Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2021-27137 | DD-WRT Stack-Based Buffer Overflow Vulnerability | HIGH | 8.1 | 4.00% | cvelistv5 | 2026-07-21 |
| cve-2026-22679 | CVE-2026-22679 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2026-6875 | Sandbox Escape in ServiceNow AI Platform | CRITICAL | 9.5 | N/A | cvelistv5 | 2026-07-14 |
| cve-2026-48611 | Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations. | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-06-17 |
| cve-2025-61882 | Oracle E-Business Suite Unspecified Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2025-10-06 |
| cve-2025-47812 | Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-07-14 |
| cve-2025-4270 | CVE-2025-4270 | MEDIUM | 6.9 | N/A | cvelistv5 | |
| cve-2025-2825 | CVE-2025-2825 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2024-7339 | CVE-2024-7339 | MEDIUM | 6.9 | 32.03% | cvelistv5 | |
| cve-2024-48455 | CVE-2024-48455 | LOW | 2.7 | 6.43% | cvelistv5 | |
| cve-2024-46938 | CVE-2024-46938 | HIGH | 7.5 | 46.77% | cvelistv5 | |
| cve-2024-4577 | SUSE CVE CVE-2024-4577 | CRITICAL | 9.8 | 99.99% | cvelistv5 | 2026-08-31 |
| cve-2024-1698 | CVE-2024-1698 | CRITICAL | 9.8 | 77.59% | cvelistv5 | |
| cve-2023-24488 | CVE-2023-24488 | MEDIUM | 6.1 | 80.91% | cvelistv5 | |
| cve-2023-23752 | Joomla! Improper Access Control Vulnerability | MEDIUM | 5.3 | 99.83% | cvelistv5 | 2024-01-08 |
| cve-2021-22122 | CVE-2021-22122 | HIGH | N/A | 10.52% | cvelistv5 | |
| cve-2017-12615 | SUSE CVE CVE-2017-12615 | HIGH | 8.1 | 99.64% | cvelistv5 | 2026-08-31 |
| cve-2026-63030 | WordPress Core Interpretation Conflict Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-07-21 |
| cve-2026-60137 | WordPress Core SQL Injection Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-07-21 |
| cve-2025-59474 | jenkins: Missing permission check allows obtaining agent names | MEDIUM | 5.3 | N/A | cvelistv5 | 2026-06-28 |
| cve-2025-53364 | CVE-2025-53364 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2024-9707 | CVE-2024-9707 | CRITICAL | 9.8 | 9.08% | cvelistv5 | |
| cve-2024-53944 | CVE-2024-53944 | CRITICAL | 9.8 | 39.68% | cvelistv5 | |
| cve-2024-4325 | CVE-2024-4325 | HIGH | 8.6 | 37.37% | cvelistv5 | |
| cve-2024-34257 | CVE-2024-34257 | CRITICAL | 9.8 | 3.82% | cvelistv5 | |
| cve-2024-3273 | D-Link Multiple NAS Devices Command Injection Vulnerability | HIGH | 7.5 | 100.00% | cvelistv5 | 2024-04-11 |
| cve-2024-32640 | MasaCMS SQL Injection vulnerability | CRITICAL | 9.8 | 76.56% | cvelistv5 | 2026-06-17 |
| cve-2024-31750 | CVE-2024-31750 | CRITICAL | 9.8 | 19.27% | cvelistv5 | |
| cve-2024-29973 | CVE-2024-29973 | CRITICAL | 9.8 | 86.09% | cvelistv5 | |
| cve-2024-28734 | CVE-2024-28734 | MEDIUM | 6.1 | 1.79% | cvelistv5 |