{
  "query": {
    "kev": "1",
    "page": "83"
  },
  "count": 20,
  "total": 1739,
  "page": 83,
  "limit": 20,
  "updated": {
    "cves": "2026-10-10T12:53:07.900Z",
    "kev": "2026-10-10T12:53:07.335Z",
    "epss": "2026-10-10T07:02:53.632Z",
    "breaches": "2026-10-10T12:53:07.511Z",
    "posts": "2026-10-10T12:53:07.899Z"
  },
  "links": {
    "web": "https://spydr.io/threats?kev=1&page=83",
    "next": "https://spydr.io/threats.json?kev=1&page=84"
  },
  "coverage": {
    "cves_published_since": "2026-06-12",
    "days": 120,
    "also": "every CVE in CISA KEV"
  },
  "unscored_hidden": 0,
  "warnings": [],
  "results": [
    {
      "id": "CVE-2020-10189",
      "url": "https://spydr.io/cve/CVE-2020-10189",
      "published": "2020-03-06T17:15:12.383Z",
      "modified": "2026-06-17T02:47:27.960Z",
      "score": 9.8,
      "severity": "critical",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.99941,
      "epss_percentile": 0.99972,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "zohocorp"
      ],
      "products": [
        "zohocorp manageengine desktop central"
      ],
      "cwes": [
        "CWE-502"
      ],
      "description": "Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage in the FileStorage class. This is related to the CewolfServlet and MDMLogUploaderServlet servlets."
    },
    {
      "id": "CVE-2019-17026",
      "url": "https://spydr.io/cve/CVE-2019-17026",
      "published": "2020-03-02T05:15:12.010Z",
      "modified": "2026-06-17T02:23:11.170Z",
      "score": 8.8,
      "severity": "high",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.46311,
      "epss_percentile": 0.9879,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "Mozilla"
      ],
      "products": [
        "Mozilla Firefox ESR",
        "Mozilla Thunderbird",
        "Mozilla Firefox"
      ],
      "cwes": [
        "CWE-843"
      ],
      "description": "Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 68.4.1, Thunderbird < 68.4.1, and Firefox < 72.0.1."
    },
    {
      "id": "CVE-2020-6418",
      "url": "https://spydr.io/cve/CVE-2020-6418",
      "published": "2020-02-27T23:15:12.623Z",
      "modified": "2026-06-17T03:23:18.510Z",
      "score": 8.8,
      "severity": "high",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.78808,
      "epss_percentile": 0.99585,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "Google"
      ],
      "products": [
        "Google Chrome"
      ],
      "cwes": [
        "CWE-843"
      ],
      "description": "Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
    },
    {
      "id": "CVE-2020-0688",
      "url": "https://spydr.io/cve/CVE-2020-0688",
      "published": "2020-02-11T22:15:15.900Z",
      "modified": "2026-06-17T02:46:21.387Z",
      "score": 8.8,
      "severity": "high",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.99962,
      "epss_percentile": 0.99976,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Known"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "Microsoft"
      ],
      "products": [
        "Microsoft Exchange Server 2013",
        "Microsoft Exchange Server 2019 Cumulative Update 3",
        "Microsoft Exchange Server 2016 Cumulative Update 14",
        "Microsoft Exchange Server 2016 Cumulative Update 15",
        "Microsoft Exchange Server 2019 Cumulative Update 4",
        "Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30"
      ],
      "cwes": [
        "CWE-287"
      ],
      "description": "A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'."
    },
    {
      "id": "CVE-2020-0683",
      "url": "https://spydr.io/cve/CVE-2020-0683",
      "published": "2020-02-11T22:15:15.650Z",
      "modified": "2026-06-17T02:46:20.557Z",
      "score": 7.8,
      "severity": "high",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.07605,
      "epss_percentile": 0.94411,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "Microsoft"
      ],
      "products": [
        "Microsoft Windows",
        "Microsoft Windows Server",
        "Microsoft Windows 10 Version 1903 for 32-bit Systems",
        "Microsoft Windows 10 Version 1903 for x64-based Systems",
        "Microsoft Windows 10 Version 1903 for ARM64-based Systems",
        "Microsoft Windows Server, version 1903 (Server Core installation)",
        "Microsoft Windows 10 Version 1909 for 32-bit Systems",
        "Microsoft Windows 10 Version 1909 for x64-based Systems",
        "Microsoft Windows 10 Version 1909 for ARM64-based Systems",
        "Microsoft Windows Server, version 1909 (Server Core installation)"
      ],
      "cwes": [
        "CWE-59"
      ],
      "description": "An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686."
