[ { "rank": 1, "cve": "CVE-2020-5902", "vendor": "F5", "product": "BIG-IP", "vulnerability_name": "F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Known", "cwes": [ "CWE-22" ], "epss": 0.99999, "epss_percentile": 1.0, "epss_date": "2026-11-09", "short_description": "F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in undisclosed pages.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-5902", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-5902" }, { "rank": 2, "cve": "CVE-2021-44228", "vendor": "Apache", "product": "Log4j2", "vulnerability_name": "Apache Log4j2 Remote Code Execution Vulnerability", "kev_date_added": "2021-12-10", "kev_due_date": "2021-12-24", "known_ransomware_use": "Known", "cwes": [ "CWE-20", "CWE-400", "CWE-502" ], "epss": 0.99999, "epss_percentile": 1.0, "epss_date": "2026-11-09", "short_description": "Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44228", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44228" }, { "rank": 3, "cve": "CVE-2024-21887", "vendor": "Ivanti", "product": "Connect Secure and Policy Secure", "vulnerability_name": "Ivanti Connect Secure and Policy Secure Command Injection Vulnerability", "kev_date_added": "2024-01-10", "kev_due_date": "2024-01-22", "known_ransomware_use": "Known", "cwes": [ "CWE-77" ], "epss": 0.99999, "epss_percentile": 1.0, "epss_date": "2026-11-09", "short_description": "Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain a command injection vulnerability in the web components of these products, which can allow an authenticated administrator to send crafted requests to execute code on affected appliances. This vulnerability can be leveraged in conjunction with CVE-2023-46805, an authenticated bypass issue.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21887", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21887" }, { "rank": 4, "cve": "CVE-2024-3400", "vendor": "Palo Alto Networks", "product": "PAN-OS", "vulnerability_name": "Palo Alto Networks PAN-OS Command Injection Vulnerability", "kev_date_added": "2024-04-12", "kev_due_date": "2024-04-19", "known_ransomware_use": "Known", "cwes": [ "CWE-20", "CWE-77" ], "epss": 0.99999, "epss_percentile": 1.0, "epss_date": "2026-11-09", "short_description": "Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3400", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400" }, { "rank": 5, "cve": "CVE-2019-0708", "vendor": "Microsoft", "product": "Remote Desktop Services", "vulnerability_name": "Microsoft Remote Desktop Services Remote Code Execution Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Known", "cwes": [ "CWE-416" ], "epss": 0.99999, "epss_percentile": 0.99999, "epss_date": "2026-11-09", "short_description": "Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests. Successful exploitation allows for remote code execution. The vulnerability is also known under the moniker of BlueKeep.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0708", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0708" }, { "rank": 6, "cve": "CVE-2024-21893", "vendor": "Ivanti", "product": "Connect Secure, Policy Secure, and Neurons", "vulnerability_name": "Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability", "kev_date_added": "2024-01-31", "kev_due_date": "2024-02-02", "known_ransomware_use": "Known", "cwes": [ "CWE-918" ], "epss": 0.99999, "epss_percentile": 0.99999, "epss_date": "2026-11-09", "short_description": "Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request forgery (SSRF) vulnerability in the SAML component that allows an attacker to access certain restricted resources without authentication.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21893", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21893" }, { "rank": 7, "cve": "CVE-2026-109618", "vendor": "PHP Group", "product": "PHP", "vulnerability_name": "PHP Memory Corruption Vulnerability", "kev_date_added": "2026-10-26", "kev_due_date": "2026-10-29", "known_ransomware_use": "Unknown", "cwes": [ "CWE-416", "CWE-755", "CWE-824", "CWE-1325", "CWE-1419" ], "epss": 0.99999, "epss_percentile": 0.99999, "epss_date": "2026-11-09", "short_description": "PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109618", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-109618" }, { "rank": 8, "cve": "CVE-2026-109619", "vendor": "PHP Group", "product": "PHP", "vulnerability_name": "PHP Stale Internal Request-State Vulnerability", "kev_date_added": "2026-10-26", "kev_due_date": "2026-10-29", "known_ransomware_use": "Unknown", "cwes": [ "CWE-416", "CWE-755", "CWE-824", "CWE-1325", "CWE-1419" ], "epss": 0.99999, "epss_percentile": 0.99999, "epss_date": "2026-11-09", "short_description": "PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109619", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-109619" }, { "rank": 9, "cve": "CVE-2019-19781", "vendor": "Citrix", "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "vulnerability_name": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Known", "cwes": [ "CWE-22" ], "epss": 0.99999, "epss_percentile": 0.99998, "epss_date": "2026-11-09", "short_description": "Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unauthenticated attacker to perform code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19781", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-19781" }, { "rank": 10, "cve": "CVE-2015-1635", "vendor": "Microsoft", "product": "HTTP.sys", "vulnerability_name": "Microsoft HTTP.sys Remote Code Execution Vulnerability", "kev_date_added": "2022-02-10", "kev_due_date": "2022-08-10", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.99999, "epss_percentile": 0.99998, "epss_date": "2026-11-09", "short_description": "Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1635", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1635" }, { "rank": 11, "cve": "CVE-2023-35078", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "vulnerability_name": "Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability", "kev_date_added": "2023-07-25", "kev_due_date": "2023-08-15", "known_ransomware_use": "Known", "cwes": [ "CWE-287" ], "epss": 0.99999, "epss_percentile": 0.99998, "epss_date": "2026-11-09", "short_description": "Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication bypass vulnerability that allows unauthenticated access to specific API paths. An attacker with access to these API paths can access personally identifiable information (PII) such as names, phone numbers, and other mobile device details for users on a vulnerable system. An attacker can also make other configuration changes including installing software and modifying security profiles on registered devices.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35078", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35078" }, { "rank": 12, "cve": "CVE-2023-44487", "vendor": "IETF", "product": "HTTP/2", "vulnerability_name": "HTTP/2 Rapid Reset Attack Vulnerability", "kev_date_added": "2023-10-10", "kev_due_date": "2023-10-31", "known_ransomware_use": "Unknown", "cwes": [ "CWE-400" ], "epss": 0.99999, "epss_percentile": 0.99998, "epss_date": "2026-11-09", "short_description": "HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44487", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-44487" }, { "rank": 13, "cve": "CVE-2021-22005", "vendor": "VMware", "product": "vCenter Server", "vulnerability_name": "VMware vCenter Server File Upload Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Known", "cwes": [ "CWE-23" ], "epss": 0.99999, "epss_percentile": 0.99997, "epss_date": "2026-11-09", "short_description": "VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22005", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22005" }, { "rank": 14, "cve": "CVE-2021-40438", "vendor": "Apache", "product": "Apache", "vulnerability_name": "Apache HTTP Server-Side Request Forgery (SSRF)", "kev_date_added": "2021-12-01", "kev_due_date": "2021-12-15", "known_ransomware_use": "Known", "cwes": [ "CWE-918" ], "epss": 0.99999, "epss_percentile": 0.99997, "epss_date": "2026-11-09", "short_description": "A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40438", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40438" }, { "rank": 15, "cve": "CVE-2014-0160", "vendor": "OpenSSL", "product": "OpenSSL", "vulnerability_name": "OpenSSL Information Disclosure Vulnerability", "kev_date_added": "2022-05-04", "kev_due_date": "2022-05-25", "known_ransomware_use": "Unknown", "cwes": [ "CWE-125" ], "epss": 0.99999, "epss_percentile": 0.99997, "epss_date": "2026-11-09", "short_description": "The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0160", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0160" }, { "rank": 16, "cve": "CVE-2023-4966", "vendor": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "vulnerability_name": "Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability", "kev_date_added": "2023-10-18", "kev_due_date": "2023-11-08", "known_ransomware_use": "Known", "cwes": [ "CWE-119" ], "epss": 0.99999, "epss_percentile": 0.99997, "epss_date": "2026-11-09", "short_description": "Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4966", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4966" }, { "rank": 17, "cve": "CVE-2021-34473", "vendor": "Microsoft", "product": "Exchange Server", "vulnerability_name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Known", "cwes": [ "CWE-918" ], "epss": 0.99999, "epss_percentile": 0.99996, "epss_date": "2026-11-09", "short_description": "Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34473" }, { "rank": 18, "cve": "CVE-2023-0669", "vendor": "Fortra", "product": "GoAnywhere MFT", "vulnerability_name": "Fortra GoAnywhere MFT Remote Code Execution Vulnerability", "kev_date_added": "2023-02-10", "kev_due_date": "2023-03-03", "known_ransomware_use": "Known", "cwes": [ "CWE-502" ], "epss": 0.99999, "epss_percentile": 0.99996, "epss_date": "2026-11-09", "short_description": "Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet due to deserializing an attacker-controlled object.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0669", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-0669" }, { "rank": 19, "cve": "CVE-2023-22518", "vendor": "Atlassian", "product": "Confluence Data Center and Server", "vulnerability_name": "Atlassian Confluence Data Center and Server Improper Authorization Vulnerability", "kev_date_added": "2023-11-07", "kev_due_date": "2023-11-28", "known_ransomware_use": "Known", "cwes": [ "CWE-863" ], "epss": 0.99999, "epss_percentile": 0.99996, "epss_date": "2026-11-09", "short_description": "Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker. There is no impact on confidentiality since the attacker cannot exfiltrate any data.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22518", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-22518" }, { "rank": 20, "cve": "CVE-2023-35082", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM) and MobileIron Core", "vulnerability_name": "Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability", "kev_date_added": "2024-01-18", "kev_due_date": "2024-02-08", "known_ransomware_use": "Known", "cwes": [ "CWE-287" ], "epss": 0.99999, "epss_percentile": 0.99996, "epss_date": "2026-11-09", "short_description": "Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to access restricted functionality or resources of the application.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35082", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35082" }, { "rank": 21, "cve": "CVE-2017-5638", "vendor": "Apache", "product": "Struts", "vulnerability_name": "Apache Struts Remote Code Execution Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Known", "cwes": [ "CWE-20" ], "epss": 0.99999, "epss_percentile": 0.99995, "epss_date": "2026-11-09", "short_description": "Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5638", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-5638" }, { "rank": 22, "cve": "CVE-2019-11510", "vendor": "Ivanti", "product": "Pulse Connect Secure", "vulnerability_name": "Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Known", "cwes": [ "CWE-22" ], "epss": 0.99999, "epss_percentile": 0.99995, "epss_date": "2026-11-09", "short_description": "Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11510", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11510" }, { "rank": 23, "cve": "CVE-2021-35464", "vendor": "ForgeRock", "product": "Access Management (AM)", "vulnerability_name": "ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Known", "cwes": [ "CWE-502" ], "epss": 0.99999, "epss_percentile": 0.99995, "epss_date": "2026-11-09", "short_description": "ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (/ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame) to execute code in the context of the current user (unless ForgeRock AM is running as root user, which the vendor does not recommend).", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-35464", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-35464" }, { "rank": 24, "cve": "CVE-2024-23897", "vendor": "Jenkins", "product": "Jenkins Command Line Interface (CLI)", "vulnerability_name": "Jenkins Command Line Interface (CLI) Path Traversal Vulnerability", "kev_date_added": "2024-08-19", "kev_due_date": "2024-09-09", "known_ransomware_use": "Known", "cwes": [ "CWE-27" ], "epss": 0.99999, "epss_percentile": 0.99995, "epss_date": "2026-11-09", "short_description": "Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23897", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23897" }, { "rank": 25, "cve": "CVE-2018-13379", "vendor": "Fortinet", "product": "FortiOS", "vulnerability_name": "Fortinet FortiOS SSL VPN Path Traversal Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Known", "cwes": [ "CWE-22" ], "epss": 0.99999, "epss_percentile": 0.99994, "epss_date": "2026-11-09", "short_description": "Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-13379", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-13379" }, { "rank": 26, "cve": "CVE-2017-9841", "vendor": "PHPUnit", "product": "PHPUnit", "vulnerability_name": "PHPUnit Command Injection Vulnerability", "kev_date_added": "2022-02-15", "kev_due_date": "2022-08-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.99999, "epss_percentile": 0.99994, "epss_date": "2026-11-09", "short_description": "PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a \" check_ssh_connect() function. An attacker can leverage this vulnerability to potentially obtain remote access to the system as an asterisk user. ", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64328", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-64328" }, { "rank": 583, "cve": "CVE-2024-21762", "vendor": "Fortinet", "product": "FortiOS", "vulnerability_name": "Fortinet FortiOS Out-of-Bound Write Vulnerability", "kev_date_added": "2024-02-09", "kev_due_date": "2024-02-16", "known_ransomware_use": "Known", "cwes": [ "CWE-787" ], "epss": 0.84589, "epss_percentile": 0.99706, "epss_date": "2026-11-09", "short_description": "Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21762", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21762" }, { "rank": 584, "cve": "CVE-2018-17463", "vendor": "Google", "product": "Chromium V8", "vulnerability_name": "Google Chromium V8 Remote Code Execution Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.84564, "epss_percentile": 0.99705, "epss_date": "2026-11-09", "short_description": "Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17463", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-17463" }, { "rank": 585, "cve": "CVE-2020-28949", "vendor": "PEAR", "product": "Archive_Tar", "vulnerability_name": "PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability", "kev_date_added": "2022-08-25", "kev_due_date": "2022-09-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-74" ], "epss": 0.84554, "epss_percentile": 0.99704, "epss_date": "2026-11-09", "short_description": "PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28949", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-28949" }, { "rank": 586, "cve": "CVE-2020-15415", "vendor": "DrayTek", "product": "Multiple Vigor Routers", "vulnerability_name": "DrayTek Multiple Vigor Routers OS Command Injection Vulnerability", "kev_date_added": "2024-09-30", "kev_due_date": "2024-10-21", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.8448, "epss_percentile": 0.99704, "epss_date": "2026-11-09", "short_description": "DrayTek Vigor3900, Vigor2960, and Vigor300B devices contain an OS command injection vulnerability in cgi-bin/mainfunction.cgi/cvmcfgupload that allows for remote code execution via shell metacharacters in a filename when the text/x-python-script content type is used.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15415", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-15415" }, { "rank": 587, "cve": "CVE-2026-105133", "vendor": "Ahsay", "product": "AhsayCBS", "vulnerability_name": "Ahsay AhsayCBS Improper Authentication Vulnerability", "kev_date_added": "2026-10-14", "kev_due_date": "2026-10-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-287" ], "epss": 0.84478, "epss_percentile": 0.99704, "epss_date": "2026-11-09", "short_description": "Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105133", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105133" }, { "rank": 588, "cve": "CVE-2024-51567", "vendor": "CyberPersons", "product": "CyberPanel", "vulnerability_name": "CyberPanel Incorrect Default Permissions Vulnerability", "kev_date_added": "2024-11-07", "kev_due_date": "2024-11-28", "known_ransomware_use": "Known", "cwes": [ "CWE-276" ], "epss": 0.84402, "epss_percentile": 0.99702, "epss_date": "2026-11-09", "short_description": "CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthenticated attacker to execute commands as root.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51567", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-51567" }, { "rank": 589, "cve": "CVE-2020-12641", "vendor": "Roundcube", "product": "Roundcube Webmail", "vulnerability_name": "Roundcube Webmail Remote Code Execution Vulnerability", "kev_date_added": "2023-06-22", "kev_due_date": "2023-07-13", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.84387, "epss_percentile": 0.99702, "epss_date": "2026-11-09", "short_description": "Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12641", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-12641" }, { "rank": 590, "cve": "CVE-2020-5722", "vendor": "Grandstream", "product": "UCM6200", "vulnerability_name": "Grandstream Networks UCM6200 Series SQL Injection Vulnerability", "kev_date_added": "2022-01-28", "kev_due_date": "2022-07-28", "known_ransomware_use": "Unknown", "cwes": [ "CWE-89" ], "epss": 0.84287, "epss_percentile": 0.997, "epss_date": "2026-11-09", "short_description": "Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-5722", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-5722" }, { "rank": 591, "cve": "CVE-2024-43451", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability", "kev_date_added": "2024-11-12", "kev_due_date": "2024-12-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-73" ], "epss": 0.84266, "epss_percentile": 0.997, "epss_date": "2026-11-09", "short_description": "Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43451", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43451" }, { "rank": 592, "cve": "CVE-2017-0213", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Privilege Escalation Vulnerability", "kev_date_added": "2022-03-28", "kev_due_date": "2022-04-18", "known_ransomware_use": "Known", "cwes": [], "epss": 0.84258, "epss_percentile": 0.99699, "epss_date": "2026-11-09", "short_description": "Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0213", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0213" }, { "rank": 593, "cve": "CVE-2024-38112", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows MSHTML Platform Spoofing Vulnerability", "kev_date_added": "2024-07-09", "kev_due_date": "2024-07-30", "known_ransomware_use": "Unknown", "cwes": [ "CWE-451" ], "epss": 0.84225, "epss_percentile": 0.99699, "epss_date": "2026-11-09", "short_description": "Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38112", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112" }, { "rank": 594, "cve": "CVE-2025-40551", "vendor": "SolarWinds", "product": "Web Help Desk", "vulnerability_name": "SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability", "kev_date_added": "2026-02-03", "kev_due_date": "2026-02-06", "known_ransomware_use": "Unknown", "cwes": [ "CWE-502" ], "epss": 0.84181, "epss_percentile": 0.99698, "epss_date": "2026-11-09", "short_description": "SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-40551", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-40551" }, { "rank": 595, "cve": "CVE-2017-11317", "vendor": "Telerik", "product": "User Interface (UI) for ASP.NET AJAX", "vulnerability_name": "Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability", "kev_date_added": "2022-04-11", "kev_due_date": "2022-05-02", "known_ransomware_use": "Unknown", "cwes": [ "CWE-326" ], "epss": 0.84175, "epss_percentile": 0.99697, "epss_date": "2026-11-09", "short_description": "Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11317", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11317" }, { "rank": 596, "cve": "CVE-2021-21224", "vendor": "Google", "product": "Chromium V8", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-843" ], "epss": 0.84173, "epss_percentile": 0.99697, "epss_date": "2026-11-09", "short_description": "Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21224", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21224" }, { "rank": 597, "cve": "CVE-2009-3129", "vendor": "Microsoft", "product": "Excel", "vulnerability_name": "Microsoft Excel Featheader Record Memory Corruption Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.84034, "epss_percentile": 0.99696, "epss_date": "2026-11-09", "short_description": "Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3129", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3129" }, { "rank": 598, "cve": "CVE-2023-28432", "vendor": "MinIO", "product": "MinIO", "vulnerability_name": "MinIO Information Disclosure Vulnerability", "kev_date_added": "2023-04-21", "kev_due_date": "2023-05-12", "known_ransomware_use": "Unknown", "cwes": [ "CWE-200" ], "epss": 0.83957, "epss_percentile": 0.99695, "epss_date": "2026-11-09", "short_description": "MinIO contains a vulnerability in a cluster deployment where MinIO returns all environment variables, which allows for information disclosure.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28432", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28432" }, { "rank": 599, "cve": "CVE-2015-3035", "vendor": "TP-Link", "product": "Multiple Archer Devices", "vulnerability_name": "TP-Link Multiple Archer Devices Directory Traversal Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-22" ], "epss": 0.83948, "epss_percentile": 0.99695, "epss_date": "2026-11-09", "short_description": "Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3035", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3035" }, { "rank": 600, "cve": "CVE-2020-3161", "vendor": "Cisco", "product": "Cisco IP Phones", "vulnerability_name": "Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.83855, "epss_percentile": 0.99692, "epss_date": "2026-11-09", "short_description": "Cisco IP Phones contain an improper input validation vulnerability for HTTP requests. Exploitation could allow an attacker to execute code remotely with root privileges or cause a denial-of-service (DoS) condition.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-3161", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3161" }, { "rank": 601, "cve": "CVE-2019-9874", "vendor": "Sitecore", "product": "CMS and Experience Platform (XP)", "vulnerability_name": "Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability", "kev_date_added": "2025-03-26", "kev_due_date": "2025-04-16", "known_ransomware_use": "Unknown", "cwes": [ "CWE-502" ], "epss": 0.83736, "epss_percentile": 0.9969, "epss_date": "2026-11-09", "short_description": "Sitecore CMS and Experience Platform (XP) contain a deserialization vulnerability in the Sitecore.Security.AntiCSRF module that allows an unauthenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter __CSRFTOKEN.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9874", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-9874" }, { "rank": 602, "cve": "CVE-2019-0193", "vendor": "Apache", "product": "Solr", "vulnerability_name": "Apache Solr DataImportHandler Code Injection Vulnerability", "kev_date_added": "2021-12-10", "kev_due_date": "2022-06-10", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.83547, "epss_percentile": 0.99688, "epss_date": "2026-11-09", "short_description": "The optional Apache Solr module DataImportHandler contains a code injection vulnerability.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0193" }, { "rank": 603, "cve": "CVE-2016-5195", "vendor": "Linux", "product": "Kernel", "vulnerability_name": "Linux Kernel Race Condition Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-362" ], "epss": 0.83524, "epss_percentile": 0.99687, "epss_date": "2026-11-09", "short_description": "Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5195", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-5195" }, { "rank": 604, "cve": "CVE-2012-1889", "vendor": "Microsoft", "product": "XML Core Services", "vulnerability_name": "Microsoft XML Core Services Memory Corruption Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.83516, "epss_percentile": 0.99687, "epss_date": "2026-11-09", "short_description": "Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1889", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1889" }, { "rank": 605, "cve": "CVE-2022-26923", "vendor": "Microsoft", "product": "Active Directory", "vulnerability_name": "Microsoft Active Directory Domain Services Privilege Escalation Vulnerability", "kev_date_added": "2022-08-18", "kev_due_date": "2022-09-08", "known_ransomware_use": "Unknown", "cwes": [ "CWE-295" ], "epss": 0.835, "epss_percentile": 0.99686, "epss_date": "2026-11-09", "short_description": "An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-26923", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26923" }, { "rank": 606, "cve": "CVE-2023-36847", "vendor": "Juniper", "product": "Junos OS", "vulnerability_name": "Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability", "kev_date_added": "2023-11-13", "kev_due_date": "2023-11-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-306" ], "epss": 0.83455, "epss_percentile": 0.99686, "epss_date": "2026-11-09", "short_description": "Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36847", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36847" }, { "rank": 607, "cve": "CVE-2010-1871", "vendor": "Red Hat", "product": "JBoss Seam 2", "vulnerability_name": "Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability", "kev_date_added": "2021-12-10", "kev_due_date": "2022-06-10", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.83397, "epss_percentile": 0.99684, "epss_date": "2026-11-09", "short_description": "JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1871", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-1871" }, { "rank": 608, "cve": "CVE-2016-10174", "vendor": "NETGEAR", "product": "WNR2000v5 Router", "vulnerability_name": "NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.83328, "epss_percentile": 0.99683, "epss_date": "2026-11-09", "short_description": "The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10174", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-10174" }, { "rank": 609, "cve": "CVE-2009-3953", "vendor": "Adobe", "product": "Acrobat and Reader", "vulnerability_name": "Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.83219, "epss_percentile": 0.99681, "epss_date": "2026-11-09", "short_description": "Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3953", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3953" }, { "rank": 610, "cve": "CVE-2025-14847", "vendor": "MongoDB", "product": "MongoDB and MongoDB Server", "vulnerability_name": "MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability", "kev_date_added": "2025-12-29", "kev_due_date": "2026-01-19", "known_ransomware_use": "Unknown", "cwes": [ "CWE-130" ], "epss": 0.83218, "epss_percentile": 0.99681, "epss_date": "2026-11-09", "short_description": "MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib compressed protocol headers. This vulnerability may allow a read of uninitialized heap memory by an unauthenticated client.