Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-4879 ServiceNow Improper Input Validation Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-07-23
cve-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability HIGH N/A N/A cvelistv5 2024-07-24
cve-2024-39891 Twilio Authy Information Disclosure Vulnerability MEDIUM 5.3 N/A cvelistv5 2024-07-02
cve-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2012-12-29
cve-2024-34102 Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-07-12
cve-2024-28995 SolarWinds Serv-U Path Traversal Vulnerability HIGH 8.6 N/A cvelistv5 2024-06-21
cve-2022-22948 VMware vCenter Server Incorrect Default File Permissions Vulnerability MEDIUM 6.5 N/A cvelistv5 2024-06-18
cve-2024-36401 OSGeo GeoServer GeoTools Eval Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-07-03
cve-2024-38112 Microsoft Windows MSHTML Platform Spoofing Vulnerability HIGH 7.5 N/A cvelistv5 2024-07-09
cve-2024-38080 Microsoft Windows Hyper-V Privilege Escalation Vulnerability HIGH N/A N/A cvelistv5 2024-07-09
cve-2024-23692 Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL N/A N/A cvelistv5 2024-06-28
cve-2024-20399 Cisco NX-OS Command Injection Vulnerability MEDIUM 6.0 N/A cvelistv5 2024-07-01
cve-2022-2586 Linux Kernel Use-After-Free Vulnerability MEDIUM 5.3 N/A cvelistv5 2024-06-19
cve-2022-24816 OSGeo GeoServer JAI-EXT Code Injection Vulnerability HIGH N/A N/A cvelistv5 2024-01-22
cve-2020-13965 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability HIGH N/A N/A cvelistv5 2024-06-26
cve-2024-4358 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-06-07
cve-2024-32896 Android Pixel Privilege Escalation Vulnerability HIGH 8.1 N/A cvelistv5 2024-06-11
cve-2024-26169 Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability CRITICAL N/A N/A cvelistv5 2024-06-12
cve-2024-4610 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2024-06-07
cve-2024-4577 SUSE CVE CVE-2024-4577 CRITICAL 9.8 N/A cvelistv5 2026-08-31
cve-2017-3506 CVE-2017-3506 HIGH N/A N/A cvelistv5
cve-2024-24919 Check Point Quantum Security Gateways Information Disclosure Vulnerability HIGH 8.6 N/A cvelistv5 2024-05-27
cve-2024-1086 Linux Kernel Use-After-Free Vulnerability CRITICAL N/A N/A cvelistv5 2024-05-30
cve-2024-4978 Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability HIGH 8.7 N/A cvelistv5 2024-05-23
cve-2024-5274 SUSE CVE CVE-2024-5274 CRITICAL 9.6 N/A cvelistv5 2025-03-15
cve-2020-17519 Apache Flink Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2021-04-12
cve-2024-4947 Google Chromium V8 Type Confusion Vulnerability HIGH N/A N/A cvelistv5 2024-05-13
cve-2023-43208 NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability CRITICAL N/A N/A cvelistv5 2024-03-07
cve-2024-4761 Google Chromium V8 Out-of-Bounds Memory Write Vulnerability HIGH N/A N/A cvelistv5 2024-05-09
cve-2021-40655 D-Link DIR-605 Router Information Disclosure Vulnerability HIGH N/A N/A cvelistv5 2024-05-16