Kythos AI vulnerability intelligence
Zero-Day Exploits / Vulnerabilities
A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.
Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.
Confirmed exploitation intelligence
Zero-Day Exploits / Vulnerabilities
Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.
Entries 1,201–1,224 of 1,768
CVE-2022-21999: Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Microsoft · Windows
Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.
Required action: Apply updates per vendor instructions.
CVE-2021-42237: Sitecore XP Remote Command Execution Vulnerability
Sitecore · XP
Sitcore XP contains an insecure deserialization vulnerability which can allow for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2021-22941: Citrix ShareFile Improper Access Control Vulnerability
Citrix · ShareFile
Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller.
Required action: Apply updates per vendor instructions.
CVE-2020-9377: D-Link DIR-610 Devices Remote Command Execution
D-Link · DIR-610 Devices
D-Link DIR-610 devices allow remote code execution via the cmd parameter to command.php.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2020-9054: Zyxel Multiple NAS Devices OS Command Injection Vulnerability
Zyxel · Multiple Network-Attached Storage (NAS) Devices
Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code.
Required action: Apply updates per vendor instructions.
CVE-2020-7247: OpenSMTPD Remote Code Execution Vulnerability
OpenBSD · OpenSMTPD
smtp_mailaddr in smtp_session.c in OpenSMTPD, as used in OpenBSD and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session.
Required action: Apply updates per vendor instructions.
CVE-2020-5410: VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
VMware Tanzu · Spring Cloud Configuration (Config) Server
Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files.
Required action: Apply updates per vendor instructions.
CVE-2020-25223: Sophos SG UTM Remote Code Execution Vulnerability
Sophos · SG UTM
A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM.
Required action: Apply updates per vendor instructions.
CVE-2020-2506: QNAP Helpdesk Improper Access Control Vulnerability
QNAP Systems · Helpdesk
QNAP Helpdesk contains an improper access control vulnerability which could allow an attacker to gain privileges or to read sensitive information.
Required action: Apply updates per vendor instructions.
CVE-2020-2021: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Palo Alto Networks · PAN-OS
Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication.
Required action: Apply updates per vendor instructions.
CVE-2020-1956: Apache Kylin OS Command Injection Vulnerability
Apache · Kylin
Apache Kylin contains an OS command injection vulnerability which could permit an attacker to perform remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2020-1631: Juniper Junos OS Path Traversal Vulnerability
Juniper · Junos OS
A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2019-6340: Drupal Core Remote Code Execution Vulnerability
Drupal · Core
In Drupal Core, some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some cases.
Required action: Apply updates per vendor instructions.
CVE-2019-2616: Oracle BI Publisher Unauthorized Access Vulnerability
Oracle · BI Publisher (Formerly XML Publisher)
Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass.
Required action: Apply updates per vendor instructions.
CVE-2019-16920: D-Link Multiple Routers Command Injection Vulnerability
D-Link · Multiple Routers
Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2019-15107: Webmin Command Injection Vulnerability
Webmin · Webmin
An issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability.
Required action: Apply updates per vendor instructions.
CVE-2019-12991: Citrix SD-WAN and NetScaler Command Injection Vulnerability
Citrix · SD-WAN and NetScaler
Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance.
Required action: Apply updates per vendor instructions.
CVE-2019-12989: Citrix SD-WAN and NetScaler SQL Injection Vulnerability
Citrix · SD-WAN and NetScaler
Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection.
Required action: Apply updates per vendor instructions.
CVE-2019-11043: PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
PHP · FastCGI Process Manager (FPM)
In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2019-10068: Kentico Xperience Deserialization of Untrusted Data Vulnerability
Kentico · Xperience
Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2019-1003030: Jenkins Matrix Project Plugin Remote Code Execution Vulnerability
Jenkins · Matrix Project Plugin
Jenkins Matrix Project plugin contains a vulnerability which can allow users to escape the sandbox, opening opportunity to perform remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2019-0903: Microsoft GDI Remote Code Execution Vulnerability
Microsoft · Graphics Device Interface (GDI)
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.
Required action: Apply updates per vendor instructions.
CVE-2018-8414: Microsoft Windows Shell Remote Code Execution Vulnerability
Microsoft · Windows
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.
