Skip to content
Exploit Radar Choose my productsProducts My radar

Edition of October 4, 2026, updated daily

What to patch first

The vulnerabilities in CISA’s catalog of exploited vulnerabilities, in the recommended order of remediation.

Edit

1,733 vulnerabilities across all products. To see only yours: Choose my products.

2 recent vulnerabilities (90 days) affect brands not yet classified: check that they are not among your products. See these brands.

The last 30 days

38 vulnerabilities added to the catalog, 22 of them critical (score of 9 or more).

  1. September 5, 2026: no additions
  2. September 6, 2026: no additions
  3. September 7, 2026: no additions
  8. September 12, 2026: no additions
  9. September 13, 2026: no additions
  11. September 15, 2026: no additions
  13. September 17, 2026: no additions
  15. September 19, 2026: no additions
  16. September 20, 2026: no additions
  19. September 23, 2026: no additions
  22. September 26, 2026: no additions
  24. September 28, 2026: no additions
  29. October 3, 2026: no additions
  30. October 4, 2026: no additions

One square per added vulnerability, colored by severity. Pick a day to see its vulnerabilities.

How to read this list
SeverityCVSS scoreA severity score from 0 to 10, computed with an international method (CVSS). 9 or more: critical; 7 to 8.9: high; 4 to 6.9: medium. It measures the technical severity of the flaw, not the risk in your environment.
the CVSS score, from 0 to 10: the redder the square, the more severe the vulnerability.
Signals
  • CERT-FR alert in progressCERT-FR alertCERT-FR, the incident response center of France’s ANSSI, issues an alert when a vulnerability is exploited at scale or targets France. “Active”: the alert is not closed.
  • Hunt for compromiseHunt for compromiseCISA asks you to check whether the device has already been breached, not only to patch it: a patch does not undo a successful intrusion.
  • RansomwareRansomwareAccording to CISA, ransomware groups (which encrypt data for ransom) use this vulnerability.
Order
additions from the last 30 days first, day by day, then the most severe.
How the list is ranked
  1. Recent additions first to the catalog of exploited vulnerabilities (September 4, 2026 to October 3, 2026), newest to oldest: these are the most current attacks.
  2. Then this year’s additions (between 31 days and one year old), from most to least severe by CVSS score (0 to 10); for equal scores, the most recently added first.
  3. Finally, all the others, older, from most to least severe.

Within each group, vulnerabilities without a published score come last. End-of-life products, which no patch will ever fix, are listed separately after the list.

What should I do? Check whether you use the product, then follow the required action on its page: most of the time, apply the vendor’s patch. The rule in detail.

The patch list

  1. Rank 1

    Zammad GmbH ZammadCVE-2026-102489

    Zammad GmbH Zammad Session Fixation Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Oct 2, 2026

  2. Rank 2

    Zammad GmbH ZammadCVE-2026-102490

    Zammad GmbH Zammad Improper Privilege Management Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Oct 2, 2026

  3. Rank 3

    Fortinet FortiMailCVE-2026-104286

    Fortinet FortiMail Path Traversal Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Oct 1, 2026

  4. Rank 4

    Cisco Catalyst SD-WANCVE-2026-76504

    Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 30, 2026

  5. Rank 5

    Apple iOS / iPadOS / macOSCVE-2026-86950

    Apple Multiple Products Out-of-Bounds Write Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 8.8high

    Added Sep 29, 2026

  6. Rank 6

    Citrix NetScaler ADC / GatewayCVE-2026-88771

    Citrix NetScaler Improper Input Validation Vulnerability

    Recently addedActive CERT-FR alertHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 27, 2026

  7. Rank 7

    Citrix NetScaler ADC / GatewayCVE-2026-88772

    Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

    Recently addedActive CERT-FR alertHunt for compromise (CISA)

    CVSS severity 8.1high

    Added Sep 27, 2026

  8. Rank 8

    Microsoft SharePoint ServerCVE-2026-65660

    Microsoft SharePoint Code Injection Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 8.8high

    Added Sep 25, 2026

  9. Rank 9

    WordPress CoreCVE-2026-87902

    WordPress Core Remote File Inclusion Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 8.1high

    Added Sep 25, 2026

  10. Rank 10

    MikroTik RouterOSCVE-2026-67279

    Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

    Recently added

    CVSS severity 6.5medium

    Added Sep 25, 2026

Show the other 1,651 vulnerabilities in the list
  1. Rank 11

    WSO2 API Manager, Identity Server, IntegratorCVE-2026-5430

    WSO2 Multiple Products Path Traversal Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Sep 24, 2026

  2. Rank 12

    Adobe Commerce (Magento)CVE-2026-71362

    Adobe Commerce and Magento Incorrect Authorization Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.1critical

    Added Sep 24, 2026

  3. Rank 13

    Arista SD-WAN (VeloCloud)CVE-2026-93952

    Arista VeloCloud Orchestrator Improper Input Validation Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Sep 22, 2026

  4. Rank 14

    Check Point Quantum Security GatewayCVE-2026-85102

    Check Point Multiple Products Improper Certificate Validation Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 22, 2026

  5. Rank 15

    Check Point Security Management / SmartConsoleCVE-2026-93616

    Check Point Multiple Products Path Traversal Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 22, 2026

  6. Rank 16

    F5 BIG-IPCVE-2026-94127

    F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 22, 2026

  7. Rank 17

    Zyxel Switches (GS, XGS)CVE-2026-7273

    Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 8.8high

    Added Sep 21, 2026

  8. Rank 18

    Linux KernelCVE-2025-39682

    Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 18, 2026

  9. Rank 19

    Linux KernelCVE-2026-53266

    Linux Kernel Out-of-Bounds Write Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 8.8high

    Added Sep 18, 2026

  10. Rank 20

    Linux KernelCVE-2025-39964

    Linux Kernel Race Condition Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 5.5medium

    Added Sep 18, 2026

  11. Rank 21

    Cisco Identity Services Engine (ISE)CVE-2026-76460

    Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Sep 16, 2026

  12. Rank 22

    Google PixelCVE-2026-58704

    Google Pixel Improper Authorization Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 8.8high

    Added Sep 16, 2026

  13. Rank 23

    Acronis BackupCVE-2026-87886

    Acronis Backup Incorrect Default Permissions Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 7.8high

    Added Sep 16, 2026

  14. Rank 24

    Cisco Secure Email GatewayCVE-2026-76461

    Cisco Secure Email Gateway SQL Injection Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 14, 2026

  15. Rank 25

    GitLab Community / Enterprise Edition (CE/EE)CVE-2026-85706

    GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Sep 11, 2026

  16. Rank 26

    ConnectWise ScreenConnectCVE-2026-84869

    ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.9critical

    Added Sep 11, 2026

  17. Rank 27

    JFrog ArtifactoryCVE-2026-42016

    JFrog Artifactory Incorrect Authorization Vulnerability

    Recently added

    CVSS severity 8.8high

    Added Sep 11, 2026

  18. Rank 28

    JFrog ArtifactoryCVE-2026-42018

    JFrog Artifactory Improper Authentication Vulnerability

    Recently added

    CVSS severity 7.5high

    Added Sep 11, 2026

  19. Rank 29

    MikroTik RouterOSCVE-2026-86060

    MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 10, 2026

  20. Rank 30

    MikroTik RouterOSCVE-2026-67277

    MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

    Recently added

    CVSS severity 8.2high

    Added Sep 10, 2026

  21. Rank 31

    Cisco Secure Firewall Management Center (FMC)CVE-2026-20079

    Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Sep 9, 2026

  22. Rank 32

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2025-25249

    Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 9, 2026

  23. Rank 33

    Citrix NetScaler ADC / GatewayCVE-2026-19490

    Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 9, 2026

  24. Rank 34

    Google Chrome / ChromiumCVE-2026-87491

    Google Chromium V8 Out of Bounds Write Vulnerability

    Recently added

    CVSS severity 8.8high

    Added Sep 9, 2026

  25. Rank 35

    Adobe Commerce (Magento)CVE-2026-75650

    Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Sep 8, 2026

  26. Rank 36

    N-able N-centralCVE-2026-86218

    N-able N-central Static Code Injection Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 8, 2026

  27. Rank 37

    Microsoft WindowsCVE-2026-81963

    Microsoft Windows Link Following Vulnerability

    Recently added

    CVSS severity 7.8high

    Added Sep 8, 2026

  28. Rank 38

    Microsoft WindowsCVE-2026-85880

    Microsoft Windows Heap-Based Buffer Overflow Vulnerability

    Recently added

    CVSS severity 7.8high

    Added Sep 8, 2026

  29. Rank 39

    Google Chrome / ChromiumCVE-2026-85046

    Google Chromium V8 Type Confusion Vulnerability

    Recently added

    CVSS severity 8.8high

    Added Sep 4, 2026

  30. Rank 40

    Kestra OSSCVE-2026-49869

    Kestra OSS OS Command Injection Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Sep 2, 2026

  31. Rank 41

    SonicWall SMA 1000CVE-2026-83548

    SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

    Active CERT-FR alertHunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Sep 2, 2026

  32. Rank 42

    Oracle WebLogic ServerCVE-2026-21962

    Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Aug 24, 2026

  33. Rank 43

    MetabaseCVE-2026-72898

    Metabase SQL Injection Vulnerability

    Active CERT-FR alertHunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Aug 11, 2026

  34. Rank 44

    Arista SD-WAN (VeloCloud)CVE-2026-16812

    Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Jul 27, 2026

  35. Rank 45

    SonicWall SMA 1000CVE-2026-15409

    SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

    Hunt for compromise (CISA)Ransomware

    CVSS severity 10.0critical

    Added Jul 14, 2026

  36. Rank 46

    Adobe ColdFusionCVE-2026-48282

    Adobe ColdFusion Path Traversal Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Jul 7, 2026

  37. Rank 47

    SimpleHelpCVE-2026-48558

    SimpleHelp Authentication Bypass Vulnerability

    CVSS severity 10.0critical

    Added Jun 29, 2026

  38. Rank 48

    Ubiquiti UniFi OS / UniFi NetworkCVE-2026-34908

    Ubiquiti UniFi OS Improper Access Control Vulnerability

    CVSS severity 10.0critical

    Added Jun 23, 2026

  39. Rank 49

    Ubiquiti UniFi OS / UniFi NetworkCVE-2026-34909

    Ubiquiti UniFi OS Path Traversal Vulnerability

    CVSS severity 10.0critical

    Added Jun 23, 2026

  40. Rank 50

    Ubiquiti UniFi OS / UniFi NetworkCVE-2026-34910

    Ubiquiti UniFi OS Improper Input Validation Vulnerability

    CVSS severity 10.0critical

    Added Jun 23, 2026

  41. Rank 51

    Ivanti SentryCVE-2026-10520

    Ivanti Sentry OS Command Injection Vulnerability

    CVSS severity 10.0critical

    Added Jun 11, 2026

  42. Rank 52

    Cisco Catalyst SD-WANCVE-2026-20182

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    CVSS severity 10.0critical

    Added May 14, 2026

  43. Rank 53

    Quest KACE Systems Management Appliance (SMA)CVE-2025-32975

    Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

    CVSS severity 10.0critical

    Added Apr 20, 2026

  44. Rank 54

    Craft CMSCVE-2025-32432

    Craft CMS Code Injection Vulnerability

    CVSS severity 10.0critical

    Added Mar 20, 2026

  45. Rank 55

    Cisco Secure Firewall Management Center (FMC)CVE-2026-20131

    Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

    Ransomware

    CVSS severity 10.0critical

    Added Mar 19, 2026

  46. Rank 56

    Cisco Catalyst SD-WANCVE-2026-20127

    Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

    CVSS severity 10.0critical

    Added Feb 25, 2026

  47. Rank 57

    Dell RecoverPointCVE-2026-22769

    Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

    CVSS severity 10.0critical

    Added Feb 18, 2026

  48. Rank 58

    SmarterTools SmarterMailCVE-2025-52691

    SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

    Ransomware

    CVSS severity 10.0critical

    Added Jan 26, 2026

  49. Rank 59

    Cisco Secure Email GatewayCVE-2025-20393

    Cisco Multiple Products Improper Input Validation Vulnerability

    CVSS severity 10.0critical

    Added Dec 17, 2025

  50. Rank 60

    React (Meta) React Server ComponentsCVE-2025-55182

    Meta React Server Components Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 10.0critical

    Added Dec 5, 2025

  51. Rank 61

    Adobe Experience Manager (AEM)CVE-2025-54253

    Adobe Experience Manager Forms Code Execution Vulnerability

    CVSS severity 10.0critical

    Added Oct 15, 2025

  52. Rank 62

    SimpleHelpCVE-2024-57726

    SimpleHelp Missing Authorization Vulnerability

    RansomwareCVE from 2024, added in 2026

    CVSS severity 9.9critical

    Added Apr 24, 2026

  53. Rank 63

    JFrog ArtifactoryCVE-2026-82329

    JFrog Artifactory Improper Authentication Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 2, 2026

  54. Rank 64

    Sangoma SwitchvoxCVE-2026-9586

    Sangoma Switchvox SQL Injection Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 2, 2026

  55. Rank 65

    PaperCut NG / MFCVE-2026-81578

    PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

    CVSS severity 9.8critical

    Added Aug 31, 2026

  56. Rank 66

    ownCloud ServerCVE-2023-49105

    ownCloud Improper Authentication Vulnerability

    Hunt for compromise (CISA)CVE from 2023, added in 2026

    CVSS severity 9.8critical

    Added Aug 27, 2026

  57. Rank 67

    Ajax.NET ProfessionalCVE-2021-23758

    Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

    CVE from 2021, added in 2026

    CVSS severity 9.8critical

    Added Aug 26, 2026

  58. Rank 68

    Citrix NetScaler ADC / GatewayCVE-2026-8452

    Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

    CVSS severity 9.8critical

    Added Aug 26, 2026

  59. Rank 69

    GiteaCVE-2026-60004

    Gitea Code Injection Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Aug 25, 2026

  60. Rank 70

    TrueConf ServerCVE-2026-72529

    TrueConf Server Missing Authentication for Critical Function Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Aug 20, 2026

  61. Rank 71

    Microsoft WindowsCVE-2026-33824

    Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

    CVSS severity 9.8critical

    Added Aug 18, 2026

  62. Rank 72

    VMware (Broadcom) vCenter ServerCVE-2026-59310

    Broadcom VMware vCenter Path Traversal Vulnerability

    Hunt for compromise (CISA)Ransomware

    CVSS severity 9.8critical

    Added Aug 18, 2026

  63. Rank 73

    Apple macOS (OS X)CVE-2026-65400

    Apple macOS Improper Authentication Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Aug 18, 2026

  64. Rank 74

    Progress Kemp LoadMasterCVE-2026-8037

    Progress LoadMaster Command Injection Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Aug 7, 2026

  65. Rank 75

    JetBrains TeamCityCVE-2026-63077

    JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

    Hunt for compromise (CISA)Ransomware

    CVSS severity 9.8critical

    Added Aug 5, 2026

  66. Rank 76

    LangflowCVE-2026-9198

    IBM Langflow Code Injection Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Aug 4, 2026

  67. Rank 77

    Check Point Security Management / SmartConsoleCVE-2026-16232

    Check Point SmartConsole Improper Authentication Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Jul 22, 2026

  68. Rank 78

    Microsoft SharePoint ServerCVE-2026-50522

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Jul 22, 2026

  69. Rank 79

    LangflowCVE-2026-0770

    Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Jul 21, 2026

  70. Rank 80

    WordPress CoreCVE-2026-63030

    WordPress Core Interpretation Conflict Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Jul 21, 2026

  71. Rank 81

    Fortinet FortiSandboxCVE-2026-25089

    Fortinet FortiSandbox OS Command Injection Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Jul 16, 2026

  72. Rank 82

    Fortinet FortiSandboxCVE-2026-39808

    Fortinet FortiSandbox OS Command Injection Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Jul 16, 2026

  73. Rank 83

    Microsoft SharePoint ServerCVE-2026-58644

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Jul 16, 2026

  74. Rank 84

    Oracle E-Business SuiteCVE-2026-46817

    Oracle E-Business Suite Improper Privilege Management Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Jul 15, 2026

  75. Rank 85

    Microsoft SharePoint ServerCVE-2026-56164

    Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Jul 14, 2026

  76. Rank 86

    iCagendaCVE-2026-48939

    iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Jul 10, 2026

  77. Rank 87

    Balbooa FormsCVE-2026-56291

    Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Jul 10, 2026

  78. Rank 88

    JoomShaper SP Page BuilderCVE-2026-48908

    JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Jul 7, 2026

  79. Rank 89

    Joomlack Page BuilderCVE-2026-56290

    Joomlack Page Builder Improper Access Control Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Jul 7, 2026

  80. Rank 90

    PTC Windchill and FlexPLMCVE-2026-12569

    PTC Windchill and FlexPLM Improper Input Validation Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jun 25, 2026

  81. Rank 91

    Lantronix EDS5000CVE-2025-67038

    Lantronix EDS5000 Code Injection Vulnerability

    CVSS severity 9.8critical

    Added Jun 23, 2026

  82. Rank 92

    Splunk EnterpriseCVE-2026-20253

    Splunk Enterprise Missing Authentication for Critical Function Vulnerability

    CVSS severity 9.8critical

    Added Jun 18, 2026

  83. Rank 93

    Widget Factory (JCE) JCE (Joomla Content Editor)CVE-2026-48907

    Widget Factory Joomla Content Editor Improper Access Control Vulnerability

    CVSS severity 9.8critical

    Added Jun 16, 2026

  84. Rank 94

    Oracle PeopleSoftCVE-2026-35273

    Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jun 12, 2026

  85. Rank 95

    Mirasvit Full Page Cache WarmerCVE-2026-45247

    Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability

    CVSS severity 9.8critical

    Added Jun 3, 2026

  86. Rank 96

    Nx ConsoleCVE-2026-48027

    Nx Console Embedded Malicious Code Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added May 27, 2026

  87. Rank 97

    DAEMON Tools LiteCVE-2026-8398

    Daemon Tools Lite Embedded Malicious Code Vulnerability

    CVSS severity 9.8critical

    Added May 27, 2026

  88. Rank 98

    LiteSpeed cPanel PluginCVE-2026-48172

    LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

    CVSS severity 9.8critical

    Added May 26, 2026

  89. Rank 99

    Drupal CoreCVE-2026-9082

    Drupal Core SQL Injection Vulnerability

    CVSS severity 9.8critical

    Added May 22, 2026

  90. Rank 100

    Microsoft WindowsCVE-2008-4250

    Microsoft Windows Buffer Overflow Vulnerability

    CVE from 2008, added in 2026

    CVSS severity 9.8critical

    Added May 20, 2026

  91. Rank 101

    BerriAI LiteLLMCVE-2026-42208

    BerriAI LiteLLM SQL Injection Vulnerability

    CVSS severity 9.8critical

    Added May 8, 2026

  92. Rank 102

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2026-0300

    Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

    CVSS severity 9.8critical

    Added May 6, 2026

  93. Rank 103

    cPanel (WebPros) cPanel & WHM (WP Squared)CVE-2026-41940

    WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Apr 30, 2026

  94. Rank 104

    Samsung MagicINFO ServerCVE-2024-7399

    Samsung MagicINFO 9 Server Path Traversal Vulnerability

    CVE from 2024, added in 2026

    CVSS severity 9.8critical

    Added Apr 24, 2026

  95. Rank 105

    MarimoCVE-2026-39987

    Marimo Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Apr 23, 2026

  96. Rank 106

    Fortinet FortiClient EMSCVE-2026-21643

    Fortinet FortiClient EMS SQL Injection Vulnerability

    CVSS severity 9.8critical

    Added Apr 13, 2026

  97. Rank 107

    Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron)CVE-2026-1340

    Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

    CVSS severity 9.8critical

    Added Apr 8, 2026

  98. Rank 108

    Fortinet FortiClient EMSCVE-2026-35616

    Fortinet FortiClient EMS Improper Access Control Vulnerability

    CVSS severity 9.8critical

    Added Apr 6, 2026

  99. Rank 109

    Citrix NetScaler ADC / GatewayCVE-2026-3055

    Citrix NetScaler Out-of-Bounds Read Vulnerability

    CVSS severity 9.8critical

    Added Mar 30, 2026

  100. Rank 110

    F5 BIG-IPCVE-2025-53521

    F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

    CVSS severity 9.8critical

    Added Mar 27, 2026

  101. Rank 111

    LangflowCVE-2026-33017

    Langflow Code Injection Vulnerability

    CVSS severity 9.8critical

    Added Mar 25, 2026

  102. Rank 112

    Laravel LivewireCVE-2025-54068

    Laravel Livewire Code Injection Vulnerability

    CVSS severity 9.8critical

    Added Mar 20, 2026

  103. Rank 113

    Microsoft SharePoint ServerCVE-2026-20963

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    CVSS severity 9.8critical

    Added Mar 18, 2026

  104. Rank 114

    SolarWinds Web Help DeskCVE-2025-26399

    SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Mar 9, 2026

  105. Rank 115

    Hikvision IP cameras and recorders (NVR/DVR)CVE-2017-7921

    Hikvision Multiple Products Improper Authentication Vulnerability

    CVE from 2017, added in 2026

    CVSS severity 9.8critical

    Added Mar 5, 2026

  106. Rank 116

    Rockwell Automation Logix (PLCs, Studio 5000)CVE-2021-22681

    Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

    CVE from 2021, added in 2026

    CVSS severity 9.8critical

    Added Mar 5, 2026

  107. Rank 117

    GitLab Community / Enterprise Edition (CE/EE)CVE-2021-22175

    GitLab Server-Side Request Forgery (SSRF) Vulnerability

    CVE from 2021, added in 2026

    CVSS severity 9.8critical

    Added Feb 18, 2026

  108. Rank 118

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2020-7796

    Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

    CVE from 2020, added in 2026

    CVSS severity 9.8critical

    Added Feb 17, 2026

  109. Rank 119

    BeyondTrust Remote Support / Privileged Remote Access (RS / PRA)CVE-2026-1731

    BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Feb 13, 2026

  110. Rank 120

    Microsoft Configuration ManagerCVE-2024-43468

    Microsoft Configuration Manager SQL Injection Vulnerability

    CVE from 2024, added in 2026

    CVSS severity 9.8critical

    Added Feb 12, 2026

  111. Rank 121

    SolarWinds Web Help DeskCVE-2025-40536

    SolarWinds Web Help Desk Security Control Bypass Vulnerability

    CVSS severity 9.8critical

    Added Feb 12, 2026

  112. Rank 122

    React Native Community React Native CLICVE-2025-11953

    React Native Community CLI OS Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Feb 5, 2026

  113. Rank 123

    SmarterTools SmarterMailCVE-2026-24423

    SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Feb 5, 2026

  114. Rank 124

    Sangoma FreePBXCVE-2019-19006

    Sangoma FreePBX Improper Authentication Vulnerability

    CVE from 2019, added in 2026

    CVSS severity 9.8critical

    Added Feb 3, 2026

  115. Rank 125

    SolarWinds Web Help DeskCVE-2025-40551

    SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

    CVSS severity 9.8critical

    Added Feb 3, 2026

  116. Rank 126

    Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron)CVE-2026-1281

    Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

    CVSS severity 9.8critical

    Added Jan 29, 2026

  117. Rank 127

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2026-24858

    Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

    CVSS severity 9.8critical

    Added Jan 27, 2026

  118. Rank 128

    SmarterTools SmarterMailCVE-2026-23760

    SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jan 26, 2026

  119. Rank 129

    GNU InetUtilsCVE-2026-24061

    GNU InetUtils Argument Injection Vulnerability

    CVSS severity 9.8critical

    Added Jan 26, 2026

  120. Rank 130

    VMware (Broadcom) vCenter ServerCVE-2024-37079

    Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

    CVE from 2024, added in 2026

    CVSS severity 9.8critical

    Added Jan 23, 2026

  121. Rank 131

    Cisco Unified Communications ManagerCVE-2026-20045

    Cisco Unified Communications Products Code Injection Vulnerability

    CVSS severity 9.8critical

    Added Jan 21, 2026

  122. Rank 132

    HPE OneViewCVE-2025-37164

    Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

    CVSS severity 9.8critical

    Added Jan 7, 2026

  123. Rank 133

    WatchGuard Firebox / XTM (Fireware)CVE-2025-14733

    WatchGuard Firebox Out of Bounds Write Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Dec 19, 2025

  124. Rank 134

    ASUS Live UpdateCVE-2025-59374

    ASUS Live Update Embedded Malicious Code Vulnerability

    CVSS severity 9.8critical

    Added Dec 17, 2025

  125. Rank 135

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2025-59718

    Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

    CVSS severity 9.8critical

    Added Dec 16, 2025

  126. Rank 136

    Gladinet CentreStack / TriofoxCVE-2025-14611

    Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability

    CVSS severity 9.8critical

    Added Dec 15, 2025

  127. Rank 137

    OSGeo GeoServerCVE-2025-58360

    OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

    CVSS severity 9.8critical

    Added Dec 11, 2025

  128. Rank 138

    D-Link Routers (DIR, DWR, DSR)CVE-2022-37055

    D-Link Routers Buffer Overflow Vulnerability

    CVE from 2022, added in 2025

    CVSS severity 9.8critical

    Added Dec 8, 2025

  129. Rank 139

    Array Networks ArrayOS AG / vxAGCVE-2025-66644

    Array Networks ArrayOS AG OS Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Dec 8, 2025

  130. Rank 140

    Oracle Identity and Access Management (OIM / OAM)CVE-2025-61757

    Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

    CVSS severity 9.8critical

    Added Nov 21, 2025

  131. Rank 141

    Fortinet FortiWebCVE-2025-64446

    Fortinet FortiWeb Path Traversal Vulnerability

    CVSS severity 9.8critical

    Added Nov 14, 2025

  132. Rank 142

    WatchGuard Firebox / XTM (Fireware)CVE-2025-9242

    WatchGuard Firebox Out-of-Bounds Write Vulnerability

    CVSS severity 9.8critical

    Added Nov 12, 2025

  133. Rank 143

    Samsung Mobile Devices (Galaxy)CVE-2025-21042

    Samsung Mobile Devices Out-of-Bounds Write Vulnerability

    CVSS severity 9.8critical

    Added Nov 10, 2025

  134. Rank 144

    XWiki PlatformCVE-2025-24893

    XWiki Platform Eval Injection Vulnerability

    CVSS severity 9.8critical

    Added Oct 30, 2025

  135. Rank 145

    Microsoft WindowsCVE-2025-59287

    Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

    CVSS severity 9.8critical

    Added Oct 24, 2025

  136. Rank 146

    Motex LANSCOPE Endpoint ManagerCVE-2025-61932

    Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

    CVSS severity 9.8critical

    Added Oct 22, 2025

  137. Rank 147

    Kentico XperienceCVE-2025-2746

    Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

    CVSS severity 9.8critical

    Added Oct 20, 2025

  138. Rank 148

    Kentico XperienceCVE-2025-2747

    Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

    CVSS severity 9.8critical

    Added Oct 20, 2025

  139. Rank 149

    SKYSEA Client ViewCVE-2016-7836

    SKYSEA Client View Improper Authentication Vulnerability

    CVE from 2016, added in 2025

    CVSS severity 9.8critical

    Added Oct 14, 2025

  140. Rank 150

    Mozilla FirefoxCVE-2010-3765

    Mozilla Multiple Products Remote Code Execution Vulnerability

    CVE from 2010, added in 2025

    CVSS severity 9.8critical

    Added Oct 6, 2025

  141. Rank 151

    Oracle E-Business SuiteCVE-2025-61882

    Oracle E-Business Suite Unspecified Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Oct 6, 2025

  142. Rank 152

    TanStackCVE-2026-45321

    TanStack Unspecified Vulnerability

    Ransomware

    CVSS severity 9.6critical

    Added May 27, 2026

  143. Rank 153

    MLflowCVE-2026-64849

    MLflow Server-Side Request Forgery Vulnerability

    CVSS severity 9.3critical

    Added Aug 19, 2026

  144. Rank 154

    Check Point Quantum Security GatewayCVE-2026-50751

    Check Point Security Gateway Improper Authentication Vulnerability

    Ransomware

    CVSS severity 9.3critical

    Added Jun 8, 2026

  145. Rank 155

    PaperCut NG / MFCVE-2026-82078

    PaperCut NG/MF Unsafe Reflection Vulnerability

    CVSS severity 9.1critical

    Added Aug 31, 2026

  146. Rank 156

    Microsoft SharePoint ServerCVE-2026-55040

    Microsoft SharePoint Weak Authentication Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.1critical

    Added Aug 18, 2026

  147. Rank 157

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2026-0257

    Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.1critical

    Added May 29, 2026

  148. Rank 158

    Gladinet CentreStack / TriofoxCVE-2025-12480

    Gladinet Triofox Improper Access Control Vulnerability

    CVSS severity 9.1critical

    Added Nov 12, 2025

  149. Rank 159

    Dassault Systèmes DELMIA AprisoCVE-2025-6205

    Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability

    CVSS severity 9.1critical

    Added Oct 28, 2025

  150. Rank 160

    Adobe Commerce (Magento)CVE-2025-54236

    Adobe Commerce and Magento Improper Input Validation Vulnerability

    CVSS severity 9.1critical

    Added Oct 24, 2025

  151. Rank 161

    TrueConf ServerCVE-2026-72530

    TrueConf Server Code Injection Vulnerability

    CVSS severity 9.0critical

    Added Aug 20, 2026

  152. Rank 162

    CWP (Control Web Panel / CentOS Web Panel) Control Web PanelCVE-2025-48703

    CWP Control Web Panel OS Command Injection Vulnerability

    CVSS severity 9.0critical

    Added Nov 4, 2025

  153. Rank 163

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2026-73570

    Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 8.9high

    Added Aug 21, 2026

  154. Rank 164

    Microsoft SQL ServerCVE-2019-1068

    Microsoft SQL Server Remote Code Execution Vulnerability

    Hunt for compromise (CISA)CVE from 2019, added in 2026

    CVSS severity 8.8high

    Added Aug 26, 2026

  155. Rank 165

    RayCVE-2025-62593

    Ray-Project Ray Code Injection Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 8.8high

    Added Aug 17, 2026

  156. Rank 166

    Microsoft SharePoint ServerCVE-2026-45659

    Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

    Hunt for compromise (CISA)Ransomware

    CVSS severity 8.8high

    Added Jul 1, 2026

  157. Rank 167

    Google Chrome / ChromiumCVE-2026-11645

    Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

    CVSS severity 8.8high

    Added Jun 9, 2026

  158. Rank 168

    BerriAI LiteLLMCVE-2026-42271

    BerriAI LiteLLM Command Injection Vulnerability

    CVSS severity 8.8high

    Added Jun 8, 2026

  159. Rank 169

    LangflowCVE-2025-34291

    Langflow Origin Validation Error Vulnerability

    CVSS severity 8.8high

    Added May 21, 2026

  160. Rank 170

    Microsoft WindowsCVE-2009-1537

    Microsoft DirectX NULL Byte Overwrite Vulnerability

    CVE from 2009, added in 2026

    CVSS severity 8.8high

    Added May 20, 2026

  161. Rank 171

    Adobe Acrobat / ReaderCVE-2009-3459

    Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability

    CVE from 2009, added in 2026

    CVSS severity 8.8high

    Added May 20, 2026

  162. Rank 172

    Microsoft Internet Explorer / Edge (legacy)CVE-2010-0249

    Microsoft Internet Explorer Use-After-Free Vulnerability

    CVE from 2010, added in 2026

    CVSS severity 8.8high

    Added May 20, 2026

  163. Rank 173

    Microsoft Internet Explorer / Edge (legacy)CVE-2010-0806

    Microsoft Internet Explorer Use-After-Free Vulnerability

    CVE from 2010, added in 2026

    CVSS severity 8.8high

    Added May 20, 2026

  164. Rank 174

    Apache ActiveMQCVE-2026-34197

    Apache ActiveMQ Improper Input Validation Vulnerability

    CVSS severity 8.8high

    Added Apr 16, 2026

  165. Rank 175

    Microsoft OfficeCVE-2009-0238

    Microsoft Office Remote Code Execution

    CVE from 2009, added in 2026

    CVSS severity 8.8high

    Added Apr 14, 2026

  166. Rank 176

    Microsoft Exchange ServerCVE-2023-21529

    Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

    RansomwareCVE from 2023, added in 2026

    CVSS severity 8.8high

    Added Apr 13, 2026

  167. Rank 177

    Google Chrome / ChromiumCVE-2026-5281

    Google Dawn Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Apr 1, 2026

  168. Rank 178

    Aqua Security TrivyCVE-2026-33634

    Aquasecurity Trivy Embedded Malicious Code Vulnerability

    CVSS severity 8.8high

    Added Mar 26, 2026

  169. Rank 179

    Apple Safari / WebKitCVE-2025-31277

    Apple Multiple Products Buffer Overflow Vulnerability

    CVSS severity 8.8high

    Added Mar 20, 2026

  170. Rank 180

    Google Chrome / ChromiumCVE-2026-3909

    Google Skia Out-of-Bounds Write Vulnerability

    CVSS severity 8.8high

    Added Mar 13, 2026

  171. Rank 181

    Google Chrome / ChromiumCVE-2026-3910

    Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

    CVSS severity 8.8high

    Added Mar 13, 2026

  172. Rank 182

    n8nCVE-2025-68613

    n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

    CVSS severity 8.8high

    Added Mar 11, 2026

  173. Rank 183

    Apple Safari / WebKitCVE-2023-43000

    Apple Multiple products Use-After-Free Vulnerability

    CVE from 2023, added in 2026

    CVSS severity 8.8high

    Added Mar 5, 2026

  174. Rank 184

    Soliton Systems FileZenCVE-2026-25108

    Soliton Systems K.K FileZen OS Command Injection Vulnerability

    CVSS severity 8.8high

    Added Feb 24, 2026

  175. Rank 185

    Roundcube WebmailCVE-2025-49113

    RoundCube Webmail Deserialization of Untrusted Data Vulnerability

    CVSS severity 8.8high

    Added Feb 20, 2026

  176. Rank 186

    Microsoft WindowsCVE-2008-0015

    Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

    CVE from 2008, added in 2026

    CVSS severity 8.8high

    Added Feb 17, 2026

  177. Rank 187

    Google Chrome / ChromiumCVE-2026-2441

    Google Chromium CSS Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Feb 17, 2026

  178. Rank 188

    Microsoft WindowsCVE-2026-21510

    Microsoft Windows Shell Protection Mechanism Failure Vulnerability

    CVSS severity 8.8high

    Added Feb 10, 2026

  179. Rank 189

    Microsoft WindowsCVE-2026-21513

    Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

    CVSS severity 8.8high

    Added Feb 10, 2026

  180. Rank 190

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2025-68645

    Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

    CVSS severity 8.8high

    Added Jan 22, 2026

  181. Rank 191

    GogsCVE-2025-8110

    Gogs Path Traversal Vulnerability

    CVSS severity 8.8high

    Added Jan 12, 2026

  182. Rank 192

    Microsoft OfficeCVE-2009-0556

    Microsoft Office PowerPoint Code Injection Vulnerability

    CVE from 2009, added in 2026

    CVSS severity 8.8high

    Added Jan 7, 2026

  183. Rank 193

    Digiever DS-2105 ProCVE-2023-52163

    Digiever DS-2105 Pro Missing Authorization Vulnerability

    CVE from 2023, added in 2025

    CVSS severity 8.8high

    Added Dec 22, 2025

  184. Rank 194

    Apple Safari / WebKitCVE-2025-43529

    Apple Multiple Products Use-After-Free WebKit Vulnerability

    CVSS severity 8.8high

    Added Dec 15, 2025

  185. Rank 195

    Sierra Wireless AirLink ALEOSCVE-2018-4063

    Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability

    CVE from 2018, added in 2025

    CVSS severity 8.8high

    Added Dec 12, 2025

  186. Rank 196

    Google Chrome / ChromiumCVE-2025-14174

    Google Chromium Out of Bounds Memory Access Vulnerability

    CVSS severity 8.8high

    Added Dec 12, 2025

  187. Rank 197

    OpenPLC ScadaBRCVE-2021-26828

    OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

    CVE from 2021, added in 2025

    CVSS severity 8.8high

    Added Dec 3, 2025

  188. Rank 198

    Google Chrome / ChromiumCVE-2025-13223

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Nov 19, 2025

  189. Rank 199

    Apple Safari / WebKitCVE-2022-48503

    Apple Multiple Products Unspecified Vulnerability

    CVE from 2022, added in 2025

    CVSS severity 8.8high

    Added Oct 20, 2025

  190. Rank 200

    Microsoft WindowsCVE-2025-33073

    Microsoft Windows SMB Client Improper Access Control Vulnerability

    CVSS severity 8.8high

    Added Oct 20, 2025

  191. Rank 201

    Microsoft WindowsCVE-2011-3402

    Microsoft Windows Remote Code Execution Vulnerability

    CVE from 2011, added in 2025

    CVSS severity 8.8high

    Added Oct 6, 2025

  192. Rank 202

    Microsoft WindowsCVE-2013-3918

    Microsoft Windows Out-of-Bounds Write Vulnerability

    CVE from 2013, added in 2025

    CVSS severity 8.8high

    Added Oct 6, 2025

  193. Rank 203

    Cisco ASA / Firepower (FTD)CVE-2026-20349

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

    CVSS severity 8.6high

    Added Aug 11, 2026

  194. Rank 204

    Cisco Unified Communications ManagerCVE-2026-20230

    Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

    CVSS severity 8.6high

    Added Jun 25, 2026

  195. Rank 205

    Adobe Acrobat / ReaderCVE-2026-34621

    Adobe Acrobat and Reader Prototype Pollution Vulnerability

    CVSS severity 8.6high

    Added Apr 13, 2026

  196. Rank 206

    LiteSpeed cPanel PluginCVE-2026-54420

    LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

    CVSS severity 8.5high

    Added Jun 15, 2026

  197. Rank 207

    LangflowCVE-2026-55255

    Langflow Authorization Bypass Through User-Controlled Key Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 8.4high

