Patchfirst
T1499.004Impact

Application or System Exploitation

Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users. Some systems may automatically restart critical applications and services when crashes occur, but they can likely be re-exploited to cause a persistent denial of service (DoS) condition. Adversaries may exploit known or zero-day vulnerabilities to crash applications…

attack.mitre.org ↗
CVEs146
In 84
Reports1

Detections

3 Sigma rules tagged T1499.004
Application or System ExploitationT1499.0043 general rules

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

CVEs linked to Application or System Exploitation

146 CVEs, by priority. Each link shows its badge.
  1. CVE-2012-0507Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
    Oracle · Java SEKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1211Exploitation for Stealth+1 more · 2 reports
    AI mapping from the description · primary impact
    98.2%Top 0.09%
    86.0priority
  2. CVE-2017-10271Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
    Oracle · WebLogic ServerKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation2 reports
    AI mapping from the description · primary impact
    >99.9%Top 0.01%
    84.4priority
  3. CVE-2015-2291Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability
    Intel · Ethernet Diagnostics Driver for WindowsKEVRansomwarePublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation+1 more · 1 report
    AI mapping from the description · primary impact
    15.7%Top 3.1%
    81.7priority
  4. CVE-2021-45105Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
    Apache Software Foundation · Apache Log4j2Public exploitMedium · 5.9T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation1 report
    AI mapping from the description · primary impact
    >99.9%Top 0.01%
    81.0priority
  5. CVE-2019-5544VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
    VMware · VMware ESXi and Horizon DaaSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    98.1%Top 0.09%
    79.8priority
  6. CVE-2026-111497Google Brotli Unchecked Return Value Vulnerability
    Google · BrotliKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+2 more
    AI mapping from the description · primary impact
    82.6%Top 0.33%
    79.8priority
  7. CVE-2016-7200Microsoft Edge Memory Corruption Vulnerability
    AI mapping from the description · primary impact
    82.8%Top 0.33%
    79.1priority
  8. CVE-2016-7201Microsoft Edge Memory Corruption Vulnerability
    Microsoft · EdgeKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more
    AI mapping from the description · primary impact
    80.0%Top 0.39%
    79.1priority
  9. CVE-2025-20362Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization…
    Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseKEVPublic exploitHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation5 reports
    AI mapping from the description · primary impact
    87.1%Top 0.25%
    79.0priority
  10. CVE-2023-29552Service Location Protocol (SLP) Denial-of-Service Vulnerability
    IETF · Service Location Protocol (SLP)KEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    64.0%Top 0.78%
    78.1priority
  11. CVE-2015-3105Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before…
    AI mapping from the description · primary impact
    90.1%Top 0.2%
    77.9priority
  12. CVE-2012-1889Microsoft XML Core Services Memory Corruption Vulnerability
    Microsoft · XML Core ServicesKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 more · 3 reports
    AI mapping from the description · primary impact
    83.5%Top 0.32%
    76.8priority
  13. CVE-2018-0171Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
    Cisco · IOS and IOS XEKEVPublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services+1 more · 2 reports
    AI mapping from the description · primary impact
    99.5%Top 0.06%
    76.0priority
  14. CVE-2020-5135SonicWall SonicOS Buffer Overflow Vulnerability
    SonicWall · SonicOSKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    26.9%Top 2%
    74.5priority
  15. CVE-2024-40766SonicWall SonicOS Improper Access Control Vulnerability
    SonicWall · SonicOSKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    AI mapping from the description · primary impact
    18.4%Top 2.8%
    74.3priority
  16. CVE-2026-67277MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
