Patchfirst
Patchfirst
T1499Impact

Endpoint Denial of Service

Adversaries may perform Endpoint Denial of Service (DoS) attacks to degrade or block the availability of services to users. Endpoint DoS can be performed by exhausting the system resources those services are hosted on or exploiting the system to cause a persistent crash condition. Example services include websites, email services, DNS, and web-based applications. Adversaries have been observed…

attack.mitre.org ↗
CVEs33
In 23
Reports1
Sub-techniques T1499.001OS Exhaustion FloodT1499.002Service Exhaustion Flood3T1499.003Application Exhaustion FloodT1499.004Application or System Exploitation146

Detections

3 Sigma rules tagged T1499
Endpoint Denial of ServiceT14993 general rules

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

CVEs linked to Endpoint Denial of Service

33 CVEs, by priority. Each link shows its badge.
  1. CVE-2026-45498Microsoft Defender Denial of Service Vulnerability
    Microsoft · DefenderKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499Endpoint Denial of Service
    AI mapping from the description · primary impact
    63.1%Top 0.8%
    73.1priority
  2. CVE-2026-28318SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
    SolarWinds · Serv-UKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499Endpoint Denial of Service
    AI mapping from the description · primary impact
    43.7%Top 1.3%
    73.0priority
  3. CVE-2013-3918Microsoft Windows Out-of-Bounds Write Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more · 1 report
    MITRE CTID mapping of the CVE · uncategorised
    73.7%Top 0.53%
    72.9priority
  4. CVE-2021-35394Realtek Jungle SDK Remote Code Execution Vulnerability
    Realtek · Jungle Software Development Kit (SDK)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+5 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    99.9%Top 0.04%
    69.9priority
  5. CVE-2024-54085AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability
    AMI · MegaRAC SPxKEVPublic exploitCritical · 9.8T1608.001Upload MalwareT1068Exploitation for Privilege Escalation+3 more
    MITRE CTID mapping of the KEV entry · primary impact
    60.7%Top 0.85%
    69.7priority
  6. CVE-2025-7775Citrix NetScaler Memory Overflow Vulnerability
    Citrix · NetScalerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    20.7%Top 2.5%
    69.4priority
  7. CVE-2013-1690Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
    Mozilla · Firefox and ThunderbirdKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    69.0%Top 0.65%
    69.0priority
  8. CVE-2020-5735Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
    Amcrest · Cameras and Network Video Recorder (NVR)KEVPublic exploitHigh · 8.8T1574Hijack Execution FlowT1499Endpoint Denial of Service
    MITRE CTID mapping of the KEV entry · follow-on activity
    36.2%Top 1.5%
    68.9priority
  9. CVE-2023-44487HTTP/2 Rapid Reset Attack Vulnerability
    IETF · HTTP/2KEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499Endpoint Denial of Service
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    68.2priority
  10. CVE-2023-6549Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
    Citrix · NetScaler ADC and NetScaler GatewayKEVPublic exploitHigh · 7.5T1574Hijack Execution FlowT1499Endpoint Denial of Service
    MITRE CTID mapping of the KEV entry · primary impact
    57.6%Top 0.92%
    68.1priority
  11. CVE-2018-0151Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    14.2%Top 3.4%
    64.2priority
  12. CVE-2017-6738Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    10.9%Top 4.1%
    63.3priority
  13. CVE-2023-38180Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
    Microsoft · .NET Core and Visual StudioKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499Endpoint Denial of Service
    AI mapping from the description · primary impact
    14.1%Top 3.4%
    62.6priority
  14. CVE-2025-42599Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability
    Qualitia · Active! MailKEVCritical · 9.8T1588.006VulnerabilitiesT1190Exploit Public-Facing Application+2 more
    MITRE CTID mapping of the KEV entry · primary impact
    3.4%Top 11%
    62.6priority
  15. CVE-2018-0154Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
    Cisco · IOS SoftwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499Endpoint Denial of Service
    AI mapping from the description · primary impact
    7.1%Top 5.8%
    62.1priority
  16. CVE-2017-6627Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499Endpoint Denial of Service
    AI mapping from the description · primary impact
    6.2%Top 6.5%
    61.9priority
  17. CVE-2020-3569Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
    Cisco · IOS XRKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499Endpoint Denial of Service
    AI mapping from the description · primary impact
    3.3%Top 11%
    61.7priority
  18. CVE-2018-0175Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
