KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

KEV / Archive / 2022

KEV additions in 2022

Every vulnerability CISA added to the Known Exploited Vulnerabilities catalog in 2022, with monthly counts, vendors and weaknesses.

Catalog
2026.09.23
Entries
555
Range
2022-01-10 to 2022-12-29

Answer CISA added 555 vulnerabilities to the KEV catalog in 2022. The busiest month was March 2022, with 226. 132 were flagged as used by ransomware (23.8%), and the most-listed vendor was Microsoft with 165.

Added
555in 2022
Ransomware: known
23.8%132 entries
Vendors
98distinct
Median days to due
21dateAdded to dueDate
Share of catalog
32.2%of 1,721

MAdditions per month

KEV additions per month in 2022Monthly additions in 2022: Jan 22 40; Feb 22 32; Mar 22 226; Apr 22 45; May 22 83; Jun 22 48; Jul 22 3; Aug 22 23; Sep 22 24; Oct 22 12; Nov 22 10; Dec 22 9.0100200300Jan 22: 40 added40JanFeb 22: 32 added32FebMar 22: 226 added226MarApr 22: 45 added45AprMay 22: 83 added83MayJun 22: 48 added48JunJul 22: 3 added3JulAug 22: 23 added23AugSep 22: 24 added24SepOct 22: 12 added12OctNov 22: 10 added10NovDec 22: 9 added9Dec
Table view
KEV additions per month, 2022
MonthAdded
Jan 2240
Feb 2232
Mar 22226
Apr 2245
May 2283
Jun 2248
Jul 223
Aug 2223
Sep 2224
Oct 2212
Nov 2210
Dec 229

VTop vendors in 2022

Top vendors by KEV additions, 2022
VendorEntriesShare of year
Microsoft16529.7%
Adobe549.7%
Cisco509%
Apple264.7%
Oracle224%
Google213.8%
Apache132.3%
QNAP101.8%
D-Link101.8%
Linux81.4%

WTop weaknesses in 2022

Top CWEs by KEV additions, 2022
CWEEntriesShare of year
CWE-119 Memory buffer bounds error6411.5%
CWE-20 Improper input validation6010.8%
CWE-787 Out-of-bounds write356.3%
CWE-78 OS command injection325.8%
CWE-416 Use after free254.5%
CWE-264 Permissions and access controls (category)254.5%
CWE-94 Code injection234.1%
CWE-22 Path traversal224%

