{"title":"netVigilance KEV catalog index","source":"CISA Known Exploited Vulnerabilities catalog","catalogVersion":"2026.09.09","dateReleased":"2026-09-09T19:00:50.2591Z","generatedAt":"2026-09-10T04:57:41.601Z","count":1703,"vulnerabilities":[{"cveID":"CVE-2026-87491","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out of Bounds Write Vulnerability","dateAdded":"2026-09-09","dueDate":"2026-09-23","knownRansomware":false,"cvss":8.8,"epss":0.00291,"status":"active","url":"https://www.netvigilance.com/kev/cve-2026-87491/"},{"cveID":"CVE-2026-20079","vendor":"Cisco","product":"Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management","vulnerabilityName":"Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2026-09-09","dueDate":"2026-09-12","knownRansomware":false,"cvss":10,"epss":0.35946,"status":"active","url":"https://www.netvigilance.com/kev/cve-2026-20079/"},{"cveID":"CVE-2026-19490","vendor":"Citrix","product":"NetScaler","vulnerabilityName":"Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2026-09-09","dueDate":"2026-09-12","knownRansomware":false,"cvss":9.3,"epss":0.03372,"status":"active","url":"https://www.netvigilance.com/kev/cve-2026-19490/"},{"cveID":"CVE-2025-25249","vendor":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability","dateAdded":"2026-09-09","dueDate":"2026-09-12","knownRansomware":false,"cvss":9.8,"epss":0.00759,"status":"active","url":"https://www.netvigilance.com/kev/cve-2025-25249/"},{"cveID":"CVE-2026-86218","vendor":"N-able","product":"N-central","vulnerabilityName":"N-able N-central Static Code Injection Vulnerability","dateAdded":"2026-09-08","dueDate":"2026-09-11","knownRansomware":false,"cvss":10,"epss":0.00744,"status":"active","url":"https://www.netvigilance.com/kev/cve-2026-86218/"},{"cveID":"CVE-2026-85880","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Heap-Based Buffer Overflow Vulnerability","dateAdded":"2026-09-08","dueDate":"2026-09-22","knownRansomware":false,"cvss":7.8,"epss":0.00572,"status":"active","url":"https://www.netvigilance.com/kev/cve-2026-85880/"},{"cveID":"CVE-2026-81963","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Link Following Vulnerability","dateAdded":"2026-09-08","dueDate":"2026-09-22","knownRansomware":false,"cvss":7.8,"epss":0.00631,"status":"active","url":"https://www.netvigilance.com/kev/cve-2026-81963/"},{"cveID":"CVE-2026-75650","vendor":"Adobe","product":"Commerce and Magento","vulnerabilityName":"Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability","dateAdded":"2026-09-08","dueDate":"2026-09-11","knownRansomware":false,"cvss":10,"epss":0.02148,"status":"active","url":"https://www.netvigilance.com/kev/cve-2026-75650/"},{"cveID":"CVE-2026-85046","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2026-09-04","dueDate":"2026-09-18","knownRansomware":false,"cvss":8.8,"epss":0.01427,"status":"active","url":"https://www.netvigilance.com/kev/cve-2026-85046/"},{"cveID":"CVE-2026-9586","vendor":"Sangoma","product":"Switchvox","vulnerabilityName":"Sangoma Switchvox SQL Injection Vulnerability","dateAdded":"2026-09-02","dueDate":"2026-09-05","knownRansomware":false,"cvss":9.3,"epss":0.11845,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-9586/"},{"cveID":"CVE-2026-83549","vendor":"SonicWall","product":"SMA1000 Appliances","vulnerabilityName":"SonicWall SMA1000 Appliances OS Command Injection Vulnerability","dateAdded":"2026-09-02","dueDate":"2026-09-05","knownRansomware":false,"cvss":7.8,"epss":0.13843,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-83549/"},{"cveID":"CVE-2026-83548","vendor":"SonicWall","product":"SMA1000 Appliances","vulnerabilityName":"SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","dateAdded":"2026-09-02","dueDate":"2026-09-05","knownRansomware":false,"cvss":10,"epss":0.07447,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-83548/"},{"cveID":"CVE-2026-82329","vendor":"JFrog","product":"Artifactory","vulnerabilityName":"JFrog Artifactory Improper Authentication Vulnerability","dateAdded":"2026-09-02","dueDate":"2026-09-05","knownRansomware":false,"cvss":9.8,"epss":0.07666,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-82329/"},{"cveID":"CVE-2026-59822","vendor":"BerriAI","product":"LiteLLM","vulnerabilityName":"BerriAI LiteLLM Improper Authentication Vulnerability","dateAdded":"2026-09-02","dueDate":"2026-09-16","knownRansomware":false,"cvss":8.8,"epss":0.0087,"status":"active","url":"https://www.netvigilance.com/kev/cve-2026-59822/"},{"cveID":"CVE-2026-49869","vendor":"Kestra","product":"Kestra OSS","vulnerabilityName":"Kestra OSS OS Command Injection Vulnerability","dateAdded":"2026-09-02","dueDate":"2026-09-05","knownRansomware":false,"cvss":10,"epss":0.01917,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-49869/"},{"cveID":"CVE-2026-48710","vendor":"Kludex","product":"Starlette","vulnerabilityName":"Kludex Starlette HTTP Request/Response Smuggling Vulnerability","dateAdded":"2026-09-02","dueDate":"2026-09-16","knownRansomware":false,"cvss":6.5,"epss":0.36257,"status":"active","url":"https://www.netvigilance.com/kev/cve-2026-48710/"},{"cveID":"CVE-2026-82078","vendor":"PaperCut","product":"NG/MF","vulnerabilityName":"PaperCut NG/MF Unsafe Reflection Vulnerability","dateAdded":"2026-08-31","dueDate":"2026-09-14","knownRansomware":false,"cvss":9.4,"epss":0.01691,"status":"active","url":"https://www.netvigilance.com/kev/cve-2026-82078/"},{"cveID":"CVE-2026-81578","vendor":"PaperCut","product":"NG/MF","vulnerabilityName":"PaperCut NG/MF Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-08-31","dueDate":"2026-09-14","knownRansomware":false,"cvss":8.8,"epss":0.01617,"status":"active","url":"https://www.netvigilance.com/kev/cve-2026-81578/"},{"cveID":"CVE-2026-66384","vendor":"JFrog","product":"Artifactory","vulnerabilityName":"JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability","dateAdded":"2026-08-27","dueDate":"2026-09-10","knownRansomware":false,"cvss":5.3,"epss":0.00579,"status":"active","url":"https://www.netvigilance.com/kev/cve-2026-66384/"},{"cveID":"CVE-2026-53362","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Unspecified Vulnerability","dateAdded":"2026-08-27","dueDate":"2026-08-30","knownRansomware":false,"cvss":7.8,"epss":0.0051,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-53362/"},{"cveID":"CVE-2023-49105","vendor":"ownCloud","product":"ownCloud","vulnerabilityName":"ownCloud Improper Authentication Vulnerability","dateAdded":"2026-08-27","dueDate":"2026-08-30","knownRansomware":false,"cvss":9.8,"epss":0.43205,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-49105/"},{"cveID":"CVE-2026-8452","vendor":"Citrix","product":"NetScaler ADC and NetScaler Gateway","vulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","dateAdded":"2026-08-26","dueDate":"2026-08-29","knownRansomware":false,"cvss":8.8,"epss":0.01606,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-8452/"},{"cveID":"CVE-2022-0995","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Out-of-Bounds Write Vulnerability","dateAdded":"2026-08-26","dueDate":"2026-09-09","knownRansomware":false,"cvss":7.8,"epss":0.09518,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-0995/"},{"cveID":"CVE-2021-23758","vendor":"Ajax.NET Professional","product":"Ajax.NET Professional","vulnerabilityName":"Ajax.NET Professional Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-08-26","dueDate":"2026-09-09","knownRansomware":false,"cvss":9.8,"epss":0.83633,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-23758/"},{"cveID":"CVE-2019-1068","vendor":"Microsoft","product":"SQL Server","vulnerabilityName":"Microsoft SQL Server Remote Code Execution Vulnerability","dateAdded":"2026-08-26","dueDate":"2026-08-29","knownRansomware":false,"cvss":8.8,"epss":0.52845,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1068/"},{"cveID":"CVE-2015-5287","vendor":"Red Hat","product":"Automatic Bug Reporting Tool","vulnerabilityName":"Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability","dateAdded":"2026-08-26","dueDate":"2026-09-09","knownRansomware":false,"cvss":7.8,"epss":0.04962,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-5287/"},{"cveID":"CVE-2015-3246","vendor":"Red Hat","product":"Libuser","vulnerabilityName":"Red Hat Libuser Race Condition Vulnerability","dateAdded":"2026-08-26","dueDate":"2026-09-09","knownRansomware":false,"cvss":5.1,"epss":0.08799,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-3246/"},{"cveID":"CVE-2026-60004","vendor":"Gitea","product":"Gitea","vulnerabilityName":"Gitea Code Injection Vulnerability","dateAdded":"2026-08-25","dueDate":"2026-08-28","knownRansomware":false,"cvss":9.8,"epss":0.86777,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-60004/"},{"cveID":"CVE-2026-21962","vendor":"Oracle","product":"HTTP Server and Oracle Weblogic Server Proxy Plug-in","vulnerabilityName":"Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability","dateAdded":"2026-08-24","dueDate":"2026-08-27","knownRansomware":false,"cvss":10,"epss":0.4202,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-21962/"},{"cveID":"CVE-2026-73570","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability","dateAdded":"2026-08-21","dueDate":"2026-08-24","knownRansomware":false,"cvss":8.9,"epss":0.32383,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-73570/"},{"cveID":"CVE-2026-72530","vendor":"TrueConf","product":"Server","vulnerabilityName":"TrueConf Server Code Injection Vulnerability","dateAdded":"2026-08-20","dueDate":"2026-09-03","knownRansomware":false,"cvss":9.5,"epss":0.01827,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-72530/"},{"cveID":"CVE-2026-72529","vendor":"TrueConf","product":"Server","vulnerabilityName":"TrueConf Server Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-08-20","dueDate":"2026-08-23","knownRansomware":false,"cvss":9.3,"epss":0.01554,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-72529/"},{"cveID":"CVE-2026-64849","vendor":"MLflow","product":"MLflow","vulnerabilityName":"MLflow Server-Side Request Forgery Vulnerability","dateAdded":"2026-08-19","dueDate":"2026-09-02","knownRansomware":false,"cvss":9.3,"epss":0.1641,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-64849/"},{"cveID":"CVE-2026-65400","vendor":"Apple","product":"macOS","vulnerabilityName":"Apple macOS Improper Authentication Vulnerability","dateAdded":"2026-08-18","dueDate":"2026-08-21","knownRansomware":false,"cvss":9.8,"epss":0.09905,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-65400/"},{"cveID":"CVE-2026-59310","vendor":"Broadcom","product":"VMware vCenter","vulnerabilityName":"Broadcom VMware vCenter Path Traversal Vulnerability","dateAdded":"2026-08-18","dueDate":"2026-08-21","knownRansomware":false,"cvss":9.8,"epss":0.45878,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-59310/"},{"cveID":"CVE-2026-55040","vendor":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Weak Authentication Vulnerability","dateAdded":"2026-08-18","dueDate":"2026-08-21","knownRansomware":false,"cvss":9.1,"epss":0.39652,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-55040/"},{"cveID":"CVE-2026-33824","vendor":"Microsoft","product":"Internet Key Exchange (IKE) Service Extensions","vulnerabilityName":"Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability","dateAdded":"2026-08-18","dueDate":"2026-08-21","knownRansomware":false,"cvss":9.8,"epss":0.72695,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-33824/"},{"cveID":"CVE-2025-62593","vendor":"Ray-Project","product":"Ray","vulnerabilityName":"Ray-Project Ray Code Injection Vulnerability","dateAdded":"2026-08-17","dueDate":"2026-08-20","knownRansomware":false,"cvss":9.4,"epss":0.16888,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-62593/"},{"cveID":"CVE-2026-72898","vendor":"Metabase","product":"Metabase","vulnerabilityName":"Metabase SQL Injection Vulnerability","dateAdded":"2026-08-11","dueDate":"2026-08-14","knownRansomware":false,"cvss":10,"epss":0.94217,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-72898/"},{"cveID":"CVE-2026-68820","vendor":"Microsoft","product":"Windows Ancillary Function Driver for WinSock","vulnerabilityName":"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","dateAdded":"2026-08-11","dueDate":"2026-08-25","knownRansomware":false,"cvss":7,"epss":0.06184,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-68820/"},{"cveID":"CVE-2026-20349","vendor":"Cisco","product":"Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)","vulnerabilityName":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability","dateAdded":"2026-08-11","dueDate":"2026-08-14","knownRansomware":false,"cvss":8.6,"epss":0.02213,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20349/"},{"cveID":"CVE-2026-8037","vendor":"Progress","product":"LoadMaster","vulnerabilityName":"Progress LoadMaster Command Injection Vulnerability","dateAdded":"2026-08-07","dueDate":"2026-08-10","knownRansomware":false,"cvss":9.8,"epss":0.99571,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-8037/"},{"cveID":"CVE-2026-63077","vendor":"JetBrains","product":"TeamCity","vulnerabilityName":"JetBrains TeamCity Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-08-05","dueDate":"2026-08-08","knownRansomware":false,"cvss":9.8,"epss":0.86518,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-63077/"},{"cveID":"CVE-2026-9198","vendor":"IBM","product":"Langflow","vulnerabilityName":"IBM Langflow Code Injection Vulnerability","dateAdded":"2026-08-04","dueDate":"2026-08-07","knownRansomware":false,"cvss":9.8,"epss":0.60597,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-9198/"},{"cveID":"CVE-2026-34486","vendor":"Apache","product":"Tomcat","vulnerabilityName":"Apache Tomcat Missing Encryption of Sensitive Data Vulnerability","dateAdded":"2026-08-04","dueDate":"2026-08-07","knownRansomware":false,"cvss":7.5,"epss":0.98616,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-34486/"},{"cveID":"CVE-2026-18556","vendor":"N-able","product":"N-central","vulnerabilityName":"N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2026-08-04","dueDate":"2026-08-07","knownRansomware":false,"cvss":8.2,"epss":0.40158,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-18556/"},{"cveID":"CVE-2026-18577","vendor":"N-able","product":"N-central","vulnerabilityName":"N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2026-08-03","dueDate":"2026-08-06","knownRansomware":false,"cvss":8.2,"epss":0.54068,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-18577/"},{"cveID":"CVE-2026-20316","vendor":"Cisco","product":"Secure Firewall Management Center (FMC)","vulnerabilityName":"Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability","dateAdded":"2026-07-29","dueDate":"2026-08-01","knownRansomware":false,"cvss":5.3,"epss":0.09816,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20316/"},{"cveID":"CVE-2026-16812","vendor":"Arista","product":"VeloCloud Orchestrator","vulnerabilityName":"Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability","dateAdded":"2026-07-27","dueDate":"2026-07-30","knownRansomware":false,"cvss":10,"epss":0.01568,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-16812/"},{"cveID":"CVE-2025-68686","vendor":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","dateAdded":"2026-07-27","dueDate":"2026-08-10","knownRansomware":false,"cvss":5.9,"epss":0.29601,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-68686/"},{"cveID":"CVE-2026-50522","vendor":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-07-22","dueDate":"2026-07-25","knownRansomware":false,"cvss":9.8,"epss":0.84606,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-50522/"},{"cveID":"CVE-2026-16232","vendor":"Check Point","product":"SmartConsole","vulnerabilityName":"Check Point SmartConsole Improper Authentication Vulnerability","dateAdded":"2026-07-22","dueDate":"2026-07-25","knownRansomware":false,"cvss":9.3,"epss":0.72051,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-16232/"},{"cveID":"CVE-2026-63030","vendor":"WordPress","product":"Core","vulnerabilityName":"WordPress Core Interpretation Conflict Vulnerability","dateAdded":"2026-07-21","dueDate":"2026-07-24","knownRansomware":false,"cvss":9.8,"epss":0.97271,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-63030/"},{"cveID":"CVE-2026-60137","vendor":"WordPress","product":"Core","vulnerabilityName":"WordPress Core SQL Injection Vulnerability","dateAdded":"2026-07-21","dueDate":"2026-08-04","knownRansomware":false,"cvss":5.9,"epss":0.78305,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-60137/"},{"cveID":"CVE-2026-0770","vendor":"Langflow","product":"Langflow","vulnerabilityName":"Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability","dateAdded":"2026-07-21","dueDate":"2026-07-24","knownRansomware":false,"cvss":9.8,"epss":0.63417,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-0770/"},{"cveID":"CVE-2021-27137","vendor":"DD-WRT","product":"DD-WRT","vulnerabilityName":"DD-WRT Stack-Based Buffer Overflow Vulnerability","dateAdded":"2026-07-21","dueDate":"2026-07-24","knownRansomware":false,"cvss":8.1,"epss":0.03995,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-27137/"},{"cveID":"CVE-2026-58644","vendor":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-07-16","dueDate":"2026-07-19","knownRansomware":false,"cvss":9.8,"epss":0.15873,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-58644/"},{"cveID":"CVE-2026-39808","vendor":"Fortinet","product":"FortiSandbox","vulnerabilityName":"Fortinet FortiSandbox OS Command Injection Vulnerability","dateAdded":"2026-07-16","dueDate":"2026-07-19","knownRansomware":false,"cvss":9.8,"epss":0.92819,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-39808/"},{"cveID":"CVE-2026-25089","vendor":"Fortinet","product":"FortiSandbox","vulnerabilityName":"Fortinet FortiSandbox OS Command Injection Vulnerability","dateAdded":"2026-07-16","dueDate":"2026-07-19","knownRansomware":false,"cvss":9.8,"epss":0.76112,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-25089/"},{"cveID":"CVE-2026-46817","vendor":"Oracle","product":"E-Business Suite","vulnerabilityName":"Oracle E-Business Suite Improper Privilege Management Vulnerability","dateAdded":"2026-07-15","dueDate":"2026-07-18","knownRansomware":false,"cvss":9.8,"epss":0.13017,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-46817/"},{"cveID":"CVE-2023-4346","vendor":"KNX Association","product":"KNX Protocol Connection Authorization Option 1","vulnerabilityName":"KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability","dateAdded":"2026-07-15","dueDate":"2026-07-29","knownRansomware":false,"cvss":7.5,"epss":0.01294,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-4346/"},{"cveID":"CVE-2026-56164","vendor":"Microsoft","product":"SharePoint Server","vulnerabilityName":"Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-07-14","dueDate":"2026-07-17","knownRansomware":false,"cvss":9.8,"epss":0.26636,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-56164/"},{"cveID":"CVE-2026-56155","vendor":"Microsoft","product":"Active Directory Federation Services","vulnerabilityName":"Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability","dateAdded":"2026-07-14","dueDate":"2026-07-28","knownRansomware":false,"cvss":7.8,"epss":0.00346,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-56155/"},{"cveID":"CVE-2026-15410","vendor":"SonicWall","product":"SMA1000 Appliances","vulnerabilityName":"SonicWall SMA1000 Appliances Code Injection Vulnerability","dateAdded":"2026-07-14","dueDate":"2026-07-17","knownRansomware":true,"cvss":7.2,"epss":0.11791,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-15410/"},{"cveID":"CVE-2026-15409","vendor":"SonicWall","product":"SMA1000 Appliances","vulnerabilityName":"SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","dateAdded":"2026-07-14","dueDate":"2026-07-17","knownRansomware":true,"cvss":10,"epss":0.83658,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-15409/"},{"cveID":"CVE-2008-4128","vendor":"Cisco","product":"IOS","vulnerabilityName":"Cisco IOS Cross-Site Request Forgery Vulnerability","dateAdded":"2026-07-13","dueDate":"2026-07-16","knownRansomware":false,"cvss":4.3,"epss":0.33917,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2008-4128/"},{"cveID":"CVE-2026-56291","vendor":"Balbooa","product":"Forms","vulnerabilityName":"Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability","dateAdded":"2026-07-10","dueDate":"2026-07-13","knownRansomware":false,"cvss":10,"epss":0.14595,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-56291/"},{"cveID":"CVE-2026-48939","vendor":"iCagenda","product":"iCagenda","vulnerabilityName":"iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability","dateAdded":"2026-07-10","dueDate":"2026-07-13","knownRansomware":false,"cvss":10,"epss":0.19727,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-48939/"},{"cveID":"CVE-2026-56290","vendor":"Joomlack","product":"Page Builder","vulnerabilityName":"Joomlack Page Builder Improper Access Control Vulnerability","dateAdded":"2026-07-07","dueDate":"2026-07-10","knownRansomware":false,"cvss":10,"epss":0.30375,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-56290/"},{"cveID":"CVE-2026-55255","vendor":"Langflow","product":"Langflow","vulnerabilityName":"Langflow Authorization Bypass Through User-Controlled Key Vulnerability","dateAdded":"2026-07-07","dueDate":"2026-07-10","knownRansomware":false,"cvss":8.4,"epss":0.00887,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-55255/"},{"cveID":"CVE-2026-48908","vendor":"JoomShaper","product":"SP Page Builder","vulnerabilityName":"JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability","dateAdded":"2026-07-07","dueDate":"2026-07-10","knownRansomware":false,"cvss":10,"epss":0.14824,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-48908/"},{"cveID":"CVE-2026-48282","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Path Traversal Vulnerability","dateAdded":"2026-07-07","dueDate":"2026-07-10","knownRansomware":false,"cvss":10,"epss":0.42388,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-48282/"},{"cveID":"CVE-2026-45659","vendor":"Microsoft","product":"SharePoint Server","vulnerabilityName":"Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-07-01","dueDate":"2026-07-04","knownRansomware":true,"cvss":8.8,"epss":0.76075,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-45659/"},{"cveID":"CVE-2026-48558","vendor":"SimpleHelp","product":"SimpleHelp","vulnerabilityName":"SimpleHelp Authentication Bypass Vulnerability","dateAdded":"2026-06-29","dueDate":"2026-07-02","knownRansomware":false,"cvss":9.5,"epss":0.30045,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-48558/"},{"cveID":"CVE-2026-20230","vendor":"Cisco","product":"Unified Communications Manager","vulnerabilityName":"Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2026-06-25","dueDate":"2026-06-28","knownRansomware":false,"cvss":8.6,"epss":0.882,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20230/"},{"cveID":"CVE-2026-12569","vendor":"PTC","product":"Windchill and FlexPLM","vulnerabilityName":"PTC Windchill and FlexPLM Improper Input Validation Vulnerability","dateAdded":"2026-06-25","dueDate":"2026-06-28","knownRansomware":true,"cvss":9.3,"epss":0.40586,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-12569/"},{"cveID":"CVE-2026-34910","vendor":"Ubiquiti","product":"UniFi OS","vulnerabilityName":"Ubiquiti UniFi OS Improper Input Validation Vulnerability","dateAdded":"2026-06-23","dueDate":"2026-06-26","knownRansomware":false,"cvss":10,"epss":0.87468,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-34910/"},{"cveID":"CVE-2026-34909","vendor":"Ubiquiti","product":"UniFi OS","vulnerabilityName":"Ubiquiti UniFi OS Path Traversal Vulnerability","dateAdded":"2026-06-23","dueDate":"2026-06-26","knownRansomware":false,"cvss":10,"epss":0.63897,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-34909/"},{"cveID":"CVE-2026-34908","vendor":"Ubiquiti","product":"UniFi OS","vulnerabilityName":"Ubiquiti UniFi OS Improper Access Control Vulnerability","dateAdded":"2026-06-23","dueDate":"2026-06-26","knownRansomware":false,"cvss":10,"epss":0.85194,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-34908/"},{"cveID":"CVE-2025-67038","vendor":"Lantronix","product":"EDS5000","vulnerabilityName":"Lantronix EDS5000 Code Injection Vulnerability","dateAdded":"2026-06-23","dueDate":"2026-06-26","knownRansomware":false,"cvss":9.8,"epss":0.1926,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-67038/"},{"cveID":"CVE-2026-20253","vendor":"Splunk","product":"Enterprise","vulnerabilityName":"Splunk Enterprise Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-06-18","dueDate":"2026-06-21","knownRansomware":false,"cvss":9.8,"epss":0.96939,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20253/"},{"cveID":"CVE-2026-48907","vendor":"Widget Factory","product":"Joomla Content Editor","vulnerabilityName":"Widget Factory Joomla Content Editor Improper Access Control Vulnerability","dateAdded":"2026-06-16","dueDate":"2026-06-19","knownRansomware":false,"cvss":10,"epss":0.781,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-48907/"},{"cveID":"CVE-2026-54420","vendor":"LiteSpeed","product":"cPanel Plugin","vulnerabilityName":"LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability","dateAdded":"2026-06-15","dueDate":"2026-06-18","knownRansomware":false,"cvss":8.5,"epss":0.01439,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-54420/"},{"cveID":"CVE-2026-20262","vendor":"Cisco","product":"Catalyst SD-WAN Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability","dateAdded":"2026-06-15","dueDate":"2026-06-29","knownRansomware":false,"cvss":6.5,"epss":0.28171,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20262/"},{"cveID":"CVE-2026-35273","vendor":"Oracle","product":"PeopleSoft Enterprise PeopleTools","vulnerabilityName":"Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-06-12","dueDate":"2026-06-15","knownRansomware":true,"cvss":9.8,"epss":0.95473,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-35273/"},{"cveID":"CVE-2026-10520","vendor":"Ivanti","product":"Sentry","vulnerabilityName":"Ivanti Sentry OS Command Injection Vulnerability","dateAdded":"2026-06-11","dueDate":"2026-06-14","knownRansomware":false,"cvss":10,"epss":0.99915,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-10520/"},{"cveID":"CVE-2026-7473","vendor":"Arista","product":"Extensible Operating System","vulnerabilityName":"Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability","dateAdded":"2026-06-09","dueDate":"2026-06-23","knownRansomware":false,"cvss":6.9,"epss":0.01108,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-7473/"},{"cveID":"CVE-2026-20245","vendor":"Cisco","product":"Catalyst SD-WAN Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability","dateAdded":"2026-06-09","dueDate":"2026-06-23","knownRansomware":false,"cvss":7.8,"epss":0.25323,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20245/"},{"cveID":"CVE-2026-11645","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","dateAdded":"2026-06-09","dueDate":"2026-06-23","knownRansomware":false,"cvss":8.8,"epss":0.0219,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-11645/"},{"cveID":"CVE-2026-50751","vendor":"Check Point","product":"Security Gateway","vulnerabilityName":"Check Point Security Gateway Improper Authentication Vulnerability","dateAdded":"2026-06-08","dueDate":"2026-06-11","knownRansomware":true,"cvss":9.3,"epss":0.83771,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-50751/"},{"cveID":"CVE-2026-42271","vendor":"BerriAI","product":"LiteLLM","vulnerabilityName":"BerriAI LiteLLM Command Injection Vulnerability","dateAdded":"2026-06-08","dueDate":"2026-06-22","knownRansomware":false,"cvss":8.7,"epss":0.83594,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-42271/"},{"cveID":"CVE-2026-28318","vendor":"SolarWinds","product":"Serv-U","vulnerabilityName":"SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability","dateAdded":"2026-06-05","dueDate":"2026-06-19","knownRansomware":false,"cvss":7.5,"epss":0.40012,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-28318/"},{"cveID":"CVE-2026-45247","vendor":"Mirasvit","product":"Mirasvit Full Page Cache Warmer","vulnerabilityName":"Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-06-03","dueDate":"2026-06-06","knownRansomware":false,"cvss":9.3,"epss":0.27546,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-45247/"},{"cveID":"CVE-2025-48595","vendor":"Android","product":"Framework","vulnerabilityName":"Android Framework Integer Overflow Vulnerability","dateAdded":"2026-06-02","dueDate":"2026-06-05","knownRansomware":false,"cvss":8.4,"epss":0.01714,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-48595/"},{"cveID":"CVE-2022-0492","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Improper Authentication Vulnerability","dateAdded":"2026-06-02","dueDate":"2026-06-05","knownRansomware":false,"cvss":7.8,"epss":0.05528,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-0492/"},{"cveID":"CVE-2024-21182","vendor":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Unspecified Vulnerability","dateAdded":"2026-06-01","dueDate":"2026-06-04","knownRansomware":false,"cvss":7.5,"epss":0.74162,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-21182/"},{"cveID":"CVE-2026-0257","vendor":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","dateAdded":"2026-05-29","dueDate":"2026-06-01","knownRansomware":true,"cvss":7.8,"epss":0.93905,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-0257/"},{"cveID":"CVE-2026-8398","vendor":"Daemon","product":"Daemon Tools Lite","vulnerabilityName":"Daemon Tools Lite Embedded Malicious Code Vulnerability","dateAdded":"2026-05-27","dueDate":"2026-05-30","knownRansomware":false,"cvss":9.3,"epss":0.01456,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-8398/"},{"cveID":"CVE-2026-48027","vendor":"Nx","product":"Nx Console","vulnerabilityName":"Nx Console Embedded Malicious Code Vulnerability","dateAdded":"2026-05-27","dueDate":"2026-06-10","knownRansomware":true,"cvss":9.3,"epss":0.0185,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-48027/"},{"cveID":"CVE-2026-45321","vendor":"TanStack","product":"TanStack","vulnerabilityName":"TanStack Unspecified Vulnerability","dateAdded":"2026-05-27","dueDate":"2026-06-10","knownRansomware":true,"cvss":9.6,"epss":0.02342,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-45321/"},{"cveID":"CVE-2026-48172","vendor":"LiteSpeed","product":"cPanel Plugin","vulnerabilityName":"LiteSpeed cPanel Plugin Privilege Escalation Vulnerability","dateAdded":"2026-05-26","dueDate":"2026-05-29","knownRansomware":false,"cvss":10,"epss":0.18914,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-48172/"},{"cveID":"CVE-2026-9082","vendor":"Drupal","product":"Core","vulnerabilityName":"Drupal Core SQL Injection Vulnerability","dateAdded":"2026-05-22","dueDate":"2026-05-27","knownRansomware":false,"cvss":9.8,"epss":0.87892,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-9082/"},{"cveID":"CVE-2026-34926","vendor":"Trend Micro","product":"Apex One","vulnerabilityName":"Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability","dateAdded":"2026-05-21","dueDate":"2026-06-04","knownRansomware":false,"cvss":6.7,"epss":0.12682,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-34926/"},{"cveID":"CVE-2025-34291","vendor":"Langflow","product":"Langflow","vulnerabilityName":"Langflow Origin Validation Error Vulnerability","dateAdded":"2026-05-21","dueDate":"2026-06-04","knownRansomware":false,"cvss":9.4,"epss":0.83629,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-34291/"},{"cveID":"CVE-2026-45498","vendor":"Microsoft","product":"Defender","vulnerabilityName":"Microsoft Defender Denial of Service Vulnerability","dateAdded":"2026-05-20","dueDate":"2026-06-03","knownRansomware":false,"cvss":7.5,"epss":0.63076,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-45498/"},{"cveID":"CVE-2026-41091","vendor":"Microsoft","product":"Defender","vulnerabilityName":"Microsoft Defender Link Following Vulnerability","dateAdded":"2026-05-20","dueDate":"2026-06-03","knownRansomware":false,"cvss":7.8,"epss":0.08202,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-41091/"},{"cveID":"CVE-2010-0806","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","dateAdded":"2026-05-20","dueDate":"2026-06-03","knownRansomware":false,"cvss":8.8,"epss":0.82172,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-0806/"},{"cveID":"CVE-2010-0249","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","dateAdded":"2026-05-20","dueDate":"2026-06-03","knownRansomware":false,"cvss":8.8,"epss":0.91939,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-0249/"},{"cveID":"CVE-2009-3459","vendor":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability","dateAdded":"2026-05-20","dueDate":"2026-06-03","knownRansomware":false,"cvss":8.8,"epss":0.86583,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2009-3459/"},{"cveID":"CVE-2009-1537","vendor":"Microsoft","product":"DirectX","vulnerabilityName":"Microsoft DirectX NULL Byte Overwrite Vulnerability","dateAdded":"2026-05-20","dueDate":"2026-06-03","knownRansomware":false,"cvss":8.8,"epss":0.51207,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2009-1537/"},{"cveID":"CVE-2008-4250","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Buffer Overflow Vulnerability","dateAdded":"2026-05-20","dueDate":"2026-06-03","knownRansomware":false,"cvss":9.8,"epss":0.98751,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2008-4250/"},{"cveID":"CVE-2026-42897","vendor":"Microsoft","product":"Microsoft","vulnerabilityName":"Microsoft Exchange Server Cross-Site Scripting Vulnerability","dateAdded":"2026-05-15","dueDate":"2026-05-29","knownRansomware":false,"cvss":6.1,"epss":0.71205,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-42897/"},{"cveID":"CVE-2026-20182","vendor":"Cisco","product":"Catalyst SD-WAN","vulnerabilityName":"Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability","dateAdded":"2026-05-14","dueDate":"2026-05-17","knownRansomware":false,"cvss":10,"epss":0.91522,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20182/"},{"cveID":"CVE-2026-42208","vendor":"BerriAI","product":"LiteLLM","vulnerabilityName":"BerriAI LiteLLM SQL Injection Vulnerability","dateAdded":"2026-05-08","dueDate":"2026-05-11","knownRansomware":false,"cvss":9.3,"epss":0.8942,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-42208/"},{"cveID":"CVE-2026-6973","vendor":"Ivanti","product":"Endpoint Manager Mobile (EPMM)","vulnerabilityName":"Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability","dateAdded":"2026-05-07","dueDate":"2026-05-10","knownRansomware":false,"cvss":7.2,"epss":0.34454,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-6973/"},{"cveID":"CVE-2026-0300","vendor":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability","dateAdded":"2026-05-06","dueDate":"2026-05-09","knownRansomware":false,"cvss":9.3,"epss":0.31725,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-0300/"},{"cveID":"CVE-2026-31431","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability","dateAdded":"2026-05-01","dueDate":"2026-05-15","knownRansomware":false,"cvss":7.8,"epss":0.99907,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-31431/"},{"cveID":"CVE-2026-41940","vendor":"WebPros","product":"cPanel & WHM and WP2 (WordPress Squared)","vulnerabilityName":"WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-04-30","dueDate":"2026-05-03","knownRansomware":true,"cvss":9.3,"epss":0.98527,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-41940/"},{"cveID":"CVE-2026-32202","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Protection Mechanism Failure Vulnerability","dateAdded":"2026-04-28","dueDate":"2026-05-12","knownRansomware":false,"cvss":4.3,"epss":0.63686,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-32202/"},{"cveID":"CVE-2024-1708","vendor":"ConnectWise","product":"ScreenConnect","vulnerabilityName":"ConnectWise ScreenConnect Path Traversal Vulnerability","dateAdded":"2026-04-28","dueDate":"2026-05-12","knownRansomware":true,"cvss":8.4,"epss":0.9549,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-1708/"},{"cveID":"CVE-2025-29635","vendor":"D-Link","product":"DIR-823X","vulnerabilityName":"D-Link DIR-823X Command Injection Vulnerability","dateAdded":"2026-04-24","dueDate":"2026-05-08","knownRansomware":false,"cvss":7.2,"epss":0.87944,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-29635/"},{"cveID":"CVE-2024-7399","vendor":"Samsung","product":"MagicINFO 9 Server","vulnerabilityName":"Samsung MagicINFO 9 Server Path Traversal Vulnerability","dateAdded":"2026-04-24","dueDate":"2026-05-08","knownRansomware":false,"cvss":9.8,"epss":0.91941,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-7399/"},{"cveID":"CVE-2024-57728","vendor":"SimpleHelp","product":"SimpleHelp","vulnerabilityName":"SimpleHelp Path Traversal Vulnerability","dateAdded":"2026-04-24","dueDate":"2026-05-08","knownRansomware":true,"cvss":7.2,"epss":0.06982,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-57728/"},{"cveID":"CVE-2024-57726","vendor":"SimpleHelp","product":"SimpleHelp","vulnerabilityName":"SimpleHelp Missing Authorization Vulnerability","dateAdded":"2026-04-24","dueDate":"2026-05-08","knownRansomware":true,"cvss":9.9,"epss":0.66601,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-57726/"},{"cveID":"CVE-2026-39987","vendor":"Marimo","product":"Marimo","vulnerabilityName":"Marimo Remote Code Execution Vulnerability","dateAdded":"2026-04-23","dueDate":"2026-05-07","knownRansomware":false,"cvss":9.3,"epss":0.98945,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-39987/"},{"cveID":"CVE-2026-33825","vendor":"Microsoft","product":"Defender","vulnerabilityName":"Microsoft Defender Insufficient Granularity of Access Control Vulnerability","dateAdded":"2026-04-22","dueDate":"2026-05-06","knownRansomware":true,"cvss":7.8,"epss":0.06749,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-33825/"},{"cveID":"CVE-2026-20133","vendor":"Cisco","product":"Catalyst SD-WAN Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-04-23","knownRansomware":false,"cvss":7.5,"epss":0.31353,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20133/"},{"cveID":"CVE-2026-20128","vendor":"Cisco","product":"Catalyst SD-WAN Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-04-23","knownRansomware":false,"cvss":7.5,"epss":0.06943,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20128/"},{"cveID":"CVE-2026-20122","vendor":"Cisco","product":"Catalyst SD-WAN Manger","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-04-23","knownRansomware":false,"cvss":5.4,"epss":0.24585,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20122/"},{"cveID":"CVE-2025-48700","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-04-23","knownRansomware":false,"cvss":6.1,"epss":0.01682,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-48700/"},{"cveID":"CVE-2025-32975","vendor":"Quest","product":"KACE Systems Management Appliance (SMA)","vulnerabilityName":"Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-05-04","knownRansomware":false,"cvss":10,"epss":0.02377,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-32975/"},{"cveID":"CVE-2025-2749","vendor":"Kentico","product":"Kentico Xperience","vulnerabilityName":"Kentico Xperience Path Traversal Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-05-04","knownRansomware":false,"cvss":7.2,"epss":0.03986,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-2749/"},{"cveID":"CVE-2024-27199","vendor":"JetBrains","product":"TeamCity","vulnerabilityName":"JetBrains TeamCity Relative Path Traversal Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-05-04","knownRansomware":true,"cvss":7.3,"epss":0.99991,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-27199/"},{"cveID":"CVE-2023-27351","vendor":"PaperCut","product":"NG/MF","vulnerabilityName":"PaperCut NG/MF Improper Authentication Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-05-04","knownRansomware":true,"cvss":7.5,"epss":0.78052,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-27351/"},{"cveID":"CVE-2026-34197","vendor":"Apache","product":"ActiveMQ","vulnerabilityName":"Apache ActiveMQ Improper Input Validation Vulnerability","dateAdded":"2026-04-16","dueDate":"2026-04-30","knownRansomware":false,"cvss":8.8,"epss":0.98256,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-34197/"},{"cveID":"CVE-2026-32201","vendor":"Microsoft","product":"SharePoint Server","vulnerabilityName":"Microsoft SharePoint Server Improper Input Validation Vulnerability","dateAdded":"2026-04-14","dueDate":"2026-04-28","knownRansomware":false,"cvss":6.5,"epss":0.42814,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-32201/"},{"cveID":"CVE-2009-0238","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Remote Code Execution","dateAdded":"2026-04-14","dueDate":"2026-04-28","knownRansomware":false,"cvss":8.8,"epss":0.43063,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2009-0238/"},{"cveID":"CVE-2026-34621","vendor":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Prototype Pollution Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-27","knownRansomware":false,"cvss":8.6,"epss":0.07086,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-34621/"},{"cveID":"CVE-2026-21643","vendor":"Fortinet","product":"FortiClient EMS","vulnerabilityName":"Fortinet FortiClient EMS SQL Injection Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-16","knownRansomware":false,"cvss":9.8,"epss":0.94085,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-21643/"},{"cveID":"CVE-2025-60710","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Link Following Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-27","knownRansomware":true,"cvss":7.8,"epss":0.04598,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-60710/"},{"cveID":"CVE-2023-36424","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Out-of-Bounds Read Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-27","knownRansomware":false,"cvss":7.8,"epss":0.12184,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-36424/"},{"cveID":"CVE-2023-21529","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-27","knownRansomware":true,"cvss":8.8,"epss":0.62104,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-21529/"},{"cveID":"CVE-2020-9715","vendor":"Adobe","product":"Acrobat","vulnerabilityName":"Adobe Acrobat Use-After-Free Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-27","knownRansomware":false,"cvss":7.8,"epss":0.48595,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-9715/"},{"cveID":"CVE-2012-1854","vendor":"Microsoft","product":"Visual Basic for Applications (VBA)","vulnerabilityName":"Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-27","knownRansomware":false,"cvss":7.8,"epss":0.21028,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-1854/"},{"cveID":"CVE-2026-1340","vendor":"Ivanti","product":"Endpoint Manager Mobile (EPMM)","vulnerabilityName":"Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","dateAdded":"2026-04-08","dueDate":"2026-04-11","knownRansomware":false,"cvss":9.8,"epss":0.862,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-1340/"},{"cveID":"CVE-2026-35616","vendor":"Fortinet","product":"FortiClient EMS","vulnerabilityName":"Fortinet FortiClient EMS Improper Access Control Vulnerability","dateAdded":"2026-04-06","dueDate":"2026-04-09","knownRansomware":false,"cvss":9.8,"epss":0.90749,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-35616/"},{"cveID":"CVE-2026-3502","vendor":"TrueConf","product":"Client","vulnerabilityName":"TrueConf Client Download of Code Without Integrity Check Vulnerability","dateAdded":"2026-04-02","dueDate":"2026-04-16","knownRansomware":false,"cvss":7.8,"epss":0.05746,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-3502/"},{"cveID":"CVE-2026-5281","vendor":"Google","product":"Dawn","vulnerabilityName":"Google Dawn Use-After-Free Vulnerability","dateAdded":"2026-04-01","dueDate":"2026-04-15","knownRansomware":false,"cvss":8.8,"epss":0.04938,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-5281/"},{"cveID":"CVE-2026-3055","vendor":"Citrix","product":"NetScaler","vulnerabilityName":"Citrix NetScaler Out-of-Bounds Read Vulnerability","dateAdded":"2026-03-30","dueDate":"2026-04-02","knownRansomware":false,"cvss":9.3,"epss":0.87166,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-3055/"},{"cveID":"CVE-2025-53521","vendor":"F5","product":"BIG-IP","vulnerabilityName":"F5 BIG-IP Stack-Based Buffer Overflow Vulnerability","dateAdded":"2026-03-27","dueDate":"2026-03-30","knownRansomware":false,"cvss":9.3,"epss":0.02213,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-53521/"},{"cveID":"CVE-2026-33634","vendor":"Aquasecurity","product":"Trivy","vulnerabilityName":"Aquasecurity Trivy Embedded Malicious Code Vulnerability","dateAdded":"2026-03-26","dueDate":"2026-04-09","knownRansomware":false,"cvss":9.4,"epss":0.59164,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-33634/"},{"cveID":"CVE-2026-33017","vendor":"Langflow","product":"Langflow","vulnerabilityName":"Langflow Code Injection Vulnerability","dateAdded":"2026-03-25","dueDate":"2026-04-08","knownRansomware":false,"cvss":9.3,"epss":0.96177,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-33017/"},{"cveID":"CVE-2025-54068","vendor":"Laravel","product":"Livewire","vulnerabilityName":"Laravel Livewire Code Injection Vulnerability","dateAdded":"2026-03-20","dueDate":"2026-04-03","knownRansomware":false,"cvss":9.2,"epss":0.96473,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-54068/"},{"cveID":"CVE-2025-43520","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Classic Buffer Overflow Vulnerability","dateAdded":"2026-03-20","dueDate":"2026-04-03","knownRansomware":false,"cvss":5.5,"epss":0.00425,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-43520/"},{"cveID":"CVE-2025-43510","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Improper Locking Vulnerability","dateAdded":"2026-03-20","dueDate":"2026-04-03","knownRansomware":false,"cvss":7.8,"epss":0.00355,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-43510/"},{"cveID":"CVE-2025-32432","vendor":"Craft CMS","product":"Craft CMS","vulnerabilityName":"Craft CMS Code Injection Vulnerability","dateAdded":"2026-03-20","dueDate":"2026-04-03","knownRansomware":false,"cvss":10,"epss":0.99837,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-32432/"},{"cveID":"CVE-2025-31277","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Buffer Overflow Vulnerability","dateAdded":"2026-03-20","dueDate":"2026-04-03","knownRansomware":false,"cvss":8.8,"epss":0.01534,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-31277/"},{"cveID":"CVE-2026-20131","vendor":"Cisco","product":"Secure Firewall Management Center (FMC)","vulnerabilityName":"Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-03-19","dueDate":"2026-03-22","knownRansomware":true,"cvss":10,"epss":0.31231,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20131/"},{"cveID":"CVE-2026-20963","vendor":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-03-18","dueDate":"2026-03-21","knownRansomware":false,"cvss":9.8,"epss":0.31554,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20963/"},{"cveID":"CVE-2025-66376","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability","dateAdded":"2026-03-18","dueDate":"2026-04-01","knownRansomware":false,"cvss":6.1,"epss":0.19559,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-66376/"},{"cveID":"CVE-2025-47813","vendor":"Wing FTP Server","product":"Wing FTP Server","vulnerabilityName":"Wing FTP Server Information Disclosure Vulnerability","dateAdded":"2026-03-16","dueDate":"2026-03-30","knownRansomware":false,"cvss":4.3,"epss":0.62967,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-47813/"},{"cveID":"CVE-2026-3910","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability","dateAdded":"2026-03-13","dueDate":"2026-03-27","knownRansomware":false,"cvss":8.8,"epss":0.02,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-3910/"},{"cveID":"CVE-2026-3909","vendor":"Google","product":"Skia","vulnerabilityName":"Google Skia Out-of-Bounds Write Vulnerability","dateAdded":"2026-03-13","dueDate":"2026-03-27","knownRansomware":false,"cvss":8.8,"epss":0.01629,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-3909/"},{"cveID":"CVE-2025-68613","vendor":"n8n","product":"n8n","vulnerabilityName":"n8n Improper Control of Dynamically-Managed Code Resources Vulnerability","dateAdded":"2026-03-11","dueDate":"2026-03-25","knownRansomware":false,"cvss":8.8,"epss":0.99105,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-68613/"},{"cveID":"CVE-2026-1603","vendor":"Ivanti","product":"Endpoint Manager (EPM)","vulnerabilityName":"Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability","dateAdded":"2026-03-09","dueDate":"2026-03-23","knownRansomware":false,"cvss":7.5,"epss":0.8056,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-1603/"},{"cveID":"CVE-2025-26399","vendor":"SolarWinds","product":"Web Help Desk","vulnerabilityName":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-03-09","dueDate":"2026-03-12","knownRansomware":true,"cvss":9.8,"epss":0.895,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-26399/"},{"cveID":"CVE-2021-22054","vendor":"Omnissa","product":"Workspace One UEM","vulnerabilityName":"Omnissa Workspace ONE Server-Side Request Forgery","dateAdded":"2026-03-09","dueDate":"2026-03-23","knownRansomware":false,"cvss":7.5,"epss":0.97369,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22054/"},{"cveID":"CVE-2023-43000","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple products Use-After-Free Vulnerability","dateAdded":"2026-03-05","dueDate":"2026-03-26","knownRansomware":false,"cvss":8.8,"epss":0.03898,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-43000/"},{"cveID":"CVE-2023-41974","vendor":"Apple","product":"iOS and iPadOS","vulnerabilityName":"Apple iOS and iPadOS Use-After-Free Vulnerability","dateAdded":"2026-03-05","dueDate":"2026-03-26","knownRansomware":false,"cvss":7.8,"epss":0.0141,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-41974/"},{"cveID":"CVE-2021-30952","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Integer Overflow or Wraparound Vulnerability","dateAdded":"2026-03-05","dueDate":"2026-03-26","knownRansomware":false,"cvss":7.8,"epss":0.06964,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30952/"},{"cveID":"CVE-2021-22681","vendor":"Rockwell","product":"Multiple Products","vulnerabilityName":"Rockwell Multiple Products Insufficient Protected Credentials Vulnerability","dateAdded":"2026-03-05","dueDate":"2026-03-26","knownRansomware":false,"cvss":9.8,"epss":0.6363,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22681/"},{"cveID":"CVE-2017-7921","vendor":"Hikvision","product":"Multiple Products","vulnerabilityName":"Hikvision Multiple Products Improper Authentication Vulnerability","dateAdded":"2026-03-05","dueDate":"2026-03-26","knownRansomware":false,"cvss":9.8,"epss":0.99998,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-7921/"},{"cveID":"CVE-2026-22719","vendor":"Broadcom","product":"VMware Aria Operations","vulnerabilityName":"Broadcom VMware Aria Operations Command Injection Vulnerability","dateAdded":"2026-03-03","dueDate":"2026-03-24","knownRansomware":false,"cvss":8.1,"epss":0.17424,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-22719/"},{"cveID":"CVE-2026-21385","vendor":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Memory Corruption Vulnerability","dateAdded":"2026-03-03","dueDate":"2026-03-24","knownRansomware":false,"cvss":7.8,"epss":0.01287,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-21385/"},{"cveID":"CVE-2026-20127","vendor":"Cisco","product":"Catalyst SD-WAN Controller and Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability","dateAdded":"2026-02-25","dueDate":"2026-02-27","knownRansomware":false,"cvss":10,"epss":0.88243,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20127/"},{"cveID":"CVE-2022-20775","vendor":"Cisco","product":"SD-WAN","vulnerabilityName":"Cisco SD-WAN Path Traversal Vulnerability","dateAdded":"2026-02-25","dueDate":"2026-02-27","knownRansomware":false,"cvss":7.8,"epss":0.12475,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-20775/"},{"cveID":"CVE-2026-25108","vendor":"Soliton Systems K.K","product":"FileZen","vulnerabilityName":"Soliton Systems K.K FileZen OS Command Injection Vulnerability","dateAdded":"2026-02-24","dueDate":"2026-03-17","knownRansomware":false,"cvss":8.7,"epss":0.04979,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-25108/"},{"cveID":"CVE-2025-68461","vendor":"Roundcube","product":"Webmail","vulnerabilityName":"RoundCube Webmail Cross-site Scripting Vulnerability","dateAdded":"2026-02-20","dueDate":"2026-03-13","knownRansomware":false,"cvss":6.1,"epss":0.26842,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-68461/"},{"cveID":"CVE-2025-49113","vendor":"Roundcube","product":"Webmail","vulnerabilityName":"RoundCube Webmail Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-02-20","dueDate":"2026-03-13","knownRansomware":false,"cvss":8.8,"epss":0.98897,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-49113/"},{"cveID":"CVE-2026-22769","vendor":"Dell","product":"RecoverPoint for Virtual Machines (RP4VMs)","vulnerabilityName":"Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability","dateAdded":"2026-02-18","dueDate":"2026-02-21","knownRansomware":false,"cvss":10,"epss":0.13122,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-22769/"},{"cveID":"CVE-2021-22175","vendor":"GitLab","product":"GitLab","vulnerabilityName":"GitLab Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2026-02-18","dueDate":"2026-03-11","knownRansomware":false,"cvss":9.8,"epss":0.53372,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22175/"},{"cveID":"CVE-2026-2441","vendor":"Google","product":"Chromium","vulnerabilityName":"Google Chromium CSS Use-After-Free Vulnerability","dateAdded":"2026-02-17","dueDate":"2026-03-10","knownRansomware":false,"cvss":8.8,"epss":0.2202,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-2441/"},{"cveID":"CVE-2024-7694","vendor":"TeamT5","product":"ThreatSonar Anti-Ransomware","vulnerabilityName":"TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability","dateAdded":"2026-02-17","dueDate":"2026-03-10","knownRansomware":false,"cvss":7.2,"epss":0.01807,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-7694/"},{"cveID":"CVE-2020-7796","vendor":"Synacor","product":"Zimbra Collaboration Suite","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability","dateAdded":"2026-02-17","dueDate":"2026-03-10","knownRansomware":false,"cvss":9.8,"epss":0.84418,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-7796/"},{"cveID":"CVE-2008-0015","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability","dateAdded":"2026-02-17","dueDate":"2026-03-10","knownRansomware":false,"cvss":8.8,"epss":0.76733,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2008-0015/"},{"cveID":"CVE-2026-1731","vendor":"BeyondTrust","product":"Remote Support (RS) and Privileged Remote Access (PRA)","vulnerabilityName":"BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability","dateAdded":"2026-02-13","dueDate":"2026-02-16","knownRansomware":true,"cvss":9.9,"epss":0.9029,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-1731/"},{"cveID":"CVE-2026-20700","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Buffer Overflow Vulnerability","dateAdded":"2026-02-12","dueDate":"2026-03-05","knownRansomware":false,"cvss":7.8,"epss":0.01319,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20700/"},{"cveID":"CVE-2025-40536","vendor":"SolarWinds","product":"Web Help Desk","vulnerabilityName":"SolarWinds Web Help Desk Security Control Bypass Vulnerability","dateAdded":"2026-02-12","dueDate":"2026-02-15","knownRansomware":false,"cvss":9.8,"epss":0.81624,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-40536/"},{"cveID":"CVE-2025-15556","vendor":"Notepad++","product":"Notepad++","vulnerabilityName":"Notepad++ Download of Code Without Integrity Check Vulnerability","dateAdded":"2026-02-12","dueDate":"2026-03-05","knownRansomware":false,"cvss":7.7,"epss":0.0171,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-15556/"},{"cveID":"CVE-2024-43468","vendor":"Microsoft","product":"Configuration