Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-14611 Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability HIGH 7.1 N/A cvelistv5 2025-12-15
cve-2025-11371 Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability HIGH 7.5 N/A cvelistv5 2025-11-04
cve-2024-8529 thimpress learnpress Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2024-09-12
cve-2024-53900 mongoosejs mongoose Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2025-11-27
cve-2024-5276 Fortra filecatalyst_workflow Improper Input Validation CRITICAL 9.8 N/A cvelistv5 2025-10-17
cve-2024-50340 sensiolabs symfony Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2026-09-10
cve-2024-37259 CVE-2024-37259 HIGH 7.1 N/A cvelistv5
cve-2024-36412 salesagility suitecrm Improper Neutralization of Special Elements used in an SQL Command CRITICAL 10.0 N/A cvelistv5 2026-09-10
cve-2024-31982 XWiki xwiki Improper Neutralization of Directives in Dynamically Evaluated Code HIGH N/A N/A cvelistv5 2024-06-26
cve-2024-29198 CVE-2024-29198 HIGH N/A N/A cvelistv5
cve-2024-24112 exrick xmall Improper Neutralization of Special Elements used in an SQL Command CRITICAL 9.8 N/A cvelistv5 2026-09-14
cve-2023-54399 CVE-2023-54399 HIGH N/A N/A cvelistv5
cve-2023-47105 CVE-2023-47105 HIGH 8.6 N/A cvelistv5
cve-2023-46359 hardy-barth cph2_echarge_firmware Improper Neutralization of Special Elements used in an OS Command CRITICAL 9.8 N/A cvelistv5 2026-09-18
cve-2023-38950 CVE-2023-38950 HIGH N/A N/A cvelistv5
cve-2023-38203 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CRITICAL N/A N/A cvelistv5 2024-01-08
cve-2023-29827 ejs ejs Improper Neutralization of Special Elements in Output Used by a Downstream Component CRITICAL 9.8 N/A cvelistv5 2026-09-18
cve-2023-27524 Apache Superset Insecure Default Initialization of Resource Vulnerability HIGH N/A N/A cvelistv5 2024-01-08
cve-2022-45362 paytm payment_gateway Server-Side Request Forgery HIGH 7.2 N/A cvelistv5 2026-09-17
cve-2022-35405 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2022-09-22
cve-2022-32028 car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-09-14
cve-2022-32025 car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-09-14
cve-2022-32024 car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-09-14
cve-2022-29272 CVE-2022-29272 HIGH N/A N/A cvelistv5
cve-2022-1609 CVE-2022-1609 CRITICAL 9.8 N/A cvelistv5
cve-2022-1057 varktech pricing_deals_for_woocommerce Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-09-10
cve-2022-0434 a3rev page_view_count Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2025-06-07
cve-2021-39935 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability HIGH N/A N/A cvelistv5 2026-02-03
cve-2021-25032 CVE-2021-25032 HIGH N/A N/A cvelistv5
cve-2021-24946 webnus modern_events_calendar_lite Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2021-11-15