Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-9474 | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | MEDIUM | 6.9 | 94.70% | cvelistv5 | 2024-11-18 |
| cve-2024-9465 | Palo Alto Networks Expedition SQL Injection Vulnerability | CRITICAL | 9.2 | 99.63% | cvelistv5 | 2024-11-14 |
| cve-2024-9193 | CVE-2024-9193 | CRITICAL | 9.8 | 3.29% | cvelistv5 | |
| cve-2024-9047 | CVE-2024-9047 | CRITICAL | 9.8 | 93.34% | cvelistv5 | |
| cve-2024-9014 | pgadmin4: OAuth2 issue in pgAdmin 4 | UNKNOWN | N/A | 9.69% | cvelistv5 | 2025-11-21 |
| cve-2024-8963 | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | CRITICAL | 9.4 | 98.61% | cvelistv5 | 2024-09-19 |
| cve-2024-8877 | CVE-2024-8877 | MEDIUM | 6.9 | 77.27% | cvelistv5 | |
| cve-2024-8522 | CVE-2024-8522 | CRITICAL | 10.0 | 62.88% | cvelistv5 | |
| cve-2024-8425 | CVE-2024-8425 | CRITICAL | 9.8 | 4.08% | cvelistv5 | |
| cve-2024-8181 | CVE-2024-8181 | CRITICAL | 9.8 | 45.05% | cvelistv5 | |
| cve-2024-7954 | CVE-2024-7954 | CRITICAL | 9.8 | 90.05% | cvelistv5 | |
| cve-2024-7593 | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | HIGH | N/A | 99.99% | cvelistv5 | 2024-09-24 |
| cve-2024-7314 | CVE-2024-7314 | CRITICAL | 9.8 | 51.75% | cvelistv5 | |
| cve-2024-7029 | Command Injection in AVTech AVM1203 (IP Camera) | HIGH | 8.8 | 39.00% | cvelistv5 | 2026-06-17 |
| cve-2024-6671 | CVE-2024-6671 | CRITICAL | 9.8 | 18.99% | cvelistv5 | |
| cve-2024-6396 | CVE-2024-6396 | CRITICAL | 9.8 | 53.11% | cvelistv5 | |
| cve-2024-6235 | CVE-2024-6235 | CRITICAL | 9.4 | 21.17% | cvelistv5 | |
| cve-2024-5827 | CVE-2024-5827 | CRITICAL | 9.8 | 3.42% | cvelistv5 | |
| cve-2024-57049 | CVE-2024-57049 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2024-55457 | MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially exposing sensitive information. | MEDIUM | 6.5 | 3.12% | cvelistv5 | 2026-06-17 |
| cve-2024-53704 | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | HIGH | 8.2 | 95.13% | cvelistv5 | 2025-02-18 |
| cve-2024-52875 | CVE-2024-52875 | HIGH | 8.8 | 29.56% | cvelistv5 | |
| cve-2024-50967 | CVE-2024-50967 | MEDIUM | 6.5 | 1.68% | cvelistv5 | |
| cve-2024-50498 | WordPress WP Query Console plugin <= 1.0 - Remote Code Execution (RCE) vulnerability | CRITICAL | 10.0 | 52.91% | cvelistv5 | 2026-06-17 |
| cve-2024-49380 | SUSE CVE CVE-2024-49380 | HIGH | 7.5 | 2.71% | cvelistv5 | 2026-08-25 |
| cve-2024-48307 | JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData. | CRITICAL | 9.8 | 44.34% | cvelistv5 | 2026-06-17 |
| cve-2024-48248 | NAKIVO Backup and Replication Absolute Path Traversal Vulnerability | HIGH | 8.6 | 94.36% | cvelistv5 | 2025-03-19 |
| cve-2024-45507 | CVE-2024-45507 | HIGH | 8.8 | 93.23% | cvelistv5 | |
| cve-2024-45388 | Arbitrary file read in the `/api/v2/simulation` endpoint in hoverfly (`GHSL-2023-274`) | HIGH | 7.5 | 55.57% | cvelistv5 | 2026-06-17 |
| cve-2024-45195 | Apache OFBiz Forced Browsing Vulnerability | HIGH | N/A | 99.98% | cvelistv5 | 2025-02-04 |