Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-51211 CVE-2024-51211 CRITICAL 9.8 2.26% cvelistv5
cve-2024-50967 CVE-2024-50967 MEDIUM 6.5 1.68% cvelistv5
cve-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability CRITICAL 9.8 98.61% cvelistv5 2024-12-13
cve-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability CRITICAL 10.0 98.55% cvelistv5 2025-01-16
cve-2024-50498 WordPress WP Query Console plugin <= 1.0 - Remote Code Execution (RCE) vulnerability CRITICAL 10.0 52.91% cvelistv5 2026-06-17
cve-2024-50334 CVE-2024-50334 HIGH 8.7 1.03% cvelistv5
cve-2024-50302 kernel: HID: core: zero-initialize the report buffer MEDIUM 6.1 0.81% cvelistv5 2026-08-31
cve-2024-4978 Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability HIGH 8.7 26.94% cvelistv5 2024-05-29
cve-2024-4947 chromium-browser: Type Confusion in V8 HIGH 8.8 15.24% cvelistv5 2025-11-21
cve-2024-49380 SUSE CVE CVE-2024-49380 HIGH 7.5 2.71% cvelistv5 2026-08-25
cve-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability HIGH N/A 26.21% cvelistv5 2024-12-10
cve-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability HIGH 8.8 14.18% cvelistv5 2024-11-12
cve-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability HIGH N/A 1.30% cvelistv5 2025-02-25
cve-2024-4885 Progress WhatsUp Gold Path Traversal Vulnerability CRITICAL 9.8 99.29% cvelistv5 2025-03-03
cve-2024-4879 ServiceNow Improper Input Validation Vulnerability CRITICAL 9.8 99.98% cvelistv5 2024-07-29
cve-2024-48766 CVE-2024-48766 HIGH 8.6 69.70% cvelistv5
cve-2024-48455 CVE-2024-48455 LOW 2.7 6.43% cvelistv5
cve-2024-4841 CVE-2024-4841 MEDIUM 4.0 0.67% cvelistv5
cve-2024-48307 JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData. CRITICAL 9.8 44.34% cvelistv5 2026-06-17
cve-2024-48248 NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath t... HIGH 8.6 94.36% cvelistv5 2026-09-24
cve-2024-4761 chromium-browser: Out of bounds write in V8 HIGH 8.8 11.01% cvelistv5 2025-12-19
cve-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability HIGH N/A 94.77% cvelistv5 2024-10-23
cve-2024-46938 CVE-2024-46938 HIGH 7.5 46.77% cvelistv5
cve-2024-4671 chromium-browser: use after free in Visuals CRITICAL 9.6 8.35% cvelistv5 2025-11-21
cve-2024-4610 hw:arm: Mali GPU Kernel Driver allows improper GPU memory processing operations HIGH 7.8 0.76% cvelistv5 2025-11-21
cve-2024-4577 php: Argument Injection in PHP-CGI CRITICAL 9.8 99.99% cvelistv5 2025-11-21
cve-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability CRITICAL 10.0 99.91% cvelistv5 2024-10-03
cve-2024-45507 CVE-2024-45507 HIGH 8.8 93.23% cvelistv5
cve-2024-45506 haproxy: potential infinite loop condition in the h2_send() may trigger a DoS HIGH 7.5 1.20% cvelistv5 2026-06-29
cve-2024-45388 Arbitrary file read in the `/api/v2/simulation` endpoint in hoverfly (`GHSL-2023-274`) HIGH 7.5 55.57% cvelistv5 2026-06-17