    Added Jul 7, 2026

  198. Rank 208

    Google AndroidCVE-2025-48595

    Android Framework Integer Overflow Vulnerability

    CVSS severity 8.4high

    Added Jun 2, 2026

  199. Rank 209

    ConnectWise ScreenConnectCVE-2024-1708

    ConnectWise ScreenConnect Path Traversal Vulnerability

    RansomwareCVE from 2024, added in 2026

    CVSS severity 8.4high

    Added Apr 28, 2026

  200. Rank 210

    BerriAI LiteLLMCVE-2026-59822

    BerriAI LiteLLM Improper Authentication Vulnerability

    CVSS severity 8.2high

    Added Sep 2, 2026

  201. Rank 211

    N-able N-centralCVE-2026-18577

    N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 8.1high

    Added Aug 3, 2026

  202. Rank 212

    DD-WRTCVE-2021-27137

    DD-WRT Stack-Based Buffer Overflow Vulnerability

    Hunt for compromise (CISA)CVE from 2021, added in 2026

    CVSS severity 8.1high

    Added Jul 21, 2026

  203. Rank 213

    Cisco IOS / IOS XECVE-2008-4128

    Cisco IOS Cross-Site Request Forgery Vulnerability

    Hunt for compromise (CISA)CVE from 2008, added in 2026

    CVSS severity 8.1high

    Added Jul 13, 2026

  204. Rank 214

    VMware (Broadcom) Aria Operations (ex-vRealize Operations)CVE-2026-22719

    Broadcom VMware Aria Operations Command Injection Vulnerability

    CVSS severity 8.1high

    Added Mar 3, 2026

  205. Rank 215

    Microsoft Internet Explorer / Edge (legacy)CVE-2010-3962

    Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

    CVE from 2010, added in 2025

    CVSS severity 8.1high

    Added Oct 6, 2025

  206. Rank 216

    Dassault Systèmes DELMIA AprisoCVE-2025-6204

    Dassault Systèmes DELMIA Apriso Code Injection Vulnerability

    CVSS severity 8.0high

    Added Oct 28, 2025

  207. Rank 217

    SonicWall SMA 1000CVE-2026-83549

    SonicWall SMA1000 Appliances OS Command Injection Vulnerability

    Active CERT-FR alertHunt for compromise (CISA)

    CVSS severity 7.8high

    Added Sep 2, 2026

  208. Rank 218

    Linux KernelCVE-2026-53362

    Linux Kernel Unspecified Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 7.8high

    Added Aug 27, 2026

  209. Rank 219

    Red Hat ABRT (Automatic Bug Reporting Tool)CVE-2015-5287

    Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

    CVE from 2015, added in 2026

    CVSS severity 7.8high

    Added Aug 26, 2026

  210. Rank 220

    Linux KernelCVE-2022-0995

    Linux Kernel Out-of-Bounds Write Vulnerability

    CVE from 2022, added in 2026

    CVSS severity 7.8high

    Added Aug 26, 2026

  211. Rank 221

    Microsoft AD FSCVE-2026-56155

    Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

    CVSS severity 7.8high

    Added Jul 14, 2026

  212. Rank 222

    Cisco Catalyst SD-WANCVE-2026-20245

    Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

    CVSS severity 7.8high

    Added Jun 9, 2026

  213. Rank 223

    Linux KernelCVE-2022-0492

    Linux Kernel Improper Authentication Vulnerability

    CVE from 2022, added in 2026

    CVSS severity 7.8high

    Added Jun 2, 2026

  214. Rank 224

    Microsoft DefenderCVE-2026-41091

    Microsoft Defender Link Following Vulnerability

    CVSS severity 7.8high

    Added May 20, 2026

  215. Rank 225

    Linux KernelCVE-2026-31431

    Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

    CVSS severity 7.8high

    Added May 1, 2026

  216. Rank 226

    Microsoft DefenderCVE-2026-33825

    Microsoft Defender Insufficient Granularity of Access Control Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Apr 22, 2026

  217. Rank 227

    Microsoft OfficeCVE-2012-1854

    Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

    CVE from 2012, added in 2026

    CVSS severity 7.8high

    Added Apr 13, 2026

  218. Rank 228

    Adobe Acrobat / ReaderCVE-2020-9715

    Adobe Acrobat Use-After-Free Vulnerability

    CVE from 2020, added in 2026

    CVSS severity 7.8high

    Added Apr 13, 2026

  219. Rank 229

    Microsoft WindowsCVE-2023-36424

    Microsoft Windows Out-of-Bounds Read Vulnerability

    CVE from 2023, added in 2026

    CVSS severity 7.8high

    Added Apr 13, 2026

  220. Rank 230

    Microsoft WindowsCVE-2025-60710

    Microsoft Windows Link Following Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Apr 13, 2026

  221. Rank 231

    TrueConf ClientCVE-2026-3502

    TrueConf Client Download of Code Without Integrity Check Vulnerability

    CVSS severity 7.8high

    Added Apr 2, 2026

  222. Rank 232

    Apple iOS / iPadOS / macOSCVE-2025-43510

    Apple Multiple Products Improper Locking Vulnerability

    CVSS severity 7.8high

    Added Mar 20, 2026

  223. Rank 233

    Apple Safari / WebKitCVE-2021-30952

    Apple Multiple Products Integer Overflow or Wraparound Vulnerability

    CVE from 2021, added in 2026

    CVSS severity 7.8high

    Added Mar 5, 2026

  224. Rank 234

    Apple iOS / iPadOSCVE-2023-41974

    Apple iOS and iPadOS Use-After-Free Vulnerability

    CVE from 2023, added in 2026

    CVSS severity 7.8high

    Added Mar 5, 2026

  225. Rank 235

    Qualcomm Snapdragon (chipsets and drivers)CVE-2026-21385

    Qualcomm Multiple Chipsets Memory Corruption Vulnerability

    CVSS severity 7.8high

    Added Mar 3, 2026

  226. Rank 236

    Cisco Catalyst SD-WANCVE-2022-20775

    Cisco SD-WAN Path Traversal Vulnerability

    CVE from 2022, added in 2026

    CVSS severity 7.8high

    Added Feb 25, 2026

  227. Rank 237

    Apple iOS / iPadOS / macOSCVE-2026-20700

    Apple Multiple Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added Feb 12, 2026

  228. Rank 238

    Microsoft OfficeCVE-2026-21514

    Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

    CVSS severity 7.8high

    Added Feb 10, 2026

  229. Rank 239

    Microsoft WindowsCVE-2026-21519

    Microsoft Windows Type Confusion Vulnerability

    CVSS severity 7.8high

    Added Feb 10, 2026

  230. Rank 240

    Microsoft WindowsCVE-2026-21533

    Microsoft Windows Improper Privilege Management Vulnerability

    CVSS severity 7.8high

    Added Feb 10, 2026

  231. Rank 241

    Linux KernelCVE-2018-14634

    Linux Kernel Integer Overflow Vulnerability

    CVE from 2018, added in 2026

    CVSS severity 7.8high

    Added Jan 26, 2026

  232. Rank 242

    Microsoft OfficeCVE-2026-21509

    Microsoft Office Security Feature Bypass Vulnerability

    CVSS severity 7.8high

    Added Jan 26, 2026

  233. Rank 243

    RARLAB WinRARCVE-2025-6218

    RARLAB WinRAR Path Traversal Vulnerability

    CVSS severity 7.8high

    Added Dec 9, 2025

  234. Rank 244

    Microsoft WindowsCVE-2025-62221

    Microsoft Windows Use After Free Vulnerability

    CVSS severity 7.8high

    Added Dec 9, 2025

  235. Rank 245

    Google AndroidCVE-2025-48572

    Android Framework Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Dec 2, 2025

  236. Rank 246

    VMware (Broadcom) VMware ToolsCVE-2025-41244

    Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

    CVSS severity 7.8high

    Added Oct 30, 2025

  237. Rank 247

    Microsoft WindowsCVE-2025-24990

    Microsoft Windows Untrusted Pointer Dereference Vulnerability

    CVSS severity 7.8high

    Added Oct 14, 2025

  238. Rank 248

    Microsoft WindowsCVE-2025-59230

    Microsoft Windows Improper Access Control Vulnerability

    CVSS severity 7.8high

    Added Oct 14, 2025

  239. Rank 249

    Linux KernelCVE-2021-22555

    Linux Kernel Heap Out-of-Bounds Write Vulnerability

    CVE from 2021, added in 2025

    CVSS severity 7.8high

    Added Oct 6, 2025

  240. Rank 250

    Microsoft WindowsCVE-2021-43226

    Microsoft Windows Privilege Escalation Vulnerability

    RansomwareCVE from 2021, added in 2025

    CVSS severity 7.8high

    Added Oct 6, 2025

  241. Rank 251

    Apache TomcatCVE-2026-34486

    Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

    CVSS severity 7.5high

    Added Aug 4, 2026

  242. Rank 252

    KNX Association Protocole KNXCVE-2023-4346

    KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability

    CVE from 2023, added in 2026

    CVSS severity 7.5high

    Added Jul 15, 2026

  243. Rank 253

    SolarWinds Serv-UCVE-2026-28318

    SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

    CVSS severity 7.5high

    Added Jun 5, 2026

  244. Rank 254

    Oracle WebLogic ServerCVE-2024-21182

    Oracle WebLogic Server Unspecified Vulnerability

    CVE from 2024, added in 2026

    CVSS severity 7.5high

    Added Jun 1, 2026

  245. Rank 255

    Microsoft DefenderCVE-2026-45498

    Microsoft Defender Denial of Service Vulnerability

    CVSS severity 7.5high

    Added May 20, 2026

  246. Rank 256

    PaperCut NG / MFCVE-2023-27351

    PaperCut NG/MF Improper Authentication Vulnerability

    RansomwareCVE from 2023, added in 2026

    CVSS severity 7.5high

    Added Apr 20, 2026

  247. Rank 257

    Cisco Catalyst SD-WANCVE-2026-20128

    Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

    CVSS severity 7.5high

    Added Apr 20, 2026

  248. Rank 258

    Cisco Catalyst SD-WANCVE-2026-20133

    Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

    CVSS severity 7.5high

    Added Apr 20, 2026

  249. Rank 259

    Omnissa (ex-VMware EUC) Workspace ONE UEM (AirWatch)CVE-2021-22054

    Omnissa Workspace ONE Server-Side Request Forgery

    CVE from 2021, added in 2026

    CVSS severity 7.5high

    Added Mar 9, 2026

  250. Rank 260

    Ivanti Endpoint Manager (EPM)CVE-2026-1603

    Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

    CVSS severity 7.5high

    Added Mar 9, 2026

  251. Rank 261

    Notepad++CVE-2025-15556

    Notepad++ Download of Code Without Integrity Check Vulnerability

    CVSS severity 7.5high

    Added Feb 12, 2026

  252. Rank 262

    GitLab Community / Enterprise Edition (CE/EE)CVE-2021-39935

    GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

    CVE from 2021, added in 2026

    CVSS severity 7.5high

    Added Feb 3, 2026

  253. Rank 263

    ViteCVE-2025-31125

    Vite Vitejs Improper Access Control Vulnerability

    CVSS severity 7.5high

    Added Jan 22, 2026

  254. Rank 264

    Versa Networks ConcertoCVE-2025-34026

    Versa Concerto Improper Authentication Vulnerability

    CVSS severity 7.5high

    Added Jan 22, 2026

  255. Rank 265

    Prettier eslint-config-prettierCVE-2025-54313

    Prettier eslint-config-prettier Embedded Malicious Code Vulnerability

    CVSS severity 7.5high

    Added Jan 22, 2026

  256. Rank 266

    MongoDB ServerCVE-2025-14847

    MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

    CVSS severity 7.5high

    Added Dec 29, 2025

  257. Rank 267

    Gladinet CentreStack / TriofoxCVE-2025-11371

    Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

    CVSS severity 7.5high

    Added Nov 4, 2025

  258. Rank 268

    Oracle E-Business SuiteCVE-2025-61884

    Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

    Ransomware

    CVSS severity 7.5high

    Added Oct 20, 2025

  259. Rank 269

    Grafana Labs GrafanaCVE-2021-43798

    Grafana Path Traversal Vulnerability

    CVE from 2021, added in 2025

    CVSS severity 7.5high

    Added Oct 9, 2025

  260. Rank 270

    Red Hat libuserCVE-2015-3246

    Red Hat Libuser Race Condition Vulnerability

    CVE from 2015, added in 2026

    CVSS severity 7.4high

    Added Aug 26, 2026

  261. Rank 271

    N-able N-centralCVE-2026-18556

    N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 7.4high

    Added Aug 4, 2026

  262. Rank 272

    JetBrains TeamCityCVE-2024-27199

    JetBrains TeamCity Relative Path Traversal Vulnerability

    RansomwareCVE from 2024, added in 2026

    CVSS severity 7.3high

    Added Apr 20, 2026

  263. Rank 273

    SonicWall SMA 1000CVE-2026-15410

    SonicWall SMA1000 Appliances Code Injection Vulnerability

    Hunt for compromise (CISA)Ransomware

    CVSS severity 7.2high

    Added Jul 14, 2026

  264. Rank 274

    Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron)CVE-2026-6973

    Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

    CVSS severity 7.2high

    Added May 7, 2026

  265. Rank 275

    SimpleHelpCVE-2024-57728

    SimpleHelp Path Traversal Vulnerability

    RansomwareCVE from 2024, added in 2026

    CVSS severity 7.2high

    Added Apr 24, 2026

  266. Rank 276

    D-Link Routers (DIR, DWR, DSR)CVE-2025-29635

    D-Link DIR-823X Command Injection Vulnerability

    CVSS severity 7.2high

    Added Apr 24, 2026

  267. Rank 277

    Kentico XperienceCVE-2025-2749

    Kentico Xperience Path Traversal Vulnerability

    CVSS severity 7.2high

    Added Apr 20, 2026

  268. Rank 278

    TeamT5 ThreatSonar Anti-RansomwareCVE-2024-7694

    TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability

    CVE from 2024, added in 2026

    CVSS severity 7.2high

    Added Feb 17, 2026

  269. Rank 279

    Sangoma FreePBXCVE-2025-64328

    Sangoma FreePBX OS Command Injection Vulnerability

    CVSS severity 7.2high

    Added Feb 3, 2026

  270. Rank 280

    Fortinet FortiWebCVE-2025-58034

    Fortinet FortiWeb OS Command Injection Vulnerability

    CVSS severity 7.2high

    Added Nov 18, 2025

  271. Rank 281

    Microsoft WindowsCVE-2026-68820

    Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

    CVSS severity 7.0high

    Added Aug 11, 2026

  272. Rank 282

    Microsoft WindowsCVE-2025-62215

    Microsoft Windows Race Condition Vulnerability

    CVSS severity 7.0high

    Added Nov 12, 2025

  273. Rank 283

    Trend Micro Apex One (ex-OfficeScan)CVE-2026-34926

    Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

    CVSS severity 6.7medium

    Added May 21, 2026

  274. Rank 284

    SonicWall SMA 1000CVE-2025-40602

    SonicWall SMA1000 Missing Authorization Vulnerability

    CVSS severity 6.6medium

    Added Dec 17, 2025

  275. Rank 285

    StarletteCVE-2026-48710

    Kludex Starlette HTTP Request/Response Smuggling Vulnerability

    CVSS severity 6.5medium

    Added Sep 2, 2026

  276. Rank 286

    Cisco Catalyst SD-WANCVE-2026-20262

    Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

    CVSS severity 6.5medium

    Added Jun 15, 2026

  277. Rank 287

    Microsoft SharePoint ServerCVE-2026-32201

    Microsoft SharePoint Server Improper Input Validation Vulnerability

    CVSS severity 6.5medium

    Added Apr 14, 2026

  278. Rank 288

    Microsoft WindowsCVE-2026-21525

    Microsoft Windows NULL Pointer Dereference Vulnerability

    CVSS severity 6.2medium

    Added Feb 10, 2026

  279. Rank 289

    Microsoft Exchange ServerCVE-2026-42897

    Microsoft Exchange Server Cross-Site Scripting Vulnerability

    CVSS severity 6.1medium

    Added May 15, 2026

  280. Rank 290

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2025-48700

    Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

    CVSS severity 6.1medium

    Added Apr 20, 2026

  281. Rank 291

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2025-66376

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

    CVSS severity 6.1medium

    Added Mar 18, 2026

  282. Rank 292

    Roundcube WebmailCVE-2025-68461

    RoundCube Webmail Cross-site Scripting Vulnerability

    CVSS severity 6.1medium

    Added Feb 20, 2026

  283. Rank 293

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2025-68686

    Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

    CVSS severity 5.9medium

    Added Jul 27, 2026

  284. Rank 294

    WordPress CoreCVE-2026-60137

    WordPress Core SQL Injection Vulnerability

    CVSS severity 5.9medium

    Added Jul 21, 2026

  285. Rank 295

    Arista EOSCVE-2026-7473

    Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability

    CVSS severity 5.8medium

    Added Jun 9, 2026

  286. Rank 296

    Apple iOS / iPadOS / macOSCVE-2025-43520

    Apple Multiple Products Classic Buffer Overflow Vulnerability

    CVSS severity 5.5medium

    Added Mar 20, 2026

  287. Rank 297

    Microsoft WindowsCVE-2026-20805

    Microsoft Windows Information Disclosure Vulnerability

    CVSS severity 5.5medium

    Added Jan 13, 2026

  288. Rank 298

    Google AndroidCVE-2025-48633

    Android Framework Information Disclosure Vulnerability

    CVSS severity 5.5medium

    Added Dec 2, 2025

  289. Rank 299

    Cisco Catalyst SD-WANCVE-2026-20122

    Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

    CVSS severity 5.4medium

    Added Apr 20, 2026

  290. Rank 300

    OpenPLC ScadaBRCVE-2021-26829

    OpenPLC ScadaBR Cross-site Scripting Vulnerability

    CVE from 2021, added in 2025

    CVSS severity 5.4medium

    Added Nov 28, 2025

  291. Rank 301

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2025-27915

    Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

    CVSS severity 5.4medium

    Added Oct 7, 2025

  292. Rank 302

    JFrog ArtifactoryCVE-2026-66384

    JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

    CVSS severity 5.3medium

    Added Aug 27, 2026

  293. Rank 303

    Cisco Secure Firewall Management Center (FMC)CVE-2026-20316

    Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

    Ransomware

    CVSS severity 5.3medium

    Added Jul 29, 2026

  294. Rank 304

    IGEL OSCVE-2025-47827

    IGEL OS Use of a Key Past its Expiration Date Vulnerability

    CVSS severity 4.6medium

    Added Oct 14, 2025

  295. Rank 305

    Microsoft WindowsCVE-2026-32202

    Microsoft Windows Protection Mechanism Failure Vulnerability

    CVSS severity 4.3medium

    Added Apr 28, 2026

  296. Rank 306

    Wing FTP ServerCVE-2025-47813

    Wing FTP Server Information Disclosure Vulnerability

    CVSS severity 4.3medium

    Added Mar 16, 2026

  297. Rank 307

    Apple iOS / iPadOS / macOSCVE-2025-43300

    Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

    CVSS severity 10.0critical

    Added Aug 21, 2025

  298. Rank 308

    Cisco Identity Services Engine (ISE)CVE-2025-20281

    Cisco Identity Services Engine Injection Vulnerability

    CVSS severity 10.0critical

    Added Jul 28, 2025

  299. Rank 309

    Cisco Identity Services Engine (ISE)CVE-2025-20337

    Cisco Identity Services Engine Injection Vulnerability

    CVSS severity 10.0critical

    Added Jul 28, 2025

  300. Rank 310

    Wing FTP ServerCVE-2025-47812

    Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

    CVSS severity 10.0critical

    Added Jul 14, 2025

  301. Rank 311

    Erlang/OTPCVE-2025-32433

    Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

    CVSS severity 10.0critical

    Added Jun 9, 2025

  302. Rank 312

    Commvault Command CenterCVE-2025-34028

    Commvault Command Center Path Traversal Vulnerability

    CVSS severity 10.0critical

    Added May 2, 2025

  303. Rank 313

    Apple Safari / WebKitCVE-2025-24201

    Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

    CVSS severity 10.0critical

    Added Mar 13, 2025

  304. Rank 314

    Apple iOS / iPadOS / macOSCVE-2025-24085

    Apple Multiple Products Use-After-Free Vulnerability

    CVSS severity 10.0critical

    Added Jan 29, 2025

  305. Rank 315

    OSGeo GeoServerCVE-2022-24816

    OSGeo GeoServer JAI-EXT Code Injection Vulnerability

    CVE from 2022, added in 2024

    CVSS severity 10.0critical

    Added Jun 26, 2024

  306. Rank 316

    CrushFTPCVE-2024-4040

    CrushFTP VFS Sandbox Escape Vulnerability

    CVSS severity 10.0critical

    Added Apr 24, 2024

  307. Rank 317

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2024-3400

    Palo Alto Networks PAN-OS Command Injection Vulnerability

    Ransomware

    CVSS severity 10.0critical

    Added Apr 12, 2024

  308. Rank 318

    ConnectWise ScreenConnectCVE-2024-1709

    ConnectWise ScreenConnect Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 10.0critical

    Added Feb 22, 2024

  309. Rank 319

    Cisco IOS / IOS XECVE-2023-20198

    Cisco IOS XE Web UI Privilege Escalation Vulnerability

    CVSS severity 10.0critical

    Added Oct 16, 2023

  310. Rank 320

    SAP NetWeaverCVE-2022-22536

    SAP Multiple Products HTTP Request Smuggling Vulnerability

    CVSS severity 10.0critical

    Added Aug 18, 2022

  311. Rank 321

    Mozilla FirefoxCVE-2019-11708

    Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 10.0critical

    Added May 23, 2022

  312. Rank 322

    Spring Cloud GatewayCVE-2022-22947

    VMware Spring Cloud Gateway Code Injection Vulnerability

    CVSS severity 10.0critical

    Added May 16, 2022

  313. Rank 323

    Redis ServerCVE-2022-0543

    Debian-specific Redis Server Lua Sandbox Escape Vulnerability

    CVSS severity 10.0critical

    Added Mar 28, 2022

  314. Rank 324

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2020-2021

    Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

    RansomwareCVE from 2020, added in 2022

    CVSS severity 10.0critical

    Added Mar 25, 2022

  315. Rank 325

    Microsoft WindowsCVE-2020-0796

    Microsoft SMBv3 Remote Code Execution Vulnerability

    RansomwareCVE from 2020, added in 2022

    CVSS severity 10.0critical

    Added Feb 10, 2022

  316. Rank 326

    Elastic KibanaCVE-2019-7609

    Kibana Arbitrary Code Execution

    CVE from 2019, added in 2022

    CVSS severity 10.0critical

    Added Jan 10, 2022

  317. Rank 327

    Apache Log4jCVE-2021-44228

    Apache Log4j2 Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 10.0critical

    Added Dec 10, 2021

  318. Rank 328

    SAP NetWeaverCVE-2010-5326

    SAP NetWeaver Remote Code Execution Vulnerability

    CVE from 2010, added in 2021

    CVSS severity 10.0critical

    Added Nov 3, 2021

  319. Rank 329

    Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2019-11510

    Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 10.0critical

    Added Nov 3, 2021

  320. Rank 330

    Microsoft WindowsCVE-2020-1350

    Microsoft Windows DNS Server Remote Code Execution Vulnerability

    CVSS severity 10.0critical

    Added Nov 3, 2021

  321. Rank 331

    Microsoft Active DirectoryCVE-2020-1472

    Microsoft Netlogon Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 10.0critical

    Added Nov 3, 2021

  322. Rank 332

    Oracle SolarisCVE-2020-14871

    Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability

    CVSS severity 10.0critical

    Added Nov 3, 2021

  323. Rank 333

    SAP NetWeaverCVE-2020-6287

    SAP NetWeaver Missing Authentication for Critical Function Vulnerability

    CVSS severity 10.0critical

    Added Nov 3, 2021

  324. Rank 334

    GitLab Community / Enterprise Edition (CE/EE)CVE-2021-22205

    GitLab Community and Enterprise Editions Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 10.0critical

    Added Nov 3, 2021

  325. Rank 335

    Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2021-22893

    Ivanti Pulse Connect Secure Use-After-Free Vulnerability

    Ransomware

    CVSS severity 10.0critical

    Added Nov 3, 2021

  326. Rank 336

    SolarWinds Serv-UCVE-2021-35211

    SolarWinds Serv-U Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 10.0critical

    Added Nov 3, 2021

  327. Rank 337

    Cisco ASA / Firepower (FTD)CVE-2025-20333

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

    CVSS severity 9.9critical

    Added Sep 25, 2025

  328. Rank 338

    Wazuh ServerCVE-2025-24016

    Wazuh Server Deserialization of Untrusted Data Vulnerability

    CVSS severity 9.9critical

    Added Jun 10, 2025

  329. Rank 339

    Qlik SenseCVE-2023-48365

    Qlik Sense HTTP Tunneling Vulnerability

    RansomwareCVE from 2023, added in 2025

    CVSS severity 9.9critical

    Added Jan 13, 2025

  330. Rank 340

    Qlik SenseCVE-2023-41265

    Qlik Sense HTTP Tunneling Vulnerability

    Ransomware

    CVSS severity 9.9critical

    Added Dec 7, 2023

  331. Rank 341

    Jenkins PluginsCVE-2019-1003029

    Jenkins Script Security Plugin Sandbox Bypass Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 9.9critical

    Added Apr 25, 2022

  332. Rank 342

    Jenkins PluginsCVE-2019-1003030

    Jenkins Matrix Project Plugin Remote Code Execution Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 9.9critical

    Added Mar 25, 2022

  333. Rank 343

    MongoDB mongo-expressCVE-2019-10758

    MongoDB mongo-express Remote Code Execution Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 9.9critical

    Added Dec 10, 2021

  334. Rank 344

    Juniper ScreenOS (NetScreen)CVE-2015-7755

    Juniper ScreenOS Improper Authentication Vulnerability

    CVE from 2015, added in 2025

    CVSS severity 9.8critical

    Added Oct 2, 2025

  335. Rank 345

    Jenkins CoreCVE-2017-1000353

    Jenkins Remote Code Execution Vulnerability

    CVE from 2017, added in 2025

    CVSS severity 9.8critical

    Added Oct 2, 2025

  336. Rank 346

    Samsung Mobile Devices (Galaxy)CVE-2025-21043

    Samsung Mobile Devices Out-of-Bounds Write Vulnerability

    CVSS severity 9.8critical

    Added Oct 2, 2025

  337. Rank 347

    Fortra GoAnywhere MFTCVE-2025-10035

    Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Sep 29, 2025

  338. Rank 348

    Google Chrome / ChromiumCVE-2025-10585

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 9.8critical

    Added Sep 23, 2025

  339. Rank 349

    Sangoma FreePBXCVE-2025-57819

    Sangoma FreePBX Authentication Bypass Vulnerability

    CVSS severity 9.8critical

    Added Aug 29, 2025

  340. Rank 350

    Citrix NetScaler ADC / GatewayCVE-2025-7775

    Citrix NetScaler Memory Overflow Vulnerability

    CVSS severity 9.8critical

    Added Aug 26, 2025

  341. Rank 351

    Trend Micro Apex One (ex-OfficeScan)CVE-2025-54948

    Trend Micro Apex One OS Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Aug 18, 2025

  342. Rank 352

    SysAid On-PremCVE-2025-2776

    SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

    CVSS severity 9.8critical

    Added Jul 22, 2025

  343. Rank 353

    CrushFTPCVE-2025-54309

    CrushFTP Unprotected Alternate Channel Vulnerability

    CVSS severity 9.8critical

    Added Jul 22, 2025

  344. Rank 354

    Microsoft SharePoint ServerCVE-2025-53770

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jul 20, 2025

  345. Rank 355

    Fortinet FortiWebCVE-2025-25257

    Fortinet FortiWeb SQL Injection Vulnerability

    CVSS severity 9.8critical

    Added Jul 18, 2025

  346. Rank 356

    MRLG (Multi-Router Looking Glass) Multi-Router Looking Glass (MRLG)CVE-2014-3931

    Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability

    CVE from 2014, added in 2025

    CVSS severity 9.8critical

    Added Jul 7, 2025

  347. Rank 357

    PHPMailerCVE-2016-10033

    PHPMailer Command Injection Vulnerability

    CVE from 2016, added in 2025

    CVSS severity 9.8critical

    Added Jul 7, 2025

  348. Rank 358

    Citrix NetScaler ADC / GatewayCVE-2025-6543

    Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability

    CVSS severity 9.8critical

    Added Jun 30, 2025

  349. Rank 359

    D-Link Routers (DIR, DWR, DSR)CVE-2024-0769

    D-Link DIR-859 Router Path Traversal Vulnerability

    CVSS severity 9.8critical

    Added Jun 25, 2025

  350. Rank 360

    AMI MegaRAC SPxCVE-2024-54085

    AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

    CVSS severity 9.8critical

    Added Jun 25, 2025

  351. Rank 361

    ASUS Routers (RT, GT, ZenWiFi)CVE-2021-32030

    ASUS Routers Improper Authentication Vulnerability

    CVE from 2021, added in 2025

    CVSS severity 9.8critical

    Added Jun 2, 2025

  352. Rank 362

    Craft CMSCVE-2024-56145

    Craft CMS Code Injection Vulnerability

    CVSS severity 9.8critical

    Added Jun 2, 2025

  353. Rank 363

    Samsung MagicINFO ServerCVE-2025-4632

    Samsung MagicINFO 9 Server Path Traversal Vulnerability

    CVSS severity 9.8critical

    Added May 22, 2025

  354. Rank 364

    DrayTek Vigor (routers)CVE-2024-12987

    DrayTek Vigor Routers OS Command Injection Vulnerability

    CVSS severity 9.8critical

    Added May 15, 2025

  355. Rank 365

    Fortinet FortiVoice / FortiFoneCVE-2025-32756

    Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

    CVSS severity 9.8critical

    Added May 14, 2025

  356. Rank 366

    GeoVision Cameras and video serversCVE-2024-11120

    GeoVision Devices OS Command Injection Vulnerability

    CVSS severity 9.8critical

    Added May 7, 2025

  357. Rank 367

    GeoVision Cameras and video serversCVE-2024-6047

    GeoVision Devices OS Command Injection Vulnerability

    CVSS severity 9.8critical

    Added May 7, 2025

  358. Rank 368

    LangflowCVE-2025-3248

    Langflow Missing Authentication Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added May 5, 2025

  359. Rank 369

    Yii Framework YiiCVE-2024-58136

    Yiiframework Yii Improper Protection of Alternate Path Vulnerability

    CVSS severity 9.8critical

    Added May 2, 2025

  360. Rank 370

    SAP NetWeaverCVE-2025-31324

    SAP NetWeaver Unrestricted File Upload Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Apr 29, 2025

  361. Rank 371

    Qualitia Active! MailCVE-2025-42599

    Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

    CVSS severity 9.8critical

    Added Apr 28, 2025

  362. Rank 372

    Apple iOS / iPadOS / macOSCVE-2025-31200

    Apple Multiple Products Memory Corruption Vulnerability

    CVSS severity 9.8critical

    Added Apr 17, 2025

  363. Rank 373

    Apple iOS / iPadOS / macOSCVE-2025-31201

    Apple Multiple Products Arbitrary Read and Write Vulnerability

    CVSS severity 9.8critical

    Added Apr 17, 2025

  364. Rank 374

    Gladinet CentreStack / TriofoxCVE-2025-30406

    Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability

    CVSS severity 9.8critical

    Added Apr 8, 2025

  365. Rank 375

    CrushFTPCVE-2025-31161

    CrushFTP Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Apr 7, 2025

  366. Rank 376

    Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2025-22457

    Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Apr 4, 2025

  367. Rank 377

    Apache TomcatCVE-2025-24813

    Apache Tomcat Path Equivalence Vulnerability

    CVSS severity 9.8critical

    Added Apr 1, 2025

  368. Rank 378

    Cisco Smart Licensing UtilityCVE-2024-20439

    Cisco Smart Licensing Utility Static Credential Vulnerability

    CVSS severity 9.8critical

    Added Mar 31, 2025

  369. Rank 379

    Sitecore Experience Platform / Manager (XP / XM)CVE-2019-9874

    Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

    CVE from 2019, added in 2025

    CVSS severity 9.8critical

    Added Mar 26, 2025

  370. Rank 380

    Edimax IC-7100 IP CameraCVE-2025-1316

    Edimax IC-7100 IP Camera OS Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Mar 19, 2025

  371. Rank 381

    Hitachi Vantara Pentaho Business Analytics (BA) ServerCVE-2022-43939

    Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

    CVE from 2022, added in 2025

    CVSS severity 9.8critical

    Added Mar 3, 2025

  372. Rank 382

    Progress WhatsUp GoldCVE-2024-4885

    Progress WhatsUp Gold Path Traversal Vulnerability

    CVSS severity 9.8critical

    Added Mar 3, 2025

  373. Rank 383

    Microsoft Partner CenterCVE-2024-49035

    Microsoft Partner Center Improper Access Control Vulnerability

    CVSS severity 9.8critical

    Added Feb 25, 2025

  374. Rank 384

    Adobe ColdFusionCVE-2017-3066

    Adobe ColdFusion Deserialization Vulnerability

    CVE from 2017, added in 2025

    CVSS severity 9.8critical

    Added Feb 24, 2025

  375. Rank 385

    Microsoft Power PagesCVE-2025-24989

    Microsoft Power Pages Improper Access Control Vulnerability

    CVSS severity 9.8critical

    Added Feb 21, 2025

  376. Rank 386

    SonicWall SonicOSCVE-2024-53704

    SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Feb 18, 2025

  377. Rank 387

    Sophos Firewall (SFOS, ex-XG)CVE-2020-15069

    Sophos XG Firewall Buffer Overflow Vulnerability

    CVE from 2020, added in 2025

    CVSS severity 9.8critical

    Added Feb 6, 2025

  378. Rank 388

    Microsoft OutlookCVE-2024-21413

    Microsoft Outlook Improper Input Validation Vulnerability

    CVSS severity 9.8critical

    Added Feb 6, 2025

  379. Rank 389

    Paessler PRTG Network MonitorCVE-2018-19410

    Paessler PRTG Network Monitor Local File Inclusion Vulnerability

    CVE from 2018, added in 2025

    CVSS severity 9.8critical

    Added Feb 4, 2025

  380. Rank 390

    SonicWall SMA 1000CVE-2025-23006

    SonicWall SMA1000 Appliances Deserialization Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jan 24, 2025

  381. Rank 391

    Aviatrix ControllerCVE-2024-50603

    Aviatrix Controllers OS Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Jan 16, 2025

  382. Rank 392

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2024-55591

    Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jan 14, 2025

  383. Rank 393

    Oracle WebLogic ServerCVE-2020-2883

    Oracle WebLogic Server Unspecified Vulnerability

    CVE from 2020, added in 2025

    CVSS severity 9.8critical

    Added Jan 7, 2025

  384. Rank 394

    BeyondTrust Remote Support / Privileged Remote Access (RS / PRA)CVE-2024-12356

    BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Dec 19, 2024

  385. Rank 395

    Cleo Harmony / VLTrader / LexiComCVE-2024-55956

    Cleo Multiple Products Unauthenticated File Upload Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Dec 17, 2024

  386. Rank 396

    Cleo Harmony / VLTrader / LexiComCVE-2024-50623

    Cleo Multiple Products Unrestricted File Upload Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Dec 13, 2024

  387. Rank 397

    CyberPanel (CyberPersons) CyberPanelCVE-2024-51378

    CyberPanel Incorrect Default Permissions Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Dec 4, 2024

