Patchfirst
Patchfirst
T1059Execution

Command and Scripting Interpreter

Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix…

attack.mitre.org ↗
CVEs820
In 736
Reports2
Sub-techniques T1059.001PowerShell2T1059.002AppleScriptT1059.003Windows Command Shell5T1059.004Unix Shell17T1059.005Visual BasicT1059.006Python1T1059.007JavaScript60T1059.008Network Device CLIT1059.009Cloud APIT1059.010AutoHotKey & AutoITT1059.011LuaT1059.012Hypervisor CLIT1059.013Container CLI/API

Detections

95 Sigma rules tagged T1059
Command and Scripting InterpreterT105995 general rules
All 95 on SigmaHQ ↗

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

CVEs linked to Command and Scripting Interpreter

Top 150 of 820 by priority. Each link shows its badge.
  1. CVE-2025-55182Meta React Server Components Remote Code Execution Vulnerability
    Meta · React Server ComponentsKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter5 reports
    AI mapping from the description · primary impact
    99.8%Top 0.04%
    95.0priority
  2. CVE-2026-1731BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
    BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports
    AI mapping from the description · primary impact
    93.1%Top 0.17%
    91.0priority
  3. CVE-2019-11510Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
    Ivanti · Pulse Connect SecureKEVRansomwarePublic exploitCritical · 10.0T1133External Remote ServicesT1059Command and Scripting Interpreter+2 more · 6 reports
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    90.0priority
  4. CVE-2019-19781Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
    Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceKEVRansomwarePublic exploitCritical · 9.8T1133External Remote ServicesT1059Command and Scripting Interpreter+1 more · 8 reports
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    89.9priority
  5. CVE-2020-5902F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability
    F5 · BIG-IPKEVRansomwarePublic exploitCritical · 9.8T1133External Remote ServicesT1190Exploit Public-Facing Application+5 more · 5 reports
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    89.9priority
  6. CVE-2026-63077JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
    JetBrains · TeamCityKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    93.6%Top 0.16%
    89.8priority
  7. CVE-2026-110447Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
    Collabora · Collabora Online – Built-in CODE ServerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    73.3%Top 0.54%
    89.4priority
  8. CVE-2019-2725Oracle WebLogic Server, Injection
    Oracle · WebLogic ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter4 reports
    MITRE CTID mapping of the CVE · uncategorised
    >99.9%Top 0.02%
    88.8priority
  9. CVE-2025-52691SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability
    SmarterTools · SmarterMailKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more · 1 report
    AI mapping from the description · primary impact
    85.7%Top 0.28%
    88.8priority
  10. CVE-2026-1281Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
    Ivanti · Endpoint Manager Mobile (EPMM)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    AI mapping from the description · primary impact
    98.7%Top 0.08%
    88.7priority
  11. CVE-2017-11882Microsoft Office Memory Corruption Vulnerability
    Microsoft · OfficeKEVRansomwarePublic exploitHigh · 7.8T1566.001Spearphishing AttachmentT1059Command and Scripting Interpreter13 reports
    MITRE CTID mapping of the KEV entry · primary impact
    99.9%Top 0.03%
    88.5priority
  12. CVE-2024-21887Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
    Ivanti · Connect Secure and Policy SecureKEVRansomwarePublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+2 more · 4 reports
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    88.4priority
  13. CVE-2021-34527Microsoft Windows Print Spooler Remote Code Execution Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation4 reports
    AI mapping from the description · primary impact
    99.8%Top 0.04%
    88.1priority
  14. CVE-2024-3400Palo Alto Networks PAN-OS Command Injection Vulnerability
    Palo Alto Networks · PAN-OSKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter3 reports
    AI mapping from the description · primary impact
    >99.9%Top 0.01%
    87.7priority
  15. CVE-2021-26084Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
    Atlassian · Confluence Server and Data CenterKEVRansomwarePublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1496Resource Hijacking3 reports
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    87.6priority
  16. CVE-2017-0144Microsoft SMBv1 Remote Code Execution Vulnerability
    Microsoft · SMBv1KEVRansomwarePublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services3 reports
    AI mapping from the description · primary impact
    99.2%Top 0.06%
    86.9priority
  17. CVE-2026-59310Broadcom VMware vCenter Path Traversal Vulnerability
    Broadcom · VMware vCenterKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    2.6%Top 15%
    86.9priority
  18. CVE-2021-1675Microsoft Windows Print Spooler Remote Code Execution Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter3 reports
    AI mapping from the description · primary impact
    85.3%Top 0.28%
    86.1priority
  19. CVE-2026-15410SonicWall SMA1000 Appliances Code Injection Vulnerability
    SonicWall · SMA1000 AppliancesKEVRansomwarePublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter1 report
    AI mapping from the description · primary impact
    11.8%Top 3.9%
    86.1priority
  20. CVE-2010-0840Oracle JRE Unspecified Vulnerability
    Oracle · Java Runtime Environment (JRE)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports
    AI mapping from the description · primary impact
    96.3%Top 0.12%
    86.0priority
  21. CVE-2016-3088Apache ActiveMQ Improper Input Validation Vulnerability
    Apache · ActiveMQKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports
    AI mapping from the description · primary impact
    98.5%Top 0.08%
    86.0priority
  22. CVE-2022-22965Spring Framework JDK 9+ Remote Code Execution Vulnerability
    VMware · Spring FrameworkKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports
    MITRE CTID mapping of the KEV entry · primary impact
    99.6%Top 0.05%
    86.0priority
  23. CVE-2022-30525Zyxel Multiple Firewalls OS Command Injection Vulnerability
    Zyxel · Multiple FirewallsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports
    AI mapping from the description · primary impact
