{ "provider": "Provided by Senserva.com", "homepage": "https://senserva.com/", "reference": "Free to use. Attribution required: display \"Exploited-CVE Data Provided by Senserva\" with a link to https://senserva.com/feeds.html wherever you use or republish this data.", "generated": "2026-08-09", "source": "CISA KEV, NVD, CIRCL, FIRST.org EPSS, VulnCheck KEV, ENISA EUVD", "attribution": "KEV facts are CISA's; EPSS scores by FIRST.org (https://www.first.org/epss/); CVSS from NIST NVD and CIRCL; VulnCheck KEV and ENISA EUVD cross-references are used with attribution. Use is subject to the Senserva EULA: https://senserva.com/eula.html. Rules: https://senserva.com/feeds.html", "count": 1280, "ra": [ "Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.", "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.", "Apply updates per vendor instructions.", "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.", "Apply mitigations and kill all active and persistent sessions per vendor instructions [https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/] OR discontinue use of the product if mitigations are unavailable.", "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.", "The impacted product is end-of-life and should be disconnected if still in use.", "Apply mitigations as set forth in the CISA instructions linked below.", "Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service.", "\"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.", "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, management interface for affected devices should not be exposed to untrusted networks, including the internet.", "Verify that instances of Cisco IOS XE Web UI are in compliance with BOD 23-02 and apply mitigations per vendor instructions. For affected products (Cisco IOS XE Web UI exposed to the internet or to untrusted networks), follow vendor instructions to determine if a system may have been compromised and immediately report positive findings to CISA.", "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Check all affected Confluence instances for evidence of compromise per vendor instructions and report any positive findings to CISA.", "As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive security updates.", "Apply updates per vendor instructions or disconnect product if it is end-of-life.", "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "Contact the vendor for guidance on remediating firmware, per their advisory.", "The vendor D-Link published an advisory stating the fix under CVE-2018-20114 properly patches KEV entry CVE-2018-6530. If the device is still supported, apply updates per vendor instructions. If the affected device has since entered its end-of-life, it should be disconnected if still in use.", "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet.", "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlined in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "Apply updates per vendor instructions. If the affected device has since entered end-of-life, it should be disconnected if still in use.", "As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive future security updates.", "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "Apply mitigations as set forth in the CISA instructions linked below. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.", "As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.", "The impacted products are end-of-life and should be disconnected if still in use.", "The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.", "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Until the vendor releases an official fix, the following workaround should be implemented: - Restrict User-ID Authentication Portal access to only trusted zones. - Disable User-ID Authentication Portal if not required. 5/13/2026: Palo Alto has released a variety of patches. If these are relevant to your environment, please apply the designated patch.", "Versions 6 and earlier for this product are end-of-life and must be removed from agency networks. Versions 7 and later are not considered vulnerable.", "For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.", "Apply mitigations per vendor instructions for group-lock and vpn-simultaneous-logins or discontinue use of the product for unsupported devices.", "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Please contact the product developer for support and vulnerability mitigation.", "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable", "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable" ], "cves": [ { "cve": "CVE-2024-3400", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Command Injection Vulnerability", "date": "2024-04-12", "ransom": true, "cvss": 10, "epss": 1, "vckev": true, "euvd": false, "ra": 0, "due": "2024-04-19" }, { "cve": "CVE-2021-44228", "vendor": "Apache", "product": "Log4j2", "name": "Apache Log4j2 Remote Code Execution Vulnerability", "date": "2021-12-10", "ransom": true, "cvss": 10, "epss": 1, "vckev": true, "euvd": false, "ra": 1, "due": "2021-12-24" }, { "cve": "CVE-2019-11510", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 10, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-23897", "vendor": "Jenkins", "product": "Jenkins Command Line Interface (CLI)", "name": "Jenkins Command Line Interface (CLI) Path Traversal Vulnerability", "date": "2024-08-19", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 3, "due": "2024-09-09" }, { "cve": "CVE-2023-35082", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM) and MobileIron Core", "name": "Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability", "date": "2024-01-18", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 3, "due": "2024-02-08" }, { "cve": "CVE-2023-1671", "vendor": "Sophos", "product": "Web Appliance", "name": "Sophos Web Appliance Command Injection Vulnerability", "date": "2023-11-16", "ransom": false, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 3, "due": "2023-12-07" }, { "cve": "CVE-2023-22518", "vendor": "Atlassian", "product": "Confluence Data Center and Server", "name": "Atlassian Confluence Data Center and Server Improper Authorization Vulnerability", "date": "2023-11-07", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 3, "due": "2023-11-28" }, { "cve": "CVE-2023-35078", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability", "date": "2023-07-25", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 3, "due": "2023-08-15" }, { "cve": "CVE-2023-27350", "vendor": "PaperCut", "product": "MF/NG", "name": "PaperCut MF/NG Improper Access Control Vulnerability", "date": "2023-04-21", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2023-05-12" }, { "cve": "CVE-2022-26134", "vendor": "Atlassian", "product": "Confluence Server/Data Center", "name": "Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability", "date": "2022-06-02", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 4, "due": "2022-06-06" }, { "cve": "CVE-2022-29464", "vendor": "WSO2", "product": "Multiple Products", "name": "WSO2 Multiple Products Unrestrictive Upload of File Vulnerability", "date": "2022-04-25", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-16" }, { "cve": "CVE-2017-9841", "vendor": "PHPUnit", "product": "PHPUnit", "name": "PHPUnit Command Injection Vulnerability", "date": "2022-02-15", "ransom": false, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2022-08-15" }, { "cve": "CVE-2014-6271", "vendor": "GNU", "product": "Bourne-Again Shell (Bash)", "name": "GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability", "date": "2022-01-28", "ransom": false, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-28" }, { "cve": "CVE-2017-5638", "vendor": "Apache", "product": "Struts", "name": "Apache Struts Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-26084", "vendor": "Atlassian", "product": "Confluence Server and Data Center", "name": "Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2021-1498", "vendor": "Cisco", "product": "HyperFlex HX", "name": "Cisco HyperFlex HX Data Platform Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2019-19781", "vendor": "Citrix", "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "name": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2020-5902", "vendor": "F5", "product": "BIG-IP", "name": "F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-35464", "vendor": "ForgeRock", "product": "Access Management (AM)", "name": "ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2018-13379", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS SSL VPN Path Traversal Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-22005", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server File Upload Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2021-21985", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Improper Input Validation Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2024-21887", "vendor": "Ivanti", "product": "Connect Secure and Policy Secure", "name": "Ivanti Connect Secure and Policy Secure Command Injection Vulnerability", "date": "2024-01-10", "ransom": true, "cvss": 9.1, "epss": 1, "vckev": true, "euvd": false, "ra": 3, "due": "2024-01-22" }, { "cve": "CVE-2021-40438", "vendor": "Apache", "product": "Apache", "name": "Apache HTTP Server-Side Request Forgery (SSRF)", "date": "2021-12-01", "ransom": true, "cvss": 9, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2021-12-15" }, { "cve": "CVE-2023-1389", "vendor": "TP-Link", "product": "Archer AX21", "name": "TP-Link Archer AX-21 Command Injection Vulnerability", "date": "2023-05-01", "ransom": false, "cvss": 8.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2023-05-22" }, { "cve": "CVE-2024-21893", "vendor": "Ivanti", "product": "Connect Secure, Policy Secure, and Neurons", "name": "Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability", "date": "2024-01-31", "ransom": true, "cvss": 8.2, "epss": 1, "vckev": true, "euvd": false, "ra": 3, "due": "2024-02-02" }, { "cve": "CVE-2023-4966", "vendor": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "name": "Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability", "date": "2023-10-18", "ransom": true, "cvss": 7.5, "epss": 1, "vckev": true, "euvd": false, "ra": 5, "due": "2023-11-08" }, { "cve": "CVE-2023-44487", "vendor": "IETF", "product": "HTTP/2", "name": "HTTP/2 Rapid Reset Attack Vulnerability", "date": "2023-10-10", "ransom": false, "cvss": 7.5, "epss": 1, "vckev": true, "euvd": false, "ra": 6, "due": "2023-10-31" }, { "cve": "CVE-2023-32315", "vendor": "Ignite Realtime", "product": "Openfire", "name": "Ignite Realtime Openfire Path Traversal Vulnerability", "date": "2023-08-24", "ransom": false, "cvss": 7.5, "epss": 1, "vckev": true, "euvd": false, "ra": 3, "due": "2023-09-14" }, { "cve": "CVE-2014-0160", "vendor": "OpenSSL", "product": "OpenSSL", "name": "OpenSSL Information Disclosure Vulnerability", "date": "2022-05-04", "ransom": false, "cvss": 7.5, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-25" }, { "cve": "CVE-2023-0669", "vendor": "Fortra", "product": "GoAnywhere MFT", "name": "Fortra GoAnywhere MFT Remote Code Execution Vulnerability", "date": "2023-02-10", "ransom": true, "cvss": 7.2, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2023-03-03" }, { "cve": "CVE-2021-26086", "vendor": "Atlassian", "product": "Jira Server and Data Center", "name": "Atlassian Jira Server and Data Center Path Traversal Vulnerability", "date": "2024-11-12", "ransom": false, "cvss": 5.3, "epss": 1, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-03" }, { "cve": "CVE-2017-7921", "vendor": "Hikvision", "product": "Multiple Products", "name": "Hikvision Multiple Products Improper Authentication Vulnerability", "date": "2026-03-05", "ransom": false, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-26" }, { "cve": "CVE-2013-2251", "vendor": "Apache", "product": "Struts", "name": "Apache Struts Improper Input Validation Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2012-1823", "vendor": "PHP", "product": "PHP", "name": "PHP-CGI Query String Parameter Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2024-3273", "vendor": "D-Link", "product": "Multiple NAS Devices", "name": "D-Link Multiple NAS Devices Command Injection Vulnerability", "date": "2024-04-11", "ransom": false, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 7, "due": "2024-05-02" }, { "cve": "CVE-2020-14882", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-3248", "vendor": "Langflow", "product": "Langflow", "name": "Langflow Missing Authentication Vulnerability", "date": "2025-05-05", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 6, "due": "2025-05-26" }, { "cve": "CVE-2022-22954", "vendor": "VMware", "product": "Workspace ONE Access and Identity Manager", "name": "VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability", "date": "2022-04-14", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-05" }, { "cve": "CVE-2019-16920", "vendor": "D-Link", "product": "Multiple Routers", "name": "D-Link Multiple Routers Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 8, "due": "2022-04-15" }, { "cve": "CVE-2022-44877", "vendor": "CWP", "product": "Control Web Panel", "name": "CWP Control Web Panel OS Command Injection Vulnerability", "date": "2023-01-17", "ransom": false, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2023-02-07" }, { "cve": "CVE-2018-7600", "vendor": "Drupal", "product": "Drupal Core", "name": "Drupal Core Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 1, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2020-8515", "vendor": "DrayTek", "product": "Multiple Vigor Routers", "name": "Multiple DrayTek Vigor Routers Web Management Page Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9999, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2017-10271", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle Corporation WebLogic Server Remote Code Execution Vulnerability", "date": "2022-02-10", "ransom": true, "cvss": 7.5, "epss": 0.9999, "vckev": true, "euvd": false, "ra": 2, "due": "2022-08-10" }, { "cve": "CVE-2021-41773", "vendor": "Apache", "product": "HTTP Server", "name": "Apache HTTP Server Path Traversal Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.9999, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2020-3452", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "name": "Cisco ASA and FTD Read-Only Path Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.5, "epss": 0.9999, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-34102", "vendor": "Adobe", "product": "Commerce and Magento Open Source", "name": "Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability", "date": "2024-07-17", "ransom": false, "cvss": 9.8, "epss": 0.9999, "vckev": true, "euvd": false, "ra": 3, "due": "2024-08-07" }, { "cve": "CVE-2018-11776", "vendor": "Apache", "product": "Struts", "name": "Apache Struts Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.1, "epss": 0.9999, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-27199", "vendor": "JetBrains", "product": "TeamCity", "name": "JetBrains TeamCity Relative Path Traversal Vulnerability", "date": "2026-04-20", "ransom": true, "cvss": 7.3, "epss": 0.9999, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-04" }, { "cve": "CVE-2025-22457", "vendor": "Ivanti", "product": "Connect Secure, Policy Secure, and ZTA Gateways", "name": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability", "date": "2025-04-04", "ransom": true, "cvss": 9.8, "epss": 0.9999, "vckev": true, "euvd": false, "ra": 9, "due": "2025-04-11" }, { "cve": "CVE-2023-29300", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "date": "2024-01-08", "ransom": true, "cvss": 9.8, "epss": 0.9999, "vckev": true, "euvd": false, "ra": 3, "due": "2024-01-29" }, { "cve": "CVE-2017-12617", "vendor": "Apache", "product": "Tomcat", "name": "Apache Tomcat Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 8.1, "epss": 0.9999, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2024-7593", "vendor": "Ivanti", "product": "Virtual Traffic Manager", "name": "Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability", "date": "2024-09-24", "ransom": false, "cvss": 9.8, "epss": 0.9999, "vckev": true, "euvd": false, "ra": 3, "due": "2024-10-15" }, { "cve": "CVE-2024-4577", "vendor": "PHP Group", "product": "PHP", "name": "PHP-CGI OS Command Injection Vulnerability", "date": "2024-06-12", "ransom": true, "cvss": 9.8, "epss": 0.9999, "vckev": true, "euvd": false, "ra": 3, "due": "2024-07-03" }, { "cve": "CVE-2020-9054", "vendor": "Zyxel", "product": "Multiple Network-Attached Storage (NAS) Devices", "name": "Zyxel Multiple NAS Devices OS Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.9999, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2019-9670", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference", "date": "2022-01-10", "ransom": false, "cvss": 9.8, "epss": 0.9999, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-10" }, { "cve": "CVE-2023-46805", "vendor": "Ivanti", "product": "Connect Secure and Policy Secure", "name": "Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability", "date": "2024-01-10", "ransom": true, "cvss": 8.2, "epss": 0.9999, "vckev": true, "euvd": false, "ra": 3, "due": "2024-01-22" }, { "cve": "CVE-2023-22527", "vendor": "Atlassian", "product": "Confluence Data Center and Server", "name": "Atlassian Confluence Data Center and Server Template Injection Vulnerability", "date": "2024-01-24", "ransom": true, "cvss": 9.8, "epss": 0.9998, "vckev": true, "euvd": false, "ra": 3, "due": "2024-02-14" }, { "cve": "CVE-2022-40684", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Authentication Bypass Vulnerability", "date": "2022-10-11", "ransom": true, "cvss": 9.8, "epss": 0.9998, "vckev": true, "euvd": false, "ra": 2, "due": "2022-11-01" }, { "cve": "CVE-2024-45195", "vendor": "Apache", "product": "OFBiz", "name": "Apache OFBiz Forced Browsing Vulnerability", "date": "2025-02-04", "ransom": false, "cvss": 7.5, "epss": 0.9998, "vckev": true, "euvd": false, "ra": 3, "due": "2025-02-25" }, { "cve": "CVE-2021-22204", "vendor": "Perl", "product": "Exiftool", "name": "ExifTool Remote Code Execution Vulnerability", "date": "2021-11-17", "ransom": false, "cvss": 7.8, "epss": 0.9998, "vckev": true, "euvd": false, "ra": 2, "due": "2021-12-01" }, { "cve": "CVE-2021-20090", "vendor": "Arcadyan", "product": "Buffalo Firmware", "name": "Arcadyan Buffalo Firmware Path Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9998, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2023-42793", "vendor": "JetBrains", "product": "TeamCity", "name": "JetBrains TeamCity Authentication Bypass Vulnerability", "date": "2023-10-04", "ransom": true, "cvss": 9.8, "epss": 0.9998, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-25" }, { "cve": "CVE-2024-24919", "vendor": "Check Point", "product": "Quantum Security Gateways", "name": "Check Point Quantum Security Gateways Information Disclosure Vulnerability", "date": "2024-05-30", "ransom": true, "cvss": 8.6, "epss": 0.9998, "vckev": true, "euvd": false, "ra": 3, "due": "2024-06-20" }, { "cve": "CVE-2021-45046", "vendor": "Apache", "product": "Log4j2", "name": "Apache Log4j2 Deserialization of Untrusted Data Vulnerability", "date": "2023-05-01", "ransom": true, "cvss": 9, "epss": 0.9998, "vckev": true, "euvd": false, "ra": 2, "due": "2023-05-22" }, { "cve": "CVE-2024-4879", "vendor": "ServiceNow", "product": "Utah, Vancouver, and Washington DC Now Platform", "name": "ServiceNow Improper Input Validation Vulnerability", "date": "2024-07-29", "ransom": false, "cvss": 9.8, "epss": 0.9998, "vckev": true, "euvd": false, "ra": 3, "due": "2024-08-19" }, { "cve": "CVE-2014-8361", "vendor": "Realtek", "product": "SDK", "name": "Realtek SDK Improper Input Validation Vulnerability", "date": "2023-09-18", "ransom": false, "cvss": 9.8, "epss": 0.9998, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-09" }, { "cve": "CVE-2025-0282", "vendor": "Ivanti", "product": "Connect Secure, Policy Secure, and ZTA Gateways", "name": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability", "date": "2025-01-08", "ransom": true, "cvss": 9, "epss": 0.9997, "vckev": true, "euvd": false, "ra": 10, "due": "2025-01-15" }, { "cve": "CVE-2022-47986", "vendor": "IBM", "product": "Aspera Faspex", "name": "IBM Aspera Faspex Code Execution Vulnerability", "date": "2023-02-21", "ransom": true, "cvss": 9.8, "epss": 0.9997, "vckev": true, "euvd": false, "ra": 2, "due": "2023-03-14" }, { "cve": "CVE-2020-25506", "vendor": "D-Link", "product": "DNS-320 Device", "name": "D-Link DNS-320 Device Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9997, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2019-2725", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server, Injection", "date": "2022-01-10", "ransom": true, "cvss": 9.8, "epss": 0.9996, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-10" }, { "cve": "CVE-2021-42013", "vendor": "Apache", "product": "HTTP Server", "name": "Apache HTTP Server Path Traversal Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.9996, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2019-10149", "vendor": "Exim", "product": "Mail Transfer Agent (MTA)", "name": "Exim Mail Transfer Agent (MTA) Improper Input Validation", "date": "2022-01-10", "ransom": false, "cvss": 9.8, "epss": 0.9996, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-10" }, { "cve": "CVE-2024-1709", "vendor": "ConnectWise", "product": "ScreenConnect", "name": "ConnectWise ScreenConnect Authentication Bypass Vulnerability", "date": "2024-02-22", "ransom": true, "cvss": 10, "epss": 0.9996, "vckev": true, "euvd": false, "ra": 3, "due": "2024-02-29" }, { "cve": "CVE-2025-5777", "vendor": "Citrix", "product": "NetScaler ADC and Gateway", "name": "Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability", "date": "2025-07-10", "ransom": true, "cvss": 7.5, "epss": 0.9996, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-11" }, { "cve": "CVE-2022-1388", "vendor": "F5", "product": "BIG-IP", "name": "F5 BIG-IP Missing Authentication Vulnerability", "date": "2022-05-10", "ransom": true, "cvss": 9.8, "epss": 0.9996, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-31" }, { "cve": "CVE-2024-38475", "vendor": "Apache", "product": "HTTP Server", "name": "Apache HTTP Server Improper Escaping of Output Vulnerability", "date": "2025-05-01", "ransom": false, "cvss": 9.1, "epss": 0.9996, "vckev": true, "euvd": false, "ra": 6, "due": "2025-05-22" }, { "cve": "CVE-2024-29824", "vendor": "Ivanti", "product": "Endpoint Manager (EPM)", "name": "Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability", "date": "2024-10-02", "ransom": false, "cvss": 8.8, "epss": 0.9995, "vckev": true, "euvd": false, "ra": 3, "due": "2024-10-23" }, { "cve": "CVE-2018-15961", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Unrestricted File Upload Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9995, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2023-38035", "vendor": "Ivanti", "product": "Sentry", "name": "Ivanti Sentry Authentication Bypass Vulnerability", "date": "2023-08-22", "ransom": true, "cvss": 9.8, "epss": 0.9995, "vckev": true, "euvd": false, "ra": 3, "due": "2023-09-12" }, { "cve": "CVE-2025-31161", "vendor": "CrushFTP", "product": "CrushFTP", "name": "CrushFTP Authentication Bypass Vulnerability", "date": "2025-04-07", "ransom": true, "cvss": 9.8, "epss": 0.9995, "vckev": true, "euvd": false, "ra": 6, "due": "2025-04-28" }, { "cve": "CVE-2022-30525", "vendor": "Zyxel", "product": "Multiple Firewalls", "name": "Zyxel Multiple Firewalls OS Command Injection Vulnerability", "date": "2022-05-16", "ransom": false, "cvss": 9.8, "epss": 0.9994, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-06" }, { "cve": "CVE-2018-10562", "vendor": "Dasan", "product": "Gigabit Passive Optical Network (GPON) Routers", "name": "Dasan GPON Routers Command Injection Vulnerability", "date": "2022-03-31", "ransom": true, "cvss": 9.8, "epss": 0.9994, "vckev": true, "euvd": false, "ra": 8, "due": "2022-04-21" }, { "cve": "CVE-2021-3129", "vendor": "Laravel", "product": "Ignition", "name": "Laravel Ignition File Upload Vulnerability", "date": "2023-09-18", "ransom": true, "cvss": 9.8, "epss": 0.9994, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-09" }, { "cve": "CVE-2020-10189", "vendor": "Zoho", "product": "ManageEngine", "name": "Zoho ManageEngine Desktop Central File Upload Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9994, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2022-35405", "vendor": "Zoho", "product": "ManageEngine", "name": "Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability", "date": "2022-09-22", "ransom": false, "cvss": 9.8, "epss": 0.9994, "vckev": true, "euvd": false, "ra": 2, "due": "2022-10-13" }, { "cve": "CVE-2015-3113", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Heap-Based Buffer Overflow Vulnerability", "date": "2022-04-13", "ransom": false, "cvss": 9.8, "epss": 0.9994, "vckev": true, "euvd": false, "ra": 8, "due": "2022-05-04" }, { "cve": "CVE-2014-7169", "vendor": "GNU", "product": "Bourne-Again Shell (Bash)", "name": "GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability", "date": "2022-01-28", "ransom": false, "cvss": 9.8, "epss": 0.9994, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-28" }, { "cve": "CVE-2022-22963", "vendor": "VMware Tanzu", "product": "Spring Cloud", "name": "VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability", "date": "2022-08-25", "ransom": false, "cvss": 9.8, "epss": 0.9994, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-15" }, { "cve": "CVE-2024-27198", "vendor": "JetBrains", "product": "TeamCity", "name": "JetBrains TeamCity Authentication Bypass Vulnerability", "date": "2024-03-07", "ransom": true, "cvss": 9.8, "epss": 0.9994, "vckev": true, "euvd": false, "ra": 3, "due": "2024-03-28" }, { "cve": "CVE-2021-26085", "vendor": "Atlassian", "product": "Confluence Server", "name": "Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability", "date": "2022-03-28", "ransom": true, "cvss": 5.3, "epss": 0.9994, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-18" }, { "cve": "CVE-2023-34362", "vendor": "Progress", "product": "MOVEit Transfer", "name": "Progress MOVEit Transfer SQL Injection Vulnerability", "date": "2023-06-02", "ransom": true, "cvss": 9.8, "epss": 0.9993, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-23" }, { "cve": "CVE-2021-39226", "vendor": "Grafana Labs", "product": "Grafana", "name": "Grafana Authentication Bypass Vulnerability", "date": "2022-08-25", "ransom": false, "cvss": 7.3, "epss": 0.9993, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-15" }, { "cve": "CVE-2021-1497", "vendor": "Cisco", "product": "HyperFlex HX", "name": "Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9993, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2025-24813", "vendor": "Apache", "product": "Tomcat", "name": "Apache Tomcat Path Equivalence Vulnerability", "date": "2025-04-01", "ransom": false, "cvss": 9.8, "epss": 0.9992, "vckev": true, "euvd": false, "ra": 6, "due": "2025-04-22" }, { "cve": "CVE-2019-3396", "vendor": "Atlassian", "product": "Confluence Server and Data Server", "name": "Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.9991, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-4427", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability", "date": "2025-05-19", "ransom": false, "cvss": 7.5, "epss": 0.9991, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-09" }, { "cve": "CVE-2026-31431", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability", "date": "2026-05-01", "ransom": false, "cvss": 7.8, "epss": 0.9991, "vckev": true, "euvd": false, "ra": 11, "due": "2026-05-15" }, { "cve": "CVE-2015-1427", "vendor": "Elastic", "product": "Elasticsearch", "name": "Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.9991, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2019-7481", "vendor": "SonicWall", "product": "SMA100", "name": "SonicWall SMA100 SQL Injection Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 7.5, "epss": 0.9991, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2018-0296", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA)", "name": "Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.5, "epss": 0.999, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-20038", "vendor": "SonicWall", "product": "SMA 100 Appliances", "name": "SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability", "date": "2022-01-28", "ransom": true, "cvss": 9.8, "epss": 0.999, "vckev": true, "euvd": false, "ra": 2, "due": "2022-02-11" }, { "cve": "CVE-2021-22986", "vendor": "F5", "product": "BIG-IP and BIG-IQ Centralized Management", "name": "F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.999, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2026-10520", "vendor": "Ivanti", "product": "Sentry", "name": "Ivanti Sentry OS Command Injection Vulnerability", "date": "2026-06-11", "ransom": false, "cvss": 10, "epss": 0.9989, "vckev": true, "euvd": false, "ra": 12, "due": "2026-06-14" }, { "cve": "CVE-2014-0497", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Integer Underflow Vulnerablity", "date": "2024-09-17", "ransom": false, "cvss": 9.8, "epss": 0.9988, "vckev": true, "euvd": false, "ra": 13, "due": "2024-10-08" }, { "cve": "CVE-2024-45519", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability", "date": "2024-10-03", "ransom": false, "cvss": 9.8, "epss": 0.9988, "vckev": true, "euvd": false, "ra": 3, "due": "2024-10-24" }, { "cve": "CVE-2019-1653", "vendor": "Cisco", "product": "Small Business RV320 and RV325 Routers", "name": "Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.5, "epss": 0.9988, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-33044", "vendor": "Dahua", "product": "IP Camera Firmware", "name": "Dahua IP Camera Authentication Bypass Vulnerability", "date": "2024-08-21", "ransom": false, "cvss": 9.8, "epss": 0.9987, "vckev": true, "euvd": false, "ra": 3, "due": "2024-09-11" }, { "cve": "CVE-2021-36260", "vendor": "Hikvision", "product": "Security cameras web server", "name": "Hikvision Improper Input Validation", "date": "2022-01-10", "ransom": false, "cvss": 9.8, "epss": 0.9987, "vckev": true, "euvd": false, "ra": 2, "due": "2022-01-24" }, { "cve": "CVE-2021-44515", "vendor": "Zoho", "product": "Desktop Central", "name": "Zoho Desktop Central Authentication Bypass Vulnerability", "date": "2021-12-10", "ransom": false, "cvss": 9.8, "epss": 0.9987, "vckev": true, "euvd": false, "ra": 2, "due": "2021-12-24" }, { "cve": "CVE-2025-24893", "vendor": "XWiki", "product": "Platform", "name": "XWiki Platform Eval Injection Vulnerability", "date": "2025-10-30", "ransom": false, "cvss": 9.8, "epss": 0.9986, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-20" }, { "cve": "CVE-2021-35394", "vendor": "Realtek", "product": "Jungle Software Development Kit (SDK)", "name": "Realtek Jungle SDK Remote Code Execution Vulnerability", "date": "2021-12-10", "ransom": false, "cvss": 9.8, "epss": 0.9986, "vckev": true, "euvd": false, "ra": 2, "due": "2021-12-24" }, { "cve": "CVE-2025-32432", "vendor": "Craft CMS", "product": "Craft CMS", "name": "Craft CMS Code Injection Vulnerability", "date": "2026-03-20", "ransom": false, "cvss": 10, "epss": 0.9984, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-03" }, { "cve": "CVE-2026-33017", "vendor": "Langflow", "product": "Langflow", "name": "Langflow Code Injection Vulnerability", "date": "2026-03-25", "ransom": false, "cvss": 9.8, "epss": 0.9984, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-08" }, { "cve": "CVE-2024-13159", "vendor": "Ivanti", "product": "Endpoint Manager (EPM)", "name": "Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability", "date": "2025-03-10", "ransom": false, "cvss": 7.5, "epss": 0.9983, "vckev": true, "euvd": false, "ra": 6, "due": "2025-03-31" }, { "cve": "CVE-2023-23752", "vendor": "Joomla!", "product": "Joomla!", "name": "Joomla! Improper Access Control Vulnerability", "date": "2024-01-08", "ransom": false, "cvss": 5.3, "epss": 0.9983, "vckev": true, "euvd": false, "ra": 3, "due": "2024-01-29" }, { "cve": "CVE-2022-46169", "vendor": "Cacti", "product": "Cacti", "name": "Cacti Command Injection Vulnerability", "date": "2023-02-16", "ransom": false, "cvss": 9.8, "epss": 0.9983, "vckev": true, "euvd": false, "ra": 2, "due": "2023-03-09" }, { "cve": "CVE-2021-37415", "vendor": "Zoho", "product": "ManageEngine ServiceDesk Plus (SDP)", "name": "Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability", "date": "2021-12-01", "ransom": false, "cvss": 9.8, "epss": 0.9982, "vckev": true, "euvd": false, "ra": 2, "due": "2021-12-15" }, { "cve": "CVE-2023-21839", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Unspecified Vulnerability", "date": "2023-05-01", "ransom": false, "cvss": 7.5, "epss": 0.9981, "vckev": true, "euvd": false, "ra": 2, "due": "2023-05-22" }, { "cve": "CVE-2022-1040", "vendor": "Sophos", "product": "Firewall", "name": "Sophos Firewall Authentication Bypass Vulnerability", "date": "2022-03-31", "ransom": false, "cvss": 9.8, "epss": 0.998, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-21" }, { "cve": "CVE-2024-36401", "vendor": "OSGeo", "product": "GeoServer", "name": "OSGeo GeoServer GeoTools Eval Injection Vulnerability", "date": "2024-07-15", "ransom": false, "cvss": 9.8, "epss": 0.9979, "vckev": true, "euvd": false, "ra": 3, "due": "2024-08-05" }, { "cve": "CVE-2016-6277", "vendor": "NETGEAR", "product": "Multiple Routers", "name": "NETGEAR Multiple Routers Remote Code Execution Vulnerability", "date": "2022-03-07", "ransom": false, "cvss": 8.8, "epss": 0.9978, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-07" }, { "cve": "CVE-2020-13927", "vendor": "Apache", "product": "Airflow's Experimental API", "name": "Apache Airflow's Experimental API Authentication Bypass", "date": "2022-01-18", "ransom": false, "cvss": 9.8, "epss": 0.9978, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-18" }, { "cve": "CVE-2023-38205", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Improper Access Control Vulnerability", "date": "2023-07-20", "ransom": false, "cvss": 7.5, "epss": 0.9977, "vckev": true, "euvd": false, "ra": 3, "due": "2023-08-10" }, { "cve": "CVE-2019-15107", "vendor": "Webmin", "product": "Webmin", "name": "Webmin Command Injection Vulnerability", "date": "2022-03-25", "ransom": true, "cvss": 9.8, "epss": 0.9977, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2020-7961", "vendor": "Liferay", "product": "Liferay Portal", "name": "Liferay Portal Deserialization of Untrusted Data Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9977, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2023-29298", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Improper Access Control Vulnerability", "date": "2023-07-20", "ransom": false, "cvss": 7.5, "epss": 0.9976, "vckev": true, "euvd": false, "ra": 3, "due": "2023-08-10" }, { "cve": "CVE-2022-47966", "vendor": "Zoho", "product": "ManageEngine", "name": "Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability", "date": "2023-01-23", "ransom": true, "cvss": 9.8, "epss": 0.9975, "vckev": true, "euvd": false, "ra": 2, "due": "2023-02-13" }, { "cve": "CVE-2020-15505", "vendor": "Ivanti", "product": "MobileIron Multiple Products", "name": "Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9974, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2019-18935", "vendor": "Progress", "product": "Telerik UI for ASP.NET AJAX", "name": "Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.9974, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2023-4863", "vendor": "Google", "product": "Chromium WebP", "name": "Google Chromium WebP Heap-Based Buffer Overflow Vulnerability", "date": "2023-09-13", "ransom": false, "cvss": 8.8, "epss": 0.9973, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-04" }, { "cve": "CVE-2021-22205", "vendor": "GitLab", "product": "Community and Enterprise Editions", "name": "GitLab Community and Enterprise Editions Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 10, "epss": 0.9973, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2019-16759", "vendor": "vBulletin", "product": "vBulletin", "name": "vBulletin PHP Module Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9973, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-61882", "vendor": "Oracle", "product": "E-Business Suite", "name": "Oracle E-Business Suite Unspecified Vulnerability", "date": "2025-10-06", "ransom": true, "cvss": 9.8, "epss": 0.9972, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-27" }, { "cve": "CVE-2010-2861", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Directory Traversal Vulnerability", "date": "2022-03-25", "ransom": true, "cvss": 9.8, "epss": 0.9972, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2023-3519", "vendor": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "name": "Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability", "date": "2023-07-19", "ransom": true, "cvss": 9.8, "epss": 0.9971, "vckev": true, "euvd": false, "ra": 3, "due": "2023-08-09" }, { "cve": "CVE-2016-10033", "vendor": "PHP", "product": "PHPMailer", "name": "PHPMailer Command Injection Vulnerability", "date": "2025-07-07", "ransom": false, "cvss": 9.8, "epss": 0.9971, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-28" }, { "cve": "CVE-2024-0012", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability", "date": "2024-11-18", "ransom": true, "cvss": 9.8, "epss": 0.997, "vckev": true, "euvd": false, "ra": 14, "due": "2024-12-09" }, { "cve": "CVE-2022-35914", "vendor": "Teclib", "product": "GLPI", "name": "Teclib GLPI Remote Code Execution Vulnerability", "date": "2023-03-07", "ransom": false, "cvss": 9.8, "epss": 0.997, "vckev": true, "euvd": false, "ra": 2, "due": "2023-03-28" }, { "cve": "CVE-2017-1000353", "vendor": "Jenkins", "product": "Jenkins", "name": "Jenkins Remote Code Execution Vulnerability", "date": "2025-10-02", "ransom": false, "cvss": 9.8, "epss": 0.9968, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-23" }, { "cve": "CVE-2022-22965", "vendor": "VMware", "product": "Spring Framework", "name": "Spring Framework JDK 9+ Remote Code Execution Vulnerability", "date": "2022-04-04", "ransom": false, "cvss": 9.8, "epss": 0.9968, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-25" }, { "cve": "CVE-2023-46604", "vendor": "Apache", "product": "ActiveMQ", "name": "Apache ActiveMQ Deserialization of Untrusted Data Vulnerability", "date": "2023-11-02", "ransom": true, "cvss": 9.8, "epss": 0.9965, "vckev": true, "euvd": false, "ra": 3, "due": "2023-11-23" }, { "cve": "CVE-2024-5217", "vendor": "ServiceNow", "product": "Utah, Vancouver, and Washington DC Now Platform", "name": "ServiceNow Incomplete List of Disallowed Inputs Vulnerability", "date": "2024-07-29", "ransom": false, "cvss": 9.8, "epss": 0.9963, "vckev": true, "euvd": false, "ra": 3, "due": "2024-08-19" }, { "cve": "CVE-2025-48703", "vendor": "CWP", "product": "Control Web Panel", "name": "CWP Control Web Panel OS Command Injection Vulnerability", "date": "2025-11-04", "ransom": false, "cvss": 9, "epss": 0.9962, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-25" }, { "cve": "CVE-2014-6278", "vendor": "GNU", "product": "GNU Bash", "name": "GNU Bash OS Command Injection Vulnerability", "date": "2025-10-02", "ransom": false, "cvss": 8.8, "epss": 0.9962, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-23" }, { "cve": "CVE-2025-55182", "vendor": "Meta", "product": "React Server Components", "name": "Meta React Server Components Remote Code Execution