Manager","vulnerabilityName":"Microsoft Configuration Manager SQL Injection Vulnerability","dateAdded":"2026-02-12","dueDate":"2026-03-05","knownRansomware":false,"cvss":9.8,"epss":0.82022,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-43468/"},{"cveID":"CVE-2026-21533","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Improper Privilege Management Vulnerability","dateAdded":"2026-02-10","dueDate":"2026-03-03","knownRansomware":false,"cvss":7.8,"epss":0.03913,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-21533/"},{"cveID":"CVE-2026-21525","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows NULL Pointer Dereference Vulnerability","dateAdded":"2026-02-10","dueDate":"2026-03-03","knownRansomware":false,"cvss":6.2,"epss":0.05042,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-21525/"},{"cveID":"CVE-2026-21519","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Type Confusion Vulnerability","dateAdded":"2026-02-10","dueDate":"2026-03-03","knownRansomware":false,"cvss":7.8,"epss":0.02462,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-21519/"},{"cveID":"CVE-2026-21514","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability","dateAdded":"2026-02-10","dueDate":"2026-03-03","knownRansomware":false,"cvss":7.8,"epss":0.01544,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-21514/"},{"cveID":"CVE-2026-21513","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability","dateAdded":"2026-02-10","dueDate":"2026-03-03","knownRansomware":false,"cvss":8.8,"epss":0.15642,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-21513/"},{"cveID":"CVE-2026-21510","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Shell Protection Mechanism Failure Vulnerability","dateAdded":"2026-02-10","dueDate":"2026-03-03","knownRansomware":false,"cvss":8.8,"epss":0.26244,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-21510/"},{"cveID":"CVE-2026-24423","vendor":"SmarterTools","product":"SmarterMail","vulnerabilityName":"SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-02-05","dueDate":"2026-02-26","knownRansomware":true,"cvss":9.3,"epss":0.87693,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-24423/"},{"cveID":"CVE-2025-11953","vendor":"React Native Community","product":"CLI","vulnerabilityName":"React Native Community CLI OS Command Injection Vulnerability","dateAdded":"2026-02-05","dueDate":"2026-02-26","knownRansomware":false,"cvss":9.8,"epss":0.9398,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-11953/"},{"cveID":"CVE-2025-64328","vendor":"Sangoma","product":"FreePBX","vulnerabilityName":"Sangoma FreePBX OS Command Injection Vulnerability","dateAdded":"2026-02-03","dueDate":"2026-02-24","knownRansomware":false,"cvss":8.6,"epss":0.84618,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-64328/"},{"cveID":"CVE-2025-40551","vendor":"SolarWinds","product":"Web Help Desk","vulnerabilityName":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-02-03","dueDate":"2026-02-06","knownRansomware":false,"cvss":9.8,"epss":0.83622,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-40551/"},{"cveID":"CVE-2021-39935","vendor":"GitLab","product":"Community and Enterprise Editions","vulnerabilityName":"GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2026-02-03","dueDate":"2026-02-24","knownRansomware":false,"cvss":7.5,"epss":0.35649,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-39935/"},{"cveID":"CVE-2019-19006","vendor":"Sangoma","product":"FreePBX","vulnerabilityName":"Sangoma FreePBX Improper Authentication Vulnerability","dateAdded":"2026-02-03","dueDate":"2026-02-24","knownRansomware":false,"cvss":9.8,"epss":0.36615,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-19006/"},{"cveID":"CVE-2026-1281","vendor":"Ivanti","product":"Endpoint Manager Mobile (EPMM)","vulnerabilityName":"Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","dateAdded":"2026-01-29","dueDate":"2026-02-01","knownRansomware":false,"cvss":9.8,"epss":0.81788,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-1281/"},{"cveID":"CVE-2026-24858","vendor":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2026-01-27","dueDate":"2026-01-30","knownRansomware":false,"cvss":9.8,"epss":0.86088,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-24858/"},{"cveID":"CVE-2026-24061","vendor":"GNU","product":"InetUtils","vulnerabilityName":"GNU InetUtils Argument Injection Vulnerability","dateAdded":"2026-01-26","dueDate":"2026-02-16","knownRansomware":false,"cvss":9.8,"epss":0.97993,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-24061/"},{"cveID":"CVE-2026-23760","vendor":"SmarterTools","product":"SmarterMail","vulnerabilityName":"SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2026-01-26","dueDate":"2026-02-16","knownRansomware":true,"cvss":9.3,"epss":0.96268,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-23760/"},{"cveID":"CVE-2026-21509","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Security Feature Bypass Vulnerability","dateAdded":"2026-01-26","dueDate":"2026-02-16","knownRansomware":false,"cvss":7.8,"epss":0.72554,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-21509/"},{"cveID":"CVE-2025-52691","vendor":"SmarterTools","product":"SmarterMail","vulnerabilityName":"SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability","dateAdded":"2026-01-26","dueDate":"2026-02-16","knownRansomware":true,"cvss":10,"epss":0.85655,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-52691/"},{"cveID":"CVE-2018-14634","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Integer Overflow Vulnerability","dateAdded":"2026-01-26","dueDate":"2026-02-16","knownRansomware":false,"cvss":7.8,"epss":0.14689,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-14634/"},{"cveID":"CVE-2024-37079","vendor":"Broadcom","product":"VMware vCenter Server","vulnerabilityName":"Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability","dateAdded":"2026-01-23","dueDate":"2026-02-13","knownRansomware":false,"cvss":9.8,"epss":0.22377,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-37079/"},{"cveID":"CVE-2025-68645","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability","dateAdded":"2026-01-22","dueDate":"2026-02-12","knownRansomware":false,"cvss":8.8,"epss":0.49374,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-68645/"},{"cveID":"CVE-2025-54313","vendor":"Prettier","product":"eslint-config-prettier","vulnerabilityName":"Prettier eslint-config-prettier Embedded Malicious Code Vulnerability","dateAdded":"2026-01-22","dueDate":"2026-02-12","knownRansomware":false,"cvss":7.5,"epss":0.04348,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-54313/"},{"cveID":"CVE-2025-34026","vendor":"Versa","product":"Concerto","vulnerabilityName":"Versa Concerto Improper Authentication Vulnerability","dateAdded":"2026-01-22","dueDate":"2026-02-12","knownRansomware":false,"cvss":9.2,"epss":0.8194,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-34026/"},{"cveID":"CVE-2025-31125","vendor":"Vite","product":"Vitejs","vulnerabilityName":"Vite Vitejs Improper Access Control Vulnerability","dateAdded":"2026-01-22","dueDate":"2026-02-12","knownRansomware":false,"cvss":7.5,"epss":0.58462,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-31125/"},{"cveID":"CVE-2026-20045","vendor":"Cisco","product":"Unified Communications Manager","vulnerabilityName":"Cisco Unified Communications Products Code Injection Vulnerability","dateAdded":"2026-01-21","dueDate":"2026-02-11","knownRansomware":false,"cvss":9.8,"epss":0.04478,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20045/"},{"cveID":"CVE-2026-20805","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Information Disclosure Vulnerability","dateAdded":"2026-01-13","dueDate":"2026-02-03","knownRansomware":false,"cvss":5.5,"epss":0.05116,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2026-20805/"},{"cveID":"CVE-2025-8110","vendor":"Gogs","product":"Gogs","vulnerabilityName":"Gogs Path Traversal Vulnerability","dateAdded":"2026-01-12","dueDate":"2026-02-02","knownRansomware":false,"cvss":8.7,"epss":0.82471,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-8110/"},{"cveID":"CVE-2025-37164","vendor":"Hewlett Packard Enterprise (HPE)","product":"OneView","vulnerabilityName":"Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability","dateAdded":"2026-01-07","dueDate":"2026-01-28","knownRansomware":false,"cvss":9.8,"epss":0.90193,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-37164/"},{"cveID":"CVE-2009-0556","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office PowerPoint Code Injection Vulnerability","dateAdded":"2026-01-07","dueDate":"2026-01-28","knownRansomware":false,"cvss":8.8,"epss":0.67539,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2009-0556/"},{"cveID":"CVE-2025-14847","vendor":"MongoDB","product":"MongoDB and MongoDB Server","vulnerabilityName":"MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability","dateAdded":"2025-12-29","dueDate":"2026-01-19","knownRansomware":false,"cvss":8.7,"epss":0.83218,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-14847/"},{"cveID":"CVE-2023-52163","vendor":"Digiever","product":"DS-2105 Pro","vulnerabilityName":"Digiever DS-2105 Pro Missing Authorization Vulnerability","dateAdded":"2025-12-22","dueDate":"2026-01-12","knownRansomware":false,"cvss":8.8,"epss":0.96921,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-52163/"},{"cveID":"CVE-2025-14733","vendor":"WatchGuard","product":"Firebox","vulnerabilityName":"WatchGuard Firebox Out of Bounds Write Vulnerability","dateAdded":"2025-12-19","dueDate":"2025-12-26","knownRansomware":true,"cvss":9.3,"epss":0.2651,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-14733/"},{"cveID":"CVE-2025-59374","vendor":"ASUS","product":"Live Update","vulnerabilityName":"ASUS Live Update Embedded Malicious Code Vulnerability","dateAdded":"2025-12-17","dueDate":"2026-01-07","knownRansomware":false,"cvss":9.3,"epss":0.0117,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-59374/"},{"cveID":"CVE-2025-40602","vendor":"SonicWall","product":"SMA1000 appliance","vulnerabilityName":"SonicWall SMA1000 Missing Authorization Vulnerability","dateAdded":"2025-12-17","dueDate":"2025-12-24","knownRansomware":false,"cvss":6.6,"epss":0.02114,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-40602/"},{"cveID":"CVE-2025-20393","vendor":"Cisco","product":"Multiple Products","vulnerabilityName":"Cisco Multiple Products Improper Input Validation Vulnerability","dateAdded":"2025-12-17","dueDate":"2025-12-24","knownRansomware":false,"cvss":10,"epss":0.29875,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-20393/"},{"cveID":"CVE-2025-59718","vendor":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability","dateAdded":"2025-12-16","dueDate":"2025-12-23","knownRansomware":false,"cvss":9.8,"epss":0.68293,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-59718/"},{"cveID":"CVE-2025-43529","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Use-After-Free WebKit Vulnerability","dateAdded":"2025-12-15","dueDate":"2026-01-05","knownRansomware":false,"cvss":8.8,"epss":0.08891,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-43529/"},{"cveID":"CVE-2025-14611","vendor":"Gladinet","product":"CentreStack and Triofox","vulnerabilityName":"Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability","dateAdded":"2025-12-15","dueDate":"2026-01-05","knownRansomware":false,"cvss":7.1,"epss":0.53302,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-14611/"},{"cveID":"CVE-2025-14174","vendor":"Google","product":"Chromium","vulnerabilityName":"Google Chromium Out of Bounds Memory Access Vulnerability","dateAdded":"2025-12-12","dueDate":"2026-01-02","knownRansomware":false,"cvss":8.8,"epss":0.22327,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-14174/"},{"cveID":"CVE-2018-4063","vendor":"Sierra Wireless","product":"AirLink ALEOS","vulnerabilityName":"Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability","dateAdded":"2025-12-12","dueDate":"2026-01-02","knownRansomware":false,"cvss":8.8,"epss":0.27059,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-4063/"},{"cveID":"CVE-2025-58360","vendor":"OSGeo","product":"GeoServer","vulnerabilityName":"OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability","dateAdded":"2025-12-11","dueDate":"2026-01-01","knownRansomware":false,"cvss":9.8,"epss":0.64874,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-58360/"},{"cveID":"CVE-2025-62221","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Use After Free Vulnerability","dateAdded":"2025-12-09","dueDate":"2025-12-30","knownRansomware":false,"cvss":7.8,"epss":0.02505,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-62221/"},{"cveID":"CVE-2025-6218","vendor":"RARLAB","product":"WinRAR","vulnerabilityName":"RARLAB WinRAR Path Traversal Vulnerability","dateAdded":"2025-12-09","dueDate":"2025-12-30","knownRansomware":false,"cvss":7.8,"epss":0.90459,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-6218/"},{"cveID":"CVE-2025-66644","vendor":"Array Networks","product":"ArrayOS AG","vulnerabilityName":"Array Networks ArrayOS AG OS Command Injection Vulnerability","dateAdded":"2025-12-08","dueDate":"2025-12-29","knownRansomware":false,"cvss":9.8,"epss":0.03415,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-66644/"},{"cveID":"CVE-2022-37055","vendor":"D-Link","product":"Routers","vulnerabilityName":"D-Link Routers Buffer Overflow Vulnerability","dateAdded":"2025-12-08","dueDate":"2025-12-29","knownRansomware":false,"cvss":9.8,"epss":0.55531,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-37055/"},{"cveID":"CVE-2025-55182","vendor":"Meta","product":"React Server Components","vulnerabilityName":"Meta React Server Components Remote Code Execution Vulnerability","dateAdded":"2025-12-05","dueDate":"2025-12-12","knownRansomware":true,"cvss":10,"epss":0.99802,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-55182/"},{"cveID":"CVE-2021-26828","vendor":"OpenPLC","product":"ScadaBR","vulnerabilityName":"OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability","dateAdded":"2025-12-03","dueDate":"2025-12-24","knownRansomware":false,"cvss":8.8,"epss":0.39356,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-26828/"},{"cveID":"CVE-2025-48633","vendor":"Android","product":"Framework","vulnerabilityName":"Android Framework Information Disclosure Vulnerability","dateAdded":"2025-12-02","dueDate":"2025-12-23","knownRansomware":false,"cvss":5.5,"epss":0.00262,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-48633/"},{"cveID":"CVE-2025-48572","vendor":"Android","product":"Framework","vulnerabilityName":"Android Framework Privilege Escalation Vulnerability","dateAdded":"2025-12-02","dueDate":"2025-12-23","knownRansomware":false,"cvss":7.8,"epss":0.00259,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-48572/"},{"cveID":"CVE-2021-26829","vendor":"OpenPLC","product":"ScadaBR","vulnerabilityName":"OpenPLC ScadaBR Cross-site Scripting Vulnerability","dateAdded":"2025-11-28","dueDate":"2025-12-19","knownRansomware":false,"cvss":5.4,"epss":0.4805,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-26829/"},{"cveID":"CVE-2025-61757","vendor":"Oracle","product":"Fusion Middleware","vulnerabilityName":"Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability","dateAdded":"2025-11-21","dueDate":"2025-12-12","knownRansomware":false,"cvss":9.8,"epss":0.88312,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-61757/"},{"cveID":"CVE-2025-13223","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2025-11-19","dueDate":"2025-12-10","knownRansomware":false,"cvss":8.8,"epss":0.05026,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-13223/"},{"cveID":"CVE-2025-58034","vendor":"Fortinet","product":"FortiWeb","vulnerabilityName":"Fortinet FortiWeb OS Command Injection Vulnerability","dateAdded":"2025-11-18","dueDate":"2025-11-25","knownRansomware":false,"cvss":7.2,"epss":0.5558,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-58034/"},{"cveID":"CVE-2025-64446","vendor":"Fortinet","product":"FortiWeb","vulnerabilityName":"Fortinet FortiWeb Path Traversal Vulnerability","dateAdded":"2025-11-14","dueDate":"2025-11-21","knownRansomware":false,"cvss":9.8,"epss":0.91838,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-64446/"},{"cveID":"CVE-2025-9242","vendor":"WatchGuard","product":"Firebox","vulnerabilityName":"WatchGuard Firebox Out-of-Bounds Write Vulnerability","dateAdded":"2025-11-12","dueDate":"2025-12-03","knownRansomware":false,"cvss":9.3,"epss":0.913,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-9242/"},{"cveID":"CVE-2025-62215","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Race Condition Vulnerability","dateAdded":"2025-11-12","dueDate":"2025-12-03","knownRansomware":false,"cvss":7,"epss":0.05985,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-62215/"},{"cveID":"CVE-2025-12480","vendor":"Gladinet","product":"Triofox","vulnerabilityName":"Gladinet Triofox Improper Access Control Vulnerability","dateAdded":"2025-11-12","dueDate":"2025-12-03","knownRansomware":false,"cvss":9.1,"epss":0.90532,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-12480/"},{"cveID":"CVE-2025-21042","vendor":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Out-of-Bounds Write Vulnerability","dateAdded":"2025-11-10","dueDate":"2025-12-01","knownRansomware":false,"cvss":9.8,"epss":0.3317,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-21042/"},{"cveID":"CVE-2025-48703","vendor":"CWP","product":"Control Web Panel","vulnerabilityName":"CWP Control Web Panel OS Command Injection Vulnerability","dateAdded":"2025-11-04","dueDate":"2025-11-25","knownRansomware":false,"cvss":9,"epss":0.99655,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-48703/"},{"cveID":"CVE-2025-11371","vendor":"Gladinet","product":"CentreStack and Triofox","vulnerabilityName":"Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability","dateAdded":"2025-11-04","dueDate":"2025-11-25","knownRansomware":false,"cvss":7.5,"epss":0.92137,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-11371/"},{"cveID":"CVE-2025-41244","vendor":"Broadcom","product":"VMware Aria Operations and VMware Tools","vulnerabilityName":"Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability","dateAdded":"2025-10-30","dueDate":"2025-11-20","knownRansomware":false,"cvss":7.8,"epss":0.08438,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-41244/"},{"cveID":"CVE-2025-24893","vendor":"XWiki","product":"Platform","vulnerabilityName":"XWiki Platform Eval Injection Vulnerability","dateAdded":"2025-10-30","dueDate":"2025-11-20","knownRansomware":false,"cvss":9.8,"epss":0.99864,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-24893/"},{"cveID":"CVE-2025-6205","vendor":"Dassault Systèmes","product":"DELMIA Apriso","vulnerabilityName":"Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability","dateAdded":"2025-10-28","dueDate":"2025-11-18","knownRansomware":false,"cvss":9.1,"epss":0.72217,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-6205/"},{"cveID":"CVE-2025-6204","vendor":"Dassault Systèmes","product":"DELMIA Apriso","vulnerabilityName":"Dassault Systèmes DELMIA Apriso Code Injection Vulnerability","dateAdded":"2025-10-28","dueDate":"2025-11-18","knownRansomware":false,"cvss":8,"epss":0.77077,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-6204/"},{"cveID":"CVE-2025-59287","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability","dateAdded":"2025-10-24","dueDate":"2025-11-14","knownRansomware":false,"cvss":9.8,"epss":0.99979,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-59287/"},{"cveID":"CVE-2025-54236","vendor":"Adobe","product":"Commerce and Magento","vulnerabilityName":"Adobe Commerce and Magento Improper Input Validation Vulnerability","dateAdded":"2025-10-24","dueDate":"2025-11-14","knownRansomware":false,"cvss":9.1,"epss":0.94532,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-54236/"},{"cveID":"CVE-2025-61932","vendor":"Motex","product":"LANSCOPE Endpoint Manager","vulnerabilityName":"Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability","dateAdded":"2025-10-22","dueDate":"2025-11-12","knownRansomware":false,"cvss":9.3,"epss":0.02628,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-61932/"},{"cveID":"CVE-2025-61884","vendor":"Oracle","product":"E-Business Suite","vulnerabilityName":"Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2025-10-20","dueDate":"2025-11-10","knownRansomware":true,"cvss":7.5,"epss":0.97788,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-61884/"},{"cveID":"CVE-2025-33073","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SMB Client Improper Access Control Vulnerability","dateAdded":"2025-10-20","dueDate":"2025-11-10","knownRansomware":false,"cvss":8.8,"epss":0.80489,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-33073/"},{"cveID":"CVE-2025-2747","vendor":"Kentico","product":"Xperience CMS","vulnerabilityName":"Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2025-10-20","dueDate":"2025-11-10","knownRansomware":false,"cvss":9.8,"epss":0.92488,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-2747/"},{"cveID":"CVE-2025-2746","vendor":"Kentico","product":"Xperience CMS","vulnerabilityName":"Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2025-10-20","dueDate":"2025-11-10","knownRansomware":false,"cvss":9.8,"epss":0.59052,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-2746/"},{"cveID":"CVE-2022-48503","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Unspecified Vulnerability","dateAdded":"2025-10-20","dueDate":"2025-11-10","knownRansomware":false,"cvss":8.8,"epss":0.03213,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-48503/"},{"cveID":"CVE-2025-54253","vendor":"Adobe","product":"Experience Manager (AEM) Forms","vulnerabilityName":"Adobe Experience Manager Forms Code Execution Vulnerability","dateAdded":"2025-10-15","dueDate":"2025-11-05","knownRansomware":false,"cvss":10,"epss":0.87515,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-54253/"},{"cveID":"CVE-2025-59230","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Improper Access Control Vulnerability","dateAdded":"2025-10-14","dueDate":"2025-11-04","knownRansomware":false,"cvss":7.8,"epss":0.02675,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-59230/"},{"cveID":"CVE-2025-47827","vendor":"IGEL","product":"IGEL OS","vulnerabilityName":"IGEL OS Use of a Key Past its Expiration Date Vulnerability","dateAdded":"2025-10-14","dueDate":"2025-11-04","knownRansomware":false,"cvss":4.6,"epss":0.04927,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-47827/"},{"cveID":"CVE-2025-24990","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Untrusted Pointer Dereference Vulnerability","dateAdded":"2025-10-14","dueDate":"2025-11-04","knownRansomware":false,"cvss":7.8,"epss":0.06346,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-24990/"},{"cveID":"CVE-2016-7836","vendor":"SKYSEA","product":"Client View","vulnerabilityName":"SKYSEA Client View Improper Authentication Vulnerability","dateAdded":"2025-10-14","dueDate":"2025-11-04","knownRansomware":false,"cvss":9.8,"epss":0.1938,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-7836/"},{"cveID":"CVE-2021-43798","vendor":"Grafana Labs","product":"Grafana","vulnerabilityName":"Grafana Path Traversal Vulnerability","dateAdded":"2025-10-09","dueDate":"2025-10-30","knownRansomware":false,"cvss":7.5,"epss":0.88503,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-43798/"},{"cveID":"CVE-2025-27915","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","dateAdded":"2025-10-07","dueDate":"2025-10-28","knownRansomware":false,"cvss":5.4,"epss":0.03918,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-27915/"},{"cveID":"CVE-2025-61882","vendor":"Oracle","product":"E-Business Suite","vulnerabilityName":"Oracle E-Business Suite Unspecified Vulnerability","dateAdded":"2025-10-06","dueDate":"2025-10-27","knownRansomware":true,"cvss":9.8,"epss":0.99732,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-61882/"},{"cveID":"CVE-2021-43226","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2025-10-06","dueDate":"2025-10-27","knownRansomware":true,"cvss":7.8,"epss":0.03072,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-43226/"},{"cveID":"CVE-2021-22555","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Heap Out-of-Bounds Write Vulnerability","dateAdded":"2025-10-06","dueDate":"2025-10-27","knownRansomware":false,"cvss":7.8,"epss":0.78684,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22555/"},{"cveID":"CVE-2013-3918","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Out-of-Bounds Write Vulnerability","dateAdded":"2025-10-06","dueDate":"2025-10-27","knownRansomware":false,"cvss":8.8,"epss":0.73872,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-3918/"},{"cveID":"CVE-2011-3402","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Remote Code Execution Vulnerability","dateAdded":"2025-10-06","dueDate":"2025-10-27","knownRansomware":false,"cvss":8.8,"epss":0.78285,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2011-3402/"},{"cveID":"CVE-2010-3962","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability","dateAdded":"2025-10-06","dueDate":"2025-10-27","knownRansomware":false,"cvss":8.1,"epss":0.96889,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-3962/"},{"cveID":"CVE-2010-3765","vendor":"Mozilla","product":"Multiple Products","vulnerabilityName":"Mozilla Multiple Products Remote Code Execution Vulnerability","dateAdded":"2025-10-06","dueDate":"2025-10-27","knownRansomware":false,"cvss":9.8,"epss":0.83279,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-3765/"},{"cveID":"CVE-2025-4008","vendor":"Smartbedded","product":"Meteobridge","vulnerabilityName":"Smartbedded Meteobridge Command Injection Vulnerability","dateAdded":"2025-10-02","dueDate":"2025-10-23","knownRansomware":false,"cvss":8.7,"epss":0.93667,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-4008/"},{"cveID":"CVE-2025-21043","vendor":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Out-of-Bounds Write Vulnerability","dateAdded":"2025-10-02","dueDate":"2025-10-23","knownRansomware":false,"cvss":9.8,"epss":0.01907,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-21043/"},{"cveID":"CVE-2017-1000353","vendor":"Jenkins","product":"Jenkins","vulnerabilityName":"Jenkins Remote Code Execution Vulnerability","dateAdded":"2025-10-02","dueDate":"2025-10-23","knownRansomware":false,"cvss":9.8,"epss":0.99679,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-1000353/"},{"cveID":"CVE-2015-7755","vendor":"Juniper","product":"ScreenOS","vulnerabilityName":"Juniper ScreenOS Improper Authentication Vulnerability","dateAdded":"2025-10-02","dueDate":"2025-10-23","knownRansomware":false,"cvss":9.8,"epss":0.614,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-7755/"},{"cveID":"CVE-2014-6278","vendor":"GNU","product":"GNU Bash","vulnerabilityName":"GNU Bash OS Command Injection Vulnerability","dateAdded":"2025-10-02","dueDate":"2025-10-23","knownRansomware":false,"cvss":8.8,"epss":0.9952,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-6278/"},{"cveID":"CVE-2025-59689","vendor":"Libraesva","product":"Email Security Gateway","vulnerabilityName":"Libraesva Email Security Gateway Command Injection Vulnerability","dateAdded":"2025-09-29","dueDate":"2025-10-20","knownRansomware":false,"cvss":6.1,"epss":0.01864,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-59689/"},{"cveID":"CVE-2025-32463","vendor":"Sudo","product":"Sudo","vulnerabilityName":"Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","dateAdded":"2025-09-29","dueDate":"2025-10-20","knownRansomware":false,"cvss":7.8,"epss":0.59417,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-32463/"},{"cveID":"CVE-2025-20352","vendor":"Cisco","product":"IOS and IOS XE","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability","dateAdded":"2025-09-29","dueDate":"2025-10-20","knownRansomware":false,"cvss":7.7,"epss":0.39447,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-20352/"},{"cveID":"CVE-2025-10035","vendor":"Fortra","product":"GoAnywhere MFT","vulnerabilityName":"Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability","dateAdded":"2025-09-29","dueDate":"2025-10-20","knownRansomware":true,"cvss":9.8,"epss":0.99799,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-10035/"},{"cveID":"CVE-2021-21311","vendor":"Adminer","product":"Adminer","vulnerabilityName":"Adminer Server-Side Request Forgery Vulnerability","dateAdded":"2025-09-29","dueDate":"2025-10-20","knownRansomware":false,"cvss":7.2,"epss":0.90461,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-21311/"},{"cveID":"CVE-2025-20362","vendor":"Cisco","product":"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","vulnerabilityName":"Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability","dateAdded":"2025-09-25","dueDate":"2025-09-26","knownRansomware":false,"cvss":8.6,"epss":0.87085,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-20362/"},{"cveID":"CVE-2025-20333","vendor":"Cisco","product":"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","vulnerabilityName":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability","dateAdded":"2025-09-25","dueDate":"2025-09-26","knownRansomware":false,"cvss":9.9,"epss":0.70651,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-20333/"},{"cveID":"CVE-2025-10585","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2025-09-23","dueDate":"2025-10-14","knownRansomware":false,"cvss":9.8,"epss":0.05391,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-10585/"},{"cveID":"CVE-2025-5086","vendor":"Dassault Systèmes","product":"DELMIA Apriso","vulnerabilityName":"Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability","dateAdded":"2025-09-11","dueDate":"2025-10-02","knownRansomware":false,"cvss":9,"epss":0.92016,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-5086/"},{"cveID":"CVE-2025-53690","vendor":"Sitecore","product":"Multiple Products","vulnerabilityName":"Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability","dateAdded":"2025-09-04","dueDate":"2025-09-25","knownRansomware":false,"cvss":9,"epss":0.51094,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-53690/"},{"cveID":"CVE-2025-48543","vendor":"Android","product":"Runtime","vulnerabilityName":"Android Runtime Use-After-Free Vulnerability","dateAdded":"2025-09-04","dueDate":"2025-09-25","knownRansomware":false,"cvss":8.8,"epss":0.00531,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-48543/"},{"cveID":"CVE-2025-38352","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability","dateAdded":"2025-09-04","dueDate":"2025-09-25","knownRansomware":false,"cvss":7.8,"epss":0.01254,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-38352/"},{"cveID":"CVE-2025-9377","vendor":"TP-Link","product":"Multiple Routers","vulnerabilityName":"TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability","dateAdded":"2025-09-03","dueDate":"2025-09-24","knownRansomware":false,"cvss":8.6,"epss":0.33524,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-9377/"},{"cveID":"CVE-2023-50224","vendor":"TP-Link","product":"TL-WR841N","vulnerabilityName":"TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability","dateAdded":"2025-09-03","dueDate":"2025-09-24","knownRansomware":false,"cvss":6.5,"epss":0.15558,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-50224/"},{"cveID":"CVE-2025-55177","vendor":"Meta Platforms","product":"WhatsApp","vulnerabilityName":"Meta Platforms WhatsApp Incorrect Authorization Vulnerability","dateAdded":"2025-09-02","dueDate":"2025-09-23","knownRansomware":false,"cvss":5.4,"epss":0.04207,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-55177/"},{"cveID":"CVE-2020-24363","vendor":"TP-Link","product":"TL-WA855RE","vulnerabilityName":"TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability","dateAdded":"2025-09-02","dueDate":"2025-09-23","knownRansomware":false,"cvss":8.8,"epss":0.20689,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-24363/"},{"cveID":"CVE-2025-57819","vendor":"Sangoma","product":"FreePBX","vulnerabilityName":"Sangoma FreePBX Authentication Bypass Vulnerability","dateAdded":"2025-08-29","dueDate":"2025-09-19","knownRansomware":false,"cvss":10,"epss":0.85463,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-57819/"},{"cveID":"CVE-2025-7775","vendor":"Citrix","product":"NetScaler","vulnerabilityName":"Citrix NetScaler Memory Overflow Vulnerability","dateAdded":"2025-08-26","dueDate":"2025-08-28","knownRansomware":false,"cvss":9.2,"epss":0.19631,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-7775/"},{"cveID":"CVE-2025-48384","vendor":"Git","product":"Git","vulnerabilityName":"Git Link Following Vulnerability","dateAdded":"2025-08-25","dueDate":"2025-09-15","knownRansomware":false,"cvss":8,"epss":0.04109,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-48384/"},{"cveID":"CVE-2024-8069","vendor":"Citrix","product":"Session Recording","vulnerabilityName":"Citrix Session Recording Deserialization of Untrusted Data Vulnerability","dateAdded":"2025-08-25","dueDate":"2025-09-15","knownRansomware":false,"cvss":5.1,"epss":0.14643,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-8069/"},{"cveID":"CVE-2024-8068","vendor":"Citrix","product":"Session Recording","vulnerabilityName":"Citrix Session Recording Improper Privilege Management Vulnerability","dateAdded":"2025-08-25","dueDate":"2025-09-15","knownRansomware":false,"cvss":5.1,"epss":0.01395,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-8068/"},{"cveID":"CVE-2025-43300","vendor":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","dateAdded":"2025-08-21","dueDate":"2025-09-11","knownRansomware":false,"cvss":10,"epss":0.21994,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-43300/"},{"cveID":"CVE-2025-54948","vendor":"Trend Micro","product":"Apex One","vulnerabilityName":"Trend Micro Apex One OS Command Injection Vulnerability","dateAdded":"2025-08-18","dueDate":"2025-09-08","knownRansomware":false,"cvss":9.8,"epss":0.2079,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-54948/"},{"cveID":"CVE-2025-8876","vendor":"N-able","product":"N-Central","vulnerabilityName":"N-able N-Central Command Injection Vulnerability","dateAdded":"2025-08-13","dueDate":"2025-08-20","knownRansomware":false,"cvss":9.4,"epss":0.0333,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-8876/"},{"cveID":"CVE-2025-8875","vendor":"N-able","product":"N-Central","vulnerabilityName":"N-able N-Central Insecure Deserialization Vulnerability","dateAdded":"2025-08-13","dueDate":"2025-08-20","knownRansomware":false,"cvss":9.4,"epss":0.01721,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-8875/"},{"cveID":"CVE-2025-8088","vendor":"RARLAB","product":"WinRAR","vulnerabilityName":"RARLAB WinRAR Path Traversal Vulnerability","dateAdded":"2025-08-12","dueDate":"2025-09-02","knownRansomware":true,"cvss":8.4,"epss":0.94551,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-8088/"},{"cveID":"CVE-2013-3893","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Resource Management Errors Vulnerability","dateAdded":"2025-08-12","dueDate":"2025-09-02","knownRansomware":false,"cvss":8.8,"epss":0.8593,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-3893/"},{"cveID":"CVE-2007-0671","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Excel Remote Code Execution Vulnerability","dateAdded":"2025-08-12","dueDate":"2025-09-02","knownRansomware":false,"cvss":8.8,"epss":0.42379,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2007-0671/"},{"cveID":"CVE-2022-40799","vendor":"D-Link","product":"DNR-322L","vulnerabilityName":"D-Link DNR-322L Download of Code Without Integrity Check Vulnerability","dateAdded":"2025-08-05","dueDate":"2025-08-26","knownRansomware":false,"cvss":8.8,"epss":0.31719,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-40799/"},{"cveID":"CVE-2020-25079","vendor":"D-Link","product":"DCS-2530L and DCS-2670L Devices","vulnerabilityName":"D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability","dateAdded":"2025-08-05","dueDate":"2025-08-26","knownRansomware":false,"cvss":8.8,"epss":0.52717,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-25079/"},{"cveID":"CVE-2020-25078","vendor":"D-Link","product":"DCS-2530L and DCS-2670L Devices","vulnerabilityName":"D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability","dateAdded":"2025-08-05","dueDate":"2025-08-26","knownRansomware":false,"cvss":7.5,"epss":0.97901,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-25078/"},{"cveID":"CVE-2025-20337","vendor":"Cisco","product":"Identity Services Engine","vulnerabilityName":"Cisco Identity Services Engine Injection Vulnerability","dateAdded":"2025-07-28","dueDate":"2025-08-18","knownRansomware":false,"cvss":10,"epss":0.67042,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-20337/"},{"cveID":"CVE-2025-20281","vendor":"Cisco","product":"Identity Services Engine","vulnerabilityName":"Cisco Identity Services Engine Injection Vulnerability","dateAdded":"2025-07-28","dueDate":"2025-08-18","knownRansomware":false,"cvss":10,"epss":0.97093,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-20281/"},{"cveID":"CVE-2023-2533","vendor":"PaperCut","product":"NG/MF","vulnerabilityName":"PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability","dateAdded":"2025-07-28","dueDate":"2025-08-18","knownRansomware":false,"cvss":8.8,"epss":0.29246,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-2533/"},{"cveID":"CVE-2025-6558","vendor":"Google","product":"Chromium","vulnerabilityName":"Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","dateAdded":"2025-07-22","dueDate":"2025-08-12","knownRansomware":false,"cvss":8.8,"epss":0.09585,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-6558/"},{"cveID":"CVE-2025-54309","vendor":"CrushFTP","product":"CrushFTP","vulnerabilityName":"CrushFTP Unprotected Alternate Channel Vulnerability","dateAdded":"2025-07-22","dueDate":"2025-08-12","knownRansomware":false,"cvss":9.8,"epss":0.94709,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-54309/"},{"cveID":"CVE-2025-49706","vendor":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Improper Authentication Vulnerability","dateAdded":"2025-07-22","dueDate":"2025-07-23","knownRansomware":true,"cvss":6.5,"epss":0.99063,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-49706/"},{"cveID":"CVE-2025-49704","vendor":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Code Injection Vulnerability","dateAdded":"2025-07-22","dueDate":"2025-07-23","knownRansomware":true,"cvss":8.8,"epss":0.99995,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-49704/"},{"cveID":"CVE-2025-2776","vendor":"SysAid","product":"SysAid On-Prem","vulnerabilityName":"SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability","dateAdded":"2025-07-22","dueDate":"2025-08-12","knownRansomware":false,"cvss":9.8,"epss":0.64397,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-2776/"},{"cveID":"CVE-2025-2775","vendor":"SysAid","product":"SysAid On-Prem","vulnerabilityName":"SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability","dateAdded":"2025-07-22","dueDate":"2025-08-12","knownRansomware":false,"cvss":7.5,"epss":0.42952,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-2775/"},{"cveID":"CVE-2025-53770","vendor":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","dateAdded":"2025-07-20","dueDate":"2025-07-21","knownRansomware":true,"cvss":9.8,"epss":0.99998,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-53770/"},{"cveID":"CVE-2025-25257","vendor":"Fortinet","product":"FortiWeb","vulnerabilityName":"Fortinet FortiWeb SQL Injection Vulnerability","dateAdded":"2025-07-18","dueDate":"2025-08-08","knownRansomware":false,"cvss":9.8,"epss":0.99772,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-25257/"},{"cveID":"CVE-2025-47812","vendor":"Wing FTP Server","product":"Wing FTP Server","vulnerabilityName":"Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability","dateAdded":"2025-07-14","dueDate":"2025-08-04","knownRansomware":false,"cvss":10,"epss":0.92862,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-47812/"},{"cveID":"CVE-2025-5777","vendor":"Citrix","product":"NetScaler ADC and Gateway","vulnerabilityName":"Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability","dateAdded":"2025-07-10","dueDate":"2025-07-11","knownRansomware":true,"cvss":9.3,"epss":0.99953,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-5777/"},{"cveID":"CVE-2019-9621","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2025-07-07","dueDate":"2025-07-28","knownRansomware":false,"cvss":7.5,"epss":0.81037,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-9621/"},{"cveID":"CVE-2019-5418","vendor":"Rails","product":"Ruby on Rails","vulnerabilityName":"Rails Ruby on Rails Path Traversal Vulnerability","dateAdded":"2025-07-07","dueDate":"2025-07-28","knownRansomware":false,"cvss":7.5,"epss":0.98507,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-5418/"},{"cveID":"CVE-2016-10033","vendor":"PHP","product":"PHPMailer","vulnerabilityName":"PHPMailer Command Injection Vulnerability","dateAdded":"2025-07-07","dueDate":"2025-07-28","knownRansomware":false,"cvss":9.8,"epss":0.99714,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-10033/"},{"cveID":"CVE-2014-3931","vendor":"Looking Glass","product":"Multi-Router Looking Glass (MRLG)","vulnerabilityName":"Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability","dateAdded":"2025-07-07","dueDate":"2025-07-28","knownRansomware":false,"cvss":9.8,"epss":0.28978,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-3931/"},{"cveID":"CVE-2025-6554","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2025-07-02","dueDate":"2025-07-23","knownRansomware":false,"cvss":8.1,"epss":0.12723,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-6554/"},{"cveID":"CVE-2025-48928","vendor":"TeleMessage","product":"TM SGNL","vulnerabilityName":"TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability","dateAdded":"2025-07-01","dueDate":"2025-07-22","knownRansomware":false,"cvss":4,"epss":0.00553,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-48928/"},{"cveID":"CVE-2025-48927","vendor":"TeleMessage","product":"TM SGNL","vulnerabilityName":"TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability","dateAdded":"2025-07-01","dueDate":"2025-07-22","knownRansomware":false,"cvss":5.3,"epss":0.11104,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-48927/"},{"cveID":"CVE-2025-6543","vendor":"Citrix","product":"NetScaler ADC and Gateway","vulnerabilityName":"Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability","dateAdded":"2025-06-30","dueDate":"2025-07-21","knownRansomware":false,"cvss":9.2,"epss":0.10094,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-6543/"},{"cveID":"CVE-2024-54085","vendor":"AMI","product":"MegaRAC SPx","vulnerabilityName":"AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability","dateAdded":"2025-06-25","dueDate":"2025-07-16","knownRansomware":false,"cvss":10,"epss":0.60747,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-54085/"},{"cveID":"CVE-2024-0769","vendor":"D-Link","product":"DIR-859 Router","vulnerabilityName":"D-Link DIR-859 Router Path Traversal Vulnerability","dateAdded":"2025-06-25","dueDate":"2025-07-16","knownRansomware":false,"cvss":9.8,"epss":0.82714,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-0769/"},{"cveID":"CVE-2019-6693","vendor":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability","dateAdded":"2025-06-25","dueDate":"2025-07-16","knownRansomware":true,"cvss":6.5,"epss":0.05617,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-6693/"},{"cveID":"CVE-2023-0386","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Improper Ownership Management Vulnerability","dateAdded":"2025-06-17","dueDate":"2025-07-08","knownRansomware":false,"cvss":7.8,"epss":0.0788,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-0386/"},{"cveID":"CVE-2025-43200","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Unspecified Vulnerability","dateAdded":"2025-06-16","dueDate":"2025-07-07","knownRansomware":false,"cvss":4.2,"epss":0.01037,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-43200/"},{"cveID":"CVE-2023-33538","vendor":"TP-Link","product":"Multiple Routers","vulnerabilityName":"TP-Link Multiple Routers Command Injection Vulnerability","dateAdded":"2025-06-16","dueDate":"2025-07-07","knownRansomware":false,"cvss":8.8,"epss":0.41874,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-33538/"},{"cveID":"CVE-2025-33053","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows External Control of File Name or Path Vulnerability","dateAdded":"2025-06-10","dueDate":"2025-07-01","knownRansomware":false,"cvss":8.8,"epss":0.85354,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-33053/"},{"cveID":"CVE-2025-24016","vendor":"Wazuh","product":"Wazuh Server","vulnerabilityName":"Wazuh Server Deserialization of Untrusted Data Vulnerability","dateAdded":"2025-06-10","dueDate":"2025-07-01","knownRansomware":false,"cvss":9.9,"epss":0.9384,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-24016/"},{"cveID":"CVE-2025-32433","vendor":"Erlang","product":"Erlang/OTP","vulnerabilityName":"Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability","dateAdded":"2025-06-09","dueDate":"2025-06-30","knownRansomware":false,"cvss":10,"epss":0.98594,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-32433/"},{"cveID":"CVE-2024-42009","vendor":"Roundcube","product":"Webmail","vulnerabilityName":"RoundCube Webmail Cross-Site Scripting Vulnerability","dateAdded":"2025-06-09","dueDate":"2025-06-30","knownRansomware":false,"cvss":9.3,"epss":0.82882,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-42009/"},{"cveID":"CVE-2025-5419","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","dateAdded":"2025-06-05","dueDate":"2025-06-26","knownRansomware":false,"cvss":8.8,"epss":0.07821,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-5419/"},{"cveID":"CVE-2025-27038","vendor":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","dateAdded":"2025-06-03","dueDate":"2025-06-24","knownRansomware":false,"cvss":7.5,"epss":0.01016,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-27038/"},{"cveID":"CVE-2025-21480","vendor":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability","dateAdded":"2025-06-03","dueDate":"2025-06-24","knownRansomware":false,"cvss":8.6,"epss":0.0046,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-21480/"},{"cveID":"CVE-2025-21479","vendor":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability","dateAdded":"2025-06-03","dueDate":"2025-06-24","knownRansomware":false,"cvss":8.6,"epss":0.00843,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-21479/"},{"cveID":"CVE-2025-3935","vendor":"ConnectWise","product":"ScreenConnect","vulnerabilityName":"ConnectWise ScreenConnect Improper Authentication Vulnerability","dateAdded":"2025-06-02","dueDate":"2025-06-23","knownRansomware":false,"cvss":7.2,"epss":0.03392,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-3935/"},{"cveID":"CVE-2025-35939","vendor":"Craft CMS","product":"Craft CMS","vulnerabilityName":"Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability","dateAdded":"2025-06-02","dueDate":"2025-06-23","knownRansomware":false,"cvss":6.9,"epss":0.01317,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-35939/"},{"cveID":"CVE-2024-56145","vendor":"Craft CMS","product":"Craft CMS","vulnerabilityName":"Craft CMS Code Injection Vulnerability","dateAdded":"2025-06-02","dueDate":"2025-06-23","knownRansomware":false,"cvss":9.3,"epss":0.97446,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-56145/"},{"cveID":"CVE-2023-39780","vendor":"ASUS","product":"RT-AX55 Routers","vulnerabilityName":"ASUS RT-AX55 Routers OS Command Injection Vulnerability","dateAdded":"2025-06-02","dueDate":"2025-06-23","knownRansomware":false,"cvss":8.8,"epss":0.33878,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-39780/"},{"cveID":"CVE-2021-32030","vendor":"ASUS","product":"Routers","vulnerabilityName":"ASUS Routers Improper Authentication Vulnerability","dateAdded":"2025-06-02","dueDate":"2025-06-23","knownRansomware":false,"cvss":9.8,"epss":0.99393,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-32030/"},{"cveID":"CVE-2025-4632","vendor":"Samsung","product":"MagicINFO 9 Server","vulnerabilityName":"Samsung MagicINFO 9 Server Path Traversal Vulnerability","dateAdded":"2025-05-22","dueDate":"2025-06-12","knownRansomware":false,"cvss":9.8,"epss":0.24295,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-4632/"},{"cveID":"CVE-2025-4428","vendor":"Ivanti","product":"Endpoint Manager Mobile (EPMM)","vulnerabilityName":"Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","dateAdded":"2025-05-19","dueDate":"2025-06-09","knownRansomware":false,"cvss":8.8,"epss":0.86186,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-4428/"},{"cveID":"CVE-2025-4427","vendor":"Ivanti","product":"Endpoint Manager Mobile (EPMM)","vulnerabilityName":"Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability","dateAdded":"2025-05-19","dueDate":"2025-06-09","knownRansomware":false,"cvss":7.5,"epss":0.99927,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-4427/"},{"cveID":"CVE-2025-27920","vendor":"Srimax","product":"Output Messenger","vulnerabilityName":"Srimax Output Messenger Directory Traversal Vulnerability","dateAdded":"2025-05-19","dueDate":"2025-06-09","knownRansomware":false,"cvss":8.8,"epss":0.0184,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-27920/"},{"cveID":"CVE-2024-27443","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2025-05-19","dueDate":"2025-06-09","knownRansomware":false,"cvss":6.1,"epss":0.23632,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-27443/"},{"cveID":"CVE-2024-11182","vendor":"MDaemon","product":"Email Server","vulnerabilityName":"MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2025-05-19","dueDate":"2025-06-09","knownRansomware":false,"cvss":5.3,"epss":0.17705,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-11182/"},{"cveID":"CVE-2023-38950","vendor":"ZKTeco","product":"BioTime","vulnerabilityName":"ZKTeco BioTime Path Traversal Vulnerability","dateAdded":"2025-05-19","dueDate":"2025-06-09","knownRansomware":false,"cvss":7.5,"epss":0.84702,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-38950/"},{"cveID":"CVE-2025-42999","vendor":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Deserialization Vulnerability","dateAdded":"2025-05-15","dueDate":"2025-06-05","knownRansomware":true,"cvss":9.1,"epss":0.13868,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-42999/"},{"cveID":"CVE-2024-12987","vendor":"DrayTek","product":"Vigor Routers","vulnerabilityName":"DrayTek Vigor Routers OS Command Injection Vulnerability","dateAdded":"2025-05-15","dueDate":"2025-06-05","knownRansomware":false,"cvss":6.9,"epss":0.98084,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-12987/"},{"cveID":"CVE-2025-32756","vendor":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability","dateAdded":"2025-05-14","dueDate":"2025-06-04","knownRansomware":false,"cvss":9.8,"epss":0.29812,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-32756/"},{"cveID":"CVE-2025-32709","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","dateAdded":"2025-05-13","dueDate":"2025-06-03","knownRansomware":false,"cvss":7.8,"epss":0.02107,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-32709/"},{"cveID":"CVE-2025-32706","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","dateAdded":"2025-05-13","dueDate":"2025-06-03","knownRansomware":false,"cvss":7.8,"epss":0.0224,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-32706/"},{"cveID":"CVE-2025-32701","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","dateAdded":"2025-05-13","dueDate":"2025-06-03","knownRansomware":false,"cvss":7.8,"epss":0.01359,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-32701/"},{"cveID":"CVE-2025-30400","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows DWM Core Library Use-After-Free Vulnerability","dateAdded":"2025-05-13","dueDate":"2025-06-03","knownRansomware":false,"cvss":7.8,"epss":0.01855,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-30400/"},{"cveID":"CVE-2025-30397","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Scripting Engine Type Confusion Vulnerability","dateAdded":"2025-05-13","dueDate":"2025-06-03","knownRansomware":false,"cvss":7.5,"epss":0.26835,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-30397/"},{"cveID":"CVE-2025-47729","vendor":"TeleMessage","product":"TM SGNL","vulnerabilityName":"TeleMessage TM SGNL Hidden Functionality Vulnerability","dateAdded":"2025-05-12","dueDate":"2025-06-02","knownRansomware":false,"cvss":4.9,"epss":0.00428,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-47729/"},{"cveID":"CVE-2024-6047","vendor":"GeoVision","product":"Multiple Devices","vulnerabilityName":"GeoVision Devices OS Command Injection Vulnerability","dateAdded":"2025-05-07","dueDate":"2025-05-28","knownRansomware":false,"cvss":9.8,"epss":0.10072,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-6047/"},{"cveID":"CVE-2024-11120","vendor":"GeoVision","product":"Multiple Devices","vulnerabilityName":"GeoVision Devices OS Command Injection Vulnerability","dateAdded":"2025-05-07","dueDate":"2025-05-28","knownRansomware":false,"cvss":9.8,"epss":0.28386,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-11120/"},{"cveID":"CVE-2025-27363","vendor":"FreeType","product":"FreeType","vulnerabilityName":"FreeType Out-of-Bounds Write Vulnerability","dateAdded":"2025-05-06","dueDate":"2025-05-27","knownRansomware":false,"cvss":8.1,"epss":0.27775,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-27363/"},{"cveID":"CVE-2025-3248","vendor":"Langflow","product":"Langflow","vulnerabilityName":"Langflow Missing Authentication Vulnerability","dateAdded":"2025-05-05","dueDate":"2025-05-26","knownRansomware":true,"cvss":9.8,"epss":0.99989,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-3248/"},{"cveID":"CVE-2025-34028","vendor":"Commvault","product":"Command Center","vulnerabilityName":"Commvault Command Center Path Traversal Vulnerability","dateAdded":"2025-05-02","dueDate":"2025-05-23","knownRansomware":false,"cvss":9.3,"epss":0.97657,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-34028/"},{"cveID":"CVE-2024-58136","vendor":"Yiiframework","product":"Yii","vulnerabilityName":"Yiiframework Yii Improper Protection of Alternate Path Vulnerability","dateAdded":"2025-05-02","dueDate":"2025-05-23","knownRansomware":false,"cvss":9.8,"epss":0.84609,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-58136/"},{"cveID":"CVE-2024-38475","vendor":"Apache","product":"HTTP Server","vulnerabilityName":"Apache HTTP Server Improper Escaping of Output Vulnerability","dateAdded":"2025-05-01","dueDate":"2025-05-22","knownRansomware":false,"cvss":9.1,"epss":0.99957,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38475/"},{"cveID":"CVE-2023-44221","vendor":"SonicWall","product":"SMA100 Appliances","vulnerabilityName":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","dateAdded":"2025-05-01","dueDate":"2025-05-22","knownRansomware":false,"cvss":7.2,"epss":0.75103,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-44221/"},{"cveID":"CVE-2025-31324","vendor":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Unrestricted File Upload Vulnerability","dateAdded":"2025-04-29","dueDate":"2025-05-20","knownRansomware":true,"cvss":9.8,"epss":0.99512,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-31324/"},{"cveID":"CVE-2025-42599","vendor":"Qualitia","product":"Active! Mail","vulnerabilityName":"Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability","dateAdded":"2025-04-28","dueDate":"2025-05-19","knownRansomware":false,"cvss":9.8,"epss":0.03189,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-42599/"},{"cveID":"CVE-2025-3928","vendor":"Commvault","product":"Web Server","vulnerabilityName":"Commvault Web Server Unspecified Vulnerability","dateAdded":"2025-04-28","dueDate":"2025-05-19","knownRansomware":false,"cvss":8.7,"epss":0.0214,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-3928/"},{"cveID":"CVE-2025-1976","vendor":"Broadcom","product":"Brocade Fabric OS","vulnerabilityName":"Broadcom Brocade Fabric OS Code Injection Vulnerability","dateAdded":"2025-04-28","dueDate":"2025-05-19","knownRansomware":false,"cvss":8.6,"epss":0.00694,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-1976/"},{"cveID":"CVE-2025-31201","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Arbitrary