Vulnerability lineage
Bug familyA group of related CVEs. A chain is linked by evidence that one CVE follows from another. A class family groups CVEs by product and weakness type and is not proven to share a root cause.
Chains are CVEs linked by evidence that one follows another: a fix that was bypassed, incomplete, or patched again in the same code. Class families group CVEs in the same product with the same weakness type over time.
Chainvitejs · vite Chainparse-community · parse-server Chainopencontainers · runc Chainargoproj · argo-cd Chainthorsten/phpmyfaq Chainikus060/rdiffweb ChainApache Tomcat Chain org.
Chainsteveukx · simple-git ChainApache InLong Chaincontainerd Chainpuma Chain Chain Chainsebhildebrandt · systeminformation Chain spatie/
Chainnodejs · undici Chainunshiftio/url-parse unshiftio/
Chain Chain github.
ChainRed Hat · undertow ChainSpring Framework ChainApache Tomcat Chainpatriksimek · vm2 Chaingradio-app/gradio Chain ChainApache Tomcat Chainmatrix-org · synapse ChainApache Tomcat Chainoctobercms · october ChainRed Hat · PyYAML Chainx-stream · xstream ChainOctoPrint ChainJenkins Active Directory Plugin Chainkiwitcms · Kiwi ChainStudio-42 · elFinder Chaingo-ethereum ChainPEAR · Archive_Tar Chainyt-dlp ChainCraft CMS · cms Chaincrewjam · saml ChainRed Hat build of Keycloak 22 Chainikus060/rdiffweb ChainRed Hat · Ansible ChainGNU · Bourne-Again Shell (Bash) ChainRoundcube · Webmail ChainApache Airflow Chainshopware · platform Chainopencast Chainnetty Chainrack Chain Chainpterodactyl · wings Chain Chainopenfga Chainsocketio · engine.io Chaintransloadit/uppy Chain ChainApache · Struts Chain zendframework/
Chainpyload Chainnautobot Chainhelm Chainfroxlor/froxlor Chainpimcore/pimcore ChainApache Traffic Server ChainFasterXML · jackson-databind Chainpgadmin.org · pgAdmin 4 ChainCraft CMS · cms Chainpyload Chain Chainvantage6 Chainxwiki-platform Chainurllib3 Chaingetgrav · grav Chainansible Chain[UNKNOWN] · ansible ChainApache ActiveMQ Broker ChainIETF · HTTP/2 Chainnodejs · undici Chaintrailofbits · fickling ChainOpenStack · Keystone ChainApache MINA ChainSpring Framework ChainApache Airflow Chainmicroweber/microweber microweber/
Chainxwiki-platform ChainApache Airflow Chainpimcore/pimcore Chainpimcore Chainnetty ChainApache Tomcat Chainsnipe/snipe-it Chainsnipe/snipe-it ChainPylons · Waitress ChainHackerOne · sequelize node module Chain ChainRed Hat Enterprise Linux 3 ChainApache · Log4j2 Chaingrafana Chaini18next-http-backend Chainargoproj · argo-cd Chainlibexpat project · libexpat Chain@fastify/static Chaintwigphp · Twig Chainpillarjs · path-to-regexp ChainSAML-Toolkits · ruby-saml Chainmlflow/mlflow Chainfedorindutny · ip ChainDrupal · COOKiES Consent Management Chainguzzle · psr7 Chaingit Chainmindsdb ChainRed Hat Enterprise Linux 9 Chainfroxlor/froxlor ChainMattermost ChainCodeIgniter4 Chainjupyter-server · jupyter_server Chaindolibarr/dolibarr ChainApache NiFi Chaintypo3 Chainsinatra Chainguzzle Chaingetgrav/grav Chainhttp4s Chainnpm · node-tar ChainMicrosoft Edge ChainJenkins Script Security Plugin Chain Chain ChainApache · Tomcat Chainargoproj · argo-cd Chainsqlalchemy · mako Chainprojectdiscovery · nuclei Chainondata · ckan-mcp-server Chainjunrar Chaindigitalbazaar · forge ChainApache Tomcat ChainPylons · webob Chainwithastro · astro Chainpheditor ChainDrupal · Tagify Chainberriai/litellm ChainKnpLabs · snappy ChainApache CXF Chainnuxt Chainmantisbt ChainChurchCRM · CRM Chaingotenberg Chainowen2345 · camaleon-cms Chainzitadel Chainparse-community · parse-server Chainruby · rexml Chaingogs ChainPython Software Foundation · CPython Chaineladnava · mailgen Chainargoproj · argo-cd ChainApache Zeppelin ChainTrend Micro Endpoint Encryption Policy Server Chaindataease ChainApache Commons Configuration Chaingit-lfs Chainvercel · next.js Chainman-group · dtale Chainbasecamp · trix Chainaio-libs · aiohttp Chaincure53 · DOMPurify ChainPHPOffice · PhpSpreadsheet Chainpuma Chainauthzed · spicedb Chain Chainbiscuit-auth · biscuit-java Chain Chainmlflow/mlflow Chainphlex-ruby · phlex Chainargoproj · argo-cd Chainesphome ChainCloudflare · quiche Chainmhenrixon · sidekiq-unique-jobs Chainpyca · cryptography ChainLiferay · Portal ChainHumanSignal · label-studio Chainpyload/pyload Chainresque ChainApache Software Foundation · Apache Shiro Chaindompdf ChainApache Software Foundation · Apache Druid Chainopen-telemetry · opentelemetry-go-contrib Chainethyca · fides Chainxwiki-platform ChainGitLab ChainSocket.io-Parser Chainxwiki-platform Chainmoby ChainApache Sling App CMS Chainrust-libp2p ChainApache Flume Chain ChainCrafter Software · Crafter CMS ChainRed Hat · rpm Chain github.
ChainApache Tika ChainJenkins Git Plugin Chaingruntjs/grunt Chain Chainckeditor4 Chainistio ChainGerapy Chainbookstackapp/bookstack bookstackapp/
Chainkevinpapst/kimai2 Chain github.
Chainbytecodealliance · wasmtime Chainmariocasciaro · object-path Chain github.
Chain phpmailer/
Chainrussellhaering · goxmldsig ChainPivotal · Spring Integration Zip Chain Chain Chain Chaincodecov-node Chain Chain Chain Chain ChainSpring by Pivotal · Spring Framework ChainOpenSSL Software Foundation · OpenSSL Chain Chain org.
Chain ChainApache Tomcat Chain Chain Chain Chain Chain Chain Chain Chain Chain Chain Chain Chain Chain Chain Chainhighcharts ChainRed Hat · glusterfs Chain com.
ChainJenkins Pipeline: Shared Groovy Libraries Plugin Chain Chaindropwizard-validation Chainxwiki-platform Chainfrankenphp Chainnetty Chainsiyuan-note · siyuan ChainHashiCorp · Vault Chaincyanheads · git-mcp-server Chainruby · rexml Chainpimcore · admin-ui-classic-bundle Chainomero-web Chainlouislam · uptime-kuma Chainxwiki-commons Chaingetkirby · kirby Chain ChainJenkins Build Failure Analyzer Plugin Chain github.
Chain Chain Chain Chain ChainApache Struts Chain ChainMicrosoft Corporation · Windows Graphics Component Chain Chain Chain Chain org.
Chain Chain Chain ChainCraft CMS ChainvBulletin Chainyiisoft · yii2 Chainmichaelschwarz · Ajax.NET-Professional michaelschwarz Ajax.
Chainoctobercms · october ChainPHP ChainDrupal core ChainDrupal · UI Icons Chainggml-org · llama.cpp Chainmakeplane · plane ChainThe Document Foundation · LibreOffice Chaincaddyserver · caddy Chainwpwax · Directorist: AI-Powered Business Directory, Listings & Classified Ads Chainzalando · skipper Chainsvgo ChainSky Co., LTD. · SKYSEA Client View Chain ChainApache Airflow Chainpydantic-ai Chainargoproj · argo-workflows Chaincrmperks · Database for Contact Form 7, WPforms, Elementor forms Chaingo-vikunja · vikunja ChainNotFound · Admin and Site Enhancements (ASE) Pro ChainNuxt Chainimage-size Chainfroxlor Chainvllm-project · vllm Chainopen-webui Chainwebpack-dev-server ChainQuantumNous · new-api Chainwithastro · astro ChainAcademySoftwareFoundation · openexr ChainCraft CMS · cms Chainhandlebars-lang · handlebars.js Chainopenzeppelin-contracts Chainellite · Wallos ChainCraft CMS · cms ChainPhoenix616 · InventoryGui Chaindataease ChainLiferay · Portal Chainxwiki-platform ChainLabRedesCefetRJ · WeGIA Chainxwiki-platform ChainLinux Chaintj-actions · branch-names ChainGoogle · Protocol Buffers Chainjmix-framework · jmix Chainshopware Chain OPCFoundation.
Chaindrakkan · sftpgo Chainlobehub · lobe-chat ChainOpenRefine Chainwebpack ChainMattermost Chain ChainSixLabors · ImageSharp Chainevmos Chainzenml-io/zenml Chainmeshery Chaintinymce Chain0xJacky · nginx-ui Chaintypo3 ChainRed Hat Enterprise Linux 8 ChainLF-Edge, Zededa · EVE OS ChainPrestaShop Chainxwiki-platform ChainGoogle · gRPC ChainCraft CMS · cms Chainxwiki-platform Chain Chainbytecodealliance · wasmtime ChainKubeOperator · KubePi Chain Chainhelm Chainthorsten/phpmyfaq Chainxwiki-platform ChainNukeViet · CMS Chainsylabs · sif Chainsigstore · cosign ChainApache Geode Chain Chainmicroweber/microweber microweber/
Chainjquery-validation Chain Chainvyperlang · vyper ChainMicrosoft · .NET 6.0 Chain Chainjaneczku/calibre-web janeczku/
Chainstar7th/showdoc ChainJenkins Mailer Plugin Chainbrave-browser Chainlxml Chainimmerjs/immer ChainAutoptimize Chain Chain github.
ChainJenkins Git Parameter Plugin Chainbolt Chain github.
