Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-104935 | CVE-2026-104935 | HIGH | 8.6 | 86.77% | cvelistv5 | |
| cve-2025-49706 | CVE-2025-49706 | HIGH | N/A | 99.06% | cvelistv5 | |
| cve-2025-32813 | CVE-2025-32813 | HIGH | N/A | 44.97% | cvelistv5 | |
| cve-2023-54399 | CVE-2023-54399 | HIGH | N/A | 0.73% | cvelistv5 | |
| cve-2023-38950 | CVE-2023-38950 | HIGH | N/A | 92.47% | cvelistv5 | |
| cve-2023-38203 | CVE-2023-38203 | HIGH | N/A | 97.07% | cvelistv5 | |
| cve-2023-27524 | CVE-2023-27524 | HIGH | N/A | 98.15% | cvelistv5 | |
| cve-2022-35405 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | HIGH | N/A | 99.87% | cvelistv5 | 2022-09-22 |
| cve-2021-39935 | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability | HIGH | N/A | 36.14% | cvelistv5 | 2025-03-11 |
| cve-2021-25032 | CVE-2021-25032 | HIGH | N/A | 6.69% | cvelistv5 | |
| cve-2021-24946 | webnus modern_events_calendar_lite Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | 72.80% | cvelistv5 | 2021-11-15 |
| cve-2021-23337 | lodash lodash Improper Control of Generation of Code | HIGH | 7.2 | 21.33% | cvelistv5 | 2026-10-23 |
| cve-2020-8657 | EyesOfNetwork Use of Hard-Coded Credentials Vulnerability | CRITICAL | 9.8 | 91.87% | cvelistv5 | 2021-11-03 |
| cve-2020-6207 | SAP Solution Manager Missing Authentication for Critical Function Vulnerability | HIGH | N/A | 98.13% | cvelistv5 | 2021-04-08 |
| cve-2020-29390 | CVE-2020-29390 | HIGH | N/A | 39.56% | cvelistv5 | |
| cve-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | HIGH | N/A | 97.51% | cvelistv5 | 2021-06-01 |
| cve-2020-13640 | CVE-2020-13640 | HIGH | N/A | 12.71% | cvelistv5 | |
| cve-2019-7609 | Kibana Arbitrary Code Execution | HIGH | N/A | 95.34% | cvelistv5 | 2021-05-07 |
| cve-2019-16057 | CVE-2019-16057 | HIGH | N/A | 86.49% | cvelistv5 | |
| cve-2019-10647 | CVE-2019-10647 | HIGH | N/A | 6.64% | cvelistv5 | |
| cve-2018-8033 | CVE-2018-8033 | HIGH | N/A | 25.74% | cvelistv5 | |
| cve-2018-15811 | CVE-2018-15811 | HIGH | N/A | 76.30% | cvelistv5 | |
| cve-2017-9791 | Apache Struts 1 Improper Input Validation Vulnerability | HIGH | N/A | 98.91% | cvelistv5 | 2020-06-24 |
| cve-2017-3506 | CVE-2017-3506 | HIGH | N/A | 95.99% | cvelistv5 | |
| cve-2017-14537 | CVE-2017-14537 | HIGH | N/A | 39.28% | cvelistv5 | |
| cve-2016-15043 | wp_mobile_detector_project wp_mobile_detector Unrestricted Upload of File with Dangerous Type | HIGH | N/A | 8.89% | cvelistv5 | 2016-06-03 |
| cve-2014-2383 | CVE-2014-2383 | HIGH | N/A | 39.37% | cvelistv5 | |
| cve-2013-2251 | Apache Struts Improper Input Validation Vulnerability | HIGH | N/A | 100.00% | cvelistv5 | 2020-10-14 |
| cve-2026-46300 | Linux Kernel Missing Initialization of a Variable Vulnerability | HIGH | N/A | 16.13% | cvelistv5 | 2026-08-03 |
| cve-2026-41709 | Broadcom VMWare ESX Insufficient Logging Vulnerability | LOW | 2.7 | 0.69% | cvelistv5 | 2026-10-28 |