# Exploited in the wild

Vulnerabilities that attackers are using right now, from the CISA Known Exploited Vulnerabilities catalog.


- [CVE-2026-97229](https://insights.sbomify.com/CVE-2026-97229/): GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound (critical 10.0, exploited in the wild)
- [CVE-2026-76418](https://insights.sbomify.com/CVE-2026-76418/): Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference (high 8.6, exploited in the wild)
- [CVE-2026-46300](https://insights.sbomify.com/CVE-2026-46300/): Linux Kernel Missing Initialization of a Variable (high 7.8, exploited in the wild)
- [CVE-2026-41709](https://insights.sbomify.com/CVE-2026-41709/): Broadcom VMWare ESX Insufficient Logging (low 2.7, exploited in the wild)
- [CVE-2026-48356](https://insights.sbomify.com/CVE-2026-48356/): Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type (critical 9.3, exploited in the wild)
- [CVE-2026-111497](https://insights.sbomify.com/CVE-2026-111497/): Google Brotli Unchecked Return Value (critical 9.2, exploited in the wild)
- [CVE-2026-109619](https://insights.sbomify.com/CVE-2026-109619/): PHP Stale Internal Request-State (critical 9.2, exploited in the wild)
- [CVE-2026-109618](https://insights.sbomify.com/CVE-2026-109618/): PHP Memory Corruption (critical 9.2, exploited in the wild)
- [CVE-2026-114625](https://insights.sbomify.com/CVE-2026-114625/): Arista VeloCloud Orchestrator SQL Injection (critical 9.4, exploited in the wild)
- [CVE-2026-110447](https://insights.sbomify.com/CVE-2026-110447/): Collabora Online – Built-in CODE Server OS Command Injection (critical 9.2, exploited in the wild)
- [CVE-2026-96656](https://insights.sbomify.com/CVE-2026-96656/): Plex Media Server External Control of File Name or Path (high 8.6, exploited in the wild)
- [CVE-2026-96655](https://insights.sbomify.com/CVE-2026-96655/): Plex Media Server Server-Side Request Forgery (SSRF) (medium 5.3, exploited in the wild)
- [CVE-2026-96654](https://insights.sbomify.com/CVE-2026-96654/): Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page (medium 6.9, exploited in the wild)
- [CVE-2026-96652](https://insights.sbomify.com/CVE-2026-96652/): Plex Media Server Server-Side Request Forgery (SSRF) (medium 5.3, exploited in the wild)
- [CVE-2026-110936](https://insights.sbomify.com/CVE-2026-110936/): Siemens Software Center Uncontrolled Search Path Element (high 8.4, exploited in the wild)
- [CVE-2026-106931](https://insights.sbomify.com/CVE-2026-106931/): EG Secure Solutions SiteGuard Server Edition OS Command Injection (high 8.5, exploited in the wild)
- [CVE-2026-102764](https://insights.sbomify.com/CVE-2026-102764/): BeyondTrust Remote Support Authentication Bypass by Spoofing (critical 9.3, exploited in the wild)
- [CVE-2025-61624](https://insights.sbomify.com/CVE-2025-61624/): Fortinet Multiple Products Path Traversal (medium 5.4, exploited in the wild)
- [CVE-2026-21589](https://insights.sbomify.com/CVE-2026-21589/): Atlassian Multiple Products Files or Directories Accessible to External Parties (critical 9.3, exploited in the wild)
- [CVE-2026-76519](https://insights.sbomify.com/CVE-2026-76519/): Cisco Secure Email Gateway Relative Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2026-105134](https://insights.sbomify.com/CVE-2026-105134/): Ahsay AhsayCBS Command Injection (critical 10.0, exploited in the wild)
- [CVE-2026-105133](https://insights.sbomify.com/CVE-2026-105133/): Ahsay AhsayCBS Improper Authentication (medium 6.9, exploited in the wild)
- [CVE-2026-0322](https://insights.sbomify.com/CVE-2026-0322/): Palo Alto Networks PAN-OS Code Injection (high 8.6, exploited in the wild)
- [CVE-2026-96951](https://insights.sbomify.com/CVE-2026-96951/): Microsoft Windows Command Injection (high 8.8, exploited in the wild)
- [CVE-2026-104935](https://insights.sbomify.com/CVE-2026-104935/): Ivanti Connect Secure Authentication Bypass by Spoofing (high 8.6, exploited in the wild)
- [CVE-2023-22894](https://insights.sbomify.com/CVE-2023-22894/): Strapi Cleartext Storage of Sensitive Information (high 7.2, exploited in the wild)
- [CVE-2021-3199](https://insights.sbomify.com/CVE-2021-3199/): ONLYOFFICE Docs Server Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2016-3081](https://insights.sbomify.com/CVE-2016-3081/): Apache Struts Command Injection (high 8.1, exploited in the wild)
- [CVE-2015-5477](https://insights.sbomify.com/CVE-2015-5477/): ISC BIND Data Processing Errors (high 7.5, exploited in the wild)
- [CVE-2015-3306](https://insights.sbomify.com/CVE-2015-3306/): ProFTPD Improper Access Control (critical 10.0, exploited in the wild)
- [CVE-2026-88779](https://insights.sbomify.com/CVE-2026-88779/): Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer (high 8.7, exploited in the wild)
- [CVE-2026-102490](https://insights.sbomify.com/CVE-2026-102490/): Zammad GmbH Zammad Improper Privilege Management (high 8.5, exploited in the wild)
- [CVE-2026-102489](https://insights.sbomify.com/CVE-2026-102489/): Zammad GmbH Zammad Session Fixation (high 8.7, exploited in the wild)
- [CVE-2026-104286](https://insights.sbomify.com/CVE-2026-104286/): Fortinet FortiMail Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2026-76504](https://insights.sbomify.com/CVE-2026-76504/): Cisco Catalyst SD-WAN Manager Hex Encoding (critical 9.8, exploited in the wild)
- [CVE-2026-86950](https://insights.sbomify.com/CVE-2026-86950/): Apple Multiple Products Out-of-Bounds Write (high 8.8, exploited in the wild)
- [CVE-2026-88772](https://insights.sbomify.com/CVE-2026-88772/): Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer (critical 9.5, exploited in the wild)
- [CVE-2026-88771](https://insights.sbomify.com/CVE-2026-88771/): Citrix NetScaler Improper Input Validation (critical 9.5, exploited in the wild)
- [CVE-2026-87902](https://insights.sbomify.com/CVE-2026-87902/): WordPress Core Remote File Inclusion (high 8.1, exploited in the wild)
- [CVE-2026-67279](https://insights.sbomify.com/CVE-2026-67279/): Mikrotik RouterOS Improper Enforcement of Behavioral Workflow (medium 6.9, exploited in the wild)
- [CVE-2026-65660](https://insights.sbomify.com/CVE-2026-65660/): Microsoft SharePoint Code Injection (high 8.8, exploited in the wild)
- [CVE-2026-71362](https://insights.sbomify.com/CVE-2026-71362/): Adobe Commerce and Magento Incorrect Authorization Vulnerability (critical 9.1, exploited in the wild)
- [CVE-2026-5430](https://insights.sbomify.com/CVE-2026-5430/): WSO2 Multiple Products Path Traversal Vulnerability (critical 10.0, exploited in the wild)
- [CVE-2026-94127](https://insights.sbomify.com/CVE-2026-94127/): F5 BIG-IP APM Heap-based Buffer Overflow (critical 9.3, exploited in the wild)
- [CVE-2026-93952](https://insights.sbomify.com/CVE-2026-93952/): Arista VeloCloud Orchestrator Improper Input Validation (critical 9.5, exploited in the wild)
- [CVE-2026-93616](https://insights.sbomify.com/CVE-2026-93616/): Check Point Multiple Products Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2026-85102](https://insights.sbomify.com/CVE-2026-85102/): Check Point Multiple Products Improper Certificate Validation (critical 9.8, exploited in the wild)
- [CVE-2026-7273](https://insights.sbomify.com/CVE-2026-7273/): Zyxel GS1900 Series Switches Stack-Based Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2026-53266](https://insights.sbomify.com/CVE-2026-53266/): Linux Kernel Out-of-Bounds Write (high 8.8, exploited in the wild)
- [CVE-2025-39964](https://insights.sbomify.com/CVE-2025-39964/): Linux Kernel Race Condition (high 7.8, exploited in the wild)
- [CVE-2025-39682](https://insights.sbomify.com/CVE-2025-39682/): Linux Kernel Improper Check for Unusual or Exceptional Conditions (critical 9.8, exploited in the wild)
- [CVE-2026-87886](https://insights.sbomify.com/CVE-2026-87886/): Acronis Backup Incorrect Default Permissions (high 7.8, exploited in the wild)
- [CVE-2026-76460](https://insights.sbomify.com/CVE-2026-76460/): Cisco Identity Services Engine Incorrect Use of Privileged APIs (critical 10.0, exploited in the wild)
- [CVE-2026-58704](https://insights.sbomify.com/CVE-2026-58704/): Google Pixel Improper Authorization (high 8.8, exploited in the wild)
- [CVE-2026-76461](https://insights.sbomify.com/CVE-2026-76461/): Cisco Secure Email Gateway SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2026-85706](https://insights.sbomify.com/CVE-2026-85706/): GitLab Community Edition and Enterprise Edition Path Traversal (critical 10.0, exploited in the wild)
- [CVE-2026-84869](https://insights.sbomify.com/CVE-2026-84869/): ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization (critical 9.9, exploited in the wild)
- [CVE-2026-42018](https://insights.sbomify.com/CVE-2026-42018/): JFrog Artifactory Improper Authentication (high 7.5, exploited in the wild)
- [CVE-2026-42016](https://insights.sbomify.com/CVE-2026-42016/): JFrog Artifactory Incorrect Authorization (high 8.1, exploited in the wild)
- [CVE-2026-86060](https://insights.sbomify.com/CVE-2026-86060/): MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command (critical 9.2, exploited in the wild)
- [CVE-2026-67277](https://insights.sbomify.com/CVE-2026-67277/): MikroTik RouterOS Missing Authentication for Critical Function (high 8.8, exploited in the wild)
- [CVE-2026-87491](https://insights.sbomify.com/CVE-2026-87491/): Google Chromium V8 Out of Bounds Write (high 8.8, exploited in the wild)
- [CVE-2026-20079](https://insights.sbomify.com/CVE-2026-20079/): Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel (critical 10.0, exploited in the wild)
- [CVE-2026-19490](https://insights.sbomify.com/CVE-2026-19490/): Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel (critical 9.3, exploited in the wild)
- [CVE-2025-25249](https://insights.sbomify.com/CVE-2025-25249/): Fortinet Multiple Products Heap-based Buffer Overflow (high 7.4, exploited in the wild)
- [CVE-2026-86218](https://insights.sbomify.com/CVE-2026-86218/): N-able N-central Static Code Injection (critical 10.0, exploited in the wild)
- [CVE-2026-85880](https://insights.sbomify.com/CVE-2026-85880/): Microsoft Windows Heap-Based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2026-81963](https://insights.sbomify.com/CVE-2026-81963/): Microsoft Windows Link Following (high 7.8, exploited in the wild)
- [CVE-2026-75650](https://insights.sbomify.com/CVE-2026-75650/): Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine (critical 10.0, exploited in the wild)
- [CVE-2026-85046](https://insights.sbomify.com/CVE-2026-85046/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2026-9586](https://insights.sbomify.com/CVE-2026-9586/): Sangoma Switchvox SQL Injection (critical 9.3, exploited in the wild)
- [CVE-2026-83549](https://insights.sbomify.com/CVE-2026-83549/): SonicWall SMA1000 Appliances OS Command Injection (high 7.8, exploited in the wild)
- [CVE-2026-83548](https://insights.sbomify.com/CVE-2026-83548/): SonicWall SMA1000 Appliances Server-Side Request Forgery (critical 10.0, exploited in the wild)
- [CVE-2026-82329](https://insights.sbomify.com/CVE-2026-82329/): JFrog Artifactory Improper Authentication (critical 9.8, exploited in the wild)
- [CVE-2026-59822](https://insights.sbomify.com/CVE-2026-59822/): BerriAI LiteLLM Improper Authentication (high 8.8, exploited in the wild)
- [CVE-2026-49869](https://insights.sbomify.com/CVE-2026-49869/): Kestra OSS OS Command Injection (critical 10.0, exploited in the wild)
- [CVE-2026-48710](https://insights.sbomify.com/CVE-2026-48710/): Kludex Starlette HTTP Request/Response Smuggling (medium 6.5, exploited in the wild)
- [CVE-2026-82078](https://insights.sbomify.com/CVE-2026-82078/): PaperCut NG/MF Unsafe Reflection (critical 9.4, exploited in the wild)
- [CVE-2026-81578](https://insights.sbomify.com/CVE-2026-81578/): PaperCut NG/MF Missing Authentication for Critical Function (high 8.8, exploited in the wild)
- [CVE-2026-66384](https://insights.sbomify.com/CVE-2026-66384/): JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory (medium 5.3, exploited in the wild)
- [CVE-2026-53362](https://insights.sbomify.com/CVE-2026-53362/): Linux Kernel Unspecified (high 7.8, exploited in the wild)
- [CVE-2023-49105](https://insights.sbomify.com/CVE-2023-49105/): ownCloud Improper Authentication (critical 9.8, exploited in the wild)
- [CVE-2026-8452](https://insights.sbomify.com/CVE-2026-8452/): Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer (high 8.8, exploited in the wild)
- [CVE-2022-0995](https://insights.sbomify.com/CVE-2022-0995/): Linux Kernel Out-of-Bounds Write (high 7.8, exploited in the wild)
- [CVE-2021-23758](https://insights.sbomify.com/CVE-2021-23758/): Ajax.NET Professional Deserialization of Untrusted Data (high 8.1, exploited in the wild)
- [CVE-2019-1068](https://insights.sbomify.com/CVE-2019-1068/): Microsoft SQL Server Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2015-5287](https://insights.sbomify.com/CVE-2015-5287/): Red Hat Automatic Bug Reporting Tool Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2015-3246](https://insights.sbomify.com/CVE-2015-3246/): Red Hat Libuser Race Condition (high 7.4, exploited in the wild)
- [CVE-2026-60004](https://insights.sbomify.com/CVE-2026-60004/): Gitea Code Injection (critical 9.8, exploited in the wild)
- [CVE-2026-21962](https://insights.sbomify.com/CVE-2026-21962/): Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control (critical 10.0, exploited in the wild)
- [CVE-2026-73570](https://insights.sbomify.com/CVE-2026-73570/): Zimbra Collaboration Suite (ZCS) OS Command Injection (high 8.9, exploited in the wild)
- [CVE-2026-72530](https://insights.sbomify.com/CVE-2026-72530/): TrueConf Server Code Injection (critical 9.5, exploited in the wild)
- [CVE-2026-72529](https://insights.sbomify.com/CVE-2026-72529/): TrueConf Server Missing Authentication for Critical Function (critical 9.3, exploited in the wild)
- [CVE-2026-64849](https://insights.sbomify.com/CVE-2026-64849/): MLflow Server-Side Request Forgery (critical 9.3, exploited in the wild)
- [CVE-2026-65400](https://insights.sbomify.com/CVE-2026-65400/): Apple macOS Improper Authentication (critical 9.8, exploited in the wild)
- [CVE-2026-59310](https://insights.sbomify.com/CVE-2026-59310/): Broadcom VMware vCenter Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2026-55040](https://insights.sbomify.com/CVE-2026-55040/): Microsoft SharePoint Weak Authentication (critical 9.1, exploited in the wild)
- [CVE-2026-33824](https://insights.sbomify.com/CVE-2026-33824/): Microsoft Internet Key Exchange (IKE) Service Extensions Double Free (critical 9.8, exploited in the wild)
- [CVE-2025-62593](https://insights.sbomify.com/CVE-2025-62593/): Ray-Project Ray Code Injection (critical 9.4, exploited in the wild)
- [CVE-2026-72898](https://insights.sbomify.com/CVE-2026-72898/): Metabase SQL Injection (critical 10.0, exploited in the wild)
- [CVE-2026-68820](https://insights.sbomify.com/CVE-2026-68820/): Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free (high 7.0, exploited in the wild)
- [CVE-2026-20349](https://insights.sbomify.com/CVE-2026-20349/): Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection (high 8.6, exploited in the wild)
- [CVE-2026-8037](https://insights.sbomify.com/CVE-2026-8037/): Progress LoadMaster Command Injection (critical 9.6, exploited in the wild)
- [CVE-2026-63077](https://insights.sbomify.com/CVE-2026-63077/): JetBrains TeamCity Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2026-9198](https://insights.sbomify.com/CVE-2026-9198/): IBM Langflow Code Injection (critical 9.8, exploited in the wild)
- [CVE-2026-34486](https://insights.sbomify.com/CVE-2026-34486/): Apache Tomcat Missing Encryption of Sensitive Data (high 7.5, exploited in the wild)
- [CVE-2026-18556](https://insights.sbomify.com/CVE-2026-18556/): N-able N-central Authentication Bypass Using an Alternate Path or Channel (high 8.2, exploited in the wild)
- [CVE-2026-18577](https://insights.sbomify.com/CVE-2026-18577/): N-able N-central Authentication Bypass Using an Alternate Path or Channel (high 8.2, exploited in the wild)
- [CVE-2026-20316](https://insights.sbomify.com/CVE-2026-20316/): Cisco Secure Firewall Management Center Use of Hard-coded Password (medium 5.3, exploited in the wild)
- [CVE-2026-16812](https://insights.sbomify.com/CVE-2026-16812/): Arista VeloCloud Orchestrator On-Prem OS Command Injection (critical 10.0, exploited in the wild)
- [CVE-2025-68686](https://insights.sbomify.com/CVE-2025-68686/): Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor (medium 5.3, exploited in the wild)
- [CVE-2026-50522](https://insights.sbomify.com/CVE-2026-50522/): Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (critical 9.8, exploited in the wild)
- [CVE-2026-16232](https://insights.sbomify.com/CVE-2026-16232/): Check Point SmartConsole Improper Authentication (critical 9.3, exploited in the wild)
- [CVE-2026-63030](https://insights.sbomify.com/CVE-2026-63030/): WordPress Core Interpretation Conflict (critical 9.8, exploited in the wild)
- [CVE-2026-60137](https://insights.sbomify.com/CVE-2026-60137/): WordPress Core SQL Injection (medium 5.9, exploited in the wild)
- [CVE-2026-0770](https://insights.sbomify.com/CVE-2026-0770/): Langflow Inclusion of Functionality from Untrusted Control Sphere (critical 9.8, exploited in the wild)
- [CVE-2021-27137](https://insights.sbomify.com/CVE-2021-27137/): DD-WRT Stack-Based Buffer Overflow (high 8.1, exploited in the wild)
- [CVE-2026-58644](https://insights.sbomify.com/CVE-2026-58644/): Microsoft SharePoint Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2026-39808](https://insights.sbomify.com/CVE-2026-39808/): Fortinet FortiSandbox OS Command Injection (critical 9.1, exploited in the wild)
- [CVE-2026-25089](https://insights.sbomify.com/CVE-2026-25089/): Fortinet FortiSandbox OS Command Injection (critical 9.1, exploited in the wild)
- [CVE-2026-46817](https://insights.sbomify.com/CVE-2026-46817/): Oracle E-Business Suite Improper Privilege Management (critical 9.8, exploited in the wild)
- [CVE-2023-4346](https://insights.sbomify.com/CVE-2023-4346/): KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism (high 7.5, exploited in the wild)
- [CVE-2026-56164](https://insights.sbomify.com/CVE-2026-56164/): Microsoft SharePoint Server Missing Authentication for Critical Function (medium 5.3, exploited in the wild)
- [CVE-2026-56155](https://insights.sbomify.com/CVE-2026-56155/): Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability (high 7.8, exploited in the wild)
- [CVE-2026-15410](https://insights.sbomify.com/CVE-2026-15410/): SonicWall SMA1000 Appliances Code Injection (high 7.2, exploited in the wild)
- [CVE-2026-15409](https://insights.sbomify.com/CVE-2026-15409/): SonicWall SMA1000 Appliances Server-Side Request Forgery (critical 10.0, exploited in the wild)
- [CVE-2008-4128](https://insights.sbomify.com/CVE-2008-4128/): Cisco IOS Cross-Site Request Forgery (high 8.1, exploited in the wild)
- [CVE-2026-56291](https://insights.sbomify.com/CVE-2026-56291/): Balbooa Forms Unrestricted Upload of File with Dangerous Type (critical 10.0, exploited in the wild)
- [CVE-2026-48939](https://insights.sbomify.com/CVE-2026-48939/): iCagenda Unrestricted Upload of File with Dangerous Type (critical 10.0, exploited in the wild)
- [CVE-2026-56290](https://insights.sbomify.com/CVE-2026-56290/): Joomlack Page Builder Improper Access Control (critical 10.0, exploited in the wild)
- [CVE-2026-55255](https://insights.sbomify.com/CVE-2026-55255/): Langflow Authorization Bypass Through User-Controlled Key (high 8.4, exploited in the wild)
- [CVE-2026-48908](https://insights.sbomify.com/CVE-2026-48908/): JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type (critical 10.0, exploited in the wild)
- [CVE-2026-48282](https://insights.sbomify.com/CVE-2026-48282/): Adobe ColdFusion Path Traversal (critical 10.0, exploited in the wild)
- [CVE-2026-45659](https://insights.sbomify.com/CVE-2026-45659/): Microsoft SharePoint Server Deserialization of Untrusted Data (high 8.8, exploited in the wild)
- [CVE-2026-48558](https://insights.sbomify.com/CVE-2026-48558/): SimpleHelp Authentication Bypass (critical 9.5, exploited in the wild)
- [CVE-2026-20230](https://insights.sbomify.com/CVE-2026-20230/): Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) (high 8.6, exploited in the wild)
- [CVE-2026-12569](https://insights.sbomify.com/CVE-2026-12569/): PTC Windchill and FlexPLM Improper Input Validation (critical 9.3, exploited in the wild)
- [CVE-2026-34910](https://insights.sbomify.com/CVE-2026-34910/): Ubiquiti UniFi OS Improper Input Validation (critical 10.0, exploited in the wild)
- [CVE-2026-34909](https://insights.sbomify.com/CVE-2026-34909/): Ubiquiti UniFi OS Path Traversal (critical 10.0, exploited in the wild)
- [CVE-2026-34908](https://insights.sbomify.com/CVE-2026-34908/): Ubiquiti UniFi OS Improper Access Control (critical 10.0, exploited in the wild)
- [CVE-2025-67038](https://insights.sbomify.com/CVE-2025-67038/): Lantronix EDS5000 Code Injection (critical 9.3, exploited in the wild)
- [CVE-2026-20253](https://insights.sbomify.com/CVE-2026-20253/): Splunk Enterprise Missing Authentication for Critical Function (critical 9.8, exploited in the wild)
- [CVE-2026-48907](https://insights.sbomify.com/CVE-2026-48907/): Widget Factory Joomla Content Editor Improper Access Control (critical 10.0, exploited in the wild)
- [CVE-2026-54420](https://insights.sbomify.com/CVE-2026-54420/): LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following (high 8.5, exploited in the wild)
- [CVE-2026-20262](https://insights.sbomify.com/CVE-2026-20262/): Cisco Catalyst SD-WAN Manager Directory or Path Traversal (medium 6.5, exploited in the wild)
- [CVE-2026-35273](https://insights.sbomify.com/CVE-2026-35273/): Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function (critical 9.8, exploited in the wild)
- [CVE-2026-10520](https://insights.sbomify.com/CVE-2026-10520/): Ivanti Sentry OS Command Injection (critical 10.0, exploited in the wild)
- [CVE-2026-7473](https://insights.sbomify.com/CVE-2026-7473/): Arista Extensible Operating System Incomplete Comparison with Missing Factors (medium 6.9, exploited in the wild)
- [CVE-2026-20245](https://insights.sbomify.com/CVE-2026-20245/): Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output (high 7.8, exploited in the wild)
- [CVE-2026-11645](https://insights.sbomify.com/CVE-2026-11645/): Google Chromium V8 Out-of-Bounds Read and Write (high 8.8, exploited in the wild)
- [CVE-2026-50751](https://insights.sbomify.com/CVE-2026-50751/): Check Point Security Gateway Improper Authentication (critical 9.3, exploited in the wild)
- [CVE-2026-42271](https://insights.sbomify.com/CVE-2026-42271/): BerriAI LiteLLM Command Injection (high 8.7, exploited in the wild)
- [CVE-2026-28318](https://insights.sbomify.com/CVE-2026-28318/): SolarWinds Serv-U Uncontrolled Resource Consumption (high 7.5, exploited in the wild)
- [CVE-2026-45247](https://insights.sbomify.com/CVE-2026-45247/): Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data (critical 9.3, exploited in the wild)
- [CVE-2025-48595](https://insights.sbomify.com/CVE-2025-48595/): Android Framework Integer Overflow (high 8.4, exploited in the wild)
- [CVE-2022-0492](https://insights.sbomify.com/CVE-2022-0492/): Linux Kernel Improper Authentication (high 7.8, exploited in the wild)
- [CVE-2024-21182](https://insights.sbomify.com/CVE-2024-21182/): Oracle WebLogic Server Unspecified (high 7.5, exploited in the wild)
- [CVE-2026-0257](https://insights.sbomify.com/CVE-2026-0257/): Palo Alto Networks PAN-OS Authentication Bypass (high 7.8, exploited in the wild)
- [CVE-2026-8398](https://insights.sbomify.com/CVE-2026-8398/): Daemon Tools Lite Embedded Malicious Code (critical 9.3, exploited in the wild)
- [CVE-2026-48027](https://insights.sbomify.com/CVE-2026-48027/): Nx Console Embedded Malicious Code (critical 9.3, exploited in the wild)
- [CVE-2026-45321](https://insights.sbomify.com/CVE-2026-45321/): TanStack Unspecified (critical 9.6, exploited in the wild)
- [CVE-2026-48172](https://insights.sbomify.com/CVE-2026-48172/): LiteSpeed cPanel Plugin Privilege Escalation (critical 10.0, exploited in the wild)
- [CVE-2026-9082](https://insights.sbomify.com/CVE-2026-9082/): Drupal Core SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2026-34926](https://insights.sbomify.com/CVE-2026-34926/): Trend Micro Apex One (On-Premise) Directory Traversal (medium 6.7, exploited in the wild)
- [CVE-2025-34291](https://insights.sbomify.com/CVE-2025-34291/): Langflow Origin Validation Error (critical 9.4, exploited in the wild)
- [CVE-2026-45498](https://insights.sbomify.com/CVE-2026-45498/): Microsoft Defender Denial of Service (medium 4.0, exploited in the wild)
- [CVE-2026-41091](https://insights.sbomify.com/CVE-2026-41091/): Microsoft Defender Link Following (high 7.8, exploited in the wild)
- [CVE-2010-0806](https://insights.sbomify.com/CVE-2010-0806/): Microsoft Internet Explorer Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2010-0249](https://insights.sbomify.com/CVE-2010-0249/): Microsoft Internet Explorer Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2009-3459](https://insights.sbomify.com/CVE-2009-3459/): Adobe Acrobat and Reader Heap-Based Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2009-1537](https://insights.sbomify.com/CVE-2009-1537/): Microsoft DirectX NULL Byte Overwrite (high 8.8, exploited in the wild)
- [CVE-2008-4250](https://insights.sbomify.com/CVE-2008-4250/): Microsoft Windows Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2026-42897](https://insights.sbomify.com/CVE-2026-42897/): Microsoft Exchange Server Cross-Site Scripting (high 8.1, exploited in the wild)
- [CVE-2026-20182](https://insights.sbomify.com/CVE-2026-20182/): Cisco Catalyst SD-WAN Controller Authentication Bypass (critical 10.0, exploited in the wild)
- [CVE-2026-42208](https://insights.sbomify.com/CVE-2026-42208/): BerriAI LiteLLM SQL Injection (critical 9.3, exploited in the wild)
- [CVE-2026-6973](https://insights.sbomify.com/CVE-2026-6973/): Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation (high 7.2, exploited in the wild)
- [CVE-2026-0300](https://insights.sbomify.com/CVE-2026-0300/): Palo Alto Networks PAN-OS Out-of-bounds Write (critical 9.3, exploited in the wild)
- [CVE-2026-31431](https://insights.sbomify.com/CVE-2026-31431/): Linux Kernel Incorrect Resource Transfer Between Spheres (high 7.8, exploited in the wild)
- [CVE-2026-41940](https://insights.sbomify.com/CVE-2026-41940/): WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function (critical 9.3, exploited in the wild)
- [CVE-2026-32202](https://insights.sbomify.com/CVE-2026-32202/): Microsoft Windows Protection Mechanism Failure (medium 4.3, exploited in the wild)
- [CVE-2024-1708](https://insights.sbomify.com/CVE-2024-1708/): ConnectWise ScreenConnect Path Traversal (high 8.4, exploited in the wild)
- [CVE-2025-29635](https://insights.sbomify.com/CVE-2025-29635/): D-Link DIR-823X Command Injection (high 7.2, exploited in the wild)
- [CVE-2024-7399](https://insights.sbomify.com/CVE-2024-7399/): Samsung MagicINFO 9 Server Path Traversal (high 8.8, exploited in the wild)
- [CVE-2024-57728](https://insights.sbomify.com/CVE-2024-57728/): SimpleHelp Path Traversal (high 7.2, exploited in the wild)
- [CVE-2024-57726](https://insights.sbomify.com/CVE-2024-57726/): SimpleHelp Missing Authorization (critical 9.9, exploited in the wild)
- [CVE-2026-39987](https://insights.sbomify.com/CVE-2026-39987/): Marimo Remote Code Execution (critical 9.3, exploited in the wild)
- [CVE-2026-33825](https://insights.sbomify.com/CVE-2026-33825/): Microsoft Defender Insufficient Granularity of Access Control (high 7.8, exploited in the wild)
- [CVE-2026-20133](https://insights.sbomify.com/CVE-2026-20133/): Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor (medium 6.5, exploited in the wild)
- [CVE-2026-20128](https://insights.sbomify.com/CVE-2026-20128/): Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format (high 7.5, exploited in the wild)
- [CVE-2026-20122](https://insights.sbomify.com/CVE-2026-20122/): Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs (medium 5.4, exploited in the wild)
- [CVE-2025-48700](https://insights.sbomify.com/CVE-2025-48700/): Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting (medium 6.1, exploited in the wild)
- [CVE-2025-32975](https://insights.sbomify.com/CVE-2025-32975/): Quest KACE Systems Management Appliance (SMA) Improper Authentication (critical 10.0, exploited in the wild)
- [CVE-2025-2749](https://insights.sbomify.com/CVE-2025-2749/): Kentico Xperience Path Traversal (high 7.2, exploited in the wild)
- [CVE-2024-27199](https://insights.sbomify.com/CVE-2024-27199/): JetBrains TeamCity Relative Path Traversal (high 7.3, exploited in the wild)
- [CVE-2023-27351](https://insights.sbomify.com/CVE-2023-27351/): PaperCut NG/MF Improper Authentication (high 8.2, exploited in the wild)
- [CVE-2026-34197](https://insights.sbomify.com/CVE-2026-34197/): Apache ActiveMQ Improper Input Validation (high 8.8, exploited in the wild)
- [CVE-2026-32201](https://insights.sbomify.com/CVE-2026-32201/): Microsoft SharePoint Server Improper Input Validation (medium 6.5, exploited in the wild)
- [CVE-2009-0238](https://insights.sbomify.com/CVE-2009-0238/): Microsoft Office Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2026-34621](https://insights.sbomify.com/CVE-2026-34621/): Adobe Acrobat and Reader Prototype Pollution (high 8.6, exploited in the wild)
- [CVE-2026-21643](https://insights.sbomify.com/CVE-2026-21643/): Fortinet FortiClient EMS SQL Injection (critical 9.1, exploited in the wild)
- [CVE-2025-60710](https://insights.sbomify.com/CVE-2025-60710/): Microsoft Windows Link Following (high 7.8, exploited in the wild)
- [CVE-2023-36424](https://insights.sbomify.com/CVE-2023-36424/): Microsoft Windows Out-of-Bounds Read (high 7.8, exploited in the wild)
- [CVE-2023-21529](https://insights.sbomify.com/CVE-2023-21529/): Microsoft Exchange Server Deserialization of Untrusted Data (high 8.8, exploited in the wild)
- [CVE-2020-9715](https://insights.sbomify.com/CVE-2020-9715/): Adobe Acrobat Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2012-1854](https://insights.sbomify.com/CVE-2012-1854/): Microsoft Visual Basic for Applications Insecure Library Loading (high 7.8, exploited in the wild)
- [CVE-2026-1340](https://insights.sbomify.com/CVE-2026-1340/): Ivanti Endpoint Manager Mobile (EPMM) Code Injection (critical 9.8, exploited in the wild)
- [CVE-2026-35616](https://insights.sbomify.com/CVE-2026-35616/): Fortinet FortiClient EMS Improper Access Control (critical 9.1, exploited in the wild)
- [CVE-2026-3502](https://insights.sbomify.com/CVE-2026-3502/): TrueConf Client Download of Code Without Integrity Check (high 7.8, exploited in the wild)
- [CVE-2026-5281](https://insights.sbomify.com/CVE-2026-5281/): Google Dawn Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2026-3055](https://insights.sbomify.com/CVE-2026-3055/): Citrix NetScaler Out-of-Bounds Read (critical 9.3, exploited in the wild)
