{ "query": { "kev": "1", "page": "85" }, "count": 20, "total": 1739, "page": 85, "limit": 20, "updated": { "cves": "2026-10-10T12:53:07.900Z", "kev": "2026-10-10T13:53:09.523Z", "epss": "2026-10-10T13:03:07.413Z", "breaches": "2026-10-10T12:53:07.511Z", "posts": "2026-10-10T13:53:09.771Z" }, "links": { "web": "https://spydr.io/threats?kev=1&page=85", "next": "https://spydr.io/threats.json?kev=1&page=86" }, "coverage": { "cves_published_since": "2026-06-12", "days": 120, "also": "every CVE in CISA KEV" }, "unscored_hidden": 0, "warnings": [], "results": [ { "id": "CVE-2019-0708", "url": "https://spydr.io/cve/CVE-2019-0708", "published": "2019-05-16T19:29:00.427Z", "modified": "2026-06-17T02:08:44.017Z", "score": 9.8, "severity": "critical", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.99999, "epss_percentile": 0.99999, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Known" }, "ssvc_exploitation": "active", "vendors": [ "Microsoft" ], "products": [ "Microsoft Windows", "Microsoft Windows Server" ], "cwes": [ "CWE-416" ], "description": "A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'." }, { "id": "CVE-2019-11510", "url": "https://spydr.io/cve/CVE-2019-11510", "published": "2019-05-08T17:29:00.630Z", "modified": "2026-06-17T02:13:04.277Z", "score": 10, "severity": "critical", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.99999, "epss_percentile": 1, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Known" }, "ssvc_exploitation": "active", "vendors": [ "ivanti" ], "products": [ "ivanti connect secure" ], "cwes": [ "CWE-22" ], "description": "In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability ." }, { "id": "CVE-2019-11539", "url": "https://spydr.io/cve/CVE-2019-11539", "published": "2019-04-26T02:29:00.300Z", "modified": "2026-06-17T02:13:07.580Z", "score": 7.2, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.98544, "epss_percentile": 0.99921, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Known" }, "ssvc_exploitation": "active", "vendors": [ "ivanti", "pulsesecure" ], "products": [ "ivanti connect secure", "ivanti policy secure", "pulsesecure pulse policy secure" ], "cwes": [ "CWE-78" ], "description": "In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands." }, { "id": "CVE-2019-3398", "url": "https://spydr.io/cve/CVE-2019-3398", "published": "2019-04-18T18:29:00.970Z", "modified": "2026-06-17T02:35:05.863Z", "score": 8.8, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.97028, "epss_percentile": 0.99891, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "Atlassian" ], "products": [ "Atlassian Confluence" ], "cwes": [ "CWE-22" ], "description": "Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this path traversal vulnerability to write files to arbitrary locations which can lead to remote code execution on systems that run a vulnerable version of Confluence Server or Data Center. All versions of Confluence Server from 2.0.0 before 6.6.13 (the fixed version for 6.6.x), from 6.7.0 before 6.12.4 (the fixed version for 6.12.x), from 6.13.0 before 6.13.4 (the fixed version for 6.13.x), from 6.14.0 before 6.14.3 (the fixed version for 6.14.x), and from 6.15.0 before 6.15.2 are affected by this vulnerability." }, { "id": "CVE-2019-0859", "url": "https://spydr.io/cve/CVE-2019-0859", "published": "2019-04-09T21:29:02.520Z", "modified": "2026-06-17T02:09:03.317Z", "score": 7.8, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.04151, "epss_percentile": 0.90609, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Known" }, "ssvc_exploitation": "active", "vendors": [ "Microsoft" ], "products": [ "Microsoft Windows", "Microsoft Windows Server" ], "cwes": [], "description": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803." }, { "id": "CVE-2019-0803", "url": "https://spydr.io/cve/CVE-2019-0803", "published": "2019-04-09T21:29:01.037Z", "modified": "2026-06-17T02:08:56.287Z", "score": 7.8, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.4523, "epss_percentile": 0.98757, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Known" }, "ssvc_exploitation": "active", "vendors": [ "Microsoft" ], "products": [ "Microsoft Windows", "Microsoft Windows Server" ], "cwes": [], "description": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859." }, { "id": "CVE-2019-0808", "url": "https://spydr.io/cve/CVE-2019-0808", "published": "2019-04-09T03:29:00.873Z", "modified": "2026-06-17T02:08:56.940Z", "score": 7.8, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.53017, "epss_percentile": 0.98954, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "Microsoft" ], "products": [ "Microsoft Windows", "Microsoft Windows Server" ], "cwes": [], "description": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797." }, { "id": "CVE-2019-0797", "url": "https://spydr.io/cve/CVE-2019-0797", "published": "2019-04-09T03:29:00.763Z", "modified": "2026-06-17T02:08:55.650Z", "score": 7.8, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.0189, "epss_percentile": 0.78954, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "Microsoft" ], "products": [ "Microsoft Windows Server", "Microsoft Windows" ], "cwes": [], "description": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808." }, { "id": "CVE-2019-0211", "url": "https://spydr.io/cve/CVE-2019-0211", "published": "2019-04-08T22:29:00.387Z", "modified": "2026-06-17T02:07:58.710Z", "score": 7.8, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.65005, "epss_percentile": 0.99236, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "Apache" ], "products": [ "Apache HTTP Server" ], "cwes": [ "CWE-416" ], "description": "In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected." }, { "id": "CVE-2019-3396", "url": "https://spydr.io/cve/CVE-2019-3396", "published": "2019-03-25T19:29:01.647Z", "modified": "2026-06-17T02:35:05.567Z", "score": 9.8, "severity": "critical", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.99913, "epss_percentile": 0.99968, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Known" }, "ssvc_exploitation": "active", "vendors": [ "Atlassian" ], "products": [ "Atlassian Confluence Server" ], "cwes": [ "CWE-22" ], "description": "The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection." }, { "id": "CVE-2019-9978", "url": "https://spydr.io/cve/CVE-2019-9978", "published": "2019-03-24T15:29:00.243Z", "modified": "2026-06-17T02:44:58.130Z", "score": 6.1, "severity": "medium", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "score_source": "NVD", "epss": 0.72946, "epss_percentile": 0.99442, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "warfareplugins" ], "products": [ "warfareplugins social warfare", "warfareplugins social warfare pro" ], "cwes": [ "CWE-79" ], "description": "The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro." }, { "id": "CVE-2019-0604", "url": "https://spydr.io/cve/CVE-2019-0604", "published": "2019-03-05T23:29:00.757Z", "modified": "2026-06-17T02:08:31.010Z", "score": 9.8, "severity": "critical", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.99913, "epss_percentile": 0.99968, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Known" }, "ssvc_exploitation": "active", "vendors": [ "Microsoft" ], "products": [ "Microsoft SharePoint Server", "Microsoft SharePoint Foundation", "Microsoft SharePoint Enterprise Server" ], "cwes": [ "CWE-20" ], "description": "A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594." }, { "id": "CVE-2019-6223", "url": "https://spydr.io/cve/CVE-2019-6223", "published": "2019-03-05T16:29:02.060Z", "modified": "2026-06-17T02:38:50.217Z", "score": 7.5, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "score_source": "NVD", "epss": 0.02629, "epss_percentile": 0.85076, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "Apple" ], "products": [ "Apple iOS", "Apple macOS" ], "cwes": [], "description": "A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer." }, { "id": "CVE-2019-9082", "url": "https://spydr.io/cve/CVE-2019-9082", "published": "2019-02-24T18:29:00.207Z", "modified": "2026-06-17T02:43:02.110Z", "score": 8.8, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.97419, "epss_percentile": 0.999, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "thinkphp", "opensourcebms", "zzzcms" ], "products": [ "thinkphp", "opensourcebms open source background management system", "zzzcms zzzphp" ], "cwes": [ "CWE-94", "CWE-306" ], "description": "ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command." }, { "id": "CVE-2019-8394", "url": "https://spydr.io/cve/CVE-2019-8394", "published": "2019-02-17T04:29:00.330Z", "modified": "2026-06-17T02:41:56.683Z", "score": 6.5, "severity": "medium", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "score_source": "NVD", "epss": 0.63336, "epss_percentile": 0.99191, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "zohocorp" ], "products": [ "zohocorp manageengine servicedesk plus" ], "cwes": [ "CWE-434" ], "description": "Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization." }, { "id": "CVE-2019-1653", "url": "https://spydr.io/cve/CVE-2019-1653", "published": "2019-01-24T16:29:00.317Z", "modified": "2026-06-17T02:28:58.090Z", "score": 7.5, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "score_source": "NVD", "epss": 0.99876, "epss_percentile": 0.99963, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "Cisco" ], "products": [ "Cisco Small Business RV Series Router Firmware" ], "cwes": [ "CWE-284" ], "description": "A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability." }, { "id": "CVE-2019-0541", "url": "https://spydr.io/cve/CVE-2019-0541", "published": "2019-01-08T21:29:00.470Z", "modified": "2026-06-17T02:08:19.707Z", "score": 8.8, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.53202, "epss_percentile": 0.98959, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "Microsoft" ], "products": [ "Microsoft Office", "Microsoft Office Word Viewer", "Microsoft Internet Explorer 9", "Microsoft Internet Explorer 11", "Microsoft Excel Viewer", "Microsoft Internet Explorer 10" ], "cwes": [ "CWE-77" ], "description": "A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka \"MSHTML Engine Remote Code Execution Vulnerability.\" This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus." }, { "id": "CVE-2018-8653", "url": "https://spydr.io/cve/CVE-2018-8653", "published": "2018-12-20T13:29:00.327Z", "modified": "2026-06-17T02:05:15.967Z", "score": 7.5, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.29606, "epss_percentile": 0.98154, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "Microsoft" ], "products": [ "Microsoft Internet Explorer 9", "Microsoft Internet Explorer 11", "Microsoft Internet Explorer 10" ], "cwes": [ "CWE-787" ], "description": "A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka \"Scripting Engine Memory Corruption Vulnerability.\" This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8643." }, { "id": "CVE-2018-20062", "url": "https://spydr.io/cve/CVE-2018-20062", "published": "2018-12-11T18:29:00.197Z", "modified": "2026-06-17T01:52:14.323Z", "score": 9.8, "severity": "critical", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.9953, "epss_percentile": 0.99945, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "5none" ], "products": [ "5none nonecms" ], "cwes": [], "description": "An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter, as demonstrated by the s=index/\\think\\Request/input&filter=phpinfo&data=1 query string." }, { "id": "CVE-2018-14558", "url": "https://spydr.io/cve/CVE-2018-14558", "published": "2018-10-30T18:29:00.580Z", "modified": "2026-06-17T01:41:11.447Z", "score": 9.8, "severity": "critical", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.0851, "epss_percentile": 0.94921, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "tenda" ], "products": [ "tenda ac7 firmware", "tenda ac9 firmware", "tenda ac10 firmware" ], "cwes": [ "CWE-78" ], "description": "An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request. This occurs because the \"formsetUsbUnload\" function executes a dosystemCmd function with untrusted input." } ], "attribution": [ { "source": "NVD", "url": "https://nvd.nist.gov", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "source": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "notice": "Known exploited vulnerabilities from the CISA KEV catalog." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss", "notice": "Exploit prediction scores from FIRST EPSS." } ] }