Kythos AI vulnerability intelligence
Zero-Day Exploits / Vulnerabilities
A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.
Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.
Confirmed exploitation intelligence
Zero-Day Exploits / Vulnerabilities
Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.
Entries 1,249–1,272 of 1,768
CVE-2014-6324: Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
Microsoft · Kerberos Key Distribution Center (KDC)
The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges.
Required action: Apply updates per vendor instructions.
CVE-2014-6287: Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability
Rejetto · HTTP File Server (HFS)
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (HFS or HttpFileServer) allows remote attackers to execute arbitrary programs.
Required action: Apply updates per vendor instructions.
CVE-2014-3120: Elasticsearch Remote Code Execution Vulnerability
Elastic · Elasticsearch
Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code.
Required action: Apply updates per vendor instructions.
CVE-2014-0130: Ruby on Rails Directory Traversal Vulnerability
Rails · Ruby on Rails
Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.
Required action: Apply updates per vendor instructions.
CVE-2013-5223: D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability
D-Link · DSL-2760U
A cross-site scripting (XSS) vulnerability exists in the D-Link DSL-2760U gateway, allowing remote authenticated users to inject arbitrary web script or HTML.
Required action: Apply updates per vendor instructions.
CVE-2013-4810: HP Multiple Products Remote Code Execution Vulnerability
Hewlett Packard (HP) · ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management
HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet.
Required action: Apply updates per vendor instructions.
CVE-2013-2251: Apache Struts Improper Input Validation Vulnerability
Apache · Struts
Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.
Required action: Apply updates per vendor instructions.
CVE-2012-1823: PHP-CGI Query String Parameter Vulnerability
PHP · PHP
sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.
Required action: Apply updates per vendor instructions.
CVE-2010-4345: Exim Privilege Escalation Vulnerability
Exim · Exim
Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.
Required action: Apply updates per vendor instructions.
CVE-2010-4344: Exim Heap-Based Buffer Overflow Vulnerability
Exim · Exim
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.
Required action: Apply updates per vendor instructions.
CVE-2010-3035: Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
Cisco · IOS XR
Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).
Required action: Apply updates per vendor instructions.
CVE-2010-2861: Adobe ColdFusion Directory Traversal Vulnerability
Adobe · ColdFusion
A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.
Required action: Apply updates per vendor instructions.
CVE-2009-2055: Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
Cisco · IOS XR
Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).
Required action: Apply updates per vendor instructions.
CVE-2009-1151: phpMyAdmin Remote Code Execution Vulnerability
phpMyAdmin · phpMyAdmin
Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file.
Required action: Apply updates per vendor instructions.
CVE-2009-0927: Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
Adobe · Reader and Acrobat
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.
Required action: Apply updates per vendor instructions.
CVE-2005-2773: HP OpenView Network Node Manager Remote Code Execution Vulnerability
Hewlett Packard (HP) · OpenView Network Node Manager
HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.
Required action: Apply updates per vendor instructions.
CVE-2020-5135: SonicWall SonicOS Buffer Overflow Vulnerability
SonicWall · SonicOS
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.
Required action: Apply updates per vendor instructions.
CVE-2019-1405: Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
Microsoft · Windows
A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.
Required action: Apply updates per vendor instructions.
CVE-2019-1322: Microsoft Windows Privilege Escalation Vulnerability
Microsoft · Windows
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Required action: Apply updates per vendor instructions.
CVE-2019-1315: Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability
Microsoft · Windows
A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.
Required action: Apply updates per vendor instructions.
CVE-2019-1253: Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability
Microsoft · Windows
A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.
Required action: Apply updates per vendor instructions.
CVE-2019-1132: Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
Required action: Apply updates per vendor instructions.
CVE-2019-1129: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Microsoft · Windows
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Required action: Apply updates per vendor instructions.
CVE-2019-1069: Microsoft Task Scheduler Privilege Escalation Vulnerability
Microsoft · Task Scheduler
A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.
Required action: Apply updates per vendor instructions.
Complete fixed-window snapshot
CVEs — Past 48 Hours
All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.
Entries 289–312 of 1,045
CVE-2022-44525
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44524
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44523
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44522
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44521
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44511
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44509
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44508
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44507
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44506
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44505
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44504
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44503
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44501
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44497
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44496
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44495
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44494
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44493
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44492
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44491
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44490
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44489
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44487
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05