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14847", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-14847" }, { "rank": 611, "cve": "CVE-2022-24990", "vendor": "TerraMaster", "product": "TerraMaster OS", "vulnerability_name": "TerraMaster OS Remote Command Execution Vulnerability", "kev_date_added": "2023-02-10", "kev_due_date": "2023-03-03", "known_ransomware_use": "Known", "cwes": [ "CWE-306" ], "epss": 0.83166, "epss_percentile": 0.9968, "epss_date": "2026-11-09", "short_description": "TerraMaster OS contains a remote command execution vulnerability that allows an unauthenticated user to execute commands on the target endpoint.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24990", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24990" }, { "rank": 612, "cve": "CVE-2010-3765", "vendor": "Mozilla", "product": "Multiple Products", "vulnerability_name": "Mozilla Multiple Products Remote Code Execution Vulnerability", "kev_date_added": "2025-10-06", "kev_due_date": "2025-10-27", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.83156, "epss_percentile": 0.99679, "epss_date": "2026-11-09", "short_description": "Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3765", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-3765" }, { "rank": 613, "cve": "CVE-2020-3992", "vendor": "VMware", "product": "ESXi", "vulnerability_name": "VMware ESXi OpenSLP Use-After-Free Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Known", "cwes": [ "CWE-416" ], "epss": 0.83015, "epss_percentile": 0.99677, "epss_date": "2026-11-09", "short_description": "VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-3992", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3992" }, { "rank": 614, "cve": "CVE-2024-42009", "vendor": "Roundcube", "product": "Webmail", "vulnerability_name": "RoundCube Webmail Cross-Site Scripting Vulnerability", "kev_date_added": "2025-06-09", "kev_due_date": "2025-06-30", "known_ransomware_use": "Unknown", "cwes": [ "CWE-79" ], "epss": 0.82882, "epss_percentile": 0.99675, "epss_date": "2026-11-09", "short_description": "RoundCube Webmail contains a cross-site scripting vulnerability. This vulnerability could allow a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42009", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-42009" }, { "rank": 615, "cve": "CVE-2021-27561", "vendor": "Yealink", "product": "Device Management", "vulnerability_name": "Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.82865, "epss_percentile": 0.99674, "epss_date": "2026-11-09", "short_description": "Yealink Device Management contains a server-side request forgery (SSRF) vulnerability that allows for unauthenticated remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-27561", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27561" }, { "rank": 616, "cve": "CVE-2025-33073", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows SMB Client Improper Access Control Vulnerability", "kev_date_added": "2025-10-20", "kev_due_date": "2025-11-10", "known_ransomware_use": "Unknown", "cwes": [ "CWE-284" ], "epss": 0.82829, "epss_percentile": 0.99674, "epss_date": "2026-11-09", "short_description": "Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33073", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-33073" }, { "rank": 617, "cve": "CVE-2016-7200", "vendor": "Microsoft", "product": "Edge", "vulnerability_name": "Microsoft Edge Memory Corruption Vulnerability", "kev_date_added": "2022-03-28", "kev_due_date": "2022-04-18", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.82779, "epss_percentile": 0.99672, "epss_date": "2026-11-09", "short_description": "The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7200", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7200" }, { "rank": 618, "cve": "CVE-2024-0769", "vendor": "D-Link", "product": "DIR-859 Router", "vulnerability_name": " D-Link DIR-859 Router Path Traversal Vulnerability", "kev_date_added": "2025-06-25", "kev_due_date": "2025-07-16", "known_ransomware_use": "Unknown", "cwes": [ "CWE-22" ], "epss": 0.82714, "epss_percentile": 0.99671, "epss_date": "2026-11-09", "short_description": "D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the component HTTP POST Request Handler. Manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml allows for the leakage of session data potentially enabling privilege escalation and unauthorized control of the device. This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0769", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-0769" }, { "rank": 619, "cve": "CVE-2019-7194", "vendor": "QNAP", "product": "Photo Station", "vulnerability_name": "QNAP Photo Station Path Traversal Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Known", "cwes": [ "CWE-22" ], "epss": 0.82713, "epss_percentile": 0.99671, "epss_date": "2026-11-09", "short_description": "QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7194", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7194" }, { "rank": 620, "cve": "CVE-2015-1187", "vendor": "D-Link and TRENDnet", "product": "Multiple Devices", "vulnerability_name": "D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-287" ], "epss": 0.82685, "epss_percentile": 0.9967, "epss_date": "2026-11-09", "short_description": "The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to perform remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1187", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1187" }, { "rank": 621, "cve": "CVE-2014-1776", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "kev_date_added": "2022-01-28", "kev_due_date": "2022-07-28", "known_ransomware_use": "Unknown", "cwes": [ "CWE-416" ], "epss": 0.82682, "epss_percentile": 0.9967, "epss_date": "2026-11-09", "short_description": "Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1776", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-1776" }, { "rank": 622, "cve": "CVE-2026-111497", "vendor": "Google", "product": "Brotli", "vulnerability_name": "Google Brotli Unchecked Return Value Vulnerability", "kev_date_added": "2026-10-27", "kev_due_date": "2026-11-10", "known_ransomware_use": "Unknown", "cwes": [ "CWE-252", "CWE-787" ], "epss": 0.82641, "epss_percentile": 0.99669, "epss_date": "2026-11-09", "short_description": "Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111497", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-111497" }, { "rank": 623, "cve": "CVE-2021-23758", "vendor": "Ajax.NET Professional", "product": "Ajax.NET Professional", "vulnerability_name": "Ajax.NET Professional Deserialization of Untrusted Data Vulnerability", "kev_date_added": "2026-08-26", "kev_due_date": "2026-09-09", "known_ransomware_use": "Unknown", "cwes": [ "CWE-502" ], "epss": 0.82578, "epss_percentile": 0.99668, "epss_date": "2026-11-09", "short_description": "Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23758", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-23758" }, { "rank": 624, "cve": "CVE-2010-1297", "vendor": "Adobe", "product": "Flash Player", "vulnerability_name": "Adobe Flash Player Memory Corruption Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.82531, "epss_percentile": 0.99668, "epss_date": "2026-11-09", "short_description": "Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1297", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-1297" }, { "rank": 625, "cve": "CVE-2023-27992", "vendor": "Zyxel", "product": "Multiple Network-Attached Storage (NAS) Devices", "vulnerability_name": "Zyxel Multiple NAS Devices Command Injection Vulnerability", "kev_date_added": "2023-06-23", "kev_due_date": "2023-07-14", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.82264, "epss_percentile": 0.99662, "epss_date": "2026-11-09", "short_description": "Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unauthenticated attacker to execute commands remotely via a crafted HTTP request.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-27992", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27992" }, { "rank": 626, "cve": "CVE-2017-11826", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Office Remote Code Execution Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.82217, "epss_percentile": 0.9966, "epss_date": "2026-11-09", "short_description": "A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11826", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11826" }, { "rank": 627, "cve": "CVE-2018-6789", "vendor": "Exim", "product": "Exim", "vulnerability_name": "Exim Buffer Overflow Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Known", "cwes": [ "CWE-119" ], "epss": 0.82137, "epss_percentile": 0.99659, "epss_date": "2026-11-09", "short_description": "Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-6789", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-6789" }, { "rank": 628, "cve": "CVE-2010-0806", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "kev_date_added": "2026-05-20", "kev_due_date": "2026-06-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-399" ], "epss": 0.82115, "epss_percentile": 0.99658, "epss_date": "2026-11-09", "short_description": "Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0806", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0806" }, { "rank": 629, "cve": "CVE-2021-40449", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Win32k Privilege Escalation Vulnerability", "kev_date_added": "2021-11-17", "kev_due_date": "2021-12-01", "known_ransomware_use": "Known", "cwes": [ "CWE-416" ], "epss": 0.81936, "epss_percentile": 0.99654, "epss_date": "2026-11-09", "short_description": "Unspecified vulnerability allows for an authenticated user to escalate privileges.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40449", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40449" }, { "rank": 630, "cve": "CVE-2026-88771", "vendor": "Citrix", "product": "NetScaler", "vulnerability_name": "Citrix NetScaler Improper Input Validation Vulnerability", "kev_date_added": "2026-09-27", "kev_due_date": "2026-09-30", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.81894, "epss_percentile": 0.99653, "epss_date": "2026-11-09", "short_description": "Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute arbitrary commands.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88771", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88771" }, { "rank": 631, "cve": "CVE-2009-4324", "vendor": "Adobe", "product": "Acrobat and Reader", "vulnerability_name": "Adobe Acrobat and Reader Use-After-Free Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-399" ], "epss": 0.8188, "epss_percentile": 0.99652, "epss_date": "2026-11-09", "short_description": "Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2009-4324", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-4324" }, { "rank": 632, "cve": "CVE-2025-34026", "vendor": "Versa", "product": "Concerto", "vulnerability_name": "Versa Concerto Improper Authentication Vulnerability", "kev_date_added": "2026-01-22", "kev_due_date": "2026-02-12", "known_ransomware_use": "Unknown", "cwes": [ "CWE-288" ], "epss": 0.8178, "epss_percentile": 0.99648, "epss_date": "2026-11-09", "short_description": "Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-34026", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-34026" }, { "rank": 633, "cve": "CVE-2026-105134", "vendor": "Ahsay", "product": "AhsayCBS", "vulnerability_name": "Ahsay AhsayCBS Command Injection Vulnerability", "kev_date_added": "2026-10-14", "kev_due_date": "2026-10-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-77", "CWE-78" ], "epss": 0.81763, "epss_percentile": 0.99648, "epss_date": "2026-11-09", "short_description": "Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105134", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105134" }, { "rank": 634, "cve": "CVE-2018-13382", "vendor": "Fortinet", "product": "FortiOS and FortiProxy", "vulnerability_name": "Fortinet FortiOS and FortiProxy Improper Authorization", "kev_date_added": "2022-01-10", "kev_due_date": "2022-07-10", "known_ransomware_use": "Known", "cwes": [ "CWE-285" ], "epss": 0.81691, "epss_percentile": 0.99646, "epss_date": "2026-11-09", "short_description": "An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-13382", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-13382" }, { "rank": 635, "cve": "CVE-2019-0752", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Type Confusion Vulnerability", "kev_date_added": "2022-02-15", "kev_due_date": "2022-08-15", "known_ransomware_use": "Known", "cwes": [ "CWE-843" ], "epss": 0.81679, "epss_percentile": 0.99645, "epss_date": "2026-11-09", "short_description": "A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0752", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0752" }, { "rank": 636, "cve": "CVE-2021-26411", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Known", "cwes": [ "CWE-416" ], "epss": 0.81667, "epss_percentile": 0.99645, "epss_date": "2026-11-09", "short_description": "Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26411", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26411" }, { "rank": 637, "cve": "CVE-2014-4114", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.81628, "epss_percentile": 0.99645, "epss_date": "2026-11-09", "short_description": "A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-4114", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4114" }, { "rank": 638, "cve": "CVE-2010-2883", "vendor": "Adobe", "product": "Acrobat and Reader", "vulnerability_name": "Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.81376, "epss_percentile": 0.99641, "epss_date": "2026-11-09", "short_description": "Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2883", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-2883" }, { "rank": 639, "cve": "CVE-2021-31955", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Kernel Information Disclosure Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-497" ], "epss": 0.81107, "epss_percentile": 0.99637, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31955", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31955" }, { "rank": 640, "cve": "CVE-2024-43468", "vendor": "Microsoft", "product": "Configuration Manager", "vulnerability_name": "Microsoft Configuration Manager SQL Injection Vulnerability", "kev_date_added": "2026-02-12", "kev_due_date": "2026-03-05", "known_ransomware_use": "Unknown", "cwes": [ "CWE-89" ], "epss": 0.81043, "epss_percentile": 0.99635, "epss_date": "2026-11-09", "short_description": "Microsoft Configuration Manager contains an SQL injection vulnerability. An unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to the target environment which are processed in an unsafe manner enabling the attacker to execute commands on the server and/or underlying database.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43468", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43468" }, { "rank": 641, "cve": "CVE-2019-9621", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability", "kev_date_added": "2025-07-07", "kev_due_date": "2025-07-28", "known_ransomware_use": "Unknown", "cwes": [ "CWE-918", "CWE-807" ], "epss": 0.81037, "epss_percentile": 0.99635, "epss_date": "2026-11-09", "short_description": "Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery (SSRF) vulnerability via the ProxyServlet component.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9621", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-9621" }, { "rank": 642, "cve": "CVE-2017-0262", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Office Remote Code Execution Vulnerability", "kev_date_added": "2022-02-10", "kev_due_date": "2022-08-10", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.81005, "epss_percentile": 0.99634, "epss_date": "2026-11-09", "short_description": "A remote code execution vulnerability exists in Microsoft Office.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0262", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0262" }, { "rank": 643, "cve": "CVE-2016-7255", "vendor": "Microsoft", "product": "Win32k", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Known", "cwes": [ "CWE-264" ], "epss": 0.80968, "epss_percentile": 0.99634, "epss_date": "2026-11-09", "short_description": "Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7255", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7255" }, { "rank": 644, "cve": "CVE-2025-54253", "vendor": "Adobe", "product": "Experience Manager (AEM) Forms", "vulnerability_name": "Adobe Experience Manager Forms Code Execution Vulnerability", "kev_date_added": "2025-10-15", "kev_due_date": "2025-11-05", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.80848, "epss_percentile": 0.99632, "epss_date": "2026-11-09", "short_description": "Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-54253", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-54253" }, { "rank": 645, "cve": "CVE-2023-27532", "vendor": "Veeam", "product": "Backup & Replication", "vulnerability_name": "Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability", "kev_date_added": "2023-08-22", "kev_due_date": "2023-09-12", "known_ransomware_use": "Known", "cwes": [ "CWE-306" ], "epss": 0.80599, "epss_percentile": 0.99628, "epss_date": "2026-11-09", "short_description": "Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure network perimeter to obtain encrypted credentials stored in the configuration database. This may lead to an attacker gaining access to the backup infrastructure hosts.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-27532", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27532" }, { "rank": 646, "cve": "CVE-2017-0037", "vendor": "Microsoft", "product": "Edge and Internet Explorer", "vulnerability_name": "Microsoft Edge and Internet Explorer Type Confusion Vulnerability", "kev_date_added": "2022-03-28", "kev_due_date": "2022-04-18", "known_ransomware_use": "Unknown", "cwes": [ "CWE-704" ], "epss": 0.80386, "epss_percentile": 0.99625, "epss_date": "2026-11-09", "short_description": "Microsoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0037", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0037" }, { "rank": 647, "cve": "CVE-2026-48558", "vendor": "SimpleHelp ", "product": "SimpleHelp", "vulnerability_name": "SimpleHelp Authentication Bypass Vulnerability", "kev_date_added": "2026-06-29", "kev_due_date": "2026-07-02", "known_ransomware_use": "Unknown", "cwes": [ "CWE-347" ], "epss": 0.80251, "epss_percentile": 0.99622, "epss_date": "2026-11-09", "short_description": "SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature. In a vulnerable configuration, a remote, unauthenticated attacker can submit a forged token containing arbitrary identity claims to obtain a fully authenticated technician session. In some configurations, this may also allow bypass of multi-factor authentication.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48558", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48558" }, { "rank": 648, "cve": "CVE-2012-4969", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.8025, "epss_percentile": 0.99622, "epss_date": "2026-11-09", "short_description": "Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4969", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4969" }, { "rank": 649, "cve": "CVE-2026-45659", "vendor": "Microsoft", "product": "SharePoint Server", "vulnerability_name": "Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability", "kev_date_added": "2026-07-01", "kev_due_date": "2026-07-04", "known_ransomware_use": "Known", "cwes": [ "CWE-502" ], "epss": 0.80242, "epss_percentile": 0.99621, "epss_date": "2026-11-09", "short_description": "Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45659", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45659" }, { "rank": 650, "cve": "CVE-2020-14871", "vendor": "Oracle", "product": "Solaris and Zettabyte File System (ZFS)", "vulnerability_name": "Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.80157, "epss_percentile": 0.9962, "epss_date": "2026-11-09", "short_description": "Oracle Solaris and Oracle ZFS Storage Appliance Kit contain an unspecified vulnerability causing high impacts to confidentiality, integrity, and availability of affected systems.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14871", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-14871" }, { "rank": 651, "cve": "CVE-2023-22952", "vendor": "SugarCRM", "product": "Multiple Products", "vulnerability_name": "Multiple SugarCRM Products Remote Code Execution Vulnerability", "kev_date_added": "2023-02-02", "kev_due_date": "2023-02-23", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.80139, "epss_percentile": 0.99619, "epss_date": "2026-11-09", "short_description": "Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom PHP code can be injected through the EmailTemplates.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22952", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-22952" }, { "rank": 652, "cve": "CVE-2016-7201", "vendor": "Microsoft", "product": "Edge", "vulnerability_name": "Microsoft Edge Memory Corruption Vulnerability", "kev_date_added": "2022-03-28", "kev_due_date": "2022-04-18", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.80004, "epss_percentile": 0.99617, "epss_date": "2026-11-09", "short_description": "The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7201", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7201" }, { "rank": 653, "cve": "CVE-2024-8957", "vendor": "PTZOptics", "product": "PT30X-SDI/NDI Cameras", "vulnerability_name": "PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability", "kev_date_added": "2024-11-04", "kev_due_date": "2024-11-25", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.7984, "epss_percentile": 0.99612, "epss_date": "2026-11-09", "short_description": "PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privileges to root via a crafted payload with the ntp_addr parameter of the /cgi-bin/param.cgi CGI script. ", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8957", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957" }, { "rank": 654, "cve": "CVE-2013-1331", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Office Buffer Overflow Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.79822, "epss_percentile": 0.99612, "epss_date": "2026-11-09", "short_description": "Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1331", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1331" }, { "rank": 655, "cve": "CVE-2020-10987", "vendor": "Tenda", "product": "AC1900 Router AC15 Model", "vulnerability_name": "Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.7981, "epss_percentile": 0.99611, "epss_date": "2026-11-09", "short_description": "Tenda AC1900 Router AC15 Model contains an unspecified vulnerability that allows remote attackers to execute system commands via the deviceName POST parameter.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10987", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-10987" }, { "rank": 656, "cve": "CVE-2021-21551", "vendor": "Dell", "product": "dbutil Driver", "vulnerability_name": "Dell dbutil Driver Insufficient Access Control Vulnerability", "kev_date_added": "2022-03-31", "kev_due_date": "2022-04-21", "known_ransomware_use": "Unknown", "cwes": [ "CWE-782" ], "epss": 0.79628, "epss_percentile": 0.99608, "epss_date": "2026-11-09", "short_description": "Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service (DoS), or information disclosure.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21551", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21551" }, { "rank": 657, "cve": "CVE-2013-4810", "vendor": "Hewlett Packard (HP)", "product": "ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management", "vulnerability_name": "HP Multiple Products Remote Code Execution Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.79468, "epss_percentile": 0.99606, "epss_date": "2026-11-09", "short_description": "HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4810", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-4810" }, { "rank": 658, "cve": "CVE-2018-18809", "vendor": "TIBCO", "product": "JasperReports", "vulnerability_name": "TIBCO JasperReports Library Directory Traversal Vulnerability", "kev_date_added": "2022-12-29", "kev_due_date": "2023-01-19", "known_ransomware_use": "Unknown", "cwes": [ "CWE-22" ], "epss": 0.79064, "epss_percentile": 0.996, "epss_date": "2026-11-09", "short_description": "TIBCO JasperReports Library contains a directory-traversal vulnerability that may allow web server users to access contents of the host system.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18809", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-18809" }, { "rank": 659, "cve": "CVE-2013-3346", "vendor": "Adobe", "product": "Reader and Acrobat", "vulnerability_name": "Adobe Reader and Acrobat Memory Corruption Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.78913, "epss_percentile": 0.99596, "epss_date": "2026-11-09", "short_description": "Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-3346", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3346" }, { "rank": 660, "cve": "CVE-2013-0074", "vendor": "Microsoft", "product": "Silverlight", "vulnerability_name": "Microsoft Silverlight Double Dereference Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Known", "cwes": [], "epss": 0.78885, "epss_percentile": 0.99595, "epss_date": "2026-11-09", "short_description": "Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0074", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0074" }, { "rank": 661, "cve": "CVE-2012-4792", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "kev_date_added": "2024-07-23", "kev_due_date": "2024-08-13", "known_ransomware_use": "Unknown", "cwes": [ "CWE-416" ], "epss": 0.78823, "epss_percentile": 0.99594, "epss_date": "2026-11-09", "short_description": "Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4792", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792" }, { "rank": 662, "cve": "CVE-2020-6418", "vendor": "Google", "product": "Chromium V8", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-843" ], "epss": 0.78808, "epss_percentile": 0.99593, "epss_date": "2026-11-09", "short_description": "Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6418", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6418" }, { "rank": 663, "cve": "CVE-2021-22555", "vendor": "Linux", "product": "Kernel", "vulnerability_name": "Linux Kernel Heap Out-of-Bounds Write Vulnerability", "kev_date_added": "2025-10-06", "kev_due_date": "2025-10-27", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.78684, "epss_percentile": 0.99591, "epss_date": "2026-11-09", "short_description": "Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22555", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22555" }, { "rank": 664, "cve": "CVE-2021-1732", "vendor": "Microsoft", "product": "Win32k", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Known", "cwes": [ "CWE-787" ], "epss": 0.78376, "epss_percentile": 0.99586, "epss_date": "2026-11-09", "short_description": "Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-1732", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1732" }, { "rank": 665, "cve": "CVE-2020-8816", "vendor": "Pi-hole", "product": "AdminLTE", "vulnerability_name": "Pi-Hole AdminLTE Remote Code Execution Vulnerability", "kev_date_added": "2021-12-10", "kev_due_date": "2022-06-10", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.78336, "epss_percentile": 0.99584, "epss_date": "2026-11-09", "short_description": "Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8816", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8816" }, { "rank": 666, "cve": "CVE-2021-28799", "vendor": "QNAP", "product": "Network Attached Storage (NAS)", "vulnerability_name": "QNAP NAS Improper Authorization Vulnerability", "kev_date_added": "2022-03-31", "kev_due_date": "2022-04-21", "known_ransomware_use": "Known", "cwes": [ "CWE-285" ], "epss": 0.7825, "epss_percentile": 0.99582, "epss_date": "2026-11-09", "short_description": "QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28799", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28799" }, { "rank": 667, "cve": "CVE-2022-26318", "vendor": "WatchGuard", "product": "Firebox and XTM Appliances", "vulnerability_name": "WatchGuard Firebox and XTM Appliances Arbitrary Code Execution", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-122" ], "epss": 0.78157, "epss_percentile": 0.9958, "epss_date": "2026-11-09", "short_description": "On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-26318", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26318" }, { "rank": 668, "cve": "CVE-2023-24880", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows SmartScreen Security Feature Bypass Vulnerability", "kev_date_added": "2023-03-14", "kev_due_date": "2023-04-04", "known_ransomware_use": "Known", "cwes": [ "CWE-863" ], "epss": 0.78152, "epss_percentile": 0.9958, "epss_date": "2026-11-09", "short_description": "Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24880", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24880" }, { "rank": 669, "cve": "CVE-2011-3402", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Remote Code Execution Vulnerability", "kev_date_added": "2025-10-06", "kev_due_date": "2025-10-27", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.78138, "epss_percentile": 0.9958, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3402", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-3402" }, { "rank": 670, "cve": "CVE-2017-0261", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Office Use-After-Free Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-416" ], "epss": 0.7813, "epss_percentile": 0.9958, "epss_date": "2026-11-09", "short_description": "Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0261", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0261" }, { "rank": 671, "cve": "CVE-2023-27351", "vendor": "PaperCut", "product": "NG/MF", "vulnerability_name": "PaperCut NG/MF Improper Authentication Vulnerability", "kev_date_added": "2026-04-20", "kev_due_date": "2026-05-04", "known_ransomware_use": "Known", "cwes": [ "CWE-287" ], "epss": 0.78052, "epss_percentile": 0.99578, "epss_date": "2026-11-09", "short_description": "PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter class.