Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2023-49103 | ownCloud graphapi Information Disclosure Vulnerability | CRITICAL | 10.0 | 78.43% | cvelistv5 | 2023-11-30 |
| cve-2023-49070 | CVE-2023-49070 | HIGH | N/A | 95.37% | cvelistv5 | |
| cve-2023-48788 | Fortinet FortiClient EMS SQL Injection Vulnerability | CRITICAL | 9.3 | 98.45% | cvelistv5 | 2024-03-25 |
| cve-2023-4863 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | HIGH | N/A | 99.98% | cvelistv5 | 2023-09-13 |
| cve-2023-48365 | Qlik Sense HTTP Tunneling Vulnerability | CRITICAL | N/A | 47.45% | cvelistv5 | 2025-01-13 |
| cve-2023-48022 | ray: Ray Job Submission Arbitrary Code Execution | UNKNOWN | N/A | 83.94% | cvelistv5 | 2026-06-26 |
| cve-2023-4762 | Google Chromium V8 Type Confusion Vulnerability | HIGH | N/A | 41.38% | cvelistv5 | 2024-02-06 |
| cve-2023-47565 | QNAP VioStor NVR OS Command Injection Vulnerability | HIGH | 8.0 | 73.28% | cvelistv5 | 2023-12-21 |
| cve-2023-47253 | CVE-2023-47253 | CRITICAL | 9.8 | 14.31% | cvelistv5 | |
| cve-2023-47248 | SUSE CVE CVE-2023-47248 | CRITICAL | 9.8 | 14.53% | cvelistv5 | 2026-08-31 |
| cve-2023-47246 | SysAid Server Path Traversal Vulnerability | CRITICAL | 9.8 | 98.85% | cvelistv5 | 2023-11-13 |
| cve-2023-47218 | CVE-2023-47218 | MEDIUM | 5.8 | 89.92% | cvelistv5 | |
| cve-2023-46805 | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability | HIGH | 8.2 | 99.99% | cvelistv5 | 2024-01-10 |
| cve-2023-46748 | F5 BIG-IP Configuration Utility SQL Injection Vulnerability | HIGH | 8.8 | 4.47% | cvelistv5 | 2023-10-31 |
| cve-2023-46747 | F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability | CRITICAL | 9.8 | 96.52% | cvelistv5 | 2023-10-31 |
| cve-2023-46604 | Apache ActiveMQ Deserialization of Untrusted Data Vulnerability | CRITICAL | N/A | 99.89% | cvelistv5 | 2023-11-02 |
| cve-2023-46574 | CVE-2023-46574 | HIGH | N/A | 65.41% | cvelistv5 | |
| cve-2023-46347 | CVE-2023-46347 | CRITICAL | 9.8 | 49.89% | cvelistv5 | |
| cve-2023-4634 | CVE-2023-4634 | HIGH | N/A | 85.89% | cvelistv5 | |
| cve-2023-45878 | CVE-2023-45878 | HIGH | N/A | 63.11% | cvelistv5 | |
| cve-2023-45852 | CVE-2023-45852 | HIGH | N/A | 14.00% | cvelistv5 | |
| cve-2023-45727 | North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability | HIGH | 7.5 | 3.54% | cvelistv5 | 2024-12-03 |
| cve-2023-4542 | D-Link DAR-8000-10 sys1.php os command injection | MEDIUM | 6.3 | 84.69% | cvelistv5 | 2026-06-17 |
| cve-2023-45249 | Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability | CRITICAL | 9.8 | 53.25% | cvelistv5 | 2024-07-29 |
| cve-2023-45038 | CVE-2023-45038 | MEDIUM | 4.3 | 1.24% | cvelistv5 | |
| cve-2023-44976 | CVE-2023-44976 | LOW | 3.2 | 0.18% | cvelistv5 | |
| cve-2023-4490 | WP Job Portal < 2.0.6 - Unauthenticated SQLi | CRITICAL | 9.8 | 3.12% | cvelistv5 | 2026-06-17 |
| cve-2023-4450 | jeecgboot JimuReport Template injection | MEDIUM | 6.3 | 11.59% | cvelistv5 | 2026-06-17 |
| cve-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability | HIGH | N/A | 100.00% | cvelistv5 | 2023-10-10 |
| cve-2023-44221 | SonicWall SMA100 Appliances OS Command Injection Vulnerability | HIGH | N/A | 76.25% | cvelistv5 | 2025-05-01 |