  388. Rank 398

    Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG)CVE-2024-11667

    Zyxel Multiple Firewalls Path Traversal Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Dec 3, 2024

  389. Rank 399

    ProjectSendCVE-2024-11680

    ProjectSend Improper Authentication Vulnerability

    CVSS severity 9.8critical

    Added Dec 3, 2024

  390. Rank 400

    Array Networks ArrayOS AG / vxAGCVE-2023-28461

    Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 25, 2024

  391. Rank 401

    VMware (Broadcom) vCenter ServerCVE-2024-38812

    VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

    CVSS severity 9.8critical

    Added Nov 20, 2024

  392. Rank 402

    VMware (Broadcom) vCenter ServerCVE-2024-38813

    VMware vCenter Server Privilege Escalation Vulnerability

    CVSS severity 9.8critical

    Added Nov 20, 2024

  393. Rank 403

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2024-0012

    Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 18, 2024

  394. Rank 404

    Progress Kemp LoadMasterCVE-2024-1212

    Progress Kemp LoadMaster OS Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Nov 18, 2024

  395. Rank 405

    Nostromo nhttpdCVE-2019-16278

    Nostromo nhttpd Directory Traversal Vulnerability

    CVE from 2019, added in 2024

    CVSS severity 9.8critical

    Added Nov 7, 2024

  396. Rank 406

    CyberPanel (CyberPersons) CyberPanelCVE-2024-51567

    CyberPanel Incorrect Default Permissions Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 7, 2024

  397. Rank 407

    Palo Alto Networks ExpeditionCVE-2024-5910

    Palo Alto Networks Expedition Missing Authentication Vulnerability

    CVSS severity 9.8critical

    Added Nov 7, 2024

  398. Rank 408

    Fortinet FortiManager / FortiAnalyzerCVE-2024-47575

    Fortinet FortiManager Missing Authentication Vulnerability

    CVSS severity 9.8critical

    Added Oct 23, 2024

  399. Rank 409

    ScienceLogic SL1CVE-2024-9537

    ScienceLogic SL1 Unspecified Vulnerability

    CVSS severity 9.8critical

    Added Oct 21, 2024

  400. Rank 410

    Veeam Backup & ReplicationCVE-2024-40711

    Veeam Backup and Replication Deserialization Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Oct 17, 2024

  401. Rank 411

    Mozilla FirefoxCVE-2024-9680

    Mozilla Firefox Use-After-Free Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Oct 15, 2024

  402. Rank 412

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2024-23113

    Fortinet Multiple Products Format String Vulnerability

    CVSS severity 9.8critical

    Added Oct 9, 2024

  403. Rank 413

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2024-45519

    Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

    CVSS severity 9.8critical

    Added Oct 3, 2024

  404. Rank 414

    SAP Commerce Cloud (Hybris)CVE-2019-0344

    SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

    CVE from 2019, added in 2024

    CVSS severity 9.8critical

    Added Sep 30, 2024

  405. Rank 415

    DrayTek Vigor (routers)CVE-2020-15415

    DrayTek Multiple Vigor Routers OS Command Injection Vulnerability

    CVE from 2020, added in 2024

    CVSS severity 9.8critical

    Added Sep 30, 2024

  406. Rank 416

    Ivanti Virtual Traffic Manager (vTM)CVE-2024-7593

    Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

    CVSS severity 9.8critical

    Added Sep 24, 2024

  407. Rank 417

    Oracle WebLogic ServerCVE-2020-14644

    Oracle WebLogic Server Remote Code Execution Vulnerability

    CVE from 2020, added in 2024

    CVSS severity 9.8critical

    Added Sep 18, 2024

  408. Rank 418

    Oracle ADF FacesCVE-2022-21445

    Oracle ADF Faces Deserialization of Untrusted Data Vulnerability

    CVE from 2022, added in 2024

    CVSS severity 9.8critical

    Added Sep 18, 2024

  409. Rank 419

    Apache HugeGraphCVE-2024-27348

    Apache HugeGraph-Server Improper Access Control Vulnerability

    CVSS severity 9.8critical

    Added Sep 18, 2024

  410. Rank 420

    Progress WhatsUp GoldCVE-2024-6670

    Progress WhatsUp Gold SQL Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Sep 16, 2024

  411. Rank 421

    SonicWall SonicOSCVE-2024-40766

    SonicWall SonicOS Improper Access Control Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Sep 9, 2024

  412. Rank 422

    Apache OFBizCVE-2024-38856

    Apache OFBiz Incorrect Authorization Vulnerability

    CVSS severity 9.8critical

    Added Aug 27, 2024

  413. Rank 423

    Dahua IP Camera FirmwareCVE-2021-33044

    Dahua IP Camera Authentication Bypass Vulnerability

    CVE from 2021, added in 2024

    CVSS severity 9.8critical

    Added Aug 21, 2024

  414. Rank 424

    Dahua IP Camera FirmwareCVE-2021-33045

    Dahua IP Camera Authentication Bypass Vulnerability

    CVE from 2021, added in 2024

    CVSS severity 9.8critical

    Added Aug 21, 2024

  415. Rank 425

    Jenkins CoreCVE-2024-23897

    Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Aug 19, 2024

  416. Rank 426

    SolarWinds Web Help DeskCVE-2024-28986

    SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

    CVSS severity 9.8critical

    Added Aug 15, 2024

  417. Rank 427

    Apache OFBizCVE-2024-32113

    Apache OFBiz Path Traversal Vulnerability

    CVSS severity 9.8critical

    Added Aug 7, 2024

  418. Rank 428

    Acronis Cyber Infrastructure (ACI)CVE-2023-45249

    Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability

    CVSS severity 9.8critical

    Added Jul 29, 2024

  419. Rank 429

    ServiceNow Now PlatformCVE-2024-4879

    ServiceNow Improper Input Validation Vulnerability

    CVSS severity 9.8critical

    Added Jul 29, 2024

  420. Rank 430

    ServiceNow Now PlatformCVE-2024-5217

    ServiceNow Incomplete List of Disallowed Inputs Vulnerability

    CVSS severity 9.8critical

    Added Jul 29, 2024

  421. Rank 431

    Adobe Commerce (Magento)CVE-2024-34102

    Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability

    CVSS severity 9.8critical

    Added Jul 17, 2024

  422. Rank 432

    OSGeo GeoServerCVE-2024-36401

    OSGeo GeoServer GeoTools Eval Injection Vulnerability

    CVSS severity 9.8critical

    Added Jul 15, 2024

  423. Rank 433

    Rejetto HTTP File Server (HFS)CVE-2024-23692

    Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jul 9, 2024

  424. Rank 434

    Progress Telerik Report ServerCVE-2024-4358

    Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability

    CVSS severity 9.8critical

    Added Jun 13, 2024

  425. Rank 435

    PHPCVE-2024-4577

    PHP-CGI OS Command Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jun 12, 2024

  426. Rank 436

    NextGen Healthcare Mirth ConnectCVE-2023-43208

    NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added May 20, 2024

  427. Rank 437

    GitLab Community / Enterprise Edition (CE/EE)CVE-2023-7028

    GitLab Community and Enterprise Editions Improper Access Control Vulnerability

    CVSS severity 9.8critical

    Added May 1, 2024

  428. Rank 438

    Nice (Linear) Linear eMerge E3-SeriesCVE-2019-7256

    Nice Linear eMerge E3-Series OS Command Injection Vulnerability

    CVE from 2019, added in 2024

    CVSS severity 9.8critical

    Added Mar 25, 2024

  429. Rank 439

    Ivanti Cloud Services Appliance (CSA)CVE-2021-44529

    Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

    RansomwareCVE from 2021, added in 2024

    CVSS severity 9.8critical

    Added Mar 25, 2024

  430. Rank 440

    Fortinet FortiClient EMSCVE-2023-48788

    Fortinet FortiClient EMS SQL Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Mar 25, 2024

  431. Rank 441

    JetBrains TeamCityCVE-2024-27198

    JetBrains TeamCity Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Mar 7, 2024

  432. Rank 442

    Sunhillo SureLineCVE-2021-36380

    Sunhillo SureLine OS Command Injection Vulnerablity

    CVE from 2021, added in 2024

    CVSS severity 9.8critical

    Added Mar 5, 2024

  433. Rank 443

    Microsoft Exchange ServerCVE-2024-21410

    Microsoft Exchange Server Privilege Escalation Vulnerability

    CVSS severity 9.8critical

    Added Feb 15, 2024

  434. Rank 444

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2024-21762

    Fortinet FortiOS Out-of-Bound Write Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Feb 9, 2024

  435. Rank 445

    Atlassian Confluence Server / Data CenterCVE-2023-22527

    Atlassian Confluence Data Center and Server Template Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jan 24, 2024

  436. Rank 446

    VMware (Broadcom) vCenter ServerCVE-2023-34048

    VMware vCenter Server Out-of-Bounds Write Vulnerability

    CVSS severity 9.8critical

    Added Jan 22, 2024

  437. Rank 447

    Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron)CVE-2023-35082

    Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jan 18, 2024

  438. Rank 448

    Microsoft SharePoint ServerCVE-2023-29357

    Microsoft SharePoint Server Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jan 10, 2024

  439. Rank 449

    D-Link DSL modem-routersCVE-2016-20017

    D-Link DSL-2750B Devices Command Injection Vulnerability

    CVE from 2016, added in 2024

    CVSS severity 9.8critical

    Added Jan 8, 2024

  440. Rank 450

    Apache SupersetCVE-2023-27524

    Apache Superset Insecure Default Initialization of Resource Vulnerability

    CVSS severity 9.8critical

    Added Jan 8, 2024

  441. Rank 451

    Adobe ColdFusionCVE-2023-29300

    Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jan 8, 2024

  442. Rank 452

    Adobe ColdFusionCVE-2023-38203

    Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jan 8, 2024

  443. Rank 453

    Unitronics Vision PLC and HMICVE-2023-6448

    Unitronics Vision PLC and HMI Insecure Default Password Vulnerability

    CVSS severity 9.8critical

    Added Dec 11, 2023

  444. Rank 454

    Oracle WebLogic ServerCVE-2020-2551

    Oracle Fusion Middleware Unspecified Vulnerability

    CVE from 2020, added in 2023

    CVSS severity 9.8critical

    Added Nov 16, 2023

  445. Rank 455

    Sophos Web ApplianceCVE-2023-1671

    Sophos Web Appliance Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Nov 16, 2023

  446. Rank 456

    Juniper Junos OSCVE-2023-36845

    Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

    CVSS severity 9.8critical

    Added Nov 13, 2023

  447. Rank 457

    SysAid On-PremCVE-2023-47246

    SysAid Server Path Traversal Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 13, 2023

  448. Rank 458

    Atlassian Confluence Server / Data CenterCVE-2023-22518

    Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 7, 2023

  449. Rank 459

    Apache ActiveMQCVE-2023-46604

    Apache ActiveMQ Deserialization of Untrusted Data Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 2, 2023

  450. Rank 460

    F5 BIG-IPCVE-2023-46747

    F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Oct 31, 2023

  451. Rank 461

    Atlassian Confluence Server / Data CenterCVE-2023-22515

    Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Oct 5, 2023

  452. Rank 462

    JetBrains TeamCityCVE-2023-42793

    JetBrains TeamCity Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Oct 4, 2023

  453. Rank 463

    Red Hat JBoss RichFacesCVE-2018-14667

    Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability

    CVE from 2018, added in 2023

    CVSS severity 9.8critical

    Added Sep 28, 2023

  454. Rank 464

    Realtek Router SDKs (Jungle, AP-Router)CVE-2014-8361

    Realtek SDK Improper Input Validation Vulnerability

    CVE from 2014, added in 2023

    CVSS severity 9.8critical

    Added Sep 18, 2023

  455. Rank 465

    Laravel IgnitionCVE-2021-3129

    Laravel Ignition File Upload Vulnerability

    RansomwareCVE from 2021, added in 2023

    CVSS severity 9.8critical

    Added Sep 18, 2023

  456. Rank 466

    Apache RocketMQCVE-2023-33246

    Apache RocketMQ Command Execution Vulnerability

    CVSS severity 9.8critical

    Added Sep 6, 2023

  457. Rank 467

    Ivanti SentryCVE-2023-38035

    Ivanti Sentry Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Aug 22, 2023

  458. Rank 468

    Adobe ColdFusionCVE-2023-26359

    Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

    CVSS severity 9.8critical

    Added Aug 21, 2023

  459. Rank 469

    Citrix ShareFileCVE-2023-24489

    Citrix Content Collaboration ShareFile Improper Access Control Vulnerability

    CVSS severity 9.8critical

    Added Aug 16, 2023

  460. Rank 470

    Zyxel Home gateways and routers (DSL, CPE)CVE-2017-18368

    Zyxel P660HN-T1A Routers Command Injection Vulnerability

    CVE from 2017, added in 2023

    CVSS severity 9.8critical

    Added Aug 7, 2023

  461. Rank 471

    Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron)CVE-2023-35078

    Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jul 25, 2023

  462. Rank 472

    Citrix NetScaler ADC / GatewayCVE-2023-3519

    Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jul 19, 2023

  463. Rank 473

    CONTEC (SolarView) SolarView CompactCVE-2022-29303

    SolarView Compact Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Jul 13, 2023

  464. Rank 474

    Netwrix AuditorCVE-2022-31199

    Netwrix Auditor Insecure Object Deserialization Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jul 11, 2023

  465. Rank 475

    D-Link Routers (DIR, DWR, DSR)CVE-2019-17621

    D-Link DIR-859 Router Command Execution Vulnerability

    CVE from 2019, added in 2023

    CVSS severity 9.8critical

    Added Jun 29, 2023

  466. Rank 476

    Zyxel NASCVE-2023-27992

    Zyxel Multiple NAS Devices Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Jun 23, 2023

  467. Rank 477

    Roundcube WebmailCVE-2020-12641

    Roundcube Webmail Remote Code Execution Vulnerability

    CVE from 2020, added in 2023

    CVSS severity 9.8critical

    Added Jun 22, 2023

  468. Rank 478

    Roundcube WebmailCVE-2021-44026

    Roundcube Webmail SQL Injection Vulnerability

    CVE from 2021, added in 2023

    CVSS severity 9.8critical

    Added Jun 22, 2023

  469. Rank 479

    VMware (Broadcom) Aria Operations for Networks (ex-vRealize Network Insight)CVE-2023-20887

    Vmware Aria Operations for Networks Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Jun 22, 2023

  470. Rank 480

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2023-27997

    Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jun 13, 2023

  471. Rank 481

    Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG)CVE-2023-33009

    Zyxel Multiple Firewalls Buffer Overflow Vulnerability

    CVSS severity 9.8critical

    Added Jun 5, 2023

  472. Rank 482

    Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG)CVE-2023-33010

    Zyxel Multiple Firewalls Buffer Overflow Vulnerability

    CVSS severity 9.8critical

    Added Jun 5, 2023

  473. Rank 483

    Progress MOVEit TransferCVE-2023-34362

    Progress MOVEit Transfer SQL Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jun 2, 2023

  474. Rank 484

    Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG)CVE-2023-28771

    Zyxel Multiple Firewalls OS Command Injection Vulnerability

    CVSS severity 9.8critical

    Added May 31, 2023

  475. Rank 485

    Barracuda Networks Email Security Gateway (ESG)CVE-2023-2868

    Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

    CVSS severity 9.8critical

    Added May 26, 2023

  476. Rank 486

    Oracle Java SE (JRE / JDK)CVE-2016-3427

    Oracle Java SE and JRockit Unspecified Vulnerability

    CVE from 2016, added in 2023

    CVSS severity 9.8critical

    Added May 12, 2023

  477. Rank 487

    Apache TomcatCVE-2016-8735

    Apache Tomcat Remote Code Execution Vulnerability

    CVE from 2016, added in 2023

    CVSS severity 9.8critical

    Added May 12, 2023

  478. Rank 488

    Ruckus Wireless Wi-Fi access points and controllersCVE-2023-25717

    Multiple Ruckus Wireless Products CSRF and RCE Vulnerability

    CVSS severity 9.8critical

    Added May 12, 2023

  479. Rank 489

    PaperCut NG / MFCVE-2023-27350

    PaperCut MF/NG Improper Access Control Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Apr 21, 2023

  480. Rank 490

    Novi SurveyCVE-2023-29492

    Novi Survey Insecure Deserialization Vulnerability

    CVSS severity 9.8critical

    Added Apr 13, 2023

  481. Rank 491

    Veritas Backup ExecCVE-2021-27877

    Veritas Backup Exec Agent Improper Authentication Vulnerability

    RansomwareCVE from 2021, added in 2023

    CVSS severity 9.8critical

    Added Apr 7, 2023

  482. Rank 492

    SambaCVE-2017-7494

    Samba Remote Code Execution Vulnerability

    RansomwareCVE from 2017, added in 2023

    CVSS severity 9.8critical

    Added Mar 30, 2023

  483. Rank 493

    Fortra Cobalt StrikeCVE-2022-42948

    Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Mar 30, 2023

  484. Rank 494

    Adobe ColdFusionCVE-2023-26360

    Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

    CVSS severity 9.8critical

    Added Mar 15, 2023

  485. Rank 495

    Microsoft OfficeCVE-2023-23397

    Microsoft Office Outlook Privilege Escalation Vulnerability

    CVSS severity 9.8critical

    Added Mar 14, 2023

  486. Rank 496

    Teclib GLPICVE-2022-35914

    Teclib GLPI Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Mar 7, 2023

  487. Rank 497

    IBM Aspera FaspexCVE-2022-47986

    IBM Aspera Faspex Code Execution Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Feb 21, 2023

  488. Rank 498

    CactiCVE-2022-46169

    Cacti Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Feb 16, 2023

  489. Rank 499

    Oracle E-Business SuiteCVE-2022-21587

    Oracle E-Business Suite Unspecified Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Feb 2, 2023

  490. Rank 500

    Progress Telerik UI for ASP.NET AJAXCVE-2017-11357

    Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability

    RansomwareCVE from 2017, added in 2023

    CVSS severity 9.8critical

    Added Jan 26, 2023

  491. Rank 501

    ManageEngine (Zoho) Multiple productsCVE-2022-47966

    Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jan 23, 2023

  492. Rank 502

    CWP (Control Web Panel / CentOS Web Panel) Control Web PanelCVE-2022-44877

    CWP Control Web Panel OS Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Jan 17, 2023

  493. Rank 503

    Microsoft Exchange ServerCVE-2022-41080

    Microsoft Exchange Server Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jan 10, 2023

  494. Rank 504

    Veeam Backup & ReplicationCVE-2022-26501

    Veeam Backup & Replication Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Dec 13, 2022

  495. Rank 505

    Citrix NetScaler ADC / GatewayCVE-2022-27518

    Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

    CVSS severity 9.8critical

    Added Dec 13, 2022

  496. Rank 506

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2022-42475

    Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Dec 13, 2022

  497. Rank 507

    Oracle Identity and Access Management (OIM / OAM)CVE-2021-35587

    Oracle Fusion Middleware Unspecified Vulnerability

    CVSS severity 9.8critical

    Added Nov 28, 2022

  498. Rank 508

    GIGABYTE App Center / AORUS (pilote GDrv)CVE-2018-19323

    GIGABYTE Multiple Products Privilege Escalation Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Oct 24, 2022

  499. Rank 509

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2022-41352

    Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Oct 20, 2022

  500. Rank 510

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2022-40684

    Fortinet Multiple Products Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Oct 11, 2022

  501. Rank 511

    Sophos Firewall (SFOS, ex-XG)CVE-2022-3236

    Sophos Firewall Code Injection Vulnerability

    CVSS severity 9.8critical

    Added Sep 23, 2022

  502. Rank 512

    ManageEngine (Zoho) PAM360 / Password Manager ProCVE-2022-35405

    Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Sep 22, 2022

  503. Rank 513

    Oracle WebLogic ServerCVE-2018-2628

    Oracle WebLogic Server Unspecified Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Sep 8, 2022

  504. Rank 514

    D-Link Routers (DIR, DWR, DSR)CVE-2018-6530

    D-Link Multiple Routers OS Command Injection Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Sep 8, 2022

  505. Rank 515

    MikroTik RouterOSCVE-2018-7445

    MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Sep 8, 2022

  506. Rank 516

    Spring Cloud FunctionCVE-2022-22963

    VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Aug 25, 2022

  507. Rank 517

    Apache APISIXCVE-2022-24112

    Apache APISIX Authentication Bypass Vulnerability

    CVSS severity 9.8critical

    Added Aug 25, 2022

  508. Rank 518

    Apache CouchDBCVE-2022-24706

    Apache CouchDB Insecure Default Initialization of Resource Vulnerability

    CVSS severity 9.8critical

    Added Aug 25, 2022

  509. Rank 519

    dotCMSCVE-2022-26352

    dotCMS Unrestricted Upload of File Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Aug 25, 2022

  510. Rank 520

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2017-15944

    Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added Aug 18, 2022

  511. Rank 521

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2022-37042

    Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Aug 11, 2022

  512. Rank 522

    Atlassian Confluence Server / Data CenterCVE-2022-26138

    Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability

    CVSS severity 9.8critical

    Added Jul 29, 2022

  513. Rank 523

    Mitel MiVoice ConnectCVE-2022-29499

    Mitel MiVoice Connect Data Validation Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jun 27, 2022

  514. Rank 524

    SAP NetWeaverCVE-2016-2386

    SAP NetWeaver SQL Injection Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 9.8critical

    Added Jun 9, 2022

  515. Rank 525

    Adobe Acrobat / ReaderCVE-2011-2462

    Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability

    CVE from 2011, added in 2022

    CVSS severity 9.8critical

    Added Jun 8, 2022

  516. Rank 526

    NETGEAR Routers (DGN, WNR, Nighthawk)CVE-2017-6862

    NETGEAR Multiple Devices Buffer Overflow Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added Jun 8, 2022

  517. Rank 527

    QNAP Photo StationCVE-2019-7192

    QNAP Photo Station Improper Access Control Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Jun 8, 2022

  518. Rank 528

    QNAP NAS (QTS / QuTS hero)CVE-2019-7193

    QNAP QTS Improper Input Validation Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Jun 8, 2022

  519. Rank 529

    QNAP Photo StationCVE-2019-7194

    QNAP Photo Station Path Traversal Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Jun 8, 2022

  520. Rank 530

    QNAP Photo StationCVE-2019-7195

    QNAP Photo Station Path Traversal Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Jun 8, 2022

  521. Rank 531

    Atlassian Confluence Server / Data CenterCVE-2022-26134

    Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jun 2, 2022

  522. Rank 532

    Oracle Java SE (JRE / JDK)CVE-2010-0840

    Oracle JRE Unspecified Vulnerability

    CVE from 2010, added in 2022

    CVSS severity 9.8critical

    Added May 25, 2022

  523. Rank 533

    Oracle Fusion MiddlewareCVE-2012-1710

    Oracle Fusion Middleware Unspecified Vulnerability

    RansomwareCVE from 2012, added in 2022

    CVSS severity 9.8critical

    Added May 25, 2022

  524. Rank 534

    Oracle Java SE (JRE / JDK)CVE-2013-0422

    Oracle JRE Remote Code Execution Vulnerability

    RansomwareCVE from 2013, added in 2022

    CVSS severity 9.8critical

    Added May 25, 2022

  525. Rank 535

    Adobe Acrobat / ReaderCVE-2014-0546

    Adobe Reader and Acrobat Sandbox Bypass Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 9.8critical

    Added May 25, 2022

  526. Rank 536

    Microsoft WindowsCVE-2017-8543

    Microsoft Windows Search Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added May 24, 2022

  527. Rank 537

    QNAP NAS (QTS / QuTS hero)CVE-2018-19949

    QNAP NAS File Station Command Injection Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added May 24, 2022

  528. Rank 538

    Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG)CVE-2022-30525

    Zyxel Multiple Firewalls OS Command Injection Vulnerability

    CVSS severity 9.8critical

    Added May 16, 2022

  529. Rank 539

    F5 BIG-IPCVE-2022-1388

    F5 BIG-IP Missing Authentication Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added May 10, 2022

  530. Rank 540

    WSO2 API Manager, Identity Server, IntegratorCVE-2022-29464

    WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Apr 25, 2022

  531. Rank 541

    Meta WhatsAppCVE-2019-3568

    WhatsApp VOIP Stack Buffer Overflow Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Apr 19, 2022

  532. Rank 542

    Alcatel-Lucent Enterprise OmniPCX EnterpriseCVE-2007-3010

    Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability

    CVE from 2007, added in 2022

    CVSS severity 9.8critical

    Added Apr 15, 2022

  533. Rank 543

    Ubiquiti airOS (airMAX)CVE-2010-5330

    Ubiquiti AirOS Command Injection Vulnerability

    CVE from 2010, added in 2022

    CVSS severity 9.8critical

    Added Apr 15, 2022

  534. Rank 544

    InduSoft Web StudioCVE-2014-0780

    InduSoft Web Studio NTWebServer Directory Traversal Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 9.8critical

    Added Apr 15, 2022

  535. Rank 545

    Crestron AirMedia (AM-100, AM-101)CVE-2019-3929

    Crestron Multiple Products Command Injection Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Apr 15, 2022

  536. Rank 546

    VMware (Broadcom) Workspace ONE Access / Identity ManagerCVE-2022-22954

    VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Apr 14, 2022

  537. Rank 547

    Kaseya VSACVE-2018-20753

    Kaseya VSA Remote Code Execution Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Apr 13, 2022

  538. Rank 548

    Drupal CoreCVE-2018-7602

    Drupal Core Remote Code Execution Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Apr 13, 2022

  539. Rank 549

    Progress Telerik UI for ASP.NET AJAXCVE-2017-11317

    Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added Apr 11, 2022

  540. Rank 550

    QNAP NAS (QTS / QuTS hero)CVE-2020-2509

    QNAP Network-Attached Storage (NAS) Command Injection Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 9.8critical

    Added Apr 11, 2022

  541. Rank 551

    Microsoft WindowsCVE-2021-31166

    Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Apr 6, 2022

  542. Rank 552

    Spring FrameworkCVE-2022-22965

    Spring Framework JDK 9+ Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Apr 4, 2022

  543. Rank 553

    QNAP NAS (QTS / QuTS hero)CVE-2021-28799

    QNAP NAS Improper Authorization Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Mar 31, 2022

  544. Rank 554

    Sophos Firewall (SFOS, ex-XG)CVE-2022-1040

    Sophos Firewall Authentication Bypass Vulnerability

    CVSS severity 9.8critical

    Added Mar 31, 2022

  545. Rank 555

    Trend Micro Apex CentralCVE-2022-26871

    Trend Micro Apex Central Arbitrary File Upload Vulnerability

    CVSS severity 9.8critical

    Added Mar 31, 2022

  546. Rank 556

    Oracle Java SE (JRE / JDK)CVE-2012-5076

    Oracle Java SE Sandbox Bypass Vulnerability

    CVE from 2012, added in 2022

    CVSS severity 9.8critical

    Added Mar 28, 2022

  547. Rank 557

    Oracle Java SE (JRE / JDK)CVE-2013-2465

    Oracle Java SE Unspecified Vulnerability

    RansomwareCVE from 2013, added in 2022

    CVSS severity 9.8critical

    Added Mar 28, 2022

  548. Rank 558

    Adobe Acrobat / ReaderCVE-2013-2729

    Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 9.8critical

    Added Mar 28, 2022

  549. Rank 559

    HPE Network Node Manager (OpenView NNM)CVE-2005-2773

    HP OpenView Network Node Manager Remote Code Execution Vulnerability

    CVE from 2005, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  550. Rank 560

    phpMyAdminCVE-2009-1151

    phpMyAdmin Remote Code Execution Vulnerability

    CVE from 2009, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  551. Rank 561

    Adobe ColdFusionCVE-2010-2861

    Adobe ColdFusion Directory Traversal Vulnerability

    RansomwareCVE from 2010, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  552. Rank 562

    EximCVE-2010-4344

    Exim Heap-Based Buffer Overflow Vulnerability

    CVE from 2010, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  553. Rank 563

    PHPCVE-2012-1823

    PHP-CGI Query String Parameter Vulnerability

    CVE from 2012, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  554. Rank 564

    Apache StrutsCVE-2013-2251

    Apache Struts Improper Input Validation Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  555. Rank 565

    HPE ProCurve Manager (PCM, PCM+, IDM)CVE-2013-4810

    HP Multiple Products Remote Code Execution Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  556. Rank 566

    Rejetto HTTP File Server (HFS)CVE-2014-6287

    Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  557. Rank 567

    Elastic ElasticsearchCVE-2015-1427

    Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  558. Rank 568

    NETGEAR Routers (DGN, WNR, Nighthawk)CVE-2016-10174

    NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  559. Rank 569

    NETGEAR Wi-Fi access points (WAC, WNAP)CVE-2016-1555

    NETGEAR Multiple WAP Devices Command Injection Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  560. Rank 570

    Cisco IOS / IOS XECVE-2017-3881

    Cisco IOS and IOS XE Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  561. Rank 571

    Citrix SD-WANCVE-2017-6316

    Citrix Multiple Products Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  562. Rank 572

    Cisco RV routers (Small Business)CVE-2018-0125

    Cisco VPN Routers Remote Code Execution Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  563. Rank 573

    Cisco Secure Access Control System (ACS)CVE-2018-0147

    Cisco Secure Access Control System Java Deserialization Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  564. Rank 574

    Quest KACE Systems Management Appliance (SMA)CVE-2018-11138

    Quest KACE System Management Appliance Remote Command Execution Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  565. Rank 575

    Spring DataCVE-2018-1273

    VMware Tanzu Spring Data Commons Property Binder Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  566. Rank 576

    LG N1A1 NASCVE-2018-14839

    LG N1A1 NAS Remote Command Execution Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  567. Rank 577

    Kentico XperienceCVE-2019-10068

    Kentico Xperience Deserialization of Untrusted Data Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  568. Rank 578

    PHPCVE-2019-11043

    PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  569. Rank 579

    Citrix SD-WANCVE-2019-12989

    Citrix SD-WAN and NetScaler SQL Injection Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  570. Rank 580

    WebminCVE-2019-15107

    Webmin Command Injection Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  571. Rank 581

    Juniper Junos OSCVE-2020-1631

    Juniper Junos OS Path Traversal Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  572. Rank 582

    QNAP HelpdeskCVE-2020-2506

    QNAP Helpdesk Improper Access Control Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  573. Rank 583

    Sophos SG UTMCVE-2020-25223

    Sophos SG UTM Remote Code Execution Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  574. Rank 584

    OpenBSD OpenSMTPDCVE-2020-7247

    OpenSMTPD Remote Code Execution Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  575. Rank 585

    Zyxel NASCVE-2020-9054

    Zyxel Multiple NAS Devices OS Command Injection Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  576. Rank 586

    Citrix ShareFileCVE-2021-22941

    Citrix ShareFile Improper Access Control Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Mar 25, 2022

  577. Rank 587

    Sitecore Experience Platform / Manager (XP / XM)CVE-2021-42237

    Sitecore XP Remote Command Execution Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Mar 25, 2022

  578. Rank 588

    Mitel MiCollabCVE-2022-26143

    MiCollab, MiVoice Business Express Access Control Vulnerability

    CVSS severity 9.8critical

    Added Mar 25, 2022

  579. Rank 589

    WatchGuard Firebox / XTM (Fireware)CVE-2022-26318

    WatchGuard Firebox and XTM Appliances Arbitrary Code Execution

    CVSS severity 9.8critical

    Added Mar 25, 2022

  580. Rank 590

    SonicWall SonicOSCVE-2020-5135

    SonicWall SonicOS Buffer Overflow Vulnerability

    RansomwareCVE from 2020, added in 2022

    CVSS severity 9.8critical

    Added Mar 15, 2022

  581. Rank 591

    Adobe ColdFusionCVE-2013-0625

    Adobe ColdFusion Authentication Bypass Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 9.8critical

    Added Mar 7, 2022

  582. Rank 592

    NETGEAR Routers (DGN, WNR, Nighthawk)CVE-2017-6077

    NETGEAR DGN2200 Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added Mar 7, 2022

  583. Rank 593

    Atlassian Jira Server / Data CenterCVE-2019-11581

    Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Mar 7, 2022

  584. Rank 594

    Microsoft Forefront TMGCVE-2011-1889

    Microsoft Forefront TMG Remote Code Execution Vulnerability

    CVE from 2011, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  585. Rank 595

    Oracle Java SE (JRE / JDK)CVE-2011-3544

    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

    CVE from 2011, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  586. Rank 596

    Oracle Java SE (JRE / JDK)CVE-2012-0507

    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

    RansomwareCVE from 2012, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  587. Rank 597

    Oracle Java SE (JRE / JDK)CVE-2012-1723

    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

    RansomwareCVE from 2012, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  588. Rank 598

    Oracle Java SE (JRE / JDK)CVE-2012-4681

    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

    RansomwareCVE from 2012, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  589. Rank 599

    Adobe ColdFusionCVE-2013-0632

    Adobe ColdFusion Authentication Bypass Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  590. Rank 600

    Adobe Acrobat / ReaderCVE-2013-3346

    Adobe Reader and Acrobat Memory Corruption Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  591. Rank 601

    Oracle Java SE (JRE / JDK)CVE-2015-2590

    Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  592. Rank 602

    Cisco IOS / IOS XECVE-2017-12240

    Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  593. Rank 603

    Cisco IOS / IOS XECVE-2018-0151

    Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  594. Rank 604

    EximCVE-2019-16928

    Exim Out-of-bounds Write Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  595. Rank 605

    Apache TomcatCVE-2020-1938

    Apache Tomcat Improper Privilege Management Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  596. Rank 606

    Cisco RV routers (Small Business)CVE-2022-20699

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    CVSS severity 9.8critical

    Added Mar 3, 2022

  597. Rank 607

    Cisco RV routers (Small Business)CVE-2022-20700

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    CVSS severity 9.8critical

    Added Mar 3, 2022

  598. Rank 608

    Zabbix FrontendCVE-2022-23131

    Zabbix Frontend Authentication Bypass Vulnerability

    CVSS severity 9.8critical

    Added Feb 22, 2022

  599. Rank 609

    PHPUnitCVE-2017-9841

    PHPUnit Command Injection Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added Feb 15, 2022

  600. Rank 610

    Adobe Commerce (Magento)CVE-2022-24086

    Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability

    CVSS severity 9.8critical

    Added Feb 15, 2022

  601. Rank 611

    Microsoft WindowsCVE-2015-1635

    Microsoft HTTP.sys Remote Code Execution Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 9.8critical

    Added Feb 10, 2022

  602. Rank 612

    Apache ActiveMQCVE-2016-3088

    Apache ActiveMQ Improper Input Validation Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 9.8critical

    Added Feb 10, 2022

  603. Rank 613

    Apache Struts 1CVE-2017-9791

    Apache Struts 1 Improper Input Validation Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added Feb 10, 2022

  604. Rank 614

    Jenkins CoreCVE-2018-1000861

    Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Feb 10, 2022

  605. Rank 615

    Microsoft Internet Explorer / Edge (legacy)CVE-2014-1776

    Microsoft Internet Explorer Memory Corruption Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 9.8critical

    Added Jan 28, 2022

  606. Rank 616

    GNU BashCVE-2014-6271

    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 9.8critical

    Added Jan 28, 2022

  607. Rank 617

    GNU BashCVE-2014-7169

    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 9.8critical

    Added Jan 28, 2022

  608. Rank 618

    Intel Active Management Technology (AMT)CVE-2017-5689

    Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added Jan 28, 2022

  609. Rank 619

    Grandstream UCM6200CVE-2020-5722

    Grandstream Networks UCM6200 Series SQL Injection Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 9.8critical

    Added Jan 28, 2022

  610. Rank 620

    SonicWall SMA 100 (ex-SRA)CVE-2021-20038

    SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jan 28, 2022

  611. Rank 621

    Apple iOS / iPadOS / macOSCVE-2022-22587

    Apple Memory Corruption Vulnerability

    CVSS severity 9.8critical

    Added Jan 28, 2022

  612. Rank 622

    Apache StrutsCVE-2012-0391

    Apache Struts 2 Improper Input Validation Vulnerability

    CVE from 2012, added in 2022

    CVSS severity 9.8critical

    Added Jan 21, 2022

  613. Rank 623

    Apache AirflowCVE-2020-13927

    Apache Airflow's Experimental API Authentication Bypass

    CVE from 2020, added in 2022

    CVSS severity 9.8critical

    Added Jan 18, 2022

  614. Rank 624

    F5 BIG-IPCVE-2021-22991

    F5 BIG-IP Traffic Management Microkernel Buffer Overflow

    CVSS severity 9.8critical

    Added Jan 18, 2022

  615. Rank 625

    Aviatrix ControllerCVE-2021-40870

    Aviatrix Controller Unrestricted Upload of File

    CVSS severity 9.8critical

    Added Jan 18, 2022

  616. Rank 626

    IBM WebSphere Application ServerCVE-2015-7450

    IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.