    Cisco · IOS, XR, and XE SoftwareKEVHigh · 8.0T1068Exploitation for Privilege EscalationT1499Endpoint Denial of Service
    AI mapping from the description · primary impact
    3.5%Top 11%
    61.4priority
  19. CVE-2018-0179Cisco IOS Software Denial-of-Service Vulnerability
    Cisco · IOS SoftwareKEVMedium · 5.9T1190Exploit Public-Facing ApplicationT1499Endpoint Denial of Service
    AI mapping from the description · primary impact
    4.9%Top 7.9%
    60.6priority
  20. CVE-2004-1464Cisco IOS Denial-of-Service Vulnerability
    Cisco · IOSKEVMedium · 5.9T1190Exploit Public-Facing ApplicationT1499Endpoint Denial of Service
    AI mapping from the description · primary impact
    4.8%Top 8%
    60.5priority
  21. CVE-2023-20109Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
    Cisco · IOS and IOS XEKEVMedium · 6.6T1078Valid AccountsT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    2.5%Top 15%
    59.6priority
  22. CVE-2011-2462Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
    Adobe · Reader and AcrobatKEVPublic exploitEnd of lifeCritical · 9.8T1059Command and Scripting InterpreterT1499Endpoint Denial of Service1 report
    AI mapping from the description · primary impact
    88.6%Top 0.23%
    58.7priority
  23. CVE-2021-1906Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
    Qualcomm · Multiple ChipsetsKEVMedium · 5.5T1068Exploitation for Privilege EscalationT1499Endpoint Denial of Service
    AI mapping from the description · primary impact
    0.5%Top 56%
    50.7priority
  24. CVE-2020-3120Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability
    Cisco · Cisco IOS XR SoftwarePublic exploitHigh · 7.4T1499Endpoint Denial of Service
    MITRE CTID mapping of the CVE · primary impact
    1.6%Top 24%
    25.4priority
  25. CVE-2018-15462Cisco Firepower Threat Defense Software TCP Ingress Handler Denial of Service Vulnerability
    Cisco · Cisco Firepower Threat Defense SoftwareHigh · 8.6T1190Exploit Public-Facing ApplicationT1499Endpoint Denial of Service
    MITRE CTID mapping of the CVE · primary impact
    2.1%Top 19%
    22.3priority
  26. CVE-2019-1704Cisco Firepower Threat Defense Software SMB Protocol Preprocessor Detection Engine Denial of Service Vulnerabilities
    Cisco · Cisco Firepower Threat Defense SoftwareHigh · 7.5T1190Exploit Public-Facing ApplicationT1499Endpoint Denial of Service
    MITRE CTID mapping of the CVE · primary impact
    2.3%Top 17%
    21.8priority
  27. CVE-2020-14508OFF-BY-ONE ERROR CWE-193
    Secomea · GateManagerHigh · 8.1T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the CVE · primary impact
    2.0%Top 19%
    21.8priority
  28. CVE-2020-6986In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period…
    High · 7.5T1499Endpoint Denial of Service
    MITRE CTID mapping of the CVE · primary impact
    1.6%Top 24%
    20.4priority
  29. CVE-2019-15956Cisco Web Security Appliance Unauthorized Device Reset Vulnerability
    Cisco · Cisco Web Security Appliance (WSA)High · 8.8T1078Valid AccountsT1190Exploit Public-Facing Application+2 more
    MITRE CTID mapping of the CVE · primary impact
    1.0%Top 38%
    18.6priority
  30. CVE-2020-3306Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DHCP Denial of Service Vulnerability
    Cisco · Cisco Adaptive Security Appliance (ASA) SoftwareMedium · 6.8T1190Exploit Public-Facing ApplicationT1499Endpoint Denial of Service
    MITRE CTID mapping of the CVE · primary impact
    1.2%Top 31%
    18.6priority
  31. CVE-2019-13555In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU…
    T1499Endpoint Denial of Service
    MITRE CTID mapping of the CVE · primary impact
    1.5%Top 25%
    14.9priority
  32. CVE-2018-19010Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer…
    ICS-CERT · Dräger Infinity DeltaT1190Exploit Public-Facing ApplicationT1499Endpoint Denial of Service
    MITRE CTID mapping of the CVE · primary impact
    0.8%Top 45%
    11.1priority
  33. CVE-2018-15772Dell EMC RecoverPoint Uncontrolled Resource Consumption Vulnerability
    Dell EMC · Dell EMC RecoverPointT1499Endpoint Denial of Service
    MITRE CTID mapping of the CVE · primary impact
    0.4%Top 64%
    7.1priority

Linked through a sub-technique

149 more
  1. CVE-2012-0507Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
    Oracle · Java SEKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1211Exploitation for Stealth+1 more · 2 reports
    98.2%Top 0.09%
    86.0priority
  2. CVE-2017-10271Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
    Oracle · WebLogic ServerKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation2 reports
    >99.9%Top 0.01%
    84.4priority
  3. CVE-2015-2291Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability
    Intel · Ethernet Diagnostics Driver for WindowsKEVRansomwarePublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation+1 more · 1 report
    15.7%Top 3.1%
    81.7priority
  4. CVE-2021-45105Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
