Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability MEDIUM 5.8 15.75% cvelistv5 2024-10-24
cve-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability HIGH N/A 94.77% cvelistv5 2024-10-23
cve-2024-38094 Microsoft SharePoint Deserialization Vulnerability HIGH 7.2 50.89% cvelistv5 2024-10-22
cve-2024-9537 ScienceLogic SL1 Unspecified Vulnerability CRITICAL 9.8 3.83% cvelistv5 2024-10-21
cnvd-2021-14544 杭州海康威视系统技术有限公司流媒体管理服务器存在弱口令漏洞 UNKNOWN N/A N/A cnvd unknown
cve-2024-40711 Veeam Backup and Replication Deserialization Vulnerability CRITICAL 9.8 90.37% cvelistv5 2024-10-17
cve-2024-9680 Mozilla Firefox Use-After-Free Vulnerability CRITICAL N/A 23.18% cvelistv5 2024-10-15
cve-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerability HIGH 7.0 68.20% cvelistv5 2024-10-15
cve-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability HIGH N/A 93.30% cvelistv5 2024-10-15
cve-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability HIGH N/A 59.65% cvelistv5 2024-10-09
cve-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability MEDIUM 6.5 43.78% cvelistv5 2024-10-09
cve-2024-23113 Fortinet Multiple Products Format String Vulnerability CRITICAL 9.8 61.72% cvelistv5 2024-10-09
cve-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability HIGH N/A 46.11% cvelistv5 2024-10-08
cve-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability HIGH N/A 66.70% cvelistv5 2024-10-08
cve-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability HIGH 7.8 0.67% cvelistv5 2024-10-08
cve-2024-44068 An issue was discovered in the m2m scaler driver in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850,and W920. A Use-After-Free in the mobile processor leads to privilege escalation. HIGH 8.1 1.03% cvelistv5 2024-10-07
edb-52074 EDB-52074 HIGH N/A N/A ndaal_kev 2024-10-06
cve-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability CRITICAL 10.0 99.91% cvelistv5 2024-10-03
cve-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability HIGH N/A 99.94% cvelistv5 2024-10-02
cve-2023-25280 D-Link DIR-820 Router OS Command Injection Vulnerability CRITICAL 9.8 97.86% cvelistv5 2024-09-30
cve-2020-15415 DrayTek Multiple Vigor Routers OS Command Injection Vulnerability CRITICAL 9.8 84.48% cvelistv5 2024-09-30
cve-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 7.08% cvelistv5 2024-09-30
cve-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability HIGH N/A 100.00% cvelistv5 2024-09-24
cve-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability CRITICAL 9.4 98.61% cvelistv5 2024-09-19
cve-2024-27348 Apache HugeGraph-Server Improper Access Control Vulnerability CRITICAL 9.8 99.21% cvelistv5 2024-09-18
cve-2022-21445 Oracle ADF Faces Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 62.48% cvelistv5 2024-09-18
cve-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability CRITICAL 9.8 94.55% cvelistv5 2024-09-18
cve-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability HIGH 8.8 99.02% cvelistv5 2024-09-18
cve-2014-0502 SUSE CVE CVE-2014-0502 HIGH 8.8 24.82% cvelistv5 2025-10-08
cve-2014-0497 SUSE CVE CVE-2014-0497 CRITICAL 9.8 99.88% cvelistv5 2025-10-08