{"basis":"measured","method":"Each CVE's public nuclei-templates exploit request, built identically for every target and sent over HTTPS to a hostname that puts the vendor WAF in front of our own origin. The origin marks every response it serves; a response without the mark came from the edge (blocked, challenged or refused = stopped). About 30 ordinary requests per run measure false positives. One request per second per target.","targets":[{"engineId":"aws-waf-baseline","engineName":"AWS WAF","engineVersion":null,"config":"AWS managed rule groups at default actions: Core rule set + Known bad inputs. Regional web ACL on API Gateway (us-east-1)","ranAt":"2026-11-02T21:05:35.000Z","tested":474,"blocked":119,"partial":44,"passed":311,"controlRequests":49,"falsePositives":0,"vendor":"aws","plan":"Baseline managed rules","templatesSource":"projectdiscovery/nuclei-templates@eddca90"},{"engineId":"aws-waf-full","engineName":"AWS WAF","engineVersion":null,"config":"Every free AWS managed rule group at default actions: Core, Known bad inputs, SQLi, Linux, POSIX, Windows, PHP, WordPress","ranAt":"2026-11-02T21:05:35.000Z","tested":474,"blocked":172,"partial":69,"passed":233,"controlRequests":49,"falsePositives":0,"vendor":"aws","plan":"All free managed rules","templatesSource":"projectdiscovery/nuclei-templates@eddca90"},{"engineId":"cloudflare-enterprise","engineName":"Cloudflare WAF","engineVersion":null,"config":"Managed Ruleset + OWASP Core Ruleset (PL1, high sensitivity), Bot Management, BIC on; one managed rule skipped on /api/*","ranAt":"2026-11-02T21:05:34.000Z","tested":475,"blocked":153,"partial":74,"passed":248,"controlRequests":49,"falsePositives":0,"vendor":"cloudflare","plan":"Enterprise","templatesSource":"projectdiscovery/nuclei-templates@eddca90"},{"engineId":"cloudflare-free","engineName":"Cloudflare WAF","engineVersion":null,"config":"Free plan defaults: Free Managed Ruleset, Browser Integrity Check on, no custom rules for this host","ranAt":"2026-11-02T21:05:34.000Z","tested":474,"blocked":16,"partial":6,"passed":452,"controlRequests":49,"falsePositives":0,"vendor":"cloudflare","plan":"Free","templatesSource":"projectdiscovery/nuclei-templates@eddca90"},{"engineId":"control-no-waf","engineName":"Control no WAF","engineVersion":null,"config":"A CDN with no WAF product in front of the same origin. Shows what reaches the origin when nothing filters","ranAt":"2026-11-02T21:05:35.000Z","tested":476,"blocked":5,"partial":2,"passed":469,"controlRequests":49,"falsePositives":0,"vendor":null,"plan":"CDN pass-through","templatesSource":"projectdiscovery/nuclei-templates@eddca90"},{"engineId":"google-cloud-armor","engineName":"Google Cloud Cloud Armor","engineVersion":null,"config":"Global external ALB, 13 preconfigured rules (v33 sets + cve-canary) at sensitivity 1, deny-403","ranAt":"2026-11-02T21:43:52.000Z","tested":477,"blocked":165,"partial":97,"passed":215,"controlRequests":49,"falsePositives":2,"vendor":"google","plan":"Preconfigured WAF rules","templatesSource":"projectdiscovery/nuclei-templates@eddca90"}],"results":[{"cve_id":"CVE-2026-109618","name":"PHP Memory Corruption Vulnerability","kev_added":"2026-10-26","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["aws","cloudflare","f5","fastly"]},{"cve_id":"CVE-2026-110447","name":"Collabora Online – Built-in CODE Server OS Command Injection Vulnerability","kev_added":"2026-10-23","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-96652","name":"Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability","kev_added":"2026-10-20","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-21589","name":"Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability","kev_added":"2026-10-15","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5","fastly"]},{"cve_id":"CVE-2026-105134","name":"Ahsay AhsayCBS Command Injection Vulnerability","kev_added":"2026-10-14","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-105133","name":"Ahsay AhsayCBS Improper Authentication Vulnerability","kev_added":"2026-10-14","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-104935","name":"Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability","kev_added":"2026-10-13","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2016-3081","name":"Apache Struts Command Injection Vulnerability","kev_added":"2026-10-08","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-87902","name":"WordPress Core Remote File Inclusion Vulnerability","kev_added":"2026-09-25","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2026-71362","name":"Adobe Commerce and Magento Incorrect Authorization Vulnerability ","kev_added":"2026-09-24","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-93616","name":"Check Point Multiple Products Path Traversal Vulnerability","kev_added":"2026-09-22","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-76460","name":"Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability","kev_added":"2026-09-16","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-85706","name":"GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability","kev_added":"2026-09-11","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2026-42018","name":"JFrog Artifactory Improper Authentication Vulnerability","kev_added":"2026-09-11","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2026-20079","name":"Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability","kev_added":"2026-09-09","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2026-86218","name":"N-able N-central Static Code Injection Vulnerability","kev_added":"2026-09-08","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-9586","name":"Sangoma Switchvox SQL Injection Vulnerability","kev_added":"2026-09-02","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-82329","name":"JFrog Artifactory Improper Authentication Vulnerability","kev_added":"2026-09-02","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2026-48710","name":"Kludex Starlette HTTP Request/Response Smuggling Vulnerability","kev_added":"2026-09-02","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-81578","name":"PaperCut NG/MF Missing Authentication for Critical Function Vulnerability","kev_added":"2026-08-31","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-60004","name":"Gitea Code Injection Vulnerability","kev_added":"2026-08-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-64849","name":"MLflow Server-Side Request Forgery Vulnerability","kev_added":"2026-08-19","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-62593","name":"Ray-Project Ray Code Injection Vulnerability","kev_added":"2026-08-17","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-72898","name":"Metabase SQL Injection Vulnerability","kev_added":"2026-08-11","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-8037","name":"Progress LoadMaster Command Injection Vulnerability","kev_added":"2026-08-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2026-63077","name":"JetBrains TeamCity Deserialization of Untrusted Data Vulnerability","kev_added":"2026-08-05","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-9198","name":"IBM Langflow Code Injection Vulnerability","kev_added":"2026-08-04","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-34486","name":"Apache Tomcat Missing Encryption of Sensitive Data Vulnerability","kev_added":"2026-08-04","verdicts":{"aws-waf-baseline":"skipped","aws-waf-full":"skipped","cloudflare-enterprise":"skipped","cloudflare-free":"skipped","control-no-waf":"skipped","google-cloud-armor":"skipped"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-18577","name":"N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability","kev_added":"2026-08-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-63030","name":"WordPress Core Interpretation Conflict Vulnerability","kev_added":"2026-07-21","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"partial","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["azure","cloudflare","f5"]},{"cve_id":"CVE-2026-0770","name":"Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability","kev_added":"2026-07-21","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-58644","name":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","kev_added":"2026-07-16","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-39808","name":"Fortinet FortiSandbox OS Command Injection Vulnerability","kev_added":"2026-07-16","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2026-56291","name":"Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability","kev_added":"2026-07-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-48939","name":"iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability","kev_added":"2026-07-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-56290","name":"Joomlack Page Builder Improper Access Control Vulnerability","kev_added":"2026-07-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-48282","name":"Adobe ColdFusion Path Traversal Vulnerability","kev_added":"2026-07-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2026-48558","name":"SimpleHelp Authentication Bypass