Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-38106 Microsoft Windows Kernel Privilege Escalation Vulnerability HIGH 7.0 6.34% cvelistv5 2024-08-13
cve-2024-36971 Android Kernel Remote Code Execution Vulnerability HIGH N/A 2.70% cvelistv5 2024-08-07
cve-2024-32113 Apache OFBiz Path Traversal Vulnerability HIGH N/A 99.92% cvelistv5 2024-08-07
cve-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability HIGH 7.5 73.19% cvelistv5 2024-08-05
cve-2024-37085 VMware ESXi Authentication Bypass Vulnerability MEDIUM 6.8 26.77% cvelistv5 2024-07-30
cve-2024-5217 ServiceNow Incomplete List of Disallowed Inputs Vulnerability CRITICAL 9.8 99.63% cvelistv5 2024-07-29
cve-2024-4879 ServiceNow Improper Input Validation Vulnerability CRITICAL 9.8 99.98% cvelistv5 2024-07-29
cve-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability CRITICAL 9.8 53.25% cvelistv5 2024-07-29
cnvd-2024-15077 CNVD-2024-15077 HIGH N/A N/A ndaal_kev 2024-07-24
cve-2024-39891 Twilio Authy Information Disclosure Vulnerability MEDIUM 5.3 1.67% cvelistv5 2024-07-23
cve-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability HIGH N/A 78.82% cvelistv5 2024-07-23
cve-2024-34102 Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability CRITICAL 9.8 99.99% cvelistv5 2024-07-17
cve-2024-28995 SolarWinds Serv-U Path Traversal Vulnerability HIGH 8.6 99.61% cvelistv5 2024-07-17
cve-2022-22948 VMware vCenter Server Incorrect Default File Permissions Vulnerability MEDIUM 6.5 13.28% cvelistv5 2024-07-17
cve-2024-36401 OSGeo GeoServer GeoTools Eval Injection Vulnerability CRITICAL 9.8 99.81% cvelistv5 2024-07-15
cve-2024-38112 Microsoft Windows MSHTML Platform Spoofing Vulnerability HIGH 7.5 84.23% cvelistv5 2024-07-09
cve-2024-38080 Microsoft Windows Hyper-V Privilege Escalation Vulnerability HIGH 7.8 7.12% cvelistv5 2024-07-09
cve-2024-23692 Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL N/A 99.48% cvelistv5 2024-07-09
cve-2024-20399 Cisco NX-OS Command Injection Vulnerability MEDIUM 6.0 4.31% cvelistv5 2024-07-02
cve-2022-2586 Linux Kernel Use-After-Free Vulnerability HIGH N/A 10.20% cvelistv5 2024-06-26
cve-2022-24816 OSGeo GeoServer JAI-EXT Code Injection Vulnerability HIGH N/A 99.91% cvelistv5 2024-06-26
cve-2020-13965 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability HIGH N/A 76.60% cvelistv5 2024-06-26
cve-2024-4358 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability CRITICAL 9.8 97.48% cvelistv5 2024-06-13
cve-2024-32896 Android Pixel Privilege Escalation Vulnerability HIGH 8.1 2.99% cvelistv5 2024-06-13
cve-2024-26169 Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability HIGH 7.8 4.01% cvelistv5 2024-06-13
cve-2024-4610 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability HIGH N/A 0.76% cvelistv5 2024-06-12
cve-2024-4577 PHP-CGI OS Command Injection Vulnerability CRITICAL N/A 99.99% cvelistv5 2024-06-12
cve-2017-3506 Oracle WebLogic Server OS Command Injection Vulnerability HIGH 7.4 96.28% cvelistv5 2024-06-03
cve-2024-24919 Check Point Quantum Security Gateways Information Disclosure Vulnerability HIGH 8.6 99.98% cvelistv5 2024-05-30
cve-2024-1086 Linux Kernel Use-After-Free Vulnerability CRITICAL N/A 28.06% cvelistv5 2024-05-30