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-27351", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27351" }, { "rank": 672, "cve": "CVE-2021-21975", "vendor": "VMware", "product": "vRealize Operations Manager API", "vulnerability_name": "VMware Server Side Request Forgery in vRealize Operations Manager API", "kev_date_added": "2022-01-18", "kev_due_date": "2022-02-01", "known_ransomware_use": "Known", "cwes": [ "CWE-918" ], "epss": 0.78001, "epss_percentile": 0.99577, "epss_date": "2026-11-09", "short_description": "Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21975", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21975" }, { "rank": 673, "cve": "CVE-2026-102764", "vendor": "BeyondTrust", "product": "Remote Support", "vulnerability_name": "BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability", "kev_date_added": "2026-10-16", "kev_due_date": "2026-10-19", "known_ransomware_use": "Unknown", "cwes": [ "CWE-290" ], "epss": 0.77994, "epss_percentile": 0.99576, "epss_date": "2026-11-09", "short_description": "BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102764", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102764" }, { "rank": 674, "cve": "CVE-2023-49103", "vendor": "ownCloud", "product": "ownCloud graphapi", "vulnerability_name": "ownCloud graphapi Information Disclosure Vulnerability", "kev_date_added": "2023-11-30", "kev_due_date": "2023-12-21", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.77755, "epss_percentile": 0.99572, "epss_date": "2026-11-09", "short_description": "ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, including administrative credentials.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49103", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103" }, { "rank": 675, "cve": "CVE-2013-1347", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Remote Code Execution Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.7774, "epss_percentile": 0.99571, "epss_date": "2026-11-09", "short_description": "This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1347", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1347" }, { "rank": 676, "cve": "CVE-2014-1761", "vendor": "Microsoft", "product": "Word", "vulnerability_name": "Microsoft Word Memory Corruption Vulnerability", "kev_date_added": "2022-02-15", "kev_due_date": "2022-08-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.77734, "epss_percentile": 0.99571, "epss_date": "2026-11-09", "short_description": "Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1761", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-1761" }, { "rank": 677, "cve": "CVE-2017-11357", "vendor": "Telerik", "product": "User Interface (UI) for ASP.NET AJAX", "vulnerability_name": "Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability", "kev_date_added": "2023-01-26", "kev_due_date": "2023-02-16", "known_ransomware_use": "Known", "cwes": [ "CWE-20" ], "epss": 0.77679, "epss_percentile": 0.99568, "epss_date": "2026-11-09", "short_description": "Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11357", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11357" }, { "rank": 678, "cve": "CVE-2014-6352", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Code Injection Vulnerability", "kev_date_added": "2022-02-25", "kev_due_date": "2022-08-25", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.77485, "epss_percentile": 0.99563, "epss_date": "2026-11-09", "short_description": "Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-6352", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-6352" }, { "rank": 679, "cve": "CVE-2022-41080", "vendor": "Microsoft", "product": "Exchange Server", "vulnerability_name": "Microsoft Exchange Server Privilege Escalation Vulnerability", "kev_date_added": "2023-01-10", "kev_due_date": "2023-01-31", "known_ransomware_use": "Known", "cwes": [], "epss": 0.77326, "epss_percentile": 0.9956, "epss_date": "2026-11-09", "short_description": "Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41080", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41080" }, { "rank": 680, "cve": "CVE-2013-3897", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-399" ], "epss": 0.7731, "epss_percentile": 0.9956, "epss_date": "2026-11-09", "short_description": "A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-3897", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3897" }, { "rank": 681, "cve": "CVE-2019-1429", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-416", "CWE-787" ], "epss": 0.7729, "epss_percentile": 0.99559, "epss_date": "2026-11-09", "short_description": "Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1429", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1429" }, { "rank": 682, "cve": "CVE-2023-34192", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "kev_date_added": "2025-02-25", "kev_due_date": "2025-03-18", "known_ransomware_use": "Unknown", "cwes": [ "CWE-79" ], "epss": 0.77266, "epss_percentile": 0.99559, "epss_date": "2026-11-09", "short_description": "Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-34192", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-34192" }, { "rank": 683, "cve": "CVE-2021-42287", "vendor": "Microsoft", "product": "Active Directory", "vulnerability_name": "Microsoft Active Directory Domain Services Privilege Escalation Vulnerability", "kev_date_added": "2022-04-11", "kev_due_date": "2022-05-02", "known_ransomware_use": "Known", "cwes": [ "CWE-269" ], "epss": 0.7717, "epss_percentile": 0.99557, "epss_date": "2026-11-09", "short_description": "Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42287", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-42287" }, { "rank": 684, "cve": "CVE-2020-10221", "vendor": "rConfig", "product": "rConfig", "vulnerability_name": "rConfig OS Command Injection Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.77123, "epss_percentile": 0.99556, "epss_date": "2026-11-09", "short_description": "rConfig lib/ajaxHandlers/ajaxAddTemplate.php contains an OS command injection vulnerability that allows remote attackers to execute OS commands via shell metacharacters in the fileName POST parameter.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10221", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-10221" }, { "rank": 685, "cve": "CVE-2026-33824", "vendor": "Microsoft", "product": "Internet Key Exchange (IKE) Service Extensions", "vulnerability_name": "Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability", "kev_date_added": "2026-08-18", "kev_due_date": "2026-08-21", "known_ransomware_use": "Unknown", "cwes": [ "CWE-415" ], "epss": 0.77054, "epss_percentile": 0.99555, "epss_date": "2026-11-09", "short_description": "Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33824", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33824" }, { "rank": 686, "cve": "CVE-2019-15949", "vendor": "Nagios", "product": "Nagios XI", "vulnerability_name": "Nagios XI Remote Code Execution Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.77039, "epss_percentile": 0.99554, "epss_date": "2026-11-09", "short_description": "Nagios XI contains a remote code execution vulnerability in which a user can modify the check_plugin executable and insert malicious commands to execute as root.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-15949", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-15949" }, { "rank": 687, "cve": "CVE-2019-7238", "vendor": "Sonatype", "product": "Nexus Repository Manager", "vulnerability_name": "Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability", "kev_date_added": "2021-12-10", "kev_due_date": "2022-06-10", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.76629, "epss_percentile": 0.99547, "epss_date": "2026-11-09", "short_description": "Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7238", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7238" }, { "rank": 688, "cve": "CVE-2026-73570", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "vulnerability_name": "Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability", "kev_date_added": "2026-08-21", "kev_due_date": "2026-08-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.76619, "epss_percentile": 0.99547, "epss_date": "2026-11-09", "short_description": "Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73570", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-73570" }, { "rank": 689, "cve": "CVE-2025-6204", "vendor": "Dassault Systèmes", "product": "DELMIA Apriso", "vulnerability_name": "Dassault Systèmes DELMIA Apriso Code Injection Vulnerability", "kev_date_added": "2025-10-28", "kev_due_date": "2025-11-18", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.76605, "epss_percentile": 0.99546, "epss_date": "2026-11-09", "short_description": "Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6204", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-6204" }, { "rank": 690, "cve": "CVE-2020-13965", "vendor": "Roundcube", "product": "Webmail", "vulnerability_name": "Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability", "kev_date_added": "2024-06-26", "kev_due_date": "2024-07-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-80" ], "epss": 0.76596, "epss_percentile": 0.99546, "epss_date": "2026-11-09", "short_description": "Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13965", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965" }, { "rank": 691, "cve": "CVE-2008-0015", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": " Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability", "kev_date_added": "2026-02-17", "kev_due_date": "2026-03-10", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.76576, "epss_percentile": 0.99545, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0015", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-0015" }, { "rank": 692, "cve": "CVE-2018-15133", "vendor": "Laravel", "product": "Laravel Framework", "vulnerability_name": "Laravel Deserialization of Untrusted Data Vulnerability", "kev_date_added": "2024-01-16", "kev_due_date": "2024-02-06", "known_ransomware_use": "Unknown", "cwes": [ "CWE-502" ], "epss": 0.7657, "epss_percentile": 0.99545, "epss_date": "2026-11-09", "short_description": "Laravel Framework contains a deserialization of untrusted data vulnerability, allowing for remote command execution. This vulnerability may only be exploited if a malicious user has accessed the application encryption key (APP_KEY environment variable).", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-15133", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-15133" }, { "rank": 693, "cve": "CVE-2026-88772", "vendor": "Citrix", "product": "NetScaler", "vulnerability_name": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "kev_date_added": "2026-09-27", "kev_due_date": "2026-09-30", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.76566, "epss_percentile": 0.99545, "epss_date": "2026-11-09", "short_description": "Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of service", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88772", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88772" }, { "rank": 694, "cve": "CVE-2021-38406", "vendor": "Delta Electronics", "product": "DOPSoft 2", "vulnerability_name": "Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability", "kev_date_added": "2022-08-25", "kev_due_date": "2022-09-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.76428, "epss_percentile": 0.99544, "epss_date": "2026-11-09", "short_description": "Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific project files (improper input validation) resulting in an out-of-bounds write that allows for code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-38406", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-38406" }, { "rank": 695, "cve": "CVE-2023-5631", "vendor": "Roundcube", "product": "Webmail", "vulnerability_name": "Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability", "kev_date_added": "2023-10-26", "kev_due_date": "2023-11-16", "known_ransomware_use": "Unknown", "cwes": [ "CWE-79" ], "epss": 0.76337, "epss_percentile": 0.99541, "epss_date": "2026-11-09", "short_description": "Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5631", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5631" }, { "rank": 696, "cve": "CVE-2018-15811", "vendor": "DotNetNuke (DNN)", "product": "DotNetNuke (DNN)", "vulnerability_name": "DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-326" ], "epss": 0.76304, "epss_percentile": 0.9954, "epss_date": "2026-11-09", "short_description": "DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-15811", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-15811" }, { "rank": 697, "cve": "CVE-2023-44221", "vendor": "SonicWall", "product": "SMA100 Appliances", "vulnerability_name": "SonicWall SMA100 Appliances OS Command Injection Vulnerability", "kev_date_added": "2025-05-01", "kev_due_date": "2025-05-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.7625, "epss_percentile": 0.99539, "epss_date": "2026-11-09", "short_description": "SonicWall SMA100 appliances contain an OS command injection vulnerability in the SSL-VPN management interface that allows a remote, authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44221", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-44221" }, { "rank": 698, "cve": "CVE-2026-25089", "vendor": "Fortinet", "product": "FortiSandbox", "vulnerability_name": "Fortinet FortiSandbox OS Command Injection Vulnerability", "kev_date_added": "2026-07-16", "kev_due_date": "2026-07-19", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.76112, "epss_percentile": 0.99535, "epss_date": "2026-11-09", "short_description": "Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25089", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-25089" }, { "rank": 699, "cve": "CVE-2021-30860", "vendor": "Apple", "product": "Multiple Products", "vulnerability_name": "Apple Multiple Products Integer Overflow Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20", "CWE-190" ], "epss": 0.75994, "epss_percentile": 0.99532, "epss_date": "2026-11-09", "short_description": "Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30860", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30860" }, { "rank": 700, "cve": "CVE-2015-0016", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows TS WebProxy Directory Traversal Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-22" ], "epss": 0.75777, "epss_percentile": 0.99527, "epss_date": "2026-11-09", "short_description": "Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allows remote attackers to escalate privileges.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0016", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0016" }, { "rank": 701, "cve": "CVE-2016-3718", "vendor": "ImageMagick", "product": "ImageMagick", "vulnerability_name": "ImageMagick Server-Side Request Forgery (SSRF) Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.7565, "epss_percentile": 0.99524, "epss_date": "2026-11-09", "short_description": "ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3718", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3718" }, { "rank": 702, "cve": "CVE-2012-0391", "vendor": "Apache", "product": "Struts 2", "vulnerability_name": "Apache Struts 2 Improper Input Validation Vulnerability", "kev_date_added": "2022-01-21", "kev_due_date": "2022-07-21", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.75599, "epss_percentile": 0.99523, "epss_date": "2026-11-09", "short_description": "The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability that allows for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0391", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0391" }, { "rank": 703, "cve": "CVE-2026-76460", "vendor": "Cisco", "product": "Identity Services Engine", "vulnerability_name": "Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability", "kev_date_added": "2026-09-16", "kev_due_date": "2026-09-19", "known_ransomware_use": "Unknown", "cwes": [ "CWE-648" ], "epss": 0.75599, "epss_percentile": 0.99523, "epss_date": "2026-11-09", "short_description": "Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76460", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76460" }, { "rank": 704, "cve": "CVE-2016-3715", "vendor": "ImageMagick", "product": "ImageMagick", "vulnerability_name": "ImageMagick Arbitrary File Deletion Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-284" ], "epss": 0.75307, "epss_percentile": 0.99517, "epss_date": "2026-11-09", "short_description": "ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3715", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3715" }, { "rank": 705, "cve": "CVE-2021-42258", "vendor": "BQE", "product": "BillQuick Web Suite", "vulnerability_name": "BQE BillQuick Web Suite SQL Injection Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Known", "cwes": [ "CWE-89" ], "epss": 0.75182, "epss_percentile": 0.99514, "epss_date": "2026-11-09", "short_description": "BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42258", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-42258" }, { "rank": 706, "cve": "CVE-2017-9248", "vendor": "Progress", "product": "ASP.NET AJAX and Sitefinity", "vulnerability_name": "Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-522" ], "epss": 0.75098, "epss_percentile": 0.99513, "epss_date": "2026-11-09", "short_description": "Progress Telerik UI for ASP.NET AJAX and Sitefinity have a cryptographic weakness in Telerik.Web.UI.dll that can be exploited to disclose encryption keys (Telerik.Web.UI.DialogParametersEncryptionKey and/or the MachineKey), perform cross-site-scripting (XSS) attacks, compromise the ASP.NET ViewState, and/or upload and download files.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9248", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-9248" }, { "rank": 707, "cve": "CVE-2022-44698", "vendor": "Microsoft", "product": "Defender", "vulnerability_name": "Microsoft Defender SmartScreen Security Feature Bypass Vulnerability", "kev_date_added": "2022-12-13", "kev_due_date": "2023-01-03", "known_ransomware_use": "Known", "cwes": [ "CWE-755" ], "epss": 0.74986, "epss_percentile": 0.9951, "epss_date": "2026-11-09", "short_description": "Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-44698", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-44698" }, { "rank": 708, "cve": "CVE-2025-31125", "vendor": "Vite", "product": "Vitejs", "vulnerability_name": "Vite Vitejs Improper Access Control Vulnerability", "kev_date_added": "2026-01-22", "kev_due_date": "2026-02-12", "known_ransomware_use": "Unknown", "cwes": [ "CWE-200", "CWE-284" ], "epss": 0.74939, "epss_percentile": 0.99508, "epss_date": "2026-11-09", "short_description": "Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31125", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-31125" }, { "rank": 709, "cve": "CVE-2018-8298", "vendor": "ChakraCore", "product": "ChakraCore scripting engine", "vulnerability_name": "ChakraCore Scripting Engine Type Confusion Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-843" ], "epss": 0.74694, "epss_percentile": 0.99505, "epss_date": "2026-11-09", "short_description": "The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8298", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8298" }, { "rank": 710, "cve": "CVE-2014-0780", "vendor": "InduSoft", "product": "Web Studio", "vulnerability_name": "InduSoft Web Studio NTWebServer Directory Traversal Vulnerability", "kev_date_added": "2022-04-15", "kev_due_date": "2022-05-06", "known_ransomware_use": "Unknown", "cwes": [ "CWE-22" ], "epss": 0.74679, "epss_percentile": 0.99504, "epss_date": "2026-11-09", "short_description": "InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0780", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0780" }, { "rank": 711, "cve": "CVE-2005-2773", "vendor": "Hewlett Packard (HP)", "product": "OpenView Network Node Manager", "vulnerability_name": "HP OpenView Network Node Manager Remote Code Execution Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.74592, "epss_percentile": 0.99501, "epss_date": "2026-11-09", "short_description": "HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2773", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2005-2773" }, { "rank": 712, "cve": "CVE-2025-20337", "vendor": "Cisco", "product": "Identity Services Engine", "vulnerability_name": "Cisco Identity Services Engine Injection Vulnerability", "kev_date_added": "2025-07-28", "kev_due_date": "2025-08-18", "known_ransomware_use": "Unknown", "cwes": [ "CWE-74" ], "epss": 0.74499, "epss_percentile": 0.99498, "epss_date": "2026-11-09", "short_description": "Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20337", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20337" }, { "rank": 713, "cve": "CVE-2025-1316", "vendor": "Edimax", "product": "IC-7100 IP Camera", "vulnerability_name": "Edimax IC-7100 IP Camera OS Command Injection Vulnerability", "kev_date_added": "2025-03-19", "kev_due_date": "2025-04-09", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.74482, "epss_percentile": 0.99498, "epss_date": "2026-11-09", "short_description": "Edimax IC-7100 IP camera contains an OS command injection vulnerability due to improper input sanitization that allows an attacker to achieve remote code execution via specially crafted requests. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1316", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-1316" }, { "rank": 714, "cve": "CVE-2019-1003029", "vendor": "Jenkins", "product": "Script Security Plugin", "vulnerability_name": "Jenkins Script Security Plugin Sandbox Bypass Vulnerability", "kev_date_added": "2022-04-25", "kev_due_date": "2022-05-16", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.7444, "epss_percentile": 0.99496, "epss_date": "2026-11-09", "short_description": "Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1003029", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1003029" }, { "rank": 715, "cve": "CVE-2019-1458", "vendor": "Microsoft", "product": "Win32k", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "kev_date_added": "2022-01-10", "kev_due_date": "2022-07-10", "known_ransomware_use": "Known", "cwes": [], "epss": 0.74438, "epss_percentile": 0.99496, "epss_date": "2026-11-09", "short_description": "A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1458", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1458" }, { "rank": 716, "cve": "CVE-2018-14667", "vendor": "Red Hat", "product": "JBoss RichFaces Framework", "vulnerability_name": "Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability", "kev_date_added": "2023-09-28", "kev_due_date": "2023-10-19", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.74202, "epss_percentile": 0.9949, "epss_date": "2026-11-09", "short_description": "Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14667", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14667" }, { "rank": 717, "cve": "CVE-2017-8543", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Search Remote Code Execution Vulnerability", "kev_date_added": "2022-05-24", "kev_due_date": "2022-06-14", "known_ransomware_use": "Unknown", "cwes": [ "CWE-281" ], "epss": 0.74164, "epss_percentile": 0.99489, "epss_date": "2026-11-09", "short_description": "Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-8543", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-8543" }, { "rank": 718, "cve": "CVE-2024-21182", "vendor": "Oracle", "product": "WebLogic Server", "vulnerability_name": "Oracle WebLogic Server Unspecified Vulnerability", "kev_date_added": "2026-06-01", "kev_due_date": "2026-06-04", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.74162, "epss_percentile": 0.99489, "epss_date": "2026-11-09", "short_description": "Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21182", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21182" }, { "rank": 719, "cve": "CVE-2013-2551", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "kev_date_added": "2022-03-28", "kev_due_date": "2022-04-18", "known_ransomware_use": "Known", "cwes": [ "CWE-416" ], "epss": 0.74096, "epss_percentile": 0.99488, "epss_date": "2026-11-09", "short_description": "Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2551", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2551" }, { "rank": 720, "cve": "CVE-2019-12991", "vendor": "Citrix", "product": "SD-WAN and NetScaler", "vulnerability_name": "Citrix SD-WAN and NetScaler Command Injection Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.74067, "epss_percentile": 0.99486, "epss_date": "2026-11-09", "short_description": "Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12991", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-12991" }, { "rank": 721, "cve": "CVE-2025-2746", "vendor": "Kentico", "product": "Xperience CMS", "vulnerability_name": "Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability", "kev_date_added": "2025-10-20", "kev_due_date": "2025-11-10", "known_ransomware_use": "Unknown", "cwes": [ "CWE-288" ], "epss": 0.74055, "epss_percentile": 0.99486, "epss_date": "2026-11-09", "short_description": "Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2746", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2746" }, { "rank": 722, "cve": "CVE-2018-18325", "vendor": "DotNetNuke (DNN)", "product": "DotNetNuke (DNN)", "vulnerability_name": "DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-326" ], "epss": 0.74048, "epss_percentile": 0.99485, "epss_date": "2026-11-09", "short_description": "DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters. This CVE ID resolves an incomplete patch for CVE-2018-15811.