Required action: Apply updates per vendor instructions.
CVE-2018-8373: Microsoft Scripting Engine Memory Corruption Vulnerability
Microsoft · Internet Explorer Scripting Engine
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.
Required action: Apply updates per vendor instructions.
Complete fixed-window snapshot
CVEs — Past 48 Hours
All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.
Entries 721–744 of 1,125
CVE-2019-16480
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2019-16479
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2019-16478
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2019-16477
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2019-16476
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2019-16475
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2019-16474
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2019-16473
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2019-16472
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2019-16447
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2026-82894
Improper Authorization in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to trigger arbitrary OFBiz service invocation with attacker-controlled parameters, resulting in arbitrary file write, arbitrary file deletion, and server-side request forgery, by requesting the public showHelpPublic view against…
CVE-2026-81828
Server-Side Request Forgery in SurveyWrapper in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated back-office user holding catalog permission to cause the server to fetch and render attacker-controlled URLs — including internal network and cloud-metadata endpoints and local files via file:// — by…
CVE-2026-81816
XML External Entity (XXE) Injection in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding content-author permission to read arbitrary server files and trigger server-side request forgery by storing a crafted text/xml DataResource containing an external entity declaration, causing…
CVE-2026-81815
SQL Injection in the entity engine's generic performFind service in Apache OFBiz 24.09 before 24.09.08 on MySQL/MariaDB-backed deployments allows a remote unauthenticated attacker to disclose arbitrary rows from the queried entity by submitting an ignore-case find request (e.g. _ic=Y) with a crafted value, causing SqlJdbcUtil.addValueSingle to…
CVE-2026-81808
Missing Authorization in ProductSearchEvents in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding only catalog view permission to bulk-modify product category and feature associations across arbitrary search results by seeding a broad product search and then invoking search-result mutation events…
CVE-2026-81744
Incorrect Authorization in ContentPermissionServices in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding only a limited content-create permission to self-grant the OWNER role on arbitrary content by invoking the createContentRole service (e.g. via the createForumGroupRole request), causing the permission check…
CVE-2026-81734
Missing Authorization in ProductEvents in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding only catalog view permission to create, modify, or remove arbitrary product, product feature association, and product category association data by directly invoking catalog quick-admin events such as…
CVE-2026-76152
Path traversal and missing authorization check in the imageCrop and imageRotate services in Apache OFBiz through 24.09.07 on all platforms allows a remote authenticated attacker with only Catalog view permission to read arbitrary image-parseable files readable by the OFBiz process, disclosed via re-encoded and republished product…
CVE-2026-76150
Path traversal and missing authorization check in the replaceImageToExistImage service in Apache OFBiz through 24.09.07 on all platforms allows a remote authenticated attacker with only Catalog view permission to overwrite arbitrary files writable by the OFBiz process with JPEG-encoded content via crafted productId, dataResourceNameExist, and dataResourceNameReplace…
CVE-2026-74841
In multitenant deployments, ContextFilter and LoginWorker built a per-tenant delegator name from a request-supplied userTenantId parameter and requested a delegator for it before confirming the tenant existed. DelegatorFactory's internal cache retains every delegator name it is asked to resolve, including ones that fail to resolve, so…
CVE-2026-73580
Missing authorization check in the getHRChild service in Apache OFBiz through 24.09.07 on all platforms allows a remote unauthenticated attacker to recursively enumerate Human Resources organization and employee data, including department names and identifiers, employment position names and identifiers, employee party identifiers, position occupancy, and organization…
CVE-2026-73578
Missing authorization enforcement in RequestHandler.renderView in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to bypass the request-map authentication policy for protected views by supplying a crafted _LAST_VIEW_NAME_ value, which is stored as saved-view state in the anonymous session and later…
CVE-2026-73577
Incorrect authorization in RequestHandler in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to bypass the authentication requirement of a protected view by appending it as a path suffix to a public request (e.g., /catalog/control/ListLocales/showPortalPage), causing the servlet to authorize the…
CVE-2026-71901
Improper Control of Resource Identifiers ('Resource Injection') vulnerability in Apache OFBiz. An authenticate user with access to sfa component can override the service to use on vcard import and access to other service. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to…