    CVE from 2015, added in 2022

    CVSS severity 9.8critical

    Added Jan 10, 2022

  617. Rank 627

    PrimeTek PrimeFacesCVE-2017-1000486

    Primetek Primefaces Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added Jan 10, 2022

  618. Rank 628

    EximCVE-2019-10149

    Exim Mail Transfer Agent (MTA) Improper Input Validation

    CVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Jan 10, 2022

  619. Rank 629

    Oracle WebLogic ServerCVE-2019-2725

    Oracle WebLogic Server, Injection

    RansomwareCVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Jan 10, 2022

  620. Rank 630

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2019-9670

    Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

    CVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Jan 10, 2022

  621. Rank 631

    Hikvision IP cameras and recorders (NVR/DVR)CVE-2021-36260

    Hikvision Improper Input Validation

    CVSS severity 9.8critical

    Added Jan 10, 2022

  622. Rank 632

    Red Hat JBoss Application Server / EAPCVE-2017-12149

    Red Hat JBoss Application Server Remote Code Execution Vulnerability

    RansomwareCVE from 2017, added in 2021

    CVSS severity 9.8critical

    Added Dec 10, 2021

  623. Rank 633

    Sonatype Nexus RepositoryCVE-2019-7238

    Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Dec 10, 2021

  624. Rank 634

    Fuel CMSCVE-2020-17463

    Fuel CMS SQL Injection Vulnerability

    CVSS severity 9.8critical

    Added Dec 10, 2021

  625. Rank 635

    Realtek Router SDKs (Jungle, AP-Router)CVE-2021-35394

    Realtek Jungle SDK Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Dec 10, 2021

  626. Rank 636

    ManageEngine (Zoho) Endpoint Central (ex-Desktop Central)CVE-2021-44515

    Zoho Desktop Central Authentication Bypass Vulnerability

    CVSS severity 9.8critical

    Added Dec 10, 2021

  627. Rank 637

    ManageEngine (Zoho) ServiceDesk PlusCVE-2021-37415

    Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability

    CVSS severity 9.8critical

    Added Dec 1, 2021

  628. Rank 638

    ManageEngine (Zoho) ServiceDesk PlusCVE-2021-44077

    Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Dec 1, 2021

  629. Rank 639

    Oracle WebLogic ServerCVE-2015-4852

    Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability

    CVE from 2015, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  630. Rank 640

    Apache ShiroCVE-2016-4437

    Apache Shiro Code Execution Vulnerability

    CVE from 2016, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  631. Rank 641

    Apache StrutsCVE-2017-5638

    Apache Struts Remote Code Execution Vulnerability

    RansomwareCVE from 2017, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  632. Rank 642

    Microsoft IISCVE-2017-7269

    Microsoft Windows Server Buffer Overflow Vulnerability

    CVE from 2017, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  633. Rank 643

    Progress Telerik UI for ASP.NET AJAXCVE-2017-9248

    Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability

    CVE from 2017, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  634. Rank 644

    Cisco IOS / IOS XECVE-2018-0171

    Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

    CVE from 2018, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  635. Rank 645

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2018-13379

    Fortinet FortiOS SSL VPN Path Traversal Vulnerability

    RansomwareCVE from 2018, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  636. Rank 646

    Tenda Wi-Fi routersCVE-2018-14558

    Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability

    CVE from 2018, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  637. Rank 647

    Adobe ColdFusionCVE-2018-15961

    Adobe ColdFusion Unrestricted File Upload Vulnerability

    CVE from 2018, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  638. Rank 648

    ThinkPHPCVE-2018-20062

    ThinkPHP "noneCms" Remote Code Execution Vulnerability

    CVE from 2018, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  639. Rank 649

    Adobe ColdFusionCVE-2018-4939

    Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

    CVE from 2018, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  640. Rank 650

    EximCVE-2018-6789

    Exim Buffer Overflow Vulnerability

    RansomwareCVE from 2018, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  641. Rank 651

    Drupal CoreCVE-2018-7600

    Drupal Core Remote Code Execution Vulnerability

    RansomwareCVE from 2018, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  642. Rank 652

    Microsoft SharePoint ServerCVE-2019-0604

    Microsoft SharePoint Remote Code Execution Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  643. Rank 653

    Microsoft WindowsCVE-2019-0708

    Microsoft Remote Desktop Services Remote Code Execution Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  644. Rank 654

    Atlassian CrowdCVE-2019-11580

    Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  645. Rank 655

    Citrix Workspace app / ReceiverCVE-2019-11634

    Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  646. Rank 656

    SIMalliance Toolbox BrowserCVE-2019-16256

    SIMalliance Toolbox Browser Command Injection Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  647. Rank 657

    vBulletinCVE-2019-16759

    vBulletin PHP Module Remote Code Execution Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  648. Rank 658

    Progress Telerik UI for ASP.NET AJAXCVE-2019-18935

    Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  649. Rank 659

    Citrix NetScaler ADC / GatewayCVE-2019-19781

    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  650. Rank 660

    Atlassian Confluence Server / Data CenterCVE-2019-3396

    Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  651. Rank 661

    IBM Planning Analytics (TM1)CVE-2019-4716

    IBM Planning Analytics Remote Code Execution Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  652. Rank 662

    VMware (Broadcom) ESXiCVE-2019-5544

    VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  653. Rank 663

    Microsoft .NET / Visual StudioCVE-2020-0646

    Microsoft .NET Framework Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  654. Rank 664

    SolarWinds Orion PlatformCVE-2020-10148

    SolarWinds Orion Authentication Bypass Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  655. Rank 665

    Sumavision Enhanced Multimedia Router (EMR)CVE-2020-10181

    Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  656. Rank 666

    ManageEngine (Zoho) Endpoint Central (ex-Desktop Central)CVE-2020-10189

    Zoho ManageEngine Desktop Central File Upload Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  657. Rank 667

    Tenda Wi-Fi routersCVE-2020-10987

    Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  658. Rank 668

    SaltStack SaltCVE-2020-11651

    SaltStack Salt Authentication Bypass Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  659. Rank 669

    Sophos Firewall (SFOS, ex-XG)CVE-2020-12271

    Sophos SFOS SQL Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  660. Rank 670

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2020-12812

    Fortinet FortiOS SSL VPN Improper Authentication Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  661. Rank 671

    Oracle WebLogic ServerCVE-2020-14750

    Oracle WebLogic Server Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  662. Rank 672

    Oracle WebLogic ServerCVE-2020-14882

    Oracle WebLogic Server Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  663. Rank 673

    Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron)CVE-2020-15505

    Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  664. Rank 674

    SaltStack SaltCVE-2020-16846

    SaltStack Salt Shell Injection Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  665. Rank 675

    vBulletinCVE-2020-17496

    vBulletin PHP Module Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  666. Rank 676

    Apache StrutsCVE-2020-17530

    Apache Struts Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  667. Rank 677

    WordPress PluginsCVE-2020-25213

    WordPress File Manager Plugin Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  668. Rank 678

    D-Link NAS DNS (ShareCenter)CVE-2020-25506

    D-Link DNS-320 Device Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  669. Rank 679

    Oracle CoherenceCVE-2020-2555

    Oracle Multiple Products Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  670. Rank 680

    NETGEAR Switches (GS, JGS, MS)CVE-2020-26919

    Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  671. Rank 681

    D-Link Routers (DIR, DWR, DSR)CVE-2020-29557

    D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  672. Rank 682

    Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG)CVE-2020-29583

    Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  673. Rank 683

    Cisco IP PhonesCVE-2020-3161

    Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  674. Rank 684

    VMware (Broadcom) vCenter ServerCVE-2020-3952

    VMware vCenter Server Information Disclosure Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  675. Rank 685

    VMware (Broadcom) ESXiCVE-2020-3992

    VMware ESXi OpenSLP Use-After-Free Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  676. Rank 686

    IBM Data Risk ManagerCVE-2020-4427

    IBM Data Risk Manager Security Bypass Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  677. Rank 687

    UnraidCVE-2020-5847

    Unraid Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  678. Rank 688

    F5 BIG-IPCVE-2020-5902

    F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  679. Rank 689

    SAP Solution ManagerCVE-2020-6207

    SAP Solution Manager Missing Authentication for Critical Function Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  680. Rank 690

    Liferay Portal / DXPCVE-2020-7961

    Liferay Portal Deserialization of Untrusted Data Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  681. Rank 691

    DrayTek Vigor (routers)CVE-2020-8515

    Multiple DrayTek Vigor Routers Web Management Page Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  682. Rank 692

    Trend Micro Apex One (ex-OfficeScan)CVE-2020-8599

    Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  683. Rank 693

    PlaySMSCVE-2020-8644

    PlaySMS Server-Side Template Injection Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  684. Rank 694

    EyesOfNetworkCVE-2020-8657

    EyesOfNetwork Use of Hard-Coded Credentials Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  685. Rank 695

    Cisco HyperFlex HXCVE-2021-1497

    Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  686. Rank 696

    Cisco HyperFlex HXCVE-2021-1498

    Cisco HyperFlex HX Data Platform Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  687. Rank 697

    Apple Safari / WebKitCVE-2021-1870

    Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  688. Rank 698

    Apple Safari / WebKitCVE-2021-1871

    Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  689. Rank 699

    SonicWall SMA 100 (ex-SRA)CVE-2021-20016

    SonicWall SSLVPN SMA100 SQL Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  690. Rank 700

    SonicWall Email SecurityCVE-2021-20021

    SonicWall Email Security Improper Privilege Management Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  691. Rank 701

    Arcadyan Buffalo FirmwareCVE-2021-20090

    Arcadyan Buffalo Firmware Path Traversal Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  692. Rank 702

    VMware (Broadcom) vCenter ServerCVE-2021-21972

    VMware vCenter Server Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  693. Rank 703

    VMware (Broadcom) vCenter ServerCVE-2021-21985

    VMware vCenter Server Improper Input Validation Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  694. Rank 704

    VMware (Broadcom) vCenter ServerCVE-2021-22005

    VMware vCenter Server File Upload Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  695. Rank 705

    OpenText (Micro Focus) Operations Bridge Reporter (OBR)CVE-2021-22502

    Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  696. Rank 706

    F5 BIG-IPCVE-2021-22986

    F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  697. Rank 707

    Atlassian Confluence Server / Data CenterCVE-2021-26084

    Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  698. Rank 708

    Microsoft Exchange ServerCVE-2021-26855

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  699. Rank 709

    Kiteworks (Accellion) FTA (File Transfer Appliance)CVE-2021-27101

    Accellion FTA SQL Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  700. Rank 710

    Kiteworks (Accellion) FTA (File Transfer Appliance)CVE-2021-27103

    Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  701. Rank 711

    Kiteworks (Accellion) FTA (File Transfer Appliance)CVE-2021-27104

    Accellion FTA OS Command Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  702. Rank 712

    Yealink Device ManagementCVE-2021-27561

    Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  703. Rank 713

    Kaseya VSACVE-2021-30116

    Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  704. Rank 714

    Tenda Wi-Fi routersCVE-2021-31755

    Tenda AC11 Router Stack Buffer Overflow Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  705. Rank 715

    Microsoft Exchange ServerCVE-2021-34473

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  706. Rank 716

    Microsoft Exchange ServerCVE-2021-34523

    Microsoft Exchange Server Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  707. Rank 717

    Realtek Router SDKs (Jungle, AP-Router)CVE-2021-35395

    Realtek AP-Router SDK Buffer Overflow Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  708. Rank 718

    ForgeRock Access Management (AM)CVE-2021-35464

    ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  709. Rank 719

    Microsoft Open Management Infrastructure (OMI)CVE-2021-38647

    Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  710. Rank 720

    ManageEngine (Zoho) ADSelfService PlusCVE-2021-40539

    Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  711. Rank 721

    Apache HTTP ServerCVE-2021-41773

    Apache HTTP Server Path Traversal Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  712. Rank 722

    Apache HTTP ServerCVE-2021-42013

    Apache HTTP Server Path Traversal Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  713. Rank 723

    BQE BillQuick Web SuiteCVE-2021-42258

    BQE BillQuick Web Suite SQL Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  714. Rank 724

    Google Chrome / ChromiumCVE-2024-7971

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 9.6critical

    Added Aug 26, 2024

  715. Rank 725

    Google Chrome / ChromiumCVE-2024-5274

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 9.6critical

    Added May 28, 2024

  716. Rank 726

    Google Chrome / ChromiumCVE-2024-4947

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 9.6critical

    Added May 20, 2024

  717. Rank 727

    Google Chrome / ChromiumCVE-2024-4671

    Google Chromium Visuals Use-After-Free Vulnerability

    CVSS severity 9.6critical

    Added May 13, 2024

  718. Rank 728

    Google Chrome / ChromiumCVE-2023-6345

    Google Skia Integer Overflow Vulnerability

    CVSS severity 9.6critical

    Added Nov 30, 2023

  719. Rank 729

    Google Chrome / ChromiumCVE-2023-2136

    Google Chrome Skia Integer Overflow Vulnerability

    CVSS severity 9.6critical

    Added Apr 21, 2023

  720. Rank 730

    Google Chrome / ChromiumCVE-2022-4135

    Google Chromium GPU Heap Buffer Overflow Vulnerability

    CVSS severity 9.6critical

    Added Nov 28, 2022

  721. Rank 731

    Google Chrome / ChromiumCVE-2022-3075

    Google Chromium Mojo Insufficient Data Validation Vulnerability

    CVSS severity 9.6critical

    Added Sep 8, 2022

  722. Rank 732

    Mozilla FirefoxCVE-2022-26486

    Mozilla Firefox Use-After-Free Vulnerability

    CVSS severity 9.6critical

    Added Mar 7, 2022

  723. Rank 733

    Google Chrome / ChromiumCVE-2020-15999

    Google Chrome FreeType Heap Buffer Overflow Vulnerability

    CVSS severity 9.6critical

    Added Nov 3, 2021

  724. Rank 734

    Google Chrome / ChromiumCVE-2020-16010

    Google Chrome for Android UI Heap Buffer Overflow Vulnerability

    CVSS severity 9.6critical

    Added Nov 3, 2021

  725. Rank 735

    Google Chrome / ChromiumCVE-2020-16017

    Google Chrome Use-After-Free Vulnerability

    CVSS severity 9.6critical

    Added Nov 3, 2021

  726. Rank 736

    Google Chrome / ChromiumCVE-2021-30633

    Google Chromium Indexed DB API Use-After-Free Vulnerability

    CVSS severity 9.6critical

    Added Nov 3, 2021

  727. Rank 737

    Google Chrome / ChromiumCVE-2021-37973

    Google Chromium Portals Use-After-Free Vulnerability

    CVSS severity 9.6critical

    Added Nov 3, 2021

  728. Rank 738

    Roundcube WebmailCVE-2024-42009

    RoundCube Webmail Cross-Site Scripting Vulnerability

    CVSS severity 9.3critical

    Added Jun 9, 2025

  729. Rank 739

    SAP NetWeaverCVE-2025-42999

    SAP NetWeaver Deserialization Vulnerability

    Ransomware

    CVSS severity 9.1critical

    Added May 15, 2025

  730. Rank 740

    Apache HTTP ServerCVE-2024-38475

    Apache HTTP Server Improper Escaping of Output Vulnerability

    CVSS severity 9.1critical

    Added May 1, 2025

  731. Rank 741

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2025-0108

    Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

    CVSS severity 9.1critical

    Added Feb 18, 2025

  732. Rank 742

    Mitel MiCollabCVE-2024-41713

    Mitel MiCollab Path Traversal Vulnerability

    Ransomware

    CVSS severity 9.1critical

    Added Jan 7, 2025

  733. Rank 743

    Palo Alto Networks ExpeditionCVE-2024-9465

    Palo Alto Networks Expedition SQL Injection Vulnerability

    CVSS severity 9.1critical

    Added Nov 14, 2024

  734. Rank 744

    PTZOptics PT30X-SDI/NDI CamerasCVE-2024-8956

    PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

    CVSS severity 9.1critical

    Added Nov 4, 2024

  735. Rank 745

    SolarWinds Web Help DeskCVE-2024-28987

    SolarWinds Web Help Desk Hardcoded Credential Vulnerability

    CVSS severity 9.1critical

    Added Oct 15, 2024

  736. Rank 746

    Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2024-21887

    Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

    Ransomware

    CVSS severity 9.1critical

    Added Jan 10, 2024

  737. Rank 747

    Cisco ASA / Firepower (FTD)CVE-2023-20269

    Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

    Ransomware

    CVSS severity 9.1critical

    Added Sep 13, 2023

  738. Rank 748

    QNAP Photo StationCVE-2022-27593

    QNAP Photo Station Externally Controlled Reference Vulnerability

    Ransomware

    CVSS severity 9.1critical

    Added Sep 8, 2022

  739. Rank 749

    Arcserve Unified Data Protection (UDP)CVE-2015-4068

    Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 9.1critical

    Added Mar 25, 2022

  740. Rank 750

    October CMSCVE-2021-32648

    October CMS Improper Authentication

    CVSS severity 9.1critical

    Added Jan 18, 2022

  741. Rank 751

    MikroTik RouterOSCVE-2018-14847

    MikroTik Router OS Directory Traversal Vulnerability

    CVE from 2018, added in 2021

    CVSS severity 9.1critical

    Added Dec 1, 2021

  742. Rank 752

    Oracle Fusion MiddlewareCVE-2012-3152

    Oracle Fusion Middleware Unspecified Vulnerability

    CVE from 2012, added in 2021

    CVSS severity 9.1critical

    Added Nov 3, 2021

  743. Rank 753

    VMware (Broadcom) Workspace ONE Access / Identity ManagerCVE-2020-4006

    Multiple VMware Products Command Injection Vulnerability

    CVSS severity 9.1critical

    Added Nov 3, 2021

  744. Rank 754

    IBM Data Risk ManagerCVE-2020-4428

    IBM Data Risk Manager Remote Code Execution Vulnerability

    CVSS severity 9.1critical

    Added Nov 3, 2021

  745. Rank 755

    Dassault Systèmes DELMIA AprisoCVE-2025-5086

    Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

    CVSS severity 9.0critical

    Added Sep 11, 2025

  746. Rank 756

    Sitecore Experience Platform / Manager (XP / XM)CVE-2025-53690

    Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

    CVSS severity 9.0critical

    Added Sep 4, 2025

  747. Rank 757

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2023-34192

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    CVE from 2023, added in 2025

    CVSS severity 9.0critical

    Added Feb 25, 2025

  748. Rank 758

    Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2025-0282

    Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

    Ransomware

    CVSS severity 9.0critical

    Added Jan 8, 2025

  749. Rank 759

    Apache Log4jCVE-2021-45046

    Apache Log4j2 Deserialization of Untrusted Data Vulnerability

    RansomwareCVE from 2021, added in 2023

    CVSS severity 9.0critical

    Added May 1, 2023

  750. Rank 760

    Apache HTTP ServerCVE-2021-40438

    Apache HTTP Server-Side Request Forgery (SSRF)

    Ransomware

    CVSS severity 9.0critical

    Added Dec 1, 2021

  751. Rank 761

    Microsoft Hyper-VCVE-2020-1040

    Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

    CVSS severity 9.0critical

    Added Nov 3, 2021

  752. Rank 762

    GNU BashCVE-2014-6278

    GNU Bash OS Command Injection Vulnerability

    CVE from 2014, added in 2025

    CVSS severity 8.8high

    Added Oct 2, 2025

  753. Rank 763

    Smartbedded MeteobridgeCVE-2025-4008

    Smartbedded Meteobridge Command Injection Vulnerability

    CVSS severity 8.8high

    Added Oct 2, 2025

  754. Rank 764

    Google AndroidCVE-2025-48543

    Android Runtime Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Sep 4, 2025

  755. Rank 765

    TP-Link Range extenders and access points (TL-WA, RE)CVE-2020-24363

    TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability

    CVE from 2020, added in 2025

    CVSS severity 8.8high

    Added Sep 2, 2025

  756. Rank 766

    N-able N-centralCVE-2025-8876

    N-able N-Central Command Injection Vulnerability

    CVSS severity 8.8high

    Added Aug 13, 2025

  757. Rank 767

    Microsoft OfficeCVE-2007-0671

    Microsoft Office Excel Remote Code Execution Vulnerability

    CVE from 2007, added in 2025

    CVSS severity 8.8high

    Added Aug 12, 2025

  758. Rank 768

    Microsoft Internet Explorer / Edge (legacy)CVE-2013-3893

    Microsoft Internet Explorer Resource Management Errors Vulnerability

    CVE from 2013, added in 2025

    CVSS severity 8.8high

    Added Aug 12, 2025

  759. Rank 769

    RARLAB WinRARCVE-2025-8088

    RARLAB WinRAR Path Traversal Vulnerability

    Ransomware

    CVSS severity 8.8high

    Added Aug 12, 2025

  760. Rank 770

    D-Link DCS camerasCVE-2020-25079

    D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability

    CVE from 2020, added in 2025

    CVSS severity 8.8high

    Added Aug 5, 2025

  761. Rank 771

    D-Link DNR video recorders (NVR)CVE-2022-40799

    D-Link DNR-322L Download of Code Without Integrity Check Vulnerability

    CVE from 2022, added in 2025

    CVSS severity 8.8high

    Added Aug 5, 2025

  762. Rank 772

    PaperCut NG / MFCVE-2023-2533

    PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

    CVE from 2023, added in 2025

    CVSS severity 8.8high

    Added Jul 28, 2025

  763. Rank 773

    Microsoft SharePoint ServerCVE-2025-49704

    Microsoft SharePoint Code Injection Vulnerability

    Ransomware

    CVSS severity 8.8high

    Added Jul 22, 2025

  764. Rank 774

    Google Chrome / ChromiumCVE-2025-6558

    Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

    CVSS severity 8.8high

    Added Jul 22, 2025

  765. Rank 775

    TP-Link TL-WR (Wi-Fi routers)CVE-2023-33538

    TP-Link Multiple Routers Command Injection Vulnerability

    CVE from 2023, added in 2025

    CVSS severity 8.8high

    Added Jun 16, 2025

  766. Rank 776

    Microsoft WindowsCVE-2025-33053

    Microsoft Windows External Control of File Name or Path Vulnerability

    CVSS severity 8.8high

    Added Jun 10, 2025

  767. Rank 777

    Google Chrome / ChromiumCVE-2025-5419

    Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

    CVSS severity 8.8high

    Added Jun 5, 2025

  768. Rank 778

    ASUS Routers (RT, GT, ZenWiFi)CVE-2023-39780

    ASUS RT-AX55 Routers OS Command Injection Vulnerability

    CVE from 2023, added in 2025

    CVSS severity 8.8high

    Added Jun 2, 2025

  769. Rank 779

    Srimax Output MessengerCVE-2025-27920

    Srimax Output Messenger Directory Traversal Vulnerability

    CVSS severity 8.8high

    Added May 19, 2025

  770. Rank 780

    Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron)CVE-2025-4428

    Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

    CVSS severity 8.8high

    Added May 19, 2025

  771. Rank 781

    Commvault Web ServerCVE-2025-3928

    Commvault Web Server Unspecified Vulnerability

    CVSS severity 8.8high

    Added Apr 28, 2025

  772. Rank 782

    Sitecore Experience Platform / Manager (XP / XM)CVE-2019-9875

    Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

    CVE from 2019, added in 2025

    CVSS severity 8.8high

    Added Mar 26, 2025

  773. Rank 783

    Advantive VeraCoreCVE-2024-57968

    Advantive VeraCore Unrestricted File Upload Vulnerability

    CVSS severity 8.8high

    Added Mar 10, 2025

  774. Rank 784

    Oracle Agile PLMCVE-2024-20953

    Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

    CVSS severity 8.8high

    Added Feb 24, 2025

  775. Rank 785

    Zyxel Home gateways and routers (DSL, CPE)CVE-2024-40890

    Zyxel DSL CPE OS Command Injection Vulnerability

    CVSS severity 8.8high

    Added Feb 11, 2025

  776. Rank 786

    Zyxel Home gateways and routers (DSL, CPE)CVE-2024-40891

    Zyxel DSL CPE OS Command Injection Vulnerability

    CVSS severity 8.8high

    Added Feb 11, 2025

  777. Rank 787

    Trimble CityworksCVE-2025-0994

    Trimble Cityworks Deserialization Vulnerability

    CVSS severity 8.8high

    Added Feb 7, 2025

  778. Rank 788

    Apple Safari / WebKitCVE-2024-44308

    Apple Multiple Products Code Execution Vulnerability

    CVSS severity 8.8high

    Added Nov 21, 2024

  779. Rank 789

    Microsoft WindowsCVE-2024-49039

    Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 8.8high

    Added Nov 12, 2024

  780. Rank 790

    Ivanti Endpoint Manager (EPM)CVE-2024-29824

    Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

    CVSS severity 8.8high

    Added Oct 2, 2024

  781. Rank 791

    Microsoft SQL ServerCVE-2020-0618

    Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

    RansomwareCVE from 2020, added in 2024

    CVSS severity 8.8high

    Added Sep 18, 2024

  782. Rank 792

    Microsoft WindowsCVE-2024-43461

    Microsoft Windows MSHTML Platform Spoofing Vulnerability

    CVSS severity 8.8high

    Added Sep 16, 2024

  783. Rank 793

    Google Chrome / ChromiumCVE-2024-7965

    Google Chromium V8 Inappropriate Implementation Vulnerability

    CVSS severity 8.8high

    Added Aug 28, 2024

  784. Rank 794

    Microsoft OfficeCVE-2024-38189

    Microsoft Project Remote Code Execution Vulnerability

    CVSS severity 8.8high

    Added Aug 13, 2024

  785. Rank 795

    Microsoft WindowsCVE-2018-0824

    Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability

    CVE from 2018, added in 2024

    CVSS severity 8.8high

    Added Aug 5, 2024

  786. Rank 796

    Google Chrome / ChromiumCVE-2024-4761

    Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

    CVSS severity 8.8high

    Added May 16, 2024

  787. Rank 797

    Microsoft WindowsCVE-2024-30040

    Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

    CVSS severity 8.8high

    Added May 14, 2024

  788. Rank 798

    Microsoft WindowsCVE-2024-29988

    Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

    CVSS severity 8.8high

    Added Apr 30, 2024

  789. Rank 799

    Google Chrome / ChromiumCVE-2023-4762

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Feb 6, 2024

  790. Rank 800

    Apple Safari / WebKitCVE-2024-23222

    Apple Multiple Products WebKit Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Jan 23, 2024

  791. Rank 801

    Citrix NetScaler ADC / GatewayCVE-2023-6548

    Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

    CVSS severity 8.8high

    Added Jan 17, 2024

  792. Rank 802

    Google Chrome / ChromiumCVE-2024-0519

    Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

    CVSS severity 8.8high

    Added Jan 17, 2024

  793. Rank 803

    Google Chrome / ChromiumCVE-2023-7024

    Google Chromium WebRTC Heap Buffer Overflow Vulnerability

    CVSS severity 8.8high

    Added Jan 2, 2024

  794. Rank 804

    QNAP VioStor NVRCVE-2023-47565

    QNAP VioStor NVR OS Command Injection Vulnerability

    CVSS severity 8.8high

    Added Dec 21, 2023

  795. Rank 805

    FXC AE1021, AE1021PECVE-2023-49897

    FXC AE1021, AE1021PE OS Command Injection Vulnerability

    CVSS severity 8.8high

    Added Dec 21, 2023

  796. Rank 806

    Apple Safari / WebKitCVE-2023-42917

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    CVSS severity 8.8high

    Added Dec 4, 2023

  797. Rank 807

    Microsoft WindowsCVE-2023-36025

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    CVSS severity 8.8high

    Added Nov 14, 2023

  798. Rank 808

    F5 BIG-IPCVE-2023-46748

    F5 BIG-IP Configuration Utility SQL Injection Vulnerability

    CVSS severity 8.8high

    Added Oct 31, 2023

  799. Rank 809

    Progress WS_FTP ServerCVE-2023-40044

    Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability

    Ransomware

    CVSS severity 8.8high

    Added Oct 5, 2023

  800. Rank 810

    Google Chrome / ChromiumCVE-2023-5217

    Google Chromium libvpx Heap Buffer Overflow Vulnerability

    CVSS severity 8.8high

    Added Oct 2, 2023

  801. Rank 811

    Apple Safari / WebKitCVE-2023-41993

    Apple Multiple Products WebKit Code Execution Vulnerability

    CVSS severity 8.8high

    Added Sep 25, 2023

  802. Rank 812

    MinIOCVE-2023-28434

    MinIO Security Feature Bypass Vulnerability

    CVSS severity 8.8high

    Added Sep 19, 2023

  803. Rank 813

    Zyxel Home gateways and routers (DSL, CPE)CVE-2017-6884

    Zyxel EMG2926 Routers Command Injection Vulnerability

    RansomwareCVE from 2017, added in 2023

    CVSS severity 8.8high

    Added Sep 18, 2023

  804. Rank 814

    Google Chrome / ChromiumCVE-2023-4863

    Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

    CVSS severity 8.8high

    Added Sep 13, 2023

  805. Rank 815

    Apple Safari / WebKitCVE-2023-37450

    Apple Multiple Products WebKit Code Execution Vulnerability

    CVSS severity 8.8high

    Added Jul 13, 2023

  806. Rank 816

    Microsoft WindowsCVE-2023-32049

    Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

    CVSS severity 8.8high

    Added Jul 11, 2023

  807. Rank 817

    Arm Mali GPU (pilote noyau)CVE-2021-29256

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    CVE from 2021, added in 2023

    CVSS severity 8.8high

    Added Jul 7, 2023

  808. Rank 818

    Apple Safari / WebKitCVE-2023-32435

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    CVSS severity 8.8high

    Added Jun 23, 2023

  809. Rank 819

    Apple Safari / WebKitCVE-2023-32439

    Apple Multiple Products WebKit Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Jun 23, 2023

  810. Rank 820

    Google Chrome / ChromiumCVE-2023-3079

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Jun 7, 2023

  811. Rank 821

    Apple Safari / WebKitCVE-2023-32373

    Apple Multiple Products WebKit Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added May 22, 2023

  812. Rank 822

    TP-Link Archer (Wi-Fi routers)CVE-2023-1389

    TP-Link Archer AX-21 Command Injection Vulnerability

    CVSS severity 8.8high

    Added May 1, 2023

  813. Rank 823

    Cisco IOS / IOS XECVE-2017-6742

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2023

    CVSS severity 8.8high

    Added Apr 19, 2023

  814. Rank 824

    Google Chrome / ChromiumCVE-2023-2033

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Apr 17, 2023

  815. Rank 825

    Apple Safari / WebKitCVE-2023-28205

    Apple Multiple Products WebKit Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Apr 10, 2023

  816. Rank 826

    Veritas Backup ExecCVE-2021-27878

    Veritas Backup Exec Agent Command Execution Vulnerability

    RansomwareCVE from 2021, added in 2023

    CVSS severity 8.8high

    Added Apr 7, 2023

  817. Rank 827

    Google Chrome / ChromiumCVE-2022-3038

    Google Chromium Network Service Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Mar 30, 2023

  818. Rank 828

    Arm Mali GPU (pilote noyau)CVE-2022-38181

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Mar 30, 2023

  819. Rank 829

    Apache SparkCVE-2022-33891

    Apache Spark Command Injection Vulnerability

    CVSS severity 8.8high

    Added Mar 7, 2023

  820. Rank 830

    Apple Safari / WebKitCVE-2023-23529

    Apple Multiple Products WebKit Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Feb 14, 2023

  821. Rank 831

    SugarCRM Sugar (Sell, Serve, Enterprise)CVE-2023-22952

    Multiple SugarCRM Products Remote Code Execution Vulnerability

    CVSS severity 8.8high

    Added Feb 2, 2023

  822. Rank 832

    Microsoft WindowsCVE-2023-21674

    Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

    CVSS severity 8.8high

    Added Jan 10, 2023

  823. Rank 833

    TIBCO JasperReportsCVE-2018-5430

    TIBCO JasperReports Server Information Disclosure Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.8high

    Added Dec 29, 2022

  824. Rank 834

    Apple Safari / WebKitCVE-2022-42856

    Apple iOS Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Dec 14, 2022

  825. Rank 835

    Veeam Backup & ReplicationCVE-2022-26500

    Veeam Backup & Replication Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 8.8high

    Added Dec 13, 2022

  826. Rank 836

    Google Chrome / ChromiumCVE-2022-4262

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Dec 5, 2022

  827. Rank 837

    Microsoft WindowsCVE-2022-41128

    Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

    CVSS severity 8.8high

    Added Nov 8, 2022

  828. Rank 838

    Google Chrome / ChromiumCVE-2022-3723

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Oct 28, 2022

  829. Rank 839

    Atlassian Bitbucket Server / Data CenterCVE-2022-36804

    Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

    CVSS severity 8.8high

    Added Sep 30, 2022

  830. Rank 840

    Microsoft Exchange ServerCVE-2022-41040

    Microsoft Exchange Server Server-Side Request Forgery Vulnerability

    Ransomware

    CVSS severity 8.8high

    Added Sep 30, 2022

  831. Rank 841

    Linux KernelCVE-2013-6282

    Linux Kernel Improper Input Validation Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 8.8high

    Added Sep 15, 2022

  832. Rank 842

    Google Chrome / ChromiumCVE-2022-2294

    WebRTC Heap Buffer Overflow Vulnerability

    Ransomware

    CVSS severity 8.8high

    Added Aug 25, 2022

  833. Rank 843

    Microsoft Active DirectoryCVE-2022-26923

    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    CVSS severity 8.8high

    Added Aug 18, 2022

  834. Rank 844

    Apple Safari / WebKitCVE-2022-32893

    Apple iOS and macOS Out-of-Bounds Write Vulnerability

    CVSS severity 8.8high

    Added Aug 18, 2022

  835. Rank 845

    SAP NetWeaverCVE-2021-38163

    SAP NetWeaver Unrestricted File Upload Vulnerability

    CVSS severity 8.8high

    Added Jun 9, 2022

  836. Rank 846

    Microsoft OfficeCVE-2006-2492

    Microsoft Word Malformed Object Pointer Vulnerability

    CVE from 2006, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  837. Rank 847

    Adobe Acrobat / ReaderCVE-2008-0655

    Adobe Acrobat and Reader Unspecified Vulnerability

    CVE from 2008, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  838. Rank 848

    Adobe Acrobat / ReaderCVE-2009-3953

    Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

    CVE from 2009, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  839. Rank 849

    Microsoft WindowsCVE-2012-1889

    Microsoft XML Core Services Memory Corruption Vulnerability

    CVE from 2012, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  840. Rank 850

    Google Chrome / ChromiumCVE-2016-1646

    Google Chromium V8 Out-of-Bounds Read Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  841. Rank 851

    Google Chrome / ChromiumCVE-2016-5198

    Google Chromium V8 Out-of-Bounds Memory Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  842. Rank 852

    Google Chrome / ChromiumCVE-2017-5030

    Google Chromium V8 Memory Corruption Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  843. Rank 853

    Google Chrome / ChromiumCVE-2017-5070

    Google Chromium V8 Type Confusion Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  844. Rank 854

    Google Chrome / ChromiumCVE-2018-17463

    Google Chromium V8 Remote Code Execution Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  845. Rank 855

    Google Chrome / ChromiumCVE-2018-17480

    Google Chromium V8 Out-of-Bounds Write Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  846. Rank 856

    Adobe Acrobat / ReaderCVE-2018-4990

    Adobe Acrobat and Reader Double Free Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  847. Rank 857

    Google Chrome / ChromiumCVE-2018-6065

    Google Chromium V8 Integer Overflow Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  848. Rank 858

    Cisco RV routers (Small Business)CVE-2019-15271

    Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  849. Rank 859

    Microsoft Internet Explorer / Edge (legacy)CVE-2014-2817

    Microsoft Internet Explorer Privilege Escalation Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 8.8high

    Added May 25, 2022

  850. Rank 860

    Microsoft Internet Explorer / Edge (legacy)CVE-2014-4123

    Microsoft Internet Explorer Privilege Escalation Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 8.8high

    Added May 25, 2022

  851. Rank 861

    Microsoft WindowsCVE-2014-4148

    Microsoft Windows Remote Code Execution Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 8.8high

    Added May 25, 2022

  852. Rank 862

    Microsoft WindowsCVE-2015-2360

    Microsoft Win32k Privilege Escalation Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 8.8high

    Added May 25, 2022

  853. Rank 863

    Microsoft Internet Explorer / Edge (legacy)CVE-2015-2425

    Microsoft Internet Explorer Memory Corruption Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 8.8high

    Added May 25, 2022

  854. Rank 864

    Mozilla FirefoxCVE-2015-4495

    Mozilla Firefox Security Feature Bypass Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 8.8high

    Added May 25, 2022

  855. Rank 865

    Microsoft WindowsCVE-2016-7256

    Microsoft Windows Open Type Font Remote Code Execution Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 8.8high

    Added May 25, 2022

  856. Rank 866

    Oracle SolarisCVE-2019-3010

    Oracle Solaris Privilege Escalation Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 8.8high