Read and Write Vulnerability","dateAdded":"2025-04-17","dueDate":"2025-05-08","knownRansomware":false,"cvss":9.8,"epss":0.14652,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-31201/"},{"cveID":"CVE-2025-31200","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2025-04-17","dueDate":"2025-05-08","knownRansomware":false,"cvss":9.8,"epss":0.1966,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-31200/"},{"cveID":"CVE-2025-24054","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability","dateAdded":"2025-04-17","dueDate":"2025-05-08","knownRansomware":false,"cvss":5.4,"epss":0.58909,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-24054/"},{"cveID":"CVE-2021-20035","vendor":"SonicWall","product":"SMA100 Appliances","vulnerabilityName":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","dateAdded":"2025-04-16","dueDate":"2025-05-07","knownRansomware":false,"cvss":6.5,"epss":0.04181,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-20035/"},{"cveID":"CVE-2024-53197","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Out-of-Bounds Access Vulnerability","dateAdded":"2025-04-09","dueDate":"2025-04-30","knownRansomware":false,"cvss":7.8,"epss":0.03558,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-53197/"},{"cveID":"CVE-2024-53150","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Out-of-Bounds Read Vulnerability","dateAdded":"2025-04-09","dueDate":"2025-04-30","knownRansomware":false,"cvss":7.1,"epss":0.01351,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-53150/"},{"cveID":"CVE-2025-30406","vendor":"Gladinet","product":"CentreStack","vulnerabilityName":"Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability","dateAdded":"2025-04-08","dueDate":"2025-04-29","knownRansomware":false,"cvss":9.8,"epss":0.94252,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-30406/"},{"cveID":"CVE-2025-29824","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","dateAdded":"2025-04-08","dueDate":"2025-04-29","knownRansomware":true,"cvss":7.8,"epss":0.13904,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-29824/"},{"cveID":"CVE-2025-31161","vendor":"CrushFTP","product":"CrushFTP","vulnerabilityName":"CrushFTP Authentication Bypass Vulnerability","dateAdded":"2025-04-07","dueDate":"2025-04-28","knownRansomware":true,"cvss":9.8,"epss":0.99976,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-31161/"},{"cveID":"CVE-2025-22457","vendor":"Ivanti","product":"Connect Secure, Policy Secure, and ZTA Gateways","vulnerabilityName":"Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","dateAdded":"2025-04-04","dueDate":"2025-04-11","knownRansomware":true,"cvss":9.8,"epss":0.9998,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-22457/"},{"cveID":"CVE-2025-24813","vendor":"Apache","product":"Tomcat","vulnerabilityName":"Apache Tomcat Path Equivalence Vulnerability","dateAdded":"2025-04-01","dueDate":"2025-04-22","knownRansomware":false,"cvss":9.8,"epss":0.99927,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-24813/"},{"cveID":"CVE-2024-20439","vendor":"Cisco","product":"Smart Licensing Utility","vulnerabilityName":"Cisco Smart Licensing Utility Static Credential Vulnerability","dateAdded":"2025-03-31","dueDate":"2025-04-21","knownRansomware":false,"cvss":9.8,"epss":0.92062,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-20439/"},{"cveID":"CVE-2025-2783","vendor":"Google","product":"Chromium Mojo","vulnerabilityName":"Google Chromium Mojo Sandbox Escape Vulnerability","dateAdded":"2025-03-27","dueDate":"2025-04-17","knownRansomware":false,"cvss":8.3,"epss":0.09238,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-2783/"},{"cveID":"CVE-2019-9875","vendor":"Sitecore","product":"CMS and Experience Platform (XP)","vulnerabilityName":"Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability","dateAdded":"2025-03-26","dueDate":"2025-04-16","knownRansomware":false,"cvss":8.8,"epss":0.14042,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-9875/"},{"cveID":"CVE-2019-9874","vendor":"Sitecore","product":"CMS and Experience Platform (XP)","vulnerabilityName":"Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability","dateAdded":"2025-03-26","dueDate":"2025-04-16","knownRansomware":false,"cvss":9.8,"epss":0.83736,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-9874/"},{"cveID":"CVE-2025-30154","vendor":"reviewdog","product":"action-setup GitHub Action","vulnerabilityName":"reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability","dateAdded":"2025-03-24","dueDate":"2025-04-14","knownRansomware":false,"cvss":8.6,"epss":0.02395,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-30154/"},{"cveID":"CVE-2025-1316","vendor":"Edimax","product":"IC-7100 IP Camera","vulnerabilityName":"Edimax IC-7100 IP Camera OS Command Injection Vulnerability","dateAdded":"2025-03-19","dueDate":"2025-04-09","knownRansomware":false,"cvss":9.3,"epss":0.74482,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-1316/"},{"cveID":"CVE-2024-48248","vendor":"NAKIVO","product":"Backup and Replication","vulnerabilityName":"NAKIVO Backup and Replication Absolute Path Traversal Vulnerability","dateAdded":"2025-03-19","dueDate":"2025-04-09","knownRansomware":false,"cvss":8.6,"epss":0.94356,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-48248/"},{"cveID":"CVE-2017-12637","vendor":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Directory Traversal Vulnerability","dateAdded":"2025-03-19","dueDate":"2025-04-09","knownRansomware":false,"cvss":7.5,"epss":0.95111,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-12637/"},{"cveID":"CVE-2025-30066","vendor":"tj-actions","product":"changed-files GitHub Action","vulnerabilityName":"tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability","dateAdded":"2025-03-18","dueDate":"2025-04-08","knownRansomware":false,"cvss":8.6,"epss":0.69794,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-30066/"},{"cveID":"CVE-2025-24472","vendor":"Fortinet","product":"FortiOS and FortiProxy","vulnerabilityName":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","dateAdded":"2025-03-18","dueDate":"2025-04-08","knownRansomware":true,"cvss":8.1,"epss":0.07106,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-24472/"},{"cveID":"CVE-2025-24201","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","dateAdded":"2025-03-13","dueDate":"2025-04-03","knownRansomware":false,"cvss":10,"epss":0.04117,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-24201/"},{"cveID":"CVE-2025-21590","vendor":"Juniper","product":"Junos OS","vulnerabilityName":"Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability","dateAdded":"2025-03-13","dueDate":"2025-04-03","knownRansomware":false,"cvss":6.7,"epss":0.01715,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-21590/"},{"cveID":"CVE-2025-26633","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability","dateAdded":"2025-03-11","dueDate":"2025-04-01","knownRansomware":true,"cvss":7,"epss":0.30391,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-26633/"},{"cveID":"CVE-2025-24993","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability","dateAdded":"2025-03-11","dueDate":"2025-04-01","knownRansomware":false,"cvss":7.8,"epss":0.02173,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-24993/"},{"cveID":"CVE-2025-24991","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability","dateAdded":"2025-03-11","dueDate":"2025-04-01","knownRansomware":false,"cvss":5.5,"epss":0.01979,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-24991/"},{"cveID":"CVE-2025-24985","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability","dateAdded":"2025-03-11","dueDate":"2025-04-01","knownRansomware":false,"cvss":7.8,"epss":0.03846,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-24985/"},{"cveID":"CVE-2025-24984","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows NTFS Information Disclosure Vulnerability","dateAdded":"2025-03-11","dueDate":"2025-04-01","knownRansomware":false,"cvss":4.6,"epss":0.01956,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-24984/"},{"cveID":"CVE-2025-24983","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Win32k Use-After-Free Vulnerability","dateAdded":"2025-03-11","dueDate":"2025-04-01","knownRansomware":false,"cvss":7,"epss":0.01348,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-24983/"},{"cveID":"CVE-2025-25181","vendor":"Advantive","product":"VeraCore","vulnerabilityName":"Advantive VeraCore SQL Injection Vulnerability","dateAdded":"2025-03-10","dueDate":"2025-03-31","knownRansomware":false,"cvss":7.5,"epss":0.57031,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-25181/"},{"cveID":"CVE-2024-57968","vendor":"Advantive","product":"VeraCore","vulnerabilityName":"Advantive VeraCore Unrestricted File Upload Vulnerability","dateAdded":"2025-03-10","dueDate":"2025-03-31","knownRansomware":false,"cvss":8.8,"epss":0.32284,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-57968/"},{"cveID":"CVE-2024-13161","vendor":"Ivanti","product":"Endpoint Manager (EPM)","vulnerabilityName":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","dateAdded":"2025-03-10","dueDate":"2025-03-31","knownRansomware":false,"cvss":7.5,"epss":0.90081,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-13161/"},{"cveID":"CVE-2024-13160","vendor":"Ivanti","product":"Endpoint Manager (EPM)","vulnerabilityName":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","dateAdded":"2025-03-10","dueDate":"2025-03-31","knownRansomware":false,"cvss":7.5,"epss":0.91247,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-13160/"},{"cveID":"CVE-2024-13159","vendor":"Ivanti","product":"Endpoint Manager (EPM)","vulnerabilityName":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","dateAdded":"2025-03-10","dueDate":"2025-03-31","knownRansomware":false,"cvss":7.5,"epss":0.99992,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-13159/"},{"cveID":"CVE-2025-22226","vendor":"VMware","product":"ESXi, Workstation, and Fusion","vulnerabilityName":"VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability","dateAdded":"2025-03-04","dueDate":"2025-03-25","knownRansomware":false,"cvss":6,"epss":0.01735,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-22226/"},{"cveID":"CVE-2025-22225","vendor":"VMware","product":"ESXi","vulnerabilityName":"VMware ESXi Arbitrary Write Vulnerability","dateAdded":"2025-03-04","dueDate":"2025-03-25","knownRansomware":true,"cvss":8.2,"epss":0.00997,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-22225/"},{"cveID":"CVE-2025-22224","vendor":"VMware","product":"ESXi and Workstation","vulnerabilityName":"VMware ESXi and Workstation TOCTOU Race Condition Vulnerability","dateAdded":"2025-03-04","dueDate":"2025-03-25","knownRansomware":false,"cvss":8.2,"epss":0.01561,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-22224/"},{"cveID":"CVE-2024-50302","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Use of Uninitialized Resource Vulnerability","dateAdded":"2025-03-04","dueDate":"2025-03-25","knownRansomware":false,"cvss":5.5,"epss":0.00811,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-50302/"},{"cveID":"CVE-2024-4885","vendor":"Progress","product":"WhatsUp Gold","vulnerabilityName":"Progress WhatsUp Gold Path Traversal Vulnerability","dateAdded":"2025-03-03","dueDate":"2025-03-24","knownRansomware":false,"cvss":9.8,"epss":0.99288,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-4885/"},{"cveID":"CVE-2023-20118","vendor":"Cisco","product":"Small Business RV Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Command Injection Vulnerability","dateAdded":"2025-03-03","dueDate":"2025-03-24","knownRansomware":false,"cvss":7.2,"epss":0.54107,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-20118/"},{"cveID":"CVE-2022-43939","vendor":"Hitachi Vantara","product":"Pentaho Business Analytics (BA) Server","vulnerabilityName":"Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability","dateAdded":"2025-03-03","dueDate":"2025-03-24","knownRansomware":false,"cvss":9.8,"epss":0.92266,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-43939/"},{"cveID":"CVE-2022-43769","vendor":"Hitachi Vantara","product":"Pentaho Business Analytics (BA) Server","vulnerabilityName":"Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability","dateAdded":"2025-03-03","dueDate":"2025-03-24","knownRansomware":false,"cvss":7.2,"epss":0.9767,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-43769/"},{"cveID":"CVE-2018-8639","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability","dateAdded":"2025-03-03","dueDate":"2025-03-24","knownRansomware":true,"cvss":7.8,"epss":0.22179,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-8639/"},{"cveID":"CVE-2024-49035","vendor":"Microsoft","product":"Partner Center","vulnerabilityName":"Microsoft Partner Center Improper Access Control Vulnerability","dateAdded":"2025-02-25","dueDate":"2025-03-18","knownRansomware":false,"cvss":9.8,"epss":0.01311,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-49035/"},{"cveID":"CVE-2023-34192","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2025-02-25","dueDate":"2025-03-18","knownRansomware":false,"cvss":9,"epss":0.77266,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-34192/"},{"cveID":"CVE-2024-20953","vendor":"Oracle","product":"Agile Product Lifecycle Management (PLM)","vulnerabilityName":"Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability","dateAdded":"2025-02-24","dueDate":"2025-03-17","knownRansomware":false,"cvss":8.8,"epss":0.03934,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-20953/"},{"cveID":"CVE-2017-3066","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization Vulnerability","dateAdded":"2025-02-24","dueDate":"2025-03-17","knownRansomware":false,"cvss":9.8,"epss":0.90597,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-3066/"},{"cveID":"CVE-2025-24989","vendor":"Microsoft","product":"Power Pages","vulnerabilityName":"Microsoft Power Pages Improper Access Control Vulnerability","dateAdded":"2025-02-21","dueDate":"2025-03-14","knownRansomware":false,"cvss":9.8,"epss":0.01591,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-24989/"},{"cveID":"CVE-2025-23209","vendor":"Craft CMS","product":"Craft CMS","vulnerabilityName":"Craft CMS Code Injection Vulnerability","dateAdded":"2025-02-20","dueDate":"2025-03-13","knownRansomware":false,"cvss":8.1,"epss":0.21776,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-23209/"},{"cveID":"CVE-2025-0111","vendor":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS File Read Vulnerability","dateAdded":"2025-02-20","dueDate":"2025-03-13","knownRansomware":false,"cvss":7.1,"epss":0.01999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-0111/"},{"cveID":"CVE-2025-0108","vendor":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","dateAdded":"2025-02-18","dueDate":"2025-03-11","knownRansomware":false,"cvss":8.8,"epss":0.98455,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-0108/"},{"cveID":"CVE-2024-53704","vendor":"SonicWall","product":"SonicOS","vulnerabilityName":"SonicWall SonicOS SSLVPN Improper Authentication Vulnerability","dateAdded":"2025-02-18","dueDate":"2025-03-11","knownRansomware":true,"cvss":9.8,"epss":0.95132,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-53704/"},{"cveID":"CVE-2024-57727","vendor":"SimpleHelp","product":"SimpleHelp","vulnerabilityName":"SimpleHelp Path Traversal Vulnerability","dateAdded":"2025-02-13","dueDate":"2025-03-06","knownRansomware":true,"cvss":7.5,"epss":0.95151,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-57727/"},{"cveID":"CVE-2025-24200","vendor":"Apple","product":"iOS and iPadOS","vulnerabilityName":"Apple iOS and iPadOS Incorrect Authorization Vulnerability","dateAdded":"2025-02-12","dueDate":"2025-03-05","knownRansomware":false,"cvss":6.1,"epss":0.04457,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-24200/"},{"cveID":"CVE-2024-41710","vendor":"Mitel","product":"SIP Phones","vulnerabilityName":"Mitel SIP Phones Argument Injection Vulnerability","dateAdded":"2025-02-12","dueDate":"2025-03-05","knownRansomware":false,"cvss":7.2,"epss":0.41646,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-41710/"},{"cveID":"CVE-2025-21418","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability","dateAdded":"2025-02-11","dueDate":"2025-03-04","knownRansomware":false,"cvss":7.8,"epss":0.01568,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-21418/"},{"cveID":"CVE-2025-21391","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Storage Link Following Vulnerability","dateAdded":"2025-02-11","dueDate":"2025-03-04","knownRansomware":false,"cvss":7.1,"epss":0.02303,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-21391/"},{"cveID":"CVE-2024-40891","vendor":"Zyxel","product":"DSL CPE Devices","vulnerabilityName":"Zyxel DSL CPE OS Command Injection Vulnerability","dateAdded":"2025-02-11","dueDate":"2025-03-04","knownRansomware":false,"cvss":8.8,"epss":0.21536,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-40891/"},{"cveID":"CVE-2024-40890","vendor":"Zyxel","product":"DSL CPE Devices","vulnerabilityName":"Zyxel DSL CPE OS Command Injection Vulnerability","dateAdded":"2025-02-11","dueDate":"2025-03-04","knownRansomware":false,"cvss":8.8,"epss":0.22251,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-40890/"},{"cveID":"CVE-2025-0994","vendor":"Trimble","product":"Cityworks","vulnerabilityName":"Trimble Cityworks Deserialization Vulnerability","dateAdded":"2025-02-07","dueDate":"2025-02-28","knownRansomware":false,"cvss":8.6,"epss":0.31309,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-0994/"},{"cveID":"CVE-2025-0411","vendor":"7-Zip","product":"7-Zip","vulnerabilityName":"7-Zip Mark of the Web Bypass Vulnerability","dateAdded":"2025-02-06","dueDate":"2025-02-27","knownRansomware":false,"cvss":7,"epss":0.67071,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-0411/"},{"cveID":"CVE-2024-21413","vendor":"Microsoft","product":"Office Outlook","vulnerabilityName":"Microsoft Outlook Improper Input Validation Vulnerability","dateAdded":"2025-02-06","dueDate":"2025-02-27","knownRansomware":false,"cvss":9.8,"epss":0.9466,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-21413/"},{"cveID":"CVE-2022-23748","vendor":"Audinate","product":"Dante Discovery","vulnerabilityName":"Dante Discovery Process Control Vulnerability","dateAdded":"2025-02-06","dueDate":"2025-02-27","knownRansomware":false,"cvss":7.8,"epss":0.09092,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-23748/"},{"cveID":"CVE-2020-29574","vendor":"Sophos","product":"CyberoamOS","vulnerabilityName":"CyberoamOS (CROS) SQL Injection Vulnerability","dateAdded":"2025-02-06","dueDate":"2025-02-27","knownRansomware":true,"cvss":9.8,"epss":0.04658,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-29574/"},{"cveID":"CVE-2020-15069","vendor":"Sophos","product":"XG Firewall","vulnerabilityName":"Sophos XG Firewall Buffer Overflow Vulnerability","dateAdded":"2025-02-06","dueDate":"2025-02-27","knownRansomware":false,"cvss":9.8,"epss":0.10674,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-15069/"},{"cveID":"CVE-2024-53104","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Out-of-Bounds Write Vulnerability","dateAdded":"2025-02-05","dueDate":"2025-02-26","knownRansomware":false,"cvss":7.8,"epss":0.03395,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-53104/"},{"cveID":"CVE-2024-45195","vendor":"Apache","product":"OFBiz","vulnerabilityName":"Apache OFBiz Forced Browsing Vulnerability","dateAdded":"2025-02-04","dueDate":"2025-02-25","knownRansomware":false,"cvss":7.5,"epss":0.99983,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-45195/"},{"cveID":"CVE-2024-29059","vendor":"Microsoft","product":".NET Framework","vulnerabilityName":"Microsoft .NET Framework Information Disclosure Vulnerability","dateAdded":"2025-02-04","dueDate":"2025-02-25","knownRansomware":false,"cvss":7.5,"epss":0.98624,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-29059/"},{"cveID":"CVE-2018-9276","vendor":"Paessler","product":"PRTG Network Monitor","vulnerabilityName":"Paessler PRTG Network Monitor OS Command Injection Vulnerability","dateAdded":"2025-02-04","dueDate":"2025-02-25","knownRansomware":false,"cvss":7.2,"epss":0.86996,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-9276/"},{"cveID":"CVE-2018-19410","vendor":"Paessler","product":"PRTG Network Monitor","vulnerabilityName":"Paessler PRTG Network Monitor Local File Inclusion Vulnerability","dateAdded":"2025-02-04","dueDate":"2025-02-25","knownRansomware":false,"cvss":9.8,"epss":0.97939,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-19410/"},{"cveID":"CVE-2025-24085","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Use-After-Free Vulnerability","dateAdded":"2025-01-29","dueDate":"2025-02-19","knownRansomware":false,"cvss":10,"epss":0.17648,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-24085/"},{"cveID":"CVE-2025-23006","vendor":"SonicWall","product":"SMA1000 Appliances","vulnerabilityName":"SonicWall SMA1000 Appliances Deserialization Vulnerability","dateAdded":"2025-01-24","dueDate":"2025-02-14","knownRansomware":true,"cvss":9.8,"epss":0.23432,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-23006/"},{"cveID":"CVE-2020-11023","vendor":"JQuery","product":"JQuery","vulnerabilityName":"JQuery Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2025-01-23","dueDate":"2025-02-13","knownRansomware":false,"cvss":6.1,"epss":0.8383,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-11023/"},{"cveID":"CVE-2024-50603","vendor":"Aviatrix","product":"Controllers","vulnerabilityName":"Aviatrix Controllers OS Command Injection Vulnerability","dateAdded":"2025-01-16","dueDate":"2025-02-06","knownRansomware":false,"cvss":9.8,"epss":0.98545,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-50603/"},{"cveID":"CVE-2025-21335","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","dateAdded":"2025-01-14","dueDate":"2025-02-04","knownRansomware":false,"cvss":7.8,"epss":0.0139,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-21335/"},{"cveID":"CVE-2025-21334","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","dateAdded":"2025-01-14","dueDate":"2025-02-04","knownRansomware":false,"cvss":7.8,"epss":0.01561,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-21334/"},{"cveID":"CVE-2025-21333","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability","dateAdded":"2025-01-14","dueDate":"2025-02-04","knownRansomware":false,"cvss":7.8,"epss":0.09988,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-21333/"},{"cveID":"CVE-2024-55591","vendor":"Fortinet","product":"FortiOS and FortiProxy","vulnerabilityName":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","dateAdded":"2025-01-14","dueDate":"2025-01-21","knownRansomware":true,"cvss":9.8,"epss":0.98259,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-55591/"},{"cveID":"CVE-2024-12686","vendor":"BeyondTrust","product":"Privileged Remote Access (PRA) and Remote Support (RS)","vulnerabilityName":"BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability","dateAdded":"2025-01-13","dueDate":"2025-02-03","knownRansomware":false,"cvss":7.2,"epss":0.13788,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-12686/"},{"cveID":"CVE-2023-48365","vendor":"Qlik","product":"Sense","vulnerabilityName":"Qlik Sense HTTP Tunneling Vulnerability","dateAdded":"2025-01-13","dueDate":"2025-02-03","knownRansomware":true,"cvss":9.9,"epss":0.24676,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-48365/"},{"cveID":"CVE-2025-0282","vendor":"Ivanti","product":"Connect Secure, Policy Secure, and ZTA Gateways","vulnerabilityName":"Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","dateAdded":"2025-01-08","dueDate":"2025-01-15","knownRansomware":true,"cvss":9,"epss":0.99979,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2025-0282/"},{"cveID":"CVE-2024-55550","vendor":"Mitel","product":"MiCollab","vulnerabilityName":"Mitel MiCollab Path Traversal Vulnerability","dateAdded":"2025-01-07","dueDate":"2025-01-28","knownRansomware":true,"cvss":2.7,"epss":0.37848,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-55550/"},{"cveID":"CVE-2024-41713","vendor":"Mitel","product":"MiCollab","vulnerabilityName":"Mitel MiCollab Path Traversal Vulnerability","dateAdded":"2025-01-07","dueDate":"2025-01-28","knownRansomware":true,"cvss":9.1,"epss":0.9811,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-41713/"},{"cveID":"CVE-2020-2883","vendor":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Unspecified Vulnerability","dateAdded":"2025-01-07","dueDate":"2025-01-28","knownRansomware":false,"cvss":9.8,"epss":0.94928,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-2883/"},{"cveID":"CVE-2024-3393","vendor":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability","dateAdded":"2024-12-30","dueDate":"2025-01-20","knownRansomware":false,"cvss":8.7,"epss":0.28408,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-3393/"},{"cveID":"CVE-2021-44207","vendor":"Acclaim Systems","product":"USAHERDS","vulnerabilityName":"Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability","dateAdded":"2024-12-23","dueDate":"2025-01-13","knownRansomware":false,"cvss":8.1,"epss":0.17578,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-44207/"},{"cveID":"CVE-2024-12356","vendor":"BeyondTrust","product":"Privileged Remote Access (PRA) and Remote Support (RS)","vulnerabilityName":"BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability","dateAdded":"2024-12-19","dueDate":"2024-12-27","knownRansomware":false,"cvss":9.8,"epss":0.87991,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-12356/"},{"cveID":"CVE-2022-23227","vendor":"NUUO","product":"NVRmini2 Devices","vulnerabilityName":"NUUO NVRmini2 Devices Missing Authentication Vulnerability","dateAdded":"2024-12-18","dueDate":"2025-01-08","knownRansomware":false,"cvss":9.8,"epss":0.48497,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-23227/"},{"cveID":"CVE-2021-40407","vendor":"Reolink","product":"RLC-410W IP Camera","vulnerabilityName":"Reolink RLC-410W IP Camera OS Command Injection Vulnerability","dateAdded":"2024-12-18","dueDate":"2025-01-08","knownRansomware":false,"cvss":7.2,"epss":0.47635,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-40407/"},{"cveID":"CVE-2019-11001","vendor":"Reolink","product":"Multiple IP Cameras","vulnerabilityName":"Reolink Multiple IP Cameras OS Command Injection Vulnerability","dateAdded":"2024-12-18","dueDate":"2025-01-08","knownRansomware":false,"cvss":7.2,"epss":0.37542,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-11001/"},{"cveID":"CVE-2018-14933","vendor":"NUUO","product":"NVRmini Devices","vulnerabilityName":"NUUO NVRmini Devices OS Command Injection Vulnerability","dateAdded":"2024-12-18","dueDate":"2025-01-08","knownRansomware":false,"cvss":9.8,"epss":0.94884,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-14933/"},{"cveID":"CVE-2024-55956","vendor":"Cleo","product":"Multiple Products","vulnerabilityName":"Cleo Multiple Products Unauthenticated File Upload Vulnerability","dateAdded":"2024-12-17","dueDate":"2025-01-07","knownRansomware":true,"cvss":9.8,"epss":0.94037,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-55956/"},{"cveID":"CVE-2024-35250","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability","dateAdded":"2024-12-16","dueDate":"2025-01-06","knownRansomware":false,"cvss":7.8,"epss":0.25033,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-35250/"},{"cveID":"CVE-2024-20767","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Improper Access Control Vulnerability","dateAdded":"2024-12-16","dueDate":"2025-01-06","knownRansomware":false,"cvss":7.4,"epss":0.98514,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-20767/"},{"cveID":"CVE-2024-50623","vendor":"Cleo","product":"Multiple Products","vulnerabilityName":"Cleo Multiple Products Unrestricted File Upload Vulnerability","dateAdded":"2024-12-13","dueDate":"2025-01-03","knownRansomware":true,"cvss":9.8,"epss":0.98607,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-50623/"},{"cveID":"CVE-2024-49138","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","dateAdded":"2024-12-10","dueDate":"2024-12-31","knownRansomware":false,"cvss":7.8,"epss":0.25414,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-49138/"},{"cveID":"CVE-2024-51378","vendor":"CyberPersons","product":"CyberPanel","vulnerabilityName":"CyberPanel Incorrect Default Permissions Vulnerability","dateAdded":"2024-12-04","dueDate":"2024-12-25","knownRansomware":true,"cvss":9.8,"epss":0.94734,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-51378/"},{"cveID":"CVE-2024-11680","vendor":"ProjectSend","product":"ProjectSend","vulnerabilityName":"ProjectSend Improper Authentication Vulnerability","dateAdded":"2024-12-03","dueDate":"2024-12-24","knownRansomware":false,"cvss":9.8,"epss":0.91697,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-11680/"},{"cveID":"CVE-2024-11667","vendor":"Zyxel","product":"Multiple Firewalls","vulnerabilityName":"Zyxel Multiple Firewalls Path Traversal Vulnerability","dateAdded":"2024-12-03","dueDate":"2024-12-24","knownRansomware":true,"cvss":9.8,"epss":0.02929,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-11667/"},{"cveID":"CVE-2023-45727","vendor":"North Grid","product":"Proself","vulnerabilityName":"North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability","dateAdded":"2024-12-03","dueDate":"2024-12-24","knownRansomware":false,"cvss":7.5,"epss":0.03542,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-45727/"},{"cveID":"CVE-2023-28461","vendor":"Array Networks","product":"AG/vxAG ArrayOS","vulnerabilityName":"Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability","dateAdded":"2024-11-25","dueDate":"2024-12-16","knownRansomware":true,"cvss":9.8,"epss":0.68079,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-28461/"},{"cveID":"CVE-2024-44309","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2024-11-21","dueDate":"2024-12-12","knownRansomware":false,"cvss":6.3,"epss":0.2259,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-44309/"},{"cveID":"CVE-2024-44308","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Code Execution Vulnerability","dateAdded":"2024-11-21","dueDate":"2024-12-12","knownRansomware":false,"cvss":8.8,"epss":0.09364,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-44308/"},{"cveID":"CVE-2024-21287","vendor":"Oracle","product":"Agile Product Lifecycle Management (PLM)","vulnerabilityName":"Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability","dateAdded":"2024-11-21","dueDate":"2024-12-12","knownRansomware":false,"cvss":7.5,"epss":0.01723,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-21287/"},{"cveID":"CVE-2024-38813","vendor":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Privilege Escalation Vulnerability","dateAdded":"2024-11-20","dueDate":"2024-12-11","knownRansomware":false,"cvss":9.8,"epss":0.17355,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38813/"},{"cveID":"CVE-2024-38812","vendor":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Heap-Based Buffer Overflow Vulnerability","dateAdded":"2024-11-20","dueDate":"2024-12-11","knownRansomware":false,"cvss":9.8,"epss":0.54571,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38812/"},{"cveID":"CVE-2024-9474","vendor":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability","dateAdded":"2024-11-18","dueDate":"2024-12-09","knownRansomware":true,"cvss":6.9,"epss":0.94701,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-9474/"},{"cveID":"CVE-2024-1212","vendor":"Progress","product":"Kemp LoadMaster","vulnerabilityName":"Progress Kemp LoadMaster OS Command Injection Vulnerability","dateAdded":"2024-11-18","dueDate":"2024-12-09","knownRansomware":false,"cvss":9.8,"epss":0.95388,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-1212/"},{"cveID":"CVE-2024-0012","vendor":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability","dateAdded":"2024-11-18","dueDate":"2024-12-09","knownRansomware":true,"cvss":9.3,"epss":0.99718,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-0012/"},{"cveID":"CVE-2024-9465","vendor":"Palo Alto Networks","product":"Expedition","vulnerabilityName":"Palo Alto Networks Expedition SQL Injection Vulnerability","dateAdded":"2024-11-14","dueDate":"2024-12-05","knownRansomware":false,"cvss":9.2,"epss":0.99626,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-9465/"},{"cveID":"CVE-2024-9463","vendor":"Palo Alto Networks","product":"Expedition","vulnerabilityName":"Palo Alto Networks Expedition OS Command Injection Vulnerability","dateAdded":"2024-11-14","dueDate":"2024-12-05","knownRansomware":false,"cvss":9.9,"epss":0.98546,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-9463/"},{"cveID":"CVE-2024-49039","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Task Scheduler Privilege Escalation Vulnerability","dateAdded":"2024-11-12","dueDate":"2024-12-03","knownRansomware":true,"cvss":8.8,"epss":0.14179,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-49039/"},{"cveID":"CVE-2024-43451","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability","dateAdded":"2024-11-12","dueDate":"2024-12-03","knownRansomware":false,"cvss":6.5,"epss":0.84108,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-43451/"},{"cveID":"CVE-2021-41277","vendor":"Metabase","product":"Metabase","vulnerabilityName":"Metabase GeoJSON API Local File Inclusion Vulnerability","dateAdded":"2024-11-12","dueDate":"2024-12-03","knownRansomware":false,"cvss":7.5,"epss":0.97178,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-41277/"},{"cveID":"CVE-2021-26086","vendor":"Atlassian","product":"Jira Server and Data Center","vulnerabilityName":"Atlassian Jira Server and Data Center Path Traversal Vulnerability","dateAdded":"2024-11-12","dueDate":"2024-12-03","knownRansomware":false,"cvss":5.3,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-26086/"},{"cveID":"CVE-2014-2120","vendor":"Cisco","product":"Adaptive Security Appliance (ASA)","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2024-11-12","dueDate":"2024-12-03","knownRansomware":false,"cvss":6.1,"epss":0.18919,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-2120/"},{"cveID":"CVE-2024-5910","vendor":"Palo Alto Networks","product":"Expedition","vulnerabilityName":"Palo Alto Networks Expedition Missing Authentication Vulnerability","dateAdded":"2024-11-07","dueDate":"2024-11-28","knownRansomware":false,"cvss":9.3,"epss":0.91783,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-5910/"},{"cveID":"CVE-2024-51567","vendor":"CyberPersons","product":"CyberPanel","vulnerabilityName":"CyberPanel Incorrect Default Permissions Vulnerability","dateAdded":"2024-11-07","dueDate":"2024-11-28","knownRansomware":true,"cvss":9.8,"epss":0.86518,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-51567/"},{"cveID":"CVE-2024-43093","vendor":"Android","product":"Framework","vulnerabilityName":"Android Framework Privilege Escalation Vulnerability","dateAdded":"2024-11-07","dueDate":"2024-11-28","knownRansomware":false,"cvss":7.3,"epss":0.00715,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-43093/"},{"cveID":"CVE-2019-16278","vendor":"Nostromo","product":"nhttpd","vulnerabilityName":"Nostromo nhttpd Directory Traversal Vulnerability","dateAdded":"2024-11-07","dueDate":"2024-11-28","knownRansomware":false,"cvss":9.8,"epss":0.99033,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-16278/"},{"cveID":"CVE-2024-8957","vendor":"PTZOptics","product":"PT30X-SDI/NDI Cameras","vulnerabilityName":"PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability","dateAdded":"2024-11-04","dueDate":"2024-11-25","knownRansomware":false,"cvss":7.2,"epss":0.80964,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-8957/"},{"cveID":"CVE-2024-8956","vendor":"PTZOptics","product":"PT30X-SDI/NDI Cameras","vulnerabilityName":"PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability","dateAdded":"2024-11-04","dueDate":"2024-11-25","knownRansomware":false,"cvss":9.1,"epss":0.61279,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-8956/"},{"cveID":"CVE-2024-37383","vendor":"Roundcube","product":"Webmail","vulnerabilityName":"RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2024-10-24","dueDate":"2024-11-14","knownRansomware":false,"cvss":6.1,"epss":0.73296,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-37383/"},{"cveID":"CVE-2024-20481","vendor":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Denial-of-Service Vulnerability","dateAdded":"2024-10-24","dueDate":"2024-11-14","knownRansomware":false,"cvss":5.8,"epss":0.1575,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-20481/"},{"cveID":"CVE-2024-47575","vendor":"Fortinet","product":"FortiManager","vulnerabilityName":"Fortinet FortiManager Missing Authentication Vulnerability","dateAdded":"2024-10-23","dueDate":"2024-11-13","knownRansomware":false,"cvss":9.8,"epss":0.9507,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-47575/"},{"cveID":"CVE-2024-38094","vendor":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Deserialization Vulnerability","dateAdded":"2024-10-22","dueDate":"2024-11-12","knownRansomware":true,"cvss":7.2,"epss":0.50892,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38094/"},{"cveID":"CVE-2024-9537","vendor":"ScienceLogic","product":"SL1","vulnerabilityName":"ScienceLogic SL1 Unspecified Vulnerability","dateAdded":"2024-10-21","dueDate":"2024-11-11","knownRansomware":false,"cvss":9.3,"epss":0.03826,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-9537/"},{"cveID":"CVE-2024-40711","vendor":"Veeam","product":"Backup & Replication","vulnerabilityName":"Veeam Backup and Replication Deserialization Vulnerability","dateAdded":"2024-10-17","dueDate":"2024-11-07","knownRansomware":true,"cvss":9.8,"epss":0.90369,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-40711/"},{"cveID":"CVE-2024-9680","vendor":"Mozilla","product":"Firefox","vulnerabilityName":"Mozilla Firefox Use-After-Free Vulnerability","dateAdded":"2024-10-15","dueDate":"2024-11-05","knownRansomware":true,"cvss":9.8,"epss":0.23184,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-9680/"},{"cveID":"CVE-2024-30088","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel TOCTOU Race Condition Vulnerability","dateAdded":"2024-10-15","dueDate":"2024-11-05","knownRansomware":true,"cvss":7,"epss":0.68202,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-30088/"},{"cveID":"CVE-2024-28987","vendor":"SolarWinds","product":"Web Help Desk","vulnerabilityName":"SolarWinds Web Help Desk Hardcoded Credential Vulnerability","dateAdded":"2024-10-15","dueDate":"2024-11-05","knownRansomware":false,"cvss":9.1,"epss":0.93208,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-28987/"},{"cveID":"CVE-2024-9380","vendor":"Ivanti","product":"Cloud Services Appliance (CSA)","vulnerabilityName":"Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability","dateAdded":"2024-10-09","dueDate":"2024-10-30","knownRansomware":false,"cvss":7.2,"epss":0.63172,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-9380/"},{"cveID":"CVE-2024-9379","vendor":"Ivanti","product":"Cloud Services Appliance (CSA)","vulnerabilityName":"Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability","dateAdded":"2024-10-09","dueDate":"2024-10-30","knownRansomware":false,"cvss":7.2,"epss":0.43782,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-9379/"},{"cveID":"CVE-2024-23113","vendor":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Format String Vulnerability","dateAdded":"2024-10-09","dueDate":"2024-10-30","knownRansomware":false,"cvss":9.8,"epss":0.61725,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-23113/"},{"cveID":"CVE-2024-43573","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","dateAdded":"2024-10-08","dueDate":"2024-10-29","knownRansomware":false,"cvss":8.1,"epss":0.44098,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-43573/"},{"cveID":"CVE-2024-43572","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Management Console Remote Code Execution Vulnerability","dateAdded":"2024-10-08","dueDate":"2024-10-29","knownRansomware":false,"cvss":7.8,"epss":0.66926,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-43572/"},{"cveID":"CVE-2024-43047","vendor":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","dateAdded":"2024-10-08","dueDate":"2024-10-29","knownRansomware":false,"cvss":7.8,"epss":0.00674,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-43047/"},{"cveID":"CVE-2024-45519","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability","dateAdded":"2024-10-03","dueDate":"2024-10-24","knownRansomware":false,"cvss":9.8,"epss":0.99907,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-45519/"},{"cveID":"CVE-2024-29824","vendor":"Ivanti","product":"Endpoint Manager (EPM)","vulnerabilityName":"Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability","dateAdded":"2024-10-02","dueDate":"2024-10-23","knownRansomware":false,"cvss":8.8,"epss":0.99951,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-29824/"},{"cveID":"CVE-2023-25280","vendor":"D-Link","product":"DIR-820 Router","vulnerabilityName":"D-Link DIR-820 Router OS Command Injection Vulnerability","dateAdded":"2024-09-30","dueDate":"2024-10-21","knownRansomware":false,"cvss":9.8,"epss":0.97864,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-25280/"},{"cveID":"CVE-2020-15415","vendor":"DrayTek","product":"Multiple Vigor Routers","vulnerabilityName":"DrayTek Multiple Vigor Routers OS Command Injection Vulnerability","dateAdded":"2024-09-30","dueDate":"2024-10-21","knownRansomware":false,"cvss":9.8,"epss":0.8448,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-15415/"},{"cveID":"CVE-2019-0344","vendor":"SAP","product":"Commerce Cloud","vulnerabilityName":"SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-09-30","dueDate":"2024-10-21","knownRansomware":false,"cvss":9.8,"epss":0.07079,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0344/"},{"cveID":"CVE-2024-7593","vendor":"Ivanti","product":"Virtual Traffic Manager","vulnerabilityName":"Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability","dateAdded":"2024-09-24","dueDate":"2024-10-15","knownRansomware":false,"cvss":9.8,"epss":0.9999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-7593/"},{"cveID":"CVE-2024-8963","vendor":"Ivanti","product":"Cloud Services Appliance (CSA)","vulnerabilityName":"Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability","dateAdded":"2024-09-19","dueDate":"2024-10-10","knownRansomware":false,"cvss":9.1,"epss":0.98607,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-8963/"},{"cveID":"CVE-2024-27348","vendor":"Apache","product":"HugeGraph-Server","vulnerabilityName":"Apache HugeGraph-Server Improper Access Control Vulnerability","dateAdded":"2024-09-18","dueDate":"2024-10-09","knownRansomware":false,"cvss":9.8,"epss":0.9921,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-27348/"},{"cveID":"CVE-2022-21445","vendor":"Oracle","product":"ADF Faces","vulnerabilityName":"Oracle ADF Faces Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-09-18","dueDate":"2024-10-09","knownRansomware":false,"cvss":9.8,"epss":0.62478,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-21445/"},{"cveID":"CVE-2020-14644","vendor":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Remote Code Execution Vulnerability","dateAdded":"2024-09-18","dueDate":"2024-10-09","knownRansomware":false,"cvss":9.8,"epss":0.94548,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-14644/"},{"cveID":"CVE-2020-0618","vendor":"Microsoft","product":"SQL Server","vulnerabilityName":"Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability","dateAdded":"2024-09-18","dueDate":"2024-10-09","knownRansomware":true,"cvss":8.8,"epss":0.99022,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-0618/"},{"cveID":"CVE-2014-0502","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Double Free Vulnerablity","dateAdded":"2024-09-17","dueDate":"2024-10-08","knownRansomware":false,"cvss":8.8,"epss":0.24204,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-0502/"},{"cveID":"CVE-2014-0497","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Integer Underflow Vulnerablity","dateAdded":"2024-09-17","dueDate":"2024-10-08","knownRansomware":false,"cvss":9.8,"epss":0.99883,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-0497/"},{"cveID":"CVE-2013-0648","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Code Execution Vulnerability","dateAdded":"2024-09-17","dueDate":"2024-10-08","knownRansomware":false,"cvss":8.8,"epss":0.11094,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-0648/"},{"cveID":"CVE-2013-0643","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Incorrect Default Permissions Vulnerability","dateAdded":"2024-09-17","dueDate":"2024-10-08","knownRansomware":false,"cvss":8.8,"epss":0.10533,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-0643/"},{"cveID":"CVE-2024-6670","vendor":"Progress","product":"WhatsUp Gold","vulnerabilityName":"Progress WhatsUp Gold SQL Injection Vulnerability","dateAdded":"2024-09-16","dueDate":"2024-10-07","knownRansomware":true,"cvss":9.8,"epss":0.93,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-6670/"},{"cveID":"CVE-2024-43461","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","dateAdded":"2024-09-16","dueDate":"2024-10-07","knownRansomware":false,"cvss":8.8,"epss":0.54486,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-43461/"},{"cveID":"CVE-2024-8190","vendor":"Ivanti","product":"Cloud Services Appliance","vulnerabilityName":"Ivanti Cloud Services Appliance OS Command Injection Vulnerability","dateAdded":"2024-09-13","dueDate":"2024-10-04","knownRansomware":false,"cvss":7.2,"epss":0.88535,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-8190/"},{"cveID":"CVE-2024-38226","vendor":"Microsoft","product":"Publisher","vulnerabilityName":"Microsoft Publisher Protection Mechanism Failure Vulnerability","dateAdded":"2024-09-10","dueDate":"2024-10-01","knownRansomware":false,"cvss":7.3,"epss":0.02667,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38226/"},{"cveID":"CVE-2024-38217","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability","dateAdded":"2024-09-10","dueDate":"2024-10-01","knownRansomware":false,"cvss":5.4,"epss":0.10026,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38217/"},{"cveID":"CVE-2024-38014","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Installer Improper Privilege Management Vulnerability","dateAdded":"2024-09-10","dueDate":"2024-10-01","knownRansomware":false,"cvss":7.8,"epss":0.06263,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38014/"},{"cveID":"CVE-2024-40766","vendor":"SonicWall","product":"SonicOS","vulnerabilityName":"SonicWall SonicOS Improper Access Control Vulnerability","dateAdded":"2024-09-09","dueDate":"2024-09-30","knownRansomware":true,"cvss":9.8,"epss":0.18177,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-40766/"},{"cveID":"CVE-2017-1000253","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel PIE Stack Buffer Corruption Vulnerability","dateAdded":"2024-09-09","dueDate":"2024-09-30","knownRansomware":true,"cvss":7.8,"epss":0.10695,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-1000253/"},{"cveID":"CVE-2016-3714","vendor":"ImageMagick","product":"ImageMagick","vulnerabilityName":"ImageMagick Improper Input Validation Vulnerability","dateAdded":"2024-09-09","dueDate":"2024-09-30","knownRansomware":false,"cvss":8.4,"epss":0.97485,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-3714/"},{"cveID":"CVE-2024-7262","vendor":"Kingsoft","product":"WPS Office","vulnerabilityName":"Kingsoft WPS Office Path Traversal Vulnerability","dateAdded":"2024-09-03","dueDate":"2024-09-24","knownRansomware":false,"cvss":9.3,"epss":0.02937,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-7262/"},{"cveID":"CVE-2021-20124","vendor":"DrayTek","product":"VigorConnect","vulnerabilityName":"Draytek VigorConnect Path Traversal Vulnerability","dateAdded":"2024-09-03","dueDate":"2024-09-24","knownRansomware":false,"cvss":7.5,"epss":0.96308,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-20124/"},{"cveID":"CVE-2021-20123","vendor":"DrayTek","product":"VigorConnect","vulnerabilityName":"Draytek VigorConnect Path Traversal Vulnerability","dateAdded":"2024-09-03","dueDate":"2024-09-24","knownRansomware":false,"cvss":7.5,"epss":0.90234,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-20123/"},{"cveID":"CVE-2024-7965","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Inappropriate Implementation Vulnerability","dateAdded":"2024-08-28","dueDate":"2024-09-18","knownRansomware":false,"cvss":8.8,"epss":0.18528,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-7965/"},{"cveID":"CVE-2024-38856","vendor":"Apache","product":"OFBiz","vulnerabilityName":"Apache OFBiz Incorrect Authorization Vulnerability","dateAdded":"2024-08-27","dueDate":"2024-09-17","knownRansomware":false,"cvss":9.8,"epss":0.99427,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38856/"},{"cveID":"CVE-2024-7971","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2024-08-26","dueDate":"2024-09-16","knownRansomware":false,"cvss":9.6,"epss":0.20713,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-7971/"},{"cveID":"CVE-2024-39717","vendor":"Versa","product":"Director","vulnerabilityName":"Versa Director Dangerous File Type Upload Vulnerability","dateAdded":"2024-08-23","dueDate":"2024-09-13","knownRansomware":false,"cvss":7.2,"epss":0.04006,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-39717/"},{"cveID":"CVE-2022-0185","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Heap-Based Buffer Overflow Vulnerability","dateAdded":"2024-08-21","dueDate":"2024-09-11","knownRansomware":false,"cvss":8.4,"epss":0.25151,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-0185/"},{"cveID":"CVE-2021-33045","vendor":"Dahua","product":"IP Camera Firmware","vulnerabilityName":"Dahua IP Camera Authentication Bypass Vulnerability","dateAdded":"2024-08-21","dueDate":"2024-09-11","knownRansomware":false,"cvss":9.8,"epss":0.99556,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-33045/"},{"cveID":"CVE-2021-33044","vendor":"Dahua","product":"IP Camera Firmware","vulnerabilityName":"Dahua IP Camera Authentication Bypass Vulnerability","dateAdded":"2024-08-21","dueDate":"2024-09-11","knownRansomware":false,"cvss":9.8,"epss":0.99871,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-33044/"},{"cveID":"CVE-2021-31196","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Information Disclosure Vulnerability","dateAdded":"2024-08-21","dueDate":"2024-09-11","knownRansomware":false,"cvss":7.2,"epss":0.54056,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-31196/"},{"cveID":"CVE-2024-23897","vendor":"Jenkins","product":"Jenkins Command Line Interface (CLI)","vulnerabilityName":"Jenkins Command Line Interface (CLI) Path Traversal Vulnerability","dateAdded":"2024-08-19","dueDate":"2024-09-09","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-23897/"},{"cveID":"CVE-2024-28986","vendor":"SolarWinds","product":"Web Help Desk","vulnerabilityName":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-08-15","dueDate":"2024-09-05","knownRansomware":false,"cvss":9.8,"epss":0.84628,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-28986/"},{"cveID":"CVE-2024-38213","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","dateAdded":"2024-08-13","dueDate":"2024-09-03","knownRansomware":false,"cvss":6.5,"epss":0.13626,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38213/"},{"cveID":"CVE-2024-38193","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability","dateAdded":"2024-08-13","dueDate":"2024-09-03","knownRansomware":false,"cvss":7.8,"epss":0.28529,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38193/"},{"cveID":"CVE-2024-38189","vendor":"Microsoft","product":"Project","vulnerabilityName":"Microsoft Project Remote Code Execution Vulnerability","dateAdded":"2024-08-13","dueDate":"2024-09-03","knownRansomware":false,"cvss":8.8,"epss":0.08194,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38189/"},{"cveID":"CVE-2024-38178","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","dateAdded":"2024-08-13","dueDate":"2024-09-03","knownRansomware":false,"cvss":7.5,"epss":0.4138,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38178/"},{"cveID":"CVE-2024-38107","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability","dateAdded":"2024-08-13","dueDate":"2024-09-03","knownRansomware":false,"cvss":7.8,"epss":0.01635,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38107/"},{"cveID":"CVE-2024-38106","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2024-08-13","dueDate":"2024-09-03","knownRansomware":false,"cvss":7,"epss":0.06337,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38106/"},{"cveID":"CVE-2024-36971","vendor":"Android","product":"Kernel","vulnerabilityName":"Android Kernel Remote Code Execution Vulnerability","dateAdded":"2024-08-07","dueDate":"2024-08-28","knownRansomware":false,"cvss":7.8,"epss":0.02701,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-36971/"},{"cveID":"CVE-2024-32113","vendor":"Apache","product":"OFBiz","vulnerabilityName":"Apache OFBiz Path Traversal Vulnerability","dateAdded":"2024-08-07","dueDate":"2024-08-28","knownRansomware":false,"cvss":9.8,"epss":0.99442,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-32113/"},{"cveID":"CVE-2018-0824","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-08-05","dueDate":"2024-08-26","knownRansomware":false,"cvss":8.8,"epss":0.73185,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0824/"},{"cveID":"CVE-2024-37085","vendor":"VMware","product":"ESXi","vulnerabilityName":"VMware ESXi Authentication Bypass Vulnerability","dateAdded":"2024-07-30","dueDate":"2024-08-20","knownRansomware":true,"cvss":7.2,"epss":0.2677,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-37085/"},{"cveID":"CVE-2024-5217","vendor":"ServiceNow","product":"Utah, Vancouver, and Washington DC Now Platform","vulnerabilityName":"ServiceNow Incomplete List of Disallowed Inputs Vulnerability","dateAdded":"2024-07-29","dueDate":"2024-08-19","knownRansomware":false,"cvss":9.2,"epss":0.99628,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-5217/"},{"cveID":"CVE-2024-4879","vendor":"ServiceNow","product":"Utah, Vancouver, and Washington DC Now Platform","vulnerabilityName":"ServiceNow Improper Input Validation Vulnerability","dateAdded":"2024-07-29","dueDate":"2024-08-19","knownRansomware":false,"cvss":9.3,"epss":0.99976,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-4879/"},{"cveID":"CVE-2023-45249","vendor":"Acronis","product":"Cyber Infrastructure (ACI)","vulnerabilityName":"Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability","dateAdded":"2024-07-29","dueDate":"2024-08-19","knownRansomware":false,"cvss":9.8,"epss":0.53255,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-45249/"},{"cveID":"CVE-2024-39891","vendor":"Twilio","product":"Authy","vulnerabilityName":"Twilio Authy Information Disclosure Vulnerability","dateAdded":"2024-07-23","dueDate":"2024-08-13","knownRansomware":false,"cvss":5.3,"epss":0.01669,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-39891/"},{"cveID":"CVE-2012-4792","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","dateAdded":"2024-07-23","dueDate":"2024-08-13","knownRansomware":false,"cvss":8.8,"epss":0.78745,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-4792/"},{"cveID":"CVE-2024-34102","vendor":"Adobe","product":"Commerce and Magento Open Source","vulnerabilityName":"Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability","dateAdded":"2024-07-17","dueDate":"2024-08-07","knownRansomware":false,"cvss":9.8,"epss":0.99994,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-34102/"},{"cveID":"CVE-2024-28995","vendor":"SolarWinds","product":"Serv-U","vulnerabilityName":"SolarWinds Serv-U Path Traversal Vulnerability","dateAdded":"2024-07-17","dueDate":"2024-08-07","knownRansomware":false,"cvss":7.5,"epss":0.99614,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-28995/"},{"cveID":"CVE-2022-22948","vendor":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Incorrect Default File Permissions Vulnerability","dateAdded":"2024-07-17","dueDate":"2024-08-07","knownRansomware":false,"cvss":6.5,"epss":0.13282,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22948/"},{"cveID":"CVE-2024-36401","vendor":"OSGeo","product":"GeoServer","vulnerabilityName":"OSGeo