CWE-416"],"/kev/2021/#cve-2020-6819","/vendors/mozilla/","/products/mozilla-firefox-and-thunderbird/"],["CVE-2020-6418","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2021-11-03","2022-05-03",0,["CWE-843"],"/kev/2021/#cve-2020-6418","/vendors/google/","/products/google-chromium-v8/"],["CVE-2020-6287","SAP","NetWeaver","SAP NetWeaver Missing Authentication for Critical Function Vulnerability","2021-11-03","2022-05-03",0,["CWE-306"],"/kev/2021/#cve-2020-6287","/vendors/sap/","/products/sap-netweaver/"],["CVE-2020-6207","SAP","Solution Manager","SAP Solution Manager Missing Authentication for Critical Function Vulnerability","2021-11-03","2022-05-03",0,["CWE-306"],"/kev/2021/#cve-2020-6207","/vendors/sap/",""],["CVE-2020-5902","F5","BIG-IP","F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,["CWE-22"],"/kev/2021/#cve-2020-5902","/vendors/f5/","/products/f5-big-ip/"],["CVE-2020-5849","Unraid","Unraid","Unraid Authentication Bypass Vulnerability","2021-11-03","2022-05-03",0,["CWE-287","CWE-697"],"/kev/2021/#cve-2020-5849","",""],["CVE-2020-5847","Unraid","Unraid","Unraid Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2020-5847","",""],["CVE-2020-5735","Amcrest","Cameras and Network Video Recorder (NVR)","Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability","2021-11-03","2022-05-03",0,["CWE-121"],"/kev/2021/#cve-2020-5735","",""],["CVE-2020-4430","IBM","Data Risk Manager","IBM Data Risk Manager Directory Traversal Vulnerability","2021-11-03","2022-05-03",0,["CWE-22"],"/kev/2021/#cve-2020-4430","/vendors/ibm/","/products/ibm-data-risk-manager/"],["CVE-2020-4428","IBM","Data Risk Manager","IBM Data Risk Manager Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-78"],"/kev/2021/#cve-2020-4428","/vendors/ibm/","/products/ibm-data-risk-manager/"],["CVE-2020-4427","IBM","Data Risk Manager","IBM Data Risk Manager Security Bypass Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2020-4427","/vendors/ibm/","/products/ibm-data-risk-manager/"],["CVE-2020-4006","VMware","Multiple Products","Multiple VMware Products Command Injection Vulnerability","2021-11-03","2022-05-03",0,["CWE-78"],"/kev/2021/#cve-2020-4006","/vendors/vmware/","/products/vmware-multiple-products/"],["CVE-2020-3992","VMware","ESXi","VMware ESXi OpenSLP Use-After-Free Vulnerability","2021-11-03","2022-05-03",1,["CWE-416"],"/kev/2021/#cve-2020-3992","/vendors/vmware/","/products/vmware-esxi/"],["CVE-2020-3952","VMware","vCenter Server","VMware vCenter Server Information Disclosure Vulnerability","2021-11-03","2022-05-03",0,["CWE-306"],"/kev/2021/#cve-2020-3952","/vendors/vmware/","/products/vmware-vcenter-server/"],["CVE-2020-3950","VMware","Multiple Products","VMware Multiple Products Privilege Escalation Vulnerability","2021-11-03","2022-05-03",0,["CWE-269"],"/kev/2021/#cve-2020-3950","/vendors/vmware/","/products/vmware-multiple-products/"],["CVE-2020-3580","Cisco","Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability","2021-11-03","2022-05-03",1,["CWE-79"],"/kev/2021/#cve-2020-3580","/vendors/cisco/","/products/cisco-adaptive-security-appliance-asa-and-firepower-threat-defense-ftd/"],["CVE-2020-3569","Cisco","IOS XR","Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","2021-11-03","2022-05-03",0,["CWE-400"],"/kev/2021/#cve-2020-3569","/vendors/cisco/","/products/cisco-ios-xr/"],["CVE-2020-3566","Cisco","IOS XR","Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","2021-11-03","2022-05-03",0,["CWE-400"],"/kev/2021/#cve-2020-3566","/vendors/cisco/","/products/cisco-ios-xr/"],["CVE-2020-3452","Cisco","Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","Cisco ASA and FTD Read-Only Path Traversal Vulnerability","2021-11-03","2022-05-03",0,["CWE-20"],"/kev/2021/#cve-2020-3452","/vendors/cisco/","/products/cisco-adaptive-security-appliance-asa-and-firepower-threat-defense-ftd/"],["CVE-2020-3161","Cisco","Cisco IP Phones","Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability","2021-11-03","2022-05-03",0,["CWE-20"],"/kev/2021/#cve-2020-3161","/vendors/cisco/",""],["CVE-2020-3118","Cisco","IOS