No vendor recorded · 2019
No vendor recorded: 2019
9,598 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE whose record names no vendor, published in 2019. The named ones are the most at risk.
- check available
- 212
- likely to be exploited
- 405
Every one of the 9,598 is a mark on the map. Named now: 1 to 26, most at risk first.
- OpenMRS Platform < 2.24.0 - Insecure Object Deserialization
- rConfig 3.9.2 - Remote Code Execution
- strapi CMS <3.0.0-beta.17.5 - Admin Password Reset
- ThinVNC 1.0b1 - Authentication Bypass
- elFinder <= 2.1.47 - Command Injection
- Optergy Proton/Enterprise - Unauthenticated RCE via Backdoor Console
- WordPress Core 5.0.0 - Crop-image Shell Upload
- PostgreSQL 9.3-12.3 Authenticated Remote Code Execution
- Zeroshell 3.9.0 - Remote Command Execution
- XStream <1.4.6/1.4.10 - Remote Code Execution
- Comodo Unified Threat Management Web Console - Remote Code Execution
- Deltek Maconomy 2.2.5 - Local File Inclusion
- WordPress UserPro 4.9.32 - Cross-Site Scripting
- D-Link Central WiFi Manager CWM(100) - Remote Code Execution
- eMerge E3 1.00-06 - Local File Inclusion
- Apache HTTP Server <=2.4.39 - HTML Injection/Partial Cross-Site Scripting
- WordPress Google Maps <7.11.18 - SQL Injection
- Amcrest IP Camera Web Management - Data Exposure
- Apache HTTP server v2.4.0 to v2.4.39 - Open Redirect
- Roxy Fileman 1.4.5 - Unrestricted File Upload
- Totaljs <3.2.3 - Local File Inclusion
- WordPress Email Subscribers & Newsletters <4.2.3 - Arbitrary File Retrieval
- Kubernetes Dashboard <1.10.1 - Authentication Bypass
- AudioCodes 420HD - Remote Code Execution
- D-Link DIR-600M - Authentication Bypass
- NTPsec > 1.1.3 - 'ctl_getitem' Out-of-Bounds Read
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.