Vulnerability","kev_added":"2026-06-29","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-34910","name":"Ubiquiti UniFi OS Improper Input Validation Vulnerability","kev_added":"2026-06-23","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-34908","name":"Ubiquiti UniFi OS Improper Access Control Vulnerability","kev_added":"2026-06-23","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-20253","name":"Splunk Enterprise Missing Authentication for Critical Function Vulnerability","kev_added":"2026-06-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-48907","name":"Widget Factory Joomla Content Editor Improper Access Control Vulnerability","kev_added":"2026-06-16","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-35273","name":"Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability","kev_added":"2026-06-12","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-10520","name":"Ivanti Sentry OS Command Injection Vulnerability","kev_added":"2026-06-11","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2026-50751","name":"Check Point Security Gateway Improper Authentication Vulnerability","kev_added":"2026-06-08","verdicts":{"aws-waf-baseline":"skipped","aws-waf-full":"skipped","cloudflare-enterprise":"skipped","cloudflare-free":"skipped","control-no-waf":"skipped","google-cloud-armor":"skipped"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-42271","name":"BerriAI LiteLLM Command Injection Vulnerability","kev_added":"2026-06-08","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-9082","name":"Drupal Core SQL Injection Vulnerability","kev_added":"2026-05-22","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-34291","name":"Langflow Origin Validation Error Vulnerability","kev_added":"2026-05-21","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-42208","name":"BerriAI LiteLLM SQL Injection Vulnerability","kev_added":"2026-05-08","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-41940","name":"WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability","kev_added":"2026-04-30","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-1708","name":"ConnectWise ScreenConnect Path Traversal Vulnerability","kev_added":"2026-04-28","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2025-29635","name":"D-Link DIR-823X Command Injection Vulnerability","kev_added":"2026-04-24","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-7399","name":"Samsung MagicINFO 9 Server Path Traversal Vulnerability","kev_added":"2026-04-24","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-57728","name":"SimpleHelp Path Traversal Vulnerability","kev_added":"2026-04-24","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-57726","name":"SimpleHelp Missing Authorization Vulnerability","kev_added":"2026-04-24","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-27199","name":"JetBrains TeamCity Relative Path Traversal Vulnerability","kev_added":"2026-04-20","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-27351","name":"PaperCut NG/MF Improper Authentication Vulnerability","kev_added":"2026-04-20","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-34197","name":"Apache ActiveMQ Improper Input Validation Vulnerability","kev_added":"2026-04-16","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2026-21643","name":"Fortinet FortiClient EMS SQL Injection Vulnerability","kev_added":"2026-04-13","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2026-1340","name":"Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","kev_added":"2026-04-08","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2026-35616","name":"Fortinet FortiClient EMS Improper Access Control Vulnerability","kev_added":"2026-04-06","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-3055","name":"Citrix NetScaler Out-of-Bounds Read Vulnerability","kev_added":"2026-03-30","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2026-33017","name":"Langflow Code Injection Vulnerability","kev_added":"2026-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2025-54068","name":"Laravel Livewire Code Injection Vulnerability","kev_added":"2026-03-20","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2025-32432","name":"Craft CMS Code Injection Vulnerability","kev_added":"2026-03-20","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-47813","name":"Wing FTP Server Information Disclosure Vulnerability","kev_added":"2026-03-16","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2025-68613","name":"n8n Improper Control of Dynamically-Managed Code Resources Vulnerability","kev_added":"2026-03-11","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-1603","name":"Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability","kev_added":"2026-03-09","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-26399","name":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","kev_added":"2026-03-09","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-22054","name":"Omnissa Workspace ONE Server-Side Request Forgery","kev_added":"2026-03-09","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2017-7921","name":"Hikvision Multiple Products Improper Authentication Vulnerability","kev_added":"2026-03-05","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-49113","name":"RoundCube Webmail Deserialization of Untrusted Data Vulnerability","kev_added":"2026-02-20","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2021-22175","name":"GitLab Server-Side Request Forgery (SSRF) Vulnerability","kev_added":"2026-02-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-7796","name":"Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability","kev_added":"2026-02-17","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2025-40536","name":"SolarWinds Web Help Desk Security Control Bypass Vulnerability","kev_added":"2026-02-12","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-24423","name":"SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability","kev_added":"2026-02-05","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2025-11953","name":"React Native Community CLI OS Command Injection Vulnerability","kev_added":"2026-02-05","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2025-64328","name":"Sangoma FreePBX OS Command Injection Vulnerability","kev_added":"2026-02-03","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"blocked","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-40551","name":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","kev_added":"2026-02-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2026-1281","name":"Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","kev_added":"2026-01-29","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2026-23760","name":"SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability","kev_added":"2026-01-26","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2025-52691","name":"SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability","kev_added":"2026-01-26","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2025-68645","name":"Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability","kev_added":"2026-01-22","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2025-34026","name":"Versa Concerto Improper Authentication Vulnerability","kev_added":"2026-01-22","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-31125","name":"Vite Vitejs Improper Access Control Vulnerability","kev_added":"2026-01-22","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"partial","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-8110","name":"Gogs Path Traversal Vulnerability","kev_added":"2026-01-12","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-37164","name":"Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability","kev_added":"2026-01-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2023-52163","name":"Digiever DS-2105 Pro Missing Authorization Vulnerability","kev_added":"2025-12-22","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-14611","name":"Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability","kev_added":"2025-12-15","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-58360","name":"OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability","kev_added":"2025-12-11","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-55182","name":"Meta React Server Components Remote Code Execution Vulnerability","kev_added":"2025-12-05","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["azure","cloudflare","crs","f5","google"]},{"cve_id":"CVE-2025-61757","name":"Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability","kev_added":"2025-11-21","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-64446","name":"Fortinet FortiWeb Path Traversal Vulnerability","kev_added":"2025-11-14","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-12480","name":"Gladinet Triofox Improper Access Control Vulnerability","kev_added":"2025-11-12","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2025-48703","name":"CWP Control Web Panel OS Command Injection