Vulnerability", "date": "2025-12-05", "ransom": true, "cvss": 10, "epss": 0.9962, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-12" }, { "cve": "CVE-2025-10035", "vendor": "Fortra", "product": "GoAnywhere MFT", "name": "Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability", "date": "2025-09-29", "ransom": true, "cvss": 9.8, "epss": 0.9961, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-20" }, { "cve": "CVE-2024-28995", "vendor": "SolarWinds", "product": "Serv-U", "name": "SolarWinds Serv-U Path Traversal Vulnerability", "date": "2024-07-17", "ransom": false, "cvss": 7.5, "epss": 0.9961, "vckev": true, "euvd": false, "ra": 3, "due": "2024-08-07" }, { "cve": "CVE-2024-9465", "vendor": "Palo Alto Networks", "product": "Expedition", "name": "Palo Alto Networks Expedition SQL Injection Vulnerability", "date": "2024-11-14", "ransom": false, "cvss": 9.1, "epss": 0.9961, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-05" }, { "cve": "CVE-2017-12615", "vendor": "Apache", "product": "Tomcat", "name": "Apache Tomcat on Windows Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": true, "cvss": 8.1, "epss": 0.9961, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2020-16846", "vendor": "SaltStack", "product": "Salt", "name": "SaltStack Salt Shell Injection Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9959, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2023-20198", "vendor": "Cisco", "product": "IOS XE Web UI", "name": "Cisco IOS XE Web UI Privilege Escalation Vulnerability", "date": "2023-10-16", "ransom": false, "cvss": 10, "epss": 0.9957, "vckev": true, "euvd": false, "ra": 15, "due": "2023-10-20" }, { "cve": "CVE-2021-33045", "vendor": "Dahua", "product": "IP Camera Firmware", "name": "Dahua IP Camera Authentication Bypass Vulnerability", "date": "2024-08-21", "ransom": false, "cvss": 9.8, "epss": 0.9956, "vckev": true, "euvd": false, "ra": 3, "due": "2024-09-11" }, { "cve": "CVE-2024-4040", "vendor": "CrushFTP", "product": "CrushFTP", "name": "CrushFTP VFS Sandbox Escape Vulnerability", "date": "2024-04-24", "ransom": false, "cvss": 10, "epss": 0.9954, "vckev": true, "euvd": false, "ra": 3, "due": "2024-05-01" }, { "cve": "CVE-2018-20062", "vendor": "ThinkPHP", "product": "noneCms", "name": "ThinkPHP \"noneCms\" Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9953, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-21972", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.9952, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2025-31324", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Unrestricted File Upload Vulnerability", "date": "2025-04-29", "ransom": true, "cvss": 9.8, "epss": 0.9951, "vckev": true, "euvd": false, "ra": 6, "due": "2025-05-20" }, { "cve": "CVE-2018-0171", "vendor": "Cisco", "product": "IOS and IOS XE", "name": "Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9949, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2022-42475", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability", "date": "2022-12-13", "ransom": true, "cvss": 9.8, "epss": 0.9947, "vckev": true, "euvd": false, "ra": 2, "due": "2023-01-03" }, { "cve": "CVE-2024-23692", "vendor": "Rejetto", "product": "HTTP File Server", "name": "Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability", "date": "2024-07-09", "ransom": true, "cvss": 9.8, "epss": 0.9947, "vckev": true, "euvd": false, "ra": 3, "due": "2024-07-30" }, { "cve": "CVE-2017-7494", "vendor": "Samba", "product": "Samba", "name": "Samba Remote Code Execution Vulnerability", "date": "2023-03-30", "ransom": true, "cvss": 9.8, "epss": 0.9945, "vckev": true, "euvd": false, "ra": 2, "due": "2023-04-20" }, { "cve": "CVE-2018-2628", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Unspecified Vulnerability", "date": "2022-09-08", "ransom": false, "cvss": 9.8, "epss": 0.9945, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-29" }, { "cve": "CVE-2024-32113", "vendor": "Apache", "product": "OFBiz", "name": "Apache OFBiz Path Traversal Vulnerability", "date": "2024-08-07", "ransom": false, "cvss": 9.8, "epss": 0.9944, "vckev": true, "euvd": false, "ra": 3, "due": "2024-08-28" }, { "cve": "CVE-2023-34048", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Out-of-Bounds Write Vulnerability", "date": "2024-01-22", "ransom": false, "cvss": 9.8, "epss": 0.9943, "vckev": true, "euvd": false, "ra": 3, "due": "2024-02-12" }, { "cve": "CVE-2024-38856", "vendor": "Apache", "product": "OFBiz", "name": "Apache OFBiz Incorrect Authorization Vulnerability", "date": "2024-08-27", "ransom": false, "cvss": 9.8, "epss": 0.9943, "vckev": true, "euvd": false, "ra": 3, "due": "2024-09-17" }, { "cve": "CVE-2019-11043", "vendor": "PHP", "product": "FastCGI Process Manager (FPM)", "name": "PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability", "date": "2022-03-25", "ransom": true, "cvss": 9.8, "epss": 0.9941, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2017-9805", "vendor": "Apache", "product": "Struts", "name": "Apache Struts Deserialization of Untrusted Data Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.1, "epss": 0.994, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-32030", "vendor": "ASUS", "product": "Routers", "name": "ASUS Routers Improper Authentication Vulnerability", "date": "2025-06-02", "ransom": false, "cvss": 9.8, "epss": 0.9939, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-23" }, { "cve": "CVE-2015-5119", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 9.8, "epss": 0.9934, "vckev": true, "euvd": false, "ra": 8, "due": "2022-03-24" }, { "cve": "CVE-2014-6287", "vendor": "Rejetto", "product": "HTTP File Server (HFS)", "name": "Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.9932, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2026-8037", "vendor": "Progress", "product": "LoadMaster", "name": "Progress LoadMaster Command Injection Vulnerability", "date": "2026-08-07", "ransom": false, "cvss": 9.8, "epss": 0.9931, "vckev": true, "euvd": true, "ra": 12, "due": "2026-08-10" }, { "cve": "CVE-2021-3156", "vendor": "Sudo", "product": "Sudo", "name": "Sudo Heap-Based Buffer Overflow Vulnerability", "date": "2022-04-06", "ransom": false, "cvss": 7.8, "epss": 0.9929, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-27" }, { "cve": "CVE-2023-28771", "vendor": "Zyxel", "product": "Multiple Firewalls", "name": "Zyxel Multiple Firewalls OS Command Injection Vulnerability", "date": "2023-05-31", "ransom": false, "cvss": 9.8, "epss": 0.9928, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-21" }, { "cve": "CVE-2022-0543", "vendor": "Redis", "product": "Debian-specific Redis Servers", "name": "Debian-specific Redis Server Lua Sandbox Escape Vulnerability", "date": "2022-03-28", "ransom": false, "cvss": 10, "epss": 0.9928, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-18" }, { "cve": "CVE-2020-1938", "vendor": "Apache", "product": "Tomcat", "name": "Apache Tomcat Improper Privilege Management Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 9.8, "epss": 0.9927, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2020-14750", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9927, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-4885", "vendor": "Progress", "product": "WhatsUp Gold", "name": "Progress WhatsUp Gold Path Traversal Vulnerability", "date": "2025-03-03", "ransom": false, "cvss": 9.8, "epss": 0.9927, "vckev": true, "euvd": false, "ra": 6, "due": "2025-03-24" }, { "cve": "CVE-2018-7602", "vendor": "Drupal", "product": "Core", "name": "Drupal Core Remote Code Execution Vulnerability", "date": "2022-04-13", "ransom": true, "cvss": 9.8, "epss": 0.9924, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-04" }, { "cve": "CVE-2024-27348", "vendor": "Apache", "product": "HugeGraph-Server", "name": "Apache HugeGraph-Server Improper Access Control Vulnerability", "date": "2024-09-18", "ransom": false, "cvss": 9.8, "epss": 0.9921, "vckev": true, "euvd": false, "ra": 3, "due": "2024-10-09" }, { "cve": "CVE-2026-48282", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Path Traversal Vulnerability", "date": "2026-07-07", "ransom": false, "cvss": 10, "epss": 0.992, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-10" }, { "cve": "CVE-2020-11978", "vendor": "Apache", "product": "Airflow", "name": "Apache Airflow Command Injection", "date": "2022-01-18", "ransom": false, "cvss": 8.8, "epss": 0.9919, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-18" }, { "cve": "CVE-2023-22515", "vendor": "Atlassian", "product": "Confluence Data Center and Server", "name": "Atlassian Confluence Data Center and Server Broken Access Control Vulnerability", "date": "2023-10-05", "ransom": true, "cvss": 9.8, "epss": 0.9916, "vckev": true, "euvd": false, "ra": 16, "due": "2023-10-13" }, { "cve": "CVE-2022-24086", "vendor": "Adobe", "product": "Commerce and Magento Open Source", "name": "Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability", "date": "2022-02-15", "ransom": false, "cvss": 9.8, "epss": 0.9911, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-01" }, { "cve": "CVE-2022-30333", "vendor": "RARLAB", "product": "UnRAR", "name": "RARLAB UnRAR Directory Traversal Vulnerability", "date": "2022-08-09", "ransom": true, "cvss": 7.5, "epss": 0.9911, "vckev": true, "euvd": false, "ra": 2, "due": "2022-08-30" }, { "cve": "CVE-2021-44529", "vendor": "Ivanti", "product": "Endpoint Manager Cloud Service Appliance (EPM CSA)", "name": "Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability", "date": "2024-03-25", "ransom": true, "cvss": 9.8, "epss": 0.991, "vckev": true, "euvd": false, "ra": 3, "due": "2024-04-15" }, { "cve": "CVE-2022-36804", "vendor": "Atlassian", "product": "Bitbucket Server and Data Center", "name": "Atlassian Bitbucket Server and Data Center Command Injection Vulnerability", "date": "2022-09-30", "ransom": false, "cvss": 8.8, "epss": 0.9908, "vckev": true, "euvd": false, "ra": 2, "due": "2022-10-21" }, { "cve": "CVE-2020-10199", "vendor": "Sonatype", "product": "Nexus Repository", "name": "Sonatype Nexus Repository Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.9906, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2019-16278", "vendor": "Nostromo", "product": "nhttpd", "name": "Nostromo nhttpd Directory Traversal Vulnerability", "date": "2024-11-07", "ransom": false, "cvss": 9.8, "epss": 0.9903, "vckev": true, "euvd": false, "ra": 3, "due": "2024-11-28" }, { "cve": "CVE-2017-3881", "vendor": "Cisco", "product": "IOS and IOS XE", "name": "Cisco IOS and IOS XE Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.9898, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2021-40539", "vendor": "Zoho", "product": "ManageEngine", "name": "Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.9896, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2019-3929", "vendor": "Crestron", "product": "Multiple Products", "name": "Crestron Multiple Products Command Injection Vulnerability", "date": "2022-04-15", "ransom": false, "cvss": 9.8, "epss": 0.9895, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-06" }, { "cve": "CVE-2020-7247", "vendor": "OpenBSD", "product": "OpenSMTPD", "name": "OpenSMTPD Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.9895, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2017-9791", "vendor": "Apache", "product": "Struts 1", "name": "Apache Struts 1 Improper Input Validation Vulnerability", "date": "2022-02-10", "ransom": false, "cvss": 9.8, "epss": 0.9891, "vckev": true, "euvd": false, "ra": 2, "due": "2022-08-10" }, { "cve": "CVE-2022-3236", "vendor": "Sophos", "product": "Firewall", "name": "Sophos Firewall Code Injection Vulnerability", "date": "2022-09-23", "ransom": false, "cvss": 9.8, "epss": 0.989, "vckev": true, "euvd": false, "ra": 2, "due": "2022-10-14" }, { "cve": "CVE-2023-47246", "vendor": "SysAid", "product": "SysAid Server", "name": "SysAid Server Path Traversal Vulnerability", "date": "2023-11-13", "ransom": true, "cvss": 9.8, "epss": 0.9885, "vckev": true, "euvd": false, "ra": 3, "due": "2023-12-04" }, { "cve": "CVE-2022-24816", "vendor": "OSGeo", "product": "JAI-EXT", "name": "OSGeo GeoServer JAI-EXT Code Injection Vulnerability", "date": "2024-06-26", "ransom": false, "cvss": 10, "epss": 0.9874, "vckev": true, "euvd": false, "ra": 3, "due": "2024-07-17" }, { "cve": "CVE-2013-2465", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Unspecified Vulnerability", "date": "2022-03-28", "ransom": true, "cvss": 9.8, "epss": 0.987, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-18" }, { "cve": "CVE-2012-3152", "vendor": "Oracle", "product": "Fusion Middleware", "name": "Oracle Fusion Middleware Unspecified Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.1, "epss": 0.9869, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2019-11539", "vendor": "Ivanti", "product": "Pulse Connect Secure and Pulse Policy Secure", "name": "Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 7.2, "epss": 0.9862, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-50623", "vendor": "Cleo", "product": "Multiple Products", "name": "Cleo Multiple Products Unrestricted File Upload Vulnerability", "date": "2024-12-13", "ransom": true, "cvss": 9.8, "epss": 0.9861, "vckev": true, "euvd": false, "ra": 3, "due": "2025-01-03" }, { "cve": "CVE-2024-8963", "vendor": "Ivanti", "product": "Cloud Services Appliance (CSA)", "name": "Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability", "date": "2024-09-19", "ransom": false, "cvss": 9.1, "epss": 0.9861, "vckev": true, "euvd": false, "ra": 17, "due": "2024-10-10" }, { "cve": "CVE-2025-32433", "vendor": "Erlang", "product": "Erlang/OTP", "name": "Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability", "date": "2025-06-09", "ransom": false, "cvss": 10, "epss": 0.9859, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-30" }, { "cve": "CVE-2022-27925", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability", "date": "2022-08-11", "ransom": true, "cvss": 7.2, "epss": 0.9859, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-01" }, { "cve": "CVE-2019-17558", "vendor": "Apache", "product": "Solr", "name": "Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.5, "epss": 0.9857, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-50603", "vendor": "Aviatrix", "product": "Controllers", "name": "Aviatrix Controllers OS Command Injection Vulnerability", "date": "2025-01-16", "ransom": false, "cvss": 9.8, "epss": 0.9855, "vckev": true, "euvd": false, "ra": 3, "due": "2025-02-06" }, { "cve": "CVE-2012-4681", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": true, "cvss": 9.8, "epss": 0.9854, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2016-3088", "vendor": "Apache", "product": "ActiveMQ", "name": "Apache ActiveMQ Improper Input Validation Vulnerability", "date": "2022-02-10", "ransom": false, "cvss": 9.8, "epss": 0.9852, "vckev": true, "euvd": false, "ra": 2, "due": "2022-08-10" }, { "cve": "CVE-2024-20767", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Improper Access Control Vulnerability", "date": "2024-12-16", "ransom": false, "cvss": 7.4, "epss": 0.9851, "vckev": true, "euvd": false, "ra": 3, "due": "2025-01-06" }, { "cve": "CVE-2019-5418", "vendor": "Rails", "product": "Ruby on Rails", "name": "Rails Ruby on Rails Path Traversal Vulnerability", "date": "2025-07-07", "ransom": false, "cvss": 7.5, "epss": 0.9851, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-28" }, { "cve": "CVE-2024-9463", "vendor": "Palo Alto Networks", "product": "Expedition", "name": "Palo Alto Networks Expedition OS Command Injection Vulnerability", "date": "2024-11-14", "ransom": false, "cvss": 7.5, "epss": 0.9849, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-05" }, { "cve": "CVE-2008-2992", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Reader and Acrobat Input Validation Vulnerability", "date": "2022-03-03", "ransom": true, "cvss": 7.8, "epss": 0.9848, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2025-0108", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability", "date": "2025-02-18", "ransom": false, "cvss": 9.1, "epss": 0.9846, "vckev": true, "euvd": false, "ra": 3, "due": "2025-03-11" }, { "cve": "CVE-2022-21587", "vendor": "Oracle", "product": "E-Business Suite", "name": "Oracle E-Business Suite Unspecified Vulnerability", "date": "2023-02-02", "ransom": true, "cvss": 9.8, "epss": 0.9834, "vckev": true, "euvd": false, "ra": 2, "due": "2023-02-23" }, { "cve": "CVE-2017-15944", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Remote Code Execution Vulnerability", "date": "2022-08-18", "ransom": false, "cvss": 9.8, "epss": 0.9834, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-08" }, { "cve": "CVE-2018-1000861", "vendor": "Jenkins", "product": "Jenkins Stapler Web Framework", "name": "Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability", "date": "2022-02-10", "ransom": false, "cvss": 9.8, "epss": 0.9833, "vckev": true, "euvd": false, "ra": 2, "due": "2022-08-10" }, { "cve": "CVE-2016-1555", "vendor": "NETGEAR", "product": "Wireless Access Point (WAP) Devices", "name": "NETGEAR Multiple WAP Devices Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.9832, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2023-20887", "vendor": "VMware", "product": "Aria Operations for Networks", "name": "Vmware Aria Operations for Networks Command Injection Vulnerability", "date": "2023-06-22", "ransom": false, "cvss": 9.8, "epss": 0.9828, "vckev": true, "euvd": false, "ra": 2, "due": "2023-07-13" }, { "cve": "CVE-2020-6207", "vendor": "SAP", "product": "Solution Manager", "name": "SAP Solution Manager Missing Authentication for Critical Function Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9827, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-55591", "vendor": "Fortinet", "product": "FortiOS and FortiProxy", "name": "Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability", "date": "2025-01-14", "ransom": true, "cvss": 9.8, "epss": 0.9826, "vckev": true, "euvd": false, "ra": 3, "due": "2025-01-21" }, { "cve": "CVE-2022-22947", "vendor": "VMware", "product": "Spring Cloud Gateway", "name": "VMware Spring Cloud Gateway Code Injection Vulnerability", "date": "2022-05-16", "ransom": false, "cvss": 10, "epss": 0.9825, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-06" }, { "cve": "CVE-2022-26138", "vendor": "Atlassian", "product": "Confluence", "name": "Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability", "date": "2022-07-29", "ransom": false, "cvss": 9.8, "epss": 0.9817, "vckev": true, "euvd": false, "ra": 2, "due": "2022-08-19" }, { "cve": "CVE-2021-39144", "vendor": "XStream", "product": "XStream", "name": "XStream Remote Code Execution Vulnerability", "date": "2023-03-10", "ransom": false, "cvss": 8.5, "epss": 0.9812, "vckev": true, "euvd": false, "ra": 2, "due": "2023-03-31" }, { "cve": "CVE-2012-0507", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": true, "cvss": 9.8, "epss": 0.9811, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2024-41713", "vendor": "Mitel", "product": "MiCollab", "name": "Mitel MiCollab Path Traversal Vulnerability", "date": "2025-01-07", "ransom": true, "cvss": 9.1, "epss": 0.9811, "vckev": true, "euvd": false, "ra": 3, "due": "2025-01-28" }, { "cve": "CVE-2024-12987", "vendor": "DrayTek", "product": "Vigor Routers", "name": "DrayTek Vigor Routers OS Command Injection Vulnerability", "date": "2025-05-15", "ransom": false, "cvss": 9.8, "epss": 0.9808, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-05" }, { "cve": "CVE-2023-25717", "vendor": "Ruckus Wireless", "product": "Multiple Products", "name": "Multiple Ruckus Wireless Products CSRF and RCE Vulnerability", "date": "2023-05-12", "ransom": false, "cvss": 9.8, "epss": 0.9807, "vckev": true, "euvd": false, "ra": 18, "due": "2023-06-02" }, { "cve": "CVE-2022-29303", "vendor": "SolarView", "product": "Compact", "name": "SolarView Compact Command Injection Vulnerability", "date": "2023-07-13", "ransom": false, "cvss": 9.8, "epss": 0.9804, "vckev": true, "euvd": false, "ra": 19, "due": "2023-08-03" }, { "cve": "CVE-2024-3272", "vendor": "D-Link", "product": "Multiple NAS Devices", "name": "D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability", "date": "2024-04-11", "ransom": false, "cvss": 9.8, "epss": 0.9804, "vckev": true, "euvd": false, "ra": 7, "due": "2024-05-02" }, { "cve": "CVE-2021-35395", "vendor": "Realtek", "product": "AP-Router SDK", "name": "Realtek AP-Router SDK Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9796, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2022-22536", "vendor": "SAP", "product": "Multiple Products", "name": "SAP Multiple Products HTTP Request Smuggling Vulnerability", "date": "2022-08-18", "ransom": false, "cvss": 10, "epss": 0.9795, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-08" }, { "cve": "CVE-2020-14883", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Unspecified Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.2, "epss": 0.9793, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2026-41940", "vendor": "WebPros", "product": "cPanel & WHM and WP2 (WordPress Squared)", "name": "WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability", "date": "2026-04-30", "ransom": true, "cvss": 9.8, "epss": 0.9793, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-03" }, { "cve": "CVE-2021-42237", "vendor": "Sitecore", "product": "XP", "name": "Sitecore XP Remote Command Execution Vulnerability", "date": "2022-03-25", "ransom": true, "cvss": 9.8, "epss": 0.979, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2026-24061", "vendor": "GNU", "product": "InetUtils", "name": "GNU InetUtils Argument Injection Vulnerability", "date": "2026-01-26", "ransom": false, "cvss": 9.8, "epss": 0.9788, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-16" }, { "cve": "CVE-2025-68613", "vendor": "n8n", "product": "n8n", "name": "n8n Improper Control of Dynamically-Managed Code Resources Vulnerability", "date": "2026-03-11", "ransom": false, "cvss": 8.8, "epss": 0.9788, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-25" }, { "cve": "CVE-2023-25280", "vendor": "D-Link", "product": "DIR-820 Router", "name": "D-Link DIR-820 Router OS Command Injection Vulnerability", "date": "2024-09-30", "ransom": false, "cvss": 9.8, "epss": 0.9786, "vckev": true, "euvd": false, "ra": 13, "due": "2024-10-21" }, { "cve": "CVE-2020-17519", "vendor": "Apache", "product": "Flink", "name": "Apache Flink Improper Access Control Vulnerability", "date": "2024-05-23", "ransom": false, "cvss": 7.5, "epss": 0.9786, "vckev": true, "euvd": false, "ra": 3, "due": "2024-06-13" }, { "cve": "CVE-2020-11738", "vendor": "WordPress", "product": "Snap Creek Duplicator Plugin", "name": "WordPress Snap Creek Duplicator Plugin File Download Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.5, "epss": 0.9782, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2023-38831", "vendor": "RARLAB", "product": "WinRAR", "name": "RARLAB WinRAR Code Execution Vulnerability", "date": "2023-08-24", "ransom": true, "cvss": 7.8, "epss": 0.9781, "vckev": true, "euvd": false, "ra": 3, "due": "2023-09-14" }, { "cve": "CVE-2025-61884", "vendor": "Oracle", "product": "E-Business Suite", "name": "Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability", "date": "2025-10-20", "ransom": true, "cvss": 7.5, "epss": 0.9779, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-10" }, { "cve": "CVE-2020-25078", "vendor": "D-Link", "product": "DCS-2530L and DCS-2670L Devices", "name": "D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability", "date": "2025-08-05", "ransom": false, "cvss": 7.5, "epss": 0.9771, "vckev": true, "euvd": false, "ra": 6, "due": "2025-08-26" }, { "cve": "CVE-2025-49113", "vendor": "Roundcube", "product": "Webmail", "name": "RoundCube Webmail Deserialization of Untrusted Data Vulnerability", "date": "2026-02-20", "ransom": false, "cvss": 8.8, "epss": 0.9769, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-13" }, { "cve": "CVE-2022-43769", "vendor": "Hitachi Vantara", "product": "Pentaho Business Analytics (BA) Server", "name": "Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability", "date": "2025-03-03", "ransom": false, "cvss": 7.2, "epss": 0.9767, "vckev": true, "euvd": false, "ra": 6, "due": "2025-03-24" }, { "cve": "CVE-2025-34028", "vendor": "Commvault", "product": "Command Center", "name": "Commvault Command Center Path Traversal Vulnerability", "date": "2025-05-02", "ransom": false, "cvss": 10, "epss": 0.9766, "vckev": true, "euvd": false, "ra": 6, "due": "2025-05-23" }, { "cve": "CVE-2015-7450", "vendor": "IBM", "product": "WebSphere Application Server and Server Hypervisor Edition", "name": "IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.", "date": "2022-01-10", "ransom": false, "cvss": 9.8, "epss": 0.9766, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-10" }, { "cve": "CVE-2021-45382", "vendor": "D-Link", "product": "Multiple Routers", "name": "D-Link Multiple Routers Remote Code Execution Vulnerability", "date": "2022-04-04", "ransom": false, "cvss": 9.8, "epss": 0.9764, "vckev": true, "euvd": false, "ra": 8, "due": "2022-04-25" }, { "cve": "CVE-2013-0422", "vendor": "Oracle", "product": "Java Runtime Environment (JRE)", "name": "Oracle JRE Remote Code Execution Vulnerability", "date": "2022-05-25", "ransom": true, "cvss": 9.8, "epss": 0.9761, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-15" }, { "cve": "CVE-2021-36380", "vendor": "Sunhillo", "product": "SureLine", "name": "Sunhillo SureLine OS Command Injection Vulnerablity", "date": "2024-03-05", "ransom": false, "cvss": 9.8, "epss": 0.976, "vckev": true, "euvd": false, "ra": 3, "due": "2024-03-26" }, { "cve": "CVE-2023-48788", "vendor": "Fortinet", "product": "FortiClient EMS", "name": "Fortinet FortiClient EMS SQL Injection Vulnerability", "date": "2024-03-25", "ransom": true, "cvss": 9.8, "epss": 0.9759, "vckev": true, "euvd": false, "ra": 3, "due": "2024-04-15" }, { "cve": "CVE-2016-3714", "vendor": "ImageMagick", "product": "ImageMagick", "name": "ImageMagick Improper Input Validation Vulnerability", "date": "2024-09-09", "ransom": false, "cvss": 8.4, "epss": 0.9748, "vckev": true, "euvd": false, "ra": 3, "due": "2024-09-30" }, { "cve": "CVE-2024-4358", "vendor": "Progress", "product": "Telerik Report Server", "name": "Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability", "date": "2024-06-13", "ransom": false, "cvss": 9.8, "epss": 0.9748, "vckev": true, "euvd": false, "ra": 3, "due": "2024-07-04" }, { "cve": "CVE-2024-56145", "vendor": "Craft CMS", "product": "Craft CMS", "name": "Craft CMS Code Injection Vulnerability", "date": "2025-06-02", "ransom": false, "cvss": 9.8, "epss": 0.9745, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-23" }, { "cve": "CVE-2019-9082", "vendor": "ThinkPHP", "product": "ThinkPHP", "name": "ThinkPHP Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.9742, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2007-3010", "vendor": "Alcatel", "product": "OmniPCX Enterprise", "name": "Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability", "date": "2022-04-15", "ransom": false, "cvss": 9.8, "epss": 0.9741, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-06" }, { "cve": "CVE-2023-27524", "vendor": "Apache", "product": "Superset", "name": "Apache Superset Insecure Default Initialization of Resource Vulnerability", "date": "2024-01-08", "ransom": false, "cvss": 9.8, "epss": 0.974, "vckev": true, "euvd": false, "ra": 3, "due": "2024-01-29" }, { "cve": "CVE-2021-22054", "vendor": "Omnissa", "product": "Workspace One UEM", "name": "Omnissa Workspace ONE Server-Side Request Forgery", "date": "2026-03-09", "ransom": false, "cvss": 7.5, "epss": 0.9737, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-23" }, { "cve": "CVE-2023-26360", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "date": "2023-03-15", "ransom": false, "cvss": 8.6, "epss": 0.9734, "vckev": true, "euvd": false, "ra": 2, "due": "2023-04-05" }, { "cve": "CVE-2020-1956", "vendor": "Apache", "product": "Kylin", "name": "Apache Kylin OS Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 8.8, "epss": 0.9734, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2020-25213", "vendor": "WordPress", "product": "File Manager Plugin", "name": "WordPress File Manager Plugin Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9733, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2020-14864", "vendor": "Oracle", "product": "Intelligence Enterprise Edition", "name": "Oracle Business Intelligence Enterprise Edition Path Transversal", "date": "2022-01-18", "ransom": false, "cvss": 7.5, "epss": 0.9723, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-18" }, { "cve": "CVE-2026-34197", "vendor": "Apache", "product": "ActiveMQ", "name": "Apache ActiveMQ Improper Input Validation Vulnerability", "date": "2026-04-16", "ransom": false, "cvss": 8.8, "epss": 0.9722, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-30" }, { "cve": "CVE-2021-41277", "vendor": "Metabase", "product": "Metabase", "name": "Metabase GeoJSON API Local File Inclusion Vulnerability", "date": "2024-11-12", "ransom": false, "cvss": 7.5, "epss": 0.9718, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-03" }, { "cve": "CVE-2019-7256", "vendor": "Nice", "product": "Linear eMerge E3-Series", "name": "Nice Linear eMerge E3-Series OS Command Injection Vulnerability", "date": "2024-03-25", "ransom": false, "cvss": 9.8, "epss": 0.9714, "vckev": true, "euvd": false, "ra": 20, "due": "2024-04-15" }, { "cve": "CVE-2020-2555", "vendor": "Oracle", "product": "Multiple Products", "name": "Oracle Multiple Products Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9712, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2019-20500", "vendor": "D-Link", "product": "DWL-2600AP Access Point", "name": "D-Link DWL-2600AP Access Point Command Injection Vulnerability", "date": "2023-06-29", "ransom": false, "cvss": 7.8, "epss": 0.9711, "vckev": true, "euvd": false, "ra": 19, "due": "2023-07-20" }, { "cve": "CVE-2025-20281", "vendor": "Cisco", "product": "Identity Services Engine", "name": "Cisco Identity Services Engine Injection Vulnerability", "date": "2025-07-28", "ransom": false, "cvss": 10, "epss": 0.9707, "vckev": true, "euvd": false, "ra": 6, "due": "2025-08-18" }, { "cve": "CVE-2019-3398", "vendor": "Atlassian", "product": "Confluence Server and Data Center", "name": "Atlassian Confluence Server and Data Center Path Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.9697, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2026-20253", "vendor": "Splunk", "product": "Enterprise", "name": "Splunk Enterprise Missing Authentication for Critical Function Vulnerability", "date": "2026-06-18", "ransom": false, "cvss": 9.8, "epss": 0.9694, "vckev": true, "euvd": false, "ra": 12, "due": "2026-06-21" }, { "cve": "CVE-2023-52163", "vendor": "Digiever", "product": "DS-2105 Pro", "name": "Digiever DS-2105 Pro Missing Authorization Vulnerability", "date": "2025-12-22", "ransom": false, "cvss": 8.8, "epss": 0.9692, "vckev": true, "euvd": false, "ra": 6, "due": "2026-01-12" }, { "cve": "CVE-2015-2051", "vendor": "D-Link", "product": "DIR-645 Router", "name": "D-Link DIR-645 Router Remote Code Execution Vulnerability", "date": "2022-02-10", "ransom": false, "cvss": 8.8, "epss": 0.9686, "vckev": true, "euvd": false, "ra": 8, "due": "2022-08-10" }, { "cve": "CVE-2019-5544", "vendor": "VMware", "product": "VMware ESXi and Horizon DaaS", "name": "VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.9682, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-54236", "vendor": "Adobe", "product": "Commerce and Magento", "name": "Adobe Commerce and Magento Improper Input Validation Vulnerability", "date": "2025-10-24", "ransom": false, "cvss": 9.1, "epss": 0.9674, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-14" }, { "cve": "CVE-2021-22502", "vendor": "Micro Focus", "product": "Operation Bridge Reporter (OBR)", "name": "Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9674, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2011-3544", "vendor": "Oracle", "product": "Java SE JDK and JRE", "name": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 9.8, "epss": 0.9671, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2025-25257", "vendor": "Fortinet", "product": "FortiWeb", "name": "Fortinet FortiWeb SQL Injection Vulnerability", "date": "2025-07-18", "ransom": false, "cvss": 9.8, "epss": 0.9671, "vckev": true, "euvd": false, "ra": 6, "due": "2025-08-08" }, { "cve": "CVE-2020-25223", "vendor": "Sophos", "product": "SG UTM", "name": "Sophos SG UTM Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.9669, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2018-6530", "vendor": "D-Link", "product": "Multiple Routers", "name": "D-Link Multiple Routers OS Command Injection Vulnerability", "date": "2022-09-08", "ransom": true, "cvss": 9.8, "epss": 0.9668, "vckev": true, "euvd": false, "ra": 21, "due": "2022-09-29" }, { "cve": "CVE-2009-0927", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 8.8, "epss": 0.9663, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2020-11651", "vendor": "SaltStack", "product": "Salt", "name": "SaltStack Salt Authentication Bypass Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9661, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2023-33246", "vendor": "Apache", "product": "RocketMQ", "name": "Apache RocketMQ Command Execution Vulnerability", "date": "2023-09-06", "ransom": false, "cvss": 9.8, "epss": 0.966, "vckev": true, "euvd": false, "ra": 3, "due": "2023-09-27" }, { "cve": "CVE-2026-39987", "vendor": "Marimo", "product": "Marimo", "name": "Marimo Remote Code Execution Vulnerability", "date": "2026-04-23", "ransom": false, "cvss": 9.8, "epss": 0.9658, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-07" }, { "cve": "CVE-2023-38203", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "date": "2024-01-08", "ransom": true, "cvss": 9.8, "epss": 0.9653, "vckev": true, "euvd": false, "ra": 3, "due": "2024-01-29" }, { "cve": "CVE-2023-46747", "vendor": "F5", "product": "BIG-IP Configuration Utility", "name": "F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability", "date": "2023-10-31", "ransom": true, "cvss": 9.8, "epss": 0.9651, "vckev": true, "euvd": false, "ra": 3, "due": "2023-11-21" }, { "cve": "CVE-2020-8260", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.2, "epss": 0.9648, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2017-17562", "vendor": "Embedthis", "product": "GoAhead", "name": "Embedthis GoAhead Remote Code Execution Vulnerability", "date": "2021-12-10", "ransom": false, "cvss": 8.1, "epss": 0.9633, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-10" }, { "cve": "CVE-2010-0840", "vendor": "Oracle", "product": "Java Runtime Environment (JRE)", "name": "Oracle JRE Unspecified Vulnerability", "date": "2022-05-25", "ransom": false, "cvss": 9.8, "epss": 0.9632, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-15" }, { "cve": "CVE-2021-35587", "vendor": "Oracle", "product": "Fusion Middleware", "name": "Oracle Fusion Middleware Unspecified Vulnerability", "date": "2022-11-28", "ransom": false, "cvss": 9.8, "epss": 0.9628, "vckev": true, "euvd": false, "ra": 2, "due": "2022-12-19" }, { "cve": "CVE-2017-3506", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server OS Command Injection Vulnerability", "date": "2024-06-03", "ransom": false, "cvss": 7.4, "epss": 0.9628, "vckev": true, "euvd": false, "ra": 3, "due": "2024-06-24" }, { "cve": "CVE-2018-20250", "vendor": "RARLAB", "product": "WinRAR", "name": "WinRAR Absolute Path Traversal Vulnerability", "date": "2022-02-15", "ransom": true, "cvss": 7.8, "epss": 0.9627, "vckev": true, "euvd": false, "ra": 2, "due": "2022-08-15" }, { "cve": "CVE-2026-23760", "vendor": "SmarterTools", "product": "SmarterMail", "name": "SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability", "date": "2026-01-26", "ransom": true, "cvss": 9.8, "epss": 0.9627, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-16" }, { "cve": "CVE-2019-10068", "vendor": "Kentico", "product": "Xperience", "name": "Kentico Xperience Deserialization of Untrusted Data Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.9625, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2017-8291", "vendor": "Artifex", "product": "Ghostscript", "name": "Artifex Ghostscript Type Confusion Vulnerability", "date": "2022-05-24", "ransom": false, "cvss": 7.8, "epss": 0.9614, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-14" }, { "cve": "CVE-2018-14847", "vendor": "MikroTik", "product": "RouterOS", "name": "MikroTik Router OS Directory Traversal Vulnerability", "date": "2021-12-01", "ransom": false, "cvss": 9.1, "epss": 0.9609, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-01" }, { "cve": "CVE-2019-20085", "vendor": "TVT", "product": "NVMS-1000", "name": "TVT NVMS-1000 Directory Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.5, "epss": 0.9607, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2015-4852", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9603, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2022-24112", "vendor": "Apache", "product": "APISIX", "name": "Apache APISIX Authentication Bypass Vulnerability", "date": "2022-08-25", "ransom": false, "cvss": 9.8, "epss": 0.96, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-15" }, { "cve": "CVE-2019-1652", "vendor": "Cisco", "product": "Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers", "name": "Cisco Small Business Routers Improper Input Validation Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.2, "epss": 0.9592, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2020-5847", "vendor": "Unraid", "product": "Unraid", "name": "Unraid Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9584, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-54068", "vendor": "Laravel", "product": "Livewire", "name": "Laravel Livewire Code Injection Vulnerability", "date": "2026-03-20", "ransom": false, "cvss": 9.8, "epss": 0.958, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-03" }, { "cve": "CVE-2015-0313", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2022-04-13", "ransom": false, "cvss": 9.8, "epss": 0.9568, "vckev": true, "euvd": false, "ra": 8, "due": "2022-05-04" }, { "cve": "CVE-2022-23131", "vendor": "Zabbix", "product": "Frontend", "name": "Zabbix Frontend Authentication Bypass Vulnerability", "date": "2022-02-22", "ransom": false, "cvss": 9.8, "epss": 0.9568, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-08" }, { "cve": "CVE-2018-1273", "vendor": "VMware Tanzu", "product": "Spring Data Commons", "name": "VMware Tanzu Spring Data Commons Property Binder Vulnerability", "date": "2022-03-25", "ransom": true, "cvss": 9.8, "epss": 0.9565, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2020-17530", "vendor": "Apache", "product": "Struts", "name": "Apache Struts Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9562, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2026-63030", "vendor": "WordPress", "product": "Core", "name": "WordPress Core Interpretation Conflict Vulnerability", "date": "2026-07-21", "ransom": false, "cvss": 9.8, "epss": 0.956, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-24" }, { "cve": "CVE-2020-5410", "vendor": "VMware Tanzu", "product": "Spring Cloud Configuration (Config) Server", "name": "VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 7.5, "epss": 0.9559, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2016-0752", "vendor": "Rails", "product": "Ruby on Rails", "name": "Ruby on Rails Directory Traversal Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 7.5, "epss": 