Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability MEDIUM 6.5 N/A cvelistv5 2024-11-12
cve-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability CRITICAL 10.0 N/A cvelistv5 2024-11-12
cve-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability MEDIUM 5.3 N/A cvelistv5 2024-11-12
cve-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability HIGH N/A N/A cvelistv5 2024-11-12
cve-2024-5910 Palo Alto Networks Expedition Missing Authentication Vulnerability CRITICAL 9.3 N/A cvelistv5 2024-11-07
cve-2024-51567 CyberPanel Incorrect Default Permissions Vulnerability CRITICAL N/A N/A cvelistv5 2024-11-07
cve-2024-43093 Android Framework Privilege Escalation Vulnerability HIGH 7.3 N/A cvelistv5 2024-11-07
cve-2019-16278 Nostromo nhttpd Directory Traversal Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-11-07
cve-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability HIGH 7.2 N/A cvelistv5 2024-11-04
cve-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability CRITICAL 9.1 N/A cvelistv5 2024-11-04
cve-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability HIGH N/A N/A cvelistv5 2024-10-24
cve-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability MEDIUM 5.8 N/A cvelistv5 2024-10-24
cve-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-10-23
cve-2024-38094 Microsoft SharePoint Deserialization Vulnerability HIGH 7.2 N/A cvelistv5 2024-10-22
cve-2024-9537 ScienceLogic SL1 Unspecified Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-10-21
cve-2024-40711 Veeam Backup and Replication Deserialization Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-10-17
cve-2024-9680 Mozilla Firefox Use-After-Free Vulnerability CRITICAL N/A N/A cvelistv5 2024-10-15
cve-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerability HIGH 7.0 N/A cvelistv5 2024-10-15
cve-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability HIGH N/A N/A cvelistv5 2024-10-15
cve-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability HIGH 7.2 N/A cvelistv5 2024-10-09
cve-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability MEDIUM 6.5 N/A cvelistv5 2024-10-09
cve-2024-23113 Fortinet Multiple Products Format String Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-10-09
cve-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability HIGH N/A N/A cvelistv5 2024-10-08
cve-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2024-10-08
cve-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability HIGH 7.8 N/A cvelistv5 2024-10-08
cve-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability CRITICAL 10.0 N/A cvelistv5 2024-10-03
cve-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability CRITICAL 9.6 N/A cvelistv5 2024-10-02
cve-2023-25280 D-Link DIR-820 Router OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-30
cve-2020-15415 DrayTek Multiple Vigor Routers OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-30
cve-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-30