- [CVE-2025-53521](https://insights.sbomify.com/CVE-2025-53521/): F5 BIG-IP Stack-Based Buffer Overflow (critical 9.3, exploited in the wild)
- [CVE-2026-33634](https://insights.sbomify.com/CVE-2026-33634/): Aquasecurity Trivy Embedded Malicious Code (critical 9.4, exploited in the wild)
- [CVE-2026-33017](https://insights.sbomify.com/CVE-2026-33017/): Langflow Code Injection (critical 9.3, exploited in the wild)
- [CVE-2025-54068](https://insights.sbomify.com/CVE-2025-54068/): Laravel Livewire Code Injection (critical 9.2, exploited in the wild)
- [CVE-2025-43520](https://insights.sbomify.com/CVE-2025-43520/): Apple Multiple Products Classic Buffer Overflow (medium 5.5, exploited in the wild)
- [CVE-2025-43510](https://insights.sbomify.com/CVE-2025-43510/): Apple Multiple Products Improper Locking (high 7.8, exploited in the wild)
- [CVE-2025-32432](https://insights.sbomify.com/CVE-2025-32432/): Craft CMS Code Injection (critical 10.0, exploited in the wild)
- [CVE-2025-31277](https://insights.sbomify.com/CVE-2025-31277/): Apple Multiple Products Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2026-20131](https://insights.sbomify.com/CVE-2026-20131/): Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data (critical 10.0, exploited in the wild)
- [CVE-2026-20963](https://insights.sbomify.com/CVE-2026-20963/): Microsoft SharePoint Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2025-66376](https://insights.sbomify.com/CVE-2025-66376/): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (high 7.2, exploited in the wild)
- [CVE-2025-47813](https://insights.sbomify.com/CVE-2025-47813/): Wing FTP Server Information Disclosure (medium 4.3, exploited in the wild)
- [CVE-2026-3910](https://insights.sbomify.com/CVE-2026-3910/): Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer (high 8.8, exploited in the wild)
- [CVE-2026-3909](https://insights.sbomify.com/CVE-2026-3909/): Google Skia Out-of-Bounds Write (high 8.8, exploited in the wild)
- [CVE-2025-68613](https://insights.sbomify.com/CVE-2025-68613/): n8n Improper Control of Dynamically-Managed Code Resources (critical 10.0, exploited in the wild)
- [CVE-2026-1603](https://insights.sbomify.com/CVE-2026-1603/): Ivanti Endpoint Manager (EPM) Authentication Bypass (high 8.6, exploited in the wild)
- [CVE-2025-26399](https://insights.sbomify.com/CVE-2025-26399/): SolarWinds Web Help Desk Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2021-22054](https://insights.sbomify.com/CVE-2021-22054/): Omnissa Workspace ONE Server-Side Request Forgery (high 7.5, exploited in the wild)
- [CVE-2023-43000](https://insights.sbomify.com/CVE-2023-43000/): Apple Multiple products Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2023-41974](https://insights.sbomify.com/CVE-2023-41974/): Apple iOS and iPadOS Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2021-30952](https://insights.sbomify.com/CVE-2021-30952/): Apple Multiple Products Integer Overflow or Wraparound (high 8.8, exploited in the wild)
- [CVE-2021-22681](https://insights.sbomify.com/CVE-2021-22681/): Rockwell Multiple Products Insufficient Protected Credentials (critical 9.8, exploited in the wild)
- [CVE-2017-7921](https://insights.sbomify.com/CVE-2017-7921/): Hikvision Multiple Products Improper Authentication (critical 9.8, exploited in the wild)
- [CVE-2026-22719](https://insights.sbomify.com/CVE-2026-22719/): Broadcom VMware Aria Operations Command Injection (high 8.1, exploited in the wild)
- [CVE-2026-21385](https://insights.sbomify.com/CVE-2026-21385/): Qualcomm Multiple Chipsets Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2026-20127](https://insights.sbomify.com/CVE-2026-20127/): Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass (critical 10.0, exploited in the wild)
- [CVE-2022-20775](https://insights.sbomify.com/CVE-2022-20775/): Cisco SD-WAN Path Traversal (high 7.8, exploited in the wild)
- [CVE-2026-25108](https://insights.sbomify.com/CVE-2026-25108/): Soliton Systems K.K FileZen OS Command Injection (high 8.7, exploited in the wild)
- [CVE-2025-68461](https://insights.sbomify.com/CVE-2025-68461/): RoundCube Webmail Cross-site Scripting (high 7.2, exploited in the wild)
- [CVE-2025-49113](https://insights.sbomify.com/CVE-2025-49113/): RoundCube Webmail Deserialization of Untrusted Data (critical 9.9, exploited in the wild)
- [CVE-2026-22769](https://insights.sbomify.com/CVE-2026-22769/): Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials (critical 10.0, exploited in the wild)
- [CVE-2021-22175](https://insights.sbomify.com/CVE-2021-22175/): GitLab Server-Side Request Forgery (SSRF) (medium 6.8, exploited in the wild)
- [CVE-2026-2441](https://insights.sbomify.com/CVE-2026-2441/): Google Chromium CSS Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2024-7694](https://insights.sbomify.com/CVE-2024-7694/): TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type (high 7.2, exploited in the wild)
- [CVE-2020-7796](https://insights.sbomify.com/CVE-2020-7796/): Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (critical 9.8, exploited in the wild)
- [CVE-2008-0015](https://insights.sbomify.com/CVE-2008-0015/): Microsoft Windows Video ActiveX Control Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2026-1731](https://insights.sbomify.com/CVE-2026-1731/): BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection (critical 9.9, exploited in the wild)
- [CVE-2026-20700](https://insights.sbomify.com/CVE-2026-20700/): Apple Multiple Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2025-40536](https://insights.sbomify.com/CVE-2025-40536/): SolarWinds Web Help Desk Security Control Bypass (high 8.1, exploited in the wild)
- [CVE-2025-15556](https://insights.sbomify.com/CVE-2025-15556/): Notepad++ Download of Code Without Integrity Check (high 7.7, exploited in the wild)
- [CVE-2024-43468](https://insights.sbomify.com/CVE-2024-43468/): Microsoft Configuration Manager SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2026-21533](https://insights.sbomify.com/CVE-2026-21533/): Microsoft Windows Improper Privilege Management (high 7.8, exploited in the wild)
- [CVE-2026-21525](https://insights.sbomify.com/CVE-2026-21525/): Microsoft Windows NULL Pointer Dereference (medium 6.2, exploited in the wild)
- [CVE-2026-21519](https://insights.sbomify.com/CVE-2026-21519/): Microsoft Windows Type Confusion (high 7.8, exploited in the wild)
- [CVE-2026-21514](https://insights.sbomify.com/CVE-2026-21514/): Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision (high 7.8, exploited in the wild)
- [CVE-2026-21513](https://insights.sbomify.com/CVE-2026-21513/): Microsoft MSHTML Framework Protection Mechanism Failure (high 8.8, exploited in the wild)
- [CVE-2026-21510](https://insights.sbomify.com/CVE-2026-21510/): Microsoft Windows Shell Protection Mechanism Failure (high 8.8, exploited in the wild)
- [CVE-2026-24423](https://insights.sbomify.com/CVE-2026-24423/): SmarterTools SmarterMail Missing Authentication for Critical Function (critical 9.3, exploited in the wild)
- [CVE-2025-11953](https://insights.sbomify.com/CVE-2025-11953/): React Native Community CLI OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2025-64328](https://insights.sbomify.com/CVE-2025-64328/): Sangoma FreePBX OS Command Injection (high 8.6, exploited in the wild)
- [CVE-2025-40551](https://insights.sbomify.com/CVE-2025-40551/): SolarWinds Web Help Desk Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2021-39935](https://insights.sbomify.com/CVE-2021-39935/): GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) (medium 6.8, exploited in the wild)
- [CVE-2019-19006](https://insights.sbomify.com/CVE-2019-19006/): Sangoma FreePBX Improper Authentication (critical 9.8, exploited in the wild)
- [CVE-2026-1281](https://insights.sbomify.com/CVE-2026-1281/): Ivanti Endpoint Manager Mobile (EPMM) Code Injection (critical 9.8, exploited in the wild)
- [CVE-2026-24858](https://insights.sbomify.com/CVE-2026-24858/): Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel (critical 9.4, exploited in the wild)
- [CVE-2026-24061](https://insights.sbomify.com/CVE-2026-24061/): GNU InetUtils Argument Injection (critical 9.8, exploited in the wild)
- [CVE-2026-23760](https://insights.sbomify.com/CVE-2026-23760/): SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel (critical 9.3, exploited in the wild)
- [CVE-2026-21509](https://insights.sbomify.com/CVE-2026-21509/): Microsoft Office Security Feature Bypass (high 7.8, exploited in the wild)
- [CVE-2025-52691](https://insights.sbomify.com/CVE-2025-52691/): SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type (critical 10.0, exploited in the wild)
- [CVE-2018-14634](https://insights.sbomify.com/CVE-2018-14634/): Linux Kernel Integer Overflow (high 7.8, exploited in the wild)
- [CVE-2024-37079](https://insights.sbomify.com/CVE-2024-37079/): Broadcom VMware vCenter Server Out-of-bounds Write (critical 9.8, exploited in the wild)
- [CVE-2025-68645](https://insights.sbomify.com/CVE-2025-68645/): Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion (high 8.8, exploited in the wild)
- [CVE-2025-54313](https://insights.sbomify.com/CVE-2025-54313/): Prettier eslint-config-prettier Embedded Malicious Code (high 7.5, exploited in the wild)
- [CVE-2025-34026](https://insights.sbomify.com/CVE-2025-34026/): Versa Concerto Improper Authentication (critical 9.2, exploited in the wild)
- [CVE-2025-31125](https://insights.sbomify.com/CVE-2025-31125/): Vite Vitejs Improper Access Control (medium 5.3, exploited in the wild)
- [CVE-2026-20045](https://insights.sbomify.com/CVE-2026-20045/): Cisco Unified Communications Products Code Injection (high 8.2, exploited in the wild)
- [CVE-2026-20805](https://insights.sbomify.com/CVE-2026-20805/): Microsoft Windows Information Disclosure (medium 5.5, exploited in the wild)
- [CVE-2025-8110](https://insights.sbomify.com/CVE-2025-8110/): Gogs Path Traversal (high 8.7, exploited in the wild)
- [CVE-2025-37164](https://insights.sbomify.com/CVE-2025-37164/): Hewlett Packard Enterprise (HPE) OneView Code Injection (critical 10.0, exploited in the wild)
- [CVE-2009-0556](https://insights.sbomify.com/CVE-2009-0556/): Microsoft Office PowerPoint Code Injection (high 8.8, exploited in the wild)
- [CVE-2025-14847](https://insights.sbomify.com/CVE-2025-14847/): MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency (high 8.7, exploited in the wild)
- [CVE-2023-52163](https://insights.sbomify.com/CVE-2023-52163/): Digiever DS-2105 Pro Missing Authorization (high 8.8, exploited in the wild)
- [CVE-2025-14733](https://insights.sbomify.com/CVE-2025-14733/): WatchGuard Firebox Out of Bounds Write (critical 9.3, exploited in the wild)
- [CVE-2025-59374](https://insights.sbomify.com/CVE-2025-59374/): ASUS Live Update Embedded Malicious Code (critical 9.3, exploited in the wild)
- [CVE-2025-40602](https://insights.sbomify.com/CVE-2025-40602/): SonicWall SMA1000 Missing Authorization (medium 6.6, exploited in the wild)
- [CVE-2025-20393](https://insights.sbomify.com/CVE-2025-20393/): Cisco Multiple Products Improper Input Validation (critical 10.0, exploited in the wild)
- [CVE-2025-59718](https://insights.sbomify.com/CVE-2025-59718/): Fortinet Multiple Products Improper Verification of Cryptographic Signature (critical 9.1, exploited in the wild)
- [CVE-2025-43529](https://insights.sbomify.com/CVE-2025-43529/): Apple Multiple Products Use-After-Free WebKit (high 8.8, exploited in the wild)
- [CVE-2025-14611](https://insights.sbomify.com/CVE-2025-14611/): Gladinet CentreStack and Triofox Hard Coded Cryptographic (high 7.1, exploited in the wild)
- [CVE-2025-14174](https://insights.sbomify.com/CVE-2025-14174/): Google Chromium Out of Bounds Memory Access (high 8.8, exploited in the wild)
- [CVE-2018-4063](https://insights.sbomify.com/CVE-2018-4063/): Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type (high 8.8, exploited in the wild)
- [CVE-2025-58360](https://insights.sbomify.com/CVE-2025-58360/): OSGeo GeoServer Improper Restriction of XML External Entity Reference (high 8.2, exploited in the wild)
- [CVE-2025-62221](https://insights.sbomify.com/CVE-2025-62221/): Microsoft Windows Use After Free (high 7.8, exploited in the wild)
- [CVE-2025-6218](https://insights.sbomify.com/CVE-2025-6218/): RARLAB WinRAR Path Traversal (high 7.8, exploited in the wild)
- [CVE-2025-66644](https://insights.sbomify.com/CVE-2025-66644/): Array Networks ArrayOS AG OS Command Injection (high 7.2, exploited in the wild)
- [CVE-2022-37055](https://insights.sbomify.com/CVE-2022-37055/): D-Link Routers Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2025-55182](https://insights.sbomify.com/CVE-2025-55182/): Meta React Server Components Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2021-26828](https://insights.sbomify.com/CVE-2021-26828/): OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type (high 8.8, exploited in the wild)
- [CVE-2025-48633](https://insights.sbomify.com/CVE-2025-48633/): Android Framework Information Disclosure (medium 5.5, exploited in the wild)
- [CVE-2025-48572](https://insights.sbomify.com/CVE-2025-48572/): Android Framework Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-26829](https://insights.sbomify.com/CVE-2021-26829/): OpenPLC ScadaBR Cross-site Scripting (medium 5.4, exploited in the wild)
- [CVE-2025-61757](https://insights.sbomify.com/CVE-2025-61757/): Oracle Fusion Middleware Missing Authentication for Critical Function (critical 9.8, exploited in the wild)
- [CVE-2025-13223](https://insights.sbomify.com/CVE-2025-13223/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2025-58034](https://insights.sbomify.com/CVE-2025-58034/): Fortinet FortiWeb OS Command Injection (medium 6.7, exploited in the wild)
- [CVE-2025-64446](https://insights.sbomify.com/CVE-2025-64446/): Fortinet FortiWeb Path Traversal (critical 9.4, exploited in the wild)
- [CVE-2025-9242](https://insights.sbomify.com/CVE-2025-9242/): WatchGuard Firebox Out-of-Bounds Write (critical 9.3, exploited in the wild)
- [CVE-2025-62215](https://insights.sbomify.com/CVE-2025-62215/): Microsoft Windows Race Condition (high 7.0, exploited in the wild)
- [CVE-2025-12480](https://insights.sbomify.com/CVE-2025-12480/): Gladinet Triofox Improper Access Control (critical 9.1, exploited in the wild)
- [CVE-2025-21042](https://insights.sbomify.com/CVE-2025-21042/): Samsung Mobile Devices Out-of-Bounds Write (high 8.8, exploited in the wild)
- [CVE-2025-48703](https://insights.sbomify.com/CVE-2025-48703/): CWP Control Web Panel OS Command Injection (critical 9.0, exploited in the wild)
- [CVE-2025-11371](https://insights.sbomify.com/CVE-2025-11371/): Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties (high 7.5, exploited in the wild)
- [CVE-2025-41244](https://insights.sbomify.com/CVE-2025-41244/): Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions (high 7.8, exploited in the wild)
- [CVE-2025-24893](https://insights.sbomify.com/CVE-2025-24893/): XWiki Platform Eval Injection (critical 9.8, exploited in the wild)
- [CVE-2025-6205](https://insights.sbomify.com/CVE-2025-6205/): Dassault Systèmes DELMIA Apriso Missing Authorization (critical 9.1, exploited in the wild)
- [CVE-2025-6204](https://insights.sbomify.com/CVE-2025-6204/): Dassault Systèmes DELMIA Apriso Code Injection (high 8.0, exploited in the wild)
- [CVE-2025-59287](https://insights.sbomify.com/CVE-2025-59287/): Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2025-54236](https://insights.sbomify.com/CVE-2025-54236/): Adobe Commerce and Magento Improper Input Validation (critical 9.1, exploited in the wild)
- [CVE-2025-61932](https://insights.sbomify.com/CVE-2025-61932/): Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel (critical 9.3, exploited in the wild)
- [CVE-2025-61884](https://insights.sbomify.com/CVE-2025-61884/): Oracle E-Business Suite Server-Side Request Forgery (SSRF) (high 7.5, exploited in the wild)
- [CVE-2025-33073](https://insights.sbomify.com/CVE-2025-33073/): Microsoft Windows SMB Client Improper Access Control (high 8.8, exploited in the wild)
- [CVE-2025-2747](https://insights.sbomify.com/CVE-2025-2747/): Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel (critical 9.8, exploited in the wild)
- [CVE-2025-2746](https://insights.sbomify.com/CVE-2025-2746/): Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel (critical 9.8, exploited in the wild)
- [CVE-2022-48503](https://insights.sbomify.com/CVE-2022-48503/): Apple Multiple Products Unspecified (high 8.8, exploited in the wild)
- [CVE-2025-54253](https://insights.sbomify.com/CVE-2025-54253/): Adobe Experience Manager Forms Code Execution (critical 10.0, exploited in the wild)
- [CVE-2025-59230](https://insights.sbomify.com/CVE-2025-59230/): Microsoft Windows Improper Access Control (high 7.8, exploited in the wild)
- [CVE-2025-47827](https://insights.sbomify.com/CVE-2025-47827/): IGEL OS Use of a Key Past its Expiration Date (medium 4.6, exploited in the wild)
- [CVE-2025-24990](https://insights.sbomify.com/CVE-2025-24990/): Microsoft Windows Untrusted Pointer Dereference (high 7.8, exploited in the wild)
- [CVE-2016-7836](https://insights.sbomify.com/CVE-2016-7836/): SKYSEA Client View Improper Authentication (critical 9.8, exploited in the wild)
- [CVE-2021-43798](https://insights.sbomify.com/CVE-2021-43798/): Grafana Path Traversal (high 7.5, exploited in the wild)
- [CVE-2025-27915](https://insights.sbomify.com/CVE-2025-27915/): Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting (medium 5.4, exploited in the wild)
- [CVE-2025-61882](https://insights.sbomify.com/CVE-2025-61882/): Oracle E-Business Suite Unspecified (critical 9.8, exploited in the wild)
- [CVE-2021-43226](https://insights.sbomify.com/CVE-2021-43226/): Microsoft Windows Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-22555](https://insights.sbomify.com/CVE-2021-22555/): Linux Kernel Heap Out-of-Bounds Write (high 8.3, exploited in the wild)
- [CVE-2013-3918](https://insights.sbomify.com/CVE-2013-3918/): Microsoft Windows Out-of-Bounds Write (high 8.8, exploited in the wild)
- [CVE-2011-3402](https://insights.sbomify.com/CVE-2011-3402/): Microsoft Windows Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2010-3962](https://insights.sbomify.com/CVE-2010-3962/): Microsoft Internet Explorer Uninitialized Memory Corruption (high 8.1, exploited in the wild)
- [CVE-2010-3765](https://insights.sbomify.com/CVE-2010-3765/): Mozilla Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2025-4008](https://insights.sbomify.com/CVE-2025-4008/): Smartbedded Meteobridge Command Injection (high 8.7, exploited in the wild)
- [CVE-2025-21043](https://insights.sbomify.com/CVE-2025-21043/): Samsung Mobile Devices Out-of-Bounds Write (high 8.8, exploited in the wild)
- [CVE-2017-1000353](https://insights.sbomify.com/CVE-2017-1000353/): Jenkins Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2015-7755](https://insights.sbomify.com/CVE-2015-7755/): Juniper ScreenOS Improper Authentication (critical 9.8, exploited in the wild)
- [CVE-2014-6278](https://insights.sbomify.com/CVE-2014-6278/): GNU Bash OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2025-59689](https://insights.sbomify.com/CVE-2025-59689/): Libraesva Email Security Gateway Command Injection (medium 6.1, exploited in the wild)
- [CVE-2025-32463](https://insights.sbomify.com/CVE-2025-32463/): Sudo Inclusion of Functionality from Untrusted Control Sphere (critical 9.3, exploited in the wild)
- [CVE-2025-20352](https://insights.sbomify.com/CVE-2025-20352/): Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution (high 7.7, exploited in the wild)
- [CVE-2025-10035](https://insights.sbomify.com/CVE-2025-10035/): Fortra GoAnywhere MFT Deserialization of Untrusted Data (critical 10.0, exploited in the wild)
- [CVE-2021-21311](https://insights.sbomify.com/CVE-2021-21311/): Adminer Server-Side Request Forgery (high 7.2, exploited in the wild)
- [CVE-2025-20362](https://insights.sbomify.com/CVE-2025-20362/): Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization (medium 6.5, exploited in the wild)
- [CVE-2025-20333](https://insights.sbomify.com/CVE-2025-20333/): Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow (critical 9.9, exploited in the wild)
- [CVE-2025-10585](https://insights.sbomify.com/CVE-2025-10585/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2025-5086](https://insights.sbomify.com/CVE-2025-5086/): Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data (critical 9.0, exploited in the wild)
- [CVE-2025-53690](https://insights.sbomify.com/CVE-2025-53690/): Sitecore Multiple Products Deserialization of Untrusted Data (critical 9.0, exploited in the wild)
- [CVE-2025-48543](https://insights.sbomify.com/CVE-2025-48543/): Android Runtime Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2025-38352](https://insights.sbomify.com/CVE-2025-38352/): Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition (high 7.8, exploited in the wild)
- [CVE-2025-9377](https://insights.sbomify.com/CVE-2025-9377/): TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection (high 8.6, exploited in the wild)
- [CVE-2023-50224](https://insights.sbomify.com/CVE-2023-50224/): TP-Link TL-WR841N Authentication Bypass by Spoofing (medium 6.5, exploited in the wild)
- [CVE-2025-55177](https://insights.sbomify.com/CVE-2025-55177/): Meta Platforms WhatsApp Incorrect Authorization (medium 5.4, exploited in the wild)
- [CVE-2020-24363](https://insights.sbomify.com/CVE-2020-24363/): TP-link TL-WA855RE Missing Authentication for Critical Function (high 8.8, exploited in the wild)
- [CVE-2025-57819](https://insights.sbomify.com/CVE-2025-57819/): Sangoma FreePBX Authentication Bypass (critical 10.0, exploited in the wild)
- [CVE-2025-7775](https://insights.sbomify.com/CVE-2025-7775/): Citrix NetScaler Memory Overflow (critical 9.2, exploited in the wild)
- [CVE-2025-48384](https://insights.sbomify.com/CVE-2025-48384/): Git Link Following (high 8.1, exploited in the wild)
- [CVE-2024-8069](https://insights.sbomify.com/CVE-2024-8069/): Citrix Session Recording Deserialization of Untrusted Data (medium 5.1, exploited in the wild)
- [CVE-2024-8068](https://insights.sbomify.com/CVE-2024-8068/): Citrix Session Recording Improper Privilege Management (medium 5.1, exploited in the wild)
- [CVE-2025-43300](https://insights.sbomify.com/CVE-2025-43300/): Apple iOS, iPadOS, and macOS Out-of-Bounds Write (critical 10.0, exploited in the wild)
- [CVE-2025-54948](https://insights.sbomify.com/CVE-2025-54948/): Trend Micro Apex One OS Command Injection (critical 9.4, exploited in the wild)
- [CVE-2025-8876](https://insights.sbomify.com/CVE-2025-8876/): N-able N-Central Command Injection (critical 9.4, exploited in the wild)
- [CVE-2025-8875](https://insights.sbomify.com/CVE-2025-8875/): N-able N-Central Insecure Deserialization (critical 9.4, exploited in the wild)
- [CVE-2025-8088](https://insights.sbomify.com/CVE-2025-8088/): RARLAB WinRAR Path Traversal (high 8.4, exploited in the wild)
- [CVE-2013-3893](https://insights.sbomify.com/CVE-2013-3893/): Microsoft Internet Explorer Resource Management Errors (high 8.8, exploited in the wild)
- [CVE-2007-0671](https://insights.sbomify.com/CVE-2007-0671/): Microsoft Office Excel Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2022-40799](https://insights.sbomify.com/CVE-2022-40799/): D-Link DNR-322L Download of Code Without Integrity Check (high 8.8, exploited in the wild)
- [CVE-2020-25079](https://insights.sbomify.com/CVE-2020-25079/): D-Link DCS-2530L and DCS-2670L Command Injection (high 8.8, exploited in the wild)
- [CVE-2020-25078](https://insights.sbomify.com/CVE-2020-25078/): D-Link DCS-2530L and DCS-2670L Devices Unspecified (high 7.5, exploited in the wild)
- [CVE-2025-20337](https://insights.sbomify.com/CVE-2025-20337/): Cisco Identity Services Engine Injection (critical 10.0, exploited in the wild)
- [CVE-2025-20281](https://insights.sbomify.com/CVE-2025-20281/): Cisco Identity Services Engine Injection (critical 10.0, exploited in the wild)
- [CVE-2023-2533](https://insights.sbomify.com/CVE-2023-2533/): PaperCut NG/MF Cross-Site Request Forgery (CSRF) (high 8.4, exploited in the wild)
- [CVE-2025-6558](https://insights.sbomify.com/CVE-2025-6558/): Google Chromium ANGLE and GPU Improper Input Validation (high 8.8, exploited in the wild)
- [CVE-2025-54309](https://insights.sbomify.com/CVE-2025-54309/): CrushFTP Unprotected Alternate Channel (critical 9.0, exploited in the wild)
- [CVE-2025-49706](https://insights.sbomify.com/CVE-2025-49706/): Microsoft SharePoint Improper Authentication (medium 6.5, exploited in the wild)
- [CVE-2025-49704](https://insights.sbomify.com/CVE-2025-49704/): Microsoft SharePoint Code Injection (high 8.8, exploited in the wild)
- [CVE-2025-2776](https://insights.sbomify.com/CVE-2025-2776/): SysAid On-Prem Improper Restriction of XML External Entity Reference (critical 9.3, exploited in the wild)
- [CVE-2025-2775](https://insights.sbomify.com/CVE-2025-2775/): SysAid On-Prem Improper Restriction of XML External Entity Reference (critical 9.3, exploited in the wild)
- [CVE-2025-53770](https://insights.sbomify.com/CVE-2025-53770/): Microsoft SharePoint Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2025-25257](https://insights.sbomify.com/CVE-2025-25257/): Fortinet FortiWeb SQL Injection (critical 9.6, exploited in the wild)
- [CVE-2025-47812](https://insights.sbomify.com/CVE-2025-47812/): Wing FTP Server Improper Neutralization of Null Byte or NUL Character (critical 10.0, exploited in the wild)
- [CVE-2025-5777](https://insights.sbomify.com/CVE-2025-5777/): Citrix NetScaler ADC and Gateway Out-of-Bounds Read (critical 9.3, exploited in the wild)
- [CVE-2019-9621](https://insights.sbomify.com/CVE-2019-9621/): Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) (high 7.5, exploited in the wild)
- [CVE-2019-5418](https://insights.sbomify.com/CVE-2019-5418/): Rails Ruby on Rails Path Traversal (high 7.5, exploited in the wild)
- [CVE-2016-10033](https://insights.sbomify.com/CVE-2016-10033/): PHPMailer Command Injection (critical 9.8, exploited in the wild)
- [CVE-2014-3931](https://insights.sbomify.com/CVE-2014-3931/): Multi-Router Looking Glass (MRLG) Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2025-6554](https://insights.sbomify.com/CVE-2025-6554/): Google Chromium V8 Type Confusion (high 8.1, exploited in the wild)
- [CVE-2025-48928](https://insights.sbomify.com/CVE-2025-48928/): TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere (medium 4.0, exploited in the wild)
- [CVE-2025-48927](https://insights.sbomify.com/CVE-2025-48927/): TeleMessage TM SGNL Initialization of a Resource with an Insecure Default (medium 5.3, exploited in the wild)
- [CVE-2025-6543](https://insights.sbomify.com/CVE-2025-6543/): Citrix NetScaler ADC and Gateway Buffer Overflow (critical 9.2, exploited in the wild)
- [CVE-2024-54085](https://insights.sbomify.com/CVE-2024-54085/): AMI MegaRAC SPx Authentication Bypass by Spoofing (critical 10.0, exploited in the wild)
- [CVE-2024-0769](https://insights.sbomify.com/CVE-2024-0769/): D-Link DIR-859 Router Path Traversal (medium 5.3, exploited in the wild)
- [CVE-2019-6693](https://insights.sbomify.com/CVE-2019-6693/): Fortinet FortiOS Use of Hard-Coded Credentials (medium 6.5, exploited in the wild)
- [CVE-2023-0386](https://insights.sbomify.com/CVE-2023-0386/): Linux Kernel Improper Ownership Management (high 7.8, exploited in the wild)
- [CVE-2025-43200](https://insights.sbomify.com/CVE-2025-43200/): Apple Multiple Products Unspecified (medium 4.2, exploited in the wild)
- [CVE-2023-33538](https://insights.sbomify.com/CVE-2023-33538/): TP-Link Multiple Routers Command Injection (high 8.8, exploited in the wild)
- [CVE-2025-33053](https://insights.sbomify.com/CVE-2025-33053/): Microsoft Windows External Control of File Name or Path (high 8.8, exploited in the wild)
- [CVE-2025-24016](https://insights.sbomify.com/CVE-2025-24016/): Wazuh Server Deserialization of Untrusted Data (critical 9.9, exploited in the wild)
- [CVE-2025-32433](https://insights.sbomify.com/CVE-2025-32433/): Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function (critical 10.0, exploited in the wild)
- [CVE-2024-42009](https://insights.sbomify.com/CVE-2024-42009/): RoundCube Webmail Cross-Site Scripting (critical 9.3, exploited in the wild)
- [CVE-2025-5419](https://insights.sbomify.com/CVE-2025-5419/): Google Chromium V8 Out-of-Bounds Read and Write (high 8.8, exploited in the wild)
- [CVE-2025-27038](https://insights.sbomify.com/CVE-2025-27038/): Qualcomm Multiple Chipsets Use-After-Free (high 7.5, exploited in the wild)
- [CVE-2025-21480](https://insights.sbomify.com/CVE-2025-21480/): Qualcomm Multiple Chipsets Incorrect Authorization (high 8.6, exploited in the wild)
- [CVE-2025-21479](https://insights.sbomify.com/CVE-2025-21479/): Qualcomm Multiple Chipsets Incorrect Authorization (high 8.6, exploited in the wild)
- [CVE-2025-3935](https://insights.sbomify.com/CVE-2025-3935/): ConnectWise ScreenConnect Improper Authentication (high 8.1, exploited in the wild)
- [CVE-2025-35939](https://insights.sbomify.com/CVE-2025-35939/): Craft CMS External Control of Assumed-Immutable Web Parameter (medium 6.9, exploited in the wild)
- [CVE-2024-56145](https://insights.sbomify.com/CVE-2024-56145/): Craft CMS Code Injection (critical 9.3, exploited in the wild)
- [CVE-2023-39780](https://insights.sbomify.com/CVE-2023-39780/): ASUS RT-AX55 Routers OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2021-32030](https://insights.sbomify.com/CVE-2021-32030/): ASUS Routers Improper Authentication (critical 9.8, exploited in the wild)
- [CVE-2025-4632](https://insights.sbomify.com/CVE-2025-4632/): Samsung MagicINFO 9 Server Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2025-4428](https://insights.sbomify.com/CVE-2025-4428/): Ivanti Endpoint Manager Mobile (EPMM) Code Injection (high 7.2, exploited in the wild)
- [CVE-2025-4427](https://insights.sbomify.com/CVE-2025-4427/): Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass (medium 5.3, exploited in the wild)
- [CVE-2025-27920](https://insights.sbomify.com/CVE-2025-27920/): Srimax Output Messenger Directory Traversal (high 7.2, exploited in the wild)
- [CVE-2024-27443](https://insights.sbomify.com/CVE-2024-27443/): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2024-11182](https://insights.sbomify.com/CVE-2024-11182/): MDaemon Email Server Cross-Site Scripting (XSS) (medium 5.3, exploited in the wild)
- [CVE-2023-38950](https://insights.sbomify.com/CVE-2023-38950/): ZKTeco BioTime Path Traversal (high 7.5, exploited in the wild)
- [CVE-2025-42999](https://insights.sbomify.com/CVE-2025-42999/): SAP NetWeaver Deserialization (critical 9.1, exploited in the wild)
- [CVE-2024-12987](https://insights.sbomify.com/CVE-2024-12987/): DrayTek Vigor Routers OS Command Injection (medium 6.9, exploited in the wild)
- [CVE-2025-32756](https://insights.sbomify.com/CVE-2025-32756/): Fortinet Multiple Products Stack-Based Buffer Overflow (critical 9.6, exploited in the wild)