0.9554, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2022-41352", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability", "date": "2022-10-20", "ransom": false, "cvss": 9.8, "epss": 0.9548, "vckev": true, "euvd": false, "ra": 2, "due": "2022-11-10" }, { "cve": "CVE-2026-35273", "vendor": "Oracle", "product": "PeopleSoft Enterprise PeopleTools", "name": "Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability", "date": "2026-06-12", "ransom": true, "cvss": 9.8, "epss": 0.9547, "vckev": true, "euvd": false, "ra": 12, "due": "2026-06-15" }, { "cve": "CVE-2009-1151", "vendor": "phpMyAdmin", "product": "phpMyAdmin", "name": "phpMyAdmin Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.9544, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2024-1212", "vendor": "Progress", "product": "Kemp LoadMaster", "name": "Progress Kemp LoadMaster OS Command Injection Vulnerability", "date": "2024-11-18", "ransom": false, "cvss": 9.8, "epss": 0.9539, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-09" }, { "cve": "CVE-2019-11580", "vendor": "Atlassian", "product": "Crowd and Crowd Data Center", "name": "Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.9536, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2019-7609", "vendor": "Elastic", "product": "Kibana", "name": "Kibana Arbitrary Code Execution", "date": "2022-01-10", "ransom": false, "cvss": 10, "epss": 0.9534, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-10" }, { "cve": "CVE-2022-36537", "vendor": "ZK Framework", "product": "AuUploader", "name": "ZK Framework AuUploader Unspecified Vulnerability", "date": "2023-02-27", "ransom": true, "cvss": 7.5, "epss": 0.9534, "vckev": true, "euvd": false, "ra": 2, "due": "2023-03-20" }, { "cve": "CVE-2025-47812", "vendor": "Wing FTP Server", "product": "Wing FTP Server", "name": "Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability", "date": "2025-07-14", "ransom": false, "cvss": 10, "epss": 0.9517, "vckev": true, "euvd": false, "ra": 6, "due": "2025-08-04" }, { "cve": "CVE-2024-57727", "vendor": "SimpleHelp", "product": "SimpleHelp", "name": "SimpleHelp Path Traversal Vulnerability", "date": "2025-02-13", "ransom": true, "cvss": 7.5, "epss": 0.9515, "vckev": true, "euvd": false, "ra": 3, "due": "2025-03-06" }, { "cve": "CVE-2024-53704", "vendor": "SonicWall", "product": "SonicOS", "name": "SonicWall SonicOS SSLVPN Improper Authentication Vulnerability", "date": "2025-02-18", "ransom": true, "cvss": 9.8, "epss": 0.9513, "vckev": true, "euvd": false, "ra": 3, "due": "2025-03-11" }, { "cve": "CVE-2017-12637", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Directory Traversal Vulnerability", "date": "2025-03-19", "ransom": false, "cvss": 7.5, "epss": 0.9511, "vckev": true, "euvd": false, "ra": 6, "due": "2025-04-09" }, { "cve": "CVE-2025-4008", "vendor": "Smartbedded", "product": "Meteobridge", "name": "Smartbedded Meteobridge Command Injection Vulnerability", "date": "2025-10-02", "ransom": false, "cvss": 8.8, "epss": 0.951, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-23" }, { "cve": "CVE-2024-47575", "vendor": "Fortinet", "product": "FortiManager", "name": "Fortinet FortiManager Missing Authentication Vulnerability", "date": "2024-10-23", "ransom": false, "cvss": 9.8, "epss": 0.9495, "vckev": true, "euvd": false, "ra": 3, "due": "2024-11-13" }, { "cve": "CVE-2020-2883", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Unspecified Vulnerability", "date": "2025-01-07", "ransom": false, "cvss": 9.8, "epss": 0.9493, "vckev": true, "euvd": false, "ra": 3, "due": "2025-01-28" }, { "cve": "CVE-2021-4034", "vendor": "Red Hat", "product": "Polkit", "name": "Red Hat Polkit Out-of-Bounds Read and Write Vulnerability", "date": "2022-06-27", "ransom": false, "cvss": 7.8, "epss": 0.9492, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-18" }, { "cve": "CVE-2018-14933", "vendor": "NUUO", "product": "NVRmini Devices", "name": "NUUO NVRmini Devices OS Command Injection Vulnerability", "date": "2024-12-18", "ransom": false, "cvss": 9.8, "epss": 0.9488, "vckev": true, "euvd": false, "ra": 13, "due": "2025-01-08" }, { "cve": "CVE-2017-9822", "vendor": "DotNetNuke (DNN)", "product": "DotNetNuke (DNN)", "name": "DotNetNuke (DNN) Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 8.8, "epss": 0.9479, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-9474", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability", "date": "2024-11-18", "ransom": true, "cvss": 7.2, "epss": 0.9477, "vckev": true, "euvd": false, "ra": 22, "due": "2024-12-09" }, { "cve": "CVE-2024-51378", "vendor": "CyberPersons", "product": "CyberPanel", "name": "CyberPanel Incorrect Default Permissions Vulnerability", "date": "2024-12-04", "ransom": true, "cvss": 9.8, "epss": 0.9473, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-25" }, { "cve": "CVE-2020-6287", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Missing Authentication for Critical Function Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 10, "epss": 0.9472, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2023-24489", "vendor": "Citrix", "product": "Content Collaboration", "name": "Citrix Content Collaboration ShareFile Improper Access Control Vulnerability", "date": "2023-08-16", "ransom": false, "cvss": 9.8, "epss": 0.9466, "vckev": true, "euvd": false, "ra": 3, "due": "2023-09-06" }, { "cve": "CVE-2024-6670", "vendor": "Progress", "product": "WhatsUp Gold", "name": "Progress WhatsUp Gold SQL Injection Vulnerability", "date": "2024-09-16", "ransom": true, "cvss": 9.8, "epss": 0.9466, "vckev": true, "euvd": false, "ra": 3, "due": "2024-10-07" }, { "cve": "CVE-2023-7028", "vendor": "GitLab", "product": "GitLab CE/EE", "name": "GitLab Community and Enterprise Editions Improper Access Control Vulnerability", "date": "2024-05-01", "ransom": false, "cvss": 9.8, "epss": 0.9465, "vckev": true, "euvd": false, "ra": 3, "due": "2024-05-22" }, { "cve": "CVE-2025-8088", "vendor": "RARLAB", "product": "WinRAR", "name": "RARLAB WinRAR Path Traversal Vulnerability", "date": "2025-08-12", "ransom": true, "cvss": 8.8, "epss": 0.9455, "vckev": true, "euvd": false, "ra": 6, "due": "2025-09-02" }, { "cve": "CVE-2017-18368", "vendor": "Zyxel", "product": "P660HN-T1A Routers", "name": "Zyxel P660HN-T1A Routers Command Injection Vulnerability", "date": "2023-08-07", "ransom": false, "cvss": 9.8, "epss": 0.9451, "vckev": true, "euvd": false, "ra": 3, "due": "2023-08-28" }, { "cve": "CVE-2020-14644", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Remote Code Execution Vulnerability", "date": "2024-09-18", "ransom": false, "cvss": 9.8, "epss": 0.9446, "vckev": true, "euvd": false, "ra": 3, "due": "2024-10-09" }, { "cve": "CVE-2016-4117", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 9.8, "epss": 0.9435, "vckev": true, "euvd": false, "ra": 8, "due": "2022-03-24" }, { "cve": "CVE-2024-48248", "vendor": "NAKIVO", "product": "Backup and Replication", "name": "NAKIVO Backup and Replication Absolute Path Traversal Vulnerability", "date": "2025-03-19", "ransom": false, "cvss": 8.6, "epss": 0.9426, "vckev": true, "euvd": false, "ra": 6, "due": "2025-04-09" }, { "cve": "CVE-2007-5659", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Buffer Overflow Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 7.8, "epss": 0.9422, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2011-0611", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.8, "epss": 0.942, "vckev": true, "euvd": false, "ra": 8, "due": "2022-03-24" }, { "cve": "CVE-2019-12989", "vendor": "Citrix", "product": "SD-WAN and NetScaler", "name": "Citrix SD-WAN and NetScaler SQL Injection Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.9413, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2023-36846", "vendor": "Juniper", "product": "Junos OS", "name": "Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability", "date": "2023-11-13", "ransom": false, "cvss": 5.3, "epss": 0.9412, "vckev": true, "euvd": false, "ra": 3, "due": "2023-11-17" }, { "cve": "CVE-2017-1000486", "vendor": "Primetek", "product": "Primefaces Application", "name": "Primetek Primefaces Remote Code Execution Vulnerability", "date": "2022-01-10", "ransom": false, "cvss": 9.8, "epss": 0.941, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-10" }, { "cve": "CVE-2026-21643", "vendor": "Fortinet", "product": "FortiClient EMS", "name": "Fortinet FortiClient EMS SQL Injection Vulnerability", "date": "2026-04-13", "ransom": false, "cvss": 9.8, "epss": 0.9408, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-16" }, { "cve": "CVE-2025-11953", "vendor": "React Native Community", "product": "CLI", "name": "React Native Community CLI OS Command Injection Vulnerability", "date": "2026-02-05", "ransom": false, "cvss": 9.8, "epss": 0.9398, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-26" }, { "cve": "CVE-2026-0257", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability", "date": "2026-05-29", "ransom": true, "cvss": 9.1, "epss": 0.9391, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-01" }, { "cve": "CVE-2025-30406", "vendor": "Gladinet", "product": "CentreStack", "name": "Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability", "date": "2025-04-08", "ransom": false, "cvss": 9.8, "epss": 0.9384, "vckev": true, "euvd": false, "ra": 6, "due": "2025-04-29" }, { "cve": "CVE-2025-24016", "vendor": "Wazuh", "product": "Wazuh Server", "name": "Wazuh Server Deserialization of Untrusted Data Vulnerability", "date": "2025-06-10", "ransom": false, "cvss": 9.9, "epss": 0.9384, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-01" }, { "cve": "CVE-2024-55956", "vendor": "Cleo", "product": "Multiple Products", "name": "Cleo Multiple Products Unauthenticated File Upload Vulnerability", "date": "2024-12-17", "ransom": true, "cvss": 9.8, "epss": 0.938, "vckev": true, "euvd": false, "ra": 3, "due": "2025-01-07" }, { "cve": "CVE-2013-0625", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Authentication Bypass Vulnerability", "date": "2022-03-07", "ransom": false, "cvss": 9.8, "epss": 0.938, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-07" }, { "cve": "CVE-2013-0632", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Authentication Bypass Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 9.8, "epss": 0.9369, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2015-5122", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2022-04-13", "ransom": false, "cvss": 9.8, "epss": 0.9369, "vckev": true, "euvd": false, "ra": 8, "due": "2022-05-04" }, { "cve": "CVE-2012-1723", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": true, "cvss": 9.8, "epss": 0.9369, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2023-36845", "vendor": "Juniper", "product": "Junos OS", "name": "Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability", "date": "2023-11-13", "ransom": false, "cvss": 9.8, "epss": 0.9355, "vckev": true, "euvd": false, "ra": 3, "due": "2023-11-17" }, { "cve": "CVE-2021-44077", "vendor": "Zoho", "product": "ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus", "name": "Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability", "date": "2021-12-01", "ransom": false, "cvss": 9.8, "epss": 0.933, "vckev": true, "euvd": false, "ra": 2, "due": "2021-12-15" }, { "cve": "CVE-2020-5849", "vendor": "Unraid", "product": "Unraid", "name": "Unraid Authentication Bypass Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.5, "epss": 0.9324, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-28987", "vendor": "SolarWinds", "product": "Web Help Desk", "name": "SolarWinds Web Help Desk Hardcoded Credential Vulnerability", "date": "2024-10-15", "ransom": false, "cvss": 9.1, "epss": 0.9321, "vckev": true, "euvd": false, "ra": 3, "due": "2024-11-05" }, { "cve": "CVE-2020-2551", "vendor": "Oracle", "product": "Fusion Middleware", "name": "Oracle Fusion Middleware Unspecified Vulnerability", "date": "2023-11-16", "ransom": false, "cvss": 9.8, "epss": 0.9317, "vckev": true, "euvd": false, "ra": 3, "due": "2023-12-07" }, { "cve": "CVE-2022-33891", "vendor": "Apache", "product": "Spark", "name": "Apache Spark Command Injection Vulnerability", "date": "2023-03-07", "ransom": false, "cvss": 8.8, "epss": 0.9308, "vckev": true, "euvd": false, "ra": 2, "due": "2023-03-28" }, { "cve": "CVE-2016-4437", "vendor": "Apache", "product": "Shiro", "name": "Apache Shiro Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9304, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-40870", "vendor": "Aviatrix", "product": "Aviatrix Controller", "name": "Aviatrix Controller Unrestricted Upload of File", "date": "2022-01-18", "ransom": false, "cvss": 9.8, "epss": 0.9302, "vckev": true, "euvd": false, "ra": 2, "due": "2022-02-01" }, { "cve": "CVE-2022-24706", "vendor": "Apache", "product": "CouchDB", "name": "Apache CouchDB Insecure Default Initialization of Resource Vulnerability", "date": "2022-08-25", "ransom": false, "cvss": 9.8, "epss": 0.9241, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-15" }, { "cve": "CVE-2018-10561", "vendor": "Dasan", "product": "Gigabit Passive Optical Network (GPON) Routers", "name": "Dasan GPON Routers Authentication Bypass Vulnerability", "date": "2022-03-31", "ransom": false, "cvss": 9.8, "epss": 0.9237, "vckev": true, "euvd": false, "ra": 8, "due": "2022-04-21" }, { "cve": "CVE-2016-3427", "vendor": "Oracle", "product": "Java SE and JRockit", "name": "Oracle Java SE and JRockit Unspecified Vulnerability", "date": "2023-05-12", "ransom": false, "cvss": 9.8, "epss": 0.9233, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-02" }, { "cve": "CVE-2022-43939", "vendor": "Hitachi Vantara", "product": "Pentaho Business Analytics (BA) Server", "name": "Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability", "date": "2025-03-03", "ransom": false, "cvss": 9.8, "epss": 0.9227, "vckev": true, "euvd": false, "ra": 6, "due": "2025-03-24" }, { "cve": "CVE-2017-5689", "vendor": "Intel", "product": "Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability", "name": "Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability", "date": "2022-01-28", "ransom": false, "cvss": 9.8, "epss": 0.9219, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-28" }, { "cve": "CVE-2019-2616", "vendor": "Oracle", "product": "BI Publisher (Formerly XML Publisher)", "name": "Oracle BI Publisher Unauthorized Access Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 7.2, "epss": 0.9218, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2025-2747", "vendor": "Kentico", "product": "Xperience CMS", "name": "Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability", "date": "2025-10-20", "ransom": false, "cvss": 9.8, "epss": 0.9216, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-10" }, { "cve": "CVE-2025-11371", "vendor": "Gladinet", "product": "CentreStack and Triofox", "name": "Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability", "date": "2025-11-04", "ransom": false, "cvss": 7.5, "epss": 0.9209, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-25" }, { "cve": "CVE-2024-20439", "vendor": "Cisco", "product": "Smart Licensing Utility", "name": "Cisco Smart Licensing Utility Static Credential Vulnerability", "date": "2025-03-31", "ransom": false, "cvss": 9.8, "epss": 0.9206, "vckev": true, "euvd": false, "ra": 6, "due": "2025-04-21" }, { "cve": "CVE-2025-54309", "vendor": "CrushFTP", "product": "CrushFTP", "name": "CrushFTP Unprotected Alternate Channel Vulnerability", "date": "2025-07-22", "ransom": false, "cvss": 9.8, "epss": 0.9203, "vckev": true, "euvd": false, "ra": 6, "due": "2025-08-12" }, { "cve": "CVE-2012-0754", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Memory Corruption Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 8.1, "epss": 0.9203, "vckev": true, "euvd": false, "ra": 8, "due": "2022-06-22" }, { "cve": "CVE-2019-6340", "vendor": "Drupal", "product": "Core", "name": "Drupal Core Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 8.1, "epss": 0.9202, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2020-10148", "vendor": "SolarWinds", "product": "Orion", "name": "SolarWinds Orion Authentication Bypass Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9198, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-7399", "vendor": "Samsung", "product": "MagicINFO 9 Server", "name": "Samsung MagicINFO 9 Server Path Traversal Vulnerability", "date": "2026-04-24", "ransom": false, "cvss": 9.8, "epss": 0.9194, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-08" }, { "cve": "CVE-2022-37042", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability", "date": "2022-08-11", "ransom": true, "cvss": 9.8, "epss": 0.9189, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-01" }, { "cve": "CVE-2020-8657", "vendor": "EyesOfNetwork", "product": "EyesOfNetwork", "name": "EyesOfNetwork Use of Hard-Coded Credentials Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9187, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-64446", "vendor": "Fortinet", "product": "FortiWeb", "name": "Fortinet FortiWeb Path Traversal Vulnerability", "date": "2025-11-14", "ransom": false, "cvss": 9.8, "epss": 0.9184, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-21" }, { "cve": "CVE-2024-5910", "vendor": "Palo Alto Networks", "product": "Expedition", "name": "Palo Alto Networks Expedition Missing Authentication Vulnerability", "date": "2024-11-07", "ransom": false, "cvss": 9.8, "epss": 0.9178, "vckev": true, "euvd": false, "ra": 3, "due": "2024-11-28" }, { "cve": "CVE-2018-11138", "vendor": "Quest", "product": "KACE System Management Appliance", "name": "Quest KACE System Management Appliance Remote Command Execution Vulnerability", "date": "2022-03-25", "ransom": true, "cvss": 9.8, "epss": 0.9178, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2024-11680", "vendor": "ProjectSend", "product": "ProjectSend", "name": "ProjectSend Improper Authentication Vulnerability", "date": "2024-12-03", "ransom": false, "cvss": 9.8, "epss": 0.9156, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-24" }, { "cve": "CVE-2023-36844", "vendor": "Juniper", "product": "Junos OS", "name": "Juniper Junos OS EX Series PHP External Variable Modification Vulnerability", "date": "2023-11-13", "ransom": false, "cvss": 5.3, "epss": 0.9136, "vckev": true, "euvd": false, "ra": 3, "due": "2023-11-17" }, { "cve": "CVE-2026-39808", "vendor": "Fortinet", "product": "FortiSandbox", "name": "Fortinet FortiSandbox OS Command Injection Vulnerability", "date": "2026-07-16", "ransom": false, "cvss": 9.8, "epss": 0.9121, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-19" }, { "cve": "CVE-2021-35211", "vendor": "SolarWinds", "product": "Serv-U", "name": "SolarWinds Serv-U Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 10, "epss": 0.9116, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2025-9242", "vendor": "WatchGuard", "product": "Firebox", "name": "WatchGuard Firebox Out-of-Bounds Write Vulnerability", "date": "2025-11-12", "ransom": false, "cvss": 9.8, "epss": 0.9112, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-03" }, { "cve": "CVE-2022-26352", "vendor": "dotCMS", "product": "dotCMS", "name": "dotCMS Unrestricted Upload of File Vulnerability", "date": "2022-08-25", "ransom": true, "cvss": 9.8, "epss": 0.9108, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-15" }, { "cve": "CVE-2012-5076", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Sandbox Bypass Vulnerability", "date": "2022-03-28", "ransom": false, "cvss": 9.8, "epss": 0.9101, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-18" }, { "cve": "CVE-2024-13160", "vendor": "Ivanti", "product": "Endpoint Manager (EPM)", "name": "Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability", "date": "2025-03-10", "ransom": false, "cvss": 7.5, "epss": 0.91, "vckev": true, "euvd": false, "ra": 6, "due": "2025-03-31" }, { "cve": "CVE-2020-8243", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.2, "epss": 0.9076, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2017-12149", "vendor": "Red Hat", "product": "JBoss Application Server", "name": "Red Hat JBoss Application Server Remote Code Execution Vulnerability", "date": "2021-12-10", "ransom": true, "cvss": 9.8, "epss": 0.9071, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-10" }, { "cve": "CVE-2021-21315", "vendor": "Npm package", "product": "System Information Library for Node.JS", "name": "System Information Library for Node.JS Command Injection", "date": "2022-01-18", "ransom": false, "cvss": 7.8, "epss": 0.9067, "vckev": true, "euvd": false, "ra": 2, "due": "2022-02-01" }, { "cve": "CVE-2017-3066", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Deserialization Vulnerability", "date": "2025-02-24", "ransom": false, "cvss": 9.8, "epss": 0.906, "vckev": true, "euvd": false, "ra": 3, "due": "2025-03-17" }, { "cve": "CVE-2025-12480", "vendor": "Gladinet", "product": "Triofox", "name": "Gladinet Triofox Improper Access Control Vulnerability", "date": "2025-11-12", "ransom": false, "cvss": 9.1, "epss": 0.9053, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-03" }, { "cve": "CVE-2021-21311", "vendor": "Adminer", "product": "Adminer", "name": "Adminer Server-Side Request Forgery Vulnerability", "date": "2025-09-29", "ransom": false, "cvss": 7.2, "epss": 0.9046, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-20" }, { "cve": "CVE-2021-32648", "vendor": "October CMS", "product": "October CMS", "name": "October CMS Improper Authentication", "date": "2022-01-18", "ransom": false, "cvss": 9.1, "epss": 0.9042, "vckev": true, "euvd": false, "ra": 2, "due": "2022-02-01" }, { "cve": "CVE-2020-3952", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Information Disclosure Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9038, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-40711", "vendor": "Veeam", "product": "Backup & Replication", "name": "Veeam Backup and Replication Deserialization Vulnerability", "date": "2024-10-17", "ransom": true, "cvss": 9.8, "epss": 0.9037, "vckev": true, "euvd": false, "ra": 3, "due": "2024-11-07" }, { "cve": "CVE-2016-8735", "vendor": "Apache", "product": "Tomcat", "name": "Apache Tomcat Remote Code Execution Vulnerability", "date": "2023-05-12", "ransom": false, "cvss": 9.8, "epss": 0.9034, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-02" }, { "cve": "CVE-2026-20182", "vendor": "Cisco", "product": "Catalyst SD-WAN", "name": "Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability", "date": "2026-05-14", "ransom": false, "cvss": 10, "epss": 0.9027, "vckev": true, "euvd": false, "ra": 23, "due": "2026-05-17" }, { "cve": "CVE-2023-40044", "vendor": "Progress", "product": "WS_FTP Server", "name": "Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability", "date": "2023-10-05", "ransom": true, "cvss": 8.8, "epss": 0.9015, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-26" }, { "cve": "CVE-2020-29583", "vendor": "Zyxel", "product": "Multiple Products", "name": "Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.9005, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2020-17463", "vendor": "Fuel CMS", "product": "Fuel CMS", "name": "Fuel CMS SQL Injection Vulnerability", "date": "2021-12-10", "ransom": false, "cvss": 9.8, "epss": 0.9004, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-10" }, { "cve": "CVE-2025-37164", "vendor": "Hewlett Packard Enterprise (HPE)", "product": "OneView", "name": "Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability", "date": "2026-01-07", "ransom": false, "cvss": 9.8, "epss": 0.9001, "vckev": true, "euvd": false, "ra": 6, "due": "2026-01-28" }, { "cve": "CVE-2009-3960", "vendor": "Adobe", "product": "BlazeDS", "name": "Adobe BlazeDS Information Disclosure Vulnerability", "date": "2022-03-07", "ransom": true, "cvss": 6.5, "epss": 0.9001, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-07" }, { "cve": "CVE-2013-0431", "vendor": "Oracle", "product": "Java Runtime Environment (JRE)", "name": "Oracle JRE Sandbox Bypass Vulnerability", "date": "2022-05-25", "ransom": true, "cvss": 5.3, "epss": 0.8999, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-15" }, { "cve": "CVE-2024-13161", "vendor": "Ivanti", "product": "Endpoint Manager (EPM)", "name": "Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability", "date": "2025-03-10", "ransom": false, "cvss": 7.5, "epss": 0.8983, "vckev": true, "euvd": false, "ra": 6, "due": "2025-03-31" }, { "cve": "CVE-2025-5086", "vendor": "Dassault Systèmes", "product": "DELMIA Apriso", "name": "Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability", "date": "2025-09-11", "ransom": false, "cvss": 9, "epss": 0.8975, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-02" }, { "cve": "CVE-2019-7195", "vendor": "QNAP", "product": "Photo Station", "name": "QNAP Photo Station Path Traversal Vulnerability", "date": "2022-06-08", "ransom": true, "cvss": 9.8, "epss": 0.8968, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2025-29635", "vendor": "D-Link", "product": "DIR-823X", "name": "D-Link DIR-823X Command Injection Vulnerability", "date": "2026-04-24", "ransom": false, "cvss": 7.2, "epss": 0.8964, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-08" }, { "cve": "CVE-2023-20273", "vendor": "Cisco", "product": "Cisco IOS XE Web UI", "name": "Cisco IOS XE Web UI Command Injection Vulnerability", "date": "2023-10-23", "ransom": false, "cvss": 7.2, "epss": 0.8963, "vckev": true, "euvd": false, "ra": 15, "due": "2023-10-27" }, { "cve": "CVE-2019-17621", "vendor": "D-Link", "product": "DIR-859 Router", "name": "D-Link DIR-859 Router Command Execution Vulnerability", "date": "2023-06-29", "ransom": false, "cvss": 9.8, "epss": 0.8962, "vckev": true, "euvd": false, "ra": 19, "due": "2023-07-20" }, { "cve": "CVE-2018-4878", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 7.8, "epss": 0.8953, "vckev": true, "euvd": false, "ra": 8, "due": "2022-05-03" }, { "cve": "CVE-2026-42208", "vendor": "BerriAI", "product": "LiteLLM", "name": "BerriAI LiteLLM SQL Injection Vulnerability", "date": "2026-05-08", "ransom": false, "cvss": 9.8, "epss": 0.8942, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-11" }, { "cve": "CVE-2025-6218", "vendor": "RARLAB", "product": "WinRAR", "name": "RARLAB WinRAR Path Traversal Vulnerability", "date": "2025-12-09", "ransom": false, "cvss": 7.8, "epss": 0.8942, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-30" }, { "cve": "CVE-2018-14839", "vendor": "LG", "product": "N1A1 NAS", "name": "LG N1A1 NAS Remote Command Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.8935, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2017-5521", "vendor": "NETGEAR", "product": "Multiple Devices", "name": "NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability", "date": "2022-09-08", "ransom": false, "cvss": 8.1, "epss": 0.8935, "vckev": true, "euvd": false, "ra": 24, "due": "2022-09-29" }, { "cve": "CVE-2024-8190", "vendor": "Ivanti", "product": "Cloud Services Appliance", "name": "Ivanti Cloud Services Appliance OS Command Injection Vulnerability", "date": "2024-09-13", "ransom": false, "cvss": 7.2, "epss": 0.8912, "vckev": true, "euvd": false, "ra": 25, "due": "2024-10-04" }, { "cve": "CVE-2026-35616", "vendor": "Fortinet", "product": "FortiClient EMS", "name": "Fortinet FortiClient EMS Improper Access Control Vulnerability", "date": "2026-04-06", "ransom": false, "cvss": 9.8, "epss": 0.8894, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-09" }, { "cve": "CVE-2021-43798", "vendor": "Grafana Labs", "product": "Grafana", "name": "Grafana Path Traversal Vulnerability", "date": "2025-10-09", "ransom": false, "cvss": 7.5, "epss": 0.8885, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-30" }, { "cve": "CVE-2022-0847", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Privilege Escalation Vulnerability", "date": "2022-04-25", "ransom": false, "cvss": 7.8, "epss": 0.8861, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-16" }, { "cve": "CVE-2014-3120", "vendor": "Elastic", "product": "Elasticsearch", "name": "Elasticsearch Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 8.1, "epss": 0.8856, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2020-8193", "vendor": "Citrix", "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "name": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 6.5, "epss": 0.8841, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-26399", "vendor": "SolarWinds", "product": "Web Help Desk", "name": "SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability", "date": "2026-03-09", "ransom": true, "cvss": 9.8, "epss": 0.8833, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-12" }, { "cve": "CVE-2026-9082", "vendor": "Drupal", "product": "Core", "name": "Drupal Core SQL Injection Vulnerability", "date": "2026-05-22", "ransom": false, "cvss": 9.8, "epss": 0.8832, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-27" }, { "cve": "CVE-2025-61757", "vendor": "Oracle", "product": "Fusion Middleware", "name": "Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability", "date": "2025-11-21", "ransom": false, "cvss": 9.8, "epss": 0.8831, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-12" }, { "cve": "CVE-2025-57819", "vendor": "Sangoma", "product": "FreePBX", "name": "Sangoma FreePBX Authentication Bypass Vulnerability", "date": "2025-08-29", "ransom": false, "cvss": 9.8, "epss": 0.8827, "vckev": true, "euvd": false, "ra": 6, "due": "2025-09-19" }, { "cve": "CVE-2010-0188", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": true, "cvss": 7.8, "epss": 0.8825, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2026-20127", "vendor": "Cisco", "product": "Catalyst SD-WAN Controller and Manager", "name": "Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability", "date": "2026-02-25", "ransom": false, "cvss": 10, "epss": 0.8824, "vckev": true, "euvd": false, "ra": 26, "due": "2026-02-27" }, { "cve": "CVE-2019-7192", "vendor": "QNAP", "product": "Photo Station", "name": "QNAP Photo Station Improper Access Control Vulnerability", "date": "2022-06-08", "ransom": true, "cvss": 9.8, "epss": 0.8821, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2026-48908", "vendor": "JoomShaper", "product": "SP Page Builder", "name": "JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability", "date": "2026-07-07", "ransom": false, "cvss": 9.8, "epss": 0.8813, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-10" }, { "cve": "CVE-2026-1731", "vendor": "BeyondTrust", "product": "Remote Support (RS) and Privileged Remote Access (PRA)", "name": "BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability", "date": "2026-02-13", "ransom": true, "cvss": 9.8, "epss": 0.8811, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-16" }, { "cve": "CVE-2021-21973", "vendor": "VMware", "product": "vCenter Server and Cloud Foundation", "name": "VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability", "date": "2022-03-07", "ransom": false, "cvss": 5.3, "epss": 0.8801, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-21" }, { "cve": "CVE-2024-12356", "vendor": "BeyondTrust", "product": "Privileged Remote Access (PRA) and Remote Support (RS)", "name": "BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability", "date": "2024-12-19", "ransom": false, "cvss": 9.8, "epss": 0.8799, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-27" }, { "cve": "CVE-2022-27593", "vendor": "QNAP", "product": "Photo Station", "name": "QNAP Photo Station Externally Controlled Reference Vulnerability", "date": "2022-09-08", "ransom": true, "cvss": 9.1, "epss": 0.8791, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-29" }, { "cve": "CVE-2020-17496", "vendor": "vBulletin", "product": "vBulletin", "name": "vBulletin PHP Module Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.8774, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2026-24423", "vendor": "SmarterTools", "product": "SmarterMail", "name": "SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability", "date": "2026-02-05", "ransom": true, "cvss": 9.8, "epss": 0.8769, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-26" }, { "cve": "CVE-2024-1708", "vendor": "ConnectWise", "product": "ScreenConnect", "name": "ConnectWise ScreenConnect Path Traversal Vulnerability", "date": "2026-04-28", "ransom": true, "cvss": 8.4, "epss": 0.8762, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-12" }, { "cve": "CVE-2016-9079", "vendor": "Mozilla", "product": "Firefox, Firefox ESR, and Thunderbird", "name": "Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability", "date": "2023-06-22", "ransom": false, "cvss": 7.5, "epss": 0.876, "vckev": true, "euvd": false, "ra": 2, "due": "2023-07-13" }, { "cve": "CVE-2016-6366", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA)", "name": "Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability", "date": "2022-05-24", "ransom": false, "cvss": 8.8, "epss": 0.8757, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-14" }, { "cve": "CVE-2025-54253", "vendor": "Adobe", "product": "Experience Manager (AEM) Forms", "name": "Adobe Experience Manager Forms Code Execution Vulnerability", "date": "2025-10-15", "ransom": false, "cvss": 10, "epss": 0.8751, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-05" }, { "cve": "CVE-2023-2868", "vendor": "Barracuda Networks", "product": "Email Security Gateway (ESG) Appliance", "name": "Barracuda Networks ESG Appliance Improper Input Validation Vulnerability", "date": "2023-05-26", "ransom": false, "cvss": 9.8, "epss": 0.8745, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-16" }, { "cve": "CVE-2016-6415", "vendor": "Cisco", "product": "IOS, IOS XR, and IOS XE", "name": "Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability", "date": "2023-05-19", "ransom": false, "cvss": 7.5, "epss": 0.8731, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-09" }, { "cve": "CVE-2022-26143", "vendor": "Mitel", "product": "MiCollab, MiVoice Business Express", "name": "MiCollab, MiVoice Business Express Access Control Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.8721, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2019-16057", "vendor": "D-Link", "product": "DNS-320 Storage Device", "name": "D-Link DNS-320 Remote Code Execution Vulnerability", "date": "2022-04-15", "ransom": true, "cvss": 9.8, "epss": 0.8721, "vckev": true, "euvd": false, "ra": 8, "due": "2022-05-06" }, { "cve": "CVE-2018-9276", "vendor": "Paessler", "product": "PRTG Network Monitor", "name": "Paessler PRTG Network Monitor OS Command Injection Vulnerability", "date": "2025-02-04", "ransom": false, "cvss": 7.2, "epss": 0.8717, "vckev": true, "euvd": false, "ra": 3, "due": "2025-02-25" }, { "cve": "CVE-2013-0640", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Acrobat Memory Corruption Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.8, "epss": 0.8698, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2026-34910", "vendor": "Ubiquiti", "product": "UniFi OS", "name": "Ubiquiti UniFi OS Improper Input Validation Vulnerability", "date": "2026-06-23", "ransom": false, "cvss": 10, "epss": 0.8696, "vckev": true, "euvd": false, "ra": 12, "due": "2026-06-26" }, { "cve": "CVE-2017-18362", "vendor": "Kaseya", "product": "Virtual System/Server Administrator (VSA)", "name": "Kaseya VSA SQL Injection Vulnerability", "date": "2022-05-24", "ransom": true, "cvss": 9.8, "epss": 0.8682, "vckev": true, "euvd": false, "ra": 8, "due": "2022-06-14" }, { "cve": "CVE-2020-8644", "vendor": "PlaySMS", "product": "PlaySMS", "name": "PlaySMS Server-Side Template Injection Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.8669, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-40655", "vendor": "D-Link", "product": "DIR-605 Router", "name": "D-Link DIR-605 Router Information Disclosure Vulnerability", "date": "2024-05-16", "ransom": false, "cvss": 7.5, "epss": 0.8666, "vckev": true, "euvd": false, "ra": 7, "due": "2024-06-06" }, { "cve": "CVE-2024-51567", "vendor": "CyberPersons", "product": "CyberPanel", "name": "CyberPanel Incorrect Default Permissions Vulnerability", "date": "2024-11-07", "ransom": true, "cvss": 9.8, "epss": 0.8663, "vckev": true, "euvd": false, "ra": 3, "due": "2024-11-28" }, { "cve": "CVE-2009-3459", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability", "date": "2026-05-20", "ransom": false, "cvss": 8.8, "epss": 0.8658, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-03" }, { "cve": "CVE-2018-19410", "vendor": "Paessler", "product": "PRTG Network Monitor", "name": "Paessler PRTG Network Monitor Local File Inclusion Vulnerability", "date": "2025-02-04", "ransom": false, "cvss": 9.8, "epss": 0.8658, "vckev": true, "euvd": false, "ra": 3, "due": "2025-02-25" }, { "cve": "CVE-2011-2462", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 9.8, "epss": 0.8656, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2019-4716", "vendor": "IBM", "product": "Planning Analytics", "name": "IBM Planning Analytics Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.8644, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2018-6961", "vendor": "VMware", "product": "SD-WAN Edge", "name": "VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 8.1, "epss": 0.8643, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2021-21017", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.8633, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2020-11652", "vendor": "SaltStack", "product": "Salt", "name": "SaltStack Salt Path Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 6.5, "epss": 0.8618, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-31755", "vendor": "Tenda", "product": "AC11 Router", "name": "Tenda AC11 Router Stack Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.8585, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2026-24858", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability", "date": "2026-01-27", "ransom": false, "cvss": 9.8, "epss": 0.8584, "vckev": true, "euvd": false, "ra": 6, "due": "2026-01-30" }, { "cve": "CVE-2015-0311", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Remote Code Execution Vulnerability", "date": "2022-04-13", "ransom": false, "cvss": 9.8, "epss": 0.8582, "vckev": true, "euvd": false, "ra": 8, "due": "2022-05-04" }, { "cve": "CVE-2021-30116", "vendor": "Kaseya", "product": "Virtual System/Server Administrator (VSA)", "name": "Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.8573, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2023-27997", "vendor": "Fortinet", "product": "FortiOS and FortiProxy SSL-VPN", "name": "Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability", "date": "2023-06-13", "ransom": true, "cvss": 9.8, "epss": 0.8569, "vckev": true, "euvd": false, "ra": 2, "due": "2023-07-04" }, { "cve": "CVE-2020-3580", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "name": "Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 6.1, "epss": 0.8558, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-20362", "vendor": "Cisco", "product": "Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense", "name": "Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability", "date": "2025-09-25", "ransom": false, "cvss": 8.6, "epss": 0.8554, "vckev": true, "euvd": false, "ra": 27, "due": "2025-09-26" }, { "cve": "CVE-2025-52691", "vendor": "SmarterTools", "product": "SmarterMail", "name": "SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability", "date": "2026-01-26", "ransom": true, "cvss": 10, "epss": 0.8546, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-16" }, { "cve": "CVE-2022-27924", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability", "date": "2022-08-04", "ransom": true, "cvss": 7.5, "epss": 0.854, "vckev": true, "euvd": false, "ra": 2, "due": "2022-08-25" }, { "cve": "CVE-2025-4428", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability", "date": "2025-05-19", "ransom": false, "cvss": 