XR","Cisco IOS XR Software Discovery Protocol Format String Vulnerability","2021-11-03","2022-05-03",0,["CWE-134"],"/kev/2021/#cve-2020-3118","/vendors/cisco/","/products/cisco-ios-xr/"],["CVE-2020-29583","Zyxel","Multiple Products","Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability","2021-11-03","2022-05-03",0,["CWE-522"],"/kev/2021/#cve-2020-29583","/vendors/zyxel/",""],["CVE-2020-29557","D-Link","DIR-825 R1 Devices","D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability","2021-11-03","2022-05-03",0,["CWE-119"],"/kev/2021/#cve-2020-29557","/vendors/d-link/",""],["CVE-2020-27950","Apple","Multiple Products","Apple Multiple Products Memory Initialization Vulnerability","2021-11-03","2022-05-03",0,["CWE-665"],"/kev/2021/#cve-2020-27950","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2020-27932","Apple","Multiple Products","Apple Multiple Products Type Confusion Vulnerability","2021-11-03","2022-05-03",0,["CWE-843"],"/kev/2021/#cve-2020-27932","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2020-27930","Apple","Multiple Products","Apple Multiple Products Memory Corruption Vulnerability","2021-11-03","2022-05-03",0,["CWE-787"],"/kev/2021/#cve-2020-27930","/vendors/apple/","/products/apple-multiple-products/"],["CVE-2020-26919","NETGEAR","JGS516PE Devices","Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2020-26919","/vendors/netgear/",""],["CVE-2020-2555","Oracle","Multiple Products","Oracle Multiple Products Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-502"],"/kev/2021/#cve-2020-2555","/vendors/oracle/",""],["CVE-2020-25506","D-Link","DNS-320 Device","D-Link DNS-320 Device Command Injection Vulnerability","2021-11-03","2022-05-03",0,["CWE-78"],"/kev/2021/#cve-2020-25506","/vendors/d-link/",""],["CVE-2020-25213","WordPress","File Manager Plugin","WordPress File Manager Plugin Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-434"],"/kev/2021/#cve-2020-25213","/vendors/wordpress/",""],["CVE-2020-24557","Trend Micro","Apex One, OfficeScan, and Worry-Free Business Security","Trend Micro Multiple Products Improper Access Control Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2020-24557","/vendors/trend-micro/",""],["CVE-2020-17530","Apache","Struts","Apache Struts Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-917"],"/kev/2021/#cve-2020-17530","/vendors/apache/","/products/apache-struts/"],["CVE-2020-17496","vBulletin","vBulletin","vBulletin PHP Module Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-74"],"/kev/2021/#cve-2020-17496","",""],["CVE-2020-17144","Microsoft","Exchange Server","Microsoft Exchange Server Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-502"],"/kev/2021/#cve-2020-17144","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2020-17087","Microsoft","Windows","Microsoft Windows Kernel Privilege Escalation Vulnerability","2021-11-03","2022-05-03",0,["CWE-131"],"/kev/2021/#cve-2020-17087","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2020-16846","SaltStack","Salt","SaltStack Salt Shell Injection Vulnerability","2021-11-03","2022-05-03",0,["CWE-78"],"/kev/2021/#cve-2020-16846","","/products/saltstack-salt/"],["CVE-2020-16017","Google","Chrome","Google Chrome Use-After-Free Vulnerability","2021-11-03","2022-05-03",0,["CWE-416"],"/kev/2021/#cve-2020-16017","/vendors/google/",""],["CVE-2020-16013","Google","Chromium V8","Google Chromium V8 Incorrect Implementation Vulnerabililty","2021-11-03","2022-05-03",0,["CWE-787"],"/kev/2021/#cve-2020-16013","/vendors/google/","/products/google-chromium-v8/"],["CVE-2020-16010","Google","Chrome for Android UI","Google Chrome for Android UI Heap Buffer Overflow Vulnerability","2021-11-03","2022-05-03",0,["CWE-787"],"/kev/2021/#cve-2020-16010","/vendors/google/",""],["CVE-2020-16009","Google","Chromium V8","Google Chromium V8 Type Confusion Vulnerability","2021-11-03","2022-05-03",0,["CWE-787","CWE-843"],"/kev/2021/#cve-2020-16009","/vendors/google/","/products/google-chromium-v8/"],["CVE-2020-15999","Google","Chrome