- [CVE-2025-32709](https://insights.sbomify.com/CVE-2025-32709/): Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2025-32706](https://insights.sbomify.com/CVE-2025-32706/): Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2025-32701](https://insights.sbomify.com/CVE-2025-32701/): Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2025-30400](https://insights.sbomify.com/CVE-2025-30400/): Microsoft Windows DWM Core Library Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2025-30397](https://insights.sbomify.com/CVE-2025-30397/): Microsoft Windows Scripting Engine Type Confusion (high 7.5, exploited in the wild)
- [CVE-2025-47729](https://insights.sbomify.com/CVE-2025-47729/): TeleMessage TM SGNL Hidden Functionality (low 1.9, exploited in the wild)
- [CVE-2024-6047](https://insights.sbomify.com/CVE-2024-6047/): GeoVision Devices OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2024-11120](https://insights.sbomify.com/CVE-2024-11120/): GeoVision Devices OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2025-27363](https://insights.sbomify.com/CVE-2025-27363/): FreeType Out-of-Bounds Write (high 8.1, exploited in the wild)
- [CVE-2025-3248](https://insights.sbomify.com/CVE-2025-3248/): Langflow Missing Authentication (critical 9.8, exploited in the wild)
- [CVE-2025-34028](https://insights.sbomify.com/CVE-2025-34028/): Commvault Command Center Path Traversal (critical 9.3, exploited in the wild)
- [CVE-2024-58136](https://insights.sbomify.com/CVE-2024-58136/): Yiiframework Yii Improper Protection of Alternate Path (critical 9.0, exploited in the wild)
- [CVE-2024-38475](https://insights.sbomify.com/CVE-2024-38475/): Apache HTTP Server Improper Escaping of Output (critical 9.1, exploited in the wild)
- [CVE-2023-44221](https://insights.sbomify.com/CVE-2023-44221/): SonicWall SMA100 Appliances OS Command Injection (high 7.2, exploited in the wild)
- [CVE-2025-31324](https://insights.sbomify.com/CVE-2025-31324/): SAP NetWeaver Unrestricted File Upload (critical 10.0, exploited in the wild)
- [CVE-2025-42599](https://insights.sbomify.com/CVE-2025-42599/): Qualitia Active! Mail Stack-Based Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2025-3928](https://insights.sbomify.com/CVE-2025-3928/): Commvault Web Server Unspecified (high 8.7, exploited in the wild)
- [CVE-2025-1976](https://insights.sbomify.com/CVE-2025-1976/): Broadcom Brocade Fabric OS Code Injection (high 8.6, exploited in the wild)
- [CVE-2025-31201](https://insights.sbomify.com/CVE-2025-31201/): Apple Multiple Products Arbitrary Read and Write (critical 9.8, exploited in the wild)
- [CVE-2025-31200](https://insights.sbomify.com/CVE-2025-31200/): Apple Multiple Products Memory Corruption (critical 9.8, exploited in the wild)
- [CVE-2025-24054](https://insights.sbomify.com/CVE-2025-24054/): Microsoft Windows NTLM Hash Disclosure Spoofing (medium 6.5, exploited in the wild)
- [CVE-2021-20035](https://insights.sbomify.com/CVE-2021-20035/): SonicWall SMA100 Appliances OS Command Injection (medium 6.5, exploited in the wild)
- [CVE-2024-53197](https://insights.sbomify.com/CVE-2024-53197/): Linux Kernel Out-of-Bounds Access (high 7.8, exploited in the wild)
- [CVE-2024-53150](https://insights.sbomify.com/CVE-2024-53150/): Linux Kernel Out-of-Bounds Read (high 7.1, exploited in the wild)
- [CVE-2025-30406](https://insights.sbomify.com/CVE-2025-30406/): Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key (critical 9.0, exploited in the wild)
- [CVE-2025-29824](https://insights.sbomify.com/CVE-2025-29824/): Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2025-31161](https://insights.sbomify.com/CVE-2025-31161/): CrushFTP Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2025-22457](https://insights.sbomify.com/CVE-2025-22457/): Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow (critical 9.0, exploited in the wild)
- [CVE-2025-24813](https://insights.sbomify.com/CVE-2025-24813/): Apache Tomcat Path Equivalence (critical 10.0, exploited in the wild)
- [CVE-2024-20439](https://insights.sbomify.com/CVE-2024-20439/): Cisco Smart Licensing Utility Static Credential (critical 9.8, exploited in the wild)
- [CVE-2025-2783](https://insights.sbomify.com/CVE-2025-2783/): Google Chromium Mojo Sandbox Escape (high 8.3, exploited in the wild)
- [CVE-2019-9875](https://insights.sbomify.com/CVE-2019-9875/): Sitecore CMS and Experience Platform (XP) Deserialization (high 8.8, exploited in the wild)
- [CVE-2019-9874](https://insights.sbomify.com/CVE-2019-9874/): Sitecore CMS and Experience Platform (XP) Deserialization (critical 9.8, exploited in the wild)
- [CVE-2025-30154](https://insights.sbomify.com/CVE-2025-30154/): reviewdog/action-setup GitHub Action Embedded Malicious Code (high 8.6, exploited in the wild)
- [CVE-2025-1316](https://insights.sbomify.com/CVE-2025-1316/): Edimax IC-7100 IP Camera OS Command Injection (critical 9.3, exploited in the wild)
- [CVE-2024-48248](https://insights.sbomify.com/CVE-2024-48248/): NAKIVO Backup and Replication Absolute Path Traversal (high 8.6, exploited in the wild)
- [CVE-2017-12637](https://insights.sbomify.com/CVE-2017-12637/): SAP NetWeaver Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2025-30066](https://insights.sbomify.com/CVE-2025-30066/): tj-actions/changed-files GitHub Action Embedded Malicious Code (high 8.6, exploited in the wild)
- [CVE-2025-24472](https://insights.sbomify.com/CVE-2025-24472/): Fortinet FortiOS and FortiProxy Authentication Bypass (high 8.1, exploited in the wild)
- [CVE-2025-24201](https://insights.sbomify.com/CVE-2025-24201/): Apple Multiple Products WebKit Out-of-Bounds Write (critical 10.0, exploited in the wild)
- [CVE-2025-21590](https://insights.sbomify.com/CVE-2025-21590/): Juniper Junos OS Improper Isolation or Compartmentalization (medium 6.7, exploited in the wild)
- [CVE-2025-26633](https://insights.sbomify.com/CVE-2025-26633/): Microsoft Windows Management Console (MMC) Improper Neutralization (high 7.0, exploited in the wild)
- [CVE-2025-24993](https://insights.sbomify.com/CVE-2025-24993/): Microsoft Windows NTFS Heap-Based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2025-24991](https://insights.sbomify.com/CVE-2025-24991/): Microsoft Windows NTFS Out-Of-Bounds Read (medium 5.5, exploited in the wild)
- [CVE-2025-24985](https://insights.sbomify.com/CVE-2025-24985/): Microsoft Windows Fast FAT File System Driver Integer Overflow (high 7.8, exploited in the wild)
- [CVE-2025-24984](https://insights.sbomify.com/CVE-2025-24984/): Microsoft Windows NTFS Information Disclosure (medium 4.6, exploited in the wild)
- [CVE-2025-24983](https://insights.sbomify.com/CVE-2025-24983/): Microsoft Windows Win32k Use-After-Free (high 7.0, exploited in the wild)
- [CVE-2025-25181](https://insights.sbomify.com/CVE-2025-25181/): Advantive VeraCore SQL Injection (medium 5.8, exploited in the wild)
- [CVE-2024-57968](https://insights.sbomify.com/CVE-2024-57968/): Advantive VeraCore Unrestricted File Upload (critical 9.9, exploited in the wild)
- [CVE-2024-13161](https://insights.sbomify.com/CVE-2024-13161/): Ivanti Endpoint Manager (EPM) Absolute Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2024-13160](https://insights.sbomify.com/CVE-2024-13160/): Ivanti Endpoint Manager (EPM) Absolute Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2024-13159](https://insights.sbomify.com/CVE-2024-13159/): Ivanti Endpoint Manager (EPM) Absolute Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2025-22226](https://insights.sbomify.com/CVE-2025-22226/): VMware ESXi, Workstation, and Fusion Information Disclosure (high 7.1, exploited in the wild)
- [CVE-2025-22225](https://insights.sbomify.com/CVE-2025-22225/): VMware ESXi Arbitrary Write (high 8.2, exploited in the wild)
- [CVE-2025-22224](https://insights.sbomify.com/CVE-2025-22224/): VMware ESXi and Workstation TOCTOU Race Condition (critical 9.3, exploited in the wild)
- [CVE-2024-50302](https://insights.sbomify.com/CVE-2024-50302/): Linux Kernel Use of Uninitialized Resource (medium 5.5, exploited in the wild)
- [CVE-2024-4885](https://insights.sbomify.com/CVE-2024-4885/): Progress WhatsUp Gold Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2023-20118](https://insights.sbomify.com/CVE-2023-20118/): Cisco Small Business RV Series Routers Command Injection (medium 6.5, exploited in the wild)
- [CVE-2022-43939](https://insights.sbomify.com/CVE-2022-43939/): Hitachi Vantara Pentaho BA Server Authorization Bypass (high 8.6, exploited in the wild)
- [CVE-2022-43769](https://insights.sbomify.com/CVE-2022-43769/): Hitachi Vantara Pentaho BA Server Special Element Injection (high 8.8, exploited in the wild)
- [CVE-2018-8639](https://insights.sbomify.com/CVE-2018-8639/): Microsoft Windows Win32k Improper Resource Shutdown or Release (high 8.4, exploited in the wild)
- [CVE-2024-49035](https://insights.sbomify.com/CVE-2024-49035/): Microsoft Partner Center Improper Access Control (high 8.7, exploited in the wild)
- [CVE-2023-34192](https://insights.sbomify.com/CVE-2023-34192/): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) (critical 9.0, exploited in the wild)
- [CVE-2024-20953](https://insights.sbomify.com/CVE-2024-20953/): Oracle Agile Product Lifecycle Management (PLM) Deserialization (high 8.8, exploited in the wild)
- [CVE-2017-3066](https://insights.sbomify.com/CVE-2017-3066/): Adobe ColdFusion Deserialization (critical 9.8, exploited in the wild)
- [CVE-2025-24989](https://insights.sbomify.com/CVE-2025-24989/): Microsoft Power Pages Improper Access Control (high 8.2, exploited in the wild)
- [CVE-2025-23209](https://insights.sbomify.com/CVE-2025-23209/): Craft CMS Code Injection (high 8.1, exploited in the wild)
- [CVE-2025-0111](https://insights.sbomify.com/CVE-2025-0111/): Palo Alto Networks PAN-OS File Read (high 7.1, exploited in the wild)
- [CVE-2025-0108](https://insights.sbomify.com/CVE-2025-0108/): Palo Alto Networks PAN-OS Authentication Bypass (high 8.8, exploited in the wild)
- [CVE-2024-53704](https://insights.sbomify.com/CVE-2024-53704/): SonicWall SonicOS SSLVPN Improper Authentication (high 8.2, exploited in the wild)
- [CVE-2024-57727](https://insights.sbomify.com/CVE-2024-57727/): SimpleHelp Path Traversal (critical 9.1, exploited in the wild)
- [CVE-2025-24200](https://insights.sbomify.com/CVE-2025-24200/): Apple iOS and iPadOS Incorrect Authorization (medium 6.1, exploited in the wild)
- [CVE-2024-41710](https://insights.sbomify.com/CVE-2024-41710/): Mitel SIP Phones Argument Injection (medium 6.8, exploited in the wild)
- [CVE-2025-21418](https://insights.sbomify.com/CVE-2025-21418/): Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2025-21391](https://insights.sbomify.com/CVE-2025-21391/): Microsoft Windows Storage Link Following (high 7.1, exploited in the wild)
- [CVE-2024-40891](https://insights.sbomify.com/CVE-2024-40891/): Zyxel DSL CPE OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2024-40890](https://insights.sbomify.com/CVE-2024-40890/): Zyxel DSL CPE OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2025-0994](https://insights.sbomify.com/CVE-2025-0994/): Trimble Cityworks Deserialization (high 8.6, exploited in the wild)
- [CVE-2025-0411](https://insights.sbomify.com/CVE-2025-0411/): 7-Zip Mark of the Web Bypass (high 7.0, exploited in the wild)
- [CVE-2024-21413](https://insights.sbomify.com/CVE-2024-21413/): Microsoft Outlook Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2022-23748](https://insights.sbomify.com/CVE-2022-23748/): Dante Discovery Process Control (high 7.8, exploited in the wild)
- [CVE-2020-29574](https://insights.sbomify.com/CVE-2020-29574/): CyberoamOS (CROS) SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2020-15069](https://insights.sbomify.com/CVE-2020-15069/): Sophos XG Firewall Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2024-53104](https://insights.sbomify.com/CVE-2024-53104/): Linux Kernel Out-of-Bounds Write (high 7.8, exploited in the wild)
- [CVE-2024-45195](https://insights.sbomify.com/CVE-2024-45195/): Apache OFBiz Forced Browsing (critical 9.8, exploited in the wild)
- [CVE-2024-29059](https://insights.sbomify.com/CVE-2024-29059/): Microsoft .NET Framework Information Disclosure (high 7.5, exploited in the wild)
- [CVE-2018-9276](https://insights.sbomify.com/CVE-2018-9276/): Paessler PRTG Network Monitor OS Command Injection (high 7.2, exploited in the wild)
- [CVE-2018-19410](https://insights.sbomify.com/CVE-2018-19410/): Paessler PRTG Network Monitor Local File Inclusion (critical 9.8, exploited in the wild)
- [CVE-2025-24085](https://insights.sbomify.com/CVE-2025-24085/): Apple Multiple Products Use-After-Free (critical 10.0, exploited in the wild)
- [CVE-2025-23006](https://insights.sbomify.com/CVE-2025-23006/): SonicWall SMA1000 Appliances Deserialization (critical 9.8, exploited in the wild)
- [CVE-2020-11023](https://insights.sbomify.com/CVE-2020-11023/): JQuery Cross-Site Scripting (XSS) (medium 6.9, exploited in the wild)
- [CVE-2024-50603](https://insights.sbomify.com/CVE-2024-50603/): Aviatrix Controllers OS Command Injection (critical 10.0, exploited in the wild)
- [CVE-2025-21335](https://insights.sbomify.com/CVE-2025-21335/): Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2025-21334](https://insights.sbomify.com/CVE-2025-21334/): Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2025-21333](https://insights.sbomify.com/CVE-2025-21333/): Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2024-55591](https://insights.sbomify.com/CVE-2024-55591/): Fortinet FortiOS and FortiProxy Authentication Bypass (critical 9.6, exploited in the wild)
- [CVE-2024-12686](https://insights.sbomify.com/CVE-2024-12686/): BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection (medium 6.6, exploited in the wild)
- [CVE-2023-48365](https://insights.sbomify.com/CVE-2023-48365/): Qlik Sense HTTP Tunneling (critical 9.6, exploited in the wild)
- [CVE-2025-0282](https://insights.sbomify.com/CVE-2025-0282/): Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow (critical 9.0, exploited in the wild)
- [CVE-2024-55550](https://insights.sbomify.com/CVE-2024-55550/): Mitel MiCollab Path Traversal (medium 4.4, exploited in the wild)
- [CVE-2024-41713](https://insights.sbomify.com/CVE-2024-41713/): Mitel MiCollab Path Traversal (critical 9.1, exploited in the wild)
- [CVE-2020-2883](https://insights.sbomify.com/CVE-2020-2883/): Oracle WebLogic Server Unspecified (critical 9.8, exploited in the wild)
- [CVE-2024-3393](https://insights.sbomify.com/CVE-2024-3393/): Palo Alto Networks PAN-OS Malicious DNS Packet (high 8.7, exploited in the wild)
- [CVE-2021-44207](https://insights.sbomify.com/CVE-2021-44207/): Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability (high 8.1, exploited in the wild)
- [CVE-2024-12356](https://insights.sbomify.com/CVE-2024-12356/): BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability (critical 9.8, exploited in the wild)
- [CVE-2022-23227](https://insights.sbomify.com/CVE-2022-23227/): NUUO NVRmini2 Devices Missing Authentication Vulnerability (critical 9.8, exploited in the wild)
- [CVE-2021-40407](https://insights.sbomify.com/CVE-2021-40407/): Reolink RLC-410W IP Camera OS Command Injection Vulnerability (critical 9.1, exploited in the wild)
- [CVE-2019-11001](https://insights.sbomify.com/CVE-2019-11001/): Reolink Multiple IP Cameras OS Command Injection (high 7.2, exploited in the wild)
- [CVE-2018-14933](https://insights.sbomify.com/CVE-2018-14933/): NUUO NVRmini Devices OS Command Injection Vulnerability (critical 9.8, exploited in the wild)
- [CVE-2024-55956](https://insights.sbomify.com/CVE-2024-55956/): Cleo Multiple Products Unauthenticated File Upload (critical 9.8, exploited in the wild)
- [CVE-2024-35250](https://insights.sbomify.com/CVE-2024-35250/): Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability (high 7.8, exploited in the wild)
- [CVE-2024-20767](https://insights.sbomify.com/CVE-2024-20767/): Adobe ColdFusion Improper Access Control (high 7.4, exploited in the wild)
- [CVE-2024-50623](https://insights.sbomify.com/CVE-2024-50623/): Cleo Multiple Products Unrestricted File Upload (critical 9.8, exploited in the wild)
- [CVE-2024-49138](https://insights.sbomify.com/CVE-2024-49138/): Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2024-51378](https://insights.sbomify.com/CVE-2024-51378/): CyberPanel Incorrect Default Permissions (critical 10.0, exploited in the wild)
- [CVE-2024-11680](https://insights.sbomify.com/CVE-2024-11680/): ProjectSend Improper Authentication (critical 9.8, exploited in the wild)
- [CVE-2024-11667](https://insights.sbomify.com/CVE-2024-11667/): Zyxel Multiple Firewalls Path Traversal (high 7.5, exploited in the wild)
- [CVE-2023-45727](https://insights.sbomify.com/CVE-2023-45727/): North Grid Proself Improper Restriction of XML External Entity (XXE) Reference (high 7.5, exploited in the wild)
- [CVE-2023-28461](https://insights.sbomify.com/CVE-2023-28461/): Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function (critical 9.8, exploited in the wild)
- [CVE-2024-44309](https://insights.sbomify.com/CVE-2024-44309/): Apple Multiple Products Cross-Site Scripting (XSS) (medium 6.3, exploited in the wild)
- [CVE-2024-44308](https://insights.sbomify.com/CVE-2024-44308/): Apple Multiple Products Code Execution (high 8.8, exploited in the wild)
- [CVE-2024-21287](https://insights.sbomify.com/CVE-2024-21287/): Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization (high 7.5, exploited in the wild)
- [CVE-2024-38813](https://insights.sbomify.com/CVE-2024-38813/): VMware vCenter Server Privilege Escalation (high 7.5, exploited in the wild)
- [CVE-2024-38812](https://insights.sbomify.com/CVE-2024-38812/): VMware vCenter Server Heap-Based Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2024-9474](https://insights.sbomify.com/CVE-2024-9474/): Palo Alto Networks PAN-OS Management Interface OS Command Injection (medium 6.9, exploited in the wild)
- [CVE-2024-1212](https://insights.sbomify.com/CVE-2024-1212/): Progress Kemp LoadMaster OS Command Injection (critical 10.0, exploited in the wild)
- [CVE-2024-0012](https://insights.sbomify.com/CVE-2024-0012/): Palo Alto Networks PAN-OS Management Interface Authentication Bypass (critical 9.3, exploited in the wild)
- [CVE-2024-9465](https://insights.sbomify.com/CVE-2024-9465/): Palo Alto Networks Expedition SQL Injection (critical 9.2, exploited in the wild)
- [CVE-2024-9463](https://insights.sbomify.com/CVE-2024-9463/): Palo Alto Networks Expedition OS Command Injection (critical 9.9, exploited in the wild)
- [CVE-2024-49039](https://insights.sbomify.com/CVE-2024-49039/): Microsoft Windows Task Scheduler Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2024-43451](https://insights.sbomify.com/CVE-2024-43451/): Microsoft Windows NTLMv2 Hash Disclosure Spoofing (medium 6.5, exploited in the wild)
- [CVE-2021-41277](https://insights.sbomify.com/CVE-2021-41277/): Metabase GeoJSON API Local File Inclusion (critical 10.0, exploited in the wild)
- [CVE-2021-26086](https://insights.sbomify.com/CVE-2021-26086/): Atlassian Jira Server and Data Center Path Traversal (medium 5.3, exploited in the wild)
- [CVE-2014-2120](https://insights.sbomify.com/CVE-2014-2120/): Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) (medium 5.4, exploited in the wild)
- [CVE-2024-5910](https://insights.sbomify.com/CVE-2024-5910/): Palo Alto Networks Expedition Missing Authentication (critical 9.3, exploited in the wild)
- [CVE-2024-51567](https://insights.sbomify.com/CVE-2024-51567/): CyberPanel Incorrect Default Permissions (critical 10.0, exploited in the wild)
- [CVE-2024-43093](https://insights.sbomify.com/CVE-2024-43093/): Android Framework Privilege Escalation (high 7.3, exploited in the wild)
- [CVE-2019-16278](https://insights.sbomify.com/CVE-2019-16278/): Nostromo nhttpd Directory Traversal (critical 9.8, exploited in the wild)
- [CVE-2024-8957](https://insights.sbomify.com/CVE-2024-8957/): PTZOptics PT30X-SDI/NDI Cameras OS Command Injection (high 7.2, exploited in the wild)
- [CVE-2024-8956](https://insights.sbomify.com/CVE-2024-8956/): PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass (critical 9.1, exploited in the wild)
- [CVE-2024-37383](https://insights.sbomify.com/CVE-2024-37383/): RoundCube Webmail Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2024-20481](https://insights.sbomify.com/CVE-2024-20481/): Cisco ASA and FTD Denial-of-Service (medium 5.8, exploited in the wild)
- [CVE-2024-47575](https://insights.sbomify.com/CVE-2024-47575/): Fortinet FortiManager Missing Authentication (critical 9.8, exploited in the wild)
- [CVE-2024-38094](https://insights.sbomify.com/CVE-2024-38094/): Microsoft SharePoint Deserialization (high 7.2, exploited in the wild)
- [CVE-2024-9537](https://insights.sbomify.com/CVE-2024-9537/): ScienceLogic SL1 Unspecified (critical 9.3, exploited in the wild)
- [CVE-2024-40711](https://insights.sbomify.com/CVE-2024-40711/): Veeam Backup and Replication Deserialization (critical 9.8, exploited in the wild)
- [CVE-2024-9680](https://insights.sbomify.com/CVE-2024-9680/): Mozilla Firefox Use-After-Free (critical 9.8, exploited in the wild)
- [CVE-2024-30088](https://insights.sbomify.com/CVE-2024-30088/): Microsoft Windows Kernel TOCTOU Race Condition (high 7.0, exploited in the wild)
- [CVE-2024-28987](https://insights.sbomify.com/CVE-2024-28987/): SolarWinds Web Help Desk Hardcoded Credential (critical 9.1, exploited in the wild)
- [CVE-2024-9380](https://insights.sbomify.com/CVE-2024-9380/): Ivanti Cloud Services Appliance (CSA) OS Command Injection (high 7.2, exploited in the wild)
- [CVE-2024-9379](https://insights.sbomify.com/CVE-2024-9379/): Ivanti Cloud Services Appliance (CSA) SQL Injection (medium 6.5, exploited in the wild)
- [CVE-2024-23113](https://insights.sbomify.com/CVE-2024-23113/): Fortinet Multiple Products Format String (critical 9.8, exploited in the wild)
- [CVE-2024-43573](https://insights.sbomify.com/CVE-2024-43573/): Microsoft Windows MSHTML Platform Spoofing (medium 6.5, exploited in the wild)
- [CVE-2024-43572](https://insights.sbomify.com/CVE-2024-43572/): Microsoft Windows Management Console Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2024-43047](https://insights.sbomify.com/CVE-2024-43047/): Qualcomm Multiple Chipsets Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2024-45519](https://insights.sbomify.com/CVE-2024-45519/): Synacor Zimbra Collaboration Suite (ZCS) Command Execution (critical 10.0, exploited in the wild)
- [CVE-2024-29824](https://insights.sbomify.com/CVE-2024-29824/): Ivanti Endpoint Manager (EPM) SQL Injection (critical 9.6, exploited in the wild)
- [CVE-2023-25280](https://insights.sbomify.com/CVE-2023-25280/): D-Link DIR-820 Router OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2020-15415](https://insights.sbomify.com/CVE-2020-15415/): DrayTek Multiple Vigor Routers OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2019-0344](https://insights.sbomify.com/CVE-2019-0344/): SAP Commerce Cloud Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2024-7593](https://insights.sbomify.com/CVE-2024-7593/): Ivanti Virtual Traffic Manager Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2024-8963](https://insights.sbomify.com/CVE-2024-8963/): Ivanti Cloud Services Appliance (CSA) Path Traversal (critical 9.4, exploited in the wild)
- [CVE-2024-27348](https://insights.sbomify.com/CVE-2024-27348/): Apache HugeGraph-Server Improper Access Control (critical 9.8, exploited in the wild)
- [CVE-2022-21445](https://insights.sbomify.com/CVE-2022-21445/): Oracle ADF Faces Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2020-14644](https://insights.sbomify.com/CVE-2020-14644/): Oracle WebLogic Server Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-0618](https://insights.sbomify.com/CVE-2020-0618/): Microsoft SQL Server Reporting Services Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-0502](https://insights.sbomify.com/CVE-2014-0502/): Adobe Flash Player Double Free Vulnerablity (high 8.8, exploited in the wild)
- [CVE-2014-0497](https://insights.sbomify.com/CVE-2014-0497/): Adobe Flash Player Integer Underflow Vulnerablity (high 8.8, exploited in the wild)
- [CVE-2013-0648](https://insights.sbomify.com/CVE-2013-0648/): Adobe Flash Player Code Execution (high 8.8, exploited in the wild)
- [CVE-2013-0643](https://insights.sbomify.com/CVE-2013-0643/): Adobe Flash Player Incorrect Default Permissions (high 8.8, exploited in the wild)
- [CVE-2024-6670](https://insights.sbomify.com/CVE-2024-6670/): Progress WhatsUp Gold SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2024-43461](https://insights.sbomify.com/CVE-2024-43461/): Microsoft Windows MSHTML Platform Spoofing (high 8.8, exploited in the wild)
- [CVE-2024-8190](https://insights.sbomify.com/CVE-2024-8190/): Ivanti Cloud Services Appliance OS Command Injection (high 7.2, exploited in the wild)
- [CVE-2024-38226](https://insights.sbomify.com/CVE-2024-38226/): Microsoft Publisher Protection Mechanism Failure (high 7.3, exploited in the wild)
- [CVE-2024-38217](https://insights.sbomify.com/CVE-2024-38217/): Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure (medium 5.4, exploited in the wild)
- [CVE-2024-38014](https://insights.sbomify.com/CVE-2024-38014/): Microsoft Windows Installer Improper Privilege Management (high 7.8, exploited in the wild)
- [CVE-2024-40766](https://insights.sbomify.com/CVE-2024-40766/): SonicWall SonicOS Improper Access Control (critical 9.3, exploited in the wild)
- [CVE-2017-1000253](https://insights.sbomify.com/CVE-2017-1000253/): Linux Kernel PIE Stack Buffer Corruption Vulnerability (high 7.8, exploited in the wild)
- [CVE-2016-3714](https://insights.sbomify.com/CVE-2016-3714/): ImageMagick Improper Input Validation (high 8.4, exploited in the wild)
- [CVE-2024-7262](https://insights.sbomify.com/CVE-2024-7262/): Kingsoft WPS Office Path Traversal (critical 9.3, exploited in the wild)
- [CVE-2021-20124](https://insights.sbomify.com/CVE-2021-20124/): Draytek VigorConnect Path Traversal Vulnerability (high 7.5, exploited in the wild)
- [CVE-2021-20123](https://insights.sbomify.com/CVE-2021-20123/): Draytek VigorConnect Path Traversal Vulnerability (high 7.5, exploited in the wild)
- [CVE-2024-7965](https://insights.sbomify.com/CVE-2024-7965/): Google Chromium V8 Inappropriate Implementation (high 8.8, exploited in the wild)
- [CVE-2024-38856](https://insights.sbomify.com/CVE-2024-38856/): Apache OFBiz Incorrect Authorization (high 8.1, exploited in the wild)
- [CVE-2024-7971](https://insights.sbomify.com/CVE-2024-7971/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2024-39717](https://insights.sbomify.com/CVE-2024-39717/): Versa Director Dangerous File Type Upload (medium 6.6, exploited in the wild)
- [CVE-2022-0185](https://insights.sbomify.com/CVE-2022-0185/): Linux Kernel Heap-Based Buffer Overflow (high 8.4, exploited in the wild)
- [CVE-2021-33045](https://insights.sbomify.com/CVE-2021-33045/): Dahua IP Camera Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2021-33044](https://insights.sbomify.com/CVE-2021-33044/): Dahua IP Camera Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2021-31196](https://insights.sbomify.com/CVE-2021-31196/): Microsoft Exchange Server Information Disclosure (high 7.2, exploited in the wild)
- [CVE-2024-23897](https://insights.sbomify.com/CVE-2024-23897/): Jenkins Command Line Interface (CLI) Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2024-28986](https://insights.sbomify.com/CVE-2024-28986/): SolarWinds Web Help Desk Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2024-38213](https://insights.sbomify.com/CVE-2024-38213/): Microsoft Windows SmartScreen Security Feature Bypass (medium 6.5, exploited in the wild)
- [CVE-2024-38193](https://insights.sbomify.com/CVE-2024-38193/): Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2024-38189](https://insights.sbomify.com/CVE-2024-38189/): Microsoft Project Remote Code Execution Vulnerability (high 8.8, exploited in the wild)
- [CVE-2024-38178](https://insights.sbomify.com/CVE-2024-38178/): Microsoft Windows Scripting Engine Memory Corruption (high 7.5, exploited in the wild)
- [CVE-2024-38107](https://insights.sbomify.com/CVE-2024-38107/): Microsoft Windows Power Dependency Coordinator Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2024-38106](https://insights.sbomify.com/CVE-2024-38106/): Microsoft Windows Kernel Privilege Escalation (high 7.0, exploited in the wild)
- [CVE-2024-36971](https://insights.sbomify.com/CVE-2024-36971/): Android Kernel Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2024-32113](https://insights.sbomify.com/CVE-2024-32113/): Apache OFBiz Path Traversal (critical 9.1, exploited in the wild)
- [CVE-2018-0824](https://insights.sbomify.com/CVE-2018-0824/): Microsoft COM for Windows Deserialization of Untrusted Data (high 7.5, exploited in the wild)
- [CVE-2024-37085](https://insights.sbomify.com/CVE-2024-37085/): VMware ESXi Authentication Bypass (medium 6.8, exploited in the wild)
- [CVE-2024-5217](https://insights.sbomify.com/CVE-2024-5217/): ServiceNow Incomplete List of Disallowed Inputs (critical 9.2, exploited in the wild)
- [CVE-2024-4879](https://insights.sbomify.com/CVE-2024-4879/): ServiceNow Improper Input Validation (critical 9.3, exploited in the wild)
- [CVE-2023-45249](https://insights.sbomify.com/CVE-2023-45249/): Acronis Cyber Infrastructure (ACI) Insecure Default Password (critical 9.8, exploited in the wild)
- [CVE-2024-39891](https://insights.sbomify.com/CVE-2024-39891/): Twilio Authy Information Disclosure (medium 5.3, exploited in the wild)
- [CVE-2012-4792](https://insights.sbomify.com/CVE-2012-4792/): Microsoft Internet Explorer Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2024-34102](https://insights.sbomify.com/CVE-2024-34102/): Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) (critical 9.8, exploited in the wild)
- [CVE-2024-28995](https://insights.sbomify.com/CVE-2024-28995/): SolarWinds Serv-U Path Traversal Vulnerability (high 8.6, exploited in the wild)
- [CVE-2022-22948](https://insights.sbomify.com/CVE-2022-22948/): VMware vCenter Server Incorrect Default File Permissions Vulnerability (medium 6.5, exploited in the wild)
- [CVE-2024-36401](https://insights.sbomify.com/CVE-2024-36401/): OSGeo GeoServer GeoTools Eval Injection (critical 9.8, exploited in the wild)
- [CVE-2024-38112](https://insights.sbomify.com/CVE-2024-38112/): Microsoft Windows MSHTML Platform Spoofing (high 7.5, exploited in the wild)
- [CVE-2024-38080](https://insights.sbomify.com/CVE-2024-38080/): Microsoft Windows Hyper-V Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2024-23692](https://insights.sbomify.com/CVE-2024-23692/): Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine (critical 9.8, exploited in the wild)
- [CVE-2024-20399](https://insights.sbomify.com/CVE-2024-20399/): Cisco NX-OS Command Injection (medium 6.0, exploited in the wild)
- [CVE-2022-2586](https://insights.sbomify.com/CVE-2022-2586/): Linux Kernel Use-After-Free (medium 5.3, exploited in the wild)
- [CVE-2022-24816](https://insights.sbomify.com/CVE-2022-24816/): OSGeo GeoServer JAI-EXT Code Injection (critical 10.0, exploited in the wild)
