Patchfirst
Patchfirst
T1005Collection

Data from Local System

Adversaries may search local system sources, such as file systems, configuration files, local databases, virtual machine files, or process memory, to find files of interest and sensitive data prior to Exfiltration. Adversaries may do this using a Command and Scripting Interpreter, such as cmd as well as a Network Device CLI, which have functionality to interact with the file system to gather…

attack.mitre.org ↗
CVEs255
In 182
Reports1

Detections

14 Sigma rules tagged T1005
Data from Local SystemT100514 general rules
All 14 on SigmaHQ ↗

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

CVEs linked to Data from Local System

Top 150 of 255 by priority. Each link shows its badge.
  1. CVE-2020-5902F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability
    F5 · BIG-IPKEVRansomwarePublic exploitCritical · 9.8T1133External Remote ServicesT1190Exploit Public-Facing Application+5 more · 5 reports
    MITRE CTID mapping of the KEV entry · follow-on activity
    >99.9%Top 0.01%
    89.9priority
  2. CVE-2021-26855Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitCritical · 9.1T1133External Remote ServicesT1505.003Web Shell+2 more · 5 reports
    MITRE CTID mapping of the KEV entry · follow-on activity
    >99.9%Top 0.01%
    89.4priority
  3. CVE-2023-34362Progress MOVEit Transfer SQL Injection Vulnerability
    Progress · MOVEit TransferKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+5 more · 2 reports
    MITRE CTID mapping of the KEV entry · follow-on activity
    99.9%Top 0.03%
    86.0priority
  4. CVE-2023-38831RARLAB WinRAR Code Execution Vulnerability
    RARLAB · WinRARKEVRansomwarePublic exploitHigh · 7.8T1204User ExecutionT1053Scheduled Task/Job+5 more · 1 report
    MITRE CTID mapping of the KEV entry · follow-on activity
    99.8%Top 0.04%
    82.3priority
  5. CVE-2023-4966Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
    Citrix · NetScaler ADC and NetScaler GatewayKEVRansomwarePublic exploitHigh · 7.5T1574Hijack Execution FlowT1005Data from Local System1 report
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    82.1priority
  6. CVE-2026-20316Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
    Cisco · Secure Firewall Management Center (FMC)KEVRansomwareMedium · 5.3T1078Valid AccountsT1005Data from Local System1 report
    AI mapping from the description · primary impact
    35.1%Top 1.6%
    80.3priority
  7. CVE-2015-3306ProFTPD Improper Access Control Vulnerability
    ProFTPD · ProFTPDKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    99.5%Top 0.06%
    80.0priority
  8. CVE-2024-4040CrushFTP VFS Sandbox Escape Vulnerability
    CrushFTP · CrushFTPKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    99.5%Top 0.05%
    80.0priority
  9. CVE-2026-85706GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
    GitLab · Community Edition and Enterprise EditionKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    97.4%Top 0.1%
    80.0priority
  10. CVE-2017-5638Apache Struts Remote Code Execution Vulnerability
    Apache · StrutsKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    >99.9%Top 0.01%
    79.9priority
  11. CVE-2024-23897Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
    Jenkins · Jenkins Command Line Interface (CLI)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    >99.9%Top 0.01%
    79.9priority
  12. CVE-2017-18362Kaseya VSA SQL Injection Vulnerability
    Kaseya · Virtual System/Server Administrator (VSA)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    86.8%Top 0.26%
    79.8priority
  13. CVE-2019-7194QNAP Photo Station Path Traversal Vulnerability
    QNAP · Photo StationKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    82.7%Top 0.33%
    79.8priority
  14. CVE-2019-7195QNAP Photo Station Path Traversal Vulnerability
    QNAP · Photo StationKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    89.3%Top 0.22%
    79.8priority
  15. CVE-2024-23692Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
    Rejetto · HTTP File ServerKEVRansomwarePublic exploitCritical · 9.8T1082System Information DiscoveryT1005Data from Local System+2 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    99.5%Top 0.06%
    79.8priority
  16. CVE-2024-6670Progress WhatsUp Gold SQL Injection Vulnerability
    Progress · WhatsUp GoldKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    92.9%Top 0.17%
    79.8priority
