Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-23222 | Apple Multiple Products WebKit Type Confusion Vulnerability | HIGH | N/A | 10.59% | cvelistv5 | 2024-01-23 |
| cve-2024-23113 | Fortinet Multiple Products Format String Vulnerability | CRITICAL | 9.8 | 61.72% | cvelistv5 | 2024-10-09 |
| cve-2024-22927 | Cross Site Scripting (XSS) vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL. | MEDIUM | 6.1 | 1.02% | cvelistv5 | 2026-06-17 |
| cve-2024-22768 | CVE-2024-22768 | HIGH | 7.4 | 0.56% | cvelistv5 | |
| cve-2024-22729 | CVE-2024-22729 | CRITICAL | 9.8 | 70.78% | cvelistv5 | |
| cve-2024-22320 | CVE-2024-22320 | CRITICAL | 9.8 | 73.40% | cvelistv5 | |
| cve-2024-22319 | CVE-2024-22319 | HIGH | 8.1 | 76.40% | cvelistv5 | |
| cve-2024-22024 | CVE-2024-22024 | HIGH | 8.3 | 94.72% | cvelistv5 | |
| cve-2024-21899 | CVE-2024-21899 | CRITICAL | 9.8 | 24.37% | cvelistv5 | |
| cve-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability | CRITICAL | N/A | 100.00% | cvelistv5 | 2024-01-31 |
| cve-2024-21887 | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | CRITICAL | 9.1 | 100.00% | cvelistv5 | 2024-01-10 |
| cve-2024-21762 | Fortinet FortiOS Out-of-Bound Write Vulnerability | CRITICAL | N/A | 83.43% | cvelistv5 | 2024-02-09 |
| cve-2024-21683 | CVE-2024-21683 | HIGH | 7.2 | 88.27% | cvelistv5 | |
| cve-2024-21620 | CVE-2024-21620 | HIGH | 8.8 | 0.91% | cvelistv5 | |
| cve-2024-21413 | Microsoft Outlook Improper Input Validation Vulnerability | CRITICAL | 9.8 | 94.66% | cvelistv5 | 2025-02-06 |
| cve-2024-21412 | Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability | CRITICAL | N/A | 99.41% | cvelistv5 | 2024-02-13 |
| cve-2024-21410 | Microsoft Exchange Server Privilege Escalation Vulnerability | CRITICAL | 9.8 | 12.56% | cvelistv5 | 2024-02-15 |
| cve-2024-21351 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | HIGH | N/A | 27.80% | cvelistv5 | 2024-02-13 |
| cve-2024-21338 | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability | HIGH | 7.8 | 59.81% | cvelistv5 | 2024-03-04 |
| cve-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability | HIGH | N/A | 1.72% | cvelistv5 | 2024-11-21 |
| cve-2024-21182 | Oracle WebLogic Server Unspecified Vulnerability | HIGH | 7.5 | 74.16% | cvelistv5 | 2026-06-01 |
| cve-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | HIGH | 8.8 | 3.93% | cvelistv5 | 2025-02-24 |
| cve-2024-20767 | Adobe ColdFusion Improper Access Control Vulnerability | HIGH | 7.4 | 98.51% | cvelistv5 | 2024-12-16 |
| cve-2024-20481 | Cisco ASA and FTD Denial-of-Service Vulnerability | MEDIUM | 5.8 | 15.75% | cvelistv5 | 2024-10-24 |
| cve-2024-20440 | CVE-2024-20440 | HIGH | 7.5 | 51.90% | cvelistv5 | |
| cve-2024-20439 | Cisco Smart Licensing Utility Static Credential Vulnerability | HIGH | N/A | 97.09% | cvelistv5 | 2025-03-31 |
| cve-2024-20404 | CVE-2024-20404 | HIGH | 7.2 | 22.64% | cvelistv5 | |
| cve-2024-20399 | Cisco NX-OS Command Injection Vulnerability | MEDIUM | 6.0 | 4.31% | cvelistv5 | 2024-07-02 |
| cve-2024-20359 | Cisco ASA and FTD Privilege Escalation Vulnerability | MEDIUM | 6.0 | 19.43% | cvelistv5 | 2024-04-24 |
| cve-2024-20353 | Cisco ASA and FTD Denial of Service Vulnerability | HIGH | 8.6 | 70.69% | cvelistv5 | 2024-04-24 |