Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-58374 Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allow... HIGH 8.7 0.47% cvelistv5 2026-09-09
cve-2024-12912 CVE-2024-12912 HIGH 7.2 1.24% cvelistv5
cve-2023-39470 CVE-2023-39470 HIGH 7.2 1.76% cvelistv5
cve-2023-39361 SUSE CVE CVE-2023-39361 CRITICAL 9.8 88.79% cvelistv5 2026-08-26
cve-2023-3722 CVE-2023-3722 HIGH 8.6 3.86% cvelistv5
cve-2022-50992 CVE-2022-50992 HIGH 8.7 0.70% cvelistv5
cve-2021-27691 CVE-2021-27691 HIGH N/A 25.18% cvelistv5
cve-2019-25765 ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote att... HIGH 8.7 0.59% cvelistv5 2026-09-10
cve-2019-12725 Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this issue by injecting OS commands inside the vulnerable parameters. CRITICAL 9.8 89.85% cvelistv5 2026-06-17
cve-2019-10655 CVE-2019-10655 HIGH N/A 15.47% cvelistv5
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.55% cvelistv5 2026-01-26
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.68% cvelistv5 2026-04-08
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.58% cvelistv5 2026-01-29
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 99.28% cvelistv5 2023-05-31
cve-2026-86218 N-able N-central Static Code Injection Vulnerability HIGH N/A 7.49% cvelistv5 2026-09-08
cve-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability HIGH N/A 0.57% cvelistv5 2026-09-08
cve-2026-81963 Microsoft Windows Link Following Vulnerability HIGH N/A 0.63% cvelistv5 2026-09-08
cve-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL 10.0 2.15% cvelistv5 2026-09-08
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.55% cvelistv5 2026-01-26
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.68% cvelistv5 2026-04-08
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.58% cvelistv5 2026-01-29
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 99.28% cvelistv5 2023-05-31
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.55% cvelistv5 2026-01-26
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.68% cvelistv5 2026-04-08
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.58% cvelistv5 2026-01-29
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 99.28% cvelistv5 2023-05-31
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.55% cvelistv5 2026-01-26