Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-38094 Microsoft SharePoint Deserialization Vulnerability HIGH 7.2 N/A cvelistv5 2024-10-17
cve-2024-9537 ScienceLogic SL1 Unspecified Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-28
cve-2024-40711 Veeam Backup and Replication Deserialization Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-04-23
cve-2024-9680 Mozilla Firefox Use-After-Free Vulnerability CRITICAL N/A N/A cvelistv5 2024-10-15
cve-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerability HIGH 7.0 N/A cvelistv5 2024-10-15
cve-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability HIGH N/A N/A cvelistv5 2024-10-15
cve-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2024-10-08
cve-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability MEDIUM 6.5 N/A cvelistv5 2024-10-08
cve-2024-23113 Fortinet Multiple Products Format String Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-10-09
cve-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability HIGH N/A N/A cvelistv5 2024-10-08
cve-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2024-10-08
cve-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2024-10-08
cve-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability CRITICAL 10.0 N/A cvelistv5 2024-10-03
cve-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability HIGH N/A N/A cvelistv5 2024-10-02
cve-2023-25280 D-Link DIR-820 Router OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-30
cve-2020-15415 DrayTek Multiple Vigor Routers OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-30
cve-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability HIGH N/A N/A cvelistv5 2024-09-30
cve-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability HIGH N/A N/A cvelistv5 2024-09-24
cve-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability CRITICAL 9.4 N/A cvelistv5 2024-09-19
cve-2024-27348 Apache HugeGraph-Server Improper Access Control Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-18
cve-2022-21445 Oracle ADF Faces Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-18
cve-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-18
cve-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability CRITICAL N/A N/A cvelistv5 2024-09-18
cve-2014-0502 Adobe Flash Player Double Free Vulnerablity HIGH N/A N/A cvelistv5 2024-09-17
cve-2014-0497 Adobe Flash Player Integer Underflow Vulnerablity HIGH N/A N/A cvelistv5 2024-09-17
cve-2013-0648 Adobe Flash Player Code Execution Vulnerability HIGH N/A N/A cvelistv5 2024-09-17
cve-2013-0643 Adobe Flash Player Incorrect Default Permissions Vulnerability HIGH N/A N/A cvelistv5 2024-09-17
cve-2024-6670 Progress WhatsUp Gold SQL Injection Vulnerability CRITICAL N/A N/A cvelistv5 2024-09-16
cve-2024-43461 Microsoft Windows MSHTML Platform Spoofing Vulnerability HIGH 8.8 N/A cvelistv5 2024-09-16
cve-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability HIGH 7.2 N/A cvelistv5 2024-09-13