Vulnerability","kev_added":"2025-11-04","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-11371","name":"Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability","kev_added":"2025-11-04","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-24893","name":"XWiki Platform Eval Injection Vulnerability","kev_added":"2025-10-30","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-6205","name":"Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability","kev_added":"2025-10-28","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-6204","name":"Dassault Systèmes DELMIA Apriso Code Injection Vulnerability","kev_added":"2025-10-28","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2025-59287","name":"Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability","kev_added":"2025-10-24","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-54236","name":"Adobe Commerce and Magento Improper Input Validation Vulnerability","kev_added":"2025-10-24","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-61884","name":"Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability","kev_added":"2025-10-20","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2025-2747","name":"Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability","kev_added":"2025-10-20","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-2746","name":"Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability","kev_added":"2025-10-20","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-43798","name":"Grafana Path Traversal Vulnerability","kev_added":"2025-10-09","verdicts":{"aws-waf-baseline":"skipped","aws-waf-full":"skipped","cloudflare-enterprise":"skipped","cloudflare-free":"skipped","control-no-waf":"skipped","google-cloud-armor":"skipped"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-27915","name":"Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","kev_added":"2025-10-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-61882","name":"Oracle E-Business Suite Unspecified Vulnerability","kev_added":"2025-10-06","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-4008","name":"Smartbedded Meteobridge Command Injection Vulnerability","kev_added":"2025-10-02","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-10035","name":"Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability","kev_added":"2025-09-29","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2021-21311","name":"Adminer Server-Side Request Forgery Vulnerability","kev_added":"2025-09-29","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-20362","name":"Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability","kev_added":"2025-09-25","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-5086","name":"Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability","kev_added":"2025-09-11","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-57819","name":"Sangoma FreePBX Authentication Bypass Vulnerability","kev_added":"2025-08-29","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2020-25078","name":"D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability","kev_added":"2025-08-05","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-20281","name":"Cisco Identity Services Engine Injection Vulnerability","kev_added":"2025-07-28","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-49706","name":"Microsoft SharePoint Improper Authentication Vulnerability","kev_added":"2025-07-22","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2025-2776","name":"SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability","kev_added":"2025-07-22","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2025-2775","name":"SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability","kev_added":"2025-07-22","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2025-53770","name":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","kev_added":"2025-07-20","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-25257","name":"Fortinet FortiWeb SQL Injection Vulnerability","kev_added":"2025-07-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-47812","name":"Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability","kev_added":"2025-07-14","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-5777","name":"Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability","kev_added":"2025-07-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2019-9621","name":"Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability","kev_added":"2025-07-07","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-5418","name":"Rails Ruby on Rails Path Traversal Vulnerability","kev_added":"2025-07-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2016-10033","name":"PHPMailer Command Injection Vulnerability","kev_added":"2025-07-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-24016","name":"Wazuh Server Deserialization of Untrusted Data Vulnerability","kev_added":"2025-06-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-42009","name":"RoundCube Webmail Cross-Site Scripting Vulnerability","kev_added":"2025-06-09","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-56145","name":"Craft CMS Code Injection Vulnerability","kev_added":"2025-06-02","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2021-32030","name":"ASUS Routers Improper Authentication Vulnerability","kev_added":"2025-06-02","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-4632","name":"Samsung MagicINFO 9 Server Path Traversal Vulnerability","kev_added":"2025-05-22","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-4427","name":"Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability","kev_added":"2025-05-19","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-27443","name":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","kev_added":"2025-05-19","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-38950","name":"ZKTeco BioTime Path Traversal Vulnerability","kev_added":"2025-05-19","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-12987","name":"DrayTek Vigor Routers OS Command Injection Vulnerability","kev_added":"2025-05-15","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-3248","name":"Langflow Missing Authentication Vulnerability","kev_added":"2025-05-05","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-34028","name":"Commvault Command Center Path Traversal Vulnerability","kev_added":"2025-05-02","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-58136","name":"Yiiframework Yii Improper Protection of Alternate Path Vulnerability","kev_added":"2025-05-02","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-38475","name":"Apache HTTP Server Improper Escaping of Output Vulnerability","kev_added":"2025-05-01","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-31324","name":"SAP NetWeaver Unrestricted File Upload Vulnerability","kev_added":"2025-04-29","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-30406","name":"Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability","kev_added":"2025-04-08","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-31161","name":"CrushFTP Authentication Bypass Vulnerability","kev_added":"2025-04-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-24813","name":"Apache Tomcat Path Equivalence Vulnerability","kev_added":"2025-04-01","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-20439","name":"Cisco Smart Licensing Utility Static Credential Vulnerability","kev_added":"2025-03-31","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2019-9874","name":"Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability","kev_added":"2025-03-26","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-48248","name":"NAKIVO Backup and Replication Absolute Path Traversal Vulnerability","kev_added":"2025-03-19","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2017-12637","name":"SAP NetWeaver Directory Traversal Vulnerability","kev_added":"2025-03-19","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-13161","name":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","kev_added":"2025-03-10","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2024-13160","name":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","kev_added":"2025-03-10","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-13159","name":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","kev_added":"2025-03-10","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-4885","name":"Progress WhatsUp Gold Path Traversal Vulnerability","kev_added":"2025-03-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2022-43939","name":"Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability","kev_added":"2025-03-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2022-43769","name":"Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability","kev_added":"2025-03-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2023-34192","name":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","kev_added":"2025-02-25","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2025-0108","name":"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","kev_added":"2025-02-18","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-53704","name":"SonicWall