    },
    {
      "id": "CVE-2020-0674",
      "url": "https://spydr.io/cve/CVE-2020-0674",
      "published": "2020-02-11T22:15:14.883Z",
      "modified": "2026-06-17T02:46:19.067Z",
      "score": 7.5,
      "severity": "high",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.86863,
      "epss_percentile": 0.99743,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "Microsoft"
      ],
      "products": [
        "Microsoft Internet Explorer 10",
        "Microsoft Internet Explorer 11",
        "Microsoft Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems",
        "Microsoft Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems",
        "Microsoft Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems",
        "Microsoft Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems",
        "Microsoft Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems",
        "Microsoft Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems",
        "Microsoft Internet Explorer 11 on Windows Server 2012",
        "Microsoft Internet Explorer 9"
      ],
      "cwes": [
        "CWE-416"
      ],
      "description": "A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767."
    },
    {
      "id": "CVE-2019-19356",
      "url": "https://spydr.io/cve/CVE-2019-19356",
      "published": "2020-02-07T23:15:10.013Z",
      "modified": "2026-06-17T02:26:33.677Z",
      "score": 7.5,
      "severity": "high",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.28168,
      "epss_percentile": 0.98072,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "netis-systems"
      ],
      "products": [
        "netis-systems wf2419 firmware"
      ],
      "cwes": [
        "CWE-78"
      ],
      "description": "Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connected to this page, it is possible to execute system commands as root through the tracert diagnostic tool because of lack of user input sanitizing."
    },
    {
      "id": "CVE-2019-18988",
      "url": "https://spydr.io/cve/CVE-2019-18988",
      "published": "2020-02-07T16:15:10.033Z",
      "modified": "2026-06-17T02:25:42.777Z",
      "score": 7,
      "severity": "high",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.04707,
      "epss_percentile": 0.91589,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "teamviewer"
      ],
      "products": [
        "teamviewer"
      ],
      "cwes": [
        "CWE-521"
      ],
      "description": "TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installations. It used a shared AES key for all installations since at least as far back as v7.0.43148, and used it for at least OptionsPasswordAES in the current version of the product. If an attacker were to know this key, they could decrypt protect information stored in the registry or configuration files of TeamViewer. With versions before v9.x , this allowed for attackers to decrypt the Unattended Access password to the system (which allows for remote login to the system as well as headless file browsing). The latest version still uses the same key for OptionPasswordAES but appears to have changed how the Unattended Access password is stored. While in most cases an attacker requires an existing session on a system, if the registry/configuration keys were stored off of the machine (such as in a file share or online), an attacker could then decrypt the required password to login to the system."
    },
    {
      "id": "CVE-2020-8655",
      "url": "https://spydr.io/cve/CVE-2020-8655",
      "published": "2020-02-07T00:15:09.613Z",
      "modified": "2026-06-17T03:26:42.707Z",
      "score": 7.8,
      "severity": "high",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.60075,
      "epss_percentile": 0.99115,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "eyesofnetwork"
      ],
      "products": [
        "eyesofnetwork"
      ],
      "cwes": [
        "CWE-269"
      ],
      "description": "An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7."
    },
    {
      "id": "CVE-2020-8657",
      "url": "https://spydr.io/cve/CVE-2020-8657",
      "published": "2020-02-06T18:15:13.963Z",
      "modified": "2026-06-17T03:26:43.000Z",
      "score": 9.8,
      "severity": "critical",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.91874,
      "epss_percentile": 0.99817,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "eyesofnetwork"
      ],
      "products": [
        "eyesofnetwork"
      ],
      "cwes": [
        "CWE-798"
      ],
      "description": "An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access token."