    MikroTik · RouterOSKEVPublic exploitHigh · 8.2T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    AI mapping from the description · primary impact
    1.6%Top 25%
    73.8priority
  17. CVE-2017-3881Cisco IOS and IOS XE Remote Code Execution Vulnerability
    Cisco · IOS and IOS XEKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more · 1 report
    AI mapping from the description · primary impact
    99.0%Top 0.07%
    73.7priority
  18. CVE-2017-6736Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVPublic exploitHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter+1 more · 1 report
    AI mapping from the description · primary impact
    70.4%Top 0.62%
    72.9priority
  19. CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer…
    Citrix · NetScaler ADC and NetScaler GatewayKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    1.0%Top 37%
    72.5priority
  20. CVE-2018-13383Fortinet FortiOS and FortiProxy Out-of-bounds Write
    Fortinet · FortiOS and FortiProxyKEVRansomwareMedium · 6.5T1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    32.5%Top 1.7%
    72.2priority
  21. CVE-2025-39964Linux Kernel Race Condition Vulnerability
    AI mapping from the description · primary impact
    1.6%Top 25%
    71.9priority
  22. CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection…
    Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) KEVPublic exploitHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    1.0%Top 37%
    71.6priority
  23. CVE-2020-14871Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
    Oracle · Solaris and Zettabyte File System (ZFS)KEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation+1 more
    AI mapping from the description · primary impact
    80.2%Top 0.38%
    69.9priority
  24. CVE-2020-3161Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
    Cisco · Cisco IP PhonesKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    83.9%Top 0.31%
    69.8priority
  25. CVE-2014-3931Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability
    Looking Glass · Multi-Router Looking Glass (MRLG)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    29.0%Top 1.8%
    69.5priority
  26. CVE-2016-1646Google Chromium V8 Out-of-Bounds Read Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    48.1%Top 1.1%
    68.9priority
  27. CVE-2015-5122Adobe Flash Player Use-After-Free Vulnerability
    Adobe · Flash PlayerKEVPublic exploitEnd of lifeCritical · 9.8T1059Command and Scripting InterpreterT1499.004Application or System Exploitation1 report
    AI mapping from the description · primary impact
    87.0%Top 0.25%
    68.7priority
  28. CVE-2021-21551Dell dbutil Driver Insufficient Access Control Vulnerability
    Dell · dbutil DriverKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1005Data from Local System+1 more
    AI mapping from the description · primary impact
    79.6%Top 0.4%
    68.4priority
  29. CVE-2021-22555Linux Kernel Heap Out-of-Bounds Write Vulnerability
    AI mapping from the description · primary impact
    78.7%Top 0.41%
    68.4priority
  30. CVE-2011-0609Adobe Flash Player Unspecified Vulnerability
    Adobe · Flash PlayerKEVPublic exploitHigh · 7.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more
    AI mapping from the description · primary impact
    63.5%Top 0.79%
    68.3priority
  31. CVE-2025-27363FreeType Out-of-Bounds Write Vulnerability
    FreeType · FreeTypeKEVPublic exploitHigh · 8.1T1574Hijack Execution FlowT1499.004Application or System Exploitation
    MITRE CTID mapping of the KEV entry · follow-on activity
    27.8%Top 1.9%
    68.3priority
  32. CVE-2015-5477ISC BIND Data Processing Errors Vulnerability
    AI mapping from the description · primary impact
    99.6%Top 0.05%
    68.2priority
  33. CVE-2006-1547Apache Struts 1 ActionForm Denial-of-Service Vulnerability
    AI mapping from the description · primary impact
    54.6%Top 0.98%
    68.1priority
  34. CVE-2015-2424Microsoft PowerPoint Memory Corruption Vulnerability
    Microsoft · PowerPointKEVHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution+1 more · 1 report
    AI mapping from the description · primary impact
    40.1%Top 1.4%
    67.8priority
  35. CVE-2019-5786Google Chrome Blink Use-After-Free Vulnerability
    Google · Chrome BlinkKEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    61.1%Top 0.84%
    67.4priority
  36. CVE-2019-5825Google Chromium V8 Out-of-Bounds Write Vulnerability