Chain ChainJenkins Configuration as Code Plugin ChainJenkins ChainApache Tomcat Chain ChainJenkins Config File Provider Plugin ChainApache Software Foundation · Apache CouchDB Chainopensuse · openbuildservice Chain Chain Chain ChainApache Struts Chain Chain Chain gopkg.
Chain Chain Chain Chain Chain Chain Chain Chain Chain org.
Chain Chain Chain org.
Chain Chain Chain Chain Chain Chain Chain Chain Chain Chain Chain Chain Chain Chain Chain Chain Chain ChainN-able · N-central ChainLangflow ChainQlik · Sense ChainSynacor · Zimbra Collaboration Suite (ZCS) ChainApache · HTTP Server ChainDotNetNuke (DNN) ChainTIMLEGGE · IO::Compress::Brotli TIMLEGGE IO:
ChainApache Tomcat ChainCraft CMS Chainn8n ChainSolarWinds · Web Help Desk ChainCraft CMS ChainOSGeo · GeoServer ChainRoundcube Webmail ChainMinIO ChainownCloud graphapi ChainNextGen Healthcare · Mirth Connect ChainApache · RocketMQ ChainApple · Multiple Products ChainApache · Spark ChainGrafana Labs · Grafana ChainNice · Linear eMerge E3-Series ChainVMware · Spring Framework ChainApache · Struts ChainSpring by VMware · Spring Cloud Config ChainApache Kylin ChainApache Solr ChainD-Link · Multiple Routers ChainPHPMailer ChainApache · ActiveMQ ChainRuby on Rails ChainRed Hat · JBoss Chainhapifhir · org.hl7.fhir.core ChainLiferay · Portal ChainFeather js · Feathers-Sequalize Chain Chain Class familyApple · iOS, iPadOS, and macOS Class familyGoogle · Chromium GPU Class familyGoogle · Chromium V8 Class familyMicrosoft · Win32k Class familyMicrosoft · Windows Class familyGoogle · Chromium Animation Class familyMicrosoft · Windows Class familyApple · iOS, iPadOS, and macOS Class familyApple · iOS, iPadOS, and macOS Class familyMicrosoft · Windows Class familyGoogle · Chromium V8 Class familyApple · Multiple Products Class familyGoogle · Chromium V8 Class familyGoogle · Chromium Intents Class familyMicrosoft · Windows Class familyAdobe · Reader and Acrobat Class familyAdobe · Reader and Acrobat Class familyApple · iOS, iPadOS, and macOS Class familyApple · macOS Class familyGoogle · Chromium V8 Class familyMicrosoft · Windows Class familyMicrosoft · Windows Class familyMozilla · Firefox Class familyMicrosoft · Windows COM+ Event System Service Class familyMicrosoft · Windows Class familyMicrosoft · Office Class familyMozilla · Firefox Class familyGoogle · Chromium Class familyMicrosoft · SharePoint Class familyMicrosoft · Windows Class familyOracle · WebLogic Server Class familyMicrosoft · Windows Class familyApple · Multiple Products Class familyApple · iOS Class familyApple · Multiple Products Class familyGoogle · Chromium Skia Class familyMicrosoft · Exchange Server Class familyMicrosoft · Windows Class familyMicrosoft · Windows Class familyAdobe · ColdFusion Class familyMozilla · Firefox Class familyPalo Alto Networks · PAN-OS Class familyGoogle · Chromium V8 Class familyAdobe · ColdFusion Class familyApple · Multiple Products Class familyOracle · PeopleSoft Enterprise PeopleTools Class familyApple · iOS Class familyApple · macOS Class familyRoundcube · Webmail Class familyAdobe · Acrobat and Reader Class familyMicrosoft · Win32k Class familyMicrosoft · Internet Explorer Class familyAdobe · ColdFusion Class familyMicrosoft · Windows Class familyCisco · IOS XE Software Class familyApple · iOS and iPadOS Class familyGoogle · Chromium V8 Class familyMicrosoft · Internet Explorer Class familyMicrosoft · .NET Core and Visual Studio Class familySamsung · Mobile Devices Class familyCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Class familyMicrosoft · Edge and Internet Explorer Class familyCisco · NX-OS Class familyMicrosoft · Windows Class familyMicrosoft · Exchange Server Class familyMicrosoft · SharePoint Server Class familyCisco · Adaptive Security Appliance (ASA) Class familyGitLab Class familyGoogle · Chromium Class familyFortinet · FortiWeb Class familyMicrosoft · Office Class familyFortinet · FortiSandbox Class familyMicrosoft · Windows Class familyOracle · Java SE JDK and JRE Class familyAdobe · Flash Player Class familyMicrosoft · Office Class familySynacor · Zimbra Collaboration Suite (ZCS) Class familyMicrosoft · Office Class familyCisco · IOS and IOS XE Software Class familyCisco · IOS software Class familyApple · macOS Class familyApple · Multiple Products Class familyAdobe · Experience Manager (AEM) Forms Class familyMicrosoft · Windows Class familyApache · OFBiz Class familyLinux · Kernel Class familyMicrosoft · SharePoint Class familyMicrosoft · Windows Class familyAdobe · Reader and Acrobat Class familyFortinet · FortiWeb Class familyCisco IOS XE Web UI Class familyAdobe · Reader and Acrobat Class familyPalo Alto Networks · PAN-OS Class familyMicrosoft · Configuration Manager Class familyMozilla · Firefox Class familyF5 · BIG-IP Class familyAdobe · Reader and Acrobat Class familyElastic · Kibana Class familyQualcomm · Multiple Chipsets Class familyApache · Struts Class familyAdobe · Flash Player Class familyOracle · Java SE Class familyMicrosoft · Exchange Server Class familyFortinet · FortiOS Class familyCisco · Adaptive Security Appliance (ASA) Class familyVeeam · Backup & Replication Class familyAdobe · ColdFusion Class familyCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Class familyMicrosoft · .NET Framework Class familyMicrosoft · Exchange Server Class familyAndroid Kernel Class familyMicrosoft · Windows Class familyMicrosoft · Internet Explorer Class familyAdobe · Flash Player Class familyMicrosoft · Office Class familyOracle · WebLogic Server Class familyIvanti · Pulse Connect Secure Class familyJFrog · Artifactory Class familyN-able · N-central Class familyMicrosoft · Edge Class familyMicrosoft · Windows Class familyCisco · IOS XR Class familyAdobe · ColdFusion Class familyISC · BIND Class familyApple · Multiple Products Class familyGoogle · Chrome FreeType Class familyCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Class familyAdobe · Acrobat and Reader Class familyDassault Systèmes · DELMIA Apriso Class familySophos · Firewall Class familySamsung · Mobile Devices Class familyCitrix · NetScaler ADC and NetScaler Gateway Class familyLinux · Kernel Class familyCisco · IOS and IOS XE Class familyD-Link · Multiple Routers Class familyLinux · Kernel Class familySAP · NetWeaver Class familyRuby on Rails Class familyMicrosoft · Internet Explorer Class familyApache · ActiveMQ Class familyApple · Multiple Products Class familyFortinet · FortiOS Class familyIvanti · Connect Secure and Policy Secure Class familyPalo Alto Networks · PAN-OS Class familyMicrosoft · Edge Class familyQNAP · Photo Station Class familyCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Class familyApache · Kylin Class familyApache · Struts Class familyCisco · Identity Services Engine Class familyMicrosoft · SharePoint Server Class familyApple · Multiple Products Class familyApple · Multiple Products Class familySolarWinds · Web Help Desk Class familyGogs Class familyPalo Alto Networks · PAN-OS Class familySolarWinds · Serv-U
vitejs vite: successive fixes (2022–2026)
- Generations
- 9
- CVEs
- 9
- In KEV
- 1
- Years
- 22–26
parse-community parse-server: successive fixes (2020–2024)
- Generations
- 7
- CVEs
- 16
- In KEV
- 0
- Years
- 20–24
opencontainers runc: incomplete fixes (2016–2025)
- Generations
- 6
- CVEs
- 19
- In KEV
- 0
- Years
- 17–25
argoproj argo-cd: related fixes (2020–2024)
- Generations
- 5
- CVEs
- 16
- In KEV
- 0
- Years
- 20–24
thorsten/phpmyfaq: successive fixes (2022–2023)
- Generations
- 5
- CVEs
- 11
- In KEV
- 0
- Years
- 22–23
ikus060/rdiffweb: successive fixes (2022–2023)
- Generations
- 5
- CVEs
- 10
- In KEV
- 0
- Years
- 22–23
Apache Tomcat: incomplete fixes (2009–2023)
- Generations
- 5
- CVEs
- 9
- In KEV
- 0
- Years
- 09–23
org.apache.struts:struts2-core: incomplete fixes (2012–2015)
- Generations
- 5
- CVEs
- 8
- In KEV
- 0
- Years
- 12–15
steveukx simple-git: incomplete fixes (2022–2026)
- Generations
- 5
- CVEs
- 7
- In KEV
- 0
- Years
- 22–26
Apache InLong: fix bypasses (2023–2025)
- Generations
- 5
- CVEs
- 7
- In KEV
- 0
- Years
- 23–25
containerd: related fixes (2021–2024)
- Generations
- 5
- CVEs
- 7
- In KEV
- 0
- Years
- 22–25
puma: successive fixes (2020–2024)
- Generations
- 5
- CVEs
- 7
- In KEV
- 0
- Years
- 20–24
Django: successive fixes (2011–2023)
- Generations
- 5
- CVEs
- 7
- In KEV
- 0
- Years
- 11–23
joplin: successive fixes (2020–2023)
- Generations
- 5
- CVEs
- 7
- In KEV
- 0
- Years
- 20–23
sebhildebrandt systeminformation: successive fixes (2020–2021)
- Generations
- 5
- CVEs
- 6
- In KEV
- 1
- Years
- 20–21
spatie/browsershot: fix bypasses (2022–2025)
- Generations
- 5
- CVEs
- 6
- In KEV
- 0
- Years
- 22–25
nodejs undici: successive fixes (2022–2026)
- Generations
- 5
- CVEs
- 5
- In KEV
- 0
- Years
- 22–26
unshiftio/url-parse: successive fixes (2018–2022)
- Generations
- 5
- CVEs
- 5
- In KEV
- 0
- Years
- 18–22
CVE-2008-2079 family: incomplete fixes (2008–2012)
- Generations
- 5
- CVEs
- 5
- In KEV
- 0
- Years
- 08–12
github.com/mattermost/mattermost-server: successive fixes (2016–2017)
- Generations
- 4
- CVEs
- 18
- In KEV
- 0
- Years
- 2020
Red Hat undertow: incomplete fixes (2016–2024)
- Generations
- 4
- CVEs
- 15
- In KEV
- 0
- Years
- 16–26
Spring Framework: fix bypasses (2015–2024)
- Generations
- 4
- CVEs
- 11
- In KEV
- 0
- Years
- 17–24
Apache Tomcat: incomplete fixes (2005–2023)
- Generations
- 4
- CVEs
- 11
- In KEV
- 0
- Years
- 05–23
patriksimek vm2: incomplete fixes (2021–2026)
- Generations
- 4
- CVEs
- 9
- In KEV
- 0
- Years
- 21–26
gradio-app/gradio: successive fixes (2023–2024)
- Generations
- 4
- CVEs
- 8
- In KEV
- 0
- Years
- 23–24
Django: incomplete fixes (2018–2024)
- Generations
- 4
- CVEs
- 8
- In KEV
- 0
- Years
- 18–24
Apache Tomcat: incomplete fixes (2011–2023)
- Generations
- 4
- CVEs
- 8
- In KEV
- 0
- Years
- 11–23
matrix-org synapse: related fixes (2019–2021)
- Generations
- 4
- CVEs
- 8
- In KEV
- 0
- Years
- 19–21
Apache Tomcat: related fixes (2017–2025)
- Generations
- 4
- CVEs
- 7
- In KEV
- 0
- Years
- 17–25
octobercms october: fix bypasses (2017–2021)
- Generations
- 4
- CVEs
- 7
- In KEV
- 0
- Years
- 17–22
Red Hat PyYAML: incomplete fixes (2017–2026)