    99.9%Top 0.03%
    86.0priority
  24. CVE-2023-34362Progress MOVEit Transfer SQL Injection Vulnerability
    Progress · MOVEit TransferKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+5 more · 2 reports
    MITRE CTID mapping of the KEV entry · primary impact
    99.9%Top 0.03%
    86.0priority
  25. CVE-2025-53770Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
    Microsoft · SharePointKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports
    MITRE CTID mapping of the KEV entry · how it is exploited
    >99.9%Top 0.01%
    86.0priority
  26. CVE-2021-45046Apache Log4j2 Deserialization of Untrusted Data Vulnerability
    Apache · Log4j2KEVRansomwarePublic exploitCritical · 9.0T1059Command and Scripting InterpreterT1486Data Encrypted for Impact2 reports
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.02%
    85.4priority
  27. CVE-2025-26399SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
    SolarWinds · Web Help DeskKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    90.1%Top 0.2%
    84.8priority
  28. CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
    Ivanti · Endpoint Manager Mobile (EPMM)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    98.6%Top 0.08%
    84.8priority
  29. CVE-2026-20131Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management…
    Cisco · Secure Firewall Management Center (FMC)KEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    44.4%Top 1.2%
    84.8priority
  30. CVE-2026-21643Fortinet FortiClient EMS SQL Injection Vulnerability
    Fortinet · FortiClient EMSKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    97.7%Top 0.1%
    84.8priority
  31. CVE-2026-23760SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability
    SmarterTools · SmarterMailKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+1 more
    AI mapping from the description · primary impact
    96.4%Top 0.12%
    84.8priority
  32. CVE-2026-24423SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability
    SmarterTools · SmarterMailKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    88.2%Top 0.23%
    84.8priority
  33. CVE-2026-35616Fortinet FortiClient EMS Improper Access Control Vulnerability
    Fortinet · FortiClient EMSKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    94.0%Top 0.15%
    84.8priority
  34. CVE-2026-0300Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
    Palo Alto Networks · PAN-OSKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    41.7%Top 1.3%
    84.6priority
  35. CVE-2026-48027Nx Console Embedded Malicious Code Vulnerability
    Nx · Nx ConsoleKEVRansomwarePublic exploitCritical · 9.8T1195.002Compromise Software Supply ChainT1059Command and Scripting Interpreter1 report
    AI mapping from the description · primary impact
    1.8%Top 21%
    84.5priority
  36. CVE-2018-8174Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.5T1189Drive-by CompromiseT1059Command and Scripting Interpreter2 reports
    AI mapping from the description · primary impact
    88.2%Top 0.23%
    84.3priority
  37. CVE-2026-42271BerriAI LiteLLM Command Injection Vulnerability
    BerriAI · LiteLLMKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    91.4%Top 0.19%
    84.1priority
  38. CVE-2026-45659Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
    Microsoft · SharePoint ServerKEVRansomwarePublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    80.2%Top 0.38%
    84.1priority
  39. CVE-2018-10562Dasan GPON Routers Command Injection Vulnerability
    Dasan · Gigabit Passive Optical Network (GPON) RoutersKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    AI mapping from the description · primary impact
    99.9%Top 0.03%
    83.7priority
  40. CVE-2018-7600Drupal Core Remote Code Execution Vulnerability
    Drupal · Drupal CoreKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+2 more · 1 report
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    83.7priority
  41. CVE-2021-21972VMware vCenter Server Remote Code Execution Vulnerability
    VMware · vCenter ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    MITRE CTID mapping of the KEV entry · primary impact
    99.9%Top 0.04%
    83.7priority
  42. CVE-2021-3129Laravel Ignition File Upload Vulnerability
    Laravel · IgnitionKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    MITRE CTID mapping of the KEV entry · primary impact
    99.9%Top 0.03%
    83.7priority
  43. CVE-2021-42013Apache HTTP Server Path Traversal Vulnerability
    Apache · HTTP ServerKEVRansomwarePublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services1 report
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.02%
    83.7priority
  44. CVE-2022-47986IBM Aspera Faspex Code Execution Vulnerability
    IBM · Aspera FaspexKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    AI mapping from the description · primary impact
    >99.9%Top 0.02%
    83.7priority
  45. CVE-2023-46747F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability
    F5 · BIG-IP Configuration UtilityKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    AI mapping from the description · primary impact
    96.7%Top 0.11%
    83.7priority
  46. CVE-2023-48788Fortinet FortiClient EMS SQL Injection Vulnerability
    Fortinet · FortiClient EMSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more · 1 report
    MITRE CTID mapping of the KEV entry · primary impact
    98.4%Top 0.08%
    83.7priority
  47. CVE-2024-55956Cleo Multiple Products Unauthenticated File Upload Vulnerability
    Cleo · Multiple ProductsKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    AI mapping from the description · primary impact
    94.0%Top 0.16%
    83.7priority
  48. CVE-2025-10035Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability
    Fortra · GoAnywhere MFTKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    AI mapping from the description · primary impact
    99.8%Top 0.04%
    83.7priority
  49. CVE-2025-22457Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
    Ivanti · Connect Secure, Policy Secure, and ZTA GatewaysKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.02%
    83.7priority
  50. CVE-2025-31324SAP NetWeaver Unrestricted File Upload Vulnerability
    SAP · NetWeaverKEVRansomwarePublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1505.003Web Shell+2 more · 1 report
    MITRE CTID mapping of the KEV entry · primary impact
    99.5%Top 0.06%
    83.7priority
  51. CVE-2021-22893Ivanti Pulse Connect Secure Use-After-Free Vulnerability
    Ivanti · Pulse Connect SecureKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more · 1 report
