Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-34028 Commvault Command Center Path Traversal Vulnerability HIGH N/A 97.55% cvelistv5 2025-05-02
cve-2024-58136 Yiiframework Yii Improper Protection of Alternate Path Vulnerability HIGH N/A 87.76% cvelistv5 2025-05-02
cve-2024-38475 Apache HTTP Server Improper Escaping of Output Vulnerability HIGH N/A 99.96% cvelistv5 2025-05-01
cve-2023-44221 SonicWall SMA100 Appliances OS Command Injection Vulnerability HIGH N/A 76.25% cvelistv5 2025-05-01
cve-2025-31324 SAP NetWeaver Unrestricted File Upload Vulnerability CRITICAL N/A 99.47% cvelistv5 2025-04-29
cve-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability HIGH N/A 3.30% cvelistv5 2025-04-28
cve-2025-3928 Commvault Web Server Unspecified Vulnerability HIGH N/A 2.30% cvelistv5 2025-04-28
cve-2025-1976 Broadcom Brocade Fabric OS Code Injection Vulnerability HIGH N/A 0.69% cvelistv5 2025-04-28
cve-2025-31201 Apple Multiple Products Arbitrary Read and Write Vulnerability HIGH N/A 13.85% cvelistv5 2025-04-17
cve-2025-31200 Apple Multiple Products Memory Corruption Vulnerability HIGH N/A 18.59% cvelistv5 2025-04-17
cve-2025-24054 Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability MEDIUM 6.5 58.91% cvelistv5 2025-04-17
cve-2021-20035 SonicWall SMA100 Appliances OS Command Injection Vulnerability HIGH N/A 4.18% cvelistv5 2025-04-16
cve-2024-53197 Linux Kernel Out-of-Bounds Access Vulnerability HIGH N/A 3.56% cvelistv5 2025-04-09
cve-2024-53150 Linux Kernel Out-of-Bounds Read Vulnerability HIGH N/A 1.35% cvelistv5 2025-04-09
cve-2025-30406 Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability HIGH N/A 94.34% cvelistv5 2025-04-08
cve-2025-29824 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability HIGH 7.8 13.90% cvelistv5 2025-04-08
cve-2025-31161 CrushFTP Authentication Bypass Vulnerability CRITICAL 9.8 99.98% cvelistv5 2025-04-07
cve-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability CRITICAL N/A 99.98% cvelistv5 2025-04-04
cve-2025-24813 Apache Tomcat Path Equivalence Vulnerability HIGH N/A 99.93% cvelistv5 2025-04-01
cve-2024-20439 Cisco Smart Licensing Utility Static Credential Vulnerability CRITICAL 9.8 92.06% cvelistv5 2025-03-31
cve-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability HIGH N/A 9.24% cvelistv5 2025-03-27
cve-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability HIGH N/A 13.79% cvelistv5 2025-03-26
cve-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability CRITICAL 9.8 83.74% cvelistv5 2025-03-26
cve-2025-30154 reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability HIGH N/A 2.44% cvelistv5 2025-03-24
cve-2025-1316 Edimax IC-7100 IP Camera OS Command Injection Vulnerability CRITICAL 9.8 74.48% cvelistv5 2025-03-19
cve-2024-48248 NAKIVO Backup and Replication Absolute Path Traversal Vulnerability HIGH 8.6 94.36% cvelistv5 2025-03-19
cve-2017-12637 SAP NetWeaver Directory Traversal Vulnerability HIGH 7.5 95.11% cvelistv5 2025-03-19
cve-2025-30066 tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability HIGH 8.6 69.79% cvelistv5 2025-03-18
cve-2025-24472 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability CRITICAL N/A 7.23% cvelistv5 2025-03-18
cve-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability HIGH N/A 3.77% cvelistv5 2025-03-13