Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-35250 | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability | HIGH | 7.8 | 25.03% | cvelistv5 | 2024-12-16 |
| cve-2024-35219 | openapi-generator-online: Path traversal via outputFolder option | HIGH | 8.3 | 3.59% | cvelistv5 | 2025-11-21 |
| cve-2024-34854 | CVE-2024-34854 | CRITICAL | 9.8 | 12.75% | cvelistv5 | |
| cve-2024-34257 | CVE-2024-34257 | CRITICAL | 9.8 | 3.82% | cvelistv5 | |
| cve-2024-34193 | CVE-2024-34193 | HIGH | 7.5 | 0.62% | cvelistv5 | |
| cve-2024-34102 | Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability | CRITICAL | 9.8 | 99.99% | cvelistv5 | 2024-07-17 |
| cve-2024-3400 | Palo Alto Networks PAN-OS Command Injection Vulnerability | CRITICAL | 10.0 | 100.00% | cvelistv5 | 2024-04-12 |
| cve-2024-3393 | Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability | HIGH | N/A | 28.41% | cvelistv5 | 2024-12-30 |
| cve-2024-32896 | Android Pixel Privilege Escalation Vulnerability | HIGH | 8.1 | 2.99% | cvelistv5 | 2024-06-13 |
| cve-2024-32739 | CVE-2024-32739 | HIGH | 7.5 | 5.41% | cvelistv5 | |
| cve-2024-32738 | CVE-2024-32738 | HIGH | 7.5 | 4.55% | cvelistv5 | |
| cve-2024-32737 | CVE-2024-32737 | HIGH | 7.5 | 5.41% | cvelistv5 | |
| cve-2024-32736 | CVE-2024-32736 | HIGH | 7.5 | 5.41% | cvelistv5 | |
| cve-2024-32735 | CVE-2024-32735 | CRITICAL | 9.8 | 6.77% | cvelistv5 | |
| cve-2024-3273 | D-Link Multiple NAS Devices Command Injection Vulnerability | HIGH | 7.5 | 100.00% | cvelistv5 | 2024-04-11 |
| cve-2024-3272 | D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability | CRITICAL | 10.0 | 98.04% | cvelistv5 | 2024-04-11 |
| cve-2024-32640 | MasaCMS SQL Injection vulnerability | CRITICAL | 9.8 | 76.56% | cvelistv5 | 2026-06-17 |
| cve-2024-32113 | Apache OFBiz Path Traversal Vulnerability | HIGH | N/A | 99.92% | cvelistv5 | 2024-08-07 |
| cve-2024-31750 | CVE-2024-31750 | CRITICAL | 9.8 | 19.27% | cvelistv5 | |
| cve-2024-30891 | CVE-2024-30891 | HIGH | 8.8 | 1.90% | cvelistv5 | |
| cve-2024-30269 | CVE-2024-30269 | MEDIUM | 5.3 | 15.88% | cvelistv5 | |
| cve-2024-30088 | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability | HIGH | 7.0 | 68.20% | cvelistv5 | 2024-10-15 |
| cve-2024-30051 | Microsoft DWM Core Library Privilege Escalation Vulnerability | HIGH | 7.8 | 5.64% | cvelistv5 | 2024-05-14 |
| cve-2024-30040 | Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability | HIGH | 8.8 | 3.94% | cvelistv5 | 2024-05-14 |
| cve-2024-29988 | Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability | HIGH | N/A | 44.88% | cvelistv5 | 2024-04-30 |
| cve-2024-29973 | CVE-2024-29973 | CRITICAL | 9.8 | 86.09% | cvelistv5 | |
| cve-2024-29895 | SUSE CVE CVE-2024-29895 | UNKNOWN | N/A | 98.45% | cvelistv5 | 2025-02-16 |
| cve-2024-29824 | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | HIGH | N/A | 99.94% | cvelistv5 | 2024-10-02 |
| cve-2024-29748 | Android Pixel Privilege Escalation Vulnerability | HIGH | N/A | 0.67% | cvelistv5 | 2024-04-04 |
| cve-2024-29745 | Android Pixel Information Disclosure Vulnerability | MEDIUM | 5.5 | 0.48% | cvelistv5 | 2024-04-04 |