    Added May 25, 2022

  857. Rank 867

    Apple Safari / WebKitCVE-2016-4657

    Apple iOS Webkit Memory Corruption Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 8.8high

    Added May 24, 2022

  858. Rank 868

    Cisco ASA / Firepower (FTD)CVE-2016-6366

    Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 8.8high

    Added May 24, 2022

  859. Rank 869

    Microsoft Internet Explorer / Edge (legacy)CVE-2017-0149

    Microsoft Internet Explorer Memory Corruption Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added May 24, 2022

  860. Rank 870

    Microsoft Internet Explorer / Edge (legacy)CVE-2017-0210

    Microsoft Internet Explorer Privilege Escalation Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added May 24, 2022

  861. Rank 871

    Mozilla FirefoxCVE-2019-11707

    Mozilla Firefox and Thunderbird Type Confusion Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 8.8high

    Added May 23, 2022

  862. Rank 872

    Google Chrome / ChromiumCVE-2019-13720

    Google Chrome WebAudio Use-After-Free Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 8.8high

    Added May 23, 2022

  863. Rank 873

    WebKitGTKCVE-2019-8720

    WebKitGTK Memory Corruption Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 8.8high

    Added May 23, 2022

  864. Rank 874

    Microsoft Internet Explorer / Edge (legacy)CVE-2014-0322

    Microsoft Internet Explorer Use-After-Free Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 8.8high

    Added May 4, 2022

  865. Rank 875

    Apple Safari / WebKitCVE-2019-8506

    Apple Multiple Products Type Confusion Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 8.8high

    Added May 4, 2022

  866. Rank 876

    Apple Safari / WebKitCVE-2021-1789

    Apple Multiple Products Type Confusion Vulnerability

    CVSS severity 8.8high

    Added May 4, 2022

  867. Rank 877

    Google Chrome / ChromiumCVE-2022-1364

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Apr 15, 2022

  868. Rank 878

    Microsoft Internet Explorer / Edge (legacy)CVE-2015-2502

    Microsoft Internet Explorer Memory Corruption Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 8.8high

    Added Apr 13, 2022

  869. Rank 879

    Microsoft Active DirectoryCVE-2021-42287

    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 8.8high

    Added Apr 11, 2022

  870. Rank 880

    WatchGuard Firebox / XTM (Fireware)CVE-2022-23176

    WatchGuard Firebox and XTM Privilege Escalation Vulnerability

    CVSS severity 8.8high

    Added Apr 11, 2022

  871. Rank 881

    Mozilla FirefoxCVE-2013-1690

    Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 8.8high

    Added Mar 28, 2022

  872. Rank 882

    Microsoft Internet Explorer / Edge (legacy)CVE-2013-2551

    Microsoft Internet Explorer Use-After-Free Vulnerability

    RansomwareCVE from 2013, added in 2022

    CVSS severity 8.8high

    Added Mar 28, 2022

  873. Rank 883

    Microsoft OfficeCVE-2015-1770

    Microsoft Office Uninitialized Memory Use Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 8.8high

    Added Mar 28, 2022

  874. Rank 884

    Microsoft Internet Explorer / Edge (legacy)CVE-2015-2419

    Microsoft Internet Explorer Memory Corruption Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 8.8high

    Added Mar 28, 2022

  875. Rank 885

    Microsoft WindowsCVE-2015-2426

    Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 8.8high

    Added Mar 28, 2022

  876. Rank 886

    Microsoft Internet Explorer / Edge (legacy)CVE-2016-7200

    Microsoft Edge Memory Corruption Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 8.8high

    Added Mar 28, 2022

  877. Rank 887

    Microsoft Internet Explorer / Edge (legacy)CVE-2016-7201

    Microsoft Edge Memory Corruption Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 8.8high

    Added Mar 28, 2022

  878. Rank 888

    Google Chrome / ChromiumCVE-2022-1096

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Mar 28, 2022

  879. Rank 889

    Adobe Acrobat / ReaderCVE-2009-0927

    Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

    CVE from 2009, added in 2022

    CVSS severity 8.8high

    Added Mar 25, 2022

  880. Rank 890

    Microsoft Active DirectoryCVE-2014-6324

    Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 8.8high

    Added Mar 25, 2022

  881. Rank 891

    Microsoft WindowsCVE-2014-6332

    Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 8.8high

    Added Mar 25, 2022

  882. Rank 892

    Microsoft WindowsCVE-2017-0146

    Microsoft Windows SMB Remote Code Execution Vulnerability

    RansomwareCVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 25, 2022

  883. Rank 893

    Microsoft WindowsCVE-2018-8414

    Microsoft Windows Shell Remote Code Execution Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.8high

    Added Mar 25, 2022

  884. Rank 894

    Microsoft WindowsCVE-2019-0903

    Microsoft GDI Remote Code Execution Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 8.8high

    Added Mar 25, 2022

  885. Rank 895

    Citrix SD-WANCVE-2019-12991

    Citrix SD-WAN and NetScaler Command Injection Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 8.8high

    Added Mar 25, 2022

  886. Rank 896

    Apache KylinCVE-2020-1956

    Apache Kylin OS Command Injection Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 8.8high

    Added Mar 25, 2022

  887. Rank 897

    NETGEAR Routers (DGN, WNR, Nighthawk)CVE-2016-6277

    NETGEAR Multiple Routers Remote Code Execution Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 8.8high

    Added Mar 7, 2022

  888. Rank 898

    Mozilla FirefoxCVE-2022-26485

    Mozilla Firefox Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Mar 7, 2022

  889. Rank 899

    Oracle VirtualBoxCVE-2008-3431

    Oracle VirtualBox Insufficient Input Validation Vulnerability

    CVE from 2008, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  890. Rank 900

    Microsoft OfficeCVE-2012-1856

    Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

    CVE from 2012, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  891. Rank 901

    Microsoft Internet Explorer / Edge (legacy)CVE-2013-1347

    Microsoft Internet Explorer Remote Code Execution Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  892. Rank 902

    Microsoft Internet Explorer / Edge (legacy)CVE-2013-3897

    Microsoft Internet Explorer Use-After-Free Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  893. Rank 903

    Adobe Acrobat / ReaderCVE-2014-0496

    Adobe Reader and Acrobat Use-After-Free Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  894. Rank 904

    Microsoft OfficeCVE-2015-2424

    Microsoft PowerPoint Memory Corruption Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  895. Rank 905

    Cisco IOS / IOS XECVE-2017-6736

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  896. Rank 906

    Cisco IOS / IOS XECVE-2017-6737

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  897. Rank 907

    Cisco IOS / IOS XECVE-2017-6738

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  898. Rank 908

    Cisco IOS / IOS XECVE-2017-6739

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  899. Rank 909

    Cisco IOS / IOS XECVE-2017-6740

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  900. Rank 910

    Cisco IOS / IOS XECVE-2017-6743

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  901. Rank 911

    Cisco IOS / IOS XECVE-2017-6744

    Cisco IOS Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  902. Rank 912

    Cisco IOS / IOS XE / IOS XRCVE-2018-0167

    Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  903. Rank 913

    Microsoft OfficeCVE-2019-1297

    Microsoft Excel Remote Code Execution Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  904. Rank 914

    Microsoft Internet Explorer / Edge (legacy)CVE-2017-0222

    Microsoft Internet Explorer Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Feb 25, 2022

  905. Rank 915

    Google Chrome / ChromiumCVE-2022-0609

    Google Chromium Animation Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Feb 15, 2022

  906. Rank 916

    Apple Safari / WebKitCVE-2022-22620

    Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Feb 11, 2022

  907. Rank 917

    Microsoft WindowsCVE-2017-0144

    Microsoft SMBv1 Remote Code Execution Vulnerability

    RansomwareCVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Feb 10, 2022

  908. Rank 918

    Microsoft WindowsCVE-2017-0145

    Microsoft SMBv1 Remote Code Execution Vulnerability

    RansomwareCVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Feb 10, 2022

  909. Rank 919

    Microsoft WindowsCVE-2017-8464

    Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Feb 10, 2022

  910. Rank 920

    Apache AirflowCVE-2020-11978

    Apache Airflow Command Injection

    CVE from 2020, added in 2022

    CVSS severity 8.8high

    Added Jan 18, 2022

  911. Rank 921

    Drupal CoreCVE-2020-13671

    Drupal core Un-restricted Upload of File

    CVE from 2020, added in 2022

    CVSS severity 8.8high

    Added Jan 18, 2022

  912. Rank 922

    Nagios XICVE-2021-25296

    Nagios XI OS Command Injection

    CVSS severity 8.8high

    Added Jan 18, 2022

  913. Rank 923

    Nagios XICVE-2021-25297

    Nagios XI OS Command Injection

    CVSS severity 8.8high

    Added Jan 18, 2022

  914. Rank 924

    Nagios XICVE-2021-25298

    Nagios XI OS Command Injection

    CVSS severity 8.8high

    Added Jan 18, 2022

  915. Rank 925

    Microsoft WindowsCVE-2013-3900

    Microsoft WinVerifyTrust function Remote Code Execution

    CVE from 2013, added in 2022

    CVSS severity 8.8high

    Added Jan 10, 2022

  916. Rank 926

    Google Chrome / ChromiumCVE-2020-6572

    Google Chrome Media Use-After-Free Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 8.8high

    Added Jan 10, 2022

  917. Rank 927

    FatPipe WARP, IPVPN, and MPVPN softwareCVE-2021-27860

    FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit

    CVSS severity 8.8high

    Added Jan 10, 2022

  918. Rank 928

    Google Chrome / ChromiumCVE-2021-4102

    Google Chromium V8 Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Dec 15, 2021

  919. Rank 929

    Red Hat JBoss SeamCVE-2010-1871

    Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability

    CVE from 2010, added in 2021

    CVSS severity 8.8high

    Added Dec 10, 2021

  920. Rank 930

    Microsoft Exchange ServerCVE-2021-42321

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 8.8high

    Added Nov 17, 2021

  921. Rank 931

    Microsoft OfficeCVE-2012-0158

    Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

    RansomwareCVE from 2012, added in 2021

    CVSS severity 8.8high

    Added Nov 3, 2021

  922. Rank 932

    Microsoft WindowsCVE-2014-1812

    Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability

    RansomwareCVE from 2014, added in 2021

    CVSS severity 8.8high

    Added Nov 3, 2021

  923. Rank 933

    Microsoft WindowsCVE-2017-0143

    Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability

    RansomwareCVE from 2017, added in 2021

    CVSS severity 8.8high

    Added Nov 3, 2021

  924. Rank 934

    Symantec Messaging GatewayCVE-2017-6327

    Symantec Messaging Gateway Remote Code Execution Vulnerability

    CVE from 2017, added in 2021

    CVSS severity 8.8high

    Added Nov 3, 2021

  925. Rank 935

    DotNetNuke (DNN)CVE-2017-9822

    DotNetNuke (DNN) Remote Code Execution Vulnerability

    RansomwareCVE from 2017, added in 2021

    CVSS severity 8.8high

    Added Nov 3, 2021

  926. Rank 936

    Microsoft OfficeCVE-2018-0798

    Microsoft Office Memory Corruption Vulnerability

    CVE from 2018, added in 2021

    CVSS severity 8.8high

    Added Nov 3, 2021

  927. Rank 937

    Microsoft Internet Explorer / Edge (legacy)CVE-2019-0541

    Microsoft MSHTML Remote Code Execution Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 8.8high

    Added Nov 3, 2021

  928. Rank 938

    Nagios XICVE-2019-15949

    Nagios XI Remote Code Execution Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 8.8high

    Added Nov 3, 2021

  929. Rank 939

    Mozilla FirefoxCVE-2019-17026

    Mozilla Firefox And Thunderbird Type Confusion Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 8.8high

    Added Nov 3, 2021

  930. Rank 940

    Atlassian Confluence Server / Data CenterCVE-2019-3398

    Atlassian Confluence Server and Data Center Path Traversal Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 8.8high

    Added Nov 3, 2021

  931. Rank 941

    ThinkPHPCVE-2019-9082

    ThinkPHP Remote Code Execution Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 8.8high

    Added Nov 3, 2021

  932. Rank 942

    Microsoft Exchange ServerCVE-2020-0688

    Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 8.8high

    Added Nov 3, 2021

  933. Rank 943

    Sonatype Nexus RepositoryCVE-2020-10199

    Sonatype Nexus Repository Remote Code Execution Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  934. Rank 944

    Microsoft WindowsCVE-2020-1020

    Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  935. Rank 945

    rConfigCVE-2020-10221

    rConfig OS Command Injection Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  936. Rank 946

    Microsoft Internet Explorer / Edge (legacy)CVE-2020-1380

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  937. Rank 947

    Google Chrome / ChromiumCVE-2020-16009

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  938. Rank 948

    Google Chrome / ChromiumCVE-2020-16013

    Google Chromium V8 Incorrect Implementation Vulnerabililty

    CVSS severity 8.8high

    Added Nov 3, 2021

  939. Rank 949

    Microsoft Exchange ServerCVE-2020-17144

    Microsoft Exchange Server Remote Code Execution Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  940. Rank 950

    Cisco IOS XRCVE-2020-3118

    Cisco IOS XR Software Discovery Protocol Format String Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  941. Rank 951

    Amcrest Cameras and Network Video Recorder (NVR)CVE-2020-5735

    Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  942. Rank 952

    Google Chrome / ChromiumCVE-2020-6418

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  943. Rank 953

    Trend Micro Apex One (ex-OfficeScan)CVE-2020-8467

    Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  944. Rank 954

    Trend Micro Apex One (ex-OfficeScan)CVE-2020-8468

    Trend Micro Multiple Products Content Validation Escape Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  945. Rank 955

    Apple iOS / iPadOSCVE-2020-9818

    Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  946. Rank 956

    Adobe Acrobat / ReaderCVE-2021-21017

    Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  947. Rank 957

    Google Chrome / ChromiumCVE-2021-21148

    Google Chromium V8 Heap Buffer Overflow Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  948. Rank 958

    Google Chrome / ChromiumCVE-2021-21166

    Google Chromium Race Condition Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  949. Rank 959

    Google Chrome / ChromiumCVE-2021-21193

    Google Chromium Blink Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  950. Rank 960

    Google Chrome / ChromiumCVE-2021-21206

    Google Chromium Blink Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  951. Rank 961

    Google Chrome / ChromiumCVE-2021-21220

    Google Chromium V8 Improper Input Validation Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  952. Rank 962

    Google Chrome / ChromiumCVE-2021-21224

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  953. Rank 963

    Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2021-22894

    Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  954. Rank 964

    Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2021-22899

    Ivanti Pulse Connect Secure Command Injection Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  955. Rank 965

    Microsoft Internet Explorer / Edge (legacy)CVE-2021-26411

    Microsoft Internet Explorer Memory Corruption Vulnerability

    Ransomware

    CVSS severity 8.8high

    Added Nov 3, 2021

  956. Rank 966

    Microsoft Internet Explorer / Edge (legacy)CVE-2021-27085

    Microsoft Internet Explorer Remote Code Execution Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  957. Rank 967

    Adobe Acrobat / ReaderCVE-2021-28550

    Adobe Acrobat and Reader Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  958. Rank 968

    Arm Mali GPU (pilote noyau)CVE-2021-28663

    Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  959. Rank 969

    Arm Mali GPU (pilote noyau)CVE-2021-28664

    Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  960. Rank 970

    Google Chrome / ChromiumCVE-2021-30551

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  961. Rank 971

    Google Chrome / ChromiumCVE-2021-30554

    Google Chromium WebGL Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  962. Rank 972

    Google Chrome / ChromiumCVE-2021-30563

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  963. Rank 973

    Google Chrome / ChromiumCVE-2021-30632

    Google Chromium V8 Out-of-Bounds Write Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  964. Rank 974

    Apple Safari / WebKitCVE-2021-30661

    Apple Multiple Products WebKit Storage Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  965. Rank 975

    Apple Safari / WebKitCVE-2021-30663

    Apple Multiple Products WebKit Integer Overflow Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  966. Rank 976

    Apple Safari / WebKitCVE-2021-30665

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  967. Rank 977

    Apple Safari / WebKitCVE-2021-30666

    Apple iOS WebKit Buffer Overflow Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  968. Rank 978

    Apple Safari / WebKitCVE-2021-30761

    Apple iOS WebKit Memory Corruption Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  969. Rank 979

    Apple Safari / WebKitCVE-2021-30762

    Apple iOS WebKit Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  970. Rank 980

    Apple Safari / WebKitCVE-2021-30858

    Apple iOS, iPadOS, macOS Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  971. Rank 981

    Microsoft WindowsCVE-2021-33742

    Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  972. Rank 982

    Microsoft WindowsCVE-2021-34448

    Microsoft Windows Scripting Engine Memory Corruption Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  973. Rank 983

    Microsoft WindowsCVE-2021-34527

    Microsoft Windows Print Spooler Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 8.8high

    Added Nov 3, 2021

  974. Rank 984

    Trend Micro Apex One (ex-OfficeScan)CVE-2021-36741

    Trend Micro Multiple Products Improper Input Validation Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  975. Rank 985

    Google Chrome / ChromiumCVE-2021-37975

    Google Chromium V8 Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  976. Rank 986

    Google Chrome / ChromiumCVE-2021-38003

    Google Chromium V8 Memory Corruption Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  977. Rank 987

    Cisco ASA / Firepower (FTD)CVE-2025-20362

    Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

    CVSS severity 8.6high

    Added Sep 25, 2025

  978. Rank 988

    Qualcomm Snapdragon (chipsets and drivers)CVE-2025-21479

    Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

    CVSS severity 8.6high

    Added Jun 3, 2025

  979. Rank 989

    Qualcomm Snapdragon (chipsets and drivers)CVE-2025-21480

    Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

    CVSS severity 8.6high

    Added Jun 3, 2025

  980. Rank 990

    reviewdog action-setup GitHub ActionCVE-2025-30154

    reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability

    CVSS severity 8.6high

    Added Mar 24, 2025

  981. Rank 991

    NAKIVO Backup and ReplicationCVE-2024-48248

    NAKIVO Backup and Replication Absolute Path Traversal Vulnerability

    CVSS severity 8.6high

    Added Mar 19, 2025

  982. Rank 992

    tj-actions changed-files GitHub ActionCVE-2025-30066

    tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability

    CVSS severity 8.6high

    Added Mar 18, 2025

  983. Rank 993

    Check Point Quantum Security GatewayCVE-2024-24919

    Check Point Quantum Security Gateways Information Disclosure Vulnerability

    Ransomware

    CVSS severity 8.6high

    Added May 30, 2024

  984. Rank 994

    Cisco ASA / Firepower (FTD)CVE-2024-20353

    Cisco ASA and FTD Denial of Service Vulnerability

    CVSS severity 8.6high

    Added Apr 24, 2024

  985. Rank 995

    Apple Safari / WebKitCVE-2023-32409

    Apple Multiple Products WebKit Sandbox Escape Vulnerability

    CVSS severity 8.6high

    Added May 22, 2023

  986. Rank 996

    Apple iOS / iPadOS / macOSCVE-2023-28206

    Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

    CVSS severity 8.6high

    Added Apr 10, 2023

  987. Rank 997

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2022-0028

    Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability

    CVSS severity 8.6high

    Added Aug 22, 2022

  988. Rank 998

    Cisco IOS / IOS XECVE-2018-0155

    Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.6high

    Added Mar 3, 2022

  989. Rank 999

    Cisco IOS / IOS XECVE-2018-0158

    Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.6high

    Added Mar 3, 2022

  990. Rank 1000

    Cisco IOS / IOS XECVE-2018-0172

    Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.6high

    Added Mar 3, 2022

  991. Rank 1001

    Cisco IOS / IOS XECVE-2018-0173

    Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.6high

    Added Mar 3, 2022

  992. Rank 1002

    Cisco IOS / IOS XECVE-2018-0174

    Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.6high

    Added Mar 3, 2022

  993. Rank 1003

    Cisco IOS XRCVE-2020-3566

    Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

    CVSS severity 8.6high

    Added Nov 3, 2021

  994. Rank 1004

    Cisco IOS XRCVE-2020-3569

    Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

    CVSS severity 8.6high

    Added Nov 3, 2021

  995. Rank 1005

    XStreamCVE-2021-39144

    XStream Remote Code Execution Vulnerability

    CVE from 2021, added in 2023

    CVSS severity 8.5high

    Added Mar 10, 2023

  996. Rank 1006

    ImageMagickCVE-2016-3714

    ImageMagick Improper Input Validation Vulnerability

    CVE from 2016, added in 2024

    CVSS severity 8.4high

    Added Sep 9, 2024

  997. Rank 1007

    Linux KernelCVE-2022-0185

    Linux Kernel Heap-Based Buffer Overflow Vulnerability

    CVE from 2022, added in 2024

    CVSS severity 8.4high

    Added Aug 21, 2024

  998. Rank 1008

    Justice AV Solutions (JAVS) JAVS ViewerCVE-2024-4978

    Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability

    CVSS severity 8.4high

    Added May 29, 2024

  999. Rank 1009

    Microsoft WindowsCVE-2023-29360

    Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability

    CVSS severity 8.4high

    Added Feb 29, 2024

  1000. Rank 1010

    Linux KernelCVE-2013-2094

    Linux Kernel Privilege Escalation Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 8.4high

    Added Sep 15, 2022

  1001. Rank 1011

    Qualcomm Snapdragon (chipsets and drivers)CVE-2013-2597

    Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 8.4high

    Added Sep 15, 2022

  1002. Rank 1012

    Google Chrome / ChromiumCVE-2025-2783

    Google Chromium Mojo Sandbox Escape Vulnerability

    CVSS severity 8.3high

    Added Mar 27, 2025

  1003. Rank 1013

    VMware (Broadcom) ESXiCVE-2025-22224

    VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

    CVSS severity 8.2high

    Added Mar 4, 2025

  1004. Rank 1014

    VMware (Broadcom) ESXiCVE-2025-22225

    VMware ESXi Arbitrary Write Vulnerability

    Ransomware

    CVSS severity 8.2high

    Added Mar 4, 2025

  1005. Rank 1015

    Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2024-21893

    Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

    Ransomware

    CVSS severity 8.2high

    Added Jan 31, 2024

  1006. Rank 1016

    Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2023-46805

    Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 8.2high

    Added Jan 10, 2024

  1007. Rank 1017

    Meta WhatsAppCVE-2019-18426

    WhatsApp Cross-Site Scripting Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 8.2high

    Added May 23, 2022

  1008. Rank 1018

    Microsoft WindowsCVE-2015-2546

    Microsoft Win32k Memory Corruption Vulnerability

    RansomwareCVE from 2015, added in 2022

    CVSS severity 8.2high

    Added Mar 15, 2022

  1009. Rank 1019

    Google Chrome / ChromiumCVE-2025-6554

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.1high

    Added Jul 2, 2025

  1010. Rank 1020

    FreeTypeCVE-2025-27363

    FreeType Out-of-Bounds Write Vulnerability

    CVSS severity 8.1high

    Added May 6, 2025

  1011. Rank 1021

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2025-24472

    Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 8.1high

    Added Mar 18, 2025

  1012. Rank 1022

    Craft CMSCVE-2025-23209

    Craft CMS Code Injection Vulnerability

    CVSS severity 8.1high

    Added Feb 20, 2025

  1013. Rank 1023

    Acclaim Systems USAHERDSCVE-2021-44207

    Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

    CVE from 2021, added in 2024

    CVSS severity 8.1high

    Added Dec 23, 2024

  1014. Rank 1024

    Microsoft WindowsCVE-2024-43573

    Microsoft Windows MSHTML Platform Spoofing Vulnerability

    CVSS severity 8.1high

    Added Oct 8, 2024

  1015. Rank 1025

    Microsoft WindowsCVE-2024-21412

    Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

    Ransomware

    CVSS severity 8.1high

    Added Feb 13, 2024

  1016. Rank 1026

    Laravel FrameworkCVE-2018-15133

    Laravel Deserialization of Untrusted Data Vulnerability

    CVE from 2018, added in 2024

    CVSS severity 8.1high

    Added Jan 16, 2024

  1017. Rank 1027

    Veritas Backup ExecCVE-2021-27876

    Veritas Backup Exec Agent File Access Vulnerability

    RansomwareCVE from 2021, added in 2023

    CVSS severity 8.1high

    Added Apr 7, 2023

  1018. Rank 1028

    NETGEAR Routers (DGN, WNR, Nighthawk)CVE-2017-5521

    NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.1high

    Added Sep 8, 2022

  1019. Rank 1029

    Microsoft Internet Explorer / Edge (legacy)CVE-2012-4969

    Microsoft Internet Explorer Use-After-Free Vulnerability

    CVE from 2012, added in 2022

    CVSS severity 8.1high

    Added Jun 8, 2022

  1020. Rank 1030

    Microsoft WindowsCVE-2017-0148

    Microsoft SMBv1 Server Remote Code Execution Vulnerability

    RansomwareCVE from 2017, added in 2022

    CVSS severity 8.1high

    Added Apr 6, 2022

  1021. Rank 1031

    Microsoft Internet Explorer / Edge (legacy)CVE-2017-0037

    Microsoft Edge and Internet Explorer Type Confusion Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.1high

    Added Mar 28, 2022

  1022. Rank 1032

    Elastic ElasticsearchCVE-2014-3120

    Elasticsearch Remote Code Execution Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 8.1high

    Added Mar 25, 2022

  1023. Rank 1033

    Apache TomcatCVE-2017-12615

    Apache Tomcat on Windows Remote Code Execution Vulnerability

    RansomwareCVE from 2017, added in 2022

    CVSS severity 8.1high

    Added Mar 25, 2022

  1024. Rank 1034

    Apache TomcatCVE-2017-12617

    Apache Tomcat Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.1high

    Added Mar 25, 2022

  1025. Rank 1035

    VMware (Broadcom) SD-WAN (VeloCloud)CVE-2018-6961

    VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.1high

    Added Mar 25, 2022

  1026. Rank 1036

    Drupal CoreCVE-2019-6340

    Drupal Core Remote Code Execution Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 8.1high

    Added Mar 25, 2022

  1027. Rank 1037

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2019-1579

    Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 8.1high

    Added Jan 10, 2022

  1028. Rank 1038

    Embedthis GoAheadCVE-2017-17562

    Embedthis GoAhead Remote Code Execution Vulnerability

    CVE from 2017, added in 2021

    CVSS severity 8.1high

    Added Dec 10, 2021

  1029. Rank 1039

    Apache StrutsCVE-2017-9805

    Apache Struts Deserialization of Untrusted Data Vulnerability

    CVE from 2017, added in 2021

    CVSS severity 8.1high

    Added Nov 3, 2021

  1030. Rank 1040

    Apache StrutsCVE-2018-11776

    Apache Struts Remote Code Execution Vulnerability

    CVE from 2018, added in 2021

    CVSS severity 8.1high

    Added Nov 3, 2021

  1031. Rank 1041

    Microsoft WindowsCVE-2020-0601

    Microsoft Windows CryptoAPI Spoofing Vulnerability

    CVSS severity 8.1high

    Added Nov 3, 2021

  1032. Rank 1042

    Mozilla FirefoxCVE-2020-6819

    Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

    CVSS severity 8.1high

    Added Nov 3, 2021

  1033. Rank 1043

    Mozilla FirefoxCVE-2020-6820

    Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

    CVSS severity 8.1high

    Added Nov 3, 2021

  1034. Rank 1044

    Citrix Session RecordingCVE-2024-8068

    Citrix Session Recording Improper Privilege Management Vulnerability

    CVSS severity 8.0high

    Added Aug 25, 2025

  1035. Rank 1045

    Citrix Session RecordingCVE-2024-8069

    Citrix Session Recording Deserialization of Untrusted Data Vulnerability

    CVSS severity 8.0high

    Added Aug 25, 2025

  1036. Rank 1046

    GitCVE-2025-48384

    Git Link Following Vulnerability

    CVSS severity 8.0high

    Added Aug 25, 2025

  1037. Rank 1047

    Microsoft Exchange ServerCVE-2022-41082

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 8.0high

    Added Sep 30, 2022

  1038. Rank 1048

    Cisco IOS / IOS XE / IOS XRCVE-2018-0175

    Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.0high

    Added Mar 3, 2022

  1039. Rank 1049

    Cisco RV routers (Small Business)CVE-2022-20703

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    CVSS severity 8.0high

    Added Mar 3, 2022

  1040. Rank 1050

    Cisco RV routers (Small Business)CVE-2022-20708

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    CVSS severity 8.0high

    Added Mar 3, 2022

  1041. Rank 1051

    SudoCVE-2025-32463

    Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

    CVSS severity 7.8high

    Added Sep 29, 2025

  1042. Rank 1052

    Linux KernelCVE-2025-38352

    Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

    CVSS severity 7.8high

    Added Sep 4, 2025

  1043. Rank 1053

    N-able N-centralCVE-2025-8875

    N-able N-Central Insecure Deserialization Vulnerability

    CVSS severity 7.8high

    Added Aug 13, 2025

  1044. Rank 1054

    Linux KernelCVE-2023-0386

    Linux Kernel Improper Ownership Management Vulnerability

    CVE from 2023, added in 2025

    CVSS severity 7.8high

    Added Jun 17, 2025

  1045. Rank 1055

    Microsoft WindowsCVE-2025-30400

    Microsoft Windows DWM Core Library Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added May 13, 2025

  1046. Rank 1056

    Microsoft WindowsCVE-2025-32701

    Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added May 13, 2025

  1047. Rank 1057

    Microsoft WindowsCVE-2025-32706

    Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added May 13, 2025

  1048. Rank 1058

    Microsoft WindowsCVE-2025-32709

    Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added May 13, 2025

  1049. Rank 1059

    Linux KernelCVE-2024-53197

    Linux Kernel Out-of-Bounds Access Vulnerability

    CVSS severity 7.8high

    Added Apr 9, 2025

  1050. Rank 1060

    Microsoft WindowsCVE-2025-29824

    Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Apr 8, 2025

  1051. Rank 1061

    Microsoft WindowsCVE-2025-24985

    Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

    CVSS severity 7.8high

    Added Mar 11, 2025

  1052. Rank 1062

    Microsoft WindowsCVE-2025-24993

    Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added Mar 11, 2025

  1053. Rank 1063

    Microsoft WindowsCVE-2018-8639

    Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

    RansomwareCVE from 2018, added in 2025

    CVSS severity 7.8high

    Added Mar 3, 2025

  1054. Rank 1064

    Microsoft WindowsCVE-2025-21418

    Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added Feb 11, 2025

  1055. Rank 1065

    Audinate Dante DiscoveryCVE-2022-23748

    Dante Discovery Process Control Vulnerability

    CVE from 2022, added in 2025

    CVSS severity 7.8high

    Added Feb 6, 2025

  1056. Rank 1066

    Linux KernelCVE-2024-53104

    Linux Kernel Out-of-Bounds Write Vulnerability

    CVSS severity 7.8high

    Added Feb 5, 2025

  1057. Rank 1067

    Microsoft WindowsCVE-2025-21333

    Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added Jan 14, 2025

  1058. Rank 1068

    Microsoft WindowsCVE-2025-21334

    Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added Jan 14, 2025

  1059. Rank 1069

    Microsoft WindowsCVE-2025-21335

    Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added Jan 14, 2025

  1060. Rank 1070

    Microsoft WindowsCVE-2024-35250

    Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

    CVSS severity 7.8high

    Added Dec 16, 2024

  1061. Rank 1071

    Microsoft WindowsCVE-2024-49138

    Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added Dec 10, 2024

  1062. Rank 1072

    Qualcomm Snapdragon (chipsets and drivers)CVE-2024-43047

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added Oct 8, 2024

  1063. Rank 1073

    Microsoft WindowsCVE-2024-43572

    Microsoft Windows Management Console Remote Code Execution Vulnerability

    CVSS severity 7.8high

    Added Oct 8, 2024

  1064. Rank 1074

    Microsoft WindowsCVE-2024-38014

    Microsoft Windows Installer Improper Privilege Management Vulnerability

    CVSS severity 7.8high

    Added Sep 10, 2024

  1065. Rank 1075

    Linux KernelCVE-2017-1000253

    Linux Kernel PIE Stack Buffer Corruption Vulnerability

    RansomwareCVE from 2017, added in 2024

    CVSS severity 7.8high

    Added Sep 9, 2024

  1066. Rank 1076

    Kingsoft WPS OfficeCVE-2024-7262

    Kingsoft WPS Office Path Traversal Vulnerability

    CVSS severity 7.8high

    Added Sep 3, 2024

  1067. Rank 1077

    Microsoft WindowsCVE-2024-38107

    Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Aug 13, 2024

  1068. Rank 1078

    Microsoft WindowsCVE-2024-38193

    Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Aug 13, 2024

  1069. Rank 1079

    Google AndroidCVE-2024-36971

    Android Kernel Remote Code Execution Vulnerability

    CVSS severity 7.8high

    Added Aug 7, 2024

  1070. Rank 1080

    Microsoft WindowsCVE-2024-38080

    Microsoft Windows Hyper-V Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Jul 9, 2024

  1071. Rank 1081

    Linux KernelCVE-2022-2586

    Linux Kernel Use-After-Free Vulnerability

    CVE from 2022, added in 2024

    CVSS severity 7.8high

    Added Jun 26, 2024

  1072. Rank 1082

    Microsoft WindowsCVE-2024-26169

    Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Jun 13, 2024

  1073. Rank 1083

    Google PixelCVE-2024-32896

    Android Pixel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Jun 13, 2024

  1074. Rank 1084

    Arm Mali GPU (pilote noyau)CVE-2024-4610

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added Jun 12, 2024

  1075. Rank 1085

    Linux KernelCVE-2024-1086

    Linux Kernel Use-After-Free Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added May 30, 2024

  1076. Rank 1086

    Microsoft WindowsCVE-2024-30051

    Microsoft DWM Core Library Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added May 14, 2024

  1077. Rank 1087

    Microsoft WindowsCVE-2022-38028

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    CVE from 2022, added in 2024

    CVSS severity 7.8high

    Added Apr 23, 2024

  1078. Rank 1088

    Google PixelCVE-2024-29748

    Android Pixel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Apr 4, 2024

  1079. Rank 1089

    Apple iOS / iPadOS / macOSCVE-2024-23225

    Apple Multiple Products Memory Corruption Vulnerability

    CVSS severity 7.8high

    Added Mar 6, 2024

  1080. Rank 1090

    Apple iOS / iPadOS / macOSCVE-2024-23296

    Apple Multiple Products Memory Corruption Vulnerability

    CVSS severity 7.8high

    Added Mar 6, 2024

  1081. Rank 1091

    Microsoft WindowsCVE-2024-21338

    Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Mar 4, 2024

  1082. Rank 1092

    Apple iOS / iPadOS / macOSCVE-2023-41990

    Apple Multiple Products Code Execution Vulnerability

    CVSS severity 7.8high

    Added Jan 8, 2024

  1083. Rank 1093

    Spreadsheet::ParseExcelCVE-2023-7101

    Spreadsheet::ParseExcel Remote Code Execution Vulnerability

    CVSS severity 7.8high

    Added Jan 2, 2024

  1084. Rank 1094

    Qualcomm Snapdragon (chipsets and drivers)CVE-2022-22071

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added Dec 5, 2023

  1085. Rank 1095

    Qualcomm Snapdragon (chipsets and drivers)CVE-2023-33063

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added Dec 5, 2023

  1086. Rank 1096

    Qualcomm Snapdragon (chipsets and drivers)CVE-2023-33106

    Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

    CVSS severity 7.8high

    Added Dec 5, 2023

  1087. Rank 1097

    Qualcomm Snapdragon (chipsets and drivers)CVE-2023-33107

    Qualcomm Multiple Chipsets Integer Overflow Vulnerability

    CVSS severity 7.8high

    Added Dec 5, 2023

  1088. Rank 1098

    GNU C Library (glibc)CVE-2023-4911

    GNU C Library Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added Nov 21, 2023

  1089. Rank 1099

    Microsoft WindowsCVE-2023-36033

    Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 14, 2023

  1090. Rank 1100

    Microsoft WindowsCVE-2023-36036

    Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 14, 2023

  1091. Rank 1101

    Adobe Acrobat / ReaderCVE-2023-21608

    Adobe Acrobat and Reader Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added Oct 10, 2023

  1092. Rank 1102

    Apple iOS / iPadOSCVE-2023-42824

    Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Oct 5, 2023

  1093. Rank 1103

    Apple iOS / iPadOS / macOSCVE-2023-41992

    Apple Multiple Products Kernel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Sep 25, 2023

  1094. Rank 1104

    Samsung Mobile Devices (Galaxy)CVE-2022-22265

    Samsung Mobile Devices Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added Sep 18, 2023

  1095. Rank 1105

    Adobe Acrobat / ReaderCVE-2023-26369

    Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability

    CVSS severity 7.8high

    Added Sep 14, 2023

  1096. Rank 1106

    Google AndroidCVE-2023-35674

    Android Framework Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Sep 13, 2023

