Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-44849 | CVE-2024-44849 | CRITICAL | 9.8 | 46.29% | cvelistv5 | |
| cve-2024-41713 | Mitel MiCollab Path Traversal Vulnerability | CRITICAL | 9.1 | 98.11% | cvelistv5 | 2025-01-07 |
| cve-2024-38475 | Apache HTTP Server Improper Escaping of Output Vulnerability | HIGH | N/A | 99.96% | cvelistv5 | 2025-05-01 |
| cve-2024-3721 | CVE-2024-3721 | MEDIUM | 6.5 | 86.49% | cvelistv5 | |
| cve-2024-36401 | OSGeo GeoServer GeoTools Eval Injection Vulnerability | CRITICAL | 9.8 | 99.81% | cvelistv5 | 2024-07-15 |
| cve-2024-3400 | Palo Alto Networks PAN-OS Command Injection Vulnerability | CRITICAL | 10.0 | 100.00% | cvelistv5 | 2024-04-12 |
| cve-2024-32737 | CVE-2024-32737 | HIGH | 7.5 | 5.41% | cvelistv5 | |
| cve-2024-32736 | CVE-2024-32736 | HIGH | 7.5 | 5.41% | cvelistv5 | |
| cve-2024-32735 | CVE-2024-32735 | CRITICAL | 9.8 | 6.77% | cvelistv5 | |
| cve-2024-29059 | Microsoft .NET Framework Information Disclosure Vulnerability | HIGH | N/A | 98.62% | cvelistv5 | 2025-02-04 |
| cve-2024-28995 | SolarWinds Serv-U Path Traversal Vulnerability | HIGH | 8.6 | 99.61% | cvelistv5 | 2024-07-17 |
| cve-2024-27954 | CVE-2024-27954 | CRITICAL | 9.3 | 72.77% | cvelistv5 | |
| cve-2024-27564 | CVE-2024-27564 | MEDIUM | 5.8 | 40.64% | cvelistv5 | |
| cve-2024-27497 | CVE-2024-27497 | HIGH | 8.8 | 26.66% | cvelistv5 | |
| cve-2024-27199 | JetBrains TeamCity Relative Path Traversal Vulnerability | HIGH | 7.3 | 99.99% | cvelistv5 | 2026-04-20 |
| cve-2024-27198 | JetBrains TeamCity Authentication Bypass Vulnerability | CRITICAL | 9.8 | 99.94% | cvelistv5 | 2024-03-07 |
| cve-2024-25735 | CVE-2024-25735 | CRITICAL | 9.1 | 50.62% | cvelistv5 | |
| cve-2024-24919 | Check Point Quantum Security Gateways Information Disclosure Vulnerability | HIGH | 8.6 | 99.98% | cvelistv5 | 2024-05-30 |
| cve-2024-23897 | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability | CRITICAL | N/A | 100.00% | cvelistv5 | 2024-08-19 |
| cve-2024-21887 | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | CRITICAL | 9.1 | 100.00% | cvelistv5 | 2024-01-10 |
| cve-2024-20440 | CVE-2024-20440 | HIGH | 7.5 | 51.90% | cvelistv5 | |
| cve-2024-20439 | Cisco Smart Licensing Utility Static Credential Vulnerability | HIGH | N/A | 92.06% | cvelistv5 | 2025-03-31 |
| cve-2024-1709 | ConnectWise ScreenConnect Authentication Bypass Vulnerability | CRITICAL | 10.0 | 99.98% | cvelistv5 | 2024-02-22 |
| cve-2024-12847 | CVE-2024-12847 | CRITICAL | 9.8 | 29.94% | cvelistv5 | |
| cve-2024-0204 | CVE-2024-0204 | CRITICAL | 9.8 | 95.09% | cvelistv5 | |
| cve-2024-0012 | Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability | CRITICAL | N/A | 99.72% | cvelistv5 | 2024-11-18 |
| cve-2023-7335 | EduSoho < 22.4.7 Arbitrary File Read via classroom-course-statistics | HIGH | 8.7 | 0.77% | cvelistv5 | 2026-07-15 |
| cve-2023-7334 | Changjetong T+ <= 16.x GetStoreWarehouseByStore Deserialization RCE | CRITICAL | 9.8 | 1.11% | cvelistv5 | 2026-06-17 |
| cve-2023-6114 | CVE-2023-6114 | HIGH | N/A | 30.89% | cvelistv5 | |
| cve-2023-49103 | ownCloud graphapi Information Disclosure Vulnerability | CRITICAL | 10.0 | 78.43% | cvelistv5 | 2023-11-30 |