Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2019-1040 Windows NTLM Tampering HIGH N/A 48.04% cvelistv5 2020-10-20
cve-2018-4939 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability HIGH N/A 61.78% cvelistv5 2020-10-20
cve-2017-6327 Symantec Messaging Gateway Remote Code Execution Vulnerability HIGH N/A 35.91% cvelistv5 2020-10-20
cve-2017-11357 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability CRITICAL 9.8 77.68% cvelistv5 2020-10-20
cve-2015-4852 Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability HIGH N/A 94.99% cvelistv5 2020-10-20
cve-2020-15999 SUSE CVE CVE-2020-15999 HIGH 8.1 63.89% cvelistv5 2026-10-11
cve-2020-1054 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.0 53.88% cvelistv5 2020-10-19
cve-2020-36725 templateinvaders ti_woocommerce_wishlist Missing Authorization HIGH 8.8 1.14% cvelistv5 2020-10-16
cve-2018-8389 Microsoft Internet Explorer Out-of-bounds Write CRITICAL N/A 30.35% cvelistv5 2020-10-15
cve-2018-12808 Adobe acrobat_dc Out-of-bounds Write CRITICAL N/A 7.42% cvelistv5 2020-10-15
cve-2013-2618 network-weathermap .network_weathermap Improper Neutralization of Input During Web Page Generation CRITICAL N/A 4.68% cvelistv5 2020-10-15
cve-2020-1956 Apache Kylin OS Command Injection Vulnerability HIGH N/A 97.39% cvelistv5 2020-10-14
cve-2019-7276 Optergy Proton/Enterprise Remote Root Code Execution HIGH N/A 93.38% cvelistv5 2020-10-14
cve-2019-19356 Netis WF2419 Devices Remote Code Execution Vulnerability HIGH N/A 28.07% cvelistv5 2020-10-14
cve-2019-10655 Grandstream gac2500_firmware Improper Neutralization of Special Elements used in an OS Command HIGH N/A 15.47% cvelistv5 2020-10-14
cve-2018-19276 openmrs openmrs Deserialization of Untrusted Data HIGH N/A 98.74% cvelistv5 2020-10-14
cve-2018-13023 mi miwifi_os Improper Neutralization of Special Elements used in an OS Command HIGH N/A 23.96% cvelistv5 2020-10-14
cve-2013-2251 SUSE CVE CVE-2013-2251 UNKNOWN N/A 100.00% cvelistv5 2023-02-15
cve-2011-3587 CVE-2011-3587 HIGH N/A 78.08% cvelistv5
cve-2020-15227 nette application Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A 34.42% cvelistv5 2020-10-12
cve-2020-27481 goodlayers good_learning_management_system Improper Neutralization of Special Elements used in an SQL Command HIGH N/A 9.76% cvelistv5 2020-10-10
cve-2020-28650 wpbakery page_builder Improper Neutralization of Input During Web Page Generation MEDIUM 6.4 0.70% cvelistv5 2020-10-07
cve-2020-26876 wpcoursesplugin wp-courses Missing Authentication for Critical Functionality HIGH N/A 10.55% cvelistv5 2020-10-07
cve-2020-0968 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability HIGH 7.5 30.68% cvelistv5 2020-10-02
cve-2020-10713 GNU grub2 Buffer Copy without Checking Size of Input CRITICAL N/A 1.71% cvelistv5 2020-10-01
cve-2018-8140 Cortana Elevation of Privilege CRITICAL N/A 1.74% cvelistv5 2020-10-01
cve-2018-14665 x.org x_server Incorrect Authorization CRITICAL N/A 27.24% cvelistv5 2020-10-01
cve-2020-1472 Microsoft Netlogon Privilege Escalation Vulnerability CRITICAL N/A 99.39% cvelistv5 2020-09-24
cve-2023-25158 geotools geotools Improper Neutralization of Special Elements used in an SQL Command CRITICAL 9.8 N/A cvelistv5 2020-09-22
cve-2023-25157 OSGeo GeoServer Improper Neutralization of Special Elements used in an SQL Command CRITICAL 9.8 N/A cvelistv5 2020-09-22