Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2023-34659 | CVE-2023-34659 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2023-34133 | CVE-2023-34133 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2023-34105 | CVE-2023-34105 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2023-33831 | A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request. | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-06-17 |
| cve-2023-3368 | CVE-2023-3368 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2023-33246 | Apache RocketMQ Command Execution Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2023-09-06 |
| cve-2023-32563 | CVE-2023-32563 | HIGH | 8.8 | N/A | cvelistv5 | |
| cve-2023-31465 | CVE-2023-31465 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2023-31446 | CVE-2023-31446 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2023-30625 | CVE-2023-30625 | HIGH | 8.8 | N/A | cvelistv5 | |
| cve-2023-30258 | CVE-2023-30258 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2023-29919 | CVE-2023-29919 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2023-29357 | Microsoft SharePoint Server Privilege Escalation Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2024-01-10 |
| cve-2023-29300 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2024-01-08 |
| cve-2023-28770 | CVE-2023-28770 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2023-28343 | CVE-2023-28343 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2023-2806 | CVE-2023-2806 | MEDIUM | 5.5 | N/A | cvelistv5 | |
| cve-2023-27587 | CVE-2023-27587 | HIGH | 7.4 | N/A | cvelistv5 | |
| cve-2023-27351 | PaperCut NG/MF Improper Authentication Vulnerability | HIGH | 8.2 | N/A | cvelistv5 | 2026-04-20 |
| cve-2023-27350 | PaperCut MF/NG Improper Access Control Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2023-04-21 |
| cve-2023-27159 | CVE-2023-27159 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2023-26802 | CVE-2023-26802 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2023-26775 | CVE-2023-26775 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2023-2648 | CVE-2023-2648 | MEDIUM | 6.5 | N/A | cvelistv5 | |
| cve-2023-26258 | Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashServiceImpl leaks the AuthUUID token. This token can be used at /WebServiceImpl/services/VirtualStandbyServiceImpl to obtain a valid session. This session can be used to execute any task as administrator. | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-06-17 |
| cve-2023-26256 | CVE-2023-26256 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2023-26255 | CVE-2023-26255 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2023-26067 | CVE-2023-26067 | HIGH | 8.1 | N/A | cvelistv5 | |
| cve-2023-25573 | CVE-2023-25573 | HIGH | 8.6 | N/A | cvelistv5 | |
| cve-2023-2523 | CVE-2023-2523 | HIGH | 7.5 | N/A | cvelistv5 |