SonicOS SSLVPN Improper Authentication Vulnerability","kev_added":"2025-02-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-57727","name":"SimpleHelp Path Traversal Vulnerability","kev_added":"2025-02-13","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2024-45195","name":"Apache OFBiz Forced Browsing Vulnerability","kev_added":"2025-02-04","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-29059","name":"Microsoft .NET Framework Information Disclosure Vulnerability","kev_added":"2025-02-04","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2018-19410","name":"Paessler PRTG Network Monitor Local File Inclusion Vulnerability","kev_added":"2025-02-04","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-50603","name":"Aviatrix Controllers OS Command Injection Vulnerability","kev_added":"2025-01-16","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-55591","name":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","kev_added":"2025-01-14","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2025-0282","name":"Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","kev_added":"2025-01-08","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-55550","name":"Mitel MiCollab Path Traversal Vulnerability","kev_added":"2025-01-07","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-41713","name":"Mitel MiCollab Path Traversal Vulnerability","kev_added":"2025-01-07","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2018-14933","name":"NUUO NVRmini Devices OS Command Injection Vulnerability ","kev_added":"2024-12-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-55956","name":"Cleo Multiple Products Unauthenticated File Upload Vulnerability","kev_added":"2024-12-17","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-20767","name":"Adobe ColdFusion Improper Access Control Vulnerability","kev_added":"2024-12-16","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-50623","name":"Cleo Multiple Products Unrestricted File Upload Vulnerability","kev_added":"2024-12-13","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-51378","name":"CyberPanel Incorrect Default Permissions Vulnerability","kev_added":"2024-12-04","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-11680","name":"ProjectSend Improper Authentication Vulnerability","kev_added":"2024-12-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2024-9474","name":"Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability","kev_added":"2024-11-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-1212","name":"Progress Kemp LoadMaster OS Command Injection Vulnerability","kev_added":"2024-11-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-0012","name":"Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability","kev_added":"2024-11-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-9465","name":"Palo Alto Networks Expedition SQL Injection Vulnerability","kev_added":"2024-11-14","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-9463","name":"Palo Alto Networks Expedition OS Command Injection Vulnerability","kev_added":"2024-11-14","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-41277","name":"Metabase GeoJSON API Local File Inclusion Vulnerability","kev_added":"2024-11-12","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2021-26086","name":"Atlassian Jira Server and Data Center Path Traversal Vulnerability","kev_added":"2024-11-12","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-5910","name":"Palo Alto Networks Expedition Missing Authentication Vulnerability","kev_added":"2024-11-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-51567","name":"CyberPanel Incorrect Default Permissions Vulnerability","kev_added":"2024-11-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2019-16278","name":"Nostromo nhttpd Directory Traversal Vulnerability","kev_added":"2024-11-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-40711","name":"Veeam Backup and Replication Deserialization Vulnerability","kev_added":"2024-10-17","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-28987","name":"SolarWinds Web Help Desk Hardcoded Credential Vulnerability","kev_added":"2024-10-15","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-29824","name":"Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability","kev_added":"2024-10-02","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-25280","name":"D-Link DIR-820 Router OS Command Injection Vulnerability","kev_added":"2024-09-30","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-15415","name":"DrayTek Multiple Vigor Routers OS Command Injection Vulnerability","kev_added":"2024-09-30","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-7593","name":"Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability","kev_added":"2024-09-24","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-8963","name":"Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability","kev_added":"2024-09-19","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-27348","name":"Apache HugeGraph-Server Improper Access Control Vulnerability","kev_added":"2024-09-18","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2020-0618","name":"Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability","kev_added":"2024-09-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-6670","name":"Progress WhatsUp Gold SQL Injection Vulnerability","kev_added":"2024-09-16","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-20124","name":"Draytek VigorConnect Path Traversal Vulnerability ","kev_added":"2024-09-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-20123","name":"Draytek VigorConnect Path Traversal Vulnerability ","kev_added":"2024-09-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-38856","name":"Apache OFBiz Incorrect Authorization Vulnerability","kev_added":"2024-08-27","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2021-33045","name":"Dahua IP Camera Authentication Bypass Vulnerability","kev_added":"2024-08-21","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-33044","name":"Dahua IP Camera Authentication Bypass Vulnerability","kev_added":"2024-08-21","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-28986","name":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","kev_added":"2024-08-15","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-32113","name":"Apache OFBiz Path Traversal Vulnerability","kev_added":"2024-08-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-5217","name":"ServiceNow Incomplete List of Disallowed Inputs Vulnerability","kev_added":"2024-07-29","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-4879","name":"ServiceNow Improper Input Validation Vulnerability","kev_added":"2024-07-29","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-34102","name":"Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability","kev_added":"2024-07-17","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-28995","name":"SolarWinds Serv-U Path Traversal Vulnerability ","kev_added":"2024-07-17","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-36401","name":"OSGeo GeoServer GeoTools Eval Injection Vulnerability","kev_added":"2024-07-15","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-23692","name":"Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability","kev_added":"2024-07-09","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2022-24816","name":"OSGeo GeoServer JAI-EXT Code Injection Vulnerability","kev_added":"2024-06-26","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-4358","name":"Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability","kev_added":"2024-06-13","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-4577","name":"PHP-CGI OS Command Injection Vulnerability","kev_added":"2024-06-12","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2017-3506","name":"Oracle WebLogic Server OS Command Injection Vulnerability","kev_added":"2024-06-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-24919","name":"Check Point Quantum Security Gateways Information Disclosure Vulnerability","kev_added":"2024-05-30","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2020-17519","name":"Apache Flink Improper Access Control Vulnerability","kev_added":"2024-05-23","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-43208","name":"NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability","kev_added":"2024-05-20","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-40655","name":"D-Link DIR-605 Router Information Disclosure Vulnerability","kev_added":"2024-05-16","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-7028","name":"GitLab Community and Enterprise Editions Improper Access Control Vulnerability","kev_added":"2024-05-01","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2024-4040","name":"CrushFTP VFS Sandbox Escape Vulnerability","kev_added":"2024-04-24","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-3400","name":"Palo Alto Networks PAN-OS Command Injection Vulnerability","kev_added":"2024-04-12","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-3273","name":"D-Link Multiple NAS Devices Command Injection