| CVE-2018-14667 | CVE-2018-14667: Critical Vulnerability in Red Hat RichFaces Framework | CRITICAL | Code Injection | Enterprise Linux | Yes | Nov 6, 2018 |
| CVE-2018-14558 | CVE-2018-14558: Critical Vulnerability in Tenda AC7, AC9, and AC10 Routers | CRITICAL | Command Injection | Ac10 Firmware | -- | Oct 30, 2018 |
| CVE-2018-15961 | CVE-2018-15961: Critical Vulnerability in Adobe ColdFusion | CRITICAL | Unrestricted File Upload | Coldfusion | Yes | Sep 25, 2018 |
| CVE-2018-14933 | CVE-2018-14933: Critical Vulnerability in NUUO NVRmini Devices | CRITICAL | Command Injection | Nvrmini Firmware | Yes | Aug 4, 2018 |
| CVE-2018-7602 | CVE-2018-7602: Critical Vulnerability in Drupal Core | CRITICAL | Code Injection | Debian Linux | Yes | Jul 19, 2018 |
| CVE-2018-11138 | CVE-2018-11138: Critical Vulnerability in Quest KACE System Management Appliance | CRITICAL | Command Injection | Kace System Management Appliance | Yes | May 31, 2018 |
| CVE-2018-10562 | CVE-2018-10562: Critical Vulnerability in Dasan GPON Routers | CRITICAL | Command Injection | Gpon Router Firmware | Yes | May 4, 2018 |
| CVE-2018-10561 | CVE-2018-10561: Critical Vulnerability in Dasan GPON Routers | CRITICAL | Authentication Bypass | Gpon Router Firmware | Yes | May 4, 2018 |
| CVE-2018-2628 | CVE-2018-2628: Critical Vulnerability in Oracle WebLogic Server | CRITICAL | Insecure Deserialization | Weblogic Server | Yes | Apr 19, 2018 |
| CVE-2018-1273 | CVE-2018-1273: Critical Vulnerability in Pivotal Software Spring Data Commons | CRITICAL | Code Injection | Financial Services Crime And Compliance Management Studio | Yes | Apr 11, 2018 |
| CVE-2018-7600 | CVE-2018-7600: Critical Vulnerability in Drupal Core | CRITICAL | Input Validation | Debian Linux | Yes | Mar 29, 2018 |
| CVE-2018-7445 | CVE-2018-7445: Critical Vulnerability in MikroTik RouterOS | CRITICAL | Buffer Overflow | Routeros | Yes | Mar 19, 2018 |
| CVE-2018-0147 | CVE-2018-0147: Critical Vulnerability in Cisco Secure Access Control System | CRITICAL | Input Validation | Secure Access Control System | -- | Mar 8, 2018 |
| CVE-2018-6530 | CVE-2018-6530: Critical Vulnerability in D-Link Multiple Routers | CRITICAL | Command Injection | Dir-860l Firmware | -- | Mar 6, 2018 |
| CVE-2018-0125 | CVE-2018-0125: Critical Vulnerability in Cisco RV132W and RV134W VPN Routers | CRITICAL | Input Validation | Rv132w Firmware | -- | Feb 8, 2018 |
| CVE-2017-1000353 | CVE-2017-1000353: Critical Vulnerability in Jenkins and Oracle Communications Cloud Native Core Automated Test Suite | CRITICAL | Insecure Deserialization | Communications Cloud Native Core Automated Test Suite | Yes | Jan 29, 2018 |
| CVE-2017-1000486 | CVE-2017-1000486: Critical Vulnerability in Primetek Primefaces | CRITICAL | Weak Cryptography | Primefaces | Yes | Jan 3, 2018 |
| CVE-2017-15944 | CVE-2017-15944: Critical Vulnerability in Palo Alto Networks PAN-OS | CRITICAL | Input Validation | Pan-Os | Yes | Dec 11, 2017 |
| CVE-2017-12149 | CVE-2017-12149: Critical Vulnerability in Red Hat JBoss Application Server | CRITICAL | Insecure Deserialization | Jboss Enterprise Application Platform | Yes | Oct 4, 2017 |
| CVE-2015-1187 | CVE-2015-1187: Critical Vulnerability in D-Link and TRENDnet Devices | CRITICAL | Authentication Bypass | Dir-626l Firmware | Yes | Sep 21, 2017 |