Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2013-0648 Adobe Flash Player Code Execution Vulnerability HIGH N/A 11.09% cvelistv5 2024-09-17
cve-2013-0643 Adobe Flash Player Incorrect Default Permissions Vulnerability HIGH N/A 10.53% cvelistv5 2024-09-17
cve-2024-6670 Progress WhatsUp Gold SQL Injection Vulnerability CRITICAL 9.8 93.00% cvelistv5 2024-09-16
cve-2024-43461 Microsoft Windows MSHTML Platform Spoofing Vulnerability HIGH 8.8 54.49% cvelistv5 2024-09-16
edb-48377 EDB-48377 HIGH N/A N/A ndaal_kev 2024-09-14
cve-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability HIGH 7.2 88.53% cvelistv5 2024-09-13
cve-2024-38226 Microsoft Publisher Protection Mechanism Failure Vulnerability HIGH 7.3 2.67% cvelistv5 2024-09-10
cve-2024-38217 Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability MEDIUM 5.4 10.03% cvelistv5 2024-09-10
cve-2024-38014 Microsoft Windows Installer Improper Privilege Management Vulnerability HIGH 7.8 6.26% cvelistv5 2024-09-10
cve-2024-40766 SonicWall SonicOS Improper Access Control Vulnerability CRITICAL 9.8 18.38% cvelistv5 2024-09-09
cve-2017-1000253 Linux Kernel PIE Stack Buffer Corruption Vulnerability CRITICAL N/A 10.70% cvelistv5 2024-09-09
cve-2016-3714 ImageMagick Improper Input Validation Vulnerability HIGH N/A 97.48% cvelistv5 2024-09-09
cve-2024-7262 Kingsoft WPS Office Path Traversal Vulnerability CRITICAL 9.3 2.94% cvelistv5 2024-09-03
cve-2021-20124 Draytek VigorConnect Path Traversal Vulnerability HIGH 7.5 96.31% cvelistv5 2024-09-03
cve-2021-20123 Draytek VigorConnect Path Traversal Vulnerability HIGH 7.5 90.23% cvelistv5 2024-09-03
cve-2024-7965 Google Chromium V8 Inappropriate Implementation Vulnerability HIGH N/A 18.53% cvelistv5 2024-08-28
cve-2024-38856 Apache OFBiz Incorrect Authorization Vulnerability HIGH 8.1 99.43% cvelistv5 2024-08-27
cve-2024-7971 Google Chromium V8 Type Confusion Vulnerability HIGH N/A 21.10% cvelistv5 2024-08-26
cve-2024-39717 Versa Director Dangerous File Type Upload Vulnerability MEDIUM 6.6 4.01% cvelistv5 2024-08-23
cve-2022-0185 kernel: fs_context: heap overflow in legacy parameter handling HIGH 7.8 25.15% cvelistv5 2026-06-28
cve-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability HIGH N/A 99.59% cvelistv5 2024-08-21
cve-2021-33044 Dahua IP Camera Authentication Bypass Vulnerability HIGH N/A 99.99% cvelistv5 2024-08-21
cve-2021-31196 Microsoft Exchange Server Information Disclosure Vulnerability HIGH 7.2 54.06% cvelistv5 2024-08-21
cve-2024-23897 Jenkins Command Line Interface (CLI) Path Traversal Vulnerability CRITICAL N/A 100.00% cvelistv5 2024-08-19
cve-2024-28986 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 84.63% cvelistv5 2024-08-15
cve-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability MEDIUM 6.5 13.63% cvelistv5 2024-08-13
cve-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability HIGH 7.8 28.53% cvelistv5 2024-08-13
cve-2024-38189 Microsoft Project Remote Code Execution Vulnerability HIGH 8.8 8.19% cvelistv5 2024-08-13
cve-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability HIGH 7.5 41.38% cvelistv5 2024-08-13
cve-2024-38107 Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability HIGH 7.8 1.64% cvelistv5 2024-08-13