- [CVE-2020-13965](https://insights.sbomify.com/CVE-2020-13965/): Roundcube Webmail Cross-Site Scripting (XSS) (medium 6.3, exploited in the wild)
- [CVE-2024-4358](https://insights.sbomify.com/CVE-2024-4358/): Progress Telerik Report Server Authentication Bypass by Spoofing (critical 9.8, exploited in the wild)
- [CVE-2024-32896](https://insights.sbomify.com/CVE-2024-32896/): Android Pixel Privilege Escalation (high 8.1, exploited in the wild)
- [CVE-2024-26169](https://insights.sbomify.com/CVE-2024-26169/): Microsoft Windows Error Reporting Service Improper Privilege Management (high 7.8, exploited in the wild)
- [CVE-2024-4610](https://insights.sbomify.com/CVE-2024-4610/): Arm Mali GPU Kernel Driver Use-After-Free (high 7.4, exploited in the wild)
- [CVE-2024-4577](https://insights.sbomify.com/CVE-2024-4577/): PHP-CGI OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2017-3506](https://insights.sbomify.com/CVE-2017-3506/): Oracle WebLogic Server OS Command Injection (high 7.4, exploited in the wild)
- [CVE-2024-24919](https://insights.sbomify.com/CVE-2024-24919/): Check Point Quantum Security Gateways Information Disclosure (high 8.6, exploited in the wild)
- [CVE-2024-1086](https://insights.sbomify.com/CVE-2024-1086/): Linux Kernel Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2024-4978](https://insights.sbomify.com/CVE-2024-4978/): Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code (high 8.7, exploited in the wild)
- [CVE-2024-5274](https://insights.sbomify.com/CVE-2024-5274/): Google Chromium V8 Type Confusion (high 8.3, exploited in the wild)
- [CVE-2020-17519](https://insights.sbomify.com/CVE-2020-17519/): Apache Flink Improper Access Control (critical 9.1, exploited in the wild)
- [CVE-2024-4947](https://insights.sbomify.com/CVE-2024-4947/): Google Chromium V8 Type Confusion (critical 9.6, exploited in the wild)
- [CVE-2023-43208](https://insights.sbomify.com/CVE-2023-43208/): NextGen Healthcare Mirth Connect Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2024-4761](https://insights.sbomify.com/CVE-2024-4761/): Google Chromium V8 Out-of-Bounds Memory Write (high 8.3, exploited in the wild)
- [CVE-2021-40655](https://insights.sbomify.com/CVE-2021-40655/): D-Link DIR-605 Router Information Disclosure (high 7.5, exploited in the wild)
- [CVE-2014-100005](https://insights.sbomify.com/CVE-2014-100005/): D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) (high 8.0, exploited in the wild)
- [CVE-2024-30051](https://insights.sbomify.com/CVE-2024-30051/): Microsoft DWM Core Library Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2024-30040](https://insights.sbomify.com/CVE-2024-30040/): Microsoft Windows MSHTML Platform Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2024-4671](https://insights.sbomify.com/CVE-2024-4671/): Google Chromium Visuals Use-After-Free (critical 9.6, exploited in the wild)
- [CVE-2023-7028](https://insights.sbomify.com/CVE-2023-7028/): GitLab Community and Enterprise Editions Improper Access Control (critical 10.0, exploited in the wild)
- [CVE-2024-29988](https://insights.sbomify.com/CVE-2024-29988/): Microsoft SmartScreen Prompt Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2024-4040](https://insights.sbomify.com/CVE-2024-4040/): CrushFTP VFS Sandbox Escape (critical 9.8, exploited in the wild)
- [CVE-2024-20359](https://insights.sbomify.com/CVE-2024-20359/): Cisco ASA and FTD Privilege Escalation (medium 6.0, exploited in the wild)
- [CVE-2024-20353](https://insights.sbomify.com/CVE-2024-20353/): Cisco ASA and FTD Denial of Service (high 8.6, exploited in the wild)
- [CVE-2022-38028](https://insights.sbomify.com/CVE-2022-38028/): Microsoft Windows Print Spooler Privilege Escalation Vulnerability (high 7.8, exploited in the wild)
- [CVE-2024-3400](https://insights.sbomify.com/CVE-2024-3400/): Palo Alto Networks PAN-OS Command Injection (critical 10.0, exploited in the wild)
- [CVE-2024-3273](https://insights.sbomify.com/CVE-2024-3273/): D-Link Multiple NAS Devices Command Injection (high 7.3, exploited in the wild)
- [CVE-2024-3272](https://insights.sbomify.com/CVE-2024-3272/): D-Link Multiple NAS Devices Use of Hard-Coded Credentials (critical 9.8, exploited in the wild)
- [CVE-2024-29748](https://insights.sbomify.com/CVE-2024-29748/): Android Pixel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2024-29745](https://insights.sbomify.com/CVE-2024-29745/): Android Pixel Information Disclosure (medium 5.5, exploited in the wild)
- [CVE-2023-24955](https://insights.sbomify.com/CVE-2023-24955/): Microsoft SharePoint Server Code Injection (high 7.2, exploited in the wild)
- [CVE-2023-48788](https://insights.sbomify.com/CVE-2023-48788/): Fortinet FortiClient EMS SQL Injection (critical 9.3, exploited in the wild)
- [CVE-2021-44529](https://insights.sbomify.com/CVE-2021-44529/): Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability (critical 9.8, exploited in the wild)
- [CVE-2019-7256](https://insights.sbomify.com/CVE-2019-7256/): Nice Linear eMerge E3-Series OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2024-27198](https://insights.sbomify.com/CVE-2024-27198/): JetBrains TeamCity Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2024-23296](https://insights.sbomify.com/CVE-2024-23296/): Apple Multiple Products Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2024-23225](https://insights.sbomify.com/CVE-2024-23225/): Apple Multiple Products Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2023-21237](https://insights.sbomify.com/CVE-2023-21237/): Android Pixel Information Disclosure Vulnerability (medium 6.2, exploited in the wild)
- [CVE-2021-36380](https://insights.sbomify.com/CVE-2021-36380/): Sunhillo SureLine OS Command Injection Vulnerablity (critical 9.8, exploited in the wild)
- [CVE-2024-21338](https://insights.sbomify.com/CVE-2024-21338/): Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control (high 7.8, exploited in the wild)
- [CVE-2023-29360](https://insights.sbomify.com/CVE-2023-29360/): Microsoft Streaming Service Untrusted Pointer Dereference (high 8.4, exploited in the wild)
- [CVE-2024-1709](https://insights.sbomify.com/CVE-2024-1709/): ConnectWise ScreenConnect Authentication Bypass (critical 10.0, exploited in the wild)
- [CVE-2024-21410](https://insights.sbomify.com/CVE-2024-21410/): Microsoft Exchange Server Privilege Escalation (critical 9.8, exploited in the wild)
- [CVE-2020-3259](https://insights.sbomify.com/CVE-2020-3259/): Cisco ASA and FTD Information Disclosure (high 7.5, exploited in the wild)
- [CVE-2024-21412](https://insights.sbomify.com/CVE-2024-21412/): Microsoft Windows Internet Shortcut Files Security Feature Bypass (high 8.1, exploited in the wild)
- [CVE-2024-21351](https://insights.sbomify.com/CVE-2024-21351/): Microsoft Windows SmartScreen Security Feature Bypass (high 7.6, exploited in the wild)
- [CVE-2023-43770](https://insights.sbomify.com/CVE-2023-43770/): Roundcube Webmail Persistent Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2024-21762](https://insights.sbomify.com/CVE-2024-21762/): Fortinet FortiOS Out-of-Bound Write (critical 9.6, exploited in the wild)
- [CVE-2023-4762](https://insights.sbomify.com/CVE-2023-4762/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2024-21893](https://insights.sbomify.com/CVE-2024-21893/): Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) (high 8.2, exploited in the wild)
- [CVE-2022-48618](https://insights.sbomify.com/CVE-2022-48618/): Apple Multiple Products Memory Corruption (high 7.0, exploited in the wild)
- [CVE-2023-22527](https://insights.sbomify.com/CVE-2023-22527/): Atlassian Confluence Data Center and Server Template Injection (critical 10.0, exploited in the wild)
- [CVE-2024-23222](https://insights.sbomify.com/CVE-2024-23222/): Apple Multiple Products WebKit Type Confusion (high 8.8, exploited in the wild)
- [CVE-2023-34048](https://insights.sbomify.com/CVE-2023-34048/): VMware vCenter Server Out-of-Bounds Write (critical 9.8, exploited in the wild)
- [CVE-2023-35082](https://insights.sbomify.com/CVE-2023-35082/): Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass (critical 10.0, exploited in the wild)
- [CVE-2024-0519](https://insights.sbomify.com/CVE-2024-0519/): Google Chromium V8 Out-of-Bounds Memory Access (high 8.8, exploited in the wild)
- [CVE-2023-6549](https://insights.sbomify.com/CVE-2023-6549/): Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow (high 8.2, exploited in the wild)
- [CVE-2023-6548](https://insights.sbomify.com/CVE-2023-6548/): Citrix NetScaler ADC and NetScaler Gateway Code Injection (medium 5.5, exploited in the wild)
- [CVE-2018-15133](https://insights.sbomify.com/CVE-2018-15133/): Laravel Deserialization of Untrusted Data (high 8.1, exploited in the wild)
- [CVE-2024-21887](https://insights.sbomify.com/CVE-2024-21887/): Ivanti Connect Secure and Policy Secure Command Injection (critical 9.1, exploited in the wild)
- [CVE-2023-46805](https://insights.sbomify.com/CVE-2023-46805/): Ivanti Connect Secure and Policy Secure Authentication Bypass (high 8.2, exploited in the wild)
- [CVE-2023-29357](https://insights.sbomify.com/CVE-2023-29357/): Microsoft SharePoint Server Privilege Escalation (critical 9.8, exploited in the wild)
- [CVE-2023-41990](https://insights.sbomify.com/CVE-2023-41990/): Apple Multiple Products Code Execution (high 7.8, exploited in the wild)
- [CVE-2023-38203](https://insights.sbomify.com/CVE-2023-38203/): Adobe ColdFusion Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2023-29300](https://insights.sbomify.com/CVE-2023-29300/): Adobe ColdFusion Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2023-27524](https://insights.sbomify.com/CVE-2023-27524/): Apache Superset Insecure Default Initialization of Resource (high 8.9, exploited in the wild)
- [CVE-2023-23752](https://insights.sbomify.com/CVE-2023-23752/): Joomla! Improper Access Control (medium 5.3, exploited in the wild)
- [CVE-2016-20017](https://insights.sbomify.com/CVE-2016-20017/): D-Link DSL-2750B Devices Command Injection (critical 9.8, exploited in the wild)
- [CVE-2023-7101](https://insights.sbomify.com/CVE-2023-7101/): Spreadsheet::ParseExcel Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2023-7024](https://insights.sbomify.com/CVE-2023-7024/): Google Chromium WebRTC Heap Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2023-49897](https://insights.sbomify.com/CVE-2023-49897/): FXC AE1021, AE1021PE OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2023-47565](https://insights.sbomify.com/CVE-2023-47565/): QNAP VioStor NVR OS Command Injection (high 8.0, exploited in the wild)
- [CVE-2023-6448](https://insights.sbomify.com/CVE-2023-6448/): Unitronics Vision PLC and HMI Insecure Default Password (critical 9.8, exploited in the wild)
- [CVE-2023-41266](https://insights.sbomify.com/CVE-2023-41266/): Qlik Sense Path Traversal (high 8.2, exploited in the wild)
- [CVE-2023-41265](https://insights.sbomify.com/CVE-2023-41265/): Qlik Sense HTTP Tunneling (critical 9.6, exploited in the wild)
- [CVE-2023-33107](https://insights.sbomify.com/CVE-2023-33107/): Qualcomm Multiple Chipsets Integer Overflow (high 8.4, exploited in the wild)
- [CVE-2023-33106](https://insights.sbomify.com/CVE-2023-33106/): Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset (high 8.4, exploited in the wild)
- [CVE-2023-33063](https://insights.sbomify.com/CVE-2023-33063/): Qualcomm Multiple Chipsets Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2022-22071](https://insights.sbomify.com/CVE-2022-22071/): Qualcomm Multiple Chipsets Use-After-Free (high 8.4, exploited in the wild)
- [CVE-2023-42917](https://insights.sbomify.com/CVE-2023-42917/): Apple Multiple Products WebKit Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2023-42916](https://insights.sbomify.com/CVE-2023-42916/): Apple Multiple Products WebKit Out-of-Bounds Read (medium 6.5, exploited in the wild)
- [CVE-2023-6345](https://insights.sbomify.com/CVE-2023-6345/): Google Skia Integer Overflow (critical 9.6, exploited in the wild)
- [CVE-2023-49103](https://insights.sbomify.com/CVE-2023-49103/): ownCloud graphapi Information Disclosure (critical 10.0, exploited in the wild)
- [CVE-2023-4911](https://insights.sbomify.com/CVE-2023-4911/): GNU C Library Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2023-36584](https://insights.sbomify.com/CVE-2023-36584/): Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass (medium 5.4, exploited in the wild)
- [CVE-2023-1671](https://insights.sbomify.com/CVE-2023-1671/): Sophos Web Appliance Command Injection (critical 9.8, exploited in the wild)
- [CVE-2020-2551](https://insights.sbomify.com/CVE-2020-2551/): Oracle Fusion Middleware Unspecified (critical 9.8, exploited in the wild)
- [CVE-2023-36036](https://insights.sbomify.com/CVE-2023-36036/): Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-36033](https://insights.sbomify.com/CVE-2023-36033/): Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-36025](https://insights.sbomify.com/CVE-2023-36025/): Microsoft Windows SmartScreen Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2023-47246](https://insights.sbomify.com/CVE-2023-47246/): SysAid Server Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2023-36851](https://insights.sbomify.com/CVE-2023-36851/): Juniper Junos OS SRX Series Missing Authentication for Critical Function (medium 5.3, exploited in the wild)
- [CVE-2023-36847](https://insights.sbomify.com/CVE-2023-36847/): Juniper Junos OS EX Series Missing Authentication for Critical Function (medium 5.3, exploited in the wild)
- [CVE-2023-36846](https://insights.sbomify.com/CVE-2023-36846/): Juniper Junos OS SRX Series Missing Authentication for Critical Function (medium 5.3, exploited in the wild)
- [CVE-2023-36845](https://insights.sbomify.com/CVE-2023-36845/): Juniper Junos OS EX Series and SRX Series PHP External Variable Modification (critical 9.8, exploited in the wild)
- [CVE-2023-36844](https://insights.sbomify.com/CVE-2023-36844/): Juniper Junos OS EX Series PHP External Variable Modification (medium 5.3, exploited in the wild)
- [CVE-2023-29552](https://insights.sbomify.com/CVE-2023-29552/): Service Location Protocol (SLP) Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2023-22518](https://insights.sbomify.com/CVE-2023-22518/): Atlassian Confluence Data Center and Server Improper Authorization (critical 10.0, exploited in the wild)
- [CVE-2023-46604](https://insights.sbomify.com/CVE-2023-46604/): Apache ActiveMQ Deserialization of Untrusted Data (critical 10.0, exploited in the wild)
- [CVE-2023-46748](https://insights.sbomify.com/CVE-2023-46748/): F5 BIG-IP Configuration Utility SQL Injection (high 8.8, exploited in the wild)
- [CVE-2023-46747](https://insights.sbomify.com/CVE-2023-46747/): F5 BIG-IP Configuration Utility Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2023-5631](https://insights.sbomify.com/CVE-2023-5631/): Roundcube Webmail Persistent Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2023-20273](https://insights.sbomify.com/CVE-2023-20273/): Cisco IOS XE Web UI Command Injection (high 7.2, exploited in the wild)
- [CVE-2023-4966](https://insights.sbomify.com/CVE-2023-4966/): Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow (critical 9.4, exploited in the wild)
- [CVE-2023-20198](https://insights.sbomify.com/CVE-2023-20198/): Cisco IOS XE Web UI Privilege Escalation (critical 10.0, exploited in the wild)
- [CVE-2023-44487](https://insights.sbomify.com/CVE-2023-44487/): HTTP/2 Rapid Reset Attack (high 7.5, exploited in the wild)
- [CVE-2023-41763](https://insights.sbomify.com/CVE-2023-41763/): Microsoft Skype for Business Privilege Escalation (medium 5.3, exploited in the wild)
- [CVE-2023-36563](https://insights.sbomify.com/CVE-2023-36563/): Microsoft WordPad Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2023-21608](https://insights.sbomify.com/CVE-2023-21608/): Adobe Acrobat and Reader Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2023-20109](https://insights.sbomify.com/CVE-2023-20109/): Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write (medium 6.6, exploited in the wild)
- [CVE-2023-42824](https://insights.sbomify.com/CVE-2023-42824/): Apple iOS and iPadOS Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-40044](https://insights.sbomify.com/CVE-2023-40044/): Progress WS_FTP Server Deserialization of Untrusted Data (critical 10.0, exploited in the wild)
- [CVE-2023-22515](https://insights.sbomify.com/CVE-2023-22515/): Atlassian Confluence Data Center and Server Broken Access Control (critical 10.0, exploited in the wild)
- [CVE-2023-42793](https://insights.sbomify.com/CVE-2023-42793/): JetBrains TeamCity Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2023-28229](https://insights.sbomify.com/CVE-2023-28229/): Microsoft Windows CNG Key Isolation Service Privilege Escalation (high 7.0, exploited in the wild)
- [CVE-2023-4211](https://insights.sbomify.com/CVE-2023-4211/): Arm Mali GPU Kernel Driver Use-After-Free (medium 5.5, exploited in the wild)
- [CVE-2023-5217](https://insights.sbomify.com/CVE-2023-5217/): Google Chromium libvpx Heap Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2018-14667](https://insights.sbomify.com/CVE-2018-14667/): Red Hat JBoss RichFaces Framework Expression Language Injection (critical 9.8, exploited in the wild)
- [CVE-2023-41993](https://insights.sbomify.com/CVE-2023-41993/): Apple Multiple Products WebKit Code Execution (high 8.8, exploited in the wild)
- [CVE-2023-41992](https://insights.sbomify.com/CVE-2023-41992/): Apple Multiple Products Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-41991](https://insights.sbomify.com/CVE-2023-41991/): Apple Multiple Products Improper Certificate Validation (medium 5.5, exploited in the wild)
- [CVE-2023-41179](https://insights.sbomify.com/CVE-2023-41179/): Trend Micro Apex One and Worry-Free Business Security Remote Code Execution (high 7.2, exploited in the wild)
- [CVE-2023-28434](https://insights.sbomify.com/CVE-2023-28434/): MinIO Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2022-22265](https://insights.sbomify.com/CVE-2022-22265/): Samsung Mobile Devices Use-After-Free (medium 5.0, exploited in the wild)
- [CVE-2021-3129](https://insights.sbomify.com/CVE-2021-3129/): Laravel Ignition File Upload (critical 9.8, exploited in the wild)
- [CVE-2017-6884](https://insights.sbomify.com/CVE-2017-6884/): Zyxel EMG2926 Routers Command Injection (high 8.8, exploited in the wild)
- [CVE-2014-8361](https://insights.sbomify.com/CVE-2014-8361/): Realtek SDK Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2023-26369](https://insights.sbomify.com/CVE-2023-26369/): Adobe Acrobat and Reader Out-of-Bounds Write (high 7.8, exploited in the wild)
- [CVE-2023-4863](https://insights.sbomify.com/CVE-2023-4863/): Google Chromium WebP Heap-Based Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2023-35674](https://insights.sbomify.com/CVE-2023-35674/): Android Framework Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2023-20269](https://insights.sbomify.com/CVE-2023-20269/): Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access (medium 5.0, exploited in the wild)
- [CVE-2023-36802](https://insights.sbomify.com/CVE-2023-36802/): Microsoft Streaming Service Proxy Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-36761](https://insights.sbomify.com/CVE-2023-36761/): Microsoft Word Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2023-41064](https://insights.sbomify.com/CVE-2023-41064/): Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2023-41061](https://insights.sbomify.com/CVE-2023-41061/): Apple iOS, iPadOS, and watchOS Wallet Code Execution (high 7.8, exploited in the wild)
- [CVE-2023-33246](https://insights.sbomify.com/CVE-2023-33246/): Apache RocketMQ Command Execution (critical 9.8, exploited in the wild)
- [CVE-2023-38831](https://insights.sbomify.com/CVE-2023-38831/): RARLAB WinRAR Code Execution (high 7.8, exploited in the wild)
- [CVE-2023-32315](https://insights.sbomify.com/CVE-2023-32315/): Ignite Realtime Openfire Path Traversal (high 8.6, exploited in the wild)
- [CVE-2023-38035](https://insights.sbomify.com/CVE-2023-38035/): Ivanti Sentry Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2023-27532](https://insights.sbomify.com/CVE-2023-27532/): Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function (high 7.5, exploited in the wild)
- [CVE-2023-26359](https://insights.sbomify.com/CVE-2023-26359/): Adobe ColdFusion Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2023-24489](https://insights.sbomify.com/CVE-2023-24489/): Citrix Content Collaboration ShareFile Improper Access Control (critical 9.8, exploited in the wild)
- [CVE-2023-38180](https://insights.sbomify.com/CVE-2023-38180/): Microsoft .NET Core and Visual Studio Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2017-18368](https://insights.sbomify.com/CVE-2017-18368/): Zyxel P660HN-T1A Routers Command Injection (critical 9.8, exploited in the wild)
- [CVE-2023-35081](https://insights.sbomify.com/CVE-2023-35081/): Ivanti Endpoint Manager Mobile (EPMM) Path Traversal (high 7.2, exploited in the wild)
- [CVE-2023-37580](https://insights.sbomify.com/CVE-2023-37580/): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2023-38606](https://insights.sbomify.com/CVE-2023-38606/): Apple Multiple Products Kernel Unspecified (medium 5.5, exploited in the wild)
- [CVE-2023-35078](https://insights.sbomify.com/CVE-2023-35078/): Ivanti Endpoint Manager Mobile Authentication Bypass (critical 10.0, exploited in the wild)
- [CVE-2023-38205](https://insights.sbomify.com/CVE-2023-38205/): Adobe ColdFusion Improper Access Control (high 7.5, exploited in the wild)
- [CVE-2023-29298](https://insights.sbomify.com/CVE-2023-29298/): Adobe ColdFusion Improper Access Control (high 7.5, exploited in the wild)
- [CVE-2023-3519](https://insights.sbomify.com/CVE-2023-3519/): Citrix NetScaler ADC and NetScaler Gateway Code Injection (critical 9.8, exploited in the wild)
- [CVE-2023-36884](https://insights.sbomify.com/CVE-2023-36884/): Microsoft Windows Search Remote Code Execution (high 7.5, exploited in the wild)
- [CVE-2023-37450](https://insights.sbomify.com/CVE-2023-37450/): Apple Multiple Products WebKit Code Execution (high 8.8, exploited in the wild)
- [CVE-2022-29303](https://insights.sbomify.com/CVE-2022-29303/): SolarView Compact Command Injection (critical 9.8, exploited in the wild)
- [CVE-2023-36874](https://insights.sbomify.com/CVE-2023-36874/): Microsoft Windows Error Reporting Service Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-35311](https://insights.sbomify.com/CVE-2023-35311/): Microsoft Outlook Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2023-32049](https://insights.sbomify.com/CVE-2023-32049/): Microsoft Windows Defender SmartScreen Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2023-32046](https://insights.sbomify.com/CVE-2023-32046/): Microsoft Windows MSHTML Platform Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-31199](https://insights.sbomify.com/CVE-2022-31199/): Netwrix Auditor Insecure Object Deserialization (critical 9.8, exploited in the wild)
- [CVE-2021-29256](https://insights.sbomify.com/CVE-2021-29256/): Arm Mali GPU Kernel Driver Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-25489](https://insights.sbomify.com/CVE-2021-25489/): Samsung Mobile Devices Improper Input Validation (low 3.3, exploited in the wild)
- [CVE-2021-25487](https://insights.sbomify.com/CVE-2021-25487/): Samsung Mobile Devices Out-of-Bounds Read (high 7.3, exploited in the wild)
- [CVE-2021-25395](https://insights.sbomify.com/CVE-2021-25395/): Samsung Mobile Devices Race Condition (medium 6.4, exploited in the wild)
- [CVE-2021-25394](https://insights.sbomify.com/CVE-2021-25394/): Samsung Mobile Devices Race Condition (medium 6.4, exploited in the wild)
- [CVE-2021-25372](https://insights.sbomify.com/CVE-2021-25372/): Samsung Mobile Devices Improper Boundary Check (medium 6.1, exploited in the wild)
- [CVE-2021-25371](https://insights.sbomify.com/CVE-2021-25371/): Samsung Mobile Devices Unspecified (medium 6.1, exploited in the wild)
- [CVE-2019-20500](https://insights.sbomify.com/CVE-2019-20500/): D-Link DWL-2600AP Access Point Command Injection (high 7.8, exploited in the wild)
- [CVE-2019-17621](https://insights.sbomify.com/CVE-2019-17621/): D-Link DIR-859 Router Command Execution (critical 9.8, exploited in the wild)
- [CVE-2023-32439](https://insights.sbomify.com/CVE-2023-32439/): Apple Multiple Products WebKit Type Confusion (high 8.8, exploited in the wild)
- [CVE-2023-32435](https://insights.sbomify.com/CVE-2023-32435/): Apple Multiple Products WebKit Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2023-32434](https://insights.sbomify.com/CVE-2023-32434/): Apple Multiple Products Integer Overflow (high 7.8, exploited in the wild)
- [CVE-2023-27992](https://insights.sbomify.com/CVE-2023-27992/): Zyxel Multiple NAS Devices Command Injection (critical 9.8, exploited in the wild)
- [CVE-2023-20867](https://insights.sbomify.com/CVE-2023-20867/): VMware Tools Authentication Bypass (low 3.9, exploited in the wild)
- [CVE-2023-20887](https://insights.sbomify.com/CVE-2023-20887/): Vmware Aria Operations for Networks Command Injection (critical 9.8, exploited in the wild)
- [CVE-2021-44026](https://insights.sbomify.com/CVE-2021-44026/): Roundcube Webmail SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2020-35730](https://insights.sbomify.com/CVE-2020-35730/): Roundcube Webmail Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2020-12641](https://insights.sbomify.com/CVE-2020-12641/): Roundcube Webmail Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2016-9079](https://insights.sbomify.com/CVE-2016-9079/): Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free (high 7.5, exploited in the wild)
- [CVE-2016-0165](https://insights.sbomify.com/CVE-2016-0165/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-27997](https://insights.sbomify.com/CVE-2023-27997/): Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow (critical 9.2, exploited in the wild)
- [CVE-2023-3079](https://insights.sbomify.com/CVE-2023-3079/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2023-33010](https://insights.sbomify.com/CVE-2023-33010/): Zyxel Multiple Firewalls Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2023-33009](https://insights.sbomify.com/CVE-2023-33009/): Zyxel Multiple Firewalls Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2023-34362](https://insights.sbomify.com/CVE-2023-34362/): Progress MOVEit Transfer SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2023-28771](https://insights.sbomify.com/CVE-2023-28771/): Zyxel Multiple Firewalls OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2023-2868](https://insights.sbomify.com/CVE-2023-2868/): Barracuda Networks ESG Appliance Improper Input Validation (critical 9.4, exploited in the wild)
- [CVE-2023-32409](https://insights.sbomify.com/CVE-2023-32409/): Apple Multiple Products WebKit Sandbox Escape (high 8.6, exploited in the wild)
- [CVE-2023-32373](https://insights.sbomify.com/CVE-2023-32373/): Apple Multiple Products WebKit Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2023-28204](https://insights.sbomify.com/CVE-2023-28204/): Apple Multiple Products WebKit Out-of-Bounds Read (medium 6.5, exploited in the wild)
- [CVE-2023-21492](https://insights.sbomify.com/CVE-2023-21492/): Samsung Mobile Devices Insertion of Sensitive Information Into Log File (medium 4.4, exploited in the wild)
- [CVE-2016-6415](https://insights.sbomify.com/CVE-2016-6415/): Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure (high 7.5, exploited in the wild)
- [CVE-2004-1464](https://insights.sbomify.com/CVE-2004-1464/): Cisco IOS Denial-of-Service (medium 5.9, exploited in the wild)
- [CVE-2023-25717](https://insights.sbomify.com/CVE-2023-25717/): Multiple Ruckus Wireless Products CSRF and RCE (critical 9.8, exploited in the wild)
- [CVE-2021-3560](https://insights.sbomify.com/CVE-2021-3560/): Red Hat Polkit Incorrect Authorization (high 7.8, exploited in the wild)
- [CVE-2016-8735](https://insights.sbomify.com/CVE-2016-8735/): Apache Tomcat Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2016-3427](https://insights.sbomify.com/CVE-2016-3427/): Oracle Java SE and JRockit Unspecified (critical 9.8, exploited in the wild)
- [CVE-2015-5317](https://insights.sbomify.com/CVE-2015-5317/): Jenkins User Interface (UI) Information Disclosure (high 7.5, exploited in the wild)
- [CVE-2014-0196](https://insights.sbomify.com/CVE-2014-0196/): Linux Kernel Race Condition (medium 5.5, exploited in the wild)
- [CVE-2010-3904](https://insights.sbomify.com/CVE-2010-3904/): Linux Kernel Improper Input Validation (high 7.8, exploited in the wild)
- [CVE-2023-29336](https://insights.sbomify.com/CVE-2023-29336/): Microsoft Win32K Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-21839](https://insights.sbomify.com/CVE-2023-21839/): Oracle WebLogic Server Unspecified (high 7.5, exploited in the wild)
- [CVE-2023-1389](https://insights.sbomify.com/CVE-2023-1389/): TP-Link Archer AX-21 Command Injection (high 8.8, exploited in the wild)
- [CVE-2021-45046](https://insights.sbomify.com/CVE-2021-45046/): Apache Log4j2 Deserialization of Untrusted Data (critical 9.0, exploited in the wild)
- [CVE-2023-28432](https://insights.sbomify.com/CVE-2023-28432/): MinIO Information Disclosure (high 7.5, exploited in the wild)
- [CVE-2023-27350](https://insights.sbomify.com/CVE-2023-27350/): PaperCut MF/NG Improper Access Control (critical 9.8, exploited in the wild)
- [CVE-2023-2136](https://insights.sbomify.com/CVE-2023-2136/): Google Chrome Skia Integer Overflow (critical 9.6, exploited in the wild)
- [CVE-2017-6742](https://insights.sbomify.com/CVE-2017-6742/): Cisco IOS and IOS XE Software SNMP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2023-2033](https://insights.sbomify.com/CVE-2023-2033/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2019-8526](https://insights.sbomify.com/CVE-2019-8526/): Apple macOS Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2023-29492](https://insights.sbomify.com/CVE-2023-29492/): Novi Survey Insecure Deserialization (critical 9.8, exploited in the wild)
- [CVE-2023-20963](https://insights.sbomify.com/CVE-2023-20963/): Android Framework Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-28252](https://insights.sbomify.com/CVE-2023-28252/): Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-28206](https://insights.sbomify.com/CVE-2023-28206/): Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write (high 8.6, exploited in the wild)
- [CVE-2023-28205](https://insights.sbomify.com/CVE-2023-28205/): Apple Multiple Products WebKit Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2023-26083](https://insights.sbomify.com/CVE-2023-26083/): Arm Mali GPU Kernel Driver Information Disclosure (low 3.3, exploited in the wild)
- [CVE-2021-27878](https://insights.sbomify.com/CVE-2021-27878/): Veritas Backup Exec Agent Command Execution (high 8.8, exploited in the wild)
- [CVE-2021-27877](https://insights.sbomify.com/CVE-2021-27877/): Veritas Backup Exec Agent Improper Authentication (high 8.2, exploited in the wild)