GeoServer GeoTools Eval Injection Vulnerability","dateAdded":"2024-07-15","dueDate":"2024-08-05","knownRansomware":false,"cvss":9.8,"epss":0.99813,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-36401/"},{"cveID":"CVE-2024-38112","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","dateAdded":"2024-07-09","dueDate":"2024-07-30","knownRansomware":false,"cvss":7.5,"epss":0.84225,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38112/"},{"cveID":"CVE-2024-38080","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Hyper-V Privilege Escalation Vulnerability","dateAdded":"2024-07-09","dueDate":"2024-07-30","knownRansomware":false,"cvss":7.8,"epss":0.07115,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-38080/"},{"cveID":"CVE-2024-23692","vendor":"Rejetto","product":"HTTP File Server","vulnerabilityName":"Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability","dateAdded":"2024-07-09","dueDate":"2024-07-30","knownRansomware":true,"cvss":9.8,"epss":0.99471,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-23692/"},{"cveID":"CVE-2024-20399","vendor":"Cisco","product":"NX-OS","vulnerabilityName":"Cisco NX-OS Command Injection Vulnerability","dateAdded":"2024-07-02","dueDate":"2024-07-23","knownRansomware":false,"cvss":6.7,"epss":0.04306,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-20399/"},{"cveID":"CVE-2022-2586","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Use-After-Free Vulnerability","dateAdded":"2024-06-26","dueDate":"2024-07-17","knownRansomware":false,"cvss":7.8,"epss":0.10458,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-2586/"},{"cveID":"CVE-2022-24816","vendor":"OSGeo","product":"JAI-EXT","vulnerabilityName":"OSGeo GeoServer JAI-EXT Code Injection Vulnerability","dateAdded":"2024-06-26","dueDate":"2024-07-17","knownRansomware":false,"cvss":10,"epss":0.98518,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-24816/"},{"cveID":"CVE-2020-13965","vendor":"Roundcube","product":"Webmail","vulnerabilityName":"Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2024-06-26","dueDate":"2024-07-17","knownRansomware":false,"cvss":6.1,"epss":0.76596,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-13965/"},{"cveID":"CVE-2024-4358","vendor":"Progress","product":"Telerik Report Server","vulnerabilityName":"Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability","dateAdded":"2024-06-13","dueDate":"2024-07-04","knownRansomware":false,"cvss":9.8,"epss":0.97482,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-4358/"},{"cveID":"CVE-2024-32896","vendor":"Android","product":"Pixel","vulnerabilityName":"Android Pixel Privilege Escalation Vulnerability","dateAdded":"2024-06-13","dueDate":"2024-07-04","knownRansomware":false,"cvss":7.8,"epss":0.02985,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-32896/"},{"cveID":"CVE-2024-26169","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability","dateAdded":"2024-06-13","dueDate":"2024-07-04","knownRansomware":true,"cvss":7.8,"epss":0.04014,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-26169/"},{"cveID":"CVE-2024-4610","vendor":"Arm","product":"Mali GPU Kernel Driver","vulnerabilityName":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","dateAdded":"2024-06-12","dueDate":"2024-07-03","knownRansomware":false,"cvss":7.8,"epss":0.00758,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-4610/"},{"cveID":"CVE-2024-4577","vendor":"PHP Group","product":"PHP","vulnerabilityName":"PHP-CGI OS Command Injection Vulnerability","dateAdded":"2024-06-12","dueDate":"2024-07-03","knownRansomware":true,"cvss":9.8,"epss":0.99987,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-4577/"},{"cveID":"CVE-2017-3506","vendor":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server OS Command Injection Vulnerability","dateAdded":"2024-06-03","dueDate":"2024-06-24","knownRansomware":false,"cvss":7.4,"epss":0.96281,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-3506/"},{"cveID":"CVE-2024-24919","vendor":"Check Point","product":"Quantum Security Gateways","vulnerabilityName":"Check Point Quantum Security Gateways Information Disclosure Vulnerability","dateAdded":"2024-05-30","dueDate":"2024-06-20","knownRansomware":true,"cvss":8.6,"epss":0.99978,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-24919/"},{"cveID":"CVE-2024-1086","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Use-After-Free Vulnerability","dateAdded":"2024-05-30","dueDate":"2024-06-20","knownRansomware":true,"cvss":7.8,"epss":0.28058,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-1086/"},{"cveID":"CVE-2024-4978","vendor":"Justice AV Solutions","product":"Viewer","vulnerabilityName":"Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability","dateAdded":"2024-05-29","dueDate":"2024-06-19","knownRansomware":false,"cvss":8.7,"epss":0.26937,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-4978/"},{"cveID":"CVE-2024-5274","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2024-05-28","dueDate":"2024-06-18","knownRansomware":false,"cvss":9.6,"epss":0.07472,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-5274/"},{"cveID":"CVE-2020-17519","vendor":"Apache","product":"Flink","vulnerabilityName":"Apache Flink Improper Access Control Vulnerability","dateAdded":"2024-05-23","dueDate":"2024-06-13","knownRansomware":false,"cvss":7.5,"epss":0.97856,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-17519/"},{"cveID":"CVE-2024-4947","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2024-05-20","dueDate":"2024-06-10","knownRansomware":false,"cvss":9.6,"epss":0.15236,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-4947/"},{"cveID":"CVE-2023-43208","vendor":"NextGen Healthcare","product":"Mirth Connect","vulnerabilityName":"NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-05-20","dueDate":"2024-06-10","knownRansomware":true,"cvss":9.8,"epss":0.82708,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-43208/"},{"cveID":"CVE-2024-4761","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Memory Write Vulnerability","dateAdded":"2024-05-16","dueDate":"2024-06-06","knownRansomware":false,"cvss":8.8,"epss":0.11007,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-4761/"},{"cveID":"CVE-2021-40655","vendor":"D-Link","product":"DIR-605 Router","vulnerabilityName":"D-Link DIR-605 Router Information Disclosure Vulnerability","dateAdded":"2024-05-16","dueDate":"2024-06-06","knownRansomware":false,"cvss":7.5,"epss":0.86659,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-40655/"},{"cveID":"CVE-2014-100005","vendor":"D-Link","product":"DIR-600 Router","vulnerabilityName":"D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability","dateAdded":"2024-05-16","dueDate":"2024-06-06","knownRansomware":false,"cvss":8,"epss":0.42414,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-100005/"},{"cveID":"CVE-2024-30051","vendor":"Microsoft","product":"DWM Core Library","vulnerabilityName":"Microsoft DWM Core Library Privilege Escalation Vulnerability","dateAdded":"2024-05-14","dueDate":"2024-06-04","knownRansomware":true,"cvss":7.8,"epss":0.05641,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-30051/"},{"cveID":"CVE-2024-30040","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability","dateAdded":"2024-05-14","dueDate":"2024-06-04","knownRansomware":false,"cvss":8.8,"epss":0.03939,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-30040/"},{"cveID":"CVE-2024-4671","vendor":"Google","product":"Chromium","vulnerabilityName":"Google Chromium Visuals Use-After-Free Vulnerability","dateAdded":"2024-05-13","dueDate":"2024-06-03","knownRansomware":false,"cvss":9.6,"epss":0.08348,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-4671/"},{"cveID":"CVE-2023-7028","vendor":"GitLab","product":"GitLab CE/EE","vulnerabilityName":"GitLab Community and Enterprise Editions Improper Access Control Vulnerability","dateAdded":"2024-05-01","dueDate":"2024-05-22","knownRansomware":false,"cvss":9.8,"epss":0.94647,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-7028/"},{"cveID":"CVE-2024-29988","vendor":"Microsoft","product":"SmartScreen Prompt","vulnerabilityName":"Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability","dateAdded":"2024-04-30","dueDate":"2024-05-21","knownRansomware":false,"cvss":8.8,"epss":0.45151,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-29988/"},{"cveID":"CVE-2024-4040","vendor":"CrushFTP","product":"CrushFTP","vulnerabilityName":"CrushFTP VFS Sandbox Escape Vulnerability","dateAdded":"2024-04-24","dueDate":"2024-05-01","knownRansomware":false,"cvss":10,"epss":0.99539,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-4040/"},{"cveID":"CVE-2024-20359","vendor":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Privilege Escalation Vulnerability","dateAdded":"2024-04-24","dueDate":"2024-05-01","knownRansomware":false,"cvss":6,"epss":0.19434,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-20359/"},{"cveID":"CVE-2024-20353","vendor":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Denial of Service Vulnerability","dateAdded":"2024-04-24","dueDate":"2024-05-01","knownRansomware":false,"cvss":8.6,"epss":0.70686,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-20353/"},{"cveID":"CVE-2022-38028","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","dateAdded":"2024-04-23","dueDate":"2024-05-14","knownRansomware":false,"cvss":7.8,"epss":0.14949,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-38028/"},{"cveID":"CVE-2024-3400","vendor":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Command Injection Vulnerability","dateAdded":"2024-04-12","dueDate":"2024-04-19","knownRansomware":true,"cvss":10,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-3400/"},{"cveID":"CVE-2024-3273","vendor":"D-Link","product":"Multiple NAS Devices","vulnerabilityName":"D-Link Multiple NAS Devices Command Injection Vulnerability","dateAdded":"2024-04-11","dueDate":"2024-05-02","knownRansomware":false,"cvss":9.8,"epss":0.99997,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-3273/"},{"cveID":"CVE-2024-3272","vendor":"D-Link","product":"Multiple NAS Devices","vulnerabilityName":"D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability","dateAdded":"2024-04-11","dueDate":"2024-05-02","knownRansomware":false,"cvss":9.8,"epss":0.98038,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-3272/"},{"cveID":"CVE-2024-29748","vendor":"Android","product":"Pixel","vulnerabilityName":"Android Pixel Privilege Escalation Vulnerability","dateAdded":"2024-04-04","dueDate":"2024-04-25","knownRansomware":false,"cvss":7.8,"epss":0.0067,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-29748/"},{"cveID":"CVE-2024-29745","vendor":"Android","product":"Pixel","vulnerabilityName":"Android Pixel Information Disclosure Vulnerability","dateAdded":"2024-04-04","dueDate":"2024-04-25","knownRansomware":false,"cvss":5.5,"epss":0.00482,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-29745/"},{"cveID":"CVE-2023-24955","vendor":"Microsoft","product":"SharePoint Server","vulnerabilityName":"Microsoft SharePoint Server Code Injection Vulnerability","dateAdded":"2024-03-26","dueDate":"2024-04-16","knownRansomware":true,"cvss":7.2,"epss":0.85395,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-24955/"},{"cveID":"CVE-2023-48788","vendor":"Fortinet","product":"FortiClient EMS","vulnerabilityName":"Fortinet FortiClient EMS SQL Injection Vulnerability","dateAdded":"2024-03-25","dueDate":"2024-04-15","knownRansomware":true,"cvss":9.8,"epss":0.98446,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-48788/"},{"cveID":"CVE-2021-44529","vendor":"Ivanti","product":"Endpoint Manager Cloud Service Appliance (EPM CSA)","vulnerabilityName":"Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability","dateAdded":"2024-03-25","dueDate":"2024-04-15","knownRansomware":true,"cvss":9.8,"epss":0.99105,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-44529/"},{"cveID":"CVE-2019-7256","vendor":"Nice","product":"Linear eMerge E3-Series","vulnerabilityName":"Nice Linear eMerge E3-Series OS Command Injection Vulnerability","dateAdded":"2024-03-25","dueDate":"2024-04-15","knownRansomware":false,"cvss":9.8,"epss":0.97136,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-7256/"},{"cveID":"CVE-2024-27198","vendor":"JetBrains","product":"TeamCity","vulnerabilityName":"JetBrains TeamCity Authentication Bypass Vulnerability","dateAdded":"2024-03-07","dueDate":"2024-03-28","knownRansomware":true,"cvss":9.8,"epss":0.99938,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-27198/"},{"cveID":"CVE-2024-23296","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2024-03-06","dueDate":"2024-03-27","knownRansomware":false,"cvss":7.8,"epss":0.01411,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-23296/"},{"cveID":"CVE-2024-23225","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2024-03-06","dueDate":"2024-03-27","knownRansomware":false,"cvss":7.8,"epss":0.01481,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-23225/"},{"cveID":"CVE-2023-21237","vendor":"Android","product":"Pixel","vulnerabilityName":"Android Pixel Information Disclosure Vulnerability","dateAdded":"2024-03-05","dueDate":"2024-03-26","knownRansomware":false,"cvss":5.5,"epss":0.00264,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-21237/"},{"cveID":"CVE-2021-36380","vendor":"Sunhillo","product":"SureLine","vulnerabilityName":"Sunhillo SureLine OS Command Injection Vulnerablity","dateAdded":"2024-03-05","dueDate":"2024-03-26","knownRansomware":false,"cvss":9.8,"epss":0.97599,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-36380/"},{"cveID":"CVE-2024-21338","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability","dateAdded":"2024-03-04","dueDate":"2024-03-25","knownRansomware":true,"cvss":7.8,"epss":0.5981,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-21338/"},{"cveID":"CVE-2023-29360","vendor":"Microsoft","product":"Streaming Service","vulnerabilityName":"Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability","dateAdded":"2024-02-29","dueDate":"2024-03-21","knownRansomware":false,"cvss":8.4,"epss":0.22133,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-29360/"},{"cveID":"CVE-2024-1709","vendor":"ConnectWise","product":"ScreenConnect","vulnerabilityName":"ConnectWise ScreenConnect Authentication Bypass Vulnerability","dateAdded":"2024-02-22","dueDate":"2024-02-29","knownRansomware":true,"cvss":10,"epss":0.9998,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-1709/"},{"cveID":"CVE-2024-21410","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","dateAdded":"2024-02-15","dueDate":"2024-03-07","knownRansomware":false,"cvss":9.8,"epss":0.12561,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-21410/"},{"cveID":"CVE-2020-3259","vendor":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Information Disclosure Vulnerability","dateAdded":"2024-02-15","dueDate":"2024-03-07","knownRansomware":true,"cvss":7.5,"epss":0.71789,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-3259/"},{"cveID":"CVE-2024-21412","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability","dateAdded":"2024-02-13","dueDate":"2024-03-05","knownRansomware":true,"cvss":8.1,"epss":0.95443,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-21412/"},{"cveID":"CVE-2024-21351","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","dateAdded":"2024-02-13","dueDate":"2024-03-05","knownRansomware":false,"cvss":7.6,"epss":0.30344,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-21351/"},{"cveID":"CVE-2023-43770","vendor":"Roundcube","product":"Webmail","vulnerabilityName":"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2024-02-12","dueDate":"2024-03-04","knownRansomware":false,"cvss":6.1,"epss":0.58483,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-43770/"},{"cveID":"CVE-2024-21762","vendor":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Out-of-Bound Write Vulnerability","dateAdded":"2024-02-09","dueDate":"2024-02-16","knownRansomware":true,"cvss":9.8,"epss":0.84285,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-21762/"},{"cveID":"CVE-2023-4762","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2024-02-06","dueDate":"2024-02-27","knownRansomware":false,"cvss":8.8,"epss":0.41081,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-4762/"},{"cveID":"CVE-2024-21893","vendor":"Ivanti","product":"Connect Secure, Policy Secure, and Neurons","vulnerabilityName":"Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2024-01-31","dueDate":"2024-02-02","knownRansomware":true,"cvss":8.2,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-21893/"},{"cveID":"CVE-2022-48618","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2024-01-31","dueDate":"2024-02-21","knownRansomware":false,"cvss":7,"epss":0.00487,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-48618/"},{"cveID":"CVE-2023-22527","vendor":"Atlassian","product":"Confluence Data Center and Server","vulnerabilityName":"Atlassian Confluence Data Center and Server Template Injection Vulnerability","dateAdded":"2024-01-24","dueDate":"2024-02-14","knownRansomware":true,"cvss":9.8,"epss":0.99984,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-22527/"},{"cveID":"CVE-2024-23222","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Type Confusion Vulnerability","dateAdded":"2024-01-23","dueDate":"2024-02-13","knownRansomware":false,"cvss":8.8,"epss":0.10593,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-23222/"},{"cveID":"CVE-2023-34048","vendor":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Out-of-Bounds Write Vulnerability","dateAdded":"2024-01-22","dueDate":"2024-02-12","knownRansomware":false,"cvss":9.8,"epss":0.99428,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-34048/"},{"cveID":"CVE-2023-35082","vendor":"Ivanti","product":"Endpoint Manager Mobile (EPMM) and MobileIron Core","vulnerabilityName":"Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability","dateAdded":"2024-01-18","dueDate":"2024-02-08","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-35082/"},{"cveID":"CVE-2024-0519","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","dateAdded":"2024-01-17","dueDate":"2024-02-07","knownRansomware":false,"cvss":8.8,"epss":0.03802,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-0519/"},{"cveID":"CVE-2023-6549","vendor":"Citrix","product":"NetScaler ADC and NetScaler Gateway","vulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","dateAdded":"2024-01-17","dueDate":"2024-02-07","knownRansomware":false,"cvss":7.5,"epss":0.57633,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-6549/"},{"cveID":"CVE-2023-6548","vendor":"Citrix","product":"NetScaler ADC and NetScaler Gateway","vulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","dateAdded":"2024-01-17","dueDate":"2024-01-24","knownRansomware":false,"cvss":8.8,"epss":0.03191,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-6548/"},{"cveID":"CVE-2018-15133","vendor":"Laravel","product":"Laravel Framework","vulnerabilityName":"Laravel Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-01-16","dueDate":"2024-02-06","knownRansomware":false,"cvss":8.1,"epss":0.76814,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-15133/"},{"cveID":"CVE-2024-21887","vendor":"Ivanti","product":"Connect Secure and Policy Secure","vulnerabilityName":"Ivanti Connect Secure and Policy Secure Command Injection Vulnerability","dateAdded":"2024-01-10","dueDate":"2024-01-22","knownRansomware":true,"cvss":9.1,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2024-21887/"},{"cveID":"CVE-2023-46805","vendor":"Ivanti","product":"Connect Secure and Policy Secure","vulnerabilityName":"Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability","dateAdded":"2024-01-10","dueDate":"2024-01-22","knownRansomware":true,"cvss":8.2,"epss":0.99986,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-46805/"},{"cveID":"CVE-2023-29357","vendor":"Microsoft","product":"SharePoint Server","vulnerabilityName":"Microsoft SharePoint Server Privilege Escalation Vulnerability","dateAdded":"2024-01-10","dueDate":"2024-01-31","knownRansomware":true,"cvss":9.8,"epss":0.99984,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-29357/"},{"cveID":"CVE-2023-41990","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Code Execution Vulnerability","dateAdded":"2024-01-08","dueDate":"2024-01-29","knownRansomware":false,"cvss":7.8,"epss":0.01348,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-41990/"},{"cveID":"CVE-2023-38203","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-01-08","dueDate":"2024-01-29","knownRansomware":true,"cvss":9.8,"epss":0.96716,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-38203/"},{"cveID":"CVE-2023-29300","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-01-08","dueDate":"2024-01-29","knownRansomware":true,"cvss":9.8,"epss":0.99991,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-29300/"},{"cveID":"CVE-2023-27524","vendor":"Apache","product":"Superset","vulnerabilityName":"Apache Superset Insecure Default Initialization of Resource Vulnerability","dateAdded":"2024-01-08","dueDate":"2024-01-29","knownRansomware":false,"cvss":9.8,"epss":0.97405,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-27524/"},{"cveID":"CVE-2023-23752","vendor":"Joomla!","product":"Joomla!","vulnerabilityName":"Joomla! Improper Access Control Vulnerability","dateAdded":"2024-01-08","dueDate":"2024-01-29","knownRansomware":false,"cvss":5.3,"epss":0.99827,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-23752/"},{"cveID":"CVE-2016-20017","vendor":"D-Link","product":"DSL-2750B Devices","vulnerabilityName":"D-Link DSL-2750B Devices Command Injection Vulnerability","dateAdded":"2024-01-08","dueDate":"2024-01-29","knownRansomware":false,"cvss":9.8,"epss":0.65234,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-20017/"},{"cveID":"CVE-2023-7101","vendor":"Spreadsheet::ParseExcel","product":"Spreadsheet::ParseExcel","vulnerabilityName":"Spreadsheet::ParseExcel Remote Code Execution Vulnerability","dateAdded":"2024-01-02","dueDate":"2024-01-23","knownRansomware":false,"cvss":7.8,"epss":0.19106,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-7101/"},{"cveID":"CVE-2023-7024","vendor":"Google","product":"Chromium WebRTC","vulnerabilityName":"Google Chromium WebRTC Heap Buffer Overflow Vulnerability","dateAdded":"2024-01-02","dueDate":"2024-01-23","knownRansomware":false,"cvss":8.8,"epss":0.07356,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-7024/"},{"cveID":"CVE-2023-49897","vendor":"FXC","product":"AE1021, AE1021PE","vulnerabilityName":"FXC AE1021, AE1021PE OS Command Injection Vulnerability","dateAdded":"2023-12-21","dueDate":"2024-01-11","knownRansomware":false,"cvss":8.8,"epss":0.50447,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-49897/"},{"cveID":"CVE-2023-47565","vendor":"QNAP","product":"VioStor NVR","vulnerabilityName":"QNAP VioStor NVR OS Command Injection Vulnerability","dateAdded":"2023-12-21","dueDate":"2024-01-11","knownRansomware":false,"cvss":8.8,"epss":0.73277,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-47565/"},{"cveID":"CVE-2023-6448","vendor":"Unitronics","product":"Vision PLC and HMI","vulnerabilityName":"Unitronics Vision PLC and HMI Insecure Default Password Vulnerability","dateAdded":"2023-12-11","dueDate":"2023-12-18","knownRansomware":false,"cvss":9.8,"epss":0.02072,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-6448/"},{"cveID":"CVE-2023-41266","vendor":"Qlik","product":"Sense","vulnerabilityName":"Qlik Sense Path Traversal Vulnerability","dateAdded":"2023-12-07","dueDate":"2023-12-28","knownRansomware":true,"cvss":6.5,"epss":0.84843,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-41266/"},{"cveID":"CVE-2023-41265","vendor":"Qlik","product":"Sense","vulnerabilityName":"Qlik Sense HTTP Tunneling Vulnerability","dateAdded":"2023-12-07","dueDate":"2023-12-28","knownRansomware":true,"cvss":9.9,"epss":0.88215,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-41265/"},{"cveID":"CVE-2023-33107","vendor":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Integer Overflow Vulnerability","dateAdded":"2023-12-05","dueDate":"2023-12-26","knownRansomware":false,"cvss":7.8,"epss":0.00892,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-33107/"},{"cveID":"CVE-2023-33106","vendor":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability","dateAdded":"2023-12-05","dueDate":"2023-12-26","knownRansomware":false,"cvss":7.8,"epss":0.00924,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-33106/"},{"cveID":"CVE-2023-33063","vendor":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","dateAdded":"2023-12-05","dueDate":"2023-12-26","knownRansomware":false,"cvss":7.8,"epss":0.007,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-33063/"},{"cveID":"CVE-2022-22071","vendor":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","dateAdded":"2023-12-05","dueDate":"2023-12-26","knownRansomware":false,"cvss":7.8,"epss":0.00455,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22071/"},{"cveID":"CVE-2023-42917","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Memory Corruption Vulnerability","dateAdded":"2023-12-04","dueDate":"2023-12-25","knownRansomware":false,"cvss":8.8,"epss":0.0937,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-42917/"},{"cveID":"CVE-2023-42916","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","dateAdded":"2023-12-04","dueDate":"2023-12-25","knownRansomware":false,"cvss":6.5,"epss":0.17823,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-42916/"},{"cveID":"CVE-2023-6345","vendor":"Google","product":"Chromium Skia","vulnerabilityName":"Google Skia Integer Overflow Vulnerability","dateAdded":"2023-11-30","dueDate":"2023-12-21","knownRansomware":false,"cvss":9.6,"epss":0.16468,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-6345/"},{"cveID":"CVE-2023-49103","vendor":"ownCloud","product":"ownCloud graphapi","vulnerabilityName":"ownCloud graphapi Information Disclosure Vulnerability","dateAdded":"2023-11-30","dueDate":"2023-12-21","knownRansomware":false,"cvss":7.5,"epss":0.78428,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-49103/"},{"cveID":"CVE-2023-4911","vendor":"GNU","product":"GNU C Library","vulnerabilityName":"GNU C Library Buffer Overflow Vulnerability","dateAdded":"2023-11-21","dueDate":"2023-12-12","knownRansomware":false,"cvss":7.8,"epss":0.81422,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-4911/"},{"cveID":"CVE-2023-36584","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","dateAdded":"2023-11-16","dueDate":"2023-12-07","knownRansomware":false,"cvss":5.4,"epss":0.03055,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-36584/"},{"cveID":"CVE-2023-1671","vendor":"Sophos","product":"Web Appliance","vulnerabilityName":"Sophos Web Appliance Command Injection Vulnerability","dateAdded":"2023-11-16","dueDate":"2023-12-07","knownRansomware":false,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-1671/"},{"cveID":"CVE-2020-2551","vendor":"Oracle","product":"Fusion Middleware","vulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","dateAdded":"2023-11-16","dueDate":"2023-12-07","knownRansomware":false,"cvss":9.8,"epss":0.93168,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-2551/"},{"cveID":"CVE-2023-36036","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability","dateAdded":"2023-11-14","dueDate":"2023-12-05","knownRansomware":false,"cvss":7.8,"epss":0.1667,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-36036/"},{"cveID":"CVE-2023-36033","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","dateAdded":"2023-11-14","dueDate":"2023-12-05","knownRansomware":false,"cvss":7.8,"epss":0.11977,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-36033/"},{"cveID":"CVE-2023-36025","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","dateAdded":"2023-11-14","dueDate":"2023-12-05","knownRansomware":false,"cvss":8.8,"epss":0.88085,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-36025/"},{"cveID":"CVE-2023-47246","vendor":"SysAid","product":"SysAid Server","vulnerabilityName":"SysAid Server Path Traversal Vulnerability","dateAdded":"2023-11-13","dueDate":"2023-12-04","knownRansomware":true,"cvss":9.8,"epss":0.98851,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-47246/"},{"cveID":"CVE-2023-36851","vendor":"Juniper","product":"Junos OS","vulnerabilityName":"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","dateAdded":"2023-11-13","dueDate":"2023-11-17","knownRansomware":false,"cvss":5.3,"epss":0.01123,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-36851/"},{"cveID":"CVE-2023-36847","vendor":"Juniper","product":"Junos OS","vulnerabilityName":"Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability","dateAdded":"2023-11-13","dueDate":"2023-11-17","knownRansomware":false,"cvss":5.3,"epss":0.85769,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-36847/"},{"cveID":"CVE-2023-36846","vendor":"Juniper","product":"Junos OS","vulnerabilityName":"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","dateAdded":"2023-11-13","dueDate":"2023-11-17","knownRansomware":false,"cvss":5.3,"epss":0.9482,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-36846/"},{"cveID":"CVE-2023-36845","vendor":"Juniper","product":"Junos OS","vulnerabilityName":"Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability","dateAdded":"2023-11-13","dueDate":"2023-11-17","knownRansomware":false,"cvss":9.8,"epss":0.9507,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-36845/"},{"cveID":"CVE-2023-36844","vendor":"Juniper","product":"Junos OS","vulnerabilityName":"Juniper Junos OS EX Series PHP External Variable Modification Vulnerability","dateAdded":"2023-11-13","dueDate":"2023-11-17","knownRansomware":false,"cvss":5.3,"epss":0.89958,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-36844/"},{"cveID":"CVE-2023-29552","vendor":"IETF","product":"Service Location Protocol (SLP)","vulnerabilityName":"Service Location Protocol (SLP) Denial-of-Service Vulnerability","dateAdded":"2023-11-08","dueDate":"2023-11-29","knownRansomware":false,"cvss":7.5,"epss":0.65873,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-29552/"},{"cveID":"CVE-2023-22518","vendor":"Atlassian","product":"Confluence Data Center and Server","vulnerabilityName":"Atlassian Confluence Data Center and Server Improper Authorization Vulnerability","dateAdded":"2023-11-07","dueDate":"2023-11-28","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-22518/"},{"cveID":"CVE-2023-46604","vendor":"Apache","product":"ActiveMQ","vulnerabilityName":"Apache ActiveMQ Deserialization of Untrusted Data Vulnerability","dateAdded":"2023-11-02","dueDate":"2023-11-23","knownRansomware":true,"cvss":9.8,"epss":0.99723,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-46604/"},{"cveID":"CVE-2023-46748","vendor":"F5","product":"BIG-IP Configuration Utility","vulnerabilityName":"F5 BIG-IP Configuration Utility SQL Injection Vulnerability","dateAdded":"2023-10-31","dueDate":"2023-11-21","knownRansomware":false,"cvss":8.8,"epss":0.04468,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-46748/"},{"cveID":"CVE-2023-46747","vendor":"F5","product":"BIG-IP Configuration Utility","vulnerabilityName":"F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability","dateAdded":"2023-10-31","dueDate":"2023-11-21","knownRansomware":true,"cvss":9.8,"epss":0.96515,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-46747/"},{"cveID":"CVE-2023-5631","vendor":"Roundcube","product":"Webmail","vulnerabilityName":"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2023-10-26","dueDate":"2023-11-16","knownRansomware":false,"cvss":5.4,"epss":0.75873,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-5631/"},{"cveID":"CVE-2023-20273","vendor":"Cisco","product":"Cisco IOS XE Web UI","vulnerabilityName":"Cisco IOS XE Web UI Command Injection Vulnerability","dateAdded":"2023-10-23","dueDate":"2023-10-27","knownRansomware":false,"cvss":7.2,"epss":0.89634,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-20273/"},{"cveID":"CVE-2023-4966","vendor":"Citrix","product":"NetScaler ADC and NetScaler Gateway","vulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","dateAdded":"2023-10-18","dueDate":"2023-11-08","knownRansomware":true,"cvss":7.5,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-4966/"},{"cveID":"CVE-2023-20198","vendor":"Cisco","product":"IOS XE Web UI","vulnerabilityName":"Cisco IOS XE Web UI Privilege Escalation Vulnerability","dateAdded":"2023-10-16","dueDate":"2023-10-20","knownRansomware":false,"cvss":10,"epss":0.99571,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-20198/"},{"cveID":"CVE-2023-44487","vendor":"IETF","product":"HTTP/2","vulnerabilityName":"HTTP/2 Rapid Reset Attack Vulnerability","dateAdded":"2023-10-10","dueDate":"2023-10-31","knownRansomware":false,"cvss":7.5,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-44487/"},{"cveID":"CVE-2023-41763","vendor":"Microsoft","product":"Skype for Business","vulnerabilityName":"Microsoft Skype for Business Privilege Escalation Vulnerability","dateAdded":"2023-10-10","dueDate":"2023-10-31","knownRansomware":false,"cvss":5.3,"epss":0.90353,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-41763/"},{"cveID":"CVE-2023-36563","vendor":"Microsoft","product":"WordPad","vulnerabilityName":"Microsoft WordPad Information Disclosure Vulnerability","dateAdded":"2023-10-10","dueDate":"2023-10-31","knownRansomware":false,"cvss":5.5,"epss":0.20719,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-36563/"},{"cveID":"CVE-2023-21608","vendor":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Use-After-Free Vulnerability","dateAdded":"2023-10-10","dueDate":"2023-10-31","knownRansomware":false,"cvss":7.8,"epss":0.61475,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-21608/"},{"cveID":"CVE-2023-20109","vendor":"Cisco","product":"IOS and IOS XE","vulnerabilityName":"Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability","dateAdded":"2023-10-10","dueDate":"2023-10-31","knownRansomware":false,"cvss":6.6,"epss":0.02344,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-20109/"},{"cveID":"CVE-2023-42824","vendor":"Apple","product":"iOS and iPadOS","vulnerabilityName":"Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability","dateAdded":"2023-10-05","dueDate":"2023-10-26","knownRansomware":false,"cvss":7.8,"epss":0.00935,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-42824/"},{"cveID":"CVE-2023-40044","vendor":"Progress","product":"WS_FTP Server","vulnerabilityName":"Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability","dateAdded":"2023-10-05","dueDate":"2023-10-26","knownRansomware":true,"cvss":8.8,"epss":0.9015,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-40044/"},{"cveID":"CVE-2023-22515","vendor":"Atlassian","product":"Confluence Data Center and Server","vulnerabilityName":"Atlassian Confluence Data Center and Server Broken Access Control Vulnerability","dateAdded":"2023-10-05","dueDate":"2023-10-13","knownRansomware":true,"cvss":9.8,"epss":0.99156,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-22515/"},{"cveID":"CVE-2023-42793","vendor":"JetBrains","product":"TeamCity","vulnerabilityName":"JetBrains TeamCity Authentication Bypass Vulnerability","dateAdded":"2023-10-04","dueDate":"2023-10-25","knownRansomware":true,"cvss":9.8,"epss":0.99979,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-42793/"},{"cveID":"CVE-2023-28229","vendor":"Microsoft","product":"Windows CNG Key Isolation Service","vulnerabilityName":"Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability","dateAdded":"2023-10-04","dueDate":"2023-10-25","knownRansomware":false,"cvss":7,"epss":0.01671,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-28229/"},{"cveID":"CVE-2023-4211","vendor":"Arm","product":"Mali GPU Kernel Driver","vulnerabilityName":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","dateAdded":"2023-10-03","dueDate":"2023-10-24","knownRansomware":false,"cvss":5.5,"epss":0.01098,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-4211/"},{"cveID":"CVE-2023-5217","vendor":"Google","product":"Chromium libvpx","vulnerabilityName":"Google Chromium libvpx Heap Buffer Overflow Vulnerability","dateAdded":"2023-10-02","dueDate":"2023-10-23","knownRansomware":false,"cvss":8.8,"epss":0.49013,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-5217/"},{"cveID":"CVE-2018-14667","vendor":"Red Hat","product":"JBoss RichFaces Framework","vulnerabilityName":"Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability","dateAdded":"2023-09-28","dueDate":"2023-10-19","knownRansomware":false,"cvss":9.8,"epss":0.74171,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-14667/"},{"cveID":"CVE-2023-41993","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Code Execution Vulnerability","dateAdded":"2023-09-25","dueDate":"2023-10-16","knownRansomware":false,"cvss":8.8,"epss":0.29179,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-41993/"},{"cveID":"CVE-2023-41992","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Kernel Privilege Escalation Vulnerability","dateAdded":"2023-09-25","dueDate":"2023-10-16","knownRansomware":false,"cvss":7.8,"epss":0.02918,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-41992/"},{"cveID":"CVE-2023-41991","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Improper Certificate Validation Vulnerability","dateAdded":"2023-09-25","dueDate":"2023-10-16","knownRansomware":false,"cvss":5.5,"epss":0.04547,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-41991/"},{"cveID":"CVE-2023-41179","vendor":"Trend Micro","product":"Apex One and Worry-Free Business Security","vulnerabilityName":"Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability","dateAdded":"2023-09-21","dueDate":"2023-10-12","knownRansomware":false,"cvss":7.2,"epss":0.04739,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-41179/"},{"cveID":"CVE-2023-28434","vendor":"MinIO","product":"MinIO","vulnerabilityName":"MinIO Security Feature Bypass Vulnerability","dateAdded":"2023-09-19","dueDate":"2023-10-10","knownRansomware":false,"cvss":8.8,"epss":0.07917,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-28434/"},{"cveID":"CVE-2022-22265","vendor":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Use-After-Free Vulnerability","dateAdded":"2023-09-18","dueDate":"2023-10-09","knownRansomware":false,"cvss":7.8,"epss":0.00392,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22265/"},{"cveID":"CVE-2021-3129","vendor":"Laravel","product":"Ignition","vulnerabilityName":"Laravel Ignition File Upload Vulnerability","dateAdded":"2023-09-18","dueDate":"2023-10-09","knownRansomware":true,"cvss":9.8,"epss":0.99943,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-3129/"},{"cveID":"CVE-2017-6884","vendor":"Zyxel","product":"EMG2926 Routers","vulnerabilityName":"Zyxel EMG2926 Routers Command Injection Vulnerability","dateAdded":"2023-09-18","dueDate":"2023-10-09","knownRansomware":true,"cvss":8.8,"epss":0.36769,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6884/"},{"cveID":"CVE-2014-8361","vendor":"Realtek","product":"SDK","vulnerabilityName":"Realtek SDK Improper Input Validation Vulnerability","dateAdded":"2023-09-18","dueDate":"2023-10-09","knownRansomware":false,"cvss":9.8,"epss":0.99975,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-8361/"},{"cveID":"CVE-2023-26369","vendor":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability","dateAdded":"2023-09-14","dueDate":"2023-10-05","knownRansomware":false,"cvss":7.8,"epss":0.07036,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-26369/"},{"cveID":"CVE-2023-4863","vendor":"Google","product":"Chromium WebP","vulnerabilityName":"Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","dateAdded":"2023-09-13","dueDate":"2023-10-04","knownRansomware":false,"cvss":8.8,"epss":0.99979,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-4863/"},{"cveID":"CVE-2023-35674","vendor":"Android","product":"Framework","vulnerabilityName":"Android Framework Privilege Escalation Vulnerability","dateAdded":"2023-09-13","dueDate":"2023-10-04","knownRansomware":false,"cvss":7.8,"epss":0.02782,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-35674/"},{"cveID":"CVE-2023-20269","vendor":"Cisco","product":"Adaptive Security Appliance and Firepower Threat Defense","vulnerabilityName":"Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability","dateAdded":"2023-09-13","dueDate":"2023-10-04","knownRansomware":true,"cvss":9.1,"epss":0.25564,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-20269/"},{"cveID":"CVE-2023-36802","vendor":"Microsoft","product":"Streaming Service Proxy","vulnerabilityName":"Microsoft Streaming Service Proxy Privilege Escalation Vulnerability","dateAdded":"2023-09-12","dueDate":"2023-10-03","knownRansomware":false,"cvss":7.8,"epss":0.27451,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-36802/"},{"cveID":"CVE-2023-36761","vendor":"Microsoft","product":"Word","vulnerabilityName":"Microsoft Word Information Disclosure Vulnerability","dateAdded":"2023-09-12","dueDate":"2023-10-03","knownRansomware":false,"cvss":6.5,"epss":0.18959,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-36761/"},{"cveID":"CVE-2023-41064","vendor":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability","dateAdded":"2023-09-11","dueDate":"2023-10-02","knownRansomware":false,"cvss":7.8,"epss":0.4506,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-41064/"},{"cveID":"CVE-2023-41061","vendor":"Apple","product":"iOS, iPadOS, and watchOS","vulnerabilityName":"Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability","dateAdded":"2023-09-11","dueDate":"2023-10-02","knownRansomware":false,"cvss":7.8,"epss":0.03778,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-41061/"},{"cveID":"CVE-2023-33246","vendor":"Apache","product":"RocketMQ","vulnerabilityName":"Apache RocketMQ Command Execution Vulnerability","dateAdded":"2023-09-06","dueDate":"2023-09-27","knownRansomware":false,"cvss":9.8,"epss":0.96568,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-33246/"},{"cveID":"CVE-2023-38831","vendor":"RARLAB","product":"WinRAR","vulnerabilityName":"RARLAB WinRAR Code Execution Vulnerability","dateAdded":"2023-08-24","dueDate":"2023-09-14","knownRansomware":true,"cvss":7.8,"epss":0.97894,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-38831/"},{"cveID":"CVE-2023-32315","vendor":"Ignite Realtime","product":"Openfire","vulnerabilityName":"Ignite Realtime Openfire Path Traversal Vulnerability","dateAdded":"2023-08-24","dueDate":"2023-09-14","knownRansomware":false,"cvss":7.5,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-32315/"},{"cveID":"CVE-2023-38035","vendor":"Ivanti","product":"Sentry","vulnerabilityName":"Ivanti Sentry Authentication Bypass Vulnerability","dateAdded":"2023-08-22","dueDate":"2023-09-12","knownRansomware":true,"cvss":9.8,"epss":0.99954,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-38035/"},{"cveID":"CVE-2023-27532","vendor":"Veeam","product":"Backup & Replication","vulnerabilityName":"Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability","dateAdded":"2023-08-22","dueDate":"2023-09-12","knownRansomware":true,"cvss":7.5,"epss":0.7761,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-27532/"},{"cveID":"CVE-2023-26359","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","dateAdded":"2023-08-21","dueDate":"2023-09-11","knownRansomware":false,"cvss":9.8,"epss":0.16988,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-26359/"},{"cveID":"CVE-2023-24489","vendor":"Citrix","product":"Content Collaboration","vulnerabilityName":"Citrix Content Collaboration ShareFile Improper Access Control Vulnerability","dateAdded":"2023-08-16","dueDate":"2023-09-06","knownRansomware":false,"cvss":9.8,"epss":0.97343,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-24489/"},{"cveID":"CVE-2023-38180","vendor":"Microsoft","product":".NET Core and Visual Studio","vulnerabilityName":"Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability","dateAdded":"2023-08-09","dueDate":"2023-08-30","knownRansomware":false,"cvss":7.5,"epss":0.14016,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-38180/"},{"cveID":"CVE-2017-18368","vendor":"Zyxel","product":"P660HN-T1A Routers","vulnerabilityName":"Zyxel P660HN-T1A Routers Command Injection Vulnerability","dateAdded":"2023-08-07","dueDate":"2023-08-28","knownRansomware":false,"cvss":9.8,"epss":0.94425,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-18368/"},{"cveID":"CVE-2023-35081","vendor":"Ivanti","product":"Endpoint Manager Mobile (EPMM)","vulnerabilityName":"Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability","dateAdded":"2023-07-31","dueDate":"2023-08-21","knownRansomware":false,"cvss":7.2,"epss":0.63577,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-35081/"},{"cveID":"CVE-2023-37580","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2023-07-27","dueDate":"2023-08-17","knownRansomware":false,"cvss":6.1,"epss":0.46709,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-37580/"},{"cveID":"CVE-2023-38606","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Kernel Unspecified Vulnerability","dateAdded":"2023-07-26","dueDate":"2023-08-16","knownRansomware":false,"cvss":5.5,"epss":0.02875,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-38606/"},{"cveID":"CVE-2023-35078","vendor":"Ivanti","product":"Endpoint Manager Mobile (EPMM)","vulnerabilityName":"Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability","dateAdded":"2023-07-25","dueDate":"2023-08-15","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-35078/"},{"cveID":"CVE-2023-38205","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Improper Access Control Vulnerability","dateAdded":"2023-07-20","dueDate":"2023-08-10","knownRansomware":false,"cvss":7.5,"epss":0.99742,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-38205/"},{"cveID":"CVE-2023-29298","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Improper Access Control Vulnerability","dateAdded":"2023-07-20","dueDate":"2023-08-10","knownRansomware":false,"cvss":7.5,"epss":0.99798,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-29298/"},{"cveID":"CVE-2023-3519","vendor":"Citrix","product":"NetScaler ADC and NetScaler Gateway","vulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","dateAdded":"2023-07-19","dueDate":"2023-08-09","knownRansomware":true,"cvss":9.8,"epss":0.99749,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-3519/"},{"cveID":"CVE-2023-36884","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Search Remote Code Execution Vulnerability","dateAdded":"2023-07-17","dueDate":"2023-08-29","knownRansomware":true,"cvss":7.5,"epss":0.98932,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-36884/"},{"cveID":"CVE-2023-37450","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Code Execution Vulnerability","dateAdded":"2023-07-13","dueDate":"2023-08-03","knownRansomware":false,"cvss":8.8,"epss":0.1895,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-37450/"},{"cveID":"CVE-2022-29303","vendor":"SolarView","product":"Compact","vulnerabilityName":"SolarView Compact Command Injection Vulnerability","dateAdded":"2023-07-13","dueDate":"2023-08-03","knownRansomware":false,"cvss":9.8,"epss":0.97997,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-29303/"},{"cveID":"CVE-2023-36874","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability","dateAdded":"2023-07-11","dueDate":"2023-08-01","knownRansomware":false,"cvss":7.8,"epss":0.43409,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-36874/"},{"cveID":"CVE-2023-35311","vendor":"Microsoft","product":"Outlook","vulnerabilityName":"Microsoft Outlook Security Feature Bypass Vulnerability","dateAdded":"2023-07-11","dueDate":"2023-08-01","knownRansomware":false,"cvss":8.8,"epss":0.15522,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-35311/"},{"cveID":"CVE-2023-32049","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability","dateAdded":"2023-07-11","dueDate":"2023-08-01","knownRansomware":false,"cvss":8.8,"epss":0.04156,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-32049/"},{"cveID":"CVE-2023-32046","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability","dateAdded":"2023-07-11","dueDate":"2023-08-01","knownRansomware":false,"cvss":7.8,"epss":0.10049,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-32046/"},{"cveID":"CVE-2022-31199","vendor":"Netwrix","product":"Auditor","vulnerabilityName":"Netwrix Auditor Insecure Object Deserialization Vulnerability","dateAdded":"2023-07-11","dueDate":"2023-08-01","knownRansomware":true,"cvss":9.8,"epss":0.36009,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-31199/"},{"cveID":"CVE-2021-29256","vendor":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","dateAdded":"2023-07-07","dueDate":"2023-07-28","knownRansomware":false,"cvss":8.8,"epss":0.02988,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-29256/"},{"cveID":"CVE-2021-25489","vendor":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Improper Input Validation Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","knownRansomware":false,"cvss":5.5,"epss":0.00531,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-25489/"},{"cveID":"CVE-2021-25487","vendor":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Out-of-Bounds Read Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","knownRansomware":false,"cvss":7.8,"epss":0.00635,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-25487/"},{"cveID":"CVE-2021-25395","vendor":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Race Condition Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","knownRansomware":false,"cvss":6.4,"epss":0.00366,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-25395/"},{"cveID":"CVE-2021-25394","vendor":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Race Condition Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","knownRansomware":false,"cvss":6.4,"epss":0.00401,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-25394/"},{"cveID":"CVE-2021-25372","vendor":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Improper Boundary Check Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","knownRansomware":false,"cvss":6.7,"epss":0.00804,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-25372/"},{"cveID":"CVE-2021-25371","vendor":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Unspecified Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","knownRansomware":false,"cvss":6.7,"epss":0.00802,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-25371/"},{"cveID":"CVE-2019-20500","vendor":"D-Link","product":"DWL-2600AP Access Point","vulnerabilityName":"D-Link DWL-2600AP Access Point Command Injection Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","knownRansomware":false,"cvss":7.8,"epss":0.97109,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-20500/"},{"cveID":"CVE-2019-17621","vendor":"D-Link","product":"DIR-859 Router","vulnerabilityName":"D-Link DIR-859 Router Command Execution Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","knownRansomware":false,"cvss":9.8,"epss":0.89624,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-17621/"},{"cveID":"CVE-2023-32439","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Type Confusion Vulnerability","dateAdded":"2023-06-23","dueDate":"2023-07-14","knownRansomware":false,"cvss":8.8,"epss":0.23788,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-32439/"},{"cveID":"CVE-2023-32435","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Memory Corruption Vulnerability","dateAdded":"2023-06-23","dueDate":"2023-07-14","knownRansomware":false,"cvss":8.8,"epss":0.22777,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-32435/"},{"cveID":"CVE-2023-32434","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Integer Overflow Vulnerability","dateAdded":"2023-06-23","dueDate":"2023-07-14","knownRansomware":false,"cvss":7.8,"epss":0.51517,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-32434/"},{"cveID":"CVE-2023-27992","vendor":"Zyxel","product":"Multiple Network-Attached Storage (NAS) Devices","vulnerabilityName":"Zyxel Multiple NAS Devices Command Injection Vulnerability","dateAdded":"2023-06-23","dueDate":"2023-07-14","knownRansomware":false,"cvss":9.8,"epss":0.83787,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-27992/"},{"cveID":"CVE-2023-20867","vendor":"VMware","product":"Tools","vulnerabilityName":"VMware Tools Authentication Bypass Vulnerability","dateAdded":"2023-06-23","dueDate":"2023-07-14","knownRansomware":false,"cvss":3.9,"epss":0.1353,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-20867/"},{"cveID":"CVE-2023-20887","vendor":"VMware","product":"Aria Operations for Networks","vulnerabilityName":"Vmware Aria Operations for Networks Command Injection Vulnerability","dateAdded":"2023-06-22","dueDate":"2023-07-13","knownRansomware":false,"cvss":9.8,"epss":0.98281,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-20887/"},{"cveID":"CVE-2021-44026","vendor":"Roundcube","product":"Roundcube Webmail","vulnerabilityName":"Roundcube Webmail SQL Injection Vulnerability","dateAdded":"2023-06-22","dueDate":"2023-07-13","knownRansomware":false,"cvss":9.8,"epss":0.41856,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-44026/"},{"cveID":"CVE-2020-35730","vendor":"Roundcube","product":"Roundcube Webmail","vulnerabilityName":"Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2023-06-22","dueDate":"2023-07-13","knownRansomware":false,"cvss":6.1,"epss":0.32688,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-35730/"},{"cveID":"CVE-2020-12641","vendor":"Roundcube","product":"Roundcube Webmail","vulnerabilityName":"Roundcube Webmail Remote Code Execution Vulnerability","dateAdded":"2023-06-22","dueDate":"2023-07-13","knownRansomware":false,"cvss":9.8,"epss":0.84336,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-12641/"},{"cveID":"CVE-2016-9079","vendor":"Mozilla","product":"Firefox, Firefox ESR, and Thunderbird","vulnerabilityName":"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","dateAdded":"2023-06-22","dueDate":"2023-07-13","knownRansomware":false,"cvss":7.5,"epss":0.87423,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-9079/"},{"cveID":"CVE-2016-0165","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2023-06-22","dueDate":"2023-07-13","knownRansomware":false,"cvss":7.8,"epss":0.13841,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-0165/"},{"cveID":"CVE-2023-27997","vendor":"Fortinet","product":"FortiOS and FortiProxy SSL-VPN","vulnerabilityName":"Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability","dateAdded":"2023-06-13","dueDate":"2023-07-04","knownRansomware":true,"cvss":9.8,"epss":0.85689,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-27997/"},{"cveID":"CVE-2023-3079","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2023-06-07","dueDate":"2023-06-28","knownRansomware":false,"cvss":8.8,"epss":0.3211,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-3079/"},{"cveID":"CVE-2023-33010","vendor":"Zyxel","product":"Multiple Firewalls","vulnerabilityName":"Zyxel Multiple Firewalls Buffer Overflow Vulnerability","dateAdded":"2023-06-05","dueDate":"2023-06-26","knownRansomware":false,"cvss":9.8,"epss":0.28813,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-33010/"},{"cveID":"CVE-2023-33009","vendor":"Zyxel","product":"Multiple Firewalls","vulnerabilityName":"Zyxel Multiple Firewalls Buffer Overflow Vulnerability","dateAdded":"2023-06-05","dueDate":"2023-06-26","knownRansomware":false,"cvss":9.8,"epss":0.28144,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-33009/"},{"cveID":"CVE-2023-34362","vendor":"Progress","product":"MOVEit Transfer","vulnerabilityName":"Progress MOVEit Transfer SQL Injection Vulnerability","dateAdded":"2023-06-02","dueDate":"2023-06-23","knownRansomware":true,"cvss":9.8,"epss":0.99934,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-34362/"},{"cveID":"CVE-2023-28771","vendor":"Zyxel","product":"Multiple Firewalls","vulnerabilityName":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","dateAdded":"2023-05-31","dueDate":"2023-06-21","knownRansomware":false,"cvss":9.8,"epss":0.99284,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-28771/"},{"cveID":"CVE-2023-2868","vendor":"Barracuda Networks","product":"Email Security Gateway (ESG) Appliance","vulnerabilityName":"Barracuda Networks ESG Appliance Improper Input Validation Vulnerability","dateAdded":"2023-05-26","dueDate":"2023-06-16","knownRansomware":false,"cvss":9.8,"epss":0.87691,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-2868/"},{"cveID":"CVE-2023-32409","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Sandbox Escape Vulnerability","dateAdded":"2023-05-22","dueDate":"2023-06-12","knownRansomware":false,"cvss":8.6,"epss":0.1653,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-32409/"},{"cveID":"CVE-2023-32373","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Use-After-Free Vulnerability","dateAdded":"2023-05-22","dueDate":"2023-06-12","knownRansomware":false,"cvss":8.8,"epss":0.12172,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-32373/"},{"cveID":"CVE-2023-28204","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","dateAdded":"2023-05-22","dueDate":"2023-06-12","knownRansomware":false,"cvss":6.5,"epss":0.14292,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-28204/"},{"cveID":"CVE-2023-21492","vendor":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability","dateAdded":"2023-05-19","dueDate":"2023-06-09","knownRansomware":false,"cvss":4.4,"epss":0.02554,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-21492/"},{"cveID":"CVE-2016-6415","vendor":"Cisco","product":"IOS, IOS XR, and IOS XE","vulnerabilityName":"Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability","dateAdded":"2023-05-19","dueDate":"2023-06-09","knownRansomware":false,"cvss":7.5,"epss":0.87313,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-6415/"},{"cveID":"CVE-2004-1464","vendor":"Cisco","product":"IOS","vulnerabilityName":"Cisco IOS Denial-of-Service Vulnerability","dateAdded":"2023-05-19","dueDate":"2023-06-09","knownRansomware":false,"cvss":5.9,"epss":0.0471,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2004-1464/"},{"cveID":"CVE-2023-25717","vendor":"Ruckus Wireless","product":"Multiple Products","vulnerabilityName":"Multiple Ruckus Wireless Products CSRF and RCE Vulnerability","dateAdded":"2023-05-12","dueDate":"2023-06-02","knownRansomware":false,"cvss":9.8,"epss":0.98069,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-25717/"},{"cveID":"CVE-2021-3560","vendor":"Red Hat","product":"Polkit","vulnerabilityName":"Red Hat Polkit Incorrect Authorization Vulnerability","dateAdded":"2023-05-12","dueDate":"2023-06-02","knownRansomware":false,"cvss":7.8,"epss":0.22193,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-3560/"},{"cveID":"CVE-2016-8735","vendor":"Apache","product":"Tomcat","vulnerabilityName":"Apache Tomcat Remote Code Execution Vulnerability","dateAdded":"2023-05-12","dueDate":"2023-06-02","knownRansomware":false,"cvss":9.8,"epss":0.90338,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-8735/"},{"cveID":"CVE-2016-3427","vendor":"Oracle","product":"Java SE and JRockit","vulnerabilityName":"Oracle Java SE and JRockit Unspecified Vulnerability","dateAdded":"2023-05-12","dueDate":"2023-06-02","knownRansomware":false,"cvss":9.8,"epss":0.92334,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-3427/"},{"cveID":"CVE-2015-5317","vendor":"Jenkins","product":"Jenkins User Interface (UI)","vulnerabilityName":"Jenkins User Interface (UI) Information Disclosure Vulnerability","dateAdded":"2023-05-12","dueDate":"2023-06-02","knownRansomware":false,"cvss":7.5,"epss":0.22429,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-5317/"},{"cveID":"CVE-2014-0196","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Race Condition Vulnerability","dateAdded":"2023-05-12","dueDate":"2023-06-02","knownRansomware":false,"cvss":5.5,"epss":0.22475,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-0196/"},{"cveID":"CVE-2010-3904","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Improper Input Validation Vulnerability","dateAdded":"2023-05-12","dueDate":"2023-06-02","knownRansomware":false,"cvss":7.8,"epss":0.14583,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-3904/"},{"cveID":"CVE-2023-29336","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32K Privilege Escalation Vulnerability","dateAdded":"2023-05-09","dueDate":"2023-05-30","knownRansomware":false,"cvss":7.8,"epss":0.40919,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-29336/"},{"cveID":"CVE-2023-21839","vendor":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Unspecified Vulnerability","dateAdded":"2023-05-01","dueDate":"2023-05-22","knownRansomware":false,"cvss":7.5,"epss":0.999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-21839/"},{"cveID":"CVE-2023-1389","vendor":"TP-Link","product":"Archer AX21","vulnerabilityName":"TP-Link Archer AX-21 Command Injection Vulnerability","dateAdded":"2023-05-01","dueDate":"2023-05-22","knownRansomware":false,"cvss":8.