    Google · Chromium V8KEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    55.9%Top 0.95%
    67.4priority
  37. CVE-2016-0034Microsoft Silverlight Runtime Remote Code Execution Vulnerability
    Microsoft · SilverlightKEVRansomwareEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 more · 3 reports
    MITRE CTID mapping of the CVE · uncategorised
    69.4%Top 0.64%
    66.8priority
  38. CVE-2020-11899Treck TCP/IP stack Out-of-Bounds Read Vulnerability
    Treck TCP/IP stack · IPv6KEVPublic exploitMedium · 5.4T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    18.4%Top 2.8%
    66.2priority
  39. CVE-2026-21525Microsoft Windows NULL Pointer Dereference Vulnerability
    AI mapping from the description · primary impact
    4.9%Top 8%
    65.7priority
  40. CVE-2015-3090Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before…
    AI mapping from the description · primary impact
    83.2%Top 0.32%
    65.4priority
  41. CVE-2015-5374A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions <…
    AI mapping from the description · primary impact
    74.5%Top 0.51%
    65.4priority
  42. CVE-2018-0125Cisco VPN Routers Remote Code Execution Vulnerability
    AI mapping from the description · primary impact
    55.2%Top 0.97%
    64.7priority
  43. CVE-2021-22991F5 BIG-IP Traffic Management Microkernel Buffer Overflow
    F5 · BIG-IP Traffic Management MicrokernelKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    62.4%Top 0.82%
    64.7priority
  44. CVE-2023-33009Zyxel Multiple Firewalls Buffer Overflow Vulnerability
    Zyxel · Multiple FirewallsKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    28.1%Top 1.9%
    64.5priority
  45. CVE-2023-33010Zyxel Multiple Firewalls Buffer Overflow Vulnerability
    Zyxel · Multiple FirewallsKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    29.0%Top 1.8%
    64.5priority
  46. CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference…
    Cisco · Secure Firewall ASA Software and Cisco Secure FTD SoftwareKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    0.9%Top 40%
    64.4priority
  47. CVE-2015-4068Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability
    Arcserve · Unified Data Protection (UDP)KEVCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    AI mapping from the description · primary impact
    63.6%Top 0.79%
    64.2priority
  48. CVE-2017-12240Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    13.8%Top 3.5%
    64.2priority
  49. CVE-2017-6737Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    45.0%Top 1.2%
    63.9priority
  50. CVE-2017-6739Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    10.9%Top 4.1%
    63.3priority
  51. CVE-2017-6740Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    11.1%Top 4.1%
    63.3priority
  52. CVE-2017-6743Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    10.9%Top 4.1%
    63.3priority
  53. CVE-2017-6744Cisco IOS Software SNMP Remote Code Execution Vulnerability
    AI mapping from the description · primary impact
    7.3%Top 5.6%
    63.0priority
  54. CVE-2018-0172Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
    AI mapping from the description · primary impact
    7.8%Top 5.3%
    63.0priority
  55. CVE-2016-4523Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
    AI mapping from the description · primary impact
    31.2%Top 1.7%
    62.9priority
  56. CVE-2018-0155Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
    Cisco · Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series SwitchesKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    7.7%Top 5.4%
    62.9priority
  57. CVE-2018-0173Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
    AI mapping from the description · primary impact
    7.6%Top 5.5%
    62.9priority
  58. CVE-2018-0174Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
    AI mapping from the description · primary impact
    7.6%Top 5.5%
    62.9priority
  59. CVE-2024-3393Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
    AI mapping from the description · primary impact
    29.1%Top 1.8%
    62.9priority
  60. CVE-2023-4346KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism…
    KNX Association · KNX Protocol Connection Authorization Option 1KEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    1.4%Top 28%
    62.6priority
  61. CVE-2018-0156Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
