Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-36971 Android Kernel Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2024-08-05
cve-2024-32113 Apache OFBiz Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2024-06-14
cve-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability HIGH N/A 73.04% cvelistv5 2024-08-01
cve-2024-37085 VMware ESXi Authentication Bypass Vulnerability MEDIUM 6.8 N/A cvelistv5 2024-04-23
cve-2024-5217 ServiceNow Incomplete List of Disallowed Inputs Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-07-20
cve-2024-4879 ServiceNow Improper Input Validation Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-07-23
cve-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability HIGH N/A N/A cvelistv5 2024-07-24
cve-2024-39891 Twilio Authy Information Disclosure Vulnerability MEDIUM 5.3 N/A cvelistv5 2024-07-02
cve-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability HIGH N/A 78.82% cvelistv5 2012-12-29
cve-2024-34102 Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-07-12
cve-2024-28995 SolarWinds Serv-U Path Traversal Vulnerability HIGH 8.6 N/A cvelistv5 2024-06-21
cve-2022-22948 VMware vCenter Server Incorrect Default File Permissions Vulnerability MEDIUM 6.5 N/A cvelistv5 2024-06-18
cve-2024-36401 OSGeo GeoServer GeoTools Eval Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-07-03
cve-2024-38112 Microsoft Windows MSHTML Platform Spoofing Vulnerability HIGH 7.5 N/A cvelistv5 2024-07-09
cve-2024-38080 Microsoft Windows Hyper-V Privilege Escalation Vulnerability HIGH N/A N/A cvelistv5 2024-07-09
cve-2024-23692 Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL N/A N/A cvelistv5 2024-06-28
cve-2024-20399 Cisco NX-OS Command Injection Vulnerability MEDIUM 6.0 N/A cvelistv5 2024-07-01
cve-2022-2586 SUSE CVE CVE-2022-2586 MEDIUM 6.7 N/A cvelistv5 2026-10-11
cve-2022-24816 OSGeo GeoServer JAI-EXT Code Injection Vulnerability HIGH N/A N/A cvelistv5 2024-01-22
cve-2020-13965 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability HIGH N/A 76.60% cvelistv5 2024-06-26
cve-2024-4358 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-06-07
cve-2024-32896 Android Pixel Privilege Escalation Vulnerability HIGH 8.1 N/A cvelistv5 2024-06-11
cve-2024-26169 Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability CRITICAL N/A N/A cvelistv5 2024-06-12
cve-2024-4610 hw:arm: Mali GPU Kernel Driver allows improper GPU memory processing operations HIGH 7.8 N/A cvelistv5 2025-11-21
cve-2024-4577 PHP-CGI OS Command Injection Vulnerability CRITICAL N/A N/A cvelistv5 2024-06-07
cve-2017-3506 CVE-2017-3506 HIGH N/A 95.99% cvelistv5
cve-2024-24919 Check Point Quantum Security Gateways Information Disclosure Vulnerability HIGH 8.6 N/A cvelistv5 2024-05-27
cve-2024-1086 Linux Kernel Use-After-Free Vulnerability CRITICAL N/A N/A cvelistv5 2024-05-30
cve-2024-4978 Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability HIGH 8.7 N/A cvelistv5 2024-05-23
cve-2024-5274 Google Chromium V8 Type Confusion Vulnerability HIGH N/A N/A cvelistv5 2024-05-20