    MITRE CTID mapping of the KEV entry · primary impact
    47.2%Top 1.2%
    83.6priority
  52. CVE-2022-31199Netwrix Auditor Insecure Object Deserialization Vulnerability
    Netwrix · AuditorKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    AI mapping from the description · primary impact
    36.0%Top 1.5%
    83.4priority
  53. CVE-2026-82078PaperCut NG/MF Unsafe Reflection Vulnerability
    PaperCut · NG/MFKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    AI mapping from the description · primary impact
    63.0%Top 0.8%
    83.1priority
  54. CVE-2017-0143Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    AI mapping from the description · primary impact
    93.3%Top 0.16%
    83.0priority
  55. CVE-2021-42321Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · ExchangeKEVRansomwarePublic exploitHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter1 report
    MITRE CTID mapping of the KEV entry · primary impact
    91.7%Top 0.19%
    83.0priority
  56. CVE-2024-20359Cisco ASA and FTD Privilege Escalation Vulnerability
    Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVPublic exploitMedium · 6.0T1078Valid AccountsT1059Command and Scripting Interpreter+1 more · 2 reports
    MITRE CTID mapping of the KEV entry · primary impact
    18.8%Top 2.7%
    82.8priority
  57. CVE-2018-11776Apache Struts Remote Code Execution Vulnerability
    Apache · StrutsKEVPublic exploitHigh · 8.1T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more · 1 report
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    82.5priority
  58. CVE-2020-0787Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation1 report
    MITRE CTID mapping of the KEV entry · primary impact
    42.5%Top 1.3%
    82.1priority
  59. CVE-2019-11539Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
    Ivanti · Pulse Connect Secure and Pulse Policy SecureKEVRansomwarePublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter1 report
    AI mapping from the description · primary impact
    98.5%Top 0.08%
    81.9priority
  60. CVE-2020-8260Ivanti Pulse Connect Secure Code Execution Vulnerability
    Ivanti · Pulse Connect SecureKEVPublic exploitHigh · 7.2T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    AI mapping from the description · primary impact
    96.5%Top 0.12%
    81.9priority
  61. CVE-2025-60710Microsoft Windows Link Following Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    4.6%Top 8.3%
    81.8priority
  62. CVE-2015-2291Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability
    Intel · Ethernet Diagnostics Driver for WindowsKEVRansomwarePublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation+1 more · 1 report
    AI mapping from the description · primary impact
    15.7%Top 3.1%
    81.7priority
  63. CVE-2021-44832Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration
    Apache Software Foundation · Apache Log4j2Public exploitMedium · 6.6T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    AI mapping from the description · primary impact
    97.9%Top 0.09%
    81.5priority
  64. CVE-2021-22205GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
    GitLab · Community and Enterprise EditionsKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+2 more
    MITRE CTID mapping of the KEV entry · primary impact
    99.7%Top 0.05%
    80.0priority
  65. CVE-2024-4040CrushFTP VFS Sandbox Escape Vulnerability
    CrushFTP · CrushFTPKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    99.5%Top 0.05%
    80.0priority
  66. CVE-2025-32433Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability
    Erlang · Erlang/OTPKEVPublic exploitCritical · 10.0T1059Command and Scripting InterpreterT1021.004SSH
    MITRE CTID mapping of the KEV entry · primary impact
    98.9%Top 0.07%
    80.0priority
  67. CVE-2026-72898Metabase SQL Injection Vulnerability
    Metabase · MetabaseKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    98.6%Top 0.08%
    80.0priority
  68. CVE-2015-1427Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
    Elastic · ElasticsearchKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    99.9%Top 0.03%
    79.9priority
  69. CVE-2017-5638Apache Struts Remote Code Execution Vulnerability
    Apache · StrutsKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    79.9priority
  70. CVE-2019-11043PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
    PHP · FastCGI Process Manager (FPM)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    99.8%Top 0.04%
    79.9priority
  71. CVE-2019-15107Webmin Command Injection Vulnerability
    Webmin · WebminKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    99.7%Top 0.05%
    79.9priority
  72. CVE-2019-16920D-Link Multiple Routers Command Injection Vulnerability
    D-Link · Multiple RoutersKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    >99.9%Top 0.01%
    79.9priority
  73. CVE-2021-20038SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
    SonicWall · SMA 100 AppliancesKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    99.9%Top 0.03%
    79.9priority
  74. CVE-2021-21985VMware vCenter Server Improper Input Validation Vulnerability
    VMware · vCenter ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    >99.9%Top 0.01%
    79.9priority
  75. CVE-2021-22005VMware vCenter Server File Upload Vulnerability
    VMware · vCenter ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    79.9priority
  76. CVE-2021-22986F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
    F5 · BIG-IP and BIG-IQ Centralized ManagementKEVRansomwarePublic exploitCritical · 9.8T1133External Remote ServicesT1190Exploit Public-Facing Application+3 more
    MITRE CTID mapping of the KEV entry · primary impact
    99.9%Top 0.03%
    79.9priority
  77. CVE-2021-31166Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability
    Microsoft · HTTP Protocol StackKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    MITRE CTID mapping of the KEV entry · primary impact
    99.9%Top 0.04%
    79.9priority
  78. CVE-2021-35464ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability
    ForgeRock · Access Management (AM)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    79.9priority
  79. CVE-2021-38647Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
    Microsoft · Open Management Infrastructure (OMI)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    99.9%Top 0.03%
    79.9priority
  80. CVE-2021-41773Apache HTTP Server Path Traversal Vulnerability
    Apache · HTTP ServerKEVRansomwarePublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    79.9priority