  1097. Rank 1107

    Microsoft WindowsCVE-2023-36802

    Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Sep 12, 2023

  1098. Rank 1108

    Apple iOS / iPadOSCVE-2023-41061

    Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

    CVSS severity 7.8high

    Added Sep 11, 2023

  1099. Rank 1109

    Apple iOS / iPadOS / macOSCVE-2023-41064

    Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added Sep 11, 2023

  1100. Rank 1110

    RARLAB WinRARCVE-2023-38831

    RARLAB WinRAR Code Execution Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Aug 24, 2023

  1101. Rank 1111

    Microsoft WindowsCVE-2023-32046

    Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Jul 11, 2023

  1102. Rank 1112

    Microsoft WindowsCVE-2023-36874

    Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Jul 11, 2023

  1103. Rank 1113

    D-Link Access points (DAP, DWL)CVE-2019-20500

    D-Link DWL-2600AP Access Point Command Injection Vulnerability

    CVE from 2019, added in 2023

    CVSS severity 7.8high

    Added Jun 29, 2023

  1104. Rank 1114

    Samsung Mobile Devices (Galaxy)CVE-2021-25487

    Samsung Mobile Devices Out-of-Bounds Read Vulnerability

    CVE from 2021, added in 2023

    CVSS severity 7.8high

    Added Jun 29, 2023

  1105. Rank 1115

    Apple iOS / iPadOS / macOSCVE-2023-32434

    Apple Multiple Products Integer Overflow Vulnerability

    CVSS severity 7.8high

    Added Jun 23, 2023

  1106. Rank 1116

    Microsoft WindowsCVE-2016-0165

    Microsoft Win32k Privilege Escalation Vulnerability

    CVE from 2016, added in 2023

    CVSS severity 7.8high

    Added Jun 22, 2023

  1107. Rank 1117

    Red Hat PolkitCVE-2021-3560

    Red Hat Polkit Incorrect Authorization Vulnerability

    CVE from 2021, added in 2023

    CVSS severity 7.8high

    Added May 12, 2023

  1108. Rank 1118

    Microsoft WindowsCVE-2023-29336

    Microsoft Win32K Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added May 9, 2023

  1109. Rank 1119

    Apple macOS (OS X)CVE-2019-8526

    Apple macOS Use-After-Free Vulnerability

    CVE from 2019, added in 2023

    CVSS severity 7.8high

    Added Apr 17, 2023

  1110. Rank 1120

    Google AndroidCVE-2023-20963

    Android Framework Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Apr 13, 2023

  1111. Rank 1121

    Microsoft WindowsCVE-2023-28252

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Apr 11, 2023

  1112. Rank 1122

    Microsoft WindowsCVE-2019-1388

    Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2023

    CVSS severity 7.8high

    Added Apr 7, 2023

  1113. Rank 1123

    Apple iOS / iPadOS / macOSCVE-2021-30900

    Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

    CVE from 2021, added in 2023

    CVSS severity 7.8high

    Added Mar 30, 2023

  1114. Rank 1124

    Arm Mali GPU (pilote noyau)CVE-2022-22706

    Arm Mali GPU Kernel Driver Unspecified Vulnerability

    CVSS severity 7.8high

    Added Mar 30, 2023

  1115. Rank 1125

    Microsoft WindowsCVE-2023-21823

    Microsoft Windows Graphic Component Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Feb 14, 2023

  1116. Rank 1126

    Microsoft WindowsCVE-2023-23376

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Feb 14, 2023

  1117. Rank 1127

    Intel Ethernet Diagnostics Driver for WindowsCVE-2015-2291

    Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability

    RansomwareCVE from 2015, added in 2023

    CVSS severity 7.8high

    Added Feb 10, 2023

  1118. Rank 1128

    Microsoft WindowsCVE-2022-41073

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Nov 8, 2022

  1119. Rank 1129

    Microsoft WindowsCVE-2022-41125

    Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 8, 2022

  1120. Rank 1130

    Apple iOS / iPadOSCVE-2022-42827

    Apple iOS and iPadOS Out-of-Bounds Write Vulnerability

    CVSS severity 7.8high

    Added Oct 25, 2022

  1121. Rank 1131

    GIGABYTE App Center / AORUS (pilote GDrv)CVE-2018-19320

    GIGABYTE Multiple Products Unspecified Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 7.8high

    Added Oct 24, 2022

  1122. Rank 1132

    GIGABYTE App Center / AORUS (pilote GDrv)CVE-2018-19321

    GIGABYTE Multiple Products Privilege Escalation Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 7.8high

    Added Oct 24, 2022

  1123. Rank 1133

    GIGABYTE App Center / AORUS (pilote GDrv)CVE-2018-19322

    GIGABYTE Multiple Products Code Execution Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 7.8high

    Added Oct 24, 2022

  1124. Rank 1134

    Cisco AnyConnect Secure Mobility ClientCVE-2020-3433

    Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

    RansomwareCVE from 2020, added in 2022

    CVSS severity 7.8high

    Added Oct 24, 2022

  1125. Rank 1135

    Linux KernelCVE-2021-3493

    Linux Kernel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Oct 20, 2022

  1126. Rank 1136

    Microsoft WindowsCVE-2022-41033

    Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Oct 11, 2022

  1127. Rank 1137

    Microsoft WindowsCVE-2010-2568

    Microsoft Windows Remote Code Execution Vulnerability

    CVE from 2010, added in 2022

    CVSS severity 7.8high

    Added Sep 15, 2022

  1128. Rank 1138

    Linux KernelCVE-2013-2596

    Linux Kernel Integer Overflow Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 7.8high

    Added Sep 15, 2022

  1129. Rank 1139

    Apple iOS / iPadOS / macOSCVE-2022-32917

    Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

    CVSS severity 7.8high

    Added Sep 14, 2022

  1130. Rank 1140

    Microsoft WindowsCVE-2022-37969

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Sep 14, 2022

  1131. Rank 1141

    Google AndroidCVE-2011-1823

    Android OS Privilege Escalation Vulnerability

    CVE from 2011, added in 2022

    CVSS severity 7.8high

    Added Sep 8, 2022

  1132. Rank 1142

    PEAR Archive_TarCVE-2020-28949

    PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 7.8high

    Added Aug 25, 2022

  1133. Rank 1143

    Microsoft WindowsCVE-2022-21971

    Microsoft Windows Runtime Remote Code Execution Vulnerability

    CVSS severity 7.8high

    Added Aug 18, 2022

  1134. Rank 1144

    Apple iOS / iPadOS / macOSCVE-2022-32894

    Apple iOS and macOS Out-of-Bounds Write Vulnerability

    CVSS severity 7.8high

    Added Aug 18, 2022

  1135. Rank 1145

    Microsoft WindowsCVE-2022-34713

    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

    CVSS severity 7.8high

    Added Aug 9, 2022

  1136. Rank 1146

    Microsoft WindowsCVE-2022-22047

    Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Jul 12, 2022

  1137. Rank 1147

    Apple iOS / iPadOS / macOSCVE-2018-4344

    Apple Multiple Products Memory Corruption Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 7.8high

    Added Jun 27, 2022

  1138. Rank 1148

    Apple iOS / iPadOS / macOSCVE-2019-8605

    Apple Multiple Products Use-After-Free Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 7.8high

    Added Jun 27, 2022

  1139. Rank 1149

    Apple iOS / iPadOS / macOSCVE-2020-3837

    Apple Multiple Products Memory Corruption Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 7.8high

    Added Jun 27, 2022

  1140. Rank 1150

    Apple iOS / iPadOSCVE-2020-9907

    Apple Multiple Products Memory Corruption Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 7.8high

    Added Jun 27, 2022

  1141. Rank 1151

    Apple iOS / iPadOSCVE-2021-30983

    Apple iOS and iPadOS Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added Jun 27, 2022

  1142. Rank 1152

    Red Hat PolkitCVE-2021-4034

    Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Jun 27, 2022

  1143. Rank 1153

    Microsoft WindowsCVE-2022-30190

    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Jun 14, 2022

  1144. Rank 1154

    Adobe Acrobat / ReaderCVE-2007-5659

    Adobe Acrobat and Reader Buffer Overflow Vulnerability

    CVE from 2007, added in 2022

    CVSS severity 7.8high

    Added Jun 8, 2022

  1145. Rank 1155

    Microsoft OfficeCVE-2009-0557

    Microsoft Office Object Record Corruption Vulnerability

    CVE from 2009, added in 2022

    CVSS severity 7.8high

    Added Jun 8, 2022

  1146. Rank 1156

    Microsoft OfficeCVE-2009-0563

    Microsoft Office Buffer Overflow Vulnerability

    CVE from 2009, added in 2022

    CVSS severity 7.8high

    Added Jun 8, 2022

  1147. Rank 1157

    Adobe Flash PlayerCVE-2009-1862

    Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability

    CVE from 2009, added in 2022

    CVSS severity 7.8high

    Added Jun 8, 2022

  1148. Rank 1158

    Adobe Acrobat / ReaderCVE-2009-4324

    Adobe Acrobat and Reader Use-After-Free Vulnerability

    CVE from 2009, added in 2022

    CVSS severity 7.8high

    Added Jun 8, 2022

  1149. Rank 1159

    Microsoft OfficeCVE-2010-2572

    Microsoft PowerPoint Buffer Overflow Vulnerability

    CVE from 2010, added in 2022

    CVSS severity 7.8high

    Added Jun 8, 2022

  1150. Rank 1160

    Microsoft WindowsCVE-2012-0151

    Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

    CVE from 2012, added in 2022

    CVSS severity 7.8high

    Added Jun 8, 2022

  1151. Rank 1161

    Microsoft OfficeCVE-2013-1331

    Microsoft Office Buffer Overflow Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 7.8high

    Added Jun 8, 2022

  1152. Rank 1162

    Linux KernelCVE-2014-3153

    Linux Kernel Privilege Escalation Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 7.8high

    Added May 25, 2022

  1153. Rank 1163

    Microsoft WindowsCVE-2014-4077

    Microsoft IME Japanese Privilege Escalation Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 7.8high

    Added May 25, 2022

  1154. Rank 1164

    Microsoft WindowsCVE-2015-0016

    Microsoft Windows TS WebProxy Directory Traversal Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 7.8high

    Added May 25, 2022

  1155. Rank 1165

    Microsoft WindowsCVE-2015-1671

    Microsoft Windows Remote Code Execution Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 7.8high

    Added May 25, 2022

  1156. Rank 1166

    Microsoft WindowsCVE-2015-6175

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 7.8high

    Added May 25, 2022

  1157. Rank 1167

    Microsoft WindowsCVE-2016-3393

    Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 7.8high

    Added May 25, 2022

  1158. Rank 1168

    Apple iOS / iPadOSCVE-2016-4656

    Apple iOS Memory Corruption Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 7.8high

    Added May 24, 2022

  1159. Rank 1169

    Cisco ASA / Firepower (FTD)CVE-2016-6367

    Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 7.8high

    Added May 24, 2022

  1160. Rank 1170

    Microsoft WindowsCVE-2017-0005

    Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.8high

    Added May 24, 2022

  1161. Rank 1171

    Artifex GhostscriptCVE-2017-8291

    Artifex Ghostscript Type Confusion Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.8high

    Added May 24, 2022

  1162. Rank 1172

    Microsoft WindowsCVE-2018-8611

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 7.8high

    Added May 24, 2022

  1163. Rank 1173

    Microsoft WindowsCVE-2018-8589

    Microsoft Win32k Privilege Escalation Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 7.8high

    Added May 23, 2022

  1164. Rank 1174

    Microsoft WindowsCVE-2019-0880

    Microsoft Windows Privilege Escalation Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 7.8high

    Added May 23, 2022

  1165. Rank 1175

    Microsoft WindowsCVE-2019-1130

    Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 7.8high

    Added May 23, 2022

  1166. Rank 1176

    Microsoft WindowsCVE-2019-1385

    Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 7.8high

    Added May 23, 2022

  1167. Rank 1177

    Apple iOS / iPadOS / macOSCVE-2019-7286

    Apple Multiple Products Memory Corruption Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 7.8high

    Added May 23, 2022

  1168. Rank 1178

    Apple iOS / iPadOSCVE-2019-7287

    Apple iOS Memory Corruption Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 7.8high

    Added May 23, 2022

  1169. Rank 1179

    Microsoft WindowsCVE-2020-0638

    Microsoft Update Notification Manager Privilege Escalation Vulnerability

    RansomwareCVE from 2020, added in 2022

    CVSS severity 7.8high

    Added May 23, 2022

  1170. Rank 1180

    Microsoft WindowsCVE-2020-1027

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 7.8high

    Added May 23, 2022

  1171. Rank 1181

    Google AndroidCVE-2021-1048

    Android Kernel Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added May 23, 2022

  1172. Rank 1182

    Apple iOS / iPadOS / macOSCVE-2021-30883

    Apple Multiple Products Memory Corruption Vulnerability

    CVSS severity 7.8high

    Added May 23, 2022

  1173. Rank 1183

    Microsoft WindowsCVE-2014-4113

    Microsoft Win32k Privilege Escalation Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 7.8high

    Added May 4, 2022

  1174. Rank 1184

    Microsoft WindowsCVE-2021-40450

    Microsoft Win32k Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Apr 25, 2022

  1175. Rank 1185

    Microsoft WindowsCVE-2021-41357

    Microsoft Win32k Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Apr 25, 2022

  1176. Rank 1186

    Linux KernelCVE-2022-0847

    Linux Kernel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Apr 25, 2022

  1177. Rank 1187

    Microsoft WindowsCVE-2022-22718

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Apr 19, 2022

  1178. Rank 1188

    VMware (Broadcom) Workspace ONE Access / Identity ManagerCVE-2022-22960

    VMware Multiple Products Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Apr 15, 2022

  1179. Rank 1189

    Microsoft WindowsCVE-2022-24521

    Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Apr 13, 2022

  1180. Rank 1190

    Google PixelCVE-2021-39793

    Google Pixel Out-of-Bounds Write Vulnerability

    CVSS severity 7.8high

    Added Apr 11, 2022

  1181. Rank 1191

    SudoCVE-2021-3156

    Sudo Heap-Based Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added Apr 6, 2022

  1182. Rank 1192

    Apple macOS (OS X)CVE-2022-22675

    Apple macOS Out-of-Bounds Write Vulnerability

    CVSS severity 7.8high

    Added Apr 4, 2022

  1183. Rank 1193

    Dell dbutil DriverCVE-2021-21551

    Dell dbutil Driver Insufficient Access Control Vulnerability

    CVSS severity 7.8high

    Added Mar 31, 2022

  1184. Rank 1194

    Microsoft WindowsCVE-2021-34484

    Microsoft Windows User Profile Service Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Mar 31, 2022

  1185. Rank 1195

    Microsoft WindowsCVE-2010-4398

    Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

    CVE from 2010, added in 2022

    CVSS severity 7.8high

    Added Mar 28, 2022

  1186. Rank 1196

    Microsoft WindowsCVE-2011-2005

    Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

    CVE from 2011, added in 2022

    CVSS severity 7.8high

    Added Mar 28, 2022

  1187. Rank 1197

    Microsoft OfficeCVE-2012-2539

    Microsoft Word Remote Code Execution Vulnerability

    CVE from 2012, added in 2022

    CVSS severity 7.8high

    Added Mar 28, 2022

  1188. Rank 1198

    Microsoft WindowsCVE-2013-3660

    Microsoft Win32k Privilege Escalation Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 7.8high

    Added Mar 28, 2022

  1189. Rank 1199

    Microsoft WindowsCVE-2016-0040

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 7.8high

    Added Mar 28, 2022

  1190. Rank 1200

    Microsoft WindowsCVE-2016-0151

    Microsoft Windows CSRSS Security Feature Bypass Vulnerability

    RansomwareCVE from 2016, added in 2022

    CVSS severity 7.8high

    Added Mar 28, 2022

  1191. Rank 1201

    Microsoft WindowsCVE-2018-8405

    Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 7.8high

    Added Mar 28, 2022

  1192. Rank 1202

    Microsoft WindowsCVE-2018-8406

    Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 7.8high

    Added Mar 28, 2022

  1193. Rank 1203

    Microsoft WindowsCVE-2018-8440

    Microsoft Windows Privilege Escalation Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 7.8high

    Added Mar 28, 2022

  1194. Rank 1204

    Microsoft WindowsCVE-2021-34486

    Microsoft Windows Event Tracing Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Mar 28, 2022

  1195. Rank 1205

    Microsoft OfficeCVE-2021-38646

    Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Mar 28, 2022

  1196. Rank 1206

    EximCVE-2010-4345

    Exim Privilege Escalation Vulnerability

    CVE from 2010, added in 2022

    CVSS severity 7.8high

    Added Mar 25, 2022

  1197. Rank 1207

    Microsoft WindowsCVE-2022-21999

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Mar 25, 2022

  1198. Rank 1208

    Microsoft WindowsCVE-2016-3309

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    RansomwareCVE from 2016, added in 2022

    CVSS severity 7.8high

    Added Mar 15, 2022

  1199. Rank 1209

    Microsoft WindowsCVE-2017-0101

    Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

    RansomwareCVE from 2017, added in 2022

    CVSS severity 7.8high

    Added Mar 15, 2022

  1200. Rank 1210

    Microsoft WindowsCVE-2019-0543

    Microsoft Windows Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 7.8high

    Added Mar 15, 2022

  1201. Rank 1211

    Microsoft WindowsCVE-2019-0841

    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 7.8high

    Added Mar 15, 2022

  1202. Rank 1212

    Microsoft WindowsCVE-2019-1064

    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 7.8high

    Added Mar 15, 2022

  1203. Rank 1213

    Microsoft WindowsCVE-2019-1069

    Microsoft Task Scheduler Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 7.8high

    Added Mar 15, 2022

  1204. Rank 1214

    Microsoft WindowsCVE-2019-1129

    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 7.8high

    Added Mar 15, 2022

  1205. Rank 1215

    Microsoft WindowsCVE-2019-1132

    Microsoft Win32k Privilege Escalation Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 7.8high

    Added Mar 15, 2022

  1206. Rank 1216

    Microsoft WindowsCVE-2019-1253

    Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 7.8high

    Added Mar 15, 2022

  1207. Rank 1217

    Microsoft WindowsCVE-2019-1315

    Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 7.8high

    Added Mar 15, 2022

  1208. Rank 1218

    Microsoft WindowsCVE-2019-1322

    Microsoft Windows Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 7.8high

    Added Mar 15, 2022

  1209. Rank 1219

    Microsoft WindowsCVE-2019-1405

    Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 7.8high

    Added Mar 15, 2022

  1210. Rank 1220

    Microsoft WindowsCVE-2002-0367

    Microsoft Windows Privilege Escalation Vulnerability

    CVE from 2002, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1211. Rank 1221

    Microsoft WindowsCVE-2004-0210

    Microsoft Windows Privilege Escalation Vulnerability

    CVE from 2004, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1212. Rank 1222

    Adobe Acrobat / ReaderCVE-2008-2992

    Adobe Reader and Acrobat Input Validation Vulnerability

    RansomwareCVE from 2008, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1213. Rank 1223

    Microsoft WindowsCVE-2009-1123

    Microsoft Windows Improper Input Validation Vulnerability

    CVE from 2009, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1214. Rank 1224

    Microsoft OfficeCVE-2009-3129

    Microsoft Excel Featheader Record Memory Corruption Vulnerability

    CVE from 2009, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1215. Rank 1225

    Adobe Acrobat / ReaderCVE-2010-0188

    Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability

    RansomwareCVE from 2010, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1216. Rank 1226

    Microsoft WindowsCVE-2010-0232

    Microsoft Windows Kernel Exception Handler Vulnerability

    CVE from 2010, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1217. Rank 1227

    Microsoft OfficeCVE-2010-3333

    Microsoft Office Stack-based Buffer Overflow Vulnerability

    CVE from 2010, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1218. Rank 1228

    Adobe Acrobat / ReaderCVE-2013-0640

    Adobe Reader and Acrobat Memory Corruption Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1219. Rank 1229

    Adobe Acrobat / ReaderCVE-2013-0641

    Adobe Reader Buffer Overflow Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1220. Rank 1230

    Microsoft WindowsCVE-2013-5065

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1221. Rank 1231

    Microsoft WindowsCVE-2014-4114

    Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1222. Rank 1232

    Microsoft OfficeCVE-2015-1642

    Microsoft Office Memory Corruption Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1223. Rank 1233

    Microsoft WindowsCVE-2015-1701

    Microsoft Win32k Privilege Escalation Vulnerability

    RansomwareCVE from 2015, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1224. Rank 1234

    Microsoft WindowsCVE-2015-2387

    Microsoft ATM Font Driver Privilege Escalation Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1225. Rank 1235

    Microsoft OfficeCVE-2015-2545

    Microsoft Office Malformed EPS File Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1226. Rank 1236

    Microsoft WindowsCVE-2016-0099

    Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

    RansomwareCVE from 2016, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1227. Rank 1237

    Microsoft OfficeCVE-2016-7193

    Microsoft Office Memory Corruption Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1228. Rank 1238

    Microsoft OfficeCVE-2016-7262

    Microsoft Office Security Feature Bypass Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1229. Rank 1239

    Microsoft WindowsCVE-2017-0001

    Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1230. Rank 1240

    Microsoft OfficeCVE-2017-0261

    Microsoft Office Use-After-Free Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1231. Rank 1241

    Microsoft OfficeCVE-2017-11826

    Microsoft Office Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1232. Rank 1242

    Microsoft DefenderCVE-2017-8540

    Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  1233. Rank 1243

    Microsoft WindowsCVE-2021-41379

    Microsoft Windows Installer Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Mar 3, 2022

  1234. Rank 1244

    Cisco RV routers (Small Business)CVE-2022-20701

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added Mar 3, 2022

  1235. Rank 1245

    Microsoft WindowsCVE-2014-6352

    Microsoft Windows Code Injection Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 7.8high

    Added Feb 25, 2022

  1236. Rank 1246

    Microsoft OfficeCVE-2017-8570

    Microsoft Office Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.8high

    Added Feb 25, 2022

  1237. Rank 1247

    Microsoft WindowsCVE-2013-3906

    Microsoft Graphics Component Memory Corruption Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 7.8high

    Added Feb 15, 2022

  1238. Rank 1248

    Microsoft OfficeCVE-2014-1761

    Microsoft Word Memory Corruption Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 7.8high

    Added Feb 15, 2022

  1239. Rank 1249

    RARLAB WinRARCVE-2018-20250

    WinRAR Absolute Path Traversal Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 7.8high

    Added Feb 15, 2022

  1240. Rank 1250

    Apple macOS (OS X)CVE-2014-4404

    Apple OS X Heap-Based Buffer Overflow Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 7.8high

    Added Feb 10, 2022

  1241. Rank 1251

    Apple macOS (OS X)CVE-2015-1130

    Apple OS X Authentication Bypass Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 7.8high

    Added Feb 10, 2022

  1242. Rank 1252

    Microsoft OfficeCVE-2017-0262

    Microsoft Office Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.8high

    Added Feb 10, 2022

  1243. Rank 1253

    Microsoft WindowsCVE-2017-0263

    Microsoft Win32k Privilege Escalation Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.8high

    Added Feb 10, 2022

  1244. Rank 1254

    Microsoft WindowsCVE-2021-36934

    Microsoft Windows SAM Local Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Feb 10, 2022

  1245. Rank 1255

    Microsoft WindowsCVE-2022-21882

    Microsoft Win32k Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Feb 4, 2022

  1246. Rank 1256

    Microsoft WindowsCVE-2020-0787

    Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

    RansomwareCVE from 2020, added in 2022

    CVSS severity 7.8high

    Added Jan 28, 2022

  1247. Rank 1257

    Microsoft WindowsCVE-2018-8453

    Microsoft Win32k Privilege Escalation Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 7.8high

    Added Jan 21, 2022

  1248. Rank 1258

    systeminformation (npm) systeminformationCVE-2021-21315

    System Information Library for Node.JS Command Injection

    CVSS severity 7.8high

    Added Jan 18, 2022

  1249. Rank 1259

    Microsoft WindowsCVE-2019-1458

    Microsoft Win32k Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 7.8high

    Added Jan 10, 2022

  1250. Rank 1260

    Linux KernelCVE-2019-13272

    Linux Kernel Improper Privilege Management Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.8high

    Added Dec 10, 2021

  1251. Rank 1261

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2021-44168

    Fortinet FortiOS Arbitrary File Download

    CVSS severity 7.8high

    Added Dec 10, 2021

  1252. Rank 1262

    Qualcomm Snapdragon (chipsets and drivers)CVE-2020-11261

    Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

    CVSS severity 7.8high

    Added Dec 1, 2021

  1253. Rank 1263

    ExifToolCVE-2021-22204

    ExifTool Remote Code Execution Vulnerability

    CVSS severity 7.8high

    Added Nov 17, 2021

  1254. Rank 1264

    Microsoft WindowsCVE-2021-40449

    Microsoft Windows Win32k Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Nov 17, 2021

  1255. Rank 1265

    Microsoft OfficeCVE-2021-42292

    Microsoft Excel Security Feature Bypass

    CVSS severity 7.8high

    Added Nov 17, 2021

  1256. Rank 1266

    Microsoft OfficeCVE-2015-1641

    Microsoft Office Memory Corruption Vulnerability

    CVE from 2015, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1257. Rank 1267

    Microsoft WindowsCVE-2016-0167

    Microsoft Win32k Privilege Escalation Vulnerability

    RansomwareCVE from 2016, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1258. Rank 1268

    Microsoft WindowsCVE-2016-0185

    Microsoft Windows Media Center Remote Code Execution Vulnerability

    CVE from 2016, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1259. Rank 1269

    Microsoft OfficeCVE-2016-3235

    Microsoft Office OLE DLL Side Loading Vulnerability

    CVE from 2016, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1260. Rank 1270

    SolarWinds Virtualization ManagerCVE-2016-3643

    SolarWinds Virtualization Manager Privilege Escalation Vulnerability

    CVE from 2016, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1261. Rank 1271

    Microsoft WindowsCVE-2016-7255

    Microsoft Win32k Privilege Escalation Vulnerability

    RansomwareCVE from 2016, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1262. Rank 1272

    Microsoft OfficeCVE-2017-0199

    Microsoft Office and WordPad Remote Code Execution Vulnerability

    RansomwareCVE from 2017, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1263. Rank 1273

    Microsoft OfficeCVE-2017-11774

    Microsoft Office Outlook Security Feature Bypass Vulnerability

    CVE from 2017, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1264. Rank 1274

    Microsoft OfficeCVE-2017-11882

    Microsoft Office Memory Corruption Vulnerability

    RansomwareCVE from 2017, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1265. Rank 1275

    Roundcube WebmailCVE-2017-16651

    Roundcube Webmail File Disclosure Vulnerability

    CVE from 2017, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1266. Rank 1276

    Microsoft .NET / Visual StudioCVE-2017-8759

    Microsoft .NET Framework Remote Code Execution Vulnerability

    CVE from 2017, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1267. Rank 1277

    Microsoft OfficeCVE-2018-0802

    Microsoft Office Memory Corruption Vulnerability

    RansomwareCVE from 2018, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1268. Rank 1278

    Apache HTTP ServerCVE-2019-0211

    Apache HTTP Server Privilege Escalation Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1269. Rank 1279

    Microsoft WindowsCVE-2019-0797

    Microsoft Win32k Privilege Escalation Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1270. Rank 1280

    Microsoft WindowsCVE-2019-0803

    Microsoft Win32k Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1271. Rank 1281

    Microsoft WindowsCVE-2019-0808

    Microsoft Win32k Privilege Escalation Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1272. Rank 1282

    Microsoft WindowsCVE-2019-0859

    Microsoft Win32k Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1273. Rank 1283

    Microsoft WindowsCVE-2019-0863

    Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1274. Rank 1284

    Microsoft WindowsCVE-2019-1214

    Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1275. Rank 1285

    Microsoft WindowsCVE-2019-1215

    Microsoft Windows Privilege Escalation Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1276. Rank 1286

    Docker DesktopCVE-2019-15752

    Docker Desktop Community Edition Privilege Escalation Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1277. Rank 1287

    Google AndroidCVE-2019-2215

    Android Kernel Use-After-Free Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  1278. Rank 1288

    Google AndroidCVE-2020-0041

    Android Kernel Out-of-Bounds Write Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1279. Rank 1289

    MediaTek ChipsetsCVE-2020-0069

    Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1280. Rank 1290

    Microsoft WindowsCVE-2020-0683

    Microsoft Windows Installer Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1281. Rank 1291

    Microsoft WindowsCVE-2020-0938

    Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1282. Rank 1292

    Microsoft WindowsCVE-2020-0986

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1283. Rank 1293

    Microsoft WindowsCVE-2020-1054

    Microsoft Win32k Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1284. Rank 1294

    Microsoft SharePoint ServerCVE-2020-1147

    Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1285. Rank 1295

    Microsoft WindowsCVE-2020-17087

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1286. Rank 1296

    Trend Micro Apex One (ex-OfficeScan)CVE-2020-24557

    Trend Micro Multiple Products Improper Access Control Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1287. Rank 1297

    Apple iOS / iPadOS / macOSCVE-2020-27930

    Apple Multiple Products Memory Corruption Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1288. Rank 1298

    Apple iOS / iPadOS / macOSCVE-2020-27932

    Apple Multiple Products Type Confusion Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1289. Rank 1299

    VMware (Broadcom) Workstation / FusionCVE-2020-3950

    VMware Multiple Products Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1290. Rank 1300

    EyesOfNetworkCVE-2020-8655

    EyesOfNetwork Improper Privilege Management Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1291. Rank 1301

    Apple iOS / iPadOS / macOSCVE-2020-9859

    Apple Multiple Products Code Execution Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1292. Rank 1302

    Microsoft DefenderCVE-2021-1647

    Microsoft Defender Remote Code Execution Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1293. Rank 1303

    Microsoft WindowsCVE-2021-1675

    Microsoft Windows Print Spooler Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Nov 3, 2021

  1294. Rank 1304

    Microsoft WindowsCVE-2021-1732

    Microsoft Win32k Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Nov 3, 2021

  1295. Rank 1305

    Qualcomm Snapdragon (chipsets and drivers)CVE-2021-1905

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1296. Rank 1306

    McAfee Total Protection (MTP)CVE-2021-23874

    McAfee Total Protection (MTP) Improper Privilege Management Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1297. Rank 1307

    Microsoft Exchange ServerCVE-2021-26857

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Nov 3, 2021

  1298. Rank 1308

    Microsoft Exchange ServerCVE-2021-26858

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Nov 3, 2021

  1299. Rank 1309

    Microsoft Exchange ServerCVE-2021-27065

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Nov 3, 2021

  1300. Rank 1310

    Kiteworks (Accellion) FTA (File Transfer Appliance)CVE-2021-27102

    Accellion FTA OS Command Injection Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Nov 3, 2021

  1301. Rank 1311

    Microsoft WindowsCVE-2021-28310

    Microsoft Win32k Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1302. Rank 1312

    Apple macOS (OS X)CVE-2021-30713

    Apple macOS Unspecified Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1303. Rank 1313

    Apple iOS / iPadOS / macOSCVE-2021-30807

    Apple Multiple Products Memory Corruption Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1304. Rank 1314

    Apple iOS / iPadOS / macOSCVE-2021-30860

    Apple Multiple Products Integer Overflow Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1305. Rank 1315

    Apple iOS / iPadOS / macOSCVE-2021-30869

    Apple iOS, iPadOS, and macOS Type Confusion Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1306. Rank 1316

    Microsoft WindowsCVE-2021-31199

    Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1307. Rank 1317

    Microsoft WindowsCVE-2021-31201

    Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1308. Rank 1318

    Microsoft WindowsCVE-2021-31956

    Microsoft Windows NTFS Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1309. Rank 1319

    Microsoft WindowsCVE-2021-31979

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1310. Rank 1320

    Microsoft WindowsCVE-2021-33739

    Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1311. Rank 1321

    Microsoft WindowsCVE-2021-33771

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1312. Rank 1322

    Trend Micro Apex One (ex-OfficeScan)CVE-2021-36742

    Trend Micro Multiple Products Improper Input Validation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1313. Rank 1323

    Microsoft WindowsCVE-2021-36948

    Microsoft Windows Update Medic Service Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1314. Rank 1324

    Microsoft WindowsCVE-2021-36955

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Nov 3, 2021

  1315. Rank 1325

    Microsoft Open Management Infrastructure (OMI)CVE-2021-38645

    Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1316. Rank 1326

    Microsoft Open Management Infrastructure (OMI)CVE-2021-38648

    Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1317. Rank 1327

    Microsoft Open Management Infrastructure (OMI)CVE-2021-38649

    Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  1318. Rank 1328

    Microsoft Internet Explorer / Edge (legacy)CVE-2021-40444

    Microsoft MSHTML Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Nov 3, 2021

  1319. Rank 1329

    Cisco IOS / IOS XECVE-2025-20352

    Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

    CVSS severity 7.7high

    Added Sep 29, 2025

  1320. Rank 1330

    Microsoft WindowsCVE-2024-21351

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    CVSS severity 7.6high

    Added Feb 13, 2024

  1321. Rank 1331

    D-Link DCS camerasCVE-2020-25078

    D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability

    CVE from 2020, added in 2025

    CVSS severity 7.5high

    Added Aug 5, 2025

  1322. Rank 1332

    SysAid On-PremCVE-2025-2775

    SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

    CVSS severity 7.5high

    Added Jul 22, 2025

  1323. Rank 1333

    Citrix NetScaler ADC / GatewayCVE-2025-5777

    Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

    Ransomware

    CVSS severity 7.5high

    Added Jul 10, 2025

  1324. Rank 1334

    Ruby on RailsCVE-2019-5418

    Rails Ruby on Rails Path Traversal Vulnerability

    CVE from 2019, added in 2025

    CVSS severity 7.5high

    Added Jul 7, 2025

  1325. Rank 1335

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2019-9621

    Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

    CVE from 2019, added in 2025

    CVSS severity 7.5high

    Added Jul 7, 2025

  1326. Rank 1336

    Qualcomm Snapdragon (chipsets and drivers)CVE-2025-27038

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    CVSS severity 7.5high

    Added Jun 3, 2025

  1327. Rank 1337

    ZKTeco BioTimeCVE-2023-38950

    ZKTeco BioTime Path Traversal Vulnerability

    CVE from 2023, added in 2025

    CVSS severity 7.5high

    Added May 19, 2025

  1328. Rank 1338

    Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron)CVE-2025-4427

    Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

    CVSS severity 7.5high

    Added May 19, 2025

  1329. Rank 1339

    Microsoft WindowsCVE-2025-30397

    Microsoft Windows Scripting Engine Type Confusion Vulnerability

    CVSS severity 7.5high

    Added May 13, 2025

  1330. Rank 1340

    SAP NetWeaverCVE-2017-12637

    SAP NetWeaver Directory Traversal Vulnerability

    CVE from 2017, added in 2025

    CVSS severity 7.5high

    Added Mar 19, 2025

  1331. Rank 1341

    Ivanti Endpoint Manager (EPM)CVE-2024-13159

    Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

    CVSS severity 7.5high

    Added Mar 10, 2025

  1332. Rank 1342

    Ivanti Endpoint Manager (EPM)CVE-2024-13160

    Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

    CVSS severity 7.5high

    Added Mar 10, 2025

  1333. Rank 1343

    Ivanti Endpoint Manager (EPM)CVE-2024-13161

    Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

    CVSS severity 7.5high

    Added Mar 10, 2025

  1334. Rank 1344

    Advantive VeraCoreCVE-2025-25181

    Advantive VeraCore SQL Injection Vulnerability

    CVSS severity 7.5high

    Added Mar 10, 2025

  1335. Rank 1345

    SimpleHelpCVE-2024-57727

    SimpleHelp Path Traversal Vulnerability

    Ransomware

    CVSS severity 7.5high

    Added Feb 13, 2025

  1336. Rank 1346

    Microsoft .NET / Visual StudioCVE-2024-29059

    Microsoft .NET Framework Information Disclosure Vulnerability

    CVSS severity 7.5high

    Added Feb 4, 2025

  1337. Rank 1347

    Apache OFBizCVE-2024-45195

    Apache OFBiz Forced Browsing Vulnerability

    CVSS severity 7.5high

    Added Feb 4, 2025

  1338. Rank 1348

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2024-3393

    Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

    CVSS severity 7.5high

    Added Dec 30, 2024

  1339. Rank 1349

    North Grid ProselfCVE-2023-45727

    North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability

    CVSS severity 7.5high

    Added Dec 3, 2024

  1340. Rank 1350

    Oracle Agile PLMCVE-2024-21287

    Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

    CVSS severity 7.5high

    Added Nov 21, 2024

  1341. Rank 1351

    Palo Alto Networks ExpeditionCVE-2024-9463

    Palo Alto Networks Expedition OS Command Injection Vulnerability

    CVSS severity 7.5high

    Added Nov 14, 2024

  1342. Rank 1352

    MetabaseCVE-2021-41277

    Metabase GeoJSON API Local File Inclusion Vulnerability

    CVE from 2021, added in 2024

    CVSS severity 7.5high

    Added Nov 12, 2024

  1343. Rank 1353

    DrayTek VigorConnectCVE-2021-20123

    Draytek VigorConnect Path Traversal Vulnerability

    CVE from 2021, added in 2024

    CVSS severity 7.5high

    Added Sep 3, 2024

  1344. Rank 1354

    DrayTek VigorConnectCVE-2021-20124

    Draytek VigorConnect Path Traversal Vulnerability

    CVE from 2021, added in 2024

    CVSS severity 7.5high

    Added Sep 3, 2024

  1345. Rank 1355

    Microsoft WindowsCVE-2024-38178

    Microsoft Windows Scripting Engine Memory Corruption Vulnerability

    CVSS severity 7.5high

    Added Aug 13, 2024

  1346. Rank 1356

    SolarWinds Serv-UCVE-2024-28995

    SolarWinds Serv-U Path Traversal Vulnerability

    CVSS severity 7.5high

    Added Jul 17, 2024

  1347. Rank 1357

    Microsoft WindowsCVE-2024-38112

    Microsoft Windows MSHTML Platform Spoofing Vulnerability

    CVSS severity 7.5high

    Added Jul 9, 2024

  1348. Rank 1358

    Apache FlinkCVE-2020-17519

    Apache Flink Improper Access Control Vulnerability

    CVE from 2020, added in 2024

    CVSS severity 7.5high

    Added May 23, 2024

  1349. Rank 1359

    Cisco ASA / Firepower (FTD)CVE-2020-3259

    Cisco ASA and FTD Information Disclosure Vulnerability

    RansomwareCVE from 2020, added in 2024

    CVSS severity 7.5high

    Added Feb 15, 2024

  1350. Rank 1360

    Citrix NetScaler ADC / GatewayCVE-2023-6549

    Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

    CVSS severity 7.5high

    Added Jan 17, 2024

  1351. Rank 1361

    ownCloud ServerCVE-2023-49103

    ownCloud graphapi Information Disclosure Vulnerability

    CVSS severity 7.5high

    Added Nov 30, 2023

  1352. Rank 1362

    Protocoles (IETF) Service Location Protocol (SLP)CVE-2023-29552

    Service Location Protocol (SLP) Denial-of-Service Vulnerability

    CVSS severity 7.5high

    Added Nov 8, 2023

  1353. Rank 1363

    Citrix NetScaler ADC / GatewayCVE-2023-4966

    Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

    Ransomware

    CVSS severity 7.5high

    Added Oct 18, 2023

  1354. Rank 1364

    Protocoles (IETF) HTTP/2CVE-2023-44487

    HTTP/2 Rapid Reset Attack Vulnerability

    CVSS severity 7.5high

    Added Oct 10, 2023

  1355. Rank 1365

    Ignite Realtime OpenfireCVE-2023-32315

    Ignite Realtime Openfire Path Traversal Vulnerability

    CVSS severity 7.5high

    Added Aug 24, 2023

  1356. Rank 1366

    Veeam Backup & ReplicationCVE-2023-27532

    Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

    Ransomware

    CVSS severity 7.5high

    Added Aug 22, 2023

  1357. Rank 1367

    Microsoft .NET / Visual StudioCVE-2023-38180

    Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability

    CVSS severity 7.5high

    Added Aug 9, 2023

  1358. Rank 1368

    Adobe ColdFusionCVE-2023-29298

    Adobe ColdFusion Improper Access Control Vulnerability

    CVSS severity 7.5high

    Added Jul 20, 2023

  1359. Rank 1369

    Adobe ColdFusionCVE-2023-38205

    Adobe ColdFusion Improper Access Control Vulnerability

    CVSS severity 7.5high

    Added Jul 20, 2023

  1360. Rank 1370

    Microsoft WindowsCVE-2023-36884

    Microsoft Windows Search Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 7.5high