    Apache Software Foundation · Apache Log4j2Public exploitMedium · 5.9T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation1 report
    >99.9%Top 0.01%
    81.0priority
  5. CVE-2019-5544VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
    VMware · VMware ESXi and Horizon DaaSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    98.1%Top 0.09%
    79.8priority
  6. CVE-2026-111497Google Brotli Unchecked Return Value Vulnerability
    Google · BrotliKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+2 more
    82.6%Top 0.33%
    79.8priority
  7. CVE-2016-7200Microsoft Edge Memory Corruption Vulnerability
    Microsoft · EdgeKEVPublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1499.004Application or System Exploitation
    82.8%Top 0.33%
    79.1priority
  8. CVE-2016-7201Microsoft Edge Memory Corruption Vulnerability
    Microsoft · EdgeKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more
    80.0%Top 0.39%
    79.1priority
  9. CVE-2025-20362Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization…
    Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseKEVPublic exploitHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation5 reports
    87.1%Top 0.25%
    79.0priority
  10. CVE-2023-29552Service Location Protocol (SLP) Denial-of-Service Vulnerability
    IETF · Service Location Protocol (SLP)KEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    64.0%Top 0.78%
    78.1priority
  11. CVE-2015-3105Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before…
    Public exploitT1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more · 2 reports
    90.1%Top 0.2%
    77.9priority
  12. CVE-2012-1889Microsoft XML Core Services Memory Corruption Vulnerability
    Microsoft · XML Core ServicesKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 more · 3 reports
    83.5%Top 0.32%
    76.8priority
  13. CVE-2018-0171Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
    Cisco · IOS and IOS XEKEVPublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services+1 more · 2 reports
    99.5%Top 0.06%
    76.0priority
  14. CVE-2020-5135SonicWall SonicOS Buffer Overflow Vulnerability
    SonicWall · SonicOSKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    26.9%Top 2%
    74.5priority
  15. CVE-2024-40766SonicWall SonicOS Improper Access Control Vulnerability
    SonicWall · SonicOSKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    18.4%Top 2.8%
    74.3priority
  16. CVE-2026-67277MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
    MikroTik · RouterOSKEVPublic exploitHigh · 8.2T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    1.6%Top 25%
    73.8priority
  17. CVE-2017-3881Cisco IOS and IOS XE Remote Code Execution Vulnerability
    Cisco · IOS and IOS XEKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more · 1 report
    99.0%Top 0.07%
    73.7priority
  18. CVE-2017-6736Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVPublic exploitHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter+1 more · 1 report
    70.4%Top 0.62%
    72.9priority
  19. CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer…
    Citrix · NetScaler ADC and NetScaler GatewayKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    1.0%Top 37%
    72.5priority
  20. CVE-2018-13383Fortinet FortiOS and FortiProxy Out-of-bounds Write
    Fortinet · FortiOS and FortiProxyKEVRansomwareMedium · 6.5T1499.004Application or System Exploitation
    32.5%Top 1.7%
    72.2priority
  21. CVE-2025-39964Linux Kernel Race Condition Vulnerability
    Linux · KernelKEVPublic exploitMedium · 5.5T1068Exploitation for Privilege EscalationT1499.004Application or System Exploitation
    1.6%Top 25%
    71.9priority
  22. CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection…
    Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) KEVPublic exploitHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    1.0%Top 37%
    71.6priority
  23. CVE-2020-14871Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
    Oracle · Solaris and Zettabyte File System (ZFS)KEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation+1 more
    80.2%Top 0.38%
    69.9priority
  24. CVE-2021-45382D-Link Multiple Routers Remote Code Execution Vulnerability
    D-Link · Multiple RoutersKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+4 more
    97.8%Top 0.09%
    69.8priority
  25. CVE-2022-26258D-Link DIR-820L Remote Code Execution Vulnerability
    D-Link · DIR-820LKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    91.6%Top 0.19%
    69.8priority
  26. CVE-2020-3161Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
    Cisco · Cisco IP PhonesKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    83.9%Top 0.31%
    69.8priority
  27. CVE-2014-3931Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability
    Looking Glass · Multi-Router Looking Glass (MRLG)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    29.0%Top 1.8%
    69.5priority