Vulnerability","kev_added":"2024-04-11","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-3272","name":"D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability","kev_added":"2024-04-11","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-44529","name":"Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability ","kev_added":"2024-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2019-7256","name":"Nice Linear eMerge E3-Series OS Command Injection Vulnerability","kev_added":"2024-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-27198","name":"JetBrains TeamCity Authentication Bypass Vulnerability","kev_added":"2024-03-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2021-36380","name":"Sunhillo SureLine OS Command Injection Vulnerablity","kev_added":"2024-03-05","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-1709","name":"ConnectWise ScreenConnect Authentication Bypass Vulnerability","kev_added":"2024-02-22","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2024-21893","name":"Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability","kev_added":"2024-01-31","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-22527","name":"Atlassian Confluence Data Center and Server Template Injection Vulnerability","kev_added":"2024-01-24","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2023-34048","name":"VMware vCenter Server Out-of-Bounds Write Vulnerability","kev_added":"2024-01-22","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-35082","name":"Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability","kev_added":"2024-01-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-6549","name":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","kev_added":"2024-01-17","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2024-21887","name":"Ivanti Connect Secure and Policy Secure Command Injection Vulnerability","kev_added":"2024-01-10","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2023-46805","name":"Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability","kev_added":"2024-01-10","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2023-29357","name":"Microsoft SharePoint Server Privilege Escalation Vulnerability","kev_added":"2024-01-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2023-38203","name":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","kev_added":"2024-01-08","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-29300","name":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","kev_added":"2024-01-08","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-27524","name":"Apache Superset Insecure Default Initialization of Resource Vulnerability","kev_added":"2024-01-08","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-23752","name":"Joomla! Improper Access Control Vulnerability","kev_added":"2024-01-08","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2023-41266","name":"Qlik Sense Path Traversal Vulnerability","kev_added":"2023-12-07","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-41265","name":"Qlik Sense HTTP Tunneling Vulnerability","kev_added":"2023-12-07","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"blocked","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-49103","name":"ownCloud graphapi Information Disclosure Vulnerability","kev_added":"2023-11-30","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2023-1671","name":"Sophos Web Appliance Command Injection Vulnerability","kev_added":"2023-11-16","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-2551","name":"Oracle Fusion Middleware Unspecified Vulnerability","kev_added":"2023-11-16","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-47246","name":"SysAid Server Path Traversal Vulnerability","kev_added":"2023-11-13","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-36845","name":"Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability","kev_added":"2023-11-13","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2023-36844","name":"Juniper Junos OS EX Series PHP External Variable Modification Vulnerability","kev_added":"2023-11-13","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-22518","name":"Atlassian Confluence Data Center and Server Improper Authorization Vulnerability","kev_added":"2023-11-07","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["aws","f5"]},{"cve_id":"CVE-2023-46747","name":"F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability","kev_added":"2023-10-31","verdicts":{"aws-waf-baseline":"error","aws-waf-full":"error","cloudflare-enterprise":"partial","cloudflare-free":"error","control-no-waf":"partial","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-4966","name":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","kev_added":"2023-10-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2023-20198","name":"Cisco IOS XE Web UI Privilege Escalation Vulnerability","kev_added":"2023-10-16","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2023-41763","name":"Microsoft Skype for Business Privilege Escalation Vulnerability","kev_added":"2023-10-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-40044","name":"Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability","kev_added":"2023-10-05","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2023-22515","name":"Atlassian Confluence Data Center and Server Broken Access Control Vulnerability","kev_added":"2023-10-05","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"partial","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["aws","f5"]},{"cve_id":"CVE-2023-42793","name":"JetBrains TeamCity Authentication Bypass Vulnerability","kev_added":"2023-10-04","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2021-3129","name":"Laravel Ignition File Upload Vulnerability","kev_added":"2023-09-18","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-32315","name":"Ignite Realtime Openfire Path Traversal Vulnerability","kev_added":"2023-08-24","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"blocked","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2023-38035","name":"Ivanti Sentry Authentication Bypass Vulnerability","kev_added":"2023-08-22","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2023-24489","name":"Citrix Content Collaboration ShareFile Improper Access Control Vulnerability","kev_added":"2023-08-16","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2023-37580","name":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","kev_added":"2023-07-27","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-35078","name":"Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability","kev_added":"2023-07-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-38205","name":"Adobe ColdFusion Improper Access Control Vulnerability","kev_added":"2023-07-20","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2023-29298","name":"Adobe ColdFusion Improper Access Control Vulnerability","kev_added":"2023-07-20","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-3519","name":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","kev_added":"2023-07-19","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2022-29303","name":"SolarView Compact Command Injection Vulnerability","kev_added":"2023-07-13","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-20887","name":"Vmware Aria Operations for Networks Command Injection Vulnerability","kev_added":"2023-06-22","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-12641","name":"Roundcube Webmail Remote Code Execution Vulnerability","kev_added":"2023-06-22","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-34362","name":"Progress MOVEit Transfer SQL Injection Vulnerability","kev_added":"2023-06-02","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2023-25717","name":"Multiple Ruckus Wireless Products CSRF and RCE Vulnerability","kev_added":"2023-05-12","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-1389","name":"TP-Link Archer AX-21 Command Injection Vulnerability","kev_added":"2023-05-01","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-45046","name":"Apache Log4j2 Deserialization of Untrusted Data Vulnerability","kev_added":"2023-05-01","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["azure","google"]},{"cve_id":"CVE-2023-28432","name":"MinIO Information Disclosure Vulnerability","kev_added":"2023-04-21","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2023-27350","name":"PaperCut MF/NG Improper Access Control Vulnerability","kev_added":"2023-04-21","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"partial","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2022-27926","name":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","kev_added":"2023-04-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-26360","name":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","kev_added":"2023-03-15","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2021-39144","name":"XStream Remote Code Execution Vulnerability","kev_added":"2023-03-10","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-35914","name":"Teclib GLPI Remote Code Execution