  17. CVE-2026-111497Google Brotli Unchecked Return Value Vulnerability
    Google · BrotliKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+2 more
    AI mapping from the description · primary impact
    82.6%Top 0.33%
    79.8priority
  18. CVE-2023-49105ownCloud Improper Authentication Vulnerability
    ownCloud · ownCloudKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    AI mapping from the description · primary impact
    43.2%Top 1.3%
    79.6priority
  19. CVE-2024-41713Mitel MiCollab Path Traversal Vulnerability
    Mitel · MiCollabKEVRansomwarePublic exploitCritical · 9.1T1068Exploitation for Privilege EscalationT1005Data from Local System
    MITRE CTID mapping of the KEV entry · primary impact
    97.2%Top 0.1%
    79.3priority
  20. CVE-2026-102764BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
    BeyondTrust · Remote SupportKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    18.9%Top 2.7%
    79.3priority
  21. CVE-2024-24919Check Point Quantum Security Gateways Information Disclosure Vulnerability
    Check Point · Quantum Security GatewaysKEVRansomwarePublic exploitHigh · 8.6T1059.004Unix ShellT1202Indirect Command Execution+3 more
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.02%
    79.0priority
  22. CVE-2019-18426WhatsApp Cross-Site Scripting Vulnerability
    Meta Platforms · WhatsAppKEVPublic exploitHigh · 8.2T1204.001Malicious LinkT1059.007JavaScript+1 more
    AI mapping from the description · primary impact
    67.9%Top 0.68%
    78.6priority
  23. CVE-2021-20016SonicWall SSLVPN SMA100 SQL Injection Vulnerability
    SonicWall · SSLVPN SMA100KEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System1 report
    AI mapping from the description · primary impact
    40.0%Top 1.4%
    78.5priority
  24. CVE-2021-27101Accellion FTA SQL Injection Vulnerability
    Accellion · FTAKEVRansomwarePublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1005Data from Local System
    MITRE CTID mapping of the KEV entry · follow-on activity
    6.0%Top 6.7%
    78.5priority
  25. CVE-2020-28949PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
    PEAR · Archive_TarKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1005Data from Local System
    AI mapping from the description · primary impact
    84.6%Top 0.3%
    78.4priority
  26. CVE-2017-0147Microsoft Windows SMBv1 Information Disclosure Vulnerability
    Microsoft · SMBv1 serverKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    99.7%Top 0.05%
    78.2priority
  27. CVE-2019-7481SonicWall SMA100 SQL Injection Vulnerability
    SonicWall · SMA100KEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    99.9%Top 0.03%
    78.2priority
  28. CVE-2022-36537ZK Framework AuUploader Unspecified Vulnerability
    ZK Framework · AuUploaderKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    95.4%Top 0.13%
    78.2priority
  29. CVE-2023-36884Microsoft Windows Search Remote Code Execution Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.5T1566PhishingT1204.002Malicious File+5 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    99.4%Top 0.06%
    78.2priority
  30. CVE-2025-11371Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability
    Gladinet · CentreStack and TriofoxKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    92.1%Top 0.18%
    78.2priority
  31. CVE-2025-61884Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
    Oracle · E-Business SuiteKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    95.9%Top 0.13%
    78.2priority
  32. CVE-2026-21589Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
    Atlassian · Multiple ProductsKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    99.5%Top 0.06%
    78.2priority
  33. CVE-2010-1428Red Hat JBoss Information Disclosure Vulnerability
    Red Hat · JBossKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    52.7%Top 1%
    78.0priority
  34. CVE-2021-27876Veritas Backup Exec Agent File Access Vulnerability
    Veritas · Backup Exec AgentKEVRansomwarePublic exploitHigh · 8.1T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    13.5%Top 3.6%
    78.0priority
  35. CVE-2022-27925Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
    Synacor · Zimbra Collaboration Suite (ZCS)KEVRansomwarePublic exploitHigh · 7.2T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    98.7%Top 0.08%
    78.0priority
  36. CVE-2019-13608Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