  28. CVE-2016-1646Google Chromium V8 Out-of-Bounds Read Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1499.004Application or System Exploitation
    48.1%Top 1.1%
    68.9priority
  29. CVE-2015-5122Adobe Flash Player Use-After-Free Vulnerability
    Adobe · Flash PlayerKEVPublic exploitEnd of lifeCritical · 9.8T1059Command and Scripting InterpreterT1499.004Application or System Exploitation1 report
    87.0%Top 0.25%
    68.7priority
  30. CVE-2021-21551Dell dbutil Driver Insufficient Access Control Vulnerability
    Dell · dbutil DriverKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1005Data from Local System+1 more
    79.6%Top 0.4%
    68.4priority
  31. CVE-2021-22555Linux Kernel Heap Out-of-Bounds Write Vulnerability
    Linux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1499.004Application or System Exploitation
    78.7%Top 0.41%
    68.4priority
  32. CVE-2011-0609Adobe Flash Player Unspecified Vulnerability
    Adobe · Flash PlayerKEVPublic exploitHigh · 7.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more
    63.5%Top 0.79%
    68.3priority
  33. CVE-2025-27363FreeType Out-of-Bounds Write Vulnerability
    FreeType · FreeTypeKEVPublic exploitHigh · 8.1T1574Hijack Execution FlowT1499.004Application or System Exploitation
    27.8%Top 1.9%
    68.3priority
  34. CVE-2015-5477ISC BIND Data Processing Errors Vulnerability
    ISC · BINDKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    99.6%Top 0.05%
    68.2priority
  35. CVE-2006-1547Apache Struts 1 ActionForm Denial-of-Service Vulnerability
    Apache · Struts 1KEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    54.6%Top 0.98%
    68.1priority
  36. CVE-2015-2424Microsoft PowerPoint Memory Corruption Vulnerability
    Microsoft · PowerPointKEVHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution+1 more · 1 report
    40.1%Top 1.4%
    67.8priority
  37. CVE-2019-5786Google Chrome Blink Use-After-Free Vulnerability
    Google · Chrome BlinkKEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1499.004Application or System Exploitation
    61.1%Top 0.84%
    67.4priority
  38. CVE-2019-5825Google Chromium V8 Out-of-Bounds Write Vulnerability
    Google · Chromium V8KEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1499.004Application or System Exploitation
    55.9%Top 0.95%
    67.4priority
  39. CVE-2016-0034Microsoft Silverlight Runtime Remote Code Execution Vulnerability
    Microsoft · SilverlightKEVRansomwareEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 more · 3 reports
    69.4%Top 0.64%
    66.8priority
  40. CVE-2020-11899Treck TCP/IP stack Out-of-Bounds Read Vulnerability
    Treck TCP/IP stack · IPv6KEVPublic exploitMedium · 5.4T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    18.4%Top 2.8%
    66.2priority
  41. CVE-2026-21525Microsoft Windows NULL Pointer Dereference Vulnerability
    Microsoft · WindowsKEVMedium · 6.2T1068Exploitation for Privilege EscalationT1499.004Application or System Exploitation
    4.9%Top 8%
    65.7priority
  42. CVE-2015-3090Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before…
    Public exploitT1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more · 1 report
    83.2%Top 0.32%
    65.4priority
  43. CVE-2015-5374A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions <…
    Public exploitT1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation1 report
    74.5%Top 0.51%
    65.4priority
  44. CVE-2018-0125Cisco VPN Routers Remote Code Execution Vulnerability
    Cisco · VPN RoutersKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    55.2%Top 0.97%
    64.7priority
  45. CVE-2021-22991F5 BIG-IP Traffic Management Microkernel Buffer Overflow
    F5 · BIG-IP Traffic Management MicrokernelKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    62.4%Top 0.82%
    64.7priority
  46. CVE-2023-33009Zyxel Multiple Firewalls Buffer Overflow Vulnerability
    Zyxel · Multiple FirewallsKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    28.1%Top 1.9%
    64.5priority
  47. CVE-2023-33010Zyxel Multiple Firewalls Buffer Overflow Vulnerability
    Zyxel · Multiple FirewallsKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    29.0%Top 1.8%
    64.5priority
  48. CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference…
    Cisco · Secure Firewall ASA Software and Cisco Secure FTD SoftwareKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    0.9%Top 40%
    64.4priority
  49. CVE-2015-4068Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability
    Arcserve · Unified Data Protection (UDP)KEVCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    63.6%Top 0.79%
    64.2priority
  50. CVE-2017-12240Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    13.8%Top 3.5%
    64.2priority
  51. CVE-2017-6737Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    45.0%Top 1.2%
    63.9priority
  52. CVE-2017-6739Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    10.9%Top 4.1%
    63.3priority
  53. CVE-2017-6740Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    11.1%Top 4.1%
