Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability MEDIUM 6.5 54.11% cvelistv5 2025-03-03
cve-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability HIGH 8.6 92.27% cvelistv5 2025-03-03
cve-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability HIGH 8.8 97.67% cvelistv5 2025-03-03
cve-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability HIGH 8.4 22.18% cvelistv5 2025-03-03
cve-2025-21756 SUSE CVE CVE-2025-21756 HIGH 7.8 0.89% cvelistv5 2026-08-30
cve-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability HIGH N/A 1.30% cvelistv5 2025-02-25
cve-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CRITICAL 9.0 77.27% cvelistv5 2025-02-25
cve-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability HIGH 8.8 3.93% cvelistv5 2025-02-24
cve-2017-3066 Adobe ColdFusion Deserialization Vulnerability CRITICAL 9.8 90.60% cvelistv5 2025-02-24
cve-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability HIGH N/A 1.62% cvelistv5 2025-02-21
cve-2025-23209 Craft CMS Code Injection Vulnerability HIGH 8.1 21.78% cvelistv5 2025-02-20
cve-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability HIGH N/A 2.00% cvelistv5 2025-02-20
cve-2025-0108 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability HIGH 8.8 98.45% cvelistv5 2025-02-18
cve-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability HIGH 8.2 95.13% cvelistv5 2025-02-18
edb-52028 EDB-52028 HIGH N/A N/A ndaal_kev 2025-02-14
cnvd-2024-38747 浙江大华技术股份有限公司智能云网关注册管理平台存在SQL注入漏洞(CNVD-2024-38747) UNKNOWN N/A N/A cnvd unknown
cve-2024-57727 SimpleHelp Path Traversal Vulnerability CRITICAL N/A 96.58% cvelistv5 2025-02-13
cve-2025-24200 Apple iOS and iPadOS Incorrect Authorization Vulnerability MEDIUM 6.1 4.46% cvelistv5 2025-02-12
cve-2024-41710 Mitel SIP Phones Argument Injection Vulnerability MEDIUM 6.8 41.65% cvelistv5 2025-02-12
cve-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability HIGH N/A 1.57% cvelistv5 2025-02-11
cve-2025-21391 Microsoft Windows Storage Link Following Vulnerability HIGH 7.1 2.30% cvelistv5 2025-02-11
cve-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability HIGH 8.8 21.54% cvelistv5 2025-02-11
cve-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability HIGH N/A 20.70% cvelistv5 2025-02-11
cve-2025-0994 Trimble Cityworks Deserialization Vulnerability HIGH 8.6 31.31% cvelistv5 2025-02-07
cve-2025-0411 7-Zip Mark of the Web Bypass Vulnerability HIGH N/A 67.07% cvelistv5 2025-02-06
cve-2024-21413 Microsoft Outlook Improper Input Validation Vulnerability CRITICAL 9.8 94.66% cvelistv5 2025-02-06
cve-2022-23748 Dante Discovery Process Control Vulnerability HIGH 7.8 9.09% cvelistv5 2025-02-06
cve-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability CRITICAL 9.8 4.66% cvelistv5 2025-02-06
cve-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability CRITICAL 9.8 10.67% cvelistv5 2025-02-06
cve-2024-53104 SUSE CVE CVE-2024-53104 HIGH 7.8 3.40% cvelistv5 2026-08-29