FreeType","Google Chrome FreeType Heap Buffer Overflow Vulnerability","2021-11-03","2021-11-17",0,["CWE-787"],"/kev/2021/#cve-2020-15999","/vendors/google/",""],["CVE-2020-15505","Ivanti","MobileIron Multiple Products","Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-706"],"/kev/2021/#cve-2020-15505","/vendors/ivanti/",""],["CVE-2020-14883","Oracle","WebLogic Server","Oracle WebLogic Server Unspecified Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2020-14883","/vendors/oracle/","/products/oracle-weblogic-server/"],["CVE-2020-14882","Oracle","WebLogic Server","Oracle WebLogic Server Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2020-14882","/vendors/oracle/","/products/oracle-weblogic-server/"],["CVE-2020-14871","Oracle","Solaris and Zettabyte File System (ZFS)","Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability","2021-11-03","2022-05-03",0,["CWE-787"],"/kev/2021/#cve-2020-14871","/vendors/oracle/",""],["CVE-2020-14750","Oracle","WebLogic Server","Oracle WebLogic Server Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2020-14750","/vendors/oracle/","/products/oracle-weblogic-server/"],["CVE-2020-1472","Microsoft","Netlogon","Microsoft Netlogon Privilege Escalation Vulnerability","2021-11-03","2022-05-03",1,["CWE-330"],"/kev/2021/#cve-2020-1472","/vendors/microsoft/",""],["CVE-2020-1464","Microsoft","Windows","Microsoft Windows Spoofing Vulnerability","2021-11-03","2022-05-03",0,["CWE-347"],"/kev/2021/#cve-2020-1464","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2020-1380","Microsoft","Internet Explorer","Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","2021-11-03","2022-05-03",0,["CWE-787"],"/kev/2021/#cve-2020-1380","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2020-1350","Microsoft","Windows","Microsoft Windows DNS Server Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2020-1350","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2020-12812","Fortinet","FortiOS","Fortinet FortiOS SSL VPN Improper Authentication Vulnerability","2021-11-03","2022-05-03",1,["CWE-178","CWE-287"],"/kev/2021/#cve-2020-12812","/vendors/fortinet/","/products/fortinet-fortios/"],["CVE-2020-12271","Sophos","SFOS","Sophos SFOS SQL Injection Vulnerability","2021-11-03","2022-05-03",1,["CWE-89"],"/kev/2021/#cve-2020-12271","/vendors/sophos/",""],["CVE-2020-11738","WordPress","Snap Creek Duplicator Plugin","WordPress Snap Creek Duplicator Plugin File Download Vulnerability","2021-11-03","2022-05-03",0,["CWE-22"],"/kev/2021/#cve-2020-11738","/vendors/wordpress/",""],["CVE-2020-11652","SaltStack","Salt","SaltStack Salt Path Traversal Vulnerability","2021-11-03","2022-05-03",0,["CWE-22"],"/kev/2021/#cve-2020-11652","","/products/saltstack-salt/"],["CVE-2020-11651","SaltStack","Salt","SaltStack Salt Authentication Bypass Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2020-11651","","/products/saltstack-salt/"],["CVE-2020-1147","Microsoft",".NET Framework, SharePoint, Visual Studio","Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2020-1147","/vendors/microsoft/",""],["CVE-2020-10987","Tenda","AC1900 Router AC15 Model","Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-78"],"/kev/2021/#cve-2020-10987","",""],["CVE-2020-1054","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2021-11-03","2022-05-03",0,["CWE-787"],"/kev/2021/#cve-2020-1054","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2020-1040","Microsoft","Hyper-V RemoteFX","Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-20"],"/kev/2021/#cve-2020-1040","/vendors/microsoft/",""],["CVE-2020-10221","rConfig","rConfig","rConfig OS Command Injection Vulnerability","2021-11-03","2022-05-03",0,["CWE-78"],"/kev/2021/#cve-2020-10221","",""],["CVE-2020-1020","Microsoft","Windows","Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-787"],"/kev/2021/#cve-2020-1020","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2020-10199","Sonatype","Nexus Repository","Sonatype Nexus