EAll 555 entries added in 2022

KEV entries added in 2022, newest first
CVEVendorProductVulnerabilityAddedDueRansomwareCWE
CVE-2018-5430TIBCOJasperReportsTIBCO JasperReports Server Information Disclosure VulnerabilityUnknownCWE-22
CVE-2018-18809TIBCOJasperReportsTIBCO JasperReports Library Directory Traversal VulnerabilityUnknownCWE-22
CVE-2022-42856AppleiOSApple iOS Type Confusion VulnerabilityUnknownCWE-843
CVE-2022-44698MicrosoftDefenderMicrosoft Defender SmartScreen Security Feature Bypass VulnerabilityKnownCWE-755
CVE-2022-42475FortinetFortiOSFortinet FortiOS Heap-Based Buffer Overflow VulnerabilityKnownCWE-197
CVE-2022-27518CitrixApplication Delivery Controller (ADC) and GatewayCitrix Application Delivery Controller (ADC) and Gateway Authentication Bypass VulnerabilityUnknownCWE-664
CVE-2022-26501VeeamBackup & ReplicationVeeam Backup & Replication Remote Code Execution VulnerabilityKnownCWE-306
CVE-2022-26500VeeamBackup & ReplicationVeeam Backup & Replication Remote Code Execution VulnerabilityKnownCWE-22
CVE-2022-4262GoogleChromium V8Google Chromium V8 Type Confusion VulnerabilityUnknownCWE-122, CWE-843
CVE-2022-4135GoogleChromium GPUGoogle Chromium GPU Heap Buffer Overflow VulnerabilityUnknownCWE-787
CVE-2021-35587OracleFusion MiddlewareOracle Fusion Middleware Unspecified VulnerabilityUnknownCWE-502, CWE-790
CVE-2022-41049MicrosoftWindowsMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass VulnerabilityUnknownCWE-274
CVE-2022-41128MicrosoftWindowsMicrosoft Windows Scripting Languages Remote Code Execution VulnerabilityUnknownCWE-787
CVE-2022-41125MicrosoftWindowsMicrosoft Windows CNG Key Isolation Service Privilege Escalation VulnerabilityUnknownCWE-787
CVE-2022-41091MicrosoftWindowsMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass VulnerabilityKnownCWE-863
CVE-2022-41073MicrosoftWindowsMicrosoft Windows Print Spooler Privilege Escalation VulnerabilityKnownCWE-787
CVE-2021-25370SamsungMobile DevicesSamsung Mobile Devices Memory Corruption VulnerabilityUnknownCWE-416
CVE-2021-25369SamsungMobile DevicesSamsung Mobile Devices Improper Access Control VulnerabilityUnknownCWE-200
CVE-2021-25337SamsungMobile DevicesSamsung Mobile Devices Improper Access Control VulnerabilityUnknownCWE-269
CVE-2022-3723GoogleChromium V8Google Chromium V8 Type Confusion VulnerabilityUnknownCWE-122, CWE-843
CVE-2022-42827AppleiOS and iPadOSApple iOS and iPadOS Out-of-Bounds Write VulnerabilityUnknownCWE-20, CWE-787
CVE-2020-3433CiscoAnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityKnownCWE-427
CVE-2020-3153CiscoAnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityKnownCWE-427
CVE-2018-19323GIGABYTEMultiple ProductsGIGABYTE Multiple Products Privilege Escalation VulnerabilityKnownnone listed
CVE-2018-19322GIGABYTEMultiple ProductsGIGABYTE Multiple Products Code Execution VulnerabilityKnownCWE-749
CVE-2018-19321GIGABYTEMultiple ProductsGIGABYTE Multiple Products Privilege Escalation VulnerabilityKnownnone listed
CVE-2018-19320GIGABYTEMultiple ProductsGIGABYTE Multiple Products Unspecified VulnerabilityKnownnone listed
CVE-2022-41352SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityKnownCWE-22
CVE-2021-3493LinuxKernelLinux Kernel Privilege Escalation VulnerabilityUnknownCWE-862
CVE-2022-41033MicrosoftWindows COM+ Event System ServiceMicrosoft Windows COM+ Event System Service Privilege Escalation VulnerabilityUnknownCWE-843
CVE-2022-40684FortinetMultiple ProductsFortinet Multiple Products Authentication Bypass VulnerabilityKnownCWE-288
CVE-2022-41082MicrosoftExchange ServerMicrosoft Exchange Server Remote Code Execution VulnerabilityKnownCWE-502
CVE-2022-41040MicrosoftExchange ServerMicrosoft Exchange Server Server-Side Request Forgery VulnerabilityKnownCWE-918
CVE-2022-36804AtlassianBitbucket Server and Data CenterAtlassian Bitbucket Server and Data Center Command Injection VulnerabilityUnknownCWE-78, CWE-88, CWE-158
CVE-2022-3236SophosFirewallSophos Firewall Code Injection VulnerabilityUnknownCWE-94
CVE-2022-35405ZohoManageEngineZoho ManageEngine Multiple Products Remote Code Execution VulnerabilityUnknownCWE-502
CVE-2022-40139Trend MicroApex One and Apex One as a ServiceTrend Micro Apex One and Apex One as a Service Improper Validation VulnerabilityUnknownCWE-353, CWE-641
CVE-2013-6282LinuxKernelLinux Kernel Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2013-2597Code AuroraACDB Audio DriverCode Aurora ACDB Audio Driver Stack-based Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2013-2596LinuxKernelLinux Kernel Integer Overflow VulnerabilityUnknownCWE-189
CVE-2013-2094LinuxKernelLinux Kernel Privilege Escalation VulnerabilityUnknownCWE-189
CVE-2010-2568MicrosoftWindowsMicrosoft Windows Remote Code Execution VulnerabilityUnknownCWE-20
CVE-2022-37969MicrosoftWindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityKnownCWE-20, CWE-787
CVE-2022-32917AppleiOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Remote Code Execution VulnerabilityUnknownCWE-20, CWE-787
CVE-2022-3075GoogleChromium MojoGoogle Chromium Mojo Insufficient Data Validation VulnerabilityUnknownCWE-20
CVE-2022-27593QNAPPhoto StationQNAP Photo Station Externally Controlled Reference VulnerabilityKnownCWE-610
CVE-2022-26258D-LinkDIR-820LD-Link DIR-820L Remote Code Execution VulnerabilityUnknownCWE-78
CVE-2020-9934AppleiOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Input Validation VulnerabilityUnknownnone listed
CVE-2018-7445MikroTikRouterOSMikroTik RouterOS Stack-Based Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2018-6530D-LinkMultiple RoutersD-Link Multiple Routers OS Command Injection VulnerabilityKnownCWE-78
CVE-2018-2628OracleWebLogic ServerOracle WebLogic Server Unspecified VulnerabilityUnknownCWE-502
CVE-2018-13374FortinetFortiOS and FortiADCFortinet FortiOS and FortiADC Improper Access Control VulnerabilityKnownCWE-732
CVE-2017-5521NETGEARMultiple DevicesNETGEAR Multiple Devices Exposure of Sensitive Information VulnerabilityUnknownCWE-200
CVE-2011-4723D-LinkDIR-300 RouterD-Link DIR-300 Router Cleartext Storage of a Password VulnerabilityUnknownCWE-310
CVE-2011-1823AndroidAndroid OSAndroid OS Privilege Escalation VulnerabilityUnknownCWE-189
CVE-2022-26352dotCMSdotCMSdotCMS Unrestricted Upload of File VulnerabilityKnownCWE-22, CWE-138
CVE-2022-24706ApacheCouchDBApache CouchDB Insecure Default Initialization of Resource VulnerabilityUnknownCWE-1188
CVE-2022-24112ApacheAPISIXApache APISIX Authentication Bypass VulnerabilityUnknownCWE-290
CVE-2022-22963VMware TanzuSpring CloudVMware Tanzu Spring Cloud Function Remote Code Execution VulnerabilityUnknownCWE-94
CVE-2022-2294WebRTCWebRTCWebRTC Heap Buffer Overflow VulnerabilityKnownCWE-122
CVE-2021-39226Grafana LabsGrafanaGrafana Authentication Bypass VulnerabilityUnknownCWE-287
CVE-2021-38406Delta ElectronicsDOPSoft 2Delta Electronics DOPSoft 2 Improper Input Validation VulnerabilityUnknownCWE-787
CVE-2021-31010AppleiOS, macOS, watchOSApple iOS, macOS, watchOS Sandbox Bypass VulnerabilityUnknownCWE-20, CWE-502
CVE-2020-36193PEARArchive_TarPEAR Archive_Tar Improper Link Resolution VulnerabilityUnknownCWE-22, CWE-59
CVE-2020-28949PEARArchive_TarPEAR Archive_Tar Deserialization of Untrusted Data VulnerabilityUnknownCWE-74
CVE-2022-0028Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Reflected Amplification Denial-of-Service VulnerabilityUnknownCWE-940
CVE-2022-32894AppleiOS and macOSApple iOS and macOS Out-of-Bounds Write VulnerabilityUnknownCWE-20, CWE-787
CVE-2022-32893AppleiOS and macOSApple iOS and macOS Out-of-Bounds Write VulnerabilityUnknownCWE-20, CWE-787
CVE-2022-2856GoogleChromium IntentsGoogle Chromium Intents Insufficient Input Validation VulnerabilityUnknownCWE-20
CVE-2022-26923MicrosoftActive DirectoryMicrosoft Active Directory Domain Services Privilege Escalation VulnerabilityUnknownCWE-295
CVE-2022-22536SAPMultiple ProductsSAP Multiple Products HTTP Request Smuggling VulnerabilityUnknownCWE-444
CVE-2022-21971MicrosoftWindowsMicrosoft Windows Runtime Remote Code Execution VulnerabilityUnknownCWE-824
CVE-2017-15944Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Remote Code Execution VulnerabilityUnknownnone listed
CVE-2022-37042SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass VulnerabilityKnownCWE-23
CVE-2022-27925SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityKnownCWE-22
CVE-2022-34713MicrosoftWindowsMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityUnknownnone listed
CVE-2022-30333RARLABUnRARRARLAB UnRAR Directory Traversal VulnerabilityKnownCWE-22, CWE-59