- Generations
- 4
- CVEs
- 6
- In KEV
- 0
- Years
- 18–26
x-stream xstream: regressions (2017–2024)
- Generations
- 4
- CVEs
- 6
- In KEV
- 0
- Years
- 17–24
OctoPrint: successive fixes (2022–2024)
- Generations
- 4
- CVEs
- 6
- In KEV
- 0
- Years
- 22–24
Jenkins Active Directory Plugin: successive fixes (2019–2023)
- Generations
- 4
- CVEs
- 6
- In KEV
- 0
- Years
- 19–23
kiwitcms Kiwi: successive fixes (2023)
- Generations
- 4
- CVEs
- 6
- In KEV
- 0
- Years
- 2023
Studio-42 elFinder: successive fixes (2019–2022)
- Generations
- 4
- CVEs
- 6
- In KEV
- 0
- Years
- 19–22
ethereum go-ethereum: related fixes (2018–2021)
- Generations
- 4
- CVEs
- 6
- In KEV
- 0
- Years
- 18–21
PEAR Archive_Tar: successive fixes (2018–2021)
- Generations
- 4
- CVEs
- 5
- In KEV
- 2
- Years
- 18–21
yt-dlp: fix bypasses (2023–2026)
- Generations
- 4
- CVEs
- 5
- In KEV
- 0
- Years
- 23–26
Craft CMS cms: fix bypasses (2023–2026)
- Generations
- 4
- CVEs
- 5
- In KEV
- 0
- Years
- 23–26
crewjam saml: successive fixes (2020–2025)
- Generations
- 4
- CVEs
- 5
- In KEV
- 0
- Years
- 20–25
Red Hat build of Keycloak 22: incomplete fixes (2020–2024)
- Generations
- 4
- CVEs
- 5
- In KEV
- 0
- Years
- 20–24
ikus060/rdiffweb: successive fixes (2022)
- Generations
- 4
- CVEs
- 5
- In KEV
- 0
- Years
- 2022
Red Hat Ansible: incomplete fixes (2016–2020)
- Generations
- 4
- CVEs
- 5
- In KEV
- 0
- Years
- 18–20
GNU Bourne-Again Shell (Bash): incomplete fixes (2014)
- Generations
- 4
- CVEs
- 4
- In KEV
- 3
- Years
- 2014
Roundcube Webmail: incomplete fixes (2026)
- Generations
- 4
- CVEs
- 4
- In KEV
- 0
- Years
- 2026
Apache Airflow: related fixes (2026)
- Generations
- 4
- CVEs
- 4
- In KEV
- 0
- Years
- 2026
shopware platform: fix bypasses (2021–2026)
- Generations
- 4
- CVEs
- 4
- In KEV
- 0
- Years
- 21–26
opencast: successive fixes (2021–2025)
- Generations
- 4
- CVEs
- 4
- In KEV
- 0
- Years
- 21–25
netty: incomplete fixes (2021–2025)
- Generations
- 4
- CVEs
- 4
- In KEV
- 0
- Years
- 21–25
rack: incomplete fixes (2020–2023)
- Generations
- 4
- CVEs
- 4
- In KEV
- 0
- Years
- 20–25
langchain-experimental: incomplete fixes (2023–2024)
- Generations
- 4
- CVEs
- 4
- In KEV
- 0
- Years
- 23–24
pterodactyl wings: successive fixes (2023–2024)
- Generations
- 4
- CVEs
- 4
- In KEV
- 0
- Years
- 23–24
sanitize-html: successive fixes (2016–2024)
- Generations
- 4
- CVEs
- 4
- In KEV
- 0
- Years
- 20–24
openfga: related fixes (2022–2024)
- Generations
- 4
- CVEs
- 4
- In KEV
- 0
- Years
- 22–24
socketio engine.io: successive fixes (2020–2023)
- Generations
- 4
- CVEs
- 4
- In KEV
- 0
- Years
- 21–23
transloadit/uppy: successive fixes (2020–2022)
- Generations
- 4
- CVEs
- 4
- In KEV
- 0
- Years
- 20–22
Django: related fixes (2014–2017)
- Generations
- 4
- CVEs
- 4
- In KEV
- 0
- Years
- 14–17
Apache Struts: successive fixes (2013–2018)
- Generations
- 3
- CVEs
- 8
- In KEV
- 2
- Years
- 13–18
zendframework/zendframework1: incomplete fixes (2012–2015)
- Generations
- 3
- CVEs
- 8
- In KEV
- 0
- Years
- 13–15
pyload: incomplete fixes (2026)
- Generations
- 3
- CVEs
- 7
- In KEV
- 0
- Years
- 2026
nautobot: related fixes (2023–2024)
- Generations
- 3
- CVEs
- 7
- In KEV
- 0
- Years
- 23–24
helm: successive fixes (2020–2024)
- Generations
- 3
- CVEs
- 7
- In KEV
- 0
- Years
- 20–24
froxlor/froxlor: successive fixes (2022–2023)
- Generations
- 3
- CVEs
- 7
- In KEV
- 0
- Years
- 22–24
pimcore/pimcore: successive fixes (2019–2022)
- Generations
- 3
- CVEs
- 7
- In KEV
- 0
- Years
- 19–22
Apache Traffic Server: incomplete fixes (2009–2021)
- Generations
- 3
- CVEs
- 7
- In KEV
- 0
- Years
- 10–21
FasterXML jackson-databind: incomplete fixes (2017–2018)
- Generations
- 3
- CVEs
- 7
- In KEV
- 0
- Years
- 17–19
pgadmin.org pgAdmin 4: fix bypasses (2022–2026)
- Generations
- 3
- CVEs
- 6
- In KEV
- 0
- Years
- 22–26
Craft CMS cms: variants (2025–2026)
- Generations
- 3
- CVEs
- 6
- In KEV
- 0
- Years
- 2026
pyload: related fixes (2023–2024)
- Generations
- 3
- CVEs
- 6
- In KEV
- 0
- Years
- 23–24
elliptic: successive fixes (2020–2024)
- Generations
- 3
- CVEs
- 6
- In KEV
- 0
- Years
- 20–24
vantage6: related fixes (2023–2024)
- Generations
- 3
- CVEs
- 6
- In KEV
- 0
- Years
- 23–24
xwiki-platform: successive fixes (2022–2023)
- Generations
- 3
- CVEs
- 6
- In KEV
- 0
- Years
- 22–23
urllib3: incomplete fixes (2018–2023)
- Generations
- 3
- CVEs
- 6
- In KEV
- 0
- Years
- 18–23
getgrav grav: incomplete fixes (2022–2023)
- Generations
- 3
- CVEs
- 6
- In KEV
- 0
- Years
- 22–23
ansible: incomplete fixes (2018–2021)
- Generations
- 3
- CVEs
- 6
- In KEV
- 0
- Years
- 18–21
[UNKNOWN] ansible: successive fixes (2016–2019)
- Generations
- 3
- CVEs
- 6
- In KEV
- 0
- Years
- 18–19
Apache ActiveMQ Broker: fix bypasses (2026)
- Generations
- 3
- CVEs
- 5
- In KEV
- 1
- Years
- 2026
IETF HTTP/2: incomplete fixes (2023–2024)
- Generations
- 3
- CVEs
- 5
- In KEV
- 1
- Years
- 23–24
nodejs undici: incomplete fixes (2022–2026)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 22–26
trailofbits fickling: variants (2025–2026)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 25–26
OpenStack Keystone: regressions (2012–2026)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 12–26
Apache MINA: incomplete fixes (2024–2026)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 24–26
Spring Framework: successive fixes (2022–2024)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 22–24
Apache Airflow: related fixes (2020–2024)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 20–24
microweber/microweber: successive fixes (2022–2024)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 22–24
xwiki-platform: successive fixes (2022–2024)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 22–24
Apache Airflow: related fixes (2020–2023)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 20–23
pimcore/pimcore: successive fixes (2022–2023)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 22–23
pimcore: successive fixes (2019–2023)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 19–23
netty: incomplete fixes (2021–2022)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 21–22
Apache Tomcat: related fixes (2017–2021)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 17–22
snipe/snipe-it: successive fixes (2021–2022)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 21–22
snipe/snipe-it: successive fixes (2022)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 2022
Pylons Waitress: successive fixes (2019–2020)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 19–20
HackerOne sequelize node module: successive fixes (2016–2019)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 18–19
ipython: successive fixes (2015–2018)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 15–18
Red Hat Enterprise Linux 3: variants (2006–2018)
- Generations
- 3
- CVEs
- 5
- In KEV
- 0
- Years
- 06–18
Apache Log4j2: incomplete fixes (2021)
- Generations
- 3
- CVEs
- 4
- In KEV
- 2
- Years
- 21–22
grafana: successive fixes (2021–2023)
- Generations
- 3
- CVEs
- 4
- In KEV
- 1
- Years
- 21–23
i18next-http-backend: incomplete fixes (2026)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 2026
argoproj argo-cd: related fixes (2022–2026)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 22–26
libexpat: incomplete fixes (2026)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 2026
@fastify/static: incomplete fixes (2026)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 2026
twigphp Twig: successive fixes (2022–2026)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 22–26
pillarjs path-to-regexp: incomplete fixes (2024–2026)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 24–26
SAML-Toolkits ruby-saml: incomplete fixes (2024–2025)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 24–25
mlflow/mlflow: related fixes (2023–2025)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 23–25
fedorindutny ip: incomplete fixes (2023–2025)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 24–25
Drupal COOKiES Consent Management: successive fixes (2025)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 2025
guzzle psr7: incomplete fixes (2022–2025)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 22–25
git: related fixes (2020–2024)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 20–25
mindsdb: successive fixes (2023–2024)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 23–24
Red Hat Enterprise Linux 9: incomplete fixes (2006–2024)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 06–24
froxlor/froxlor: successive fixes (2023–2024)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 23–24
Mattermost: related fixes (2023–2024)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 23–24
CodeIgniter4: successive fixes (2022–2024)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 22–24
jupyter-server jupyter_server: successive fixes (2020–2023)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 20–23
dolibarr/dolibarr: related fixes (2019–2023)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 19–23
Apache NiFi: successive fixes (2023)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 2023
typo3: related fixes (2014–2023)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 14–23
sinatra: successive fixes (2018–2022)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 18–22
guzzle: successive fixes (2022)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 2022
getgrav/grav: successive fixes (2022)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 2022
http4s: related fixes (2020–2021)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 20–21
npm node-tar: successive fixes (2021)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 2021
Microsoft Edge: related fixes (2019–2020)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 19–20
Jenkins Script Security Plugin: related fixes (2016–2020)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 17–20
CVE-2011-2482 family: incomplete fixes (2011–2017)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 13–17
hapi: incomplete fixes (2014–2015)
- Generations
- 3
- CVEs
- 4
- In KEV
- 0
- Years
- 14–15
Apache Tomcat: successive fixes (2017–2021)
- Generations
