Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2022-0434 | a3rev page_view_count Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | N/A | cvelistv5 | 2025-06-07 |
| cve-2021-48008 | Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | N/A | cvelistv5 | 2023-10-18 |
| cve-2021-24946 | webnus modern_events_calendar_lite Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | N/A | cvelistv5 | 2021-11-15 |
| cve-2021-21311 | CVE-2021-21311 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2020-6207 | SAP Solution Manager Missing Authentication for Critical Function Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2021-04-08 |
| cve-2020-37214 | thecontrolgroup voyager Improper Limitation of a Pathname to a Restricted Directory | HIGH | 8.7 | N/A | cvelistv5 | 2026-02-11 |
| cve-2020-29390 | CVE-2020-29390 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2020-25223 | Sophos SG UTM Remote Code Execution Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2022-03-25 |
| cve-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2021-06-01 |
| cve-2019-7609 | Kibana Arbitrary Code Execution | HIGH | N/A | N/A | cvelistv5 | 2021-05-07 |
| cve-2019-25776 | CVE-2019-25776 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2019-16057 | CVE-2019-16057 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2019-10647 | zzzcms zzzphp Unrestricted Upload of File with Dangerous Type | HIGH | N/A | N/A | cvelistv5 | 2024-11-26 |
| cve-2018-8033 | CVE-2018-8033 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2018-15811 | CVE-2018-15811 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2017-9791 | Apache Struts 1 Improper Input Validation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2020-06-24 |
| cve-2017-3506 | CVE-2017-3506 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2017-20284 | caucho resin Improper Limitation of a Pathname to a Restricted Directory | HIGH | N/A | N/A | cvelistv5 | 2026-09-18 |
| cve-2017-14537 | CVE-2017-14537 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2016-20080 | Improper Control of Filename for Include/Require Statement in PHP Program | MEDIUM | 6.9 | N/A | cvelistv5 | 2026-09-22 |
| cve-2016-15043 | wp_mobile_detector_project wp_mobile_detector Unrestricted Upload of File with Dangerous Type | HIGH | N/A | N/A | cvelistv5 | 2016-06-03 |
| cve-2014-6287 | Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2019-06-03 |
| cve-2014-2383 | CVE-2014-2383 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2013-2251 | Apache Struts Improper Input Validation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2020-10-14 |
| cve-2026-114625 | CVE-2026-114625 | CRITICAL | 9.4 | N/A | cvelistv5 | |
| cve-2026-109619 | CVE-2026-109619 | CRITICAL | 9.2 | N/A | cvelistv5 | |
| cve-2026-97237 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetE... | HIGH | 7.1 | N/A | cvelistv5 | 2026-10-22 |
| cve-2025-71434 | CVE-2025-71434 | HIGH | 8.8 | N/A | cvelistv5 | |
| cve-2024-58396 | Improper Limitation of a Pathname to a Restricted Directory | HIGH | 8.7 | N/A | cvelistv5 | 2026-10-22 |
| cve-2024-58394 | CVE-2024-58394 | MEDIUM | 5.1 | N/A | cvelistv5 |