Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2019-10647 | zzzcms zzzphp Unrestricted Upload of File with Dangerous Type | HIGH | N/A | 6.64% | cvelistv5 | 2024-11-26 |
| cve-2018-8033 | CVE-2018-8033 | HIGH | N/A | 25.74% | cvelistv5 | |
| cve-2018-15811 | CVE-2018-15811 | HIGH | N/A | 76.30% | cvelistv5 | |
| cve-2017-9791 | Apache Struts 1 Improper Input Validation Vulnerability | HIGH | N/A | 98.91% | cvelistv5 | 2020-06-24 |
| cve-2017-3506 | Oracle WebLogic Server OS Command Injection Vulnerability | HIGH | N/A | 95.99% | cvelistv5 | 2023-05-16 |
| cve-2017-14537 | CVE-2017-14537 | HIGH | N/A | 39.28% | cvelistv5 | |
| cve-2017-12637 | SAP NetWeaver Directory Traversal Vulnerability | HIGH | 7.5 | 95.11% | cvelistv5 | 2017-08-07 |
| cve-2016-3976 | CVE-2016-3976 | HIGH | N/A | 47.25% | cvelistv5 | |
| cve-2016-15043 | wp_mobile_detector_project wp_mobile_detector Unrestricted Upload of File with Dangerous Type | HIGH | N/A | 8.89% | cvelistv5 | 2016-06-03 |
| cve-2014-6287 | Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability | CRITICAL | 9.8 | 99.32% | cvelistv5 | 2019-06-03 |
| cve-2014-2383 | CVE-2014-2383 | HIGH | N/A | 39.37% | cvelistv5 | |
| cve-2013-2251 | Apache Struts Improper Input Validation Vulnerability | HIGH | N/A | 100.00% | cvelistv5 | 2020-10-14 |
| cve-2011-3587 | CVE-2011-3587 | HIGH | N/A | 78.08% | cvelistv5 | |
| cve-2026-97229 | GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability | CRITICAL | 10.0 | 27.30% | cvelistv5 | 2026-10-28 |
| cve-2026-76418 | CVE-2026-76418 | HIGH | 8.6 | 0.82% | cvelistv5 | |
| cve-2026-102785 | CVE-2026-102785 | CRITICAL | 10.0 | 0.77% | cvelistv5 | |
| cve-2026-48356 | Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability | CRITICAL | 9.3 | 44.58% | cvelistv5 | 2026-10-27 |
| cve-2026-111497 | Google Brotli Unchecked Return Value Vulnerability | CRITICAL | 9.2 | 82.64% | cvelistv5 | 2026-10-26 |
| cve-2024-3848 | CVE-2024-3848 | HIGH | 7.5 | 43.28% | cvelistv5 | |
| cve-2026-112353 | CVE-2026-112353 | MEDIUM | 6.2 | 0.24% | cvelistv5 | |
| cve-2026-101767 | CVE-2026-101767 | CRITICAL | 9.8 | 0.61% | cvelistv5 | |
| cve-2026-28167 | CVE-2026-28167 | HIGH | 7.5 | 0.50% | cvelistv5 | |
| cve-2026-114509 | Laravel Laravel Framework Improper Authentication | HIGH | N/A | 0.78% | cvelistv5 | 2026-10-27 |
| cve-2026-95610 | Improper Neutralization of Special Elements used in an SQL Command | HIGH | 8.5 | 0.21% | cvelistv5 | 2026-10-27 |
| cve-2024-32507 | CVE-2024-32507 | HIGH | 8.8 | 0.46% | cvelistv5 | |
| cve-2026-28039 | CVE-2026-28039 | HIGH | 7.5 | 0.42% | cvelistv5 | |
| cve-2026-96652 | CVE-2026-96652 | MEDIUM | 5.3 | 1.82% | cvelistv5 | |
| cve-2026-88771 | Citrix NetScaler Improper Input Validation Vulnerability | HIGH | N/A | 82.16% | cvelistv5 | 2026-09-27 |
| cve-2026-21589 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | CRITICAL | 9.3 | 99.48% | cvelistv5 | 2026-10-07 |
| cve-2026-104935 | CVE-2026-104935 | HIGH | 8.6 | 86.77% | cvelistv5 |