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-1389/"},{"cveID":"CVE-2021-45046","vendor":"Apache","product":"Log4j2","vulnerabilityName":"Apache Log4j2 Deserialization of Untrusted Data Vulnerability","dateAdded":"2023-05-01","dueDate":"2023-05-22","knownRansomware":true,"cvss":9,"epss":0.99977,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-45046/"},{"cveID":"CVE-2023-28432","vendor":"MinIO","product":"MinIO","vulnerabilityName":"MinIO Information Disclosure Vulnerability","dateAdded":"2023-04-21","dueDate":"2023-05-12","knownRansomware":false,"cvss":7.5,"epss":0.83957,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-28432/"},{"cveID":"CVE-2023-27350","vendor":"PaperCut","product":"MF/NG","vulnerabilityName":"PaperCut MF/NG Improper Access Control Vulnerability","dateAdded":"2023-04-21","dueDate":"2023-05-12","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-27350/"},{"cveID":"CVE-2023-2136","vendor":"Google","product":"Chromium Skia","vulnerabilityName":"Google Chrome Skia Integer Overflow Vulnerability","dateAdded":"2023-04-21","dueDate":"2023-05-12","knownRansomware":false,"cvss":9.6,"epss":0.05739,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-2136/"},{"cveID":"CVE-2017-6742","vendor":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2023-04-19","dueDate":"2023-05-10","knownRansomware":false,"cvss":8.8,"epss":0.21424,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6742/"},{"cveID":"CVE-2023-2033","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2023-04-17","dueDate":"2023-05-08","knownRansomware":false,"cvss":8.8,"epss":0.40798,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-2033/"},{"cveID":"CVE-2019-8526","vendor":"Apple","product":"macOS","vulnerabilityName":"Apple macOS Use-After-Free Vulnerability","dateAdded":"2023-04-17","dueDate":"2023-05-08","knownRansomware":false,"cvss":7.8,"epss":0.00701,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-8526/"},{"cveID":"CVE-2023-29492","vendor":"Novi Survey","product":"Novi Survey","vulnerabilityName":"Novi Survey Insecure Deserialization Vulnerability","dateAdded":"2023-04-13","dueDate":"2023-05-04","knownRansomware":false,"cvss":9.8,"epss":0.0269,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-29492/"},{"cveID":"CVE-2023-20963","vendor":"Android","product":"Framework","vulnerabilityName":"Android Framework Privilege Escalation Vulnerability","dateAdded":"2023-04-13","dueDate":"2023-05-04","knownRansomware":false,"cvss":7.8,"epss":0.01465,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-20963/"},{"cveID":"CVE-2023-28252","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","dateAdded":"2023-04-11","dueDate":"2023-05-02","knownRansomware":true,"cvss":7.8,"epss":0.48973,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-28252/"},{"cveID":"CVE-2023-28206","vendor":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability","dateAdded":"2023-04-10","dueDate":"2023-05-01","knownRansomware":false,"cvss":8.6,"epss":0.24513,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-28206/"},{"cveID":"CVE-2023-28205","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Use-After-Free Vulnerability","dateAdded":"2023-04-10","dueDate":"2023-05-01","knownRansomware":false,"cvss":8.8,"epss":0.27076,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-28205/"},{"cveID":"CVE-2023-26083","vendor":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali GPU Kernel Driver Information Disclosure Vulnerability","dateAdded":"2023-04-07","dueDate":"2023-04-28","knownRansomware":false,"cvss":3.3,"epss":0.01218,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-26083/"},{"cveID":"CVE-2021-27878","vendor":"Veritas","product":"Backup Exec Agent","vulnerabilityName":"Veritas Backup Exec Agent Command Execution Vulnerability","dateAdded":"2023-04-07","dueDate":"2023-04-28","knownRansomware":true,"cvss":8.8,"epss":0.23952,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-27878/"},{"cveID":"CVE-2021-27877","vendor":"Veritas","product":"Backup Exec Agent","vulnerabilityName":"Veritas Backup Exec Agent Improper Authentication Vulnerability","dateAdded":"2023-04-07","dueDate":"2023-04-28","knownRansomware":true,"cvss":9.8,"epss":0.6491,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-27877/"},{"cveID":"CVE-2021-27876","vendor":"Veritas","product":"Backup Exec Agent","vulnerabilityName":"Veritas Backup Exec Agent File Access Vulnerability","dateAdded":"2023-04-07","dueDate":"2023-04-28","knownRansomware":true,"cvss":8.1,"epss":0.13518,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-27876/"},{"cveID":"CVE-2019-1388","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability","dateAdded":"2023-04-07","dueDate":"2023-04-28","knownRansomware":true,"cvss":7.8,"epss":0.08589,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1388/"},{"cveID":"CVE-2022-27926","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2023-04-03","dueDate":"2023-04-24","knownRansomware":false,"cvss":6.1,"epss":0.17634,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-27926/"},{"cveID":"CVE-2023-0266","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Use-After-Free Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","knownRansomware":false,"cvss":7,"epss":0.03702,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-0266/"},{"cveID":"CVE-2022-42948","vendor":"Fortra","product":"Cobalt Strike","vulnerabilityName":"Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","knownRansomware":false,"cvss":9.8,"epss":0.02706,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-42948/"},{"cveID":"CVE-2022-39197","vendor":"Fortra","product":"Cobalt Strike","vulnerabilityName":"Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","knownRansomware":false,"cvss":6.1,"epss":0.46446,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-39197/"},{"cveID":"CVE-2022-38181","vendor":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","knownRansomware":false,"cvss":8.8,"epss":0.13556,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-38181/"},{"cveID":"CVE-2022-3038","vendor":"Google","product":"Chromium Network Service","vulnerabilityName":"Google Chromium Network Service Use-After-Free Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","knownRansomware":false,"cvss":8.8,"epss":0.24738,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-3038/"},{"cveID":"CVE-2022-22706","vendor":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali GPU Kernel Driver Unspecified Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","knownRansomware":false,"cvss":7.8,"epss":0.01095,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22706/"},{"cveID":"CVE-2021-30900","vendor":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","knownRansomware":false,"cvss":7.8,"epss":0.05204,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30900/"},{"cveID":"CVE-2017-7494","vendor":"Samba","product":"Samba","vulnerabilityName":"Samba Remote Code Execution Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","knownRansomware":true,"cvss":9.8,"epss":0.99448,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-7494/"},{"cveID":"CVE-2013-3163","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","knownRansomware":false,"cvss":8.8,"epss":0.70676,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-3163/"},{"cveID":"CVE-2023-26360","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","dateAdded":"2023-03-15","dueDate":"2023-04-05","knownRansomware":false,"cvss":8.6,"epss":0.97339,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-26360/"},{"cveID":"CVE-2023-24880","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","dateAdded":"2023-03-14","dueDate":"2023-04-04","knownRansomware":true,"cvss":4.4,"epss":0.78152,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-24880/"},{"cveID":"CVE-2023-23397","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Outlook Privilege Escalation Vulnerability","dateAdded":"2023-03-14","dueDate":"2023-04-04","knownRansomware":false,"cvss":9.8,"epss":0.97408,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-23397/"},{"cveID":"CVE-2022-41328","vendor":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Path Traversal Vulnerability","dateAdded":"2023-03-14","dueDate":"2023-04-04","knownRansomware":false,"cvss":7.1,"epss":0.10682,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-41328/"},{"cveID":"CVE-2021-39144","vendor":"XStream","product":"XStream","vulnerabilityName":"XStream Remote Code Execution Vulnerability","dateAdded":"2023-03-10","dueDate":"2023-03-31","knownRansomware":false,"cvss":8.5,"epss":0.98124,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-39144/"},{"cveID":"CVE-2020-5741","vendor":"Plex","product":"Media Server","vulnerabilityName":"Plex Media Server Remote Code Execution Vulnerability","dateAdded":"2023-03-10","dueDate":"2023-03-31","knownRansomware":false,"cvss":7.2,"epss":0.72936,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-5741/"},{"cveID":"CVE-2022-35914","vendor":"Teclib","product":"GLPI","vulnerabilityName":"Teclib GLPI Remote Code Execution Vulnerability","dateAdded":"2023-03-07","dueDate":"2023-03-28","knownRansomware":false,"cvss":9.8,"epss":0.99662,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-35914/"},{"cveID":"CVE-2022-33891","vendor":"Apache","product":"Spark","vulnerabilityName":"Apache Spark Command Injection Vulnerability","dateAdded":"2023-03-07","dueDate":"2023-03-28","knownRansomware":false,"cvss":8.8,"epss":0.93076,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-33891/"},{"cveID":"CVE-2022-28810","vendor":"Zoho","product":"ManageEngine","vulnerabilityName":"Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability","dateAdded":"2023-03-07","dueDate":"2023-03-28","knownRansomware":false,"cvss":6.8,"epss":0.70966,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-28810/"},{"cveID":"CVE-2022-36537","vendor":"ZK Framework","product":"AuUploader","vulnerabilityName":"ZK Framework AuUploader Unspecified Vulnerability","dateAdded":"2023-02-27","dueDate":"2023-03-20","knownRansomware":true,"cvss":7.5,"epss":0.95335,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-36537/"},{"cveID":"CVE-2022-47986","vendor":"IBM","product":"Aspera Faspex","vulnerabilityName":"IBM Aspera Faspex Code Execution Vulnerability","dateAdded":"2023-02-21","dueDate":"2023-03-14","knownRansomware":true,"cvss":9.8,"epss":0.99968,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-47986/"},{"cveID":"CVE-2022-41223","vendor":"Mitel","product":"MiVoice Connect","vulnerabilityName":"Mitel MiVoice Connect Code Injection Vulnerability","dateAdded":"2023-02-21","dueDate":"2023-03-14","knownRansomware":true,"cvss":6.8,"epss":0.10571,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-41223/"},{"cveID":"CVE-2022-40765","vendor":"Mitel","product":"MiVoice Connect","vulnerabilityName":"Mitel MiVoice Connect Command Injection Vulnerability","dateAdded":"2023-02-21","dueDate":"2023-03-14","knownRansomware":true,"cvss":6.8,"epss":0.10481,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-40765/"},{"cveID":"CVE-2022-46169","vendor":"Cacti","product":"Cacti","vulnerabilityName":"Cacti Command Injection Vulnerability","dateAdded":"2023-02-16","dueDate":"2023-03-09","knownRansomware":false,"cvss":9.8,"epss":0.99826,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-46169/"},{"cveID":"CVE-2023-23529","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Type Confusion Vulnerability","dateAdded":"2023-02-14","dueDate":"2023-03-07","knownRansomware":false,"cvss":8.8,"epss":0.09502,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-23529/"},{"cveID":"CVE-2023-23376","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","dateAdded":"2023-02-14","dueDate":"2023-03-07","knownRansomware":true,"cvss":7.8,"epss":0.10853,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-23376/"},{"cveID":"CVE-2023-21823","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Graphic Component Privilege Escalation Vulnerability","dateAdded":"2023-02-14","dueDate":"2023-03-07","knownRansomware":false,"cvss":7.8,"epss":0.05563,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-21823/"},{"cveID":"CVE-2023-21715","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Publisher Security Feature Bypass Vulnerability","dateAdded":"2023-02-14","dueDate":"2023-03-07","knownRansomware":false,"cvss":7.3,"epss":0.12011,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-21715/"},{"cveID":"CVE-2023-0669","vendor":"Fortra","product":"GoAnywhere MFT","vulnerabilityName":"Fortra GoAnywhere MFT Remote Code Execution Vulnerability","dateAdded":"2023-02-10","dueDate":"2023-03-03","knownRansomware":true,"cvss":7.2,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-0669/"},{"cveID":"CVE-2022-24990","vendor":"TerraMaster","product":"TerraMaster OS","vulnerabilityName":"TerraMaster OS Remote Command Execution Vulnerability","dateAdded":"2023-02-10","dueDate":"2023-03-03","knownRansomware":true,"cvss":7.5,"epss":0.83553,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-24990/"},{"cveID":"CVE-2015-2291","vendor":"Intel","product":"Ethernet Diagnostics Driver for Windows","vulnerabilityName":"Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability","dateAdded":"2023-02-10","dueDate":"2023-03-03","knownRansomware":true,"cvss":7.8,"epss":0.09011,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-2291/"},{"cveID":"CVE-2023-22952","vendor":"SugarCRM","product":"Multiple Products","vulnerabilityName":"Multiple SugarCRM Products Remote Code Execution Vulnerability","dateAdded":"2023-02-02","dueDate":"2023-02-23","knownRansomware":false,"cvss":8.8,"epss":0.80139,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-22952/"},{"cveID":"CVE-2022-21587","vendor":"Oracle","product":"E-Business Suite","vulnerabilityName":"Oracle E-Business Suite Unspecified Vulnerability","dateAdded":"2023-02-02","dueDate":"2023-02-23","knownRansomware":true,"cvss":9.8,"epss":0.98342,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-21587/"},{"cveID":"CVE-2017-11357","vendor":"Telerik","product":"User Interface (UI) for ASP.NET AJAX","vulnerabilityName":"Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability","dateAdded":"2023-01-26","dueDate":"2023-02-16","knownRansomware":true,"cvss":9.8,"epss":0.77679,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-11357/"},{"cveID":"CVE-2022-47966","vendor":"Zoho","product":"ManageEngine","vulnerabilityName":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","dateAdded":"2023-01-23","dueDate":"2023-02-13","knownRansomware":true,"cvss":9.8,"epss":0.99753,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-47966/"},{"cveID":"CVE-2022-44877","vendor":"CWP","product":"Control Web Panel","vulnerabilityName":"CWP Control Web Panel OS Command Injection Vulnerability","dateAdded":"2023-01-17","dueDate":"2023-02-07","knownRansomware":false,"cvss":9.8,"epss":0.99995,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-44877/"},{"cveID":"CVE-2023-21674","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability","dateAdded":"2023-01-10","dueDate":"2023-01-31","knownRansomware":false,"cvss":8.8,"epss":0.41806,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2023-21674/"},{"cveID":"CVE-2022-41080","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","dateAdded":"2023-01-10","dueDate":"2023-01-31","knownRansomware":true,"cvss":8.8,"epss":0.77326,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-41080/"},{"cveID":"CVE-2018-5430","vendor":"TIBCO","product":"JasperReports","vulnerabilityName":"TIBCO JasperReports Server Information Disclosure Vulnerability","dateAdded":"2022-12-29","dueDate":"2023-01-19","knownRansomware":false,"cvss":8.8,"epss":0.4963,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-5430/"},{"cveID":"CVE-2018-18809","vendor":"TIBCO","product":"JasperReports","vulnerabilityName":"TIBCO JasperReports Library Directory Traversal Vulnerability","dateAdded":"2022-12-29","dueDate":"2023-01-19","knownRansomware":false,"cvss":6.5,"epss":0.79064,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-18809/"},{"cveID":"CVE-2022-42856","vendor":"Apple","product":"iOS","vulnerabilityName":"Apple iOS Type Confusion Vulnerability","dateAdded":"2022-12-14","dueDate":"2023-01-04","knownRansomware":false,"cvss":8.8,"epss":0.08523,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-42856/"},{"cveID":"CVE-2022-44698","vendor":"Microsoft","product":"Defender","vulnerabilityName":"Microsoft Defender SmartScreen Security Feature Bypass Vulnerability","dateAdded":"2022-12-13","dueDate":"2023-01-03","knownRansomware":true,"cvss":5.4,"epss":0.76267,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-44698/"},{"cveID":"CVE-2022-42475","vendor":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","dateAdded":"2022-12-13","dueDate":"2023-01-03","knownRansomware":true,"cvss":9.8,"epss":0.99474,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-42475/"},{"cveID":"CVE-2022-27518","vendor":"Citrix","product":"Application Delivery Controller (ADC) and Gateway","vulnerabilityName":"Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability","dateAdded":"2022-12-13","dueDate":"2023-01-03","knownRansomware":false,"cvss":9.8,"epss":0.06875,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-27518/"},{"cveID":"CVE-2022-26501","vendor":"Veeam","product":"Backup & Replication","vulnerabilityName":"Veeam Backup & Replication Remote Code Execution Vulnerability","dateAdded":"2022-12-13","dueDate":"2023-01-03","knownRansomware":true,"cvss":9.8,"epss":0.04104,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-26501/"},{"cveID":"CVE-2022-26500","vendor":"Veeam","product":"Backup & Replication","vulnerabilityName":"Veeam Backup & Replication Remote Code Execution Vulnerability","dateAdded":"2022-12-13","dueDate":"2023-01-03","knownRansomware":true,"cvss":8.8,"epss":0.05828,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-26500/"},{"cveID":"CVE-2022-4262","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2022-12-05","dueDate":"2022-12-26","knownRansomware":false,"cvss":8.8,"epss":0.15983,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-4262/"},{"cveID":"CVE-2022-4135","vendor":"Google","product":"Chromium GPU","vulnerabilityName":"Google Chromium GPU Heap Buffer Overflow Vulnerability","dateAdded":"2022-11-28","dueDate":"2022-12-19","knownRansomware":false,"cvss":9.6,"epss":0.31864,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-4135/"},{"cveID":"CVE-2021-35587","vendor":"Oracle","product":"Fusion Middleware","vulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","dateAdded":"2022-11-28","dueDate":"2022-12-19","knownRansomware":false,"cvss":9.8,"epss":0.96284,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-35587/"},{"cveID":"CVE-2022-41049","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","dateAdded":"2022-11-14","dueDate":"2022-12-09","knownRansomware":false,"cvss":5.4,"epss":0.02491,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-41049/"},{"cveID":"CVE-2022-41128","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Scripting Languages Remote Code Execution Vulnerability","dateAdded":"2022-11-08","dueDate":"2022-12-09","knownRansomware":false,"cvss":8.8,"epss":0.24623,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-41128/"},{"cveID":"CVE-2022-41125","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability","dateAdded":"2022-11-08","dueDate":"2022-12-09","knownRansomware":false,"cvss":7.8,"epss":0.03021,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-41125/"},{"cveID":"CVE-2022-41091","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","dateAdded":"2022-11-08","dueDate":"2022-12-09","knownRansomware":true,"cvss":5.4,"epss":0.01806,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-41091/"},{"cveID":"CVE-2022-41073","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","dateAdded":"2022-11-08","dueDate":"2022-12-09","knownRansomware":true,"cvss":7.8,"epss":0.0226,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-41073/"},{"cveID":"CVE-2021-25370","vendor":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Memory Corruption Vulnerability","dateAdded":"2022-11-08","dueDate":"2022-11-29","knownRansomware":false,"cvss":4.4,"epss":0.0089,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-25370/"},{"cveID":"CVE-2021-25369","vendor":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Improper Access Control Vulnerability","dateAdded":"2022-11-08","dueDate":"2022-11-29","knownRansomware":false,"cvss":5.5,"epss":0.01121,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-25369/"},{"cveID":"CVE-2021-25337","vendor":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Improper Access Control Vulnerability","dateAdded":"2022-11-08","dueDate":"2022-11-29","knownRansomware":false,"cvss":7.1,"epss":0.02831,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-25337/"},{"cveID":"CVE-2022-3723","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2022-10-28","dueDate":"2022-11-18","knownRansomware":false,"cvss":8.8,"epss":0.07857,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-3723/"},{"cveID":"CVE-2022-42827","vendor":"Apple","product":"iOS and iPadOS","vulnerabilityName":"Apple iOS and iPadOS Out-of-Bounds Write Vulnerability","dateAdded":"2022-10-25","dueDate":"2022-11-15","knownRansomware":false,"cvss":7.8,"epss":0.01048,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-42827/"},{"cveID":"CVE-2020-3433","vendor":"Cisco","product":"AnyConnect Secure","vulnerabilityName":"Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability","dateAdded":"2022-10-24","dueDate":"2022-11-14","knownRansomware":true,"cvss":7.8,"epss":0.10049,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-3433/"},{"cveID":"CVE-2020-3153","vendor":"Cisco","product":"AnyConnect Secure","vulnerabilityName":"Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability","dateAdded":"2022-10-24","dueDate":"2022-11-14","knownRansomware":true,"cvss":6.5,"epss":0.28307,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-3153/"},{"cveID":"CVE-2018-19323","vendor":"GIGABYTE","product":"Multiple Products","vulnerabilityName":"GIGABYTE Multiple Products Privilege Escalation Vulnerability","dateAdded":"2022-10-24","dueDate":"2022-11-14","knownRansomware":true,"cvss":9.8,"epss":0.07828,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-19323/"},{"cveID":"CVE-2018-19322","vendor":"GIGABYTE","product":"Multiple Products","vulnerabilityName":"GIGABYTE Multiple Products Code Execution Vulnerability","dateAdded":"2022-10-24","dueDate":"2022-11-14","knownRansomware":true,"cvss":7.8,"epss":0.01801,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-19322/"},{"cveID":"CVE-2018-19321","vendor":"GIGABYTE","product":"Multiple Products","vulnerabilityName":"GIGABYTE Multiple Products Privilege Escalation Vulnerability","dateAdded":"2022-10-24","dueDate":"2022-11-14","knownRansomware":true,"cvss":7.8,"epss":0.03671,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-19321/"},{"cveID":"CVE-2018-19320","vendor":"GIGABYTE","product":"Multiple Products","vulnerabilityName":"GIGABYTE Multiple Products Unspecified Vulnerability","dateAdded":"2022-10-24","dueDate":"2022-11-14","knownRansomware":true,"cvss":7.8,"epss":0.03597,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-19320/"},{"cveID":"CVE-2022-41352","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","dateAdded":"2022-10-20","dueDate":"2022-11-10","knownRansomware":true,"cvss":9.8,"epss":0.95478,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-41352/"},{"cveID":"CVE-2021-3493","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Privilege Escalation Vulnerability","dateAdded":"2022-10-20","dueDate":"2022-11-10","knownRansomware":false,"cvss":7.8,"epss":0.49166,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-3493/"},{"cveID":"CVE-2022-41033","vendor":"Microsoft","product":"Windows COM+ Event System Service","vulnerabilityName":"Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability","dateAdded":"2022-10-11","dueDate":"2022-11-01","knownRansomware":false,"cvss":7.8,"epss":0.01667,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-41033/"},{"cveID":"CVE-2022-40684","vendor":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Authentication Bypass Vulnerability","dateAdded":"2022-10-11","dueDate":"2022-11-01","knownRansomware":true,"cvss":9.8,"epss":0.99984,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-40684/"},{"cveID":"CVE-2022-41082","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2022-09-30","dueDate":"2022-10-21","knownRansomware":true,"cvss":8,"epss":0.9997,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-41082/"},{"cveID":"CVE-2022-41040","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Server-Side Request Forgery Vulnerability","dateAdded":"2022-09-30","dueDate":"2022-10-21","knownRansomware":true,"cvss":8.8,"epss":0.99956,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-41040/"},{"cveID":"CVE-2022-36804","vendor":"Atlassian","product":"Bitbucket Server and Data Center","vulnerabilityName":"Atlassian Bitbucket Server and Data Center Command Injection Vulnerability","dateAdded":"2022-09-30","dueDate":"2022-10-21","knownRansomware":false,"cvss":8.8,"epss":0.99077,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-36804/"},{"cveID":"CVE-2022-3236","vendor":"Sophos","product":"Firewall","vulnerabilityName":"Sophos Firewall Code Injection Vulnerability","dateAdded":"2022-09-23","dueDate":"2022-10-14","knownRansomware":false,"cvss":9.8,"epss":0.98905,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-3236/"},{"cveID":"CVE-2022-35405","vendor":"Zoho","product":"ManageEngine","vulnerabilityName":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","dateAdded":"2022-09-22","dueDate":"2022-10-13","knownRansomware":false,"cvss":9.8,"epss":0.99927,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-35405/"},{"cveID":"CVE-2022-40139","vendor":"Trend Micro","product":"Apex One and Apex One as a Service","vulnerabilityName":"Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability","dateAdded":"2022-09-15","dueDate":"2022-10-06","knownRansomware":false,"cvss":7.2,"epss":0.02872,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-40139/"},{"cveID":"CVE-2013-6282","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Improper Input Validation Vulnerability","dateAdded":"2022-09-15","dueDate":"2022-10-06","knownRansomware":false,"cvss":8.8,"epss":0.39711,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-6282/"},{"cveID":"CVE-2013-2597","vendor":"Code Aurora","product":"ACDB Audio Driver","vulnerabilityName":"Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-09-15","dueDate":"2022-10-06","knownRansomware":false,"cvss":8.4,"epss":0.01516,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-2597/"},{"cveID":"CVE-2013-2596","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Integer Overflow Vulnerability","dateAdded":"2022-09-15","dueDate":"2022-10-06","knownRansomware":false,"cvss":7.8,"epss":0.03212,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-2596/"},{"cveID":"CVE-2013-2094","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Privilege Escalation Vulnerability","dateAdded":"2022-09-15","dueDate":"2022-10-06","knownRansomware":false,"cvss":8.4,"epss":0.47709,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-2094/"},{"cveID":"CVE-2010-2568","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Remote Code Execution Vulnerability","dateAdded":"2022-09-15","dueDate":"2022-10-06","knownRansomware":false,"cvss":7.8,"epss":0.91324,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-2568/"},{"cveID":"CVE-2022-37969","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","dateAdded":"2022-09-14","dueDate":"2022-10-05","knownRansomware":true,"cvss":7.8,"epss":0.28275,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-37969/"},{"cveID":"CVE-2022-32917","vendor":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability","dateAdded":"2022-09-14","dueDate":"2022-10-05","knownRansomware":false,"cvss":7.8,"epss":0.05603,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-32917/"},{"cveID":"CVE-2022-3075","vendor":"Google","product":"Chromium Mojo","vulnerabilityName":"Google Chromium Mojo Insufficient Data Validation Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","knownRansomware":false,"cvss":9.6,"epss":0.05759,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-3075/"},{"cveID":"CVE-2022-27593","vendor":"QNAP","product":"Photo Station","vulnerabilityName":"QNAP Photo Station Externally Controlled Reference Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","knownRansomware":true,"cvss":9.1,"epss":0.87908,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-27593/"},{"cveID":"CVE-2022-26258","vendor":"D-Link","product":"DIR-820L","vulnerabilityName":"D-Link DIR-820L Remote Code Execution Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","knownRansomware":false,"cvss":9.8,"epss":0.91981,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-26258/"},{"cveID":"CVE-2020-9934","vendor":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS Input Validation Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","knownRansomware":false,"cvss":5.5,"epss":0.03208,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-9934/"},{"cveID":"CVE-2018-7445","vendor":"MikroTik","product":"RouterOS","vulnerabilityName":"MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","knownRansomware":false,"cvss":9.8,"epss":0.60809,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-7445/"},{"cveID":"CVE-2018-6530","vendor":"D-Link","product":"Multiple Routers","vulnerabilityName":"D-Link Multiple Routers OS Command Injection Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","knownRansomware":true,"cvss":9.8,"epss":0.96682,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-6530/"},{"cveID":"CVE-2018-2628","vendor":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Unspecified Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","knownRansomware":false,"cvss":9.8,"epss":0.99448,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-2628/"},{"cveID":"CVE-2018-13374","vendor":"Fortinet","product":"FortiOS and FortiADC","vulnerabilityName":"Fortinet FortiOS and FortiADC Improper Access Control Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","knownRansomware":true,"cvss":4.3,"epss":0.37832,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-13374/"},{"cveID":"CVE-2017-5521","vendor":"NETGEAR","product":"Multiple Devices","vulnerabilityName":"NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","knownRansomware":false,"cvss":8.1,"epss":0.89353,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-5521/"},{"cveID":"CVE-2011-4723","vendor":"D-Link","product":"DIR-300 Router","vulnerabilityName":"D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","knownRansomware":false,"cvss":5.7,"epss":0.02981,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2011-4723/"},{"cveID":"CVE-2011-1823","vendor":"Android","product":"Android OS","vulnerabilityName":"Android OS Privilege Escalation Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","knownRansomware":false,"cvss":7.8,"epss":0.41634,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2011-1823/"},{"cveID":"CVE-2022-26352","vendor":"dotCMS","product":"dotCMS","vulnerabilityName":"dotCMS Unrestricted Upload of File Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","knownRansomware":true,"cvss":9.8,"epss":0.91553,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-26352/"},{"cveID":"CVE-2022-24706","vendor":"Apache","product":"CouchDB","vulnerabilityName":"Apache CouchDB Insecure Default Initialization of Resource Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","knownRansomware":false,"cvss":9.8,"epss":0.9251,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-24706/"},{"cveID":"CVE-2022-24112","vendor":"Apache","product":"APISIX","vulnerabilityName":"Apache APISIX Authentication Bypass Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","knownRansomware":false,"cvss":9.8,"epss":0.96001,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-24112/"},{"cveID":"CVE-2022-22963","vendor":"VMware Tanzu","product":"Spring Cloud","vulnerabilityName":"VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","knownRansomware":false,"cvss":9.8,"epss":0.99938,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22963/"},{"cveID":"CVE-2022-2294","vendor":"WebRTC","product":"WebRTC","vulnerabilityName":"WebRTC Heap Buffer Overflow Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","knownRansomware":true,"cvss":8.8,"epss":0.70461,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-2294/"},{"cveID":"CVE-2021-39226","vendor":"Grafana Labs","product":"Grafana","vulnerabilityName":"Grafana Authentication Bypass Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","knownRansomware":false,"cvss":7.3,"epss":0.99933,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-39226/"},{"cveID":"CVE-2021-38406","vendor":"Delta Electronics","product":"DOPSoft 2","vulnerabilityName":"Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","knownRansomware":false,"cvss":7.8,"epss":0.76428,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-38406/"},{"cveID":"CVE-2021-31010","vendor":"Apple","product":"iOS, macOS, watchOS","vulnerabilityName":"Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","knownRansomware":false,"cvss":7.5,"epss":0.03673,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-31010/"},{"cveID":"CVE-2020-36193","vendor":"PEAR","product":"Archive_Tar","vulnerabilityName":"PEAR Archive_Tar Improper Link Resolution Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","knownRansomware":false,"cvss":7.5,"epss":0.70595,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-36193/"},{"cveID":"CVE-2020-28949","vendor":"PEAR","product":"Archive_Tar","vulnerabilityName":"PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","knownRansomware":false,"cvss":7.8,"epss":0.84554,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-28949/"},{"cveID":"CVE-2022-0028","vendor":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability","dateAdded":"2022-08-22","dueDate":"2022-09-12","knownRansomware":false,"cvss":8.6,"epss":0.02383,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-0028/"},{"cveID":"CVE-2022-32894","vendor":"Apple","product":"iOS and macOS","vulnerabilityName":"Apple iOS and macOS Out-of-Bounds Write Vulnerability","dateAdded":"2022-08-18","dueDate":"2022-09-08","knownRansomware":false,"cvss":7.8,"epss":0.03286,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-32894/"},{"cveID":"CVE-2022-32893","vendor":"Apple","product":"iOS and macOS","vulnerabilityName":"Apple iOS and macOS Out-of-Bounds Write Vulnerability","dateAdded":"2022-08-18","dueDate":"2022-09-08","knownRansomware":false,"cvss":8.8,"epss":0.09864,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-32893/"},{"cveID":"CVE-2022-2856","vendor":"Google","product":"Chromium Intents","vulnerabilityName":"Google Chromium Intents Insufficient Input Validation Vulnerability","dateAdded":"2022-08-18","dueDate":"2022-09-08","knownRansomware":false,"cvss":6.5,"epss":0.0453,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-2856/"},{"cveID":"CVE-2022-26923","vendor":"Microsoft","product":"Active Directory","vulnerabilityName":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","dateAdded":"2022-08-18","dueDate":"2022-09-08","knownRansomware":false,"cvss":8.8,"epss":0.835,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-26923/"},{"cveID":"CVE-2022-22536","vendor":"SAP","product":"Multiple Products","vulnerabilityName":"SAP Multiple Products HTTP Request Smuggling Vulnerability","dateAdded":"2022-08-18","dueDate":"2022-09-08","knownRansomware":false,"cvss":10,"epss":0.97945,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22536/"},{"cveID":"CVE-2022-21971","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Runtime Remote Code Execution Vulnerability","dateAdded":"2022-08-18","dueDate":"2022-09-08","knownRansomware":false,"cvss":7.8,"epss":0.53934,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-21971/"},{"cveID":"CVE-2017-15944","vendor":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Remote Code Execution Vulnerability","dateAdded":"2022-08-18","dueDate":"2022-09-08","knownRansomware":false,"cvss":9.8,"epss":0.98303,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-15944/"},{"cveID":"CVE-2022-37042","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability","dateAdded":"2022-08-11","dueDate":"2022-09-01","knownRansomware":true,"cvss":9.8,"epss":0.91893,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-37042/"},{"cveID":"CVE-2022-27925","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","dateAdded":"2022-08-11","dueDate":"2022-09-01","knownRansomware":true,"cvss":7.2,"epss":0.98676,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-27925/"},{"cveID":"CVE-2022-34713","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability","dateAdded":"2022-08-09","dueDate":"2022-08-30","knownRansomware":false,"cvss":7.8,"epss":0.67757,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-34713/"},{"cveID":"CVE-2022-30333","vendor":"RARLAB","product":"UnRAR","vulnerabilityName":"RARLAB UnRAR Directory Traversal Vulnerability","dateAdded":"2022-08-09","dueDate":"2022-08-30","knownRansomware":true,"cvss":7.5,"epss":0.99085,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-30333/"},{"cveID":"CVE-2022-27924","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability","dateAdded":"2022-08-04","dueDate":"2022-08-25","knownRansomware":true,"cvss":7.5,"epss":0.85398,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-27924/"},{"cveID":"CVE-2022-26138","vendor":"Atlassian","product":"Confluence","vulnerabilityName":"Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability","dateAdded":"2022-07-29","dueDate":"2022-08-19","knownRansomware":false,"cvss":9.8,"epss":0.9817,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-26138/"},{"cveID":"CVE-2022-22047","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability","dateAdded":"2022-07-12","dueDate":"2022-08-02","knownRansomware":false,"cvss":7.8,"epss":0.18765,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22047/"},{"cveID":"CVE-2022-26925","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows LSA Spoofing Vulnerability","dateAdded":"2022-07-01","dueDate":"2022-07-22","knownRansomware":false,"cvss":5.9,"epss":0.10721,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-26925/"},{"cveID":"CVE-2022-29499","vendor":"Mitel","product":"MiVoice Connect","vulnerabilityName":"Mitel MiVoice Connect Data Validation Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","knownRansomware":true,"cvss":9.8,"epss":0.55595,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-29499/"},{"cveID":"CVE-2021-4034","vendor":"Red Hat","product":"Polkit","vulnerabilityName":"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","knownRansomware":true,"cvss":7.8,"epss":0.94921,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-4034/"},{"cveID":"CVE-2021-30983","vendor":"Apple","product":"iOS and iPadOS","vulnerabilityName":"Apple iOS and iPadOS Buffer Overflow Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","knownRansomware":false,"cvss":7.8,"epss":0.02923,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30983/"},{"cveID":"CVE-2021-30533","vendor":"Google","product":"Chromium PopupBlocker","vulnerabilityName":"Google Chromium PopupBlocker Security Bypass Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","knownRansomware":false,"cvss":6.5,"epss":0.16611,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30533/"},{"cveID":"CVE-2020-9907","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","knownRansomware":false,"cvss":7.8,"epss":0.03875,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-9907/"},{"cveID":"CVE-2020-3837","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","knownRansomware":false,"cvss":7.8,"epss":0.16111,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-3837/"},{"cveID":"CVE-2019-8605","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Use-After-Free Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","knownRansomware":false,"cvss":7.8,"epss":0.17513,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-8605/"},{"cveID":"CVE-2018-4344","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","knownRansomware":false,"cvss":7.8,"epss":0.02908,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-4344/"},{"cveID":"CVE-2022-30190","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability","dateAdded":"2022-06-14","dueDate":"2022-07-05","knownRansomware":true,"cvss":7.8,"epss":0.99234,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-30190/"},{"cveID":"CVE-2021-38163","vendor":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Unrestricted File Upload Vulnerability","dateAdded":"2022-06-09","dueDate":"2022-06-30","knownRansomware":false,"cvss":8.8,"epss":0.36018,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-38163/"},{"cveID":"CVE-2016-2388","vendor":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Information Disclosure Vulnerability","dateAdded":"2022-06-09","dueDate":"2022-06-30","knownRansomware":false,"cvss":5.3,"epss":0.51553,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-2388/"},{"cveID":"CVE-2016-2386","vendor":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver SQL Injection Vulnerability","dateAdded":"2022-06-09","dueDate":"2022-06-30","knownRansomware":false,"cvss":9.8,"epss":0.7106,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-2386/"},{"cveID":"CVE-2019-7195","vendor":"QNAP","product":"Photo Station","vulnerabilityName":"QNAP Photo Station Path Traversal Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":true,"cvss":9.8,"epss":0.89681,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-7195/"},{"cveID":"CVE-2019-7194","vendor":"QNAP","product":"Photo Station","vulnerabilityName":"QNAP Photo Station Path Traversal Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":true,"cvss":9.8,"epss":0.83124,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-7194/"},{"cveID":"CVE-2019-7193","vendor":"QNAP","product":"QTS","vulnerabilityName":"QNAP QTS Improper Input Validation Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":true,"cvss":9.8,"epss":0.14367,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-7193/"},{"cveID":"CVE-2019-7192","vendor":"QNAP","product":"Photo Station","vulnerabilityName":"QNAP Photo Station Improper Access Control Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":true,"cvss":9.8,"epss":0.88213,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-7192/"},{"cveID":"CVE-2019-5825","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Write Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":6.5,"epss":0.55925,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-5825/"},{"cveID":"CVE-2019-15271","vendor":"Cisco","product":"RV Series Routers","vulnerabilityName":"Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.8,"epss":0.05979,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-15271/"},{"cveID":"CVE-2018-6065","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Integer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.8,"epss":0.60304,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-6065/"},{"cveID":"CVE-2018-4990","vendor":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Double Free Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.8,"epss":0.36614,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-4990/"},{"cveID":"CVE-2018-17480","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Write Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.8,"epss":0.3564,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-17480/"},{"cveID":"CVE-2018-17463","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Remote Code Execution Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.8,"epss":0.84564,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-17463/"},{"cveID":"CVE-2017-6862","vendor":"NETGEAR","product":"Multiple Devices","vulnerabilityName":"NETGEAR Multiple Devices Buffer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":9.8,"epss":0.42696,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6862/"},{"cveID":"CVE-2017-5070","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.8,"epss":0.31212,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-5070/"},{"cveID":"CVE-2017-5030","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Memory Corruption Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.8,"epss":0.41691,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-5030/"},{"cveID":"CVE-2016-5198","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Memory Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.8,"epss":0.34814,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-5198/"},{"cveID":"CVE-2016-1646","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Read Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.8,"epss":0.4811,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-1646/"},{"cveID":"CVE-2013-1331","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Buffer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":7.8,"epss":0.81877,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-1331/"},{"cveID":"CVE-2012-5054","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Integer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.8,"epss":0.21194,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-5054/"},{"cveID":"CVE-2012-4969","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.1,"epss":0.81716,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-4969/"},{"cveID":"CVE-2012-1889","vendor":"Microsoft","product":"XML Core Services","vulnerabilityName":"Microsoft XML Core Services Memory Corruption Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.8,"epss":0.83638,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-1889/"},{"cveID":"CVE-2012-0767","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":6.1,"epss":0.06662,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-0767/"},{"cveID":"CVE-2012-0754","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.1,"epss":0.9203,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-0754/"},{"cveID":"CVE-2012-0151","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":7.8,"epss":0.8878,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-0151/"},{"cveID":"CVE-2011-2462","vendor":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":9.8,"epss":0.86563,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2011-2462/"},{"cveID":"CVE-2011-0609","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Unspecified Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":7.8,"epss":0.66821,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2011-0609/"},{"cveID":"CVE-2010-2883","vendor":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":7.3,"epss":0.82485,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-2883/"},{"cveID":"CVE-2010-2572","vendor":"Microsoft","product":"PowerPoint","vulnerabilityName":"Microsoft PowerPoint Buffer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":7.8,"epss":0.62598,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-2572/"},{"cveID":"CVE-2010-1297","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":7.8,"epss":0.82365,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-1297/"},{"cveID":"CVE-2009-4324","vendor":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Use-After-Free Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":7.8,"epss":0.81933,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2009-4324/"},{"cveID":"CVE-2009-3953","vendor":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.8,"epss":0.83855,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2009-3953/"},{"cveID":"CVE-2009-1862","vendor":"Adobe","product":"Acrobat and Reader, Flash Player","vulnerabilityName":"Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":7.8,"epss":0.25006,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2009-1862/"},{"cveID":"CVE-2009-0563","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Buffer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":7.8,"epss":0.63081,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2009-0563/"},{"cveID":"CVE-2009-0557","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Object Record Corruption Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":7.8,"epss":0.58551,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2009-0557/"},{"cveID":"CVE-2008-0655","vendor":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Unspecified Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.8,"epss":0.39028,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2008-0655/"},{"cveID":"CVE-2007-5659","vendor":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Buffer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":7.8,"epss":0.94024,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2007-5659/"},{"cveID":"CVE-2006-2492","vendor":"Microsoft","product":"Word","vulnerabilityName":"Microsoft Word Malformed Object Pointer Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomware":false,"cvss":8.8,"epss":0.48387,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2006-2492/"},{"cveID":"CVE-2022-26134","vendor":"Atlassian","product":"Confluence Server/Data Center","vulnerabilityName":"Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","dateAdded":"2022-06-02","dueDate":"2022-06-06","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-26134/"},{"cveID":"CVE-2019-3010","vendor":"Oracle","product":"Solaris","vulnerabilityName":"Oracle Solaris Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":8.8,"epss":0.13399,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-3010/"},{"cveID":"CVE-2016-7256","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Open Type Font Remote Code Execution Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":8.8,"epss":0.64835,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-7256/"},{"cveID":"CVE-2016-3393","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":7.8,"epss":0.68684,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-3393/"},{"cveID":"CVE-2016-1010","vendor":"Adobe","product":"Flash Player and AIR","vulnerabilityName":"Adobe Flash Player and AIR Integer Overflow Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":8.8,"epss":0.194,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-1010/"},{"cveID":"CVE-2016-0984","vendor":"Adobe","product":"Flash Player and AIR","vulnerabilityName":"Adobe Flash Player and AIR Use-After-Free Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":8.8,"epss":0.54823,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-0984/"},{"cveID":"CVE-2016-0034","vendor":"Microsoft","product":"Silverlight","vulnerabilityName":"Microsoft Silverlight Runtime Remote Code Execution Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":true,"cvss":8.8,"epss":0.69609,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-0034/"},{"cveID":"CVE-2015-8651","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Integer Overflow Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":8.8,"epss":0.67922,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-8651/"},{"cveID":"CVE-2015-6175","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":7.8,"epss":0.05169,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-6175/"},{"cveID":"CVE-2015-4495","vendor":"Mozilla","product":"Firefox","vulnerabilityName":"Mozilla Firefox Security Feature