Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-24
cve-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability CRITICAL 9.4 N/A cvelistv5 2024-09-19
cve-2024-27348 Apache HugeGraph-Server Improper Access Control Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-18
cve-2022-21445 Oracle ADF Faces Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-18
cve-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-18
cve-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability HIGH 8.8 N/A cvelistv5 2024-09-18
cve-2014-0502 flash-plugin: multiple flaws lead to arbitrary code execution (APSB14-07) UNKNOWN N/A 24.82% cvelistv5 2026-06-28
cve-2014-0497 flash-plugin: integer underflow flaw leads to arbitrary code execution (APSB14-04) UNKNOWN N/A 99.88% cvelistv5 2026-06-28
cve-2013-0648 Adobe Flash Player Code Execution Vulnerability HIGH N/A 11.09% cvelistv5 2024-09-17
cve-2013-0643 Adobe Flash Player Incorrect Default Permissions Vulnerability HIGH N/A 10.53% cvelistv5 2024-09-17
cve-2024-6670 Progress WhatsUp Gold SQL Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-16
cve-2024-43461 Microsoft Windows MSHTML Platform Spoofing Vulnerability HIGH 8.8 N/A cvelistv5 2024-09-16
cve-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability HIGH 7.2 N/A cvelistv5 2024-09-13
cve-2024-38226 Microsoft Publisher Protection Mechanism Failure Vulnerability HIGH 7.3 N/A cvelistv5 2024-09-10
cve-2024-38217 Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability MEDIUM 5.4 N/A cvelistv5 2024-09-10
cve-2024-38014 Microsoft Windows Installer Improper Privilege Management Vulnerability HIGH 7.8 N/A cvelistv5 2024-09-10
cve-2024-40766 SonicWall SonicOS Improper Access Control Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-09
cve-2017-1000253 Linux Kernel PIE Stack Buffer Corruption Vulnerability CRITICAL N/A N/A cvelistv5 2024-09-09
cve-2016-3714 ImageMagick Improper Input Validation Vulnerability HIGH N/A N/A cvelistv5 2024-09-09
cve-2024-7262 Kingsoft WPS Office Path Traversal Vulnerability CRITICAL 9.3 N/A cvelistv5 2024-09-03
cve-2021-20124 Draytek VigorConnect Path Traversal Vulnerability HIGH 7.5 N/A cvelistv5 2024-09-03
cve-2021-20123 Draytek VigorConnect Path Traversal Vulnerability HIGH 7.5 N/A cvelistv5 2024-09-03
cve-2024-7965 Google Chromium V8 Inappropriate Implementation Vulnerability HIGH N/A N/A cvelistv5 2024-08-28
cve-2024-38856 Apache OFBiz Incorrect Authorization Vulnerability HIGH 8.1 N/A cvelistv5 2024-08-27
cve-2024-7971 Google Chromium V8 Type Confusion Vulnerability HIGH N/A N/A cvelistv5 2024-08-26
cve-2024-39717 Versa Director Dangerous File Type Upload Vulnerability MEDIUM 6.6 N/A cvelistv5 2024-08-23
cve-2022-0185 Linux Kernel Heap-Based Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2024-08-21
cve-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-08-21
cve-2021-33044 Dahua IP Camera Authentication Bypass Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-08-21
cve-2021-31196 Microsoft Exchange Server Information Disclosure Vulnerability HIGH 7.2 N/A cvelistv5 2024-08-21