    },
    {
      "id": "CVE-2020-8644",
      "url": "https://spydr.io/cve/CVE-2020-8644",
      "published": "2020-02-05T22:15:11.003Z",
      "modified": "2026-06-17T03:26:41.917Z",
      "score": 9.8,
      "severity": "critical",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.86689,
      "epss_percentile": 0.99739,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "playsms"
      ],
      "products": [
        "playsms"
      ],
      "cwes": [
        "CWE-94"
      ],
      "description": "PlaySMS before 1.4.3 does not sanitize inputs from a malicious string."
    },
    {
      "id": "CVE-2020-3118",
      "url": "https://spydr.io/cve/CVE-2020-3118",
      "published": "2020-02-05T18:15:10.907Z",
      "modified": "2026-06-17T03:17:23.013Z",
      "score": 8.8,
      "severity": "high",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.11685,
      "epss_percentile": 0.95968,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "Cisco"
      ],
      "products": [
        "Cisco IOS XR Software"
      ],
      "cwes": [
        "CWE-134",
        "CWE-787"
      ],
      "description": "A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of string input from certain fields in Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to cause a stack overflow, which could allow the attacker to execute arbitrary code with administrative privileges on an affected device. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent)."
    },
    {
      "id": "CVE-2020-8515",
      "url": "https://spydr.io/cve/CVE-2020-8515",
      "published": "2020-02-01T13:15:12.623Z",
      "modified": "2026-06-17T03:26:30.047Z",
      "score": 9.8,
      "severity": "critical",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.99993,
      "epss_percentile": 0.99987,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "draytek"
      ],
      "products": [
        "draytek vigor2960 firmware",
        "draytek vigor300b firmware",
        "draytek vigor3900 firmware"
      ],
      "cwes": [
        "CWE-78"
      ],
      "description": "DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacters to the cgi-bin/mainfunction.cgi URI. This issue has been fixed in Vigor3900/2960/300B v1.5.1."
    },
    {
      "id": "CVE-2020-2555",
      "url": "https://spydr.io/cve/CVE-2020-2555",
      "published": "2020-01-15T17:15:17.347Z",
      "modified": "2026-06-17T03:12:20.697Z",
      "score": 9.8,
      "severity": "critical",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.97116,
      "epss_percentile": 0.99893,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "Oracle Corporation"
      ],
      "products": [
        "Oracle Corporation WebCenter Portal",
        "Oracle Corporation Utilities Framework"
      ],
      "cwes": [
        "CWE-502"
      ],
      "description": "Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
    },
    {
      "id": "CVE-2020-0646",
      "url": "https://spydr.io/cve/CVE-2020-0646",
      "published": "2020-01-14T23:15:33.143Z",
      "modified": "2026-06-17T02:46:15.230Z",
      "score": 9.8,
      "severity": "critical",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.99222,
      "epss_percentile": 0.99936,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "Microsoft"
      ],
      "products": [
        "Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2",
        "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
        "Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systems",
        "Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systems",
        "Microsoft .NET Framework 4.8 on Windows Server, version 1803 (Server Core Installation)",
        "Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systems",
        "Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systems",
        "Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems",
        "Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems",
        "Microsoft .NET Framework 4.8 on Windows Server 2016",
        "Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)",
        "Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1",
        "Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1",
        "Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems",
        "Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems",
        "Microsoft .NET Framework 4.8 on Windows RT 8.1",
        "Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1",
        "Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
        "Microsoft .NET Framework 4.8 on Windows Server 2012",
        "Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation)"
      ],
      "cwes": [
        "CWE-91"
      ],
      "description": "A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'."