Repository Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-917"],"/kev/2021/#cve-2020-10199","",""],["CVE-2020-10189","Zoho","ManageEngine","Zoho ManageEngine Desktop Central File Upload Vulnerability","2021-11-03","2022-05-03",0,["CWE-502"],"/kev/2021/#cve-2020-10189","/vendors/zoho/","/products/zoho-manageengine/"],["CVE-2020-10181","Sumavision","Enhanced Multimedia Router (EMR)","Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability","2021-11-03","2022-05-03",0,["CWE-352"],"/kev/2021/#cve-2020-10181","",""],["CVE-2020-10148","SolarWinds","Orion","SolarWinds Orion Authentication Bypass Vulnerability","2021-11-03","2022-05-03",0,["CWE-288"],"/kev/2021/#cve-2020-10148","/vendors/solarwinds/",""],["CVE-2020-0986","Microsoft","Windows","Microsoft Windows Kernel Privilege Escalation Vulnerability","2021-11-03","2022-05-03",0,["CWE-787"],"/kev/2021/#cve-2020-0986","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2020-0968","Microsoft","Internet Explorer","Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","2021-11-03","2022-05-03",1,["CWE-787"],"/kev/2021/#cve-2020-0968","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2020-0938","Microsoft","Windows","Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-787"],"/kev/2021/#cve-2020-0938","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2020-0878","Microsoft","Edge and Internet Explorer","Microsoft Edge and Internet Explorer Memory Corruption Vulnerability","2021-11-03","2022-05-03",1,["CWE-787"],"/kev/2021/#cve-2020-0878","/vendors/microsoft/",""],["CVE-2020-0688","Microsoft","Exchange Server","Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,["CWE-287"],"/kev/2021/#cve-2020-0688","/vendors/microsoft/","/products/microsoft-exchange-server/"],["CVE-2020-0683","Microsoft","Windows","Microsoft Windows Installer Privilege Escalation Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2020-0683","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2020-0674","Microsoft","Internet Explorer","Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","2021-11-03","2022-05-03",0,["CWE-416"],"/kev/2021/#cve-2020-0674","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2020-0646","Microsoft",".NET Framework","Microsoft .NET Framework Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-91"],"/kev/2021/#cve-2020-0646","/vendors/microsoft/","/products/microsoft-net-framework/"],["CVE-2020-0601","Microsoft","Windows","Microsoft Windows CryptoAPI Spoofing Vulnerability","2021-11-03","2022-05-03",0,["CWE-295"],"/kev/2021/#cve-2020-0601","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2020-0069","MediaTek","Multiple Chipsets","Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability","2021-11-03","2022-05-03",0,["CWE-787"],"/kev/2021/#cve-2020-0069","",""],["CVE-2020-0041","Android","Android Kernel","Android Kernel Out-of-Bounds Write Vulnerability","2021-11-03","2022-05-03",0,["CWE-20"],"/kev/2021/#cve-2020-0041","/vendors/android/",""],["CVE-2019-9978","WordPress","Social Warfare Plugin","WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability","2021-11-03","2022-05-03",0,["CWE-79"],"/kev/2021/#cve-2019-9978","/vendors/wordpress/",""],["CVE-2019-9082","ThinkPHP","ThinkPHP","ThinkPHP Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-306","CWE-94"],"/kev/2021/#cve-2019-9082","",""],["CVE-2019-8394","Zoho","ManageEngine","Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability","2021-11-03","2022-05-03",0,["CWE-434"],"/kev/2021/#cve-2019-8394","/vendors/zoho/","/products/zoho-manageengine/"],["CVE-2019-7481","SonicWall","SMA100","SonicWall SMA100 SQL Injection Vulnerability","2021-11-03","2022-05-03",1,["CWE-89"],"/kev/2021/#cve-2019-7481","/vendors/sonicwall/",""],["CVE-2019-6223","Apple","iOS and macOS","Apple iOS and macOS Group Facetime Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2019-6223","/vendors/apple/","/products/apple-ios-and-macos/"],["CVE-2019-5591","Fortinet","FortiOS","Fortinet FortiOS Default Configuration Vulnerability","2021-11-03","2022-05-03",1,["CWE-306"],"/kev/2021/#cve-2019-5591","/vendors/fortinet/","/products/fortinet-fortios/"],["CVE-2019-5544","VMware","VMware