8.8, "epss": 0.8534, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-09" }, { "cve": "CVE-2013-2423", "vendor": "Oracle", "product": "Java Runtime Environment (JRE)", "name": "Oracle JRE Unspecified Vulnerability", "date": "2022-05-25", "ransom": false, "cvss": 3.7, "epss": 0.8533, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-15" }, { "cve": "CVE-2019-10758", "vendor": "MongoDB", "product": "mongo-express", "name": "MongoDB mongo-express Remote Code Execution Vulnerability", "date": "2021-12-10", "ransom": false, "cvss": 9.9, "epss": 0.8485, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-10" }, { "cve": "CVE-2024-58136", "vendor": "Yiiframework", "product": "Yii", "name": "Yiiframework Yii Improper Protection of Alternate Path Vulnerability", "date": "2025-05-02", "ransom": false, "cvss": 9.8, "epss": 0.8476, "vckev": true, "euvd": false, "ra": 6, "due": "2025-05-23" }, { "cve": "CVE-2023-38950", "vendor": "ZKTeco", "product": "BioTime", "name": "ZKTeco BioTime Path Traversal Vulnerability", "date": "2025-05-19", "ransom": false, "cvss": 7.5, "epss": 0.847, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-09" }, { "cve": "CVE-2022-23134", "vendor": "Zabbix", "product": "Frontend", "name": "Zabbix Frontend Improper Access Control Vulnerability", "date": "2022-02-22", "ransom": false, "cvss": 5.3, "epss": 0.8466, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-08" }, { "cve": "CVE-2024-28986", "vendor": "SolarWinds", "product": "Web Help Desk", "name": "SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability", "date": "2024-08-15", "ransom": false, "cvss": 9.8, "epss": 0.8463, "vckev": true, "euvd": false, "ra": 3, "due": "2024-09-05" }, { "cve": "CVE-2019-11581", "vendor": "Atlassian", "product": "Jira Server and Data Center", "name": "Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability", "date": "2022-03-07", "ransom": false, "cvss": 9.8, "epss": 0.8462, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-07" }, { "cve": "CVE-2025-64328", "vendor": "Sangoma", "product": "FreePBX", "name": "Sangoma FreePBX OS Command Injection Vulnerability", "date": "2026-02-03", "ransom": false, "cvss": 7.2, "epss": 0.8462, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-24" }, { "cve": "CVE-2020-15415", "vendor": "DrayTek", "product": "Multiple Vigor Routers", "name": "DrayTek Multiple Vigor Routers OS Command Injection Vulnerability", "date": "2024-09-30", "ransom": false, "cvss": 9.8, "epss": 0.846, "vckev": true, "euvd": false, "ra": 3, "due": "2024-10-21" }, { "cve": "CVE-2023-36847", "vendor": "Juniper", "product": "Junos OS", "name": "Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability", "date": "2023-11-13", "ransom": false, "cvss": 5.3, "epss": 0.8457, "vckev": true, "euvd": false, "ra": 3, "due": "2023-11-17" }, { "cve": "CVE-2018-17463", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Remote Code Execution Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 8.8, "epss": 0.8456, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2020-28949", "vendor": "PEAR", "product": "Archive_Tar", "name": "PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability", "date": "2022-08-25", "ransom": false, "cvss": 7.8, "epss": 0.8455, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-15" }, { "cve": "CVE-2023-41265", "vendor": "Qlik", "product": "Sense", "name": "Qlik Sense HTTP Tunneling Vulnerability", "date": "2023-12-07", "ransom": true, "cvss": 9.9, "epss": 0.8447, "vckev": true, "euvd": false, "ra": 28, "due": "2023-12-28" }, { "cve": "CVE-2026-3055", "vendor": "Citrix", "product": "NetScaler", "name": "Citrix NetScaler Out-of-Bounds Read Vulnerability", "date": "2026-03-30", "ransom": false, "cvss": 9.8, "epss": 0.8447, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-02" }, { "cve": "CVE-2020-12641", "vendor": "Roundcube", "product": "Roundcube Webmail", "name": "Roundcube Webmail Remote Code Execution Vulnerability", "date": "2023-06-22", "ransom": false, "cvss": 9.8, "epss": 0.8446, "vckev": true, "euvd": false, "ra": 2, "due": "2023-07-13" }, { "cve": "CVE-2020-7796", "vendor": "Synacor", "product": "Zimbra Collaboration Suite", "name": "Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability", "date": "2026-02-17", "ransom": false, "cvss": 9.8, "epss": 0.8442, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-10" }, { "cve": "CVE-2020-5722", "vendor": "Grandstream", "product": "UCM6200", "name": "Grandstream Networks UCM6200 Series SQL Injection Vulnerability", "date": "2022-01-28", "ransom": false, "cvss": 9.8, "epss": 0.8441, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-28" }, { "cve": "CVE-2024-21762", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Out-of-Bound Write Vulnerability", "date": "2024-02-09", "ransom": true, "cvss": 9.8, "epss": 0.8428, "vckev": true, "euvd": false, "ra": 3, "due": "2024-02-16" }, { "cve": "CVE-2023-27992", "vendor": "Zyxel", "product": "Multiple Network-Attached Storage (NAS) Devices", "name": "Zyxel Multiple NAS Devices Command Injection Vulnerability", "date": "2023-06-23", "ransom": false, "cvss": 9.8, "epss": 0.8419, "vckev": true, "euvd": false, "ra": 2, "due": "2023-07-14" }, { "cve": "CVE-2026-1340", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability", "date": "2026-04-08", "ransom": false, "cvss": 9.8, "epss": 0.8404, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-11" }, { "cve": "CVE-2023-28432", "vendor": "MinIO", "product": "MinIO", "name": "MinIO Information Disclosure Vulnerability", "date": "2023-04-21", "ransom": false, "cvss": 7.5, "epss": 0.8396, "vckev": true, "euvd": false, "ra": 2, "due": "2023-05-12" }, { "cve": "CVE-2019-9874", "vendor": "Sitecore", "product": "CMS and Experience Platform (XP)", "name": "Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability", "date": "2025-03-26", "ransom": false, "cvss": 9.8, "epss": 0.8386, "vckev": true, "euvd": false, "ra": 6, "due": "2025-04-16" }, { "cve": "CVE-2009-3953", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 8.8, "epss": 0.8386, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2025-34291", "vendor": "Langflow", "product": "Langflow", "name": "Langflow Origin Validation Error Vulnerability", "date": "2026-05-21", "ransom": false, "cvss": 8.8, "epss": 0.8384, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-04" }, { "cve": "CVE-2020-11023", "vendor": "JQuery", "product": "JQuery", "name": "JQuery Cross-Site Scripting (XSS) Vulnerability", "date": "2025-01-23", "ransom": false, "cvss": 6.1, "epss": 0.8383, "vckev": true, "euvd": false, "ra": 3, "due": "2025-02-13" }, { "cve": "CVE-2020-3161", "vendor": "Cisco", "product": "Cisco IP Phones", "name": "Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.8373, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2015-3035", "vendor": "TP-Link", "product": "Multiple Archer Devices", "name": "TP-Link Multiple Archer Devices Directory Traversal Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 7.5, "epss": 0.8367, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2025-40551", "vendor": "SolarWinds", "product": "Web Help Desk", "name": "SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability", "date": "2026-02-03", "ransom": false, "cvss": 9.8, "epss": 0.8362, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-06" }, { "cve": "CVE-2019-0193", "vendor": "Apache", "product": "Solr", "name": "Apache Solr DataImportHandler Code Injection Vulnerability", "date": "2021-12-10", "ransom": false, "cvss": 7.2, "epss": 0.8355, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-10" }, { "cve": "CVE-2022-24990", "vendor": "TerraMaster", "product": "TerraMaster OS", "name": "TerraMaster OS Remote Command Execution Vulnerability", "date": "2023-02-10", "ransom": true, "cvss": 7.5, "epss": 0.8355, "vckev": true, "euvd": false, "ra": 2, "due": "2023-03-03" }, { "cve": "CVE-2017-11317", "vendor": "Telerik", "product": "User Interface (UI) for ASP.NET AJAX", "name": "Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability", "date": "2022-04-11", "ransom": false, "cvss": 9.8, "epss": 0.8348, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-02" }, { "cve": "CVE-2016-10174", "vendor": "NETGEAR", "product": "WNR2000v5 Router", "name": "NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.8345, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2021-20021", "vendor": "SonicWall", "product": "SonicWall Email Security", "name": "SonicWall Email Security Improper Privilege Management Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.8343, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2010-1871", "vendor": "Red Hat", "product": "JBoss Seam 2", "name": "Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability", "date": "2021-12-10", "ransom": false, "cvss": 8.8, "epss": 0.834, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-10" }, { "cve": "CVE-2010-3765", "vendor": "Mozilla", "product": "Multiple Products", "name": "Mozilla Multiple Products Remote Code Execution Vulnerability", "date": "2025-10-06", "ransom": false, "cvss": 9.8, "epss": 0.8328, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-27" }, { "cve": "CVE-2026-56290", "vendor": "Joomlack", "product": "Page Builder", "name": "Joomlack Page Builder Improper Access Control Vulnerability", "date": "2026-07-07", "ransom": false, "cvss": 9.8, "epss": 0.8325, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-10" }, { "cve": "CVE-2026-20230", "vendor": "Cisco", "product": "Unified Communications Manager", "name": "Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability", "date": "2026-06-25", "ransom": false, "cvss": 8.6, "epss": 0.8321, "vckev": true, "euvd": false, "ra": 12, "due": "2026-06-28" }, { "cve": "CVE-2019-7194", "vendor": "QNAP", "product": "Photo Station", "name": "QNAP Photo Station Path Traversal Vulnerability", "date": "2022-06-08", "ransom": true, "cvss": 9.8, "epss": 0.8312, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2025-34026", "vendor": "Versa", "product": "Concerto", "name": "Versa Concerto Improper Authentication Vulnerability", "date": "2026-01-22", "ransom": false, "cvss": 7.5, "epss": 0.8311, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-12" }, { "cve": "CVE-2020-3992", "vendor": "VMware", "product": "ESXi", "name": "VMware ESXi OpenSLP Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.8302, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2016-5195", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Race Condition Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7, "epss": 0.8301, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2026-42271", "vendor": "BerriAI", "product": "LiteLLM", "name": "BerriAI LiteLLM Command Injection Vulnerability", "date": "2026-06-08", "ransom": false, "cvss": 8.8, "epss": 0.8301, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-22" }, { "cve": "CVE-2025-14847", "vendor": "MongoDB", "product": "MongoDB and MongoDB Server", "name": "MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability", "date": "2025-12-29", "ransom": false, "cvss": 7.5, "epss": 0.8301, "vckev": true, "euvd": false, "ra": 6, "due": "2026-01-19" }, { "cve": "CVE-2021-27561", "vendor": "Yealink", "product": "Device Management", "name": "Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.8286, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2015-1187", "vendor": "D-Link and TRENDnet", "product": "Multiple Devices", "name": "D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.8286, "vckev": true, "euvd": false, "ra": 8, "due": "2022-04-15" }, { "cve": "CVE-2024-0769", "vendor": "D-Link", "product": "DIR-859 Router", "name": "D-Link DIR-859 Router Path Traversal Vulnerability", "date": "2025-06-25", "ransom": false, "cvss": 9.8, "epss": 0.8271, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-16" }, { "cve": "CVE-2023-43208", "vendor": "NextGen Healthcare", "product": "Mirth Connect", "name": "NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability", "date": "2024-05-20", "ransom": true, "cvss": 9.8, "epss": 0.8271, "vckev": true, "euvd": false, "ra": 3, "due": "2024-06-10" }, { "cve": "CVE-2025-8110", "vendor": "Gogs", "product": "Gogs", "name": "Gogs Path Traversal Vulnerability", "date": "2026-01-12", "ransom": false, "cvss": 8.8, "epss": 0.8269, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-02" }, { "cve": "CVE-2026-50751", "vendor": "Check Point", "product": "Security Gateway", "name": "Check Point Security Gateway Improper Authentication Vulnerability", "date": "2026-06-08", "ransom": true, "cvss": 9.3, "epss": 0.8255, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-11" }, { "cve": "CVE-2026-48939", "vendor": "iCagenda", "product": "iCagenda", "name": "iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability", "date": "2026-07-10", "ransom": false, "cvss": 9.8, "epss": 0.825, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-13" }, { "cve": "CVE-2010-2883", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 7.3, "epss": 0.8248, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2018-15982", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2022-02-15", "ransom": true, "cvss": 7.8, "epss": 0.8246, "vckev": true, "euvd": false, "ra": 8, "due": "2022-08-15" }, { "cve": "CVE-2010-1297", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Memory Corruption Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 7.8, "epss": 0.8236, "vckev": true, "euvd": false, "ra": 8, "due": "2022-06-22" }, { "cve": "CVE-2023-41266", "vendor": "Qlik", "product": "Sense", "name": "Qlik Sense Path Traversal Vulnerability", "date": "2023-12-07", "ransom": true, "cvss": 6.5, "epss": 0.8212, "vckev": true, "euvd": false, "ra": 28, "due": "2023-12-28" }, { "cve": "CVE-2024-8957", "vendor": "PTZOptics", "product": "PT30X-SDI/NDI Cameras", "name": "PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability", "date": "2024-11-04", "ransom": false, "cvss": 7.2, "epss": 0.8204, "vckev": true, "euvd": false, "ra": 3, "due": "2024-11-25" }, { "cve": "CVE-2009-4324", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Use-After-Free Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 7.8, "epss": 0.8193, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2018-6789", "vendor": "Exim", "product": "Exim", "name": "Exim Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.8172, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2018-13382", "vendor": "Fortinet", "product": "FortiOS and FortiProxy", "name": "Fortinet FortiOS and FortiProxy Improper Authorization", "date": "2022-01-10", "ransom": true, "cvss": 7.5, "epss": 0.8169, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-10" }, { "cve": "CVE-2026-1281", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability", "date": "2026-01-29", "ransom": false, "cvss": 9.8, "epss": 0.8152, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-01" }, { "cve": "CVE-2023-4911", "vendor": "GNU", "product": "GNU C Library", "name": "GNU C Library Buffer Overflow Vulnerability", "date": "2023-11-21", "ransom": false, "cvss": 7.8, "epss": 0.8142, "vckev": true, "euvd": false, "ra": 3, "due": "2023-12-12" }, { "cve": "CVE-2026-34486", "vendor": "Apache", "product": "Tomcat", "name": "Apache Tomcat Missing Encryption of Sensitive Data Vulnerability", "date": "2026-08-04", "ransom": false, "cvss": 7.5, "epss": 0.8116, "vckev": true, "euvd": true, "ra": 12, "due": "2026-08-07" }, { "cve": "CVE-2019-9621", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability", "date": "2025-07-07", "ransom": false, "cvss": 7.5, "epss": 0.8091, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-28" }, { "cve": "CVE-2026-1603", "vendor": "Ivanti", "product": "Endpoint Manager (EPM)", "name": "Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability", "date": "2026-03-09", "ransom": false, "cvss": 7.5, "epss": 0.8056, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-23" }, { "cve": "CVE-2023-22952", "vendor": "SugarCRM", "product": "Multiple Products", "name": "Multiple SugarCRM Products Remote Code Execution Vulnerability", "date": "2023-02-02", "ransom": false, "cvss": 8.8, "epss": 0.8027, "vckev": true, "euvd": false, "ra": 2, "due": "2023-02-23" }, { "cve": "CVE-2020-14871", "vendor": "Oracle", "product": "Solaris and Zettabyte File System (ZFS)", "name": "Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 10, "epss": 0.7984, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2022-26258", "vendor": "D-Link", "product": "DIR-820L", "name": "D-Link DIR-820L Remote Code Execution Vulnerability", "date": "2022-09-08", "ransom": false, "cvss": 9.8, "epss": 0.7981, "vckev": true, "euvd": false, "ra": 8, "due": "2022-09-29" }, { "cve": "CVE-2020-10987", "vendor": "Tenda", "product": "AC1900 Router AC15 Model", "name": "Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.7981, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-42009", "vendor": "Roundcube", "product": "Webmail", "name": "RoundCube Webmail Cross-Site Scripting Vulnerability", "date": "2025-06-09", "ransom": false, "cvss": 9.3, "epss": 0.7962, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-30" }, { "cve": "CVE-2010-0738", "vendor": "Red Hat", "product": "JBoss", "name": "Red Hat JBoss Authentication Bypass Vulnerability", "date": "2022-05-25", "ransom": true, "cvss": 5.3, "epss": 0.7942, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-15" }, { "cve": "CVE-2018-18809", "vendor": "TIBCO", "product": "JasperReports", "name": "TIBCO JasperReports Library Directory Traversal Vulnerability", "date": "2022-12-29", "ransom": false, "cvss": 6.5, "epss": 0.7906, "vckev": true, "euvd": false, "ra": 2, "due": "2023-01-19" }, { "cve": "CVE-2013-4810", "vendor": "Hewlett Packard (HP)", "product": "ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management", "name": "HP Multiple Products Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.79, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2020-6418", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.7881, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-22555", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Heap Out-of-Bounds Write Vulnerability", "date": "2025-10-06", "ransom": false, "cvss": 7.8, "epss": 0.7868, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-27" }, { "cve": "CVE-2013-3346", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Acrobat Memory Corruption Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 9.8, "epss": 0.7858, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2026-15409", "vendor": "SonicWall", "product": "SMA1000 Appliances", "name": "SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability", "date": "2026-07-14", "ransom": true, "cvss": 10, "epss": 0.7844, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-17" }, { "cve": "CVE-2023-49103", "vendor": "ownCloud", "product": "ownCloud graphapi", "name": "ownCloud graphapi Information Disclosure Vulnerability", "date": "2023-11-30", "ransom": false, "cvss": 7.5, "epss": 0.7843, "vckev": true, "euvd": false, "ra": 3, "due": "2023-12-21" }, { "cve": "CVE-2021-21975", "vendor": "VMware", "product": "vRealize Operations Manager API", "name": "VMware Server Side Request Forgery in vRealize Operations Manager API", "date": "2022-01-18", "ransom": true, "cvss": 7.5, "epss": 0.7829, "vckev": true, "euvd": false, "ra": 2, "due": "2022-02-01" }, { "cve": "CVE-2021-28799", "vendor": "QNAP", "product": "Network Attached Storage (NAS)", "name": "QNAP NAS Improper Authorization Vulnerability", "date": "2022-03-31", "ransom": true, "cvss": 9.8, "epss": 0.7825, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-21" }, { "cve": "CVE-2020-8816", "vendor": "Pi-hole", "product": "AdminLTE", "name": "Pi-Hole AdminLTE Remote Code Execution Vulnerability", "date": "2021-12-10", "ransom": false, "cvss": 7.2, "epss": 0.7819, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-10" }, { "cve": "CVE-2022-26318", "vendor": "WatchGuard", "product": "Firebox and XTM Appliances", "name": "WatchGuard Firebox and XTM Appliances Arbitrary Code Execution", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.7816, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2021-38406", "vendor": "Delta Electronics", "product": "DOPSoft 2", "name": "Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability", "date": "2022-08-25", "ransom": false, "cvss": 7.8, "epss": 0.7789, "vckev": true, "euvd": false, "ra": 8, "due": "2022-09-15" }, { "cve": "CVE-2019-15949", "vendor": "Nagios", "product": "Nagios XI", "name": "Nagios XI Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.7774, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2023-27532", "vendor": "Veeam", "product": "Backup & Replication", "name": "Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability", "date": "2023-08-22", "ransom": true, "cvss": 7.5, "epss": 0.7761, "vckev": true, "euvd": false, "ra": 3, "due": "2023-09-12" }, { "cve": "CVE-2023-27351", "vendor": "PaperCut", "product": "NG/MF", "name": "PaperCut NG/MF Improper Authentication Vulnerability", "date": "2026-04-20", "ransom": true, "cvss": 7.5, "epss": 0.7739, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-04" }, { "cve": "CVE-2023-34192", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "date": "2025-02-25", "ransom": false, "cvss": 9, "epss": 0.7727, "vckev": true, "euvd": false, "ra": 6, "due": "2025-03-18" }, { "cve": "CVE-2016-3718", "vendor": "ImageMagick", "product": "ImageMagick", "name": "ImageMagick Server-Side Request Forgery (SSRF) Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 5.5, "epss": 0.769, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2018-15133", "vendor": "Laravel", "product": "Laravel Framework", "name": "Laravel Deserialization of Untrusted Data Vulnerability", "date": "2024-01-16", "ransom": false, "cvss": 8.1, "epss": 0.7681, "vckev": true, "euvd": false, "ra": 3, "due": "2024-02-06" }, { "cve": "CVE-2020-13965", "vendor": "Roundcube", "product": "Webmail", "name": "Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability", "date": "2024-06-26", "ransom": false, "cvss": 6.1, "epss": 0.766, "vckev": true, "euvd": false, "ra": 3, "due": "2024-07-17" }, { "cve": "CVE-2019-7238", "vendor": "Sonatype", "product": "Nexus Repository Manager", "name": "Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability", "date": "2021-12-10", "ransom": false, "cvss": 9.8, "epss": 0.7653, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-10" }, { "cve": "CVE-2026-15410", "vendor": "SonicWall", "product": "SMA1000 Appliances", "name": "SonicWall SMA1000 Appliances Code Injection Vulnerability", "date": "2026-07-14", "ransom": true, "cvss": 7.2, "epss": 0.7635, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-17" }, { "cve": "CVE-2025-6204", "vendor": "Dassault Systèmes", "product": "DELMIA Apriso", "name": "Dassault Systèmes DELMIA Apriso Code Injection Vulnerability", "date": "2025-10-28", "ransom": false, "cvss": 8, "epss": 0.7615, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-18" }, { "cve": "CVE-2026-56291", "vendor": "Balbooa", "product": "Forms", "name": "Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability", "date": "2026-07-10", "ransom": false, "cvss": 9.8, "epss": 0.7607, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-13" }, { "cve": "CVE-2021-30860", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Integer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.7599, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2023-5631", "vendor": "Roundcube", "product": "Webmail", "name": "Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability", "date": "2023-10-26", "ransom": false, "cvss": 5.4, "epss": 0.7587, "vckev": true, "euvd": false, "ra": 3, "due": "2023-11-16" }, { "cve": "CVE-2017-11357", "vendor": "Telerik", "product": "User Interface (UI) for ASP.NET AJAX", "name": "Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability", "date": "2023-01-26", "ransom": true, "cvss": 9.8, "epss": 0.7571, "vckev": true, "euvd": false, "ra": 2, "due": "2023-02-16" }, { "cve": "CVE-2019-1003030", "vendor": "Jenkins", "product": "Matrix Project Plugin", "name": "Jenkins Matrix Project Plugin Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.9, "epss": 0.7559, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2021-20123", "vendor": "DrayTek", "product": "VigorConnect", "name": "Draytek VigorConnect Path Traversal Vulnerability", "date": "2024-09-03", "ransom": false, "cvss": 7.5, "epss": 0.7543, "vckev": true, "euvd": false, "ra": 3, "due": "2024-09-24" }, { "cve": "CVE-2016-3715", "vendor": "ImageMagick", "product": "ImageMagick", "name": "ImageMagick Arbitrary File Deletion Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 5.5, "epss": 0.7538, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2018-8298", "vendor": "ChakraCore", "product": "ChakraCore scripting engine", "name": "ChakraCore Scripting Engine Type Confusion Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.5, "epss": 0.7534, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2017-9248", "vendor": "Progress", "product": "ASP.NET AJAX and Sitefinity", "name": "Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.751, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2012-0391", "vendor": "Apache", "product": "Struts 2", "name": "Apache Struts 2 Improper Input Validation Vulnerability", "date": "2022-01-21", "ransom": false, "cvss": 9.8, "epss": 0.7507, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-21" }, { "cve": "CVE-2021-25298", "vendor": "Nagios", "product": "Nagios XI", "name": "Nagios XI OS Command Injection", "date": "2022-01-18", "ransom": false, "cvss": 8.8, "epss": 0.7498, "vckev": true, "euvd": false, "ra": 2, "due": "2022-02-01" }, { "cve": "CVE-2023-44221", "vendor": "SonicWall", "product": "SMA100 Appliances", "name": "SonicWall SMA100 Appliances OS Command Injection Vulnerability", "date": "2025-05-01", "ransom": false, "cvss": 7.2, "epss": 0.7493, "vckev": true, "euvd": false, "ra": 6, "due": "2025-05-22" }, { "cve": "CVE-2014-0780", "vendor": "InduSoft", "product": "Web Studio", "name": "InduSoft Web Studio NTWebServer Directory Traversal Vulnerability", "date": "2022-04-15", "ransom": false, "cvss": 9.8, "epss": 0.7455, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-06" }, { "cve": "CVE-2015-3043", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Memory Corruption Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 9.8, "epss": 0.7445, "vckev": true, "euvd": false, "ra": 8, "due": "2022-03-24" }, { "cve": "CVE-2018-14667", "vendor": "Red Hat", "product": "JBoss RichFaces Framework", "name": "Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability", "date": "2023-09-28", "ransom": false, "cvss": 9.8, "epss": 0.7417, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-19" }, { "cve": "CVE-2005-2773", "vendor": "Hewlett Packard (HP)", "product": "OpenView Network Node Manager", "name": "HP OpenView Network Node Manager Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.7409, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2019-12991", "vendor": "Citrix", "product": "SD-WAN and NetScaler", "name": "Citrix SD-WAN and NetScaler Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 8.8, "epss": 0.7405, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2018-15811", "vendor": "DotNetNuke (DNN)", "product": "DotNetNuke (DNN)", "name": "DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.5, "epss": 0.7405, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2018-18325", "vendor": "DotNetNuke (DNN)", "product": "DotNetNuke (DNN)", "name": "DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.5, "epss": 0.7405, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2019-1003029", "vendor": "Jenkins", "product": "Script Security Plugin", "name": "Jenkins Script Security Plugin Sandbox Bypass Vulnerability", "date": "2022-04-25", "ransom": false, "cvss": 9.9, "epss": 0.7385, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-16" }, { "cve": "CVE-2026-25089", "vendor": "Fortinet", "product": "FortiSandbox", "name": "Fortinet FortiSandbox OS Command Injection Vulnerability", "date": "2026-07-16", "ransom": false, "cvss": 9.8, "epss": 0.736, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-19" }, { "cve": "CVE-2021-42258", "vendor": "BQE", "product": "BillQuick Web Suite", "name": "BQE BillQuick Web Suite SQL Injection Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.7345, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2024-37383", "vendor": "Roundcube", "product": "Webmail", "name": "RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability", "date": "2024-10-24", "ransom": false, "cvss": 6.1, "epss": 0.733, "vckev": true, "euvd": false, "ra": 3, "due": "2024-11-14" }, { "cve": "CVE-2023-47565", "vendor": "QNAP", "product": "VioStor NVR", "name": "QNAP VioStor NVR OS Command Injection Vulnerability", "date": "2023-12-21", "ransom": false, "cvss": 8.8, "epss": 0.7328, "vckev": true, "euvd": false, "ra": 3, "due": "2024-01-11" }, { "cve": "CVE-2026-60137", "vendor": "WordPress", "product": "Core", "name": "WordPress Core SQL Injection Vulnerability", "date": "2026-07-21", "ransom": false, "cvss": 5.9, "epss": 0.731, "vckev": true, "euvd": false, "ra": 12, "due": "2026-08-04" }, { "cve": "CVE-2025-1316", "vendor": "Edimax", "product": "IC-7100 IP Camera", "name": "Edimax IC-7100 IP Camera OS Command Injection Vulnerability", "date": "2025-03-19", "ransom": false, "cvss": 9.8, "epss": 0.7304, "vckev": true, "euvd": false, "ra": 6, "due": "2025-04-09" }, { "cve": "CVE-2019-9978", "vendor": "WordPress", "product": "Social Warfare Plugin", "name": "WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 6.1, "epss": 0.7295, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2020-5741", "vendor": "Plex", "product": "Media Server", "name": "Plex Media Server Remote Code Execution Vulnerability", "date": "2023-03-10", "ransom": false, "cvss": 7.2, "epss": 0.7294, "vckev": true, "euvd": false, "ra": 2, "due": "2023-03-31" }, { "cve": "CVE-2018-7841", "vendor": "Schneider Electric", "product": "U.motion Builder", "name": "Schneider Electric U.motion Builder SQL Injection Vulnerability", "date": "2022-04-15", "ransom": false, "cvss": 9.8, "epss": 0.7268, "vckev": true, "euvd": false, "ra": 8, "due": "2022-05-06" }, { "cve": "CVE-2017-6316", "vendor": "Citrix", "product": "NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server", "name": "Citrix Multiple Products Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.726, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2022-20699", "vendor": "Cisco", "product": "Small Business RV160, RV260, RV340, and RV345 Series Routers", "name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 9.8, "epss": 0.7246, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2025-30066", "vendor": "tj-actions", "product": "changed-files GitHub Action", "name": "tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability", "date": "2025-03-18", "ransom": false, "cvss": 8.6, "epss": 0.7239, "vckev": true, "euvd": false, "ra": 29, "due": "2025-04-08" }, { "cve": "CVE-2017-6334", "vendor": "NETGEAR", "product": "DGN2200 Devices", "name": "NETGEAR DGN2200 Devices OS Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 8.8, "epss": 0.722, "vckev": true, "euvd": false, "ra": 8, "due": "2022-04-15" }, { "cve": "CVE-2010-4344", "vendor": "Exim", "product": "Exim", "name": "Exim Heap-Based Buffer Overflow Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.719, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2025-40536", "vendor": "SolarWinds", "product": "Web Help Desk", "name": "SolarWinds Web Help Desk Security Control Bypass Vulnerability", "date": "2026-02-12", "ransom": false, "cvss": 9.8, "epss": 0.7155, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-15" }, { "cve": "CVE-2021-25296", "vendor": "Nagios", "product": "Nagios XI", "name": "Nagios XI OS Command Injection", "date": "2022-01-18", "ransom": false, "cvss": 8.8, "epss": 0.7154, "vckev": true, "euvd": false, "ra": 2, "due": "2022-02-01" }, { "cve": "CVE-2026-16232", "vendor": "Check Point", "product": "SmartConsole", "name": "Check Point SmartConsole Improper Authentication Vulnerability", "date": "2026-07-22", "ransom": false, "cvss": 9.1, "epss": 0.7139, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-25" }, { "cve": "CVE-2016-2386", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver SQL Injection Vulnerability", "date": "2022-06-09", "ransom": false, "cvss": 9.8, "epss": 0.7106, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-30" }, { "cve": "CVE-2025-6205", "vendor": "Dassault Systèmes", "product": "DELMIA Apriso", "name": "Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability", "date": "2025-10-28", "ransom": false, "cvss": 9.1, "epss": 0.7106, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-18" }, { "cve": "CVE-2022-28810", "vendor": "Zoho", "product": "ManageEngine", "name": "Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability", "date": "2023-03-07", "ransom": false, "cvss": 6.8, "epss": 0.7097, "vckev": true, "euvd": false, "ra": 2, "due": "2023-03-28" }, { "cve": "CVE-2024-20353", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "name": "Cisco ASA and FTD Denial of Service Vulnerability", "date": "2024-04-24", "ransom": false, "cvss": 8.6, "epss": 0.7069, "vckev": true, "euvd": false, "ra": 3, "due": "2024-05-01" }, { "cve": "CVE-2021-20124", "vendor": "DrayTek", "product": "VigorConnect", "name": "Draytek VigorConnect Path Traversal Vulnerability", "date": "2024-09-03", "ransom": false, "cvss": 7.5, "epss": 0.7066, "vckev": true, "euvd": false, "ra": 3, "due": "2024-09-24" }, { "cve": "CVE-2020-36193", "vendor": "PEAR", "product": "Archive_Tar", "name": "PEAR Archive_Tar Improper Link Resolution Vulnerability", "date": "2022-08-25", "ransom": false, "cvss": 7.5, "epss": 0.7059, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-15" }, { "cve": "CVE-2017-6736", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.8, "epss": 0.7056, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2022-2294", "vendor": "WebRTC", "product": "WebRTC", "name": "WebRTC Heap Buffer Overflow Vulnerability", "date": "2022-08-25", "ransom": true, "cvss": 8.8, "epss": 0.7046, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-15" }, { "cve": "CVE-2012-1535", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.8, "epss": 0.7038, "vckev": true, "euvd": false, "ra": 8, "due": "2022-03-24" }, { "cve": "CVE-2020-4427", "vendor": "IBM", "product": "Data Risk Manager", "name": "IBM Data Risk Manager Security Bypass Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.7003, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2020-3259", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "name": "Cisco ASA and FTD Information Disclosure Vulnerability", "date": "2024-02-15", "ransom": true, "cvss": 7.5, "epss": 0.6934, "vckev": true, "euvd": false, "ra": 3, "due": "2024-03-07" }, { "cve": "CVE-2021-21220", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Improper Input Validation Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.6929, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2013-1690", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "name": "Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability", "date": "2022-03-28", "ransom": false, "cvss": 8.8, "epss": 0.6902, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-18" }, { "cve": "CVE-2016-11021", "vendor": "D-Link", "product": "DCS-930L Devices", "name": "D-Link DCS-930L Devices OS Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 7.2, "epss": 0.6887, "vckev": true, "euvd": false, "ra": 8, "due": "2022-04-15" }, { "cve": "CVE-2015-4495", "vendor": "Mozilla", "product": "Firefox", "name": "Mozilla Firefox Security Feature Bypass Vulnerability", "date": "2022-05-25", "ransom": false, "cvss": 8.8, "epss": 0.6866, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-15" }, { "cve": "CVE-2020-4430", "vendor": "IBM", "product": "Data Risk Manager", "name": "IBM Data Risk Manager Directory Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 4.3, "epss": 0.6854, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-30657", "vendor": "Apple", "product": "macOS", "name": "Apple macOS Unspecified Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 5.5, "epss": 0.6853, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2015-7645", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": true, "cvss": 7.8, "epss": 0.684, "vckev": true, "euvd": false, "ra": 8, "due": "2022-03-24" }, { "cve": "CVE-2017-6077", "vendor": "NETGEAR", "product": "Wireless Router DGN2200", "name": "NETGEAR DGN2200 Remote Code Execution Vulnerability", "date": "2022-03-07", "ransom": false, "cvss": 9.8, "epss": 0.682, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-07" }, { "cve": "CVE-2015-8651", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Integer Overflow Vulnerability", "date": "2022-05-25", "ransom": false, "cvss": 8.8, "epss": 0.6792, "vckev": true, "euvd": false, "ra": 8, "due": "2022-06-15" }, { "cve": "CVE-2019-18426", "vendor": "Meta Platforms", "product": "WhatsApp", "name": "WhatsApp Cross-Site Scripting Vulnerability", "date": "2022-05-23", "ransom": false, "cvss": 8.2, "epss": 0.6786, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-13" }, { "cve": "CVE-2023-28461", "vendor": "Array Networks", "product": "AG/vxAG ArrayOS", "name": "Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability", "date": "2024-11-25", "ransom": true, "cvss": 9.8, "epss": 0.6786, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-16" }, { "cve": "CVE-2025-0411", "vendor": "7-Zip", "product": "7-Zip", "name": "7-Zip Mark of the Web Bypass Vulnerability", "date": "2025-02-06", "ransom": false, "cvss": 7, "epss": 0.6707, "vckev": true, "euvd": false, "ra": 3, "due": "2025-02-27" }, { "cve": "CVE-2011-0609", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Unspecified Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 7.8, "epss": 0.6682, "vckev": true, "euvd": false, "ra": 8, "due": "2022-06-22" }, { "cve": "CVE-2013-2729", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability", "date": "2022-03-28", "ransom": false, "cvss": 9.8, "epss": 0.6655, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-18" }, { "cve": "CVE-2025-20337", "vendor": "Cisco", "product": "Identity Services Engine", "name": "Cisco Identity Services Engine Injection Vulnerability", "date": "2025-07-28", "ransom": false, "cvss": 10, "epss": 0.6629, "vckev": true, "euvd": false, "ra": 6, "due": "2025-08-18" }, { "cve": "CVE-2013-0629", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Directory Traversal Vulnerability", "date": "2022-03-07", "ransom": false, "cvss": 7.5, "epss": 0.659, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-07" }, { "cve": "CVE-2023-29552", "vendor": "IETF", "product": "Service Location Protocol (SLP)", "name": "Service Location Protocol (SLP) Denial-of-Service Vulnerability", "date": "2023-11-08", "ransom": false, "cvss": 7.5, "epss": 0.6587, "vckev": true, "euvd": false, "ra": 30, "due": "2023-11-29" }, { "cve": "CVE-2013-0631", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Information Disclosure Vulnerability", "date": "2022-03-07", "ransom": false, "cvss": 7.5, "epss": 0.6587, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-07" }, { "cve": "CVE-2016-20017", "vendor": "D-Link", "product": "DSL-2750B Devices", "name": "D-Link DSL-2750B Devices Command Injection Vulnerability", "date": "2024-01-08", "ransom": false, "cvss": 9.8, "epss": 0.6543, "vckev": true, "euvd": false, "ra": 3, "due": "2024-01-29" }, { "cve": "CVE-2019-0211", "vendor": "Apache", "product": "HTTP