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18325", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-18325" }, { "rank": 723, "cve": "CVE-2024-37383", "vendor": "Roundcube", "product": "Webmail", "vulnerability_name": "RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability", "kev_date_added": "2024-10-24", "kev_due_date": "2024-11-14", "known_ransomware_use": "Unknown", "cwes": [ "CWE-79" ], "epss": 0.73995, "epss_percentile": 0.99483, "epss_date": "2026-11-09", "short_description": "RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate attributes that allows a remote attacker to run malicious JavaScript code.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37383", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383" }, { "rank": 724, "cve": "CVE-2015-3043", "vendor": "Adobe", "product": "Flash Player", "vulnerability_name": "Adobe Flash Player Memory Corruption Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.73862, "epss_percentile": 0.9948, "epss_date": "2026-11-09", "short_description": "A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3043", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3043" }, { "rank": 725, "cve": "CVE-2010-0738", "vendor": "Red Hat", "product": "JBoss", "vulnerability_name": "Red Hat JBoss Authentication Bypass Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Known", "cwes": [ "CWE-264" ], "epss": 0.73815, "epss_percentile": 0.99479, "epss_date": "2026-11-09", "short_description": "The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0738", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0738" }, { "rank": 726, "cve": "CVE-2013-3918", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Out-of-Bounds Write Vulnerability", "kev_date_added": "2025-10-06", "kev_due_date": "2025-10-27", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.73693, "epss_percentile": 0.99476, "epss_date": "2026-11-09", "short_description": "Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An attacker could exploit the vulnerability by constructing a specially crafted webpage. When a user views the webpage, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-3918", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3918" }, { "rank": 727, "cve": "CVE-2021-25298", "vendor": "Nagios", "product": "Nagios XI", "vulnerability_name": "Nagios XI OS Command Injection", "kev_date_added": "2022-01-18", "kev_due_date": "2022-02-01", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78", "CWE-138" ], "epss": 0.73641, "epss_percentile": 0.99474, "epss_date": "2026-11-09", "short_description": "Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25298", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25298" }, { "rank": 728, "cve": "CVE-2025-40536", "vendor": "SolarWinds", "product": "Web Help Desk", "vulnerability_name": "SolarWinds Web Help Desk Security Control Bypass Vulnerability", "kev_date_added": "2026-02-12", "kev_due_date": "2026-02-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-693" ], "epss": 0.73562, "epss_percentile": 0.9947, "epss_date": "2026-11-09", "short_description": "SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauthenticated attacker to gain access to certain restricted functionality.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-40536", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-40536" }, { "rank": 729, "cve": "CVE-2026-110447", "vendor": "Collabora", "product": "Collabora Online – Built-in CODE Server", "vulnerability_name": "Collabora Online – Built-in CODE Server OS Command Injection Vulnerability", "kev_date_added": "2026-10-23", "kev_due_date": "2026-10-26", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.73307, "epss_percentile": 0.99464, "epss_date": "2026-11-09", "short_description": "Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110447", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-110447" }, { "rank": 730, "cve": "CVE-2021-42278", "vendor": "Microsoft", "product": "Active Directory", "vulnerability_name": "Microsoft Active Directory Domain Services Privilege Escalation Vulnerability", "kev_date_added": "2022-04-11", "kev_due_date": "2022-05-02", "known_ransomware_use": "Known", "cwes": [ "CWE-20" ], "epss": 0.73297, "epss_percentile": 0.99464, "epss_date": "2026-11-09", "short_description": "Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42278", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-42278" }, { "rank": 731, "cve": "CVE-2018-8120", "vendor": "Microsoft", "product": "Win32k", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "kev_date_added": "2022-03-15", "kev_due_date": "2022-04-05", "known_ransomware_use": "Known", "cwes": [ "CWE-404" ], "epss": 0.73288, "epss_percentile": 0.99464, "epss_date": "2026-11-09", "short_description": "A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8120", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8120" }, { "rank": 732, "cve": "CVE-2023-47565", "vendor": "QNAP", "product": "VioStor NVR", "vulnerability_name": "QNAP VioStor NVR OS Command Injection Vulnerability", "kev_date_added": "2023-12-21", "kev_due_date": "2024-01-11", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.73277, "epss_percentile": 0.99463, "epss_date": "2026-11-09", "short_description": "QNAP VioStar NVR contains an OS command injection vulnerability that allows authenticated users to execute commands via a network.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47565", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565" }, { "rank": 733, "cve": "CVE-2026-21962", "vendor": "Oracle", "product": "HTTP Server and Oracle Weblogic Server Proxy Plug-in", "vulnerability_name": "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability", "kev_date_added": "2026-08-24", "kev_due_date": "2026-08-27", "known_ransomware_use": "Unknown", "cwes": [ "CWE-284" ], "epss": 0.73192, "epss_percentile": 0.99461, "epss_date": "2026-11-09", "short_description": "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in accessible data.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21962", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21962" }, { "rank": 734, "cve": "CVE-2018-0824", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability", "kev_date_added": "2024-08-05", "kev_due_date": "2024-08-26", "known_ransomware_use": "Unknown", "cwes": [ "CWE-502" ], "epss": 0.73037, "epss_percentile": 0.99459, "epss_date": "2026-11-09", "short_description": "Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0824", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824" }, { "rank": 735, "cve": "CVE-2017-6316", "vendor": "Citrix", "product": "NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server", "vulnerability_name": "Citrix Multiple Products Remote Code Execution Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.7303, "epss_percentile": 0.99459, "epss_date": "2026-11-09", "short_description": "A vulnerability has been identified in the management interface of Citrix NetScaler SD-WAN Enterprise and Standard Edition and Citrix CloudBridge Virtual WAN Edition that could result in an unauthenticated, remote attacker being able to execute arbitrary code as a root user. This vulnerability also affects XenMobile Server.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6316", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6316" }, { "rank": 736, "cve": "CVE-2019-9978", "vendor": "WordPress", "product": "Social Warfare Plugin", "vulnerability_name": "WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-79" ], "epss": 0.72946, "epss_percentile": 0.99456, "epss_date": "2026-11-09", "short_description": "WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9978", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-9978" }, { "rank": 737, "cve": "CVE-2020-5741", "vendor": "Plex", "product": "Media Server", "vulnerability_name": "Plex Media Server Remote Code Execution Vulnerability", "kev_date_added": "2023-03-10", "kev_due_date": "2023-03-31", "known_ransomware_use": "Unknown", "cwes": [ "CWE-502" ], "epss": 0.72936, "epss_percentile": 0.99456, "epss_date": "2026-11-09", "short_description": "Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-5741", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-5741" }, { "rank": 738, "cve": "CVE-2017-6334", "vendor": "NETGEAR", "product": "DGN2200 Devices", "vulnerability_name": "NETGEAR DGN2200 Devices OS Command Injection Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.7264, "epss_percentile": 0.99448, "epss_date": "2026-11-09", "short_description": "dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6334", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6334" }, { "rank": 739, "cve": "CVE-2018-8414", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Shell Remote Code Execution Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.72621, "epss_percentile": 0.99447, "epss_date": "2026-11-09", "short_description": "A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8414", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8414" }, { "rank": 740, "cve": "CVE-2018-7841", "vendor": "Schneider Electric", "product": "U.motion Builder", "vulnerability_name": "Schneider Electric U.motion Builder SQL Injection Vulnerability", "kev_date_added": "2022-04-15", "kev_due_date": "2022-05-06", "known_ransomware_use": "Unknown", "cwes": [ "CWE-89" ], "epss": 0.72486, "epss_percentile": 0.99444, "epss_date": "2026-11-09", "short_description": "A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7841", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-7841" }, { "rank": 741, "cve": "CVE-2022-20699", "vendor": "Cisco", "product": "Small Business RV160, RV260, RV340, and RV345 Series Routers", "vulnerability_name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-785" ], "epss": 0.72458, "epss_percentile": 0.99444, "epss_date": "2026-11-09", "short_description": "A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-20699", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-20699" }, { "rank": 742, "cve": "CVE-2019-2215", "vendor": "Android", "product": "Android Kernel", "vulnerability_name": "Android Kernel Use-After-Free Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-416" ], "epss": 0.72105, "epss_percentile": 0.99435, "epss_date": "2026-11-09", "short_description": "Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2215", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-2215" }, { "rank": 743, "cve": "CVE-2025-30066", "vendor": "tj-actions", "product": "changed-files GitHub Action", "vulnerability_name": "tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability", "kev_date_added": "2025-03-18", "kev_due_date": "2025-04-08", "known_ransomware_use": "Unknown", "cwes": [ "CWE-506" ], "epss": 0.72092, "epss_percentile": 0.99435, "epss_date": "2026-11-09", "short_description": "tj-actions/changed-files GitHub Action contains an embedded malicious code vulnerability that allows a remote attacker to discover secrets by reading Github Actions Workflow Logs. These secrets may include, but are not limited to, valid AWS access keys, GitHub personal access tokens (PATs), npm tokens, and private RSA keys.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30066", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-30066" }, { "rank": 744, "cve": "CVE-2025-20333", "vendor": "Cisco", "product": "Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense", "vulnerability_name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability", "kev_date_added": "2025-09-25", "kev_due_date": "2025-09-26", "known_ransomware_use": "Unknown", "cwes": [ "CWE-120" ], "epss": 0.72037, "epss_percentile": 0.99434, "epss_date": "2026-11-09", "short_description": "Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20333", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20333" }, { "rank": 745, "cve": "CVE-2012-1856", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.72032, "epss_percentile": 0.99433, "epss_date": "2026-11-09", "short_description": "The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1856", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1856" }, { "rank": 746, "cve": "CVE-2021-25296", "vendor": "Nagios", "product": "Nagios XI", "vulnerability_name": "Nagios XI OS Command Injection", "kev_date_added": "2022-01-18", "kev_due_date": "2022-02-01", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78", "CWE-138" ], "epss": 0.71935, "epss_percentile": 0.99431, "epss_date": "2026-11-09", "short_description": "Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25296", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25296" }, { "rank": 747, "cve": "CVE-2017-8540", "vendor": "Microsoft", "product": "Malware Protection Engine", "vulnerability_name": "Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.71874, "epss_percentile": 0.9943, "epss_date": "2026-11-09", "short_description": "The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability\".", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-8540", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-8540" }, { "rank": 748, "cve": "CVE-2010-4344", "vendor": "Exim", "product": "Exim", "vulnerability_name": "Exim Heap-Based Buffer Overflow Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.71706, "epss_percentile": 0.99426, "epss_date": "2026-11-09", "short_description": "Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-4344", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-4344" }, { "rank": 749, "cve": "CVE-2016-2386", "vendor": "SAP", "product": "NetWeaver", "vulnerability_name": "SAP NetWeaver SQL Injection Vulnerability", "kev_date_added": "2022-06-09", "kev_due_date": "2022-06-30", "known_ransomware_use": "Unknown", "cwes": [ "CWE-89" ], "epss": 0.71522, "epss_percentile": 0.99421, "epss_date": "2026-11-09", "short_description": "SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2386", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-2386" }, { "rank": 750, "cve": "CVE-2020-3259", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "vulnerability_name": "Cisco ASA and FTD Information Disclosure Vulnerability", "kev_date_added": "2024-02-15", "kev_due_date": "2024-03-07", "known_ransomware_use": "Known", "cwes": [ "CWE-200" ], "epss": 0.715, "epss_percentile": 0.9942, "epss_date": "2026-11-09", "short_description": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. This vulnerability affects only specific AnyConnect and WebVPN configurations.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-3259", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3259" }, { "rank": 751, "cve": "CVE-2022-28810", "vendor": "Zoho", "product": "ManageEngine", "vulnerability_name": "Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability", "kev_date_added": "2023-03-07", "kev_due_date": "2023-03-28", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78", "CWE-259" ], "epss": 0.70966, "epss_percentile": 0.99407, "epss_date": "2026-11-09", "short_description": "Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-28810", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-28810" }, { "rank": 752, "cve": "CVE-2026-32202", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Protection Mechanism Failure Vulnerability", "kev_date_added": "2026-04-28", "kev_due_date": "2026-05-12", "known_ransomware_use": "Unknown", "cwes": [ "CWE-693" ], "epss": 0.70902, "epss_percentile": 0.99405, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Shell contains a protection mechanism failure vulnerability that allows an unauthorized attacker to perform spoofing over a network.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32202", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32202" }, { "rank": 753, "cve": "CVE-2022-2294", "vendor": "WebRTC", "product": "WebRTC", "vulnerability_name": "WebRTC Heap Buffer Overflow Vulnerability", "kev_date_added": "2022-08-25", "kev_due_date": "2022-09-15", "known_ransomware_use": "Known", "cwes": [ "CWE-122" ], "epss": 0.70833, "epss_percentile": 0.99403, "epss_date": "2026-11-09", "short_description": "WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2294", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2294" }, { "rank": 754, "cve": "CVE-2026-21509", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Office Security Feature Bypass Vulnerability", "kev_date_added": "2026-01-26", "kev_due_date": "2026-02-16", "known_ransomware_use": "Unknown", "cwes": [ "CWE-807" ], "epss": 0.70823, "epss_percentile": 0.99403, "epss_date": "2026-11-09", "short_description": "Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inputs in a security decision in Microsoft Office could allow an unauthorized attacker to bypass a security feature locally. Some of the impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21509", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21509" }, { "rank": 755, "cve": "CVE-2013-3163", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "kev_date_added": "2023-03-30", "kev_due_date": "2023-04-20", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.70676, "epss_percentile": 0.99398, "epss_date": "2026-11-09", "short_description": "Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial of service via a crafted website.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-3163", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3163" }, { "rank": 756, "cve": "CVE-2026-42897", "vendor": "Microsoft", "product": "Microsoft", "vulnerability_name": "Microsoft Exchange Server Cross-Site Scripting Vulnerability", "kev_date_added": "2026-05-15", "kev_due_date": "2026-05-29", "known_ransomware_use": "Unknown", "cwes": [ "CWE-79" ], "epss": 0.70662, "epss_percentile": 0.99398, "epss_date": "2026-11-09", "short_description": "Microsoft Exchange Server contains a cross-site scripting vulnerability during web page generation in Outlook Web Access and when certain interaction conditions are met, arbitrary JavaScript can be executed in the browser context.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42897", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42897" }, { "rank": 757, "cve": "CVE-2020-36193", "vendor": "PEAR", "product": "Archive_Tar", "vulnerability_name": "PEAR Archive_Tar Improper Link Resolution Vulnerability", "kev_date_added": "2022-08-25", "kev_due_date": "2022-09-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-22", "CWE-59" ], "epss": 0.70595, "epss_percentile": 0.99396, "epss_date": "2026-11-09", "short_description": "PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-36193", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-36193" }, { "rank": 758, "cve": "CVE-2021-21220", "vendor": "Google", "product": "Chromium V8", "vulnerability_name": "Google Chromium V8 Improper Input Validation Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20", "CWE-122" ], "epss": 0.70435, "epss_percentile": 0.99393, "epss_date": "2026-11-09", "short_description": "Google Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21220", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21220" }, { "rank": 759, "cve": "CVE-2012-1535", "vendor": "Adobe", "product": "Flash Player", "vulnerability_name": "Adobe Flash Player Arbitrary Code Execution Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.70384, "epss_percentile": 0.99391, "epss_date": "2026-11-09", "short_description": "Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1535", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1535" }, { "rank": 760, "cve": "CVE-2017-6736", "vendor": "Cisco", "product": "IOS and IOS XE Software", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.70354, "epss_percentile": 0.9939, "epss_date": "2026-11-09", "short_description": "The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6736", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6736" }, { "rank": 761, "cve": "CVE-2026-48710", "vendor": "Kludex", "product": "Starlette", "vulnerability_name": "Kludex Starlette HTTP Request/Response Smuggling Vulnerability", "kev_date_added": "2026-09-02", "kev_due_date": "2026-09-16", "known_ransomware_use": "Unknown", "cwes": [ "CWE-444" ], "epss": 0.70288, "epss_percentile": 0.99388, "epss_date": "2026-11-09", "short_description": "Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability could be chaned with CVE-2026-42271.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48710", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48710" }, { "rank": 762, "cve": "CVE-2018-8453", "vendor": "Microsoft", "product": "Win32k", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "kev_date_added": "2022-01-21", "kev_due_date": "2022-07-21", "known_ransomware_use": "Known", "cwes": [ "CWE-404" ], "epss": 0.70042, "epss_percentile": 0.99381, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8453", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8453" }, { "rank": 763, "cve": "CVE-2020-4427", "vendor": "IBM", "product": "Data Risk Manager", "vulnerability_name": "IBM Data Risk Manager Security Bypass Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.70031, "epss_percentile": 0.99381, "epss_date": "2026-11-09", "short_description": "IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-4427", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-4427" }, { "rank": 764, "cve": "CVE-2021-44026", "vendor": "Roundcube", "product": "Roundcube Webmail", "vulnerability_name": "Roundcube Webmail SQL Injection Vulnerability", "kev_date_added": "2023-06-22", "kev_due_date": "2023-07-13", "known_ransomware_use": "Unknown", "cwes": [ "CWE-89" ], "epss": 0.69882, "epss_percentile": 0.99377, "epss_date": "2026-11-09", "short_description": "Roundcube Webmail is vulnerable to SQL injection via search or search_params.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44026", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44026" }, { "rank": 765, "cve": "CVE-2016-0185", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Media Center Remote Code Execution Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.69846, "epss_percentile": 0.99376, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Media Center contains a remote code execution vulnerability when Windows Media Center opens a specially crafted Media Center link (.mcl) file that references malicious code.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0185", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0185" }, { "rank": 766, "cve": "CVE-2024-20353", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "vulnerability_name": "Cisco ASA and FTD Denial of Service Vulnerability", "kev_date_added": "2024-04-24", "kev_due_date": "2024-05-01", "known_ransomware_use": "Unknown", "cwes": [ "CWE-835" ], "epss": 0.69824, "epss_percentile": 0.99375, "epss_date": "2026-11-09", "short_description": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an infinite loop vulnerability that can lead to remote denial of service condition.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20353", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20353" }, { "rank": 767, "cve": "CVE-2016-11021", "vendor": "D-Link", "product": "DCS-930L Devices", "vulnerability_name": "D-Link DCS-930L Devices OS Command Injection Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.69582, "epss_percentile": 0.99369, "epss_date": "2026-11-09", "short_description": "setSystemCommand on D-Link DCS-930L devices allows a remote attacker to execute code via an OS command.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-11021", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-11021" }, { "rank": 768, "cve": "CVE-2026-55040", "vendor": "Microsoft", "product": "SharePoint", "vulnerability_name": "Microsoft SharePoint Weak Authentication Vulnerability", "kev_date_added": "2026-08-18", "kev_due_date": "2026-08-21", "known_ransomware_use": "Unknown", "cwes": [ "CWE-1390" ], "epss": 0.69536, "epss_percentile": 0.99368, "epss_date": "2026-11-09", "short_description": "Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55040", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-55040" }, { "rank": 769, "cve": "CVE-2016-0034", "vendor": "Microsoft", "product": "Silverlight", "vulnerability_name": "Microsoft Silverlight Runtime Remote Code Execution Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Known", "cwes": [ "CWE-20" ], "epss": 0.69397, "epss_percentile": 0.99364, "epss_date": "2026-11-09", "short_description": "Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0034", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0034" }, { "rank": 770, "cve": "CVE-2026-34909", "vendor": "Ubiquiti", "product": "UniFi OS", "vulnerability_name": "Ubiquiti UniFi OS Path Traversal Vulnerability", "kev_date_added": "2026-06-23", "kev_due_date": "2026-06-26", "known_ransomware_use": "Unknown", "cwes": [ "CWE-22" ], "epss": 0.69235, "epss_percentile": 0.99361, "epss_date": "2026-11-09", "short_description": "Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the network to access files on the underlying system that could be manipulated to access an underlying account.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34909", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34909" }, { "rank": 771, "cve": "CVE-2013-1690", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "vulnerability_name": "Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability", "kev_date_added": "2022-03-28", "kev_due_date": "2022-04-18", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.69021, "epss_percentile": 0.99357, "epss_date": "2026-11-09", "short_description": "Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1690", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1690" }, { "rank": 772, "cve": "CVE-2020-0938", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.6895, "epss_percentile": 0.99355, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0938", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0938" }, { "rank": 773, "cve": "CVE-2017-6077", "vendor": "NETGEAR", "product": "Wireless Router DGN2200", "vulnerability_name": "NETGEAR DGN2200 Remote Code Execution Vulnerability", "kev_date_added": "2022-03-07", "kev_due_date": "2022-09-07", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.68712, "epss_percentile": 0.99348, "epss_date": "2026-11-09", "short_description": "NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6077", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6077" }, { "rank": 774, "cve": "CVE-2015-4495", "vendor": "Mozilla", "product": "Firefox", "vulnerability_name": "Mozilla Firefox Security Feature Bypass Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-200" ], "epss": 0.68558, "epss_percentile": 0.99344, "epss_date": "2026-11-09", "short_description": "Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-4495", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-4495" }, { "rank": 775, "cve": "CVE-2020-4430", "vendor": "IBM", "product": "Data Risk Manager", "vulnerability_name": "IBM Data Risk Manager Directory Traversal Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-22" ], "epss": 0.68544, "epss_percentile": 0.99343, "epss_date": "2026-11-09", "short_description": "IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-4430", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-4430" }, { "rank": 776, "cve": "CVE-2021-30657", "vendor": "Apple", "product": "macOS", "vulnerability_name": "Apple macOS Unspecified Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-862" ], "epss": 0.68531, "epss_percentile": 0.99343, "epss_date": "2026-11-09", "short_description": "Apple macOS contains an unspecified logic issue in System Preferences that may allow a malicious application to bypass Gatekeeper checks.