Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-8877 | CVE-2024-8877 | MEDIUM | 6.9 | N/A | cvelistv5 | |
| cve-2024-8856 | CVE-2024-8856 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2024-8752 | CVE-2024-8752 | CRITICAL | 9.3 | N/A | cvelistv5 | |
| cve-2024-8522 | CVE-2024-8522 | CRITICAL | 10.0 | N/A | cvelistv5 | |
| cve-2024-8425 | CVE-2024-8425 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2024-8190 | Ivanti Cloud Services Appliance OS Command Injection Vulnerability | HIGH | 7.2 | N/A | cvelistv5 | 2024-09-13 |
| cve-2024-8181 | CVE-2024-8181 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2024-8069 | Citrix Session Recording Deserialization of Untrusted Data Vulnerability | MEDIUM | 5.1 | N/A | cvelistv5 | 2025-08-25 |
| cve-2024-8068 | Citrix Session Recording Improper Privilege Management Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-08-25 |
| cve-2024-7971 | Google Chromium V8 Type Confusion Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2024-08-26 |
| cve-2024-7965 | Google Chromium V8 Inappropriate Implementation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2024-08-28 |
| cve-2024-7954 | CVE-2024-7954 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2024-7928 | CVE-2024-7928 | MEDIUM | 5.3 | N/A | cvelistv5 | |
| cve-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability | HIGH | 7.2 | N/A | cvelistv5 | 2026-02-17 |
| cve-2024-7593 | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2024-09-24 |
| cve-2024-7399 | Samsung MagicINFO 9 Server Path Traversal Vulnerability | HIGH | 8.8 | N/A | cvelistv5 | 2026-04-24 |
| cve-2024-7339 | CVE-2024-7339 | MEDIUM | 6.9 | N/A | cvelistv5 | |
| cve-2024-7314 | CVE-2024-7314 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2024-7262 | Kingsoft WPS Office Path Traversal Vulnerability | CRITICAL | 9.3 | N/A | cvelistv5 | 2024-09-03 |
| cve-2024-7120 | CVE-2024-7120 | MEDIUM | 6.5 | N/A | cvelistv5 | |
| cve-2024-7097 | CVE-2024-7097 | MEDIUM | 4.3 | N/A | cvelistv5 | |
| cve-2024-7029 | Command Injection in AVTech AVM1203 (IP Camera) | HIGH | 8.8 | N/A | cvelistv5 | 2026-06-17 |
| cve-2024-6893 | CVE-2024-6893 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2024-6671 | CVE-2024-6671 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2024-6670 | Progress WhatsUp Gold SQL Injection Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2024-09-16 |
| cve-2024-6587 | CVE-2024-6587 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2024-6396 | CVE-2024-6396 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2024-6298 | CVE-2024-6298 | CRITICAL | 10.0 | N/A | cvelistv5 | |
| cve-2024-6235 | CVE-2024-6235 | CRITICAL | 9.4 | N/A | cvelistv5 | |
| cve-2024-6220 | CVE-2024-6220 | CRITICAL | 9.8 | N/A | cvelistv5 |