Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2023-36845 | Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability | HIGH | N/A | 95.07% | cvelistv5 | 2023-11-13 |
| cve-2022-0591 | CVE-2022-0591 | HIGH | N/A | 20.25% | cvelistv5 | |
| cve-2017-8046 | SUSE CVE CVE-2017-8046 | UNKNOWN | N/A | 74.53% | cvelistv5 | 2025-02-18 |
| cve-2017-17560 | An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquery/uploader/multi_uploadify.php, provides multipart upload functionality that is accessible without authentication and can be used to place a file anywhere on the device's file system. This allows an attacker the ability to upload a PHP shell onto the device and obtain arbitrary code execution as root. | CRITICAL | 9.8 | 73.40% | cvelistv5 | 2026-06-17 |
| cve-2024-21683 | CVE-2024-21683 | HIGH | 7.2 | 88.27% | cvelistv5 | |
| cve-2024-21762 | Fortinet FortiOS Out-of-Bound Write Vulnerability | CRITICAL | N/A | 83.43% | cvelistv5 | 2024-02-09 |
| cve-2024-1021 | CVE-2024-1021 | MEDIUM | 6.5 | 34.71% | cvelistv5 | |
| cve-2024-0778 | CVE-2024-0778 | HIGH | 8.0 | 32.09% | cvelistv5 | |
| cve-2023-39296 | CVE-2023-39296 | HIGH | 7.5 | 1.56% | cvelistv5 | |
| cve-2023-26609 | CVE-2023-26609 | HIGH | 7.2 | 38.72% | cvelistv5 | |
| cve-2023-23295 | CVE-2023-23295 | HIGH | 8.8 | 3.83% | cvelistv5 | |
| cve-2022-24086 | Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability | CRITICAL | 9.8 | 99.20% | cvelistv5 | 2022-02-15 |
| cve-2021-32849 | CVE-2021-32849 | HIGH | 8.8 | 7.65% | cvelistv5 | |
| cve-2021-32790 | CVE-2021-32790 | MEDIUM | 4.9 | 1.26% | cvelistv5 | |
| cve-2019-6814 | CVE-2019-6814 | HIGH | N/A | 36.65% | cvelistv5 | |
| cve-2019-4061 | CVE-2019-4061 | MEDIUM | 5.3 | 22.55% | cvelistv5 | |
| cve-2019-25065 | CVE-2019-25065 | MEDIUM | 6.3 | 6.51% | cvelistv5 | |
| cve-2024-5806 | CVE-2024-5806 | CRITICAL | 9.1 | 81.47% | cvelistv5 | |
| cve-2024-5217 | ServiceNow Incomplete List of Disallowed Inputs Vulnerability | CRITICAL | 9.8 | 99.63% | cvelistv5 | 2024-07-29 |
| cve-2024-32113 | Apache OFBiz Path Traversal Vulnerability | HIGH | N/A | 99.92% | cvelistv5 | 2024-08-07 |
| cve-2024-27130 | CVE-2024-27130 | HIGH | 7.2 | 37.52% | cvelistv5 | |
| cve-2024-22729 | CVE-2024-22729 | CRITICAL | 9.8 | 70.78% | cvelistv5 | |
| cve-2023-50358 | CVE-2023-50358 | MEDIUM | 5.8 | 13.52% | cvelistv5 | |
| cve-2023-4473 | CVE-2023-4473 | CRITICAL | 9.8 | 41.35% | cvelistv5 | |
| cve-2023-27034 | CVE-2023-27034 | CRITICAL | 9.8 | 58.74% | cvelistv5 | |
| cve-2022-36267 | CVE-2022-36267 | HIGH | N/A | 54.55% | cvelistv5 | |
| cve-2022-25237 | CVE-2022-25237 | HIGH | N/A | 56.45% | cvelistv5 | |
| cve-2021-44892 | CVE-2021-44892 | HIGH | N/A | 2.02% | cvelistv5 | |
| cve-2020-29557 | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | CRITICAL | 9.8 | 54.32% | cvelistv5 | 2021-11-03 |
| cve-2020-25540 | CVE-2020-25540 | HIGH | N/A | 75.33% | cvelistv5 |