Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2017-7494 SUSE CVE CVE-2017-7494 HIGH 8.8 99.45% cvelistv5 2026-08-23
cve-2013-3163 Microsoft Internet Explorer Memory Corruption Vulnerability HIGH 8.8 70.68% cvelistv5 2023-03-30
cve-2023-26360 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability HIGH 8.6 97.34% cvelistv5 2023-03-15
cve-2023-24880 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability CRITICAL N/A 78.00% cvelistv5 2023-03-14
cve-2023-23397 Microsoft Outlook Elevation of Privilege Vulnerability CRITICAL 9.8 97.41% cvelistv5 2026-06-17
cve-2022-41328 Fortinet FortiOS Path Traversal Vulnerability MEDIUM 6.5 10.68% cvelistv5 2023-03-14
cve-2021-39144 XStream Remote Code Execution Vulnerability HIGH N/A 98.12% cvelistv5 2023-03-10
cve-2020-5741 Plex Media Server Remote Code Execution Vulnerability HIGH 7.2 72.94% cvelistv5 2023-03-10
cve-2022-35914 Teclib GLPI Remote Code Execution Vulnerability HIGH N/A 99.88% cvelistv5 2023-03-07
cve-2022-33891 SUSE CVE CVE-2022-33891 HIGH 8.8 93.08% cvelistv5 2025-07-02
cve-2022-28810 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability MEDIUM 6.8 70.97% cvelistv5 2023-03-07
cve-2022-36537 ZK Framework AuUploader Unspecified Vulnerability CRITICAL N/A 95.40% cvelistv5 2023-02-27
cve-2022-47986 IBM Aspera Faspex Code Execution Vulnerability CRITICAL 9.8 99.97% cvelistv5 2023-02-21
cve-2022-41223 Mitel MiVoice Connect Code Injection Vulnerability MEDIUM 6.8 10.57% cvelistv5 2023-02-21
cve-2022-40765 Mitel MiVoice Connect Command Injection Vulnerability CRITICAL N/A 10.57% cvelistv5 2023-02-21
cve-2022-46169 cacti: unauthenticated command injection CRITICAL 9.8 99.83% cvelistv5 2026-02-25
cve-2023-23529 webkitgtk: processing maliciously crafted web content may be exploited for arbitrary code execution HIGH 8.8 9.50% cvelistv5 2025-11-21
cve-2023-23376 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability HIGH 7.8 10.85% cvelistv5 2023-02-14
cve-2023-21823 Microsoft Windows Graphic Component Privilege Escalation Vulnerability HIGH 7.8 5.56% cvelistv5 2023-02-14
cve-2023-21715 Microsoft Office Publisher Security Feature Bypass Vulnerability HIGH 7.3 12.01% cvelistv5 2023-02-14
cve-2023-0669 Fortra GoAnywhere MFT Remote Code Execution Vulnerability HIGH 7.2 100.00% cvelistv5 2023-02-10
cve-2022-24990 TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response. HIGH 7.5 83.55% cvelistv5 2026-06-17
cve-2015-2291 Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability HIGH 7.8 9.01% cvelistv5 2023-02-10
cve-2023-22952 Multiple SugarCRM Products Remote Code Execution Vulnerability HIGH N/A 80.14% cvelistv5 2023-02-02
cve-2022-21587 Oracle E-Business Suite Unspecified Vulnerability CRITICAL 9.8 98.34% cvelistv5 2023-02-02
cve-2017-11357 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability CRITICAL 9.8 77.68% cvelistv5 2023-01-26
cve-2022-47966 ManageEngine: remote code execution vulnerability in multiple ManageEngine products HIGH 8.1 99.75% cvelistv5 2025-11-21
cve-2022-44877 CWP Control Web Panel OS Command Injection Vulnerability CRITICAL 9.8 100.00% cvelistv5 2023-01-17
cve-2023-21674 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability HIGH 8.8 41.81% cvelistv5 2026-06-17
cve-2022-41080 Microsoft Exchange Server Privilege Escalation Vulnerability HIGH 8.8 77.33% cvelistv5 2023-01-10