Bypass Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":8.8,"epss":0.71434,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-4495/"},{"cveID":"CVE-2015-2425","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":8.8,"epss":0.44851,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-2425/"},{"cveID":"CVE-2015-2360","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":8.8,"epss":0.14958,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-2360/"},{"cveID":"CVE-2015-1769","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Mount Manager Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":6.6,"epss":0.04111,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-1769/"},{"cveID":"CVE-2015-1671","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Remote Code Execution Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":7.8,"epss":0.54628,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-1671/"},{"cveID":"CVE-2015-0310","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player ASLR Bypass Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":7.8,"epss":0.15217,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-0310/"},{"cveID":"CVE-2015-0071","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer ASLR Bypass Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":6.5,"epss":0.33581,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-0071/"},{"cveID":"CVE-2015-0016","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows TS WebProxy Directory Traversal Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":7.8,"epss":0.7594,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-0016/"},{"cveID":"CVE-2014-8439","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Dereferenced Pointer Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":8.8,"epss":0.20008,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-8439/"},{"cveID":"CVE-2014-4148","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Remote Code Execution Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":8.8,"epss":0.59776,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-4148/"},{"cveID":"CVE-2014-4123","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":8.8,"epss":0.47259,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-4123/"},{"cveID":"CVE-2014-4077","vendor":"Microsoft","product":"Input Method Editor (IME) Japanese","vulnerabilityName":"Microsoft IME Japanese Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":7.8,"epss":0.54856,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-4077/"},{"cveID":"CVE-2014-3153","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":7.8,"epss":0.37233,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-3153/"},{"cveID":"CVE-2014-2817","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":8.8,"epss":0.26349,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-2817/"},{"cveID":"CVE-2014-0546","vendor":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Sandbox Bypass Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":9.8,"epss":0.2233,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-0546/"},{"cveID":"CVE-2013-7331","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Information Disclosure Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":6.5,"epss":0.58023,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-7331/"},{"cveID":"CVE-2013-3993","vendor":"IBM","product":"InfoSphere BigInsights","vulnerabilityName":"IBM InfoSphere BigInsights Invalid Input Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":true,"cvss":6.5,"epss":0.05236,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-3993/"},{"cveID":"CVE-2013-3896","vendor":"Microsoft","product":"Silverlight","vulnerabilityName":"Microsoft Silverlight Information Disclosure Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":5.5,"epss":0.6961,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-3896/"},{"cveID":"CVE-2013-2423","vendor":"Oracle","product":"Java Runtime Environment (JRE)","vulnerabilityName":"Oracle JRE Unspecified Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":3.7,"epss":0.85333,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-2423/"},{"cveID":"CVE-2013-0431","vendor":"Oracle","product":"Java Runtime Environment (JRE)","vulnerabilityName":"Oracle JRE Sandbox Bypass Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":true,"cvss":5.3,"epss":0.89987,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-0431/"},{"cveID":"CVE-2013-0422","vendor":"Oracle","product":"Java Runtime Environment (JRE)","vulnerabilityName":"Oracle JRE Remote Code Execution Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":true,"cvss":9.8,"epss":0.97612,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-0422/"},{"cveID":"CVE-2013-0074","vendor":"Microsoft","product":"Silverlight","vulnerabilityName":"Microsoft Silverlight Double Dereference Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":true,"cvss":7.8,"epss":0.81009,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-0074/"},{"cveID":"CVE-2012-1710","vendor":"Oracle","product":"Fusion Middleware","vulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":true,"cvss":9.8,"epss":0.11509,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-1710/"},{"cveID":"CVE-2010-1428","vendor":"Red Hat","product":"JBoss","vulnerabilityName":"Red Hat JBoss Information Disclosure Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":true,"cvss":7.5,"epss":0.62308,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-1428/"},{"cveID":"CVE-2010-0840","vendor":"Oracle","product":"Java Runtime Environment (JRE)","vulnerabilityName":"Oracle JRE Unspecified Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":false,"cvss":9.8,"epss":0.96319,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-0840/"},{"cveID":"CVE-2010-0738","vendor":"Red Hat","product":"JBoss","vulnerabilityName":"Red Hat JBoss Authentication Bypass Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomware":true,"cvss":5.3,"epss":0.79415,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-0738/"},{"cveID":"CVE-2018-8611","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":false,"cvss":7.8,"epss":0.04196,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-8611/"},{"cveID":"CVE-2018-19953","vendor":"QNAP","product":"Network Attached Storage (NAS)","vulnerabilityName":"QNAP NAS File Station Cross-Site Scripting Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":true,"cvss":6.1,"epss":0.23894,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-19953/"},{"cveID":"CVE-2018-19949","vendor":"QNAP","product":"Network Attached Storage (NAS)","vulnerabilityName":"QNAP NAS File Station Command Injection Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":true,"cvss":9.8,"epss":0.24449,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-19949/"},{"cveID":"CVE-2018-19943","vendor":"QNAP","product":"Network Attached Storage (NAS)","vulnerabilityName":"QNAP NAS File Station Cross-Site Scripting Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":true,"cvss":5.4,"epss":0.17705,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-19943/"},{"cveID":"CVE-2017-8543","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Search Remote Code Execution Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":false,"cvss":9.8,"epss":0.74339,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-8543/"},{"cveID":"CVE-2017-8291","vendor":"Artifex","product":"Ghostscript","vulnerabilityName":"Artifex Ghostscript Type Confusion Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":false,"cvss":7.8,"epss":0.96968,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-8291/"},{"cveID":"CVE-2017-18362","vendor":"Kaseya","product":"Virtual System/Server Administrator (VSA)","vulnerabilityName":"Kaseya VSA SQL Injection Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":true,"cvss":9.8,"epss":0.8682,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-18362/"},{"cveID":"CVE-2017-0210","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Privilege Escalation Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":false,"cvss":8.8,"epss":0.22334,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0210/"},{"cveID":"CVE-2017-0149","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":false,"cvss":8.8,"epss":0.29178,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0149/"},{"cveID":"CVE-2017-0147","vendor":"Microsoft","product":"SMBv1 server","vulnerabilityName":"Microsoft Windows SMBv1 Information Disclosure Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":true,"cvss":7.5,"epss":0.99693,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0147/"},{"cveID":"CVE-2017-0022","vendor":"Microsoft","product":"XML Core Services","vulnerabilityName":"Microsoft XML Core Services Information Disclosure Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":false,"cvss":6.5,"epss":0.18069,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0022/"},{"cveID":"CVE-2017-0005","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":false,"cvss":7.8,"epss":0.10934,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0005/"},{"cveID":"CVE-2016-6367","vendor":"Cisco","product":"Adaptive Security Appliance (ASA)","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":false,"cvss":7.8,"epss":0.22583,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-6367/"},{"cveID":"CVE-2016-6366","vendor":"Cisco","product":"Adaptive Security Appliance (ASA)","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":false,"cvss":8.8,"epss":0.87565,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-6366/"},{"cveID":"CVE-2016-4657","vendor":"Apple","product":"iOS","vulnerabilityName":"Apple iOS Webkit Memory Corruption Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":false,"cvss":8.8,"epss":0.66788,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-4657/"},{"cveID":"CVE-2016-4656","vendor":"Apple","product":"iOS","vulnerabilityName":"Apple iOS Memory Corruption Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":false,"cvss":7.8,"epss":0.23626,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-4656/"},{"cveID":"CVE-2016-4655","vendor":"Apple","product":"iOS","vulnerabilityName":"Apple iOS Information Disclosure Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":false,"cvss":5.5,"epss":0.33353,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-4655/"},{"cveID":"CVE-2016-3351","vendor":"Microsoft","product":"Internet Explorer and Edge","vulnerabilityName":"Microsoft Internet Explorer and Edge Information Disclosure Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":true,"cvss":6.5,"epss":0.26286,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-3351/"},{"cveID":"CVE-2016-3298","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":false,"cvss":6.5,"epss":0.3279,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-3298/"},{"cveID":"CVE-2016-0162","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Information Disclosure Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","knownRansomware":false,"cvss":4.3,"epss":0.22088,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-0162/"},{"cveID":"CVE-2022-20821","vendor":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Open Port Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":6.5,"epss":0.12094,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-20821/"},{"cveID":"CVE-2021-30883","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":7.8,"epss":0.14721,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30883/"},{"cveID":"CVE-2021-1048","vendor":"Android","product":"Kernel","vulnerabilityName":"Android Kernel Use-After-Free Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":7.8,"epss":0.01039,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-1048/"},{"cveID":"CVE-2021-0920","vendor":"Android","product":"Kernel","vulnerabilityName":"Android Kernel Race Condition Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":6.4,"epss":0.0085,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-0920/"},{"cveID":"CVE-2020-1027","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":7.8,"epss":0.04547,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-1027/"},{"cveID":"CVE-2020-0638","vendor":"Microsoft","product":"Update Notification Manager","vulnerabilityName":"Microsoft Update Notification Manager Privilege Escalation Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":true,"cvss":7.8,"epss":0.03042,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-0638/"},{"cveID":"CVE-2019-8720","vendor":"WebKitGTK","product":"WebKitGTK","vulnerabilityName":"WebKitGTK Memory Corruption Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":8.8,"epss":0.01556,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-8720/"},{"cveID":"CVE-2019-7287","vendor":"Apple","product":"iOS","vulnerabilityName":"Apple iOS Memory Corruption Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":7.8,"epss":0.04551,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-7287/"},{"cveID":"CVE-2019-7286","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":7.8,"epss":0.15582,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-7286/"},{"cveID":"CVE-2019-5786","vendor":"Google","product":"Chrome Blink","vulnerabilityName":"Google Chrome Blink Use-After-Free Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":6.5,"epss":0.61537,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-5786/"},{"cveID":"CVE-2019-18426","vendor":"Meta Platforms","product":"WhatsApp","vulnerabilityName":"WhatsApp Cross-Site Scripting Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":8.2,"epss":0.67859,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-18426/"},{"cveID":"CVE-2019-1385","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":true,"cvss":7.8,"epss":0.03604,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1385/"},{"cveID":"CVE-2019-13720","vendor":"Google","product":"Chrome WebAudio","vulnerabilityName":"Google Chrome WebAudio Use-After-Free Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":8.8,"epss":0.72977,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-13720/"},{"cveID":"CVE-2019-11708","vendor":"Mozilla","product":"Firefox and Thunderbird","vulnerabilityName":"Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":10,"epss":0.55874,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-11708/"},{"cveID":"CVE-2019-11707","vendor":"Mozilla","product":"Firefox and Thunderbird","vulnerabilityName":"Mozilla Firefox and Thunderbird Type Confusion Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":8.8,"epss":0.37696,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-11707/"},{"cveID":"CVE-2019-1130","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":true,"cvss":7.8,"epss":0.02284,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1130/"},{"cveID":"CVE-2019-0880","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":7.8,"epss":0.02289,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0880/"},{"cveID":"CVE-2019-0703","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SMB Information Disclosure Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":6.5,"epss":0.0964,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0703/"},{"cveID":"CVE-2019-0676","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Information Disclosure Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":6.5,"epss":0.07505,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0676/"},{"cveID":"CVE-2018-8589","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":7.8,"epss":0.03023,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-8589/"},{"cveID":"CVE-2018-5002","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomware":false,"cvss":7.8,"epss":0.25353,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-5002/"},{"cveID":"CVE-2022-30525","vendor":"Zyxel","product":"Multiple Firewalls","vulnerabilityName":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","dateAdded":"2022-05-16","dueDate":"2022-06-06","knownRansomware":false,"cvss":9.8,"epss":0.99944,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-30525/"},{"cveID":"CVE-2022-22947","vendor":"VMware","product":"Spring Cloud Gateway","vulnerabilityName":"VMware Spring Cloud Gateway Code Injection Vulnerability","dateAdded":"2022-05-16","dueDate":"2022-06-06","knownRansomware":false,"cvss":10,"epss":0.98253,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22947/"},{"cveID":"CVE-2022-1388","vendor":"F5","product":"BIG-IP","vulnerabilityName":"F5 BIG-IP Missing Authentication Vulnerability","dateAdded":"2022-05-10","dueDate":"2022-05-31","knownRansomware":true,"cvss":9.8,"epss":0.99958,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-1388/"},{"cveID":"CVE-2021-1789","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Type Confusion Vulnerability","dateAdded":"2022-05-04","dueDate":"2022-05-25","knownRansomware":false,"cvss":8.8,"epss":0.14479,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-1789/"},{"cveID":"CVE-2019-8506","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Type Confusion Vulnerability","dateAdded":"2022-05-04","dueDate":"2022-05-25","knownRansomware":false,"cvss":8.8,"epss":0.18108,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-8506/"},{"cveID":"CVE-2014-4113","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-05-04","dueDate":"2022-05-25","knownRansomware":false,"cvss":7.8,"epss":0.87042,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-4113/"},{"cveID":"CVE-2014-0322","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","dateAdded":"2022-05-04","dueDate":"2022-05-25","knownRansomware":false,"cvss":8.8,"epss":0.85175,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-0322/"},{"cveID":"CVE-2014-0160","vendor":"OpenSSL","product":"OpenSSL","vulnerabilityName":"OpenSSL Information Disclosure Vulnerability","dateAdded":"2022-05-04","dueDate":"2022-05-25","knownRansomware":false,"cvss":7.5,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-0160/"},{"cveID":"CVE-2022-29464","vendor":"WSO2","product":"Multiple Products","vulnerabilityName":"WSO2 Multiple Products Unrestrictive Upload of File Vulnerability","dateAdded":"2022-04-25","dueDate":"2022-05-16","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-29464/"},{"cveID":"CVE-2022-26904","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","dateAdded":"2022-04-25","dueDate":"2022-05-16","knownRansomware":false,"cvss":7,"epss":0.09592,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-26904/"},{"cveID":"CVE-2022-21919","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","dateAdded":"2022-04-25","dueDate":"2022-05-16","knownRansomware":false,"cvss":7,"epss":0.02975,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-21919/"},{"cveID":"CVE-2022-0847","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Privilege Escalation Vulnerability","dateAdded":"2022-04-25","dueDate":"2022-05-16","knownRansomware":false,"cvss":7.8,"epss":0.89721,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-0847/"},{"cveID":"CVE-2021-41357","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-04-25","dueDate":"2022-05-16","knownRansomware":false,"cvss":7.8,"epss":0.02076,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-41357/"},{"cveID":"CVE-2021-40450","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-04-25","dueDate":"2022-05-16","knownRansomware":false,"cvss":7.8,"epss":0.02076,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-40450/"},{"cveID":"CVE-2019-1003029","vendor":"Jenkins","product":"Script Security Plugin","vulnerabilityName":"Jenkins Script Security Plugin Sandbox Bypass Vulnerability","dateAdded":"2022-04-25","dueDate":"2022-05-16","knownRansomware":false,"cvss":9.9,"epss":0.73854,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1003029/"},{"cveID":"CVE-2022-22718","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","dateAdded":"2022-04-19","dueDate":"2022-05-10","knownRansomware":false,"cvss":7.8,"epss":0.18464,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22718/"},{"cveID":"CVE-2019-3568","vendor":"Meta Platforms","product":"WhatsApp","vulnerabilityName":"WhatsApp VOIP Stack Buffer Overflow Vulnerability","dateAdded":"2022-04-19","dueDate":"2022-05-10","knownRansomware":false,"cvss":9.8,"epss":0.39166,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-3568/"},{"cveID":"CVE-2018-6882","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2022-04-19","dueDate":"2022-05-10","knownRansomware":true,"cvss":6.1,"epss":0.25268,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-6882/"},{"cveID":"CVE-2022-22960","vendor":"VMware","product":"Multiple Products","vulnerabilityName":"VMware Multiple Products Privilege Escalation Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","knownRansomware":false,"cvss":7.8,"epss":0.35765,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22960/"},{"cveID":"CVE-2022-1364","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","knownRansomware":false,"cvss":8.8,"epss":0.1372,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-1364/"},{"cveID":"CVE-2019-3929","vendor":"Crestron","product":"Multiple Products","vulnerabilityName":"Crestron Multiple Products Command Injection Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","knownRansomware":false,"cvss":9.8,"epss":0.98952,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-3929/"},{"cveID":"CVE-2019-16057","vendor":"D-Link","product":"DNS-320 Storage Device","vulnerabilityName":"D-Link DNS-320 Remote Code Execution Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","knownRansomware":true,"cvss":9.8,"epss":0.87065,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-16057/"},{"cveID":"CVE-2018-7841","vendor":"Schneider Electric","product":"U.motion Builder","vulnerabilityName":"Schneider Electric U.motion Builder SQL Injection Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","knownRansomware":false,"cvss":9.8,"epss":0.72675,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-7841/"},{"cveID":"CVE-2016-4523","vendor":"Trihedral","product":"VTScada (formerly VTS)","vulnerabilityName":"Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","knownRansomware":false,"cvss":7.5,"epss":0.30651,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-4523/"},{"cveID":"CVE-2014-0780","vendor":"InduSoft","product":"Web Studio","vulnerabilityName":"InduSoft Web Studio NTWebServer Directory Traversal Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","knownRansomware":false,"cvss":9.8,"epss":0.73965,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-0780/"},{"cveID":"CVE-2010-5330","vendor":"Ubiquiti","product":"AirOS","vulnerabilityName":"Ubiquiti AirOS Command Injection Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","knownRansomware":false,"cvss":9.8,"epss":0.33847,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-5330/"},{"cveID":"CVE-2007-3010","vendor":"Alcatel","product":"OmniPCX Enterprise","vulnerabilityName":"Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","knownRansomware":false,"cvss":9.8,"epss":0.97407,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2007-3010/"},{"cveID":"CVE-2022-22954","vendor":"VMware","product":"Workspace ONE Access and Identity Manager","vulnerabilityName":"VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability","dateAdded":"2022-04-14","dueDate":"2022-05-05","knownRansomware":true,"cvss":9.8,"epss":0.99997,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22954/"},{"cveID":"CVE-2022-24521","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows CLFS Driver Privilege Escalation Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomware":true,"cvss":7.8,"epss":0.07134,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-24521/"},{"cveID":"CVE-2018-7602","vendor":"Drupal","product":"Core","vulnerabilityName":"Drupal Core Remote Code Execution Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomware":true,"cvss":9.8,"epss":0.99236,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-7602/"},{"cveID":"CVE-2018-20753","vendor":"Kaseya","product":"Virtual System/Server Administrator (VSA)","vulnerabilityName":"Kaseya VSA Remote Code Execution Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomware":true,"cvss":9.8,"epss":0.29336,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-20753/"},{"cveID":"CVE-2015-5123","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomware":false,"cvss":9.8,"epss":0.18493,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-5123/"},{"cveID":"CVE-2015-5122","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomware":false,"cvss":9.8,"epss":0.93688,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-5122/"},{"cveID":"CVE-2015-3113","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomware":false,"cvss":9.8,"epss":0.9994,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-3113/"},{"cveID":"CVE-2015-2502","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomware":false,"cvss":8.8,"epss":0.51127,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-2502/"},{"cveID":"CVE-2015-0313","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomware":false,"cvss":9.8,"epss":0.95266,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-0313/"},{"cveID":"CVE-2015-0311","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomware":false,"cvss":9.8,"epss":0.8582,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-0311/"},{"cveID":"CVE-2014-9163","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomware":false,"cvss":7.8,"epss":0.20356,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-9163/"},{"cveID":"CVE-2022-23176","vendor":"WatchGuard","product":"Firebox and XTM","vulnerabilityName":"WatchGuard Firebox and XTM Privilege Escalation Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","knownRansomware":false,"cvss":8.8,"epss":0.12692,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-23176/"},{"cveID":"CVE-2021-42287","vendor":"Microsoft","product":"Active Directory","vulnerabilityName":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","knownRansomware":true,"cvss":7.5,"epss":0.7717,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-42287/"},{"cveID":"CVE-2021-42278","vendor":"Microsoft","product":"Active Directory","vulnerabilityName":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","knownRansomware":true,"cvss":7.5,"epss":0.73297,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-42278/"},{"cveID":"CVE-2021-39793","vendor":"Google","product":"Pixel","vulnerabilityName":"Google Pixel Out-of-Bounds Write Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","knownRansomware":false,"cvss":7.8,"epss":0.00738,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-39793/"},{"cveID":"CVE-2021-27852","vendor":"Checkbox","product":"Checkbox Survey","vulnerabilityName":"Checkbox Survey Deserialization of Untrusted Data Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","knownRansomware":false,"cvss":9.8,"epss":0.31946,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-27852/"},{"cveID":"CVE-2021-22600","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Privilege Escalation Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","knownRansomware":false,"cvss":7,"epss":0.06079,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22600/"},{"cveID":"CVE-2020-2509","vendor":"QNAP","product":"QNAP Network-Attached Storage (NAS)","vulnerabilityName":"QNAP Network-Attached Storage (NAS) Command Injection Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","knownRansomware":false,"cvss":9.8,"epss":0.33381,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-2509/"},{"cveID":"CVE-2017-11317","vendor":"Telerik","product":"User Interface (UI) for ASP.NET AJAX","vulnerabilityName":"Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","knownRansomware":false,"cvss":9.8,"epss":0.84175,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-11317/"},{"cveID":"CVE-2021-3156","vendor":"Sudo","product":"Sudo","vulnerabilityName":"Sudo Heap-Based Buffer Overflow Vulnerability","dateAdded":"2022-04-06","dueDate":"2022-04-27","knownRansomware":false,"cvss":7.8,"epss":0.99969,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-3156/"},{"cveID":"CVE-2021-31166","vendor":"Microsoft","product":"HTTP Protocol Stack","vulnerabilityName":"Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability","dateAdded":"2022-04-06","dueDate":"2022-04-27","knownRansomware":false,"cvss":9.8,"epss":0.99772,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-31166/"},{"cveID":"CVE-2017-0148","vendor":"Microsoft","product":"SMBv1 server","vulnerabilityName":"Microsoft SMBv1 Server Remote Code Execution Vulnerability","dateAdded":"2022-04-06","dueDate":"2022-04-27","knownRansomware":true,"cvss":8.1,"epss":0.99373,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0148/"},{"cveID":"CVE-2022-22965","vendor":"VMware","product":"Spring Framework","vulnerabilityName":"Spring Framework JDK 9+ Remote Code Execution Vulnerability","dateAdded":"2022-04-04","dueDate":"2022-04-25","knownRansomware":false,"cvss":9.8,"epss":0.99638,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22965/"},{"cveID":"CVE-2022-22675","vendor":"Apple","product":"macOS","vulnerabilityName":"Apple macOS Out-of-Bounds Write Vulnerability","dateAdded":"2022-04-04","dueDate":"2022-04-25","knownRansomware":false,"cvss":7.8,"epss":0.12492,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22675/"},{"cveID":"CVE-2022-22674","vendor":"Apple","product":"macOS","vulnerabilityName":"Apple macOS Out-of-Bounds Read Vulnerability","dateAdded":"2022-04-04","dueDate":"2022-04-25","knownRansomware":false,"cvss":5.5,"epss":0.01133,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22674/"},{"cveID":"CVE-2021-45382","vendor":"D-Link","product":"Multiple Routers","vulnerabilityName":"D-Link Multiple Routers Remote Code Execution Vulnerability","dateAdded":"2022-04-04","dueDate":"2022-04-25","knownRansomware":false,"cvss":9.8,"epss":0.97836,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-45382/"},{"cveID":"CVE-2022-26871","vendor":"Trend Micro","product":"Apex Central","vulnerabilityName":"Trend Micro Apex Central Arbitrary File Upload Vulnerability","dateAdded":"2022-03-31","dueDate":"2022-04-21","knownRansomware":false,"cvss":9.8,"epss":0.19633,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-26871/"},{"cveID":"CVE-2022-1040","vendor":"Sophos","product":"Firewall","vulnerabilityName":"Sophos Firewall Authentication Bypass Vulnerability","dateAdded":"2022-03-31","dueDate":"2022-04-21","knownRansomware":false,"cvss":9.8,"epss":0.99796,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-1040/"},{"cveID":"CVE-2021-34484","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","dateAdded":"2022-03-31","dueDate":"2022-04-21","knownRansomware":false,"cvss":7.8,"epss":0.21827,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-34484/"},{"cveID":"CVE-2021-28799","vendor":"QNAP","product":"Network Attached Storage (NAS)","vulnerabilityName":"QNAP NAS Improper Authorization Vulnerability","dateAdded":"2022-03-31","dueDate":"2022-04-21","knownRansomware":true,"cvss":9.8,"epss":0.7825,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-28799/"},{"cveID":"CVE-2021-21551","vendor":"Dell","product":"dbutil Driver","vulnerabilityName":"Dell dbutil Driver Insufficient Access Control Vulnerability","dateAdded":"2022-03-31","dueDate":"2022-04-21","knownRansomware":false,"cvss":7.8,"epss":0.79249,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-21551/"},{"cveID":"CVE-2018-10562","vendor":"Dasan","product":"Gigabit Passive Optical Network (GPON) Routers","vulnerabilityName":"Dasan GPON Routers Command Injection Vulnerability","dateAdded":"2022-03-31","dueDate":"2022-04-21","knownRansomware":true,"cvss":9.8,"epss":0.99952,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-10562/"},{"cveID":"CVE-2018-10561","vendor":"Dasan","product":"Gigabit Passive Optical Network (GPON) Routers","vulnerabilityName":"Dasan GPON Routers Authentication Bypass Vulnerability","dateAdded":"2022-03-31","dueDate":"2022-04-21","knownRansomware":false,"cvss":9.8,"epss":0.93041,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-10561/"},{"cveID":"CVE-2022-1096","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":8.8,"epss":0.24389,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-1096/"},{"cveID":"CVE-2022-0543","vendor":"Redis","product":"Debian-specific Redis Servers","vulnerabilityName":"Debian-specific Redis Server Lua Sandbox Escape Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":10,"epss":0.99351,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-0543/"},{"cveID":"CVE-2021-38646","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":true,"cvss":7.8,"epss":0.07987,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-38646/"},{"cveID":"CVE-2021-34486","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Event Tracing Privilege Escalation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":7.8,"epss":0.09253,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-34486/"},{"cveID":"CVE-2021-26085","vendor":"Atlassian","product":"Confluence Server","vulnerabilityName":"Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":true,"cvss":5.3,"epss":0.99937,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-26085/"},{"cveID":"CVE-2021-20028","vendor":"SonicWall","product":"Secure Remote Access (SRA)","vulnerabilityName":"SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":true,"cvss":9.8,"epss":0.29866,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-20028/"},{"cveID":"CVE-2019-7483","vendor":"SonicWall","product":"SMA100","vulnerabilityName":"SonicWall SMA100 Directory Traversal Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":7.5,"epss":0.0401,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-7483/"},{"cveID":"CVE-2018-8440","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":true,"cvss":7.8,"epss":0.18386,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-8440/"},{"cveID":"CVE-2018-8406","vendor":"Microsoft","product":"DirectX Graphics Kernel (DXGKRNL)","vulnerabilityName":"Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":true,"cvss":7.8,"epss":0.03444,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-8406/"},{"cveID":"CVE-2018-8405","vendor":"Microsoft","product":"DirectX Graphics Kernel (DXGKRNL)","vulnerabilityName":"Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":true,"cvss":7.8,"epss":0.03444,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-8405/"},{"cveID":"CVE-2017-0213","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":true,"cvss":7.3,"epss":0.84138,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0213/"},{"cveID":"CVE-2017-0059","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Information Disclosure Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":4.3,"epss":0.61968,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0059/"},{"cveID":"CVE-2017-0037","vendor":"Microsoft","product":"Edge and Internet Explorer","vulnerabilityName":"Microsoft Edge and Internet Explorer Type Confusion Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":8.1,"epss":0.80386,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0037/"},{"cveID":"CVE-2016-7201","vendor":"Microsoft","product":"Edge","vulnerabilityName":"Microsoft Edge Memory Corruption Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":8.8,"epss":0.79687,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-7201/"},{"cveID":"CVE-2016-7200","vendor":"Microsoft","product":"Edge","vulnerabilityName":"Microsoft Edge Memory Corruption Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":8.8,"epss":0.8249,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-7200/"},{"cveID":"CVE-2016-0189","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":true,"cvss":7.5,"epss":0.94062,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-0189/"},{"cveID":"CVE-2016-0151","vendor":"Microsoft","product":"Client-Server Run-time Subsystem (CSRSS)","vulnerabilityName":"Microsoft Windows CSRSS Security Feature Bypass Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":true,"cvss":7.8,"epss":0.63195,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-0151/"},{"cveID":"CVE-2016-0040","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":7.8,"epss":0.24467,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-0040/"},{"cveID":"CVE-2015-2426","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":8.8,"epss":0.8669,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-2426/"},{"cveID":"CVE-2015-2419","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":8.8,"epss":0.53407,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-2419/"},{"cveID":"CVE-2015-1770","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Uninitialized Memory Use Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":8.8,"epss":0.35105,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-1770/"},{"cveID":"CVE-2013-3660","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":7.8,"epss":0.39578,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-3660/"},{"cveID":"CVE-2013-2729","vendor":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":9.8,"epss":0.66555,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-2729/"},{"cveID":"CVE-2013-2551","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":true,"cvss":8.8,"epss":0.74096,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-2551/"},{"cveID":"CVE-2013-2465","vendor":"Oracle","product":"Java SE","vulnerabilityName":"Oracle Java SE Unspecified Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":true,"cvss":9.8,"epss":0.98704,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-2465/"},{"cveID":"CVE-2013-1690","vendor":"Mozilla","product":"Firefox and Thunderbird","vulnerabilityName":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":8.8,"epss":0.69021,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-1690/"},{"cveID":"CVE-2012-5076","vendor":"Oracle","product":"Java SE","vulnerabilityName":"Oracle Java SE Sandbox Bypass Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":9.8,"epss":0.91013,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-5076/"},{"cveID":"CVE-2012-2539","vendor":"Microsoft","product":"Word","vulnerabilityName":"Microsoft Word Remote Code Execution Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":7.8,"epss":0.53159,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-2539/"},{"cveID":"CVE-2012-2034","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":7.5,"epss":0.078,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-2034/"},{"cveID":"CVE-2012-0518","vendor":"Oracle","product":"Fusion Middleware","vulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":4.7,"epss":0.04685,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-0518/"},{"cveID":"CVE-2011-2005","vendor":"Microsoft","product":"Ancillary Function Driver (afd.sys)","vulnerabilityName":"Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomware":false,"cvss":7.8,"epss":0.31761,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2011-2005/"},{"cveID":"CVE-2010-4398","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-21","knownRansomware":false,"cvss":7.8,"epss":0.08661,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-4398/"},{"cveID":"CVE-2022-26318","vendor":"WatchGuard","product":"Firebox and XTM Appliances","vulnerabilityName":"WatchGuard Firebox and XTM Appliances Arbitrary Code Execution","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.78157,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-26318/"},{"cveID":"CVE-2022-26143","vendor":"Mitel","product":"MiCollab, MiVoice Business Express","vulnerabilityName":"MiCollab, MiVoice Business Express Access Control Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.87212,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-26143/"},{"cveID":"CVE-2022-21999","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":true,"cvss":7.8,"epss":0.41683,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-21999/"},{"cveID":"CVE-2021-42237","vendor":"Sitecore","product":"XP","vulnerabilityName":"Sitecore XP Remote Command Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":true,"cvss":9.8,"epss":0.97904,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-42237/"},{"cveID":"CVE-2021-22941","vendor":"Citrix","product":"ShareFile","vulnerabilityName":"Citrix ShareFile Improper Access Control Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":true,"cvss":9.8,"epss":0.53585,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22941/"},{"cveID":"CVE-2020-9377","vendor":"D-Link","product":"DIR-610 Devices","vulnerabilityName":"D-Link DIR-610 Devices Remote Command Execution","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":8.8,"epss":0.21338,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-9377/"},{"cveID":"CVE-2020-9054","vendor":"Zyxel","product":"Multiple Network-Attached Storage (NAS) Devices","vulnerabilityName":"Zyxel Multiple NAS Devices OS Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.99988,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-9054/"},{"cveID":"CVE-2020-7247","vendor":"OpenBSD","product":"OpenSMTPD","vulnerabilityName":"OpenSMTPD Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.98972,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-7247/"},{"cveID":"CVE-2020-5410","vendor":"VMware Tanzu","product":"Spring Cloud Configuration (Config) Server","vulnerabilityName":"VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":7.5,"epss":0.95586,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-5410/"},{"cveID":"CVE-2020-25223","vendor":"Sophos","product":"SG UTM","vulnerabilityName":"Sophos SG UTM Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.96693,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-25223/"},{"cveID":"CVE-2020-2506","vendor":"QNAP Systems","product":"Helpdesk","vulnerabilityName":"QNAP Helpdesk Improper Access Control Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.01982,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-2506/"},{"cveID":"CVE-2020-2021","vendor":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":true,"cvss":10,"epss":0.04362,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-2021/"},{"cveID":"CVE-2020-1956","vendor":"Apache","product":"Kylin","vulnerabilityName":"Apache Kylin OS Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":8.8,"epss":0.97337,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-1956/"},{"cveID":"CVE-2020-1631","vendor":"Juniper","product":"Junos OS","vulnerabilityName":"Juniper Junos OS Path Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.04725,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-1631/"},{"cveID":"CVE-2019-6340","vendor":"Drupal","product":"Core","vulnerabilityName":"Drupal Core Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":8.1,"epss":0.92017,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-6340/"},{"cveID":"CVE-2019-2616","vendor":"Oracle","product":"BI Publisher (Formerly XML Publisher)","vulnerabilityName":"Oracle BI Publisher Unauthorized Access Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":7.2,"epss":0.92183,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-2616/"},{"cveID":"CVE-2019-16920","vendor":"D-Link","product":"Multiple Routers","vulnerabilityName":"D-Link Multiple Routers Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.99996,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-16920/"},{"cveID":"CVE-2019-15107","vendor":"Webmin","product":"Webmin","vulnerabilityName":"Webmin Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":true,"cvss":9.8,"epss":0.99766,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-15107/"},{"cveID":"CVE-2019-12991","vendor":"Citrix","product":"SD-WAN and NetScaler","vulnerabilityName":"Citrix SD-WAN and NetScaler Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":8.8,"epss":0.74052,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-12991/"},{"cveID":"CVE-2019-12989","vendor":"Citrix","product":"SD-WAN and NetScaler","vulnerabilityName":"Citrix SD-WAN and NetScaler SQL Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.94131,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-12989/"},{"cveID":"CVE-2019-11043","vendor":"PHP","product":"FastCGI Process Manager (FPM)","vulnerabilityName":"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":true,"cvss":9.8,"epss":0.9978,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-11043/"},{"cveID":"CVE-2019-10068","vendor":"Kentico","product":"Xperience","vulnerabilityName":"Kentico Xperience Deserialization of Untrusted Data Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.95074,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-10068/"},{"cveID":"CVE-2019-1003030","vendor":"Jenkins","product":"Matrix Project Plugin","vulnerabilityName":"Jenkins Matrix Project Plugin Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.9,"epss":0.96868,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1003030/"},{"cveID":"CVE-2019-0903","vendor":"Microsoft","product":"Graphics Device Interface (GDI)","vulnerabilityName":"Microsoft GDI Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":8.8,"epss":0.21713,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0903/"},{"cveID":"CVE-2018-8414","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Shell Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":8.8,"epss":0.73968,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-8414/"},{"cveID":"CVE-2018-8373","vendor":"Microsoft","product":"Internet Explorer Scripting Engine","vulnerabilityName":"Microsoft Scripting Engine Memory Corruption Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":7.5,"epss":0.61912,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-8373/"},{"cveID":"CVE-2018-6961","vendor":"VMware","product":"SD-WAN Edge","vulnerabilityName":"VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":8.1,"epss":0.86252,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-6961/"},{"cveID":"CVE-2018-14839","vendor":"LG","product":"N1A1 NAS","vulnerabilityName":"LG N1A1 NAS Remote Command Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.89354,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-14839/"},{"cveID":"CVE-2018-1273","vendor":"VMware Tanzu","product":"Spring Data Commons","vulnerabilityName":"VMware Tanzu Spring Data Commons Property Binder Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":true,"cvss":9.8,"epss":0.97002,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-1273/"},{"cveID":"CVE-2018-11138","vendor":"Quest","product":"KACE System Management Appliance","vulnerabilityName":"Quest KACE System Management Appliance Remote Command Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":true,"cvss":9.8,"epss":0.92061,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-11138/"},{"cveID":"CVE-2018-0147","vendor":"Cisco","product":"Secure Access Control System (ACS)","vulnerabilityName":"Cisco Secure Access Control System Java Deserialization Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.18212,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0147/"},{"cveID":"CVE-2018-0125","vendor":"Cisco","product":"VPN Routers","vulnerabilityName":"Cisco VPN Routers Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.55186,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0125/"},{"cveID":"CVE-2017-6334","vendor":"NETGEAR","product":"DGN2200 Devices","vulnerabilityName":"NETGEAR DGN2200 Devices OS Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":8.8,"epss":0.72199,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6334/"},{"cveID":"CVE-2017-6316","vendor":"Citrix","product":"NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server","vulnerabilityName":"Citrix Multiple Products Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.72596,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6316/"},{"cveID":"CVE-2017-3881","vendor":"Cisco","product":"IOS and IOS XE","vulnerabilityName":"Cisco IOS and IOS XE Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.98975,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-3881/"},{"cveID":"CVE-2017-12617","vendor":"Apache","product":"Tomcat","vulnerabilityName":"Apache Tomcat Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":8.1,"epss":0.99988,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-12617/"},{"cveID":"CVE-2017-12615","vendor":"Apache","product":"Tomcat","vulnerabilityName":"Apache Tomcat on Windows Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":true,"cvss":8.1,"epss":0.99607,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-12615/"},{"cveID":"CVE-2017-0146","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SMB Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":true,"cvss":8.8,"epss":0.89862,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0146/"},{"cveID":"CVE-2016-7892","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":8.8,"epss":0.18786,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-7892/"},{"cveID":"CVE-2016-4171","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.20211,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-4171/"},{"cveID":"CVE-2016-1555","vendor":"NETGEAR","product":"Wireless Access Point (WAP) Devices","vulnerabilityName":"NETGEAR Multiple WAP Devices Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.98325,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-1555/"},{"cveID":"CVE-2016-11021","vendor":"D-Link","product":"DCS-930L Devices","vulnerabilityName":"D-Link DCS-930L Devices OS Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":7.2,"epss":0.6887,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-11021/"},{"cveID":"CVE-2016-10174","vendor":"NETGEAR","product":"WNR2000v5 Router","vulnerabilityName":"NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.8345,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-10174/"},{"cveID":"CVE-2016-0752","vendor":"Rails","product":"Ruby on Rails","vulnerabilityName":"Ruby on Rails Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":7.5,"epss":0.95537,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-0752/"},{"cveID":"CVE-2015-4068","vendor":"Arcserve","product":"Unified Data Protection (UDP)","vulnerabilityName":"Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.1,"epss":0.63643,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-4068/"},{"cveID":"CVE-2015-3035","vendor":"TP-Link","product":"Multiple Archer Devices","vulnerabilityName":"TP-Link Multiple Archer Devices Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":7.5,"epss":0.83948,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-3035/"},{"cveID":"CVE-2015-1427","vendor":"Elastic","product":"Elasticsearch","vulnerabilityName":"Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.99906,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-1427/"},{"cveID":"CVE-2015-1187","vendor":"D-Link and TRENDnet","product":"Multiple Devices","vulnerabilityName":"D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.82863,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-1187/"},{"cveID":"CVE-2015-0666","vendor":"Cisco","product":"Prime Data Center Network Manager (DCNM)","vulnerabilityName":"Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":7.5,"epss":0.40379,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-0666/"},{"cveID":"CVE-2014-6332","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":8.8,"epss":0.94996,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-6332/"},{"cveID":"CVE-2014-6324","vendor":"Microsoft","product":"Kerberos Key Distribution Center (KDC)","vulnerabilityName":"Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":8.8,"epss":0.87448,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-6324/"},{"cveID":"CVE-2014-6287","vendor":"Rejetto","product":"HTTP File Server (HFS)","vulnerabilityName":"Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.99323,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-6287/"},{"cveID":"CVE-2014-3120","vendor":"Elastic","product":"Elasticsearch","vulnerabilityName":"Elasticsearch Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":8.1,"epss":0.88559,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-3120/"},{"cveID":"CVE-2014-0130","vendor":"Rails","product":"Ruby on Rails","vulnerabilityName":"Ruby on Rails Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":7.5,"epss":0.53703,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-0130/"},{"cveID":"CVE-2013-5223","vendor":"D-Link","product":"DSL-2760U","vulnerabilityName":"D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":5.4,"epss":0.33567,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-5223/"},{"cveID":"CVE-2013-4810","vendor":"Hewlett Packard (HP)","product":"ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management","vulnerabilityName":"HP Multiple Products Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.79003,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-4810/"},{"cveID":"CVE-2013-2251","vendor":"Apache","product":"Struts","vulnerabilityName":"Apache Struts Improper Input Validation Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.99998,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-2251/"},{"cveID":"CVE-2012-1823","vendor":"PHP","product":"PHP","vulnerabilityName":"PHP-CGI Query String Parameter Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.99998,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-1823/"},{"cveID":"CVE-2010-4345","vendor":"Exim","product":"Exim","vulnerabilityName":"Exim Privilege Escalation Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":7.8,"epss":0.18105,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-4345/"},{"cveID":"CVE-2010-4344","vendor":"Exim","product":"Exim","vulnerabilityName":"Exim Heap-Based Buffer Overflow Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.71901,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-4344/"},{"cveID":"CVE-2010-3035","vendor":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":7.5,"epss":0.05562,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-3035/"},{"cveID":"CVE-2010-2861","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":true,"cvss":9.8,"epss":0.99721,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-2861/"},{"cveID":"CVE-2009-2055","vendor":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":5.9,"epss":0.03326,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2009-2055/"},{"cveID":"CVE-2009-1151","vendor":"phpMyAdmin","product":"phpMyAdmin","vulnerabilityName":"phpMyAdmin Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.96565,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2009-1151/"},{"cveID":"CVE-2009-0927","vendor":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":8.8,"epss":0.96632,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2009-0927/"},{"cveID":"CVE-2005-2773","vendor":"Hewlett Packard (HP)","product":"OpenView Network Node Manager","vulnerabilityName":"HP OpenView Network Node Manager Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomware":false,"cvss":9.8,"epss":0.74592,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2005-2773/"},{"cveID":"CVE-2020-5135","vendor":"SonicWall","product":"SonicOS","vulnerabilityName":"SonicWall SonicOS Buffer Overflow Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","knownRansomware":true,"cvss":9.8,"epss":0.26869,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-5135/"},{"cveID":"CVE-2019-1405","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","knownRansomware":true,"cvss":7.8,"epss":0.2995,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1405/"},{"cveID":"CVE-2019-1322","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","knownRansomware":true,"cvss":7.8,"epss":0.19205,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1322/"},{"cveID":"CVE-2019-1315","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","knownRansomware":true,"cvss":7.8,"epss":0.03478,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1315/"},{"cveID":"CVE-2019-1253","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","knownRansomware":true,"cvss":7.8,"epss":0.11616,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1253/"},{"cveID":"CVE-2019-1132","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","knownRansomware":false,"cvss":7.8,"epss":0.09788,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1132/"},{"cveID":"CVE-2019-1129","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","knownRansomware":true,"cvss":7.8,"epss":0.01782,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1129/"},{"cveID":"CVE-2019-1069","vendor":"Microsoft","product":"Task