CVE-2022-27924SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Command Injection VulnerabilityKnownCWE-93
CVE-2022-26138AtlassianConfluenceAtlassian Questions For Confluence App Hard-coded Credentials VulnerabilityUnknownCWE-798
CVE-2022-22047MicrosoftWindowsMicrosoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation VulnerabilityUnknownCWE-426
CVE-2022-26925MicrosoftWindowsMicrosoft Windows LSA Spoofing VulnerabilityUnknownCWE-306
CVE-2022-29499MitelMiVoice ConnectMitel MiVoice Connect Data Validation VulnerabilityKnownCWE-20
CVE-2021-4034Red HatPolkitRed Hat Polkit Out-of-Bounds Read and Write VulnerabilityKnownCWE-787
CVE-2021-30983AppleiOS and iPadOSApple iOS and iPadOS Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2021-30533GoogleChromium PopupBlockerGoogle Chromium PopupBlocker Security Bypass VulnerabilityUnknownCWE-863
CVE-2020-9907AppleMultiple ProductsApple Multiple Products Memory Corruption VulnerabilityUnknownCWE-787
CVE-2020-3837AppleMultiple ProductsApple Multiple Products Memory Corruption VulnerabilityUnknownCWE-787
CVE-2019-8605AppleMultiple ProductsApple Multiple Products Use-After-Free VulnerabilityUnknownCWE-416
CVE-2018-4344AppleMultiple ProductsApple Multiple Products Memory Corruption VulnerabilityUnknownCWE-119
CVE-2022-30190MicrosoftWindowsMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityKnownCWE-610
CVE-2021-38163SAPNetWeaverSAP NetWeaver Unrestricted File Upload VulnerabilityUnknownCWE-23
CVE-2016-2388SAPNetWeaverSAP NetWeaver Information Disclosure VulnerabilityUnknownCWE-200
CVE-2016-2386SAPNetWeaverSAP NetWeaver SQL Injection VulnerabilityUnknownCWE-89
CVE-2019-7195QNAPPhoto StationQNAP Photo Station Path Traversal VulnerabilityKnownCWE-22
CVE-2019-7194QNAPPhoto StationQNAP Photo Station Path Traversal VulnerabilityKnownCWE-22
CVE-2019-7193QNAPQTSQNAP QTS Improper Input Validation VulnerabilityKnownCWE-20
CVE-2019-7192QNAPPhoto StationQNAP Photo Station Improper Access Control VulnerabilityKnownCWE-863
CVE-2019-5825GoogleChromium V8Google Chromium V8 Out-of-Bounds Write VulnerabilityUnknownCWE-787
CVE-2019-15271CiscoRV Series RoutersCisco RV Series Routers Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2018-6065GoogleChromium V8Google Chromium V8 Integer Overflow VulnerabilityUnknownCWE-190, CWE-787
CVE-2018-4990AdobeAcrobat and ReaderAdobe Acrobat and Reader Double Free VulnerabilityUnknownCWE-415
CVE-2018-17480GoogleChromium V8Google Chromium V8 Out-of-Bounds Write VulnerabilityUnknownCWE-787
CVE-2018-17463GoogleChromium V8Google Chromium V8 Remote Code Execution VulnerabilityUnknownnone listed
CVE-2017-6862NETGEARMultiple DevicesNETGEAR Multiple Devices Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2017-5070GoogleChromium V8Google Chromium V8 Type Confusion VulnerabilityUnknownCWE-843
CVE-2017-5030GoogleChromium V8Google Chromium V8 Memory Corruption VulnerabilityUnknownCWE-125
CVE-2016-5198GoogleChromium V8Google Chromium V8 Out-of-Bounds Memory VulnerabilityUnknownCWE-125, CWE-787
CVE-2016-1646GoogleChromium V8Google Chromium V8 Out-of-Bounds Read VulnerabilityUnknownCWE-119
CVE-2013-1331MicrosoftOfficeMicrosoft Office Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2012-5054AdobeFlash PlayerAdobe Flash Player Integer Overflow VulnerabilityUnknownCWE-189
CVE-2012-4969MicrosoftInternet ExplorerMicrosoft Internet Explorer Use-After-Free VulnerabilityUnknownnone listed
CVE-2012-1889MicrosoftXML Core ServicesMicrosoft XML Core Services Memory Corruption VulnerabilityUnknownCWE-119
CVE-2012-0767AdobeFlash PlayerAdobe Flash Player Cross-Site Scripting (XSS) VulnerabilityUnknownCWE-79
CVE-2012-0754AdobeFlash PlayerAdobe Flash Player Memory Corruption VulnerabilityUnknownCWE-787
CVE-2012-0151MicrosoftWindowsMicrosoft Windows Authenticode Signature Verification Remote Code Execution VulnerabilityUnknownCWE-20
CVE-2011-2462AdobeReader and AcrobatAdobe Reader and Acrobat Universal 3D Memory Corruption VulnerabilityUnknownCWE-787
CVE-2011-0609AdobeFlash PlayerAdobe Flash Player Unspecified VulnerabilityUnknownnone listed
CVE-2010-2883AdobeAcrobat and ReaderAdobe Acrobat and Reader Stack-Based Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2010-2572MicrosoftPowerPointMicrosoft PowerPoint Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2010-1297AdobeFlash PlayerAdobe Flash Player Memory Corruption VulnerabilityUnknownCWE-787
CVE-2009-4324AdobeAcrobat and ReaderAdobe Acrobat and Reader Use-After-Free VulnerabilityUnknownCWE-399
CVE-2009-3953AdobeAcrobat and ReaderAdobe Acrobat and Reader Universal 3D Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2009-1862AdobeAcrobat and Reader, Flash PlayerAdobe Acrobat and Reader, Flash Player Unspecified VulnerabilityUnknownCWE-94
CVE-2009-0563MicrosoftOfficeMicrosoft Office Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2009-0557MicrosoftOfficeMicrosoft Office Object Record Corruption VulnerabilityUnknownCWE-94
CVE-2008-0655AdobeAcrobat and ReaderAdobe Acrobat and Reader Unspecified VulnerabilityUnknownnone listed
CVE-2007-5659AdobeAcrobat and ReaderAdobe Acrobat and Reader Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2006-2492MicrosoftWordMicrosoft Word Malformed Object Pointer VulnerabilityUnknownCWE-120
CVE-2022-26134AtlassianConfluence Server/Data CenterAtlassian Confluence Server and Data Center Remote Code Execution VulnerabilityKnownCWE-917
CVE-2019-3010OracleSolarisOracle Solaris Privilege Escalation VulnerabilityUnknownnone listed
CVE-2016-7256MicrosoftWindowsMicrosoft Windows Open Type Font Remote Code Execution VulnerabilityUnknownCWE-284
CVE-2016-3393MicrosoftWindowsMicrosoft Windows Graphics Device Interface (GDI) Remote Code Execution VulnerabilityUnknownCWE-284
CVE-2016-1010AdobeFlash Player and AIRAdobe Flash Player and AIR Integer Overflow VulnerabilityUnknownCWE-190
CVE-2016-0984AdobeFlash Player and AIRAdobe Flash Player and AIR Use-After-Free VulnerabilityUnknownCWE-416
CVE-2016-0034MicrosoftSilverlightMicrosoft Silverlight Runtime Remote Code Execution VulnerabilityKnownCWE-20
CVE-2015-8651AdobeFlash PlayerAdobe Flash Player Integer Overflow VulnerabilityUnknownCWE-189
CVE-2015-6175MicrosoftWindowsMicrosoft Windows Kernel Privilege Escalation VulnerabilityUnknownCWE-264
CVE-2015-4495MozillaFirefoxMozilla Firefox Security Feature Bypass VulnerabilityUnknownCWE-200
CVE-2015-2425MicrosoftInternet ExplorerMicrosoft Internet Explorer Memory Corruption VulnerabilityUnknownCWE-119
CVE-2015-2360MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityUnknownCWE-119
CVE-2015-1769MicrosoftWindowsMicrosoft Windows Mount Manager Privilege Escalation VulnerabilityUnknownCWE-264
CVE-2015-1671MicrosoftWindowsMicrosoft Windows Remote Code Execution VulnerabilityUnknownCWE-19
CVE-2015-0310AdobeFlash PlayerAdobe Flash Player ASLR Bypass VulnerabilityUnknownCWE-264
CVE-2015-0071MicrosoftInternet ExplorerMicrosoft Internet Explorer ASLR Bypass VulnerabilityUnknownCWE-264
CVE-2015-0016MicrosoftWindowsMicrosoft Windows TS WebProxy Directory Traversal VulnerabilityUnknownCWE-22
CVE-2014-8439AdobeFlash PlayerAdobe Flash Player Dereferenced Pointer VulnerabilityUnknownCWE-119
CVE-2014-4148MicrosoftWindowsMicrosoft Windows Remote Code Execution VulnerabilityUnknownCWE-94
CVE-2014-4123MicrosoftInternet ExplorerMicrosoft Internet Explorer Privilege Escalation VulnerabilityUnknownCWE-264
CVE-2014-4077MicrosoftInput Method Editor (IME) JapaneseMicrosoft IME Japanese Privilege Escalation VulnerabilityUnknownCWE-264
CVE-2014-3153LinuxKernelLinux Kernel Privilege Escalation VulnerabilityUnknownCWE-269
CVE-2014-2817MicrosoftInternet ExplorerMicrosoft Internet Explorer Privilege Escalation VulnerabilityUnknownCWE-264
CVE-2014-0546AdobeReader and AcrobatAdobe Reader and Acrobat Sandbox Bypass VulnerabilityUnknownnone listed
CVE-2013-7331MicrosoftInternet ExplorerMicrosoft Internet Explorer Information Disclosure VulnerabilityUnknownCWE-200
CVE-2013-3993IBMInfoSphere BigInsightsIBM InfoSphere BigInsights Invalid Input VulnerabilityKnownCWE-264
CVE-2013-3896MicrosoftSilverlightMicrosoft Silverlight Information Disclosure VulnerabilityUnknownCWE-20
CVE-2013-2423OracleJava Runtime Environment (JRE)Oracle JRE Unspecified VulnerabilityUnknownnone listed
CVE-2013-0431OracleJava Runtime Environment (JRE)Oracle JRE Sandbox Bypass VulnerabilityKnownnone listed
CVE-2013-0422OracleJava Runtime Environment (JRE)Oracle JRE Remote Code Execution VulnerabilityKnownCWE-264