    Added Jul 17, 2023

  1361. Rank 1371

    Microsoft OutlookCVE-2023-35311

    Microsoft Outlook Security Feature Bypass Vulnerability

    CVSS severity 7.5high

    Added Jul 11, 2023

  1362. Rank 1372

    Mozilla FirefoxCVE-2016-9079

    Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability

    CVE from 2016, added in 2023

    CVSS severity 7.5high

    Added Jun 22, 2023

  1363. Rank 1373

    Cisco IOS / IOS XE / IOS XRCVE-2016-6415

    Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

    CVE from 2016, added in 2023

    CVSS severity 7.5high

    Added May 19, 2023

  1364. Rank 1374

    Jenkins CoreCVE-2015-5317

    Jenkins User Interface (UI) Information Disclosure Vulnerability

    CVE from 2015, added in 2023

    CVSS severity 7.5high

    Added May 12, 2023

  1365. Rank 1375

    Oracle WebLogic ServerCVE-2023-21839

    Oracle WebLogic Server Unspecified Vulnerability

    CVSS severity 7.5high

    Added May 1, 2023

  1366. Rank 1376

    MinIOCVE-2023-28432

    MinIO Information Disclosure Vulnerability

    CVSS severity 7.5high

    Added Apr 21, 2023

  1367. Rank 1377

    ZK Framework AuUploaderCVE-2022-36537

    ZK Framework AuUploader Unspecified Vulnerability

    Ransomware

    CVSS severity 7.5high

    Added Feb 27, 2023

  1368. Rank 1378

    TerraMaster OSCVE-2022-24990

    TerraMaster OS Remote Command Execution Vulnerability

    Ransomware

    CVSS severity 7.5high

    Added Feb 10, 2023

  1369. Rank 1379

    PEAR Archive_TarCVE-2020-36193

    PEAR Archive_Tar Improper Link Resolution Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 7.5high

    Added Aug 25, 2022

  1370. Rank 1380

    Apple iOS / iPadOS / macOSCVE-2021-31010

    Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

    CVSS severity 7.5high

    Added Aug 25, 2022

  1371. Rank 1381

    RARLAB UnRARCVE-2022-30333

    RARLAB UnRAR Directory Traversal Vulnerability

    Ransomware

    CVSS severity 7.5high

    Added Aug 9, 2022

  1372. Rank 1382

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2022-27924

    Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

    Ransomware

    CVSS severity 7.5high

    Added Aug 4, 2022

  1373. Rank 1383

    Red Hat JBoss Application Server / EAPCVE-2010-1428

    Red Hat JBoss Information Disclosure Vulnerability

    RansomwareCVE from 2010, added in 2022

    CVSS severity 7.5high

    Added May 25, 2022

  1374. Rank 1384

    Microsoft WindowsCVE-2017-0147

    Microsoft Windows SMBv1 Information Disclosure Vulnerability

    RansomwareCVE from 2017, added in 2022

    CVSS severity 7.5high

    Added May 24, 2022

  1375. Rank 1385

    OpenSSLCVE-2014-0160

    OpenSSL Information Disclosure Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 7.5high

    Added May 4, 2022

  1376. Rank 1386

    Trihedral VTScada (formerly VTS)CVE-2016-4523

    Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 7.5high

    Added Apr 15, 2022

  1377. Rank 1387

    Microsoft Active DirectoryCVE-2021-42278

    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    Ransomware

    CVSS severity 7.5high

    Added Apr 11, 2022

  1378. Rank 1388

    Microsoft Internet Explorer / Edge (legacy)CVE-2016-0189

    Microsoft Internet Explorer Memory Corruption Vulnerability

    RansomwareCVE from 2016, added in 2022

    CVSS severity 7.5high

    Added Mar 28, 2022

  1379. Rank 1389

    SonicWall SMA 100 (ex-SRA)CVE-2019-7483

    SonicWall SMA100 Directory Traversal Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 7.5high

    Added Mar 28, 2022

  1380. Rank 1390

    Cisco IOS XRCVE-2010-3035

    Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

    CVE from 2010, added in 2022

    CVSS severity 7.5high

    Added Mar 25, 2022

  1381. Rank 1391

    Ruby on RailsCVE-2014-0130

    Ruby on Rails Directory Traversal Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 7.5high

    Added Mar 25, 2022

  1382. Rank 1392

    Cisco Prime Data Center Network Manager (DCNM)CVE-2015-0666

    Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 7.5high

    Added Mar 25, 2022

  1383. Rank 1393

    TP-Link Archer (Wi-Fi routers)CVE-2015-3035

    TP-Link Multiple Archer Devices Directory Traversal Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 7.5high

    Added Mar 25, 2022

  1384. Rank 1394

    Ruby on RailsCVE-2016-0752

    Ruby on Rails Directory Traversal Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 7.5high

    Added Mar 25, 2022

  1385. Rank 1395

    Microsoft Internet Explorer / Edge (legacy)CVE-2018-8373

    Microsoft Scripting Engine Memory Corruption Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 7.5high

    Added Mar 25, 2022

  1386. Rank 1396

    Spring Cloud ConfigCVE-2020-5410

    VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 7.5high

    Added Mar 25, 2022

  1387. Rank 1397

    Adobe ColdFusionCVE-2013-0629

    Adobe ColdFusion Directory Traversal Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 7.5high

    Added Mar 7, 2022

  1388. Rank 1398

    Adobe ColdFusionCVE-2013-0631

    Adobe ColdFusion Information Disclosure Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 7.5high

    Added Mar 7, 2022

  1389. Rank 1399

    Siemens SIMATIC CPCVE-2016-8562

    Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  1390. Rank 1400

    Cisco IOS / IOS XECVE-2017-12231

    Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  1391. Rank 1401

    Cisco IOS / IOS XECVE-2017-12233

    Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  1392. Rank 1402

    Cisco IOS / IOS XECVE-2017-12234

    Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  1393. Rank 1403

    Cisco IOS / IOS XECVE-2017-12235

    Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  1394. Rank 1404

    Cisco IOS / IOS XECVE-2017-12237

    Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  1395. Rank 1405

    Cisco IOS / IOS XECVE-2017-6627

    Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  1396. Rank 1406

    Cisco IOS / IOS XECVE-2018-0154

    Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  1397. Rank 1407

    Cisco IOS / IOS XECVE-2018-0156

    Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  1398. Rank 1408

    Cisco IOS / IOS XECVE-2018-0159

    Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  1399. Rank 1409

    ChakraCore scripting engineCVE-2018-8298

    ChakraCore Scripting Engine Type Confusion Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  1400. Rank 1410

    Microsoft WindowsCVE-2018-8174

    Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 7.5high

    Added Feb 15, 2022

  1401. Rank 1411

    Microsoft Internet Explorer / Edge (legacy)CVE-2019-0752

    Microsoft Internet Explorer Type Confusion Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 7.5high

    Added Feb 15, 2022

  1402. Rank 1412

    Oracle WebLogic ServerCVE-2017-10271

    Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

    RansomwareCVE from 2017, added in 2022

    CVSS severity 7.5high

    Added Feb 10, 2022

  1403. Rank 1413

    Apache Struts 1CVE-2006-1547

    Apache Struts 1 ActionForm Denial-of-Service Vulnerability

    CVE from 2006, added in 2022

    CVSS severity 7.5high

    Added Jan 21, 2022

  1404. Rank 1414

    Oracle Business Intelligence (OBIEE / BI Publisher)CVE-2020-14864

    Oracle Business Intelligence Enterprise Edition Path Transversal

    CVE from 2020, added in 2022

    CVSS severity 7.5high

    Added Jan 18, 2022

  1405. Rank 1415

    VMware (Broadcom) Aria Operations (ex-vRealize Operations)CVE-2021-21975

    VMware Server Side Request Forgery in vRealize Operations Manager API

    Ransomware

    CVSS severity 7.5high

    Added Jan 18, 2022

  1406. Rank 1416

    Microsoft Exchange ServerCVE-2021-33766

    Microsoft Exchange Server Information Disclosure

    CVSS severity 7.5high

    Added Jan 18, 2022

  1407. Rank 1417

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2018-13382

    Fortinet FortiOS and FortiProxy Improper Authorization

    RansomwareCVE from 2018, added in 2022

    CVSS severity 7.5high

    Added Jan 10, 2022

  1408. Rank 1418

    SAP NetWeaverCVE-2016-3976

    SAP NetWeaver Directory Traversal Vulnerability

    CVE from 2016, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  1409. Rank 1419

    Cisco ASA / Firepower (FTD)CVE-2018-0296

    Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability

    CVE from 2018, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  1410. Rank 1420

    DotNetNuke (DNN)CVE-2018-15811

    DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

    CVE from 2018, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  1411. Rank 1421

    DotNetNuke (DNN)CVE-2018-18325

    DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

    CVE from 2018, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  1412. Rank 1422

    Microsoft Internet Explorer / Edge (legacy)CVE-2018-8653

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    CVE from 2018, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  1413. Rank 1423

    Citrix StoreFrontCVE-2019-13608

    Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  1414. Rank 1424

    Microsoft Internet Explorer / Edge (legacy)CVE-2019-1367

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  1415. Rank 1425

    Microsoft Internet Explorer / Edge (legacy)CVE-2019-1429

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  1416. Rank 1426

    Cisco RV routers (Small Business)CVE-2019-1653

    Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  1417. Rank 1427

    Apache SolrCVE-2019-17558

    Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  1418. Rank 1428

    Trend Micro Apex One (ex-OfficeScan)CVE-2019-18187

    Trend Micro OfficeScan Directory Traversal Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  1419. Rank 1429

    Netis WF2419 DevicesCVE-2019-19356

    Netis WF2419 Devices Remote Code Execution Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  1420. Rank 1430

    TVT NVMS-1000CVE-2019-20085

    TVT NVMS-1000 Directory Traversal Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  1421. Rank 1431

    Apple iOS / iPadOS / macOSCVE-2019-6223

    Apple iOS and macOS Group Facetime Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  1422. Rank 1432

    SonicWall SMA 100 (ex-SRA)CVE-2019-7481

    SonicWall SMA100 SQL Injection Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  1423. Rank 1433

    Microsoft Internet Explorer / Edge (legacy)CVE-2020-0674

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    CVSS severity 7.5high

    Added Nov 3, 2021

  1424. Rank 1434

    Microsoft Internet Explorer / Edge (legacy)CVE-2020-0878

    Microsoft Edge and Internet Explorer Memory Corruption Vulnerability

    Ransomware

    CVSS severity 7.5high

    Added Nov 3, 2021

  1425. Rank 1435

    Microsoft Internet Explorer / Edge (legacy)CVE-2020-0968

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Ransomware

    CVSS severity 7.5high

    Added Nov 3, 2021

  1426. Rank 1436

    WordPress PluginsCVE-2020-11738

    WordPress Snap Creek Duplicator Plugin File Download Vulnerability

    CVSS severity 7.5high

    Added Nov 3, 2021

  1427. Rank 1437

    Cisco ASA / Firepower (FTD)CVE-2020-3452

    Cisco ASA and FTD Read-Only Path Traversal Vulnerability

    CVSS severity 7.5high

    Added Nov 3, 2021

  1428. Rank 1438

    UnraidCVE-2020-5849

    Unraid Authentication Bypass Vulnerability

    CVSS severity 7.5high

    Added Nov 3, 2021

  1429. Rank 1439

    OpenText (Micro Focus) Access Manager (NetIQ)CVE-2021-22506

    Micro Focus Access Manager Information Leakage Vulnerability

    CVSS severity 7.5high

    Added Nov 3, 2021

  1430. Rank 1440

    Microsoft WindowsCVE-2021-36942

    Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

    Ransomware

    CVSS severity 7.5high

    Added Nov 3, 2021

  1431. Rank 1441

    Adobe ColdFusionCVE-2024-20767

    Adobe ColdFusion Improper Access Control Vulnerability

    CVSS severity 7.4high

    Added Dec 16, 2024

  1432. Rank 1442

    Oracle WebLogic ServerCVE-2017-3506

    Oracle WebLogic Server OS Command Injection Vulnerability

    CVE from 2017, added in 2024

    CVSS severity 7.4high

    Added Jun 3, 2024

  1433. Rank 1443

    Microsoft Exchange ServerCVE-2018-8581

    Microsoft Exchange Server Privilege Escalation Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 7.4high

    Added Mar 3, 2022

  1434. Rank 1444

    Google AndroidCVE-2024-43093

    Android Framework Privilege Escalation Vulnerability

    CVSS severity 7.3high

    Added Nov 7, 2024

  1435. Rank 1445

    Microsoft OfficeCVE-2024-38226

    Microsoft Publisher Protection Mechanism Failure Vulnerability

    CVSS severity 7.3high

    Added Sep 10, 2024

  1436. Rank 1446

    Microsoft OfficeCVE-2023-21715

    Microsoft Office Publisher Security Feature Bypass Vulnerability

    CVSS severity 7.3high

    Added Feb 14, 2023

  1437. Rank 1447

    Grafana Labs GrafanaCVE-2021-39226

    Grafana Authentication Bypass Vulnerability

    CVSS severity 7.3high

    Added Aug 25, 2022

  1438. Rank 1448

    Adobe Acrobat / ReaderCVE-2010-2883

    Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability

    CVE from 2010, added in 2022

    CVSS severity 7.3high

    Added Jun 8, 2022

  1439. Rank 1449

    Microsoft WindowsCVE-2017-0213

    Microsoft Windows Privilege Escalation Vulnerability

    RansomwareCVE from 2017, added in 2022

    CVSS severity 7.3high

    Added Mar 28, 2022

  1440. Rank 1450

    AdminerCVE-2021-21311

    Adminer Server-Side Request Forgery Vulnerability

    CVE from 2021, added in 2025

    CVSS severity 7.2high

    Added Sep 29, 2025

  1441. Rank 1451

    TP-Link Archer (Wi-Fi routers)CVE-2025-9377

    TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability

    CVSS severity 7.2high

    Added Sep 3, 2025

  1442. Rank 1452

    ConnectWise ScreenConnectCVE-2025-3935

    ConnectWise ScreenConnect Improper Authentication Vulnerability

    CVSS severity 7.2high

    Added Jun 2, 2025

  1443. Rank 1453

    SonicWall SMA 100 (ex-SRA)CVE-2023-44221

    SonicWall SMA100 Appliances OS Command Injection Vulnerability

    CVE from 2023, added in 2025

    CVSS severity 7.2high

    Added May 1, 2025

  1444. Rank 1454

    Hitachi Vantara Pentaho Business Analytics (BA) ServerCVE-2022-43769

    Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

    CVE from 2022, added in 2025

    CVSS severity 7.2high

    Added Mar 3, 2025

  1445. Rank 1455

    Cisco RV routers (Small Business)CVE-2023-20118

    Cisco Small Business RV Series Routers Command Injection Vulnerability

    CVE from 2023, added in 2025

    CVSS severity 7.2high

    Added Mar 3, 2025

  1446. Rank 1456

    Mitel SIP Phones (6800 / 6900)CVE-2024-41710

    Mitel SIP Phones Argument Injection Vulnerability

    CVSS severity 7.2high

    Added Feb 12, 2025

  1447. Rank 1457

    Paessler PRTG Network MonitorCVE-2018-9276

    Paessler PRTG Network Monitor OS Command Injection Vulnerability

    CVE from 2018, added in 2025

    CVSS severity 7.2high

    Added Feb 4, 2025

  1448. Rank 1458

    BeyondTrust Remote Support / Privileged Remote Access (RS / PRA)CVE-2024-12686

    BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

    CVSS severity 7.2high

    Added Jan 13, 2025

  1449. Rank 1459

    Reolink IP camerasCVE-2019-11001

    Reolink Multiple IP Cameras OS Command Injection Vulnerability

    CVE from 2019, added in 2024

    CVSS severity 7.2high

    Added Dec 18, 2024

  1450. Rank 1460

    Reolink IP camerasCVE-2021-40407

    Reolink RLC-410W IP Camera OS Command Injection Vulnerability

    CVE from 2021, added in 2024

    CVSS severity 7.2high

    Added Dec 18, 2024

  1451. Rank 1461

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2024-9474

    Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

    Ransomware

    CVSS severity 7.2high

    Added Nov 18, 2024

  1452. Rank 1462

    PTZOptics PT30X-SDI/NDI CamerasCVE-2024-8957

    PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

    CVSS severity 7.2high

    Added Nov 4, 2024

  1453. Rank 1463

    Microsoft SharePoint ServerCVE-2024-38094

    Microsoft SharePoint Deserialization Vulnerability

    Ransomware

    CVSS severity 7.2high

    Added Oct 22, 2024

  1454. Rank 1464

    Versa Networks DirectorCVE-2024-39717

    Versa Director Dangerous File Type Upload Vulnerability

    CVSS severity 7.2high

    Added Aug 23, 2024

  1455. Rank 1465

    Microsoft Exchange ServerCVE-2021-31196

    Microsoft Exchange Server Information Disclosure Vulnerability

    CVE from 2021, added in 2024

    CVSS severity 7.2high

    Added Aug 21, 2024

  1456. Rank 1466

    VMware (Broadcom) ESXiCVE-2024-37085

    VMware ESXi Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 7.2high

    Added Jul 30, 2024

  1457. Rank 1467

    Microsoft SharePoint ServerCVE-2023-24955

    Microsoft SharePoint Server Code Injection Vulnerability

    Ransomware

    CVSS severity 7.2high

    Added Mar 26, 2024

  1458. Rank 1468

    Cisco IOS / IOS XECVE-2023-20273

    Cisco IOS XE Web UI Command Injection Vulnerability

    CVSS severity 7.2high

    Added Oct 23, 2023

  1459. Rank 1469

    Trend Micro Apex One (ex-OfficeScan)CVE-2023-41179

    Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability

    CVSS severity 7.2high

    Added Sep 21, 2023

  1460. Rank 1470

    Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron)CVE-2023-35081

    Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

    CVSS severity 7.2high

    Added Jul 31, 2023

  1461. Rank 1471

    Plex Media ServerCVE-2020-5741

    Plex Media Server Remote Code Execution Vulnerability

    CVE from 2020, added in 2023

    CVSS severity 7.2high

    Added Mar 10, 2023

  1462. Rank 1472

    Fortra GoAnywhere MFTCVE-2023-0669

    Fortra GoAnywhere MFT Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 7.2high

    Added Feb 10, 2023

  1463. Rank 1473

    Trend Micro Apex One (ex-OfficeScan)CVE-2022-40139

    Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

    CVSS severity 7.2high

    Added Sep 15, 2022

  1464. Rank 1474

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2022-27925

    Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

    Ransomware

    CVSS severity 7.2high

    Added Aug 11, 2022

  1465. Rank 1475

    Oracle Business Intelligence (OBIEE / BI Publisher)CVE-2019-2616

    Oracle BI Publisher Unauthorized Access Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 7.2high

    Added Mar 25, 2022

  1466. Rank 1476

    Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2020-8218

    Pulse Connect Secure Code Injection Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 7.2high

    Added Mar 7, 2022

  1467. Rank 1477

    Cisco RV routers (Small Business)CVE-2019-1652

    Cisco Small Business Routers Improper Input Validation Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 7.2high

    Added Mar 3, 2022

  1468. Rank 1478

    Apache SolrCVE-2019-0193

    Apache Solr DataImportHandler Code Injection Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.2high

    Added Dec 10, 2021

  1469. Rank 1479

    Pi-hole AdminLTECVE-2020-8816

    Pi-Hole AdminLTE Remote Code Execution Vulnerability

    CVSS severity 7.2high

    Added Dec 10, 2021

  1470. Rank 1480

    Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2019-11539

    Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 7.2high

    Added Nov 3, 2021

  1471. Rank 1481

    Oracle WebLogic ServerCVE-2020-14883

    Oracle WebLogic Server Unspecified Vulnerability

    CVSS severity 7.2high

    Added Nov 3, 2021

  1472. Rank 1482

    Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2020-8243

    Ivanti Pulse Connect Secure Code Execution Vulnerability

    CVSS severity 7.2high

    Added Nov 3, 2021

  1473. Rank 1483

    Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2020-8260

    Ivanti Pulse Connect Secure Code Execution Vulnerability

    CVSS severity 7.2high

    Added Nov 3, 2021

  1474. Rank 1484

    SonicWall Email SecurityCVE-2021-20022

    SonicWall Email Security Unrestricted Upload of File Vulnerability

    Ransomware

    CVSS severity 7.2high

    Added Nov 3, 2021

  1475. Rank 1485

    Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2021-22900

    Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability

    CVSS severity 7.2high

    Added Nov 3, 2021

  1476. Rank 1486

    Linux KernelCVE-2024-53150

    Linux Kernel Out-of-Bounds Read Vulnerability

    CVSS severity 7.1high

    Added Apr 9, 2025

  1477. Rank 1487

    Microsoft WindowsCVE-2025-21391

    Microsoft Windows Storage Link Following Vulnerability

    CVSS severity 7.1high

    Added Feb 11, 2025

  1478. Rank 1488

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2022-41328

    Fortinet FortiOS Path Traversal Vulnerability

    CVSS severity 7.1high

    Added Mar 14, 2023

  1479. Rank 1489

    Samsung Mobile Devices (Galaxy)CVE-2021-25337

    Samsung Mobile Devices Improper Access Control Vulnerability

    CVSS severity 7.1high

    Added Nov 8, 2022

  1480. Rank 1490

    Microsoft WindowsCVE-2021-43890

    Microsoft Windows AppX Installer Spoofing Vulnerability

    Ransomware

    CVSS severity 7.1high

    Added Dec 15, 2021

  1481. Rank 1491

    Microsoft WindowsCVE-2025-24983

    Microsoft Windows Win32k Use-After-Free Vulnerability

    CVSS severity 7.0high

    Added Mar 11, 2025

  1482. Rank 1492

    Microsoft WindowsCVE-2025-26633

    Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

    Ransomware

    CVSS severity 7.0high

    Added Mar 11, 2025

  1483. Rank 1493

    7-ZipCVE-2025-0411

    7-Zip Mark of the Web Bypass Vulnerability

    CVSS severity 7.0high

    Added Feb 6, 2025

  1484. Rank 1494

    Microsoft WindowsCVE-2024-30088

    Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

    Ransomware

    CVSS severity 7.0high

    Added Oct 15, 2024

  1485. Rank 1495

    Microsoft WindowsCVE-2024-38106

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    CVSS severity 7.0high

    Added Aug 13, 2024

  1486. Rank 1496

    Apple iOS / iPadOS / macOSCVE-2022-48618

    Apple Multiple Products Memory Corruption Vulnerability

    CVE from 2022, added in 2024

    CVSS severity 7.0high

    Added Jan 31, 2024

  1487. Rank 1497

    Microsoft WindowsCVE-2023-28229

    Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

    CVSS severity 7.0high

    Added Oct 4, 2023

  1488. Rank 1498

    Linux KernelCVE-2023-0266

    Linux Kernel Use-After-Free Vulnerability

    CVSS severity 7.0high

    Added Mar 30, 2023

  1489. Rank 1499

    Microsoft WindowsCVE-2022-21919

    Microsoft Windows User Profile Service Privilege Escalation Vulnerability

    CVSS severity 7.0high

    Added Apr 25, 2022

  1490. Rank 1500

    Microsoft WindowsCVE-2022-26904

    Microsoft Windows User Profile Service Privilege Escalation Vulnerability

    CVSS severity 7.0high

    Added Apr 25, 2022

  1491. Rank 1501

    Linux KernelCVE-2021-22600

    Linux Kernel Privilege Escalation Vulnerability

    CVSS severity 7.0high

    Added Apr 11, 2022

  1492. Rank 1502

    Microsoft WindowsCVE-2018-8120

    Microsoft Win32k Privilege Escalation Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 7.0high

    Added Mar 15, 2022

  1493. Rank 1503

    Linux KernelCVE-2016-5195

    Linux Kernel Race Condition Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 7.0high

    Added Mar 3, 2022

  1494. Rank 1504

    TeamViewer DesktopCVE-2019-18988

    TeamViewer Desktop Bypass Remote Login Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.0high

    Added Nov 3, 2021

  1495. Rank 1505

    Apple iOS / iPadOS / macOSCVE-2021-1782

    Apple Multiple Products Race Condition Vulnerability

    CVSS severity 7.0high

    Added Nov 3, 2021

  1496. Rank 1506

    ManageEngine (Zoho) ADSelfService PlusCVE-2022-28810

    Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability

    CVSS severity 6.8medium

    Added Mar 7, 2023

  1497. Rank 1507

    Mitel MiVoice ConnectCVE-2022-40765

    Mitel MiVoice Connect Command Injection Vulnerability

    Ransomware

    CVSS severity 6.8medium

    Added Feb 21, 2023

  1498. Rank 1508

    Mitel MiVoice ConnectCVE-2022-41223

    Mitel MiVoice Connect Code Injection Vulnerability

    Ransomware

    CVSS severity 6.8medium

    Added Feb 21, 2023

  1499. Rank 1509

    Brocade Fabric OS (FOS)CVE-2025-1976

    Broadcom Brocade Fabric OS Code Injection Vulnerability

    CVSS severity 6.7medium

    Added Apr 28, 2025

  1500. Rank 1510

    Cisco NX-OSCVE-2024-20399

    Cisco NX-OS Command Injection Vulnerability

    CVSS severity 6.7medium

    Added Jul 2, 2024

  1501. Rank 1511

    Samsung Mobile Devices (Galaxy)CVE-2021-25371

    Samsung Mobile Devices Unspecified Vulnerability

    CVE from 2021, added in 2023

    CVSS severity 6.7medium

    Added Jun 29, 2023

  1502. Rank 1512

    Samsung Mobile Devices (Galaxy)CVE-2021-25372

    Samsung Mobile Devices Improper Boundary Check Vulnerability

    CVE from 2021, added in 2023

    CVSS severity 6.7medium

    Added Jun 29, 2023

  1503. Rank 1513

    Cisco IOS / IOS XECVE-2023-20109

    Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

    CVSS severity 6.6medium

    Added Oct 10, 2023

  1504. Rank 1514

    Microsoft WindowsCVE-2015-1769

    Microsoft Windows Mount Manager Privilege Escalation Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 6.6medium

    Added May 25, 2022

  1505. Rank 1515

    SAP CRMCVE-2018-2380

    SAP Customer Relationship Management (CRM) Path Traversal Vulnerability

    RansomwareCVE from 2018, added in 2021

    CVSS severity 6.6medium

    Added Nov 3, 2021

  1506. Rank 1516

    Microsoft Exchange ServerCVE-2021-31207

    Microsoft Exchange Server Security Feature Bypass Vulnerability

    Ransomware

    CVSS severity 6.6medium

    Added Nov 3, 2021

  1507. Rank 1517

    TP-Link TL-WR (Wi-Fi routers)CVE-2023-50224

    TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

    CVE from 2023, added in 2025

    CVSS severity 6.5medium

    Added Sep 3, 2025

  1508. Rank 1518

    Microsoft SharePoint ServerCVE-2025-49706

    Microsoft SharePoint Improper Authentication Vulnerability

    Ransomware

    CVSS severity 6.5medium

    Added Jul 22, 2025

  1509. Rank 1519

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2019-6693

    Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

    RansomwareCVE from 2019, added in 2025

    CVSS severity 6.5medium

    Added Jun 25, 2025

  1510. Rank 1520

    SonicWall SMA 100 (ex-SRA)CVE-2021-20035

    SonicWall SMA100 Appliances OS Command Injection Vulnerability

    CVE from 2021, added in 2025

    CVSS severity 6.5medium

    Added Apr 16, 2025

  1511. Rank 1521

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2025-0111

    Palo Alto Networks PAN-OS File Read Vulnerability

    CVSS severity 6.5medium

    Added Feb 20, 2025

  1512. Rank 1522

    Microsoft WindowsCVE-2024-43451

    Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

    CVSS severity 6.5medium

    Added Nov 12, 2024

  1513. Rank 1523

    Microsoft WindowsCVE-2024-38213

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    CVSS severity 6.5medium

    Added Aug 13, 2024

  1514. Rank 1524

    VMware (Broadcom) vCenter ServerCVE-2022-22948

    VMware vCenter Server Incorrect Default File Permissions Vulnerability

    CVE from 2022, added in 2024

    CVSS severity 6.5medium

    Added Jul 17, 2024

  1515. Rank 1525

    Qlik SenseCVE-2023-41266

    Qlik Sense Path Traversal Vulnerability

    Ransomware

    CVSS severity 6.5medium

    Added Dec 7, 2023

  1516. Rank 1526

    Apple Safari / WebKitCVE-2023-42916

    Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

    CVSS severity 6.5medium

    Added Dec 4, 2023

  1517. Rank 1527

    Microsoft OfficeCVE-2023-36761

    Microsoft Word Information Disclosure Vulnerability

    CVSS severity 6.5medium

    Added Sep 12, 2023

  1518. Rank 1528

    Apple Safari / WebKitCVE-2023-28204

    Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

    CVSS severity 6.5medium

    Added May 22, 2023

  1519. Rank 1529

    TIBCO JasperReportsCVE-2018-18809

    TIBCO JasperReports Library Directory Traversal Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 6.5medium

    Added Dec 29, 2022

  1520. Rank 1530

    Cisco AnyConnect Secure Mobility ClientCVE-2020-3153

    Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

    RansomwareCVE from 2020, added in 2022

    CVSS severity 6.5medium

    Added Oct 24, 2022

  1521. Rank 1531

    Google Chrome / ChromiumCVE-2022-2856

    Google Chromium Intents Insufficient Input Validation Vulnerability

    CVSS severity 6.5medium

    Added Aug 18, 2022

  1522. Rank 1532

    Google Chrome / ChromiumCVE-2021-30533

    Google Chromium PopupBlocker Security Bypass Vulnerability

    CVSS severity 6.5medium

    Added Jun 27, 2022

  1523. Rank 1533

    Google Chrome / ChromiumCVE-2019-5825

    Google Chromium V8 Out-of-Bounds Write Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 6.5medium

    Added Jun 8, 2022

  1524. Rank 1534

    Microsoft Internet Explorer / Edge (legacy)CVE-2013-7331

    Microsoft Internet Explorer Information Disclosure Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 6.5medium

    Added May 25, 2022

  1525. Rank 1535

    Microsoft Internet Explorer / Edge (legacy)CVE-2015-0071

    Microsoft Internet Explorer ASLR Bypass Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 6.5medium

    Added May 25, 2022

  1526. Rank 1536

    Microsoft Internet Explorer / Edge (legacy)CVE-2016-3298

    Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 6.5medium

    Added May 24, 2022

  1527. Rank 1537

    Microsoft Internet Explorer / Edge (legacy)CVE-2016-3351

    Microsoft Internet Explorer and Edge Information Disclosure Vulnerability

    RansomwareCVE from 2016, added in 2022

    CVSS severity 6.5medium

    Added May 24, 2022

  1528. Rank 1538

    Microsoft WindowsCVE-2017-0022

    Microsoft XML Core Services Information Disclosure Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 6.5medium

    Added May 24, 2022

  1529. Rank 1539

    Microsoft Internet Explorer / Edge (legacy)CVE-2019-0676

    Microsoft Internet Explorer Information Disclosure Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 6.5medium

    Added May 23, 2022

  1530. Rank 1540

    Microsoft WindowsCVE-2019-0703

    Microsoft Windows SMB Information Disclosure Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 6.5medium

    Added May 23, 2022

  1531. Rank 1541

    Google Chrome / ChromiumCVE-2019-5786

    Google Chrome Blink Use-After-Free Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 6.5medium

    Added May 23, 2022

  1532. Rank 1542

    Cisco IOS XRCVE-2022-20821

    Cisco IOS XR Open Port Vulnerability

    CVSS severity 6.5medium

    Added May 23, 2022

  1533. Rank 1543

    Adobe BlazeDSCVE-2009-3960

    Adobe BlazeDS Information Disclosure Vulnerability

    RansomwareCVE from 2009, added in 2022

    CVSS severity 6.5medium

    Added Mar 7, 2022

  1534. Rank 1544

    Mozilla FirefoxCVE-2013-1675

    Mozilla Firefox Information Disclosure Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 6.5medium

    Added Mar 3, 2022

  1535. Rank 1545

    Cisco IOS / IOS XECVE-2017-12232

    Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 6.5medium

    Added Mar 3, 2022

  1536. Rank 1546

    Cisco IOS / IOS XECVE-2017-12238

    Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 6.5medium

    Added Mar 3, 2022

  1537. Rank 1547

    Cisco IOS / IOS XECVE-2017-6663

    Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 6.5medium

    Added Mar 3, 2022

  1538. Rank 1548

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2018-13383

    Fortinet FortiOS and FortiProxy Out-of-bounds Write

    RansomwareCVE from 2018, added in 2022

    CVSS severity 6.5medium

    Added Jan 10, 2022

  1539. Rank 1549

    SAP NetWeaverCVE-2016-9563

    SAP NetWeaver XML External Entity (XXE) Vulnerability

    CVE from 2016, added in 2021

    CVSS severity 6.5medium

    Added Nov 3, 2021

  1540. Rank 1550

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2019-5591

    Fortinet FortiOS Default Configuration Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 6.5medium