Server", "name": "Apache HTTP Server Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.6501, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-27877", "vendor": "Veritas", "product": "Backup Exec Agent", "name": "Veritas Backup Exec Agent Improper Authentication Vulnerability", "date": "2023-04-07", "ransom": true, "cvss": 9.8, "epss": 0.6491, "vckev": true, "euvd": false, "ra": 2, "due": "2023-04-28" }, { "cve": "CVE-2025-58360", "vendor": "OSGeo", "product": "GeoServer", "name": "OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability", "date": "2025-12-11", "ransom": false, "cvss": 9.8, "epss": 0.6487, "vckev": true, "euvd": false, "ra": 6, "due": "2026-01-01" }, { "cve": "CVE-2021-30551", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.647, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2021-30632", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Write Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.6455, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2025-2776", "vendor": "SysAid", "product": "SysAid On-Prem", "name": "SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability", "date": "2025-07-22", "ransom": false, "cvss": 9.8, "epss": 0.644, "vckev": true, "euvd": false, "ra": 6, "due": "2025-08-12" }, { "cve": "CVE-2015-4068", "vendor": "Arcserve", "product": "Unified Data Protection (UDP)", "name": "Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.1, "epss": 0.6364, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2016-4657", "vendor": "Apple", "product": "iOS", "name": "Apple iOS Webkit Memory Corruption Vulnerability", "date": "2022-05-24", "ransom": false, "cvss": 8.8, "epss": 0.6358, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-14" }, { "cve": "CVE-2023-35081", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability", "date": "2023-07-31", "ransom": false, "cvss": 7.2, "epss": 0.6358, "vckev": true, "euvd": false, "ra": 3, "due": "2023-08-21" }, { "cve": "CVE-2025-59718", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability", "date": "2025-12-16", "ransom": false, "cvss": 9.8, "epss": 0.6344, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-23" }, { "cve": "CVE-2019-8394", "vendor": "Zoho", "product": "ManageEngine", "name": "Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 6.5, "epss": 0.6334, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2018-4939", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.6291, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-9380", "vendor": "Ivanti", "product": "Cloud Services Appliance (CSA)", "name": "Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability", "date": "2024-10-09", "ransom": false, "cvss": 7.2, "epss": 0.6279, "vckev": true, "euvd": false, "ra": 31, "due": "2024-10-30" }, { "cve": "CVE-2026-34909", "vendor": "Ubiquiti", "product": "UniFi OS", "name": "Ubiquiti UniFi OS Path Traversal Vulnerability", "date": "2026-06-23", "ransom": false, "cvss": 10, "epss": 0.6277, "vckev": true, "euvd": false, "ra": 12, "due": "2026-06-26" }, { "cve": "CVE-2022-21445", "vendor": "Oracle", "product": "ADF Faces", "name": "Oracle ADF Faces Deserialization of Untrusted Data Vulnerability", "date": "2024-09-18", "ransom": false, "cvss": 9.8, "epss": 0.6248, "vckev": true, "euvd": false, "ra": 3, "due": "2024-10-09" }, { "cve": "CVE-2010-1428", "vendor": "Red Hat", "product": "JBoss", "name": "Red Hat JBoss Information Disclosure Vulnerability", "date": "2022-05-25", "ransom": true, "cvss": 7.5, "epss": 0.6231, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-15" }, { "cve": "CVE-2026-34908", "vendor": "Ubiquiti", "product": "UniFi OS", "name": "Ubiquiti UniFi OS Improper Access Control Vulnerability", "date": "2026-06-23", "ransom": false, "cvss": 10, "epss": 0.6191, "vckev": true, "euvd": false, "ra": 12, "due": "2026-06-26" }, { "cve": "CVE-2024-23113", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Format String Vulnerability", "date": "2024-10-09", "ransom": false, "cvss": 9.8, "epss": 0.6172, "vckev": true, "euvd": false, "ra": 3, "due": "2024-10-30" }, { "cve": "CVE-2020-4428", "vendor": "IBM", "product": "Data Risk Manager", "name": "IBM Data Risk Manager Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.1, "epss": 0.6169, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2019-5786", "vendor": "Google", "product": "Chrome Blink", "name": "Google Chrome Blink Use-After-Free Vulnerability", "date": "2022-05-23", "ransom": false, "cvss": 6.5, "epss": 0.6154, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-13" }, { "cve": "CVE-2023-21608", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Use-After-Free Vulnerability", "date": "2023-10-10", "ransom": false, "cvss": 7.8, "epss": 0.6148, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-31" }, { "cve": "CVE-2015-7755", "vendor": "Juniper", "product": "ScreenOS", "name": "Juniper ScreenOS Improper Authentication Vulnerability", "date": "2025-10-02", "ransom": false, "cvss": 9.8, "epss": 0.614, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-23" }, { "cve": "CVE-2024-8956", "vendor": "PTZOptics", "product": "PT30X-SDI/NDI Cameras", "name": "PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability", "date": "2024-11-04", "ransom": false, "cvss": 9.1, "epss": 0.6128, "vckev": true, "euvd": false, "ra": 3, "due": "2024-11-25" }, { "cve": "CVE-2025-47813", "vendor": "Wing FTP Server", "product": "Wing FTP Server", "name": "Wing FTP Server Information Disclosure Vulnerability", "date": "2026-03-16", "ransom": false, "cvss": 4.3, "epss": 0.6125, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-30" }, { "cve": "CVE-2021-22991", "vendor": "F5", "product": "BIG-IP Traffic Management Microkernel", "name": "F5 BIG-IP Traffic Management Microkernel Buffer Overflow", "date": "2022-01-18", "ransom": false, "cvss": 9.8, "epss": 0.6106, "vckev": true, "euvd": false, "ra": 2, "due": "2022-02-01" }, { "cve": "CVE-2018-7445", "vendor": "MikroTik", "product": "RouterOS", "name": "MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability", "date": "2022-09-08", "ransom": false, "cvss": 9.8, "epss": 0.6102, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-29" }, { "cve": "CVE-2021-22681", "vendor": "Rockwell", "product": "Multiple Products", "name": "Rockwell Multiple Products Insufficient Protected Credentials Vulnerability", "date": "2026-03-05", "ransom": false, "cvss": 9.8, "epss": 0.6099, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-26" }, { "cve": "CVE-2018-6065", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Integer Overflow Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 8.8, "epss": 0.603, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2020-8655", "vendor": "EyesOfNetwork", "product": "EyesOfNetwork", "name": "EyesOfNetwork Improper Privilege Management Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.6008, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-54085", "vendor": "AMI", "product": "MegaRAC SPx", "name": "AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability", "date": "2025-06-25", "ransom": false, "cvss": 9.8, "epss": 0.5919, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-16" }, { "cve": "CVE-2026-33634", "vendor": "Aquasecurity", "product": "Trivy", "name": "Aquasecurity Trivy Embedded Malicious Code Vulnerability", "date": "2026-03-26", "ransom": false, "cvss": 8.8, "epss": 0.5916, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-09" }, { "cve": "CVE-2025-31125", "vendor": "Vite", "product": "Vitejs", "name": "Vite Vitejs Improper Access Control Vulnerability", "date": "2026-01-22", "ransom": false, "cvss": 7.5, "epss": 0.588, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-12" }, { "cve": "CVE-2023-43770", "vendor": "Roundcube", "product": "Webmail", "name": "Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability", "date": "2024-02-12", "ransom": false, "cvss": 6.1, "epss": 0.5848, "vckev": true, "euvd": false, "ra": 3, "due": "2024-03-04" }, { "cve": "CVE-2025-2746", "vendor": "Kentico", "product": "Xperience CMS", "name": "Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability", "date": "2025-10-20", "ransom": false, "cvss": 9.8, "epss": 0.5843, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-10" }, { "cve": "CVE-2023-6549", "vendor": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "name": "Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability", "date": "2024-01-17", "ransom": false, "cvss": 7.5, "epss": 0.5763, "vckev": true, "euvd": false, "ra": 3, "due": "2024-02-07" }, { "cve": "CVE-2020-26919", "vendor": "NETGEAR", "product": "JGS516PE Devices", "name": "Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.5719, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2022-37055", "vendor": "D-Link", "product": "Routers", "name": "D-Link Routers Buffer Overflow Vulnerability", "date": "2025-12-08", "ransom": false, "cvss": 9.8, "epss": 0.5704, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-29" }, { "cve": "CVE-2021-27104", "vendor": "Accellion", "product": "FTA", "name": "Accellion FTA OS Command Injection Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.5641, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2021-25297", "vendor": "Nagios", "product": "Nagios XI", "name": "Nagios XI OS Command Injection", "date": "2022-01-18", "ransom": false, "cvss": 8.8, "epss": 0.5638, "vckev": true, "euvd": false, "ra": 2, "due": "2022-02-01" }, { "cve": "CVE-2025-32463", "vendor": "Sudo", "product": "Sudo", "name": "Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability", "date": "2025-09-29", "ransom": false, "cvss": 7.8, "epss": 0.5634, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-20" }, { "cve": "CVE-2026-0770", "vendor": "Langflow", "product": "Langflow", "name": "Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability", "date": "2026-07-21", "ransom": false, "cvss": 9.8, "epss": 0.5627, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-24" }, { "cve": "CVE-2021-21224", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.5624, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2019-5825", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Write Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 6.5, "epss": 0.5593, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2026-48907", "vendor": "Widget Factory", "product": "Joomla Content Editor", "name": "Widget Factory Joomla Content Editor Improper Access Control Vulnerability", "date": "2026-06-16", "ransom": false, "cvss": 9.8, "epss": 0.5591, "vckev": true, "euvd": false, "ra": 12, "due": "2026-06-19" }, { "cve": "CVE-2019-11708", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "name": "Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability", "date": "2022-05-23", "ransom": false, "cvss": 10, "epss": 0.5587, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-13" }, { "cve": "CVE-2025-58034", "vendor": "Fortinet", "product": "FortiWeb", "name": "Fortinet FortiWeb OS Command Injection Vulnerability", "date": "2025-11-18", "ransom": false, "cvss": 7.2, "epss": 0.5558, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-25" }, { "cve": "CVE-2022-29499", "vendor": "Mitel", "product": "MiVoice Connect", "name": "Mitel MiVoice Connect Data Validation Vulnerability", "date": "2022-06-27", "ransom": true, "cvss": 9.8, "epss": 0.554, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-18" }, { "cve": "CVE-2016-0984", "vendor": "Adobe", "product": "Flash Player and AIR", "name": "Adobe Flash Player and AIR Use-After-Free Vulnerability", "date": "2022-05-25", "ransom": false, "cvss": 8.8, "epss": 0.5537, "vckev": true, "euvd": false, "ra": 32, "due": "2022-06-15" }, { "cve": "CVE-2018-0125", "vendor": "Cisco", "product": "VPN Routers", "name": "Cisco VPN Routers Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.5519, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2006-1547", "vendor": "Apache", "product": "Struts 1", "name": "Apache Struts 1 ActionForm Denial-of-Service Vulnerability", "date": "2022-01-21", "ransom": false, "cvss": 7.5, "epss": 0.5464, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-21" }, { "cve": "CVE-2024-38812", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Heap-Based Buffer Overflow Vulnerability", "date": "2024-11-20", "ransom": false, "cvss": 9.8, "epss": 0.5457, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-11" }, { "cve": "CVE-2020-29557", "vendor": "D-Link", "product": "DIR-825 R1 Devices", "name": "D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.5432, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2023-20118", "vendor": "Cisco", "product": "Small Business RV Series Routers", "name": "Cisco Small Business RV Series Routers Command Injection Vulnerability", "date": "2025-03-03", "ransom": false, "cvss": 7.2, "epss": 0.5411, "vckev": true, "euvd": false, "ra": 6, "due": "2025-03-24" }, { "cve": "CVE-2014-0130", "vendor": "Rails", "product": "Ruby on Rails", "name": "Ruby on Rails Directory Traversal Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 7.5, "epss": 0.537, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2021-22941", "vendor": "Citrix", "product": "ShareFile", "name": "Citrix ShareFile Improper Access Control Vulnerability", "date": "2022-03-25", "ransom": true, "cvss": 9.8, "epss": 0.5359, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2021-22175", "vendor": "GitLab", "product": "GitLab", "name": "GitLab Server-Side Request Forgery (SSRF) Vulnerability", "date": "2026-02-18", "ransom": false, "cvss": 9.8, "epss": 0.5337, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-11" }, { "cve": "CVE-2023-45249", "vendor": "Acronis", "product": "Cyber Infrastructure (ACI)", "name": "Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability", "date": "2024-07-29", "ransom": false, "cvss": 9.8, "epss": 0.5325, "vckev": true, "euvd": false, "ra": 3, "due": "2024-08-19" }, { "cve": "CVE-2021-21551", "vendor": "Dell", "product": "dbutil Driver", "name": "Dell dbutil Driver Insufficient Access Control Vulnerability", "date": "2022-03-31", "ransom": false, "cvss": 7.8, "epss": 0.5312, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-21" }, { "cve": "CVE-2020-25079", "vendor": "D-Link", "product": "DCS-2530L and DCS-2670L Devices", "name": "D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability", "date": "2025-08-05", "ransom": false, "cvss": 8.8, "epss": 0.5272, "vckev": true, "euvd": false, "ra": 6, "due": "2025-08-26" }, { "cve": "CVE-2019-13272", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Improper Privilege Management Vulnerability", "date": "2021-12-10", "ransom": false, "cvss": 7.8, "epss": 0.522, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-10" }, { "cve": "CVE-2021-28550", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.5201, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2016-2388", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Information Disclosure Vulnerability", "date": "2022-06-09", "ransom": false, "cvss": 5.3, "epss": 0.5155, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-30" }, { "cve": "CVE-2023-32434", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Integer Overflow Vulnerability", "date": "2023-06-23", "ransom": false, "cvss": 7.8, "epss": 0.5152, "vckev": true, "euvd": false, "ra": 2, "due": "2023-07-14" }, { "cve": "CVE-2025-14611", "vendor": "Gladinet", "product": "CentreStack and Triofox", "name": "Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability", "date": "2025-12-15", "ransom": false, "cvss": 9.8, "epss": 0.5095, "vckev": true, "euvd": false, "ra": 6, "due": "2026-01-05" }, { "cve": "CVE-2025-25181", "vendor": "Advantive", "product": "VeraCore", "name": "Advantive VeraCore SQL Injection Vulnerability", "date": "2025-03-10", "ransom": false, "cvss": 7.5, "epss": 0.5086, "vckev": true, "euvd": false, "ra": 6, "due": "2025-03-31" }, { "cve": "CVE-2023-49897", "vendor": "FXC", "product": "AE1021, AE1021PE", "name": "FXC AE1021, AE1021PE OS Command Injection Vulnerability", "date": "2023-12-21", "ransom": false, "cvss": 8.8, "epss": 0.5073, "vckev": true, "euvd": false, "ra": 3, "due": "2024-01-11" }, { "cve": "CVE-2020-15999", "vendor": "Google", "product": "Chrome FreeType", "name": "Google Chrome FreeType Heap Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.6, "epss": 0.5063, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2021-20023", "vendor": "SonicWall", "product": "SonicWall Email Security", "name": "SonicWall Email Security Path Traversal Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 4.9, "epss": 0.5023, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2024-21182", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Unspecified Vulnerability", "date": "2026-06-01", "ransom": false, "cvss": 7.5, "epss": 0.4997, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-04" }, { "cve": "CVE-2022-23227", "vendor": "NUUO", "product": "NVRmini2 Devices", "name": "NUUO NVRmini2 Devices Missing Authentication Vulnerability", "date": "2024-12-18", "ransom": false, "cvss": 9.8, "epss": 0.4943, "vckev": true, "euvd": false, "ra": 13, "due": "2025-01-08" }, { "cve": "CVE-2020-12812", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS SSL VPN Improper Authentication Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.4934, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-22017", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Improper Access Control", "date": "2022-01-10", "ransom": false, "cvss": 5.3, "epss": 0.4918, "vckev": true, "euvd": false, "ra": 2, "due": "2022-01-24" }, { "cve": "CVE-2021-3493", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Privilege Escalation Vulnerability", "date": "2022-10-20", "ransom": false, "cvss": 7.8, "epss": 0.4917, "vckev": true, "euvd": false, "ra": 2, "due": "2022-11-10" }, { "cve": "CVE-2019-13720", "vendor": "Google", "product": "Chrome WebAudio", "name": "Google Chrome WebAudio Use-After-Free Vulnerability", "date": "2022-05-23", "ransom": false, "cvss": 8.8, "epss": 0.4914, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-13" }, { "cve": "CVE-2014-4404", "vendor": "Apple", "product": "OS X", "name": "Apple OS X Heap-Based Buffer Overflow Vulnerability", "date": "2022-02-10", "ransom": false, "cvss": 7.8, "epss": 0.4905, "vckev": true, "euvd": false, "ra": 2, "due": "2022-08-10" }, { "cve": "CVE-2023-5217", "vendor": "Google", "product": "Chromium libvpx", "name": "Google Chromium libvpx Heap Buffer Overflow Vulnerability", "date": "2023-10-02", "ransom": false, "cvss": 8.8, "epss": 0.4901, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-23" }, { "cve": "CVE-2018-5430", "vendor": "TIBCO", "product": "JasperReports", "name": "TIBCO JasperReports Server Information Disclosure Vulnerability", "date": "2022-12-29", "ransom": false, "cvss": 8.8, "epss": 0.4875, "vckev": true, "euvd": false, "ra": 2, "due": "2023-01-19" }, { "cve": "CVE-2020-16009", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.4857, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2020-9715", "vendor": "Adobe", "product": "Acrobat", "name": "Adobe Acrobat Use-After-Free Vulnerability", "date": "2026-04-13", "ransom": false, "cvss": 7.8, "epss": 0.4844, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-27" }, { "cve": "CVE-2016-1646", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Read Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 8.8, "epss": 0.4811, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2021-26829", "vendor": "OpenPLC", "product": "ScadaBR", "name": "OpenPLC ScadaBR Cross-site Scripting Vulnerability", "date": "2025-11-28", "ransom": false, "cvss": 5.4, "epss": 0.4805, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-19" }, { "cve": "CVE-2013-2094", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Privilege Escalation Vulnerability", "date": "2022-09-15", "ransom": false, "cvss": 8.4, "epss": 0.4771, "vckev": true, "euvd": false, "ra": 2, "due": "2022-10-06" }, { "cve": "CVE-2021-40407", "vendor": "Reolink", "product": "RLC-410W IP Camera", "name": "Reolink RLC-410W IP Camera OS Command Injection Vulnerability", "date": "2024-12-18", "ransom": false, "cvss": 7.2, "epss": 0.4763, "vckev": true, "euvd": false, "ra": 33, "due": "2025-01-08" }, { "cve": "CVE-2021-22893", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 10, "epss": 0.4717, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2023-37580", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "date": "2023-07-27", "ransom": false, "cvss": 6.1, "epss": 0.4671, "vckev": true, "euvd": false, "ra": 3, "due": "2023-08-17" }, { "cve": "CVE-2016-3976", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Directory Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.5, "epss": 0.4661, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2022-39197", "vendor": "Fortra", "product": "Cobalt Strike", "name": "Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability", "date": "2023-03-30", "ransom": false, "cvss": 6.1, "epss": 0.4645, "vckev": true, "euvd": false, "ra": 2, "due": "2023-04-20" }, { "cve": "CVE-2019-1579", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Remote Code Execution Vulnerability", "date": "2022-01-10", "ransom": true, "cvss": 8.1, "epss": 0.4596, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-10" }, { "cve": "CVE-2019-2215", "vendor": "Android", "product": "Android Kernel", "name": "Android Kernel Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.4382, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2019-17026", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "name": "Mozilla Firefox And Thunderbird Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.4368, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-9379", "vendor": "Ivanti", "product": "Cloud Services Appliance (CSA)", "name": "Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability", "date": "2024-10-09", "ransom": false, "cvss": 7.2, "epss": 0.4336, "vckev": true, "euvd": false, "ra": 31, "due": "2024-10-30" }, { "cve": "CVE-2021-44026", "vendor": "Roundcube", "product": "Roundcube Webmail", "name": "Roundcube Webmail SQL Injection Vulnerability", "date": "2023-06-22", "ransom": false, "cvss": 9.8, "epss": 0.4275, "vckev": true, "euvd": false, "ra": 2, "due": "2023-07-13" }, { "cve": "CVE-2017-6862", "vendor": "NETGEAR", "product": "Multiple Devices", "name": "NETGEAR Multiple Devices Buffer Overflow Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 9.8, "epss": 0.427, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2025-2775", "vendor": "SysAid", "product": "SysAid On-Prem", "name": "SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability", "date": "2025-07-22", "ransom": false, "cvss": 7.5, "epss": 0.4268, "vckev": true, "euvd": false, "ra": 6, "due": "2025-08-12" }, { "cve": "CVE-2017-6737", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.8, "epss": 0.4263, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2020-12271", "vendor": "Sophos", "product": "SFOS", "name": "Sophos SFOS SQL Injection Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.4243, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2014-100005", "vendor": "D-Link", "product": "DIR-600 Router", "name": "D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability", "date": "2024-05-16", "ransom": false, "cvss": 8, "epss": 0.4241, "vckev": true, "euvd": false, "ra": 7, "due": "2024-06-06" }, { "cve": "CVE-2023-33538", "vendor": "TP-Link", "product": "Multiple Routers", "name": "TP-Link Multiple Routers Command Injection Vulnerability", "date": "2025-06-16", "ransom": false, "cvss": 8.8, "epss": 0.4187, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-07" }, { "cve": "CVE-2024-41710", "vendor": "Mitel", "product": "SIP Phones", "name": "Mitel SIP Phones Argument Injection Vulnerability", "date": "2025-02-12", "ransom": false, "cvss": 7.2, "epss": 0.4165, "vckev": true, "euvd": false, "ra": 3, "due": "2025-03-05" }, { "cve": "CVE-2011-1823", "vendor": "Android", "product": "Android OS", "name": "Android OS Privilege Escalation Vulnerability", "date": "2022-09-08", "ransom": false, "cvss": 7.8, "epss": 0.4163, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-29" }, { "cve": "CVE-2017-5030", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Memory Corruption Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 8.8, "epss": 0.416, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2019-16928", "vendor": "Exim", "product": "Exim Internet Mailer", "name": "Exim Out-of-bounds Write Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 9.8, "epss": 0.4159, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2021-22894", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.4128, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2023-2033", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2023-04-17", "ransom": false, "cvss": 8.8, "epss": 0.408, "vckev": true, "euvd": false, "ra": 2, "due": "2023-05-08" }, { "cve": "CVE-2025-20333", "vendor": "Cisco", "product": "Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense", "name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability", "date": "2025-09-25", "ransom": false, "cvss": 9.9, "epss": 0.4039, "vckev": true, "euvd": false, "ra": 27, "due": "2025-09-26" }, { "cve": "CVE-2015-0666", "vendor": "Cisco", "product": "Prime Data Center Network Manager (DCNM)", "name": "Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 7.5, "epss": 0.4038, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2014-0496", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Acrobat Use-After-Free Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.8, "epss": 0.4024, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2021-27860", "vendor": "FatPipe", "product": "WARP, IPVPN, and MPVPN software", "name": "FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit", "date": "2022-01-10", "ransom": false, "cvss": 8.8, "epss": 0.3982, "vckev": true, "euvd": false, "ra": 2, "due": "2022-01-24" }, { "cve": "CVE-2013-6282", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Improper Input Validation Vulnerability", "date": "2022-09-15", "ransom": false, "cvss": 8.8, "epss": 0.3971, "vckev": true, "euvd": false, "ra": 2, "due": "2022-10-06" }, { "cve": "CVE-2021-26828", "vendor": "OpenPLC", "product": "ScadaBR", "name": "OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability", "date": "2025-12-03", "ransom": false, "cvss": 8.8, "epss": 0.3936, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-24" }, { "cve": "CVE-2019-3568", "vendor": "Meta Platforms", "product": "WhatsApp", "name": "WhatsApp VOIP Stack Buffer Overflow Vulnerability", "date": "2022-04-19", "ransom": false, "cvss": 9.8, "epss": 0.3917, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-10" }, { "cve": "CVE-2025-20352", "vendor": "Cisco", "product": "IOS and IOS XE", "name": "Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability", "date": "2025-09-29", "ransom": false, "cvss": 7.7, "epss": 0.3875, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-20" }, { "cve": "CVE-2021-38003", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.3857, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2024-55550", "vendor": "Mitel", "product": "MiCollab", "name": "Mitel MiCollab Path Traversal Vulnerability", "date": "2025-01-07", "ransom": true, "cvss": 2.7, "epss": 0.381, "vckev": true, "euvd": false, "ra": 3, "due": "2025-01-28" }, { "cve": "CVE-2018-13374", "vendor": "Fortinet", "product": "FortiOS and FortiADC", "name": "Fortinet FortiOS and FortiADC Improper Access Control Vulnerability", "date": "2022-09-08", "ransom": true, "cvss": 4.3, "epss": 0.3809, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-29" }, { "cve": "CVE-2023-4762", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2024-02-06", "ransom": false, "cvss": 8.8, "epss": 0.3799, "vckev": true, "euvd": false, "ra": 3, "due": "2024-02-27" }, { "cve": "CVE-2019-11707", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "name": "Mozilla Firefox and Thunderbird Type Confusion Vulnerability", "date": "2022-05-23", "ransom": false, "cvss": 8.8, "epss": 0.3795, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-13" }, { "cve": "CVE-2017-6884", "vendor": "Zyxel", "product": "EMG2926 Routers", "name": "Zyxel EMG2926 Routers Command Injection Vulnerability", "date": "2023-09-18", "ransom": true, "cvss": 8.8, "epss": 0.3763, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-09" }, { "cve": "CVE-2019-11001", "vendor": "Reolink", "product": "Multiple IP Cameras", "name": "Reolink Multiple IP Cameras OS Command Injection Vulnerability", "date": "2024-12-18", "ransom": false, "cvss": 7.2, "epss": 0.3754, "vckev": true, "euvd": false, "ra": 33, "due": "2025-01-08" }, { "cve": "CVE-2014-3153", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Privilege Escalation Vulnerability", "date": "2022-05-25", "ransom": false, "cvss": 7.8, "epss": 0.3723, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-15" }, { "cve": "CVE-2021-20016", "vendor": "SonicWall", "product": "SSLVPN SMA100", "name": "SonicWall SSLVPN SMA100 SQL Injection Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.3695, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2017-16651", "vendor": "Roundcube", "product": "Roundcube Webmail", "name": "Roundcube Webmail File Disclosure Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.3692, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2008-0655", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Unspecified Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 8.8, "epss": 0.3684, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2020-10221", "vendor": "rConfig", "product": "rConfig", "name": "rConfig OS Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.3675, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2019-19006", "vendor": "Sangoma", "product": "FreePBX", "name": "Sangoma FreePBX Improper Authentication Vulnerability", "date": "2026-02-03", "ransom": false, "cvss": 9.8, "epss": 0.3661, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-24" }, { "cve": "CVE-2018-4990", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Double Free Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 8.8, "epss": 0.3661, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2022-22960", "vendor": "VMware", "product": "Multiple Products", "name": "VMware Multiple Products Privilege Escalation Vulnerability", "date": "2022-04-15", "ransom": false, "cvss": 7.8, "epss": 0.3639, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-06" }, { "cve": "CVE-2020-5735", "vendor": "Amcrest", "product": "Cameras and Network Video Recorder (NVR)", "name": "Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.3622, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-38163", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Unrestricted File Upload Vulnerability", "date": "2022-06-09", "ransom": false, "cvss": 8.8, "epss": 0.3602, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-30" }, { "cve": "CVE-2022-31199", "vendor": "Netwrix", "product": "Auditor", "name": "Netwrix Auditor Insecure Object Deserialization Vulnerability", "date": "2023-07-11", "ransom": true, "cvss": 9.8, "epss": 0.3601, "vckev": true, "euvd": false, "ra": 19, "due": "2023-08-01" }, { "cve": "CVE-2021-39935", "vendor": "GitLab", "product": "Community and Enterprise Editions", "name": "GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability", "date": "2026-02-03", "ransom": false, "cvss": 7.5, "epss": 0.3565, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-24" }, { "cve": "CVE-2018-17480", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Write Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 8.8, "epss": 0.3564, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2017-6327", "vendor": "Symantec", "product": "Symantec Messaging Gateway", "name": "Symantec Messaging Gateway Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.3534, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-37975", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.3489, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2016-5198", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Memory Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 8.8, "epss": 0.3481, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2010-5330", "vendor": "Ubiquiti", "product": "AirOS", "name": "Ubiquiti AirOS Command Injection Vulnerability", "date": "2022-04-15", "ransom": false, "cvss": 9.8, "epss": 0.3464, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-06" }, { "cve": "CVE-2026-6973", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability", "date": "2026-05-07", "ransom": false, "cvss": 7.2, "epss": 0.3445, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-10" }, { "cve": "CVE-2023-39780", "vendor": "ASUS", "product": "RT-AX55 Routers", "name": "ASUS RT-AX55 Routers OS Command Injection Vulnerability", "date": "2025-06-02", "ransom": false, "cvss": 8.8, "epss": 0.3388, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-23" }, { "cve": "CVE-2018-13383", "vendor": "Fortinet", "product": "FortiOS and FortiProxy", "name": "Fortinet FortiOS and FortiProxy Out-of-bounds Write", "date": "2022-01-10", "ransom": true, "cvss": 6.5, "epss": 0.3365, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-10" }, { "cve": "CVE-2013-5223", "vendor": "D-Link", "product": "DSL-2760U", "name": "D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 5.4, "epss": 0.3357, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2020-2509", "vendor": "QNAP", "product": "QNAP Network-Attached Storage (NAS)", "name": "QNAP Network-Attached Storage (NAS) Command Injection Vulnerability", "date": "2022-04-11", "ransom": false, "cvss": 9.8, "epss": 0.3338, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-02" }, { "cve": "CVE-2020-8195", "vendor": "Citrix", "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "name": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 6.5, "epss": 0.3326, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-21042", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Out-of-Bounds Write Vulnerability", "date": "2025-11-10", "ransom": false, "cvss": 9.8, "epss": 0.3307, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-01" }, { "cve": "CVE-2008-4128", "vendor": "Cisco", "product": "IOS", "name": "Cisco IOS Cross-Site Request Forgery Vulnerability", "date": "2026-07-13", "ransom": false, "cvss": 4.3, "epss": 0.3295, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-16" }, { "cve": "CVE-2020-35730", "vendor": "Roundcube", "product": "Roundcube Webmail", "name": "Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability", "date": "2023-06-22", "ransom": false, "cvss": 6.1, "epss": 0.3269, "vckev": true, "euvd": false, "ra": 2, "due": "2023-07-13" }, { "cve": "CVE-2021-30633", "vendor": "Google", "product": "Chromium Indexed DB API", "name": "Google Chromium Indexed DB API Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.6, "epss": 0.3266, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2025-32756", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability", "date": "2025-05-14", "ransom": false, "cvss": 9.8, "epss": 0.3255, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-04" }, { "cve": "CVE-2024-57968", "vendor": "Advantive", "product": "VeraCore", "name": "Advantive VeraCore Unrestricted File Upload Vulnerability", "date": "2025-03-10", "ransom": false, "cvss": 8.8, "epss": 0.3251, "vckev": true, "euvd": false, "ra": 6, "due": "2025-03-31" }, { "cve": "CVE-2013-0641", "vendor": "Adobe", "product": "Reader", "name": "Adobe Reader Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.8, "epss": 0.3245, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2020-8218", "vendor": "Pulse Secure", "product": "Pulse Connect Secure", "name": "Pulse Connect Secure Code Injection Vulnerability", "date": "2022-03-07", "ransom": false, "cvss": 7.2, "epss": 0.3225, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-07" }, { "cve": "CVE-2023-3079", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2023-06-07", "ransom": false, "cvss": 8.8, "epss": 0.3211, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-28" }, { "cve": "CVE-2026-0300", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability", "date": "2026-05-06", "ransom": false, "cvss": 9.8, "epss": 0.3207, "vckev": true, "euvd": false, "ra": 34, "due": "2026-05-09" }, { "cve": "CVE-2021-27852", "vendor": "Checkbox", "product": "Checkbox Survey", "name": "Checkbox Survey Deserialization of Untrusted Data Vulnerability", "date": "2022-04-11", "ransom": false, "cvss": 9.8, "epss": 0.3195, "vckev": true, "euvd": false, "ra": 35, "due": "2022-05-02" }, { "cve": "CVE-2019-15752", "vendor": "Docker", "product": "Desktop Community Edition", "name": "Docker Desktop Community Edition Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.3192, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2022-4135", "vendor": "Google", "product": "Chromium GPU", "name": "Google Chromium GPU Heap Buffer Overflow Vulnerability", "date": "2022-11-28", "ransom": false, "cvss": 9.6, "epss": 0.3186, "vckev": true, "euvd": false, "ra": 2, "due": "2022-12-19" }, { "cve": "CVE-2025-68645", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability", "date": "2026-01-22", "ransom": false, "cvss": 8.8, "epss": 0.3177, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-12" }, { "cve": "CVE-2022-40799", "vendor": "D-Link", "product": "DNR-322L", "name": "D-Link DNR-322L Download of Code Without Integrity Check Vulnerability", "date": "2025-08-05", "ransom": false, "cvss": 8.8, "epss": 0.3172, "vckev": true, "euvd": false, "ra": 6, "due": "2025-08-26" }, { "cve": "CVE-2025-53690", "vendor": "Sitecore", "product": "Multiple Products", "name": "Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability", "date": "2025-09-04", "ransom": false, "cvss": 9, "epss": 0.314, "vckev": true, "euvd": false, "ra": 6, "due": "2025-09-25" }, { "cve": "CVE-2016-4523", "vendor": "Trihedral", "product": "VTScada (formerly VTS)", "name": "Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability", "date": "2022-04-15", "ransom": false, "cvss": 7.5, "epss": 0.3139, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-06" }, { "cve": "CVE-2026-20133", "vendor": "Cisco", "product": "Catalyst SD-WAN Manager", "name": "Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability", "date": "2026-04-20", "ransom": false, "cvss": 7.5, "epss": 0.3135, "vckev": true, "euvd": false, "ra": 26, "due": "2026-04-23" }, { "cve": "CVE-2025-0994", "vendor": "Trimble", "product": "Cityworks", "name": "Trimble Cityworks Deserialization Vulnerability", "date": "2025-02-07", "ransom": false, "cvss": 8.8, "epss": 0.3131, "vckev": true, "euvd": false, "ra": 3, "due": "2025-02-28" }, { "cve": "CVE-2017-5070", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 8.8, "epss": 0.3121, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2022-24682", "vendor": "Synacor", "product": "Zimbra Collaborate Suite (ZCS)", "name": "Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability", "date": "2022-02-25", "ransom": true, "cvss": 6.1, "epss": 0.3093, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-11" }, { "cve": "CVE-2016-4655", "vendor": "Apple", "product": "iOS", "name": "Apple iOS Information Disclosure Vulnerability", "date": "2022-05-24", "ransom": false, "cvss": 5.5, "epss": 0.3032, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-14" }, { "cve": "CVE-2026-12569", "vendor": "PTC", "product": "Windchill and FlexPLM", "name": "PTC Windchill and FlexPLM Improper Input Validation Vulnerability", "date": "2026-06-25", "ransom": true, "cvss": 9.8, "epss": 