    Citrix · StoreFront ServerKEVRansomwarePublic exploitHigh · 7.5T1078Valid AccountsT1059Command and Scripting Interpreter+3 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    30.0%Top 1.8%
    77.9priority
  37. CVE-2019-11634Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
    Citrix · Workspace Application and Receiver for WindowsKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+5 more · 1 report
    MITRE CTID mapping of the KEV entry · follow-on activity
    8.1%Top 5.2%
    77.7priority
  38. CVE-2018-2380SAP Customer Relationship Management (CRM) Path Traversal Vulnerability
    SAP · Customer Relationship Management (CRM)KEVRansomwarePublic exploitMedium · 6.6T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    28.9%Top 1.8%
    77.3priority
  39. CVE-2016-3351Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
    Microsoft · Internet Explorer and EdgeKEVRansomwarePublic exploitMedium · 6.5T1189Drive-by CompromiseT1005Data from Local System
    AI mapping from the description · primary impact
    26.5%Top 2%
    77.2priority
  40. CVE-2020-8195Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
    Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceKEVPublic exploitMedium · 6.5T1056Input CaptureT1082System Information Discovery+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    33.0%Top 1.6%
    77.2priority
  41. CVE-2019-5591Fortinet FortiOS Default Configuration Vulnerability
    Fortinet · FortiOSKEVRansomwarePublic exploitMedium · 6.5T1133External Remote ServicesT1557Adversary-in-the-Middle+1 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    18.6%Top 2.7%
    77.0priority
  42. CVE-2021-26085Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
    Atlassian · Confluence ServerKEVRansomwarePublic exploitMedium · 5.3T1190Exploit Public-Facing ApplicationT1005Data from Local System
    MITRE CTID mapping of the KEV entry · primary impact
    99.9%Top 0.03%
    76.7priority
  43. CVE-2016-4655Apple iOS Information Disclosure Vulnerability
    Apple · iOSKEVPublic exploitMedium · 5.5T1204.002Malicious FileT1005Data from Local System
    AI mapping from the description · primary impact
    33.4%Top 1.6%
    76.5priority
  44. CVE-2019-9670Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
    Synacor · Zimbra Collaboration Suite (ZCS)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System2 reports
    MITRE CTID mapping of the CVE · uncategorised
    >99.9%Top 0.02%
    76.0priority
  45. CVE-2020-8196Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
    Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceKEVPublic exploitMedium · 4.3T1056Input CaptureT1082System Information Discovery+1 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    26.3%Top 2%
    75.6priority
  46. CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
    Oracle · HTTP Server and Oracle Weblogic Server Proxy Plug-inKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    73.2%Top 0.54%
    74.9priority
  47. CVE-2026-34909Ubiquiti UniFi OS Path Traversal Vulnerability
    Ubiquiti · UniFi OSKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    68.0%Top 0.68%
    74.9priority
  48. CVE-2026-3055Citrix NetScaler Out-of-Bounds Read Vulnerability
    Citrix · NetScalerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    91.5%Top 0.19%
    74.8priority
  49. CVE-2026-42208BerriAI LiteLLM SQL Injection Vulnerability
    BerriAI · LiteLLMKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    AI mapping from the description · primary impact
    89.4%Top 0.21%
    74.8priority
  50. CVE-2021-27104Accellion FTA OS Command Injection Vulnerability
    Accellion · FTAKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    56.7%Top 0.94%
    74.7priority
  51. CVE-2025-14611Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability
    Gladinet · CentreStack and TriofoxKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    53.3%Top 1%
    74.7priority
  52. CVE-2025-58360OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability
    OSGeo · GeoServerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    61.2%Top 0.84%
    74.7priority
  53. CVE-2024-55550Mitel MiCollab Path Traversal Vulnerability
    Mitel · MiCollabKEVRansomwarePublic exploitLow · 2.7T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    38.2%Top 1.4%
    74.6priority
  54. CVE-2026-60137WordPress Core SQL Injection Vulnerability
    WordPress · CoreKEVPublic exploitMedium · 5.9T1190Exploit Public-Facing ApplicationT1005Data from Local System1 report
