Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2024-12-10
cve-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability CRITICAL N/A N/A cvelistv5 2024-12-04
cve-2024-11680 ProjectSend Improper Authentication Vulnerability HIGH N/A N/A cvelistv5 2024-12-03
cve-2024-11667 Zyxel Multiple Firewalls Path Traversal Vulnerability CRITICAL N/A N/A cvelistv5 2024-12-03
cve-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability HIGH N/A N/A cvelistv5 2024-12-03
cve-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-11-25
cve-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability HIGH N/A N/A cvelistv5 2024-11-21
cve-2024-44308 Apple Multiple Products Code Execution Vulnerability HIGH N/A N/A cvelistv5 2024-11-21
cve-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability HIGH N/A N/A cvelistv5 2024-11-21
cve-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability HIGH 7.5 N/A cvelistv5 2024-11-20
cve-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-11-20
cve-2024-9474 Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability CRITICAL N/A N/A cvelistv5 2024-11-18
cve-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability CRITICAL 10.0 N/A cvelistv5 2024-11-18
cve-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability CRITICAL N/A N/A cvelistv5 2024-11-18
cve-2024-9465 Palo Alto Networks Expedition SQL Injection Vulnerability CRITICAL 9.2 N/A cvelistv5 2024-11-14
cve-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability CRITICAL 9.9 N/A cvelistv5 2024-11-14
cve-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability HIGH 8.8 N/A cvelistv5 2024-11-12
cve-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability HIGH N/A N/A cvelistv5 2024-11-12
cve-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability CRITICAL 10.0 N/A cvelistv5 2024-11-12
cve-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability MEDIUM 5.3 N/A cvelistv5 2024-11-12
cve-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability HIGH N/A N/A cvelistv5 2024-11-12
cve-2024-5910 Palo Alto Networks Expedition Missing Authentication Vulnerability HIGH N/A N/A cvelistv5 2024-11-07
cve-2024-51567 CyberPanel Incorrect Default Permissions Vulnerability CRITICAL N/A N/A cvelistv5 2024-11-07
cve-2024-43093 Android Framework Privilege Escalation Vulnerability HIGH N/A N/A cvelistv5 2024-11-07
cve-2019-16278 Nostromo nhttpd Directory Traversal Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-11-07
cve-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2024-11-04
cve-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability HIGH N/A N/A cvelistv5 2024-11-04
cve-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability HIGH N/A N/A cvelistv5 2024-10-24
cve-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability HIGH N/A N/A cvelistv5 2024-10-24
cve-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability HIGH N/A N/A cvelistv5 2024-10-23