0.302, "vckev": true, "euvd": false, "ra": 12, "due": "2026-06-28" }, { "cve": "CVE-2019-13608", "vendor": "Citrix", "product": "StoreFront Server", "name": "Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 7.5, "epss": 0.3004, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-20028", "vendor": "SonicWall", "product": "Secure Remote Access (SRA)", "name": "SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability", "date": "2022-03-28", "ransom": true, "cvss": 9.8, "epss": 0.2987, "vckev": true, "euvd": false, "ra": 8, "due": "2022-04-18" }, { "cve": "CVE-2025-20393", "vendor": "Cisco", "product": "Multiple Products", "name": "Cisco Multiple Products Improper Input Validation Vulnerability", "date": "2025-12-17", "ransom": false, "cvss": 10, "epss": 0.2951, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-24" }, { "cve": "CVE-2018-20753", "vendor": "Kaseya", "product": "Virtual System/Server Administrator (VSA)", "name": "Kaseya VSA Remote Code Execution Vulnerability", "date": "2022-04-13", "ransom": true, "cvss": 9.8, "epss": 0.2934, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-04" }, { "cve": "CVE-2023-2533", "vendor": "PaperCut", "product": "NG/MF", "name": "PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability", "date": "2025-07-28", "ransom": false, "cvss": 8.8, "epss": 0.2925, "vckev": true, "euvd": false, "ra": 6, "due": "2025-08-18" }, { "cve": "CVE-2023-41993", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Code Execution Vulnerability", "date": "2023-09-25", "ransom": false, "cvss": 8.8, "epss": 0.2918, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-16" }, { "cve": "CVE-2026-55255", "vendor": "Langflow", "product": "Langflow", "name": "Langflow Authorization Bypass Through User-Controlled Key Vulnerability", "date": "2026-07-07", "ransom": false, "cvss": 8.4, "epss": 0.2905, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-10" }, { "cve": "CVE-2018-2380", "vendor": "SAP", "product": "Customer Relationship Management (CRM)", "name": "SAP Customer Relationship Management (CRM) Path Traversal Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 6.6, "epss": 0.2889, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-30807", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.2884, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2023-33010", "vendor": "Zyxel", "product": "Multiple Firewalls", "name": "Zyxel Multiple Firewalls Buffer Overflow Vulnerability", "date": "2023-06-05", "ransom": false, "cvss": 9.8, "epss": 0.2881, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-26" }, { "cve": "CVE-2024-3393", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability", "date": "2024-12-30", "ransom": false, "cvss": 7.5, "epss": 0.2862, "vckev": true, "euvd": false, "ra": 3, "due": "2025-01-20" }, { "cve": "CVE-2024-11120", "vendor": "GeoVision", "product": "Multiple Devices", "name": "GeoVision Devices OS Command Injection Vulnerability", "date": "2025-05-07", "ransom": false, "cvss": 9.8, "epss": 0.2855, "vckev": true, "euvd": false, "ra": 6, "due": "2025-05-28" }, { "cve": "CVE-2026-20262", "vendor": "Cisco", "product": "Catalyst SD-WAN Manager", "name": "Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability", "date": "2026-06-15", "ransom": false, "cvss": 6.5, "epss": 0.2817, "vckev": true, "euvd": false, "ra": 12, "due": "2026-06-29" }, { "cve": "CVE-2019-19356", "vendor": "Netis", "product": "WF2419 Devices", "name": "Netis WF2419 Devices Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.5, "epss": 0.2817, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2026-20131", "vendor": "Cisco", "product": "Secure Firewall Management Center (FMC)", "name": "Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability", "date": "2026-03-19", "ransom": true, "cvss": 10, "epss": 0.2816, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-22" }, { "cve": "CVE-2023-33009", "vendor": "Zyxel", "product": "Multiple Firewalls", "name": "Zyxel Multiple Firewalls Buffer Overflow Vulnerability", "date": "2023-06-05", "ransom": false, "cvss": 9.8, "epss": 0.2814, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-26" }, { "cve": "CVE-2024-1086", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Use-After-Free Vulnerability", "date": "2024-05-30", "ransom": true, "cvss": 7.8, "epss": 0.2806, "vckev": true, "euvd": false, "ra": 3, "due": "2024-06-20" }, { "cve": "CVE-2025-27363", "vendor": "FreeType", "product": "FreeType", "name": "FreeType Out-of-Bounds Write Vulnerability", "date": "2025-05-06", "ransom": false, "cvss": 8.1, "epss": 0.2755, "vckev": true, "euvd": false, "ra": 6, "due": "2025-05-27" }, { "cve": "CVE-2026-45247", "vendor": "Mirasvit", "product": "Mirasvit Full Page Cache Warmer", "name": "Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability", "date": "2026-06-03", "ransom": false, "cvss": 9.8, "epss": 0.2755, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-06" }, { "cve": "CVE-2018-4063", "vendor": "Sierra Wireless", "product": "AirLink ALEOS", "name": "Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability", "date": "2025-12-12", "ransom": false, "cvss": 8.8, "epss": 0.2751, "vckev": true, "euvd": false, "ra": 6, "due": "2026-01-02" }, { "cve": "CVE-2020-3153", "vendor": "Cisco", "product": "AnyConnect Secure", "name": "Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability", "date": "2022-10-24", "ransom": true, "cvss": 6.5, "epss": 0.2745, "vckev": true, "euvd": false, "ra": 2, "due": "2022-11-14" }, { "cve": "CVE-2023-28205", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Use-After-Free Vulnerability", "date": "2023-04-10", "ransom": false, "cvss": 8.8, "epss": 0.2708, "vckev": true, "euvd": false, "ra": 2, "due": "2023-05-01" }, { "cve": "CVE-2024-4978", "vendor": "Justice AV Solutions", "product": "Viewer", "name": "Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability", "date": "2024-05-29", "ransom": false, "cvss": 8.4, "epss": 0.2694, "vckev": true, "euvd": false, "ra": 3, "due": "2024-06-19" }, { "cve": "CVE-2014-3931", "vendor": "Looking Glass", "product": "Multi-Router Looking Glass (MRLG)", "name": "Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability", "date": "2025-07-07", "ransom": false, "cvss": 9.8, "epss": 0.2657, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-28" }, { "cve": "CVE-2020-8196", "vendor": "Citrix", "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "name": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 4.3, "epss": 0.2633, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2024-37085", "vendor": "VMware", "product": "ESXi", "name": "VMware ESXi Authentication Bypass Vulnerability", "date": "2024-07-30", "ransom": true, "cvss": 7.2, "epss": 0.2595, "vckev": true, "euvd": false, "ra": 3, "due": "2024-08-20" }, { "cve": "CVE-2021-22506", "vendor": "Micro Focus", "product": "Micro Focus Access Manager", "name": "Micro Focus Access Manager Information Leakage Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.5, "epss": 0.257, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2015-2590", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 9.8, "epss": 0.2547, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2018-5002", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Stack-based Buffer Overflow Vulnerability", "date": "2022-05-23", "ransom": false, "cvss": 7.8, "epss": 0.2535, "vckev": true, "euvd": false, "ra": 8, "due": "2022-06-13" }, { "cve": "CVE-2026-20245", "vendor": "Cisco", "product": "Catalyst SD-WAN Manager", "name": "Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability", "date": "2026-06-09", "ransom": false, "cvss": 7.8, "epss": 0.2532, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-23" }, { "cve": "CVE-2018-6882", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "date": "2022-04-19", "ransom": true, "cvss": 6.1, "epss": 0.2523, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-10" }, { "cve": "CVE-2016-7855", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.8, "epss": 0.252, "vckev": true, "euvd": false, "ra": 8, "due": "2022-03-24" }, { "cve": "CVE-2022-0185", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Heap-Based Buffer Overflow Vulnerability", "date": "2024-08-21", "ransom": false, "cvss": 8.4, "epss": 0.2515, "vckev": true, "euvd": false, "ra": 19, "due": "2024-09-11" }, { "cve": "CVE-2019-18187", "vendor": "Trend Micro", "product": "OfficeScan", "name": "Trend Micro OfficeScan Directory Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.5, "epss": 0.2512, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2009-1862", "vendor": "Adobe", "product": "Acrobat and Reader, Flash Player", "name": "Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 7.8, "epss": 0.2501, "vckev": true, "euvd": false, "ra": 36, "due": "2022-06-22" }, { "cve": "CVE-2022-3038", "vendor": "Google", "product": "Chromium Network Service", "name": "Google Chromium Network Service Use-After-Free Vulnerability", "date": "2023-03-30", "ransom": false, "cvss": 8.8, "epss": 0.2474, "vckev": true, "euvd": false, "ra": 2, "due": "2023-04-20" }, { "cve": "CVE-2023-48365", "vendor": "Qlik", "product": "Sense", "name": "Qlik Sense HTTP Tunneling Vulnerability", "date": "2025-01-13", "ransom": true, "cvss": 9.9, "epss": 0.2468, "vckev": true, "euvd": false, "ra": 3, "due": "2025-02-03" }, { "cve": "CVE-2026-20122", "vendor": "Cisco", "product": "Catalyst SD-WAN Manger", "name": "Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability", "date": "2026-04-20", "ransom": false, "cvss": 5.4, "epss": 0.2459, "vckev": true, "euvd": false, "ra": 26, "due": "2026-04-23" }, { "cve": "CVE-2020-5135", "vendor": "SonicWall", "product": "SonicOS", "name": "SonicWall SonicOS Buffer Overflow Vulnerability", "date": "2022-03-15", "ransom": false, "cvss": 9.8, "epss": 0.2456, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-05" }, { "cve": "CVE-2023-28206", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability", "date": "2023-04-10", "ransom": false, "cvss": 8.6, "epss": 0.2451, "vckev": true, "euvd": false, "ra": 2, "due": "2023-05-01" }, { "cve": "CVE-2018-19949", "vendor": "QNAP", "product": "Network Attached Storage (NAS)", "name": "QNAP NAS File Station Command Injection Vulnerability", "date": "2022-05-24", "ransom": true, "cvss": 9.8, "epss": 0.2445, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-14" }, { "cve": "CVE-2025-4632", "vendor": "Samsung", "product": "MagicINFO 9 Server", "name": "Samsung MagicINFO 9 Server Path Traversal Vulnerability", "date": "2025-05-22", "ransom": false, "cvss": 9.8, "epss": 0.2444, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-12" }, { "cve": "CVE-2014-0502", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Double Free Vulnerablity", "date": "2024-09-17", "ransom": false, "cvss": 8.8, "epss": 0.242, "vckev": true, "euvd": false, "ra": 13, "due": "2024-10-08" }, { "cve": "CVE-2021-27878", "vendor": "Veritas", "product": "Backup Exec Agent", "name": "Veritas Backup Exec Agent Command Execution Vulnerability", "date": "2023-04-07", "ransom": true, "cvss": 8.8, "epss": 0.2395, "vckev": true, "euvd": false, "ra": 2, "due": "2023-04-28" }, { "cve": "CVE-2018-19953", "vendor": "QNAP", "product": "Network Attached Storage (NAS)", "name": "QNAP NAS File Station Cross-Site Scripting Vulnerability", "date": "2022-05-24", "ransom": true, "cvss": 6.1, "epss": 0.2389, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-14" }, { "cve": "CVE-2021-21166", "vendor": "Google", "product": "Chromium", "name": "Google Chromium Race Condition Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.2385, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2016-9563", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver XML External Entity (XXE) Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 6.5, "epss": 0.2381, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2023-32439", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Type Confusion Vulnerability", "date": "2023-06-23", "ransom": false, "cvss": 8.8, "epss": 0.2379, "vckev": true, "euvd": false, "ra": 2, "due": "2023-07-14" }, { "cve": "CVE-2020-4006", "vendor": "VMware", "product": "Multiple Products", "name": "Multiple VMware Products Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.1, "epss": 0.2377, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2022-1096", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2022-03-28", "ransom": false, "cvss": 8.8, "epss": 0.2363, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-18" }, { "cve": "CVE-2024-27443", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "date": "2025-05-19", "ransom": false, "cvss": 6.1, "epss": 0.2363, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-09" }, { "cve": "CVE-2025-23006", "vendor": "SonicWall", "product": "SMA1000 Appliances", "name": "SonicWall SMA1000 Appliances Deserialization Vulnerability", "date": "2025-01-24", "ransom": true, "cvss": 9.8, "epss": 0.2343, "vckev": true, "euvd": false, "ra": 3, "due": "2025-02-14" }, { "cve": "CVE-2024-9680", "vendor": "Mozilla", "product": "Firefox", "name": "Mozilla Firefox Use-After-Free Vulnerability", "date": "2024-10-15", "ransom": true, "cvss": 9.8, "epss": 0.2318, "vckev": true, "euvd": false, "ra": 3, "due": "2024-11-05" }, { "cve": "CVE-2023-32435", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "date": "2023-06-23", "ransom": false, "cvss": 8.8, "epss": 0.2295, "vckev": true, "euvd": false, "ra": 2, "due": "2023-07-14" }, { "cve": "CVE-2024-44309", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability", "date": "2024-11-21", "ransom": false, "cvss": 6.3, "epss": 0.2273, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-12" }, { "cve": "CVE-2025-14174", "vendor": "Google", "product": "Chromium", "name": "Google Chromium Out of Bounds Memory Access Vulnerability", "date": "2025-12-12", "ransom": false, "cvss": 8.8, "epss": 0.2272, "vckev": true, "euvd": false, "ra": 6, "due": "2026-01-02" }, { "cve": "CVE-2016-6367", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA)", "name": "Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability", "date": "2022-05-24", "ransom": false, "cvss": 7.8, "epss": 0.2258, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-14" }, { "cve": "CVE-2016-1019", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": true, "cvss": 9.8, "epss": 0.2249, "vckev": true, "euvd": false, "ra": 8, "due": "2022-03-24" }, { "cve": "CVE-2014-0196", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Race Condition Vulnerability", "date": "2023-05-12", "ransom": false, "cvss": 5.5, "epss": 0.2248, "vckev": true, "euvd": false, "ra": 8, "due": "2023-06-02" }, { "cve": "CVE-2015-5317", "vendor": "Jenkins", "product": "Jenkins User Interface (UI)", "name": "Jenkins User Interface (UI) Information Disclosure Vulnerability", "date": "2023-05-12", "ransom": false, "cvss": 7.5, "epss": 0.2243, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-02" }, { "cve": "CVE-2024-37079", "vendor": "Broadcom", "product": "VMware vCenter Server", "name": "Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability", "date": "2026-01-23", "ransom": false, "cvss": 9.8, "epss": 0.2238, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-13" }, { "cve": "CVE-2021-22899", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.2234, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2014-0546", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Acrobat Sandbox Bypass Vulnerability", "date": "2022-05-25", "ransom": false, "cvss": 9.8, "epss": 0.2233, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-15" }, { "cve": "CVE-2025-14733", "vendor": "WatchGuard", "product": "Firebox", "name": "WatchGuard Firebox Out of Bounds Write Vulnerability", "date": "2025-12-19", "ransom": false, "cvss": 9.8, "epss": 0.2228, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-26" }, { "cve": "CVE-2024-40890", "vendor": "Zyxel", "product": "DSL CPE Devices", "name": "Zyxel DSL CPE OS Command Injection Vulnerability", "date": "2025-02-11", "ransom": false, "cvss": 8.8, "epss": 0.2225, "vckev": true, "euvd": false, "ra": 33, "due": "2025-03-04" }, { "cve": "CVE-2021-3560", "vendor": "Red Hat", "product": "Polkit", "name": "Red Hat Polkit Incorrect Authorization Vulnerability", "date": "2023-05-12", "ransom": false, "cvss": 7.8, "epss": 0.2219, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-02" }, { "cve": "CVE-2020-27930", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.2218, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2026-2441", "vendor": "Google", "product": "Chromium", "name": "Google Chromium CSS Use-After-Free Vulnerability", "date": "2026-02-17", "ransom": false, "cvss": 8.8, "epss": 0.2202, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-10" }, { "cve": "CVE-2025-66376", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability", "date": "2026-03-18", "ransom": false, "cvss": 6.1, "epss": 0.2197, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-01" }, { "cve": "CVE-2024-40891", "vendor": "Zyxel", "product": "DSL CPE Devices", "name": "Zyxel DSL CPE OS Command Injection Vulnerability", "date": "2025-02-11", "ransom": false, "cvss": 8.8, "epss": 0.2183, "vckev": true, "euvd": false, "ra": 33, "due": "2025-03-04" }, { "cve": "CVE-2023-20269", "vendor": "Cisco", "product": "Adaptive Security Appliance and Firepower Threat Defense", "name": "Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability", "date": "2023-09-13", "ransom": true, "cvss": 9.1, "epss": 0.2158, "vckev": true, "euvd": false, "ra": 37, "due": "2023-10-04" }, { "cve": "CVE-2017-6742", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "date": "2023-04-19", "ransom": false, "cvss": 8.8, "epss": 0.2142, "vckev": true, "euvd": false, "ra": 2, "due": "2023-05-10" }, { "cve": "CVE-2016-4656", "vendor": "Apple", "product": "iOS", "name": "Apple iOS Memory Corruption Vulnerability", "date": "2022-05-24", "ransom": false, "cvss": 7.8, "epss": 0.2134, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-14" }, { "cve": "CVE-2020-9377", "vendor": "D-Link", "product": "DIR-610 Devices", "name": "D-Link DIR-610 Devices Remote Command Execution", "date": "2022-03-25", "ransom": false, "cvss": 8.8, "epss": 0.2134, "vckev": true, "euvd": false, "ra": 8, "due": "2022-04-15" }, { "cve": "CVE-2012-5054", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Integer Overflow Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 8.8, "epss": 0.2119, "vckev": true, "euvd": false, "ra": 8, "due": "2022-06-22" }, { "cve": "CVE-2025-54948", "vendor": "Trend Micro", "product": "Apex One", "name": "Trend Micro Apex One OS Command Injection Vulnerability", "date": "2025-08-18", "ransom": false, "cvss": 9.8, "epss": 0.2079, "vckev": true, "euvd": false, "ra": 6, "due": "2025-09-08" }, { "cve": "CVE-2022-0609", "vendor": "Google", "product": "Chromium Animation", "name": "Google Chromium Animation Use-After-Free Vulnerability", "date": "2022-02-15", "ransom": false, "cvss": 8.8, "epss": 0.2077, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-01" }, { "cve": "CVE-2020-24363", "vendor": "TP-Link", "product": "TL-WA855RE", "name": "TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability", "date": "2025-09-02", "ransom": false, "cvss": 8.8, "epss": 0.2069, "vckev": true, "euvd": false, "ra": 6, "due": "2025-09-23" }, { "cve": "CVE-2024-7971", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2024-08-26", "ransom": false, "cvss": 9.6, "epss": 0.2055, "vckev": true, "euvd": false, "ra": 3, "due": "2024-09-16" }, { "cve": "CVE-2025-68461", "vendor": "Roundcube", "product": "Webmail", "name": "RoundCube Webmail Cross-site Scripting Vulnerability", "date": "2026-02-20", "ransom": false, "cvss": 6.1, "epss": 0.2051, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-13" }, { "cve": "CVE-2025-43300", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability", "date": "2025-08-21", "ransom": false, "cvss": 10, "epss": 0.2039, "vckev": true, "euvd": false, "ra": 6, "due": "2025-09-11" }, { "cve": "CVE-2014-9163", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Stack-Based Buffer Overflow Vulnerability", "date": "2022-04-13", "ransom": false, "cvss": 7.8, "epss": 0.2036, "vckev": true, "euvd": false, "ra": 8, "due": "2022-05-04" }, { "cve": "CVE-2016-4171", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.2021, "vckev": true, "euvd": false, "ra": 8, "due": "2022-04-15" }, { "cve": "CVE-2014-8439", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Dereferenced Pointer Vulnerability", "date": "2022-05-25", "ransom": false, "cvss": 8.8, "epss": 0.2001, "vckev": true, "euvd": false, "ra": 8, "due": "2022-06-15" }, { "cve": "CVE-2021-37976", "vendor": "Google", "product": "Chromium", "name": "Google Chromium Information Disclosure Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 6.5, "epss": 0.199, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2021-21148", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Heap Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.1981, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2016-1010", "vendor": "Adobe", "product": "Flash Player and AIR", "name": "Adobe Flash Player and AIR Integer Overflow Vulnerability", "date": "2022-05-25", "ransom": false, "cvss": 8.8, "epss": 0.1978, "vckev": true, "euvd": false, "ra": 32, "due": "2022-06-15" }, { "cve": "CVE-2025-31200", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2025-04-17", "ransom": false, "cvss": 9.8, "epss": 0.1966, "vckev": true, "euvd": false, "ra": 6, "due": "2025-05-08" }, { "cve": "CVE-2022-26871", "vendor": "Trend Micro", "product": "Apex Central", "name": "Trend Micro Apex Central Arbitrary File Upload Vulnerability", "date": "2022-03-31", "ransom": false, "cvss": 9.8, "epss": 0.1963, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-21" }, { "cve": "CVE-2025-7775", "vendor": "Citrix", "product": "NetScaler", "name": "Citrix NetScaler Memory Overflow Vulnerability", "date": "2025-08-26", "ransom": false, "cvss": 9.8, "epss": 0.1963, "vckev": true, "euvd": false, "ra": 6, "due": "2025-08-28" }, { "cve": "CVE-2023-6345", "vendor": "Google", "product": "Chromium Skia", "name": "Google Skia Integer Overflow Vulnerability", "date": "2023-11-30", "ransom": false, "cvss": 9.6, "epss": 0.1948, "vckev": true, "euvd": false, "ra": 3, "due": "2023-12-21" }, { "cve": "CVE-2024-20359", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "name": "Cisco ASA and FTD Privilege Escalation Vulnerability", "date": "2024-04-24", "ransom": false, "cvss": 6, "epss": 0.1943, "vckev": true, "euvd": false, "ra": 3, "due": "2024-05-01" }, { "cve": "CVE-2016-7836", "vendor": "SKYSEA", "product": "Client View", "name": "SKYSEA Client View Improper Authentication Vulnerability", "date": "2025-10-14", "ransom": false, "cvss": 9.8, "epss": 0.1938, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-04" }, { "cve": "CVE-2023-37450", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Code Execution Vulnerability", "date": "2023-07-13", "ransom": false, "cvss": 8.8, "epss": 0.1895, "vckev": true, "euvd": false, "ra": 19, "due": "2023-08-03" }, { "cve": "CVE-2026-48172", "vendor": "LiteSpeed", "product": "cPanel Plugin", "name": "LiteSpeed cPanel Plugin Privilege Escalation Vulnerability", "date": "2026-05-26", "ransom": false, "cvss": 9.8, "epss": 0.1891, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-29" }, { "cve": "CVE-2016-7892", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 8.8, "epss": 0.1879, "vckev": true, "euvd": false, "ra": 8, "due": "2022-04-15" }, { "cve": "CVE-2019-5591", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Default Configuration Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 6.5, "epss": 0.1857, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2020-11899", "vendor": "Treck TCP/IP stack", "product": "IPv6", "name": "Treck TCP/IP stack Out-of-Bounds Read Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 5.4, "epss": 0.1856, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2015-5123", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2022-04-13", "ransom": false, "cvss": 9.8, "epss": 0.1849, "vckev": true, "euvd": false, "ra": 8, "due": "2022-05-04" }, { "cve": "CVE-2024-7965", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Inappropriate Implementation Vulnerability", "date": "2024-08-28", "ransom": false, "cvss": 8.8, "epss": 0.1838, "vckev": true, "euvd": false, "ra": 3, "due": "2024-09-18" }, { "cve": "CVE-2018-0147", "vendor": "Cisco", "product": "Secure Access Control System (ACS)", "name": "Cisco Secure Access Control System Java Deserialization Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.1833, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2024-40766", "vendor": "SonicWall", "product": "SonicOS", "name": "SonicWall SonicOS Improper Access Control Vulnerability", "date": "2024-09-09", "ransom": true, "cvss": 9.8, "epss": 0.1818, "vckev": true, "euvd": false, "ra": 3, "due": "2024-09-30" }, { "cve": "CVE-2019-8506", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Type Confusion Vulnerability", "date": "2022-05-04", "ransom": false, "cvss": 8.8, "epss": 0.1811, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-25" }, { "cve": "CVE-2010-4345", "vendor": "Exim", "product": "Exim", "name": "Exim Privilege Escalation Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 7.8, "epss": 0.181, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2023-26359", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "date": "2023-08-21", "ransom": false, "cvss": 9.8, "epss": 0.1794, "vckev": true, "euvd": false, "ra": 3, "due": "2023-09-11" }, { "cve": "CVE-2023-42916", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability", "date": "2023-12-04", "ransom": false, "cvss": 6.5, "epss": 0.1782, "vckev": true, "euvd": false, "ra": 28, "due": "2023-12-25" }, { "cve": "CVE-2018-19943", "vendor": "QNAP", "product": "Network Attached Storage (NAS)", "name": "QNAP NAS File Station Cross-Site Scripting Vulnerability", "date": "2022-05-24", "ransom": true, "cvss": 5.4, "epss": 0.1771, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-14" }, { "cve": "CVE-2022-27926", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "date": "2023-04-03", "ransom": false, "cvss": 6.1, "epss": 0.1763, "vckev": true, "euvd": false, "ra": 2, "due": "2023-04-24" }, { "cve": "CVE-2021-44207", "vendor": "Acclaim Systems", "product": "USAHERDS", "name": "Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability", "date": "2024-12-23", "ransom": false, "cvss": 8.1, "epss": 0.1758, "vckev": true, "euvd": false, "ra": 38, "due": "2025-01-13" }, { "cve": "CVE-2010-5326", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 10, "epss": 0.1745, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2023-50224", "vendor": "TP-Link", "product": "TL-WR841N", "name": "TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability", "date": "2025-09-03", "ransom": false, "cvss": 6.5, "epss": 0.1745, "vckev": true, "euvd": false, "ra": 6, "due": "2025-09-24" }, { "cve": "CVE-2019-8605", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Use-After-Free Vulnerability", "date": "2022-06-27", "ransom": false, "cvss": 7.8, "epss": 0.1744, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-18" }, { "cve": "CVE-2026-22719", "vendor": "Broadcom", "product": "VMware Aria Operations", "name": "Broadcom VMware Aria Operations Command Injection Vulnerability", "date": "2026-03-03", "ransom": false, "cvss": 8.1, "epss": 0.1742, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-24" }, { "cve": "CVE-2024-38813", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Privilege Escalation Vulnerability", "date": "2024-11-20", "ransom": false, "cvss": 9.8, "epss": 0.1736, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-11" }, { "cve": "CVE-2025-24085", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Use-After-Free Vulnerability", "date": "2025-01-29", "ransom": false, "cvss": 10, "epss": 0.1732, "vckev": true, "euvd": false, "ra": 3, "due": "2025-02-19" }, { "cve": "CVE-2024-11182", "vendor": "MDaemon", "product": "Email Server", "name": "MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability", "date": "2025-05-19", "ransom": false, "cvss": 6.1, "epss": 0.1711, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-09" }, { "cve": "CVE-2026-9198", "vendor": "IBM", "product": "Langflow", "name": "IBM Langflow Code Injection Vulnerability", "date": "2026-08-04", "ransom": false, "cvss": 9.8, "epss": 0.1705, "vckev": true, "euvd": true, "ra": 12, "due": "2026-08-07" }, { "cve": "CVE-2023-7101", "vendor": "Spreadsheet::ParseExcel", "product": "Spreadsheet::ParseExcel", "name": "Spreadsheet::ParseExcel Remote Code Execution Vulnerability", "date": "2024-01-02", "ransom": false, "cvss": 7.8, "epss": 0.1683, "vckev": true, "euvd": false, "ra": 3, "due": "2024-01-23" }, { "cve": "CVE-2021-30533", "vendor": "Google", "product": "Chromium PopupBlocker", "name": "Google Chromium PopupBlocker Security Bypass Vulnerability", "date": "2022-06-27", "ransom": false, "cvss": 6.5, "epss": 0.1661, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-18" }, { "cve": "CVE-2023-32409", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Sandbox Escape Vulnerability", "date": "2023-05-22", "ransom": false, "cvss": 8.6, "epss": 0.1653, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-12" }, { "cve": "CVE-2020-27950", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Initialization Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 5.5, "epss": 0.1652, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-20022", "vendor": "SonicWall", "product": "SonicWall Email Security", "name": "SonicWall Email Security Unrestricted Upload of File Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 7.2, "epss": 0.1651, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2021-27137", "vendor": "DD-WRT", "product": "DD-WRT", "name": "DD-WRT Stack-Based Buffer Overflow Vulnerability", "date": "2026-07-21", "ransom": false, "cvss": 8.1, "epss": 0.1649, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-24" }, { "cve": "CVE-2022-22620", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability", "date": "2022-02-11", "ransom": false, "cvss": 8.8, "epss": 0.1621, "vckev": true, "euvd": false, "ra": 2, "due": "2022-02-25" }, { "cve": "CVE-2024-20481", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "name": "Cisco ASA and FTD Denial-of-Service Vulnerability", "date": "2024-10-24", "ransom": false, "cvss": 5.8, "epss": 0.1585, "vckev": true, "euvd": false, "ra": 3, "due": "2024-11-14" }, { "cve": "CVE-2019-7286", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2022-05-23", "ransom": false, "cvss": 7.8, "epss": 0.157, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-13" }, { "cve": "CVE-2022-4262", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2022-12-05", "ransom": false, "cvss": 8.8, "epss": 0.1547, "vckev": true, "euvd": false, "ra": 2, "due": "2022-12-26" }, { "cve": "CVE-2023-41064", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability", "date": "2023-09-11", "ransom": false, "cvss": 7.8, "epss": 0.1526, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-02" }, { "cve": "CVE-2015-0310", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player ASLR Bypass Vulnerability", "date": "2022-05-25", "ransom": false, "cvss": 7.8, "epss": 0.1522, "vckev": true, "euvd": false, "ra": 8, "due": "2022-06-15" }, { "cve": "CVE-2024-4947", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2024-05-20", "ransom": false, "cvss": 9.6, "epss": 0.1511, "vckev": true, "euvd": false, "ra": 3, "due": "2024-06-10" }, { "cve": "CVE-2022-20708", "vendor": "Cisco", "product": "Small Business RV160, RV260, RV340, and RV345 Series Routers", "name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8, "epss": 0.1486, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2024-8069", "vendor": "Citrix", "product": "Session Recording", "name": "Citrix Session Recording Deserialization of Untrusted Data Vulnerability", "date": "2025-08-25", "ransom": false, "cvss": 8, "epss": 0.1474, "vckev": true, "euvd": false, "ra": 6, "due": "2025-09-15" }, { "cve": "CVE-2021-30883", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2022-05-23", "ransom": false, "cvss": 7.8, "epss": 0.1472, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-13" }, { "cve": "CVE-2018-14634", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Integer Overflow Vulnerability", "date": "2026-01-26", "ransom": false, "cvss": 7.8, "epss": 0.1469, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-16" }, { "cve": "CVE-2020-10181", "vendor": "Sumavision", "product": "Enhanced Multimedia Router (EMR)", "name": "Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.1467, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-31201", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Arbitrary Read and Write Vulnerability", "date": "2025-04-17", "ransom": false, "cvss": 9.8, "epss": 0.1465, "vckev": true, "euvd": false, "ra": 6, "due": "2025-05-08" }, { "cve": "CVE-2020-3837", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2022-06-27", "ransom": false, "cvss": 7.8, "epss": 0.145, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-18" }, { "cve": "CVE-2019-7193", "vendor": "QNAP", "product": "QTS", "name": "QNAP QTS Improper Input Validation Vulnerability", "date": "2022-06-08", "ransom": true, "cvss": 9.8, "epss": 0.1437, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2023-28204", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability", "date": "2023-05-22", "ransom": false, "cvss": 6.5, "epss": 0.1429, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-12" }, { "cve": "CVE-2018-0151", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 9.8, "epss": 0.1429, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2019-9875", "vendor": "Sitecore", "product": "CMS and Experience Platform (XP)", "name": "Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability", "date": "2025-03-26", "ransom": false, "cvss": 8.8, "epss": 0.1415, "vckev": true, "euvd": false, "ra": 6, "due": "2025-04-16" }, { "cve": "CVE-2021-22900", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.2, "epss": 0.1415, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2014-2120", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA)", "name": "Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability", "date": "2024-11-12", "ransom": false, "cvss": 6.1, "epss": 0.1403, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-03" }, { "cve": "CVE-2017-12240", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 9.8, "epss": 0.1388, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2022-22948", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Incorrect Default File Permissions Vulnerability", "date": "2024-07-17", "ransom": false, "cvss": 6.5, "epss": 0.1383, "vckev": true, "euvd": false, "ra": 3, "due": "2024-08-07" }, { "cve": "CVE-2022-26485", "vendor": "Mozilla", "product": "Firefox", "name": "Mozilla Firefox Use-After-Free Vulnerability", "date": "2022-03-07", "ransom": false, "cvss": 8.8, "epss": 0.138, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-21" }, { "cve": "CVE-2022-1364", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2022-04-15", "ransom": false, "cvss": 8.8, "epss": 0.1372, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-06" }, { "cve": "CVE-2024-12686", "vendor": "BeyondTrust", "product": "Privileged Remote Access (PRA) and Remote Support (RS)", "name": "BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability", "date": "2025-01-13", "ransom": false, "cvss": 7.2, "epss": 0.1368, "vckev": true, "euvd": false, "ra": 3, "due": "2025-02-03" }, { "cve": "CVE-2025-67038", "vendor": "Lantronix", "product": "EDS5000", "name": "Lantronix EDS5000 Code Injection Vulnerability", "date": "2026-06-23", "ransom": false, "cvss": 9.8, "epss": 0.1355, "vckev": true, "euvd": false, "ra": 12, "due": "2026-06-26" }, { "cve": "CVE-2023-20867", "vendor": "VMware", "product": "Tools", "name": "VMware Tools Authentication Bypass Vulnerability", "date": "2023-06-23", "ransom": false, "cvss": 3.9, "epss": 0.1353, "vckev": true, "euvd": false, "ra": 2, "due": "2023-07-14" }, { "cve": "CVE-2021-30858", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, macOS Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.1349, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2021-27876", "vendor": "Veritas", "product": "Backup Exec Agent", "name": "Veritas Backup Exec Agent File Access Vulnerability", "date": "2023-04-07", "ransom": true, "cvss": 8.1, "epss": 0.1341, "vckev": true, "euvd": false, "ra": 2, "due": "2023-04-28" }, { "cve": "CVE-2019-3010", "vendor": "Oracle", "product": "Solaris", "name": "Oracle Solaris Privilege Escalation Vulnerability", "date": "2022-05-25", "ransom": false, "cvss": 8.8, "epss": 0.134, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-15" }, { "cve": "CVE-2015-4902", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Integrity Check Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 5.3, "epss": 0.1335, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2026-46817", "vendor": "Oracle", "product": "E-Business Suite", "name": "Oracle E-Business Suite Improper Privilege Management Vulnerability", "date": "2026-07-15", "ransom": false, "cvss": 9.8, "epss": 0.1331, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-18" }, { "cve": "CVE-2021-1789", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Type Confusion Vulnerability", "date": "2022-05-04", "ransom": false, "cvss": 8.8, "epss": 0.1322, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-25" }, { "cve": "CVE-2026-22769", "vendor": "Dell", "product": "RecoverPoint for Virtual Machines (RP4VMs)", "name": "Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability", "date": "2026-02-18", "ransom": false, "cvss": 10, "epss": 0.1312, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-21" }, { "cve": "CVE-2022-38181", "vendor": "Arm", "product": "Mali Graphics Processing Unit (GPU)", "name": "Arm Mali GPU Kernel Driver Use-After-Free Vulnerability", "date": "2023-03-30", "ransom": false, "cvss": 8.8, "epss": 0.1282, "vckev": true, "euvd": false, "ra": 2, "due": "2023-04-20" }, { "cve": "CVE-2022-23176", "vendor": "WatchGuard", "product": "Firebox and XTM", "name": "WatchGuard Firebox and XTM Privilege Escalation Vulnerability", "date": "2022-04-11", "ransom": false, "cvss": 8.8, "epss": 0.1269, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-02" }, { "cve": "CVE-2026-34926", "vendor": "Trend Micro", "product": "Apex One", "name": "Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability", "date": "2026-05-21", "ransom": false, "cvss": 6.7, "epss": 0.1268, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-04" }, { "cve": "CVE-2022-22675", "vendor": "Apple", "product": "macOS", "name": "Apple macOS Out-of-Bounds Write Vulnerability", "date": "2022-04-04", "ransom": false, "cvss": 7.8, "epss": 0.1264, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-25" }, { "cve": "CVE-2022-20775", "vendor": "Cisco", "product": "SD-WAN", "name": "Cisco SD-WAN Path Traversal Vulnerability", "date": "2026-02-25", "ransom": false, "cvss": 7.8, "epss": 0.1247, "vckev": true, "euvd": false, "ra": 26, "due": "2026-02-27" }, { "cve": "CVE-2023-32373", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Use-After-Free Vulnerability", "date": "2023-05-22", "ransom": false, "cvss": 8.8, "epss": 0.1217, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-12" }, { "cve": "CVE-2010-3904", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Improper Input Validation Vulnerability", "date": "2023-05-12", "ransom": false, "cvss": 7.8, "epss": 