    AI mapping from the description · primary impact
    5.3%Top 7.4%
    74.5priority
  55. CVE-2024-40766SonicWall SonicOS Improper Access Control Vulnerability
    SonicWall · SonicOSKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    AI mapping from the description · primary impact
    18.4%Top 2.8%
    74.3priority
  56. CVE-2021-27103Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability
    Accellion · FTAKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    MITRE CTID mapping of the KEV entry · follow-on activity
    11.4%Top 4%
    74.1priority
  57. CVE-2025-68645Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
    Synacor · Zimbra Collaboration Suite (ZCS)KEVPublic exploitHigh · 8.8T1005Data from Local System
    AI mapping from the description · primary impact
    48.9%Top 1.1%
    73.9priority
  58. CVE-2026-67277MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
    MikroTik · RouterOSKEVPublic exploitHigh · 8.2T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    AI mapping from the description · primary impact
    1.6%Top 25%
    73.8priority
  59. CVE-2012-3152Oracle Fusion Middleware Unspecified Vulnerability
    Oracle · Fusion MiddlewareKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System1 report
    AI mapping from the description · primary impact
    98.8%Top 0.07%
    73.2priority
  60. CVE-2025-14847MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability
    MongoDB · MongoDB and MongoDB ServerKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    83.2%Top 0.32%
    73.2priority
  61. CVE-2026-1603Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
    Ivanti · Endpoint Manager (EPM)KEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    88.3%Top 0.23%
    73.2priority
  62. CVE-2020-3259Cisco ASA and FTD Information Disclosure Vulnerability
    Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVRansomwareHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    71.5%Top 0.59%
    73.1priority
  63. CVE-2024-21182Oracle WebLogic Server Unspecified Vulnerability
    Oracle · WebLogic ServerKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    74.2%Top 0.51%
    73.1priority
  64. CVE-2024-11667Zyxel Multiple Firewalls Path Traversal Vulnerability
    Zyxel · Multiple FirewallsKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    AI mapping from the description · primary impact
    2.9%Top 13%
    72.3priority
  65. CVE-2014-0160OpenSSL Information Disclosure Vulnerability
    OpenSSL · OpenSSLKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System1 report
    AI mapping from the description · primary impact
    >99.9%Top 0.01%
    72.1priority
  66. CVE-2018-0296Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
    Cisco · Adaptive Security Appliance (ASA)KEVPublic exploitHigh · 7.5T1005Data from Local System1 report
    MITRE CTID mapping of the KEV entry · primary impact
    99.9%Top 0.03%
    72.1priority
  67. CVE-2019-1653Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
    Cisco · Small Business RV320 and RV325 RoutersKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1082System Information Discovery+2 more · 1 report
    MITRE CTID mapping of the KEV entry · follow-on activity
    99.9%Top 0.04%
    72.1priority
  68. CVE-2023-21839Oracle WebLogic Server Unspecified Vulnerability
    Oracle · WebLogic ServerKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System1 report
    AI mapping from the description · primary impact
    99.9%Top 0.03%
    72.1priority
  69. CVE-2021-27102Accellion FTA OS Command Injection Vulnerability
    Accellion · FTAKEVRansomwareHigh · 7.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    3.7%Top 10%
    71.4priority
  70. CVE-2021-20023SonicWall Email Security Path Traversal Vulnerability
    SonicWall · SonicWall Email SecurityKEVRansomwareMedium · 4.9T1078Valid AccountsT1005Data from Local System
    AI mapping from the description · primary impact
    51.7%Top 1.1%
    71.2priority
  71. CVE-2013-3993IBM InfoSphere BigInsights Invalid Input Vulnerability
    IBM · InfoSphere BigInsightsKEVRansomwareMedium · 6.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    4.8%Top 8.1%
    70.9priority
  72. CVE-2026-20805Microsoft Windows Information Disclosure Vulnerability
    Microsoft · WindowsKEVPublic exploitMedium · 5.5T1078Valid AccountsT1005Data from Local System
    AI mapping from the description · primary impact
    7.5%Top 5.5%
    70.7priority