CVE-2013-0074MicrosoftSilverlightMicrosoft Silverlight Double Dereference VulnerabilityKnownnone listed
CVE-2012-1710OracleFusion MiddlewareOracle Fusion Middleware Unspecified VulnerabilityKnownnone listed
CVE-2010-1428Red HatJBossRed Hat JBoss Information Disclosure VulnerabilityKnownCWE-264
CVE-2010-0840OracleJava Runtime Environment (JRE)Oracle JRE Unspecified VulnerabilityUnknownnone listed
CVE-2010-0738Red HatJBossRed Hat JBoss Authentication Bypass VulnerabilityKnownCWE-264
CVE-2018-8611MicrosoftWindowsMicrosoft Windows Kernel Privilege Escalation VulnerabilityUnknownCWE-404
CVE-2018-19953QNAPNetwork Attached Storage (NAS)QNAP NAS File Station Cross-Site Scripting VulnerabilityKnownCWE-79, CWE-80
CVE-2018-19949QNAPNetwork Attached Storage (NAS)QNAP NAS File Station Command Injection VulnerabilityKnownCWE-20, CWE-77, CWE-78
CVE-2018-19943QNAPNetwork Attached Storage (NAS)QNAP NAS File Station Cross-Site Scripting VulnerabilityKnownCWE-79, CWE-80
CVE-2017-8543MicrosoftWindowsMicrosoft Windows Search Remote Code Execution VulnerabilityUnknownCWE-281
CVE-2017-8291ArtifexGhostscriptArtifex Ghostscript Type Confusion VulnerabilityUnknownCWE-704
CVE-2017-18362KaseyaVirtual System/Server Administrator (VSA)Kaseya VSA SQL Injection VulnerabilityKnownCWE-89
CVE-2017-0210MicrosoftInternet ExplorerMicrosoft Internet Explorer Privilege Escalation VulnerabilityUnknownnone listed
CVE-2017-0149MicrosoftInternet ExplorerMicrosoft Internet Explorer Memory Corruption VulnerabilityUnknownCWE-119
CVE-2017-0147MicrosoftSMBv1 serverMicrosoft Windows SMBv1 Information Disclosure VulnerabilityKnownCWE-200
CVE-2017-0022MicrosoftXML Core ServicesMicrosoft XML Core Services Information Disclosure VulnerabilityUnknownCWE-200
CVE-2017-0005MicrosoftWindowsMicrosoft Windows Graphics Device Interface (GDI) Privilege Escalation VulnerabilityUnknownCWE-119
CVE-2016-6367CiscoAdaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution VulnerabilityUnknownCWE-77
CVE-2016-6366CiscoAdaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2016-4657AppleiOSApple iOS Webkit Memory Corruption VulnerabilityUnknownCWE-119
CVE-2016-4656AppleiOSApple iOS Memory Corruption VulnerabilityUnknownCWE-264
CVE-2016-4655AppleiOSApple iOS Information Disclosure VulnerabilityUnknownCWE-200
CVE-2016-3351MicrosoftInternet Explorer and EdgeMicrosoft Internet Explorer and Edge Information Disclosure VulnerabilityKnownCWE-200
CVE-2016-3298MicrosoftInternet ExplorerMicrosoft Internet Explorer Messaging API Information Disclosure VulnerabilityUnknownCWE-200
CVE-2016-0162MicrosoftInternet ExplorerMicrosoft Internet Explorer Information Disclosure VulnerabilityUnknownCWE-200
CVE-2022-20821CiscoIOS XRCisco IOS XR Open Port VulnerabilityUnknownCWE-923
CVE-2021-30883AppleMultiple ProductsApple Multiple Products Memory Corruption VulnerabilityUnknownCWE-787
CVE-2021-1048AndroidKernelAndroid Kernel Use-After-Free VulnerabilityUnknownCWE-416
CVE-2021-0920AndroidKernelAndroid Kernel Race Condition VulnerabilityUnknownCWE-362, CWE-416
CVE-2020-1027MicrosoftWindowsMicrosoft Windows Kernel Privilege Escalation VulnerabilityUnknownCWE-787
CVE-2020-0638MicrosoftUpdate Notification ManagerMicrosoft Update Notification Manager Privilege Escalation VulnerabilityKnownnone listed
CVE-2019-8720WebKitGTKWebKitGTKWebKitGTK Memory Corruption VulnerabilityUnknownCWE-119
CVE-2019-7287AppleiOSApple iOS Memory Corruption VulnerabilityUnknownCWE-787
CVE-2019-7286AppleMultiple ProductsApple Multiple Products Memory Corruption VulnerabilityUnknownCWE-787
CVE-2019-5786GoogleChrome BlinkGoogle Chrome Blink Use-After-Free VulnerabilityUnknownCWE-416
CVE-2019-18426Meta PlatformsWhatsAppWhatsApp Cross-Site Scripting VulnerabilityUnknownCWE-79
CVE-2019-1385MicrosoftWindowsMicrosoft Windows AppX Deployment Extensions Privilege Escalation VulnerabilityKnownCWE-59
CVE-2019-13720GoogleChrome WebAudioGoogle Chrome WebAudio Use-After-Free VulnerabilityUnknownCWE-416
CVE-2019-11708MozillaFirefox and ThunderbirdMozilla Firefox and Thunderbird Sandbox Escape VulnerabilityUnknownCWE-20
CVE-2019-11707MozillaFirefox and ThunderbirdMozilla Firefox and Thunderbird Type Confusion VulnerabilityUnknownCWE-843
CVE-2019-1130MicrosoftWindowsMicrosoft Windows AppX Deployment Service Privilege Escalation VulnerabilityKnownCWE-59
CVE-2019-0880MicrosoftWindowsMicrosoft Windows Privilege Escalation VulnerabilityUnknownnone listed
CVE-2019-0703MicrosoftWindowsMicrosoft Windows SMB Information Disclosure VulnerabilityUnknownnone listed
CVE-2019-0676MicrosoftInternet ExplorerMicrosoft Internet Explorer Information Disclosure VulnerabilityUnknownnone listed
CVE-2018-8589MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityUnknownnone listed
CVE-2018-5002AdobeFlash PlayerAdobe Flash Player Stack-based Buffer Overflow VulnerabilityUnknownCWE-787
CVE-2022-30525ZyxelMultiple FirewallsZyxel Multiple Firewalls OS Command Injection VulnerabilityUnknownCWE-78
CVE-2022-22947VMwareSpring Cloud GatewayVMware Spring Cloud Gateway Code Injection VulnerabilityUnknownCWE-94
CVE-2022-1388F5BIG-IPF5 BIG-IP Missing Authentication VulnerabilityKnownCWE-306
CVE-2021-1789AppleMultiple ProductsApple Multiple Products Type Confusion VulnerabilityUnknownCWE-843
CVE-2019-8506AppleMultiple ProductsApple Multiple Products Type Confusion VulnerabilityUnknownCWE-843
CVE-2014-4113MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityUnknownCWE-264
CVE-2014-0322MicrosoftInternet ExplorerMicrosoft Internet Explorer Use-After-Free VulnerabilityUnknownCWE-416
CVE-2014-0160OpenSSLOpenSSLOpenSSL Information Disclosure VulnerabilityUnknownCWE-125
CVE-2022-29464WSO2Multiple ProductsWSO2 Multiple Products Unrestrictive Upload of File VulnerabilityKnownCWE-22
CVE-2022-26904MicrosoftWindowsMicrosoft Windows User Profile Service Privilege Escalation VulnerabilityUnknownCWE-362
CVE-2022-21919MicrosoftWindowsMicrosoft Windows User Profile Service Privilege Escalation VulnerabilityUnknownCWE-1386
CVE-2022-0847LinuxKernelLinux Kernel Privilege Escalation VulnerabilityUnknownCWE-665
CVE-2021-41357MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityUnknownnone listed
CVE-2021-40450MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityUnknownnone listed
CVE-2019-1003029JenkinsScript Security PluginJenkins Script Security Plugin Sandbox Bypass VulnerabilityUnknownnone listed
CVE-2022-22718MicrosoftWindowsMicrosoft Windows Print Spooler Privilege Escalation VulnerabilityUnknownnone listed
CVE-2019-3568Meta PlatformsWhatsAppWhatsApp VOIP Stack Buffer Overflow VulnerabilityUnknownCWE-122
CVE-2018-6882SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityKnownCWE-79
CVE-2022-22960VMwareMultiple ProductsVMware Multiple Products Privilege Escalation VulnerabilityUnknownCWE-250
CVE-2022-1364GoogleChromium V8Google Chromium V8 Type Confusion VulnerabilityUnknownCWE-843
CVE-2019-3929CrestronMultiple ProductsCrestron Multiple Products Command Injection VulnerabilityUnknownCWE-79
CVE-2019-16057D-LinkDNS-320 Storage DeviceD-Link DNS-320 Remote Code Execution VulnerabilityKnownCWE-78
CVE-2018-7841Schneider ElectricU.motion BuilderSchneider Electric U.motion Builder SQL Injection VulnerabilityUnknownCWE-89
CVE-2016-4523TrihedralVTScada (formerly VTS)Trihedral VTScada (formerly VTS) Denial-of-Service VulnerabilityUnknownCWE-119
CVE-2014-0780InduSoftWeb StudioInduSoft Web Studio NTWebServer Directory Traversal VulnerabilityUnknownCWE-22
CVE-2010-5330UbiquitiAirOSUbiquiti AirOS Command Injection VulnerabilityUnknownCWE-77
CVE-2007-3010AlcatelOmniPCX EnterpriseAlcatel OmniPCX Enterprise Remote Code Execution VulnerabilityUnknownCWE-20
CVE-2022-22954VMwareWorkspace ONE Access and Identity ManagerVMware Workspace ONE Access and Identity Manager Server-Side Template Injection VulnerabilityKnownCWE-94
CVE-2022-24521MicrosoftWindowsMicrosoft Windows CLFS Driver Privilege Escalation VulnerabilityKnownCWE-787, CWE-1285
CVE-2018-7602DrupalCoreDrupal Core Remote Code Execution VulnerabilityKnownnone listed
CVE-2018-20753KaseyaVirtual System/Server Administrator (VSA)Kaseya VSA Remote Code Execution VulnerabilityKnownnone listed
CVE-2015-5123AdobeFlash PlayerAdobe Flash Player Use-After-Free VulnerabilityUnknownCWE-416
CVE-2015-5122AdobeFlash PlayerAdobe Flash Player Use-After-Free VulnerabilityUnknownCWE-416
CVE-2015-3113AdobeFlash PlayerAdobe Flash Player Heap-Based Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2015-2502MicrosoftInternet ExplorerMicrosoft Internet Explorer Memory Corruption VulnerabilityUnknownCWE-119
