Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-41713 Mitel MiCollab Path Traversal Vulnerability CRITICAL 9.1 N/A cvelistv5 2025-01-07
cve-2020-2883 Oracle WebLogic Server Unspecified Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-01-07
cve-2024-3393 Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability HIGH N/A N/A cvelistv5 2024-12-30
cve-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability HIGH 8.1 N/A cvelistv5 2024-12-23
cve-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability HIGH N/A N/A cvelistv5 2024-12-19
cve-2022-23227 NUUO NVRmini2 Devices Missing Authentication Vulnerability HIGH N/A N/A cvelistv5 2024-12-18
cve-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability CRITICAL 9.1 N/A cvelistv5 2024-12-18
cve-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability HIGH 7.2 N/A cvelistv5 2024-12-18
cve-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-12-18
cve-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability CRITICAL N/A N/A cvelistv5 2024-12-17
cve-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability HIGH 7.8 N/A cvelistv5 2024-12-16
cve-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability HIGH 7.4 N/A cvelistv5 2024-12-16
cve-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-12-13
cve-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2024-12-10
cve-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability CRITICAL N/A N/A cvelistv5 2024-12-04
cve-2024-11680 ProjectSend Improper Authentication Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-12-03
cve-2024-11667 Zyxel Multiple Firewalls Path Traversal Vulnerability HIGH 7.5 N/A cvelistv5 2024-12-03
cve-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability HIGH 7.5 N/A cvelistv5 2024-12-03
cve-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-11-25
cve-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability HIGH N/A N/A cvelistv5 2024-11-21
cve-2024-44308 Apple Multiple Products Code Execution Vulnerability HIGH N/A N/A cvelistv5 2024-11-21
cve-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability HIGH N/A N/A cvelistv5 2024-11-21
cve-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability HIGH 7.5 N/A cvelistv5 2024-11-20
cve-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-11-20
cve-2024-9474 Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability MEDIUM 6.9 N/A cvelistv5 2024-11-18
cve-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability CRITICAL 10.0 N/A cvelistv5 2024-11-18
cve-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability CRITICAL 9.3 N/A cvelistv5 2024-11-18
cve-2024-9465 Palo Alto Networks Expedition SQL Injection Vulnerability CRITICAL 9.2 N/A cvelistv5 2024-11-14
cve-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability CRITICAL 9.9 N/A cvelistv5 2024-11-14
cve-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability HIGH 8.8 N/A cvelistv5 2024-11-12