    Cisco · IOS Software and Cisco IOS XE SoftwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    9.4%Top 4.6%
    62.3priority
  62. CVE-2017-12231Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability
    AI mapping from the description · primary impact
    7.1%Top 5.8%
    62.1priority
  63. CVE-2017-12233Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
    AI mapping from the description · primary impact
    7.1%Top 5.8%
    62.1priority
  64. CVE-2017-12234Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
    AI mapping from the description · primary impact
    7.1%Top 5.8%
    62.1priority
  65. CVE-2017-12235Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
    AI mapping from the description · primary impact
    7.1%Top 5.8%
    62.1priority
  66. CVE-2018-0159Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
    Cisco · IOS Software and Cisco IOS XE SoftwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    6.9%Top 6%
    62.1priority
  67. CVE-2020-3566Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
    AI mapping from the description · primary impact
    3.7%Top 10%
    62.0priority
  68. CVE-2018-0167Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
    Cisco · IOS, XR, and XE SoftwareKEVHigh · 8.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services+1 more
    AI mapping from the description · primary impact
    3.4%Top 11%
    61.9priority
  69. CVE-2010-3035Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
    AI mapping from the description · primary impact
    5.7%Top 7%
    61.8priority
  70. CVE-2024-20481Cisco ASA and FTD Denial-of-Service Vulnerability
    Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVMedium · 5.8T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    15.9%Top 3.1%
    61.4priority
  71. CVE-2016-8562Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability
    AI mapping from the description · primary impact
    3.6%Top 11%
    61.1priority
  72. CVE-2014-1776Microsoft Internet Explorer Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVPublic exploitEnd of lifeCritical · 9.8T1059Command and Scripting InterpreterT1499.004Application or System Exploitation2 reports
    AI mapping from the description · primary impact
    82.7%Top 0.33%
    60.9priority
  73. CVE-2015-3043Adobe Flash Player Memory Corruption Vulnerability
    Adobe · Flash PlayerKEVPublic exploitEnd of lifeCritical · 9.8T1499.004Application or System Exploitation2 reports
    MITRE CTID mapping of the KEV entry · primary impact
    73.9%Top 0.52%
    60.9priority
  74. CVE-2020-9818Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
    Apple · iOS, iPadOS, and watchOSKEVHigh · 8.8T1204.001Malicious LinkT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    2.3%Top 16%
    60.9priority
  75. CVE-2017-12319Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
    AI mapping from the description · primary impact
    5.2%Top 7.5%
    60.6priority
  76. CVE-2018-0161Cisco IOS Software Resource Management Errors Vulnerability
    AI mapping from the description · primary impact
    4.1%Top 9.2%
    60.6priority
  77. CVE-2018-0180Cisco IOS Software Denial-of-Service Vulnerability
    AI mapping from the description · primary impact
    4.9%Top 7.9%
    60.6priority
  78. CVE-2009-2055Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
    AI mapping from the description · primary impact
    3.3%Top 11%
    59.8priority
  79. CVE-2021-27562Arm Trusted Firmware Out-of-Bounds Write Vulnerability
    AI mapping from the description · primary impact
    3.1%Top 12%
    59.4priority
  80. CVE-2025-43520Apple Multiple Products Classic Buffer Overflow Vulnerability
    Apple · Multiple ProductsKEVPublic exploitMedium · 5.5T1204.002Malicious FileT1068Exploitation for Privilege Escalation+1 more
    AI mapping from the description · primary impact
    0.4%Top 63%
    59.2priority
  81. CVE-2017-12232Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
    AI mapping from the description · primary impact
    2.2%Top 18%
    59.0priority
  82. CVE-2017-6663Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
    AI mapping from the description · primary impact
    2.1%Top 18%
    58.9priority
  83. CVE-2013-3897Microsoft Internet Explorer Use-After-Free Vulnerability
    Microsoft · Internet ExplorerKEVPublic exploitEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    77.3%Top 0.44%
    54.1priority
