Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability HIGH N/A 94.76% cvelistv5 2019-06-13
cve-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability CRITICAL N/A N/A cvelistv5 2024-12-10
cve-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability HIGH N/A N/A cvelistv5 2024-12-16
cve-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability HIGH 7.4 N/A cvelistv5 2024-04-11
cve-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-12-09
cve-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2024-12-10
cve-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability CRITICAL N/A N/A cvelistv5 2024-10-26
cve-2024-11680 ProjectSend Improper Authentication Vulnerability HIGH N/A N/A cvelistv5 2024-11-26
cve-2024-11667 Zyxel Multiple Firewalls Path Traversal Vulnerability CRITICAL N/A N/A cvelistv5 2024-11-21
cve-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability HIGH N/A N/A cvelistv5 2024-09-13
cve-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-13
cve-2024-44309 webkitgtk: data isolation bypass vulnerability MEDIUM 6.1 N/A cvelistv5 2026-06-29
cve-2024-44308 webkitgtk: javascriptcore: processing maliciously crafted web content may lead to arbitrary code execution HIGH 8.8 N/A cvelistv5 2026-06-29
cve-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability HIGH N/A N/A cvelistv5 2024-11-18
cve-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability HIGH 7.5 N/A cvelistv5 2024-11-18
cve-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-19
cve-2024-9474 Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability CRITICAL N/A N/A cvelistv5 2024-11-18
cve-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability CRITICAL 10.0 N/A cvelistv5 2024-03-29
cve-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability CRITICAL N/A N/A cvelistv5 2024-11-18
cve-2024-9465 Palo Alto Networks Expedition SQL Injection Vulnerability CRITICAL 9.2 N/A cvelistv5 2024-11-12
cve-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability CRITICAL 9.9 N/A cvelistv5 2024-10-15
cve-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability HIGH 8.8 N/A cvelistv5 2024-11-12
cve-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability CRITICAL N/A N/A cvelistv5 2024-11-12
cve-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability CRITICAL 10.0 N/A cvelistv5 2022-05-31
cve-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability MEDIUM 5.3 100.00% cvelistv5 2023-11-18
cve-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability HIGH N/A 22.56% cvelistv5 2024-11-07
cve-2024-5910 Palo Alto Networks Expedition Missing Authentication Vulnerability HIGH N/A N/A cvelistv5 2024-11-07
cve-2024-51567 CyberPanel Incorrect Default Permissions Vulnerability CRITICAL N/A N/A cvelistv5 2024-10-29
cve-2024-43093 Android Framework Privilege Escalation Vulnerability HIGH N/A N/A cvelistv5 2024-11-04
cve-2019-16278 Nostromo nhttpd Directory Traversal Vulnerability CRITICAL 9.8 99.03% cvelistv5 2020-05-07