- 3
- CVEs
- 3
- In KEV
- 2
- Years
- 17–21
argoproj argo-cd: related fixes (2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
sqlalchemy mako: successive fixes (2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
projectdiscovery nuclei: incomplete fixes (2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
ondata ckan-mcp-server: incomplete fixes (2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
junrar: successive fixes (2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
digitalbazaar forge: incomplete fixes (2022–2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 22–26
Apache Tomcat: incomplete fixes (2025–2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
Pylons webob: fix bypasses (2024–2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 24–26
withastro astro: related fixes (2025–2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 25–26
pheditor: successive fixes (2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
Drupal Tagify: successive fixes (2025–2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
berriai/litellm: related fixes (2024–2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 24–26
KnpLabs snappy: fix bypasses (2023–2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 23–26
Apache CXF: incomplete fixes (2025–2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 25–26
nuxt: successive fixes (2025–2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 25–26
mantisbt: related fixes (2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
ChurchCRM CRM: incomplete fixes (2025–2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 25–26
gotenberg: fix bypasses (2024–2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 24–26
owen2345 camaleon-cms: incomplete fixes (2023–2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 23–26
zitadel: successive fixes (2025–2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 25–26
parse-community parse-server: successive fixes (2026)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
ruby rexml: incomplete fixes (2024–2025)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 24–26
gogs: incomplete fixes (2024–2025)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 24–26
Python Software Foundation CPython: incomplete fixes (2025)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2025
eladnava mailgen: successive fixes (2025)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2025
argoproj argo-cd: successive fixes (2023–2025)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 23–25
Apache Zeppelin: incomplete fixes (2020–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 20–25
Trend Micro Endpoint Encryption Policy Server: related fixes (2025)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2025
dataease: fix bypasses (2024–2025)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 24–25
Apache Commons Configuration: related fixes (2024–2025)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 24–25
git-lfs: incomplete fixes (2020–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 20–25
vercel next.js: successive fixes (2023–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 23–24
man-group dtale: successive fixes (2023–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 23–24
basecamp trix: successive fixes (2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
aio-libs aiohttp: incomplete fixes (2023–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 23–24
cure53 DOMPurify: related fixes (2020–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 20–24
PHPOffice PhpSpreadsheet: related fixes (2020–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 20–24
puma: related fixes (2022–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 22–24
authzed spicedb: successive fixes (2022–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 22–24
CVE-2021-43446 family: incomplete fixes (2021–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 23–24
biscuit-auth biscuit-java: related fixes (2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
mysql2: related fixes (2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
mlflow/mlflow: related fixes (2023–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 23–24
phlex-ruby phlex: successive fixes (2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
argoproj argo-cd: related fixes (2023–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 23–24
esphome: successive fixes (2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
Cloudflare quiche: successive fixes (2023–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 23–24
mhenrixon sidekiq-unique-jobs: related fixes (2024–2023)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
pyca cryptography: related fixes (2020–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 21–24
Liferay Portal: incomplete fixes (2022–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 22–24
HumanSignal label-studio: successive fixes (2023)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 23–24
pyload/pyload: successive fixes (2023–2024)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 23–24
resque: successive fixes (2023)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2023
Apache Shiro: successive fixes (2020–2023)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 20–23
dompdf: successive fixes (2023)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2023
Apache Druid: related fixes (2021–2023)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 21–23
open-telemetry opentelemetry-go-contrib: related fixes (2022–2023)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 22–23
ethyca fides: successive fixes (2023)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2023
xwiki-platform: successive fixes (2023)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2023
GitLab: incomplete fixes (2022–2023)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2023
Socket.io-Parser: successive fixes (2020–2023)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 21–23
xwiki-platform: successive fixes (2022–2023)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 22–23
moby: related fixes (2023)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2023
Apache Sling App CMS: successive fixes (2022–2023)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 22–23
libp2p rust-libp2p: related fixes (2022)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
Apache Flume: successive fixes (2022)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
Django: related fixes (2018–2022)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 18–22
Crafter CMS: successive fixes (2020–2022)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 20–22
Red Hat rpm: incomplete fixes (2017–2021)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 17–22
github.com/beego/beego/v2: successive fixes (2021–2022)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
Apache Tika: incomplete fixes (2022)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
Jenkins Git Plugin: related fixes (2022)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
gruntjs/grunt: successive fixes (2020–2022)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 20–22
Django: related fixes (2021–2022)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 21–22
ckeditor4: successive fixes (2021–2022)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 21–22
istio: successive fixes (2020–2022)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 20–22
Gerapy: successive fixes (2020–2021)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 20–22
bookstackapp/bookstack: successive fixes (2021)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 21–22
kevinpapst/kimai2: successive fixes (2021)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2021
github.com/tidwall/gjson: successive fixes (2020–2021)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 20–21
bytecodealliance wasmtime: related fixes (2021)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2021
mariocasciaro object-path: fix bypasses (2020–2021)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 20–21
github.com/hashicorp/consul: related fixes (2018–2021)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 18–21
phpmailer/phpmailer: successive fixes (2020–2021)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 20–21
russellhaering goxmldsig: related fixes (2020)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 20–21
Pivotal Spring Integration Zip: incomplete fixes (2018–2021)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 18–21
CVE-2017-1000501 family: incomplete fixes (2017–2020)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 18–20
nova: related fixes (2016–2020)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 16–20
mantisbt/mantisbt: incomplete fixes (2018–2020)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 18–20
codecov-node: incomplete fixes (2020)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2020
jquery: related fixes (2012–2020)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 18–20
CVE-2018-15127 family: incomplete fixes (2018)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 18–19
CVE-2018-10940 family: related fixes (2018)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2018
CVE-2018-14514 family: incomplete fixes (2018)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2018
Spring Framework: incomplete fixes (2018)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2018
OpenSSL: related fixes (2017)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2017
geminabox: successive fixes (2017)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2017
org.cloudfoundry.identity:cloudfoundry-identity-server: related fixes (2015)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2017
CVE-2009-4050 family: incomplete fixes (2009–2015)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 09–17
Apache Tomcat: related fixes (2014–2017)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 14–17
CVE-2014-2514 family: incomplete fixes (2014–2017)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 14–17
CVE-2016-8862 family: incomplete fixes (2016–2017)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2017