  84. CVE-2015-2502Microsoft Internet Explorer Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVPublic exploitEnd of lifeHigh · 8.8T1203Exploitation for Client ExecutionT1499.004Application or System Exploitation
    AI mapping from the description · primary impact
    51.0%Top 1.1%
    53.9priority
  85. CVE-2021-25370Samsung Mobile Devices Memory Corruption Vulnerability
    AI mapping from the description · primary impact
    0.9%Top 41%
    52.9priority
  86. CVE-2021-25489Samsung Mobile Devices Improper Input Validation Vulnerability
    AI mapping from the description · primary impact
    0.5%Top 55%
    50.8priority
  87. CVE-2015-5123Adobe Flash Player Use-After-Free Vulnerability
    AI mapping from the description · primary impact
    18.8%Top 2.7%
    49.3priority
  88. CVE-2017-0149Microsoft Internet Explorer Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more
    AI mapping from the description · primary impact
    29.2%Top 1.8%
    48.8priority
  89. CVE-2019-15276Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability
    Cisco · Cisco Wireless LAN Controller (WLC)Public exploitHigh · 7.7T1190Exploit Public-Facing ApplicationT1566Phishing+1 more
    MITRE CTID mapping of the CVE · primary impact
    46.3%Top 1.2%
    30.2priority
  90. CVE-2020-3198Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities
    Cisco · Cisco IOS 12.2(60)EZ16Critical · 9.8T1133External Remote ServicesT1190Exploit Public-Facing Application+3 more
    MITRE CTID mapping of the CVE · primary impact
    4.6%Top 8.4%
    25.2priority
  91. CVE-2018-8353A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in…
    MITRE CTID mapping of the CVE · primary impact
    67.3%Top 0.7%
    24.9priority
  92. CVE-2018-8355A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…
    Microsoft · ChakraCorePublic exploitT1189Drive-by CompromiseT1204.002Malicious File+6 more
    MITRE CTID mapping of the CVE · primary impact
    67.9%Top 0.68%
    24.9priority
  93. CVE-2022-22719mod_lua Use of uninitialized value of in r:parsebody
    Apache Software Foundation · Apache HTTP ServerT1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation1 report
    AI mapping from the description · primary impact
    69.1%Top 0.65%
    24.8priority
  94. CVE-2019-1118A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite…
    Microsoft · WindowsPublic exploitT1189Drive-by CompromiseT1204.002Malicious File+6 more
    MITRE CTID mapping of the CVE · primary impact
    23.6%Top 2.2%
    24.6priority
  95. CVE-2020-11019Out of bound read in update_recv in FreeRDP
    FreeRDP · FreeRDPPublic exploitMedium · 4.3T1211Exploitation for StealthT1005Data from Local System+1 more
    MITRE CTID mapping of the CVE · primary impact
    2.3%Top 17%
    24.6priority
  96. CVE-2020-16874Visual Studio Remote Code Execution Vulnerability
    Microsoft · Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)High · 7.8T1204.002Malicious FileT1574Hijack Execution Flow+5 more
    MITRE CTID mapping of the CVE · primary impact
    4.3%Top 8.9%
    24.4priority
  97. CVE-2020-1569Microsoft Edge Memory Corruption Vulnerability
    Microsoft · Microsoft Edge (EdgeHTML-based)High · 7.8T1566PhishingT1204.002Malicious File+6 more
    MITRE CTID mapping of the CVE · primary impact
    3.0%Top 13%
    23.6priority
  98. CVE-2020-3292Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities
    Cisco · Cisco Small Business RV Series Router FirmwareHigh · 7.2T1078Valid AccountsT1190Exploit Public-Facing Application+2 more
    MITRE CTID mapping of the CVE · primary impact
    3.2%Top 12%
    22.7priority
  99. CVE-2020-11090Uncontrolled Resource Consumption in Indy Node
    Hyperledger · Indy NodeHigh · 7.5T1499.004Application or System Exploitation
    MITRE CTID mapping of the CVE · primary impact
    2.2%Top 18%
    21.7priority
  100. CVE-2020-3397Cisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service Vulnerability
    MITRE CTID mapping of the CVE · primary impact
    1.8%Top 21%
    21.7priority
  101. CVE-2020-3407Cisco IOS XE Software RESTCONF and NETCONF-YANG Access Control List Denial of Service Vulnerability
    MITRE CTID mapping of the CVE · primary impact
    1.5%Top 26%
    20.9priority
  102. CVE-2020-3510Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability
    MITRE CTID mapping of the CVE · primary impact
    1.4%Top 28%
    20.4priority
  103. CVE-2019-0609A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…
