Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability CRITICAL N/A 94.67% cvelistv5 2024-12-04
cve-2024-11680 ProjectSend Improper Authentication Vulnerability CRITICAL 9.8 91.70% cvelistv5 2024-12-03
cve-2024-11667 Zyxel Multiple Firewalls Path Traversal Vulnerability HIGH 7.5 2.93% cvelistv5 2024-12-03
cve-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability HIGH 7.5 3.54% cvelistv5 2024-12-03
cve-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 68.08% cvelistv5 2024-11-25
cve-2024-44309 SUSE CVE CVE-2024-44309 MEDIUM 6.3 22.59% cvelistv5 2026-09-01
cve-2024-44308 Apple Multiple Products Code Execution Vulnerability HIGH N/A 10.08% cvelistv5 2024-11-21
cve-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability HIGH N/A 1.72% cvelistv5 2024-11-21
cve-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability HIGH 7.5 17.36% cvelistv5 2024-11-20
cve-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability CRITICAL 9.8 54.57% cvelistv5 2024-11-20
cve-2024-9474 Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability MEDIUM 6.9 94.70% cvelistv5 2024-11-18
cve-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability CRITICAL 10.0 95.39% cvelistv5 2024-11-18
cve-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability CRITICAL N/A 99.85% cvelistv5 2024-11-18
cve-2024-9465 Palo Alto Networks Expedition SQL Injection Vulnerability CRITICAL 9.2 99.63% cvelistv5 2024-11-14
cve-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability CRITICAL 9.9 98.55% cvelistv5 2024-11-14
cve-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability HIGH 8.8 14.18% cvelistv5 2024-11-12
cve-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability MEDIUM 6.5 84.11% cvelistv5 2024-11-12
cve-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability CRITICAL 10.0 97.18% cvelistv5 2024-11-12
cve-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability MEDIUM 5.3 100.00% cvelistv5 2024-11-12
cve-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability HIGH N/A 18.77% cvelistv5 2024-11-12
cve-2024-5910 Palo Alto Networks Expedition Missing Authentication Vulnerability CRITICAL 9.3 91.78% cvelistv5 2024-11-07
cve-2024-51567 CyberPanel Incorrect Default Permissions Vulnerability CRITICAL N/A 86.63% cvelistv5 2024-11-07
cve-2024-43093 Android Framework Privilege Escalation Vulnerability HIGH 7.3 0.71% cvelistv5 2024-11-07
cve-2019-16278 Nostromo nhttpd Directory Traversal Vulnerability CRITICAL 9.8 99.03% cvelistv5 2024-11-07
cnvd-2021-64035 北京网御星云信息技术有限公司SSL VPN存在信息泄露漏洞 UNKNOWN N/A N/A cnvd unknown
edb-43907 EDB-43907 HIGH N/A N/A ndaal_kev 2024-11-05
cnvd-2021-45363 WIFISKY 7层流控路由器存在命令执行漏洞 UNKNOWN N/A N/A cnvd unknown
cve-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability HIGH N/A 79.70% cvelistv5 2024-11-04
cve-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability HIGH N/A 58.79% cvelistv5 2024-11-04
cve-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability HIGH N/A 73.30% cvelistv5 2024-10-24