Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2023-23397 Microsoft Office Outlook Privilege Escalation Vulnerability HIGH N/A N/A cvelistv5 2023-03-14
cve-2022-41328 Fortinet FortiOS Path Traversal Vulnerability MEDIUM 6.5 N/A cvelistv5 2023-03-14
cve-2021-39144 xstream: Arbitrary code execution via unsafe deserialization of sun.tracing.* HIGH 8.5 N/A cvelistv5 2026-08-08
cve-2020-5741 Plex Media Server Remote Code Execution Vulnerability HIGH 7.2 N/A cvelistv5 2023-03-10
cve-2022-35914 Teclib GLPI Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2023-03-07
cve-2022-33891 Apache Spark Command Injection Vulnerability HIGH N/A N/A cvelistv5 2023-03-07
cve-2022-28810 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability MEDIUM 6.8 N/A cvelistv5 2023-03-07
edb-14146 EDB-14146 HIGH N/A N/A ndaal_kev 2023-03-03
edb-49457 EDB-49457 HIGH N/A N/A ndaal_kev 2023-02-28
cve-2022-36537 ZK Framework AuUploader Unspecified Vulnerability CRITICAL N/A N/A cvelistv5 2023-02-27
cve-2022-47986 IBM Aspera Faspex Code Execution Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-02-21
cve-2022-41223 Mitel MiVoice Connect Code Injection Vulnerability CRITICAL N/A N/A cvelistv5 2023-02-21
cve-2022-40765 Mitel MiVoice Connect Command Injection Vulnerability CRITICAL N/A N/A cvelistv5 2023-02-21
cve-2022-46169 Cacti Command Injection Vulnerability HIGH N/A N/A cvelistv5 2023-02-16
cve-2023-23529 Apple Multiple Products WebKit Type Confusion Vulnerability HIGH N/A N/A cvelistv5 2023-02-14
cve-2023-23376 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2023-02-14
cve-2023-21823 Microsoft Windows Graphic Component Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2023-02-14
cve-2023-21715 Microsoft Office Publisher Security Feature Bypass Vulnerability HIGH 7.3 N/A cvelistv5 2023-02-14
cve-unassigned-2022-hikvision-management-platform-rce-01 CVE-UNASSIGNED-2022-HIKVISION-MANAGEMENT-PLATFORM-RCE-01 HIGH N/A N/A ndaal_kev 2023-02-10
cve-2023-0669 Fortra GoAnywhere MFT Remote Code Execution Vulnerability HIGH 7.2 N/A cvelistv5 2023-02-10
cve-2022-24990 TerraMaster OS Remote Command Execution Vulnerability CRITICAL N/A N/A cvelistv5 2023-02-10
cve-2015-2291 Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability HIGH 7.8 9.01% cvelistv5 2023-02-10
cve-2023-22952 Multiple SugarCRM Products Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2023-02-02
cve-2022-21587 Oracle E-Business Suite Unspecified Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-02-02
cve-2017-11357 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-01-26
cve-2022-47966 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CRITICAL N/A N/A cvelistv5 2023-01-23
edb-47204 EDB-47204 HIGH N/A N/A ndaal_kev 2023-01-20
cve-2022-44877 CWP Control Web Panel OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-01-17
cve-2023-21674 Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability HIGH N/A N/A cvelistv5 2023-01-10
cve-2022-41080 Microsoft Exchange Server Privilege Escalation Vulnerability HIGH 8.8 N/A cvelistv5 2023-01-10