  81. CVE-2022-1040Sophos Firewall Authentication Bypass Vulnerability
    Sophos · FirewallKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+4 more
    MITRE CTID mapping of the KEV entry · primary impact
    99.8%Top 0.04%
    79.9priority
  82. CVE-2023-27350PaperCut MF/NG Improper Access Control Vulnerability
    PaperCut · MF/NGKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    79.9priority
  83. CVE-2023-38035Ivanti Sentry Authentication Bypass Vulnerability
    Ivanti · SentryKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+6 more
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.03%
    79.9priority
  84. CVE-2023-41265Qlik Sense HTTP Tunneling Vulnerability
    Qlik · SenseKEVRansomwarePublic exploitCritical · 9.9T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    88.2%Top 0.23%
    79.9priority
  85. CVE-2024-27198JetBrains TeamCity Authentication Bypass Vulnerability
    JetBrains · TeamCityKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    MITRE CTID mapping of the KEV entry · primary impact
    99.9%Top 0.03%
    79.9priority
  86. CVE-2024-4577PHP-CGI OS Command Injection Vulnerability
    PHP Group · PHPKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+10 more
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.02%
    79.9priority
  87. CVE-2025-31161CrushFTP Authentication Bypass Vulnerability
    CrushFTP · CrushFTPKEVRansomwarePublic exploitCritical · 9.8T1078Valid AccountsT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.02%
    79.9priority
  88. CVE-2025-3248Langflow Missing Authentication Vulnerability
    Langflow · LangflowKEVRansomwarePublic exploitCritical · 9.8T1059Command and Scripting Interpreter
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    79.9priority
  89. CVE-2025-59287Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
    Microsoft · WindowsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    >99.9%Top 0.02%
    79.9priority
  90. CVE-2026-105134Ahsay AhsayCBS Command Injection Vulnerability
    Ahsay · AhsayCBSKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    81.8%Top 0.36%
    79.9priority
  91. CVE-2026-109618PHP Memory Corruption Vulnerability
    PHP Group · PHPKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    >99.9%Top 0.01%
    79.9priority
  92. CVE-2013-4810HP Multiple Products Remote Code Execution Vulnerability
    Hewlett Packard (HP) · ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle ManagementKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    79.5%Top 0.4%
    79.8priority
  93. CVE-2017-11357Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
    Telerik · User Interface (UI) for ASP.NET AJAXKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    77.7%Top 0.44%
    79.8priority
  94. CVE-2017-12149Red Hat JBoss Application Server Remote Code Execution Vulnerability
    Red Hat · JBoss Application ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    90.7%Top 0.2%
    79.8priority
  95. CVE-2017-18362Kaseya VSA SQL Injection Vulnerability
    Kaseya · Virtual System/Server Administrator (VSA)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the CVE · uncategorised
    86.8%Top 0.26%
    79.8priority
  96. CVE-2017-7494Samba Remote Code Execution Vulnerability
    Samba · SambaKEVRansomwarePublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services
    AI mapping from the description · primary impact
    99.4%Top 0.06%
    79.8priority
  97. CVE-2018-1000861Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
    Jenkins · Jenkins Stapler Web FrameworkKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    98.3%Top 0.08%
    79.8priority
  98. CVE-2018-11138Quest KACE System Management Appliance Remote Command Execution Vulnerability
    Quest · KACE System Management ApplianceKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    91.7%Top 0.19%
    79.8priority
  99. CVE-2018-1273VMware Tanzu Spring Data Commons Property Binder Vulnerability
    VMware Tanzu · Spring Data CommonsKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    97.0%Top 0.11%
    79.8priority
  100. CVE-2018-6530D-Link Multiple Routers OS Command Injection Vulnerability
    D-Link · Multiple RoutersKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    96.7%Top 0.12%
    79.8priority
  101. CVE-2018-6789Exim Buffer Overflow Vulnerability
    Exim · EximKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    MITRE CTID mapping of the KEV entry · primary impact
    82.1%Top 0.35%
    79.8priority
  102. CVE-2018-7602Drupal Core Remote Code Execution Vulnerability
    Drupal · CoreKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    99.2%Top 0.07%
    79.8priority
  103. CVE-2019-11580Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
    Atlassian · Crowd and Crowd Data CenterKEVRansomwarePublic exploitCritical · 9.8T1059Command and Scripting Interpreter
    MITRE CTID mapping of the KEV entry · primary impact
    95.4%Top 0.13%
    79.8priority
  104. CVE-2019-16057D-Link DNS-320 Remote Code Execution Vulnerability
    D-Link · DNS-320 Storage DeviceKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    86.5%Top 0.26%
    79.8priority
  105. CVE-2021-23758Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
    Ajax.NET Professional · Ajax.NET ProfessionalKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    82.6%Top 0.33%
    79.8priority
  106. CVE-2021-42237Sitecore XP Remote Command Execution Vulnerability
    Sitecore · XPKEVRansomwarePublic exploitCritical · 9.8T1059Command and Scripting Interpreter
    MITRE CTID mapping of the KEV entry · primary impact
    97.6%Top 0.1%
    79.8priority
  107. CVE-2021-42258BQE BillQuick Web Suite SQL Injection Vulnerability
    BQE · BillQuick Web SuiteKEVRansomwarePublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1486Data Encrypted for Impact
    MITRE CTID mapping of the KEV entry · primary impact
    75.2%Top 0.49%
    79.8priority
  108. CVE-2022-37042Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability
    Synacor · Zimbra Collaboration Suite (ZCS)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    92.1%Top 0.18%
    79.8priority
  109. CVE-2023-22515Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
    Atlassian · Confluence Data Center and ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+3 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    99.2%Top 0.07%
    79.8priority
  110. CVE-2023-24489Citrix Content Collaboration ShareFile Improper Access Control Vulnerability
    Citrix · Content CollaborationKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    97.3%Top 0.1%
    79.8priority
