Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-0292 | CVE-2024-0292 | MEDIUM | 6.5 | 4.91% | cvelistv5 | |
| cve-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | HIGH | 8.2 | 57.63% | cvelistv5 | 2024-01-17 |
| cve-2023-6184 | CVE-2023-6184 | MEDIUM | 5.0 | 46.61% | cvelistv5 | |
| cve-2023-5683 | CVE-2023-5683 | MEDIUM | 6.5 | 17.98% | cvelistv5 | |
| cve-2023-5285 | CVE-2023-5285 | MEDIUM | 6.5 | 0.62% | cvelistv5 | |
| cve-2023-30194 | CVE-2023-30194 | CRITICAL | 9.8 | 32.41% | cvelistv5 | |
| cve-2023-23063 | CVE-2023-23063 | HIGH | N/A | 2.43% | cvelistv5 | |
| cve-2022-28908 | CVE-2022-28908 | HIGH | N/A | 2.56% | cvelistv5 | |
| cve-2022-28907 | CVE-2022-28907 | HIGH | N/A | 2.56% | cvelistv5 | |
| cve-2022-28906 | CVE-2022-28906 | HIGH | N/A | 2.88% | cvelistv5 | |
| cve-2021-35232 | CVE-2021-35232 | MEDIUM | 6.8 | 0.30% | cvelistv5 | |
| cve-2021-27692 | CVE-2021-27692 | HIGH | N/A | 3.19% | cvelistv5 | |
| cve-2020-3259 | Cisco ASA and FTD Information Disclosure Vulnerability | HIGH | 7.5 | 71.79% | cvelistv5 | 2024-02-15 |
| cve-2020-27387 | CVE-2020-27387 | HIGH | N/A | 18.46% | cvelistv5 | |
| cve-2019-3495 | CVE-2019-3495 | HIGH | N/A | 4.95% | cvelistv5 | |
| cve-2018-13350 | SQL injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute SQL queries via the "Event" parameter. | CRITICAL | 9.8 | 16.66% | cvelistv5 | 2026-06-17 |
| cve-2014-1677 | Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information. | HIGH | 7.5 | 17.71% | cvelistv5 | 2026-06-17 |
| cve-2025-7414 | CVE-2025-7414 | MEDIUM | 6.5 | 12.63% | cvelistv5 | |
| cve-2025-61757 | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | HIGH | N/A | 88.65% | cvelistv5 | 2025-11-21 |
| cve-2025-51482 | Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows remote attackers to execute arbitrary Python code and system commands via crafted payloads to the /v1/tools/run endpoint, bypassing intended sandbox restrictions. | HIGH | 8.8 | 1.88% | cvelistv5 | 2026-06-17 |
| cve-2025-45988 | Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bs_SetCmd function. | CRITICAL | 9.8 | 10.88% | cvelistv5 | 2026-06-17 |
| cve-2025-3987 | TOTOLINK N150RT formWsc command injection | MEDIUM | 6.3 | 10.49% | cvelistv5 | 2026-06-17 |
| cve-2024-9593 | Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution | HIGH | 8.3 | 12.41% | cvelistv5 | 2026-06-17 |
| cve-2024-13984 | CVE-2024-13984 | CRITICAL | 10.0 | 0.82% | cvelistv5 | |
| cve-2023-7311 | BYTEVALUE Intelligent Flow Control Router Command Injection | CRITICAL | 9.3 | 1.86% | cvelistv5 | 2026-06-17 |
| cve-2023-7308 | SecGate3600 Firewall Information Disclosure via authManageSet.cgi | HIGH | 7.5 | 7.48% | cvelistv5 | 2026-06-17 |
| cve-2023-7307 | CVE-2023-7307 | HIGH | 8.7 | 0.52% | cvelistv5 | |
| cve-2023-47565 | QNAP VioStor NVR OS Command Injection Vulnerability | HIGH | 8.0 | 73.28% | cvelistv5 | 2023-12-21 |
| cve-2021-29003 | CVE-2021-29003 | HIGH | N/A | 45.42% | cvelistv5 | |
| cve-2018-25118 | GeoVision Command Injection RCE via /PictureCatch.cgi | CRITICAL | 10.0 | 1.27% | cvelistv5 | 2026-06-17 |