    Microsoft · Internet Explorer 11T1566PhishingT1204.002Malicious File+6 more
    MITRE CTID mapping of the CVE · primary impact
    9.8%Top 4.4%
    19.8priority
  104. CVE-2019-6538Medtronic Conexus Radio Frequency Telemetry Protocol Improper Access Control
    Medtronic · Conexus Radio Frequency Telemetry ProtocolCritical · 9.3T1574Hijack Execution FlowT1557Adversary-in-the-Middle+2 more
    MITRE CTID mapping of the CVE · primary impact
    0.9%Top 40%
    19.8priority
  105. CVE-2020-1425A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in…
    Microsoft · Windows 10 Version 2004 for x64-based SystemsT1574Hijack Execution FlowT1499.004Application or System Exploitation
    MITRE CTID mapping of the CVE · primary impact
    9.3%Top 4.6%
    19.8priority
  106. CVE-2019-1052Chakra Scripting Engine Memory Corruption Vulnerability
    Microsoft · Microsoft Edge (EdgeHTML-based)Medium · 4.2T1189Drive-by CompromiseT1203Exploitation for Client Execution+2 more
    MITRE CTID mapping of the CVE · primary impact
    2.4%Top 16%
    19.7priority
  107. CVE-2019-15289Cisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service Vulnerabilities
    MITRE CTID mapping of the CVE · primary impact
    1.4%Top 28%
    19.6priority
  108. CVE-2018-8248A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle…
    Microsoft · Microsoft OfficeT1189Drive-by CompromiseT1204.002Malicious File+6 more
    MITRE CTID mapping of the CVE · primary impact
    21.4%Top 2.4%
    19.5priority
  109. CVE-2018-8110A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft…
    Microsoft · Microsoft EdgeT1566PhishingT1204.002Malicious File+6 more
    MITRE CTID mapping of the CVE · primary impact
    16.9%Top 2.9%
    19.4priority
  110. CVE-2018-8111A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft…
    Microsoft · Microsoft EdgeT1566PhishingT1204.002Malicious File+6 more
    MITRE CTID mapping of the CVE · primary impact
    16.9%Top 2.9%
    19.4priority
  111. CVE-2019-0576A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in…
    MITRE CTID mapping of the CVE · primary impact
    17.0%Top 2.9%
    19.4priority
  112. CVE-2019-1035Microsoft Word Remote Code Execution Vulnerability
    Microsoft · Microsoft SharePoint Server 2019T1203Exploitation for Client ExecutionT1204.002Malicious File+2 more
    MITRE CTID mapping of the CVE · primary impact
    6.6%Top 6.2%
    19.4priority
  113. CVE-2018-10636CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow…
    MITRE CTID mapping of the CVE · primary impact
    9.4%Top 4.6%
    19.1priority
  114. CVE-2019-0911A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…
    Microsoft · Internet Explorer 11T1189Drive-by CompromiseT1204.002Malicious File+2 more
    MITRE CTID mapping of the CVE · primary impact
    9.1%Top 4.7%
    19.1priority
  115. CVE-2019-1106A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in…
    MITRE CTID mapping of the CVE · primary impact
    9.2%Top 4.7%
    19.1priority
  116. CVE-2019-0926A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft…
    MITRE CTID mapping of the CVE · primary impact
    8.1%Top 5.2%
    19.0priority
  117. CVE-2020-11039Integer Overflow in FreeRDP
    FreeRDP · FreeRDPHigh · 8.0T1574Hijack Execution FlowT1005Data from Local System+1 more
    MITRE CTID mapping of the CVE · primary impact
    1.1%Top 34%
    18.9priority
  118. CVE-2020-1495Microsoft Excel Remote Code Execution Vulnerability
    Microsoft · Microsoft SharePoint Server 2010 Service Pack 2T1566PhishingT1204.002Malicious File+6 more
    MITRE CTID mapping of the CVE · primary impact
    4.2%Top 9%
    18.9priority
  119. CVE-2020-4068Heap-based Buffer Overflow in APNSwift
    MITRE CTID mapping of the CVE · primary impact
    1.3%Top 29%
    18.6priority
  120. CVE-2018-7499In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard…
    MITRE CTID mapping of the CVE · primary impact
    3.7%Top 10%
    18.0priority
  121. CVE-2020-1109Windows Update Stack Elevation of Privilege Vulnerability
    Microsoft · Windows 10 Version 1709High · 7.8T1574Hijack Execution FlowT1136Create Account+4 more
    MITRE CTID mapping of the CVE · primary impact
    1.0%Top 37%
    18.0priority
  122. CVE-2019-1594Cisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service Vulnerability
    Cisco · Nexus 1000V Switch for VMware vSphereHigh · 7.4T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    MITRE CTID mapping of the CVE · primary impact