0.1216, "vckev": true, "euvd": false, "ra": 8, "due": "2023-06-02" }, { "cve": "CVE-2017-11292", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Type Confusion Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.8, "epss": 0.121, "vckev": true, "euvd": false, "ra": 8, "due": "2022-03-24" }, { "cve": "CVE-2021-28663", "vendor": "Arm", "product": "Mali Graphics Processing Unit (GPU)", "name": "Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.1208, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2022-41328", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Path Traversal Vulnerability", "date": "2023-03-14", "ransom": false, "cvss": 7.1, "epss": 0.1191, "vckev": true, "euvd": false, "ra": 2, "due": "2023-04-04" }, { "cve": "CVE-2020-8599", "vendor": "Trend Micro", "product": "Apex One and OfficeScan", "name": "Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.1186, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-9377", "vendor": "TP-Link", "product": "Multiple Routers", "name": "TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability", "date": "2025-09-03", "ransom": false, "cvss": 7.2, "epss": 0.1179, "vckev": true, "euvd": false, "ra": 6, "due": "2025-09-24" }, { "cve": "CVE-2022-20821", "vendor": "Cisco", "product": "IOS XR", "name": "Cisco IOS XR Open Port Vulnerability", "date": "2022-05-23", "ransom": false, "cvss": 6.5, "epss": 0.1176, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-13" }, { "cve": "CVE-2021-37973", "vendor": "Google", "product": "Chromium Portals", "name": "Google Chromium Portals Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.6, "epss": 0.1173, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2020-3118", "vendor": "Cisco", "product": "IOS XR", "name": "Cisco IOS XR Software Discovery Protocol Format String Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.1168, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2022-22587", "vendor": "Apple", "product": "iOS and macOS", "name": "Apple Memory Corruption Vulnerability", "date": "2022-01-28", "ransom": false, "cvss": 9.8, "epss": 0.1164, "vckev": true, "euvd": false, "ra": 2, "due": "2022-02-11" }, { "cve": "CVE-2012-1710", "vendor": "Oracle", "product": "Fusion Middleware", "name": "Oracle Fusion Middleware Unspecified Vulnerability", "date": "2022-05-25", "ransom": true, "cvss": 9.8, "epss": 0.1164, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-15" }, { "cve": "CVE-2026-48558", "vendor": "SimpleHelp", "product": "SimpleHelp", "name": "SimpleHelp Authentication Bypass Vulnerability", "date": "2026-06-29", "ransom": false, "cvss": 10, "epss": 0.1148, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-02" }, { "cve": "CVE-2021-27103", "vendor": "Accellion", "product": "FTA", "name": "Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.1132, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2025-42999", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Deserialization Vulnerability", "date": "2025-05-15", "ransom": true, "cvss": 9.1, "epss": 0.1128, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-05" }, { "cve": "CVE-2013-0648", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Code Execution Vulnerability", "date": "2024-09-17", "ransom": false, "cvss": 8.8, "epss": 0.1109, "vckev": true, "euvd": false, "ra": 13, "due": "2024-10-08" }, { "cve": "CVE-2024-4761", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Memory Write Vulnerability", "date": "2024-05-16", "ransom": false, "cvss": 8.8, "epss": 0.1101, "vckev": true, "euvd": false, "ra": 3, "due": "2024-06-06" }, { "cve": "CVE-2021-30762", "vendor": "Apple", "product": "iOS", "name": "Apple iOS WebKit Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.1099, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2020-8467", "vendor": "Trend Micro", "product": "Apex One and OfficeScan", "name": "Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.1079, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2017-6740", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.8, "epss": 0.1079, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2017-1000253", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel PIE Stack Buffer Corruption Vulnerability", "date": "2024-09-09", "ransom": true, "cvss": 7.8, "epss": 0.107, "vckev": true, "euvd": false, "ra": 3, "due": "2024-09-30" }, { "cve": "CVE-2020-15069", "vendor": "Sophos", "product": "XG Firewall", "name": "Sophos XG Firewall Buffer Overflow Vulnerability", "date": "2025-02-06", "ransom": false, "cvss": 9.8, "epss": 0.1067, "vckev": true, "euvd": false, "ra": 3, "due": "2025-02-27" }, { "cve": "CVE-2024-23222", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Type Confusion Vulnerability", "date": "2024-01-23", "ransom": false, "cvss": 8.8, "epss": 0.1059, "vckev": true, "euvd": false, "ra": 3, "due": "2024-02-13" }, { "cve": "CVE-2021-30761", "vendor": "Apple", "product": "iOS", "name": "Apple iOS WebKit Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.1059, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2020-6572", "vendor": "Google", "product": "Chrome Media", "name": "Google Chrome Media Use-After-Free Vulnerability", "date": "2022-01-10", "ransom": false, "cvss": 8.8, "epss": 0.1059, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-10" }, { "cve": "CVE-2022-41223", "vendor": "Mitel", "product": "MiVoice Connect", "name": "Mitel MiVoice Connect Code Injection Vulnerability", "date": "2023-02-21", "ransom": true, "cvss": 6.8, "epss": 0.1057, "vckev": true, "euvd": false, "ra": 2, "due": "2023-03-14" }, { "cve": "CVE-2017-6743", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.8, "epss": 0.1055, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2017-6739", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.8, "epss": 0.1055, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2017-6738", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.8, "epss": 0.1055, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2013-0643", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Incorrect Default Permissions Vulnerability", "date": "2024-09-17", "ransom": false, "cvss": 8.8, "epss": 0.1053, "vckev": true, "euvd": false, "ra": 13, "due": "2024-10-08" }, { "cve": "CVE-2022-40765", "vendor": "Mitel", "product": "MiVoice Connect", "name": "Mitel MiVoice Connect Command Injection Vulnerability", "date": "2023-02-21", "ransom": true, "cvss": 6.8, "epss": 0.1048, "vckev": true, "euvd": false, "ra": 2, "due": "2023-03-14" }, { "cve": "CVE-2022-2586", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Use-After-Free Vulnerability", "date": "2024-06-26", "ransom": false, "cvss": 7.8, "epss": 0.1046, "vckev": true, "euvd": false, "ra": 19, "due": "2024-07-17" }, { "cve": "CVE-2020-27932", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.1034, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-6543", "vendor": "Citrix", "product": "NetScaler ADC and Gateway", "name": "Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability", "date": "2025-06-30", "ransom": false, "cvss": 9.8, "epss": 0.1009, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-21" }, { "cve": "CVE-2024-6047", "vendor": "GeoVision", "product": "Multiple Devices", "name": "GeoVision Devices OS Command Injection Vulnerability", "date": "2025-05-07", "ransom": false, "cvss": 9.8, "epss": 0.1007, "vckev": true, "euvd": false, "ra": 6, "due": "2025-05-28" }, { "cve": "CVE-2020-3433", "vendor": "Cisco", "product": "AnyConnect Secure", "name": "Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability", "date": "2022-10-24", "ransom": true, "cvss": 7.8, "epss": 0.1005, "vckev": true, "euvd": false, "ra": 2, "due": "2022-11-14" }, { "cve": "CVE-2024-5274", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2024-05-28", "ransom": false, "cvss": 9.6, "epss": 0.1002, "vckev": true, "euvd": false, "ra": 3, "due": "2024-06-18" }, { "cve": "CVE-2015-1130", "vendor": "Apple", "product": "OS X", "name": "Apple OS X Authentication Bypass Vulnerability", "date": "2022-02-10", "ransom": false, "cvss": 7.8, "epss": 0.0989, "vckev": true, "euvd": false, "ra": 2, "due": "2022-08-10" }, { "cve": "CVE-2021-21193", "vendor": "Google", "product": "Chromium Blink", "name": "Google Chromium Blink Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.0987, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2022-32893", "vendor": "Apple", "product": "iOS and macOS", "name": "Apple iOS and macOS Out-of-Bounds Write Vulnerability", "date": "2022-08-18", "ransom": false, "cvss": 8.8, "epss": 0.0986, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-08" }, { "cve": "CVE-2022-20701", "vendor": "Cisco", "product": "Small Business RV160, RV260, RV340, and RV345 Series Routers", "name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.8, "epss": 0.0975, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2023-23529", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Type Confusion Vulnerability", "date": "2023-02-14", "ransom": false, "cvss": 8.8, "epss": 0.095, "vckev": true, "euvd": false, "ra": 2, "due": "2023-03-07" }, { "cve": "CVE-2021-21206", "vendor": "Google", "product": "Chromium Blink", "name": "Google Chromium Blink Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.094, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2023-42917", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "date": "2023-12-04", "ransom": false, "cvss": 8.8, "epss": 0.0937, "vckev": true, "euvd": false, "ra": 28, "due": "2023-12-25" }, { "cve": "CVE-2022-20703", "vendor": "Cisco", "product": "Small Business RV160, RV260, RV340, and RV345 Series Routers", "name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8, "epss": 0.092, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2024-44308", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Code Execution Vulnerability", "date": "2024-11-21", "ransom": false, "cvss": 8.8, "epss": 0.0919, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-12" }, { "cve": "CVE-2025-6558", "vendor": "Google", "product": "Chromium", "name": "Google Chromium ANGLE and GPU Improper Input Validation Vulnerability", "date": "2025-07-22", "ransom": false, "cvss": 8.8, "epss": 0.0919, "vckev": true, "euvd": false, "ra": 6, "due": "2025-08-12" }, { "cve": "CVE-2015-2291", "vendor": "Intel", "product": "Ethernet Diagnostics Driver for Windows", "name": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability", "date": "2023-02-10", "ransom": true, "cvss": 7.8, "epss": 0.0901, "vckev": true, "euvd": false, "ra": 2, "due": "2023-03-03" }, { "cve": "CVE-2021-30563", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.0893, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2025-43529", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Use-After-Free WebKit Vulnerability", "date": "2025-12-15", "ransom": false, "cvss": 8.8, "epss": 0.0877, "vckev": true, "euvd": false, "ra": 6, "due": "2026-01-05" }, { "cve": "CVE-2018-14558", "vendor": "Tenda", "product": "AC7, AC9, and AC10 Routers", "name": "Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.0867, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-48927", "vendor": "TeleMessage", "product": "TM SGNL", "name": "TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability", "date": "2025-07-01", "ransom": false, "cvss": 5.3, "epss": 0.0866, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-22" }, { "cve": "CVE-2024-57726", "vendor": "SimpleHelp", "product": "SimpleHelp", "name": "SimpleHelp Missing Authorization Vulnerability", "date": "2026-04-24", "ransom": true, "cvss": 9.9, "epss": 0.0863, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-08" }, { "cve": "CVE-2022-23748", "vendor": "Audinate", "product": "Dante Discovery", "name": "Dante Discovery Process Control Vulnerability", "date": "2025-02-06", "ransom": false, "cvss": 7.8, "epss": 0.0853, "vckev": true, "euvd": false, "ra": 3, "due": "2025-02-27" }, { "cve": "CVE-2018-19323", "vendor": "GIGABYTE", "product": "Multiple Products", "name": "GIGABYTE Multiple Products Privilege Escalation Vulnerability", "date": "2022-10-24", "ransom": true, "cvss": 9.8, "epss": 0.0852, "vckev": true, "euvd": false, "ra": 2, "due": "2022-11-14" }, { "cve": "CVE-2022-42856", "vendor": "Apple", "product": "iOS", "name": "Apple iOS Type Confusion Vulnerability", "date": "2022-12-14", "ransom": false, "cvss": 8.8, "epss": 0.0852, "vckev": true, "euvd": false, "ra": 2, "due": "2023-01-04" }, { "cve": "CVE-2025-2783", "vendor": "Google", "product": "Chromium Mojo", "name": "Google Chromium Mojo Sandbox Escape Vulnerability", "date": "2025-03-27", "ransom": false, "cvss": 8.3, "epss": 0.084, "vckev": true, "euvd": false, "ra": 6, "due": "2025-04-17" }, { "cve": "CVE-2026-28318", "vendor": "SolarWinds", "product": "Serv-U", "name": "SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability", "date": "2026-06-05", "ransom": false, "cvss": 7.5, "epss": 0.0835, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-19" }, { "cve": "CVE-2024-4671", "vendor": "Google", "product": "Chromium", "name": "Google Chromium Visuals Use-After-Free Vulnerability", "date": "2024-05-13", "ransom": false, "cvss": 9.6, "epss": 0.0835, "vckev": true, "euvd": false, "ra": 3, "due": "2024-06-03" }, { "cve": "CVE-2025-6554", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2025-07-02", "ransom": false, "cvss": 8.1, "epss": 0.0832, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-23" }, { "cve": "CVE-2018-0156", "vendor": "Cisco", "product": "IOS Software and Cisco IOS XE Software", "name": "Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.5, "epss": 0.0819, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2019-11634", "vendor": "Citrix", "product": "Workspace Application and Receiver for Windows", "name": "Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.0803, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-1870", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.0792, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2025-41244", "vendor": "Broadcom", "product": "VMware Aria Operations and VMware Tools", "name": "Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability", "date": "2025-10-30", "ransom": false, "cvss": 7.8, "epss": 0.0788, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-20" }, { "cve": "CVE-2023-0386", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Improper Ownership Management Vulnerability", "date": "2025-06-17", "ransom": false, "cvss": 7.8, "epss": 0.0788, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-08" }, { "cve": "CVE-2018-0172", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software Improper Input Validation Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.6, "epss": 0.0787, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2022-3723", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2022-10-28", "ransom": false, "cvss": 8.8, "epss": 0.0786, "vckev": true, "euvd": false, "ra": 2, "due": "2022-11-18" }, { "cve": "CVE-2021-4102", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Use-After-Free Vulnerability", "date": "2021-12-15", "ransom": false, "cvss": 8.8, "epss": 0.0784, "vckev": true, "euvd": false, "ra": 2, "due": "2021-12-29" }, { "cve": "CVE-2012-2034", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Memory Corruption Vulnerability", "date": "2022-03-28", "ransom": false, "cvss": 7.5, "epss": 0.078, "vckev": true, "euvd": false, "ra": 8, "due": "2022-04-18" }, { "cve": "CVE-2018-0155", "vendor": "Cisco", "product": "Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches", "name": "Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.6, "epss": 0.0779, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2018-0174", "vendor": "Cisco", "product": "IOS XE Software", "name": "Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.6, "epss": 0.0766, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2018-0173", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software Improper Input Validation Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.6, "epss": 0.0766, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2021-30952", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Integer Overflow or Wraparound Vulnerability", "date": "2026-03-05", "ransom": false, "cvss": 7.8, "epss": 0.0762, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-26" }, { "cve": "CVE-2021-30554", "vendor": "Google", "product": "Chromium WebGL", "name": "Google Chromium WebGL Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.0737, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2023-7024", "vendor": "Google", "product": "Chromium WebRTC", "name": "Google Chromium WebRTC Heap Buffer Overflow Vulnerability", "date": "2024-01-02", "ransom": false, "cvss": 8.8, "epss": 0.0736, "vckev": true, "euvd": false, "ra": 3, "due": "2024-01-23" }, { "cve": "CVE-2020-3950", "vendor": "VMware", "product": "Multiple Products", "name": "VMware Multiple Products Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.0725, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2018-0158", "vendor": "Cisco", "product": "IOS Software and Cisco IOS XE Software", "name": "Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.6, "epss": 0.0724, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2017-6744", "vendor": "Cisco", "product": "IOS software", "name": "Cisco IOS Software SNMP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.8, "epss": 0.0716, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2017-12237", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.5, "epss": 0.0713, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2017-12235", "vendor": "Cisco", "product": "IOS software", "name": "Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.5, "epss": 0.0713, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2017-12234", "vendor": "Cisco", "product": "IOS software", "name": "Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.5, "epss": 0.0713, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2017-12233", "vendor": "Cisco", "product": "IOS software", "name": "Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.5, "epss": 0.0713, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2017-12231", "vendor": "Cisco", "product": "IOS software", "name": "Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.5, "epss": 0.0713, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2021-1871", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.0712, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2018-0154", "vendor": "Cisco", "product": "IOS Software", "name": "Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.5, "epss": 0.0712, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2026-34621", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Prototype Pollution Vulnerability", "date": "2026-04-13", "ransom": false, "cvss": 8.6, "epss": 0.0709, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-27" }, { "cve": "CVE-2019-0344", "vendor": "SAP", "product": "Commerce Cloud", "name": "SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability", "date": "2024-09-30", "ransom": false, "cvss": 9.8, "epss": 0.0708, "vckev": true, "euvd": false, "ra": 3, "due": "2024-10-21" }, { "cve": "CVE-2023-26369", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability", "date": "2023-09-14", "ransom": false, "cvss": 7.8, "epss": 0.0704, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-05" }, { "cve": "CVE-2024-57728", "vendor": "SimpleHelp", "product": "SimpleHelp", "name": "SimpleHelp Path Traversal Vulnerability", "date": "2026-04-24", "ransom": true, "cvss": 7.2, "epss": 0.0698, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-08" }, { "cve": "CVE-2026-20128", "vendor": "Cisco", "product": "Catalyst SD-WAN Manager", "name": "Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability", "date": "2026-04-20", "ransom": false, "cvss": 7.5, "epss": 0.0694, "vckev": true, "euvd": false, "ra": 26, "due": "2026-04-23" }, { "cve": "CVE-2008-3431", "vendor": "Oracle", "product": "VirtualBox", "name": "Oracle VirtualBox Insufficient Input Validation Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.8, "epss": 0.0693, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2018-0159", "vendor": "Cisco", "product": "IOS Software and Cisco IOS XE Software", "name": "Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.5, "epss": 0.0692, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2022-27518", "vendor": "Citrix", "product": "Application Delivery Controller (ADC) and Gateway", "name": "Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability", "date": "2022-12-13", "ransom": false, "cvss": 9.8, "epss": 0.0688, "vckev": true, "euvd": false, "ra": 2, "due": "2023-01-03" }, { "cve": "CVE-2021-1879", "vendor": "Apple", "product": "iOS, iPadOS, and watchOS", "name": "Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 6.1, "epss": 0.0684, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2013-1675", "vendor": "Mozilla", "product": "Firefox", "name": "Mozilla Firefox Information Disclosure Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 6.5, "epss": 0.067, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2023-28434", "vendor": "MinIO", "product": "MinIO", "name": "MinIO Security Feature Bypass Vulnerability", "date": "2023-09-19", "ransom": false, "cvss": 8.8, "epss": 0.0668, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-10" }, { "cve": "CVE-2012-0767", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 6.1, "epss": 0.0666, "vckev": true, "euvd": false, "ra": 8, "due": "2022-06-22" }, { "cve": "CVE-2021-30713", "vendor": "Apple", "product": "macOS", "name": "Apple macOS Unspecified Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.0658, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2025-5419", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Read and Write Vulnerability", "date": "2025-06-05", "ransom": false, "cvss": 8.8, "epss": 0.0645, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-26" }, { "cve": "CVE-2020-16010", "vendor": "Google", "product": "Chrome for Android UI", "name": "Google Chrome for Android UI Heap Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.6, "epss": 0.0641, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2020-6820", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "name": "Mozilla Firefox And Thunderbird Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.1, "epss": 0.063, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2017-6627", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.5, "epss": 0.0604, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2019-15271", "vendor": "Cisco", "product": "RV Series Routers", "name": "Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability", "date": "2022-06-08", "ransom": false, "cvss": 8.8, "epss": 0.0598, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-22" }, { "cve": "CVE-2021-27101", "vendor": "Accellion", "product": "FTA", "name": "Accellion FTA SQL Injection Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 9.8, "epss": 0.0595, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2021-22600", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Privilege Escalation Vulnerability", "date": "2022-04-11", "ransom": false, "cvss": 7, "epss": 0.0587, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-02" }, { "cve": "CVE-2022-26500", "vendor": "Veeam", "product": "Backup & Replication", "name": "Veeam Backup & Replication Remote Code Execution Vulnerability", "date": "2022-12-13", "ransom": true, "cvss": 8.8, "epss": 0.0583, "vckev": true, "euvd": false, "ra": 2, "due": "2023-01-03" }, { "cve": "CVE-2020-8468", "vendor": "Trend Micro", "product": "Apex One, OfficeScan and Worry-Free Business Security Agents", "name": "Trend Micro Multiple Products Content Validation Escape Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.0575, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2026-3502", "vendor": "TrueConf", "product": "Client", "name": "TrueConf Client Download of Code Without Integrity Check Vulnerability", "date": "2026-04-02", "ransom": false, "cvss": 7.8, "epss": 0.0575, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-16" }, { "cve": "CVE-2023-2136", "vendor": "Google", "product": "Chromium Skia", "name": "Google Chrome Skia Integer Overflow Vulnerability", "date": "2023-04-21", "ransom": false, "cvss": 9.6, "epss": 0.0574, "vckev": true, "euvd": false, "ra": 2, "due": "2023-05-12" }, { "cve": "CVE-2022-3075", "vendor": "Google", "product": "Chromium Mojo", "name": "Google Chromium Mojo Insufficient Data Validation Vulnerability", "date": "2022-09-08", "ransom": false, "cvss": 9.6, "epss": 0.0568, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-29" }, { "cve": "CVE-2019-6693", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability", "date": "2025-06-25", "ransom": true, "cvss": 6.5, "epss": 0.0566, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-16" }, { "cve": "CVE-2022-20700", "vendor": "Cisco", "product": "Small Business RV160, RV260, RV340, and RV345 Series Routers", "name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 9.8, "epss": 0.0566, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2022-32917", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability", "date": "2022-09-14", "ransom": false, "cvss": 7.8, "epss": 0.056, "vckev": true, "euvd": false, "ra": 2, "due": "2022-10-05" }, { "cve": "CVE-2010-3035", "vendor": "Cisco", "product": "IOS XR", "name": "Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 7.5, "epss": 0.0556, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2022-0492", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Improper Authentication Vulnerability", "date": "2026-06-02", "ransom": false, "cvss": 7.8, "epss": 0.0553, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-05" }, { "cve": "CVE-2025-10585", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2025-09-23", "ransom": false, "cvss": 9.8, "epss": 0.0543, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-14" }, { "cve": "CVE-2021-28664", "vendor": "Arm", "product": "Mali Graphics Processing Unit (GPU)", "name": "Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.0541, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2017-12319", "vendor": "Cisco", "product": "IOS XE Software", "name": "Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 5.9, "epss": 0.0528, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2013-3993", "vendor": "IBM", "product": "InfoSphere BigInsights", "name": "IBM InfoSphere BigInsights Invalid Input Vulnerability", "date": "2022-05-25", "ransom": true, "cvss": 6.5, "epss": 0.0524, "vckev": true, "euvd": false, "ra": 8, "due": "2022-06-15" }, { "cve": "CVE-2021-30900", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability", "date": "2023-03-30", "ransom": false, "cvss": 7.8, "epss": 0.052, "vckev": true, "euvd": false, "ra": 2, "due": "2023-04-20" }, { "cve": "CVE-2004-1464", "vendor": "Cisco", "product": "IOS", "name": "Cisco IOS Denial-of-Service Vulnerability", "date": "2023-05-19", "ransom": false, "cvss": 5.9, "epss": 0.0513, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-09" }, { "cve": "CVE-2026-5281", "vendor": "Google", "product": "Dawn", "name": "Google Dawn Use-After-Free Vulnerability", "date": "2026-04-01", "ransom": false, "cvss": 8.8, "epss": 0.0504, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-15" }, { "cve": "CVE-2026-25108", "vendor": "Soliton Systems K.K", "product": "FileZen", "name": "Soliton Systems K.K FileZen OS Command Injection Vulnerability", "date": "2026-02-24", "ransom": false, "cvss": 8.8, "epss": 0.0498, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-17" }, { "cve": "CVE-2018-0180", "vendor": "Cisco", "product": "IOS Software", "name": "Cisco IOS Software Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 5.9, "epss": 0.0497, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2018-0179", "vendor": "Cisco", "product": "IOS Software", "name": "Cisco IOS Software Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 5.9, "epss": 0.0497, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2021-36741", "vendor": "Trend Micro", "product": "Apex One, Apex One as a Service, and Worry-Free Business Security", "name": "Trend Micro Multiple Products Improper Input Validation Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.0495, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2019-16256", "vendor": "SIMalliance", "product": "Toolbox Browser", "name": "SIMalliance Toolbox Browser Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.8, "epss": 0.0495, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-13223", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2025-11-19", "ransom": false, "cvss": 8.8, "epss": 0.0491, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-10" }, { "cve": "CVE-2023-41179", "vendor": "Trend Micro", "product": "Apex One and Worry-Free Business Security", "name": "Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability", "date": "2023-09-21", "ransom": false, "cvss": 7.2, "epss": 0.0474, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-12" }, { "cve": "CVE-2020-29574", "vendor": "Sophos", "product": "CyberoamOS", "name": "CyberoamOS (CROS) SQL Injection Vulnerability", "date": "2025-02-06", "ransom": false, "cvss": 9.8, "epss": 0.0473, "vckev": true, "euvd": false, "ra": 13, "due": "2025-02-27" }, { "cve": "CVE-2020-1631", "vendor": "Juniper", "product": "Junos OS", "name": "Juniper Junos OS Path Traversal Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.0473, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2019-18988", "vendor": "TeamViewer", "product": "Desktop", "name": "TeamViewer Desktop Bypass Remote Login Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7, "epss": 0.0471, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2018-0161", "vendor": "Cisco", "product": "IOS Software", "name": "Cisco IOS Software Resource Management Errors Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 6.3, "epss": 0.0467, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2012-0518", "vendor": "Oracle", "product": "Fusion Middleware", "name": "Oracle Fusion Middleware Unspecified Vulnerability", "date": "2022-03-28", "ransom": false, "cvss": 4.7, "epss": 0.0466, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-18" }, { "cve": "CVE-2019-7287", "vendor": "Apple", "product": "iOS", "name": "Apple iOS Memory Corruption Vulnerability", "date": "2022-05-23", "ransom": false, "cvss": 7.8, "epss": 0.0459, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-13" }, { "cve": "CVE-2023-41991", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Improper Certificate Validation Vulnerability", "date": "2023-09-25", "ransom": false, "cvss": 5.5, "epss": 0.0455, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-16" }, { "cve": "CVE-2022-2856", "vendor": "Google", "product": "Chromium Intents", "name": "Google Chromium Intents Insufficient Input Validation Vulnerability", "date": "2022-08-18", "ransom": false, "cvss": 6.5, "epss": 0.0453, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-08" }, { "cve": "CVE-2021-30661", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Storage Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.0453, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2021-38000", "vendor": "Google", "product": "Chromium Intents", "name": "Google Chromium Intents Improper Input Validation Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 6.1, "epss": 0.0449, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2023-46748", "vendor": "F5", "product": "BIG-IP Configuration Utility", "name": "F5 BIG-IP Configuration Utility SQL Injection Vulnerability", "date": "2023-10-31", "ransom": false, "cvss": 8.8, "epss": 0.0447, "vckev": true, "euvd": false, "ra": 3, "due": "2023-11-21" }, { "cve": "CVE-2025-24200", "vendor": "Apple", "product": "iOS and iPadOS", "name": "Apple iOS and iPadOS Incorrect Authorization Vulnerability", "date": "2025-02-12", "ransom": false, "cvss": 6.1, "epss": 0.0437, "vckev": true, "euvd": false, "ra": 3, "due": "2025-03-05" }, { "cve": "CVE-2020-2021", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability", "date": "2022-03-25", "ransom": true, "cvss": 10, "epss": 0.0436, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2025-23209", "vendor": "Craft CMS", "product": "Craft CMS", "name": "Craft CMS Code Injection Vulnerability", "date": "2025-02-20", "ransom": false, "cvss": 8.1, "epss": 0.0436, "vckev": true, "euvd": false, "ra": 3, "due": "2025-03-13" }, { "cve": "CVE-2026-20045", "vendor": "Cisco", "product": "Unified Communications Manager", "name": "Cisco Unified Communications Products Code Injection Vulnerability", "date": "2026-01-21", "ransom": false, "cvss": 9.8, "epss": 0.0431, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-11" }, { "cve": "CVE-2024-20399", "vendor": "Cisco", "product": "NX-OS", "name": "Cisco NX-OS Command Injection Vulnerability", "date": "2024-07-02", "ransom": false, "cvss": 6.7, "epss": 0.0431, "vckev": true, "euvd": false, "ra": 3, "due": "2024-07-23" }, { "cve": "CVE-2020-13671", "vendor": "Drupal", "product": "Drupal core", "name": "Drupal core Un-restricted Upload of File", "date": "2022-01-18", "ransom": false, "cvss": 8.8, "epss": 0.043, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-18" }, { "cve": "CVE-2025-55177", "vendor": "Meta Platforms", "product": "WhatsApp", "name": "Meta Platforms WhatsApp Incorrect Authorization Vulnerability", "date": "2025-09-02", "ransom": false, "cvss": 5.4, "epss": 0.0421, "vckev": true, "euvd": false, "ra": 6, "due": "2025-09-23" }, { "cve": "CVE-2021-20035", "vendor": "SonicWall", "product": "SMA100 Appliances", "name": "SonicWall SMA100 Appliances OS Command Injection Vulnerability", "date": "2025-04-16", "ransom": false, "cvss": 6.5, "epss": 0.0418, "vckev": true, "euvd": false, "ra": 6, "due": "2025-05-07" }, { "cve": "CVE-2021-30869", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.0415, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2025-24201", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability", "date": "2025-03-13", "ransom": false, "cvss": 10, "epss": 0.0412, "vckev": true, "euvd": false, "ra": 6, "due": "2025-04-03" }, { "cve": "CVE-2025-54313", "vendor": "Prettier", "product": "eslint-config-prettier", "name": "Prettier eslint-config-prettier Embedded Malicious Code Vulnerability", "date": "2026-01-22", "ransom": false, "cvss": 7.5, "epss": 0.0411, "vckev": true, "euvd": false, "ra": 6, "due": "2026-02-12" }, { "cve": "CVE-2022-26501", "vendor": "Veeam", "product": "Backup & Replication", "name": "Veeam Backup & Replication Remote Code Execution Vulnerability", "date": "2022-12-13", "ransom": true, "cvss": 9.8, "epss": 0.041, "vckev": true, "euvd": false, "ra": 2, "due": "2023-01-03" }, { "cve": "CVE-2026-18577", "vendor": "N-able", "product": "N-central", "name": "N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability", "date": "2026-08-03", "ransom": false, "cvss": 8.1, "epss": 0.041, "vckev": true, "euvd": false, "ra": 12, "due": "2026-08-06" }, { "cve": "CVE-2025-47827", "vendor": "IGEL", "product": "IGEL OS", "name": "IGEL OS Use of a Key Past its Expiration Date Vulnerability", "date": "2025-10-14", "ransom": false, "cvss": 4.6, "epss": 0.0402, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-04" }, { "cve": "CVE-2019-7483", "vendor": "SonicWall", "product": "SMA100", "name": "SonicWall SMA100 Directory Traversal Vulnerability", "date": "2022-03-28", "ransom": false, "cvss": 7.5, "epss": 0.0398, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-18" }, { "cve": "CVE-2024-39717", "vendor": "Versa", "product": "Director", "name": "Versa Director Dangerous File Type Upload Vulnerability", "date": "2024-08-23", "ransom": false, "cvss": 7.2, "epss": 0.0397, "vckev": true, "euvd": false, "ra": 3, "due": "2024-09-13" }, { "cve": "CVE-2025-27915", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability", "date": "2025-10-07", "ransom": false, "cvss": 5.4, "epss": 0.0392, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-28" }, { "cve": "CVE-2023-43000", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple products Use-After-Free Vulnerability", "date": "2026-03-05", "ransom": false, "cvss": 8.8, "epss": 0.039, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-26" }, { "cve": "CVE-2020-9907", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2022-06-27", "ransom": false, "cvss": 7.8, "epss": 0.0387, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-18" }, { "cve": "CVE-2025-2749", "vendor": "Kentico", "product": "Kentico Xperience", "name": "Kentico Xperience Path Traversal Vulnerability", "date": "2026-04-20", "ransom": false, "cvss": 7.2, "epss": 0.0385, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-04" }, { "cve": "CVE-2024-9537", "vendor": "ScienceLogic", "product": "SL1", "name": "ScienceLogic SL1 Unspecified Vulnerability", "date": "2024-10-21", "ransom": false, "cvss": 9.8, "epss": 0.0383, "vckev": true, "euvd": false, "ra": 3, "due": "2024-11-11" }, { "cve": "CVE-2024-0519", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Memory Access Vulnerability", "date": "2024-01-17", "ransom": false, "cvss": 8.8, "epss": 0.0377, "vckev": true, "euvd": false, "ra": 3, "due": "2024-02-07" }, { "cve": "CVE-2016-3643", "vendor": "SolarWinds", "product": "Virtualization Manager", "name": "SolarWinds Virtualization Manager Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.037, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2023-0266", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Use-After-Free Vulnerability", "date": "2023-03-30", "ransom": false, "cvss": 7, "epss": 0.037, "vckev": true, "euvd": false, "ra": 2, "due": "2023-04-20" }, { "cve": "CVE-2021-30665", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.0369, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2021-30663", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Integer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.0369, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2021-31010", "vendor": "Apple", "product": "iOS, macOS, watchOS", "name": "Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability", "date": "2022-08-25", "ransom": false, "cvss": 7.5, "epss": 0.0367, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-15" }, { "cve": "CVE-2018-19321", "vendor": "GIGABYTE", "product": "Multiple Products", "name": "GIGABYTE Multiple Products Privilege Escalation Vulnerability", "date": "2022-10-24", "ransom": true, "cvss": 7.8, "epss": 0.0367, "vckev": true, "euvd": false, "ra": 2, "due": "2022-11-14" }, { "cve": "CVE-2020-3566", "vendor": "Cisco", "product": "IOS XR", "name": "Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.6, "epss": 0.0363, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-27102", "vendor": "Accellion", "product": "FTA", "name": "Accellion FTA OS Command Injection Vulnerability", "date": "2021-11-03", "ransom": true, "cvss": 7.8, "epss": 0.0362, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2016-8562", "vendor": "Siemens", "product": "SIMATIC CP", "name": "Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 7.5, "epss": 0.0362, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2018-19320", "vendor": "GIGABYTE", "product": "Multiple Products", "name": "GIGABYTE Multiple Products Unspecified Vulnerability", "date": "2022-10-24", "ransom": true, "cvss": 7.8, "epss": 0.036, "vckev": true, "euvd": false, "ra": 2, "due": "2022-11-14" }, { "cve": "CVE-2024-53197", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Out-of-Bounds Access Vulnerability", "date": "2025-04-09", "ransom": false, "cvss": 7.8, "epss": 0.0356, "vckev": true, "euvd": false, "ra": 