- [CVE-2021-27876](https://insights.sbomify.com/CVE-2021-27876/): Veritas Backup Exec Agent File Access (high 8.1, exploited in the wild)
- [CVE-2019-1388](https://insights.sbomify.com/CVE-2019-1388/): Microsoft Windows Certificate Dialog Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-27926](https://insights.sbomify.com/CVE-2022-27926/): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2023-0266](https://insights.sbomify.com/CVE-2023-0266/): Linux Kernel Use-After-Free (high 7.9, exploited in the wild)
- [CVE-2022-42948](https://insights.sbomify.com/CVE-2022-42948/): Fortra Cobalt Strike User Interface Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2022-39197](https://insights.sbomify.com/CVE-2022-39197/): Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2022-38181](https://insights.sbomify.com/CVE-2022-38181/): Arm Mali GPU Kernel Driver Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2022-3038](https://insights.sbomify.com/CVE-2022-3038/): Google Chromium Network Service Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2022-22706](https://insights.sbomify.com/CVE-2022-22706/): Arm Mali GPU Kernel Driver Unspecified (high 7.8, exploited in the wild)
- [CVE-2021-30900](https://insights.sbomify.com/CVE-2021-30900/): Apple iOS, iPadOS, and macOS Out-of-Bounds Write (high 7.8, exploited in the wild)
- [CVE-2017-7494](https://insights.sbomify.com/CVE-2017-7494/): Samba Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2013-3163](https://insights.sbomify.com/CVE-2013-3163/): Microsoft Internet Explorer Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2023-26360](https://insights.sbomify.com/CVE-2023-26360/): Adobe ColdFusion Deserialization of Untrusted Data (high 8.6, exploited in the wild)
- [CVE-2023-24880](https://insights.sbomify.com/CVE-2023-24880/): Microsoft Windows SmartScreen Security Feature Bypass (medium 4.4, exploited in the wild)
- [CVE-2023-23397](https://insights.sbomify.com/CVE-2023-23397/): Microsoft Office Outlook Privilege Escalation (critical 9.8, exploited in the wild)
- [CVE-2022-41328](https://insights.sbomify.com/CVE-2022-41328/): Fortinet FortiOS Path Traversal (medium 6.5, exploited in the wild)
- [CVE-2021-39144](https://insights.sbomify.com/CVE-2021-39144/): XStream Remote Code Execution (high 8.5, exploited in the wild)
- [CVE-2020-5741](https://insights.sbomify.com/CVE-2020-5741/): Plex Media Server Remote Code Execution (high 7.2, exploited in the wild)
- [CVE-2022-35914](https://insights.sbomify.com/CVE-2022-35914/): Teclib GLPI Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2022-33891](https://insights.sbomify.com/CVE-2022-33891/): Apache Spark Command Injection (high 8.8, exploited in the wild)
- [CVE-2022-28810](https://insights.sbomify.com/CVE-2022-28810/): Zoho ManageEngine ADSelfService Plus Remote Code Execution (medium 6.8, exploited in the wild)
- [CVE-2022-36537](https://insights.sbomify.com/CVE-2022-36537/): ZK Framework AuUploader Unspecified (high 7.5, exploited in the wild)
- [CVE-2022-47986](https://insights.sbomify.com/CVE-2022-47986/): IBM Aspera Faspex Code Execution (critical 9.8, exploited in the wild)
- [CVE-2022-41223](https://insights.sbomify.com/CVE-2022-41223/): Mitel MiVoice Connect Code Injection (medium 6.8, exploited in the wild)
- [CVE-2022-40765](https://insights.sbomify.com/CVE-2022-40765/): Mitel MiVoice Connect Command Injection (medium 6.8, exploited in the wild)
- [CVE-2022-46169](https://insights.sbomify.com/CVE-2022-46169/): Cacti Command Injection (critical 9.8, exploited in the wild)
- [CVE-2023-23529](https://insights.sbomify.com/CVE-2023-23529/): Apple Multiple Products WebKit Type Confusion (high 8.8, exploited in the wild)
- [CVE-2023-23376](https://insights.sbomify.com/CVE-2023-23376/): Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-21823](https://insights.sbomify.com/CVE-2023-21823/): Microsoft Windows Graphic Component Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-21715](https://insights.sbomify.com/CVE-2023-21715/): Microsoft Office Publisher Security Feature Bypass (high 7.3, exploited in the wild)
- [CVE-2023-0669](https://insights.sbomify.com/CVE-2023-0669/): Fortra GoAnywhere MFT Remote Code Execution (high 7.2, exploited in the wild)
- [CVE-2022-24990](https://insights.sbomify.com/CVE-2022-24990/): TerraMaster OS Remote Command Execution (critical 9.8, exploited in the wild)
- [CVE-2015-2291](https://insights.sbomify.com/CVE-2015-2291/): Intel Ethernet Diagnostics Driver for Windows Denial-of-Service (high 7.8, exploited in the wild)
- [CVE-2023-22952](https://insights.sbomify.com/CVE-2023-22952/): Multiple SugarCRM Products Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2022-21587](https://insights.sbomify.com/CVE-2022-21587/): Oracle E-Business Suite Unspecified (critical 9.8, exploited in the wild)
- [CVE-2017-11357](https://insights.sbomify.com/CVE-2017-11357/): Telerik UI for ASP.NET AJAX Insecure Direct Object Reference (critical 9.8, exploited in the wild)
- [CVE-2022-47966](https://insights.sbomify.com/CVE-2022-47966/): Zoho ManageEngine Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2022-44877](https://insights.sbomify.com/CVE-2022-44877/): CWP Control Web Panel OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2023-21674](https://insights.sbomify.com/CVE-2023-21674/): Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2022-41080](https://insights.sbomify.com/CVE-2022-41080/): Microsoft Exchange Server Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2018-5430](https://insights.sbomify.com/CVE-2018-5430/): TIBCO JasperReports Server Information Disclosure (high 7.7, exploited in the wild)
- [CVE-2018-18809](https://insights.sbomify.com/CVE-2018-18809/): TIBCO JasperReports Library Directory Traversal (critical 9.9, exploited in the wild)
- [CVE-2022-42856](https://insights.sbomify.com/CVE-2022-42856/): Apple iOS Type Confusion (high 8.8, exploited in the wild)
- [CVE-2022-44698](https://insights.sbomify.com/CVE-2022-44698/): Microsoft Defender SmartScreen Security Feature Bypass (medium 5.4, exploited in the wild)
- [CVE-2022-42475](https://insights.sbomify.com/CVE-2022-42475/): Fortinet FortiOS Heap-Based Buffer Overflow (critical 9.3, exploited in the wild)
- [CVE-2022-27518](https://insights.sbomify.com/CVE-2022-27518/): Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2022-26501](https://insights.sbomify.com/CVE-2022-26501/): Veeam Backup & Replication Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2022-26500](https://insights.sbomify.com/CVE-2022-26500/): Veeam Backup & Replication Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2022-4262](https://insights.sbomify.com/CVE-2022-4262/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2022-4135](https://insights.sbomify.com/CVE-2022-4135/): Google Chromium GPU Heap Buffer Overflow (critical 9.6, exploited in the wild)
- [CVE-2021-35587](https://insights.sbomify.com/CVE-2021-35587/): Oracle Fusion Middleware Unspecified (critical 9.8, exploited in the wild)
- [CVE-2022-41049](https://insights.sbomify.com/CVE-2022-41049/): Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass (medium 5.4, exploited in the wild)
- [CVE-2022-41128](https://insights.sbomify.com/CVE-2022-41128/): Microsoft Windows Scripting Languages Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2022-41125](https://insights.sbomify.com/CVE-2022-41125/): Microsoft Windows CNG Key Isolation Service Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-41091](https://insights.sbomify.com/CVE-2022-41091/): Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass (medium 5.4, exploited in the wild)
- [CVE-2022-41073](https://insights.sbomify.com/CVE-2022-41073/): Microsoft Windows Print Spooler Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-25370](https://insights.sbomify.com/CVE-2021-25370/): Samsung Mobile Devices Memory Corruption (medium 6.1, exploited in the wild)
- [CVE-2021-25369](https://insights.sbomify.com/CVE-2021-25369/): Samsung Mobile Devices Improper Access Control (medium 6.2, exploited in the wild)
- [CVE-2021-25337](https://insights.sbomify.com/CVE-2021-25337/): Samsung Mobile Devices Improper Access Control (medium 4.4, exploited in the wild)
- [CVE-2022-3723](https://insights.sbomify.com/CVE-2022-3723/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2022-42827](https://insights.sbomify.com/CVE-2022-42827/): Apple iOS and iPadOS Out-of-Bounds Write (high 7.8, exploited in the wild)
- [CVE-2020-3433](https://insights.sbomify.com/CVE-2020-3433/): Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking (high 7.8, exploited in the wild)
- [CVE-2020-3153](https://insights.sbomify.com/CVE-2020-3153/): Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path (medium 6.5, exploited in the wild)
- [CVE-2018-19323](https://insights.sbomify.com/CVE-2018-19323/): GIGABYTE Multiple Products Privilege Escalation (critical 9.8, exploited in the wild)
- [CVE-2018-19322](https://insights.sbomify.com/CVE-2018-19322/): GIGABYTE Multiple Products Code Execution (high 7.8, exploited in the wild)
- [CVE-2018-19321](https://insights.sbomify.com/CVE-2018-19321/): GIGABYTE Multiple Products Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2018-19320](https://insights.sbomify.com/CVE-2018-19320/): GIGABYTE Multiple Products Unspecified (high 7.8, exploited in the wild)
- [CVE-2022-41352](https://insights.sbomify.com/CVE-2022-41352/): Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload (critical 9.8, exploited in the wild)
- [CVE-2021-3493](https://insights.sbomify.com/CVE-2021-3493/): Linux Kernel Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2022-41033](https://insights.sbomify.com/CVE-2022-41033/): Microsoft Windows COM+ Event System Service Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-40684](https://insights.sbomify.com/CVE-2022-40684/): Fortinet Multiple Products Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2022-41082](https://insights.sbomify.com/CVE-2022-41082/): Microsoft Exchange Server Remote Code Execution (high 8.0, exploited in the wild)
- [CVE-2022-41040](https://insights.sbomify.com/CVE-2022-41040/): Microsoft Exchange Server Server-Side Request Forgery (high 8.8, exploited in the wild)
- [CVE-2022-36804](https://insights.sbomify.com/CVE-2022-36804/): Atlassian Bitbucket Server and Data Center Command Injection (high 8.8, exploited in the wild)
- [CVE-2022-3236](https://insights.sbomify.com/CVE-2022-3236/): Sophos Firewall Code Injection (critical 9.8, exploited in the wild)
- [CVE-2022-35405](https://insights.sbomify.com/CVE-2022-35405/): Zoho ManageEngine Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2022-40139](https://insights.sbomify.com/CVE-2022-40139/): Trend Micro Apex One and Apex One as a Service Improper Validation (high 7.2, exploited in the wild)
- [CVE-2013-6282](https://insights.sbomify.com/CVE-2013-6282/): Linux Kernel Improper Input Validation (high 8.8, exploited in the wild)
- [CVE-2013-2597](https://insights.sbomify.com/CVE-2013-2597/): Code Aurora ACDB Audio Driver Stack-based Buffer Overflow (high 8.4, exploited in the wild)
- [CVE-2013-2596](https://insights.sbomify.com/CVE-2013-2596/): Linux Kernel Integer Overflow (high 7.8, exploited in the wild)
- [CVE-2013-2094](https://insights.sbomify.com/CVE-2013-2094/): Linux Kernel Privilege Escalation (high 8.4, exploited in the wild)
- [CVE-2010-2568](https://insights.sbomify.com/CVE-2010-2568/): Microsoft Windows Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2022-37969](https://insights.sbomify.com/CVE-2022-37969/): Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-32917](https://insights.sbomify.com/CVE-2022-32917/): Apple iOS, iPadOS, and macOS Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2022-3075](https://insights.sbomify.com/CVE-2022-3075/): Google Chromium Mojo Insufficient Data Validation (critical 9.6, exploited in the wild)
- [CVE-2022-27593](https://insights.sbomify.com/CVE-2022-27593/): QNAP Photo Station Externally Controlled Reference (critical 10.0, exploited in the wild)
- [CVE-2022-26258](https://insights.sbomify.com/CVE-2022-26258/): D-Link DIR-820L Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-9934](https://insights.sbomify.com/CVE-2020-9934/): Apple iOS, iPadOS, and macOS Input Validation (medium 5.5, exploited in the wild)
- [CVE-2018-7445](https://insights.sbomify.com/CVE-2018-7445/): MikroTik RouterOS Stack-Based Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2018-6530](https://insights.sbomify.com/CVE-2018-6530/): D-Link Multiple Routers OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2018-2628](https://insights.sbomify.com/CVE-2018-2628/): Oracle WebLogic Server Unspecified (critical 9.8, exploited in the wild)
- [CVE-2018-13374](https://insights.sbomify.com/CVE-2018-13374/): Fortinet FortiOS and FortiADC Improper Access Control (medium 4.3, exploited in the wild)
- [CVE-2017-5521](https://insights.sbomify.com/CVE-2017-5521/): NETGEAR Multiple Devices Exposure of Sensitive Information (high 8.1, exploited in the wild)
- [CVE-2011-4723](https://insights.sbomify.com/CVE-2011-4723/): D-Link DIR-300 Router Cleartext Storage of a Password (medium 5.7, exploited in the wild)
- [CVE-2011-1823](https://insights.sbomify.com/CVE-2011-1823/): Android OS Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-26352](https://insights.sbomify.com/CVE-2022-26352/): dotCMS Unrestricted Upload of File (critical 9.8, exploited in the wild)
- [CVE-2022-24706](https://insights.sbomify.com/CVE-2022-24706/): Apache CouchDB Insecure Default Initialization of Resource (critical 9.8, exploited in the wild)
- [CVE-2022-24112](https://insights.sbomify.com/CVE-2022-24112/): Apache APISIX Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2022-22963](https://insights.sbomify.com/CVE-2022-22963/): VMware Tanzu Spring Cloud Function Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2022-2294](https://insights.sbomify.com/CVE-2022-2294/): WebRTC Heap Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2021-39226](https://insights.sbomify.com/CVE-2021-39226/): Grafana Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2021-38406](https://insights.sbomify.com/CVE-2021-38406/): Delta Electronics DOPSoft 2 Improper Input Validation (high 7.8, exploited in the wild)
- [CVE-2021-31010](https://insights.sbomify.com/CVE-2021-31010/): Apple iOS, macOS, watchOS Sandbox Bypass (high 7.5, exploited in the wild)
- [CVE-2020-36193](https://insights.sbomify.com/CVE-2020-36193/): PEAR Archive_Tar Improper Link Resolution (high 7.5, exploited in the wild)
- [CVE-2020-28949](https://insights.sbomify.com/CVE-2020-28949/): PEAR Archive_Tar Deserialization of Untrusted Data (high 7.8, exploited in the wild)
- [CVE-2022-0028](https://insights.sbomify.com/CVE-2022-0028/): Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service (high 8.6, exploited in the wild)
- [CVE-2022-32894](https://insights.sbomify.com/CVE-2022-32894/): Apple iOS and macOS Out-of-Bounds Write (high 7.8, exploited in the wild)
- [CVE-2022-32893](https://insights.sbomify.com/CVE-2022-32893/): Apple iOS and macOS Out-of-Bounds Write (high 8.8, exploited in the wild)
- [CVE-2022-2856](https://insights.sbomify.com/CVE-2022-2856/): Google Chromium Intents Insufficient Input Validation (medium 6.5, exploited in the wild)
- [CVE-2022-26923](https://insights.sbomify.com/CVE-2022-26923/): Microsoft Active Directory Domain Services Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2022-22536](https://insights.sbomify.com/CVE-2022-22536/): SAP Multiple Products HTTP Request Smuggling (critical 9.8, exploited in the wild)
- [CVE-2022-21971](https://insights.sbomify.com/CVE-2022-21971/): Microsoft Windows Runtime Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2017-15944](https://insights.sbomify.com/CVE-2017-15944/): Palo Alto Networks PAN-OS Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2022-37042](https://insights.sbomify.com/CVE-2022-37042/): Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2022-27925](https://insights.sbomify.com/CVE-2022-27925/): Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload (high 7.2, exploited in the wild)
- [CVE-2022-34713](https://insights.sbomify.com/CVE-2022-34713/): Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2022-30333](https://insights.sbomify.com/CVE-2022-30333/): RARLAB UnRAR Directory Traversal (critical 9.8, exploited in the wild)
- [CVE-2022-27924](https://insights.sbomify.com/CVE-2022-27924/): Synacor Zimbra Collaboration Suite (ZCS) Command Injection (critical 9.8, exploited in the wild)
- [CVE-2022-26138](https://insights.sbomify.com/CVE-2022-26138/): Atlassian Questions For Confluence App Hard-coded Credentials (critical 9.8, exploited in the wild)
- [CVE-2022-22047](https://insights.sbomify.com/CVE-2022-22047/): Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-26925](https://insights.sbomify.com/CVE-2022-26925/): Microsoft Windows LSA Spoofing (high 8.1, exploited in the wild)
- [CVE-2022-29499](https://insights.sbomify.com/CVE-2022-29499/): Mitel MiVoice Connect Data Validation (critical 9.8, exploited in the wild)
- [CVE-2021-4034](https://insights.sbomify.com/CVE-2021-4034/): Red Hat Polkit Out-of-Bounds Read and Write (high 7.8, exploited in the wild)
- [CVE-2021-30983](https://insights.sbomify.com/CVE-2021-30983/): Apple iOS and iPadOS Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2021-30533](https://insights.sbomify.com/CVE-2021-30533/): Google Chromium PopupBlocker Security Bypass (medium 6.5, exploited in the wild)
- [CVE-2020-9907](https://insights.sbomify.com/CVE-2020-9907/): Apple Multiple Products Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2020-3837](https://insights.sbomify.com/CVE-2020-3837/): Apple Multiple Products Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2019-8605](https://insights.sbomify.com/CVE-2019-8605/): Apple Multiple Products Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2018-4344](https://insights.sbomify.com/CVE-2018-4344/): Apple Multiple Products Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2022-30190](https://insights.sbomify.com/CVE-2022-30190/): Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2021-38163](https://insights.sbomify.com/CVE-2021-38163/): SAP NetWeaver Unrestricted File Upload (critical 9.9, exploited in the wild)
- [CVE-2016-2388](https://insights.sbomify.com/CVE-2016-2388/): SAP NetWeaver Information Disclosure (medium 5.3, exploited in the wild)
- [CVE-2016-2386](https://insights.sbomify.com/CVE-2016-2386/): SAP NetWeaver SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2019-7195](https://insights.sbomify.com/CVE-2019-7195/): QNAP Photo Station Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2019-7194](https://insights.sbomify.com/CVE-2019-7194/): QNAP Photo Station Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2019-7193](https://insights.sbomify.com/CVE-2019-7193/): QNAP QTS Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2019-7192](https://insights.sbomify.com/CVE-2019-7192/): QNAP Photo Station Improper Access Control (critical 9.8, exploited in the wild)
- [CVE-2019-5825](https://insights.sbomify.com/CVE-2019-5825/): Google Chromium V8 Out-of-Bounds Write (medium 6.5, exploited in the wild)
- [CVE-2019-15271](https://insights.sbomify.com/CVE-2019-15271/): Cisco RV Series Routers Deserialization of Untrusted Data (high 8.8, exploited in the wild)
- [CVE-2018-6065](https://insights.sbomify.com/CVE-2018-6065/): Google Chromium V8 Integer Overflow (high 8.8, exploited in the wild)
- [CVE-2018-4990](https://insights.sbomify.com/CVE-2018-4990/): Adobe Acrobat and Reader Double Free (high 8.8, exploited in the wild)
- [CVE-2018-17480](https://insights.sbomify.com/CVE-2018-17480/): Google Chromium V8 Out-of-Bounds Write (high 8.8, exploited in the wild)
- [CVE-2018-17463](https://insights.sbomify.com/CVE-2018-17463/): Google Chromium V8 Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6862](https://insights.sbomify.com/CVE-2017-6862/): NETGEAR Multiple Devices Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2017-5070](https://insights.sbomify.com/CVE-2017-5070/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2017-5030](https://insights.sbomify.com/CVE-2017-5030/): Google Chromium V8 Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2016-5198](https://insights.sbomify.com/CVE-2016-5198/): Google Chromium V8 Out-of-Bounds Memory (high 8.8, exploited in the wild)
- [CVE-2016-1646](https://insights.sbomify.com/CVE-2016-1646/): Google Chromium V8 Out-of-Bounds Read (high 8.8, exploited in the wild)
- [CVE-2013-1331](https://insights.sbomify.com/CVE-2013-1331/): Microsoft Office Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2012-5054](https://insights.sbomify.com/CVE-2012-5054/): Adobe Flash Player Integer Overflow (high 8.8, exploited in the wild)
- [CVE-2012-4969](https://insights.sbomify.com/CVE-2012-4969/): Microsoft Internet Explorer Use-After-Free (high 8.1, exploited in the wild)
- [CVE-2012-1889](https://insights.sbomify.com/CVE-2012-1889/): Microsoft XML Core Services Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2012-0767](https://insights.sbomify.com/CVE-2012-0767/): Adobe Flash Player Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2012-0754](https://insights.sbomify.com/CVE-2012-0754/): Adobe Flash Player Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2012-0151](https://insights.sbomify.com/CVE-2012-0151/): Microsoft Windows Authenticode Signature Verification Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2011-2462](https://insights.sbomify.com/CVE-2011-2462/): Adobe Reader and Acrobat Universal 3D Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2011-0609](https://insights.sbomify.com/CVE-2011-0609/): Adobe Flash Player Unspecified (high 7.8, exploited in the wild)
- [CVE-2010-2883](https://insights.sbomify.com/CVE-2010-2883/): Adobe Acrobat and Reader Stack-Based Buffer Overflow (high 7.3, exploited in the wild)
- [CVE-2010-2572](https://insights.sbomify.com/CVE-2010-2572/): Microsoft PowerPoint Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2010-1297](https://insights.sbomify.com/CVE-2010-1297/): Adobe Flash Player Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2009-4324](https://insights.sbomify.com/CVE-2009-4324/): Adobe Acrobat and Reader Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2009-3953](https://insights.sbomify.com/CVE-2009-3953/): Adobe Acrobat and Reader Universal 3D Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2009-1862](https://insights.sbomify.com/CVE-2009-1862/): Adobe Acrobat and Reader, Flash Player Unspecified (high 7.8, exploited in the wild)
- [CVE-2009-0563](https://insights.sbomify.com/CVE-2009-0563/): Microsoft Office Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2009-0557](https://insights.sbomify.com/CVE-2009-0557/): Microsoft Office Object Record Corruption (high 7.8, exploited in the wild)
- [CVE-2008-0655](https://insights.sbomify.com/CVE-2008-0655/): Adobe Acrobat and Reader Unspecified (high 8.8, exploited in the wild)
- [CVE-2007-5659](https://insights.sbomify.com/CVE-2007-5659/): Adobe Acrobat and Reader Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2006-2492](https://insights.sbomify.com/CVE-2006-2492/): Microsoft Word Malformed Object Pointer (high 8.8, exploited in the wild)
- [CVE-2022-26134](https://insights.sbomify.com/CVE-2022-26134/): Atlassian Confluence Server and Data Center Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2019-3010](https://insights.sbomify.com/CVE-2019-3010/): Oracle Solaris Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2016-7256](https://insights.sbomify.com/CVE-2016-7256/): Microsoft Windows Open Type Font Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2016-3393](https://insights.sbomify.com/CVE-2016-3393/): Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2016-1010](https://insights.sbomify.com/CVE-2016-1010/): Adobe Flash Player and AIR Integer Overflow (high 8.8, exploited in the wild)
- [CVE-2016-0984](https://insights.sbomify.com/CVE-2016-0984/): Adobe Flash Player and AIR Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2016-0034](https://insights.sbomify.com/CVE-2016-0034/): Microsoft Silverlight Runtime Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2015-8651](https://insights.sbomify.com/CVE-2015-8651/): Adobe Flash Player Integer Overflow (high 8.8, exploited in the wild)
- [CVE-2015-6175](https://insights.sbomify.com/CVE-2015-6175/): Microsoft Windows Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2015-4495](https://insights.sbomify.com/CVE-2015-4495/): Mozilla Firefox Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2015-2425](https://insights.sbomify.com/CVE-2015-2425/): Microsoft Internet Explorer Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2015-2360](https://insights.sbomify.com/CVE-2015-2360/): Microsoft Win32k Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2015-1769](https://insights.sbomify.com/CVE-2015-1769/): Microsoft Windows Mount Manager Privilege Escalation (medium 6.6, exploited in the wild)
- [CVE-2015-1671](https://insights.sbomify.com/CVE-2015-1671/): Microsoft Windows Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2015-0310](https://insights.sbomify.com/CVE-2015-0310/): Adobe Flash Player ASLR Bypass (high 7.8, exploited in the wild)
- [CVE-2015-0071](https://insights.sbomify.com/CVE-2015-0071/): Microsoft Internet Explorer ASLR Bypass (medium 6.5, exploited in the wild)
- [CVE-2015-0016](https://insights.sbomify.com/CVE-2015-0016/): Microsoft Windows TS WebProxy Directory Traversal (high 7.8, exploited in the wild)
- [CVE-2014-8439](https://insights.sbomify.com/CVE-2014-8439/): Adobe Flash Player Dereferenced Pointer (high 8.8, exploited in the wild)
- [CVE-2014-4148](https://insights.sbomify.com/CVE-2014-4148/): Microsoft Windows Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2014-4123](https://insights.sbomify.com/CVE-2014-4123/): Microsoft Internet Explorer Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2014-4077](https://insights.sbomify.com/CVE-2014-4077/): Microsoft IME Japanese Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2014-3153](https://insights.sbomify.com/CVE-2014-3153/): Linux Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2014-2817](https://insights.sbomify.com/CVE-2014-2817/): Microsoft Internet Explorer Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2014-0546](https://insights.sbomify.com/CVE-2014-0546/): Adobe Reader and Acrobat Sandbox Bypass (high 8.8, exploited in the wild)
- [CVE-2013-7331](https://insights.sbomify.com/CVE-2013-7331/): Microsoft Internet Explorer Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2013-3993](https://insights.sbomify.com/CVE-2013-3993/): IBM InfoSphere BigInsights Invalid Input (medium 6.5, exploited in the wild)
- [CVE-2013-3896](https://insights.sbomify.com/CVE-2013-3896/): Microsoft Silverlight Information Disclosure (medium 5.5, exploited in the wild)
- [CVE-2013-2423](https://insights.sbomify.com/CVE-2013-2423/): Oracle JRE Unspecified (low 3.7, exploited in the wild)
- [CVE-2013-0431](https://insights.sbomify.com/CVE-2013-0431/): Oracle JRE Sandbox Bypass (low 3.7, exploited in the wild)
- [CVE-2013-0422](https://insights.sbomify.com/CVE-2013-0422/): Oracle JRE Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2013-0074](https://insights.sbomify.com/CVE-2013-0074/): Microsoft Silverlight Double Dereference (high 7.8, exploited in the wild)
- [CVE-2012-1710](https://insights.sbomify.com/CVE-2012-1710/): Oracle Fusion Middleware Unspecified (critical 9.8, exploited in the wild)
- [CVE-2010-1428](https://insights.sbomify.com/CVE-2010-1428/): Red Hat JBoss Information Disclosure (medium 5.9, exploited in the wild)
- [CVE-2010-0840](https://insights.sbomify.com/CVE-2010-0840/): Oracle JRE Unspecified (critical 9.8, exploited in the wild)
- [CVE-2010-0738](https://insights.sbomify.com/CVE-2010-0738/): Red Hat JBoss Authentication Bypass (low 3.7, exploited in the wild)
- [CVE-2018-8611](https://insights.sbomify.com/CVE-2018-8611/): Microsoft Windows Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2018-19953](https://insights.sbomify.com/CVE-2018-19953/): QNAP NAS File Station Cross-Site Scripting (medium 6.1, exploited in the wild)
- [CVE-2018-19949](https://insights.sbomify.com/CVE-2018-19949/): QNAP NAS File Station Command Injection (critical 9.8, exploited in the wild)
- [CVE-2018-19943](https://insights.sbomify.com/CVE-2018-19943/): QNAP NAS File Station Cross-Site Scripting (high 8.0, exploited in the wild)
- [CVE-2017-8543](https://insights.sbomify.com/CVE-2017-8543/): Microsoft Windows Search Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-8291](https://insights.sbomify.com/CVE-2017-8291/): Artifex Ghostscript Type Confusion (high 7.8, exploited in the wild)
- [CVE-2017-18362](https://insights.sbomify.com/CVE-2017-18362/): Kaseya VSA SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2017-0210](https://insights.sbomify.com/CVE-2017-0210/): Microsoft Internet Explorer Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2017-0149](https://insights.sbomify.com/CVE-2017-0149/): Microsoft Internet Explorer Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2017-0147](https://insights.sbomify.com/CVE-2017-0147/): Microsoft Windows SMBv1 Information Disclosure (high 7.5, exploited in the wild)
- [CVE-2017-0022](https://insights.sbomify.com/CVE-2017-0022/): Microsoft XML Core Services Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2017-0005](https://insights.sbomify.com/CVE-2017-0005/): Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2016-6367](https://insights.sbomify.com/CVE-2016-6367/): Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2016-6366](https://insights.sbomify.com/CVE-2016-6366/): Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2016-4657](https://insights.sbomify.com/CVE-2016-4657/): Apple iOS Webkit Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2016-4656](https://insights.sbomify.com/CVE-2016-4656/): Apple iOS Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2016-4655](https://insights.sbomify.com/CVE-2016-4655/): Apple iOS Information Disclosure (medium 5.5, exploited in the wild)
- [CVE-2016-3351](https://insights.sbomify.com/CVE-2016-3351/): Microsoft Internet Explorer and Edge Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2016-3298](https://insights.sbomify.com/CVE-2016-3298/): Microsoft Internet Explorer Messaging API Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2016-0162](https://insights.sbomify.com/CVE-2016-0162/): Microsoft Internet Explorer Information Disclosure (medium 4.3, exploited in the wild)
- [CVE-2022-20821](https://insights.sbomify.com/CVE-2022-20821/): Cisco IOS XR Open Port (medium 6.5, exploited in the wild)
- [CVE-2021-30883](https://insights.sbomify.com/CVE-2021-30883/): Apple Multiple Products Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2021-1048](https://insights.sbomify.com/CVE-2021-1048/): Android Kernel Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2021-0920](https://insights.sbomify.com/CVE-2021-0920/): Android Kernel Race Condition (medium 6.4, exploited in the wild)