Vulnerability","kev_added":"2023-03-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2022-33891","name":"Apache Spark Command Injection Vulnerability","kev_added":"2023-03-07","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-36537","name":"ZK Framework AuUploader Unspecified Vulnerability","kev_added":"2023-02-27","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2022-47986","name":"IBM Aspera Faspex Code Execution Vulnerability","kev_added":"2023-02-21","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-46169","name":"Cacti Command Injection Vulnerability","kev_added":"2023-02-16","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2023-0669","name":"Fortra GoAnywhere MFT Remote Code Execution Vulnerability","kev_added":"2023-02-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2022-24990","name":"TerraMaster OS Remote Command Execution Vulnerability","kev_added":"2023-02-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2023-22952","name":"Multiple SugarCRM Products Remote Code Execution Vulnerability","kev_added":"2023-02-02","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-21587","name":"Oracle E-Business Suite Unspecified Vulnerability","kev_added":"2023-02-02","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2022-47966","name":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","kev_added":"2023-01-23","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2022-44877","name":"CWP Control Web Panel OS Command Injection Vulnerability","kev_added":"2023-01-17","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2018-18809","name":"TIBCO JasperReports Library Directory Traversal Vulnerability","kev_added":"2022-12-29","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-35587","name":"Oracle Fusion Middleware Unspecified Vulnerability","kev_added":"2022-11-28","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","f5"]},{"cve_id":"CVE-2022-41352","name":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","kev_added":"2022-10-20","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-40684","name":"Fortinet Multiple Products Authentication Bypass Vulnerability","kev_added":"2022-10-11","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2022-36804","name":"Atlassian Bitbucket Server and Data Center Command Injection Vulnerability","kev_added":"2022-09-30","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-3236","name":"Sophos Firewall Code Injection Vulnerability","kev_added":"2022-09-23","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-35405","name":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","kev_added":"2022-09-22","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-27593","name":"QNAP Photo Station Externally Controlled Reference Vulnerability","kev_added":"2022-09-08","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2018-6530","name":"D-Link Multiple Routers OS Command Injection Vulnerability","kev_added":"2022-09-08","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2017-5521","name":"NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability","kev_added":"2022-09-08","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-26352","name":"dotCMS Unrestricted Upload of File Vulnerability","kev_added":"2022-08-25","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-24112","name":"Apache APISIX Authentication Bypass Vulnerability","kev_added":"2022-08-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-22963","name":"VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability","kev_added":"2022-08-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["azure"]},{"cve_id":"CVE-2021-39226","name":"Grafana Authentication Bypass Vulnerability","kev_added":"2022-08-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2022-22536","name":"SAP Multiple Products HTTP Request Smuggling Vulnerability","kev_added":"2022-08-18","verdicts":{"aws-waf-baseline":"error","aws-waf-full":"error","cloudflare-enterprise":"error","cloudflare-free":"error","control-no-waf":"blocked","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2017-15944","name":"Palo Alto Networks PAN-OS Remote Code Execution Vulnerability","kev_added":"2022-08-18","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-37042","name":"Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability","kev_added":"2022-08-11","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-27925","name":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","kev_added":"2022-08-11","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-27924","name":"Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability","kev_added":"2022-08-04","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-26138","name":"Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability","kev_added":"2022-07-29","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2019-7195","name":"QNAP Photo Station Path Traversal Vulnerability","kev_added":"2022-06-08","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-7194","name":"QNAP Photo Station Path Traversal Vulnerability","kev_added":"2022-06-08","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-7192","name":"QNAP Photo Station Improper Access Control Vulnerability","kev_added":"2022-06-08","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-26134","name":"Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","kev_added":"2022-06-02","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["azure"]},{"cve_id":"CVE-2010-1428","name":"Red Hat JBoss Information Disclosure Vulnerability","kev_added":"2022-05-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2010-0738","name":"Red Hat JBoss Authentication Bypass Vulnerability","kev_added":"2022-05-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2017-18362","name":"Kaseya VSA SQL Injection Vulnerability","kev_added":"2022-05-24","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2022-30525","name":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","kev_added":"2022-05-16","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-22947","name":"VMware Spring Cloud Gateway Code Injection Vulnerability","kev_added":"2022-05-16","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["azure"]},{"cve_id":"CVE-2022-1388","name":"F5 BIG-IP Missing Authentication Vulnerability","kev_added":"2022-05-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-29464","name":"WSO2 Multiple Products Unrestrictive Upload of File Vulnerability","kev_added":"2022-04-25","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2018-6882","name":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","kev_added":"2022-04-19","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-3929","name":"Crestron Multiple Products Command Injection Vulnerability","kev_added":"2022-04-15","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-16057","name":"D-Link DNS-320 Remote Code Execution Vulnerability","kev_added":"2022-04-15","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2018-7841","name":"Schneider Electric U.motion Builder SQL Injection Vulnerability","kev_added":"2022-04-15","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2007-3010","name":"Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability","kev_added":"2022-04-15","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-22954","name":"VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability","kev_added":"2022-04-14","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2018-7602","name":"Drupal Core Remote Code Execution Vulnerability","kev_added":"2022-04-13","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-22965","name":"Spring Framework JDK 9+ Remote Code Execution Vulnerability","kev_added":"2022-04-04","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["azure"]},{"cve_id":"CVE-2021-45382","name":"D-Link Multiple Routers Remote Code Execution Vulnerability","kev_added":"2022-04-04","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-1040","name":"Sophos Firewall Authentication Bypass Vulnerability","kev_added":"2022-03-31","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2021-28799","name":"QNAP NAS Improper Authorization Vulnerability","kev_added":"2022-03-31","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2018-10562","name":"Dasan GPON Routers Command Injection Vulnerability","kev_added":"2022-03-31","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-26085","name":"Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability","kev_added":"2022-03-28","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-26143","name":"MiCollab, MiVoice Business Express Access Control Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-42237","name":"Sitecore XP Remote Command Execution Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-9054","name":"Zyxel Multiple NAS Devices OS Command Injection Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-5410","name":"VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-25223","name":"Sophos SG UTM Remote Code Execution Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-1956","name":"Apache Kylin OS Command Injection Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-6340","name":"Drupal