  73. CVE-2024-32113Apache OFBiz Path Traversal Vulnerability
    Apache · OFBizKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    99.9%Top 0.03%
    69.9priority
  74. CVE-2024-34102Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
    Adobe · Commerce and Magento Open SourceKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    >99.9%Top 0.01%
    69.9priority
  75. CVE-2024-4879ServiceNow Improper Input Validation Vulnerability
    ServiceNow · Utah, Vancouver, and Washington DC Now PlatformKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.02%
    69.9priority
  76. CVE-2025-24813Apache Tomcat Path Equivalence Vulnerability
    Apache · TomcatKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    99.9%Top 0.03%
    69.9priority
  77. CVE-2014-0780InduSoft Web Studio NTWebServer Directory Traversal Vulnerability
    InduSoft · Web StudioKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    74.7%Top 0.5%
    69.8priority
  78. CVE-2020-1938Apache Tomcat Improper Privilege Management Vulnerability
    Apache · TomcatKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    99.3%Top 0.06%
    69.8priority
  79. CVE-2024-0769D-Link DIR-859 Router Path Traversal Vulnerability
    D-Link · DIR-859 RouterKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    MITRE CTID mapping of the KEV entry · primary impact
    82.7%Top 0.33%
    69.8priority
  80. CVE-2024-5217ServiceNow Incomplete List of Disallowed Inputs Vulnerability
    ServiceNow · Utah, Vancouver, and Washington DC Now PlatformKEVPublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1005Data from Local System
    MITRE CTID mapping of the KEV entry · primary impact
    99.6%Top 0.05%
    69.8priority
  81. CVE-2019-19006Sangoma FreePBX Improper Authentication Vulnerability
    Sangoma · FreePBXKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    55.9%Top 0.95%
    69.7priority
  82. CVE-2025-2776SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
    SysAid · SysAid On-PremKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    64.7%Top 0.76%
    69.7priority
  83. CVE-2024-38475Apache HTTP Server Improper Escaping of Output Vulnerability
    Apache · HTTP ServerKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+2 more
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.02%
    69.4priority
  84. CVE-2024-8963Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
    Ivanti · Cloud Services Appliance (CSA)KEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    98.6%Top 0.08%
    69.4priority
  85. CVE-2024-9465Palo Alto Networks Expedition SQL Injection Vulnerability
    Palo Alto Networks · ExpeditionKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    99.6%Top 0.05%
    69.4priority
  86. CVE-2018-14847MikroTik Router OS Directory Traversal Vulnerability
    MikroTik · RouterOSKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    96.0%Top 0.13%
    69.3priority
  87. CVE-2024-28987SolarWinds Web Help Desk Hardcoded Credential Vulnerability
    SolarWinds · Web Help DeskKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    93.3%Top 0.16%
    69.3priority
  88. CVE-2024-8956PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability
    PTZOptics · PT30X-SDI/NDI CamerasKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    AI mapping from the description · primary impact
    58.8%Top 0.9%
    69.2priority
  89. CVE-2015-4495Mozilla Firefox Security Feature Bypass Vulnerability
    Mozilla · FirefoxKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1005Data from Local System
    AI mapping from the description · primary impact
    68.6%Top 0.66%
    69.0priority
  90. CVE-2024-48248NAKIVO Backup and Replication Absolute Path Traversal Vulnerability
    NAKIVO · Backup and ReplicationKEVPublic exploitHigh · 8.6T1190Exploit Public-Facing ApplicationT1003OS Credential Dumping+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    94.4%Top 0.15%
    69.0priority
  91. CVE-2013-6282Linux Kernel Improper Input Validation Vulnerability
    Linux · KernelKEVPublic exploitHigh · 8.8T1068Exploitation for Privilege EscalationT1005Data from Local System
    AI mapping from the description · primary impact
    39.7%Top 1.4%
    68.9priority
  92. CVE-2018-5430TIBCO JasperReports Server Information Disclosure Vulnerability
    TIBCO · JasperReportsKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    48.1%Top 1.1%
    68.9priority
  93. CVE-2022-38181Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
