CISA Known Exploited Vulnerabilities

1,779 results · Feed

• High 7.8
  CVE-2019-1214 Exploited

  An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Sep 11, 2019

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2019-4716 Exploited Public exploit Scanner template EPSS 86%

  IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated us…

  IBM Planning Analytics
  Dec 18, 2019

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-17026 Exploited Public exploit EPSS 46%

  Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Mar 2, 2020

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-17558 Exploited Public exploit Scanner template EPSS 99%

  Improper Input Validation in Apache Solr

  Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configse…

  org.apache.solr:solr-core lucene-solr Debian Maven
  Dec 30, 2019

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-13608 Exploited · Ransomware Scanner template EPSS 30%

  Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE a…

  Aug 29, 2019

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-6223 Exploited

  A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. …

  Apple macOS iOS macOS iOS
  Mar 5, 2019

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-3398 Exploited Public exploit Scanner template EPSS 97%

  Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote a…

  Atlassian Confluence Web / CMS
  Apr 18, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-3396 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from ver…

  Atlassian Confluence Server Web / CMS
  Mar 25, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-2215 Exploited Public exploit EPSS 72%

  A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interact…

  linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
  Oct 11, 2019

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-8394 Exploited Public exploit EPSS 63%

  Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via …

  Feb 17, 2019

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-15949 Exploited Public exploit EPSS 77%

  Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios…

  Sep 5, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-15752 Exploited Public exploit EPSS 49%

  Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-…

  Aug 28, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-19781 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. T…

  Dec 27, 2019

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-19356 Exploited Public exploit EPSS 28%

  Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page.…

  Feb 7, 2020

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-9082 Exploited Public exploit Scanner template EPSS 97%

  ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public…

  Feb 24, 2019

  KEV Nov 3, 2021
• Medium 6.1
  CVE-2019-9978 Exploited Public exploit Scanner template EPSS 73%

  The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_opti…

  Mar 24, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-5544 Exploited · Ransomware Public exploit Scanner template EPSS 98%

  OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity o…

  openslp-dfsg openslp Virtualization Ubuntu Azure Linux
  Dec 6, 2019

  KEV Nov 3, 2021
• Medium 6.5
  CVE-2019-5591 Exploited · Ransomware Public exploit Scanner template EPSS 19%

  A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept …

  Fortinet Fortinet FortiOS Network devices
  Aug 14, 2020

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-20085 Exploited Public exploit Scanner template EPSS 96%

  TVT NVMS-1000 devices allow GET /.. Directory Traversal

  Dec 30, 2019

  KEV Nov 3, 2021