ESXi and Horizon DaaS","VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability","2021-11-03","2022-05-03",1,["CWE-787"],"/kev/2021/#cve-2019-5544","/vendors/vmware/",""],["CVE-2019-4716","IBM","Planning Analytics","IBM Planning Analytics Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-94"],"/kev/2021/#cve-2019-4716","/vendors/ibm/",""],["CVE-2019-3398","Atlassian","Confluence Server and Data Center","Atlassian Confluence Server and Data Center Path Traversal Vulnerability","2021-11-03","2022-05-03",0,["CWE-22"],"/kev/2021/#cve-2019-3398","/vendors/atlassian/",""],["CVE-2019-3396","Atlassian","Confluence Server and Data Server","Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability","2021-11-03","2022-05-03",1,["CWE-22"],"/kev/2021/#cve-2019-3396","/vendors/atlassian/",""],["CVE-2019-2215","Android","Android Kernel","Android Kernel Use-After-Free Vulnerability","2021-11-03","2022-05-03",0,["CWE-416"],"/kev/2021/#cve-2019-2215","/vendors/android/",""],["CVE-2019-20085","TVT","NVMS-1000","TVT NVMS-1000 Directory Traversal Vulnerability","2021-11-03","2022-05-03",0,["CWE-22"],"/kev/2021/#cve-2019-20085","",""],["CVE-2019-19781","Citrix","Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability","2021-11-03","2022-05-03",1,["CWE-22"],"/kev/2021/#cve-2019-19781","/vendors/citrix/","/products/citrix-application-delivery-controller-adc-gateway-and-sd-wan-wanop-appliance/"],["CVE-2019-19356","Netis","WF2419 Devices","Netis WF2419 Devices Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-78"],"/kev/2021/#cve-2019-19356","",""],["CVE-2019-18988","TeamViewer","Desktop","TeamViewer Desktop Bypass Remote Login Vulnerability","2021-11-03","2022-05-03",0,["CWE-521"],"/kev/2021/#cve-2019-18988","",""],["CVE-2019-18935","Progress","Telerik UI for ASP.NET AJAX","Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability","2021-11-03","2022-05-03",1,["CWE-502"],"/kev/2021/#cve-2019-18935","/vendors/progress/",""],["CVE-2019-18187","Trend Micro","OfficeScan","Trend Micro OfficeScan Directory Traversal Vulnerability","2021-11-03","2022-05-03",0,["CWE-22"],"/kev/2021/#cve-2019-18187","/vendors/trend-micro/",""],["CVE-2019-17558","Apache","Solr","Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-74"],"/kev/2021/#cve-2019-17558","/vendors/apache/",""],["CVE-2019-17026","Mozilla","Firefox and Thunderbird","Mozilla Firefox And Thunderbird Type Confusion Vulnerability","2021-11-03","2022-05-03",0,["CWE-843"],"/kev/2021/#cve-2019-17026","/vendors/mozilla/","/products/mozilla-firefox-and-thunderbird/"],["CVE-2019-16759","vBulletin","vBulletin","vBulletin PHP Module Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-94"],"/kev/2021/#cve-2019-16759","",""],["CVE-2019-1653","Cisco","Small Business RV320 and RV325 Routers","Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability","2021-11-03","2022-05-03",0,["CWE-284"],"/kev/2021/#cve-2019-1653","/vendors/cisco/",""],["CVE-2019-16256","SIMalliance","Toolbox Browser","SIMalliance Toolbox Browser Command Injection Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2019-16256","",""],["CVE-2019-15949","Nagios","Nagios XI","Nagios XI Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-78"],"/kev/2021/#cve-2019-15949","","/products/nagios-nagios-xi/"],["CVE-2019-15752","Docker","Desktop Community Edition","Docker Desktop Community Edition Privilege Escalation Vulnerability","2021-11-03","2022-05-03",0,["CWE-732"],"/kev/2021/#cve-2019-15752","",""],["CVE-2019-1429","Microsoft","Internet Explorer","Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","2021-11-03","2022-05-03",0,["CWE-416","CWE-787"],"/kev/2021/#cve-2019-1429","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2019-1367","Microsoft","Internet Explorer","Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","2021-11-03","2022-05-03",1,["CWE-787"],"/kev/2021/#cve-2019-1367","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2019-13608","Citrix","StoreFront