Scheduler","vulnerabilityName":"Microsoft Task Scheduler Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","knownRansomware":true,"cvss":7.8,"epss":0.06117,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1069/"},{"cveID":"CVE-2019-1064","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","knownRansomware":true,"cvss":7.8,"epss":0.06886,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1064/"},{"cveID":"CVE-2019-0841","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","knownRansomware":true,"cvss":7.8,"epss":0.414,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0841/"},{"cveID":"CVE-2019-0543","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","knownRansomware":true,"cvss":7.8,"epss":0.04718,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0543/"},{"cveID":"CVE-2018-8120","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","knownRansomware":true,"cvss":7,"epss":0.73721,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-8120/"},{"cveID":"CVE-2017-0101","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Transaction Manager Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","knownRansomware":true,"cvss":7.8,"epss":0.57482,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0101/"},{"cveID":"CVE-2016-3309","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","knownRansomware":true,"cvss":7.8,"epss":0.20625,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-3309/"},{"cveID":"CVE-2015-2546","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Memory Corruption Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","knownRansomware":true,"cvss":8.2,"epss":0.10189,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-2546/"},{"cveID":"CVE-2022-26486","vendor":"Mozilla","product":"Firefox","vulnerabilityName":"Mozilla Firefox Use-After-Free Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-03-21","knownRansomware":false,"cvss":9.6,"epss":0.02349,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-26486/"},{"cveID":"CVE-2022-26485","vendor":"Mozilla","product":"Firefox","vulnerabilityName":"Mozilla Firefox Use-After-Free Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-03-21","knownRansomware":false,"cvss":8.8,"epss":0.14261,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-26485/"},{"cveID":"CVE-2021-21973","vendor":"VMware","product":"vCenter Server and Cloud Foundation","vulnerabilityName":"VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-03-21","knownRansomware":false,"cvss":5.3,"epss":0.8764,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-21973/"},{"cveID":"CVE-2020-8218","vendor":"Pulse Secure","product":"Pulse Connect Secure","vulnerabilityName":"Pulse Connect Secure Code Injection Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","knownRansomware":false,"cvss":7.2,"epss":0.32739,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-8218/"},{"cveID":"CVE-2019-11581","vendor":"Atlassian","product":"Jira Server and Data Center","vulnerabilityName":"Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","knownRansomware":false,"cvss":9.8,"epss":0.84621,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-11581/"},{"cveID":"CVE-2017-6077","vendor":"NETGEAR","product":"Wireless Router DGN2200","vulnerabilityName":"NETGEAR DGN2200 Remote Code Execution Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","knownRansomware":false,"cvss":9.8,"epss":0.68201,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6077/"},{"cveID":"CVE-2016-6277","vendor":"NETGEAR","product":"Multiple Routers","vulnerabilityName":"NETGEAR Multiple Routers Remote Code Execution Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","knownRansomware":false,"cvss":8.8,"epss":0.99803,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-6277/"},{"cveID":"CVE-2013-0631","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Information Disclosure Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","knownRansomware":false,"cvss":7.5,"epss":0.65867,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-0631/"},{"cveID":"CVE-2013-0629","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Directory Traversal Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","knownRansomware":false,"cvss":7.5,"epss":0.65902,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-0629/"},{"cveID":"CVE-2013-0625","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Authentication Bypass Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","knownRansomware":false,"cvss":9.8,"epss":0.93797,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-0625/"},{"cveID":"CVE-2009-3960","vendor":"Adobe","product":"BlazeDS","vulnerabilityName":"Adobe BlazeDS Information Disclosure Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","knownRansomware":true,"cvss":6.5,"epss":0.90012,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2009-3960/"},{"cveID":"CVE-2022-20708","vendor":"Cisco","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":8,"epss":0.14863,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-20708/"},{"cveID":"CVE-2022-20703","vendor":"Cisco","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":8,"epss":0.09203,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-20703/"},{"cveID":"CVE-2022-20701","vendor":"Cisco","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":7.8,"epss":0.09747,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-20701/"},{"cveID":"CVE-2022-20700","vendor":"Cisco","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":9.8,"epss":0.05655,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-20700/"},{"cveID":"CVE-2022-20699","vendor":"Cisco","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":9.8,"epss":0.72458,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-20699/"},{"cveID":"CVE-2021-41379","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Installer Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":true,"cvss":5.5,"epss":0.19381,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-41379/"},{"cveID":"CVE-2020-1938","vendor":"Apache","product":"Tomcat","vulnerabilityName":"Apache Tomcat Improper Privilege Management Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":9.8,"epss":0.9927,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-1938/"},{"cveID":"CVE-2020-11899","vendor":"Treck TCP/IP stack","product":"IPv6","vulnerabilityName":"Treck TCP/IP stack Out-of-Bounds Read Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":5.4,"epss":0.18564,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-11899/"},{"cveID":"CVE-2019-16928","vendor":"Exim","product":"Exim Internet Mailer","vulnerabilityName":"Exim Out-of-bounds Write Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":9.8,"epss":0.41638,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-16928/"},{"cveID":"CVE-2019-1652","vendor":"Cisco","product":"Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers","vulnerabilityName":"Cisco Small Business Routers Improper Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":7.2,"epss":0.95923,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1652/"},{"cveID":"CVE-2019-1297","vendor":"Microsoft","product":"Excel","vulnerabilityName":"Microsoft Excel Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":8.8,"epss":0.21805,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1297/"},{"cveID":"CVE-2018-8581","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":true,"cvss":7.4,"epss":0.27355,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-8581/"},{"cveID":"CVE-2018-8298","vendor":"ChakraCore","product":"ChakraCore scripting engine","vulnerabilityName":"ChakraCore Scripting Engine Type Confusion Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":7.5,"epss":0.74789,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-8298/"},{"cveID":"CVE-2018-0180","vendor":"Cisco","product":"IOS Software","vulnerabilityName":"Cisco IOS Software Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":5.9,"epss":0.04935,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0180/"},{"cveID":"CVE-2018-0179","vendor":"Cisco","product":"IOS Software","vulnerabilityName":"Cisco IOS Software Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":5.9,"epss":0.04935,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0179/"},{"cveID":"CVE-2018-0175","vendor":"Cisco","product":"IOS, XR, and XE Software","vulnerabilityName":"Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":8,"epss":0.03478,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0175/"},{"cveID":"CVE-2018-0174","vendor":"Cisco","product":"IOS XE Software","vulnerabilityName":"Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":8.6,"epss":0.07608,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0174/"},{"cveID":"CVE-2018-0173","vendor":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software Improper Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":8.6,"epss":0.07608,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0173/"},{"cveID":"CVE-2018-0172","vendor":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software Improper Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":8.6,"epss":0.0782,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0172/"},{"cveID":"CVE-2018-0167","vendor":"Cisco","product":"IOS, XR, and XE Software","vulnerabilityName":"Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":8.8,"epss":0.03354,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0167/"},{"cveID":"CVE-2018-0161","vendor":"Cisco","product":"IOS Software","vulnerabilityName":"Cisco IOS Software Resource Management Errors Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":6.3,"epss":0.04116,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0161/"},{"cveID":"CVE-2018-0159","vendor":"Cisco","product":"IOS Software and Cisco IOS XE Software","vulnerabilityName":"Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":7.5,"epss":0.0687,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0159/"},{"cveID":"CVE-2018-0158","vendor":"Cisco","product":"IOS Software and Cisco IOS XE Software","vulnerabilityName":"Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":8.6,"epss":0.0719,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0158/"},{"cveID":"CVE-2018-0156","vendor":"Cisco","product":"IOS Software and Cisco IOS XE Software","vulnerabilityName":"Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":7.5,"epss":0.08599,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0156/"},{"cveID":"CVE-2018-0155","vendor":"Cisco","product":"Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches","vulnerabilityName":"Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":8.6,"epss":0.07742,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0155/"},{"cveID":"CVE-2018-0154","vendor":"Cisco","product":"IOS Software","vulnerabilityName":"Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":7.5,"epss":0.0707,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0154/"},{"cveID":"CVE-2018-0151","vendor":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomware":false,"cvss":9.8,"epss":0.14197,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0151/"},{"cveID":"CVE-2017-8540","vendor":"Microsoft","product":"Malware Protection Engine","vulnerabilityName":"Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.71961,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-8540/"},{"cveID":"CVE-2017-6744","vendor":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.07155,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6744/"},{"cveID":"CVE-2017-6743","vendor":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.10654,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6743/"},{"cveID":"CVE-2017-6740","vendor":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.10895,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6740/"},{"cveID":"CVE-2017-6739","vendor":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.10654,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6739/"},{"cveID":"CVE-2017-6738","vendor":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.10654,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6738/"},{"cveID":"CVE-2017-6737","vendor":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.44325,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6737/"},{"cveID":"CVE-2017-6736","vendor":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.70559,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6736/"},{"cveID":"CVE-2017-6663","vendor":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":6.5,"epss":0.02135,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6663/"},{"cveID":"CVE-2017-6627","vendor":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.5,"epss":0.06042,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6627/"},{"cveID":"CVE-2017-12319","vendor":"Cisco","product":"IOS XE Software","vulnerabilityName":"Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":5.9,"epss":0.05243,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-12319/"},{"cveID":"CVE-2017-12240","vendor":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":9.8,"epss":0.13883,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-12240/"},{"cveID":"CVE-2017-12238","vendor":"Cisco","product":"Catalyst 6800 Series Switches","vulnerabilityName":"Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":6.5,"epss":0.02034,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-12238/"},{"cveID":"CVE-2017-12237","vendor":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.5,"epss":0.07128,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-12237/"},{"cveID":"CVE-2017-12235","vendor":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.5,"epss":0.07128,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-12235/"},{"cveID":"CVE-2017-12234","vendor":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.5,"epss":0.07128,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-12234/"},{"cveID":"CVE-2017-12233","vendor":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.5,"epss":0.07128,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-12233/"},{"cveID":"CVE-2017-12232","vendor":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":6.5,"epss":0.02171,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-12232/"},{"cveID":"CVE-2017-12231","vendor":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.5,"epss":0.07128,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-12231/"},{"cveID":"CVE-2017-11826","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.81288,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-11826/"},{"cveID":"CVE-2017-11292","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Type Confusion Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.11885,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-11292/"},{"cveID":"CVE-2017-0261","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Use-After-Free Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.7813,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0261/"},{"cveID":"CVE-2017-0001","vendor":"Microsoft","product":"Graphics Device Interface (GDI)","vulnerabilityName":"Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.03114,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0001/"},{"cveID":"CVE-2016-8562","vendor":"Siemens","product":"SIMATIC CP","vulnerabilityName":"Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.5,"epss":0.03624,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-8562/"},{"cveID":"CVE-2016-7855","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.25198,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-7855/"},{"cveID":"CVE-2016-7262","vendor":"Microsoft","product":"Excel","vulnerabilityName":"Microsoft Office Security Feature Bypass Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.57856,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-7262/"},{"cveID":"CVE-2016-7193","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.57705,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-7193/"},{"cveID":"CVE-2016-5195","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Race Condition Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7,"epss":0.83524,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-5195/"},{"cveID":"CVE-2016-4117","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":true,"cvss":9.8,"epss":0.94354,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-4117/"},{"cveID":"CVE-2016-1019","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":true,"cvss":9.8,"epss":0.22487,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-1019/"},{"cveID":"CVE-2016-0099","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":true,"cvss":7.8,"epss":0.37164,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-0099/"},{"cveID":"CVE-2015-7645","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":true,"cvss":7.8,"epss":0.65578,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-7645/"},{"cveID":"CVE-2015-5119","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":9.8,"epss":0.99344,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-5119/"},{"cveID":"CVE-2015-4902","vendor":"Oracle","product":"Java SE","vulnerabilityName":"Oracle Java SE Integrity Check Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":5.3,"epss":0.13354,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-4902/"},{"cveID":"CVE-2015-3043","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":9.8,"epss":0.73862,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-3043/"},{"cveID":"CVE-2015-2590","vendor":"Oracle","product":"Java SE","vulnerabilityName":"Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":9.8,"epss":0.25469,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-2590/"},{"cveID":"CVE-2015-2545","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Malformed EPS File Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.86053,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-2545/"},{"cveID":"CVE-2015-2424","vendor":"Microsoft","product":"PowerPoint","vulnerabilityName":"Microsoft PowerPoint Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.38497,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-2424/"},{"cveID":"CVE-2015-2387","vendor":"Microsoft","product":"ATM Font Driver","vulnerabilityName":"Microsoft ATM Font Driver Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.3512,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-2387/"},{"cveID":"CVE-2015-1701","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":true,"cvss":7.8,"epss":0.562,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-1701/"},{"cveID":"CVE-2015-1642","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.53213,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-1642/"},{"cveID":"CVE-2014-4114","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.81628,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-4114/"},{"cveID":"CVE-2014-0496","vendor":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Use-After-Free Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.40243,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-0496/"},{"cveID":"CVE-2013-5065","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.34893,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-5065/"},{"cveID":"CVE-2013-3897","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.77462,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-3897/"},{"cveID":"CVE-2013-3346","vendor":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":9.8,"epss":0.78581,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-3346/"},{"cveID":"CVE-2013-1675","vendor":"Mozilla","product":"Firefox","vulnerabilityName":"Mozilla Firefox Information Disclosure Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":6.5,"epss":0.06696,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-1675/"},{"cveID":"CVE-2013-1347","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.77889,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-1347/"},{"cveID":"CVE-2013-0641","vendor":"Adobe","product":"Reader","vulnerabilityName":"Adobe Reader Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.32449,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-0641/"},{"cveID":"CVE-2013-0640","vendor":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.86979,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-0640/"},{"cveID":"CVE-2013-0632","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Authentication Bypass Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":9.8,"epss":0.93691,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-0632/"},{"cveID":"CVE-2012-4681","vendor":"Oracle","product":"Java SE","vulnerabilityName":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":true,"cvss":9.8,"epss":0.98536,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-4681/"},{"cveID":"CVE-2012-1856","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.72225,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-1856/"},{"cveID":"CVE-2012-1723","vendor":"Oracle","product":"Java SE","vulnerabilityName":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":true,"cvss":9.8,"epss":0.93688,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-1723/"},{"cveID":"CVE-2012-1535","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.70384,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-1535/"},{"cveID":"CVE-2012-0507","vendor":"Oracle","product":"Java SE","vulnerabilityName":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":true,"cvss":9.8,"epss":0.98113,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-0507/"},{"cveID":"CVE-2011-3544","vendor":"Oracle","product":"Java SE JDK and JRE","vulnerabilityName":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":9.8,"epss":0.96714,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2011-3544/"},{"cveID":"CVE-2011-1889","vendor":"Microsoft","product":"Forefront Threat Management Gateway (TMG)","vulnerabilityName":"Microsoft Forefront TMG Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":9.8,"epss":0.48368,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2011-1889/"},{"cveID":"CVE-2011-0611","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.9941,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2011-0611/"},{"cveID":"CVE-2010-3333","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.89497,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-3333/"},{"cveID":"CVE-2010-0232","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Exception Handler Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.29253,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-0232/"},{"cveID":"CVE-2010-0188","vendor":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":true,"cvss":7.8,"epss":0.88246,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-0188/"},{"cveID":"CVE-2009-3129","vendor":"Microsoft","product":"Excel","vulnerabilityName":"Microsoft Excel Featheader Record Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.85731,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2009-3129/"},{"cveID":"CVE-2009-1123","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Improper Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.04918,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2009-1123/"},{"cveID":"CVE-2008-3431","vendor":"Oracle","product":"VirtualBox","vulnerabilityName":"Oracle VirtualBox Insufficient Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":8.8,"epss":0.06932,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2008-3431/"},{"cveID":"CVE-2008-2992","vendor":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Reader and Acrobat Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":true,"cvss":7.8,"epss":0.98482,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2008-2992/"},{"cveID":"CVE-2004-0210","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.07214,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2004-0210/"},{"cveID":"CVE-2002-0367","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomware":false,"cvss":7.8,"epss":0.04919,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2002-0367/"},{"cveID":"CVE-2022-24682","vendor":"Synacor","product":"Zimbra Collaborate Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","dateAdded":"2022-02-25","dueDate":"2022-03-11","knownRansomware":true,"cvss":6.1,"epss":0.30931,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-24682/"},{"cveID":"CVE-2017-8570","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Remote Code Execution Vulnerability","dateAdded":"2022-02-25","dueDate":"2022-08-25","knownRansomware":false,"cvss":7.8,"epss":0.89889,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-8570/"},{"cveID":"CVE-2017-0222","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Remote Code Execution Vulnerability","dateAdded":"2022-02-25","dueDate":"2022-08-25","knownRansomware":false,"cvss":8.8,"epss":0.29645,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0222/"},{"cveID":"CVE-2014-6352","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Code Injection Vulnerability","dateAdded":"2022-02-25","dueDate":"2022-08-25","knownRansomware":false,"cvss":7.8,"epss":0.77553,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-6352/"},{"cveID":"CVE-2022-23134","vendor":"Zabbix","product":"Frontend","vulnerabilityName":"Zabbix Frontend Improper Access Control Vulnerability","dateAdded":"2022-02-22","dueDate":"2022-03-08","knownRansomware":false,"cvss":5.3,"epss":0.84657,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-23134/"},{"cveID":"CVE-2022-23131","vendor":"Zabbix","product":"Frontend","vulnerabilityName":"Zabbix Frontend Authentication Bypass Vulnerability","dateAdded":"2022-02-22","dueDate":"2022-03-08","knownRansomware":false,"cvss":9.8,"epss":0.95683,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-23131/"},{"cveID":"CVE-2022-24086","vendor":"Adobe","product":"Commerce and Magento Open Source","vulnerabilityName":"Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-03-01","knownRansomware":false,"cvss":9.8,"epss":0.99199,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-24086/"},{"cveID":"CVE-2022-0609","vendor":"Google","product":"Chromium Animation","vulnerabilityName":"Google Chromium Animation Use-After-Free Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-03-01","knownRansomware":false,"cvss":8.8,"epss":0.22272,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-0609/"},{"cveID":"CVE-2019-0752","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Type Confusion Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","knownRansomware":true,"cvss":7.5,"epss":0.81551,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0752/"},{"cveID":"CVE-2018-8174","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","knownRansomware":true,"cvss":7.5,"epss":0.88508,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-8174/"},{"cveID":"CVE-2018-20250","vendor":"RARLAB","product":"WinRAR","vulnerabilityName":"WinRAR Absolute Path Traversal Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","knownRansomware":true,"cvss":7.8,"epss":0.96274,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-20250/"},{"cveID":"CVE-2018-15982","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","knownRansomware":true,"cvss":7.8,"epss":0.89146,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-15982/"},{"cveID":"CVE-2017-9841","vendor":"PHPUnit","product":"PHPUnit","vulnerabilityName":"PHPUnit Command Injection Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","knownRansomware":false,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-9841/"},{"cveID":"CVE-2014-1761","vendor":"Microsoft","product":"Word","vulnerabilityName":"Microsoft Word Memory Corruption Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","knownRansomware":false,"cvss":7.8,"epss":0.7746,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-1761/"},{"cveID":"CVE-2013-3906","vendor":"Microsoft","product":"Graphics Component","vulnerabilityName":"Microsoft Graphics Component Memory Corruption Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","knownRansomware":false,"cvss":7.8,"epss":0.84971,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-3906/"},{"cveID":"CVE-2022-22620","vendor":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability","dateAdded":"2022-02-11","dueDate":"2022-02-25","knownRansomware":false,"cvss":8.8,"epss":0.16214,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22620/"},{"cveID":"CVE-2021-36934","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SAM Local Privilege Escalation Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-02-24","knownRansomware":false,"cvss":7.8,"epss":0.67252,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-36934/"},{"cveID":"CVE-2020-0796","vendor":"Microsoft","product":"SMBv3","vulnerabilityName":"Microsoft SMBv3 Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","knownRansomware":true,"cvss":10,"epss":0.9981,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-0796/"},{"cveID":"CVE-2018-1000861","vendor":"Jenkins","product":"Jenkins Stapler Web Framework","vulnerabilityName":"Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","knownRansomware":false,"cvss":9.8,"epss":0.98326,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-1000861/"},{"cveID":"CVE-2017-9791","vendor":"Apache","product":"Struts 1","vulnerabilityName":"Apache Struts 1 Improper Input Validation Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","knownRansomware":false,"cvss":9.8,"epss":0.98908,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-9791/"},{"cveID":"CVE-2017-8464","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","knownRansomware":false,"cvss":8.8,"epss":0.90026,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-8464/"},{"cveID":"CVE-2017-10271","vendor":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle Corporation WebLogic Server Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","knownRansomware":true,"cvss":7.5,"epss":0.99993,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-10271/"},{"cveID":"CVE-2017-0263","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","knownRansomware":false,"cvss":7.8,"epss":0.10034,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0263/"},{"cveID":"CVE-2017-0262","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","knownRansomware":false,"cvss":7.8,"epss":0.81005,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0262/"},{"cveID":"CVE-2017-0145","vendor":"Microsoft","product":"SMBv1","vulnerabilityName":"Microsoft SMBv1 Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","knownRansomware":true,"cvss":8.8,"epss":0.8985,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0145/"},{"cveID":"CVE-2017-0144","vendor":"Microsoft","product":"SMBv1","vulnerabilityName":"Microsoft SMBv1 Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","knownRansomware":true,"cvss":8.8,"epss":0.9923,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0144/"},{"cveID":"CVE-2016-3088","vendor":"Apache","product":"ActiveMQ","vulnerabilityName":"Apache ActiveMQ Improper Input Validation Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","knownRansomware":false,"cvss":9.8,"epss":0.98518,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-3088/"},{"cveID":"CVE-2015-2051","vendor":"D-Link","product":"DIR-645 Router","vulnerabilityName":"D-Link DIR-645 Router Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","knownRansomware":false,"cvss":8.8,"epss":0.97101,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-2051/"},{"cveID":"CVE-2015-1635","vendor":"Microsoft","product":"HTTP.sys","vulnerabilityName":"Microsoft HTTP.sys Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","knownRansomware":false,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-1635/"},{"cveID":"CVE-2015-1130","vendor":"Apple","product":"OS X","vulnerabilityName":"Apple OS X Authentication Bypass Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","knownRansomware":false,"cvss":7.8,"epss":0.09887,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-1130/"},{"cveID":"CVE-2014-4404","vendor":"Apple","product":"OS X","vulnerabilityName":"Apple OS X Heap-Based Buffer Overflow Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","knownRansomware":false,"cvss":7.8,"epss":0.49049,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-4404/"},{"cveID":"CVE-2022-21882","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-02-04","dueDate":"2022-02-18","knownRansomware":true,"cvss":7.8,"epss":0.59205,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-21882/"},{"cveID":"CVE-2022-22587","vendor":"Apple","product":"iOS and macOS","vulnerabilityName":"Apple Memory Corruption Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-02-11","knownRansomware":false,"cvss":9.8,"epss":0.11638,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2022-22587/"},{"cveID":"CVE-2021-20038","vendor":"SonicWall","product":"SMA 100 Appliances","vulnerabilityName":"SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-02-11","knownRansomware":true,"cvss":9.8,"epss":0.99912,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-20038/"},{"cveID":"CVE-2020-5722","vendor":"Grandstream","product":"UCM6200","vulnerabilityName":"Grandstream Networks UCM6200 Series SQL Injection Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-07-28","knownRansomware":false,"cvss":9.8,"epss":0.84406,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-5722/"},{"cveID":"CVE-2020-0787","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-07-28","knownRansomware":true,"cvss":7.8,"epss":0.42524,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-0787/"},{"cveID":"CVE-2017-5689","vendor":"Intel","product":"Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability","vulnerabilityName":"Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-07-28","knownRansomware":false,"cvss":9.8,"epss":0.92189,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-5689/"},{"cveID":"CVE-2014-7169","vendor":"GNU","product":"Bourne-Again Shell (Bash)","vulnerabilityName":"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-07-28","knownRansomware":false,"cvss":9.8,"epss":0.9994,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-7169/"},{"cveID":"CVE-2014-6271","vendor":"GNU","product":"Bourne-Again Shell (Bash)","vulnerabilityName":"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-07-28","knownRansomware":false,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-6271/"},{"cveID":"CVE-2014-1776","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-07-28","knownRansomware":false,"cvss":9.8,"epss":0.88013,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-1776/"},{"cveID":"CVE-2021-35247","vendor":"SolarWinds","product":"Serv-U","vulnerabilityName":"SolarWinds Serv-U Improper Input Validation Vulnerability","dateAdded":"2022-01-21","dueDate":"2022-02-04","knownRansomware":false,"cvss":5.3,"epss":0.03453,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-35247/"},{"cveID":"CVE-2018-8453","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-01-21","dueDate":"2022-07-21","knownRansomware":true,"cvss":7.8,"epss":0.70042,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-8453/"},{"cveID":"CVE-2012-0391","vendor":"Apache","product":"Struts 2","vulnerabilityName":"Apache Struts 2 Improper Input Validation Vulnerability","dateAdded":"2022-01-21","dueDate":"2022-07-21","knownRansomware":false,"cvss":9.8,"epss":0.75599,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-0391/"},{"cveID":"CVE-2006-1547","vendor":"Apache","product":"Struts 1","vulnerabilityName":"Apache Struts 1 ActionForm Denial-of-Service Vulnerability","dateAdded":"2022-01-21","dueDate":"2022-07-21","knownRansomware":false,"cvss":7.5,"epss":0.54635,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2006-1547/"},{"cveID":"CVE-2021-40870","vendor":"Aviatrix","product":"Aviatrix Controller","vulnerabilityName":"Aviatrix Controller Unrestricted Upload of File","dateAdded":"2022-01-18","dueDate":"2022-02-01","knownRansomware":false,"cvss":9.8,"epss":0.93019,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-40870/"},{"cveID":"CVE-2021-33766","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Information Disclosure","dateAdded":"2022-01-18","dueDate":"2022-02-01","knownRansomware":false,"cvss":7.3,"epss":0.98136,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-33766/"},{"cveID":"CVE-2021-32648","vendor":"October CMS","product":"October CMS","vulnerabilityName":"October CMS Improper Authentication","dateAdded":"2022-01-18","dueDate":"2022-02-01","knownRansomware":false,"cvss":9.1,"epss":0.90418,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-32648/"},{"cveID":"CVE-2021-25298","vendor":"Nagios","product":"Nagios XI","vulnerabilityName":"Nagios XI OS Command Injection","dateAdded":"2022-01-18","dueDate":"2022-02-01","knownRansomware":false,"cvss":8.8,"epss":0.75148,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-25298/"},{"cveID":"CVE-2021-25297","vendor":"Nagios","product":"Nagios XI","vulnerabilityName":"Nagios XI OS Command Injection","dateAdded":"2022-01-18","dueDate":"2022-02-01","knownRansomware":false,"cvss":8.8,"epss":0.56659,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-25297/"},{"cveID":"CVE-2021-25296","vendor":"Nagios","product":"Nagios XI","vulnerabilityName":"Nagios XI OS Command Injection","dateAdded":"2022-01-18","dueDate":"2022-02-01","knownRansomware":false,"cvss":8.8,"epss":0.72182,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-25296/"},{"cveID":"CVE-2021-22991","vendor":"F5","product":"BIG-IP Traffic Management Microkernel","vulnerabilityName":"F5 BIG-IP Traffic Management Microkernel Buffer Overflow","dateAdded":"2022-01-18","dueDate":"2022-02-01","knownRansomware":false,"cvss":9.8,"epss":0.61064,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22991/"},{"cveID":"CVE-2021-21975","vendor":"VMware","product":"vRealize Operations Manager API","vulnerabilityName":"VMware Server Side Request Forgery in vRealize Operations Manager API","dateAdded":"2022-01-18","dueDate":"2022-02-01","knownRansomware":true,"cvss":7.5,"epss":0.7829,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-21975/"},{"cveID":"CVE-2021-21315","vendor":"Npm package","product":"System Information Library for Node.JS","vulnerabilityName":"System Information Library for Node.JS Command Injection","dateAdded":"2022-01-18","dueDate":"2022-02-01","knownRansomware":false,"cvss":7.8,"epss":0.90675,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-21315/"},{"cveID":"CVE-2020-14864","vendor":"Oracle","product":"Intelligence Enterprise Edition","vulnerabilityName":"Oracle Business Intelligence Enterprise Edition Path Transversal","dateAdded":"2022-01-18","dueDate":"2022-07-18","knownRansomware":false,"cvss":7.5,"epss":0.97233,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-14864/"},{"cveID":"CVE-2020-13927","vendor":"Apache","product":"Airflow's Experimental API","vulnerabilityName":"Apache Airflow's Experimental API Authentication Bypass","dateAdded":"2022-01-18","dueDate":"2022-07-18","knownRansomware":false,"cvss":9.8,"epss":0.99778,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-13927/"},{"cveID":"CVE-2020-13671","vendor":"Drupal","product":"Drupal core","vulnerabilityName":"Drupal core Un-restricted Upload of File","dateAdded":"2022-01-18","dueDate":"2022-07-18","knownRansomware":false,"cvss":8.8,"epss":0.3535,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-13671/"},{"cveID":"CVE-2020-11978","vendor":"Apache","product":"Airflow","vulnerabilityName":"Apache Airflow Command Injection","dateAdded":"2022-01-18","dueDate":"2022-07-18","knownRansomware":false,"cvss":8.8,"epss":0.99189,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-11978/"},{"cveID":"CVE-2021-36260","vendor":"Hikvision","product":"Security cameras web server","vulnerabilityName":"Hikvision Improper Input Validation","dateAdded":"2022-01-10","dueDate":"2022-01-24","knownRansomware":false,"cvss":9.8,"epss":0.99869,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-36260/"},{"cveID":"CVE-2021-27860","vendor":"FatPipe","product":"WARP, IPVPN, and MPVPN software","vulnerabilityName":"FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit","dateAdded":"2022-01-10","dueDate":"2022-01-24","knownRansomware":false,"cvss":8.8,"epss":0.39824,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-27860/"},{"cveID":"CVE-2021-22017","vendor":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Improper Access Control","dateAdded":"2022-01-10","dueDate":"2022-01-24","knownRansomware":false,"cvss":5.3,"epss":0.49177,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22017/"},{"cveID":"CVE-2020-6572","vendor":"Google","product":"Chrome Media","vulnerabilityName":"Google Chrome Media Use-After-Free Vulnerability","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomware":false,"cvss":8.8,"epss":0.10586,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-6572/"},{"cveID":"CVE-2019-9670","vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomware":false,"cvss":9.8,"epss":0.99986,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-9670/"},{"cveID":"CVE-2019-7609","vendor":"Elastic","product":"Kibana","vulnerabilityName":"Kibana Arbitrary Code Execution","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomware":false,"cvss":10,"epss":0.95338,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-7609/"},{"cveID":"CVE-2019-2725","vendor":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server, Injection","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomware":true,"cvss":9.8,"epss":0.99964,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-2725/"},{"cveID":"CVE-2019-1579","vendor":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Remote Code Execution Vulnerability","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomware":true,"cvss":8.1,"epss":0.46239,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1579/"},{"cveID":"CVE-2019-1458","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomware":true,"cvss":7.8,"epss":0.74438,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1458/"},{"cveID":"CVE-2019-10149","vendor":"Exim","product":"Mail Transfer Agent (MTA)","vulnerabilityName":"Exim Mail Transfer Agent (MTA) Improper Input Validation","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomware":false,"cvss":9.8,"epss":0.99961,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-10149/"},{"cveID":"CVE-2018-13383","vendor":"Fortinet","product":"FortiOS and FortiProxy","vulnerabilityName":"Fortinet FortiOS and FortiProxy Out-of-bounds Write","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomware":true,"cvss":6.5,"epss":0.33647,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-13383/"},{"cveID":"CVE-2018-13382","vendor":"Fortinet","product":"FortiOS and FortiProxy","vulnerabilityName":"Fortinet FortiOS and FortiProxy Improper Authorization","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomware":true,"cvss":7.5,"epss":0.81691,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-13382/"},{"cveID":"CVE-2017-1000486","vendor":"Primetek","product":"Primefaces Application","vulnerabilityName":"Primetek Primefaces Remote Code Execution Vulnerability","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomware":false,"cvss":9.8,"epss":0.94104,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-1000486/"},{"cveID":"CVE-2015-7450","vendor":"IBM","product":"WebSphere Application Server and Server Hypervisor Edition","vulnerabilityName":"IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomware":false,"cvss":9.8,"epss":0.97655,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-7450/"},{"cveID":"CVE-2013-3900","vendor":"Microsoft","product":"WinVerifyTrust function","vulnerabilityName":"Microsoft WinVerifyTrust function Remote Code Execution","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomware":false,"cvss":5.5,"epss":0.44647,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2013-3900/"},{"cveID":"CVE-2021-43890","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows AppX Installer Spoofing Vulnerability","dateAdded":"2021-12-15","dueDate":"2021-12-29","knownRansomware":true,"cvss":7.1,"epss":0.10295,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-43890/"},{"cveID":"CVE-2021-4102","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Use-After-Free Vulnerability","dateAdded":"2021-12-15","dueDate":"2021-12-29","knownRansomware":false,"cvss":8.8,"epss":0.07836,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-4102/"},{"cveID":"CVE-2021-44515","vendor":"Zoho","product":"Desktop Central","vulnerabilityName":"Zoho Desktop Central Authentication Bypass Vulnerability","dateAdded":"2021-12-10","dueDate":"2021-12-24","knownRansomware":false,"cvss":9.8,"epss":0.99871,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-44515/"},{"cveID":"CVE-2021-44228","vendor":"Apache","product":"Log4j2","vulnerabilityName":"Apache Log4j2 Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2021-12-24","knownRansomware":true,"cvss":10,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-44228/"},{"cveID":"CVE-2021-44168","vendor":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Arbitrary File Download","dateAdded":"2021-12-10","dueDate":"2021-12-24","knownRansomware":false,"cvss":7.8,"epss":0.00873,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-44168/"},{"cveID":"CVE-2021-35394","vendor":"Realtek","product":"Jungle Software Development Kit (SDK)","vulnerabilityName":"Realtek Jungle SDK Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2021-12-24","knownRansomware":false,"cvss":9.8,"epss":0.99861,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-35394/"},{"cveID":"CVE-2020-8816","vendor":"Pi-hole","product":"AdminLTE","vulnerabilityName":"Pi-Hole AdminLTE Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","knownRansomware":false,"cvss":7.2,"epss":0.7819,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-8816/"},{"cveID":"CVE-2020-17463","vendor":"Fuel CMS","product":"Fuel CMS","vulnerabilityName":"Fuel CMS SQL Injection Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","knownRansomware":false,"cvss":9.8,"epss":0.89689,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-17463/"},{"cveID":"CVE-2019-7238","vendor":"Sonatype","product":"Nexus Repository Manager","vulnerabilityName":"Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","knownRansomware":false,"cvss":9.8,"epss":0.77146,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-7238/"},{"cveID":"CVE-2019-13272","vendor":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Improper Privilege Management Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","knownRansomware":false,"cvss":7.8,"epss":0.52199,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-13272/"},{"cveID":"CVE-2019-10758","vendor":"MongoDB","product":"mongo-express","vulnerabilityName":"MongoDB mongo-express Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","knownRansomware":false,"cvss":9.9,"epss":0.84845,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-10758/"},{"cveID":"CVE-2019-0193","vendor":"Apache","product":"Solr","vulnerabilityName":"Apache Solr DataImportHandler Code Injection Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","knownRansomware":false,"cvss":7.2,"epss":0.83547,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0193/"},{"cveID":"CVE-2017-17562","vendor":"Embedthis","product":"GoAhead","vulnerabilityName":"Embedthis GoAhead Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","knownRansomware":false,"cvss":8.1,"epss":0.96327,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-17562/"},{"cveID":"CVE-2017-12149","vendor":"Red Hat","product":"JBoss Application Server","vulnerabilityName":"Red Hat JBoss Application Server Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","knownRansomware":true,"cvss":9.8,"epss":0.90713,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-12149/"},{"cveID":"CVE-2010-1871","vendor":"Red Hat","product":"JBoss Seam 2","vulnerabilityName":"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","knownRansomware":false,"cvss":8.8,"epss":0.83397,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-1871/"},{"cveID":"CVE-2021-44077","vendor":"Zoho","product":"ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus","vulnerabilityName":"Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability","dateAdded":"2021-12-01","dueDate":"2021-12-15","knownRansomware":false,"cvss":9.8,"epss":0.93298,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-44077/"},{"cveID":"CVE-2021-40438","vendor":"Apache","product":"Apache","vulnerabilityName":"Apache HTTP Server-Side Request Forgery (SSRF)","dateAdded":"2021-12-01","dueDate":"2021-12-15","knownRansomware":true,"cvss":9,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-40438/"},{"cveID":"CVE-2021-37415","vendor":"Zoho","product":"ManageEngine ServiceDesk Plus (SDP)","vulnerabilityName":"Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability","dateAdded":"2021-12-01","dueDate":"2021-12-15","knownRansomware":false,"cvss":9.8,"epss":0.99825,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-37415/"},{"cveID":"CVE-2020-11261","vendor":"Qualcomm","product":"Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","vulnerabilityName":"Qualcomm Multiple Chipsets Improper Input Validation Vulnerability","dateAdded":"2021-12-01","dueDate":"2022-06-01","knownRansomware":false,"cvss":7.8,"epss":0.01772,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-11261/"},{"cveID":"CVE-2018-14847","vendor":"MikroTik","product":"RouterOS","vulnerabilityName":"MikroTik Router OS Directory Traversal Vulnerability","dateAdded":"2021-12-01","dueDate":"2022-06-01","knownRansomware":false,"cvss":9.1,"epss":0.96087,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-14847/"},{"cveID":"CVE-2021-42321","vendor":"Microsoft","product":"Exchange","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2021-11-17","dueDate":"2021-12-01","knownRansomware":true,"cvss":8.8,"epss":0.91737,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-42321/"},{"cveID":"CVE-2021-42292","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Excel Security Feature Bypass","dateAdded":"2021-11-17","dueDate":"2021-12-01","knownRansomware":false,"cvss":7.8,"epss":0.43005,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-42292/"},{"cveID":"CVE-2021-40449","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-17","dueDate":"2021-12-01","knownRansomware":true,"cvss":7.8,"epss":0.74129,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-40449/"},{"cveID":"CVE-2021-22204","vendor":"Perl","product":"Exiftool","vulnerabilityName":"ExifTool Remote Code Execution Vulnerability","dateAdded":"2021-11-17","dueDate":"2021-12-01","knownRansomware":false,"cvss":7.8,"epss":0.99981,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22204/"},{"cveID":"CVE-2021-42258","vendor":"BQE","product":"BillQuick Web Suite","vulnerabilityName":"BQE BillQuick Web Suite SQL Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.74426,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-42258/"},{"cveID":"CVE-2021-42013","vendor":"Apache","product":"HTTP Server","vulnerabilityName":"Apache HTTP Server Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.99964,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-42013/"},{"cveID":"CVE-2021-41773","vendor":"Apache","product":"HTTP Server","vulnerabilityName":"Apache HTTP Server Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.99992,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-41773/"},{"cveID":"CVE-2021-40539","vendor":"Zoho","product":"ManageEngine","vulnerabilityName":"Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.9896,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-40539/"},{"cveID":"CVE-2021-40444","vendor":"Microsoft","product":"MSHTML","vulnerabilityName":"Microsoft MSHTML Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":8.8,"epss":0.9745,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-40444/"},{"cveID":"CVE-2021-38649","vendor":"Microsoft","product":"Open Management Infrastructure (OMI)","vulnerabilityName":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7,"epss":0.02887,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-38649/"},{"cveID":"CVE-2021-38648","vendor":"Microsoft","product":"Open Management Infrastructure (OMI)","vulnerabilityName":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.8,"epss":0.11424,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-38648/"},{"cveID":"CVE-2021-38647","vendor":"Microsoft","product":"Open Management Infrastructure (OMI)","vulnerabilityName":"Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.99933,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-38647/"},{"cveID":"CVE-2021-38645","vendor":"Microsoft","product":"Open Management Infrastructure (OMI)","vulnerabilityName":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.8,"epss":0.02727,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-38645/"},{"cveID":"CVE-2021-38003","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.38573,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-38003/"},{"cveID":"CVE-2021-38000","vendor":"Google","product":"Chromium Intents","vulnerabilityName":"Google Chromium Intents Improper Input Validation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":6.1,"epss":0.04653,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-38000/"},{"cveID":"CVE-2021-37976","vendor":"Google","product":"Chromium","vulnerabilityName":"Google Chromium Information Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":6.5,"epss":0.19748,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-37976/"},{"cveID":"CVE-2021-37975","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.34887,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-37975/"},{"cveID":"CVE-2021-37973","vendor":"Google","product":"Chromium Portals","vulnerabilityName":"Google Chromium Portals Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":9.6,"epss":0.11641,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-37973/"},{"cveID":"CVE-2021-36955","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":7.8,"epss":0.04037,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-36955/"},{"cveID":"CVE-2021-36948","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Update Medic Service Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.8,"epss":0.26733,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-36948/"},{"cveID":"CVE-2021-36942","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":7.5,"epss":0.66023,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-36942/"},{"cveID":"CVE-2021-36742","vendor":"Trend Micro","product":"Apex One, Apex One as a Service, and Worry-Free Business Security","vulnerabilityName":"Trend Micro Multiple Products Improper Input Validation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.8,"epss":0.01482,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-36742/"},{"cveID":"CVE-2021-36741","vendor":"Trend Micro","product":"Apex One, Apex One as a Service, and Worry-Free Business Security","vulnerabilityName":"Trend Micro Multiple Products Improper Input Validation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.04951,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-36741/"},{"cveID":"CVE-2021-35464","vendor":"ForgeRock","product":"Access Management (AM)","vulnerabilityName":"ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-35464/"},{"cveID":"CVE-2021-35395","vendor":"Realtek","product":"AP-Router SDK","vulnerabilityName":"Realtek AP-Router SDK Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":9.8,"epss":0.97961,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-35395/"},{"cveID":"CVE-2021-35211","vendor":"SolarWinds","product":"Serv-U","vulnerabilityName":"SolarWinds Serv-U Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":10,"epss":0.9116,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-35211/"},{"cveID":"CVE-2021-34527","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Print