CVE-2012-6701 family: regressions (2012–2016)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 16–17
CVE-2013-1914 family: incomplete fixes (2013–2016)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 13–16
CVE-2014-2515 family: incomplete fixes (2014–2015)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 14–15
passenger: incomplete fixes (2013–2014)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 13–15
Django: successive fixes (2012–2014)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 12–14
activerecord: successive fixes (2012)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 12–13
CVE-2011-1578 family: incomplete fixes (2011)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2011
CVE-2008-2927 family: incomplete fixes (2008–2009)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 08–09
CVE-2008-2810 family: incomplete fixes (2008–2009)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 08–09
CVE-2007-5804 family: incomplete fixes (2007–2008)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 07–08
CVE-2007-4041 family: variants (2007)
- Generations
- 3
- CVEs
- 3
- In KEV
- 0
- Years
- 2007
CVE-2006-3017 family: incomplete fixes (2006–2008)
- Generations
- 2
- CVEs
- 11
- In KEV
- 0
- Years
- 06–09
highcharts: related fixes (2026)
- Generations
- 2
- CVEs
- 7
- In KEV
- 0
- Years
- 2026
Red Hat glusterfs: incomplete fixes (2018)
- Generations
- 2
- CVEs
- 6
- In KEV
- 0
- Years
- 2018
com.xuxueli:xxl-job-core: successive fixes (2020–2024)
- Generations
- 2
- CVEs
- 5
- In KEV
- 0
- Years
- 20–24
Jenkins Pipeline: Shared Groovy Libraries Plugin: successive fixes (2022)
- Generations
- 2
- CVEs
- 5
- In KEV
- 0
- Years
- 2022
CVE-2014-3566 family: variants (2014–2015)
- Generations
- 2
- CVEs
- 5
- In KEV
- 0
- Years
- 14–17
dropwizard-validation: successive fixes (2020–2025)
- Generations
- 2
- CVEs
- 4
- In KEV
- 1
- Years
- 20–25
xwiki-platform: related fixes (2023–2025)
- Generations
- 2
- CVEs
- 4
- In KEV
- 1
- Years
- 23–25
PHP frankenphp: related fixes (2026)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 2026
netty: related fixes (2025–2026)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 25–26
siyuan-note siyuan: fix bypasses (2026)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 2026
HashiCorp Vault: successive fixes (2025)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 2025
cyanheads git-mcp-server: related fixes (2025)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 2025
ruby rexml: successive fixes (2024)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 2024
pimcore admin-ui-classic-bundle: related fixes (2023–2024)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 23–24
omero-web: successive fixes (2021–2024)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 21–24
louislam uptime-kuma: related fixes (2023)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 2023
xwiki-commons: related fixes (2023)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 2023
getkirby kirby: successive fixes (2020–2022)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 20–22
actionpack: successive fixes (2021)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 21–22
Jenkins Build Failure Analyzer Plugin: successive fixes (2019–2020)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 19–20
github.com/grafana/grafana: incomplete fixes (2018)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 18–20
CVE-2018-5804 family: incomplete fixes (2018)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 2018
CVE-2013-0169 family: incomplete fixes (2013–2018)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 13–18
Products.CMFPlone: successive fixes (2015–2017)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 17–18
CVE-2014-9750 family: incomplete fixes (2014–2015)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 15–17
Apache Struts: incomplete fixes (2013–2017)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 13–17
CVE-2012-3552 family: incomplete fixes (2012–2017)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 12–17
Microsoft Corporation Windows Graphics Component: incomplete fixes (2016–2017)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 16–17
CVE-2014-7915 family: incomplete fixes (2014–2015)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 2015
CVE-2006-7243 family: incomplete fixes (2006–2015)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 11–15
python-gnupg: incomplete fixes (2013–2014)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 2014
org.springframework:spring-oxm: incomplete fixes (2013–2014)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 2014
CVE-2008-1448 family: variants (2008–2010)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 08–10
CVE-2008-2712 family: incomplete fixes (2008)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 08–09
CVE-2002-0572 family: variants (2002–2007)
- Generations
- 2
- CVEs
- 4
- In KEV
- 0
- Years
- 02–07
Craft CMS: incomplete fixes (2023–2025)
- Generations
- 2
- CVEs
- 3
- In KEV
- 2
- Years
- 23–25
vBulletin: incomplete fixes (2019–2020)
- Generations
- 2
- CVEs
- 3
- In KEV
- 2
- Years
- 19–20
yiisoft yii2: regressions (2024)
- Generations
- 2
- CVEs
- 3
- In KEV
- 1
- Years
- 24–25
michaelschwarz Ajax.NET-Professional: successive fixes (2021–2023)
- Generations
- 2
- CVEs
- 3
- In KEV
- 1
- Years
- 21–23
octobercms october: related fixes (2021)
- Generations
- 2
- CVEs
- 3
- In KEV
- 1
- Years
- 2021
PHP: incomplete fixes (2012)
- Generations
- 2
- CVEs
- 3
- In KEV
- 1
- Years
- 2012
Drupal core: successive fixes (2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
Drupal UI Icons: successive fixes (2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
ggml-org llama.cpp: fix bypasses (2025–2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 25–26
makeplane plane: incomplete fixes (2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
The Document Foundation LibreOffice: incomplete fixes (2024–2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 25–26
caddyserver caddy: related fixes (2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads: incomplete fixes (2023–2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 23–26
zalando skipper: incomplete fixes (2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
svgo: successive fixes (2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
SKYSEA Client View: incomplete fixes (2024–2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 24–26
CVE-2025-44867 family: incomplete fixes (2025–2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 25–26
Apache Airflow: related fixes (2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
pydantic-ai: incomplete fixes (2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
argoproj argo-workflows: incomplete fixes (2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
crmperks Database for Contact Form 7, WPforms, Elementor forms: incomplete fixes (2025–2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 25–26
go-vikunja vikunja: related fixes (2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
NotFound Admin and Site Enhancements (ASE) Pro: incomplete fixes (2024–2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 25–26
Nuxt: related fixes (2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
image-size: successive fixes (2025)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
froxlor: incomplete fixes (2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
vllm-project vllm: incomplete fixes (2025–2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 25–26
open-webui: related fixes (2025–2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 25–26
webpack-dev-server: successive fixes (2025–2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 25–26
QuantumNous new-api: incomplete fixes (2025–2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 25–26
withastro astro: incomplete fixes (2025–2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 25–26
AcademySoftwareFoundation openexr: incomplete fixes (2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
Craft CMS cms: related fixes (2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
handlebars-lang handlebars.js: related fixes (2021–2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 21–26
openzeppelin-contracts: related fixes (2022–2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 22–26
ellite Wallos: incomplete fixes (2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
Craft CMS cms: fix bypasses (2025–2026)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
Phoenix616 InventoryGui: successive fixes (2025)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2025
dataease: fix bypasses (2025)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2025
Liferay Portal: successive fixes (2025)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2025
xwiki-platform: related fixes (2022–2025)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 22–25
LabRedesCefetRJ WeGIA: incomplete fixes (2025)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2025
xwiki-platform: related fixes (2022–2025)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 22–25
Linux: incomplete fixes (2020–2025)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 21–25
tj-actions branch-names: related fixes (2023–2025)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 23–25
Google Protocol Buffers: related fixes (2024–2025)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 24–25
jmix-framework jmix: related fixes (2025)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2025
shopware: regressions (2024–2025)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 24–25
OPCFoundation.NetStandard.Opc.Ua.Core: successive fixes (2024)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 24–25
drakkan sftpgo: successive fixes (2024)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
lobehub lobe-chat: related fixes (2024)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
OpenRefine: successive fixes (2023–2024)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 23–24
webpack: related fixes (2024)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