  111. CVE-2023-43208NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability
    NextGen Healthcare · Mirth ConnectKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    85.4%Top 0.28%
    79.8priority
  112. CVE-2023-47246SysAid Server Path Traversal Vulnerability
    SysAid · SysAid ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    98.9%Top 0.07%
    79.8priority
  113. CVE-2024-40711Veeam Backup and Replication Deserialization Vulnerability
    Veeam · Backup & ReplicationKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    90.4%Top 0.2%
    79.8priority
  114. CVE-2024-50623Cleo Multiple Products Unrestricted File Upload Vulnerability
    Cleo · Multiple ProductsKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    98.6%Top 0.08%
    79.8priority
  115. CVE-2024-51567CyberPanel Incorrect Default Permissions Vulnerability
    CyberPersons · CyberPanelKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    84.4%Top 0.3%
    79.8priority
  116. CVE-2025-20333Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow…
    Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseKEVPublic exploitCritical · 9.9T1133External Remote ServicesT1059Command and Scripting Interpreter5 reports
    AI mapping from the description · primary impact
    71.2%Top 0.59%
    79.8priority
  117. CVE-2025-64446Fortinet FortiWeb Path Traversal Vulnerability
    Fortinet · FortiWebKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    91.1%Top 0.19%
    79.8priority
  118. CVE-2025-9242WatchGuard Firebox Out-of-Bounds Write Vulnerability
    WatchGuard · FireboxKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    92.2%Top 0.18%
    79.8priority
  119. CVE-2026-111497Google Brotli Unchecked Return Value Vulnerability
    Google · BrotliKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+2 more
    AI mapping from the description · primary impact
    82.6%Top 0.33%
    79.8priority
  120. CVE-2026-88771Citrix NetScaler Improper Input Validation Vulnerability
    Citrix · NetScalerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    82.2%Top 0.34%
    79.8priority
  121. CVE-2026-93616Check Point Multiple Products Path Traversal Vulnerability
    Check Point · Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    91.6%Top 0.19%
    79.8priority
  122. CVE-2021-22941Citrix ShareFile Improper Access Control Vulnerability
    Citrix · ShareFileKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    53.6%Top 1%
    79.7priority
  123. CVE-2021-27877Veritas Backup Exec Agent Improper Authentication Vulnerability
    Veritas · Backup Exec AgentKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    64.9%Top 0.75%
    79.7priority
  124. CVE-2026-85102Check Point Multiple Products Improper Certificate Validation Vulnerability
    Check Point · Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    54.1%Top 0.99%
    79.7priority
  125. CVE-2020-12271Sophos SFOS SQL Injection Vulnerability
    Sophos · SFOSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    42.4%Top 1.3%
    79.6priority
  126. CVE-2026-12569PTC Windchill and FlexPLM Improper Input Validation Vulnerability
    PTC · Windchill and FlexPLMKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    46.0%Top 1.2%
    79.6priority
  127. CVE-2020-2509QNAP Network-Attached Storage (NAS) Command Injection Vulnerability
    QNAP · QNAP Network-Attached Storage (NAS)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    34.0%Top 1.6%
    79.5priority
  128. CVE-2021-3199ONLYOFFICE Docs Server Path Traversal Vulnerability
    ONLYOFFICE · DocsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    30.2%Top 1.8%
    79.5priority
  129. CVE-2025-14733WatchGuard Firebox Out of Bounds Write Vulnerability
    WatchGuard · FireboxKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    29.4%Top 1.8%
    79.5priority
  130. CVE-2025-32756Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
    Fortinet · Multiple ProductsKEVPublic exploitCritical · 9.8T1608.001Upload MalwareT1133External Remote Services+5 more
    MITRE CTID mapping of the KEV entry · primary impact
    30.9%Top 1.7%
    79.5priority
  131. CVE-2026-76461Cisco Secure Email Gateway SQL Injection Vulnerability
    Cisco · Secure Email GatewayKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    29.5%Top 1.8%
    79.5priority
  132. CVE-2026-9198IBM Langflow Code Injection Vulnerability
    IBM · LangflowKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    28.7%Top 1.9%
    79.5priority
  133. CVE-2026-97229GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
    GitLab · Community Edition and Enterprise EditionKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    26.6%Top 2%
    79.5priority
  134. CVE-2026-102489Zammad GmbH Zammad Session Fixation Vulnerability
    Zammad GmbH · ZammadKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    22.5%Top 2.3%
    79.4priority
  135. CVE-2026-60004Gitea Code Injection Vulnerability
    Gitea · GiteaKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    24.0%Top 2.2%
    79.4priority
  136. CVE-2026-94127F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
    F5 · BIG-IP APMKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    24.9%Top 2.1%
    79.4priority
  137. CVE-2026-9586Sangoma Switchvox SQL Injection Vulnerability
    Sangoma · SwitchvoxKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    19.0%Top 2.7%
    79.3priority
  138. CVE-2019-7193QNAP QTS Improper Input Validation Vulnerability
    QNAP · QTSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    14.4%Top 3.4%
    79.2priority
  139. CVE-2026-86218N-able N-central Static Code Injection Vulnerability
    N-able · N-centralKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    15.4%Top 3.2%
    79.2priority
  140. CVE-2016-7200Microsoft Edge Memory Corruption Vulnerability
    Microsoft · EdgeKEVPublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    82.8%Top 0.33%
    79.1priority
  141. CVE-2017-0145Microsoft SMBv1 Remote Code Execution Vulnerability
    Microsoft · SMBv1KEVRansomwarePublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services
    AI mapping from the description · primary impact
    89.8%Top 0.21%
    79.1priority
  142. CVE-2017-0146Microsoft Windows SMB Remote Code Execution Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services
    AI mapping from the description · primary impact
    89.8%Top 0.21%
    79.1priority
  143. CVE-2017-9822DotNetNuke (DNN) Remote Code Execution Vulnerability
    DotNetNuke (DNN) · DotNetNuke (DNN)KEVRansomwarePublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    94.8%Top 0.14%