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30657", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30657" }, { "rank": 777, "cve": "CVE-2016-3393", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-284" ], "epss": 0.68465, "epss_percentile": 0.99341, "epss_date": "2026-11-09", "short_description": "A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3393", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3393" }, { "rank": 778, "cve": "CVE-2024-30088", "vendor": "Microsoft", "product": "Windows ", "vulnerability_name": "Microsoft Windows Kernel TOCTOU Race Condition Vulnerability", "kev_date_added": "2024-10-15", "kev_due_date": "2024-11-05", "known_ransomware_use": "Known", "cwes": [ "CWE-367" ], "epss": 0.68202, "epss_percentile": 0.99335, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation. ", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30088", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30088" }, { "rank": 779, "cve": "CVE-2025-59718", "vendor": "Fortinet", "product": "Multiple Products", "vulnerability_name": "Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability", "kev_date_added": "2025-12-16", "kev_due_date": "2025-12-23", "known_ransomware_use": "Unknown", "cwes": [ "CWE-347" ], "epss": 0.68087, "epss_percentile": 0.99332, "epss_date": "2026-11-09", "short_description": "Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic signature vulnerability that may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message. Please be aware that CVE-2025-59719 pertains to the same problem and is mentioned in the same vendor advisory. Ensure to apply all patches mentioned in the advisory.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59718", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59718" }, { "rank": 780, "cve": "CVE-2023-28461", "vendor": "Array Networks ", "product": "AG/vxAG ArrayOS", "vulnerability_name": "Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability", "kev_date_added": "2024-11-25", "kev_due_date": "2024-12-16", "known_ransomware_use": "Known", "cwes": [ "CWE-306" ], "epss": 0.68079, "epss_percentile": 0.99331, "epss_date": "2026-11-09", "short_description": "Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28461", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28461" }, { "rank": 781, "cve": "CVE-2019-18426", "vendor": "Meta Platforms", "product": "WhatsApp", "vulnerability_name": "WhatsApp Cross-Site Scripting Vulnerability", "kev_date_added": "2022-05-23", "kev_due_date": "2022-06-13", "known_ransomware_use": "Unknown", "cwes": [ "CWE-79" ], "epss": 0.67859, "epss_percentile": 0.99326, "epss_date": "2026-11-09", "short_description": "A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18426", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-18426" }, { "rank": 782, "cve": "CVE-2022-34713", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability", "kev_date_added": "2022-08-09", "kev_due_date": "2022-08-30", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.67757, "epss_percentile": 0.99323, "epss_date": "2026-11-09", "short_description": "A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-34713", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-34713" }, { "rank": 783, "cve": "CVE-2015-8651", "vendor": "Adobe", "product": "Flash Player", "vulnerability_name": "Adobe Flash Player Integer Overflow Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-189" ], "epss": 0.67698, "epss_percentile": 0.99321, "epss_date": "2026-11-09", "short_description": "Integer overflow in Adobe Flash Player allows attackers to execute code.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8651", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-8651" }, { "rank": 784, "cve": "CVE-2009-0556", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Office PowerPoint Code Injection Vulnerability", "kev_date_added": "2026-01-07", "kev_due_date": "2026-01-28", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.67312, "epss_percentile": 0.9931, "epss_date": "2026-11-09", "short_description": "Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers memory corruption.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0556", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0556" }, { "rank": 785, "cve": "CVE-2021-36934", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows SAM Local Privilege Escalation Vulnerability", "kev_date_added": "2022-02-10", "kev_due_date": "2022-02-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-1220" ], "epss": 0.67252, "epss_percentile": 0.99309, "epss_date": "2026-11-09", "short_description": "If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36934", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-36934" }, { "rank": 786, "cve": "CVE-2025-6205", "vendor": "Dassault Systèmes", "product": "DELMIA Apriso", "vulnerability_name": "Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability", "kev_date_added": "2025-10-28", "kev_due_date": "2025-11-18", "known_ransomware_use": "Unknown", "cwes": [ "CWE-862" ], "epss": 0.67159, "epss_percentile": 0.99307, "epss_date": "2026-11-09", "short_description": "Dassault Systèmes DELMIA Apriso contains a missing authorization vulnerability that could allow an attacker to gain privileged access to the application.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6205", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-6205" }, { "rank": 787, "cve": "CVE-2013-3896", "vendor": "Microsoft", "product": "Silverlight", "vulnerability_name": "Microsoft Silverlight Information Disclosure Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.67142, "epss_percentile": 0.99306, "epss_date": "2026-11-09", "short_description": "Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-3896", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3896" }, { "rank": 788, "cve": "CVE-2016-4657", "vendor": "Apple", "product": "iOS", "vulnerability_name": "Apple iOS Webkit Memory Corruption Vulnerability", "kev_date_added": "2022-05-24", "kev_due_date": "2022-06-14", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.66788, "epss_percentile": 0.99298, "epss_date": "2026-11-09", "short_description": "Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS) via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4657", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4657" }, { "rank": 789, "cve": "CVE-2024-43572", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Management Console Remote Code Execution Vulnerability", "kev_date_added": "2024-10-08", "kev_due_date": "2024-10-29", "known_ransomware_use": "Unknown", "cwes": [ "CWE-707" ], "epss": 0.66695, "epss_percentile": 0.99296, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43572", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43572" }, { "rank": 790, "cve": "CVE-2013-2729", "vendor": "Adobe", "product": "Reader and Acrobat", "vulnerability_name": "Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability", "kev_date_added": "2022-03-28", "kev_due_date": "2022-04-18", "known_ransomware_use": "Unknown", "cwes": [ "CWE-189" ], "epss": 0.66555, "epss_percentile": 0.99292, "epss_date": "2026-11-09", "short_description": "Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2729", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2729" }, { "rank": 791, "cve": "CVE-2024-57726", "vendor": "SimpleHelp ", "product": "SimpleHelp", "vulnerability_name": "SimpleHelp Missing Authorization Vulnerability", "kev_date_added": "2026-04-24", "kev_due_date": "2026-05-08", "known_ransomware_use": "Known", "cwes": [ "CWE-862" ], "epss": 0.66414, "epss_percentile": 0.99289, "epss_date": "2026-11-09", "short_description": "SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57726", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57726" }, { "rank": 792, "cve": "CVE-2013-0631", "vendor": "Adobe", "product": "ColdFusion", "vulnerability_name": "Adobe ColdFusion Information Disclosure Vulnerability", "kev_date_added": "2022-03-07", "kev_due_date": "2022-09-07", "known_ransomware_use": "Unknown", "cwes": [ "CWE-200" ], "epss": 0.66413, "epss_percentile": 0.99289, "epss_date": "2026-11-09", "short_description": "Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0631", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0631" }, { "rank": 793, "cve": "CVE-2021-36942", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Known", "cwes": [ "CWE-749" ], "epss": 0.66023, "epss_percentile": 0.99279, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36942", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-36942" }, { "rank": 794, "cve": "CVE-2018-7445", "vendor": "MikroTik", "product": "RouterOS", "vulnerability_name": "MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability", "kev_date_added": "2022-09-08", "kev_due_date": "2022-09-29", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.65828, "epss_percentile": 0.99274, "epss_date": "2026-11-09", "short_description": "In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7445", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-7445" }, { "rank": 795, "cve": "CVE-2013-0629", "vendor": "Adobe", "product": "ColdFusion", "vulnerability_name": "Adobe ColdFusion Directory Traversal Vulnerability", "kev_date_added": "2022-03-07", "kev_due_date": "2022-09-07", "known_ransomware_use": "Unknown", "cwes": [ "CWE-264" ], "epss": 0.65795, "epss_percentile": 0.99273, "epss_date": "2026-11-09", "short_description": "Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0629", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0629" }, { "rank": 796, "cve": "CVE-2016-20017", "vendor": "D-Link", "product": "DSL-2750B Devices", "vulnerability_name": "D-Link DSL-2750B Devices Command Injection Vulnerability", "kev_date_added": "2024-01-08", "kev_due_date": "2024-01-29", "known_ransomware_use": "Unknown", "cwes": [ "CWE-77" ], "epss": 0.65777, "epss_percentile": 0.99272, "epss_date": "2026-11-09", "short_description": "D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-20017", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-20017" }, { "rank": 797, "cve": "CVE-2015-7645", "vendor": "Adobe", "product": "Flash Player", "vulnerability_name": "Adobe Flash Player Arbitrary Code Execution Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Known", "cwes": [], "epss": 0.65339, "epss_percentile": 0.99263, "epss_date": "2026-11-09", "short_description": "Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7645", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-7645" }, { "rank": 798, "cve": "CVE-2025-2776", "vendor": "SysAid", "product": "SysAid On-Prem", "vulnerability_name": "SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability", "kev_date_added": "2025-07-22", "kev_due_date": "2025-08-12", "known_ransomware_use": "Unknown", "cwes": [ "CWE-611" ], "epss": 0.65227, "epss_percentile": 0.9926, "epss_date": "2026-11-09", "short_description": "SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2776", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2776" }, { "rank": 799, "cve": "CVE-2026-97229", "vendor": "GitLab", "product": "Community Edition and Enterprise Edition", "vulnerability_name": "GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability", "kev_date_added": "2026-10-29", "kev_due_date": "2026-11-01", "known_ransomware_use": "Unknown", "cwes": [ "CWE-190" ], "epss": 0.6522, "epss_percentile": 0.9926, "epss_date": "2026-11-09", "short_description": "GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97229", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-97229" }, { "rank": 800, "cve": "CVE-2025-43300", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "vulnerability_name": "Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability", "kev_date_added": "2025-08-21", "kev_due_date": "2025-09-11", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.65159, "epss_percentile": 0.99259, "epss_date": "2026-11-09", "short_description": "Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43300", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43300" }, { "rank": 801, "cve": "CVE-2014-1812", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Known", "cwes": [ "CWE-255" ], "epss": 0.65117, "epss_percentile": 0.99258, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Active Directory contains a privilege escalation vulnerability due to the way it distributes passwords that are configured using Group Policy preferences. An authenticated attacker who successfully exploits the vulnerability could decrypt the passwords and use them to elevate privileges on the domain.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1812", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-1812" }, { "rank": 802, "cve": "CVE-2020-1020", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.65037, "epss_percentile": 0.99257, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1020", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1020" }, { "rank": 803, "cve": "CVE-2019-0211", "vendor": "Apache", "product": "HTTP Server", "vulnerability_name": "Apache HTTP Server Privilege Escalation Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-416" ], "epss": 0.65005, "epss_percentile": 0.99256, "epss_date": "2026-11-09", "short_description": "Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0211", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0211" }, { "rank": 804, "cve": "CVE-2021-27877", "vendor": "Veritas", "product": "Backup Exec Agent", "vulnerability_name": "Veritas Backup Exec Agent Improper Authentication Vulnerability", "kev_date_added": "2023-04-07", "kev_due_date": "2023-04-28", "known_ransomware_use": "Known", "cwes": [ "CWE-287" ], "epss": 0.6491, "epss_percentile": 0.99253, "epss_date": "2026-11-09", "short_description": "Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-27877", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27877" }, { "rank": 805, "cve": "CVE-2021-30551", "vendor": "Google", "product": "Chromium V8", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-122", "CWE-843" ], "epss": 0.64701, "epss_percentile": 0.99249, "epss_date": "2026-11-09", "short_description": "Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30551", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30551" }, { "rank": 806, "cve": "CVE-2016-7256", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Open Type Font Remote Code Execution Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-284" ], "epss": 0.64591, "epss_percentile": 0.99246, "epss_date": "2026-11-09", "short_description": "A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7256", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7256" }, { "rank": 807, "cve": "CVE-2024-57728", "vendor": "SimpleHelp ", "product": "SimpleHelp", "vulnerability_name": "SimpleHelp Path Traversal Vulnerability", "kev_date_added": "2026-04-24", "kev_due_date": "2026-05-08", "known_ransomware_use": "Known", "cwes": [ "CWE-22" ], "epss": 0.64468, "epss_percentile": 0.99243, "epss_date": "2026-11-09", "short_description": "SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57728", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57728" }, { "rank": 808, "cve": "CVE-2023-29552", "vendor": "IETF", "product": "Service Location Protocol (SLP)", "vulnerability_name": "Service Location Protocol (SLP) Denial-of-Service Vulnerability", "kev_date_added": "2023-11-08", "kev_due_date": "2023-11-29", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.63975, "epss_percentile": 0.9923, "epss_date": "2026-11-09", "short_description": "The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29552", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29552" }, { "rank": 809, "cve": "CVE-2020-15999", "vendor": "Google", "product": "Chrome FreeType", "vulnerability_name": "Google Chrome FreeType Heap Buffer Overflow Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.63894, "epss_percentile": 0.99228, "epss_date": "2026-11-09", "short_description": "Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15999", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-15999" }, { "rank": 810, "cve": "CVE-2023-4911", "vendor": "GNU", "product": "GNU C Library", "vulnerability_name": "GNU C Library Buffer Overflow Vulnerability", "kev_date_added": "2023-11-21", "kev_due_date": "2023-12-12", "known_ransomware_use": "Unknown", "cwes": [ "CWE-122" ], "epss": 0.63769, "epss_percentile": 0.99226, "epss_date": "2026-11-09", "short_description": "GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4911", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4911" }, { "rank": 811, "cve": "CVE-2023-43770", "vendor": "Roundcube", "product": "Webmail", "vulnerability_name": "Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability", "kev_date_added": "2024-02-12", "kev_due_date": "2024-03-04", "known_ransomware_use": "Unknown", "cwes": [ "CWE-79" ], "epss": 0.6366, "epss_percentile": 0.99222, "epss_date": "2026-11-09", "short_description": "Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to information disclosure via malicious link references in plain/text messages.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43770", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-43770" }, { "rank": 812, "cve": "CVE-2015-4068", "vendor": "Arcserve", "product": "Unified Data Protection (UDP)", "vulnerability_name": "Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-22" ], "epss": 0.63643, "epss_percentile": 0.99222, "epss_date": "2026-11-09", "short_description": "Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-4068", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-4068" }, { "rank": 813, "cve": "CVE-2021-22681", "vendor": "Rockwell", "product": "Multiple Products", "vulnerability_name": "Rockwell Multiple Products Insufficient Protected Credentials Vulnerability", "kev_date_added": "2026-03-05", "kev_due_date": "2026-03-26", "known_ransomware_use": "Unknown", "cwes": [ "CWE-522" ], "epss": 0.6363, "epss_percentile": 0.99222, "epss_date": "2026-11-09", "short_description": "Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to be discovered. This key is used to verify Logix controllers are communicating with Rockwell Automation design software. If successfully exploited, this vulnerability could allow an unauthorized application to connect with Logix controllers. To leverage this vulnerability, an unauthorized user would require network access to the controller.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22681", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22681" }, { "rank": 814, "cve": "CVE-2023-35081", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "vulnerability_name": "Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability", "kev_date_added": "2023-07-31", "kev_due_date": "2023-08-21", "known_ransomware_use": "Unknown", "cwes": [ "CWE-22" ], "epss": 0.63577, "epss_percentile": 0.9922, "epss_date": "2026-11-09", "short_description": "Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables an authenticated administrator to perform malicious file writes to the EPMM server. This vulnerability can be used in conjunction with CVE-2023-35078 to bypass authentication and ACLs restrictions (if applicable).", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35081", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35081" }, { "rank": 815, "cve": "CVE-2011-0609", "vendor": "Adobe", "product": "Flash Player", "vulnerability_name": "Adobe Flash Player Unspecified Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.63507, "epss_percentile": 0.99217, "epss_date": "2026-11-09", "short_description": "Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2011-0609", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-0609" }, { "rank": 816, "cve": "CVE-2019-8394", "vendor": "Zoho", "product": "ManageEngine", "vulnerability_name": "Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-434" ], "epss": 0.63336, "epss_percentile": 0.99213, "epss_date": "2026-11-09", "short_description": "Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-8394", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-8394" }, { "rank": 817, "cve": "CVE-2021-30632", "vendor": "Google", "product": "Chromium V8", "vulnerability_name": "Google Chromium V8 Out-of-Bounds Write Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-122" ], "epss": 0.6319, "epss_percentile": 0.9921, "epss_date": "2026-11-09", "short_description": "Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30632", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30632" }, { "rank": 818, "cve": "CVE-2026-45498", "vendor": "Microsoft", "product": "Defender", "vulnerability_name": "Microsoft Defender Denial of Service Vulnerability", "kev_date_added": "2026-05-20", "kev_due_date": "2026-06-03", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.63076, "epss_percentile": 0.99208, "epss_date": "2026-11-09", "short_description": "Microsoft Defender contains an unspecified vulnerability that allows for denial of service.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45498", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45498" }, { "rank": 819, "cve": "CVE-2026-82078", "vendor": "PaperCut", "product": "NG/MF", "vulnerability_name": "PaperCut NG/MF Unsafe Reflection Vulnerability", "kev_date_added": "2026-08-31", "kev_due_date": "2026-09-14", "known_ransomware_use": "Unknown", "cwes": [ "CWE-470" ], "epss": 0.63047, "epss_percentile": 0.99207, "epss_date": "2026-11-09", "short_description": "PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and execute arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process. This vulnerability can be chained with CVE-2026-81578.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82078", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-82078" }, { "rank": 820, "cve": "CVE-2016-0151", "vendor": "Microsoft", "product": "Client-Server Run-time Subsystem (CSRSS)", "vulnerability_name": "Microsoft Windows CSRSS Security Feature Bypass Vulnerability", "kev_date_added": "2022-03-28", "kev_due_date": "2022-04-18", "known_ransomware_use": "Known", "cwes": [ "CWE-264" ], "epss": 0.62823, "epss_percentile": 0.99202, "epss_date": "2026-11-09", "short_description": "The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0151", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0151" }, { "rank": 821, "cve": "CVE-2026-0770", "vendor": "Langflow", "product": "Langflow", "vulnerability_name": "Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability", "kev_date_added": "2026-07-21", "kev_due_date": "2026-07-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-829" ], "epss": 0.62562, "epss_percentile": 0.99196, "epss_date": "2026-11-09", "short_description": "Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations. ", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0770", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0770" }, { "rank": 822, "cve": "CVE-2025-47813", "vendor": "Wing FTP Server", "product": "Wing FTP Server", "vulnerability_name": "Wing FTP Server Information Disclosure Vulnerability", "kev_date_added": "2026-03-16", "kev_due_date": "2026-03-30", "known_ransomware_use": "Unknown", "cwes": [ "CWE-209" ], "epss": 0.62512, "epss_percentile": 0.99195, "epss_date": "2026-11-09", "short_description": "Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in the UID cookie.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47813", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-47813" }, { "rank": 823, "cve": "CVE-2022-21445", "vendor": "Oracle", "product": "ADF Faces", "vulnerability_name": "Oracle ADF Faces Deserialization of Untrusted Data Vulnerability", "kev_date_added": "2024-09-18", "kev_due_date": "2024-10-09", "known_ransomware_use": "Unknown", "cwes": [ "CWE-502" ], "epss": 0.62478, "epss_percentile": 0.99193, "epss_date": "2026-11-09", "short_description": "Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vulnerability leading to unauthenticated remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21445", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21445" }, { "rank": 824, "cve": "CVE-2021-22991", "vendor": "F5", "product": "BIG-IP Traffic Management Microkernel", "vulnerability_name": "F5 BIG-IP Traffic Management Microkernel Buffer Overflow", "kev_date_added": "2022-01-18", "kev_due_date": "2022-02-01", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.62421, "epss_percentile": 0.99192, "epss_date": "2026-11-09", "short_description": "The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overflow vulnerability, leading to a bypassing of URL-based access controls.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22991", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22991" }, { "rank": 825, "cve": "CVE-2025-24054", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability", "kev_date_added": "2025-04-17", "kev_due_date": "2025-05-08", "known_ransomware_use": "Unknown", "cwes": [ "CWE-73" ], "epss": 0.6227, "epss_percentile": 0.99189, "epss_date": "2026-11-09", "short_description": "Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24054", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24054" }, { "rank": 826, "cve": "CVE-2024-21338", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability", "kev_date_added": "2024-03-04", "kev_due_date": "2024-03-25", "known_ransomware_use": "Known", "cwes": [ "CWE-822" ], "epss": 0.62209, "epss_percentile": 0.99188, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21338", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21338" }, { "rank": 827, "cve": "CVE-2017-0059", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Information Disclosure Vulnerability", "kev_date_added": "2022-03-28", "kev_due_date": "2022-04-18", "known_ransomware_use": "Unknown", "cwes": [ "CWE-200" ], "epss": 0.61968, "epss_percentile": 0.99183, "epss_date": "2026-11-09", "short_description": "Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0059", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0059" }, { "rank": 828, "cve": "CVE-2018-4939", "vendor": "Adobe", "product": "ColdFusion", "vulnerability_name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-502" ], "epss": 0.6178, "epss_percentile": 0.99179, "epss_date": "2026-11-09", "short_description": "Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-4939", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-4939" }, { "rank": 829, "cve": "CVE-2018-8373", "vendor": "Microsoft", "product": "Internet Explorer Scripting Engine", "vulnerability_name": "Microsoft Scripting Engine Memory Corruption Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.6177, "epss_percentile": 0.99179, "epss_date": "2026-11-09", "short_description": "A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8373", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8373" }, { "rank": 830, "cve": "CVE-2024-23113", "vendor": "Fortinet", "product": "Multiple Products", "vulnerability_name": "Fortinet Multiple Products Format String Vulnerability", "kev_date_added": "2024-10-09", "kev_due_date": "2024-10-30", "known_ransomware_use": "Unknown", "cwes": [ "CWE-134" ], "epss": 0.61725, "epss_percentile": 0.99178, "epss_date": "2026-11-09", "short_description": "Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23113", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113" }, { "rank": 831, "cve": "CVE-2020-4428", "vendor": "IBM", "product": "Data Risk Manager", "vulnerability_name": "IBM Data Risk Manager Remote Code Execution Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.61692, "epss_percentile": 0.99177, "epss_date": "2026-11-09", "short_description": "IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-4428", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-4428" }, { "rank": 832, "cve": "CVE-2026-59310", "vendor": "Broadcom", "product": "VMware vCenter", "vulnerability_name": "Broadcom VMware vCenter Path Traversal Vulnerability", "kev_date_added": "2026-08-18", "kev_due_date": "2026-08-21", "known_ransomware_use": "Known", "cwes": [ "CWE-22" ], "epss": 0.61668, "epss_percentile": 0.99176, "epss_date": "2026-11-09", "short_description": "Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59310", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-59310" }, { "rank": 833, "cve": "CVE-2015-7755", "vendor": "Juniper", "product": "ScreenOS", "vulnerability_name": "Juniper ScreenOS Improper Authentication Vulnerability", "kev_date_added": "2025-10-02", "kev_due_date": "2025-10-23", "known_ransomware_use": "Unknown", "cwes": [ "CWE-287" ], "epss": 0.614, "epss_percentile": 0.9917, "epss_date": "2026-11-09", "short_description": "Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7755", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-7755" }, { "rank": 834, "cve": "CVE-2026-21510", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Shell Protection Mechanism Failure Vulnerability", "kev_date_added": "2026-02-10", "kev_due_date": "2026-03-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-693" ], "epss": 0.61238, "epss_percentile": 0.99167, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Shell contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a security feature over a network. ", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21510", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21510" }, { "rank": 835, "cve": "CVE-2025-58360", "vendor": "OSGeo", "product": "GeoServer", "vulnerability_name": "OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability", "kev_date_added": "2025-12-11", "kev_due_date": "2026-01-01", "known_ransomware_use": "Unknown", "cwes": [ "CWE-611" ], "epss": 0.61169, "epss_percentile": 0.99166, "epss_date": "2026-11-09", "short_description": "OSGeo GeoServer contains an improper restriction of XML external entity reference vulnerability that occurs when the application accepts XML input through a specific endpoint /geoserver/wms operation GetMap and could allow an attacker to define external entities within the XML request.