    0.8%Top 43%
    17.9priority
  123. CVE-2018-18987VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file…
    MITRE CTID mapping of the CVE · follow-on activity
    3.2%Top 12%
    17.6priority
  124. CVE-2018-7494WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where a value larger than…
    MITRE CTID mapping of the CVE · primary impact
    2.7%Top 14%
    17.2priority
  125. CVE-2018-14809Fuji Electric V-Server 4.0.3.0 and prior, A use after free vulnerability has been identified, which may allow remote…
    MITRE CTID mapping of the CVE · primary impact
    2.7%Top 14%
    17.1priority
  126. CVE-2020-15208Data corruption in tensorflow-lite
    MITRE CTID mapping of the CVE · primary impact
    0.9%Top 40%
    17.1priority
  127. CVE-2019-6522Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary…
    MITRE CTID mapping of the CVE · primary impact
    2.5%Top 15%
    17.0priority
  128. CVE-2020-12038Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx…
    MITRE CTID mapping of the CVE · primary impact
    2.6%Top 15%
    17.0priority
  129. CVE-2020-11044Double Free in FreeRDP
    MITRE CTID mapping of the CVE · primary impact
    1.7%Top 23%
    16.9priority
  130. CVE-2018-11048Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance (IDPA)…
    MITRE CTID mapping of the CVE · follow-on activity
    2.1%Top 19%
    16.3priority
  131. CVE-2020-11068Potential Buffer Overflow in LoRaMac-node
    MITRE CTID mapping of the CVE · primary impact
    0.9%Top 40%
    15.5priority
  132. CVE-2020-15199Denial of Service in Tensorflow
    MITRE CTID mapping of the CVE · primary impact
    0.8%Top 43%
    15.5priority
  133. CVE-2019-1746Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability
    MITRE CTID mapping of the CVE · primary impact
    0.6%Top 49%
    15.3priority
  134. CVE-2020-0671An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka…
    MITRE CTID mapping of the CVE · primary impact
    1.4%Top 28%
    15.0priority
  135. CVE-2020-5210NetHack command line -w option parsing is subject to a buffer overflow
    MITRE CTID mapping of the CVE · primary impact
    0.8%Top 43%
    14.8priority
  136. CVE-2020-3409Cisco IOS and IOS XE Software PROFINET Denial of Service Vulnerability
    MITRE CTID mapping of the CVE · primary impact
    0.5%Top 55%
    14.2priority
  137. CVE-2018-10610An out-of-bounds vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application…
    WECON Technology Co., Ltd · LeviStudioUT1574Hijack Execution FlowT1557Adversary-in-the-Middle+2 more
    MITRE CTID mapping of the CVE · primary impact
    1.1%Top 34%
    13.2priority
  138. CVE-2019-10980A type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially crafted project file
    MITRE CTID mapping of the CVE · primary impact
    1.0%Top 37%
    12.6priority
  139. CVE-2020-3322Cisco Webex Network Recording Player and Cisco Webex Player Denial of Service Vulnerability
    Cisco · Cisco Webex Network Recording PlayerLow · 3.3T1566PhishingT1204.002Malicious File+1 more
    MITRE CTID mapping of the CVE · primary impact
    0.7%Top 49%
    12.6priority
  140. CVE-2020-0898An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in…
    MITRE CTID mapping of the CVE · primary impact
    0.9%Top 41%
    11.8priority
  141. CVE-2020-10602In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager…
    MITRE CTID mapping of the CVE · primary impact
    0.9%Top 41%
    11.8priority
  142. CVE-2020-5253Privilege escalation in NetHack
    MITRE CTID mapping of the CVE · primary impact
    0.5%Top 54%
    11.8priority
  143. CVE-2018-15392Cisco Industrial Network Director DHCP Request Processing Denial of Service Vulnerability
    MITRE CTID mapping of the CVE · primary impact
    0.4%Top 61%
    7.8priority
  144. CVE-2020-15137Integer overflow in HoRNDIS
    MITRE CTID mapping of the CVE · primary impact
    0.3%Top 81%
    7.7priority
  145. CVE-2020-15100Uncontrolled Resource Consumption in freewvs
    schokokeksorg · freewvsLow · 2.8T1078Valid AccountsT1574Hijack Execution Flow+1 more
    MITRE CTID mapping of the CVE · primary impact
    0.3%Top 73%
    7.4priority
  146. CVE-2018-15376Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities
    Cisco · Cisco IOS SoftwareT1566PhishingT1204.002Malicious File+2 more
    MITRE CTID mapping of the CVE · primary impact
    0.3%Top 74%
    5.2priority

Passages that support these links

↑ ↓ chooseEnter openEsc close