Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-57968 Advantive VeraCore Unrestricted File Upload Vulnerability CRITICAL 9.9 N/A cvelistv5 2025-02-03
cve-2024-13161 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2025-03-10
cve-2024-13160 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2025-03-10
cve-2024-13159 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2025-03-10
cve-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability CRITICAL N/A N/A cvelistv5 2025-03-04
cve-2025-22225 VMware ESXi Arbitrary Write Vulnerability CRITICAL N/A N/A cvelistv5 2025-03-04
cve-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability CRITICAL 9.3 N/A cvelistv5 2025-03-04
cve-2024-50302 kernel: HID: core: zero-initialize the report buffer MEDIUM 6.1 N/A cvelistv5 2026-08-31
cve-2024-4885 Progress WhatsUp Gold Path Traversal Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-08-06
cve-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability MEDIUM 6.5 N/A cvelistv5 2025-02-25
cve-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability HIGH 8.6 N/A cvelistv5 2023-11-17
cve-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability HIGH 8.8 N/A cvelistv5 2025-03-03
cve-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability CRITICAL N/A 22.35% cvelistv5 2020-06-24
cve-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2024-11-26
cve-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CRITICAL 9.0 N/A cvelistv5 2025-02-25
cve-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability HIGH 8.8 N/A cvelistv5 2025-02-24
cve-2017-3066 Adobe ColdFusion Deserialization Vulnerability CRITICAL 9.8 90.60% cvelistv5 2018-08-30
cve-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2025-02-19
cve-2025-23209 Craft CMS Code Injection Vulnerability HIGH N/A N/A cvelistv5 2025-01-17
cve-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability HIGH N/A N/A cvelistv5 2025-02-18
cve-2025-0108 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability HIGH N/A N/A cvelistv5 2025-02-13
cve-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability CRITICAL N/A N/A cvelistv5 2025-02-13
cve-2024-57727 SimpleHelp Path Traversal Vulnerability CRITICAL N/A N/A cvelistv5 2025-01-31
cve-2025-24200 Apple iOS and iPadOS Incorrect Authorization Vulnerability HIGH N/A N/A cvelistv5 2025-02-10
cve-2024-41710 Mitel SIP Phones Argument Injection Vulnerability MEDIUM 6.8 N/A cvelistv5 2025-01-28
cve-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2025-02-11
cve-2025-21391 Microsoft Windows Storage Link Following Vulnerability HIGH 7.1 N/A cvelistv5 2025-02-11
cve-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2025-01-28
cve-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2025-01-28
cve-2025-0994 Trimble Cityworks Deserialization Vulnerability HIGH N/A N/A cvelistv5 2025-02-06