Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2021-23337 | CVE-2021-23337 | HIGH | N/A | 21.33% | cvelistv5 | |
| cve-2021-21311 | CVE-2021-21311 | HIGH | N/A | 98.46% | cvelistv5 | |
| cve-2020-8657 | CVE-2020-8657 | CRITICAL | 9.8 | 91.87% | cvelistv5 | |
| cve-2020-6207 | SAP Solution Manager Missing Authentication for Critical Function Vulnerability | HIGH | N/A | 98.13% | cvelistv5 | 2021-04-08 |
| cve-2020-29390 | CVE-2020-29390 | HIGH | N/A | 39.56% | cvelistv5 | |
| cve-2020-25223 | CVE-2020-25223 | HIGH | N/A | 96.75% | cvelistv5 | |
| cve-2020-13640 | CVE-2020-13640 | HIGH | N/A | 12.71% | cvelistv5 | |
| cve-2019-9041 | CVE-2019-9041 | HIGH | N/A | 31.42% | cvelistv5 | |
| cve-2019-7609 | Kibana Arbitrary Code Execution | HIGH | N/A | 95.34% | cvelistv5 | 2021-05-07 |
| cve-2019-16057 | CVE-2019-16057 | HIGH | N/A | 86.49% | cvelistv5 | |
| cve-2019-10647 | CVE-2019-10647 | HIGH | N/A | 6.64% | cvelistv5 | |
| cve-2018-8033 | CVE-2018-8033 | HIGH | N/A | 25.74% | cvelistv5 | |
| cve-2018-15811 | CVE-2018-15811 | HIGH | N/A | 76.30% | cvelistv5 | |
| cve-2017-9791 | Apache Struts 1 Improper Input Validation Vulnerability | HIGH | N/A | 98.91% | cvelistv5 | 2020-06-24 |
| cve-2017-3506 | CVE-2017-3506 | HIGH | N/A | 95.99% | cvelistv5 | |
| cve-2017-14537 | CVE-2017-14537 | HIGH | N/A | 39.28% | cvelistv5 | |
| cve-2016-15043 | wp_mobile_detector_project wp_mobile_detector Unrestricted Upload of File with Dangerous Type | HIGH | N/A | 8.89% | cvelistv5 | 2016-06-03 |
| cve-2026-118527 | Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability | MEDIUM | 4.3 | N/A | cvelistv5 | 2026-10-30 |
| cve-2015-20130 | CVE-2015-20130 | MEDIUM | 5.1 | 0.29% | cvelistv5 | |
| cve-2010-20125 | CVE-2010-20125 | HIGH | 8.7 | 0.55% | cvelistv5 | |
| cve-2026-96652 | CVE-2026-96652 | MEDIUM | 5.3 | 1.82% | cvelistv5 | |
| cve-2026-21589 | CVE-2026-21589 | CRITICAL | 9.3 | 99.48% | cvelistv5 | |
| cve-2026-105133 | CVE-2026-105133 | MEDIUM | 6.9 | 79.47% | cvelistv5 | |
| cve-2026-104935 | CVE-2026-104935 | HIGH | 8.6 | 86.77% | cvelistv5 | |
| cve-2025-61884 | CVE-2025-61884 | HIGH | 7.5 | 95.89% | cvelistv5 | |
| cve-2025-10035 | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability | CRITICAL | 10.0 | 99.82% | cvelistv5 | 2025-09-25 |
| cve-2023-47105 | CVE-2023-47105 | HIGH | 8.6 | 1.67% | cvelistv5 | |
| cve-2022-35405 | CVE-2022-35405 | HIGH | N/A | 99.87% | cvelistv5 | |
| cve-2022-1609 | CVE-2022-1609 | CRITICAL | 9.8 | 64.08% | cvelistv5 | |
| cve-2022-0434 | a3rev page_view_count Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | 14.78% | cvelistv5 | 2025-06-07 |