Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-0411 7-Zip Mark of the Web Bypass Vulnerability HIGH N/A N/A cvelistv5 2025-02-04
cve-2024-21413 Microsoft Outlook Improper Input Validation Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-05-14
cve-2022-23748 Dante Discovery Process Control Vulnerability HIGH N/A N/A cvelistv5 2023-10-11
cve-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability CRITICAL N/A 4.70% cvelistv5 2024-10-31
cve-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability CRITICAL 9.8 10.67% cvelistv5 2024-10-31
cve-2024-53104 kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format HIGH 7.3 N/A cvelistv5 2026-09-01
cve-2024-45195 OFBiz: Apache OFBiz Unauthenticated Remote Code HIGH 7.5 N/A cvelistv5 2025-11-21
cve-2024-29059 Microsoft .NET Framework Information Disclosure Vulnerability HIGH N/A N/A cvelistv5 2024-04-27
cve-2018-9276 Paessler PRTG Network Monitor OS Command Injection Vulnerability HIGH N/A 87.00% cvelistv5 2025-02-04
cve-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability HIGH N/A 97.94% cvelistv5 2025-02-04
cve-2025-24085 Apple Multiple Products Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2025-01-27
cve-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability CRITICAL N/A N/A cvelistv5 2025-01-22
cve-2020-11023 JQuery Cross-Site Scripting (XSS) Vulnerability HIGH N/A 84.89% cvelistv5 2021-01-21
cve-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2025-01-07
cve-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability HIGH 7.8 N/A cvelistv5 2025-01-14
cve-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2025-01-14
cve-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2025-01-14
cve-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability CRITICAL N/A N/A cvelistv5 2025-01-14
cve-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2024-12-18
cve-2023-48365 Qlik Sense HTTP Tunneling Vulnerability CRITICAL N/A N/A cvelistv5 2023-11-28
cve-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability CRITICAL 9.0 N/A cvelistv5 2025-01-08
cve-2024-55550 Mitel MiCollab Path Traversal Vulnerability CRITICAL N/A N/A cvelistv5 2024-12-11
cve-2024-41713 Mitel MiCollab Path Traversal Vulnerability CRITICAL N/A N/A cvelistv5 2024-12-10
cve-2020-2883 Oracle WebLogic Server Unspecified Vulnerability HIGH N/A 94.58% cvelistv5 2020-04-30
cve-2024-3393 Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability HIGH N/A N/A cvelistv5 2024-12-27
cve-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability HIGH 8.1 N/A cvelistv5 2022-03-08
cve-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability HIGH N/A N/A cvelistv5 2024-12-19
cve-2022-23227 NUUO NVRmini2 Devices Missing Authentication Vulnerability HIGH N/A N/A cvelistv5 2024-12-18
cve-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability CRITICAL 9.1 N/A cvelistv5 2024-12-18
cve-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability HIGH 7.2 37.54% cvelistv5 2024-12-18