Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2017-14537 | CVE-2017-14537 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2016-15047 | CVE-2016-15047 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2016-15043 | wp_mobile_detector_project wp_mobile_detector Unrestricted Upload of File with Dangerous Type | HIGH | N/A | N/A | cvelistv5 | 2016-06-03 |
| cve-2013-2251 | Apache Struts Improper Input Validation Vulnerability | HIGH | N/A | 100.00% | cvelistv5 | 2020-10-14 |
| cve-2026-114625 | CVE-2026-114625 | CRITICAL | 9.4 | N/A | cvelistv5 | |
| cve-2026-110447 | CVE-2026-110447 | CRITICAL | 9.2 | N/A | cvelistv5 | |
| cve-2025-49931 | CVE-2025-49931 | CRITICAL | 9.3 | N/A | cvelistv5 | |
| cve-2026-44373 | CVE-2026-44373 | MEDIUM | 5.3 | N/A | cvelistv5 | |
| cve-2026-109618 | CVE-2026-109618 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-68045 | CVE-2025-68045 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2026-89026 | CVE-2026-89026 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-88062 | CVE-2026-88062 | CRITICAL | 9.5 | N/A | cvelistv5 | |
| cve-2026-85706 | CVE-2026-85706 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-45695 | SUSE CVE CVE-2026-45695 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-07-17 |
| cve-2026-42796 | workiva arelle Missing Authentication for Critical Functionality | HIGH | N/A | N/A | cvelistv5 | 2026-09-18 |
| cve-2026-32255 | kan kan Server-Side Request Forgery | HIGH | N/A | N/A | cvelistv5 | 2026-09-17 |
| cve-2026-21589 | CVE-2026-21589 | CRITICAL | 9.3 | N/A | cvelistv5 | |
| cve-2026-104935 | CVE-2026-104935 | HIGH | 8.6 | N/A | cvelistv5 | |
| cve-2025-8266 | CVE-2025-8266 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-61884 | CVE-2025-61884 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2025-56520 | CVE-2025-56520 | MEDIUM | 5.3 | N/A | cvelistv5 | |
| cve-2025-49706 | CVE-2025-49706 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-49002 | CVE-2025-49002 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-41243 | CVE-2025-41243 | CRITICAL | 10.0 | N/A | cvelistv5 | |
| cve-2025-32813 | CVE-2025-32813 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-29306 | CVE-2025-29306 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-29085 | Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | N/A | cvelistv5 | 2025-06-09 |
| cve-2025-2746 | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-10-20 |
| cve-2025-2636 | InstaWP instawp_connect Improper Limitation of a Pathname to a Restricted Directory | HIGH | N/A | N/A | cvelistv5 | 2025-04-11 |
| cve-2025-1661 | pluginus husky_-_products_filter_professional_for_woocommerce Improper Limitation of a Pathname to a Restricted Directory | CRITICAL | 9.8 | N/A | cvelistv5 | 2025-03-10 |