    79.1priority
  144. CVE-2020-0618Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
    Microsoft · SQL ServerKEVRansomwarePublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    99.0%Top 0.07%
    79.1priority
  145. CVE-2023-40044Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability
    Progress · WS_FTP ServerKEVRansomwarePublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1202Indirect Command Execution+1 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    90.4%Top 0.2%
    79.1priority
  146. CVE-2025-49113RoundCube Webmail Deserialization of Untrusted Data Vulnerability
    Roundcube · WebmailKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    99.5%Top 0.06%
    79.1priority
  147. CVE-2025-8088RARLAB WinRAR Path Traversal Vulnerability
    RARLAB · WinRARKEVRansomwarePublic exploitHigh · 8.8T1204.002Malicious FileT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    94.0%Top 0.15%
    79.1priority
  148. CVE-2026-73570Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
    Synacor · Zimbra Collaboration Suite (ZCS)KEVPublic exploitHigh · 8.9T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    71.7%Top 0.58%
    79.1priority
  149. CVE-2016-4657Apple iOS Webkit Memory Corruption Vulnerability
    Apple · iOSKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    66.8%Top 0.71%
    79.0priority
  150. CVE-2019-1068Microsoft SQL Server Remote Code Execution Vulnerability
    Microsoft · SQL ServerKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    AI mapping from the description · primary impact
    57.3%Top 0.93%
    79.0priority

Linked through a sub-technique

84 more
  1. CVE-2025-49704Microsoft SharePoint Code Injection Vulnerability
    Microsoft · SharePointKEVRansomwarePublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059.003Windows Command Shell1 report
    >99.9%Top 0.01%
    83.0priority
  2. CVE-2016-0189Microsoft Internet Explorer Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVRansomwarePublic exploitHigh · 7.5T1189Drive-by CompromiseT1059.007JavaScript1 report
    94.1%Top 0.15%
    82.1priority
  3. CVE-2023-27532Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
    Veeam · Backup & ReplicationKEVRansomwarePublic exploitHigh · 7.5T1133External Remote ServicesT1059.003Windows Command Shell+4 more · 1 report
    80.6%Top 0.38%
    82.0priority
  4. CVE-2025-49706Microsoft SharePoint Improper Authentication Vulnerability
    Microsoft · SharePointKEVRansomwarePublic exploitMedium · 6.5T1190Exploit Public-Facing ApplicationT1059.003Windows Command Shell+1 more · 1 report
    99.1%Top 0.07%
    81.4priority
  5. CVE-2023-42793JetBrains TeamCity Authentication Bypass Vulnerability
    JetBrains · TeamCityKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.003Windows Command Shell
    >99.9%Top 0.02%
    79.9priority
  6. CVE-2023-46604Apache ActiveMQ Deserialization of Untrusted Data Vulnerability
    Apache · ActiveMQKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.004Unix Shell+1 more
    >99.9%Top 0.01%
    79.9priority
  7. CVE-2024-51378CyberPanel Incorrect Default Permissions Vulnerability
    CyberPersons · CyberPanelKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.004Unix Shell
    94.7%Top 0.14%
    79.8priority
  8. CVE-2018-20753Kaseya VSA Remote Code Execution Vulnerability
    Kaseya · Virtual System/Server Administrator (VSA)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.001PowerShell
    29.6%Top 1.8%
    79.5priority
  9. CVE-2024-24919Check Point Quantum Security Gateways Information Disclosure Vulnerability
    Check Point · Quantum Security GatewaysKEVRansomwarePublic exploitHigh · 8.6T1059.004Unix ShellT1202Indirect Command Execution+3 more
    >99.9%Top 0.02%
    79.0priority
  10. CVE-2022-41082Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitHigh · 8.0T1078Valid AccountsT1059.001PowerShell+4 more
    >99.9%Top 0.02%
    78.6priority
  11. CVE-2019-18426WhatsApp Cross-Site Scripting Vulnerability
    Meta Platforms · WhatsAppKEVPublic exploitHigh · 8.2T1204.001Malicious LinkT1059.007JavaScript+1 more
    67.9%Top 0.68%
    78.6priority
  12. CVE-2021-40449Microsoft Windows Win32k Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1566PhishingT1059.003Windows Command Shell+6 more
    81.9%Top 0.35%
    78.4priority
  13. CVE-2022-24682Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability
    Synacor · Zimbra Collaborate Suite (ZCS)KEVRansomwarePublic exploitMedium · 6.1T1204.001Malicious LinkT1059.007JavaScript+1 more
    30.9%Top 1.7%
    76.9priority
  14. CVE-2014-6271GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
    GNU · Bourne-Again Shell (Bash)KEVPublic exploitCritical · 9.8T1133External Remote ServicesT1190Exploit Public-Facing Application+1 more · 2 reports
    >99.9%Top 0.01%
    76.0priority
  15. CVE-2026-48907Widget Factory Joomla Content Editor Improper Access Control Vulnerability
    Widget Factory · Joomla Content Editor KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.004Unix Shell
    85.4%Top 0.28%
    74.8priority
  16. CVE-2015-5119Adobe Flash Player Use-After-Free Vulnerability
    Adobe · Flash PlayerKEVPublic exploitEnd of lifeCritical · 9.8T1566.002Spearphishing LinkT1059.007JavaScript+3 more · 5 reports
    98.6%Top 0.08%
    74.8priority
  17. CVE-2014-6278GNU Bash OS Command Injection Vulnerability
    GNU · GNU BashKEVPublic exploitHigh · 8.8T1059.004Unix Shell1 report
    99.7%Top 0.05%
    73.0priority
  18. CVE-2022-33891Apache Spark Command Injection Vulnerability
    Apache · SparkKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059.004Unix Shell1 report
    93.2%Top 0.17%
    73.0priority
  19. CVE-2026-42897Microsoft Exchange Server Cross-Site Scripting Vulnerability
    Microsoft · MicrosoftKEVPublic exploitMedium · 6.1T1189Drive-by CompromiseT1059.007JavaScript
    70.7%Top 0.61%
    72.1priority
  20. CVE-2018-19953QNAP NAS File Station Cross-Site Scripting Vulnerability
    QNAP · Network Attached Storage (NAS)KEVRansomwareMedium · 6.1T1189Drive-by CompromiseT1059.007JavaScript
    30.5%Top 1.8%
    71.9priority
  21. CVE-2025-68461RoundCube Webmail Cross-site Scripting Vulnerability
    Roundcube · WebmailKEVPublic exploitMedium · 6.1T1204.001Malicious LinkT1059.007JavaScript
    27.4%Top 1.9%
    71.9priority
  22. CVE-2018-19943QNAP NAS File Station Cross-Site Scripting Vulnerability
    QNAP · Network Attached Storage (NAS)KEVRansomwareMedium · 5.4T1189Drive-by CompromiseT1059.007JavaScript
    22.7%Top 2.3%
    71.3priority
  23. CVE-2022-27926Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