    Arm · Mali Graphics Processing Unit (GPU)KEVPublic exploitHigh · 8.8T1068Exploitation for Privilege EscalationT1005Data from Local System
    AI mapping from the description · primary impact
    18.5%Top 2.8%
    68.6priority
  94. CVE-2026-54420LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
    LiteSpeed · cPanel PluginKEVPublic exploitHigh · 8.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    1.4%Top 27%
    68.6priority
  95. CVE-2024-4978Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability
    Justice AV Solutions · Viewer KEVPublic exploitHigh · 8.4T1195.002Compromise Software Supply ChainT1005Data from Local System+2 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    26.9%Top 2%
    68.5priority
  96. CVE-2021-21551Dell dbutil Driver Insufficient Access Control Vulnerability
    Dell · dbutil DriverKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1005Data from Local System+1 more
    AI mapping from the description · primary impact
    79.6%Top 0.4%
    68.4priority
  97. CVE-2019-16256SIMalliance Toolbox Browser Command Injection Vulnerability
    SIMalliance · Toolbox BrowserKEVPublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1211Exploitation for Stealth+1 more
    AI mapping from the description · primary impact
    4.9%Top 7.8%
    68.3priority
  98. CVE-2015-3035TP-Link Multiple Archer Devices Directory Traversal Vulnerability
    TP-Link · Multiple Archer DevicesKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    83.9%Top 0.31%
    68.2priority
  99. CVE-2016-0752Ruby on Rails Directory Traversal Vulnerability
    Rails · Ruby on RailsKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    95.5%Top 0.13%
    68.2priority
  100. CVE-2016-6415Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
    Cisco · IOS, IOS XR, and IOS XEKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    87.7%Top 0.24%
    68.2priority
  101. CVE-2017-16651Roundcube Webmail File Disclosure Vulnerability
    Roundcube · Roundcube WebmailKEVPublic exploitHigh · 7.8T1078Valid AccountsT1005Data from Local System
    MITRE CTID mapping of the CVE · uncategorised
    45.7%Top 1.2%
    68.2priority
  102. CVE-2017-3506Oracle WebLogic Server OS Command Injection Vulnerability
    Oracle · WebLogic ServerKEVPublic exploitHigh · 7.4T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    96.0%Top 0.12%
    68.2priority
  103. CVE-2019-20085TVT NVMS-1000 Directory Traversal Vulnerability
    TVT · NVMS-1000KEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    96.1%Top 0.12%
    68.2priority
  104. CVE-2019-5418Rails Ruby on Rails Path Traversal Vulnerability
    Rails · Ruby on RailsKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    98.5%Top 0.08%
    68.2priority
  105. CVE-2020-11738WordPress Snap Creek Duplicator Plugin File Download Vulnerability
    WordPress · Snap Creek Duplicator PluginKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    97.8%Top 0.09%
    68.2priority
  106. CVE-2020-14864Oracle Business Intelligence Enterprise Edition Path Transversal
    Oracle · Intelligence Enterprise EditionKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    97.2%Top 0.1%
    68.2priority
  107. CVE-2020-17519Apache Flink Improper Access Control Vulnerability
    Apache · FlinkKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    98.0%Top 0.09%
    68.2priority
  108. CVE-2020-25078D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
    D-Link · DCS-2530L and DCS-2670L DevicesKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    97.5%Top 0.1%
    68.2priority
  109. CVE-2020-3452Cisco ASA and FTD Read-Only Path Traversal Vulnerability
    Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVPublic exploitHigh · 7.5T1005Data from Local System
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    68.2priority
  110. CVE-2020-5410VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
    VMware Tanzu · Spring Cloud Configuration (Config) ServerKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    95.6%Top 0.13%
    68.2priority
  111. CVE-2021-20123Draytek VigorConnect Path Traversal Vulnerability
    DrayTek · VigorConnectKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    89.7%Top 0.21%
    68.2priority
  112. CVE-2021-20124Draytek VigorConnect Path Traversal Vulnerability
    DrayTek · VigorConnectKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    95.9%Top 0.13%
    68.2priority
  113. CVE-2021-22054Omnissa Workspace ONE Server-Side Request Forgery