CVE-2015-0313AdobeFlash PlayerAdobe Flash Player Use-After-Free VulnerabilityUnknownCWE-416
CVE-2015-0311AdobeFlash PlayerAdobe Flash Player Remote Code Execution VulnerabilityUnknownnone listed
CVE-2014-9163AdobeFlash PlayerAdobe Flash Player Stack-Based Buffer Overflow VulnerabilityUnknownnone listed
CVE-2022-23176WatchGuardFirebox and XTMWatchGuard Firebox and XTM Privilege Escalation VulnerabilityUnknownnone listed
CVE-2021-42287MicrosoftActive DirectoryMicrosoft Active Directory Domain Services Privilege Escalation VulnerabilityKnownCWE-269
CVE-2021-42278MicrosoftActive DirectoryMicrosoft Active Directory Domain Services Privilege Escalation VulnerabilityKnownCWE-20
CVE-2021-39793GooglePixelGoogle Pixel Out-of-Bounds Write VulnerabilityUnknownCWE-787
CVE-2021-27852CheckboxCheckbox SurveyCheckbox Survey Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2021-22600LinuxKernelLinux Kernel Privilege Escalation VulnerabilityUnknownCWE-415
CVE-2020-2509QNAPQNAP Network-Attached Storage (NAS)QNAP Network-Attached Storage (NAS) Command Injection VulnerabilityUnknownCWE-77, CWE-78
CVE-2017-11317TelerikUser Interface (UI) for ASP.NET AJAXTelerik UI for ASP.NET AJAX Unrestricted File Upload VulnerabilityUnknownCWE-326
CVE-2021-3156SudoSudoSudo Heap-Based Buffer Overflow VulnerabilityUnknownCWE-122, CWE-193
CVE-2021-31166MicrosoftHTTP Protocol StackMicrosoft HTTP Protocol Stack Remote Code Execution VulnerabilityUnknownCWE-416
CVE-2017-0148MicrosoftSMBv1 serverMicrosoft SMBv1 Server Remote Code Execution VulnerabilityKnownCWE-20
CVE-2022-22965VMwareSpring FrameworkSpring Framework JDK 9+ Remote Code Execution VulnerabilityUnknownCWE-94
CVE-2022-22675ApplemacOSApple macOS Out-of-Bounds Write VulnerabilityUnknownCWE-20, CWE-125
CVE-2022-22674ApplemacOSApple macOS Out-of-Bounds Read VulnerabilityUnknownCWE-20, CWE-125
CVE-2021-45382D-LinkMultiple RoutersD-Link Multiple Routers Remote Code Execution VulnerabilityUnknownCWE-78
CVE-2022-26871Trend MicroApex CentralTrend Micro Apex Central Arbitrary File Upload VulnerabilityUnknownCWE-184
CVE-2022-1040SophosFirewallSophos Firewall Authentication Bypass VulnerabilityUnknownCWE-158
CVE-2021-34484MicrosoftWindowsMicrosoft Windows User Profile Service Privilege Escalation VulnerabilityUnknownCWE-269
CVE-2021-28799QNAPNetwork Attached Storage (NAS)QNAP NAS Improper Authorization VulnerabilityKnownCWE-285
CVE-2021-21551Delldbutil DriverDell dbutil Driver Insufficient Access Control VulnerabilityUnknownCWE-782
CVE-2018-10562DasanGigabit Passive Optical Network (GPON) RoutersDasan GPON Routers Command Injection VulnerabilityKnownCWE-78
CVE-2018-10561DasanGigabit Passive Optical Network (GPON) RoutersDasan GPON Routers Authentication Bypass VulnerabilityUnknownCWE-287
CVE-2022-1096GoogleChromium V8Google Chromium V8 Type Confusion VulnerabilityUnknownCWE-843
CVE-2022-0543RedisDebian-specific Redis ServersDebian-specific Redis Server Lua Sandbox Escape VulnerabilityUnknownCWE-862
CVE-2021-38646MicrosoftOfficeMicrosoft Office Access Connectivity Engine Remote Code Execution VulnerabilityKnownnone listed
CVE-2021-34486MicrosoftWindowsMicrosoft Windows Event Tracing Privilege Escalation VulnerabilityUnknownCWE-416
CVE-2021-26085AtlassianConfluence ServerAtlassian Confluence Server Pre-Authorization Arbitrary File Read VulnerabilityKnownCWE-425
CVE-2021-20028SonicWallSecure Remote Access (SRA)SonicWall Secure Remote Access (SRA) SQL Injection VulnerabilityKnownCWE-89
CVE-2019-7483SonicWallSMA100SonicWall SMA100 Directory Traversal VulnerabilityUnknownCWE-22
CVE-2018-8440MicrosoftWindowsMicrosoft Windows Privilege Escalation VulnerabilityKnownnone listed
CVE-2018-8406MicrosoftDirectX Graphics Kernel (DXGKRNL)Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityKnownCWE-404
CVE-2018-8405MicrosoftDirectX Graphics Kernel (DXGKRNL)Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityKnownCWE-404
CVE-2017-0213MicrosoftWindowsMicrosoft Windows Privilege Escalation VulnerabilityKnownnone listed
CVE-2017-0059MicrosoftInternet ExplorerMicrosoft Internet Explorer Information Disclosure VulnerabilityUnknownCWE-200
CVE-2017-0037MicrosoftEdge and Internet ExplorerMicrosoft Edge and Internet Explorer Type Confusion VulnerabilityUnknownCWE-704
CVE-2016-7201MicrosoftEdgeMicrosoft Edge Memory Corruption VulnerabilityUnknownCWE-119
CVE-2016-7200MicrosoftEdgeMicrosoft Edge Memory Corruption VulnerabilityUnknownCWE-119
CVE-2016-0189MicrosoftInternet ExplorerMicrosoft Internet Explorer Memory Corruption VulnerabilityKnownCWE-119
CVE-2016-0151MicrosoftClient-Server Run-time Subsystem (CSRSS)Microsoft Windows CSRSS Security Feature Bypass VulnerabilityKnownCWE-264
CVE-2016-0040MicrosoftWindowsMicrosoft Windows Kernel Privilege Escalation VulnerabilityUnknownCWE-264
CVE-2015-2426MicrosoftWindowsMicrosoft Windows Adobe Type Manager Library Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2015-2419MicrosoftInternet ExplorerMicrosoft Internet Explorer Memory Corruption VulnerabilityUnknownCWE-119
CVE-2015-1770MicrosoftOfficeMicrosoft Office Uninitialized Memory Use VulnerabilityUnknownCWE-19
CVE-2013-3660MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityUnknownCWE-119
CVE-2013-2729AdobeReader and AcrobatAdobe Reader and Acrobat Arbitrary Integer Overflow VulnerabilityUnknownCWE-189
CVE-2013-2551MicrosoftInternet ExplorerMicrosoft Internet Explorer Use-After-Free VulnerabilityKnownCWE-416
CVE-2013-2465OracleJava SEOracle Java SE Unspecified VulnerabilityKnownnone listed
CVE-2013-1690MozillaFirefox and ThunderbirdMozilla Firefox and Thunderbird Denial-of-Service VulnerabilityUnknownCWE-119
CVE-2012-5076OracleJava SEOracle Java SE Sandbox Bypass VulnerabilityUnknownnone listed
CVE-2012-2539MicrosoftWordMicrosoft Word Remote Code Execution VulnerabilityUnknownCWE-399
CVE-2012-2034AdobeFlash PlayerAdobe Flash Player Memory Corruption VulnerabilityUnknownCWE-119
CVE-2012-0518OracleFusion MiddlewareOracle Fusion Middleware Unspecified VulnerabilityUnknownCWE-601
CVE-2011-2005MicrosoftAncillary Function Driver (afd.sys)Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation VulnerabilityUnknownCWE-264
CVE-2010-4398MicrosoftWindowsMicrosoft Windows Kernel Stack-Based Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2022-26318WatchGuardFirebox and XTM AppliancesWatchGuard Firebox and XTM Appliances Arbitrary Code ExecutionUnknownCWE-122
CVE-2022-26143MitelMiCollab, MiVoice Business ExpressMiCollab, MiVoice Business Express Access Control VulnerabilityUnknownCWE-306, CWE-406
CVE-2022-21999MicrosoftWindowsMicrosoft Windows Print Spooler Privilege Escalation VulnerabilityKnownCWE-40, CWE-1386
CVE-2021-42237SitecoreXPSitecore XP Remote Command Execution VulnerabilityKnownCWE-502
CVE-2021-22941CitrixShareFileCitrix ShareFile Improper Access Control VulnerabilityKnownCWE-284
CVE-2020-9377D-LinkDIR-610 DevicesD-Link DIR-610 Devices Remote Command ExecutionUnknownCWE-78
CVE-2020-9054ZyxelMultiple Network-Attached Storage (NAS) DevicesZyxel Multiple NAS Devices OS Command Injection VulnerabilityUnknownCWE-78
CVE-2020-7247OpenBSDOpenSMTPDOpenSMTPD Remote Code Execution VulnerabilityUnknownCWE-755, CWE-78
CVE-2020-5410VMware TanzuSpring Cloud Configuration (Config) ServerVMware Tanzu Spring Cloud Config Directory Traversal VulnerabilityUnknownCWE-23
CVE-2020-25223SophosSG UTMSophos SG UTM Remote Code Execution VulnerabilityUnknownCWE-78
CVE-2020-2506QNAP SystemsHelpdeskQNAP Helpdesk Improper Access Control VulnerabilityUnknownCWE-284
CVE-2020-2021Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Authentication Bypass VulnerabilityKnownCWE-347
CVE-2020-1956ApacheKylinApache Kylin OS Command Injection VulnerabilityUnknownCWE-78
CVE-2020-1631JuniperJunos OSJuniper Junos OS Path Traversal VulnerabilityUnknownCWE-22, CWE-73
CVE-2019-6340DrupalCoreDrupal Core Remote Code Execution VulnerabilityUnknownCWE-502
CVE-2019-2616OracleBI Publisher (Formerly XML Publisher)Oracle BI Publisher Unauthorized Access VulnerabilityUnknownnone listed
CVE-2019-16920D-LinkMultiple RoutersD-Link Multiple Routers Command Injection VulnerabilityUnknownCWE-78
CVE-2019-15107WebminWebminWebmin Command Injection VulnerabilityKnownCWE-78
CVE-2019-12991CitrixSD-WAN and NetScalerCitrix SD-WAN and NetScaler Command Injection VulnerabilityUnknownCWE-78
CVE-2019-12989CitrixSD-WAN and NetScalerCitrix SD-WAN and NetScaler SQL Injection VulnerabilityUnknownCWE-89
CVE-2019-11043PHPFastCGI Process Manager (FPM)PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityKnownCWE-120