    Added Nov 3, 2021

  1541. Rank 1551

    ManageEngine (Zoho) ServiceDesk PlusCVE-2019-8394

    Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 6.5medium

    Added Nov 3, 2021

  1542. Rank 1552

    SaltStack SaltCVE-2020-11652

    SaltStack Salt Path Traversal Vulnerability

    CVSS severity 6.5medium

    Added Nov 3, 2021

  1543. Rank 1553

    Citrix NetScaler ADC / GatewayCVE-2020-8193

    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability

    CVSS severity 6.5medium

    Added Nov 3, 2021

  1544. Rank 1554

    Citrix NetScaler ADC / GatewayCVE-2020-8195

    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

    CVSS severity 6.5medium

    Added Nov 3, 2021

  1545. Rank 1555

    Microsoft OfficeCVE-2021-27059

    Microsoft Office Remote Code Execution Vulnerability

    CVSS severity 6.5medium

    Added Nov 3, 2021

  1546. Rank 1556

    Google Chrome / ChromiumCVE-2021-37976

    Google Chromium Information Disclosure Vulnerability

    CVSS severity 6.5medium

    Added Nov 3, 2021

  1547. Rank 1557

    Samsung Mobile Devices (Galaxy)CVE-2021-25394

    Samsung Mobile Devices Race Condition Vulnerability

    CVE from 2021, added in 2023

    CVSS severity 6.4medium

    Added Jun 29, 2023

  1548. Rank 1558

    Samsung Mobile Devices (Galaxy)CVE-2021-25395

    Samsung Mobile Devices Race Condition Vulnerability

    CVE from 2021, added in 2023

    CVSS severity 6.4medium

    Added Jun 29, 2023

  1549. Rank 1559

    Google AndroidCVE-2021-0920

    Android Kernel Race Condition Vulnerability

    CVSS severity 6.4medium

    Added May 23, 2022

  1550. Rank 1560

    Apple Safari / WebKitCVE-2024-44309

    Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.3medium

    Added Nov 21, 2024

  1551. Rank 1561

    Cisco IOS / IOS XECVE-2018-0161

    Cisco IOS Software Resource Management Errors Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 6.3medium

    Added Mar 3, 2022

  1552. Rank 1562

    Libraesva Email Security GatewayCVE-2025-59689

    Libraesva Email Security Gateway Command Injection Vulnerability

    CVSS severity 6.1medium

    Added Sep 29, 2025

  1553. Rank 1563

    MDaemon Email ServerCVE-2024-11182

    MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.1medium

    Added May 19, 2025

  1554. Rank 1564

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2024-27443

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.1medium

    Added May 19, 2025

  1555. Rank 1565

    Apple iOS / iPadOSCVE-2025-24200

    Apple iOS and iPadOS Incorrect Authorization Vulnerability

    CVSS severity 6.1medium

    Added Feb 12, 2025

  1556. Rank 1566

    jQueryCVE-2020-11023

    JQuery Cross-Site Scripting (XSS) Vulnerability

    CVE from 2020, added in 2025

    CVSS severity 6.1medium

    Added Jan 23, 2025

  1557. Rank 1567

    Cisco ASA / Firepower (FTD)CVE-2014-2120

    Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

    CVE from 2014, added in 2024

    CVSS severity 6.1medium

    Added Nov 12, 2024

  1558. Rank 1568

    Roundcube WebmailCVE-2024-37383

    RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.1medium

    Added Oct 24, 2024

  1559. Rank 1569

    Roundcube WebmailCVE-2020-13965

    Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

    CVE from 2020, added in 2024

    CVSS severity 6.1medium

    Added Jun 26, 2024

  1560. Rank 1570

    Roundcube WebmailCVE-2023-43770

    Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.1medium

    Added Feb 12, 2024

  1561. Rank 1571

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2023-37580

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.1medium

    Added Jul 27, 2023

  1562. Rank 1572

    Roundcube WebmailCVE-2020-35730

    Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

    CVE from 2020, added in 2023

    CVSS severity 6.1medium

    Added Jun 22, 2023

  1563. Rank 1573

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2022-27926

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.1medium

    Added Apr 3, 2023

  1564. Rank 1574

    Fortra Cobalt StrikeCVE-2022-39197

    Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.1medium

    Added Mar 30, 2023

  1565. Rank 1575

    QNAP NAS (QTS / QuTS hero)CVE-2018-19953

    QNAP NAS File Station Cross-Site Scripting Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 6.1medium

    Added May 24, 2022

  1566. Rank 1576

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2018-6882

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 6.1medium

    Added Apr 19, 2022

  1567. Rank 1577

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2022-24682

    Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability

    Ransomware

    CVSS severity 6.1medium

    Added Feb 25, 2022

  1568. Rank 1578

    WordPress PluginsCVE-2019-9978

    WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 6.1medium

    Added Nov 3, 2021

  1569. Rank 1579

    Cisco ASA / Firepower (FTD)CVE-2020-3580

    Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability

    Ransomware

    CVSS severity 6.1medium

    Added Nov 3, 2021

  1570. Rank 1580

    Apple Safari / WebKitCVE-2021-1879

    Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.1medium

    Added Nov 3, 2021

  1571. Rank 1581

    Google Chrome / ChromiumCVE-2021-38000

    Google Chromium Intents Improper Input Validation Vulnerability

    CVSS severity 6.1medium

    Added Nov 3, 2021

  1572. Rank 1582

    VMware (Broadcom) ESXiCVE-2025-22226

    VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

    CVSS severity 6.0medium

    Added Mar 4, 2025

  1573. Rank 1583

    Cisco ASA / Firepower (FTD)CVE-2024-20359

    Cisco ASA and FTD Privilege Escalation Vulnerability

    CVSS severity 6.0medium

    Added Apr 24, 2024

  1574. Rank 1584

    Cisco IOS / IOS XECVE-2004-1464

    Cisco IOS Denial-of-Service Vulnerability

    CVE from 2004, added in 2023

    CVSS severity 5.9medium

    Added May 19, 2023

  1575. Rank 1585

    Microsoft WindowsCVE-2022-26925

    Microsoft Windows LSA Spoofing Vulnerability

    CVSS severity 5.9medium

    Added Jul 1, 2022

  1576. Rank 1586

    Cisco IOS XRCVE-2009-2055

    Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

    CVE from 2009, added in 2022

    CVSS severity 5.9medium

    Added Mar 25, 2022

  1577. Rank 1587

    Cisco IOS / IOS XECVE-2017-12319

    Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 5.9medium

    Added Mar 3, 2022

  1578. Rank 1588

    Cisco IOS / IOS XECVE-2018-0179

    Cisco IOS Software Denial-of-Service Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 5.9medium

    Added Mar 3, 2022

  1579. Rank 1589

    Cisco IOS / IOS XECVE-2018-0180

    Cisco IOS Software Denial-of-Service Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 5.9medium

    Added Mar 3, 2022

  1580. Rank 1590

    Cisco ASA / Firepower (FTD)CVE-2024-20481

    Cisco ASA and FTD Denial-of-Service Vulnerability

    CVSS severity 5.8medium

    Added Oct 24, 2024

  1581. Rank 1591

    Microsoft WindowsCVE-2025-24991

    Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability

    CVSS severity 5.5medium

    Added Mar 11, 2025

  1582. Rank 1592

    Linux KernelCVE-2024-50302

    Linux Kernel Use of Uninitialized Resource Vulnerability

    CVSS severity 5.5medium

    Added Mar 4, 2025

  1583. Rank 1593

    Google PixelCVE-2024-29745

    Android Pixel Information Disclosure Vulnerability

    CVSS severity 5.5medium

    Added Apr 4, 2024

  1584. Rank 1594

    Google PixelCVE-2023-21237

    Android Pixel Information Disclosure Vulnerability

    CVSS severity 5.5medium

    Added Mar 5, 2024

  1585. Rank 1595

    Microsoft WordPadCVE-2023-36563

    Microsoft WordPad Information Disclosure Vulnerability

    CVSS severity 5.5medium

    Added Oct 10, 2023

  1586. Rank 1596

    Arm Mali GPU (pilote noyau)CVE-2023-4211

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    CVSS severity 5.5medium

    Added Oct 3, 2023

  1587. Rank 1597

    Apple iOS / iPadOS / macOSCVE-2023-41991

    Apple Multiple Products Improper Certificate Validation Vulnerability

    CVSS severity 5.5medium

    Added Sep 25, 2023

  1588. Rank 1598

    Apple iOS / iPadOS / macOSCVE-2023-38606

    Apple Multiple Products Kernel Unspecified Vulnerability

    CVSS severity 5.5medium

    Added Jul 26, 2023

  1589. Rank 1599

    Samsung Mobile Devices (Galaxy)CVE-2021-25489

    Samsung Mobile Devices Improper Input Validation Vulnerability

    CVE from 2021, added in 2023

    CVSS severity 5.5medium

    Added Jun 29, 2023

  1590. Rank 1600

    Samsung Mobile Devices (Galaxy)CVE-2021-25369

    Samsung Mobile Devices Improper Access Control Vulnerability

    CVSS severity 5.5medium

    Added Nov 8, 2022

  1591. Rank 1601

    Apple iOS / iPadOS / macOSCVE-2020-9934

    Apple iOS, iPadOS, and macOS Input Validation Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 5.5medium

    Added Sep 8, 2022

  1592. Rank 1602

    Apple iOS / iPadOSCVE-2016-4655

    Apple iOS Information Disclosure Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 5.5medium

    Added May 24, 2022

  1593. Rank 1603

    Apple macOS (OS X)CVE-2022-22674

    Apple macOS Out-of-Bounds Read Vulnerability

    CVSS severity 5.5medium

    Added Apr 4, 2022

  1594. Rank 1604

    ImageMagickCVE-2016-3715

    ImageMagick Arbitrary File Deletion Vulnerability

    CVE from 2016, added in 2021

    CVSS severity 5.5medium

    Added Nov 3, 2021

  1595. Rank 1605

    ImageMagickCVE-2016-3718

    ImageMagick Server-Side Request Forgery (SSRF) Vulnerability

    CVE from 2016, added in 2021

    CVSS severity 5.5medium

    Added Nov 3, 2021

  1596. Rank 1606

    Microsoft WindowsCVE-2020-1464

    Microsoft Windows Spoofing Vulnerability

    CVSS severity 5.5medium

    Added Nov 3, 2021

  1597. Rank 1607

    Apple iOS / iPadOS / macOSCVE-2020-27950

    Apple Multiple Products Memory Initialization Vulnerability

    CVSS severity 5.5medium

    Added Nov 3, 2021

  1598. Rank 1608

    Qualcomm Snapdragon (chipsets and drivers)CVE-2021-1906

    Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability

    CVSS severity 5.5medium

    Added Nov 3, 2021

  1599. Rank 1609

    Arm Trusted FirmwareCVE-2021-27562

    Arm Trusted Firmware Out-of-Bounds Write Vulnerability

    CVSS severity 5.5medium

    Added Nov 3, 2021

  1600. Rank 1610

    Apple macOS (OS X)CVE-2021-30657

    Apple macOS Unspecified Vulnerability

    CVSS severity 5.5medium

    Added Nov 3, 2021

  1601. Rank 1611

    Microsoft WindowsCVE-2021-31955

    Microsoft Windows Kernel Information Disclosure Vulnerability

    CVSS severity 5.5medium

    Added Nov 3, 2021

  1602. Rank 1612

    Meta WhatsAppCVE-2025-55177

    Meta Platforms WhatsApp Incorrect Authorization Vulnerability

    CVSS severity 5.4medium

    Added Sep 2, 2025

  1603. Rank 1613

    Microsoft WindowsCVE-2025-24054

    Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

    CVSS severity 5.4medium

    Added Apr 17, 2025

  1604. Rank 1614

    Microsoft WindowsCVE-2024-38217

    Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

    CVSS severity 5.4medium

    Added Sep 10, 2024

  1605. Rank 1615

    Microsoft WindowsCVE-2023-36584

    Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

    CVSS severity 5.4medium

    Added Nov 16, 2023

  1606. Rank 1616

    Roundcube WebmailCVE-2023-5631

    Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 5.4medium

    Added Oct 26, 2023

  1607. Rank 1617

    Microsoft DefenderCVE-2022-44698

    Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

    Ransomware

    CVSS severity 5.4medium

    Added Dec 13, 2022

  1608. Rank 1618

    Microsoft WindowsCVE-2022-41049

    Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

    CVSS severity 5.4medium

    Added Nov 14, 2022

  1609. Rank 1619

    Microsoft WindowsCVE-2022-41091

    Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

    Ransomware

    CVSS severity 5.4medium

    Added Nov 8, 2022

  1610. Rank 1620

    QNAP NAS (QTS / QuTS hero)CVE-2018-19943

    QNAP NAS File Station Cross-Site Scripting Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 5.4medium

    Added May 24, 2022

  1611. Rank 1621

    D-Link DSL modem-routersCVE-2013-5223

    D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 5.4medium

    Added Mar 25, 2022

  1612. Rank 1622

    Treck Pile TCP/IPCVE-2020-11899

    Treck TCP/IP stack Out-of-Bounds Read Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 5.4medium

    Added Mar 3, 2022

  1613. Rank 1623

    TeleMessage TM SGNLCVE-2025-48927

    TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

    CVSS severity 5.3medium

    Added Jul 1, 2025

  1614. Rank 1624

    Craft CMSCVE-2025-35939

    Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability

    CVSS severity 5.3medium

    Added Jun 2, 2025

  1615. Rank 1625

    Atlassian Jira Server / Data CenterCVE-2021-26086

    Atlassian Jira Server and Data Center Path Traversal Vulnerability

    CVE from 2021, added in 2024

    CVSS severity 5.3medium

    Added Nov 12, 2024

  1616. Rank 1626

    Twilio AuthyCVE-2024-39891

    Twilio Authy Information Disclosure Vulnerability

    CVSS severity 5.3medium

    Added Jul 23, 2024

  1617. Rank 1627

    Joomla!CVE-2023-23752

    Joomla! Improper Access Control Vulnerability

    CVSS severity 5.3medium

    Added Jan 8, 2024

  1618. Rank 1628

    Juniper Junos OSCVE-2023-36844

    Juniper Junos OS EX Series PHP External Variable Modification Vulnerability

    CVSS severity 5.3medium

    Added Nov 13, 2023

  1619. Rank 1629

    Juniper Junos OSCVE-2023-36846

    Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

    CVSS severity 5.3medium

    Added Nov 13, 2023

  1620. Rank 1630

    Juniper Junos OSCVE-2023-36847

    Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability

    CVSS severity 5.3medium

    Added Nov 13, 2023

  1621. Rank 1631

    Juniper Junos OSCVE-2023-36851

    Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

    CVSS severity 5.3medium

    Added Nov 13, 2023

  1622. Rank 1632

    Microsoft Skype for Business / LyncCVE-2023-41763

    Microsoft Skype for Business Privilege Escalation Vulnerability

    CVSS severity 5.3medium

    Added Oct 10, 2023

  1623. Rank 1633

    SAP NetWeaverCVE-2016-2388

    SAP NetWeaver Information Disclosure Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 5.3medium

    Added Jun 9, 2022

  1624. Rank 1634

    Red Hat JBoss Application Server / EAPCVE-2010-0738

    Red Hat JBoss Authentication Bypass Vulnerability

    RansomwareCVE from 2010, added in 2022

    CVSS severity 5.3medium

    Added May 25, 2022

  1625. Rank 1635

    Atlassian Confluence Server / Data CenterCVE-2021-26085

    Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability

    Ransomware

    CVSS severity 5.3medium

    Added Mar 28, 2022

  1626. Rank 1636

    VMware (Broadcom) vCenter ServerCVE-2021-21973

    VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

    CVSS severity 5.3medium

    Added Mar 7, 2022

  1627. Rank 1637

    Oracle Java SE (JRE / JDK)CVE-2015-4902

    Oracle Java SE Integrity Check Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 5.3medium

    Added Mar 3, 2022

  1628. Rank 1638

    Zabbix FrontendCVE-2022-23134

    Zabbix Frontend Improper Access Control Vulnerability

    CVSS severity 5.3medium

    Added Feb 22, 2022

  1629. Rank 1639

    SolarWinds Serv-UCVE-2021-35247

    SolarWinds Serv-U Improper Input Validation Vulnerability

    CVSS severity 5.3medium

    Added Jan 21, 2022

  1630. Rank 1640

    VMware (Broadcom) vCenter ServerCVE-2021-22017

    VMware vCenter Server Improper Access Control

    CVSS severity 5.3medium

    Added Jan 10, 2022

  1631. Rank 1641

    TeleMessage TM SGNLCVE-2025-47729

    TeleMessage TM SGNL Hidden Functionality Vulnerability

    CVSS severity 4.9medium

    Added May 12, 2025

  1632. Rank 1642

    SonicWall Email SecurityCVE-2021-20023

    SonicWall Email Security Path Traversal Vulnerability

    Ransomware

    CVSS severity 4.9medium

    Added Nov 3, 2021

  1633. Rank 1643

    Oracle Identity and Access Management (OIM / OAM)CVE-2012-0518

    Oracle Fusion Middleware Unspecified Vulnerability

    CVE from 2012, added in 2022

    CVSS severity 4.7medium

    Added Mar 28, 2022

  1634. Rank 1644

    Microsoft WindowsCVE-2025-24984

    Microsoft Windows NTFS Information Disclosure Vulnerability

    CVSS severity 4.6medium

    Added Mar 11, 2025

  1635. Rank 1645

    Juniper Junos OSCVE-2025-21590

    Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability

    CVSS severity 4.4medium

    Added Mar 13, 2025

  1636. Rank 1646

    Samsung Mobile Devices (Galaxy)CVE-2023-21492

    Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

    CVSS severity 4.4medium

    Added May 19, 2023

  1637. Rank 1647

    Microsoft WindowsCVE-2023-24880

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    Ransomware

    CVSS severity 4.4medium

    Added Mar 14, 2023

  1638. Rank 1648

    Samsung Mobile Devices (Galaxy)CVE-2021-25370

    Samsung Mobile Devices Memory Corruption Vulnerability

    CVSS severity 4.4medium

    Added Nov 8, 2022

  1639. Rank 1649

    Fortinet FortiOS / FortiProxy (FortiGate)CVE-2018-13374

    Fortinet FortiOS and FortiADC Improper Access Control Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 4.3medium

    Added Sep 8, 2022

  1640. Rank 1650

    Microsoft Internet Explorer / Edge (legacy)CVE-2016-0162

    Microsoft Internet Explorer Information Disclosure Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 4.3medium

    Added May 24, 2022

  1641. Rank 1651

    Microsoft Internet Explorer / Edge (legacy)CVE-2017-0059

    Microsoft Internet Explorer Information Disclosure Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 4.3medium

    Added Mar 28, 2022

  1642. Rank 1652

    IBM Data Risk ManagerCVE-2020-4430

    IBM Data Risk Manager Directory Traversal Vulnerability

    CVSS severity 4.3medium

    Added Nov 3, 2021

  1643. Rank 1653

    Citrix NetScaler ADC / GatewayCVE-2020-8196

    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

    CVSS severity 4.3medium

    Added Nov 3, 2021

  1644. Rank 1654

    Apple iOS / iPadOSCVE-2020-9819

    Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability

    CVSS severity 4.3medium

    Added Nov 3, 2021

  1645. Rank 1655

    Apple iOS / iPadOS / macOSCVE-2025-43200

    Apple Multiple Products Unspecified Vulnerability

    CVSS severity 4.2medium

    Added Jun 16, 2025

  1646. Rank 1656

    TeleMessage TM SGNLCVE-2025-48928

    TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

    CVSS severity 4.0medium

    Added Jul 1, 2025

  1647. Rank 1657

    VMware (Broadcom) VMware ToolsCVE-2023-20867

    VMware Tools Authentication Bypass Vulnerability

    CVSS severity 3.9low

    Added Jun 23, 2023

  1648. Rank 1658

    Oracle Java SE (JRE / JDK)CVE-2013-0431

    Oracle JRE Sandbox Bypass Vulnerability

    RansomwareCVE from 2013, added in 2022

    CVSS severity 3.7low

    Added May 25, 2022

  1649. Rank 1659

    Oracle Java SE (JRE / JDK)CVE-2013-2423

    Oracle JRE Unspecified Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 3.7low

    Added May 25, 2022

  1650. Rank 1660

    Arm Mali GPU (pilote noyau)CVE-2023-26083

    Arm Mali GPU Kernel Driver Information Disclosure Vulnerability

    CVSS severity 3.3low

    Added Apr 7, 2023

  1651. Rank 1661

    Mitel MiCollabCVE-2024-55550

    Mitel MiCollab Path Traversal Vulnerability

    Ransomware

    CVSS severity 2.7low

    Added Jan 7, 2025

Exploitation reported elsewhere 2

These vulnerabilities are not (yet) in CISA’s catalog, but CERT-FR reports their exploitation. A different level of evidence: they are never counted with the catalog. Most recently reported first.

  1. SPIPCVE-2026-77806

    Vulnérabilité dans SPIP Not (yet) in CISA’s catalog. CERT-FR advisory CERTFR-2026-AVI-1063 of Aug 21, 2026

    Reported by CERT-FR

    CVSS severity 9.8critical

    First reported Aug 21, 2026

  2. FortinetCVE-2025-61624

    Multiples vulnérabilités dans les produits Fortinet Not (yet) in CISA’s catalog. CERT-FR advisory CERTFR-2026-AVI-0440 of Apr 15, 2026

    Reported by CERT-FR

    CVSS severity 6.5medium

    First reported Apr 15, 2026

End of life: remove

These products are no longer supported by their vendor: no patch is coming. CISA asks that they be removed or isolated from the network. Sorted from most to least recently added.

  1. Sophos CyberoamOS (Cyberoam)CVE-2020-29574

    CyberoamOS (CROS) SQL Injection Vulnerability

    RansomwareEnd of lifeCVE from 2020, added in 2025

    CVSS severity 9.8critical

    Added Feb 6, 2025

  2. NUUO NVRmini / NVRmini2CVE-2018-14933

    NUUO NVRmini Devices OS Command Injection Vulnerability

    End of lifeCVE from 2018, added in 2024

    CVSS severity 9.8critical

    Added Dec 18, 2024

  3. NUUO NVRmini / NVRmini2CVE-2022-23227

    NUUO NVRmini2 Devices Missing Authentication Vulnerability

    End of lifeCVE from 2022, added in 2024

    CVSS severity 9.8critical

    Added Dec 18, 2024

  4. Ivanti Cloud Services Appliance (CSA)CVE-2024-9379

    Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

    End of life

    CVSS severity 7.2high

    Added Oct 9, 2024

  5. Ivanti Cloud Services Appliance (CSA)CVE-2024-9380

    Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

    End of life

    CVSS severity 7.2high

    Added Oct 9, 2024

  6. D-Link Routers (DIR, DWR, DSR)CVE-2023-25280

    D-Link DIR-820 Router OS Command Injection Vulnerability

    End of life

    CVSS severity 9.8critical

    Added Sep 30, 2024

  7. Ivanti Cloud Services Appliance (CSA)CVE-2024-8963

    Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

    End of life

    CVSS severity 9.1critical

    Added Sep 19, 2024

  8. Adobe Flash PlayerCVE-2013-0643

    Adobe Flash Player Incorrect Default Permissions Vulnerability

    End of lifeCVE from 2013, added in 2024

    CVSS severity 8.8high

    Added Sep 17, 2024

  9. Adobe Flash PlayerCVE-2013-0648

    Adobe Flash Player Code Execution Vulnerability

    End of lifeCVE from 2013, added in 2024

    CVSS severity 8.8high

    Added Sep 17, 2024

  10. Adobe Flash PlayerCVE-2014-0497

    Adobe Flash Player Integer Underflow Vulnerablity

    End of lifeCVE from 2014, added in 2024

    CVSS severity 9.8critical

    Added Sep 17, 2024

Show the other 62 end-of-life products

  1. Adobe Flash PlayerCVE-2014-0502

    Adobe Flash Player Double Free Vulnerablity

    End of lifeCVE from 2014, added in 2024

    CVSS severity 8.8high

    Added Sep 17, 2024

  2. Ivanti Cloud Services Appliance (CSA)CVE-2024-8190

    Ivanti Cloud Services Appliance OS Command Injection Vulnerability

    End of life

    CVSS severity 7.2high

    Added Sep 13, 2024

  3. Microsoft Internet Explorer / Edge (legacy)CVE-2012-4792

    Microsoft Internet Explorer Use-After-Free Vulnerability

    End of lifeCVE from 2012, added in 2024

    CVSS severity 8.8high

    Added Jul 23, 2024

  4. D-Link Routers (DIR, DWR, DSR)CVE-2014-100005

    D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability

    End of lifeCVE from 2014, added in 2024

    CVSS severity 8.0high

    Added May 16, 2024

  5. D-Link Routers (DIR, DWR, DSR)CVE-2021-40655

    D-Link DIR-605 Router Information Disclosure Vulnerability

    End of lifeCVE from 2021, added in 2024

    CVSS severity 7.5high

    Added May 16, 2024

  6. D-Link NAS DNS (ShareCenter)CVE-2024-3272

    D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability

    End of life

    CVSS severity 9.8critical

    Added Apr 11, 2024

  7. D-Link NAS DNS (ShareCenter)CVE-2024-3273

    D-Link Multiple NAS Devices Command Injection Vulnerability

    End of life

    CVSS severity 9.8critical

    Added Apr 11, 2024

  8. Linux KernelCVE-2010-3904

    Linux Kernel Improper Input Validation Vulnerability

    End of lifeCVE from 2010, added in 2023

    CVSS severity 7.8high

    Added May 12, 2023

  9. Linux KernelCVE-2014-0196

    Linux Kernel Race Condition Vulnerability

    End of lifeCVE from 2014, added in 2023

    CVSS severity 5.5medium

    Added May 12, 2023

  10. Microsoft Internet Explorer / Edge (legacy)CVE-2013-3163

    Microsoft Internet Explorer Memory Corruption Vulnerability

    End of lifeCVE from 2013, added in 2023

    CVSS severity 8.8high

    Added Mar 30, 2023

  11. D-Link Routers (DIR, DWR, DSR)CVE-2011-4723

    D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability

    End of lifeCVE from 2011, added in 2022

    CVSS severity 5.7medium

    Added Sep 8, 2022

  12. D-Link Routers (DIR, DWR, DSR)CVE-2022-26258

    D-Link DIR-820L Remote Code Execution Vulnerability

    End of life

    CVSS severity 9.8critical

    Added Sep 8, 2022

  13. Delta Electronics DOPSoft 2CVE-2021-38406

    Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability

    End of life

    CVSS severity 7.8high

    Added Aug 25, 2022

  14. Adobe Flash PlayerCVE-2010-1297

    Adobe Flash Player Memory Corruption Vulnerability

    End of lifeCVE from 2010, added in 2022

    CVSS severity 7.8high

    Added Jun 8, 2022

  15. Adobe Flash PlayerCVE-2011-0609

    Adobe Flash Player Unspecified Vulnerability

    End of lifeCVE from 2011, added in 2022

    CVSS severity 7.8high

    Added Jun 8, 2022

  16. Adobe Flash PlayerCVE-2012-0754

    Adobe Flash Player Memory Corruption Vulnerability

    End of lifeCVE from 2012, added in 2022

    CVSS severity 8.1high

    Added Jun 8, 2022

  17. Adobe Flash PlayerCVE-2012-0767

    Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability

    End of lifeCVE from 2012, added in 2022

    CVSS severity 6.1medium

    Added Jun 8, 2022

  18. Adobe Flash PlayerCVE-2012-5054

    Adobe Flash Player Integer Overflow Vulnerability

    End of lifeCVE from 2012, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  19. Microsoft SilverlightCVE-2013-0074

    Microsoft Silverlight Double Dereference Vulnerability

    RansomwareEnd of lifeCVE from 2013, added in 2022

    CVSS severity 7.8high

    Added May 25, 2022

  20. Microsoft SilverlightCVE-2013-3896

    Microsoft Silverlight Information Disclosure Vulnerability

    End of lifeCVE from 2013, added in 2022

    CVSS severity 5.5medium

    Added May 25, 2022

  21. IBM InfoSphere BigInsightsCVE-2013-3993

    IBM InfoSphere BigInsights Invalid Input Vulnerability

    RansomwareEnd of lifeCVE from 2013, added in 2022

    CVSS severity 6.5medium

    Added May 25, 2022

  22. Adobe Flash PlayerCVE-2014-8439

    Adobe Flash Player Dereferenced Pointer Vulnerability

    End of lifeCVE from 2014, added in 2022

    CVSS severity 8.8high

    Added May 25, 2022

  23. Adobe Flash PlayerCVE-2015-0310

    Adobe Flash Player ASLR Bypass Vulnerability

    End of lifeCVE from 2015, added in 2022

    CVSS severity 7.8high

    Added May 25, 2022

  24. Adobe Flash PlayerCVE-2015-8651

    Adobe Flash Player Integer Overflow Vulnerability

    End of lifeCVE from 2015, added in 2022

    CVSS severity 8.8high

    Added May 25, 2022

  25. Microsoft SilverlightCVE-2016-0034

    Microsoft Silverlight Runtime Remote Code Execution Vulnerability

    RansomwareEnd of lifeCVE from 2016, added in 2022

    CVSS severity 8.8high

    Added May 25, 2022

  26. Adobe Flash PlayerCVE-2016-0984

    Adobe Flash Player and AIR Use-After-Free Vulnerability

    End of lifeCVE from 2016, added in 2022

    CVSS severity 8.8high

    Added May 25, 2022

  27. Adobe Flash PlayerCVE-2016-1010

    Adobe Flash Player and AIR Integer Overflow Vulnerability

    End of lifeCVE from 2016, added in 2022

    CVSS severity 8.8high

    Added May 25, 2022

  28. Kaseya VSACVE-2017-18362

    Kaseya VSA SQL Injection Vulnerability

    RansomwareEnd of lifeCVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added May 24, 2022

  29. Adobe Flash PlayerCVE-2018-5002

    Adobe Flash Player Stack-based Buffer Overflow Vulnerability

    End of lifeCVE from 2018, added in 2022

    CVSS severity 7.8high

    Added May 23, 2022

  30. Schneider Electric U.motion BuilderCVE-2018-7841

    Schneider Electric U.motion Builder SQL Injection Vulnerability

    End of lifeCVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Apr 15, 2022

  31. D-Link NAS DNS (ShareCenter)CVE-2019-16057

    D-Link DNS-320 Remote Code Execution Vulnerability

    RansomwareEnd of lifeCVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Apr 15, 2022

  32. Adobe Flash PlayerCVE-2014-9163

    Adobe Flash Player Stack-Based Buffer Overflow Vulnerability

    End of lifeCVE from 2014, added in 2022

    CVSS severity 7.8high

    Added Apr 13, 2022

  33. Adobe Flash PlayerCVE-2015-0311

    Adobe Flash Player Remote Code Execution Vulnerability

    End of lifeCVE from 2015, added in 2022

    CVSS severity 9.8critical

    Added Apr 13, 2022

  34. Adobe Flash PlayerCVE-2015-0313

    Adobe Flash Player Use-After-Free Vulnerability

    End of lifeCVE from 2015, added in 2022

    CVSS severity 9.8critical

    Added Apr 13, 2022

  35. Adobe Flash PlayerCVE-2015-3113

    Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

    End of lifeCVE from 2015, added in 2022

    CVSS severity 9.8critical

    Added Apr 13, 2022

  36. Adobe Flash PlayerCVE-2015-5122

    Adobe Flash Player Use-After-Free Vulnerability

    End of lifeCVE from 2015, added in 2022

    CVSS severity 9.8critical

    Added Apr 13, 2022

  37. Adobe Flash PlayerCVE-2015-5123

    Adobe Flash Player Use-After-Free Vulnerability

    End of lifeCVE from 2015, added in 2022

    CVSS severity 9.8critical

    Added Apr 13, 2022

  38. Checkbox SurveyCVE-2021-27852

    Checkbox Survey Deserialization of Untrusted Data Vulnerability

    End of life

    CVSS severity 9.8critical

    Added Apr 11, 2022

  39. D-Link Routers (DIR, DWR, DSR)CVE-2021-45382

    D-Link Multiple Routers Remote Code Execution Vulnerability

    End of life

    CVSS severity 9.8critical

    Added Apr 4, 2022

  40. DASAN Zhone (DZS) Gigabit Passive Optical Network (GPON) RoutersCVE-2018-10561

    Dasan GPON Routers Authentication Bypass Vulnerability

    End of lifeCVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Mar 31, 2022

  41. DASAN Zhone (DZS) Gigabit Passive Optical Network (GPON) RoutersCVE-2018-10562

    Dasan GPON Routers Command Injection Vulnerability

    RansomwareEnd of lifeCVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Mar 31, 2022

  42. Adobe Flash PlayerCVE-2012-2034

    Adobe Flash Player Memory Corruption Vulnerability

    End of lifeCVE from 2012, added in 2022

    CVSS severity 7.5high

    Added Mar 28, 2022

  43. SonicWall SMA 100 (ex-SRA)CVE-2021-20028

    SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

    RansomwareEnd of life

    CVSS severity 9.8critical

    Added Mar 28, 2022

  44. D-Link and TRENDnet routersCVE-2015-1187

    D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability

    End of lifeCVE from 2015, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  45. D-Link DCS camerasCVE-2016-11021

    D-Link DCS-930L Devices OS Command Injection Vulnerability

    End of lifeCVE from 2016, added in 2022

    CVSS severity 7.2high

    Added Mar 25, 2022

  46. Adobe Flash PlayerCVE-2016-4171

    Adobe Flash Player Remote Code Execution Vulnerability

    End of lifeCVE from 2016, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  47. Adobe Flash PlayerCVE-2016-7892

    Adobe Flash Player Use-After-Free Vulnerability

    End of lifeCVE from 2016, added in 2022

    CVSS severity 8.8high

    Added Mar 25, 2022

  48. NETGEAR Routers (DGN, WNR, Nighthawk)CVE-2017-6334

    NETGEAR DGN2200 Devices OS Command Injection Vulnerability

    End of lifeCVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 25, 2022

  49. D-Link Routers (DIR, DWR, DSR)CVE-2019-16920

    D-Link Multiple Routers Command Injection Vulnerability

    End of lifeCVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  50. D-Link Routers (DIR, DWR, DSR)CVE-2020-9377

    D-Link DIR-610 Devices Remote Command Execution

    End of lifeCVE from 2020, added in 2022

    CVSS severity 8.8high

    Added Mar 25, 2022

  51. Adobe Flash PlayerCVE-2011-0611

    Adobe Flash Player Remote Code Execution Vulnerability

    End of lifeCVE from 2011, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  52. Adobe Flash PlayerCVE-2012-1535

    Adobe Flash Player Arbitrary Code Execution Vulnerability

    End of lifeCVE from 2012, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  53. Adobe Flash PlayerCVE-2015-3043

    Adobe Flash Player Memory Corruption Vulnerability

    End of lifeCVE from 2015, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  54. Adobe Flash PlayerCVE-2015-5119

    Adobe Flash Player Use-After-Free Vulnerability

    End of lifeCVE from 2015, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  55. Adobe Flash PlayerCVE-2015-7645

    Adobe Flash Player Arbitrary Code Execution Vulnerability

    RansomwareEnd of lifeCVE from 2015, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  56. Adobe Flash PlayerCVE-2016-1019

    Adobe Flash Player Arbitrary Code Execution Vulnerability

    RansomwareEnd of lifeCVE from 2016, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  57. Adobe Flash PlayerCVE-2016-4117

    Adobe Flash Player Arbitrary Code Execution Vulnerability

    RansomwareEnd of lifeCVE from 2016, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  58. Adobe Flash PlayerCVE-2016-7855

    Adobe Flash Player Use-After-Free Vulnerability

    End of lifeCVE from 2016, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  59. Adobe Flash PlayerCVE-2017-11292

    Adobe Flash Player Type Confusion Vulnerability

    End of lifeCVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  60. Adobe Flash PlayerCVE-2018-15982

    Adobe Flash Player Use-After-Free Vulnerability

    RansomwareEnd of lifeCVE from 2018, added in 2022

    CVSS severity 7.8high

    Added Feb 15, 2022

  61. D-Link Routers (DIR, DWR, DSR)CVE-2015-2051

    D-Link DIR-645 Router Remote Code Execution Vulnerability

    End of lifeCVE from 2015, added in 2022

    CVSS severity 8.8high

    Added Feb 10, 2022

  62. Adobe Flash PlayerCVE-2018-4878

    Adobe Flash Player Use-After-Free Vulnerability

    RansomwareEnd of lifeCVE from 2018, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

Sources: CISA KEV catalog (exploitation, dates added, required actions, ransomware), NVD (CVSS severity), CERT-FR (alerts, exploitation reported outside the catalog), Microsoft (Microsoft patches). Brand and category: indicative classification by this site. Sources in detail.