Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-0235 | CVE-2024-0235 | MEDIUM | 5.3 | 37.96% | cvelistv5 | |
| cve-2023-6634 | CVE-2023-6634 | HIGH | 8.1 | 8.54% | cvelistv5 | |
| cve-2023-38035 | Ivanti Sentry Authentication Bypass Vulnerability | CRITICAL | N/A | 99.95% | cvelistv5 | 2023-08-22 |
| cve-2023-2796 | CVE-2023-2796 | HIGH | N/A | 42.67% | cvelistv5 | |
| cve-2023-1434 | CVE-2023-1434 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-46381 | Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e. | MEDIUM | 6.1 | 1.76% | cvelistv5 | 2026-06-17 |
| cve-2022-46169 | SUSE CVE CVE-2022-46169 | CRITICAL | 9.8 | 99.83% | cvelistv5 | 2026-06-06 |
| cve-2022-28365 | CVE-2022-28365 | HIGH | N/A | 9.32% | cvelistv5 | |
| cve-2022-28363 | CVE-2022-28363 | HIGH | N/A | 4.90% | cvelistv5 | |
| cve-2022-22242 | Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web | MEDIUM | 6.1 | 2.79% | cvelistv5 | 2026-06-17 |
| cve-2022-1916 | Active Products Tables for WooCommerce < 1.0.5 - Reflected Cross-Site-Scripting | MEDIUM | 6.1 | 1.95% | cvelistv5 | 2026-06-17 |
| cve-2022-1439 | CVE-2022-1439 | MEDIUM | 6.3 | 3.26% | cvelistv5 | |
| cve-2021-46379 | CVE-2021-46379 | HIGH | N/A | 15.77% | cvelistv5 | |
| cve-2021-45422 | CVE-2021-45422 | HIGH | N/A | 3.24% | cvelistv5 | |
| cve-2021-39211 | CVE-2021-39211 | MEDIUM | 5.3 | 4.70% | cvelistv5 | |
| cve-2021-31250 | CVE-2021-31250 | HIGH | N/A | 79.61% | cvelistv5 | |
| cve-2021-30168 | CVE-2021-30168 | CRITICAL | 9.8 | 2.08% | cvelistv5 | |
| cve-2021-21087 | CVE-2021-21087 | MEDIUM | 5.4 | 37.09% | cvelistv5 | |
| cve-2021-20092 | CVE-2021-20092 | HIGH | N/A | 8.17% | cvelistv5 | |
| cve-2020-9314 | CVE-2020-9314 | HIGH | N/A | 1.28% | cvelistv5 | |
| cve-2020-8115 | CVE-2020-8115 | HIGH | N/A | 7.05% | cvelistv5 | |
| cve-2020-5775 | CVE-2020-5775 | HIGH | N/A | 6.53% | cvelistv5 | |
| cve-2020-25213 | WordPress File Manager Plugin Remote Code Execution Vulnerability | CRITICAL | 10.0 | 97.33% | cvelistv5 | 2021-11-03 |
| cve-2020-11798 | CVE-2020-11798 | HIGH | N/A | 48.77% | cvelistv5 | |
| cve-2020-10770 | keycloak: Default Client configuration is vulnerable to SSRF using "request_uri" parameter | MEDIUM | 5.8 | 69.72% | cvelistv5 | 2026-06-28 |
| cve-2019-18393 | CVE-2019-18393 | HIGH | N/A | 13.94% | cvelistv5 | |
| cve-2019-17503 | CVE-2019-17503 | HIGH | N/A | 48.30% | cvelistv5 | |
| cve-2018-11409 | Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key. | MEDIUM | 5.3 | 98.31% | cvelistv5 | 2026-06-17 |
| cve-2015-2863 | CVE-2015-2863 | HIGH | N/A | 10.32% | cvelistv5 | |
| cve-2026-25089 | Fortinet FortiSandbox OS Command Injection Vulnerability | CRITICAL | 9.1 | 76.11% | cvelistv5 | 2026-07-16 |