CVE-2019-10068KenticoXperienceKentico Xperience Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2019-1003030JenkinsMatrix Project PluginJenkins Matrix Project Plugin Remote Code Execution VulnerabilityUnknownnone listed
CVE-2019-0903MicrosoftGraphics Device Interface (GDI)Microsoft GDI Remote Code Execution VulnerabilityUnknownnone listed
CVE-2018-8414MicrosoftWindowsMicrosoft Windows Shell Remote Code Execution VulnerabilityUnknownCWE-20
CVE-2018-8373MicrosoftInternet Explorer Scripting EngineMicrosoft Scripting Engine Memory Corruption VulnerabilityUnknownCWE-787
CVE-2018-6961VMwareSD-WAN EdgeVMware SD-WAN Edge by VeloCloud Command Injection VulnerabilityUnknownCWE-78
CVE-2018-14839LGN1A1 NASLG N1A1 NAS Remote Command Execution VulnerabilityUnknownCWE-78
CVE-2018-1273VMware TanzuSpring Data CommonsVMware Tanzu Spring Data Commons Property Binder VulnerabilityKnownCWE-94
CVE-2018-11138QuestKACE System Management ApplianceQuest KACE System Management Appliance Remote Command Execution VulnerabilityKnownCWE-78
CVE-2018-0147CiscoSecure Access Control System (ACS)Cisco Secure Access Control System Java Deserialization VulnerabilityUnknownCWE-20
CVE-2018-0125CiscoVPN RoutersCisco VPN Routers Remote Code Execution VulnerabilityUnknownCWE-20
CVE-2017-6334NETGEARDGN2200 DevicesNETGEAR DGN2200 Devices OS Command Injection VulnerabilityUnknownCWE-78
CVE-2017-6316CitrixNetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile ServerCitrix Multiple Products Remote Code Execution VulnerabilityUnknownCWE-20
CVE-2017-3881CiscoIOS and IOS XECisco IOS and IOS XE Remote Code Execution VulnerabilityUnknownCWE-20
CVE-2017-12617ApacheTomcatApache Tomcat Remote Code Execution VulnerabilityUnknownCWE-434
CVE-2017-12615ApacheTomcatApache Tomcat on Windows Remote Code Execution VulnerabilityKnownCWE-434
CVE-2017-0146MicrosoftWindowsMicrosoft Windows SMB Remote Code Execution VulnerabilityKnownCWE-20
CVE-2016-7892AdobeFlash PlayerAdobe Flash Player Use-After-Free VulnerabilityUnknownCWE-416
CVE-2016-4171AdobeFlash PlayerAdobe Flash Player Remote Code Execution VulnerabilityUnknownnone listed
CVE-2016-1555NETGEARWireless Access Point (WAP) DevicesNETGEAR Multiple WAP Devices Command Injection VulnerabilityUnknownCWE-77
CVE-2016-11021D-LinkDCS-930L DevicesD-Link DCS-930L Devices OS Command Injection VulnerabilityUnknownCWE-78
CVE-2016-10174NETGEARWNR2000v5 RouterNETGEAR WNR2000v5 Router Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2016-0752RailsRuby on RailsRuby on Rails Directory Traversal VulnerabilityUnknownCWE-22
CVE-2015-4068ArcserveUnified Data Protection (UDP)Arcserve Unified Data Protection (UDP) Directory Traversal VulnerabilityUnknownCWE-22
CVE-2015-3035TP-LinkMultiple Archer DevicesTP-Link Multiple Archer Devices Directory Traversal VulnerabilityUnknownCWE-22
CVE-2015-1427ElasticElasticsearchElasticsearch Groovy Scripting Engine Remote Code Execution VulnerabilityUnknownCWE-284
CVE-2015-1187D-Link and TRENDnetMultiple DevicesD-Link and TRENDnet Multiple Devices Remote Code Execution VulnerabilityUnknownCWE-287
CVE-2015-0666CiscoPrime Data Center Network Manager (DCNM)Cisco Prime Data Center Network Manager (DCNM) Directory Traversal VulnerabilityUnknownCWE-22
CVE-2014-6332MicrosoftWindowsMicrosoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2014-6324MicrosoftKerberos Key Distribution Center (KDC)Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation VulnerabilityUnknownCWE-264
CVE-2014-6287RejettoHTTP File Server (HFS)Rejetto HTTP File Server (HFS) Remote Code Execution VulnerabilityUnknownCWE-94
CVE-2014-3120ElasticElasticsearchElasticsearch Remote Code Execution VulnerabilityUnknownCWE-284
CVE-2014-0130RailsRuby on RailsRuby on Rails Directory Traversal VulnerabilityUnknownCWE-22
CVE-2013-5223D-LinkDSL-2760UD-Link DSL-2760U Gateway Cross-Site Scripting VulnerabilityUnknownCWE-79
CVE-2013-4810Hewlett Packard (HP)ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle ManagementHP Multiple Products Remote Code Execution VulnerabilityUnknownCWE-94
CVE-2013-2251ApacheStrutsApache Struts Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2012-1823PHPPHPPHP-CGI Query String Parameter VulnerabilityUnknownCWE-20
CVE-2010-4345EximEximExim Privilege Escalation VulnerabilityUnknownCWE-264
CVE-2010-4344EximEximExim Heap-Based Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2010-3035CiscoIOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityUnknownCWE-20
CVE-2010-2861AdobeColdFusionAdobe ColdFusion Directory Traversal VulnerabilityKnownCWE-22
CVE-2009-2055CiscoIOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityUnknownCWE-20
CVE-2009-1151phpMyAdminphpMyAdminphpMyAdmin Remote Code Execution VulnerabilityUnknownCWE-94
CVE-2009-0927AdobeReader and AcrobatAdobe Reader and Adobe Acrobat Stack-Based Buffer Overflow VulnerabilityUnknownCWE-20
CVE-2005-2773Hewlett Packard (HP)OpenView Network Node ManagerHP OpenView Network Node Manager Remote Code Execution VulnerabilityUnknownnone listed
CVE-2020-5135SonicWallSonicOSSonicWall SonicOS Buffer Overflow VulnerabilityKnownCWE-120
CVE-2019-1405MicrosoftWindowsMicrosoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation VulnerabilityKnownnone listed
CVE-2019-1322MicrosoftWindowsMicrosoft Windows Privilege Escalation VulnerabilityKnownnone listed
CVE-2019-1315MicrosoftWindowsMicrosoft Windows Error Reporting Manager Privilege Escalation VulnerabilityKnownCWE-59
CVE-2019-1253MicrosoftWindowsMicrosoft Windows AppX Deployment Server Privilege Escalation VulnerabilityKnownCWE-59
CVE-2019-1132MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityUnknownnone listed
CVE-2019-1129MicrosoftWindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityKnownCWE-59
CVE-2019-1069MicrosoftTask SchedulerMicrosoft Task Scheduler Privilege Escalation VulnerabilityKnownCWE-59
CVE-2019-1064MicrosoftWindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityKnownCWE-59
CVE-2019-0841MicrosoftWindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityKnownCWE-59
CVE-2019-0543MicrosoftWindowsMicrosoft Windows Privilege Escalation VulnerabilityKnownCWE-287
CVE-2018-8120MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityKnownCWE-404
CVE-2017-0101MicrosoftWindowsMicrosoft Windows Transaction Manager Privilege Escalation VulnerabilityKnownCWE-119
CVE-2016-3309MicrosoftWindowsMicrosoft Windows Kernel Privilege Escalation VulnerabilityKnownCWE-264
CVE-2015-2546MicrosoftWin32kMicrosoft Win32k Memory Corruption VulnerabilityKnownCWE-119
CVE-2022-26486MozillaFirefoxMozilla Firefox Use-After-Free VulnerabilityUnknownCWE-416
CVE-2022-26485MozillaFirefoxMozilla Firefox Use-After-Free VulnerabilityUnknownCWE-416
CVE-2021-21973VMwarevCenter Server and Cloud FoundationVMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) VulnerabilityUnknownCWE-20, CWE-918
CVE-2020-8218Pulse SecurePulse Connect SecurePulse Connect Secure Code Injection VulnerabilityUnknownCWE-94
CVE-2019-11581AtlassianJira Server and Data CenterAtlassian Jira Server and Data Center Server-Side Template Injection VulnerabilityUnknownCWE-74
CVE-2017-6077NETGEARWireless Router DGN2200NETGEAR DGN2200 Remote Code Execution VulnerabilityUnknownCWE-78
CVE-2016-6277NETGEARMultiple RoutersNETGEAR Multiple Routers Remote Code Execution VulnerabilityUnknownCWE-352
CVE-2013-0631AdobeColdFusionAdobe ColdFusion Information Disclosure VulnerabilityUnknownCWE-200
CVE-2013-0629AdobeColdFusionAdobe ColdFusion Directory Traversal VulnerabilityUnknownCWE-264
CVE-2013-0625AdobeColdFusionAdobe ColdFusion Authentication Bypass VulnerabilityUnknownCWE-255
CVE-2009-3960AdobeBlazeDSAdobe BlazeDS Information Disclosure VulnerabilityKnownnone listed
CVE-2022-20708CiscoSmall Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityUnknownCWE-121
CVE-2022-20703CiscoSmall Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityUnknownCWE-347
CVE-2022-20701CiscoSmall Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityUnknownCWE-121
CVE-2022-20700CiscoSmall Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityUnknownCWE-121
CVE-2022-20699CiscoSmall Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityUnknownCWE-785
CVE-2021-41379MicrosoftWindowsMicrosoft Windows Installer Privilege Escalation VulnerabilityKnownCWE-1386
CVE-2020-1938ApacheTomcatApache Tomcat Improper Privilege Management VulnerabilityUnknownnone listed
CVE-2020-11899Treck TCP/IP stackIPv6Treck TCP/IP stack Out-of-Bounds Read VulnerabilityUnknownCWE-125