Mattermost: successive fixes (2024)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
cinder: incomplete fixes (2022–2024)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 23–24
SixLabors ImageSharp: successive fixes (2024)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
evmos: related fixes (2024)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
zenml-io/zenml: successive fixes (2024)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
meshery: successive fixes (2024)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
tinymce: related fixes (2020–2024)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 20–24
0xJacky nginx-ui: incomplete fixes (2024)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
typo3: related fixes (2021–2023)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 21–23
Red Hat Enterprise Linux 8: regressions (2023)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2023
LF-Edge, Zededa EVE OS: successive fixes (2023)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2023
PrestaShop: successive fixes (2023)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2023
xwiki-platform: successive fixes (2022–2023)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 22–23
Google gRPC: successive fixes (2023)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2023
Craft CMS cms: related fixes (2022–2023)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 22–23
xwiki-platform: related fixes (2022–2023)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 22–23
CVE-2022-28005 family: incomplete fixes (2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 22–23
bytecodealliance wasmtime: related fixes (2022–2023)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 22–23
KubeOperator KubePi: successive fixes (2023)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2023
CVE-2022-47932 family: incomplete fixes (2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
helm: successive fixes (2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
thorsten/phpmyfaq: successive fixes (2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
xwiki-platform: related fixes (2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
NukeViet CMS: related fixes (2019–2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 20–22
sylabs sif: related fixes (2004–2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 09–22
sigstore cosign: successive fixes (2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
Apache Geode: successive fixes (2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
CVE-2019-18808 family: related fixes (2019–2021)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 19–22
microweber/microweber: successive fixes (2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
jquery-validation: incomplete fixes (2021–2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 21–22
jsrsasign: related fixes (2020–2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 20–22
vyperlang vyper: successive fixes (2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
Microsoft .NET 6.0: successive fixes (2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
ansible: successive fixes (2021)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 21–22
janeczku/calibre-web: successive fixes (2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
star7th/showdoc: related fixes (2021–2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 21–22
Jenkins Mailer Plugin: successive fixes (2020–2022)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 20–22
brave-browser: incomplete fixes (2021)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2021
lxml: successive fixes (2020–2021)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 20–21
immerjs/immer: fix bypasses (2020–2021)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2021
Autoptimize: fix bypasses (2020–2021)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 20–21
CVE-2020-25085 family: incomplete fixes (2020–2021)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 20–21
github.com/hashicorp/vault: related fixes (2020)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2020
Jenkins Git Parameter Plugin: successive fixes (2020)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2020
bolt: related fixes (2019–2020)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 19–20
github.com/grafana/grafana: related fixes (2018–2020)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 18–20
CVE-2017-15595 family: incomplete fixes (2017–2019)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 17–19
Jenkins Configuration as Code Plugin: incomplete fixes (2019)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2019
Jenkins: successive fixes (2013–2019)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 13–19
Apache Tomcat: incomplete fixes (2017–2019)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 17–19
CVE-2019-6714 family: incomplete fixes (2019)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2019
Jenkins Config File Provider Plugin: successive fixes (2018–2019)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2019
Apache CouchDB: fix bypasses (2017–2018)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 17–18
opensuse openbuildservice: related fixes (2018)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2018
symfony/symfony: incomplete fixes (2017–2018)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2018
CVE-2017-8036 family: regressions (2017)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2017
CVE-2012-1836 family: incomplete fixes (2012)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 12–17
Apache Struts: incomplete fixes (2017)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2017
CVE-2014-2513 family: incomplete fixes (2014–2017)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 14–17
CVE-2008-4796 family: incomplete fixes (2008)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 08–17
gopkg.in/square/go-jose.v1: successive fixes (2016)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2017
CVE-2016-6786 family: incomplete fixes (2016–2017)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 16–17
activerecord: incomplete fixes (2013–2016)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 13–16
CVE-2015-2716 family: incomplete fixes (2015–2016)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 15–16
CVE-2013-2076 family: incomplete fixes (2013–2016)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 13–16
CVE-2015-8076 family: incomplete fixes (2015)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2015
Django: related fixes (2015)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2015
CVE-2014-2707 family: incomplete fixes (2014–2015)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 14–15
CVE-2007-1320 family: incomplete fixes (2007–2014)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 07–14
org.jboss.resteasy:resteasy-client: incomplete fixes (2012–2014)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 12–14
org.jruby:jruby: incomplete fixes (2013–2014)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 13–14
swift: related fixes (2013–2014)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 13–14
org.apache.httpcomponents:httpclient: incomplete fixes (2012)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 12–14
nova: incomplete fixes (2013)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 13–14
Django: related fixes (2010–2013)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 10–13
Django: incomplete fixes (2013)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2013
CVE-2011-1005 family: incomplete fixes (2011–2012)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 11–13
nova: incomplete fixes (2012)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2012
actionpack: successive fixes (2011–2012)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 11–12
CVE-2011-3368 family: incomplete fixes (2011)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2011
CVE-2009-3995 family: incomplete fixes (2009–2010)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 09–10
CVE-2006-3619 family: incomplete fixes (2006–2010)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 06–10
CVE-2008-3143 family: incomplete fixes (2008–2010)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 08–10
CVE-2009-4022 family: incomplete fixes (2009–2010)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 09–10
CVE-2005-0448 family: regressions (2005–2008)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 05–08
CVE-2004-0888 family: incomplete fixes (2004–2008)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 04–08
CVE-2006-4965 family: incomplete fixes (2006–2007)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 06–07
CVE-1999-0017 family: variants (1999–2007)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 99–07
CVE-2006-0476 family: variants (2006)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 2006
CVE-1999-0016 family: variants (1999–2005)
- Generations
- 2
- CVEs
- 3
- In KEV
- 0
- Years
- 99–05
N-able N-central: incomplete fixes (2026)
- Generations
- 2
- CVEs
- 2
- In KEV
- 2
- Years
- 2026
Langflow: related fixes (2025–2026)
- Generations
- 2
- CVEs
- 2
- In KEV
- 2
- Years
- 25–26
Qlik Sense: incomplete fixes (2023)
- Generations
- 2
- CVEs
- 2
- In KEV
- 2
- Years
- 2023
Synacor Zimbra Collaboration Suite (ZCS): incomplete fixes (2022)
- Generations
- 2
- CVEs
- 2
- In KEV
- 2
- Years
- 2022
Apache HTTP Server: incomplete fixes (2021)
- Generations
- 2
- CVEs
- 2
- In KEV
- 2
- Years
- 2021
DotNetNuke (DNN): incomplete fixes (2018)
- Generations
- 2
- CVEs
- 2
- In KEV
- 2
- Years
- 2019
TIMLEGGE IO::Compress::Brotli: related fixes (2020–2026)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 25–26
Apache Tomcat: fix bypasses (2026)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 2026
Craft CMS: regressions (2025–2026)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 25–26
n8n: related fixes (2025–2026)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 25–26
SolarWinds Web Help Desk: fix bypasses (2024–2025)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 2025