    Omnissa · Workspace One UEMKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    99.7%Top 0.05%
    68.2priority
  114. CVE-2021-41277Metabase GeoJSON API Local File Inclusion Vulnerability
    Metabase · MetabaseKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    97.2%Top 0.1%
    68.2priority
  115. CVE-2021-43798Grafana Path Traversal Vulnerability
    Grafana Labs · GrafanaKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    88.5%Top 0.23%
    68.2priority
  116. CVE-2023-38950ZKTeco BioTime Path Traversal Vulnerability
    ZKTeco · BioTimeKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    MITRE CTID mapping of the KEV entry · primary impact
    92.5%Top 0.18%
    68.2priority
  117. CVE-2023-49103ownCloud graphapi Information Disclosure Vulnerability
    ownCloud · ownCloud graphapiKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1552Unsecured Credentials+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    77.8%Top 0.43%
    68.2priority
  118. CVE-2024-20767Adobe ColdFusion Improper Access Control Vulnerability
    Adobe · ColdFusionKEVPublic exploitHigh · 7.4T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    98.5%Top 0.08%
    68.2priority
  119. CVE-2024-28995SolarWinds Serv-U Path Traversal Vulnerability
    SolarWinds · Serv-UKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    99.6%Top 0.05%
    68.2priority
  120. CVE-2025-31125Vite Vitejs Improper Access Control Vulnerability
    Vite · VitejsKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    74.9%Top 0.5%
    68.2priority
  121. CVE-2025-34026Versa Concerto Improper Authentication Vulnerability
    Versa · ConcertoKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1078Valid Accounts+1 more
    AI mapping from the description · primary impact
    81.8%Top 0.36%
    68.2priority
  122. CVE-2013-0629Adobe ColdFusion Directory Traversal Vulnerability
    Adobe · ColdFusionKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1202Indirect Command Execution+1 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    65.8%Top 0.73%
    68.1priority
  123. CVE-2021-33766Microsoft Exchange Server Information Disclosure
    Microsoft · Exchange ServerKEVPublic exploitHigh · 7.3T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    98.2%Top 0.09%
    68.1priority
  124. CVE-2014-0130Ruby on Rails Directory Traversal Vulnerability
    Rails · Ruby on RailsKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    53.7%Top 1%
    68.0priority
  125. CVE-2016-3976SAP NetWeaver Directory Traversal Vulnerability
    SAP · NetWeaverKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    47.3%Top 1.2%
    68.0priority
  126. CVE-2025-2775SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
    SysAid · SysAid On-PremKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    42.6%Top 1.3%
    68.0priority
  127. CVE-2026-20133Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
    Cisco · Catalyst SD-WAN ManagerKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    31.5%Top 1.7%
    67.9priority
  128. CVE-2020-5284Directory Traversal in Next.js versions below 9.3.2
    zeit · next.jsPublic exploitMedium · 4.4T1005Data from Local System
    MITRE CTID mapping of the CVE · primary impact
    44.8%Top 1.2%
    67.8priority
  129. CVE-2018-18809TIBCO JasperReports Library Directory Traversal Vulnerability
    TIBCO · JasperReportsKEVPublic exploitMedium · 6.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    79.1%Top 0.4%
    67.5priority
  130. CVE-2020-11652SaltStack Salt Path Traversal Vulnerability
    SaltStack · SaltKEVPublic exploitMedium · 6.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    MITRE CTID mapping of the CVE · uncategorised
    86.2%Top 0.27%
    67.5priority
  131. CVE-2020-8193Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
    Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceKEVPublic exploitMedium · 6.5T1556Modify Authentication ProcessT1005Data from Local System
    MITRE CTID mapping of the KEV entry · primary impact
    88.3%Top 0.23%
    67.5priority
  132. CVE-2025-22226VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
    VMware · ESXi, Workstation, and FusionKEVMedium · 6.0T1611Escape to HostT1005Data from Local System
    MITRE CTID mapping of the KEV entry · primary impact
    1.6%Top 24%
    67.4priority
  133. CVE-2017-0022Microsoft XML Core Services Information Disclosure Vulnerability