CVE-2019-16928EximExim Internet MailerExim Out-of-bounds Write VulnerabilityUnknownCWE-787
CVE-2019-1652CiscoSmall Business RV320 and RV325 Dual Gigabit WAN VPN RoutersCisco Small Business Routers Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2019-1297MicrosoftExcelMicrosoft Excel Remote Code Execution VulnerabilityUnknownnone listed
CVE-2018-8581MicrosoftExchange ServerMicrosoft Exchange Server Privilege Escalation VulnerabilityKnownnone listed
CVE-2018-8298ChakraCoreChakraCore scripting engineChakraCore Scripting Engine Type Confusion VulnerabilityUnknownCWE-843
CVE-2018-0180CiscoIOS SoftwareCisco IOS Software Denial-of-Service VulnerabilityUnknownCWE-399
CVE-2018-0179CiscoIOS SoftwareCisco IOS Software Denial-of-Service VulnerabilityUnknownCWE-399
CVE-2018-0175CiscoIOS, XR, and XE SoftwareCisco IOS, XR, and XE Software Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2018-0174CiscoIOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2018-0173CiscoIOS and IOS XE SoftwareCisco IOS and IOS XE Software Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2018-0172CiscoIOS and IOS XE SoftwareCisco IOS and IOS XE Software Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2018-0167CiscoIOS, XR, and XE SoftwareCisco IOS, XR, and XE Software Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2018-0161CiscoIOS SoftwareCisco IOS Software Resource Management Errors VulnerabilityUnknownCWE-399
CVE-2018-0159CiscoIOS Software and Cisco IOS XE SoftwareCisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service VulnerabilityUnknownCWE-20
CVE-2018-0158CiscoIOS Software and Cisco IOS XE SoftwareCisco IOS and XE Software Internet Key Exchange Memory Leak VulnerabilityUnknownCWE-20
CVE-2018-0156CiscoIOS Software and Cisco IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service VulnerabilityUnknownCWE-399
CVE-2018-0155CiscoCatalyst 4500 Series Switches and Cisco Catalyst 4500-X Series SwitchesCisco Catalyst Bidirectional Forwarding Detection Denial-of-Service VulnerabilityUnknownCWE-388
CVE-2018-0154CiscoIOS SoftwareCisco IOS Software Integrated Services Module for VPN Denial-of-Service VulnerabilityUnknownCWE-399
CVE-2018-0151CiscoIOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2017-8540MicrosoftMalware Protection EngineMicrosoft Malware Protection Engine Improper Restriction of Operations VulnerabilityUnknownCWE-119
CVE-2017-6744CiscoIOS softwareCisco IOS Software SNMP Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2017-6743CiscoIOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2017-6740CiscoIOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2017-6739CiscoIOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2017-6738CiscoIOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2017-6737CiscoIOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2017-6736CiscoIOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2017-6663CiscoIOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Denial-of-Service VulnerabilityUnknownnone listed
CVE-2017-6627CiscoIOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service VulnerabilityUnknownCWE-399
CVE-2017-12319CiscoIOS XE SoftwareCisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service VulnerabilityUnknownCWE-20
CVE-2017-12240CiscoIOS and IOS XE SoftwareCisco IOS and IOS XE Software DHCP Remote Code Execution VulnerabilityUnknownCWE-20
CVE-2017-12238CiscoCatalyst 6800 Series SwitchesCisco Catalyst 6800 Series Switches VPLS Denial-of-Service VulnerabilityUnknownCWE-399
CVE-2017-12237CiscoIOS and IOS XE SoftwareCisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service VulnerabilityUnknownCWE-399
CVE-2017-12235CiscoIOS softwareCisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service VulnerabilityUnknownCWE-20
CVE-2017-12234CiscoIOS softwareCisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityUnknownCWE-20
CVE-2017-12233CiscoIOS softwareCisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityUnknownCWE-20
CVE-2017-12232CiscoIOS softwareCisco IOS Software for Cisco Integrated Services Routers Denial-of-Service VulnerabilityUnknownCWE-399
CVE-2017-12231CiscoIOS softwareCisco IOS Software Network Address Translation Denial-of-Service VulnerabilityUnknownCWE-399
CVE-2017-11826MicrosoftOfficeMicrosoft Office Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2017-11292AdobeFlash PlayerAdobe Flash Player Type Confusion VulnerabilityUnknownCWE-843
CVE-2017-0261MicrosoftOfficeMicrosoft Office Use-After-Free VulnerabilityUnknownCWE-416
CVE-2017-0001MicrosoftGraphics Device Interface (GDI)Microsoft Graphics Device Interface (GDI) Privilege Escalation VulnerabilityUnknownnone listed
CVE-2016-8562SiemensSIMATIC CPSiemens SIMATIC CP 1543-1 Improper Privilege Management VulnerabilityUnknownCWE-20
CVE-2016-7855AdobeFlash PlayerAdobe Flash Player Use-After-Free VulnerabilityUnknownCWE-416
CVE-2016-7262MicrosoftExcelMicrosoft Office Security Feature Bypass VulnerabilityUnknownCWE-20
CVE-2016-7193MicrosoftOfficeMicrosoft Office Memory Corruption VulnerabilityUnknownCWE-119
CVE-2016-5195LinuxKernelLinux Kernel Race Condition VulnerabilityUnknownCWE-362
CVE-2016-4117AdobeFlash PlayerAdobe Flash Player Arbitrary Code Execution VulnerabilityKnownnone listed
CVE-2016-1019AdobeFlash PlayerAdobe Flash Player Arbitrary Code Execution VulnerabilityKnownnone listed
CVE-2016-0099MicrosoftWindowsMicrosoft Windows Secondary Logon Service Privilege Escalation VulnerabilityKnownCWE-264
CVE-2015-7645AdobeFlash PlayerAdobe Flash Player Arbitrary Code Execution VulnerabilityKnownnone listed
CVE-2015-5119AdobeFlash PlayerAdobe Flash Player Use-After-Free VulnerabilityUnknownCWE-119
CVE-2015-4902OracleJava SEOracle Java SE Integrity Check VulnerabilityUnknownnone listed
CVE-2015-3043AdobeFlash PlayerAdobe Flash Player Memory Corruption VulnerabilityUnknownCWE-787
CVE-2015-2590OracleJava SEOracle Java SE and Java SE Embedded Remote Code Execution VulnerabilityUnknownnone listed
CVE-2015-2545MicrosoftOfficeMicrosoft Office Malformed EPS File VulnerabilityUnknownCWE-20
CVE-2015-2424MicrosoftPowerPointMicrosoft PowerPoint Memory Corruption VulnerabilityUnknownCWE-119
CVE-2015-2387MicrosoftATM Font DriverMicrosoft ATM Font Driver Privilege Escalation VulnerabilityUnknownCWE-264
CVE-2015-1701MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityKnownCWE-264
CVE-2015-1642MicrosoftOfficeMicrosoft Office Memory Corruption VulnerabilityUnknownCWE-119
CVE-2014-4114MicrosoftWindowsMicrosoft Windows Object Linking & Embedding (OLE) Remote Code Execution VulnerabilityUnknownCWE-20
CVE-2014-0496AdobeReader and AcrobatAdobe Reader and Acrobat Use-After-Free VulnerabilityUnknownCWE-399
CVE-2013-5065MicrosoftWindowsMicrosoft Windows Kernel Privilege Escalation VulnerabilityUnknownCWE-20
CVE-2013-3897MicrosoftInternet ExplorerMicrosoft Internet Explorer Use-After-Free VulnerabilityUnknownCWE-399
CVE-2013-3346AdobeReader and AcrobatAdobe Reader and Acrobat Memory Corruption VulnerabilityUnknownCWE-119
CVE-2013-1675MozillaFirefoxMozilla Firefox Information Disclosure VulnerabilityUnknownCWE-119
CVE-2013-1347MicrosoftInternet ExplorerMicrosoft Internet Explorer Remote Code Execution VulnerabilityUnknownCWE-94
CVE-2013-0641AdobeReaderAdobe Reader Buffer Overflow VulnerabilityUnknownCWE-120
CVE-2013-0640AdobeReader and AcrobatAdobe Reader and Acrobat Memory Corruption VulnerabilityUnknownCWE-787
CVE-2013-0632AdobeColdFusionAdobe ColdFusion Authentication Bypass VulnerabilityUnknownCWE-200
CVE-2012-4681OracleJava SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityKnownnone listed
CVE-2012-1856MicrosoftOfficeMicrosoft Office MSCOMCTL.OCX Remote Code Execution VulnerabilityUnknownCWE-94
CVE-2012-1723OracleJava SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityKnownnone listed
CVE-2012-1535AdobeFlash PlayerAdobe Flash Player Arbitrary Code Execution VulnerabilityUnknownnone listed
CVE-2012-0507OracleJava SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityKnownnone listed
CVE-2011-3544OracleJava SE JDK and JREOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityUnknownnone listed
CVE-2011-1889MicrosoftForefront Threat Management Gateway (TMG)Microsoft Forefront TMG Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2011-0611AdobeFlash PlayerAdobe Flash Player Remote Code Execution VulnerabilityUnknownCWE-843
CVE-2010-3333MicrosoftOfficeMicrosoft Office Stack-based Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2010-0232MicrosoftWindowsMicrosoft Windows Kernel Exception Handler VulnerabilityUnknownCWE-264
