Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability CRITICAL 9.8 99.11% cvelistv5 2024-03-25
cve-2019-7256 Nice Linear eMerge E3-Series OS Command Injection Vulnerability HIGH N/A 97.08% cvelistv5 2024-03-25
cve-2024-27198 JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-03-07
cve-2024-23296 Apple Multiple Products Memory Corruption Vulnerability HIGH 7.8 N/A cvelistv5 2024-03-06
cve-2024-23225 Apple Multiple Products Memory Corruption Vulnerability HIGH 7.8 N/A cvelistv5 2024-03-06
cve-2023-21237 Android Pixel Information Disclosure Vulnerability HIGH N/A N/A cvelistv5 2024-03-05
cve-2021-36380 Sunhillo SureLine OS Command Injection Vulnerablity HIGH N/A 97.65% cvelistv5 2024-03-05
cve-2024-27198 JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-03-07
cve-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability HIGH 7.8 N/A cvelistv5 2024-03-04
cve-2023-29360 Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability HIGH 8.4 N/A cvelistv5 2024-02-29
cve-2024-1709 ConnectWise ScreenConnect Authentication Bypass Vulnerability CRITICAL 10.0 N/A cvelistv5 2024-02-22
cve-2024-21410 Microsoft Exchange Server Privilege Escalation Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-02-15
cve-2020-3259 Cisco ASA and FTD Information Disclosure Vulnerability HIGH 7.5 71.79% cvelistv5 2024-02-15
cve-2024-21412 Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability HIGH 8.1 N/A cvelistv5 2024-02-13
cve-2024-21351 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability HIGH 7.6 N/A cvelistv5 2024-02-13
cve-2023-43770 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability HIGH N/A N/A cvelistv5 2024-02-12
cve-2024-21762 Fortinet FortiOS Out-of-Bound Write Vulnerability CRITICAL N/A N/A cvelistv5 2024-02-09
cve-2023-4762 Google Chromium V8 Type Confusion Vulnerability HIGH N/A N/A cvelistv5 2024-02-06
cve-2024-21893 Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability CRITICAL N/A N/A cvelistv5 2024-01-31
cve-2022-48618 Apple Multiple Products Memory Corruption Vulnerability HIGH 7.0 N/A cvelistv5 2024-01-31
cve-2023-22527 Atlassian Confluence Data Center and Server Template Injection Vulnerability CRITICAL 10.0 N/A cvelistv5 2024-01-24
cve-2024-23222 webkitgtk: type confusion may lead to arbitrary code execution HIGH 8.8 N/A cvelistv5 2025-11-21
cve-2023-34048 VMware vCenter Server Out-of-Bounds Write Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-01-22
cve-2023-35082 Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability CRITICAL 10.0 N/A cvelistv5 2024-01-18
cve-2024-0519 chromium-browser: Out of bounds memory access in V8 HIGH 8.8 N/A cvelistv5 2025-11-21
cve-2023-6549 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability HIGH 8.2 N/A cvelistv5 2024-01-17
cve-2023-6548 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability MEDIUM 5.5 N/A cvelistv5 2024-01-17
cve-2018-15133 Laravel Deserialization of Untrusted Data Vulnerability HIGH 8.1 76.81% cvelistv5 2024-01-16
cve-2024-21887 Ivanti Connect Secure and Policy Secure Command Injection Vulnerability CRITICAL 9.1 N/A cvelistv5 2024-01-10
cve-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability HIGH 8.2 N/A cvelistv5 2024-01-10