Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2014-100005 D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability HIGH N/A 43.46% cvelistv5 2024-05-16
cve-2024-30051 Microsoft DWM Core Library Privilege Escalation Vulnerability CRITICAL N/A N/A cvelistv5 2024-05-14
cve-2024-30040 Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability HIGH 8.8 N/A cvelistv5 2024-05-14
cve-2024-4671 Google Chromium Visuals Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2024-05-07
cve-2023-7028 GitLab Community and Enterprise Editions Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2024-05-01
cve-2024-29988 Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability HIGH N/A N/A cvelistv5 2024-04-09
cve-2024-4040 CrushFTP VFS Sandbox Escape Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-04-19
cve-2024-20359 Cisco ASA and FTD Privilege Escalation Vulnerability CRITICAL N/A N/A cvelistv5 2024-04-24
cve-2024-20353 Cisco ASA and FTD Denial of Service Vulnerability CRITICAL N/A N/A cvelistv5 2024-04-24
cve-2022-38028 Microsoft Windows Print Spooler Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2024-04-22
cve-2024-3400 Palo Alto Networks PAN-OS Command Injection Vulnerability CRITICAL 10.0 N/A cvelistv5 2024-04-12
cve-2024-3273 D-Link Multiple NAS Devices Command Injection Vulnerability HIGH N/A N/A cvelistv5 2024-04-08
cve-2024-3272 D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability HIGH N/A N/A cvelistv5 2024-04-11
cve-2024-29748 Android Pixel Privilege Escalation Vulnerability HIGH N/A N/A cvelistv5 2024-04-02
cve-2024-29745 Android Pixel Information Disclosure Vulnerability HIGH N/A N/A cvelistv5 2024-04-02
cve-2023-24955 Microsoft SharePoint Server Code Injection Vulnerability CRITICAL N/A N/A cvelistv5 2024-03-26
cve-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability CRITICAL 9.3 N/A cvelistv5 2024-03-12
cve-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-02-29
cve-2019-7256 Nice Linear eMerge E3-Series OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2020-02-01
cve-2024-27198 JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-03-05
cve-2024-23296 Apple Multiple Products Memory Corruption Vulnerability HIGH 7.8 N/A cvelistv5 2024-03-05
cve-2024-23225 Apple Multiple Products Memory Corruption Vulnerability HIGH 7.8 N/A cvelistv5 2024-03-05
cve-2023-21237 Android Pixel Information Disclosure Vulnerability HIGH N/A N/A cvelistv5 2023-06-13
cve-2021-36380 Sunhillo SureLine OS Command Injection Vulnerablity HIGH N/A N/A cvelistv5 2023-10-09
cve-2024-27198 JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-03-05
cve-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability HIGH 7.8 N/A cvelistv5 2024-02-13
cve-2023-29360 Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability HIGH N/A N/A cvelistv5 2024-02-07
cve-2024-1709 ConnectWise ScreenConnect Authentication Bypass Vulnerability CRITICAL 10.0 N/A cvelistv5 2024-02-20
cve-2024-21410 Microsoft Exchange Server Privilege Escalation Vulnerability HIGH N/A N/A cvelistv5 2024-02-14
cve-2020-3259 Cisco ASA and FTD Information Disclosure Vulnerability CRITICAL N/A N/A cvelistv5 2024-01-29