    Synacor · Zimbra Collaboration Suite (ZCS)KEVPublic exploitMedium · 6.1T1189Drive-by CompromiseT1059.007JavaScript1 report
    17.6%Top 2.9%
    70.6priority
  24. CVE-2025-34028Commvault Command Center Path Traversal Vulnerability
    Commvault · Command CenterKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059.007JavaScript
    97.6%Top 0.1%
    70.0priority
  25. CVE-2014-7169GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
    GNU · Bourne-Again Shell (Bash)KEVPublic exploitCritical · 9.8T1133External Remote ServicesT1190Exploit Public-Facing Application+1 more
    99.9%Top 0.03%
    69.9priority
  26. CVE-2016-10033PHPMailer Command Injection Vulnerability
    PHP · PHPMailerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.004Unix Shell
    99.7%Top 0.05%
    69.9priority
  27. CVE-2022-44877CWP Control Web Panel OS Command Injection Vulnerability
    CWP · Control Web PanelKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.004Unix Shell
    >99.9%Top 0.01%
    69.9priority
  28. CVE-2025-25257Fortinet FortiWeb SQL Injection Vulnerability
    Fortinet · FortiWebKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.004Unix Shell+3 more
    99.9%Top 0.03%
    69.9priority
  29. CVE-2022-22963VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
    VMware Tanzu · Spring CloudKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.007JavaScript+1 more
    99.9%Top 0.03%
    69.9priority
  30. CVE-2021-36380Sunhillo SureLine OS Command Injection Vulnerablity
    Sunhillo · SureLineKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.004Unix Shell
    97.8%Top 0.09%
    69.8priority
  31. CVE-2010-3765Mozilla Multiple Products Remote Code Execution Vulnerability
    Mozilla · Multiple ProductsKEVPublic exploitCritical · 9.8T1059.007JavaScript
    83.2%Top 0.32%
    69.8priority
  32. CVE-2022-20699Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
    Cisco · Small Business RV160, RV260, RV340, and RV345 Series RoutersKEVPublic exploitCritical · 9.8T1133External Remote ServicesT1059.004Unix Shell
    72.5%Top 0.56%
    69.7priority
  33. CVE-2023-26360Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
    Adobe · ColdFusionKEVPublic exploitHigh · 8.6T1190Exploit Public-Facing ApplicationT1059.007JavaScript+7 more
    97.3%Top 0.1%
    69.0priority
  34. CVE-2023-39780ASUS RT-AX55 Routers OS Command Injection Vulnerability
    ASUS · RT-AX55 RoutersKEVPublic exploitHigh · 8.8T1588Obtain CapabilitiesT1078Valid Accounts+3 more
    39.5%Top 1.4%
    68.9priority
  35. CVE-2021-37975Google Chromium V8 Use-After-Free Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1059.007JavaScriptT1203Exploitation for Client Execution
    34.9%Top 1.6%
    68.8priority
  36. CVE-2021-21148Google Chromium V8 Heap Buffer Overflow Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1059.007JavaScriptT1203Exploitation for Client Execution
    20.0%Top 2.6%
    68.6priority
  37. CVE-2015-2419Microsoft Internet Explorer Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVPublic exploitEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1059.007JavaScript1 report
    53.0%Top 1%
    67.8priority
  38. CVE-2020-11023JQuery Cross-Site Scripting (XSS) Vulnerability
    JQuery · JQueryKEVPublic exploitMedium · 6.1T1204.001Malicious LinkT1059.007JavaScript+1 more
    84.9%Top 0.29%
    67.2priority
  39. CVE-2024-37383RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability
    Roundcube · WebmailKEVPublic exploitMedium · 6.1T1204.001Malicious LinkT1059.007JavaScript
    74.0%Top 0.52%
    67.2priority
  40. CVE-2023-37580Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
    Synacor · Zimbra Collaboration Suite (ZCS)KEVPublic exploitMedium · 6.1T1204.001Malicious LinkT1059.007JavaScript
    49.1%Top 1.1%
    67.0priority
  41. CVE-2024-27443Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
    Synacor · Zimbra Collaboration Suite (ZCS)KEVPublic exploitMedium · 6.1T1566.002Spearphishing LinkT1059.004Unix Shell+2 more
    24.6%Top 2.1%
    66.8priority
  42. CVE-2025-66376Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
    Synacor · Zimbra Collaboration Suite (ZCS)KEVMedium · 6.1T1566.001Spearphishing AttachmentT1059.007JavaScript
    20.2%Top 2.5%
    66.8priority
  43. CVE-2023-5631Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
    Roundcube · WebmailKEVPublic exploitMedium · 5.4T1204.001Malicious LinkT1059.007JavaScript+1 more
    76.3%Top 0.46%
    66.7priority
  44. CVE-2021-26829OpenPLC ScadaBR Cross-site Scripting Vulnerability
    OpenPLC · ScadaBRKEVPublic exploitMedium · 5.4T1059.007JavaScript
    48.0%Top 1.1%
    66.6priority
  45. CVE-2018-4990Adobe Acrobat and Reader Double Free Vulnerability
    Adobe · Acrobat and ReaderKEVHigh · 8.8T1059.007JavaScriptT1204.002Malicious File
    35.9%Top 1.5%
    63.9priority
  46. CVE-2021-21166Google Chromium Race Condition Vulnerability
    Google · ChromiumKEVHigh · 8.8T1059.007JavaScriptT1203Exploitation for Client Execution
    24.0%Top 2.2%
    63.7priority
  47. CVE-2022-20700Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
    Cisco · Small Business RV160, RV260, RV340, and RV345 Series RoutersKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.004Unix Shell
    5.7%Top 7%
    63.5priority
  48. CVE-2021-21206Google Chromium Blink Use-After-Free Vulnerability
    Google · Chromium BlinkKEVHigh · 8.8T1059.007JavaScriptT1203Exploitation for Client Execution
    9.3%Top 4.6%
    63.2priority
  49. CVE-2021-30554Google Chromium WebGL Use-After-Free Vulnerability
    Google · Chromium WebGLKEVHigh · 8.8T1059.007JavaScriptT1203Exploitation for Client Execution
    7.4%Top 5.6%
    63.0priority
  50. CVE-2023-44221SonicWall SMA100 Appliances OS Command Injection Vulnerability
    SonicWall · SMA100 AppliancesKEVHigh · 7.2T1059.004Unix ShellT1543Create or Modify System Process+2 more
    76.3%Top 0.46%
    62.9priority
  51. CVE-2025-48700Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
    Synacor · Zimbra Collaboration Suite (ZCS)KEVMedium · 6.1T1566.002Spearphishing LinkT1059.007JavaScript+1 more
    1.7%Top 23%
    62.7priority
  52. CVE-2014-2120Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
    Cisco · Adaptive Security Appliance (ASA)KEVMedium · 6.1T1204.001Malicious LinkT1059.007JavaScript
    22.6%Top 2.3%
    61.8priority
  53. CVE-2013-3346Adobe Reader and Acrobat Memory Corruption Vulnerability
    Adobe · Reader and AcrobatKEVPublic exploitEnd of lifeCritical · 9.8T1059.007JavaScript
    78.9%Top 0.41%
    54.8priority
  54. CVE-2013-3893Microsoft Internet Explorer Resource Management Errors Vulnerability