    Microsoft · XML Core ServicesKEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1005Data from Local System
    AI mapping from the description · primary impact
    18.1%Top 2.8%
    67.0priority
  134. CVE-2021-37976Google Chromium Information Disclosure Vulnerability
    Google · ChromiumKEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1005Data from Local System
    AI mapping from the description · primary impact
    19.9%Top 2.6%
    67.0priority
  135. CVE-2025-68686Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
    Fortinet · FortiOSKEVMedium · 5.9T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    29.5%Top 1.8%
    66.8priority
  136. CVE-2021-26086Atlassian Jira Server and Data Center Path Traversal Vulnerability
    Atlassian · Jira Server and Data CenterKEVPublic exploitMedium · 5.3T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    >99.9%Top 0.01%
    66.7priority
  137. CVE-2023-23752Joomla! Improper Access Control Vulnerability
    Joomla! · Joomla!KEVPublic exploitMedium · 5.3T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    99.8%Top 0.04%
    66.7priority
  138. CVE-2016-2388SAP NetWeaver Information Disclosure Vulnerability
    SAP · NetWeaverKEVPublic exploitMedium · 5.3T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    52.2%Top 1%
    66.5priority
  139. CVE-2013-1675Mozilla Firefox Information Disclosure Vulnerability
    Mozilla · FirefoxKEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1005Data from Local System
    AI mapping from the description · primary impact
    6.7%Top 6.1%
    66.3priority
  140. CVE-2020-27950Apple Multiple Products Memory Initialization Vulnerability
    Apple · Multiple ProductsKEVPublic exploitMedium · 5.5T1204.002Malicious FileT1005Data from Local System
    AI mapping from the description · primary impact
    16.5%Top 3%
    66.2priority
  141. CVE-2026-55255Langflow Authorization Bypass Through User-Controlled Key Vulnerability
    Langflow · LangflowKEVPublic exploitHigh · 8.4T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    0.9%Top 41%
    65.7priority
  142. CVE-2013-3896Microsoft Silverlight Information Disclosure Vulnerability
    Microsoft · SilverlightKEVPublic exploitEnd of lifeMedium · 5.5T1189Drive-by CompromiseT1005Data from Local System1 report
    AI mapping from the description · primary impact
    68.0%Top 0.68%
    65.6priority
  143. CVE-2023-45727North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability
    North Grid · ProselfKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System1 report
    AI mapping from the description · primary impact
    4.8%Top 8%
    65.5priority
  144. CVE-2021-25337Samsung Mobile Devices Improper Access Control Vulnerability
    Samsung · Mobile DevicesKEVPublic exploitHigh · 7.1T1204.002Malicious FileT1005Data from Local System
    AI mapping from the description · primary impact
    2.8%Top 14%
    65.3priority
  145. CVE-2020-9934Apple iOS, iPadOS, and macOS Input Validation Vulnerability
    Apple · iOS, iPadOS, and macOSKEVPublic exploitMedium · 5.5T1068Exploitation for Privilege EscalationT1005Data from Local System
    AI mapping from the description · primary impact
    3.2%Top 12%
    64.5priority
  146. CVE-2015-4068Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability
    Arcserve · Unified Data Protection (UDP)KEVCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    AI mapping from the description · primary impact
    63.6%Top 0.79%
    64.2priority
  147. CVE-2020-1631Juniper Junos OS Path Traversal Vulnerability
    Juniper · Junos OSKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    4.9%Top 8%
    63.3priority
  148. CVE-2021-44207Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability
    Acclaim Systems · USAHERDSKEVHigh · 8.1T1078Valid AccountsT1005Data from Local System
    AI mapping from the description · primary impact
    17.6%Top 2.9%
    63.1priority
  149. CVE-2015-0666Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
    Cisco · Prime Data Center Network Manager (DCNM)KEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    40.4%Top 1.4%
    63.0priority
  150. CVE-2021-22506Micro Focus Access Manager Information Leakage Vulnerability
    Micro Focus · Micro Focus Access ManagerKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    AI mapping from the description · primary impact
    25.7%Top 2%
    62.8priority

Passages that support these links

First 40, from the highest-priority CVEs
↑ ↓ chooseEnter openEsc close