- [CVE-2020-1027](https://insights.sbomify.com/CVE-2020-1027/): Microsoft Windows Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2020-0638](https://insights.sbomify.com/CVE-2020-0638/): Microsoft Update Notification Manager Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-8720](https://insights.sbomify.com/CVE-2019-8720/): WebKitGTK Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2019-7287](https://insights.sbomify.com/CVE-2019-7287/): Apple iOS Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2019-7286](https://insights.sbomify.com/CVE-2019-7286/): Apple Multiple Products Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2019-5786](https://insights.sbomify.com/CVE-2019-5786/): Google Chrome Blink Use-After-Free (medium 6.5, exploited in the wild)
- [CVE-2019-18426](https://insights.sbomify.com/CVE-2019-18426/): WhatsApp Cross-Site Scripting (high 8.2, exploited in the wild)
- [CVE-2019-1385](https://insights.sbomify.com/CVE-2019-1385/): Microsoft Windows AppX Deployment Extensions Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-13720](https://insights.sbomify.com/CVE-2019-13720/): Google Chrome WebAudio Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2019-11708](https://insights.sbomify.com/CVE-2019-11708/): Mozilla Firefox and Thunderbird Sandbox Escape (critical 10.0, exploited in the wild)
- [CVE-2019-11707](https://insights.sbomify.com/CVE-2019-11707/): Mozilla Firefox and Thunderbird Type Confusion (high 8.8, exploited in the wild)
- [CVE-2019-1130](https://insights.sbomify.com/CVE-2019-1130/): Microsoft Windows AppX Deployment Service Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-0880](https://insights.sbomify.com/CVE-2019-0880/): Microsoft Windows Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-0703](https://insights.sbomify.com/CVE-2019-0703/): Microsoft Windows SMB Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2019-0676](https://insights.sbomify.com/CVE-2019-0676/): Microsoft Internet Explorer Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2018-8589](https://insights.sbomify.com/CVE-2018-8589/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2018-5002](https://insights.sbomify.com/CVE-2018-5002/): Adobe Flash Player Stack-based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2022-30525](https://insights.sbomify.com/CVE-2022-30525/): Zyxel Multiple Firewalls OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2022-22947](https://insights.sbomify.com/CVE-2022-22947/): VMware Spring Cloud Gateway Code Injection (critical 10.0, exploited in the wild)
- [CVE-2022-1388](https://insights.sbomify.com/CVE-2022-1388/): F5 BIG-IP Missing Authentication (critical 9.8, exploited in the wild)
- [CVE-2021-1789](https://insights.sbomify.com/CVE-2021-1789/): Apple Multiple Products Type Confusion (high 8.8, exploited in the wild)
- [CVE-2019-8506](https://insights.sbomify.com/CVE-2019-8506/): Apple Multiple Products Type Confusion (high 8.8, exploited in the wild)
- [CVE-2014-4113](https://insights.sbomify.com/CVE-2014-4113/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2014-0322](https://insights.sbomify.com/CVE-2014-0322/): Microsoft Internet Explorer Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2014-0160](https://insights.sbomify.com/CVE-2014-0160/): OpenSSL Information Disclosure (high 7.5, exploited in the wild)
- [CVE-2022-29464](https://insights.sbomify.com/CVE-2022-29464/): WSO2 Multiple Products Unrestrictive Upload of File (critical 9.8, exploited in the wild)
- [CVE-2022-26904](https://insights.sbomify.com/CVE-2022-26904/): Microsoft Windows User Profile Service Privilege Escalation (high 7.0, exploited in the wild)
- [CVE-2022-21919](https://insights.sbomify.com/CVE-2022-21919/): Microsoft Windows User Profile Service Privilege Escalation (high 7.0, exploited in the wild)
- [CVE-2022-0847](https://insights.sbomify.com/CVE-2022-0847/): Linux Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-41357](https://insights.sbomify.com/CVE-2021-41357/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-40450](https://insights.sbomify.com/CVE-2021-40450/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-1003029](https://insights.sbomify.com/CVE-2019-1003029/): Jenkins Script Security Plugin Sandbox Bypass (critical 9.9, exploited in the wild)
- [CVE-2022-22718](https://insights.sbomify.com/CVE-2022-22718/): Microsoft Windows Print Spooler Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-3568](https://insights.sbomify.com/CVE-2019-3568/): WhatsApp VOIP Stack Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2018-6882](https://insights.sbomify.com/CVE-2018-6882/): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2022-22960](https://insights.sbomify.com/CVE-2022-22960/): VMware Multiple Products Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-1364](https://insights.sbomify.com/CVE-2022-1364/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2019-3929](https://insights.sbomify.com/CVE-2019-3929/): Crestron Multiple Products Command Injection (critical 9.8, exploited in the wild)
- [CVE-2019-16057](https://insights.sbomify.com/CVE-2019-16057/): D-Link DNS-320 Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2018-7841](https://insights.sbomify.com/CVE-2018-7841/): Schneider Electric U.motion Builder SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2016-4523](https://insights.sbomify.com/CVE-2016-4523/): Trihedral VTScada (formerly VTS) Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2014-0780](https://insights.sbomify.com/CVE-2014-0780/): InduSoft Web Studio NTWebServer Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2010-5330](https://insights.sbomify.com/CVE-2010-5330/): Ubiquiti AirOS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2007-3010](https://insights.sbomify.com/CVE-2007-3010/): Alcatel OmniPCX Enterprise Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2022-22954](https://insights.sbomify.com/CVE-2022-22954/): VMware Workspace ONE Access and Identity Manager Server-Side Template Injection (critical 9.8, exploited in the wild)
- [CVE-2022-24521](https://insights.sbomify.com/CVE-2022-24521/): Microsoft Windows CLFS Driver Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2018-7602](https://insights.sbomify.com/CVE-2018-7602/): Drupal Core Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2018-20753](https://insights.sbomify.com/CVE-2018-20753/): Kaseya VSA Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2015-5123](https://insights.sbomify.com/CVE-2015-5123/): Adobe Flash Player Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2015-5122](https://insights.sbomify.com/CVE-2015-5122/): Adobe Flash Player Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2015-3113](https://insights.sbomify.com/CVE-2015-3113/): Adobe Flash Player Heap-Based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2015-2502](https://insights.sbomify.com/CVE-2015-2502/): Microsoft Internet Explorer Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2015-0313](https://insights.sbomify.com/CVE-2015-0313/): Adobe Flash Player Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2015-0311](https://insights.sbomify.com/CVE-2015-0311/): Adobe Flash Player Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2014-9163](https://insights.sbomify.com/CVE-2014-9163/): Adobe Flash Player Stack-Based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2022-23176](https://insights.sbomify.com/CVE-2022-23176/): WatchGuard Firebox and XTM Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2021-42287](https://insights.sbomify.com/CVE-2021-42287/): Microsoft Active Directory Domain Services Privilege Escalation (high 7.5, exploited in the wild)
- [CVE-2021-42278](https://insights.sbomify.com/CVE-2021-42278/): Microsoft Active Directory Domain Services Privilege Escalation (high 7.5, exploited in the wild)
- [CVE-2021-39793](https://insights.sbomify.com/CVE-2021-39793/): Google Pixel Out-of-Bounds Write (high 7.8, exploited in the wild)
- [CVE-2021-27852](https://insights.sbomify.com/CVE-2021-27852/): Checkbox Survey Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2021-22600](https://insights.sbomify.com/CVE-2021-22600/): Linux Kernel Privilege Escalation (medium 6.6, exploited in the wild)
- [CVE-2020-2509](https://insights.sbomify.com/CVE-2020-2509/): QNAP Network-Attached Storage (NAS) Command Injection (critical 9.8, exploited in the wild)
- [CVE-2017-11317](https://insights.sbomify.com/CVE-2017-11317/): Telerik UI for ASP.NET AJAX Unrestricted File Upload (critical 9.8, exploited in the wild)
- [CVE-2021-3156](https://insights.sbomify.com/CVE-2021-3156/): Sudo Heap-Based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2021-31166](https://insights.sbomify.com/CVE-2021-31166/): Microsoft HTTP Protocol Stack Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-0148](https://insights.sbomify.com/CVE-2017-0148/): Microsoft SMBv1 Server Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2022-22965](https://insights.sbomify.com/CVE-2022-22965/): Spring Framework JDK 9+ Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2022-22675](https://insights.sbomify.com/CVE-2022-22675/): Apple macOS Out-of-Bounds Write (high 7.8, exploited in the wild)
- [CVE-2022-22674](https://insights.sbomify.com/CVE-2022-22674/): Apple macOS Out-of-Bounds Read (medium 5.5, exploited in the wild)
- [CVE-2021-45382](https://insights.sbomify.com/CVE-2021-45382/): D-Link Multiple Routers Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2022-26871](https://insights.sbomify.com/CVE-2022-26871/): Trend Micro Apex Central Arbitrary File Upload (critical 9.8, exploited in the wild)
- [CVE-2022-1040](https://insights.sbomify.com/CVE-2022-1040/): Sophos Firewall Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2021-34484](https://insights.sbomify.com/CVE-2021-34484/): Microsoft Windows User Profile Service Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-28799](https://insights.sbomify.com/CVE-2021-28799/): QNAP NAS Improper Authorization (critical 10.0, exploited in the wild)
- [CVE-2021-21551](https://insights.sbomify.com/CVE-2021-21551/): Dell dbutil Driver Insufficient Access Control (high 8.8, exploited in the wild)
- [CVE-2018-10562](https://insights.sbomify.com/CVE-2018-10562/): Dasan GPON Routers Command Injection (critical 9.8, exploited in the wild)
- [CVE-2018-10561](https://insights.sbomify.com/CVE-2018-10561/): Dasan GPON Routers Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2022-1096](https://insights.sbomify.com/CVE-2022-1096/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2022-0543](https://insights.sbomify.com/CVE-2022-0543/): Debian-specific Redis Server Lua Sandbox Escape (critical 10.0, exploited in the wild)
- [CVE-2021-38646](https://insights.sbomify.com/CVE-2021-38646/): Microsoft Office Access Connectivity Engine Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2021-34486](https://insights.sbomify.com/CVE-2021-34486/): Microsoft Windows Event Tracing Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-26085](https://insights.sbomify.com/CVE-2021-26085/): Atlassian Confluence Server Pre-Authorization Arbitrary File Read (medium 5.3, exploited in the wild)
- [CVE-2021-20028](https://insights.sbomify.com/CVE-2021-20028/): SonicWall Secure Remote Access (SRA) SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2019-7483](https://insights.sbomify.com/CVE-2019-7483/): SonicWall SMA100 Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2018-8440](https://insights.sbomify.com/CVE-2018-8440/): Microsoft Windows Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2018-8406](https://insights.sbomify.com/CVE-2018-8406/): Microsoft DirectX Graphics Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2018-8405](https://insights.sbomify.com/CVE-2018-8405/): Microsoft DirectX Graphics Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2017-0213](https://insights.sbomify.com/CVE-2017-0213/): Microsoft Windows Privilege Escalation (high 7.3, exploited in the wild)
- [CVE-2017-0059](https://insights.sbomify.com/CVE-2017-0059/): Microsoft Internet Explorer Information Disclosure (medium 4.3, exploited in the wild)
- [CVE-2017-0037](https://insights.sbomify.com/CVE-2017-0037/): Microsoft Edge and Internet Explorer Type Confusion (high 8.1, exploited in the wild)
- [CVE-2016-7201](https://insights.sbomify.com/CVE-2016-7201/): Microsoft Edge Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2016-7200](https://insights.sbomify.com/CVE-2016-7200/): Microsoft Edge Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2016-0189](https://insights.sbomify.com/CVE-2016-0189/): Microsoft Internet Explorer Memory Corruption (high 7.5, exploited in the wild)
- [CVE-2016-0151](https://insights.sbomify.com/CVE-2016-0151/): Microsoft Windows CSRSS Security Feature Bypass (high 7.8, exploited in the wild)
- [CVE-2016-0040](https://insights.sbomify.com/CVE-2016-0040/): Microsoft Windows Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2015-2426](https://insights.sbomify.com/CVE-2015-2426/): Microsoft Windows Adobe Type Manager Library Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2015-2419](https://insights.sbomify.com/CVE-2015-2419/): Microsoft Internet Explorer Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2015-1770](https://insights.sbomify.com/CVE-2015-1770/): Microsoft Office Uninitialized Memory Use (high 8.8, exploited in the wild)
- [CVE-2013-3660](https://insights.sbomify.com/CVE-2013-3660/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2013-2729](https://insights.sbomify.com/CVE-2013-2729/): Adobe Reader and Acrobat Arbitrary Integer Overflow (high 8.8, exploited in the wild)
- [CVE-2013-2551](https://insights.sbomify.com/CVE-2013-2551/): Microsoft Internet Explorer Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2013-2465](https://insights.sbomify.com/CVE-2013-2465/): Oracle Java SE Unspecified (critical 9.8, exploited in the wild)
- [CVE-2013-1690](https://insights.sbomify.com/CVE-2013-1690/): Mozilla Firefox and Thunderbird Denial-of-Service (high 8.8, exploited in the wild)
- [CVE-2012-5076](https://insights.sbomify.com/CVE-2012-5076/): Oracle Java SE Sandbox Bypass (critical 9.8, exploited in the wild)
- [CVE-2012-2539](https://insights.sbomify.com/CVE-2012-2539/): Microsoft Word Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2012-2034](https://insights.sbomify.com/CVE-2012-2034/): Adobe Flash Player Memory Corruption (high 7.5, exploited in the wild)
- [CVE-2012-0518](https://insights.sbomify.com/CVE-2012-0518/): Oracle Fusion Middleware Unspecified (medium 4.7, exploited in the wild)
- [CVE-2011-2005](https://insights.sbomify.com/CVE-2011-2005/): Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation (high 7.8, exploited in the wild)
- [CVE-2010-4398](https://insights.sbomify.com/CVE-2010-4398/): Microsoft Windows Kernel Stack-Based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2022-26318](https://insights.sbomify.com/CVE-2022-26318/): WatchGuard Firebox and XTM Appliances Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2022-26143](https://insights.sbomify.com/CVE-2022-26143/): MiCollab, MiVoice Business Express Access Control (critical 9.8, exploited in the wild)
- [CVE-2022-21999](https://insights.sbomify.com/CVE-2022-21999/): Microsoft Windows Print Spooler Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-42237](https://insights.sbomify.com/CVE-2021-42237/): Sitecore XP Remote Command Execution (critical 9.8, exploited in the wild)
- [CVE-2021-22941](https://insights.sbomify.com/CVE-2021-22941/): Citrix ShareFile Improper Access Control (critical 9.8, exploited in the wild)
- [CVE-2020-9377](https://insights.sbomify.com/CVE-2020-9377/): D-Link DIR-610 Devices Remote Command Execution (high 8.8, exploited in the wild)
- [CVE-2020-9054](https://insights.sbomify.com/CVE-2020-9054/): Zyxel Multiple NAS Devices OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2020-7247](https://insights.sbomify.com/CVE-2020-7247/): OpenSMTPD Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-5410](https://insights.sbomify.com/CVE-2020-5410/): VMware Tanzu Spring Cloud Config Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2020-25223](https://insights.sbomify.com/CVE-2020-25223/): Sophos SG UTM Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-2506](https://insights.sbomify.com/CVE-2020-2506/): QNAP Helpdesk Improper Access Control (high 7.3, exploited in the wild)
- [CVE-2020-2021](https://insights.sbomify.com/CVE-2020-2021/): Palo Alto Networks PAN-OS Authentication Bypass (critical 10.0, exploited in the wild)
- [CVE-2020-1956](https://insights.sbomify.com/CVE-2020-1956/): Apache Kylin OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2020-1631](https://insights.sbomify.com/CVE-2020-1631/): Juniper Junos OS Path Traversal (high 8.8, exploited in the wild)
- [CVE-2019-6340](https://insights.sbomify.com/CVE-2019-6340/): Drupal Core Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2019-2616](https://insights.sbomify.com/CVE-2019-2616/): Oracle BI Publisher Unauthorized Access (high 7.2, exploited in the wild)
- [CVE-2019-16920](https://insights.sbomify.com/CVE-2019-16920/): D-Link Multiple Routers Command Injection (critical 9.8, exploited in the wild)
- [CVE-2019-15107](https://insights.sbomify.com/CVE-2019-15107/): Webmin Command Injection (critical 9.8, exploited in the wild)
- [CVE-2019-12991](https://insights.sbomify.com/CVE-2019-12991/): Citrix SD-WAN and NetScaler Command Injection (high 8.8, exploited in the wild)
- [CVE-2019-12989](https://insights.sbomify.com/CVE-2019-12989/): Citrix SD-WAN and NetScaler SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2019-11043](https://insights.sbomify.com/CVE-2019-11043/): PHP FastCGI Process Manager (FPM) Buffer Overflow (high 8.7, exploited in the wild)
- [CVE-2019-10068](https://insights.sbomify.com/CVE-2019-10068/): Kentico Xperience Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2019-1003030](https://insights.sbomify.com/CVE-2019-1003030/): Jenkins Matrix Project Plugin Remote Code Execution (critical 9.9, exploited in the wild)
- [CVE-2019-0903](https://insights.sbomify.com/CVE-2019-0903/): Microsoft GDI Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2018-8414](https://insights.sbomify.com/CVE-2018-8414/): Microsoft Windows Shell Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2018-8373](https://insights.sbomify.com/CVE-2018-8373/): Microsoft Scripting Engine Memory Corruption (high 7.5, exploited in the wild)
- [CVE-2018-6961](https://insights.sbomify.com/CVE-2018-6961/): VMware SD-WAN Edge by VeloCloud Command Injection (high 8.1, exploited in the wild)
- [CVE-2018-14839](https://insights.sbomify.com/CVE-2018-14839/): LG N1A1 NAS Remote Command Execution (critical 9.8, exploited in the wild)
- [CVE-2018-1273](https://insights.sbomify.com/CVE-2018-1273/): VMware Tanzu Spring Data Commons Property Binder (critical 9.8, exploited in the wild)
- [CVE-2018-11138](https://insights.sbomify.com/CVE-2018-11138/): Quest KACE System Management Appliance Remote Command Execution (critical 9.8, exploited in the wild)
- [CVE-2018-0147](https://insights.sbomify.com/CVE-2018-0147/): Cisco Secure Access Control System Java Deserialization (critical 9.8, exploited in the wild)
- [CVE-2018-0125](https://insights.sbomify.com/CVE-2018-0125/): Cisco VPN Routers Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-6334](https://insights.sbomify.com/CVE-2017-6334/): NETGEAR DGN2200 Devices OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2017-6316](https://insights.sbomify.com/CVE-2017-6316/): Citrix Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-3881](https://insights.sbomify.com/CVE-2017-3881/): Cisco IOS and IOS XE Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-12617](https://insights.sbomify.com/CVE-2017-12617/): Apache Tomcat Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2017-12615](https://insights.sbomify.com/CVE-2017-12615/): Apache Tomcat on Windows Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2017-0146](https://insights.sbomify.com/CVE-2017-0146/): Microsoft Windows SMB Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2016-7892](https://insights.sbomify.com/CVE-2016-7892/): Adobe Flash Player Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2016-4171](https://insights.sbomify.com/CVE-2016-4171/): Adobe Flash Player Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2016-1555](https://insights.sbomify.com/CVE-2016-1555/): NETGEAR Multiple WAP Devices Command Injection (critical 9.8, exploited in the wild)
- [CVE-2016-11021](https://insights.sbomify.com/CVE-2016-11021/): D-Link DCS-930L Devices OS Command Injection (high 7.2, exploited in the wild)
- [CVE-2016-10174](https://insights.sbomify.com/CVE-2016-10174/): NETGEAR WNR2000v5 Router Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2016-0752](https://insights.sbomify.com/CVE-2016-0752/): Ruby on Rails Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2015-4068](https://insights.sbomify.com/CVE-2015-4068/): Arcserve Unified Data Protection (UDP) Directory Traversal (critical 9.1, exploited in the wild)
- [CVE-2015-3035](https://insights.sbomify.com/CVE-2015-3035/): TP-Link Multiple Archer Devices Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2015-1427](https://insights.sbomify.com/CVE-2015-1427/): Elasticsearch Groovy Scripting Engine Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2015-1187](https://insights.sbomify.com/CVE-2015-1187/): D-Link and TRENDnet Multiple Devices Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2015-0666](https://insights.sbomify.com/CVE-2015-0666/): Cisco Prime Data Center Network Manager (DCNM) Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2014-6332](https://insights.sbomify.com/CVE-2014-6332/): Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2014-6324](https://insights.sbomify.com/CVE-2014-6324/): Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2014-6287](https://insights.sbomify.com/CVE-2014-6287/): Rejetto HTTP File Server (HFS) Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-3120](https://insights.sbomify.com/CVE-2014-3120/): Elasticsearch Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2014-0130](https://insights.sbomify.com/CVE-2014-0130/): Ruby on Rails Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2013-5223](https://insights.sbomify.com/CVE-2013-5223/): D-Link DSL-2760U Gateway Cross-Site Scripting (medium 5.4, exploited in the wild)
- [CVE-2013-4810](https://insights.sbomify.com/CVE-2013-4810/): HP Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2013-2251](https://insights.sbomify.com/CVE-2013-2251/): Apache Struts Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2012-1823](https://insights.sbomify.com/CVE-2012-1823/): PHP-CGI Query String Parameter (critical 9.8, exploited in the wild)
- [CVE-2010-4345](https://insights.sbomify.com/CVE-2010-4345/): Exim Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2010-4344](https://insights.sbomify.com/CVE-2010-4344/): Exim Heap-Based Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2010-3035](https://insights.sbomify.com/CVE-2010-3035/): Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2010-2861](https://insights.sbomify.com/CVE-2010-2861/): Adobe ColdFusion Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2009-2055](https://insights.sbomify.com/CVE-2009-2055/): Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service (medium 5.9, exploited in the wild)
- [CVE-2009-1151](https://insights.sbomify.com/CVE-2009-1151/): phpMyAdmin Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2009-0927](https://insights.sbomify.com/CVE-2009-0927/): Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2005-2773](https://insights.sbomify.com/CVE-2005-2773/): HP OpenView Network Node Manager Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-5135](https://insights.sbomify.com/CVE-2020-5135/): SonicWall SonicOS Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2019-1405](https://insights.sbomify.com/CVE-2019-1405/): Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-1322](https://insights.sbomify.com/CVE-2019-1322/): Microsoft Windows Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-1315](https://insights.sbomify.com/CVE-2019-1315/): Microsoft Windows Error Reporting Manager Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-1253](https://insights.sbomify.com/CVE-2019-1253/): Microsoft Windows AppX Deployment Server Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-1132](https://insights.sbomify.com/CVE-2019-1132/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-1129](https://insights.sbomify.com/CVE-2019-1129/): Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-1069](https://insights.sbomify.com/CVE-2019-1069/): Microsoft Task Scheduler Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-1064](https://insights.sbomify.com/CVE-2019-1064/): Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-0841](https://insights.sbomify.com/CVE-2019-0841/): Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-0543](https://insights.sbomify.com/CVE-2019-0543/): Microsoft Windows Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2018-8120](https://insights.sbomify.com/CVE-2018-8120/): Microsoft Win32k Privilege Escalation (high 7.0, exploited in the wild)
- [CVE-2017-0101](https://insights.sbomify.com/CVE-2017-0101/): Microsoft Windows Transaction Manager Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2016-3309](https://insights.sbomify.com/CVE-2016-3309/): Microsoft Windows Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2015-2546](https://insights.sbomify.com/CVE-2015-2546/): Microsoft Win32k Memory Corruption (high 8.2, exploited in the wild)
- [CVE-2022-26486](https://insights.sbomify.com/CVE-2022-26486/): Mozilla Firefox Use-After-Free (critical 9.6, exploited in the wild)
- [CVE-2022-26485](https://insights.sbomify.com/CVE-2022-26485/): Mozilla Firefox Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-21973](https://insights.sbomify.com/CVE-2021-21973/): VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) (medium 5.3, exploited in the wild)
- [CVE-2020-8218](https://insights.sbomify.com/CVE-2020-8218/): Pulse Connect Secure Code Injection (high 7.2, exploited in the wild)
- [CVE-2019-11581](https://insights.sbomify.com/CVE-2019-11581/): Atlassian Jira Server and Data Center Server-Side Template Injection (critical 9.8, exploited in the wild)
- [CVE-2017-6077](https://insights.sbomify.com/CVE-2017-6077/): NETGEAR DGN2200 Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2016-6277](https://insights.sbomify.com/CVE-2016-6277/): NETGEAR Multiple Routers Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2013-0631](https://insights.sbomify.com/CVE-2013-0631/): Adobe ColdFusion Information Disclosure (high 7.5, exploited in the wild)
- [CVE-2013-0629](https://insights.sbomify.com/CVE-2013-0629/): Adobe ColdFusion Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2013-0625](https://insights.sbomify.com/CVE-2013-0625/): Adobe ColdFusion Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2009-3960](https://insights.sbomify.com/CVE-2009-3960/): Adobe BlazeDS Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2022-20708](https://insights.sbomify.com/CVE-2022-20708/): Cisco Small Business RV Series Routers Stack-based Buffer Overflow (critical 10.0, exploited in the wild)
- [CVE-2022-20703](https://insights.sbomify.com/CVE-2022-20703/): Cisco Small Business RV Series Routers Stack-based Buffer Overflow (critical 10.0, exploited in the wild)
- [CVE-2022-20701](https://insights.sbomify.com/CVE-2022-20701/): Cisco Small Business RV Series Routers Stack-based Buffer Overflow (critical 10.0, exploited in the wild)
- [CVE-2022-20700](https://insights.sbomify.com/CVE-2022-20700/): Cisco Small Business RV Series Routers Stack-based Buffer Overflow (critical 10.0, exploited in the wild)
- [CVE-2022-20699](https://insights.sbomify.com/CVE-2022-20699/): Cisco Small Business RV Series Routers Stack-based Buffer Overflow (critical 10.0, exploited in the wild)
- [CVE-2021-41379](https://insights.sbomify.com/CVE-2021-41379/): Microsoft Windows Installer Privilege Escalation (medium 5.5, exploited in the wild)
- [CVE-2020-1938](https://insights.sbomify.com/CVE-2020-1938/): Apache Tomcat Improper Privilege Management (critical 9.8, exploited in the wild)
- [CVE-2020-11899](https://insights.sbomify.com/CVE-2020-11899/): Treck TCP/IP stack Out-of-Bounds Read (medium 5.4, exploited in the wild)
- [CVE-2019-16928](https://insights.sbomify.com/CVE-2019-16928/): Exim Out-of-bounds Write (critical 9.8, exploited in the wild)
- [CVE-2019-1652](https://insights.sbomify.com/CVE-2019-1652/): Cisco Small Business Routers Improper Input Validation (high 7.2, exploited in the wild)
- [CVE-2019-1297](https://insights.sbomify.com/CVE-2019-1297/): Microsoft Excel Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2018-8581](https://insights.sbomify.com/CVE-2018-8581/): Microsoft Exchange Server Privilege Escalation (high 7.4, exploited in the wild)
- [CVE-2018-8298](https://insights.sbomify.com/CVE-2018-8298/): ChakraCore Scripting Engine Type Confusion (high 7.5, exploited in the wild)
- [CVE-2018-0180](https://insights.sbomify.com/CVE-2018-0180/): Cisco IOS Software Denial-of-Service (medium 6.8, exploited in the wild)
- [CVE-2018-0179](https://insights.sbomify.com/CVE-2018-0179/): Cisco IOS Software Denial-of-Service (medium 6.8, exploited in the wild)
- [CVE-2018-0175](https://insights.sbomify.com/CVE-2018-0175/): Cisco IOS, XR, and XE Software Buffer Overflow (high 8.0, exploited in the wild)
- [CVE-2018-0174](https://insights.sbomify.com/CVE-2018-0174/): Cisco IOS Software and Cisco IOS XE Software Improper Input Validation (high 8.6, exploited in the wild)
- [CVE-2018-0173](https://insights.sbomify.com/CVE-2018-0173/): Cisco IOS and IOS XE Software Improper Input Validation (high 8.6, exploited in the wild)
- [CVE-2018-0172](https://insights.sbomify.com/CVE-2018-0172/): Cisco IOS and IOS XE Software Improper Input Validation (high 8.6, exploited in the wild)
- [CVE-2018-0167](https://insights.sbomify.com/CVE-2018-0167/): Cisco IOS, XR, and XE Software Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2018-0161](https://insights.sbomify.com/CVE-2018-0161/): Cisco IOS Software Resource Management Errors (medium 6.3, exploited in the wild)
- [CVE-2018-0159](https://insights.sbomify.com/CVE-2018-0159/): Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2018-0158](https://insights.sbomify.com/CVE-2018-0158/): Cisco IOS and XE Software Internet Key Exchange Memory Leak (high 8.6, exploited in the wild)
- [CVE-2018-0156](https://insights.sbomify.com/CVE-2018-0156/): Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2018-0155](https://insights.sbomify.com/CVE-2018-0155/): Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service (high 8.6, exploited in the wild)
- [CVE-2018-0154](https://insights.sbomify.com/CVE-2018-0154/): Cisco IOS Software Integrated Services Module for VPN Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2018-0151](https://insights.sbomify.com/CVE-2018-0151/): Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-8540](https://insights.sbomify.com/CVE-2017-8540/): Microsoft Malware Protection Engine Improper Restriction of Operations (high 7.8, exploited in the wild)