6, "due": "2025-04-30" }, { "cve": "CVE-2023-45727", "vendor": "North Grid", "product": "Proself", "name": "North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability", "date": "2024-12-03", "ransom": false, "cvss": 7.5, "epss": 0.0354, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-24" }, { "cve": "CVE-2018-0175", "vendor": "Cisco", "product": "IOS, XR, and XE Software", "name": "Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8, "epss": 0.035, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2025-66644", "vendor": "Array Networks", "product": "ArrayOS AG", "name": "Array Networks ArrayOS AG OS Command Injection Vulnerability", "date": "2025-12-08", "ransom": false, "cvss": 9.8, "epss": 0.0346, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-29" }, { "cve": "CVE-2021-35247", "vendor": "SolarWinds", "product": "Serv-U", "name": "SolarWinds Serv-U Improper Input Validation Vulnerability", "date": "2022-01-21", "ransom": false, "cvss": 5.3, "epss": 0.0345, "vckev": true, "euvd": false, "ra": 2, "due": "2022-02-04" }, { "cve": "CVE-2025-3935", "vendor": "ConnectWise", "product": "ScreenConnect", "name": "ConnectWise ScreenConnect Improper Authentication Vulnerability", "date": "2025-06-02", "ransom": false, "cvss": 7.2, "epss": 0.0342, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-23" }, { "cve": "CVE-2024-20953", "vendor": "Oracle", "product": "Agile Product Lifecycle Management (PLM)", "name": "Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability", "date": "2025-02-24", "ransom": false, "cvss": 8.8, "epss": 0.034, "vckev": true, "euvd": false, "ra": 3, "due": "2025-03-17" }, { "cve": "CVE-2018-0167", "vendor": "Cisco", "product": "IOS, XR, and XE Software", "name": "Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 8.8, "epss": 0.0338, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-17" }, { "cve": "CVE-2013-2596", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Integer Overflow Vulnerability", "date": "2022-09-15", "ransom": false, "cvss": 7.8, "epss": 0.0337, "vckev": true, "euvd": false, "ra": 2, "due": "2022-10-06" }, { "cve": "CVE-2025-24472", "vendor": "Fortinet", "product": "FortiOS and FortiProxy", "name": "Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability", "date": "2025-03-18", "ransom": true, "cvss": 8.1, "epss": 0.0334, "vckev": true, "euvd": false, "ra": 6, "due": "2025-04-08" }, { "cve": "CVE-2009-2055", "vendor": "Cisco", "product": "IOS XR", "name": "Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 5.9, "epss": 0.0333, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2024-53104", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Out-of-Bounds Write Vulnerability", "date": "2025-02-05", "ransom": false, "cvss": 7.8, "epss": 0.033, "vckev": true, "euvd": false, "ra": 3, "due": "2025-02-26" }, { "cve": "CVE-2020-3569", "vendor": "Cisco", "product": "IOS XR", "name": "Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.6, "epss": 0.0329, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2022-32894", "vendor": "Apple", "product": "iOS and macOS", "name": "Apple iOS and macOS Out-of-Bounds Write Vulnerability", "date": "2022-08-18", "ransom": false, "cvss": 7.8, "epss": 0.0329, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-08" }, { "cve": "CVE-2020-0041", "vendor": "Android", "product": "Android Kernel", "name": "Android Kernel Out-of-Bounds Write Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.0325, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-42599", "vendor": "Qualitia", "product": "Active! Mail", "name": "Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability", "date": "2025-04-28", "ransom": false, "cvss": 9.8, "epss": 0.0321, "vckev": true, "euvd": false, "ra": 6, "due": "2025-05-19" }, { "cve": "CVE-2022-48503", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Unspecified Vulnerability", "date": "2025-10-20", "ransom": false, "cvss": 8.8, "epss": 0.0321, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-10" }, { "cve": "CVE-2020-9934", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS Input Validation Vulnerability", "date": "2022-09-08", "ransom": false, "cvss": 5.5, "epss": 0.0321, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-29" }, { "cve": "CVE-2023-6548", "vendor": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "name": "Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability", "date": "2024-01-17", "ransom": false, "cvss": 8.8, "epss": 0.0319, "vckev": true, "euvd": false, "ra": 3, "due": "2024-01-24" }, { "cve": "CVE-2023-41061", "vendor": "Apple", "product": "iOS, iPadOS, and watchOS", "name": "Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability", "date": "2023-09-11", "ransom": false, "cvss": 7.8, "epss": 0.0313, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-02" }, { "cve": "CVE-2021-27562", "vendor": "Arm", "product": "Trusted Firmware", "name": "Arm Trusted Firmware Out-of-Bounds Write Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 5.5, "epss": 0.0309, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2025-8876", "vendor": "N-able", "product": "N-Central", "name": "N-able N-Central Command Injection Vulnerability", "date": "2025-08-13", "ransom": false, "cvss": 8.8, "epss": 0.0309, "vckev": true, "euvd": false, "ra": 6, "due": "2025-08-20" }, { "cve": "CVE-2021-30666", "vendor": "Apple", "product": "iOS", "name": "Apple iOS WebKit Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.0303, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2021-29256", "vendor": "Arm", "product": "Mali Graphics Processing Unit (GPU)", "name": "Arm Mali GPU Kernel Driver Use-After-Free Vulnerability", "date": "2023-07-07", "ransom": false, "cvss": 8.8, "epss": 0.0302, "vckev": true, "euvd": false, "ra": 19, "due": "2023-07-28" }, { "cve": "CVE-2024-11667", "vendor": "Zyxel", "product": "Multiple Firewalls", "name": "Zyxel Multiple Firewalls Path Traversal Vulnerability", "date": "2024-12-03", "ransom": true, "cvss": 9.8, "epss": 0.0302, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-24" }, { "cve": "CVE-2024-32896", "vendor": "Android", "product": "Pixel", "name": "Android Pixel Privilege Escalation Vulnerability", "date": "2024-06-13", "ransom": false, "cvss": 7.8, "epss": 0.0301, "vckev": true, "euvd": false, "ra": 3, "due": "2024-07-04" }, { "cve": "CVE-2011-4723", "vendor": "D-Link", "product": "DIR-300 Router", "name": "D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability", "date": "2022-09-08", "ransom": false, "cvss": 5.7, "epss": 0.0298, "vckev": true, "euvd": false, "ra": 8, "due": "2022-09-29" }, { "cve": "CVE-2020-6819", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "name": "Mozilla Firefox And Thunderbird Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.1, "epss": 0.0298, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-30983", "vendor": "Apple", "product": "iOS and iPadOS", "name": "Apple iOS and iPadOS Buffer Overflow Vulnerability", "date": "2022-06-27", "ransom": false, "cvss": 7.8, "epss": 0.0292, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-18" }, { "cve": "CVE-2023-41992", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Kernel Privilege Escalation Vulnerability", "date": "2023-09-25", "ransom": false, "cvss": 7.8, "epss": 0.0292, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-16" }, { "cve": "CVE-2018-4344", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2022-06-27", "ransom": false, "cvss": 7.8, "epss": 0.0291, "vckev": true, "euvd": false, "ra": 2, "due": "2022-07-18" }, { "cve": "CVE-2023-38606", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Kernel Unspecified Vulnerability", "date": "2023-07-26", "ransom": false, "cvss": 5.5, "epss": 0.029, "vckev": true, "euvd": false, "ra": 3, "due": "2023-08-16" }, { "cve": "CVE-2025-48384", "vendor": "Git", "product": "Git", "name": "Git Link Following Vulnerability", "date": "2025-08-25", "ransom": false, "cvss": 8, "epss": 0.0284, "vckev": true, "euvd": false, "ra": 6, "due": "2025-09-15" }, { "cve": "CVE-2022-40139", "vendor": "Trend Micro", "product": "Apex One and Apex One as a Service", "name": "Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability", "date": "2022-09-15", "ransom": false, "cvss": 7.2, "epss": 0.0284, "vckev": true, "euvd": false, "ra": 2, "due": "2022-10-06" }, { "cve": "CVE-2021-25337", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Improper Access Control Vulnerability", "date": "2022-11-08", "ransom": false, "cvss": 7.1, "epss": 0.0283, "vckev": true, "euvd": false, "ra": 2, "due": "2022-11-29" }, { "cve": "CVE-2020-16013", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Incorrect Implementation Vulnerabililty", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.0283, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2020-16017", "vendor": "Google", "product": "Chrome", "name": "Google Chrome Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 9.6, "epss": 0.0275, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2022-42948", "vendor": "Fortra", "product": "Cobalt Strike", "name": "Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability", "date": "2023-03-30", "ransom": false, "cvss": 9.8, "epss": 0.0271, "vckev": true, "euvd": false, "ra": 2, "due": "2023-04-20" }, { "cve": "CVE-2024-36971", "vendor": "Android", "product": "Kernel", "name": "Android Kernel Remote Code Execution Vulnerability", "date": "2024-08-07", "ransom": false, "cvss": 7.8, "epss": 0.027, "vckev": true, "euvd": false, "ra": 3, "due": "2024-08-28" }, { "cve": "CVE-2023-29492", "vendor": "Novi Survey", "product": "Novi Survey", "name": "Novi Survey Insecure Deserialization Vulnerability", "date": "2023-04-13", "ransom": false, "cvss": 9.8, "epss": 0.0269, "vckev": true, "euvd": false, "ra": 2, "due": "2023-05-04" }, { "cve": "CVE-2020-24557", "vendor": "Trend Micro", "product": "Apex One, OfficeScan, and Worry-Free Business Security", "name": "Trend Micro Multiple Products Improper Access Control Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.0264, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2019-6223", "vendor": "Apple", "product": "iOS and macOS", "name": "Apple iOS and macOS Group Facetime Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.5, "epss": 0.0263, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-61932", "vendor": "Motex", "product": "LANSCOPE Endpoint Manager", "name": "Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability", "date": "2025-10-22", "ransom": false, "cvss": 9.8, "epss": 0.0263, "vckev": true, "euvd": false, "ra": 6, "due": "2025-11-12" }, { "cve": "CVE-2023-21492", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability", "date": "2023-05-19", "ransom": false, "cvss": 4.4, "epss": 0.0255, "vckev": true, "euvd": false, "ra": 2, "due": "2023-06-09" }, { "cve": "CVE-2025-32975", "vendor": "Quest", "product": "KACE Systems Management Appliance (SMA)", "name": "Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability", "date": "2026-04-20", "ransom": false, "cvss": 10, "epss": 0.0242, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-04" }, { "cve": "CVE-2022-0028", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability", "date": "2022-08-22", "ransom": false, "cvss": 8.6, "epss": 0.0237, "vckev": true, "euvd": false, "ra": 2, "due": "2022-09-12" }, { "cve": "CVE-2022-26486", "vendor": "Mozilla", "product": "Firefox", "name": "Mozilla Firefox Use-After-Free Vulnerability", "date": "2022-03-07", "ransom": false, "cvss": 9.6, "epss": 0.0235, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-21" }, { "cve": "CVE-2023-20109", "vendor": "Cisco", "product": "IOS and IOS XE", "name": "Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability", "date": "2023-10-10", "ransom": false, "cvss": 6.6, "epss": 0.0234, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-31" }, { "cve": "CVE-2026-45321", "vendor": "TanStack", "product": "TanStack", "name": "TanStack Unspecified Vulnerability", "date": "2026-05-27", "ransom": true, "cvss": 9.6, "epss": 0.0234, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-10" }, { "cve": "CVE-2025-30154", "vendor": "reviewdog", "product": "action-setup GitHub Action", "name": "reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability", "date": "2025-03-24", "ransom": false, "cvss": 8.6, "epss": 0.023, "vckev": true, "euvd": false, "ra": 29, "due": "2025-04-14" }, { "cve": "CVE-2020-9818", "vendor": "Apple", "product": "iOS, iPadOS, and watchOS", "name": "Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 8.8, "epss": 0.0229, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-1782", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Race Condition Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7, "epss": 0.0222, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2025-53521", "vendor": "F5", "product": "BIG-IP", "name": "F5 BIG-IP Stack-Based Buffer Overflow Vulnerability", "date": "2026-03-27", "ransom": false, "cvss": 9.8, "epss": 0.0221, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-30" }, { "cve": "CVE-2023-35674", "vendor": "Android", "product": "Framework", "name": "Android Framework Privilege Escalation Vulnerability", "date": "2023-09-13", "ransom": false, "cvss": 7.8, "epss": 0.022, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-04" }, { "cve": "CVE-2026-11645", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Read and Write Vulnerability", "date": "2026-06-09", "ransom": false, "cvss": 8.8, "epss": 0.0219, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-23" }, { "cve": "CVE-2020-9819", "vendor": "Apple", "product": "iOS, iPadOS, and watchOS", "name": "Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 4.3, "epss": 0.0218, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2017-12232", "vendor": "Cisco", "product": "IOS software", "name": "Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 6.5, "epss": 0.0217, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2017-6663", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 6.5, "epss": 0.0214, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2023-6448", "vendor": "Unitronics", "product": "Vision PLC and HMI", "name": "Unitronics Vision PLC and HMI Insecure Default Password Vulnerability", "date": "2023-12-11", "ransom": false, "cvss": 9.8, "epss": 0.0209, "vckev": true, "euvd": false, "ra": 3, "due": "2023-12-18" }, { "cve": "CVE-2025-3928", "vendor": "Commvault", "product": "Web Server", "name": "Commvault Web Server Unspecified Vulnerability", "date": "2025-04-28", "ransom": false, "cvss": 8.8, "epss": 0.0209, "vckev": true, "euvd": false, "ra": 6, "due": "2025-05-19" }, { "cve": "CVE-2017-12238", "vendor": "Cisco", "product": "Catalyst 6800 Series Switches", "name": "Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "cvss": 6.5, "epss": 0.0203, "vckev": true, "euvd": false, "ra": 2, "due": "2022-03-24" }, { "cve": "CVE-2026-3910", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability", "date": "2026-03-13", "ransom": false, "cvss": 8.8, "epss": 0.02, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-27" }, { "cve": "CVE-2025-40602", "vendor": "SonicWall", "product": "SMA1000 appliance", "name": "SonicWall SMA1000 Missing Authorization Vulnerability", "date": "2025-12-17", "ransom": false, "cvss": 6.6, "epss": 0.0199, "vckev": true, "euvd": false, "ra": 39, "due": "2025-12-24" }, { "cve": "CVE-2020-2506", "vendor": "QNAP Systems", "product": "Helpdesk", "name": "QNAP Helpdesk Improper Access Control Vulnerability", "date": "2022-03-25", "ransom": false, "cvss": 9.8, "epss": 0.0198, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-15" }, { "cve": "CVE-2025-0111", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS File Read Vulnerability", "date": "2025-02-20", "ransom": false, "cvss": 6.5, "epss": 0.0193, "vckev": true, "euvd": false, "ra": 3, "due": "2025-03-13" }, { "cve": "CVE-2025-59689", "vendor": "Libraesva", "product": "Email Security Gateway", "name": "Libraesva Email Security Gateway Command Injection Vulnerability", "date": "2025-09-29", "ransom": false, "cvss": 6.1, "epss": 0.0191, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-20" }, { "cve": "CVE-2025-21043", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Out-of-Bounds Write Vulnerability", "date": "2025-10-02", "ransom": false, "cvss": 9.8, "epss": 0.019, "vckev": true, "euvd": false, "ra": 6, "due": "2025-10-23" }, { "cve": "CVE-2018-19322", "vendor": "GIGABYTE", "product": "Multiple Products", "name": "GIGABYTE Multiple Products Code Execution Vulnerability", "date": "2022-10-24", "ransom": true, "cvss": 7.8, "epss": 0.0187, "vckev": true, "euvd": false, "ra": 2, "due": "2022-11-14" }, { "cve": "CVE-2026-48027", "vendor": "Nx", "product": "Nx Console", "name": "Nx Console Embedded Malicious Code Vulnerability", "date": "2026-05-27", "ransom": true, "cvss": 9.8, "epss": 0.0185, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-10" }, { "cve": "CVE-2024-7694", "vendor": "TeamT5", "product": "ThreatSonar Anti-Ransomware", "name": "TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability", "date": "2026-02-17", "ransom": false, "cvss": 7.2, "epss": 0.0181, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-10" }, { "cve": "CVE-2025-27920", "vendor": "Srimax", "product": "Output Messenger", "name": "Srimax Output Messenger Directory Traversal Vulnerability", "date": "2025-05-19", "ransom": false, "cvss": 8.8, "epss": 0.018, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-09" }, { "cve": "CVE-2024-7262", "vendor": "Kingsoft", "product": "WPS Office", "name": "Kingsoft WPS Office Path Traversal Vulnerability", "date": "2024-09-03", "ransom": false, "cvss": 7.8, "epss": 0.0177, "vckev": true, "euvd": false, "ra": 3, "due": "2024-09-24" }, { "cve": "CVE-2020-11261", "vendor": "Qualcomm", "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables", "name": "Qualcomm Multiple Chipsets Improper Input Validation Vulnerability", "date": "2021-12-01", "ransom": false, "cvss": 7.8, "epss": 0.0177, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-01" }, { "cve": "CVE-2025-48700", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability", "date": "2026-04-20", "ransom": false, "cvss": 6.1, "epss": 0.0176, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-23" }, { "cve": "CVE-2025-22226", "vendor": "VMware", "product": "ESXi, Workstation, and Fusion", "name": "VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability", "date": "2025-03-04", "ransom": false, "cvss": 6, "epss": 0.0174, "vckev": true, "euvd": false, "ra": 6, "due": "2025-03-25" }, { "cve": "CVE-2025-21590", "vendor": "Juniper", "product": "Junos OS", "name": "Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability", "date": "2025-03-13", "ransom": false, "cvss": 4.4, "epss": 0.0171, "vckev": true, "euvd": false, "ra": 6, "due": "2025-04-03" }, { "cve": "CVE-2025-48595", "vendor": "Android", "product": "Framework", "name": "Android Framework Integer Overflow Vulnerability", "date": "2026-06-02", "ransom": false, "cvss": 8.4, "epss": 0.0171, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-05" }, { "cve": "CVE-2026-3909", "vendor": "Google", "product": "Skia", "name": "Google Skia Out-of-Bounds Write Vulnerability", "date": "2026-03-13", "ransom": false, "cvss": 8.8, "epss": 0.0163, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-27" }, { "cve": "CVE-2025-8875", "vendor": "N-able", "product": "N-Central", "name": "N-able N-Central Insecure Deserialization Vulnerability", "date": "2025-08-13", "ransom": false, "cvss": 7.8, "epss": 0.0159, "vckev": true, "euvd": false, "ra": 6, "due": "2025-08-20" }, { "cve": "CVE-2025-22224", "vendor": "VMware", "product": "ESXi and Workstation", "name": "VMware ESXi and Workstation TOCTOU Race Condition Vulnerability", "date": "2025-03-04", "ransom": false, "cvss": 8.2, "epss": 0.0156, "vckev": true, "euvd": false, "ra": 6, "due": "2025-03-25" }, { "cve": "CVE-2019-8720", "vendor": "WebKitGTK", "product": "WebKitGTK", "name": "WebKitGTK Memory Corruption Vulnerability", "date": "2022-05-23", "ransom": false, "cvss": 8.8, "epss": 0.0154, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-13" }, { "cve": "CVE-2013-2597", "vendor": "Code Aurora", "product": "ACDB Audio Driver", "name": "Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability", "date": "2022-09-15", "ransom": false, "cvss": 8.4, "epss": 0.0152, "vckev": true, "euvd": false, "ra": 2, "due": "2022-10-06" }, { "cve": "CVE-2024-21287", "vendor": "Oracle", "product": "Agile Product Lifecycle Management (PLM)", "name": "Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability", "date": "2024-11-21", "ransom": false, "cvss": 7.5, "epss": 0.015, "vckev": true, "euvd": false, "ra": 3, "due": "2024-12-12" }, { "cve": "CVE-2021-36742", "vendor": "Trend Micro", "product": "Apex One, Apex One as a Service, and Worry-Free Business Security", "name": "Trend Micro Multiple Products Improper Input Validation Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.0148, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2025-31277", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Buffer Overflow Vulnerability", "date": "2026-03-20", "ransom": false, "cvss": 8.8, "epss": 0.0148, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-03" }, { "cve": "CVE-2024-23225", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2024-03-06", "ransom": false, "cvss": 7.8, "epss": 0.0148, "vckev": true, "euvd": false, "ra": 3, "due": "2024-03-27" }, { "cve": "CVE-2024-39891", "vendor": "Twilio", "product": "Authy", "name": "Twilio Authy Information Disclosure Vulnerability", "date": "2024-07-23", "ransom": false, "cvss": 5.3, "epss": 0.0148, "vckev": true, "euvd": false, "ra": 3, "due": "2024-08-13" }, { "cve": "CVE-2023-20963", "vendor": "Android", "product": "Framework", "name": "Android Framework Privilege Escalation Vulnerability", "date": "2023-04-13", "ransom": false, "cvss": 7.8, "epss": 0.0146, "vckev": true, "euvd": false, "ra": 2, "due": "2023-05-04" }, { "cve": "CVE-2026-8398", "vendor": "Daemon", "product": "Daemon Tools Lite", "name": "Daemon Tools Lite Embedded Malicious Code Vulnerability", "date": "2026-05-27", "ransom": false, "cvss": 9.8, "epss": 0.0146, "vckev": true, "euvd": false, "ra": 6, "due": "2026-05-30" }, { "cve": "CVE-2026-54420", "vendor": "LiteSpeed", "product": "cPanel Plugin", "name": "LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability", "date": "2026-06-15", "ransom": false, "cvss": 8.5, "epss": 0.0144, "vckev": true, "euvd": false, "ra": 12, "due": "2026-06-18" }, { "cve": "CVE-2024-23296", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2024-03-06", "ransom": false, "cvss": 7.8, "epss": 0.0141, "vckev": true, "euvd": false, "ra": 3, "due": "2024-03-27" }, { "cve": "CVE-2023-41974", "vendor": "Apple", "product": "iOS and iPadOS", "name": "Apple iOS and iPadOS Use-After-Free Vulnerability", "date": "2026-03-05", "ransom": false, "cvss": 7.8, "epss": 0.0141, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-26" }, { "cve": "CVE-2024-8068", "vendor": "Citrix", "product": "Session Recording", "name": "Citrix Session Recording Improper Privilege Management Vulnerability", "date": "2025-08-25", "ransom": false, "cvss": 8, "epss": 0.014, "vckev": true, "euvd": false, "ra": 6, "due": "2025-09-15" }, { "cve": "CVE-2023-4211", "vendor": "Arm", "product": "Mali GPU Kernel Driver", "name": "Arm Mali GPU Kernel Driver Use-After-Free Vulnerability", "date": "2023-10-03", "ransom": false, "cvss": 5.5, "epss": 0.0136, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-24" }, { "cve": "CVE-2024-53150", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Out-of-Bounds Read Vulnerability", "date": "2025-04-09", "ransom": false, "cvss": 7.1, "epss": 0.0135, "vckev": true, "euvd": false, "ra": 6, "due": "2025-04-30" }, { "cve": "CVE-2023-41990", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Code Execution Vulnerability", "date": "2024-01-08", "ransom": false, "cvss": 7.8, "epss": 0.0135, "vckev": true, "euvd": false, "ra": 3, "due": "2024-01-29" }, { "cve": "CVE-2026-20700", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Buffer Overflow Vulnerability", "date": "2026-02-12", "ransom": false, "cvss": 7.8, "epss": 0.0132, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-05" }, { "cve": "CVE-2025-35939", "vendor": "Craft CMS", "product": "Craft CMS", "name": "Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability", "date": "2025-06-02", "ransom": false, "cvss": 5.3, "epss": 0.0132, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-23" }, { "cve": "CVE-2020-0069", "vendor": "MediaTek", "product": "Multiple Chipsets", "name": "Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.013, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2025-15556", "vendor": "Notepad++", "product": "Notepad++", "name": "Notepad++ Download of Code Without Integrity Check Vulnerability", "date": "2026-02-12", "ransom": false, "cvss": 7.5, "epss": 0.0127, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-05" }, { "cve": "CVE-2025-68686", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability", "date": "2026-07-27", "ransom": false, "cvss": 5.9, "epss": 0.0126, "vckev": true, "euvd": false, "ra": 12, "due": "2026-08-10" }, { "cve": "CVE-2023-26083", "vendor": "Arm", "product": "Mali Graphics Processing Unit (GPU)", "name": "Arm Mali GPU Kernel Driver Information Disclosure Vulnerability", "date": "2023-04-07", "ransom": false, "cvss": 3.3, "epss": 0.0126, "vckev": true, "euvd": false, "ra": 2, "due": "2023-04-28" }, { "cve": "CVE-2025-38352", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability", "date": "2025-09-04", "ransom": false, "cvss": 7.8, "epss": 0.0125, "vckev": true, "euvd": false, "ra": 6, "due": "2025-09-25" }, { "cve": "CVE-2021-1905", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.0115, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2022-42827", "vendor": "Apple", "product": "iOS and iPadOS", "name": "Apple iOS and iPadOS Out-of-Bounds Write Vulnerability", "date": "2022-10-25", "ransom": false, "cvss": 7.8, "epss": 0.0114, "vckev": true, "euvd": false, "ra": 2, "due": "2022-11-15" }, { "cve": "CVE-2022-22674", "vendor": "Apple", "product": "macOS", "name": "Apple macOS Out-of-Bounds Read Vulnerability", "date": "2022-04-04", "ransom": false, "cvss": 5.5, "epss": 0.0113, "vckev": true, "euvd": false, "ra": 2, "due": "2022-04-25" }, { "cve": "CVE-2025-59374", "vendor": "ASUS", "product": "Live Update", "name": "ASUS Live Update Embedded Malicious Code Vulnerability", "date": "2025-12-17", "ransom": false, "cvss": 9.8, "epss": 0.0113, "vckev": true, "euvd": false, "ra": 6, "due": "2026-01-07" }, { "cve": "CVE-2021-25369", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Improper Access Control Vulnerability", "date": "2022-11-08", "ransom": false, "cvss": 5.5, "epss": 0.0112, "vckev": true, "euvd": false, "ra": 2, "due": "2022-11-29" }, { "cve": "CVE-2026-7473", "vendor": "Arista", "product": "Extensible Operating System", "name": "Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability", "date": "2026-06-09", "ransom": false, "cvss": 5.8, "epss": 0.0111, "vckev": true, "euvd": false, "ra": 6, "due": "2026-06-23" }, { "cve": "CVE-2022-22706", "vendor": "Arm", "product": "Mali Graphics Processing Unit (GPU)", "name": "Arm Mali GPU Kernel Driver Unspecified Vulnerability", "date": "2023-03-30", "ransom": false, "cvss": 7.8, "epss": 0.0109, "vckev": true, "euvd": false, "ra": 2, "due": "2023-04-20" }, { "cve": "CVE-2023-36851", "vendor": "Juniper", "product": "Junos OS", "name": "Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability", "date": "2023-11-13", "ransom": false, "cvss": 5.3, "epss": 0.0109, "vckev": true, "euvd": false, "ra": 3, "due": "2023-11-17" }, { "cve": "CVE-2026-21385", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Memory Corruption Vulnerability", "date": "2026-03-03", "ransom": false, "cvss": 7.8, "epss": 0.0107, "vckev": true, "euvd": false, "ra": 6, "due": "2026-03-24" }, { "cve": "CVE-2025-43200", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Unspecified Vulnerability", "date": "2025-06-16", "ransom": false, "cvss": 4.2, "epss": 0.0106, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-07" }, { "cve": "CVE-2021-23874", "vendor": "McAfee", "product": "McAfee Total Protection (MTP)", "name": "McAfee Total Protection (MTP) Improper Privilege Management Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.0103, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2026-63077", "vendor": "JetBrains", "product": "TeamCity", "name": "JetBrains TeamCity Deserialization of Untrusted Data Vulnerability", "date": "2026-08-05", "ransom": false, "cvss": 9.8, "epss": 0.0101, "vckev": true, "euvd": true, "ra": 12, "due": "2026-08-08" }, { "cve": "CVE-2025-22225", "vendor": "VMware", "product": "ESXi", "name": "VMware ESXi Arbitrary Write Vulnerability", "date": "2025-03-04", "ransom": true, "cvss": 8.2, "epss": 0.01, "vckev": true, "euvd": false, "ra": 6, "due": "2025-03-25" }, { "cve": "CVE-2023-42824", "vendor": "Apple", "product": "iOS and iPadOS", "name": "Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability", "date": "2023-10-05", "ransom": false, "cvss": 7.8, "epss": 0.0094, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-26" }, { "cve": "CVE-2023-4346", "vendor": "KNX Association", "product": "KNX Protocol Connection Authorization Option 1", "name": "KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability", "date": "2026-07-15", "ransom": false, "cvss": 7.5, "epss": 0.0091, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-29" }, { "cve": "CVE-2023-33107", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Integer Overflow Vulnerability", "date": "2023-12-05", "ransom": false, "cvss": 7.8, "epss": 0.0089, "vckev": true, "euvd": false, "ra": 28, "due": "2023-12-26" }, { "cve": "CVE-2021-25370", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Memory Corruption Vulnerability", "date": "2022-11-08", "ransom": false, "cvss": 4.4, "epss": 0.0089, "vckev": true, "euvd": false, "ra": 2, "due": "2022-11-29" }, { "cve": "CVE-2026-16812", "vendor": "Arista", "product": "VeloCloud Orchestrator", "name": "Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability", "date": "2026-07-27", "ransom": false, "cvss": 10, "epss": 0.0088, "vckev": true, "euvd": false, "ra": 12, "due": "2026-07-30" }, { "cve": "CVE-2021-44168", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Arbitrary File Download", "date": "2021-12-10", "ransom": false, "cvss": 7.8, "epss": 0.0087, "vckev": true, "euvd": false, "ra": 2, "due": "2021-12-24" }, { "cve": "CVE-2023-33106", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability", "date": "2023-12-05", "ransom": false, "cvss": 7.8, "epss": 0.0085, "vckev": true, "euvd": false, "ra": 28, "due": "2023-12-26" }, { "cve": "CVE-2025-27038", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Use-After-Free Vulnerability", "date": "2025-06-03", "ransom": false, "cvss": 7.5, "epss": 0.0083, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-24" }, { "cve": "CVE-2020-9859", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 7.8, "epss": 0.0083, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-03" }, { "cve": "CVE-2021-0920", "vendor": "Android", "product": "Kernel", "name": "Android Kernel Race Condition Vulnerability", "date": "2022-05-23", "ransom": false, "cvss": 6.4, "epss": 0.0081, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-13" }, { "cve": "CVE-2024-50302", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Use of Uninitialized Resource Vulnerability", "date": "2025-03-04", "ransom": false, "cvss": 5.5, "epss": 0.0081, "vckev": true, "euvd": false, "ra": 6, "due": "2025-03-25" }, { "cve": "CVE-2021-25372", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Improper Boundary Check Vulnerability", "date": "2023-06-29", "ransom": false, "cvss": 6.7, "epss": 0.008, "vckev": true, "euvd": false, "ra": 40, "due": "2023-07-20" }, { "cve": "CVE-2021-25371", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Unspecified Vulnerability", "date": "2023-06-29", "ransom": false, "cvss": 6.7, "epss": 0.008, "vckev": true, "euvd": false, "ra": 40, "due": "2023-07-20" }, { "cve": "CVE-2026-20316", "vendor": "Cisco", "product": "Secure Firewall Management Center (FMC)", "name": "Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability", "date": "2026-07-29", "ransom": false, "cvss": 5.3, "epss": 0.0079, "vckev": true, "euvd": false, "ra": 12, "due": "2026-08-01" }, { "cve": "CVE-2025-1976", "vendor": "Broadcom", "product": "Brocade Fabric OS", "name": "Broadcom Brocade Fabric OS Code Injection Vulnerability", "date": "2025-04-28", "ransom": false, "cvss": 6.7, "epss": 0.0078, "vckev": true, "euvd": false, "ra": 6, "due": "2025-05-19" }, { "cve": "CVE-2021-1048", "vendor": "Android", "product": "Kernel", "name": "Android Kernel Use-After-Free Vulnerability", "date": "2022-05-23", "ransom": false, "cvss": 7.8, "epss": 0.0078, "vckev": true, "euvd": false, "ra": 2, "due": "2022-06-13" }, { "cve": "CVE-2025-21479", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability", "date": "2025-06-03", "ransom": false, "cvss": 8.6, "epss": 0.0078, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-24" }, { "cve": "CVE-2024-4610", "vendor": "Arm", "product": "Mali GPU Kernel Driver", "name": "Arm Mali GPU Kernel Driver Use-After-Free Vulnerability", "date": "2024-06-12", "ransom": false, "cvss": 7.8, "epss": 0.0076, "vckev": true, "euvd": false, "ra": 3, "due": "2024-07-03" }, { "cve": "CVE-2021-39793", "vendor": "Google", "product": "Pixel", "name": "Google Pixel Out-of-Bounds Write Vulnerability", "date": "2022-04-11", "ransom": false, "cvss": 7.8, "epss": 0.0074, "vckev": true, "euvd": false, "ra": 2, "due": "2022-05-02" }, { "cve": "CVE-2024-43093", "vendor": "Android", "product": "Framework", "name": "Android Framework Privilege Escalation Vulnerability", "date": "2024-11-07", "ransom": false, "cvss": 7.3, "epss": 0.0071, "vckev": true, "euvd": false, "ra": 3, "due": "2024-11-28" }, { "cve": "CVE-2019-8526", "vendor": "Apple", "product": "macOS", "name": "Apple macOS Use-After-Free Vulnerability", "date": "2023-04-17", "ransom": false, "cvss": 7.8, "epss": 0.007, "vckev": true, "euvd": false, "ra": 2, "due": "2023-05-08" }, { "cve": "CVE-2023-33063", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Use-After-Free Vulnerability", "date": "2023-12-05", "ransom": false, "cvss": 7.8, "epss": 0.007, "vckev": true, "euvd": false, "ra": 28, "due": "2023-12-26" }, { "cve": "CVE-2024-29748", "vendor": "Android", "product": "Pixel", "name": "Android Pixel Privilege Escalation Vulnerability", "date": "2024-04-04", "ransom": false, "cvss": 7.8, "epss": 0.0068, "vckev": true, "euvd": false, "ra": 3, "due": "2024-04-25" }, { "cve": "CVE-2024-43047", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Use-After-Free Vulnerability", "date": "2024-10-08", "ransom": false, "cvss": 7.8, "epss": 0.0067, "vckev": true, "euvd": false, "ra": 28, "due": "2024-10-29" }, { "cve": "CVE-2021-25487", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Out-of-Bounds Read Vulnerability", "date": "2023-06-29", "ransom": false, "cvss": 7.8, "epss": 0.0063, "vckev": true, "euvd": false, "ra": 40, "due": "2023-07-20" }, { "cve": "CVE-2025-48543", "vendor": "Android", "product": "Runtime", "name": "Android Runtime Use-After-Free Vulnerability", "date": "2025-09-04", "ransom": false, "cvss": 8.8, "epss": 0.0053, "vckev": true, "euvd": false, "ra": 6, "due": "2025-09-25" }, { "cve": "CVE-2021-25489", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Improper Input Validation Vulnerability", "date": "2023-06-29", "ransom": false, "cvss": 5.5, "epss": 0.0053, "vckev": true, "euvd": false, "ra": 40, "due": "2023-07-20" }, { "cve": "CVE-2021-1906", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability", "date": "2021-11-03", "ransom": false, "cvss": 5.5, "epss": 0.0052, "vckev": true, "euvd": false, "ra": 2, "due": "2021-11-17" }, { "cve": "CVE-2026-18556", "vendor": "N-able", "product": "N-central", "name": "N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability", "date": "2026-08-04", "ransom": false, "cvss": 7.4, "epss": 0.0049, "vckev": true, "euvd": false, "ra": 12, "due": "2026-08-07" }, { "cve": "CVE-2022-48618", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2024-01-31", "ransom": false, "cvss": 7, "epss": 0.0049, "vckev": true, "euvd": false, "ra": 3, "due": "2024-02-21" }, { "cve": "CVE-2024-29745", "vendor": "Android", "product": "Pixel", "name": "Android Pixel Information Disclosure Vulnerability", "date": "2024-04-04", "ransom": false, "cvss": 5.5, "epss": 0.0048, "vckev": true, "euvd": false, "ra": 3, "due": "2024-04-25" }, { "cve": "CVE-2022-22071", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Use-After-Free Vulnerability", "date": "2023-12-05", "ransom": false, "cvss": 7.8, "epss": 0.0046, "vckev": true, "euvd": false, "ra": 28, "due": "2023-12-26" }, { "cve": "CVE-2025-21480", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability", "date": "2025-06-03", "ransom": false, "cvss": 8.6, "epss": 0.0043, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-24" }, { "cve": "CVE-2025-43520", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Classic Buffer Overflow Vulnerability", "date": "2026-03-20", "ransom": false, "cvss": 5.5, "epss": 0.0042, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-03" }, { "cve": "CVE-2025-47729", "vendor": "TeleMessage", "product": "TM SGNL", "name": "TeleMessage TM SGNL Hidden Functionality Vulnerability", "date": "2025-05-12", "ransom": false, "cvss": 4.9, "epss": 0.0041, "vckev": true, "euvd": false, "ra": 6, "due": "2025-06-02" }, { "cve": "CVE-2021-25394", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Race Condition Vulnerability", "date": "2023-06-29", "ransom": false, "cvss": 6.4, "epss": 0.004, "vckev": true, "euvd": false, "ra": 40, "due": "2023-07-20" }, { "cve": "CVE-2022-22265", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Use-After-Free Vulnerability", "date": "2023-09-18", "ransom": false, "cvss": 7.8, "epss": 0.0039, "vckev": true, "euvd": false, "ra": 3, "due": "2023-10-09" }, { "cve": "CVE-2021-25395", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Race Condition Vulnerability", "date": "2023-06-29", "ransom": false, "cvss": 6.4, "epss": 0.0037, "vckev": true, "euvd": false, "ra": 40, "due": "2023-07-20" }, { "cve": "CVE-2025-48928", "vendor": "TeleMessage", "product": "TM SGNL", "name": "TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability", "date": "2025-07-01", "ransom": false, "cvss": 4, "epss": 0.0037, "vckev": true, "euvd": false, "ra": 6, "due": "2025-07-22" }, { "cve": "CVE-2025-43510", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Improper Locking Vulnerability", "date": "2026-03-20", "ransom": false, "cvss": 7.8, "epss": 0.0036, "vckev": true, "euvd": false, "ra": 6, "due": "2026-04-03" }, { "cve": "CVE-2023-21237", "vendor": "Android", "product": "Pixel", "name": "Android Pixel Information Disclosure Vulnerability", "date": "2024-03-05", "ransom": false, "cvss": 5.5, "epss": 0.0026, "vckev": true, "euvd": false, "ra": 3, "due": "2024-03-26" }, { "cve": "CVE-2025-48633", "vendor": "Android", "product": "Framework", "name": "Android Framework Information Disclosure Vulnerability", "date": "2025-12-02", "ransom": false, "cvss": 5.5, "epss": 0.0026, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-23" }, { "cve": "CVE-2025-48572", "vendor": "Android", "product": "Framework", "name": "Android Framework Privilege Escalation Vulnerability", "date": "2025-12-02", "ransom": false, "cvss": 7.8, "epss": 0.0025, "vckev": true, "euvd": false, "ra": 6, "due": "2025-12-23" } ] }