Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-40711 Veeam Backup and Replication Deserialization Vulnerability CRITICAL 9.8 90.37% cvelistv5 2024-10-17
cve-2024-9680 firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) CRITICAL 9.8 23.18% cvelistv5 2026-06-29
cve-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerability HIGH 7.0 68.20% cvelistv5 2024-10-15
cve-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability HIGH N/A 93.30% cvelistv5 2024-10-15
cve-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability HIGH N/A 63.17% cvelistv5 2024-10-09
cve-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability MEDIUM 6.5 43.78% cvelistv5 2024-10-09
cve-2024-23113 Fortinet Multiple Products Format String Vulnerability CRITICAL 9.8 61.72% cvelistv5 2024-10-09
cve-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability HIGH N/A 46.11% cvelistv5 2024-10-08
cve-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability HIGH N/A 66.70% cvelistv5 2024-10-08
cve-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability HIGH 7.8 0.67% cvelistv5 2024-10-08
cve-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability CRITICAL 10.0 99.91% cvelistv5 2024-10-03
cve-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability HIGH N/A 99.95% cvelistv5 2024-10-02
cve-2023-25280 D-Link DIR-820 Router OS Command Injection Vulnerability CRITICAL 9.8 97.86% cvelistv5 2024-09-30
cve-2020-15415 DrayTek Multiple Vigor Routers OS Command Injection Vulnerability CRITICAL 9.8 84.48% cvelistv5 2024-09-30
cve-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 7.08% cvelistv5 2024-09-30
cve-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability HIGH N/A 99.99% cvelistv5 2024-09-24
cve-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability CRITICAL 9.4 98.61% cvelistv5 2024-09-19
cve-2024-27348 Apache HugeGraph-Server Improper Access Control Vulnerability CRITICAL 9.8 99.21% cvelistv5 2024-09-18
cve-2022-21445 Oracle ADF Faces Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 62.48% cvelistv5 2024-09-18
cve-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability CRITICAL 9.8 94.55% cvelistv5 2024-09-18
cve-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability HIGH 8.8 99.02% cvelistv5 2024-09-18
cve-2014-0502 SUSE CVE CVE-2014-0502 HIGH 8.8 24.82% cvelistv5 2025-10-08
cve-2014-0497 Adobe Flash Player Integer Underflow Vulnerablity HIGH N/A 99.88% cvelistv5 2024-09-17
cve-2013-0648 Adobe Flash Player Code Execution Vulnerability HIGH N/A 11.09% cvelistv5 2024-09-17
cve-2013-0643 Adobe Flash Player Incorrect Default Permissions Vulnerability HIGH N/A 10.53% cvelistv5 2024-09-17
cve-2024-6670 Progress WhatsUp Gold SQL Injection Vulnerability CRITICAL 9.8 93.00% cvelistv5 2024-09-16
cve-2024-43461 Microsoft Windows MSHTML Platform Spoofing Vulnerability HIGH 8.8 54.49% cvelistv5 2024-09-16
cve-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability HIGH 7.2 88.53% cvelistv5 2024-09-13
cve-2024-38226 Microsoft Publisher Protection Mechanism Failure Vulnerability HIGH 7.3 2.67% cvelistv5 2024-09-10
cve-2024-38217 Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability MEDIUM 5.4 10.03% cvelistv5 2024-09-10