Server","Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability","2021-11-03","2022-05-03",1,["CWE-611"],"/kev/2021/#cve-2019-13608","/vendors/citrix/",""],["CVE-2019-1215","Microsoft","Windows","Microsoft Windows Privilege Escalation Vulnerability","2021-11-03","2022-05-03",1,[],"/kev/2021/#cve-2019-1215","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2019-1214","Microsoft","Windows","Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2019-1214","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2019-11634","Citrix","Workspace Application and Receiver for Windows","Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,[],"/kev/2021/#cve-2019-11634","/vendors/citrix/",""],["CVE-2019-11580","Atlassian","Crowd and Crowd Data Center","Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,[],"/kev/2021/#cve-2019-11580","/vendors/atlassian/",""],["CVE-2019-11539","Ivanti","Pulse Connect Secure and Pulse Policy Secure","Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability","2021-11-03","2022-05-03",1,["CWE-78"],"/kev/2021/#cve-2019-11539","/vendors/ivanti/",""],["CVE-2019-11510","Ivanti","Pulse Connect Secure","Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability","2021-11-03","2022-05-03",1,["CWE-22"],"/kev/2021/#cve-2019-11510","/vendors/ivanti/","/products/ivanti-pulse-connect-secure/"],["CVE-2019-0863","Microsoft","Windows","Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2019-0863","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2019-0859","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2021-11-03","2022-05-03",1,[],"/kev/2021/#cve-2019-0859","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2019-0808","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2019-0808","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2019-0803","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2021-11-03","2022-05-03",1,[],"/kev/2021/#cve-2019-0803","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2019-0797","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2019-0797","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2019-0708","Microsoft","Remote Desktop Services","Microsoft Remote Desktop Services Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,["CWE-416"],"/kev/2021/#cve-2019-0708","/vendors/microsoft/",""],["CVE-2019-0604","Microsoft","SharePoint","Microsoft SharePoint Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,["CWE-20"],"/kev/2021/#cve-2019-0604","/vendors/microsoft/","/products/microsoft-sharepoint/"],["CVE-2019-0541","Microsoft","MSHTML","Microsoft MSHTML Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-77"],"/kev/2021/#cve-2019-0541","/vendors/microsoft/",""],["CVE-2019-0211","Apache","HTTP Server","Apache HTTP Server Privilege Escalation Vulnerability","2021-11-03","2022-05-03",0,["CWE-416"],"/kev/2021/#cve-2019-0211","/vendors/apache/","/products/apache-http-server/"],["CVE-2018-8653","Microsoft","Internet Explorer","Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","2021-11-03","2022-05-03",0,["CWE-787"],"/kev/2021/#cve-2018-8653","/vendors/microsoft/","/products/microsoft-internet-explorer/"],["CVE-2018-7600","Drupal","Drupal Core","Drupal Core Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,["CWE-20"],"/kev/2021/#cve-2018-7600","/vendors/drupal/",""],["CVE-2018-6789","Exim","Exim","Exim Buffer Overflow Vulnerability","2021-11-03","2022-05-03",1,["CWE-119"],"/kev/2021/#cve-2018-6789","/vendors/exim/","/products/exim-exim/"],["CVE-2018-4939","Adobe","ColdFusion","Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","2021-11-03","2022-05-03",0,["CWE-502"],"/kev/2021/#cve-2018-4939","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2018-4878","Adobe","Flash Player","Adobe Flash Player Use-After-Free Vulnerability","2021-11-03","2022-05-03",1,["CWE-416"],"/kev/2021/#cve-2018-4878","/vendors/adobe/","/products/adobe-flash-player/"],["CVE-2018-2380","SAP","Customer Relationship Management (CRM)","SAP Customer Relationship Management (CRM) Path Traversal