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58360", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-58360" }, { "rank": 836, "cve": "CVE-2019-5786", "vendor": "Google", "product": "Chrome Blink", "vulnerability_name": "Google Chrome Blink Use-After-Free Vulnerability", "kev_date_added": "2022-05-23", "kev_due_date": "2022-06-13", "known_ransomware_use": "Unknown", "cwes": [ "CWE-416" ], "epss": 0.61085, "epss_percentile": 0.99165, "epss_date": "2026-11-09", "short_description": "Google Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out of bounds memory access via a crafted HTML page.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5786", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-5786" }, { "rank": 837, "cve": "CVE-2024-54085", "vendor": "AMI", "product": "MegaRAC SPx", "vulnerability_name": "AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability", "kev_date_added": "2025-06-25", "kev_due_date": "2025-07-16", "known_ransomware_use": "Unknown", "cwes": [ "CWE-290" ], "epss": 0.60747, "epss_percentile": 0.99155, "epss_date": "2026-11-09", "short_description": "AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54085", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-54085" }, { "rank": 838, "cve": "CVE-2025-53690", "vendor": "Sitecore", "product": "Multiple Products", "vulnerability_name": "Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability", "kev_date_added": "2025-09-04", "kev_due_date": "2025-09-25", "known_ransomware_use": "Unknown", "cwes": [ "CWE-502" ], "epss": 0.6071, "epss_percentile": 0.99154, "epss_date": "2026-11-09", "short_description": "Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a deserialization of untrusted data vulnerability involving the use of default machine keys. This flaw allows attackers to exploit exposed ASP.NET machine keys to achieve remote code execution. ", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-53690", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690" }, { "rank": 839, "cve": "CVE-2026-33634", "vendor": "Aquasecurity", "product": "Trivy", "vulnerability_name": "Aquasecurity Trivy Embedded Malicious Code Vulnerability", "kev_date_added": "2026-03-26", "kev_due_date": "2026-04-09", "known_ransomware_use": "Unknown", "cwes": [ "CWE-506" ], "epss": 0.60425, "epss_percentile": 0.9915, "epss_date": "2026-11-09", "short_description": "Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD environment, including all tokens, SSH keys, cloud credentials, database passwords, and any sensitive configuration in memory.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33634", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33634" }, { "rank": 840, "cve": "CVE-2018-6065", "vendor": "Google", "product": "Chromium V8", "vulnerability_name": "Google Chromium V8 Integer Overflow Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-190", "CWE-787" ], "epss": 0.60304, "epss_percentile": 0.99147, "epss_date": "2026-11-09", "short_description": "Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-6065", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-6065" }, { "rank": 841, "cve": "CVE-2025-62593", "vendor": "Ray-Project", "product": "Ray", "vulnerability_name": "Ray-Project Ray Code Injection Vulnerability", "kev_date_added": "2026-08-17", "kev_due_date": "2026-08-20", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94", "CWE-352" ], "epss": 0.6015, "epss_percentile": 0.99143, "epss_date": "2026-11-09", "short_description": "Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62593", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-62593" }, { "rank": 842, "cve": "CVE-2020-8655", "vendor": "EyesOfNetwork", "product": "EyesOfNetwork", "vulnerability_name": "EyesOfNetwork Improper Privilege Management Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-269" ], "epss": 0.5993, "epss_percentile": 0.9914, "epss_date": "2026-11-09", "short_description": "EyesOfNetwork contains an improper privilege management vulnerability that may allow a user to run commands as root via a crafted Nmap Scripting Engine (NSE) script to nmap7.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8655", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8655" }, { "rank": 843, "cve": "CVE-2014-4148", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Remote Code Execution Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.5985, "epss_percentile": 0.99138, "epss_date": "2026-11-09", "short_description": "A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-4148", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4148" }, { "rank": 844, "cve": "CVE-2009-0563", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Office Buffer Overflow Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.59634, "epss_percentile": 0.99134, "epss_date": "2026-11-09", "short_description": "Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0563", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0563" }, { "rank": 845, "cve": "CVE-2017-11774", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Office Outlook Security Feature Bypass Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.59627, "epss_percentile": 0.99134, "epss_date": "2026-11-09", "short_description": "Microsoft Office Outlook contains a security feature bypass vulnerability due to improperly handling objects in memory. Successful exploitation allows an attacker to execute commands.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11774", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11774" }, { "rank": 846, "cve": "CVE-2023-21608", "vendor": "Adobe", "product": "Acrobat and Reader", "vulnerability_name": "Adobe Acrobat and Reader Use-After-Free Vulnerability", "kev_date_added": "2023-10-10", "kev_due_date": "2023-10-31", "known_ransomware_use": "Unknown", "cwes": [ "CWE-416" ], "epss": 0.59427, "epss_percentile": 0.99129, "epss_date": "2026-11-09", "short_description": "Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-21608", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21608" }, { "rank": 847, "cve": "CVE-2021-33742", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787", "CWE-823" ], "epss": 0.59407, "epss_percentile": 0.99128, "epss_date": "2026-11-09", "short_description": "Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33742", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-33742" }, { "rank": 848, "cve": "CVE-2023-21529", "vendor": "Microsoft", "product": "Exchange Server", "vulnerability_name": "Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability", "kev_date_added": "2026-04-13", "kev_due_date": "2026-04-27", "known_ransomware_use": "Known", "cwes": [ "CWE-502" ], "epss": 0.59294, "epss_percentile": 0.99125, "epss_date": "2026-11-09", "short_description": "Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-21529", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21529" }, { "rank": 849, "cve": "CVE-2022-21882", "vendor": "Microsoft", "product": "Win32k", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "kev_date_added": "2022-02-04", "kev_due_date": "2022-02-18", "known_ransomware_use": "Known", "cwes": [ "CWE-787" ], "epss": 0.59205, "epss_percentile": 0.99123, "epss_date": "2026-11-09", "short_description": "Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21882", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21882" }, { "rank": 850, "cve": "CVE-2016-7262", "vendor": "Microsoft", "product": "Excel", "vulnerability_name": "Microsoft Office Security Feature Bypass Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.5884, "epss_percentile": 0.99115, "epss_date": "2026-11-09", "short_description": "A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7262", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7262" }, { "rank": 851, "cve": "CVE-2024-8956", "vendor": "PTZOptics", "product": "PT30X-SDI/NDI Cameras", "vulnerability_name": "PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability", "kev_date_added": "2024-11-04", "kev_due_date": "2024-11-25", "known_ransomware_use": "Unknown", "cwes": [ "CWE-287" ], "epss": 0.58787, "epss_percentile": 0.99112, "epss_date": "2026-11-09", "short_description": "PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a remote, attacker to bypass authentication for the /cgi-bin/param.cgi CGI script. If combined with CVE-2024-8957, this can lead to remote code execution as root.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8956", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956" }, { "rank": 852, "cve": "CVE-2010-2572", "vendor": "Microsoft", "product": "PowerPoint", "vulnerability_name": "Microsoft PowerPoint Buffer Overflow Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.58646, "epss_percentile": 0.99109, "epss_date": "2026-11-09", "short_description": "Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2572", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-2572" }, { "rank": 853, "cve": "CVE-2024-9380", "vendor": "Ivanti", "product": "Cloud Services Appliance (CSA)", "vulnerability_name": "Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability", "kev_date_added": "2024-10-09", "kev_due_date": "2024-10-30", "known_ransomware_use": "Unknown", "cwes": [ "CWE-77" ], "epss": 0.58323, "epss_percentile": 0.99102, "epss_date": "2026-11-09", "short_description": "Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9380", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380" }, { "rank": 854, "cve": "CVE-2023-32434", "vendor": "Apple", "product": "Multiple Products", "vulnerability_name": "Apple Multiple Products Integer Overflow Vulnerability", "kev_date_added": "2023-06-23", "kev_due_date": "2023-07-14", "known_ransomware_use": "Unknown", "cwes": [ "CWE-190" ], "epss": 0.58157, "epss_percentile": 0.99097, "epss_date": "2026-11-09", "short_description": "Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel privileges.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32434", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-32434" }, { "rank": 855, "cve": "CVE-2023-6549", "vendor": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "vulnerability_name": "Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability", "kev_date_added": "2024-01-17", "kev_due_date": "2024-02-07", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.57633, "epss_percentile": 0.99088, "epss_date": "2026-11-09", "short_description": "Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6549", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6549" }, { "rank": 856, "cve": "CVE-2016-7193", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Office Memory Corruption Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.57582, "epss_percentile": 0.99087, "epss_date": "2026-11-09", "short_description": "Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7193", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7193" }, { "rank": 857, "cve": "CVE-2017-0101", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Transaction Manager Privilege Escalation Vulnerability", "kev_date_added": "2022-03-15", "kev_due_date": "2022-04-05", "known_ransomware_use": "Known", "cwes": [ "CWE-119" ], "epss": 0.57482, "epss_percentile": 0.99085, "epss_date": "2026-11-09", "short_description": "A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0101", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0101" }, { "rank": 858, "cve": "CVE-2020-26919", "vendor": "NETGEAR", "product": "JGS516PE Devices", "vulnerability_name": "Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.57468, "epss_percentile": 0.99085, "epss_date": "2026-11-09", "short_description": "Netgear JGS516PE devices contain a missing function level access control vulnerability.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26919", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-26919" }, { "rank": 859, "cve": "CVE-2019-1068", "vendor": "Microsoft", "product": "SQL Server", "vulnerability_name": "Microsoft SQL Server Remote Code Execution Vulnerability", "kev_date_added": "2026-08-26", "kev_due_date": "2026-08-29", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.57273, "epss_percentile": 0.9908, "epss_date": "2026-11-09", "short_description": "Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1068", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1068" }, { "rank": 860, "cve": "CVE-2021-27104", "vendor": "Accellion", "product": "FTA", "vulnerability_name": "Accellion FTA OS Command Injection Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Known", "cwes": [ "CWE-20", "CWE-78" ], "epss": 0.56686, "epss_percentile": 0.99068, "epss_date": "2026-11-09", "short_description": "Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-27104", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27104" }, { "rank": 861, "cve": "CVE-2021-25297", "vendor": "Nagios", "product": "Nagios XI", "vulnerability_name": "Nagios XI OS Command Injection", "kev_date_added": "2022-01-18", "kev_due_date": "2022-02-01", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78", "CWE-138" ], "epss": 0.56659, "epss_percentile": 0.99068, "epss_date": "2026-11-09", "short_description": "Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25297", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25297" }, { "rank": 862, "cve": "CVE-2025-32463", "vendor": "Sudo", "product": "Sudo", "vulnerability_name": "Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability", "kev_date_added": "2025-09-29", "kev_due_date": "2025-10-20", "known_ransomware_use": "Unknown", "cwes": [ "CWE-829" ], "epss": 0.563, "epss_percentile": 0.99058, "epss_date": "2026-11-09", "short_description": "Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32463", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32463" }, { "rank": 863, "cve": "CVE-2019-5825", "vendor": "Google", "product": "Chromium V8", "vulnerability_name": "Google Chromium V8 Out-of-Bounds Write Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.55925, "epss_percentile": 0.99052, "epss_date": "2026-11-09", "short_description": "Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5825", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-5825" }, { "rank": 864, "cve": "CVE-2015-1701", "vendor": "Microsoft", "product": "Win32k", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Known", "cwes": [ "CWE-264" ], "epss": 0.55923, "epss_percentile": 0.99051, "epss_date": "2026-11-09", "short_description": "An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1701", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1701" }, { "rank": 865, "cve": "CVE-2019-11708", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "vulnerability_name": "Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability", "kev_date_added": "2022-05-23", "kev_due_date": "2022-06-13", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.55874, "epss_percentile": 0.9905, "epss_date": "2026-11-09", "short_description": "Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11708", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11708" }, { "rank": 866, "cve": "CVE-2020-29557", "vendor": "D-Link", "product": "DIR-825 R1 Devices", "vulnerability_name": "D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.55747, "epss_percentile": 0.99047, "epss_date": "2026-11-09", "short_description": "D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-29557", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-29557" }, { "rank": 867, "cve": "CVE-2025-25181", "vendor": "Advantive", "product": "VeraCore", "vulnerability_name": " Advantive VeraCore SQL Injection Vulnerability", "kev_date_added": "2025-03-10", "kev_due_date": "2025-03-31", "known_ransomware_use": "Unknown", "cwes": [ "CWE-89" ], "epss": 0.55549, "epss_percentile": 0.99043, "epss_date": "2026-11-09", "short_description": "Advantive VeraCore contains a SQL injection vulnerability in timeoutWarning.asp that allows a remote attacker to execute arbitrary SQL commands via the PmSess1 parameter.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25181", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-25181" }, { "rank": 868, "cve": "CVE-2022-37055", "vendor": "D-Link", "product": "Routers", "vulnerability_name": "D-Link Routers Buffer Overflow Vulnerability", "kev_date_added": "2025-12-08", "kev_due_date": "2025-12-29", "known_ransomware_use": "Unknown", "cwes": [ "CWE-120" ], "epss": 0.55531, "epss_percentile": 0.99043, "epss_date": "2026-11-09", "short_description": "D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-37055", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-37055" }, { "rank": 869, "cve": "CVE-2025-14174", "vendor": "Google", "product": "Chromium", "vulnerability_name": "Google Chromium Out of Bounds Memory Access Vulnerability", "kev_date_added": "2025-12-12", "kev_due_date": "2026-01-02", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.55334, "epss_percentile": 0.99038, "epss_date": "2026-11-09", "short_description": "Google Chromium contains an out of bounds memory access vulnerability in ANGLE that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14174", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-14174" }, { "rank": 870, "cve": "CVE-2022-29499", "vendor": "Mitel", "product": "MiVoice Connect", "vulnerability_name": "Mitel MiVoice Connect Data Validation Vulnerability", "kev_date_added": "2022-06-27", "kev_due_date": "2022-07-18", "known_ransomware_use": "Known", "cwes": [ "CWE-20" ], "epss": 0.55242, "epss_percentile": 0.99036, "epss_date": "2026-11-09", "short_description": "The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-29499", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-29499" }, { "rank": 871, "cve": "CVE-2018-0125", "vendor": "Cisco", "product": "VPN Routers", "vulnerability_name": "Cisco VPN Routers Remote Code Execution Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.55186, "epss_percentile": 0.99035, "epss_date": "2026-11-09", "short_description": "A vulnerability in the web interface of the Cisco VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as root and gain full control of an affected system.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0125", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0125" }, { "rank": 872, "cve": "CVE-2025-58034", "vendor": "Fortinet", "product": "FortiWeb", "vulnerability_name": "Fortinet FortiWeb OS Command Injection Vulnerability", "kev_date_added": "2025-11-18", "kev_due_date": "2025-11-25", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.54724, "epss_percentile": 0.99029, "epss_date": "2026-11-09", "short_description": "Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58034", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-58034" }, { "rank": 873, "cve": "CVE-2019-19006", "vendor": "Sangoma", "product": "FreePBX", "vulnerability_name": " Sangoma FreePBX Improper Authentication Vulnerability", "kev_date_added": "2026-02-03", "kev_due_date": "2026-02-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-287" ], "epss": 0.54663, "epss_percentile": 0.99027, "epss_date": "2026-11-09", "short_description": "Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services provided by the FreePBX admin.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19006", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-19006" }, { "rank": 874, "cve": "CVE-2006-1547", "vendor": "Apache", "product": "Struts 1", "vulnerability_name": "Apache Struts 1 ActionForm Denial-of-Service Vulnerability", "kev_date_added": "2022-01-21", "kev_due_date": "2022-07-21", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.54635, "epss_percentile": 0.99026, "epss_date": "2026-11-09", "short_description": "ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability that allows for denial-of-service (DoS).", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2006-1547", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2006-1547" }, { "rank": 875, "cve": "CVE-2014-4077", "vendor": "Microsoft", "product": "Input Method Editor (IME) Japanese", "vulnerability_name": "Microsoft IME Japanese Privilege Escalation Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-264" ], "epss": 0.54577, "epss_percentile": 0.99025, "epss_date": "2026-11-09", "short_description": "Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default (with the default set as disabled). IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE (IME for Japanese) is installed which allows attackers to bypass a sandbox and perform privilege escalation.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-4077", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4077" }, { "rank": 876, "cve": "CVE-2024-38812", "vendor": "VMware", "product": "vCenter Server", "vulnerability_name": "VMware vCenter Server Heap-Based Buffer Overflow Vulnerability", "kev_date_added": "2024-11-20", "kev_due_date": "2024-12-11", "known_ransomware_use": "Unknown", "cwes": [ "CWE-122" ], "epss": 0.54571, "epss_percentile": 0.99025, "epss_date": "2026-11-09", "short_description": "VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38812", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38812" }, { "rank": 877, "cve": "CVE-2016-0984", "vendor": "Adobe", "product": "Flash Player and AIR", "vulnerability_name": "Adobe Flash Player and AIR Use-After-Free Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-416" ], "epss": 0.54544, "epss_percentile": 0.99024, "epss_date": "2026-11-09", "short_description": "Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0984", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0984" }, { "rank": 878, "cve": "CVE-2024-43461", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows MSHTML Platform Spoofing Vulnerability", "kev_date_added": "2024-09-16", "kev_due_date": "2024-10-07", "known_ransomware_use": "Unknown", "cwes": [ "CWE-451" ], "epss": 0.54486, "epss_percentile": 0.99022, "epss_date": "2026-11-09", "short_description": "Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43461", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43461" }, { "rank": 879, "cve": "CVE-2026-2441", "vendor": "Google", "product": "Chromium", "vulnerability_name": "Google Chromium CSS Use-After-Free Vulnerability", "kev_date_added": "2026-02-17", "kev_due_date": "2026-03-10", "known_ransomware_use": "Unknown", "cwes": [ "CWE-416" ], "epss": 0.54461, "epss_percentile": 0.99021, "epss_date": "2026-11-09", "short_description": "Google Chromium CSS contains a use-after-free vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2441", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-2441" }, { "rank": 880, "cve": "CVE-2026-85102", "vendor": "Check Point", "product": "Multiple Products", "vulnerability_name": "Check Point Multiple Products Improper Certificate Validation Vulnerability", "kev_date_added": "2026-09-22", "kev_due_date": "2026-09-25", "known_ransomware_use": "Unknown", "cwes": [ "CWE-295" ], "epss": 0.5414, "epss_percentile": 0.99015, "epss_date": "2026-11-09", "short_description": "Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85102", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-85102" }, { "rank": 881, "cve": "CVE-2023-20118", "vendor": "Cisco", "product": "Small Business RV Series Routers", "vulnerability_name": "Cisco Small Business RV Series Routers Command Injection Vulnerability", "kev_date_added": "2025-03-03", "kev_due_date": "2025-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-77" ], "epss": 0.54107, "epss_percentile": 0.99014, "epss_date": "2026-11-09", "short_description": "Multiple Cisco Small Business RV Series Routers contains a command injection vulnerability in the web-based management interface. Successful exploitation could allow an authenticated, remote attacker to gain root-level privileges and access unauthorized data.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20118", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20118" }, { "rank": 882, "cve": "CVE-2021-31196", "vendor": "Microsoft", "product": "Exchange Server", "vulnerability_name": "Microsoft Exchange Server Information Disclosure Vulnerability", "kev_date_added": "2024-08-21", "kev_due_date": "2024-09-11", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.54056, "epss_percentile": 0.99012, "epss_date": "2026-11-09", "short_description": "Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31196", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31196" }, { "rank": 883, "cve": "CVE-2020-25079", "vendor": "D-Link", "product": "DCS-2530L and DCS-2670L Devices", "vulnerability_name": "D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability", "kev_date_added": "2025-08-05", "kev_due_date": "2025-08-26", "known_ransomware_use": "Unknown", "cwes": [ "CWE-77" ], "epss": 0.54007, "epss_percentile": 0.99011, "epss_date": "2026-11-09", "short_description": "D-Link DCS-2530L and DCS-2670L devices contains a command injection vulnerability in the cgi-bin/ddns_enc.cgi. