Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-29972 CVE-2024-29972 CRITICAL 9.8 89.33% cvelistv5
cve-2025-5605 Authentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosure MEDIUM 4.3 0.85% cvelistv5 2026-06-17
cve-2024-7097 CVE-2024-7097 MEDIUM 4.3 0.66% cvelistv5
cve-2024-50334 CVE-2024-50334 HIGH 8.7 1.03% cvelistv5
cve-2024-11305 CVE-2024-11305 MEDIUM 6.5 3.67% cvelistv5
cve-2023-48022 ray: Ray Job Submission Arbitrary Code Execution UNKNOWN N/A 83.94% cvelistv5 2026-06-26
cve-2019-10068 Kentico Xperience Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 95.07% cvelistv5 2022-03-25
cve-2026-56164 Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability HIGH N/A 1.01% cvelistv5 2026-07-14
cve-2026-56155 Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability HIGH 7.8 0.35% cvelistv5 2026-07-14
cve-2026-15410 SonicWall SMA1000 Appliances Code Injection Vulnerability HIGH 7.2 11.79% cvelistv5 2026-07-14
cve-2026-15409 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CRITICAL N/A 6.79% cvelistv5 2026-07-14
cve-2008-4128 Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on ... HIGH 8.1 33.87% cvelistv5 2026-09-24
cve-2026-52813 SUSE CVE CVE-2026-52813 UNKNOWN N/A 1.11% cvelistv5 2026-07-30
cve-2026-4020 Gravity SMTP <= 2.1.4 - Unauthenticated Sensitive Information Exposure via REST API HIGH 7.5 2.24% cvelistv5 2026-06-17
cve-2023-22620 CVE-2023-22620 HIGH 7.5 3.92% cvelistv5
cve-2020-17453 CVE-2020-17453 HIGH N/A 26.22% cvelistv5
cve-2008-4128 Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on ... HIGH 8.1 33.87% cvelistv5 2026-09-24
cve-2026-5027 Langflow - Path Traversal Arbitrary File Write via upload_user_file HIGH 8.8 4.76% cvelistv5 2026-08-18
cve-2026-39808 Fortinet FortiSandbox OS Command Injection Vulnerability HIGH N/A 47.36% cvelistv5 2026-07-16
cve-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability HIGH 8.6 88.20% cvelistv5 2026-06-25
cve-2025-29635 D-Link DIR-823X Command Injection Vulnerability HIGH 7.2 87.94% cvelistv5 2026-04-24
cve-2023-3608 CVE-2023-3608 MEDIUM 5.8 12.29% cvelistv5
cve-2026-2699 EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC) CRITICAL 9.8 3.18% cvelistv5 2026-06-17
cve-2025-54309 CrushFTP Unprotected Alternate Channel Vulnerability HIGH N/A 94.91% cvelistv5 2025-07-22
cve-2024-4040 CrushFTP VFS Sandbox Escape Vulnerability CRITICAL 9.8 99.54% cvelistv5 2024-04-24
cve-2023-6567 CVE-2023-6567 CRITICAL 9.8 51.39% cvelistv5
cve-2023-52163 Digiever DS-2105 Pro Missing Authorization Vulnerability HIGH 8.8 96.92% cvelistv5 2025-12-22
cve-2019-6340 Drupal Core Remote Code Execution Vulnerability HIGH N/A 92.02% cvelistv5 2022-03-25
cve-2026-56291 Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability HIGH N/A 14.85% cvelistv5 2026-07-10
cve-2026-48939 iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability HIGH N/A 20.07% cvelistv5 2026-07-10