    63.3priority
  54. CVE-2017-6743Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    10.9%Top 4.1%
    63.3priority
  55. CVE-2017-6744Cisco IOS Software SNMP Remote Code Execution Vulnerability
    Cisco · IOS softwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    7.3%Top 5.6%
    63.0priority
  56. CVE-2018-0172Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    7.8%Top 5.3%
    63.0priority
  57. CVE-2016-4523Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
    Trihedral · VTScada (formerly VTS)KEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    31.2%Top 1.7%
    62.9priority
  58. CVE-2018-0155Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
    Cisco · Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series SwitchesKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    7.7%Top 5.4%
    62.9priority
  59. CVE-2018-0173Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    7.6%Top 5.5%
    62.9priority
  60. CVE-2018-0174Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
    Cisco · IOS XE SoftwareKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    7.6%Top 5.5%
    62.9priority
  61. CVE-2024-3393Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
    Palo Alto Networks · PAN-OSKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    29.1%Top 1.8%
    62.9priority
  62. CVE-2023-4346KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism…
    KNX Association · KNX Protocol Connection Authorization Option 1KEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    1.4%Top 28%
    62.6priority
  63. CVE-2018-0156Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
    Cisco · IOS Software and Cisco IOS XE SoftwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    9.4%Top 4.6%
    62.3priority
  64. CVE-2017-12231Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability
    Cisco · IOS softwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    7.1%Top 5.8%
    62.1priority
  65. CVE-2017-12233Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
    Cisco · IOS softwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    7.1%Top 5.8%
    62.1priority
  66. CVE-2017-12234Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
    Cisco · IOS softwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    7.1%Top 5.8%
    62.1priority
  67. CVE-2017-12235Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
    Cisco · IOS softwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    7.1%Top 5.8%
    62.1priority
  68. CVE-2018-0159Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
    Cisco · IOS Software and Cisco IOS XE SoftwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    6.9%Top 6%
    62.1priority
  69. CVE-2020-3566Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
    Cisco · IOS XRKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    3.7%Top 10%
    62.0priority
  70. CVE-2018-0167Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
    Cisco · IOS, XR, and XE SoftwareKEVHigh · 8.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services+1 more
    3.4%Top 11%
    61.9priority
  71. CVE-2010-3035Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
    Cisco · IOS XRKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    5.7%Top 7%
    61.8priority
  72. CVE-2024-20481Cisco ASA and FTD Denial-of-Service Vulnerability
    Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVMedium · 5.8T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    15.9%Top 3.1%
    61.4priority
  73. CVE-2016-8562Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability
    Siemens · SIMATIC CPKEVHigh · 7.5T1210Exploitation of Remote ServicesT1499.004Application or System Exploitation
    3.6%Top 11%
    61.1priority
  74. CVE-2014-1776Microsoft Internet Explorer Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVPublic exploitEnd of lifeCritical · 9.8T1059Command and Scripting InterpreterT1499.004Application or System Exploitation2 reports
    82.7%Top 0.33%
    60.9priority
  75. CVE-2015-3043Adobe Flash Player Memory Corruption Vulnerability
    Adobe · Flash PlayerKEVPublic exploitEnd of lifeCritical · 9.8T1499.004Application or System Exploitation2 reports
    73.9%Top 0.52%
    60.9priority
  76. CVE-2020-9818Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
    Apple · iOS, iPadOS, and watchOSKEVHigh · 8.8T1204.001Malicious LinkT1499.004Application or System Exploitation
    2.3%Top 16%
    60.9priority
  77. CVE-2017-12319Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
    Cisco · IOS XE SoftwareKEVMedium · 5.9T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    5.2%Top 7.5%
    60.6priority
  78. CVE-2018-0161Cisco IOS Software Resource Management Errors Vulnerability
    Cisco · IOS SoftwareKEVMedium · 6.3T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    4.1%Top 9.2%
    60.6priority
  79. CVE-2018-0180Cisco IOS Software Denial-of-Service Vulnerability