Craft CMS: fix bypasses (2025)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 2025
OSGeo GeoServer: related fixes (2024)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 2024
Roundcube Webmail: incomplete fixes (2020–2024)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 20–24
MinIO: related fixes (2023–2024)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 23–24
ownCloud graphapi: related fixes (2023)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 2023
NextGen Healthcare Mirth Connect: incomplete fixes (2023)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 2023
Apache RocketMQ: incomplete fixes (2023)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 2023
Apple Multiple Products: regressions (2023)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 2023
Apache Spark: related fixes (2022–2023)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 22–23
Grafana: related fixes (2021–2022)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 21–23
Nice Linear eMerge E3-Series: incomplete fixes (2019–2022)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 19–22
VMware Spring Framework: successive fixes (2022)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 2022
Apache Struts: incomplete fixes (2020–2021)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 20–22
Spring Cloud Config: successive fixes (2020)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 2020
Apache Kylin: related fixes (2020)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 2020
Apache Solr: related fixes (2018–2019)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 18–19
D-Link Multiple Routers: incomplete fixes (2018)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 18–19
PHPMailer: incomplete fixes (2016)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 2016
Apache ActiveMQ: related fixes (2015–2016)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 15–16
Rails Ruby on Rails: incomplete fixes (2016)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 2016
Red Hat JBoss: regressions (2010–2011)
- Generations
- 2
- CVEs
- 2
- In KEV
- 1
- Years
- 10–12
hapifhir org.hl7.fhir.core: incomplete fixes (2026)
- Span
- 9 days
- CVEs
- 3
- In KEV
- 0
- Years
- 2026
Liferay Portal: successive fixes (2024)
- Span
- Same day
- CVEs
- 3
- In KEV
- 0
- Years
- 2024
Feathers-Sequalize: successive fixes (2022)
- Span
- Same day
- CVEs
- 3
- In KEV
- 0
- Years
- 2022
CVE-2014-0053 family: variants (2014)
- Span
- Same day
- CVEs
- 3
- In KEV
- 0
- Years
- 2014
CVE-2010-3430 family: incomplete fixes (2010)
- Span
- Same day
- CVEs
- 3
- In KEV
- 0
- Years
- 2011
Apple iOS and macOS out-of-bounds write flaws, 2016–2026
- Span
- 10 years
- CVEs
- 88
- In KEV
- 28
- Years
- 16–26
Google Chrome out-of-bounds write flaws, 2017–2026
- Span
- 10 years
- CVEs
- 82
- In KEV
- 22
- Years
- 17–26
Google Chrome type confusion flaws, 2017–2026
- Span
- 9 years
- CVEs
- 80
- In KEV
- 20
- Years
- 17–26
Microsoft Windows use-after-free flaws, 2015–2026
- Span
- 11 years
- CVEs
- 77
- In KEV
- 17
- Years
- 15–26
Microsoft Windows link following flaws, 2019–2026
- Span
- 8 years
- CVEs
- 76
- In KEV
- 16
- Years
- 19–26
Google Chrome use-after-free flaws, 2019–2026
- Span
- 7 years
- CVEs
- 75
- In KEV
- 15
- Years
- 19–26
Microsoft Windows input validation flaws, 2009–2026
- Span
- 17 years
- CVEs
- 73
- In KEV
- 13
- Years
- 09–26
Apple iOS and macOS input validation flaws, 2021–2026
- Span
- 5 years
- CVEs
- 72
- In KEV
- 12
- Years
- 21–26
Apple iOS and macOS use-after-free flaws, 2019–2026
- Span
- 7 years
- CVEs
- 72
- In KEV
- 12
- Years
- 19–26
Microsoft Windows heap buffer overflow flaws, 2021–2026
- Span
- 5 years
- CVEs
- 70
- In KEV
- 10
- Years
- 21–26
Google Chrome heap buffer overflow flaws, 2020–2026
- Span
- 6 years
- CVEs
- 70
- In KEV
- 10
- Years
- 20–26
Apple iOS and macOS memory corruption flaws, 2016–2026
- Span
- 10 years
- CVEs
- 67
- In KEV
- 7
- Years
- 16–26
Google Chrome out-of-bounds read flaws, 2016–2026
- Span
- 11 years
- CVEs
- 66
- In KEV
- 6
- Years
- 16–26
Google Chrome input validation flaws, 2021–2026
- Span
- 6 years
- CVEs
- 65
- In KEV
- 5
- Years
- 21–26
Microsoft Windows access control flaws, 2016–2026
- Span
- 10 years
- CVEs
- 65
- In KEV
- 5
- Years
- 16–26
Adobe Acrobat and Reader use-after-free flaws, 2009–2026
- Span
- 16 years
- CVEs
- 65
- In KEV
- 5
- Years
- 09–26
Adobe Acrobat and Reader out-of-bounds write flaws, 2008–2026
- Span
- 18 years
- CVEs
- 64
- In KEV
- 9
- Years
- 08–26
Apple iOS and macOS buffer overflow flaws, 2021–2026
- Span
- 5 years
- CVEs
- 64
- In KEV
- 4
- Years
- 21–26
Apple iOS and macOS out-of-bounds read flaws, 2022–2026
- Span
- 4 years
- CVEs
- 64
- In KEV
- 4
- Years
- 22–26
Google Chrome memory corruption flaws, 2016–2026
- Span
- 11 years
- CVEs
- 63
- In KEV
- 3
- Years
- 16–26
Microsoft Windows integer overflow flaws, 2023–2026
- Span
- 4 years
- CVEs
- 63
- In KEV
- 3
- Years
- 23–26
Microsoft Windows race condition flaws, 2022–2026
- Span
- 4 years
- CVEs
- 63
- In KEV
- 3
- Years
- 22–26
Mozilla Firefox use-after-free flaws, 2022–2026
- Span
- 4 years
- CVEs
- 63
- In KEV
- 3
- Years
- 22–26
Microsoft Windows type confusion flaws, 2022–2026
- Span
- 4 years
- CVEs
- 62
- In KEV
- 4
- Years
- 22–26
Microsoft Windows out-of-bounds read flaws, 2023–2026
- Span
- 3 years
- CVEs
- 62
- In KEV
- 2
- Years
- 23–26
Microsoft Office use-after-free flaws, 2017–2026
- Span
- 9 years
- CVEs
- 61
- In KEV
- 1
- Years
- 17–26
Mozilla Firefox memory corruption flaws, 2013–2026
- Span
- 13 years
- CVEs
- 61
- In KEV
- 1
- Years
- 13–26
Google Chrome race condition flaws, 2021–2026
- Span
- 6 years
- CVEs
- 57
- In KEV
- 1
- Years
- 21–26
Microsoft SharePoint deserialization flaws, 2023–2026
- Span
- 4 years
- CVEs
- 48
- In KEV
- 6
- Years
- 23–26
Microsoft Windows protection mechanism failure flaws, 2023–2026
- Span
- 3 years
- CVEs
- 48
- In KEV
- 6
- Years
- 23–26
Oracle WebLogic Server missing authentication flaws, 2017–2026
- Span
- 9 years
- CVEs
- 46
- In KEV
- 2
- Years
- 17–26
Microsoft Windows privilege management flaws, 2002–2026
- Span
- 24 years
- CVEs
- 44
- In KEV
- 10
- Years
- 02–26
Apple iOS and macOS race condition flaws, 2021–2026
- Span
- 6 years
- CVEs
- 43
- In KEV
- 1
- Years
- 21–26
Apple iOS and macOS type confusion flaws, 2019–2026
- Span
- 7 years
- CVEs
- 40
- In KEV
- 8
- Years
- 19–26
Apple iOS and macOS integer overflow flaws, 2021–2026
- Span
- 5 years
- CVEs
- 39
- In KEV
- 4
- Years
- 21–26
Google Chrome integer overflow flaws, 2018–2026
- Span
- 8 years
- CVEs
- 39
- In KEV
- 3
- Years
- 18–26
Microsoft Exchange Server deserialization flaws, 2020–2026
- Span
- 6 years
- CVEs
- 27
- In KEV
- 5
- Years
- 20–26
Microsoft Windows out-of-bounds write flaws, 2010–2026
- Span
- 16 years
- CVEs
- 25
- In KEV
- 22
- Years
- 10–26
Microsoft Windows untrusted Pointer Dereference flaws, 2023–2025
- Span
- 3 years
- CVEs
- 24
- In KEV
- 4
- Years
- 23–25
Adobe ColdFusion path traversal flaws, 2010–2026
- Span
- 16 years
- CVEs
- 22
- In KEV
- 2
- Years
- 10–26
Mozilla Firefox origin Validation Error flaws, 2015–2026
- Span
- 11 years
- CVEs
- 21
- In KEV
- 1
- Years
- 15–26
Palo Alto Networks PAN-OS OS command injection flaws, 2019–2024
- Span
- 5 years
- CVEs
- 20
- In KEV
- 1
- Years
- 19–24
Google Chrome code injection flaws, 2024–2026
- Span
- 2 years
- CVEs
- 19
- In KEV
- 1
- Years
- 24–26
Adobe ColdFusion deserialization flaws, 2017–2025
- Span
- 9 years
- CVEs
- 18
- In KEV
- 5
- Years
- 17–25
Apple iOS and macOS cross-site scripting flaws, 2021–2026
- Span
- 5 years
- CVEs
- 18
- In KEV
- 2
- Years
- 21–26
Oracle PeopleSoft PeopleTools missing authentication flaws, 2023–2026
- Span
- 3 years
- CVEs
- 18
- In KEV
- 1
- Years
- 23–26
Apple iOS and macOS information disclosure flaws, 2016–2026
- Span
- 10 years
- CVEs
- 17
- In KEV
- 1
- Years
- 16–26
Apple iOS and macOS authentication bypass flaws, 2022–2026
- Span
- 4 years
- CVEs
- 16
- In KEV
- 1
- Years
- 22–26
Roundcube Webmail cross-site scripting flaws, 2020–2026
- Span
- 6 years
- CVEs
- 15
- In KEV
- 7
- Years
- 20–26
Adobe Acrobat and Reader heap buffer overflow flaws, 2009–2026
- Span
- 17 years
- CVEs
- 15
- In KEV
- 2
- Years
- 09–26
Microsoft Windows memory corruption flaws, 2008–2023
- Span
- 15 years
- CVEs
- 14
- In KEV
- 14
- Years
- 08–23
Microsoft Internet Explorer use-after-free flaws, 2010–2021
- Span
- 11 years
- CVEs
- 14
- In KEV
- 14
- Years
- 10–21
Adobe ColdFusion access control flaws, 2023–2026
- Span
- 3 years
- CVEs
- 14
- In KEV
- 4
- Years
- 23–26
Microsoft Windows incorrect authorization flaws, 2021–2026
- Span
- 5 years
- CVEs
- 14
- In KEV
- 2
- Years
- 21–26
Cisco IOS XE input validation flaws, 2018–2023
- Span
- 5 years
- CVEs
- 14
- In KEV
- 2
- Years
- 18–23
Apple iOS and macOS incorrect authorization flaws, 2023–2026
- Span
- 3 years
- CVEs
- 14
- In KEV
- 1
- Years
- 23–26
Google Chrome improperly Implemented Security Check for Standard flaws, 2024–2026
- Span
- 2 years
- CVEs
- 14
- In KEV
- 1
- Years
- 24–26
Microsoft Internet Explorer out-of-bounds write flaws, 2013–2020
- Span
- 7 years
- CVEs
- 13
- In KEV
- 12
- Years
- 13–20
Microsoft .NET resource exhaustion flaws, 2022–2026
- Span
- 4 years
- CVEs
- 13
- In KEV
- 1
- Years
- 22–26
Samsung Mobile Devices out-of-bounds write flaws, 2021–2026
- Span
- 6 years
- CVEs
- 12
- In KEV
- 3
- Years
- 21–26
Cisco ASA input validation flaws, 2018–2026
- Span
- 8 years
- CVEs
- 12
- In KEV
- 2
- Years
- 18–26
Microsoft Edge type confusion flaws, 2016–2025
- Span
- 8 years
- CVEs
- 12
- In KEV
- 2
- Years
- 16–25
Cisco NX-OS OS command injection flaws, 2019–2025
- Span
- 6 years
- CVEs
- 12
- In KEV
- 1
- Years
- 19–25
Microsoft Windows permissions and privileges flaws, 2010–2016
- Span
- 7 years
- CVEs
- 11
- In KEV
- 11
- Years
- 10–16
Microsoft Exchange Server SSRF flaws, 2021–2026
- Span
- 6 years
- CVEs
- 11
- In KEV
- 3
- Years
- 21–26
Microsoft SharePoint input validation flaws, 2019–2026
- Span
- 8 years
- CVEs
- 11
- In KEV
- 2
- Years
- 19–26
Cisco ASA cross-site scripting flaws, 2014–2026
- Span
- 12 years
- CVEs
- 11
- In KEV
- 2
- Years
- 14–26
GitLab SSRF flaws, 2021–2026
