Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-57727 SimpleHelp Path Traversal Vulnerability CRITICAL 9.1 N/A cvelistv5 2025-02-13
cve-2025-24200 Apple iOS and iPadOS Incorrect Authorization Vulnerability MEDIUM 6.1 N/A cvelistv5 2025-02-12
cve-2024-41710 Mitel SIP Phones Argument Injection Vulnerability MEDIUM 6.8 N/A cvelistv5 2025-02-12
cve-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2025-02-11
cve-2025-21391 Microsoft Windows Storage Link Following Vulnerability HIGH N/A N/A cvelistv5 2025-02-11
cve-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability HIGH 8.8 N/A cvelistv5 2025-02-11
cve-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability HIGH 8.8 N/A cvelistv5 2025-02-11
cve-2025-0994 Trimble Cityworks Deserialization Vulnerability HIGH 8.6 N/A cvelistv5 2025-02-07
cve-2025-0411 7-Zip Mark of the Web Bypass Vulnerability HIGH N/A N/A cvelistv5 2025-02-06
cve-2024-21413 Microsoft Outlook Improper Input Validation Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-02-06
cve-2022-23748 Dante Discovery Process Control Vulnerability HIGH 7.8 N/A cvelistv5 2025-02-06
cve-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-02-06
cve-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-02-06
cve-2024-53104 Linux Kernel Out-of-Bounds Write Vulnerability HIGH N/A N/A cvelistv5 2025-02-05
cve-2024-45195 Apache OFBiz Forced Browsing Vulnerability HIGH N/A N/A cvelistv5 2025-02-04
cve-2024-29059 Microsoft .NET Framework Information Disclosure Vulnerability HIGH N/A N/A cvelistv5 2025-02-04
cve-2018-9276 Paessler PRTG Network Monitor OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2025-02-04
cve-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability HIGH N/A N/A cvelistv5 2025-02-04
cve-2025-24085 Apple Multiple Products Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2025-01-29
cve-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-01-24
cve-2020-11023 JQuery Cross-Site Scripting (XSS) Vulnerability HIGH N/A N/A cvelistv5 2025-01-23
cve-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability CRITICAL 10.0 N/A cvelistv5 2025-01-16
cve-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability HIGH 7.8 N/A cvelistv5 2025-01-14
cve-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability HIGH 7.8 N/A cvelistv5 2025-01-14
cve-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability HIGH 7.8 N/A cvelistv5 2025-01-14
cve-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability CRITICAL 9.6 N/A cvelistv5 2025-01-14
cve-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability MEDIUM 6.6 N/A cvelistv5 2025-01-13
cve-2023-48365 Qlik Sense HTTP Tunneling Vulnerability CRITICAL N/A N/A cvelistv5 2025-01-13
cve-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability CRITICAL 9.0 N/A cvelistv5 2025-01-08
cve-2024-55550 Mitel MiCollab Path Traversal Vulnerability CRITICAL N/A N/A cvelistv5 2025-01-07