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25079", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-25079" }, { "rank": 884, "cve": "CVE-2022-21971", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Runtime Remote Code Execution Vulnerability", "kev_date_added": "2022-08-18", "kev_due_date": "2022-09-08", "known_ransomware_use": "Unknown", "cwes": [ "CWE-824" ], "epss": 0.53934, "epss_percentile": 0.99008, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21971", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21971" }, { "rank": 885, "cve": "CVE-2020-1054", "vendor": "Microsoft", "product": "Win32k", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.53878, "epss_percentile": 0.99007, "epss_date": "2026-11-09", "short_description": "Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1054", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1054" }, { "rank": 886, "cve": "CVE-2014-0130", "vendor": "Rails", "product": "Ruby on Rails", "vulnerability_name": "Ruby on Rails Directory Traversal Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-22" ], "epss": 0.53703, "epss_percentile": 0.99004, "epss_date": "2026-11-09", "short_description": "Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0130", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0130" }, { "rank": 887, "cve": "CVE-2021-22941", "vendor": "Citrix", "product": "ShareFile", "vulnerability_name": "Citrix ShareFile Improper Access Control Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Known", "cwes": [ "CWE-284" ], "epss": 0.53585, "epss_percentile": 0.99, "epss_date": "2026-11-09", "short_description": "Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22941", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22941" }, { "rank": 888, "cve": "CVE-2023-45249", "vendor": "Acronis", "product": "Cyber Infrastructure (ACI)", "vulnerability_name": "Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability", "kev_date_added": "2024-07-29", "kev_due_date": "2024-08-19", "known_ransomware_use": "Unknown", "cwes": [ "CWE-1393" ], "epss": 0.53535, "epss_percentile": 0.98999, "epss_date": "2026-11-09", "short_description": "Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45249", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249" }, { "rank": 889, "cve": "CVE-2023-41064", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "vulnerability_name": "Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability", "kev_date_added": "2023-09-11", "kev_due_date": "2023-10-02", "known_ransomware_use": "Unknown", "cwes": [ "CWE-120" ], "epss": 0.53403, "epss_percentile": 0.98995, "epss_date": "2026-11-09", "short_description": "Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41064", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41064" }, { "rank": 890, "cve": "CVE-2021-22175", "vendor": "GitLab", "product": "GitLab", "vulnerability_name": "GitLab Server-Side Request Forgery (SSRF) Vulnerability", "kev_date_added": "2026-02-18", "kev_due_date": "2026-03-11", "known_ransomware_use": "Unknown", "cwes": [ "CWE-918" ], "epss": 0.53372, "epss_percentile": 0.98994, "epss_date": "2026-11-09", "short_description": "GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal network for webhooks are enabled.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22175", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22175" }, { "rank": 891, "cve": "CVE-2025-14611", "vendor": "Gladinet", "product": "CentreStack and Triofox", "vulnerability_name": "Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability", "kev_date_added": "2025-12-15", "kev_due_date": "2026-01-05", "known_ransomware_use": "Unknown", "cwes": [ "CWE-798" ], "epss": 0.53302, "epss_percentile": 0.98991, "epss_date": "2026-11-09", "short_description": "Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14611", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-14611" }, { "rank": 892, "cve": "CVE-2019-0808", "vendor": "Microsoft", "product": "Win32k", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.53298, "epss_percentile": 0.98991, "epss_date": "2026-11-09", "short_description": "Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0808", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0808" }, { "rank": 893, "cve": "CVE-2019-0541", "vendor": "Microsoft", "product": "MSHTML", "vulnerability_name": "Microsoft MSHTML Remote Code Execution Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-77" ], "epss": 0.53202, "epss_percentile": 0.98989, "epss_date": "2026-11-09", "short_description": "Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0541", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0541" }, { "rank": 894, "cve": "CVE-2015-1642", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Office Memory Corruption Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.53087, "epss_percentile": 0.98986, "epss_date": "2026-11-09", "short_description": "Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1642", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1642" }, { "rank": 895, "cve": "CVE-2012-2539", "vendor": "Microsoft", "product": "Word", "vulnerability_name": "Microsoft Word Remote Code Execution Vulnerability", "kev_date_added": "2022-03-28", "kev_due_date": "2022-04-18", "known_ransomware_use": "Unknown", "cwes": [ "CWE-399" ], "epss": 0.53033, "epss_percentile": 0.98985, "epss_date": "2026-11-09", "short_description": "Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-2539", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-2539" }, { "rank": 896, "cve": "CVE-2015-2419", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "kev_date_added": "2022-03-28", "kev_due_date": "2022-04-18", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.5298, "epss_percentile": 0.98984, "epss_date": "2026-11-09", "short_description": "JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-2419", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2419" }, { "rank": 897, "cve": "CVE-2009-0557", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Office Object Record Corruption Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.52845, "epss_percentile": 0.9898, "epss_date": "2026-11-09", "short_description": "Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0557", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0557" }, { "rank": 898, "cve": "CVE-2010-1428", "vendor": "Red Hat", "product": "JBoss", "vulnerability_name": "Red Hat JBoss Information Disclosure Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Known", "cwes": [ "CWE-264" ], "epss": 0.52654, "epss_percentile": 0.98976, "epss_date": "2026-11-09", "short_description": "Unauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this flaw to gain access to sensitive information.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1428", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-1428" }, { "rank": 899, "cve": "CVE-2019-1367", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Known", "cwes": [ "CWE-787" ], "epss": 0.52449, "epss_percentile": 0.98972, "epss_date": "2026-11-09", "short_description": "Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exploitation allows for remote code execution in the context of the current user.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1367", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1367" }, { "rank": 900, "cve": "CVE-2016-2388", "vendor": "SAP", "product": "NetWeaver", "vulnerability_name": "SAP NetWeaver Information Disclosure Vulnerability", "kev_date_added": "2022-06-09", "kev_due_date": "2022-06-30", "known_ransomware_use": "Unknown", "cwes": [ "CWE-200" ], "epss": 0.52206, "epss_percentile": 0.98968, "epss_date": "2026-11-09", "short_description": "The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2388", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-2388" }, { "rank": 901, "cve": "CVE-2019-13272", "vendor": "Linux", "product": "Kernel", "vulnerability_name": "Linux Kernel Improper Privilege Management Vulnerability", "kev_date_added": "2021-12-10", "kev_due_date": "2022-06-10", "known_ransomware_use": "Unknown", "cwes": [ "CWE-269" ], "epss": 0.52199, "epss_percentile": 0.98968, "epss_date": "2026-11-09", "short_description": "Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13272", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-13272" }, { "rank": 902, "cve": "CVE-2021-28550", "vendor": "Adobe", "product": "Acrobat and Reader", "vulnerability_name": "Adobe Acrobat and Reader Use-After-Free Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-416" ], "epss": 0.52132, "epss_percentile": 0.98966, "epss_date": "2026-11-09", "short_description": "Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28550", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28550" }, { "rank": 903, "cve": "CVE-2021-20023", "vendor": "SonicWall", "product": "SonicWall Email Security", "vulnerability_name": "SonicWall Email Security Path Traversal Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Known", "cwes": [ "CWE-22" ], "epss": 0.51689, "epss_percentile": 0.98955, "epss_date": "2026-11-09", "short_description": "SonicWall Email Security contains a path traversal vulnerability that allows a post-authenticated attacker to read files on the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20021 and CVE-2021-20022 to achieve privilege escalation.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20023", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-20023" }, { "rank": 904, "cve": "CVE-2009-1537", "vendor": "Microsoft", "product": "DirectX", "vulnerability_name": "Microsoft DirectX NULL Byte Overwrite Vulnerability", "kev_date_added": "2026-05-20", "kev_due_date": "2026-06-03", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.5108, "epss_percentile": 0.98941, "epss_date": "2026-11-09", "short_description": "Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbitrary code via a crafted QuickTime media file.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1537", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-1537" }, { "rank": 905, "cve": "CVE-2015-2502", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "kev_date_added": "2022-04-13", "kev_due_date": "2022-05-04", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.51001, "epss_percentile": 0.98937, "epss_date": "2026-11-09", "short_description": "Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-2502", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2502" }, { "rank": 906, "cve": "CVE-2024-38094", "vendor": "Microsoft", "product": "SharePoint", "vulnerability_name": "Microsoft SharePoint Deserialization Vulnerability", "kev_date_added": "2024-10-22", "kev_due_date": "2024-11-12", "known_ransomware_use": "Known", "cwes": [ "CWE-502" ], "epss": 0.50892, "epss_percentile": 0.98935, "epss_date": "2026-11-09", "short_description": "Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38094", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094" }, { "rank": 907, "cve": "CVE-2013-5223", "vendor": "D-Link", "product": "DSL-2760U", "vulnerability_name": "D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-79" ], "epss": 0.50833, "epss_percentile": 0.98933, "epss_date": "2026-11-09", "short_description": "A cross-site scripting (XSS) vulnerability exists in the D-Link DSL-2760U gateway, allowing remote authenticated users to inject arbitrary web script or HTML.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5223", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-5223" }, { "rank": 908, "cve": "CVE-2025-68645", "vendor": "Synacor", "product": " Zimbra Collaboration Suite (ZCS)", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability", "kev_date_added": "2026-01-22", "kev_due_date": "2026-02-12", "known_ransomware_use": "Unknown", "cwes": [ "CWE-98" ], "epss": 0.50572, "epss_percentile": 0.98926, "epss_date": "2026-11-09", "short_description": "Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68645", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-68645" }, { "rank": 909, "cve": "CVE-2023-49897", "vendor": "FXC", "product": "AE1021, AE1021PE", "vulnerability_name": "FXC AE1021, AE1021PE OS Command Injection Vulnerability", "kev_date_added": "2023-12-21", "kev_due_date": "2024-01-11", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.50447, "epss_percentile": 0.98922, "epss_date": "2026-11-09", "short_description": "FXC AE1021 and AE1021PE contain an OS command injection vulnerability that allows authenticated users to execute commands via a network.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49897", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49897" }, { "rank": 910, "cve": "CVE-2013-7331", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Information Disclosure Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-200" ], "epss": 0.5021, "epss_percentile": 0.98915, "epss_date": "2026-11-09", "short_description": "An information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerability could allow an attacker to detect anti-malware applications.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7331", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-7331" }, { "rank": 911, "cve": "CVE-2026-102489", "vendor": "Zammad GmbH", "product": "Zammad", "vulnerability_name": "Zammad GmbH Zammad Session Fixation Vulnerability", "kev_date_added": "2026-10-02", "kev_due_date": "2026-10-05", "known_ransomware_use": "Unknown", "cwes": [ "CWE-384" ], "epss": 0.49915, "epss_percentile": 0.98909, "epss_date": "2026-11-09", "short_description": "Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102489", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102489" }, { "rank": 912, "cve": "CVE-2019-13720", "vendor": "Google", "product": "Chrome WebAudio", "vulnerability_name": "Google Chrome WebAudio Use-After-Free Vulnerability", "kev_date_added": "2022-05-23", "kev_due_date": "2022-06-13", "known_ransomware_use": "Unknown", "cwes": [ "CWE-416" ], "epss": 0.49421, "epss_percentile": 0.989, "epss_date": "2026-11-09", "short_description": "Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13720", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-13720" }, { "rank": 913, "cve": "CVE-2021-22017", "vendor": "VMware", "product": "vCenter Server", "vulnerability_name": "VMware vCenter Server Improper Access Control", "kev_date_added": "2022-01-10", "kev_due_date": "2022-01-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-23" ], "epss": 0.49177, "epss_percentile": 0.98893, "epss_date": "2026-11-09", "short_description": "Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22017", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22017" }, { "rank": 914, "cve": "CVE-2021-3493", "vendor": "Linux", "product": "Kernel", "vulnerability_name": "Linux Kernel Privilege Escalation Vulnerability", "kev_date_added": "2022-10-20", "kev_due_date": "2022-11-10", "known_ransomware_use": "Unknown", "cwes": [ "CWE-862" ], "epss": 0.49166, "epss_percentile": 0.98892, "epss_date": "2026-11-09", "short_description": "The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3493", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3493" }, { "rank": 915, "cve": "CVE-2023-37580", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "kev_date_added": "2023-07-27", "kev_due_date": "2023-08-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-79" ], "epss": 0.49083, "epss_percentile": 0.98892, "epss_date": "2026-11-09", "short_description": "Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37580", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-37580" }, { "rank": 916, "cve": "CVE-2011-1889", "vendor": "Microsoft", "product": "Forefront Threat Management Gateway (TMG)", "vulnerability_name": "Microsoft Forefront TMG Remote Code Execution Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.4902, "epss_percentile": 0.9889, "epss_date": "2026-11-09", "short_description": "A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could allow code execution in the security context of the client application.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1889", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-1889" }, { "rank": 917, "cve": "CVE-2023-5217", "vendor": "Google", "product": "Chromium libvpx", "vulnerability_name": "Google Chromium libvpx Heap Buffer Overflow Vulnerability", "kev_date_added": "2023-10-02", "kev_due_date": "2023-10-23", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.49013, "epss_percentile": 0.9889, "epss_date": "2026-11-09", "short_description": "Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5217", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217" }, { "rank": 918, "cve": "CVE-2014-4404", "vendor": "Apple", "product": "OS X", "vulnerability_name": "Apple OS X Heap-Based Buffer Overflow Vulnerability", "kev_date_added": "2022-02-10", "kev_due_date": "2022-08-10", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.48923, "epss_percentile": 0.98889, "epss_date": "2026-11-09", "short_description": "Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbitrary code in a privileged context.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-4404", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4404" }, { "rank": 919, "cve": "CVE-2023-28252", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "kev_date_added": "2023-04-11", "kev_due_date": "2023-05-02", "known_ransomware_use": "Known", "cwes": [ "CWE-122" ], "epss": 0.48892, "epss_percentile": 0.98888, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28252", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28252" }, { "rank": 920, "cve": "CVE-2015-1671", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Remote Code Execution Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-19" ], "epss": 0.48832, "epss_percentile": 0.98885, "epss_date": "2026-11-09", "short_description": "A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1671", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1671" }, { "rank": 921, "cve": "CVE-2019-15752", "vendor": "Docker", "product": "Desktop Community Edition", "vulnerability_name": "Docker Desktop Community Edition Privilege Escalation Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-732" ], "epss": 0.48782, "epss_percentile": 0.98885, "epss_date": "2026-11-09", "short_description": "Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\\DockerDesktop\\version-bin\\.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-15752", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-15752" }, { "rank": 922, "cve": "CVE-2022-23227", "vendor": "NUUO", "product": "NVRmini2 Devices", "vulnerability_name": "NUUO NVRmini2 Devices Missing Authentication Vulnerability ", "kev_date_added": "2024-12-18", "kev_due_date": "2025-01-08", "known_ransomware_use": "Unknown", "cwes": [ "CWE-306" ], "epss": 0.48497, "epss_percentile": 0.98877, "epss_date": "2026-11-09", "short_description": "NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users. ", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23227", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-23227" }, { "rank": 923, "cve": "CVE-2020-16009", "vendor": "Google", "product": "Chromium V8", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787", "CWE-843" ], "epss": 0.48293, "epss_percentile": 0.98873, "epss_date": "2026-11-09", "short_description": "Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-16009", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-16009" }, { "rank": 924, "cve": "CVE-2016-1646", "vendor": "Google", "product": "Chromium V8", "vulnerability_name": "Google Chromium V8 Out-of-Bounds Read Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.4811, "epss_percentile": 0.98867, "epss_date": "2026-11-09", "short_description": "Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1646", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-1646" }, { "rank": 925, "cve": "CVE-2006-2492", "vendor": "Microsoft", "product": "Word", "vulnerability_name": "Microsoft Word Malformed Object Pointer Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-120" ], "epss": 0.48107, "epss_percentile": 0.98867, "epss_date": "2026-11-09", "short_description": "Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2492", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2006-2492" }, { "rank": 926, "cve": "CVE-2018-5430", "vendor": "TIBCO", "product": "JasperReports", "vulnerability_name": "TIBCO JasperReports Server Information Disclosure Vulnerability", "kev_date_added": "2022-12-29", "kev_due_date": "2023-01-19", "known_ransomware_use": "Unknown", "cwes": [ "CWE-22" ], "epss": 0.48054, "epss_percentile": 0.98866, "epss_date": "2026-11-09", "short_description": "TIBCO JasperReports Server contain a vulnerability which may allow any authenticated user read-only access to the contents of the web application, including key configuration files.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5430", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-5430" }, { "rank": 927, "cve": "CVE-2021-26829", "vendor": "OpenPLC", "product": "ScadaBR", "vulnerability_name": "OpenPLC ScadaBR Cross-site Scripting Vulnerability", "kev_date_added": "2025-11-28", "kev_due_date": "2025-12-19", "known_ransomware_use": "Unknown", "cwes": [ "CWE-79" ], "epss": 0.4805, "epss_percentile": 0.98865, "epss_date": "2026-11-09", "short_description": "OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26829", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26829" }, { "rank": 928, "cve": "CVE-2026-28318", "vendor": "SolarWinds", "product": "Serv-U", "vulnerability_name": "SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability", "kev_date_added": "2026-06-05", "kev_due_date": "2026-06-19", "known_ransomware_use": "Unknown", "cwes": [ "CWE-400" ], "epss": 0.48001, "epss_percentile": 0.98864, "epss_date": "2026-11-09", "short_description": "SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28318", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-28318" }, { "rank": 929, "cve": "CVE-2023-48365", "vendor": "Qlik", "product": "Sense", "vulnerability_name": "Qlik Sense HTTP Tunneling Vulnerability", "kev_date_added": "2025-01-13", "kev_due_date": "2025-02-03", "known_ransomware_use": "Known", "cwes": [ "CWE-444" ], "epss": 0.47733, "epss_percentile": 0.98859, "epss_date": "2026-11-09", "short_description": "Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-48365", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-48365" }, { "rank": 930, "cve": "CVE-2013-2094", "vendor": "Linux", "product": "Kernel", "vulnerability_name": "Linux Kernel Privilege Escalation Vulnerability", "kev_date_added": "2022-09-15", "kev_due_date": "2022-10-06", "known_ransomware_use": "Unknown", "cwes": [ "CWE-189" ], "epss": 0.47709, "epss_percentile": 0.98858, "epss_date": "2026-11-09", "short_description": "Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled array in sw_perf_event_destroy(). Explotation allows for privilege escalation.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2094", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2094" }, { "rank": 931, "cve": "CVE-2021-40407", "vendor": "Reolink", "product": "RLC-410W IP Camera", "vulnerability_name": "Reolink RLC-410W IP Camera OS Command Injection Vulnerability ", "kev_date_added": "2024-12-18", "kev_due_date": "2025-01-08", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.47635, "epss_percentile": 0.98855, "epss_date": "2026-11-09", "short_description": "Reolink RLC-410W IP cameras contain an authenticated OS command injection vulnerability in the device network settings functionality.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40407", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40407" }, { "rank": 932, "cve": "CVE-2025-0411", "vendor": "7-Zip", "product": "7-Zip", "vulnerability_name": "7-Zip Mark of the Web Bypass Vulnerability", "kev_date_added": "2025-02-06", "kev_due_date": "2025-02-27", "known_ransomware_use": "Unknown", "cwes": [ "CWE-693" ], "epss": 0.47574, "epss_percentile": 0.98853, "epss_date": "2026-11-09", "short_description": "7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0411", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0411" }, { "rank": 933, "cve": "CVE-2021-22893", "vendor": "Ivanti", "product": "Pulse Connect Secure", "vulnerability_name": "Ivanti Pulse Connect Secure Use-After-Free Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Known", "cwes": [ "CWE-287" ], "epss": 0.47508, "epss_percentile": 0.98851, "epss_date": "2026-11-09", "short_description": "Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22893", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22893" }, { "rank": 934, "cve": "CVE-2026-48356", "vendor": "Adobe", "product": "Commerce and Magento", "vulnerability_name": "Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability", "kev_date_added": "2026-10-27", "kev_due_date": "2026-11-10", "known_ransomware_use": "Unknown", "cwes": [ "CWE-434" ], "epss": 0.47472, "epss_percentile": 0.9885, "epss_date": "2026-11-09", "short_description": "Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48356", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48356" }, { "rank": 935, "cve": "CVE-2016-3976", "vendor": "SAP", "product": "NetWeaver", "vulnerability_name": "SAP NetWeaver Directory Traversal Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-22" ], "epss": 0.47252, "epss_percentile": 0.98846, "epss_date": "2026-11-09", "short_description": "SAP NetWeaver Application Server Java Platforms contains a directory traversal vulnerability via a ..\\ (dot dot backslash) in the fileName parameter to CrashFileDownloadServlet. This allows remote attackers to read files.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3976", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3976" }, { "rank": 936, "cve": "CVE-2014-4123", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Privilege Escalation Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-264" ], "epss": 0.47133, "epss_percentile": 0.98843, "epss_date": "2026-11-09", "short_description": "Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-4123", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4123" }, { "rank": 937, "cve": "CVE-2019-17026", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "vulnerability_name": "Mozilla Firefox And Thunderbird Type Confusion Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-843" ], "epss": 0.46311, "epss_percentile": 0.98825, "epss_date": "2026-11-09", "short_description": "Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17026", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-17026" }, { "rank": 938, "cve": "CVE-2024-43573", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows MSHTML Platform Spoofing Vulnerability", "kev_date_added": "2024-10-08", "kev_due_date": "2024-10-29", "known_ransomware_use": "Unknown", "cwes": [ "CWE-79" ], "epss": 0.46109, "epss_percentile": 0.98819, "epss_date": "2026-11-09", "short_description": "Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43573", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43573" }, { "rank": 939, "cve": "CVE-2026-12569", "vendor": "PTC", "product": "Windchill and FlexPLM", "vulnerability_name": "PTC Windchill and FlexPLM Improper Input Validation Vulnerability", "kev_date_added": "2026-06-25", "kev_due_date": "2026-06-28", "known_ransomware_use": "Known", "cwes": [ "CWE-20", "CWE-502" ], "epss": 0.46049, "epss_percentile": 0.98818, "epss_date": "2026-11-09", "short_description": "PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitrary code by sending a malicious request to the network.