- Span
- 5 years
- CVEs
- 11
- In KEV
- 1
- Years
- 21–26
Google Chrome missing authorization flaws, 2021–2026
- Span
- 5 years
- CVEs
- 11
- In KEV
- 1
- Years
- 21–26
Fortinet FortiWeb OS command injection flaws, 2023–2026
- Span
- 3 years
- CVEs
- 11
- In KEV
- 1
- Years
- 23–26
Microsoft Office input validation flaws, 2015–2026
- Span
- 11 years
- CVEs
- 10
- In KEV
- 3
- Years
- 15–26
Fortinet FortiSandbox OS command injection flaws, 2024–2026
- Span
- 2 years
- CVEs
- 10
- In KEV
- 2
- Years
- 24–26
Microsoft Windows integer Underflow flaws, 2021–2026
- Span
- 5 years
- CVEs
- 10
- In KEV
- 1
- Years
- 21–26
Oracle Java SE JDK and JRE access control flaws, 2011–2024
- Span
- 13 years
- CVEs
- 10
- In KEV
- 1
- Years
- 11–24
Adobe Flash Player use-after-free flaws, 2014–2019
- Span
- 4 years
- CVEs
- 9
- In KEV
- 9
- Years
- 14–19
Microsoft Office out-of-bounds write flaws, 2009–2026
- Span
- 17 years
- CVEs
- 9
- In KEV
- 6
- Years
- 09–26
Synacor Zimbra Collaboration Suite (ZCS) cross-site scripting flaws, 2018–2026
- Span
- 8 years
- CVEs
- 8
- In KEV
- 8
- Years
- 18–26
Microsoft Office memory corruption flaws, 2009–2017
- Span
- 8 years
- CVEs
- 8
- In KEV
- 8
- Years
- 09–17
Cisco IOS and IOS XE Software input validation flaws, 2017–2019
- Span
- 2 years
- CVEs
- 8
- In KEV
- 5
- Years
- 17–19
Cisco IOS software input validation flaws, 2017–2021
- Span
- 4 years
- CVEs
- 8
- In KEV
- 3
- Years
- 17–21
Apple iOS and macOS missing authorization flaws, 2021–2026
- Span
- 5 years
- CVEs
- 8
- In KEV
- 2
- Years
- 21–26
Apple iOS and macOS double free flaws, 2020–2026
- Span
- 6 years
- CVEs
- 8
- In KEV
- 1
- Years
- 20–26
Adobe Experience Manager incorrect authorization flaws, 2022–2026
- Span
- 4 years
- CVEs
- 8
- In KEV
- 1
- Years
- 22–26
Microsoft Windows exposure of Sensitive System Information to an Unauthorized flaws, 2021–2026
- Span
- 5 years
- CVEs
- 8
- In KEV
- 1
- Years
- 21–26
Apache OFBiz path traversal flaws, 2022–2026
- Span
- 4 years
- CVEs
- 8
- In KEV
- 1
- Years
- 22–26
Linux Kernel out-of-bounds write flaws, 2021–2026
- Span
- 5 years
- CVEs
- 7
- In KEV
- 7
- Years
- 21–26
Microsoft SharePoint code injection flaws, 2021–2026
- Span
- 5 years
- CVEs
- 7
- In KEV
- 3
- Years
- 21–26
Microsoft Windows deserialization flaws, 2018–2026
- Span
- 8 years
- CVEs
- 7
- In KEV
- 2
- Years
- 18–26
Adobe Acrobat and Reader integer overflow flaws, 2013–2026
- Span
- 13 years
- CVEs
- 7
- In KEV
- 1
- Years
- 13–26
Fortinet FortiWeb path traversal flaws, 2023–2026
- Span
- 3 years
- CVEs
- 7
- In KEV
- 1
- Years
- 23–26
Cisco IOS XE OS command injection flaws, 2019–2025
- Span
- 6 years
- CVEs
- 7
- In KEV
- 1
- Years
- 19–25
Adobe Acrobat and Reader memory corruption flaws, 2008–2013
- Span
- 6 years
- CVEs
- 6
- In KEV
- 6
- Years
- 08–13
Palo Alto Networks PAN-OS input validation flaws, 2017–2024
- Span
- 7 years
- CVEs
- 6
- In KEV
- 2
- Years
- 17–24
Microsoft Configuration Manager SQL injection flaws, 2024–2026
- Span
- 2 years
- CVEs
- 6
- In KEV
- 1
- Years
- 24–26
Mozilla Firefox information disclosure flaws, 2015–2026
- Span
- 11 years
- CVEs
- 6
- In KEV
- 1
- Years
- 15–26
F5 BIG-IP stack buffer overflow flaws, 2023–2026
- Span
- 3 years
- CVEs
- 6
- In KEV
- 1
- Years
- 23–26
Adobe Acrobat and Reader stack buffer overflow flaws, 2009–2023
- Span
- 14 years
- CVEs
- 6
- In KEV
- 1
- Years
- 09–23
Elastic Kibana code injection flaws, 2019–2023
- Span
- 4 years
- CVEs
- 6
- In KEV
- 1
- Years
- 19–23
Qualcomm Multiple Chipsets use-after-free flaws, 2021–2025
- Span
- 4 years
- CVEs
- 5
- In KEV
- 5
- Years
- 21–25
Apache Struts input validation flaws, 2012–2018
- Span
- 7 years
- CVEs
- 5
- In KEV
- 5
- Years
- 12–18
Adobe Flash Player out-of-bounds write flaws, 2010–2018
- Span
- 8 years
- CVEs
- 5
- In KEV
- 5
- Years
- 10–18
Oracle Java SE access control flaws, 2012–2026
- Span
- 14 years
- CVEs
- 5
- In KEV
- 4
- Years
- 12–26
Microsoft Exchange Server authentication bypass flaws, 2020–2026
- Span
- 6 years
- CVEs
- 5
- In KEV
- 4
- Years
- 20–26
Fortinet FortiOS out-of-bounds write flaws, 2023–2026
- Span
- 3 years
- CVEs
- 5
- In KEV
- 2
- Years
- 23–26
Cisco ASA buffer overflow flaws, 2016–2026
- Span
- 10 years
- CVEs
- 5
- In KEV
- 2
- Years
- 16–26
Veeam Backup & Replication missing authentication flaws, 2022–2024
- Span
- 3 years
- CVEs
- 5
- In KEV
- 2
- Years
- 22–24
Adobe ColdFusion unrestricted file upload flaws, 2018–2026
- Span
- 8 years
- CVEs
- 5
- In KEV
- 1
- Years
- 18–26
Cisco ASA infinite loop flaws, 2024–2026
- Span
- 2 years
- CVEs
- 5
- In KEV
- 1
- Years
- 24–26
Microsoft .NET input validation flaws, 2017–2026
- Span
- 9 years
- CVEs
- 5
- In KEV
- 1
- Years
- 17–26
Microsoft Exchange Server input validation flaws, 2021–2025
- Span
- 5 years
- CVEs
- 5
- In KEV
- 1
- Years
- 21–25
Android Kernel use-after-free flaws, 2019–2024
- Span
- 5 years
- CVEs
- 4
- In KEV
- 4
- Years
- 19–24
Microsoft Windows code injection flaws, 2008–2024
- Span
- 15 years
- CVEs
- 4
- In KEV
- 4
- Years
- 08–24
Microsoft Internet Explorer information disclosure flaws, 2014–2017
- Span
- 3 years
- CVEs
- 4
- In KEV
- 4
- Years
- 14–17
Adobe Flash Player memory corruption flaws, 2012–2015
- Span
- 3 years
- CVEs
- 4
- In KEV
- 4
- Years
- 12–15
Microsoft Office code injection flaws, 2009–2012
- Span
- 3 years
- CVEs
- 4
- In KEV
- 4
- Years
- 09–12
Oracle WebLogic Server deserialization flaws, 2015–2026
- Span
- 11 years
- CVEs
- 4
- In KEV
- 3
- Years
- 15–26
Ivanti Connect Secure code injection flaws, 2020–2025
- Span
- 4 years
- CVEs
- 4
- In KEV
- 3
- Years
- 20–25
JFrog Artifactory authentication bypass flaws, 2024–2026
- Span
- 2 years
- CVEs
- 4
- In KEV
- 2
- Years
- 24–26
N-able N-central authentication bypass flaws, 2024–2026
- Span
- 2 years
- CVEs
- 4
- In KEV
- 2
- Years
- 24–26
Microsoft Edge memory corruption flaws, 2016–2026
- Span
- 10 years
- CVEs
- 4
- In KEV
- 2
- Years
- 16–26
Microsoft Windows authentication bypass flaws, 2019–2024
- Span
- 6 years
- CVEs
- 4
- In KEV
- 2
- Years
- 19–24
Cisco IOS XR input validation flaws, 2009–2019
- Span
- 10 years
- CVEs
- 4
- In KEV
- 2
- Years
- 09–19
Adobe ColdFusion information disclosure flaws, 2013–2018
- Span
- 6 years
- CVEs
- 4
- In KEV
- 2
- Years
- 13–18
ISC BIND reachable Assertion flaws, 2015–2026
- Span
- 11 years
- CVEs
- 4
- In KEV
- 1
- Years
- 15–26
Apple iOS and macOS certificate validation flaws, 2022–2026
- Span
- 4 years
- CVEs
- 4
- In KEV
- 1
- Years
- 22–26
Google Chrome buffer overflow flaws, 2020–2026
- Span
- 5 years
- CVEs
- 4
- In KEV
- 1
- Years
- 20–26
Cisco ASA missing Release of Resource after Effective Lifetime flaws, 2023–2026
- Span
- 2 years
- CVEs
- 4
- In KEV
- 1
- Years
- 23–26
Adobe Acrobat and Reader information disclosure flaws, 2008–2025
- Span
- 17 years
- CVEs
- 4
- In KEV
- 1
- Years
- 08–25
Dassault Systèmes DELMIA Apriso deserialization flaws, 2023–2025
- Span
- 2 years
- CVEs
- 4
- In KEV
- 1
- Years
- 23–25
Sophos Firewall code injection flaws, 2022–2024
- Span
- 2 years
- CVEs
- 4
- In KEV
- 1
- Years
- 22–24
Samsung Mobile Devices privilege management flaws, 2021–2023
- Span
- 2 years
- CVEs
- 4
- In KEV
- 1
- Years
- 21–23
Citrix NetScaler ADC and NetScaler Gateway memory corruption flaws, 2023–2026
- Span
- 3 years
- CVEs
- 3
- In KEV
- 3
- Years
- 23–26
Linux Kernel race condition flaws, 2014–2025
- Span
- 11 years
- CVEs
- 3
- In KEV
- 3
- Years
- 14–25
Cisco IOS and IOS XE out-of-bounds write flaws, 2018–2023
- Span
- 6 years
- CVEs
- 3
- In KEV
- 3
- Years
- 18–23
D-Link Multiple Routers OS command injection flaws, 2018–2022
- Span
- 4 years
- CVEs
- 3
- In KEV
- 3
- Years
- 18–22
Linux Kernel integer overflow flaws, 2013–2022
- Span
- 9 years
- CVEs
- 3
- In KEV
- 3
- Years
- 13–22
SAP NetWeaver path traversal flaws, 2016–2021
- Span
- 5 years
- CVEs
- 3
- In KEV
- 3
- Years
- 16–21
Rails Ruby on Rails path traversal flaws, 2014–2019
- Span
- 5 years
- CVEs
- 3
- In KEV
- 3
- Years
- 14–19
Microsoft Internet Explorer resource management flaws, 2010–2013
- Span
- 4 years
- CVEs
- 3
- In KEV
- 3
- Years
- 10–13
Apache ActiveMQ input validation flaws, 2016–2026
- Span
- 10 years
- CVEs
- 3
- In KEV
- 2
- Years
- 16–26
Apple iOS and macOS improper Locking flaws, 2021–2025
- Span
- 5 years
- CVEs
- 3
- In KEV
- 2
- Years
- 21–25
Fortinet FortiOS path traversal flaws, 2019–2025
- Span
- 6 years
- CVEs
- 3
- In KEV
- 2
- Years
- 19–25
Ivanti Connect Secure command injection flaws, 2021–2024
- Span
- 4 years
- CVEs
- 3
- In KEV
- 2
- Years
- 21–24
Palo Alto Networks PAN-OS command injection flaws, 2020–2024
- Span
- 5 years
- CVEs
- 3
- In KEV
- 2
- Years
- 20–24
Microsoft Edge out-of-bounds write flaws, 2016–2024
- Span
- 8 years
- CVEs
- 3
- In KEV
- 2
- Years
- 16–24
QNAP Photo Station path traversal flaws, 2019–2024
- Span
- 4 years
- CVEs
- 3
- In KEV
- 2
- Years
- 19–24
Cisco ASA path traversal flaws, 2018–2020
- Span
- 2 years
- CVEs
- 3
- In KEV
- 2
- Years
- 18–20
Apache Kylin OS command injection flaws, 2020–2026
- Span
- 6 years
- CVEs
- 3
- In KEV
- 1
- Years
- 20–26
Apache Struts expression language injection flaws, 2020–2026
- Span
- 6 years
- CVEs
- 3
- In KEV
- 1
- Years
- 20–26
Cisco Identity Services Engine incorrect Use of Privileged APIs flaws, 2022–2026
- Span
- 4 years
- CVEs
- 3
- In KEV
- 1
- Years
- 22–26
Microsoft SharePoint missing authentication flaws, 2023–2026
- Span
- 4 years
- CVEs
- 3
- In KEV
- 1
- Years
- 23–26
Apple iOS and macOS improper Initialization flaws, 2020–2026
- Span
- 6 years
- CVEs
- 3
- In KEV
- 1
- Years
- 20–26
Apple iOS and macOS time-of-check Time-of-use Race Condition flaws, 2023–2026
- Span
- 3 years
- CVEs
- 3
- In KEV
- 1
- Years
- 23–26
SolarWinds Web Help Desk hard-coded credentials flaws, 2021–2026
- Span
- 4 years
- CVEs
- 3
- In KEV
- 1
- Years
- 21–26
Gogs path traversal flaws, 2022–2025
- Span
- 4 years
- CVEs
- 3
- In KEV
- 1
- Years
- 22–25
Palo Alto Networks PAN-OS external Control of File Name or Path flaws, 2020–2025
- Span
- 5 years
- CVEs
- 3
- In KEV
- 1
- Years
- 20–25
SolarWinds Serv-U path traversal flaws, 2022–2024
- Span
- 2 years
- CVEs
- 3
- In KEV
- 1
- Years
- 22–24