Spooler Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":8.8,"epss":0.99792,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-34527/"},{"cveID":"CVE-2021-34523","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9,"epss":0.9999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-34523/"},{"cveID":"CVE-2021-34473","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.1,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-34473/"},{"cveID":"CVE-2021-34448","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":6.8,"epss":0.40062,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-34448/"},{"cveID":"CVE-2021-33771","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.8,"epss":0.10172,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-33771/"},{"cveID":"CVE-2021-33742","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.5,"epss":0.59407,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-33742/"},{"cveID":"CVE-2021-33739","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.4,"epss":0.06555,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-33739/"},{"cveID":"CVE-2021-31979","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.8,"epss":0.0454,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-31979/"},{"cveID":"CVE-2021-31956","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows NTFS Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.8,"epss":0.22273,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-31956/"},{"cveID":"CVE-2021-31955","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Information Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":5.5,"epss":0.81107,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-31955/"},{"cveID":"CVE-2021-31755","vendor":"Tenda","product":"AC11 Router","vulnerabilityName":"Tenda AC11 Router Stack Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":9.8,"epss":0.86891,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-31755/"},{"cveID":"CVE-2021-31207","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Security Feature Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":6.6,"epss":0.99782,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-31207/"},{"cveID":"CVE-2021-31201","vendor":"Microsoft","product":"Enhanced Cryptographic Provider","vulnerabilityName":"Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":5.2,"epss":0.02617,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-31201/"},{"cveID":"CVE-2021-31199","vendor":"Microsoft","product":"Enhanced Cryptographic Provider","vulnerabilityName":"Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":5.2,"epss":0.02954,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-31199/"},{"cveID":"CVE-2021-30869","vendor":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.8,"epss":0.0415,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30869/"},{"cveID":"CVE-2021-30860","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Integer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.8,"epss":0.75994,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30860/"},{"cveID":"CVE-2021-30858","vendor":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, macOS Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.13427,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30858/"},{"cveID":"CVE-2021-30807","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.8,"epss":0.28839,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30807/"},{"cveID":"CVE-2021-30762","vendor":"Apple","product":"iOS","vulnerabilityName":"Apple iOS WebKit Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.10986,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30762/"},{"cveID":"CVE-2021-30761","vendor":"Apple","product":"iOS","vulnerabilityName":"Apple iOS WebKit Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.10545,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30761/"},{"cveID":"CVE-2021-30713","vendor":"Apple","product":"macOS","vulnerabilityName":"Apple macOS Unspecified Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.8,"epss":0.07038,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30713/"},{"cveID":"CVE-2021-30666","vendor":"Apple","product":"iOS","vulnerabilityName":"Apple iOS WebKit Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.02998,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30666/"},{"cveID":"CVE-2021-30665","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.03675,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30665/"},{"cveID":"CVE-2021-30663","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Integer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.03493,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30663/"},{"cveID":"CVE-2021-30661","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Storage Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.04491,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30661/"},{"cveID":"CVE-2021-30657","vendor":"Apple","product":"macOS","vulnerabilityName":"Apple macOS Unspecified Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":5.5,"epss":0.68531,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30657/"},{"cveID":"CVE-2021-30633","vendor":"Google","product":"Chromium Indexed DB API","vulnerabilityName":"Google Chromium Indexed DB API Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":9.6,"epss":0.32657,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30633/"},{"cveID":"CVE-2021-30632","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Write Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.6319,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30632/"},{"cveID":"CVE-2021-30563","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.08928,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30563/"},{"cveID":"CVE-2021-30554","vendor":"Google","product":"Chromium WebGL","vulnerabilityName":"Google Chromium WebGL Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.07367,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30554/"},{"cveID":"CVE-2021-30551","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.64701,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30551/"},{"cveID":"CVE-2021-30116","vendor":"Kaseya","product":"Virtual System/Server Administrator (VSA)","vulnerabilityName":"Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.85735,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-30116/"},{"cveID":"CVE-2021-28664","vendor":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.05407,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-28664/"},{"cveID":"CVE-2021-28663","vendor":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.12084,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-28663/"},{"cveID":"CVE-2021-28550","vendor":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.52005,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-28550/"},{"cveID":"CVE-2021-28310","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.8,"epss":0.0833,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-28310/"},{"cveID":"CVE-2021-27562","vendor":"Arm","product":"Trusted Firmware","vulnerabilityName":"Arm Trusted Firmware Out-of-Bounds Write Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":5.5,"epss":0.03093,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-27562/"},{"cveID":"CVE-2021-27561","vendor":"Yealink","product":"Device Management","vulnerabilityName":"Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":9.8,"epss":0.82865,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-27561/"},{"cveID":"CVE-2021-27104","vendor":"Accellion","product":"FTA","vulnerabilityName":"Accellion FTA OS Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.56686,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-27104/"},{"cveID":"CVE-2021-27103","vendor":"Accellion","product":"FTA","vulnerabilityName":"Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.11406,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-27103/"},{"cveID":"CVE-2021-27102","vendor":"Accellion","product":"FTA","vulnerabilityName":"Accellion FTA OS Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":7.8,"epss":0.03654,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-27102/"},{"cveID":"CVE-2021-27101","vendor":"Accellion","product":"FTA","vulnerabilityName":"Accellion FTA SQL Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.05998,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-27101/"},{"cveID":"CVE-2021-27085","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.05448,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-27085/"},{"cveID":"CVE-2021-27065","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.8,"epss":0.99876,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-27065/"},{"cveID":"CVE-2021-27059","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.6,"epss":0.06076,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-27059/"},{"cveID":"CVE-2021-26858","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.8,"epss":0.93651,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-26858/"},{"cveID":"CVE-2021-26857","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.8,"epss":0.95762,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-26857/"},{"cveID":"CVE-2021-26855","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.1,"epss":0.99996,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-26855/"},{"cveID":"CVE-2021-26411","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":8.8,"epss":0.80765,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-26411/"},{"cveID":"CVE-2021-26084","vendor":"Atlassian","product":"Confluence Server and Data Center","vulnerabilityName":"Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-26084/"},{"cveID":"CVE-2021-23874","vendor":"McAfee","product":"McAfee Total Protection (MTP)","vulnerabilityName":"McAfee Total Protection (MTP) Improper Privilege Management Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.8,"epss":0.01026,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-23874/"},{"cveID":"CVE-2021-22986","vendor":"F5","product":"BIG-IP and BIG-IQ Centralized Management","vulnerabilityName":"F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.99898,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22986/"},{"cveID":"CVE-2021-22900","vendor":"Ivanti","product":"Pulse Connect Secure","vulnerabilityName":"Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.2,"epss":0.14146,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22900/"},{"cveID":"CVE-2021-22899","vendor":"Ivanti","product":"Pulse Connect Secure","vulnerabilityName":"Ivanti Pulse Connect Secure Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.22915,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22899/"},{"cveID":"CVE-2021-22894","vendor":"Ivanti","product":"Pulse Connect Secure","vulnerabilityName":"Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.41284,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22894/"},{"cveID":"CVE-2021-22893","vendor":"Ivanti","product":"Pulse Connect Secure","vulnerabilityName":"Ivanti Pulse Connect Secure Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":10,"epss":0.47172,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22893/"},{"cveID":"CVE-2021-22506","vendor":"Micro Focus","product":"Micro Focus Access Manager","vulnerabilityName":"Micro Focus Access Manager Information Leakage Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.5,"epss":0.25695,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22506/"},{"cveID":"CVE-2021-22502","vendor":"Micro Focus","product":"Operation Bridge Reporter (OBR)","vulnerabilityName":"Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":9.8,"epss":0.9674,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22502/"},{"cveID":"CVE-2021-22205","vendor":"GitLab","product":"Community and Enterprise Editions","vulnerabilityName":"GitLab Community and Enterprise Editions Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":10,"epss":0.99731,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22205/"},{"cveID":"CVE-2021-22005","vendor":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server File Upload Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-22005/"},{"cveID":"CVE-2021-21985","vendor":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Improper Input Validation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-21985/"},{"cveID":"CVE-2021-21972","vendor":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.99865,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-21972/"},{"cveID":"CVE-2021-21224","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.84173,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-21224/"},{"cveID":"CVE-2021-21220","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Improper Input Validation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.70435,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-21220/"},{"cveID":"CVE-2021-21206","vendor":"Google","product":"Chromium Blink","vulnerabilityName":"Google Chromium Blink Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.09307,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-21206/"},{"cveID":"CVE-2021-21193","vendor":"Google","product":"Chromium Blink","vulnerabilityName":"Google Chromium Blink Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.0987,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-21193/"},{"cveID":"CVE-2021-21166","vendor":"Google","product":"Chromium","vulnerabilityName":"Google Chromium Race Condition Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.26723,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-21166/"},{"cveID":"CVE-2021-21148","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Heap Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.19968,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-21148/"},{"cveID":"CVE-2021-21017","vendor":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":8.8,"epss":0.86326,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-21017/"},{"cveID":"CVE-2021-20090","vendor":"Arcadyan","product":"Buffalo Firmware","vulnerabilityName":"Arcadyan Buffalo Firmware Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":9.8,"epss":0.99983,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-20090/"},{"cveID":"CVE-2021-20023","vendor":"SonicWall","product":"SonicWall Email Security","vulnerabilityName":"SonicWall Email Security Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":4.9,"epss":0.51407,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-20023/"},{"cveID":"CVE-2021-20022","vendor":"SonicWall","product":"SonicWall Email Security","vulnerabilityName":"SonicWall Email Security Unrestricted Upload of File Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":7.2,"epss":0.16509,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-20022/"},{"cveID":"CVE-2021-20021","vendor":"SonicWall","product":"SonicWall Email Security","vulnerabilityName":"SonicWall Email Security Improper Privilege Management Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.83425,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-20021/"},{"cveID":"CVE-2021-20016","vendor":"SonicWall","product":"SSLVPN SMA100","vulnerabilityName":"SonicWall SSLVPN SMA100 SQL Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":9.8,"epss":0.40038,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-20016/"},{"cveID":"CVE-2021-1906","vendor":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":5.5,"epss":0.0052,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-1906/"},{"cveID":"CVE-2021-1905","vendor":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.01543,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-1905/"},{"cveID":"CVE-2021-1879","vendor":"Apple","product":"iOS, iPadOS, and watchOS","vulnerabilityName":"Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":6.1,"epss":0.07082,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-1879/"},{"cveID":"CVE-2021-1871","vendor":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":9.8,"epss":0.07002,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-1871/"},{"cveID":"CVE-2021-1870","vendor":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":9.8,"epss":0.0771,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-1870/"},{"cveID":"CVE-2021-1782","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Race Condition Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7,"epss":0.02222,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-1782/"},{"cveID":"CVE-2021-1732","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":7.8,"epss":0.78376,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-1732/"},{"cveID":"CVE-2021-1675","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Print Spooler Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":true,"cvss":7.8,"epss":0.86132,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-1675/"},{"cveID":"CVE-2021-1647","vendor":"Microsoft","product":"Defender","vulnerabilityName":"Microsoft Defender Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":7.8,"epss":0.39392,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-1647/"},{"cveID":"CVE-2021-1498","vendor":"Cisco","product":"HyperFlex HX","vulnerabilityName":"Cisco HyperFlex HX Data Platform Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-1498/"},{"cveID":"CVE-2021-1497","vendor":"Cisco","product":"HyperFlex HX","vulnerabilityName":"Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":9.8,"epss":0.99928,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2021-1497/"},{"cveID":"CVE-2020-9859","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.00829,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-9859/"},{"cveID":"CVE-2020-9819","vendor":"Apple","product":"iOS, iPadOS, and watchOS","vulnerabilityName":"Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":4.3,"epss":0.02178,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-9819/"},{"cveID":"CVE-2020-9818","vendor":"Apple","product":"iOS, iPadOS, and watchOS","vulnerabilityName":"Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.02286,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-9818/"},{"cveID":"CVE-2020-8657","vendor":"EyesOfNetwork","product":"EyesOfNetwork","vulnerabilityName":"EyesOfNetwork Use of Hard-Coded Credentials Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.91874,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-8657/"},{"cveID":"CVE-2020-8655","vendor":"EyesOfNetwork","product":"EyesOfNetwork","vulnerabilityName":"EyesOfNetwork Improper Privilege Management Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.60075,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-8655/"},{"cveID":"CVE-2020-8644","vendor":"PlaySMS","product":"PlaySMS","vulnerabilityName":"PlaySMS Server-Side Template Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.86689,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-8644/"},{"cveID":"CVE-2020-8599","vendor":"Trend Micro","product":"Apex One and OfficeScan","vulnerabilityName":"Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.11858,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-8599/"},{"cveID":"CVE-2020-8515","vendor":"DrayTek","product":"Multiple Vigor Routers","vulnerabilityName":"Multiple DrayTek Vigor Routers Web Management Page Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.99993,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-8515/"},{"cveID":"CVE-2020-8468","vendor":"Trend Micro","product":"Apex One, OfficeScan and Worry-Free Business Security Agents","vulnerabilityName":"Trend Micro Multiple Products Content Validation Escape Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.05754,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-8468/"},{"cveID":"CVE-2020-8467","vendor":"Trend Micro","product":"Apex One and OfficeScan","vulnerabilityName":"Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.10793,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-8467/"},{"cveID":"CVE-2020-8260","vendor":"Ivanti","product":"Pulse Connect Secure","vulnerabilityName":"Ivanti Pulse Connect Secure Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.2,"epss":0.9648,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-8260/"},{"cveID":"CVE-2020-8243","vendor":"Ivanti","product":"Pulse Connect Secure","vulnerabilityName":"Ivanti Pulse Connect Secure Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.2,"epss":0.90759,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-8243/"},{"cveID":"CVE-2020-8196","vendor":"Citrix","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","vulnerabilityName":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":4.3,"epss":0.26333,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-8196/"},{"cveID":"CVE-2020-8195","vendor":"Citrix","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","vulnerabilityName":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":6.5,"epss":0.33263,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-8195/"},{"cveID":"CVE-2020-8193","vendor":"Citrix","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","vulnerabilityName":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":6.5,"epss":0.88411,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-8193/"},{"cveID":"CVE-2020-7961","vendor":"Liferay","product":"Liferay Portal","vulnerabilityName":"Liferay Portal Deserialization of Untrusted Data Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.99905,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-7961/"},{"cveID":"CVE-2020-6820","vendor":"Mozilla","product":"Firefox and Thunderbird","vulnerabilityName":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.1,"epss":0.07063,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-6820/"},{"cveID":"CVE-2020-6819","vendor":"Mozilla","product":"Firefox and Thunderbird","vulnerabilityName":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.1,"epss":0.03039,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-6819/"},{"cveID":"CVE-2020-6418","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.78808,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-6418/"},{"cveID":"CVE-2020-6287","vendor":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Missing Authentication for Critical Function Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":10,"epss":0.94719,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-6287/"},{"cveID":"CVE-2020-6207","vendor":"SAP","product":"Solution Manager","vulnerabilityName":"SAP Solution Manager Missing Authentication for Critical Function Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.98266,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-6207/"},{"cveID":"CVE-2020-5902","vendor":"F5","product":"BIG-IP","vulnerabilityName":"F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-5902/"},{"cveID":"CVE-2020-5849","vendor":"Unraid","product":"Unraid","vulnerabilityName":"Unraid Authentication Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.93243,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-5849/"},{"cveID":"CVE-2020-5847","vendor":"Unraid","product":"Unraid","vulnerabilityName":"Unraid Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.95844,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-5847/"},{"cveID":"CVE-2020-5735","vendor":"Amcrest","product":"Cameras and Network Video Recorder (NVR)","vulnerabilityName":"Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.36217,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-5735/"},{"cveID":"CVE-2020-4430","vendor":"IBM","product":"Data Risk Manager","vulnerabilityName":"IBM Data Risk Manager Directory Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":4.3,"epss":0.68544,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-4430/"},{"cveID":"CVE-2020-4428","vendor":"IBM","product":"Data Risk Manager","vulnerabilityName":"IBM Data Risk Manager Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.1,"epss":0.61692,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-4428/"},{"cveID":"CVE-2020-4427","vendor":"IBM","product":"Data Risk Manager","vulnerabilityName":"IBM Data Risk Manager Security Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.70031,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-4427/"},{"cveID":"CVE-2020-4006","vendor":"VMware","product":"Multiple Products","vulnerabilityName":"Multiple VMware Products Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.1,"epss":0.17302,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-4006/"},{"cveID":"CVE-2020-3992","vendor":"VMware","product":"ESXi","vulnerabilityName":"VMware ESXi OpenSLP Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.83015,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-3992/"},{"cveID":"CVE-2020-3952","vendor":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Information Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.90384,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-3952/"},{"cveID":"CVE-2020-3950","vendor":"VMware","product":"Multiple Products","vulnerabilityName":"VMware Multiple Products Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.07254,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-3950/"},{"cveID":"CVE-2020-3580","vendor":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":6.1,"epss":0.85575,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-3580/"},{"cveID":"CVE-2020-3569","vendor":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.6,"epss":0.0332,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-3569/"},{"cveID":"CVE-2020-3566","vendor":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.6,"epss":0.03702,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-3566/"},{"cveID":"CVE-2020-3452","vendor":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Read-Only Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.99992,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-3452/"},{"cveID":"CVE-2020-3161","vendor":"Cisco","product":"Cisco IP Phones","vulnerabilityName":"Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.83855,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-3161/"},{"cveID":"CVE-2020-3118","vendor":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Software Discovery Protocol Format String Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.11685,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-3118/"},{"cveID":"CVE-2020-29583","vendor":"Zyxel","product":"Multiple Products","vulnerabilityName":"Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.90155,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-29583/"},{"cveID":"CVE-2020-29557","vendor":"D-Link","product":"DIR-825 R1 Devices","vulnerabilityName":"D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.5432,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-29557/"},{"cveID":"CVE-2020-27950","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Initialization Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":5.5,"epss":0.1652,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-27950/"},{"cveID":"CVE-2020-27932","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.10337,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-27932/"},{"cveID":"CVE-2020-27930","vendor":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.22009,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-27930/"},{"cveID":"CVE-2020-26919","vendor":"NETGEAR","product":"JGS516PE Devices","vulnerabilityName":"Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.57195,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-26919/"},{"cveID":"CVE-2020-2555","vendor":"Oracle","product":"Multiple Products","vulnerabilityName":"Oracle Multiple Products Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.97116,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-2555/"},{"cveID":"CVE-2020-25506","vendor":"D-Link","product":"DNS-320 Device","vulnerabilityName":"D-Link DNS-320 Device Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.99968,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-25506/"},{"cveID":"CVE-2020-25213","vendor":"WordPress","product":"File Manager Plugin","vulnerabilityName":"WordPress File Manager Plugin Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.97328,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-25213/"},{"cveID":"CVE-2020-24557","vendor":"Trend Micro","product":"Apex One, OfficeScan, and Worry-Free Business Security","vulnerabilityName":"Trend Micro Multiple Products Improper Access Control Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.02639,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-24557/"},{"cveID":"CVE-2020-17530","vendor":"Apache","product":"Struts","vulnerabilityName":"Apache Struts Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.95931,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-17530/"},{"cveID":"CVE-2020-17496","vendor":"vBulletin","product":"vBulletin","vulnerabilityName":"vBulletin PHP Module Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.8774,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-17496/"},{"cveID":"CVE-2020-17144","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.4,"epss":0.36514,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-17144/"},{"cveID":"CVE-2020-17087","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.05431,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-17087/"},{"cveID":"CVE-2020-16846","vendor":"SaltStack","product":"Salt","vulnerabilityName":"SaltStack Salt Shell Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.99585,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-16846/"},{"cveID":"CVE-2020-16017","vendor":"Google","product":"Chrome","vulnerabilityName":"Google Chrome Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.6,"epss":0.02747,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-16017/"},{"cveID":"CVE-2020-16013","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Incorrect Implementation Vulnerabililty","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.02751,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-16013/"},{"cveID":"CVE-2020-16010","vendor":"Google","product":"Chrome for Android UI","vulnerabilityName":"Google Chrome for Android UI Heap Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.6,"epss":0.06363,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-16010/"},{"cveID":"CVE-2020-16009","vendor":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.48293,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-16009/"},{"cveID":"CVE-2020-15999","vendor":"Google","product":"Chrome FreeType","vulnerabilityName":"Google Chrome FreeType Heap Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomware":false,"cvss":9.6,"epss":0.44303,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-15999/"},{"cveID":"CVE-2020-15505","vendor":"Ivanti","product":"MobileIron Multiple Products","vulnerabilityName":"Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.99737,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-15505/"},{"cveID":"CVE-2020-14883","vendor":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Unspecified Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.2,"epss":0.97929,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-14883/"},{"cveID":"CVE-2020-14882","vendor":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.99997,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-14882/"},{"cveID":"CVE-2020-14871","vendor":"Oracle","product":"Solaris and Zettabyte File System (ZFS)","vulnerabilityName":"Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":10,"epss":0.79842,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-14871/"},{"cveID":"CVE-2020-14750","vendor":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.9927,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-14750/"},{"cveID":"CVE-2020-1472","vendor":"Microsoft","product":"Netlogon","vulnerabilityName":"Microsoft Netlogon Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":5.5,"epss":0.99389,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-1472/"},{"cveID":"CVE-2020-1464","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Spoofing Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.38946,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-1464/"},{"cveID":"CVE-2020-1380","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.24188,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-1380/"},{"cveID":"CVE-2020-1350","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows DNS Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":10,"epss":0.91353,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-1350/"},{"cveID":"CVE-2020-12812","vendor":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS SSL VPN Improper Authentication Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.49344,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-12812/"},{"cveID":"CVE-2020-12271","vendor":"Sophos","product":"SFOS","vulnerabilityName":"Sophos SFOS SQL Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.42434,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-12271/"},{"cveID":"CVE-2020-11738","vendor":"WordPress","product":"Snap Creek Duplicator Plugin","vulnerabilityName":"WordPress Snap Creek Duplicator Plugin File Download Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.97822,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-11738/"},{"cveID":"CVE-2020-11652","vendor":"SaltStack","product":"Salt","vulnerabilityName":"SaltStack Salt Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":6.5,"epss":0.86178,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-11652/"},{"cveID":"CVE-2020-11651","vendor":"SaltStack","product":"Salt","vulnerabilityName":"SaltStack Salt Authentication Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.96614,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-11651/"},{"cveID":"CVE-2020-1147","vendor":"Microsoft","product":".NET Framework, SharePoint, Visual Studio","vulnerabilityName":"Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.93966,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-1147/"},{"cveID":"CVE-2020-10987","vendor":"Tenda","product":"AC1900 Router AC15 Model","vulnerabilityName":"Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.7981,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-10987/"},{"cveID":"CVE-2020-1054","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7,"epss":0.54158,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-1054/"},{"cveID":"CVE-2020-1040","vendor":"Microsoft","product":"Hyper-V RemoteFX","vulnerabilityName":"Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9,"epss":0.07316,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-1040/"},{"cveID":"CVE-2020-10221","vendor":"rConfig","product":"rConfig","vulnerabilityName":"rConfig OS Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.80221,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-10221/"},{"cveID":"CVE-2020-1020","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.65037,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-1020/"},{"cveID":"CVE-2020-10199","vendor":"Sonatype","product":"Nexus Repository","vulnerabilityName":"Sonatype Nexus Repository Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.99064,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-10199/"},{"cveID":"CVE-2020-10189","vendor":"Zoho","product":"ManageEngine","vulnerabilityName":"Zoho ManageEngine Desktop Central File Upload Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.99941,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-10189/"},{"cveID":"CVE-2020-10181","vendor":"Sumavision","product":"Enhanced Multimedia Router (EMR)","vulnerabilityName":"Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.14666,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-10181/"},{"cveID":"CVE-2020-10148","vendor":"SolarWinds","product":"Orion","vulnerabilityName":"SolarWinds Orion Authentication Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.9198,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-10148/"},{"cveID":"CVE-2020-0986","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.15932,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-0986/"},{"cveID":"CVE-2020-0968","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.5,"epss":0.30676,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-0968/"},{"cveID":"CVE-2020-0938","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.69166,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-0938/"},{"cveID":"CVE-2020-0878","vendor":"Microsoft","product":"Edge and Internet Explorer","vulnerabilityName":"Microsoft Edge and Internet Explorer Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":4.2,"epss":0.02696,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-0878/"},{"cveID":"CVE-2020-0688","vendor":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":8.8,"epss":0.99965,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-0688/"},{"cveID":"CVE-2020-0683","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Installer Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.07667,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-0683/"},{"cveID":"CVE-2020-0674","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.86863,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-0674/"},{"cveID":"CVE-2020-0646","vendor":"Microsoft","product":".NET Framework","vulnerabilityName":"Microsoft .NET Framework Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.99222,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-0646/"},{"cveID":"CVE-2020-0601","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows CryptoAPI Spoofing Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.1,"epss":0.89436,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-0601/"},{"cveID":"CVE-2020-0069","vendor":"MediaTek","product":"Multiple Chipsets","vulnerabilityName":"Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.0137,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-0069/"},{"cveID":"CVE-2020-0041","vendor":"Android","product":"Android Kernel","vulnerabilityName":"Android Kernel Out-of-Bounds Write Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.03246,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2020-0041/"},{"cveID":"CVE-2019-9978","vendor":"WordPress","product":"Social Warfare Plugin","vulnerabilityName":"WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":6.1,"epss":0.72946,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-9978/"},{"cveID":"CVE-2019-9082","vendor":"ThinkPHP","product":"ThinkPHP","vulnerabilityName":"ThinkPHP Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.97419,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-9082/"},{"cveID":"CVE-2019-8394","vendor":"Zoho","product":"ManageEngine","vulnerabilityName":"Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":6.5,"epss":0.63336,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-8394/"},{"cveID":"CVE-2019-7481","vendor":"SonicWall","product":"SMA100","vulnerabilityName":"SonicWall SMA100 SQL Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.5,"epss":0.99906,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-7481/"},{"cveID":"CVE-2019-6223","vendor":"Apple","product":"iOS and macOS","vulnerabilityName":"Apple iOS and macOS Group Facetime Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.02629,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-6223/"},{"cveID":"CVE-2019-5591","vendor":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Default Configuration Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":6.5,"epss":0.18422,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-5591/"},{"cveID":"CVE-2019-5544","vendor":"VMware","product":"VMware ESXi and Horizon DaaS","vulnerabilityName":"VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.97258,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-5544/"},{"cveID":"CVE-2019-4716","vendor":"IBM","product":"Planning Analytics","vulnerabilityName":"IBM Planning Analytics Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.86441,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-4716/"},{"cveID":"CVE-2019-3398","vendor":"Atlassian","product":"Confluence Server and Data Center","vulnerabilityName":"Atlassian Confluence Server and Data Center Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.96837,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-3398/"},{"cveID":"CVE-2019-3396","vendor":"Atlassian","product":"Confluence Server and Data Server","vulnerabilityName":"Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.99913,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-3396/"},{"cveID":"CVE-2019-2215","vendor":"Android","product":"Android Kernel","vulnerabilityName":"Android Kernel Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.72105,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-2215/"},{"cveID":"CVE-2019-20085","vendor":"TVT","product":"NVMS-1000","vulnerabilityName":"TVT NVMS-1000 Directory Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.96071,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-20085/"},{"cveID":"CVE-2019-19781","vendor":"Citrix","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","vulnerabilityName":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-19781/"},{"cveID":"CVE-2019-19356","vendor":"Netis","product":"WF2419 Devices","vulnerabilityName":"Netis WF2419 Devices Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.28168,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-19356/"},{"cveID":"CVE-2019-18988","vendor":"TeamViewer","product":"Desktop","vulnerabilityName":"TeamViewer Desktop Bypass Remote Login Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7,"epss":0.04707,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-18988/"},{"cveID":"CVE-2019-18935","vendor":"Progress","product":"Telerik UI for ASP.NET AJAX","vulnerabilityName":"Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.99737,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-18935/"},{"cveID":"CVE-2019-18187","vendor":"Trend Micro","product":"OfficeScan","vulnerabilityName":"Trend Micro OfficeScan Directory Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.25125,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-18187/"},{"cveID":"CVE-2019-17558","vendor":"Apache","product":"Solr","vulnerabilityName":"Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.98567,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-17558/"},{"cveID":"CVE-2019-17026","vendor":"Mozilla","product":"Firefox and Thunderbird","vulnerabilityName":"Mozilla Firefox And Thunderbird Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.46589,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-17026/"},{"cveID":"CVE-2019-16759","vendor":"vBulletin","product":"vBulletin","vulnerabilityName":"vBulletin PHP Module Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.99728,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-16759/"},{"cveID":"CVE-2019-1653","vendor":"Cisco","product":"Small Business RV320 and RV325 Routers","vulnerabilityName":"Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.99876,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1653/"},{"cveID":"CVE-2019-16256","vendor":"SIMalliance","product":"Toolbox Browser","vulnerabilityName":"SIMalliance Toolbox Browser Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.04949,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-16256/"},{"cveID":"CVE-2019-15949","vendor":"Nagios","product":"Nagios XI","vulnerabilityName":"Nagios XI Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.77039,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-15949/"},{"cveID":"CVE-2019-15752","vendor":"Docker","product":"Desktop Community Edition","vulnerabilityName":"Docker Desktop Community Edition Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.31918,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-15752/"},{"cveID":"CVE-2019-1429","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.7729,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1429/"},{"cveID":"CVE-2019-1367","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.5,"epss":0.52729,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1367/"},{"cveID":"CVE-2019-13608","vendor":"Citrix","product":"StoreFront Server","vulnerabilityName":"Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.5,"epss":0.30041,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-13608/"},{"cveID":"CVE-2019-1215","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.8,"epss":0.19254,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1215/"},{"cveID":"CVE-2019-1214","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.01419,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-1214/"},{"cveID":"CVE-2019-11634","vendor":"Citrix","product":"Workspace Application and Receiver for Windows","vulnerabilityName":"Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.08026,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-11634/"},{"cveID":"CVE-2019-11580","vendor":"Atlassian","product":"Crowd and Crowd Data Center","vulnerabilityName":"Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.95355,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-11580/"},{"cveID":"CVE-2019-11539","vendor":"Ivanti","product":"Pulse Connect Secure and Pulse Policy Secure","vulnerabilityName":"Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.2,"epss":0.98544,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-11539/"},{"cveID":"CVE-2019-11510","vendor":"Ivanti","product":"Pulse Connect Secure","vulnerabilityName":"Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":10,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-11510/"},{"cveID":"CVE-2019-0863","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.05207,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0863/"},{"cveID":"CVE-2019-0859","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.8,"epss":0.04151,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0859/"},{"cveID":"CVE-2019-0808","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.53017,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0808/"},{"cveID":"CVE-2019-0803","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.8,"epss":0.4523,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0803/"},{"cveID":"CVE-2019-0797","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.0189,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0797/"},{"cveID":"CVE-2019-0708","vendor":"Microsoft","product":"Remote Desktop Services","vulnerabilityName":"Microsoft Remote Desktop Services Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0708/"},{"cveID":"CVE-2019-0604","vendor":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.99913,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0604/"},{"cveID":"CVE-2019-0541","vendor":"Microsoft","product":"MSHTML","vulnerabilityName":"Microsoft MSHTML Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.53202,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0541/"},{"cveID":"CVE-2019-0211","vendor":"Apache","product":"HTTP Server","vulnerabilityName":"Apache HTTP Server Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.65005,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2019-0211/"},{"cveID":"CVE-2018-8653","vendor":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.29822,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-8653/"},{"cveID":"CVE-2018-7600","vendor":"Drupal","product":"Drupal Core","vulnerabilityName":"Drupal Core Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.99991,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-7600/"},{"cveID":"CVE-2018-6789","vendor":"Exim","product":"Exim","vulnerabilityName":"Exim Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.82137,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-6789/"},{"cveID":"CVE-2018-4939","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.6208,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-4939/"},{"cveID":"CVE-2018-4878","vendor":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.8,"epss":0.89532,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-4878/"},{"cveID":"CVE-2018-2380","vendor":"SAP","product":"Customer Relationship Management (CRM)","vulnerabilityName":"SAP Customer Relationship Management (CRM) Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":6.6,"epss":0.28934,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-2380/"},{"cveID":"CVE-2018-20062","vendor":"ThinkPHP","product":"noneCms","vulnerabilityName":"ThinkPHP \"noneCms\" Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.9953,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-20062/"},{"cveID":"CVE-2018-18325","vendor":"DotNetNuke (DNN)","product":"DotNetNuke (DNN)","vulnerabilityName":"DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.74048,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-18325/"},{"cveID":"CVE-2018-15961","vendor":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Unrestricted File Upload Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.9995,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-15961/"},{"cveID":"CVE-2018-15811","vendor":"DotNetNuke (DNN)","product":"DotNetNuke (DNN)","vulnerabilityName":"DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.74048,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-15811/"},{"cveID":"CVE-2018-14558","vendor":"Tenda","product":"AC7, AC9, and AC10 Routers","vulnerabilityName":"Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.08742,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-14558/"},{"cveID":"CVE-2018-13379","vendor":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS SSL VPN Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-13379/"},{"cveID":"CVE-2018-11776","vendor":"Apache","product":"Struts","vulnerabilityName":"Apache Struts Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.1,"epss":0.99991,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-11776/"},{"cveID":"CVE-2018-0802","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.8,"epss":0.93289,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0802/"},{"cveID":"CVE-2018-0798","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.95121,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0798/"},{"cveID":"CVE-2018-0296","vendor":"Cisco","product":"Adaptive Security Appliance (ASA)","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.99913,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0296/"},{"cveID":"CVE-2018-0171","vendor":"Cisco","product":"IOS and IOS XE","vulnerabilityName":"Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.99479,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2018-0171/"},{"cveID":"CVE-2017-9822","vendor":"DotNetNuke (DNN)","product":"DotNetNuke (DNN)","vulnerabilityName":"DotNetNuke (DNN) Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":8.8,"epss":0.94789,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-9822/"},{"cveID":"CVE-2017-9805","vendor":"Apache","product":"Struts","vulnerabilityName":"Apache Struts Deserialization of Untrusted Data Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.1,"epss":0.99396,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-9805/"},{"cveID":"CVE-2017-9248","vendor":"Progress","product":"ASP.NET AJAX and Sitefinity","vulnerabilityName":"Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.75098,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-9248/"},{"cveID":"CVE-2017-8759","vendor":"Microsoft","product":".NET Framework","vulnerabilityName":"Microsoft .NET Framework Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.88698,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-8759/"},{"cveID":"CVE-2017-7269","vendor":"Microsoft","product":"Internet Information Services (IIS)","vulnerabilityName":"Microsoft Windows Server Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.99823,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-7269/"},{"cveID":"CVE-2017-6327","vendor":"Symantec","product":"Symantec Messaging Gateway","vulnerabilityName":"Symantec Messaging Gateway Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":8.8,"epss":0.35341,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-6327/"},{"cveID":"CVE-2017-5638","vendor":"Apache","product":"Struts","vulnerabilityName":"Apache Struts Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":9.8,"epss":0.99999,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-5638/"},{"cveID":"CVE-2017-16651","vendor":"Roundcube","product":"Roundcube Webmail","vulnerabilityName":"Roundcube Webmail File Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.36919,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-16651/"},{"cveID":"CVE-2017-11882","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.8,"epss":0.99945,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-11882/"},{"cveID":"CVE-2017-11774","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Outlook Security Feature Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.59893,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-11774/"},{"cveID":"CVE-2017-0199","vendor":"Microsoft","product":"Office and WordPad","vulnerabilityName":"Microsoft Office and WordPad Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.8,"epss":0.99933,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0199/"},{"cveID":"CVE-2017-0143","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":8.8,"epss":0.93307,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2017-0143/"},{"cveID":"CVE-2016-9563","vendor":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver XML External Entity (XXE) Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":6.5,"epss":0.23805,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-9563/"},{"cveID":"CVE-2016-7255","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.8,"epss":0.80968,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-7255/"},{"cveID":"CVE-2016-4437","vendor":"Apache","product":"Shiro","vulnerabilityName":"Apache Shiro Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.93039,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-4437/"},{"cveID":"CVE-2016-3976","vendor":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Directory Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.5,"epss":0.46605,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-3976/"},{"cveID":"CVE-2016-3718","vendor":"ImageMagick","product":"ImageMagick","vulnerabilityName":"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":5.5,"epss":0.76897,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-3718/"},{"cveID":"CVE-2016-3715","vendor":"ImageMagick","product":"ImageMagick","vulnerabilityName":"ImageMagick Arbitrary File Deletion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":5.5,"epss":0.75383,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-3715/"},{"cveID":"CVE-2016-3643","vendor":"SolarWinds","product":"Virtualization Manager","vulnerabilityName":"SolarWinds Virtualization Manager Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.03704,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-3643/"},{"cveID":"CVE-2016-3235","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office OLE DLL Side Loading Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.43431,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-3235/"},{"cveID":"CVE-2016-0185","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Media Center Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.6994,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-0185/"},{"cveID":"CVE-2016-0167","vendor":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":7.8,"epss":0.05729,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2016-0167/"},{"cveID":"CVE-2015-4852","vendor":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.8,"epss":0.96032,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-4852/"},{"cveID":"CVE-2015-1641","vendor":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":7.8,"epss":0.96758,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2015-1641/"},{"cveID":"CVE-2014-1812","vendor":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":8.8,"epss":0.65117,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2014-1812/"},{"cveID":"CVE-2012-3152","vendor":"Oracle","product":"Fusion Middleware","vulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":9.1,"epss":0.98793,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-3152/"},{"cveID":"CVE-2012-0158","vendor":"Microsoft","product":"MSCOMCTL.OCX","vulnerabilityName":"Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":true,"cvss":8.8,"epss":0.99976,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2012-0158/"},{"cveID":"CVE-2010-5326","vendor":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomware":false,"cvss":10,"epss":0.1745,"status":"past due","url":"https://www.netvigilance.com/kev/cve-2010-5326/"}]}