Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2025-10204 | CVE-2025-10204 | HIGH | 7.1 | 0.48% | cvelistv5 | |
| cve-2025-10035 | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability | CRITICAL | 10.0 | 99.80% | cvelistv5 | 2025-09-29 |
| cve-2025-0994 | Trimble Cityworks Deserialization Vulnerability | HIGH | 8.6 | 31.31% | cvelistv5 | 2025-02-07 |
| cve-2025-0868 | Remote Code Execution in DocsGPT | CRITICAL | 9.3 | 17.09% | cvelistv5 | 2026-06-17 |
| cve-2025-0674 | CVE-2025-0674 | CRITICAL | 9.8 | 3.65% | cvelistv5 | |
| cve-2025-0411 | 7-Zip Mark of the Web Bypass Vulnerability | HIGH | N/A | 67.07% | cvelistv5 | 2025-02-06 |
| cve-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | CRITICAL | 9.0 | 99.98% | cvelistv5 | 2025-01-08 |
| cve-2025-0111 | Palo Alto Networks PAN-OS File Read Vulnerability | HIGH | N/A | 2.00% | cvelistv5 | 2025-02-20 |
| cve-2025-0108 | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | HIGH | N/A | 98.45% | cvelistv5 | 2025-02-18 |
| cve-2025-0107 | CVE-2025-0107 | HIGH | 7.7 | 78.53% | cvelistv5 | |
| cve-2024-9916 | CVE-2024-9916 | HIGH | 7.5 | 73.62% | cvelistv5 | |
| cve-2024-9707 | CVE-2024-9707 | CRITICAL | 9.8 | 9.08% | cvelistv5 | |
| cve-2024-9680 | Mozilla Firefox Use-After-Free Vulnerability | CRITICAL | N/A | 23.18% | cvelistv5 | 2024-10-15 |
| cve-2024-9644 | CVE-2024-9644 | CRITICAL | 9.8 | 0.67% | cvelistv5 | |
| cve-2024-9593 | Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution | HIGH | 8.3 | 12.41% | cvelistv5 | 2026-06-17 |
| cve-2024-9537 | ScienceLogic SL1 Unspecified Vulnerability | CRITICAL | 9.8 | 3.83% | cvelistv5 | 2024-10-21 |
| cve-2024-9474 | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | MEDIUM | 6.9 | 94.70% | cvelistv5 | 2024-11-18 |
| cve-2024-9465 | Palo Alto Networks Expedition SQL Injection Vulnerability | CRITICAL | 9.2 | 99.63% | cvelistv5 | 2024-11-14 |
| cve-2024-9463 | Palo Alto Networks Expedition OS Command Injection Vulnerability | CRITICAL | 9.9 | 98.55% | cvelistv5 | 2024-11-14 |
| cve-2024-9380 | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | HIGH | N/A | 59.65% | cvelistv5 | 2024-10-09 |
| cve-2024-9379 | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | MEDIUM | 6.5 | 43.78% | cvelistv5 | 2024-10-09 |
| cve-2024-9193 | CVE-2024-9193 | CRITICAL | 9.8 | 3.29% | cvelistv5 | |
| cve-2024-9047 | CVE-2024-9047 | CRITICAL | 9.8 | 93.34% | cvelistv5 | |
| cve-2024-9014 | SUSE CVE CVE-2024-9014 | HIGH | 8.0 | 9.69% | cvelistv5 | 2026-08-13 |
| cve-2024-9001 | CVE-2024-9001 | MEDIUM | 6.5 | 3.32% | cvelistv5 | |
| cve-2024-8963 | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | CRITICAL | 9.4 | 98.61% | cvelistv5 | 2024-09-19 |
| cve-2024-8957 | PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability | HIGH | N/A | 79.70% | cvelistv5 | 2024-11-04 |
| cve-2024-8956 | PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability | HIGH | N/A | 58.79% | cvelistv5 | 2024-11-04 |
| cve-2024-8877 | CVE-2024-8877 | MEDIUM | 6.9 | 77.27% | cvelistv5 | |
| cve-2024-8856 | CVE-2024-8856 | CRITICAL | 9.8 | 94.00% | cvelistv5 |