Core Remote Code Execution Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-2616","name":"Oracle BI Publisher Unauthorized Access Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-16920","name":"D-Link Multiple Routers Command Injection Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-15107","name":"Webmin Command Injection Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-12989","name":"Citrix SD-WAN and NetScaler SQL Injection Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-11043","name":"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-10068","name":"Kentico Xperience Deserialization of Untrusted Data Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2019-1003030","name":"Jenkins Matrix Project Plugin Remote Code Execution Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2018-6961","name":"VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2018-1273","name":"VMware Tanzu Spring Data Commons Property Binder Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2018-11138","name":"Quest KACE System Management Appliance Remote Command Execution Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2017-12617","name":"Apache Tomcat Remote Code Execution Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2017-12615","name":"Apache Tomcat on Windows Remote Code Execution Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2016-1555","name":"NETGEAR Multiple WAP Devices Command Injection Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2015-3035","name":"TP-Link Multiple Archer Devices Directory Traversal Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2015-1427","name":"Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2014-6287","name":"Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2014-3120","name":"Elasticsearch Remote Code Execution Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2013-2251","name":"Apache Struts Improper Input Validation Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"partial","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2012-1823","name":"PHP-CGI Query String Parameter Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2010-2861","name":"Adobe ColdFusion Directory Traversal Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2009-1151","name":"phpMyAdmin Remote Code Execution Vulnerability","kev_added":"2022-03-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-21973","name":"VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability","kev_added":"2022-03-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2019-11581","name":"Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability","kev_added":"2022-03-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2016-6277","name":"NETGEAR Multiple Routers Remote Code Execution Vulnerability","kev_added":"2022-03-07","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-24682","name":"Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","kev_added":"2022-02-25","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-23134","name":"Zabbix Frontend Improper Access Control Vulnerability","kev_added":"2022-02-22","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-23131","name":"Zabbix Frontend Authentication Bypass Vulnerability","kev_added":"2022-02-22","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2022-24086","name":"Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability","kev_added":"2022-02-15","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2017-9841","name":"PHPUnit Command Injection Vulnerability","kev_added":"2022-02-15","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"blocked","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2018-1000861","name":"Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability","kev_added":"2022-02-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2017-9791","name":"Apache Struts 1 Improper Input Validation Vulnerability","kev_added":"2022-02-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2017-10271","name":"Oracle Corporation WebLogic Server Remote Code Execution Vulnerability","kev_added":"2022-02-10","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2016-3088","name":"Apache ActiveMQ Improper Input Validation Vulnerability","kev_added":"2022-02-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2015-1635","name":"Microsoft HTTP.sys Remote Code Execution Vulnerability","kev_added":"2022-02-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-20038","name":"SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability","kev_added":"2022-01-28","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-5722","name":"Grandstream Networks UCM6200 Series SQL Injection Vulnerability","kev_added":"2022-01-28","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2017-5689","name":"Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability","kev_added":"2022-01-28","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2014-6271","name":"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","kev_added":"2022-01-28","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["azure","f5","google"]},{"cve_id":"CVE-2021-40870","name":"Aviatrix Controller Unrestricted Upload of File","kev_added":"2022-01-18","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-33766","name":"Microsoft Exchange Server Information Disclosure","kev_added":"2022-01-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2021-32648","name":"October CMS Improper Authentication","kev_added":"2022-01-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2021-25298","name":"Nagios XI OS Command Injection","kev_added":"2022-01-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-25297","name":"Nagios XI OS Command Injection","kev_added":"2022-01-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-25296","name":"Nagios XI OS Command Injection","kev_added":"2022-01-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-21975","name":"VMware Server Side Request Forgery in vRealize Operations Manager API","kev_added":"2022-01-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-21315","name":"System Information Library for Node.JS Command Injection","kev_added":"2022-01-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-14864","name":"Oracle Business Intelligence Enterprise Edition Path Transversal","kev_added":"2022-01-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-13927","name":"Apache Airflow's Experimental API Authentication Bypass","kev_added":"2022-01-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-11978","name":"Apache Airflow Command Injection","kev_added":"2022-01-18","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-36260","name":"Hikvision Improper Input Validation","kev_added":"2022-01-10","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-22017","name":"VMware vCenter Server Improper Access Control","kev_added":"2022-01-10","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-9670","name":"Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference","kev_added":"2022-01-10","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-7609","name":"Kibana Arbitrary Code Execution","kev_added":"2022-01-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-2725","name":"Oracle WebLogic Server, Injection","kev_added":"2022-01-10","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2017-1000486","name":"Primetek Primefaces Remote Code Execution Vulnerability","kev_added":"2022-01-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2015-7450","name":"IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.","kev_added":"2022-01-10","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-44515","name":"Zoho Desktop Central Authentication Bypass Vulnerability","kev_added":"2021-12-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2021-44228","name":"Apache Log4j2 Remote Code Execution Vulnerability","kev_added":"2021-12-10","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["aws","azure","google"]},{"cve_id":"CVE-2020-17463","name":"Fuel CMS SQL Injection Vulnerability","kev_added":"2021-12-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-7238","name":"Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability","kev_added":"2021-12-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-10758","name":"MongoDB mongo-express Remote Code Execution Vulnerability","kev_added":"2021-12-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-0193","name":"Apache Solr DataImportHandler Code Injection Vulnerability","kev_added":"2021-12-10","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2017-17562","name":"Embedthis GoAhead Remote Code Execution Vulnerability","kev_added":"2021-12-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2017-12149","name":"Red Hat JBoss Application Server Remote Code Execution Vulnerability","kev_added":"2021-12-10","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-44077","name":"Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability","kev_added":"2021-12-01","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-40438","name":"Apache HTTP Server-Side Request Forgery (SSRF)","kev_added":"2021-12-01","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare","crs"]},{"cve_id":"CVE-2021-37415","name":"Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability","kev_added":"2021-12-01","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-42258","name":"BQE BillQuick Web Suite SQL Injection Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-42013","name":"Apache HTTP Server Path Traversal Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"blocked","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2021-41773","name":"Apache HTTP Server Path Traversal Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2021-40539","name":"Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2021-38647","name":"Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2021-35464","name":"ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-35395","name":"Realtek AP-Router SDK Buffer Overflow Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-34473","name":"Microsoft Exchange Server Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-31755","name":"Tenda AC11 Router Stack Buffer Overflow Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2021-30116","name":"Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-27561","name":"Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-26855","name":"Microsoft Exchange Server Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-26084","name":"Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["cloudflare"]},{"cve_id":"CVE-2021-22986","name":"F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-22502","name":"Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-22205","name":"GitLab Community and Enterprise Editions Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-22005","name":"VMware vCenter Server File Upload Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-21985","name":"VMware vCenter Server Improper Input Validation Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-21972","name":"VMware vCenter Server Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-20090","name":"Arcadyan Buffalo Firmware Path Traversal Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-20021","name":"SonicWall Email Security Improper Privilege Management Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2021-1498","name":"Cisco HyperFlex HX Data Platform Command Injection Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2021-1497","name":"Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-8657","name":"EyesOfNetwork Use of Hard-Coded Credentials Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-8644","name":"PlaySMS Server-Side Template Injection Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2020-8515","name":"Multiple DrayTek Vigor Routers Web Management Page Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-8193","name":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-7961","name":"Liferay Portal Deserialization of Untrusted Data Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-6287","name":"SAP NetWeaver Missing Authentication for Critical Function Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-6207","name":"SAP Solution Manager Missing Authentication for Critical Function Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-5902","name":"F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":["azure"]},{"cve_id":"CVE-2020-5847","name":"Unraid Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-4427","name":"IBM Data Risk Manager Security Bypass Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-3952","name":"VMware vCenter Server Information Disclosure Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-3580","name":"Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-3452","name":"Cisco ASA and FTD Read-Only Path Traversal Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-29583","name":"Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-26919","name":"Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-25506","name":"D-Link DNS-320 Device Command Injection Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"blocked","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-25213","name":"WordPress File Manager Plugin Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2020-17530","name":"Apache Struts Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-17496","name":"vBulletin PHP Module Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-16846","name":"SaltStack Salt Shell Injection Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-15505","name":"Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2020-14883","name":"Oracle WebLogic Server Unspecified Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-14882","name":"Oracle WebLogic Server Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["azure"]},{"cve_id":"CVE-2020-14750","name":"Oracle WebLogic Server Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-11738","name":"WordPress Snap Creek Duplicator Plugin File Download Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"partial","cloudflare-free":"partial","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-10987","name":"Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-10221","name":"rConfig OS Command Injection Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-10199","name":"Sonatype Nexus Repository Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2020-10189","name":"Zoho ManageEngine Desktop Central File Upload Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2020-10148","name":"SolarWinds Orion Authentication Bypass Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-9978","name":"WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-9082","name":"ThinkPHP Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-7481","name":"SonicWall SMA100 SQL Injection Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-5591","name":"Fortinet FortiOS Default Configuration Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-4716","name":"IBM Planning Analytics Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-3398","name":"Atlassian Confluence Server and Data Center Path Traversal Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-3396","name":"Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["azure"]},{"cve_id":"CVE-2019-20085","name":"TVT NVMS-1000 Directory Traversal Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-19781","name":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["azure"]},{"cve_id":"CVE-2019-17558","name":"Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"partial","aws-waf-full":"partial","cloudflare-enterprise":"partial","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-16759","name":"vBulletin PHP Module Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-1653","name":"Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-13608","name":"Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-11580","name":"Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"error","aws-waf-full":"error","cloudflare-enterprise":"error","cloudflare-free":"error","control-no-waf":"error","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2019-11510","name":"Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"blocked","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["azure"]},{"cve_id":"CVE-2018-7600","name":"Drupal Core Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2018-20062","name":"ThinkPHP \"noneCms\" Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":[]},{"cve_id":"CVE-2018-18325","name":"DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2018-15961","name":"Adobe ColdFusion Unrestricted File Upload Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"partial"},"named_in_changelog_by":[]},{"cve_id":"CVE-2018-15811","name":"DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2018-13379","name":"Fortinet FortiOS SSL VPN Path Traversal Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["azure"]},{"cve_id":"CVE-2018-11776","name":"Apache Struts Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"partial","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["crs","f5"]},{"cve_id":"CVE-2018-0296","name":"Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["f5"]},{"cve_id":"CVE-2017-9822","name":"DotNetNuke (DNN) Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2017-9805","name":"Apache Struts Deserialization of Untrusted Data Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["azure","google"]},{"cve_id":"CVE-2017-7269","name":"Microsoft Windows Server Buffer Overflow Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":[]},{"cve_id":"CVE-2017-5638","name":"Apache Struts Remote Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"blocked","aws-waf-full":"blocked","cloudflare-enterprise":"blocked","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"blocked"},"named_in_changelog_by":["azure"]},{"cve_id":"CVE-2016-4437","name":"Apache Shiro Code Execution Vulnerability","kev_added":"2021-11-03","verdicts":{"aws-waf-baseline":"passed","aws-waf-full":"passed","cloudflare-enterprise":"passed","cloudflare-free":"passed","control-no-waf":"passed","google-cloud-armor":"passed"},"named_in_changelog_by":["f5"]}]}