Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-28255 | CVE-2024-28255 | CRITICAL | 9.8 | 73.26% | cvelistv5 | |
| cve-2024-27956 | WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability | CRITICAL | 9.9 | 94.06% | cvelistv5 | 2026-06-17 |
| cve-2024-27348 | Apache HugeGraph-Server Improper Access Control Vulnerability | CRITICAL | 9.8 | 99.21% | cvelistv5 | 2024-09-18 |
| cve-2024-25852 | CVE-2024-25852 | HIGH | 8.8 | 16.52% | cvelistv5 | |
| cve-2024-2330 | CVE-2024-2330 | MEDIUM | 6.5 | 17.62% | cvelistv5 | |
| cve-2024-20767 | Adobe ColdFusion Improper Access Control Vulnerability | HIGH | 7.4 | 98.51% | cvelistv5 | 2024-12-16 |
| cve-2024-20404 | CVE-2024-20404 | HIGH | 7.2 | 22.64% | cvelistv5 | |
| cve-2024-1561 | CVE-2024-1561 | HIGH | 7.5 | 9.31% | cvelistv5 | |
| cve-2023-6909 | CVE-2023-6909 | HIGH | 7.5 | 89.72% | cvelistv5 | |
| cve-2023-5914 | CVE-2023-5914 | MEDIUM | 5.4 | 73.14% | cvelistv5 | |
| cve-2023-47218 | CVE-2023-47218 | MEDIUM | 5.8 | 89.92% | cvelistv5 | |
| cve-2023-45038 | CVE-2023-45038 | MEDIUM | 4.3 | 1.24% | cvelistv5 | |
| cve-2023-4220 | CVE-2023-4220 | HIGH | 8.1 | 76.08% | cvelistv5 | |
| cve-2023-41642 | CVE-2023-41642 | HIGH | N/A | 1.12% | cvelistv5 | |
| cve-2023-38192 | CVE-2023-38192 | HIGH | N/A | 1.11% | cvelistv5 | |
| cve-2023-36844 | Juniper Junos OS EX Series PHP External Variable Modification Vulnerability | HIGH | N/A | 89.96% | cvelistv5 | 2023-11-13 |
| cve-2023-27163 | CVE-2023-27163 | MEDIUM | 6.5 | 6.59% | cvelistv5 | |
| cve-2023-22897 | CVE-2023-22897 | MEDIUM | 6.5 | 4.07% | cvelistv5 | |
| cve-2022-40843 | CVE-2022-40843 | HIGH | N/A | 28.80% | cvelistv5 | |
| cve-2022-35653 | moodle: LTI module reflected XSS risk - affecting unauthenticated users only | MEDIUM | 5.4 | 4.75% | cvelistv5 | 2026-03-27 |
| cve-2022-28290 | Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request | MEDIUM | 6.1 | 1.40% | cvelistv5 | 2026-06-17 |
| cve-2022-0346 | Google XML Sitemap Generator < 2.0.4 - Reflected Cross-Site Scripting | MEDIUM | 6.1 | 2.07% | cvelistv5 | 2026-06-17 |
| cve-2021-42567 | CVE-2021-42567 | HIGH | N/A | 8.06% | cvelistv5 | |
| cve-2021-28150 | CVE-2021-28150 | HIGH | N/A | 2.79% | cvelistv5 | |
| cve-2021-28149 | CVE-2021-28149 | HIGH | N/A | 15.92% | cvelistv5 | |
| cve-2021-22017 | VMware vCenter Server Improper Access Control | MEDIUM | 5.3 | 49.18% | cvelistv5 | 2022-01-10 |
| cve-2021-21745 | CVE-2021-21745 | HIGH | N/A | 55.71% | cvelistv5 | |
| cve-2020-5722 | Grandstream Networks UCM6200 Series SQL Injection Vulnerability | CRITICAL | 9.8 | 84.41% | cvelistv5 | 2022-01-28 |
| cve-2020-36728 | CVE-2020-36728 | MEDIUM | 6.5 | 3.13% | cvelistv5 | |
| cve-2020-3580 | Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability | MEDIUM | 6.1 | 85.58% | cvelistv5 | 2021-11-03 |