Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2025-10211 | yanyutao0402 ChanCMS getArticle CollectController server-side request forgery | MEDIUM | 6.3 | N/A | cvelistv5 | 2026-09-26 |
| cve-2025-10204 | CVE-2025-10204 | HIGH | 7.1 | N/A | cvelistv5 | |
| cve-2025-10164 | CVE-2025-10164 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2025-10035 | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability | CRITICAL | 10.0 | N/A | cvelistv5 | 2025-09-29 |
| cve-2025-0994 | Trimble Cityworks Deserialization Vulnerability | HIGH | 8.6 | N/A | cvelistv5 | 2025-02-07 |
| cve-2025-0868 | Remote Code Execution in DocsGPT | CRITICAL | 9.3 | N/A | cvelistv5 | 2026-06-17 |
| cve-2025-0674 | CVE-2025-0674 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2025-0411 | 7-Zip Mark of the Web Bypass Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-02-06 |
| cve-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | CRITICAL | 9.0 | N/A | cvelistv5 | 2025-01-08 |
| cve-2025-0111 | Palo Alto Networks PAN-OS File Read Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-02-20 |
| cve-2025-0108 | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-02-18 |
| cve-2025-0107 | CVE-2025-0107 | HIGH | 7.7 | N/A | cvelistv5 | |
| cve-2024-9916 | CVE-2024-9916 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2024-9707 | CVE-2024-9707 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2024-9680 | Mozilla Firefox Use-After-Free Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2024-10-15 |
| cve-2024-9644 | CVE-2024-9644 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2024-9593 | Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution | HIGH | 8.3 | N/A | cvelistv5 | 2026-06-17 |
| cve-2024-9537 | ScienceLogic SL1 Unspecified Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2024-10-21 |
| cve-2024-9474 | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | MEDIUM | 6.9 | N/A | cvelistv5 | 2024-11-18 |
| cve-2024-9465 | Palo Alto Networks Expedition SQL Injection Vulnerability | CRITICAL | 9.2 | N/A | cvelistv5 | 2024-11-14 |
| cve-2024-9463 | Palo Alto Networks Expedition OS Command Injection Vulnerability | CRITICAL | 9.9 | N/A | cvelistv5 | 2024-11-14 |
| cve-2024-9380 | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2024-10-09 |
| cve-2024-9379 | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | MEDIUM | 6.5 | N/A | cvelistv5 | 2024-10-09 |
| cve-2024-9193 | CVE-2024-9193 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2024-9047 | CVE-2024-9047 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2024-9014 | pgadmin4: OAuth2 issue in pgAdmin 4 | UNKNOWN | N/A | N/A | cvelistv5 | 2025-11-21 |
| cve-2024-9001 | CVE-2024-9001 | MEDIUM | 6.5 | N/A | cvelistv5 | |
| cve-2024-8963 | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | CRITICAL | 9.4 | N/A | cvelistv5 | 2024-09-19 |
| cve-2024-8957 | PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2024-11-04 |
| cve-2024-8956 | PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2024-11-04 |