    Cisco · IOS SoftwareKEVMedium · 5.9T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    4.9%Top 7.9%
    60.6priority
  80. CVE-2009-2055Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
    Cisco · IOS XRKEVMedium · 5.9T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    3.3%Top 11%
    59.8priority
  81. CVE-2021-27562Arm Trusted Firmware Out-of-Bounds Write Vulnerability
    Arm · Trusted FirmwareKEVMedium · 5.5T1068Exploitation for Privilege EscalationT1499.004Application or System Exploitation
    3.1%Top 12%
    59.4priority
  82. CVE-2025-43520Apple Multiple Products Classic Buffer Overflow Vulnerability
    Apple · Multiple ProductsKEVPublic exploitMedium · 5.5T1204.002Malicious FileT1068Exploitation for Privilege Escalation+1 more
    0.4%Top 63%
    59.2priority
  83. CVE-2017-12232Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
    Cisco · IOS softwareKEVMedium · 6.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    2.2%Top 18%
    59.0priority
  84. CVE-2017-6663Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVMedium · 6.5T1210Exploitation of Remote ServicesT1499.004Application or System Exploitation
    2.1%Top 18%
    58.9priority
  85. CVE-2013-3897Microsoft Internet Explorer Use-After-Free Vulnerability
    Microsoft · Internet ExplorerKEVPublic exploitEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 more
    77.3%Top 0.44%
    54.1priority
  86. CVE-2015-2502Microsoft Internet Explorer Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVPublic exploitEnd of lifeHigh · 8.8T1203Exploitation for Client ExecutionT1499.004Application or System Exploitation
    51.0%Top 1.1%
    53.9priority
  87. CVE-2021-25370Samsung Mobile Devices Memory Corruption Vulnerability
    Samsung · Mobile DevicesKEVMedium · 4.4T1068Exploitation for Privilege EscalationT1499.004Application or System Exploitation
    0.9%Top 41%
    52.9priority
  88. CVE-2021-25489Samsung Mobile Devices Improper Input Validation Vulnerability
    Samsung · Mobile DevicesKEVMedium · 5.5T1068Exploitation for Privilege EscalationT1499.004Application or System Exploitation
    0.5%Top 55%
    50.8priority
  89. CVE-2015-5123Adobe Flash Player Use-After-Free Vulnerability
    Adobe · Flash PlayerKEVEnd of lifeCritical · 9.8T1059Command and Scripting InterpreterT1499.004Application or System Exploitation
    18.8%Top 2.7%
    49.3priority
  90. CVE-2017-0149Microsoft Internet Explorer Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more
    29.2%Top 1.8%
    48.8priority
  91. CVE-2019-15276Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability
    Cisco · Cisco Wireless LAN Controller (WLC)Public exploitHigh · 7.7T1190Exploit Public-Facing ApplicationT1566Phishing+1 more
    46.3%Top 1.2%
    30.2priority
  92. CVE-2020-3198Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities
    Cisco · Cisco IOS 12.2(60)EZ16Critical · 9.8T1133External Remote ServicesT1190Exploit Public-Facing Application+3 more
    4.6%Top 8.4%
    25.2priority
  93. CVE-2018-8353A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in…
    Public exploitT1566PhishingT1204.002Malicious File+6 more
    67.3%Top 0.7%
    24.9priority
  94. CVE-2018-8355A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…
    Microsoft · ChakraCorePublic exploitT1189Drive-by CompromiseT1204.002Malicious File+6 more
    67.9%Top 0.68%
    24.9priority
  95. CVE-2022-22719mod_lua Use of uninitialized value of in r:parsebody
    Apache Software Foundation · Apache HTTP ServerT1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation1 report
    69.1%Top 0.65%
    24.8priority
  96. CVE-2019-1118A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite…
    Microsoft · WindowsPublic exploitT1189Drive-by CompromiseT1204.002Malicious File+6 more
    23.6%Top 2.2%
    24.6priority
  97. CVE-2020-11019Out of bound read in update_recv in FreeRDP
    FreeRDP · FreeRDPPublic exploitMedium · 4.3T1211Exploitation for StealthT1005Data from Local System+1 more
    2.3%Top 17%
    24.6priority
  98. CVE-2020-16874Visual Studio Remote Code Execution Vulnerability
    Microsoft · Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)High · 7.8T1204.002Malicious FileT1574Hijack Execution Flow+5 more
    4.3%Top 8.9%
    24.4priority
  99. CVE-2020-1569Microsoft Edge Memory Corruption Vulnerability
    Microsoft · Microsoft Edge (EdgeHTML-based)High · 7.8T1566PhishingT1204.002Malicious File+6 more
    3.0%Top 13%
    23.6priority
  100. CVE-2019-1703Cisco Firepower Threat Defense Software Packet Processing Denial of Service Vulnerability
    Cisco · Cisco Firepower Threat Defense SoftwareHigh · 8.6T1499.002Service Exhaustion Flood
    2.9%Top 13%
    23.4priority
  101. CVE-2020-3292Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities
    Cisco · Cisco Small Business RV Series Router FirmwareHigh · 7.2T1078Valid AccountsT1190Exploit Public-Facing Application+2 more
    3.2%Top 12%
    22.7priority
  102. CVE-2020-11090Uncontrolled Resource Consumption in Indy Node