Vulnerability","2021-11-03","2022-05-03",1,["CWE-22"],"/kev/2021/#cve-2018-2380","/vendors/sap/",""],["CVE-2018-20062","ThinkPHP","noneCms","ThinkPHP \"noneCms\" Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-20"],"/kev/2021/#cve-2018-20062","",""],["CVE-2018-18325","DotNetNuke (DNN)","DotNetNuke (DNN)","DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","2021-11-03","2022-05-03",0,["CWE-326"],"/kev/2021/#cve-2018-18325","","/products/dotnetnuke-dnn-dotnetnuke-dnn/"],["CVE-2018-15961","Adobe","ColdFusion","Adobe ColdFusion Unrestricted File Upload Vulnerability","2021-11-03","2022-05-03",0,["CWE-434"],"/kev/2021/#cve-2018-15961","/vendors/adobe/","/products/adobe-coldfusion/"],["CVE-2018-15811","DotNetNuke (DNN)","DotNetNuke (DNN)","DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","2021-11-03","2022-05-03",0,["CWE-326"],"/kev/2021/#cve-2018-15811","","/products/dotnetnuke-dnn-dotnetnuke-dnn/"],["CVE-2018-14558","Tenda","AC7, AC9, and AC10 Routers","Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability","2021-11-03","2022-05-03",0,["CWE-78"],"/kev/2021/#cve-2018-14558","",""],["CVE-2018-13379","Fortinet","FortiOS","Fortinet FortiOS SSL VPN Path Traversal Vulnerability","2021-11-03","2022-05-03",1,["CWE-22"],"/kev/2021/#cve-2018-13379","/vendors/fortinet/","/products/fortinet-fortios/"],["CVE-2018-11776","Apache","Struts","Apache Struts Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-20"],"/kev/2021/#cve-2018-11776","/vendors/apache/","/products/apache-struts/"],["CVE-2018-0802","Microsoft","Office","Microsoft Office Memory Corruption Vulnerability","2021-11-03","2022-05-03",1,["CWE-787"],"/kev/2021/#cve-2018-0802","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2018-0798","Microsoft","Office","Microsoft Office Memory Corruption Vulnerability","2021-11-03","2022-05-03",0,["CWE-787"],"/kev/2021/#cve-2018-0798","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2018-0296","Cisco","Adaptive Security Appliance (ASA)","Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability","2021-11-03","2022-05-03",0,["CWE-20"],"/kev/2021/#cve-2018-0296","/vendors/cisco/","/products/cisco-adaptive-security-appliance-asa/"],["CVE-2018-0171","Cisco","IOS and IOS XE","Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-20"],"/kev/2021/#cve-2018-0171","/vendors/cisco/","/products/cisco-ios-and-ios-xe/"],["CVE-2017-9822","DotNetNuke (DNN)","DotNetNuke (DNN)","DotNetNuke (DNN) Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,["CWE-20"],"/kev/2021/#cve-2017-9822","","/products/dotnetnuke-dnn-dotnetnuke-dnn/"],["CVE-2017-9805","Apache","Struts","Apache Struts Deserialization of Untrusted Data Vulnerability","2021-11-03","2022-05-03",0,["CWE-502"],"/kev/2021/#cve-2017-9805","/vendors/apache/","/products/apache-struts/"],["CVE-2017-9248","Progress","ASP.NET AJAX and Sitefinity","Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability","2021-11-03","2022-05-03",0,["CWE-522"],"/kev/2021/#cve-2017-9248","/vendors/progress/",""],["CVE-2017-8759","Microsoft",".NET Framework","Microsoft .NET Framework Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-20"],"/kev/2021/#cve-2017-8759","/vendors/microsoft/","/products/microsoft-net-framework/"],["CVE-2017-7269","Microsoft","Internet Information Services (IIS)","Microsoft Windows Server Buffer Overflow Vulnerability","2021-11-03","2022-05-03",0,["CWE-119"],"/kev/2021/#cve-2017-7269","/vendors/microsoft/",""],["CVE-2017-6327","Symantec","Symantec Messaging Gateway","Symantec Messaging Gateway Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-20"],"/kev/2021/#cve-2017-6327","",""],["CVE-2017-5638","Apache","Struts","Apache Struts Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,["CWE-20"],"/kev/2021/#cve-2017-5638","/vendors/apache/","/products/apache-struts/"],["CVE-2017-16651","Roundcube","Roundcube Webmail","Roundcube Webmail File Disclosure Vulnerability","2021-11-03","2022-05-03",0,["CWE-552"],"/kev/2021/#cve-2017-16651","/vendors/roundcube/","/products/roundcube-roundcube-webmail/"],["CVE-2017-11882","Microsoft","Office","Microsoft