- [CVE-2017-6744](https://insights.sbomify.com/CVE-2017-6744/): Cisco IOS Software SNMP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6743](https://insights.sbomify.com/CVE-2017-6743/): Cisco IOS and IOS XE Software SNMP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6740](https://insights.sbomify.com/CVE-2017-6740/): Cisco IOS and IOS XE Software SNMP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6739](https://insights.sbomify.com/CVE-2017-6739/): Cisco IOS and IOS XE Software SNMP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6738](https://insights.sbomify.com/CVE-2017-6738/): Cisco IOS and IOS XE Software SNMP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6737](https://insights.sbomify.com/CVE-2017-6737/): Cisco IOS and IOS XE Software SNMP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6736](https://insights.sbomify.com/CVE-2017-6736/): Cisco IOS and IOS XE Software SNMP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6663](https://insights.sbomify.com/CVE-2017-6663/): Cisco IOS Software and Cisco IOS XE Software Denial-of-Service (medium 6.5, exploited in the wild)
- [CVE-2017-6627](https://insights.sbomify.com/CVE-2017-6627/): Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2017-12319](https://insights.sbomify.com/CVE-2017-12319/): Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service (medium 5.9, exploited in the wild)
- [CVE-2017-12240](https://insights.sbomify.com/CVE-2017-12240/): Cisco IOS and IOS XE Software DHCP Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-12238](https://insights.sbomify.com/CVE-2017-12238/): Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service (medium 6.5, exploited in the wild)
- [CVE-2017-12237](https://insights.sbomify.com/CVE-2017-12237/): Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2017-12235](https://insights.sbomify.com/CVE-2017-12235/): Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2017-12234](https://insights.sbomify.com/CVE-2017-12234/): Cisco IOS Software Common Industrial Protocol Request Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2017-12233](https://insights.sbomify.com/CVE-2017-12233/): Cisco IOS Software Common Industrial Protocol Request Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2017-12232](https://insights.sbomify.com/CVE-2017-12232/): Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service (medium 6.5, exploited in the wild)
- [CVE-2017-12231](https://insights.sbomify.com/CVE-2017-12231/): Cisco IOS Software Network Address Translation Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2017-11826](https://insights.sbomify.com/CVE-2017-11826/): Microsoft Office Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2017-11292](https://insights.sbomify.com/CVE-2017-11292/): Adobe Flash Player Type Confusion (high 8.8, exploited in the wild)
- [CVE-2017-0261](https://insights.sbomify.com/CVE-2017-0261/): Microsoft Office Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2017-0001](https://insights.sbomify.com/CVE-2017-0001/): Microsoft Graphics Device Interface (GDI) Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2016-8562](https://insights.sbomify.com/CVE-2016-8562/): Siemens SIMATIC CP 1543-1 Improper Privilege Management (high 7.5, exploited in the wild)
- [CVE-2016-7855](https://insights.sbomify.com/CVE-2016-7855/): Adobe Flash Player Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2016-7262](https://insights.sbomify.com/CVE-2016-7262/): Microsoft Office Security Feature Bypass (high 7.8, exploited in the wild)
- [CVE-2016-7193](https://insights.sbomify.com/CVE-2016-7193/): Microsoft Office Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2016-5195](https://insights.sbomify.com/CVE-2016-5195/): Linux Kernel Race Condition (high 7.0, exploited in the wild)
- [CVE-2016-4117](https://insights.sbomify.com/CVE-2016-4117/): Adobe Flash Player Arbitrary Code Execution (high 7.8, exploited in the wild)
- [CVE-2016-1019](https://insights.sbomify.com/CVE-2016-1019/): Adobe Flash Player Arbitrary Code Execution (high 7.8, exploited in the wild)
- [CVE-2016-0099](https://insights.sbomify.com/CVE-2016-0099/): Microsoft Windows Secondary Logon Service Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2015-7645](https://insights.sbomify.com/CVE-2015-7645/): Adobe Flash Player Arbitrary Code Execution (high 7.8, exploited in the wild)
- [CVE-2015-5119](https://insights.sbomify.com/CVE-2015-5119/): Adobe Flash Player Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2015-4902](https://insights.sbomify.com/CVE-2015-4902/): Oracle Java SE Integrity Check (medium 5.3, exploited in the wild)
- [CVE-2015-3043](https://insights.sbomify.com/CVE-2015-3043/): Adobe Flash Player Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2015-2590](https://insights.sbomify.com/CVE-2015-2590/): Oracle Java SE and Java SE Embedded Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2015-2545](https://insights.sbomify.com/CVE-2015-2545/): Microsoft Office Malformed EPS File (high 7.8, exploited in the wild)
- [CVE-2015-2424](https://insights.sbomify.com/CVE-2015-2424/): Microsoft PowerPoint Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2015-2387](https://insights.sbomify.com/CVE-2015-2387/): Microsoft ATM Font Driver Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2015-1701](https://insights.sbomify.com/CVE-2015-1701/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2015-1642](https://insights.sbomify.com/CVE-2015-1642/): Microsoft Office Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2014-4114](https://insights.sbomify.com/CVE-2014-4114/): Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2014-0496](https://insights.sbomify.com/CVE-2014-0496/): Adobe Reader and Acrobat Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2013-5065](https://insights.sbomify.com/CVE-2013-5065/): Microsoft Windows Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2013-3897](https://insights.sbomify.com/CVE-2013-3897/): Microsoft Internet Explorer Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2013-3346](https://insights.sbomify.com/CVE-2013-3346/): Adobe Reader and Acrobat Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2013-1675](https://insights.sbomify.com/CVE-2013-1675/): Mozilla Firefox Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2013-1347](https://insights.sbomify.com/CVE-2013-1347/): Microsoft Internet Explorer Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2013-0641](https://insights.sbomify.com/CVE-2013-0641/): Adobe Reader Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2013-0640](https://insights.sbomify.com/CVE-2013-0640/): Adobe Reader and Acrobat Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2013-0632](https://insights.sbomify.com/CVE-2013-0632/): Adobe ColdFusion Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2012-4681](https://insights.sbomify.com/CVE-2012-4681/): Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2012-1856](https://insights.sbomify.com/CVE-2012-1856/): Microsoft Office MSCOMCTL.OCX Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2012-1723](https://insights.sbomify.com/CVE-2012-1723/): Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2012-1535](https://insights.sbomify.com/CVE-2012-1535/): Adobe Flash Player Arbitrary Code Execution (high 7.8, exploited in the wild)
- [CVE-2012-0507](https://insights.sbomify.com/CVE-2012-0507/): Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2011-3544](https://insights.sbomify.com/CVE-2011-3544/): Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2011-1889](https://insights.sbomify.com/CVE-2011-1889/): Microsoft Forefront TMG Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2011-0611](https://insights.sbomify.com/CVE-2011-0611/): Adobe Flash Player Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2010-3333](https://insights.sbomify.com/CVE-2010-3333/): Microsoft Office Stack-based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2010-0232](https://insights.sbomify.com/CVE-2010-0232/): Microsoft Windows Kernel Exception Handler (high 7.8, exploited in the wild)
- [CVE-2010-0188](https://insights.sbomify.com/CVE-2010-0188/): Adobe Reader and Acrobat Arbitrary Code Execution (high 7.8, exploited in the wild)
- [CVE-2009-3129](https://insights.sbomify.com/CVE-2009-3129/): Microsoft Excel Featheader Record Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2009-1123](https://insights.sbomify.com/CVE-2009-1123/): Microsoft Windows Improper Input Validation (high 7.8, exploited in the wild)
- [CVE-2008-3431](https://insights.sbomify.com/CVE-2008-3431/): Oracle VirtualBox Insufficient Input Validation (high 8.8, exploited in the wild)
- [CVE-2008-2992](https://insights.sbomify.com/CVE-2008-2992/): Adobe Reader and Acrobat Input Validation (high 7.8, exploited in the wild)
- [CVE-2004-0210](https://insights.sbomify.com/CVE-2004-0210/): Microsoft Windows Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2002-0367](https://insights.sbomify.com/CVE-2002-0367/): Microsoft Windows Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-24682](https://insights.sbomify.com/CVE-2022-24682/): Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting (medium 6.1, exploited in the wild)
- [CVE-2017-8570](https://insights.sbomify.com/CVE-2017-8570/): Microsoft Office Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2017-0222](https://insights.sbomify.com/CVE-2017-0222/): Microsoft Internet Explorer Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2014-6352](https://insights.sbomify.com/CVE-2014-6352/): Microsoft Windows Code Injection (high 7.8, exploited in the wild)
- [CVE-2022-23134](https://insights.sbomify.com/CVE-2022-23134/): Zabbix Frontend Improper Access Control (low 3.7, exploited in the wild)
- [CVE-2022-23131](https://insights.sbomify.com/CVE-2022-23131/): Zabbix Frontend Authentication Bypass (critical 9.1, exploited in the wild)
- [CVE-2022-24086](https://insights.sbomify.com/CVE-2022-24086/): Adobe Commerce and Magento Open Source Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2022-0609](https://insights.sbomify.com/CVE-2022-0609/): Google Chromium Animation Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2019-0752](https://insights.sbomify.com/CVE-2019-0752/): Microsoft Internet Explorer Type Confusion (high 7.5, exploited in the wild)
- [CVE-2018-8174](https://insights.sbomify.com/CVE-2018-8174/): Microsoft Windows VBScript Engine Out-of-Bounds Write (high 7.5, exploited in the wild)
- [CVE-2018-20250](https://insights.sbomify.com/CVE-2018-20250/): WinRAR Absolute Path Traversal (high 7.8, exploited in the wild)
- [CVE-2018-15982](https://insights.sbomify.com/CVE-2018-15982/): Adobe Flash Player Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2017-9841](https://insights.sbomify.com/CVE-2017-9841/): PHPUnit Command Injection (critical 9.8, exploited in the wild)
- [CVE-2014-1761](https://insights.sbomify.com/CVE-2014-1761/): Microsoft Word Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2013-3906](https://insights.sbomify.com/CVE-2013-3906/): Microsoft Graphics Component Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2022-22620](https://insights.sbomify.com/CVE-2022-22620/): Apple iOS, iPadOS, and macOS Webkit Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-36934](https://insights.sbomify.com/CVE-2021-36934/): Microsoft Windows SAM Local Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2020-0796](https://insights.sbomify.com/CVE-2020-0796/): Microsoft SMBv3 Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2018-1000861](https://insights.sbomify.com/CVE-2018-1000861/): Jenkins Stapler Web Framework Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2017-9791](https://insights.sbomify.com/CVE-2017-9791/): Apache Struts 1 Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2017-8464](https://insights.sbomify.com/CVE-2017-8464/): Microsoft Windows Shell (.lnk) Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-10271](https://insights.sbomify.com/CVE-2017-10271/): Oracle Corporation WebLogic Server Remote Code Execution (high 7.5, exploited in the wild)
- [CVE-2017-0263](https://insights.sbomify.com/CVE-2017-0263/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2017-0262](https://insights.sbomify.com/CVE-2017-0262/): Microsoft Office Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2017-0145](https://insights.sbomify.com/CVE-2017-0145/): Microsoft SMBv1 Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-0144](https://insights.sbomify.com/CVE-2017-0144/): Microsoft SMBv1 Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2016-3088](https://insights.sbomify.com/CVE-2016-3088/): Apache ActiveMQ Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2015-2051](https://insights.sbomify.com/CVE-2015-2051/): D-Link DIR-645 Router Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2015-1635](https://insights.sbomify.com/CVE-2015-1635/): Microsoft HTTP.sys Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2015-1130](https://insights.sbomify.com/CVE-2015-1130/): Apple OS X Authentication Bypass (high 7.8, exploited in the wild)
- [CVE-2014-4404](https://insights.sbomify.com/CVE-2014-4404/): Apple OS X Heap-Based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2022-21882](https://insights.sbomify.com/CVE-2022-21882/): Microsoft Win32k Privilege Escalation (high 7.0, exploited in the wild)
- [CVE-2022-22587](https://insights.sbomify.com/CVE-2022-22587/): Apple Memory Corruption (critical 9.8, exploited in the wild)
- [CVE-2021-20038](https://insights.sbomify.com/CVE-2021-20038/): SonicWall SMA 100 Appliances Stack-Based Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2020-5722](https://insights.sbomify.com/CVE-2020-5722/): Grandstream Networks UCM6200 Series SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2020-0787](https://insights.sbomify.com/CVE-2020-0787/): Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management (high 7.8, exploited in the wild)
- [CVE-2017-5689](https://insights.sbomify.com/CVE-2017-5689/): Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation (critical 9.8, exploited in the wild)
- [CVE-2014-7169](https://insights.sbomify.com/CVE-2014-7169/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-6271](https://insights.sbomify.com/CVE-2014-6271/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-1776](https://insights.sbomify.com/CVE-2014-1776/): Microsoft Internet Explorer Memory Corruption (critical 9.8, exploited in the wild)
- [CVE-2021-35247](https://insights.sbomify.com/CVE-2021-35247/): SolarWinds Serv-U Improper Input Validation (medium 4.3, exploited in the wild)
- [CVE-2018-8453](https://insights.sbomify.com/CVE-2018-8453/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2012-0391](https://insights.sbomify.com/CVE-2012-0391/): Apache Struts 2 Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2006-1547](https://insights.sbomify.com/CVE-2006-1547/): Apache Struts 1 ActionForm Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2021-40870](https://insights.sbomify.com/CVE-2021-40870/): Aviatrix Controller Unrestricted Upload of File (critical 9.8, exploited in the wild)
- [CVE-2021-33766](https://insights.sbomify.com/CVE-2021-33766/): Microsoft Exchange Server Information Disclosure (high 7.3, exploited in the wild)
- [CVE-2021-32648](https://insights.sbomify.com/CVE-2021-32648/): October CMS Improper Authentication (high 8.2, exploited in the wild)
- [CVE-2021-25298](https://insights.sbomify.com/CVE-2021-25298/): Nagios XI OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2021-25297](https://insights.sbomify.com/CVE-2021-25297/): Nagios XI OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2021-25296](https://insights.sbomify.com/CVE-2021-25296/): Nagios XI OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2021-22991](https://insights.sbomify.com/CVE-2021-22991/): F5 BIG-IP Traffic Management Microkernel Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2021-21975](https://insights.sbomify.com/CVE-2021-21975/): VMware Server Side Request Forgery in vRealize Operations Manager API (critical 9.8, exploited in the wild)
- [CVE-2021-21315](https://insights.sbomify.com/CVE-2021-21315/): System Information Library for Node.JS Command Injection (high 7.1, exploited in the wild)
- [CVE-2020-14864](https://insights.sbomify.com/CVE-2020-14864/): Oracle Business Intelligence Enterprise Edition Path Transversal (high 7.5, exploited in the wild)
- [CVE-2020-13927](https://insights.sbomify.com/CVE-2020-13927/): Apache Airflow's Experimental API Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2020-13671](https://insights.sbomify.com/CVE-2020-13671/): Drupal core Un-restricted Upload of File (high 8.8, exploited in the wild)
- [CVE-2020-11978](https://insights.sbomify.com/CVE-2020-11978/): Apache Airflow Command Injection (high 8.8, exploited in the wild)
- [CVE-2021-36260](https://insights.sbomify.com/CVE-2021-36260/): Hikvision Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2021-27860](https://insights.sbomify.com/CVE-2021-27860/): FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit (critical 9.8, exploited in the wild)
- [CVE-2021-22017](https://insights.sbomify.com/CVE-2021-22017/): VMware vCenter Server Improper Access Control (medium 5.3, exploited in the wild)
- [CVE-2020-6572](https://insights.sbomify.com/CVE-2020-6572/): Google Chrome Media Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2019-9670](https://insights.sbomify.com/CVE-2019-9670/): Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference (critical 9.8, exploited in the wild)
- [CVE-2019-7609](https://insights.sbomify.com/CVE-2019-7609/): Kibana Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2019-2725](https://insights.sbomify.com/CVE-2019-2725/): Oracle WebLogic Server, Injection (high 7.5, exploited in the wild)
- [CVE-2019-1579](https://insights.sbomify.com/CVE-2019-1579/): Palo Alto Networks PAN-OS Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2019-1458](https://insights.sbomify.com/CVE-2019-1458/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-10149](https://insights.sbomify.com/CVE-2019-10149/): Exim Mail Transfer Agent (MTA) Improper Input Validation (critical 9.0, exploited in the wild)
- [CVE-2018-13383](https://insights.sbomify.com/CVE-2018-13383/): Fortinet FortiOS and FortiProxy Out-of-bounds Write (medium 4.3, exploited in the wild)
- [CVE-2018-13382](https://insights.sbomify.com/CVE-2018-13382/): Fortinet FortiOS and FortiProxy Improper Authorization (critical 9.1, exploited in the wild)
- [CVE-2017-1000486](https://insights.sbomify.com/CVE-2017-1000486/): Primetek Primefaces Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2015-7450](https://insights.sbomify.com/CVE-2015-7450/): IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. (critical 9.8, exploited in the wild)
- [CVE-2013-3900](https://insights.sbomify.com/CVE-2013-3900/): Microsoft WinVerifyTrust function Remote Code Execution (medium 5.5, exploited in the wild)
- [CVE-2021-43890](https://insights.sbomify.com/CVE-2021-43890/): Microsoft Windows AppX Installer Spoofing (high 7.1, exploited in the wild)
- [CVE-2021-4102](https://insights.sbomify.com/CVE-2021-4102/): Google Chromium V8 Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-44515](https://insights.sbomify.com/CVE-2021-44515/): Zoho Desktop Central Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2021-44228](https://insights.sbomify.com/CVE-2021-44228/): Apache Log4j2 Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2021-44168](https://insights.sbomify.com/CVE-2021-44168/): Fortinet FortiOS Arbitrary File Download (low 3.3, exploited in the wild)
- [CVE-2021-35394](https://insights.sbomify.com/CVE-2021-35394/): Realtek Jungle SDK Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-8816](https://insights.sbomify.com/CVE-2020-8816/): Pi-Hole AdminLTE Remote Code Execution (critical 9.1, exploited in the wild)
- [CVE-2020-17463](https://insights.sbomify.com/CVE-2020-17463/): Fuel CMS SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2019-7238](https://insights.sbomify.com/CVE-2019-7238/): Sonatype Nexus Repository Manager Incorrect Access Control (critical 9.8, exploited in the wild)
- [CVE-2019-13272](https://insights.sbomify.com/CVE-2019-13272/): Linux Kernel Improper Privilege Management (high 7.8, exploited in the wild)
- [CVE-2019-10758](https://insights.sbomify.com/CVE-2019-10758/): MongoDB mongo-express Remote Code Execution (critical 9.9, exploited in the wild)
- [CVE-2019-0193](https://insights.sbomify.com/CVE-2019-0193/): Apache Solr DataImportHandler Code Injection (high 7.2, exploited in the wild)
- [CVE-2017-17562](https://insights.sbomify.com/CVE-2017-17562/): Embedthis GoAhead Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2017-12149](https://insights.sbomify.com/CVE-2017-12149/): Red Hat JBoss Application Server Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2010-1871](https://insights.sbomify.com/CVE-2010-1871/): Red Hat Linux JBoss Seam 2 Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2021-44077](https://insights.sbomify.com/CVE-2021-44077/): Zoho ManageEngine ServiceDesk Plus Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-40438](https://insights.sbomify.com/CVE-2021-40438/): Apache HTTP Server-Side Request Forgery (SSRF) (critical 9.0, exploited in the wild)
- [CVE-2021-37415](https://insights.sbomify.com/CVE-2021-37415/): Zoho ManageEngine ServiceDesk Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2020-11261](https://insights.sbomify.com/CVE-2020-11261/): Qualcomm Multiple Chipsets Improper Input Validation (high 7.8, exploited in the wild)
- [CVE-2018-14847](https://insights.sbomify.com/CVE-2018-14847/): MikroTik Router OS Directory Traversal (critical 9.1, exploited in the wild)
- [CVE-2021-42321](https://insights.sbomify.com/CVE-2021-42321/): Microsoft Exchange Server Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2021-42292](https://insights.sbomify.com/CVE-2021-42292/): Microsoft Excel Security Feature Bypass (high 7.8, exploited in the wild)
- [CVE-2021-40449](https://insights.sbomify.com/CVE-2021-40449/): Microsoft Windows Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-22204](https://insights.sbomify.com/CVE-2021-22204/): ExifTool Remote Code Execution (medium 6.8, exploited in the wild)
- [CVE-2021-42258](https://insights.sbomify.com/CVE-2021-42258/): BQE BillQuick Web Suite SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2021-42013](https://insights.sbomify.com/CVE-2021-42013/): Apache HTTP Server Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2021-41773](https://insights.sbomify.com/CVE-2021-41773/): Apache HTTP Server Path Traversal (high 7.5, exploited in the wild)
- [CVE-2021-40539](https://insights.sbomify.com/CVE-2021-40539/): Zoho ManageEngine ADSelfService Plus Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2021-40444](https://insights.sbomify.com/CVE-2021-40444/): Microsoft MSHTML Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2021-38649](https://insights.sbomify.com/CVE-2021-38649/): Microsoft Open Management Infrastructure (OMI) Privilege Escalation (high 7.0, exploited in the wild)
- [CVE-2021-38648](https://insights.sbomify.com/CVE-2021-38648/): Microsoft Open Management Infrastructure (OMI) Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-38647](https://insights.sbomify.com/CVE-2021-38647/): Microsoft Open Management Infrastructure (OMI) Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-38645](https://insights.sbomify.com/CVE-2021-38645/): Microsoft Open Management Infrastructure (OMI) Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-38003](https://insights.sbomify.com/CVE-2021-38003/): Google Chromium V8 Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2021-38000](https://insights.sbomify.com/CVE-2021-38000/): Google Chromium Intents Improper Input Validation (medium 6.1, exploited in the wild)
- [CVE-2021-37976](https://insights.sbomify.com/CVE-2021-37976/): Google Chromium Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2021-37975](https://insights.sbomify.com/CVE-2021-37975/): Google Chromium V8 Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-37973](https://insights.sbomify.com/CVE-2021-37973/): Google Chromium Portals Use-After-Free (critical 9.6, exploited in the wild)
- [CVE-2021-36955](https://insights.sbomify.com/CVE-2021-36955/): Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-36948](https://insights.sbomify.com/CVE-2021-36948/): Microsoft Windows Update Medic Service Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-36942](https://insights.sbomify.com/CVE-2021-36942/): Microsoft Windows Local Security Authority (LSA) Spoofing (high 7.5, exploited in the wild)
- [CVE-2021-36742](https://insights.sbomify.com/CVE-2021-36742/): Trend Micro Multiple Products Improper Input Validation (high 7.8, exploited in the wild)
- [CVE-2021-36741](https://insights.sbomify.com/CVE-2021-36741/): Trend Micro Multiple Products Improper Input Validation (high 8.8, exploited in the wild)
- [CVE-2021-35464](https://insights.sbomify.com/CVE-2021-35464/): ForgeRock Access Management (AM) Core Server Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-35395](https://insights.sbomify.com/CVE-2021-35395/): Realtek AP-Router SDK Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2021-35211](https://insights.sbomify.com/CVE-2021-35211/): SolarWinds Serv-U Remote Code Execution (critical 9.0, exploited in the wild)
- [CVE-2021-34527](https://insights.sbomify.com/CVE-2021-34527/): Microsoft Windows Print Spooler Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2021-34523](https://insights.sbomify.com/CVE-2021-34523/): Microsoft Exchange Server Privilege Escalation (critical 9.0, exploited in the wild)
- [CVE-2021-34473](https://insights.sbomify.com/CVE-2021-34473/): Microsoft Exchange Server Remote Code Execution (critical 9.1, exploited in the wild)
- [CVE-2021-34448](https://insights.sbomify.com/CVE-2021-34448/): Microsoft Windows Scripting Engine Memory Corruption (medium 6.8, exploited in the wild)
- [CVE-2021-33771](https://insights.sbomify.com/CVE-2021-33771/): Microsoft Windows Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-33742](https://insights.sbomify.com/CVE-2021-33742/): Microsoft Windows MSHTML Platform Remote Code Execution (high 7.5, exploited in the wild)
- [CVE-2021-33739](https://insights.sbomify.com/CVE-2021-33739/): Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation (high 8.4, exploited in the wild)
- [CVE-2021-31979](https://insights.sbomify.com/CVE-2021-31979/): Microsoft Windows Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-31956](https://insights.sbomify.com/CVE-2021-31956/): Microsoft Windows NTFS Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-31955](https://insights.sbomify.com/CVE-2021-31955/): Microsoft Windows Kernel Information Disclosure (medium 5.5, exploited in the wild)
- [CVE-2021-31755](https://insights.sbomify.com/CVE-2021-31755/): Tenda AC11 Router Stack Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2021-31207](https://insights.sbomify.com/CVE-2021-31207/): Microsoft Exchange Server Security Feature Bypass (medium 6.6, exploited in the wild)
- [CVE-2021-31201](https://insights.sbomify.com/CVE-2021-31201/): Microsoft Enhanced Cryptographic Provider Privilege Escalation (medium 5.2, exploited in the wild)
- [CVE-2021-31199](https://insights.sbomify.com/CVE-2021-31199/): Microsoft Enhanced Cryptographic Provider Privilege Escalation (medium 5.2, exploited in the wild)
- [CVE-2021-30869](https://insights.sbomify.com/CVE-2021-30869/): Apple iOS, iPadOS, and macOS Type Confusion (high 7.8, exploited in the wild)
- [CVE-2021-30860](https://insights.sbomify.com/CVE-2021-30860/): Apple Multiple Products Integer Overflow (high 7.8, exploited in the wild)
- [CVE-2021-30858](https://insights.sbomify.com/CVE-2021-30858/): Apple iOS, iPadOS, macOS Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-30807](https://insights.sbomify.com/CVE-2021-30807/): Apple Multiple Products Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2021-30762](https://insights.sbomify.com/CVE-2021-30762/): Apple iOS WebKit Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-30761](https://insights.sbomify.com/CVE-2021-30761/): Apple iOS WebKit Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2021-30713](https://insights.sbomify.com/CVE-2021-30713/): Apple macOS Unspecified (high 7.8, exploited in the wild)
- [CVE-2021-30666](https://insights.sbomify.com/CVE-2021-30666/): Apple iOS WebKit Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2021-30665](https://insights.sbomify.com/CVE-2021-30665/): Apple Multiple Products WebKit Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2021-30663](https://insights.sbomify.com/CVE-2021-30663/): Apple Multiple Products WebKit Integer Overflow (high 7.8, exploited in the wild)
- [CVE-2021-30661](https://insights.sbomify.com/CVE-2021-30661/): Apple Multiple Products WebKit Storage Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-30657](https://insights.sbomify.com/CVE-2021-30657/): Apple macOS Unspecified (medium 5.5, exploited in the wild)
- [CVE-2021-30633](https://insights.sbomify.com/CVE-2021-30633/): Google Chromium Indexed DB API Use-After-Free (critical 9.6, exploited in the wild)
- [CVE-2021-30632](https://insights.sbomify.com/CVE-2021-30632/): Google Chromium V8 Out-of-Bounds Write (high 8.8, exploited in the wild)
- [CVE-2021-30563](https://insights.sbomify.com/CVE-2021-30563/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2021-30554](https://insights.sbomify.com/CVE-2021-30554/): Google Chromium WebGL Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-30551](https://insights.sbomify.com/CVE-2021-30551/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2021-30116](https://insights.sbomify.com/CVE-2021-30116/): Kaseya Virtual System/Server Administrator (VSA) Information Disclosure (critical 10.0, exploited in the wild)
- [CVE-2021-28664](https://insights.sbomify.com/CVE-2021-28664/): Arm Mali Graphics Processing Unit (GPU) Unspecified (high 8.8, exploited in the wild)
- [CVE-2021-28663](https://insights.sbomify.com/CVE-2021-28663/): Arm Mali Graphics Processing Unit (GPU) Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-28550](https://insights.sbomify.com/CVE-2021-28550/): Adobe Acrobat and Reader Use-After-Free (critical 9.6, exploited in the wild)
- [CVE-2021-28310](https://insights.sbomify.com/CVE-2021-28310/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-27562](https://insights.sbomify.com/CVE-2021-27562/): Arm Trusted Firmware Out-of-Bounds Write (medium 5.5, exploited in the wild)
- [CVE-2021-27561](https://insights.sbomify.com/CVE-2021-27561/): Yealink Device Management Server-Side Request Forgery (SSRF) (critical 9.8, exploited in the wild)
- [CVE-2021-27104](https://insights.sbomify.com/CVE-2021-27104/): Accellion FTA OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2021-27103](https://insights.sbomify.com/CVE-2021-27103/): Accellion FTA Server-Side Request Forgery (SSRF) (critical 9.8, exploited in the wild)
- [CVE-2021-27102](https://insights.sbomify.com/CVE-2021-27102/): Accellion FTA OS Command Injection (high 7.8, exploited in the wild)
