Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-22225 VMware ESXi Arbitrary Write Vulnerability CRITICAL N/A 1.02% cvelistv5 2025-03-04
cve-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability CRITICAL 9.3 1.56% cvelistv5 2025-03-04
cve-2024-50302 Linux Kernel Use of Uninitialized Resource Vulnerability MEDIUM 5.5 0.81% cvelistv5 2024-11-07
cve-2024-4885 Progress WhatsUp Gold Path Traversal Vulnerability CRITICAL 9.8 99.29% cvelistv5 2024-08-06
cve-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability MEDIUM 6.5 54.11% cvelistv5 2025-02-25
cve-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability HIGH 8.6 92.27% cvelistv5 2023-11-17
cve-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability HIGH 8.8 97.67% cvelistv5 2025-03-03
cve-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability CRITICAL N/A 22.18% cvelistv5 2020-06-24
cve-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability HIGH N/A 1.30% cvelistv5 2024-11-26
cve-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CRITICAL 9.0 77.27% cvelistv5 2025-02-25
cve-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability HIGH 8.8 3.93% cvelistv5 2025-02-24
cve-2017-3066 Adobe ColdFusion Deserialization Vulnerability CRITICAL 9.8 90.60% cvelistv5 2018-08-30
cve-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability HIGH N/A 1.62% cvelistv5 2025-02-19
cve-2025-23209 Craft CMS Code Injection Vulnerability HIGH N/A 21.64% cvelistv5 2025-01-17
cve-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability HIGH N/A 2.00% cvelistv5 2025-02-18
cve-2025-0108 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability HIGH N/A 98.45% cvelistv5 2025-02-13
cve-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability CRITICAL N/A 95.31% cvelistv5 2025-02-13
cve-2024-57727 SimpleHelp Path Traversal Vulnerability CRITICAL N/A 96.83% cvelistv5 2025-01-31
cve-2025-24200 Apple iOS and iPadOS Incorrect Authorization Vulnerability HIGH N/A 4.46% cvelistv5 2025-02-10
cve-2024-41710 Mitel SIP Phones Argument Injection Vulnerability MEDIUM 6.8 41.65% cvelistv5 2025-01-28
cve-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability HIGH N/A 2.13% cvelistv5 2025-02-11
cve-2025-21391 Microsoft Windows Storage Link Following Vulnerability HIGH 7.1 2.28% cvelistv5 2025-02-11
cve-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability HIGH N/A 22.89% cvelistv5 2025-01-28
cve-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability HIGH N/A 20.70% cvelistv5 2025-01-28
cve-2025-0994 Trimble Cityworks Deserialization Vulnerability HIGH N/A 31.31% cvelistv5 2025-02-06
cve-2025-0411 7-Zip Mark of the Web Bypass Vulnerability HIGH N/A 47.57% cvelistv5 2025-02-04
cve-2024-21413 Microsoft Outlook Improper Input Validation Vulnerability CRITICAL 9.8 94.66% cvelistv5 2024-05-14
cve-2022-23748 Dante Discovery Process Control Vulnerability HIGH N/A 8.33% cvelistv5 2023-10-11
cve-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability CRITICAL N/A 4.70% cvelistv5 2024-10-31
cve-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability CRITICAL 9.8 10.67% cvelistv5 2024-10-31