Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-9234 | CVE-2024-9234 | CRITICAL | 9.8 | 10.45% | cvelistv5 | |
| cve-2023-54399 | CVE-2023-54399 | HIGH | N/A | 0.73% | cvelistv5 | |
| cve-2023-38203 | CVE-2023-38203 | HIGH | N/A | 97.07% | cvelistv5 | |
| cve-2023-27524 | CVE-2023-27524 | HIGH | N/A | 98.15% | cvelistv5 | |
| cve-2022-35405 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | HIGH | N/A | 99.87% | cvelistv5 | 2022-09-22 |
| cve-2022-0434 | a3rev page_view_count Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | 14.78% | cvelistv5 | 2025-06-07 |
| cve-2022-0412 | templateinvaders ti_woocommerce_wishlist Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | 74.00% | cvelistv5 | 2026-09-16 |
| cve-2021-39935 | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability | HIGH | N/A | 36.14% | cvelistv5 | 2026-02-03 |
| cve-2021-25032 | CVE-2021-25032 | HIGH | N/A | 6.69% | cvelistv5 | |
| cve-2021-24946 | webnus modern_events_calendar_lite Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | 72.80% | cvelistv5 | 2021-11-15 |
| cve-2021-21311 | CVE-2021-21311 | HIGH | N/A | 98.46% | cvelistv5 | |
| cve-2020-6207 | SAP Solution Manager Missing Authentication for Critical Function Vulnerability | HIGH | N/A | 98.13% | cvelistv5 | 2021-11-03 |
| cve-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | HIGH | N/A | 97.51% | cvelistv5 | 2025-08-05 |
| cve-2019-7139 | CVE-2019-7139 | HIGH | N/A | 22.24% | cvelistv5 | |
| cve-2019-16057 | D-Link DNS-320 Remote Code Execution Vulnerability | CRITICAL | N/A | 86.49% | cvelistv5 | 2022-04-15 |
| cve-2019-10647 | CVE-2019-10647 | HIGH | N/A | 6.64% | cvelistv5 | |
| cve-2017-9791 | Apache Struts 1 Improper Input Validation Vulnerability | HIGH | N/A | 98.91% | cvelistv5 | 2022-02-10 |
| cve-2017-3506 | CVE-2017-3506 | HIGH | N/A | 95.99% | cvelistv5 | |
| cve-2016-3976 | SAP NetWeaver Directory Traversal Vulnerability | HIGH | N/A | 47.25% | cvelistv5 | 2021-11-03 |
| cve-2014-2383 | CVE-2014-2383 | HIGH | N/A | 39.37% | cvelistv5 | |
| cve-2026-118527 | Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability | MEDIUM | 4.3 | N/A | cvelistv5 | 2026-10-30 |
| cve-2026-111357 | CVE-2026-111357 | HIGH | 7.0 | 0.53% | cvelistv5 | |
| cve-2026-76418 | CVE-2026-76418 | HIGH | 8.6 | 0.82% | cvelistv5 | |
| cve-2026-46300 | Linux Kernel Missing Initialization of a Variable Vulnerability | HIGH | N/A | 16.13% | cvelistv5 | 2026-10-28 |
| cve-2026-118539 | CVE-2026-118539 | HIGH | N/A | 0.30% | cvelistv5 | |
| cve-2025-54988 | CVE-2025-54988 | HIGH | N/A | 47.95% | cvelistv5 | |
| cve-2026-41709 | Broadcom VMWare ESX Insufficient Logging Vulnerability | LOW | 2.7 | 0.69% | cvelistv5 | 2026-10-28 |
| cve-2026-112357 | CVE-2026-112357 | HIGH | 8.5 | 0.13% | cvelistv5 | |
| cve-2026-112356 | CVE-2026-112356 | MEDIUM | 5.1 | 0.25% | cvelistv5 | |
| cve-2026-85688 | CVE-2026-85688 | CRITICAL | 9.3 | 2.64% | cvelistv5 |