    Hyperledger · Indy NodeHigh · 7.5T1499.004Application or System Exploitation
    2.2%Top 18%
    21.7priority
  103. CVE-2020-3397Cisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service Vulnerability
    Cisco · Cisco NX-OS SoftwareHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    1.8%Top 21%
    21.7priority
  104. CVE-2020-3407Cisco IOS XE Software RESTCONF and NETCONF-YANG Access Control List Denial of Service Vulnerability
    Cisco · Cisco IOS XE SoftwareHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    1.5%Top 26%
    20.9priority
  105. CVE-2020-3510Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability
    Cisco · Cisco IOS XE SoftwareHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    1.4%Top 28%
    20.4priority
  106. CVE-2019-0609A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…
    Microsoft · Internet Explorer 11T1566PhishingT1204.002Malicious File+6 more
    9.8%Top 4.4%
    19.8priority
  107. CVE-2019-6538Medtronic Conexus Radio Frequency Telemetry Protocol Improper Access Control
    Medtronic · Conexus Radio Frequency Telemetry ProtocolCritical · 9.3T1574Hijack Execution FlowT1557Adversary-in-the-Middle+2 more
    0.9%Top 40%
    19.8priority
  108. CVE-2020-1425A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in…
    Microsoft · Windows 10 Version 2004 for x64-based SystemsT1574Hijack Execution FlowT1499.004Application or System Exploitation
    9.3%Top 4.6%
    19.8priority
  109. CVE-2019-1052Chakra Scripting Engine Memory Corruption Vulnerability
    Microsoft · Microsoft Edge (EdgeHTML-based)Medium · 4.2T1189Drive-by CompromiseT1203Exploitation for Client Execution+2 more
    2.4%Top 16%
    19.7priority
  110. CVE-2019-15289Cisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service Vulnerabilities
    Cisco · Cisco TelePresence TC SoftwareHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    1.4%Top 28%
    19.6priority
  111. CVE-2018-8248A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle…
    Microsoft · Microsoft OfficeT1189Drive-by CompromiseT1204.002Malicious File+6 more
    21.4%Top 2.4%
    19.5priority
  112. CVE-2018-8110A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft…
    Microsoft · Microsoft EdgeT1566PhishingT1204.002Malicious File+6 more
    16.9%Top 2.9%
    19.4priority
  113. CVE-2018-8111A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft…
    Microsoft · Microsoft EdgeT1566PhishingT1204.002Malicious File+6 more
    16.9%Top 2.9%
    19.4priority
  114. CVE-2019-0576A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in…
    Microsoft · Windows 7T1204.002Malicious FileT1574Hijack Execution Flow+1 more
    17.0%Top 2.9%
    19.4priority
  115. CVE-2019-1035Microsoft Word Remote Code Execution Vulnerability
    Microsoft · Microsoft SharePoint Server 2019T1203Exploitation for Client ExecutionT1204.002Malicious File+2 more
    6.6%Top 6.2%
    19.4priority
  116. CVE-2018-10636CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow…
    ICS-CERT · CNCSoft with ScreenEditorT1574Hijack Execution FlowT1068Exploitation for Privilege Escalation+1 more
    9.4%Top 4.6%
    19.1priority
  117. CVE-2019-0911A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…
    Microsoft · Internet Explorer 11T1189Drive-by CompromiseT1204.002Malicious File+2 more
    9.1%Top 4.7%
    19.1priority
  118. CVE-2019-1106A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in…
    Microsoft · Microsoft EdgeT1189Drive-by CompromiseT1203Exploitation for Client Execution+2 more
    9.2%Top 4.7%
    19.1priority
  119. CVE-2019-0926A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft…
    Microsoft · Microsoft EdgeT1189Drive-by CompromiseT1203Exploitation for Client Execution+2 more
    8.1%Top 5.2%
    19.0priority
  120. CVE-2020-11039Integer Overflow in FreeRDP
    FreeRDP · FreeRDPHigh · 8.0T1574Hijack Execution FlowT1005Data from Local System+1 more
    1.1%Top 34%
    18.9priority
  121. CVE-2020-1495Microsoft Excel Remote Code Execution Vulnerability
    Microsoft · Microsoft SharePoint Server 2010 Service Pack 2T1566PhishingT1204.002Malicious File+6 more
    4.2%Top 9%
    18.9priority
  122. CVE-2020-4068Heap-based Buffer Overflow in APNSwift
    kylebrowning · APNSwiftMedium · 6.3T1091Replication Through Removable MediaT1133External Remote Services+4 more
    1.3%Top 29%
    18.6priority
  123. CVE-2018-7499In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard…
    Advantech · WebAccessT1574Hijack Execution FlowT1499.004Application or System Exploitation
    3.7%Top 10%
    18.0priority
  124. CVE-2020-1109Windows Update Stack Elevation of Privilege Vulnerability
    Microsoft · Windows 10 Version 1709High · 7.8T1574Hijack Execution FlowT1136Create Account+4 more
    1.0%Top 37%
    18.0priority
  125. CVE-2019-1594Cisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service Vulnerability
    Cisco · Nexus 1000V Switch for VMware vSphereHigh · 7.4T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    0.8%Top 43%
    17.9priority