    },
    {
      "id": "CVE-2020-0601",
      "url": "https://spydr.io/cve/CVE-2020-0601",
      "published": "2020-01-14T23:15:30.207Z",
      "modified": "2026-06-17T02:46:08.127Z",
      "score": 8.1,
      "severity": "high",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
      "score_source": "NVD",
      "epss": 0.89436,
      "epss_percentile": 0.99784,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "Microsoft"
      ],
      "products": [
        "Microsoft Windows",
        "Microsoft Windows Server",
        "Microsoft Windows 10 Version 1903 for 32-bit Systems",
        "Microsoft Windows 10 Version 1903 for x64-based Systems",
        "Microsoft Windows 10 Version 1903 for ARM64-based Systems",
        "Microsoft Windows Server, version 1903 (Server Core installation)",
        "Microsoft Windows 10 Version 1909 for 32-bit Systems",
        "Microsoft Windows 10 Version 1909 for x64-based Systems",
        "Microsoft Windows Server, version 1909 (Server Core installation)",
        "Microsoft Windows 10 Version 1909 for ARM64-based Systems"
      ],
      "cwes": [
        "CWE-295"
      ],
      "description": "A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'."
    },
    {
      "id": "CVE-2019-17558",
      "url": "https://spydr.io/cve/CVE-2019-17558",
      "published": "2019-12-30T17:15:19.780Z",
      "modified": "2026-06-17T02:24:09.007Z",
      "score": 7.5,
      "severity": "high",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.98567,
      "epss_percentile": 0.99922,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "apache",
        "oracle"
      ],
      "products": [
        "Apache Solr"
      ],
      "cwes": [
        "CWE-74"
      ],
      "description": "Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configset could contain renderable, potentially malicious, templates. Parameter provided templates are disabled by default, but can be enabled by setting `params.resource.loader.enabled` by defining a response writer with that setting set to `true`. Defining a response writer requires configuration API access. Solr 8.4 removed the params resource loader entirely, and only enables the configset-provided template rendering when the configset is `trusted` (has been uploaded by an authenticated user)."
    },
    {
      "id": "CVE-2019-20085",
      "url": "https://spydr.io/cve/CVE-2019-20085",
      "published": "2019-12-30T03:15:10.663Z",
      "modified": "2026-06-17T02:29:56.823Z",
      "score": 7.5,
      "severity": "high",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "score_source": "NVD",
      "epss": 0.96071,
      "epss_percentile": 0.99878,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "tvt"
      ],
      "products": [
        "tvt nvms-1000 firmware"
      ],
      "cwes": [
        "CWE-22"
      ],
      "description": "TVT NVMS-1000 devices allow GET /.. Directory Traversal"
    },
    {
      "id": "CVE-2019-19781",
      "url": "https://spydr.io/cve/CVE-2019-19781",
      "published": "2019-12-27T14:15:12.070Z",
      "modified": "2026-08-12T05:17:21.853Z",
      "score": 9.8,
      "severity": "critical",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.99999,
      "epss_percentile": 0.99998,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Known"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "citrix"
      ],
      "products": [
        "citrix application delivery controller firmware",
        "citrix netscaler gateway firmware",
        "citrix gateway firmware"
      ],
      "cwes": [
        "CWE-22"
      ],
      "description": "An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal."
    },
    {
      "id": "CVE-2019-4716",
      "url": "https://spydr.io/cve/CVE-2019-4716",
      "published": "2019-12-18T17:16:43.863Z",
      "modified": "2026-06-17T02:36:50.190Z",
      "score": 9.8,
      "severity": "critical",
      "cvss_version": "3.1",
      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "score_source": "NVD",
      "epss": 0.86441,
      "epss_percentile": 0.99733,
      "exploited": true,
      "kev": {
        "added": "2021-11-03",
        "due": "2022-05-03",
        "action": "Apply updates per vendor instructions.",
        "ransomware": "Unknown"
      },
      "ssvc_exploitation": "active",
      "vendors": [
        "IBM"
      ],
      "products": [
        "IBM Planning Analytics"
      ],
      "cwes": [
        "CWE-94"
      ],
      "description": "IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as \"admin\", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094."
    }
  ],
  "attribution": [
    {
      "source": "NVD",
      "url": "https://nvd.nist.gov",
      "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD."
    },
    {
      "source": "CISA KEV",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "notice": "Known exploited vulnerabilities from the CISA KEV catalog."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss",
      "notice": "Exploit prediction scores from FIRST EPSS."
    }
  ]
}