Office Memory Corruption Vulnerability","2021-11-03","2022-05-03",1,["CWE-119"],"/kev/2021/#cve-2017-11882","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2017-11774","Microsoft","Office","Microsoft Office Outlook Security Feature Bypass Vulnerability","2021-11-03","2022-05-03",0,["CWE-119"],"/kev/2021/#cve-2017-11774","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2017-0199","Microsoft","Office and WordPad","Microsoft Office and WordPad Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,[],"/kev/2021/#cve-2017-0199","/vendors/microsoft/",""],["CVE-2017-0143","Microsoft","Windows","Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,["CWE-20"],"/kev/2021/#cve-2017-0143","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2016-9563","SAP","NetWeaver","SAP NetWeaver XML External Entity (XXE) Vulnerability","2021-11-03","2022-05-03",0,["CWE-611"],"/kev/2021/#cve-2016-9563","/vendors/sap/","/products/sap-netweaver/"],["CVE-2016-7255","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2021-11-03","2022-05-03",1,["CWE-264"],"/kev/2021/#cve-2016-7255","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2016-4437","Apache","Shiro","Apache Shiro Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-284"],"/kev/2021/#cve-2016-4437","/vendors/apache/",""],["CVE-2016-3976","SAP","NetWeaver","SAP NetWeaver Directory Traversal Vulnerability","2021-11-03","2022-05-03",0,["CWE-22"],"/kev/2021/#cve-2016-3976","/vendors/sap/","/products/sap-netweaver/"],["CVE-2016-3718","ImageMagick","ImageMagick","ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","2021-11-03","2022-05-03",0,["CWE-20"],"/kev/2021/#cve-2016-3718","","/products/imagemagick-imagemagick/"],["CVE-2016-3715","ImageMagick","ImageMagick","ImageMagick Arbitrary File Deletion Vulnerability","2021-11-03","2022-05-03",0,["CWE-284"],"/kev/2021/#cve-2016-3715","","/products/imagemagick-imagemagick/"],["CVE-2016-3643","SolarWinds","Virtualization Manager","SolarWinds Virtualization Manager Privilege Escalation Vulnerability","2021-11-03","2022-05-03",0,["CWE-264"],"/kev/2021/#cve-2016-3643","/vendors/solarwinds/",""],["CVE-2016-3235","Microsoft","Office","Microsoft Office OLE DLL Side Loading Vulnerability","2021-11-03","2022-05-03",0,["CWE-264"],"/kev/2021/#cve-2016-3235","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2016-0185","Microsoft","Windows","Microsoft Windows Media Center Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,["CWE-20"],"/kev/2021/#cve-2016-0185","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2016-0167","Microsoft","Win32k","Microsoft Win32k Privilege Escalation Vulnerability","2021-11-03","2022-05-03",1,["CWE-264"],"/kev/2021/#cve-2016-0167","/vendors/microsoft/","/products/microsoft-win32k/"],["CVE-2015-4852","Oracle","WebLogic Server","Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability","2021-11-03","2022-05-03",0,["CWE-502"],"/kev/2021/#cve-2015-4852","/vendors/oracle/","/products/oracle-weblogic-server/"],["CVE-2015-1641","Microsoft","Office","Microsoft Office Memory Corruption Vulnerability","2021-11-03","2022-05-03",0,["CWE-399"],"/kev/2021/#cve-2015-1641","/vendors/microsoft/","/products/microsoft-office/"],["CVE-2014-1812","Microsoft","Windows","Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability","2021-11-03","2022-05-03",1,["CWE-255"],"/kev/2021/#cve-2014-1812","/vendors/microsoft/","/products/microsoft-windows/"],["CVE-2012-3152","Oracle","Fusion Middleware","Oracle Fusion Middleware Unspecified Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2012-3152","/vendors/oracle/","/products/oracle-fusion-middleware/"],["CVE-2012-0158","Microsoft","MSCOMCTL.OCX","Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability","2021-11-03","2022-05-03",1,["CWE-94"],"/kev/2021/#cve-2012-0158","/vendors/microsoft/",""],["CVE-2010-5326","SAP","NetWeaver","SAP NetWeaver Remote Code Execution Vulnerability","2021-11-03","2022-05-03",0,[],"/kev/2021/#cve-2010-5326","/vendors/sap/","/products/sap-netweaver/"]]}