Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2023-54413 | CVE-2023-54413 | HIGH | N/A | 0.21% | cvelistv5 | |
| cve-2022-51025 | CVE-2022-51025 | HIGH | 7.1 | 0.46% | cvelistv5 | |
| cve-2022-51024 | CVE-2022-51024 | HIGH | 8.7 | 0.61% | cvelistv5 | |
| cve-2022-51023 | CVE-2022-51023 | HIGH | 8.8 | 0.26% | cvelistv5 | |
| cve-2022-51022 | CVE-2022-51022 | CRITICAL | 9.1 | 0.79% | cvelistv5 | |
| cve-2022-51021 | CVE-2022-51021 | HIGH | 8.8 | 0.46% | cvelistv5 | |
| cve-2021-48017 | CVE-2021-48017 | HIGH | 8.7 | 0.43% | cvelistv5 | |
| cve-2021-48016 | CVE-2021-48016 | CRITICAL | 9.3 | 0.44% | cvelistv5 | |
| cve-2021-48015 | CVE-2021-48015 | HIGH | 8.7 | 0.56% | cvelistv5 | |
| cve-2021-48014 | CVE-2021-48014 | CRITICAL | 9.3 | 2.03% | cvelistv5 | |
| cve-2021-48013 | CVE-2021-48013 | HIGH | 8.7 | 0.74% | cvelistv5 | |
| cve-2020-37284 | CVE-2020-37284 | MEDIUM | 5.1 | 0.21% | cvelistv5 | |
| cve-2019-25779 | CVE-2019-25779 | HIGH | N/A | 0.45% | cvelistv5 | |
| cve-2019-25778 | CVE-2019-25778 | HIGH | 8.8 | 0.46% | cvelistv5 | |
| cve-2018-25439 | CVE-2018-25439 | HIGH | 8.7 | 0.47% | cvelistv5 | |
| cve-2018-25438 | CVE-2018-25438 | HIGH | 8.7 | 0.54% | cvelistv5 | |
| cve-2017-20290 | CVE-2017-20290 | MEDIUM | 5.1 | 0.27% | cvelistv5 | |
| cve-2017-20289 | CVE-2017-20289 | HIGH | 7.7 | 0.93% | cvelistv5 | |
| cve-2017-20288 | CVE-2017-20288 | MEDIUM | 5.1 | 0.26% | cvelistv5 | |
| cve-2017-20287 | CVE-2017-20287 | HIGH | 8.7 | 0.70% | cvelistv5 | |
| cve-2017-14537 | CVE-2017-14537 | HIGH | N/A | 39.28% | cvelistv5 | |
| cve-2026-91403 | OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns | MEDIUM | 6.8 | N/A | cvelistv5 | 2026-10-22 |
| cve-2026-109619 | PHP Stale Internal Request-State Vulnerability | CRITICAL | 9.2 | 100.00% | cvelistv5 | 2026-10-26 |
| cve-2026-111943 | crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates | MEDIUM | 6.8 | 0.40% | cvelistv5 | 2026-10-22 |
| cve-2026-44373 | CVE-2026-44373 | MEDIUM | 5.3 | 0.45% | cvelistv5 | |
| cve-2026-109619 | PHP Stale Internal Request-State Vulnerability | CRITICAL | 9.2 | 100.00% | cvelistv5 | 2026-10-26 |
| cve-2026-109618 | PHP Memory Corruption Vulnerability | CRITICAL | 9.2 | 100.00% | cvelistv5 | 2026-10-26 |
| cve-2026-113470 | firefox: Firefox: Website spoofing via failure to block compromised intermediate certificates | HIGH | 7.1 | 0.46% | cvelistv5 | 2026-10-21 |
| cve-2026-9753 | Server crash via malformed binary diff passed to $_internalApplyOplogUpdate. | HIGH | 8.1 | N/A | cvelistv5 | 2026-07-23 |
| cve-2026-96656 | Plex Media Server External Control of File Name or Path Vulnerability | HIGH | 8.6 | N/A | cvelistv5 | 2026-10-20 |