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12569", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-12569" }, { "rank": 940, "cve": "CVE-2017-6862", "vendor": "NETGEAR", "product": "Multiple Devices", "vulnerability_name": "NETGEAR Multiple Devices Buffer Overflow Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.45748, "epss_percentile": 0.98808, "epss_date": "2026-11-09", "short_description": "Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6862", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6862" }, { "rank": 941, "cve": "CVE-2017-16651", "vendor": "Roundcube", "product": "Roundcube Webmail", "vulnerability_name": "Roundcube Webmail File Disclosure Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-552" ], "epss": 0.45742, "epss_percentile": 0.98807, "epss_date": "2026-11-09", "short_description": "Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-16651", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-16651" }, { "rank": 942, "cve": "CVE-2020-12812", "vendor": "Fortinet", "product": "FortiOS", "vulnerability_name": "Fortinet FortiOS SSL VPN Improper Authentication Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Known", "cwes": [ "CWE-178", "CWE-287" ], "epss": 0.45379, "epss_percentile": 0.98797, "epss_date": "2026-11-09", "short_description": "Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12812", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-12812" }, { "rank": 943, "cve": "CVE-2019-0803", "vendor": "Microsoft", "product": "Win32k", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Known", "cwes": [], "epss": 0.4523, "epss_percentile": 0.98793, "epss_date": "2026-11-09", "short_description": "Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0803", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0803" }, { "rank": 944, "cve": "CVE-2024-29988", "vendor": "Microsoft", "product": "SmartScreen Prompt", "vulnerability_name": "Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability", "kev_date_added": "2024-04-30", "kev_due_date": "2024-05-21", "known_ransomware_use": "Unknown", "cwes": [ "CWE-693" ], "epss": 0.45151, "epss_percentile": 0.98791, "epss_date": "2026-11-09", "short_description": "Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29988", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988" }, { "rank": 945, "cve": "CVE-2017-6737", "vendor": "Cisco", "product": "IOS and IOS XE Software", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.44964, "epss_percentile": 0.98787, "epss_date": "2026-11-09", "short_description": "The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6737", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6737" }, { "rank": 946, "cve": "CVE-2014-9163", "vendor": "Adobe", "product": "Flash Player", "vulnerability_name": "Adobe Flash Player Stack-Based Buffer Overflow Vulnerability", "kev_date_added": "2022-04-13", "kev_due_date": "2022-05-04", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.4488, "epss_percentile": 0.98784, "epss_date": "2026-11-09", "short_description": "Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9163", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-9163" }, { "rank": 947, "cve": "CVE-2015-2425", "vendor": "Microsoft", "product": "Internet Explorer", "vulnerability_name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "kev_date_added": "2022-05-25", "kev_due_date": "2022-06-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.44727, "epss_percentile": 0.98779, "epss_date": "2026-11-09", "short_description": "Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-2425", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2425" }, { "rank": 948, "cve": "CVE-2013-3900", "vendor": "Microsoft", "product": "WinVerifyTrust function", "vulnerability_name": "Microsoft WinVerifyTrust function Remote Code Execution", "kev_date_added": "2022-01-10", "kev_due_date": "2022-07-10", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.44647, "epss_percentile": 0.98778, "epss_date": "2026-11-09", "short_description": "A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-3900", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3900" }, { "rank": 949, "cve": "CVE-2023-36874", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability", "kev_date_added": "2023-07-11", "kev_due_date": "2023-08-01", "known_ransomware_use": "Unknown", "cwes": [ "CWE-59" ], "epss": 0.44435, "epss_percentile": 0.98772, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36874", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36874" }, { "rank": 950, "cve": "CVE-2026-20131", "vendor": "Cisco", "product": "Secure Firewall Management Center (FMC)", "vulnerability_name": "Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability", "kev_date_added": "2026-03-19", "kev_due_date": "2026-03-22", "known_ransomware_use": "Known", "cwes": [ "CWE-502" ], "epss": 0.44431, "epss_percentile": 0.98772, "epss_date": "2026-11-09", "short_description": "Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization of untrusted data vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20131", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20131" }, { "rank": 951, "cve": "CVE-2024-9379", "vendor": "Ivanti", "product": "Cloud Services Appliance (CSA)", "vulnerability_name": "Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability", "kev_date_added": "2024-10-09", "kev_due_date": "2024-10-30", "known_ransomware_use": "Unknown", "cwes": [ "CWE-89" ], "epss": 0.44268, "epss_percentile": 0.98767, "epss_date": "2026-11-09", "short_description": "Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9379", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379" }, { "rank": 952, "cve": "CVE-2019-1579", "vendor": "Palo Alto Networks", "product": "PAN-OS", "vulnerability_name": "Palo Alto Networks PAN-OS Remote Code Execution Vulnerability", "kev_date_added": "2022-01-10", "kev_due_date": "2022-07-10", "known_ransomware_use": "Known", "cwes": [ "CWE-134" ], "epss": 0.44159, "epss_percentile": 0.98764, "epss_date": "2026-11-09", "short_description": "Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1579", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1579" }, { "rank": 953, "cve": "CVE-2022-39197", "vendor": "Fortra", "product": "Cobalt Strike", "vulnerability_name": "Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability", "kev_date_added": "2023-03-30", "kev_due_date": "2023-04-20", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20", "CWE-79" ], "epss": 0.44145, "epss_percentile": 0.98764, "epss_date": "2026-11-09", "short_description": "Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-39197", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-39197" }, { "rank": 954, "cve": "CVE-2007-0671", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Office Excel Remote Code Execution Vulnerability", "kev_date_added": "2025-08-12", "kev_due_date": "2025-09-02", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.44099, "epss_percentile": 0.98762, "epss_date": "2026-11-09", "short_description": "Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0671", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2007-0671" }, { "rank": 955, "cve": "CVE-2014-100005", "vendor": "D-Link", "product": "DIR-600 Router", "vulnerability_name": "D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability", "kev_date_added": "2024-05-16", "kev_due_date": "2024-06-06", "known_ransomware_use": "Unknown", "cwes": [ "CWE-352" ], "epss": 0.43456, "epss_percentile": 0.98746, "epss_date": "2026-11-09", "short_description": "D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-100005", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-100005" }, { "rank": 956, "cve": "CVE-2026-32201", "vendor": "Microsoft", "product": "SharePoint Server", "vulnerability_name": "Microsoft SharePoint Server Improper Input Validation Vulnerability", "kev_date_added": "2026-04-14", "kev_due_date": "2026-04-28", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.43378, "epss_percentile": 0.98739, "epss_date": "2026-11-09", "short_description": "Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32201", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32201" }, { "rank": 957, "cve": "CVE-2020-12271", "vendor": "Sophos", "product": "SFOS", "vulnerability_name": "Sophos SFOS SQL Injection Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Known", "cwes": [ "CWE-89" ], "epss": 0.43334, "epss_percentile": 0.98737, "epss_date": "2026-11-09", "short_description": "Sophos Firewall operating system (SFOS) firmware contains a SQL injection vulnerability when configured with either the administration (HTTPS) service or the User Portal is exposed on the WAN zone. Successful exploitation may cause remote code execution to exfiltrate usernames and hashed passwords for the local device admin(s), portal admins, and user accounts used for remote access (but not external Active Directory or LDAP passwords).", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12271", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-12271" }, { "rank": 958, "cve": "CVE-2016-3235", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Office OLE DLL Side Loading Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-264" ], "epss": 0.43308, "epss_percentile": 0.98736, "epss_date": "2026-11-09", "short_description": "Microsoft Office Object Linking & Embedding (OLE) dynamic link library (DLL) contains a side loading vulnerability due to it improperly validating input before loading libraries. Successful exploitation allows for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3235", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3235" }, { "rank": 959, "cve": "CVE-2023-49105", "vendor": "ownCloud", "product": "ownCloud", "vulnerability_name": "ownCloud Improper Authentication Vulnerability", "kev_date_added": "2026-08-27", "kev_due_date": "2026-08-30", "known_ransomware_use": "Unknown", "cwes": [ "CWE-287" ], "epss": 0.4319, "epss_percentile": 0.98733, "epss_date": "2026-11-09", "short_description": "ownCloud contains an improper authentication vulnerability that allows an attacker to access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49105", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49105" }, { "rank": 960, "cve": "CVE-2025-2775", "vendor": "SysAid", "product": "SysAid On-Prem", "vulnerability_name": "SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability", "kev_date_added": "2025-07-22", "kev_due_date": "2025-08-12", "known_ransomware_use": "Unknown", "cwes": [ "CWE-611" ], "epss": 0.43173, "epss_percentile": 0.98733, "epss_date": "2026-11-09", "short_description": "SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2775", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2775" }, { "rank": 961, "cve": "CVE-2021-42292", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Excel Security Feature Bypass", "kev_date_added": "2021-11-17", "kev_due_date": "2021-12-01", "known_ransomware_use": "Unknown", "cwes": [ "CWE-357" ], "epss": 0.43005, "epss_percentile": 0.98729, "epss_date": "2026-11-09", "short_description": "A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42292", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-42292" }, { "rank": 962, "cve": "CVE-2009-0238", "vendor": "Microsoft", "product": "Office", "vulnerability_name": "Microsoft Office Remote Code Execution", "kev_date_added": "2026-04-14", "kev_due_date": "2026-04-28", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.42941, "epss_percentile": 0.98728, "epss_date": "2026-11-09", "short_description": "Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed object.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0238", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0238" }, { "rank": 963, "cve": "CVE-2020-0787", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability", "kev_date_added": "2022-01-28", "kev_due_date": "2022-07-28", "known_ransomware_use": "Known", "cwes": [ "CWE-269", "CWE-59" ], "epss": 0.42524, "epss_percentile": 0.98716, "epss_date": "2026-11-09", "short_description": "Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0787", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0787" }, { "rank": 964, "cve": "CVE-2026-48282", "vendor": "Adobe", "product": "ColdFusion", "vulnerability_name": "Adobe ColdFusion Path Traversal Vulnerability", "kev_date_added": "2026-07-07", "kev_due_date": "2026-07-10", "known_ransomware_use": "Unknown", "cwes": [ "CWE-22" ], "epss": 0.42388, "epss_percentile": 0.98712, "epss_date": "2026-11-09", "short_description": "Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48282", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48282" }, { "rank": 965, "cve": "CVE-2026-0300", "vendor": "Palo Alto Networks", "product": "PAN-OS", "vulnerability_name": "Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability", "kev_date_added": "2026-05-06", "kev_due_date": "2026-05-09", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.41714, "epss_percentile": 0.98696, "epss_date": "2026-11-09", "short_description": "Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0300", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0300" }, { "rank": 966, "cve": "CVE-2024-41710", "vendor": "Mitel", "product": "SIP Phones", "vulnerability_name": "Mitel SIP Phones Argument Injection Vulnerability", "kev_date_added": "2025-02-12", "kev_due_date": "2025-03-05", "known_ransomware_use": "Unknown", "cwes": [ "CWE-88" ], "epss": 0.41646, "epss_percentile": 0.98693, "epss_date": "2026-11-09", "short_description": "Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may allow an attacker to execute arbitrary commands within the context of the system.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41710", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-41710" }, { "rank": 967, "cve": "CVE-2019-16928", "vendor": "Exim", "product": "Exim Internet Mailer", "vulnerability_name": "Exim Out-of-bounds Write Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.41638, "epss_percentile": 0.98692, "epss_date": "2026-11-09", "short_description": "Exim contains an out-of-bounds write vulnerability which can allow for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16928", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-16928" }, { "rank": 968, "cve": "CVE-2023-33538", "vendor": "TP-Link", "product": "Multiple Routers", "vulnerability_name": "TP-Link Multiple Routers Command Injection Vulnerability", "kev_date_added": "2025-06-16", "kev_due_date": "2025-07-07", "known_ransomware_use": "Unknown", "cwes": [ "CWE-77" ], "epss": 0.41606, "epss_percentile": 0.98691, "epss_date": "2026-11-09", "short_description": "TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33538", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33538" }, { "rank": 969, "cve": "CVE-2019-0841", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability", "kev_date_added": "2022-03-15", "kev_due_date": "2022-04-05", "known_ransomware_use": "Known", "cwes": [ "CWE-59" ], "epss": 0.414, "epss_percentile": 0.98684, "epss_date": "2026-11-09", "short_description": "A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0841", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0841" }, { "rank": 970, "cve": "CVE-2024-38178", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Scripting Engine Memory Corruption Vulnerability", "kev_date_added": "2024-08-13", "kev_due_date": "2024-09-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-843" ], "epss": 0.4138, "epss_percentile": 0.98683, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38178", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38178" }, { "rank": 971, "cve": "CVE-2023-4762", "vendor": "Google", "product": "Chromium V8", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "kev_date_added": "2024-02-06", "kev_due_date": "2024-02-27", "known_ransomware_use": "Unknown", "cwes": [ "CWE-843" ], "epss": 0.41375, "epss_percentile": 0.98682, "epss_date": "2026-11-09", "short_description": "Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4762", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4762" }, { "rank": 972, "cve": "CVE-2011-1823", "vendor": "Android", "product": "Android OS", "vulnerability_name": "Android OS Privilege Escalation Vulnerability", "kev_date_added": "2022-09-08", "kev_due_date": "2022-09-29", "known_ransomware_use": "Unknown", "cwes": [ "CWE-189" ], "epss": 0.41367, "epss_percentile": 0.98682, "epss_date": "2026-11-09", "short_description": "The vold volume manager daemon in Android kernel trusts messages from a PF_NETLINK socket, which allows an attacker to execute code and gain root privileges. This vulnerability is associated with GingerBreak and Exploit.AndroidOS.Lotoor.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1823", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-1823" }, { "rank": 973, "cve": "CVE-2025-9377", "vendor": "TP-Link", "product": "Multiple Routers", "vulnerability_name": "TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability", "kev_date_added": "2025-09-03", "kev_due_date": "2025-09-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.413, "epss_percentile": 0.9868, "epss_date": "2026-11-09", "short_description": "TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9377", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-9377" }, { "rank": 974, "cve": "CVE-2021-22894", "vendor": "Ivanti", "product": "Pulse Connect Secure", "vulnerability_name": "Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-94" ], "epss": 0.41284, "epss_percentile": 0.98679, "epss_date": "2026-11-09", "short_description": "Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22894", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22894" }, { "rank": 975, "cve": "CVE-2023-29336", "vendor": "Microsoft", "product": "Win32k", "vulnerability_name": "Microsoft Win32K Privilege Escalation Vulnerability", "kev_date_added": "2023-05-09", "kev_due_date": "2023-05-30", "known_ransomware_use": "Unknown", "cwes": [ "CWE-416" ], "epss": 0.41185, "epss_percentile": 0.98676, "epss_date": "2026-11-09", "short_description": "Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29336", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29336" }, { "rank": 976, "cve": "CVE-2022-21999", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Known", "cwes": [ "CWE-40", "CWE-1386" ], "epss": 0.41007, "epss_percentile": 0.98671, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21999", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21999" }, { "rank": 977, "cve": "CVE-2023-2033", "vendor": "Google", "product": "Chromium V8", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "kev_date_added": "2023-04-17", "kev_due_date": "2023-05-08", "known_ransomware_use": "Unknown", "cwes": [ "CWE-843" ], "epss": 0.40648, "epss_percentile": 0.98663, "epss_date": "2026-11-09", "short_description": "Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2033", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-2033" }, { "rank": 978, "cve": "CVE-2017-5030", "vendor": "Google", "product": "Chromium V8", "vulnerability_name": "Google Chromium V8 Memory Corruption Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [ "CWE-125" ], "epss": 0.40635, "epss_percentile": 0.98662, "epss_date": "2026-11-09", "short_description": "Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5030", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-5030" }, { "rank": 979, "cve": "CVE-2025-20352", "vendor": "Cisco", "product": "IOS and IOS XE", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability", "kev_date_added": "2025-09-29", "kev_due_date": "2025-10-20", "known_ransomware_use": "Unknown", "cwes": [ "CWE-121" ], "epss": 0.40575, "epss_percentile": 0.9866, "epss_date": "2026-11-09", "short_description": "Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20352", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20352" }, { "rank": 980, "cve": "CVE-2015-0666", "vendor": "Cisco", "product": "Prime Data Center Network Manager (DCNM)", "vulnerability_name": "Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability", "kev_date_added": "2022-03-25", "kev_due_date": "2022-04-15", "known_ransomware_use": "Unknown", "cwes": [ "CWE-22" ], "epss": 0.40379, "epss_percentile": 0.98655, "epss_date": "2026-11-09", "short_description": "Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) allows remote attackers to read arbitrary files.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0666", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0666" }, { "rank": 981, "cve": "CVE-2010-5330", "vendor": "Ubiquiti", "product": "AirOS", "vulnerability_name": "Ubiquiti AirOS Command Injection Vulnerability", "kev_date_added": "2022-04-15", "kev_due_date": "2022-05-06", "known_ransomware_use": "Unknown", "cwes": [ "CWE-77" ], "epss": 0.40232, "epss_percentile": 0.98649, "epss_date": "2026-11-09", "short_description": "Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-5330", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-5330" }, { "rank": 982, "cve": "CVE-2026-76461", "vendor": "Cisco", "product": "Secure Email Gateway", "vulnerability_name": "Cisco Secure Email Gateway SQL Injection Vulnerability", "kev_date_added": "2026-09-14", "kev_due_date": "2026-09-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-89" ], "epss": 0.4016, "epss_percentile": 0.98648, "epss_date": "2026-11-09", "short_description": "Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76461", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76461" }, { "rank": 983, "cve": "CVE-2015-2424", "vendor": "Microsoft", "product": "PowerPoint", "vulnerability_name": "Microsoft PowerPoint Memory Corruption Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.40124, "epss_percentile": 0.98646, "epss_date": "2026-11-09", "short_description": "Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-2424", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2424" }, { "rank": 984, "cve": "CVE-2021-34448", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Scripting Engine Memory Corruption Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-787" ], "epss": 0.40062, "epss_percentile": 0.98643, "epss_date": "2026-11-09", "short_description": "Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34448", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34448" }, { "rank": 985, "cve": "CVE-2021-20016", "vendor": "SonicWall", "product": "SSLVPN SMA100", "vulnerability_name": "SonicWall SSLVPN SMA100 SQL Injection Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Known", "cwes": [ "CWE-89" ], "epss": 0.40038, "epss_percentile": 0.98641, "epss_date": "2026-11-09", "short_description": "SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20016", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-20016" }, { "rank": 986, "cve": "CVE-2014-0496", "vendor": "Adobe", "product": "Reader and Acrobat", "vulnerability_name": "Adobe Reader and Acrobat Use-After-Free Vulnerability", "kev_date_added": "2022-03-03", "kev_due_date": "2022-03-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-399" ], "epss": 0.3998, "epss_percentile": 0.98639, "epss_date": "2026-11-09", "short_description": "Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0496", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0496" }, { "rank": 987, "cve": "CVE-2013-6282", "vendor": "Linux", "product": "Kernel", "vulnerability_name": "Linux Kernel Improper Input Validation Vulnerability", "kev_date_added": "2022-09-15", "kev_due_date": "2022-10-06", "known_ransomware_use": "Unknown", "cwes": [ "CWE-20" ], "epss": 0.39711, "epss_percentile": 0.98632, "epss_date": "2026-11-09", "short_description": "The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6282", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-6282" }, { "rank": 988, "cve": "CVE-2021-27860", "vendor": "FatPipe", "product": "WARP, IPVPN, and MPVPN software", "vulnerability_name": "FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit", "kev_date_added": "2022-01-10", "kev_due_date": "2022-01-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-434" ], "epss": 0.3968, "epss_percentile": 0.9863, "epss_date": "2026-11-09", "short_description": "A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-27860", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27860" }, { "rank": 989, "cve": "CVE-2021-1647", "vendor": "Microsoft", "product": "Defender", "vulnerability_name": "Microsoft Defender Remote Code Execution Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-122", "CWE-1285" ], "epss": 0.39653, "epss_percentile": 0.98629, "epss_date": "2026-11-09", "short_description": "Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-1647", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1647" }, { "rank": 990, "cve": "CVE-2023-39780", "vendor": "ASUS", "product": "RT-AX55 Routers", "vulnerability_name": "ASUS RT-AX55 Routers OS Command Injection Vulnerability", "kev_date_added": "2025-06-02", "kev_due_date": "2025-06-23", "known_ransomware_use": "Unknown", "cwes": [ "CWE-78" ], "epss": 0.39514, "epss_percentile": 0.98624, "epss_date": "2026-11-09", "short_description": "ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39780", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-39780" }, { "rank": 991, "cve": "CVE-2013-3660", "vendor": "Microsoft", "product": "Win32k", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "kev_date_added": "2022-03-28", "kev_due_date": "2022-04-18", "known_ransomware_use": "Unknown", "cwes": [ "CWE-119" ], "epss": 0.39318, "epss_percentile": 0.98616, "epss_date": "2026-11-09", "short_description": "The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-3660", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3660" }, { "rank": 992, "cve": "CVE-2021-26828", "vendor": "OpenPLC", "product": "ScadaBR", "vulnerability_name": "OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability", "kev_date_added": "2025-12-03", "kev_due_date": "2025-12-24", "known_ransomware_use": "Unknown", "cwes": [ "CWE-434" ], "epss": 0.39096, "epss_percentile": 0.98605, "epss_date": "2026-11-09", "short_description": "OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26828", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26828" }, { "rank": 993, "cve": "CVE-2020-1464", "vendor": "Microsoft", "product": "Windows", "vulnerability_name": "Microsoft Windows Spoofing Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2022-05-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-347" ], "epss": 0.38946, "epss_percentile": 0.986, "epss_date": "2026-11-09", "short_description": "Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1464", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1464" }, { "rank": 994, "cve": "CVE-2026-76504", "vendor": "Cisco", "product": "Catalyst SD-WAN Manager", "vulnerability_name": "Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability", "kev_date_added": "2026-09-30", "kev_due_date": "2026-10-03", "known_ransomware_use": "Unknown", "cwes": [ "CWE-177" ], "epss": 0.38928, "epss_percentile": 0.98599, "epss_date": "2026-11-09", "short_description": "Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76504", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76504" }, { "rank": 995, "cve": "CVE-2021-38003", "vendor": "Google", "product": "Chromium V8", "vulnerability_name": "Google Chromium V8 Memory Corruption Vulnerability", "kev_date_added": "2021-11-03", "kev_due_date": "2021-11-17", "known_ransomware_use": "Unknown", "cwes": [ "CWE-122", "CWE-755" ], "epss": 0.38573, "epss_percentile": 0.98587, "epss_date": "2026-11-09", "short_description": "Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-38003", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-38003" }, { "rank": 996, "cve": "CVE-2024-55550", "vendor": "Mitel", "product": "MiCollab", "vulnerability_name": "Mitel MiCollab Path Traversal Vulnerability", "kev_date_added": "2025-01-07", "kev_due_date": "2025-01-28", "known_ransomware_use": "Known", "cwes": [ "CWE-22" ], "epss": 0.38155, "epss_percentile": 0.98569, "epss_date": "2026-11-09", "short_description": "Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55550", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-55550" }, { "rank": 997, "cve": "CVE-2018-13374", "vendor": "Fortinet", "product": "FortiOS and FortiADC", "vulnerability_name": "Fortinet FortiOS and FortiADC Improper Access Control Vulnerability", "kev_date_added": "2022-09-08", "kev_due_date": "2022-09-29", "known_ransomware_use": "Known", "cwes": [ "CWE-732" ], "epss": 0.38088, "epss_percentile": 0.98567, "epss_date": "2026-11-09", "short_description": "Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-13374", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-13374" }, { "rank": 998, "cve": "CVE-2019-11707", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "vulnerability_name": "Mozilla Firefox and Thunderbird Type Confusion Vulnerability", "kev_date_added": "2022-05-23", "kev_due_date": "2022-06-13", "known_ransomware_use": "Unknown", "cwes": [ "CWE-843" ], "epss": 0.37951, "epss_percentile": 0.98559, "epss_date": "2026-11-09", "short_description": "Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11707", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11707" }, { "rank": 999, "cve": "CVE-2008-0655", "vendor": "Adobe", "product": "Acrobat and Reader", "vulnerability_name": "Adobe Acrobat and Reader Unspecified Vulnerability", "kev_date_added": "2022-06-08", "kev_due_date": "2022-06-22", "known_ransomware_use": "Unknown", "cwes": [], "epss": 0.37871, "epss_percentile": 0.98557, "epss_date": "2026-11-09", "short_description": "Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0655", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-0655" }, { "rank": 1000, "cve": "CVE-2023-3079", "vendor": "Google", "product": "Chromium V8", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "kev_date_added": "2023-06-07", "kev_due_date": "2023-06-28", "known_ransomware_use": "Unknown", "cwes": [ "CWE-843" ], "epss": 0.37858, "epss_percentile": 0.98556, "epss_date": "2026-11-09", "short_description": "Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3079", "cisa_kev_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-3079" } ]