CVE-2010-0188AdobeReader and AcrobatAdobe Reader and Acrobat Arbitrary Code Execution VulnerabilityKnownCWE-94
CVE-2009-3129MicrosoftExcelMicrosoft Excel Featheader Record Memory Corruption VulnerabilityUnknownCWE-94
CVE-2009-1123MicrosoftWindowsMicrosoft Windows Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2008-3431OracleVirtualBoxOracle VirtualBox Insufficient Input Validation VulnerabilityUnknownCWE-264
CVE-2008-2992AdobeAcrobat and ReaderAdobe Reader and Acrobat Input Validation VulnerabilityKnownCWE-119
CVE-2004-0210MicrosoftWindowsMicrosoft Windows Privilege Escalation VulnerabilityUnknownCWE-120
CVE-2002-0367MicrosoftWindowsMicrosoft Windows Privilege Escalation VulnerabilityUnknownnone listed
CVE-2022-24682SynacorZimbra Collaborate Suite (ZCS)Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilityKnownCWE-79, CWE-116
CVE-2017-8570MicrosoftOfficeMicrosoft Office Remote Code Execution VulnerabilityUnknownnone listed
CVE-2017-0222MicrosoftInternet ExplorerMicrosoft Internet Explorer Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2014-6352MicrosoftWindowsMicrosoft Windows Code Injection VulnerabilityUnknownCWE-94
CVE-2022-23134ZabbixFrontendZabbix Frontend Improper Access Control VulnerabilityUnknownCWE-284
CVE-2022-23131ZabbixFrontendZabbix Frontend Authentication Bypass VulnerabilityUnknownCWE-290
CVE-2022-24086AdobeCommerce and Magento Open SourceAdobe Commerce and Magento Open Source Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2022-0609GoogleChromium AnimationGoogle Chromium Animation Use-After-Free VulnerabilityUnknownCWE-416
CVE-2019-0752MicrosoftInternet ExplorerMicrosoft Internet Explorer Type Confusion VulnerabilityKnownCWE-843
CVE-2018-8174MicrosoftWindowsMicrosoft Windows VBScript Engine Out-of-Bounds Write VulnerabilityKnownCWE-787
CVE-2018-20250RARLABWinRARWinRAR Absolute Path Traversal VulnerabilityKnownCWE-36
CVE-2018-15982AdobeFlash PlayerAdobe Flash Player Use-After-Free VulnerabilityKnownCWE-416
CVE-2017-9841PHPUnitPHPUnitPHPUnit Command Injection VulnerabilityUnknownCWE-94
CVE-2014-1761MicrosoftWordMicrosoft Word Memory Corruption VulnerabilityUnknownCWE-119
CVE-2013-3906MicrosoftGraphics ComponentMicrosoft Graphics Component Memory Corruption VulnerabilityUnknownCWE-94
CVE-2022-22620AppleiOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Webkit Use-After-Free VulnerabilityUnknownCWE-416
CVE-2021-36934MicrosoftWindowsMicrosoft Windows SAM Local Privilege Escalation VulnerabilityUnknownCWE-1220
CVE-2020-0796MicrosoftSMBv3Microsoft SMBv3 Remote Code Execution VulnerabilityKnownCWE-119
CVE-2018-1000861JenkinsJenkins Stapler Web FrameworkJenkins Stapler Web Framework Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2017-9791ApacheStruts 1Apache Struts 1 Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2017-8464MicrosoftWindowsMicrosoft Windows Shell (.lnk) Remote Code Execution VulnerabilityUnknownnone listed
CVE-2017-10271OracleWebLogic ServerOracle Corporation WebLogic Server Remote Code Execution VulnerabilityKnownnone listed
CVE-2017-0263MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityUnknownCWE-416
CVE-2017-0262MicrosoftOfficeMicrosoft Office Remote Code Execution VulnerabilityUnknownnone listed
CVE-2017-0145MicrosoftSMBv1Microsoft SMBv1 Remote Code Execution VulnerabilityKnownCWE-20
CVE-2017-0144MicrosoftSMBv1Microsoft SMBv1 Remote Code Execution VulnerabilityKnownCWE-20
CVE-2016-3088ApacheActiveMQApache ActiveMQ Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2015-2051D-LinkDIR-645 RouterD-Link DIR-645 Router Remote Code Execution VulnerabilityUnknownCWE-77
CVE-2015-1635MicrosoftHTTP.sysMicrosoft HTTP.sys Remote Code Execution VulnerabilityUnknownCWE-94
CVE-2015-1130AppleOS XApple OS X Authentication Bypass VulnerabilityUnknownCWE-254
CVE-2014-4404AppleOS XApple OS X Heap-Based Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2022-21882MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityKnownCWE-787
CVE-2022-22587AppleiOS and macOSApple Memory Corruption VulnerabilityUnknownCWE-20, CWE-787
CVE-2021-20038SonicWallSMA 100 AppliancesSonicWall SMA 100 Appliances Stack-Based Buffer Overflow VulnerabilityKnownCWE-121
CVE-2020-5722GrandstreamUCM6200Grandstream Networks UCM6200 Series SQL Injection VulnerabilityUnknownCWE-89
CVE-2020-0787MicrosoftWindowsMicrosoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management VulnerabilityKnownCWE-269, CWE-59
CVE-2017-5689IntelActive Management Technology (AMT), Small Business Technology (SBT), and Standard ManageabilityIntel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation VulnerabilityUnknownnone listed
CVE-2014-7169GNUBourne-Again Shell (Bash)GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityUnknownCWE-78
CVE-2014-6271GNUBourne-Again Shell (Bash)GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityUnknownCWE-78
CVE-2014-1776MicrosoftInternet ExplorerMicrosoft Internet Explorer Memory Corruption VulnerabilityUnknownCWE-416
CVE-2021-35247SolarWindsServ-USolarWinds Serv-U Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2018-8453MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityKnownCWE-404
CVE-2012-0391ApacheStruts 2Apache Struts 2 Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2006-1547ApacheStruts 1Apache Struts 1 ActionForm Denial-of-Service VulnerabilityUnknownnone listed
CVE-2021-40870AviatrixAviatrix ControllerAviatrix Controller Unrestricted Upload of FileUnknownCWE-25, CWE-96
CVE-2021-33766MicrosoftExchange ServerMicrosoft Exchange Server Information DisclosureUnknownCWE-287
CVE-2021-32648October CMSOctober CMSOctober CMS Improper AuthenticationUnknownCWE-287
CVE-2021-25298NagiosNagios XINagios XI OS Command InjectionUnknownCWE-78, CWE-138
CVE-2021-25297NagiosNagios XINagios XI OS Command InjectionUnknownCWE-78, CWE-138
CVE-2021-25296NagiosNagios XINagios XI OS Command InjectionUnknownCWE-78, CWE-138
CVE-2021-22991F5BIG-IP Traffic Management MicrokernelF5 BIG-IP Traffic Management Microkernel Buffer OverflowUnknownCWE-119
CVE-2021-21975VMwarevRealize Operations Manager APIVMware Server Side Request Forgery in vRealize Operations Manager APIKnownCWE-918
CVE-2021-21315Npm packageSystem Information Library for Node.JSSystem Information Library for Node.JS Command InjectionUnknownCWE-78
CVE-2020-14864OracleIntelligence Enterprise EditionOracle Business Intelligence Enterprise Edition Path TransversalUnknownCWE-22
CVE-2020-13927ApacheAirflow's Experimental APIApache Airflow's Experimental API Authentication BypassUnknownCWE-1188, CWE-306
CVE-2020-13671DrupalDrupal coreDrupal core Un-restricted Upload of FileUnknownCWE-434
CVE-2020-11978ApacheAirflowApache Airflow Command InjectionUnknownCWE-78
CVE-2021-36260HikvisionSecurity cameras web serverHikvision Improper Input ValidationUnknownCWE-78
CVE-2021-27860FatPipeWARP, IPVPN, and MPVPN softwareFatPipe WARP, IPVPN, and MPVPN Configuration Upload exploitUnknownCWE-434
CVE-2021-22017VMwarevCenter ServerVMware vCenter Server Improper Access ControlUnknownCWE-23
CVE-2020-6572GoogleChrome MediaGoogle Chrome Media Use-After-Free VulnerabilityUnknownCWE-416
CVE-2019-9670SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity ReferenceUnknownCWE-611
CVE-2019-7609ElasticKibanaKibana Arbitrary Code ExecutionUnknownCWE-94
CVE-2019-2725OracleWebLogic ServerOracle WebLogic Server, InjectionKnownCWE-74
CVE-2019-1579Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Remote Code Execution VulnerabilityKnownCWE-134
CVE-2019-1458MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityKnownnone listed
CVE-2019-10149EximMail Transfer Agent (MTA)Exim Mail Transfer Agent (MTA) Improper Input ValidationUnknownCWE-78
CVE-2018-13383FortinetFortiOS and FortiProxyFortinet FortiOS and FortiProxy Out-of-bounds WriteKnownCWE-787
CVE-2018-13382FortinetFortiOS and FortiProxyFortinet FortiOS and FortiProxy Improper AuthorizationKnownCWE-285
CVE-2017-1000486PrimetekPrimefaces ApplicationPrimetek Primefaces Remote Code Execution VulnerabilityUnknownCWE-326
CVE-2015-7450IBMWebSphere Application Server and Server Hypervisor EditionIBM WebSphere Application Server and Server Hypervisor Edition Code Injection.UnknownCWE-94
CVE-2013-3900MicrosoftWinVerifyTrust functionMicrosoft WinVerifyTrust function Remote Code ExecutionUnknownCWE-20

Cite this

CISA added 555 vulnerabilities to its KEV catalog in 2022. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/kev/2022/

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API