Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-109936 | themeisle otter_blocks Improper Neutralization of Input During Web Page Generation | HIGH | 7.5 | 0.28% | cvelistv5 | 2026-11-02 |
| cve-2024-2544 | sygnoos popup_builder Missing Authorization | HIGH | 7.4 | 0.27% | cvelistv5 | 2026-11-02 |
| cve-2021-24472 | CVE-2021-24472 | HIGH | N/A | 56.61% | cvelistv5 | |
| cve-2026-39738 | CVE-2026-39738 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2020-10220 | rConfig rConfig Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | 99.70% | cvelistv5 | 2026-11-01 |
| cve-2026-34892 | CVE-2026-34892 | MEDIUM | 6.5 | 0.29% | cvelistv5 | |
| cve-2026-119096 | Improper Authentication | CRITICAL | 9.8 | 0.46% | cvelistv5 | 2026-10-31 |
| cve-2026-103898 | Wpmet wp_social_login_and_register_social_counter Improper Authentication | HIGH | 8.1 | 0.44% | cvelistv5 | 2026-10-31 |
| cve-2025-67964 | Improper Neutralization of Input During Web Page Generation | HIGH | N/A | 0.29% | cvelistv5 | 2026-10-31 |
| cve-2025-5569 | ideacms ideacms Improper Neutralization of Special Elements in Output Used by a Downstream Component | HIGH | N/A | 1.57% | cvelistv5 | 2026-10-31 |
| cve-2026-58115 | A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4-1 running... | CRITICAL | 10.0 | 0.95% | cvelistv5 | 2026-11-04 |
| cve-2026-53595 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework | CRITICAL | 9.4 | 1.94% | cvelistv5 | 2026-10-24 |
| cve-2026-119977 | EUVD-2026-114575 | HIGH | 8.1 | 0.60% | cvelistv5 | Nov 4, 2026, 4:56:31 AM |
| cve-2026-118527 | EUVD-2026-115872 | MEDIUM | 4.3 | N/A | cvelistv5 | Nov 3, 2026, 3:32:56 PM |
| cve-2026-116512 | weDevs wp_project_manager Unrestricted Upload of File with Dangerous Type | CRITICAL | 9.8 | 0.58% | cvelistv5 | 2026-10-30 |
| cve-2026-103039 | Deserialization of Untrusted Data | CRITICAL | 9.8 | 0.51% | cvelistv5 | 2026-10-30 |
| cve-2025-41656 | Missing Authentication for Critical Functionality | HIGH | N/A | 12.35% | cvelistv5 | 2026-10-30 |
| cve-2025-31704 | CVE-2025-31704 | CRITICAL | 9.8 | 1.36% | cvelistv5 | |
| cve-2025-11201 | MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability | CRITICAL | 9.8 | 26.28% | cvelistv5 | 2026-10-19 |
| cve-2023-2356 | CVE-2023-2356 | CRITICAL | 10.0 | 4.15% | cvelistv5 | |
| cve-2020-35847 | agentejo cockpit Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | 98.17% | cvelistv5 | 2026-10-30 |
| cve-2015-20130 | CVE-2015-20130 | MEDIUM | 6.1 | 0.29% | cvelistv5 | |
| cve-2010-20125 | CVE-2010-20125 | HIGH | 8.7 | 0.55% | cvelistv5 | |
| cve-2026-96662 | Improper Neutralization of Special Elements used in an SQL Command | HIGH | 7.5 | N/A | cvelistv5 | 2026-10-29 |
| cve-2026-7542 | themepunch slider_revolution Exposure of Sensitive Information to an Unauthorized Actor | HIGH | N/A | 0.25% | cvelistv5 | 2026-10-29 |
| cve-2026-54836 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YMC Filter allo... | CRITICAL | 9.3 | 1.34% | cvelistv5 | 2026-10-25 |
| cve-2026-32557 | CVE-2026-32557 | CRITICAL | 9.3 | 0.37% | cvelistv5 | |
| cve-2026-115886 | CVE-2026-115886 | HIGH | N/A | 0.68% | cvelistv5 | |
| cve-2026-104995 | Improper Control of Filename for Include/Require Statement in PHP Program | HIGH | 8.1 | 1.10% | cvelistv5 | 2026-10-29 |
| cve-2024-10441 | synology beestation_os Improper Encoding or Escaping of Output | CRITICAL | N/A | 1.25% | cvelistv5 | 2026-10-29 |