Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-23897 Jenkins Command Line Interface (CLI) Path Traversal Vulnerability CRITICAL N/A N/A cvelistv5 2024-08-19
cve-2024-28986 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-08-15
cve-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability MEDIUM 6.5 N/A cvelistv5 2024-08-13
cve-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2024-08-13
cve-2024-38189 Microsoft Project Remote Code Execution Vulnerability HIGH 8.8 N/A cvelistv5 2024-08-13
cve-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability HIGH 7.5 N/A cvelistv5 2024-08-13
cve-2024-38107 Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2024-08-13
cve-2024-38106 Microsoft Windows Kernel Privilege Escalation Vulnerability HIGH 7.0 N/A cvelistv5 2024-08-13
cve-2024-36971 Android Kernel Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2024-08-07
cve-2024-32113 Apache OFBiz Path Traversal Vulnerability CRITICAL 9.1 N/A cvelistv5 2024-08-07
cve-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability HIGH 7.5 73.19% cvelistv5 2024-08-05
cve-2024-37085 VMware ESXi Authentication Bypass Vulnerability MEDIUM 6.8 N/A cvelistv5 2024-07-30
cve-2024-5217 ServiceNow Incomplete List of Disallowed Inputs Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-07-29
cve-2024-4879 ServiceNow Improper Input Validation Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-07-29
cve-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-07-29
cve-2024-39891 Twilio Authy Information Disclosure Vulnerability MEDIUM 5.3 N/A cvelistv5 2024-07-23
cve-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability HIGH N/A 78.82% cvelistv5 2024-07-23
cve-2024-34102 Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-07-17
cve-2024-28995 SolarWinds Serv-U Path Traversal Vulnerability HIGH 8.6 N/A cvelistv5 2024-07-17
cve-2022-22948 VMware vCenter Server Incorrect Default File Permissions Vulnerability MEDIUM 6.5 N/A cvelistv5 2024-07-17
cve-2024-36401 OSGeo GeoServer GeoTools Eval Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-07-15
cve-2024-38112 Microsoft Windows MSHTML Platform Spoofing Vulnerability HIGH 7.5 N/A cvelistv5 2024-07-09
cve-2024-38080 Microsoft Windows Hyper-V Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2024-07-09
cve-2024-23692 Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-07-09
cve-2024-20399 Cisco NX-OS Command Injection Vulnerability MEDIUM 6.0 N/A cvelistv5 2024-07-02
cve-2022-2586 Linux Kernel Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2024-06-26
cve-2022-24816 OSGeo GeoServer JAI-EXT Code Injection Vulnerability CRITICAL 10.0 N/A cvelistv5 2024-06-26
cve-2020-13965 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability HIGH N/A N/A cvelistv5 2024-06-26
cve-2024-4358 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-06-13
cve-2024-32896 Android Pixel Privilege Escalation Vulnerability HIGH 8.1 N/A cvelistv5 2024-06-13