- [CVE-2021-27101](https://insights.sbomify.com/CVE-2021-27101/): Accellion FTA SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2021-27085](https://insights.sbomify.com/CVE-2021-27085/): Microsoft Internet Explorer Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2021-27065](https://insights.sbomify.com/CVE-2021-27065/): Microsoft Exchange Server Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2021-27059](https://insights.sbomify.com/CVE-2021-27059/): Microsoft Office Remote Code Execution (high 7.6, exploited in the wild)
- [CVE-2021-26858](https://insights.sbomify.com/CVE-2021-26858/): Microsoft Exchange Server Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2021-26857](https://insights.sbomify.com/CVE-2021-26857/): Microsoft Exchange Server Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2021-26855](https://insights.sbomify.com/CVE-2021-26855/): Microsoft Exchange Server Remote Code Execution (critical 9.1, exploited in the wild)
- [CVE-2021-26411](https://insights.sbomify.com/CVE-2021-26411/): Microsoft Internet Explorer Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2021-26084](https://insights.sbomify.com/CVE-2021-26084/): Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection (critical 9.8, exploited in the wild)
- [CVE-2021-23874](https://insights.sbomify.com/CVE-2021-23874/): McAfee Total Protection (MTP) Improper Privilege Management (high 8.2, exploited in the wild)
- [CVE-2021-22986](https://insights.sbomify.com/CVE-2021-22986/): F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-22900](https://insights.sbomify.com/CVE-2021-22900/): Ivanti Pulse Connect Secure Unrestricted File Upload (high 7.2, exploited in the wild)
- [CVE-2021-22899](https://insights.sbomify.com/CVE-2021-22899/): Ivanti Pulse Connect Secure Command Injection (high 8.8, exploited in the wild)
- [CVE-2021-22894](https://insights.sbomify.com/CVE-2021-22894/): Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2021-22893](https://insights.sbomify.com/CVE-2021-22893/): Ivanti Pulse Connect Secure Use-After-Free (critical 10.0, exploited in the wild)
- [CVE-2021-22506](https://insights.sbomify.com/CVE-2021-22506/): Micro Focus Access Manager Information Leakage (high 7.5, exploited in the wild)
- [CVE-2021-22502](https://insights.sbomify.com/CVE-2021-22502/): Micro Focus Operation Bridge Report (OBR) Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-22205](https://insights.sbomify.com/CVE-2021-22205/): GitLab Community and Enterprise Editions Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2021-22005](https://insights.sbomify.com/CVE-2021-22005/): VMware vCenter Server File Upload (critical 9.8, exploited in the wild)
- [CVE-2021-21985](https://insights.sbomify.com/CVE-2021-21985/): VMware vCenter Server Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2021-21972](https://insights.sbomify.com/CVE-2021-21972/): VMware vCenter Server Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-21224](https://insights.sbomify.com/CVE-2021-21224/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2021-21220](https://insights.sbomify.com/CVE-2021-21220/): Google Chromium V8 Improper Input Validation (high 8.8, exploited in the wild)
- [CVE-2021-21206](https://insights.sbomify.com/CVE-2021-21206/): Google Chromium Blink Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-21193](https://insights.sbomify.com/CVE-2021-21193/): Google Chromium Blink Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-21166](https://insights.sbomify.com/CVE-2021-21166/): Google Chromium Race Condition (high 8.8, exploited in the wild)
- [CVE-2021-21148](https://insights.sbomify.com/CVE-2021-21148/): Google Chromium V8 Heap Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2021-21017](https://insights.sbomify.com/CVE-2021-21017/): Adobe Acrobat and Reader Heap-based Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2021-20090](https://insights.sbomify.com/CVE-2021-20090/): Arcadyan Buffalo Firmware Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2021-20023](https://insights.sbomify.com/CVE-2021-20023/): SonicWall Email Security Path Traversal (medium 4.9, exploited in the wild)
- [CVE-2021-20022](https://insights.sbomify.com/CVE-2021-20022/): SonicWall Email Security Unrestricted Upload of File (high 7.2, exploited in the wild)
- [CVE-2021-20021](https://insights.sbomify.com/CVE-2021-20021/): SonicWall Email Security Improper Privilege Management (critical 9.8, exploited in the wild)
- [CVE-2021-20016](https://insights.sbomify.com/CVE-2021-20016/): SonicWall SSLVPN SMA100 SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2021-1906](https://insights.sbomify.com/CVE-2021-1906/): Qualcomm Multiple Chipsets Detection of Error Condition Without Action (medium 6.2, exploited in the wild)
- [CVE-2021-1905](https://insights.sbomify.com/CVE-2021-1905/): Qualcomm Multiple Chipsets Use-After-Free (high 8.4, exploited in the wild)
- [CVE-2021-1879](https://insights.sbomify.com/CVE-2021-1879/): Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2021-1871](https://insights.sbomify.com/CVE-2021-1871/): Apple iOS, iPadOS, and macOS WebKit Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-1870](https://insights.sbomify.com/CVE-2021-1870/): Apple iOS, iPadOS, and macOS WebKit Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-1782](https://insights.sbomify.com/CVE-2021-1782/): Apple Multiple Products Race Condition (high 7.0, exploited in the wild)
- [CVE-2021-1732](https://insights.sbomify.com/CVE-2021-1732/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-1675](https://insights.sbomify.com/CVE-2021-1675/): Microsoft Windows Print Spooler Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2021-1647](https://insights.sbomify.com/CVE-2021-1647/): Microsoft Defender Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2021-1498](https://insights.sbomify.com/CVE-2021-1498/): Cisco HyperFlex HX Data Platform Command Injection (critical 9.8, exploited in the wild)
- [CVE-2021-1497](https://insights.sbomify.com/CVE-2021-1497/): Cisco HyperFlex HX Installer Virtual Machine Command Injection (critical 9.8, exploited in the wild)
- [CVE-2020-9859](https://insights.sbomify.com/CVE-2020-9859/): Apple Multiple Products Code Execution (high 7.8, exploited in the wild)
- [CVE-2020-9819](https://insights.sbomify.com/CVE-2020-9819/): Apple iOS, iPadOS, and watchOS Memory Corruption (medium 4.3, exploited in the wild)
- [CVE-2020-9818](https://insights.sbomify.com/CVE-2020-9818/): Apple iOS, iPadOS, and watchOS Out-of-Bounds Write (high 8.8, exploited in the wild)
- [CVE-2020-8657](https://insights.sbomify.com/CVE-2020-8657/): EyesOfNetwork Use of Hard-Coded Credentials (critical 9.8, exploited in the wild)
- [CVE-2020-8655](https://insights.sbomify.com/CVE-2020-8655/): EyesOfNetwork Improper Privilege Management (high 7.8, exploited in the wild)
- [CVE-2020-8644](https://insights.sbomify.com/CVE-2020-8644/): PlaySMS Server-Side Template Injection (critical 9.8, exploited in the wild)
- [CVE-2020-8599](https://insights.sbomify.com/CVE-2020-8599/): Trend Micro Apex One and OfficeScan Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2020-8515](https://insights.sbomify.com/CVE-2020-8515/): Multiple DrayTek Vigor Routers Web Management Page (critical 9.8, exploited in the wild)
- [CVE-2020-8468](https://insights.sbomify.com/CVE-2020-8468/): Trend Micro Multiple Products Content Validation Escape (high 8.8, exploited in the wild)
- [CVE-2020-8467](https://insights.sbomify.com/CVE-2020-8467/): Trend Micro Apex One and OfficeScan Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2020-8260](https://insights.sbomify.com/CVE-2020-8260/): Ivanti Pulse Connect Secure Code Execution (high 7.2, exploited in the wild)
- [CVE-2020-8243](https://insights.sbomify.com/CVE-2020-8243/): Ivanti Pulse Connect Secure Code Execution (high 7.2, exploited in the wild)
- [CVE-2020-8196](https://insights.sbomify.com/CVE-2020-8196/): Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure (medium 4.3, exploited in the wild)
- [CVE-2020-8195](https://insights.sbomify.com/CVE-2020-8195/): Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2020-8193](https://insights.sbomify.com/CVE-2020-8193/): Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass (medium 6.5, exploited in the wild)
- [CVE-2020-7961](https://insights.sbomify.com/CVE-2020-7961/): Liferay Portal Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2020-6820](https://insights.sbomify.com/CVE-2020-6820/): Mozilla Firefox And Thunderbird Use-After-Free (high 8.1, exploited in the wild)
- [CVE-2020-6819](https://insights.sbomify.com/CVE-2020-6819/): Mozilla Firefox And Thunderbird Use-After-Free (high 8.1, exploited in the wild)
- [CVE-2020-6418](https://insights.sbomify.com/CVE-2020-6418/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2020-6287](https://insights.sbomify.com/CVE-2020-6287/): SAP NetWeaver Missing Authentication for Critical Function (critical 10.0, exploited in the wild)
- [CVE-2020-6207](https://insights.sbomify.com/CVE-2020-6207/): SAP Solution Manager Missing Authentication for Critical Function (critical 10.0, exploited in the wild)
- [CVE-2020-5902](https://insights.sbomify.com/CVE-2020-5902/): F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-5849](https://insights.sbomify.com/CVE-2020-5849/): Unraid Authentication Bypass (high 7.5, exploited in the wild)
- [CVE-2020-5847](https://insights.sbomify.com/CVE-2020-5847/): Unraid Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-5735](https://insights.sbomify.com/CVE-2020-5735/): Amcrest Cameras and NVR Stack-based Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2020-4430](https://insights.sbomify.com/CVE-2020-4430/): IBM Data Risk Manager Directory Traversal (medium 4.3, exploited in the wild)
- [CVE-2020-4428](https://insights.sbomify.com/CVE-2020-4428/): IBM Data Risk Manager Remote Code Execution (critical 9.1, exploited in the wild)
- [CVE-2020-4427](https://insights.sbomify.com/CVE-2020-4427/): IBM Data Risk Manager Security Bypass (critical 9.0, exploited in the wild)
- [CVE-2020-4006](https://insights.sbomify.com/CVE-2020-4006/): Multiple VMware Products Command Injection (critical 9.1, exploited in the wild)
- [CVE-2020-3992](https://insights.sbomify.com/CVE-2020-3992/): VMware ESXi OpenSLP Use-After-Free (critical 9.8, exploited in the wild)
- [CVE-2020-3952](https://insights.sbomify.com/CVE-2020-3952/): VMware vCenter Server Information Disclosure (critical 9.8, exploited in the wild)
- [CVE-2020-3950](https://insights.sbomify.com/CVE-2020-3950/): VMware Multiple Products Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2020-3580](https://insights.sbomify.com/CVE-2020-3580/): Cisco ASA and FTD Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2020-3569](https://insights.sbomify.com/CVE-2020-3569/): Cisco IOS XR Software DVMRP Memory Exhaustion (high 8.6, exploited in the wild)
- [CVE-2020-3566](https://insights.sbomify.com/CVE-2020-3566/): Cisco IOS XR Software DVMRP Memory Exhaustion (high 8.6, exploited in the wild)
- [CVE-2020-3452](https://insights.sbomify.com/CVE-2020-3452/): Cisco ASA and FTD Read-Only Path Traversal (high 7.5, exploited in the wild)
- [CVE-2020-3161](https://insights.sbomify.com/CVE-2020-3161/): Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service (critical 9.8, exploited in the wild)
- [CVE-2020-3118](https://insights.sbomify.com/CVE-2020-3118/): Cisco IOS XR Software Discovery Protocol Format String (high 8.8, exploited in the wild)
- [CVE-2020-29583](https://insights.sbomify.com/CVE-2020-29583/): Zyxel Multiple Products Use of Hard-Coded Credentials (critical 9.8, exploited in the wild)
- [CVE-2020-29557](https://insights.sbomify.com/CVE-2020-29557/): D-Link DIR-825 R1 Devices Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2020-27950](https://insights.sbomify.com/CVE-2020-27950/): Apple Multiple Products Memory Initialization (medium 5.5, exploited in the wild)
- [CVE-2020-27932](https://insights.sbomify.com/CVE-2020-27932/): Apple Multiple Products Type Confusion (high 7.8, exploited in the wild)
- [CVE-2020-27930](https://insights.sbomify.com/CVE-2020-27930/): Apple Multiple Products Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2020-26919](https://insights.sbomify.com/CVE-2020-26919/): Netgear JGS516PE Devices Missing Function Level Access Control (critical 9.8, exploited in the wild)
- [CVE-2020-2555](https://insights.sbomify.com/CVE-2020-2555/): Oracle Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-25506](https://insights.sbomify.com/CVE-2020-25506/): D-Link DNS-320 Device Command Injection (critical 9.8, exploited in the wild)
- [CVE-2020-25213](https://insights.sbomify.com/CVE-2020-25213/): WordPress File Manager Plugin Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2020-24557](https://insights.sbomify.com/CVE-2020-24557/): Trend Micro Multiple Products Improper Access Control (high 7.8, exploited in the wild)
- [CVE-2020-17530](https://insights.sbomify.com/CVE-2020-17530/): Apache Struts Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-17496](https://insights.sbomify.com/CVE-2020-17496/): vBulletin PHP Module Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-17144](https://insights.sbomify.com/CVE-2020-17144/): Microsoft Exchange Server Remote Code Execution (high 8.4, exploited in the wild)
- [CVE-2020-17087](https://insights.sbomify.com/CVE-2020-17087/): Microsoft Windows Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2020-16846](https://insights.sbomify.com/CVE-2020-16846/): SaltStack Salt Shell Injection (critical 9.8, exploited in the wild)
- [CVE-2020-16017](https://insights.sbomify.com/CVE-2020-16017/): Google Chrome Use-After-Free (critical 9.6, exploited in the wild)
- [CVE-2020-16013](https://insights.sbomify.com/CVE-2020-16013/): Google Chromium V8 Incorrect Implementation Vulnerabililty (high 8.8, exploited in the wild)
- [CVE-2020-16010](https://insights.sbomify.com/CVE-2020-16010/): Google Chrome for Android UI Heap Buffer Overflow (critical 9.6, exploited in the wild)
- [CVE-2020-16009](https://insights.sbomify.com/CVE-2020-16009/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2020-15999](https://insights.sbomify.com/CVE-2020-15999/): Google Chrome FreeType Heap Buffer Overflow (critical 9.6, exploited in the wild)
- [CVE-2020-15505](https://insights.sbomify.com/CVE-2020-15505/): Ivanti MobileIron Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-14883](https://insights.sbomify.com/CVE-2020-14883/): Oracle WebLogic Server Unspecified (high 7.2, exploited in the wild)
- [CVE-2020-14882](https://insights.sbomify.com/CVE-2020-14882/): Oracle WebLogic Server Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-14871](https://insights.sbomify.com/CVE-2020-14871/): Oracle Solaris and Zettabyte File System (ZFS) Unspecified (critical 10.0, exploited in the wild)
- [CVE-2020-14750](https://insights.sbomify.com/CVE-2020-14750/): Oracle WebLogic Server Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-1472](https://insights.sbomify.com/CVE-2020-1472/): Microsoft Netlogon Privilege Escalation (medium 5.5, exploited in the wild)
- [CVE-2020-1464](https://insights.sbomify.com/CVE-2020-1464/): Microsoft Windows Spoofing (high 7.8, exploited in the wild)
- [CVE-2020-1380](https://insights.sbomify.com/CVE-2020-1380/): Microsoft Internet Explorer Scripting Engine Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2020-1350](https://insights.sbomify.com/CVE-2020-1350/): Microsoft Windows DNS Server Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2020-12812](https://insights.sbomify.com/CVE-2020-12812/): Fortinet FortiOS SSL VPN Improper Authentication (high 7.5, exploited in the wild)
- [CVE-2020-12271](https://insights.sbomify.com/CVE-2020-12271/): Sophos SFOS SQL Injection (critical 10.0, exploited in the wild)
- [CVE-2020-11738](https://insights.sbomify.com/CVE-2020-11738/): WordPress Snap Creek Duplicator Plugin File Download (high 7.5, exploited in the wild)
- [CVE-2020-11652](https://insights.sbomify.com/CVE-2020-11652/): SaltStack Salt Path Traversal (medium 6.5, exploited in the wild)
- [CVE-2020-11651](https://insights.sbomify.com/CVE-2020-11651/): SaltStack Salt Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2020-1147](https://insights.sbomify.com/CVE-2020-1147/): Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2020-10987](https://insights.sbomify.com/CVE-2020-10987/): Tenda AC1900 Router AC15 Model Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-1054](https://insights.sbomify.com/CVE-2020-1054/): Microsoft Win32k Privilege Escalation (high 7.0, exploited in the wild)
- [CVE-2020-1040](https://insights.sbomify.com/CVE-2020-1040/): Microsoft Hyper-V RemoteFX vGPU Remote Code Execution (critical 9.0, exploited in the wild)
- [CVE-2020-10221](https://insights.sbomify.com/CVE-2020-10221/): rConfig OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2020-1020](https://insights.sbomify.com/CVE-2020-1020/): Microsoft Windows Adobe Font Manager Library Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2020-10199](https://insights.sbomify.com/CVE-2020-10199/): Sonatype Nexus Repository Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2020-10189](https://insights.sbomify.com/CVE-2020-10189/): Zoho ManageEngine Desktop Central File Upload (critical 9.8, exploited in the wild)
- [CVE-2020-10181](https://insights.sbomify.com/CVE-2020-10181/): Sumavision EMR Cross-Site Request Forgery (CSRF) (critical 9.8, exploited in the wild)
- [CVE-2020-10148](https://insights.sbomify.com/CVE-2020-10148/): SolarWinds Orion Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2020-0986](https://insights.sbomify.com/CVE-2020-0986/): Microsoft Windows Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2020-0968](https://insights.sbomify.com/CVE-2020-0968/): Microsoft Internet Explorer Scripting Engine Memory Corruption (high 7.5, exploited in the wild)
- [CVE-2020-0938](https://insights.sbomify.com/CVE-2020-0938/): Microsoft Windows Adobe Font Manager Library Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2020-0878](https://insights.sbomify.com/CVE-2020-0878/): Microsoft Edge and Internet Explorer Memory Corruption (medium 4.2, exploited in the wild)
- [CVE-2020-0688](https://insights.sbomify.com/CVE-2020-0688/): Microsoft Exchange Server Validation Key Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2020-0683](https://insights.sbomify.com/CVE-2020-0683/): Microsoft Windows Installer Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2020-0674](https://insights.sbomify.com/CVE-2020-0674/): Microsoft Internet Explorer Scripting Engine Memory Corruption (high 7.5, exploited in the wild)
- [CVE-2020-0646](https://insights.sbomify.com/CVE-2020-0646/): Microsoft .NET Framework Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-0601](https://insights.sbomify.com/CVE-2020-0601/): Microsoft Windows CryptoAPI Spoofing (high 8.1, exploited in the wild)
- [CVE-2020-0069](https://insights.sbomify.com/CVE-2020-0069/): Mediatek Multiple Chipsets Insufficient Input Validation (high 7.8, exploited in the wild)
- [CVE-2020-0041](https://insights.sbomify.com/CVE-2020-0041/): Android Kernel Out-of-Bounds Write (high 7.8, exploited in the wild)
- [CVE-2019-9978](https://insights.sbomify.com/CVE-2019-9978/): WordPress Social Warfare Plugin Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2019-9082](https://insights.sbomify.com/CVE-2019-9082/): ThinkPHP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2019-8394](https://insights.sbomify.com/CVE-2019-8394/): Zoho ManageEngine ServiceDesk Plus (SDP) File Upload (high 7.5, exploited in the wild)
- [CVE-2019-7481](https://insights.sbomify.com/CVE-2019-7481/): SonicWall SMA100 SQL Injection (high 7.5, exploited in the wild)
- [CVE-2019-6223](https://insights.sbomify.com/CVE-2019-6223/): Apple iOS and macOS Group Facetime (high 7.5, exploited in the wild)
- [CVE-2019-5591](https://insights.sbomify.com/CVE-2019-5591/): Fortinet FortiOS Default Configuration (medium 6.5, exploited in the wild)
- [CVE-2019-5544](https://insights.sbomify.com/CVE-2019-5544/): VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2019-4716](https://insights.sbomify.com/CVE-2019-4716/): IBM Planning Analytics Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2019-3398](https://insights.sbomify.com/CVE-2019-3398/): Atlassian Confluence Server and Data Center Path Traversal (high 8.8, exploited in the wild)
- [CVE-2019-3396](https://insights.sbomify.com/CVE-2019-3396/): Atlassian Confluence Server and Data Center Server-Side Template Injection (critical 9.8, exploited in the wild)
- [CVE-2019-2215](https://insights.sbomify.com/CVE-2019-2215/): Android Kernel Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2019-20085](https://insights.sbomify.com/CVE-2019-20085/): TVT NVMS-1000 Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2019-19781](https://insights.sbomify.com/CVE-2019-19781/): Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution (critical 9.8, exploited in the wild)
- [CVE-2019-19356](https://insights.sbomify.com/CVE-2019-19356/): Netis WF2419 Devices Remote Code Execution (high 7.5, exploited in the wild)
- [CVE-2019-18988](https://insights.sbomify.com/CVE-2019-18988/): TeamViewer Desktop Bypass Remote Login (high 7.0, exploited in the wild)
- [CVE-2019-18935](https://insights.sbomify.com/CVE-2019-18935/): Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2019-18187](https://insights.sbomify.com/CVE-2019-18187/): Trend Micro OfficeScan Directory Traversal (high 8.8, exploited in the wild)
- [CVE-2019-17558](https://insights.sbomify.com/CVE-2019-17558/): Apache Solr VelocityResponseWriter Plug-In Remote Code Execution (high 7.5, exploited in the wild)
- [CVE-2019-17026](https://insights.sbomify.com/CVE-2019-17026/): Mozilla Firefox And Thunderbird Type Confusion (high 8.8, exploited in the wild)
- [CVE-2019-16759](https://insights.sbomify.com/CVE-2019-16759/): vBulletin PHP Module Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2019-1653](https://insights.sbomify.com/CVE-2019-1653/): Cisco Small Business RV320 and RV325 Routers Information Disclosure (high 7.5, exploited in the wild)
- [CVE-2019-16256](https://insights.sbomify.com/CVE-2019-16256/): SIMalliance Toolbox Browser Command Injection (critical 9.8, exploited in the wild)
- [CVE-2019-15949](https://insights.sbomify.com/CVE-2019-15949/): Nagios XI Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2019-15752](https://insights.sbomify.com/CVE-2019-15752/): Docker Desktop Community Edition Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-1429](https://insights.sbomify.com/CVE-2019-1429/): Microsoft Internet Explorer Scripting Engine Memory Corruption (high 7.5, exploited in the wild)
- [CVE-2019-1367](https://insights.sbomify.com/CVE-2019-1367/): Microsoft Internet Explorer Scripting Engine Memory Corruption (high 7.5, exploited in the wild)
- [CVE-2019-13608](https://insights.sbomify.com/CVE-2019-13608/): Citrix StoreFront Server XML External Entity (XXE) Processing (high 7.5, exploited in the wild)
- [CVE-2019-1215](https://insights.sbomify.com/CVE-2019-1215/): Microsoft Windows Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-1214](https://insights.sbomify.com/CVE-2019-1214/): Microsoft Windows Privilege Common Log File System (CLFS) Escalation (high 7.8, exploited in the wild)
- [CVE-2019-11634](https://insights.sbomify.com/CVE-2019-11634/): Citrix Workspace Application and Receiver for Windows Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2019-11580](https://insights.sbomify.com/CVE-2019-11580/): Atlassian Crowd and Crowd Data Center Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2019-11539](https://insights.sbomify.com/CVE-2019-11539/): Ivanti Pulse Connect Secure and Policy Secure Command Injection (high 8.0, exploited in the wild)
- [CVE-2019-11510](https://insights.sbomify.com/CVE-2019-11510/): Ivanti Pulse Connect Secure Arbitrary File Read (critical 9.9, exploited in the wild)
- [CVE-2019-0863](https://insights.sbomify.com/CVE-2019-0863/): Microsoft Windows Error Reporting (WER) Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-0859](https://insights.sbomify.com/CVE-2019-0859/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-0808](https://insights.sbomify.com/CVE-2019-0808/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-0803](https://insights.sbomify.com/CVE-2019-0803/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-0797](https://insights.sbomify.com/CVE-2019-0797/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-0708](https://insights.sbomify.com/CVE-2019-0708/): Microsoft Remote Desktop Services Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2019-0604](https://insights.sbomify.com/CVE-2019-0604/): Microsoft SharePoint Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2019-0541](https://insights.sbomify.com/CVE-2019-0541/): Microsoft MSHTML Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2019-0211](https://insights.sbomify.com/CVE-2019-0211/): Apache HTTP Server Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2018-8653](https://insights.sbomify.com/CVE-2018-8653/): Microsoft Internet Explorer Scripting Engine Memory Corruption (high 7.5, exploited in the wild)
- [CVE-2018-7600](https://insights.sbomify.com/CVE-2018-7600/): Drupal Core Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2018-6789](https://insights.sbomify.com/CVE-2018-6789/): Exim Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2018-4939](https://insights.sbomify.com/CVE-2018-4939/): Adobe ColdFusion Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2018-4878](https://insights.sbomify.com/CVE-2018-4878/): Adobe Flash Player Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2018-2380](https://insights.sbomify.com/CVE-2018-2380/): SAP Customer Relationship Management (CRM) Path Traversal (medium 6.6, exploited in the wild)
- [CVE-2018-20062](https://insights.sbomify.com/CVE-2018-20062/): ThinkPHP "noneCms" Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2018-18325](https://insights.sbomify.com/CVE-2018-18325/): DotNetNuke (DNN) Inadequate Encryption Strength (high 7.5, exploited in the wild)
- [CVE-2018-15961](https://insights.sbomify.com/CVE-2018-15961/): Adobe ColdFusion Unrestricted File Upload (critical 9.8, exploited in the wild)
- [CVE-2018-15811](https://insights.sbomify.com/CVE-2018-15811/): DotNetNuke (DNN) Inadequate Encryption Strength (high 7.5, exploited in the wild)
- [CVE-2018-14558](https://insights.sbomify.com/CVE-2018-14558/): Tenda AC7, AC9, and AC10 Routers Command Injection (critical 9.8, exploited in the wild)
- [CVE-2018-13379](https://insights.sbomify.com/CVE-2018-13379/): Fortinet FortiOS SSL VPN Path Traversal (critical 9.1, exploited in the wild)
- [CVE-2018-11776](https://insights.sbomify.com/CVE-2018-11776/): Apache Struts Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2018-0802](https://insights.sbomify.com/CVE-2018-0802/): Microsoft Office Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2018-0798](https://insights.sbomify.com/CVE-2018-0798/): Microsoft Office Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2018-0296](https://insights.sbomify.com/CVE-2018-0296/): Cisco Adaptive Security Appliance (ASA) Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2018-0171](https://insights.sbomify.com/CVE-2018-0171/): Cisco IOS and IOS XE Software Smart Install Remote Code Execution (high 7.5, exploited in the wild)
- [CVE-2017-9822](https://insights.sbomify.com/CVE-2017-9822/): DotNetNuke (DNN) Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-9805](https://insights.sbomify.com/CVE-2017-9805/): Apache Struts Deserialization of Untrusted Data (high 8.1, exploited in the wild)
- [CVE-2017-9248](https://insights.sbomify.com/CVE-2017-9248/): Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness (critical 9.8, exploited in the wild)
- [CVE-2017-8759](https://insights.sbomify.com/CVE-2017-8759/): Microsoft .NET Framework Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2017-7269](https://insights.sbomify.com/CVE-2017-7269/): Microsoft Windows Server Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2017-6327](https://insights.sbomify.com/CVE-2017-6327/): Symantec Messaging Gateway Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-5638](https://insights.sbomify.com/CVE-2017-5638/): Apache Struts Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-16651](https://insights.sbomify.com/CVE-2017-16651/): Roundcube Webmail File Disclosure (high 7.8, exploited in the wild)
- [CVE-2017-11882](https://insights.sbomify.com/CVE-2017-11882/): Microsoft Office Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2017-11774](https://insights.sbomify.com/CVE-2017-11774/): Microsoft Office Outlook Security Feature Bypass (high 7.8, exploited in the wild)
- [CVE-2017-0199](https://insights.sbomify.com/CVE-2017-0199/): Microsoft Office and WordPad Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2017-0143](https://insights.sbomify.com/CVE-2017-0143/): Microsoft Windows Server Message Block (SMBv1) Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2016-9563](https://insights.sbomify.com/CVE-2016-9563/): SAP NetWeaver XML External Entity (XXE) (medium 6.5, exploited in the wild)
- [CVE-2016-7255](https://insights.sbomify.com/CVE-2016-7255/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2016-4437](https://insights.sbomify.com/CVE-2016-4437/): Apache Shiro Code Execution (critical 9.8, exploited in the wild)
- [CVE-2016-3976](https://insights.sbomify.com/CVE-2016-3976/): SAP NetWeaver Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2016-3718](https://insights.sbomify.com/CVE-2016-3718/): ImageMagick Server-Side Request Forgery (SSRF) (medium 5.5, exploited in the wild)
- [CVE-2016-3715](https://insights.sbomify.com/CVE-2016-3715/): ImageMagick Arbitrary File Deletion (medium 5.5, exploited in the wild)
- [CVE-2016-3643](https://insights.sbomify.com/CVE-2016-3643/): SolarWinds Virtualization Manager Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2016-3235](https://insights.sbomify.com/CVE-2016-3235/): Microsoft Office OLE DLL Side Loading (high 7.8, exploited in the wild)
- [CVE-2016-0185](https://insights.sbomify.com/CVE-2016-0185/): Microsoft Windows Media Center Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2016-0167](https://insights.sbomify.com/CVE-2016-0167/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2015-4852](https://insights.sbomify.com/CVE-2015-4852/): Oracle WebLogic Server Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2015-1641](https://insights.sbomify.com/CVE-2015-1641/): Microsoft Office Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2014-1812](https://insights.sbomify.com/CVE-2014-1812/): Microsoft Windows Group Policy Preferences Password Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2012-3152](https://insights.sbomify.com/CVE-2012-3152/): Oracle Fusion Middleware Unspecified (critical 9.1, exploited in the wild)
- [CVE-2012-0158](https://insights.sbomify.com/CVE-2012-0158/): Microsoft MSCOMCTL.OCX Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2010-5326](https://insights.sbomify.com/CVE-2010-5326/): SAP NetWeaver Remote Code Execution (critical 10.0, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/exploited/