Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2025-1661 | pluginus husky_-_products_filter_professional_for_woocommerce Improper Limitation of a Pathname to a Restricted Directory | CRITICAL | 9.8 | N/A | cvelistv5 | 2025-03-10 |
| cve-2025-14611 | Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of... | HIGH | 7.1 | N/A | cvelistv5 | 2026-10-07 |
| cve-2025-11913 | CVE-2025-11913 | LOW | 2.1 | N/A | cvelistv5 | |
| cve-2025-11371 | In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local ... | HIGH | 7.5 | N/A | cvelistv5 | 2026-10-08 |
| cve-2025-10123 | CVE-2025-10123 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-10035 | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability | CRITICAL | 10.0 | N/A | cvelistv5 | 2025-09-25 |
| cve-2024-8529 | thimpress learnpress Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | N/A | cvelistv5 | 2024-09-12 |
| cve-2024-58388 | CVE-2024-58388 | HIGH | 8.7 | N/A | cvelistv5 | |
| cve-2024-58387 | CVE-2024-58387 | HIGH | 8.7 | N/A | cvelistv5 | |
| cve-2024-58385 | Improper Neutralization of Special Elements used in an SQL Command | CRITICAL | 9.3 | N/A | cvelistv5 | 2026-09-15 |
| cve-2024-5522 | CVE-2024-5522 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2024-53900 | mongoosejs mongoose Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | N/A | cvelistv5 | 2025-11-27 |
| cve-2024-5276 | Fortra filecatalyst_workflow Improper Input Validation | CRITICAL | 9.8 | N/A | cvelistv5 | 2025-10-17 |
| cve-2024-50340 | sensiolabs symfony Improper Neutralization of Special Elements in Output Used by a Downstream Component | HIGH | N/A | N/A | cvelistv5 | 2026-09-10 |
| cve-2024-38856 | Apache OFBiz Incorrect Authorization Vulnerability | HIGH | 8.1 | N/A | cvelistv5 | 2024-08-19 |
| cve-2024-37259 | CVE-2024-37259 | HIGH | 7.1 | N/A | cvelistv5 | |
| cve-2024-36412 | salesagility suitecrm Improper Neutralization of Special Elements used in an SQL Command | CRITICAL | 10.0 | N/A | cvelistv5 | 2026-09-10 |
| cve-2024-31982 | XWiki xwiki Improper Neutralization of Directives in Dynamically Evaluated Code | HIGH | N/A | N/A | cvelistv5 | 2024-06-26 |
| cve-2024-29198 | CVE-2024-29198 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2024-24112 | exrick xmall Improper Neutralization of Special Elements used in an SQL Command | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-09-14 |
| cve-2023-54403 | CVE-2023-54403 | HIGH | 8.7 | N/A | cvelistv5 | |
| cve-2023-54402 | CVE-2023-54402 | HIGH | 8.7 | N/A | cvelistv5 | |
| cve-2023-54400 | CVE-2023-54400 | CRITICAL | 9.3 | N/A | cvelistv5 | |
| cve-2023-54399 | CVE-2023-54399 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2023-47105 | CVE-2023-47105 | HIGH | 8.6 | N/A | cvelistv5 | |
| cve-2023-46359 | hardy-barth cph2_echarge_firmware Improper Neutralization of Special Elements used in an OS Command | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-09-18 |
| cve-2023-41763 | CVE-2023-41763 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2023-38950 | CVE-2023-38950 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2023-38203 | CVE-2023-38203 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2023-30804 | CVE-2023-30804 | MEDIUM | 6.9 | N/A | cvelistv5 |