    Microsoft · Internet ExplorerKEVPublic exploitEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1059.007JavaScript
    87.6%Top 0.24%
    54.1priority
  55. CVE-2019-3708Cross-Site Scripting Vulnerability in OVA file upload feature
    Dell EMC · Dell EMC IsilonSD Management ServerHigh · 8.3T1204.001Malicious LinkT1059.007JavaScript+1 more
    2.2%Top 17%
    22.4priority
  56. CVE-2019-16784Local Privilege Escalation present only on the Windows version of PyInstaller
    PyInstaller · PyInstallerPublic exploitHigh · 7.0T1190Exploit Public-Facing ApplicationT1059.006Python+1 more
    0.7%Top 47%
    20.5priority
  57. CVE-2018-11059RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability
    Dell EMC · RSA ArcherHigh · 8.2T1189Drive-by CompromiseT1059.007JavaScript+1 more
    1.4%Top 28%
    20.1priority
  58. CVE-2019-18578Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability
    Dell · XtremIOCritical · 9.0T1189Drive-by CompromiseT1059.007JavaScript+1 more
    1.1%Top 34%
    19.6priority
  59. CVE-2020-11082Cross-Site Scripting in Kaminari
    kaminari · KaminariMedium · 6.4T1204.001Malicious LinkT1059.007JavaScript+1 more
    1.5%Top 25%
    19.5priority
  60. CVE-2020-11030Cross-site scripting (XSS) in Search block in WordPress
    WordPress · WordPressMedium · 6.4T1059.007JavaScriptT1557Adversary-in-the-Middle
    1.4%Top 27%
    19.1priority
  61. CVE-2018-11075DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities
    RSA · Authentication ManagerMedium · 5.8T1204.002Malicious FileT1059.007JavaScript+1 more
    1.5%Top 26%
    18.9priority
  62. CVE-2019-1941Cisco Identity Services Engine Cross-Site Scripting Vulnerability
    Cisco · Cisco Identity Services Engine SoftwareMedium · 6.1T1204.001Malicious LinkT1059.007JavaScript+1 more
    1.3%Top 30%
    18.2priority
  63. CVE-2018-11073DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities
    RSA · Authentication ManagerMedium · 6.5T1189Drive-by CompromiseT1059.007JavaScript+1 more
    1.1%Top 34%
    17.7priority
  64. CVE-2018-15393Cisco Content Security Management Appliance (SMA) Cross-Site Scripting Vulnerability
    Cisco · Cisco Content Security Management Appliance (SMA)Medium · 4.8T1204.001Malicious LinkT1059.007JavaScript+1 more
    1.2%Top 31%
    17.2priority
  65. CVE-2020-3121Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability
    Cisco · Cisco 550X Series Stackable Managed SwitchesMedium · 6.1T1204.001Malicious LinkT1059.007JavaScript+1 more
    1.1%Top 35%
    17.2priority
  66. CVE-2020-11036XSS in GLPI
    glpi-project · GLPIHigh · 7.6T1189Drive-by CompromiseT1059.007JavaScript+1 more
    0.8%Top 43%
    16.7priority
  67. CVE-2019-3754Dell EMC Unity Operating Environment versions prior to 5.0.0.0.5.116, Dell EMC UnityVSA versions prior to…
    DELL EMC · Unity Operating EnvironmentMedium · 4.7T1204.001Malicious LinkT1059.007JavaScript+1 more
    1.1%Top 34%
    16.5priority
  68. CVE-2019-1665Cisco Hyperflex Stored Cross-Site Scripting Vulnerability
    Cisco · Cisco HyperFlex HX-SeriesMedium · 4.7T1204.001Malicious LinkT1059.007JavaScript+1 more
    1.1%Top 35%
    16.4priority
  69. CVE-2020-3137Cisco Email Security Appliance Cross-Site Scripting Vulnerability
    Cisco · Cisco Email Security Appliance (ESA)Medium · 6.1T1204.001Malicious LinkT1059.007JavaScript+1 more
    0.8%Top 42%
    15.8priority
  70. CVE-2020-3356Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability
    Cisco · Cisco Data Center Network ManagerMedium · 6.1T1204.001Malicious LinkT1059.007JavaScript+1 more
    0.8%Top 43%
    15.6priority
  71. CVE-2019-1838Cisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting Vulnerability
    Cisco · Cisco Application Policy Infrastructure Controller (APIC)Medium · 5.4T1204.001Malicious LinkT1059.007JavaScript+1 more
    0.8%Top 43%
    15.2priority
  72. CVE-2019-15994Cisco Stealthwatch Enterprise Cross-Site Scripting Vulnerability
    Cisco · Cisco Stealthwatch EnterpriseMedium · 5.4T1204.001Malicious LinkT1059.007JavaScript+1 more
    0.8%Top 43%
    15.1priority
  73. CVE-2020-3233Cisco IOx Application Framework Local Manager Stored Cross-Site Scripting Vulnerability
    Cisco · Cisco IOxMedium · 6.4T1059.007JavaScriptT1557Adversary-in-the-Middle
    0.6%Top 50%
    14.5priority
  74. CVE-2020-5270Open redirection when using back parameter of PrestaShop
    PrestaShop · PrestaShopMedium · 4.1T1566.002Spearphishing LinkT1059.007JavaScript+3 more
    0.8%Top 42%
    14.4priority
  75. CVE-2020-5269Reflected XSS on AdminFeatures page of PrestaShop
    PrestaShop · PrestaShopMedium · 4.1T1204.001Malicious LinkT1059.007JavaScript+1 more
    0.8%Top 43%
    14.2priority
  76. CVE-2020-5271Reflected XSS with dashboard calendar of PrestaShop
    PrestaShop · PrestaShopMedium · 4.1T1204.001Malicious LinkT1059.007JavaScript+1 more
    0.8%Top 43%
    14.2priority
  77. CVE-2020-5264Reflected XSS in security compromised page of PrestaShop
    PrestaShop · PrestaShopMedium · 4.4T1204.001Malicious LinkT1059.007JavaScript+1 more
    0.8%Top 45%
    14.1priority
  78. CVE-2020-5336RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability
    Dell · RSA ArcherMedium · 4.6T1204.001Malicious LinkT1059.007JavaScript+1 more
    0.7%Top 47%
    13.9priority
  79. CVE-2020-5339RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…
    Dell · RSA Authentication ManagerMedium · 4.8T1189Drive-by CompromiseT1059.007JavaScript+1 more
    0.7%Top 48%
    13.7priority
  80. CVE-2020-5340RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…
    Dell · RSA Authentication ManagerMedium · 4.8T1189Drive-by CompromiseT1059.007JavaScript+1 more
    0.7%Top 48%
    13.7priority
  81. CVE-2019-15280Cisco Firepower Management Center Software Stored Cross-Site Scripting Vulnerability
    Cisco · Cisco Firepower Management CenterMedium · 4.8T1189Drive-by CompromiseT1059.007JavaScript+1 more
    0.6%Top 50%
    13.3priority
  82. CVE-2020-3349Cisco Data Center Network Manager Cross-Site Scripting Vulnerabilities
    Cisco · Cisco Data Center Network ManagerMedium · 4.8T1204.001Malicious LinkT1059.007JavaScript+1 more
    0.6%Top 50%
    13.3priority
  83. CVE-2020-5266Stored XSS on back office edit page
    PrestaShop · ps_linklistMedium · 4.4T1189Drive-by CompromiseT1059.007JavaScript+1 more
    0.6%Top 49%
    13.2priority
  84. CVE-2019-18571The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a…
    Dell · RSA Identity Governance & LifecycleMedium · 5.4T1204.002Malicious FileT1059.007JavaScript+1 more
    0.5%Top 57%
    12.4priority

Passages that support these links

First 40, from the highest-priority CVEs
↑ ↓ chooseEnter openEsc close