Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-29059 | Microsoft .NET Framework Information Disclosure Vulnerability | HIGH | N/A | 98.62% | cvelistv5 | 2025-02-04 |
| cve-2024-28995 | SolarWinds Serv-U Path Traversal Vulnerability | HIGH | 8.6 | 99.61% | cvelistv5 | 2024-07-17 |
| cve-2024-28987 | SolarWinds Web Help Desk Hardcoded Credential Vulnerability | HIGH | N/A | 93.30% | cvelistv5 | 2024-10-15 |
| cve-2024-28986 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | CRITICAL | 9.8 | 84.63% | cvelistv5 | 2024-08-15 |
| cve-2024-28734 | CVE-2024-28734 | MEDIUM | 6.1 | 1.79% | cvelistv5 | |
| cve-2024-28255 | CVE-2024-28255 | CRITICAL | 9.8 | 73.26% | cvelistv5 | |
| cve-2024-28000 | CVE-2024-28000 | CRITICAL | 9.8 | 68.27% | cvelistv5 | |
| cve-2024-27956 | WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability | CRITICAL | 9.9 | 94.06% | cvelistv5 | 2026-06-17 |
| cve-2024-27954 | CVE-2024-27954 | CRITICAL | 9.3 | 72.77% | cvelistv5 | |
| cve-2024-27564 | CVE-2024-27564 | MEDIUM | 5.8 | 40.64% | cvelistv5 | |
| cve-2024-27497 | CVE-2024-27497 | HIGH | 8.8 | 26.66% | cvelistv5 | |
| cve-2024-27443 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | MEDIUM | 6.1 | 23.63% | cvelistv5 | 2025-05-19 |
| cve-2024-27348 | Apache HugeGraph-Server Improper Access Control Vulnerability | CRITICAL | 9.8 | 99.21% | cvelistv5 | 2024-09-18 |
| cve-2024-27199 | JetBrains TeamCity Relative Path Traversal Vulnerability | HIGH | 7.3 | 99.99% | cvelistv5 | 2026-04-20 |
| cve-2024-27198 | JetBrains TeamCity Authentication Bypass Vulnerability | CRITICAL | 9.8 | 99.94% | cvelistv5 | 2024-03-07 |
| cve-2024-27130 | CVE-2024-27130 | HIGH | 7.2 | 37.52% | cvelistv5 | |
| cve-2024-26169 | Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability | HIGH | 7.8 | 4.01% | cvelistv5 | 2024-06-13 |
| cve-2024-25852 | CVE-2024-25852 | HIGH | 8.8 | 16.52% | cvelistv5 | |
| cve-2024-25735 | CVE-2024-25735 | CRITICAL | 9.1 | 50.62% | cvelistv5 | |
| cve-2024-24919 | Check Point Quantum Security Gateways Information Disclosure Vulnerability | HIGH | 8.6 | 99.98% | cvelistv5 | 2024-05-30 |
| cve-2024-24329 | CVE-2024-24329 | CRITICAL | 9.8 | 6.17% | cvelistv5 | |
| cve-2024-24328 | CVE-2024-24328 | HIGH | 8.8 | 6.17% | cvelistv5 | |
| cve-2024-23897 | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability | CRITICAL | N/A | 100.00% | cvelistv5 | 2024-08-19 |
| cve-2024-2389 | CVE-2024-2389 | CRITICAL | 10.0 | 93.04% | cvelistv5 | |
| cve-2024-23692 | Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | CRITICAL | N/A | 99.48% | cvelistv5 | 2024-07-09 |
| cve-2024-23660 | CVE-2024-23660 | HIGH | 7.5 | 0.55% | cvelistv5 | |
| cve-2024-2353 | CVE-2024-2353 | CRITICAL | 9.0 | 3.95% | cvelistv5 | |
| cve-2024-2330 | CVE-2024-2330 | MEDIUM | 6.5 | 17.62% | cvelistv5 | |
| cve-2024-23296 | Apple Multiple Products Memory Corruption Vulnerability | HIGH | 7.8 | 1.41% | cvelistv5 | 2024-03-06 |
| cve-2024-23225 | Apple Multiple Products Memory Corruption Vulnerability | HIGH | 7.8 | 1.48% | cvelistv5 | 2024-03-06 |