Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability CRITICAL N/A N/A cvelistv5 2024-09-17
cve-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability HIGH N/A N/A cvelistv5 2024-09-17
cve-2024-37383 roundcubemail: allows XSS via SVG animate attributes UNKNOWN N/A N/A cvelistv5 2025-11-21
cve-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability HIGH N/A N/A cvelistv5 2024-10-23
cve-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability HIGH N/A N/A cvelistv5 2024-10-23
cve-2024-38094 Microsoft SharePoint Deserialization Vulnerability HIGH 7.2 N/A cvelistv5 2024-10-17
cve-2024-9537 ScienceLogic SL1 Unspecified Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-28
cve-2024-40711 Veeam Backup and Replication Deserialization Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-04-23
cve-2024-9680 firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) CRITICAL 9.8 N/A cvelistv5 2026-06-29
cve-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerability HIGH 7.0 N/A cvelistv5 2024-10-11
cve-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability HIGH N/A N/A cvelistv5 2024-10-15
cve-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2024-10-08
cve-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability MEDIUM 6.5 N/A cvelistv5 2024-10-08
cve-2024-23113 Fortinet Multiple Products Format String Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-10-09
cve-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability HIGH N/A N/A cvelistv5 2024-10-08
cve-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2024-10-08
cve-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2024-07-29
cve-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability CRITICAL 10.0 N/A cvelistv5 2024-10-01
cve-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability HIGH N/A N/A cvelistv5 2024-06-19
cve-2023-25280 D-Link DIR-820 Router OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-06-22
cve-2020-15415 DrayTek Multiple Vigor Routers OS Command Injection Vulnerability CRITICAL 9.8 84.48% cvelistv5 2023-02-15
cve-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability HIGH N/A 7.47% cvelistv5 2024-09-30
cve-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability HIGH N/A N/A cvelistv5 2024-08-06
cve-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability CRITICAL 9.4 N/A cvelistv5 2024-09-19
cve-2024-27348 Apache HugeGraph-Server Improper Access Control Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-07-15
cve-2022-21445 Oracle ADF Faces Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-10-08
cve-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability CRITICAL 9.8 94.55% cvelistv5 2024-09-18
cve-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability CRITICAL N/A 99.05% cvelistv5 2023-06-05
cve-2014-0502 Adobe Flash Player Double Free Vulnerablity HIGH N/A 24.82% cvelistv5 2014-02-21
cve-2014-0497 Adobe Flash Player Integer Underflow Vulnerablity HIGH N/A 99.88% cvelistv5 2015-07-21