  126. CVE-2018-18987VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file…
    T1059Command and Scripting InterpreterT1574Hijack Execution Flow+1 more
    3.2%Top 12%
    17.6priority
  127. CVE-2018-7494WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where a value larger than…
    ICS-CERT · Delta Electronics WPLSoftT1574Hijack Execution FlowT1499.004Application or System Exploitation
    2.7%Top 14%
    17.2priority
  128. CVE-2018-14809Fuji Electric V-Server 4.0.3.0 and prior, A use after free vulnerability has been identified, which may allow remote…
    Fuji Electric · V-ServerT1574Hijack Execution FlowT1557Adversary-in-the-Middle+2 more
    2.7%Top 14%
    17.1priority
  129. CVE-2020-15208Data corruption in tensorflow-lite
    tensorflow · tensorflowHigh · 7.4T1574Hijack Execution FlowT1499.004Application or System Exploitation
    0.9%Top 40%
    17.1priority
  130. CVE-2019-6522Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary…
    ICS-CERT · Moxa IKS, EDST1005Data from Local SystemT1499.004Application or System Exploitation
    2.5%Top 15%
    17.0priority
  131. CVE-2020-12038Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx…
    T1204.001Malicious LinkT1499.004Application or System Exploitation
    2.6%Top 15%
    17.0priority
  132. CVE-2020-11044Double Free in FreeRDP
    FreeRDP · FreeRDPLow · 2.2T1499.004Application or System Exploitation
    1.7%Top 23%
    16.9priority
  133. CVE-2018-11048Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance (IDPA)…
    Dell EMC · Data Protection AdvisorT1133External Remote ServicesT1059Command and Scripting Interpreter+2 more
    2.1%Top 19%
    16.3priority
  134. CVE-2020-11068Potential Buffer Overflow in LoRaMac-node
    LoRa · LoRaMac-nodeMedium · 5.0T1574Hijack Execution FlowT1499.004Application or System Exploitation
    0.9%Top 40%
    15.5priority
  135. CVE-2020-15199Denial of Service in Tensorflow
    tensorflow · tensorflowMedium · 5.9T1574Hijack Execution FlowT1499.004Application or System Exploitation
    0.8%Top 43%
    15.5priority
  136. CVE-2019-1746Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability
    Cisco · Cisco IOS and IOS XE SoftwareHigh · 7.4T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    0.6%Top 49%
    15.3priority
  137. CVE-2020-0671An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka…
    Microsoft · WindowsT1574Hijack Execution FlowT1136Create Account+4 more
    1.4%Top 28%
    15.0priority
  138. CVE-2020-5210NetHack command line -w option parsing is subject to a buffer overflow
    NetHack · NetHackMedium · 5.0T1574Hijack Execution FlowT1499.004Application or System Exploitation
    0.8%Top 43%
    14.8priority
  139. CVE-2020-3409Cisco IOS and IOS XE Software PROFINET Denial of Service Vulnerability
    Cisco · Cisco IOSHigh · 7.4T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    0.5%Top 55%
    14.2priority
  140. CVE-2018-10610An out-of-bounds vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application…
    WECON Technology Co., Ltd · LeviStudioUT1574Hijack Execution FlowT1557Adversary-in-the-Middle+2 more
    1.1%Top 34%
    13.2priority
  141. CVE-2019-10980A type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially crafted project file
    T1574Hijack Execution FlowT1499.004Application or System Exploitation
    1.0%Top 37%
    12.6priority
  142. CVE-2020-3322Cisco Webex Network Recording Player and Cisco Webex Player Denial of Service Vulnerability
    Cisco · Cisco Webex Network Recording PlayerLow · 3.3T1566PhishingT1204.002Malicious File+1 more
    0.7%Top 49%
    12.6priority
  143. CVE-2020-0898An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in…
    Microsoft · WindowsT1574Hijack Execution FlowT1499.004Application or System Exploitation
    0.9%Top 41%
    11.8priority
  144. CVE-2020-10602In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager…
    T1499.004Application or System Exploitation
    0.9%Top 41%
    11.8priority
  145. CVE-2020-5253Privilege escalation in NetHack
    NetHack · NetHackLow · 3.9T1574Hijack Execution FlowT1499.004Application or System Exploitation
    0.5%Top 54%
    11.8priority
  146. CVE-2018-15392Cisco Industrial Network Director DHCP Request Processing Denial of Service Vulnerability
    Cisco · Cisco Industrial Network DirectorT1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    0.4%Top 61%
    7.8priority
  147. CVE-2020-15137Integer overflow in HoRNDIS
    jwise · HoRNDISMedium · 5.5T1005Data from Local SystemT1499.004Application or System Exploitation
    0.3%Top 81%
    7.7priority
  148. CVE-2020-15100Uncontrolled Resource Consumption in freewvs
    schokokeksorg · freewvsLow · 2.8T1078Valid AccountsT1574Hijack Execution Flow+1 more
    0.3%Top 73%
    7.4priority
  149. CVE-2018-15376Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities
    Cisco · Cisco IOS SoftwareT1566PhishingT1204.002Malicious File+2 more
    0.3%Top 74%
    5.2priority

Passages that support these links

↑ ↓ chooseEnter openEsc close