Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-50302 Linux Kernel Use of Uninitialized Resource Vulnerability HIGH N/A N/A cvelistv5 2025-03-04
cve-2024-4885 Progress WhatsUp Gold Path Traversal Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-03-03
cve-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability MEDIUM 6.5 N/A cvelistv5 2025-03-03
cve-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability HIGH 8.6 N/A cvelistv5 2025-03-03
cve-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability HIGH 8.8 N/A cvelistv5 2025-03-03
cve-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability HIGH 8.4 N/A cvelistv5 2025-03-03
cve-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2025-02-25
cve-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CRITICAL 9.0 N/A cvelistv5 2025-02-25
cve-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability HIGH 8.8 N/A cvelistv5 2025-02-24
cve-2017-3066 Adobe ColdFusion Deserialization Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-02-24
cve-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2025-02-21
cve-2025-23209 Craft CMS Code Injection Vulnerability HIGH 8.1 N/A cvelistv5 2025-02-20
cve-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability HIGH N/A N/A cvelistv5 2025-02-20
cve-2025-0108 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability CRITICAL 9.1 N/A cvelistv5 2025-02-18
cve-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability HIGH 8.2 N/A cvelistv5 2025-02-18
cve-2024-57727 SimpleHelp Path Traversal Vulnerability CRITICAL N/A N/A cvelistv5 2025-02-13
cve-2025-24200 Apple iOS and iPadOS Incorrect Authorization Vulnerability MEDIUM 6.1 N/A cvelistv5 2025-02-12
cve-2024-41710 Mitel SIP Phones Argument Injection Vulnerability MEDIUM 6.8 N/A cvelistv5 2025-02-12
cve-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2025-02-11
cve-2025-21391 Microsoft Windows Storage Link Following Vulnerability HIGH 7.1 N/A cvelistv5 2025-02-11
cve-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability HIGH 8.8 N/A cvelistv5 2025-02-11
cve-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2025-02-11
cve-2025-0994 Trimble Cityworks Deserialization Vulnerability HIGH 8.6 N/A cvelistv5 2025-02-07
cve-2025-0411 7-Zip Mark of the Web Bypass Vulnerability HIGH N/A N/A cvelistv5 2025-02-06
cve-2024-21413 Microsoft Outlook Improper Input Validation Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-02-06
cve-2022-23748 Dante Discovery Process Control Vulnerability HIGH 7.8 N/A cvelistv5 2025-02-06
cve-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-02-06
cve-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-02-06
cve-2024-53104 Linux Kernel Out-of-Bounds Write Vulnerability HIGH N/A N/A cvelistv5 2025-02-05
cve-2024-45195 Apache OFBiz Forced Browsing Vulnerability HIGH N/A N/A cvelistv5 2025-02-04