Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-50623 | Cleo Multiple Products Unrestricted File Upload Vulnerability | CRITICAL | 9.8 | 98.61% | cvelistv5 | 2024-12-13 |
| cve-2024-50603 | Aviatrix Controllers OS Command Injection Vulnerability | CRITICAL | 10.0 | 98.55% | cvelistv5 | 2025-01-16 |
| cve-2024-50498 | WordPress WP Query Console plugin <= 1.0 - Remote Code Execution (RCE) vulnerability | CRITICAL | 10.0 | 52.91% | cvelistv5 | 2026-06-17 |
| cve-2024-50334 | CVE-2024-50334 | HIGH | 8.7 | 1.03% | cvelistv5 | |
| cve-2024-50302 | Linux Kernel Use of Uninitialized Resource Vulnerability | HIGH | N/A | 0.81% | cvelistv5 | 2025-03-04 |
| cve-2024-4978 | Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability | HIGH | 8.7 | 26.94% | cvelistv5 | 2024-05-29 |
| cve-2024-4947 | Google Chromium V8 Type Confusion Vulnerability | HIGH | N/A | 15.24% | cvelistv5 | 2024-05-20 |
| cve-2024-49380 | SUSE CVE CVE-2024-49380 | HIGH | 7.5 | 2.71% | cvelistv5 | 2026-08-25 |
| cve-2024-49138 | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | HIGH | N/A | 26.21% | cvelistv5 | 2024-12-10 |
| cve-2024-49035 | Microsoft Partner Center Improper Access Control Vulnerability | HIGH | N/A | 1.30% | cvelistv5 | 2025-02-25 |
| cve-2024-4885 | Progress WhatsUp Gold Path Traversal Vulnerability | CRITICAL | 9.8 | 99.29% | cvelistv5 | 2025-03-03 |
| cve-2024-4879 | ServiceNow Improper Input Validation Vulnerability | CRITICAL | 9.8 | 99.98% | cvelistv5 | 2024-07-29 |
| cve-2024-48766 | CVE-2024-48766 | HIGH | 8.6 | 69.70% | cvelistv5 | |
| cve-2024-48455 | CVE-2024-48455 | LOW | 2.7 | 6.43% | cvelistv5 | |
| cve-2024-4841 | CVE-2024-4841 | MEDIUM | 4.0 | 0.67% | cvelistv5 | |
| cve-2024-48307 | JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData. | CRITICAL | 9.8 | 44.34% | cvelistv5 | 2026-06-17 |
| cve-2024-48248 | NAKIVO Backup and Replication Absolute Path Traversal Vulnerability | HIGH | 8.6 | 94.36% | cvelistv5 | 2025-03-19 |
| cve-2024-4761 | Google Chromium V8 Out-of-Bounds Memory Write Vulnerability | HIGH | N/A | 11.01% | cvelistv5 | 2024-05-16 |
| cve-2024-47575 | Fortinet FortiManager Missing Authentication Vulnerability | HIGH | N/A | 94.77% | cvelistv5 | 2024-10-23 |
| cve-2024-46938 | CVE-2024-46938 | HIGH | 7.5 | 46.77% | cvelistv5 | |
| cve-2024-4671 | SUSE CVE CVE-2024-4671 | CRITICAL | 9.6 | 8.35% | cvelistv5 | 2025-03-15 |
| cve-2024-4610 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | HIGH | N/A | 0.76% | cvelistv5 | 2024-06-12 |
| cve-2024-4577 | PHP-CGI OS Command Injection Vulnerability | CRITICAL | N/A | 99.99% | cvelistv5 | 2024-06-12 |
| cve-2024-45519 | Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability | CRITICAL | 10.0 | 99.91% | cvelistv5 | 2024-10-03 |
| cve-2024-45507 | CVE-2024-45507 | HIGH | 8.8 | 93.23% | cvelistv5 | |
| cve-2024-45506 | haproxy: potential infinite loop condition in the h2_send() may trigger a DoS | HIGH | 7.5 | 1.20% | cvelistv5 | 2026-06-29 |
| cve-2024-45388 | Arbitrary file read in the `/api/v2/simulation` endpoint in hoverfly (`GHSL-2023-274`) | HIGH | 7.5 | 55.57% | cvelistv5 | 2026-06-17 |
| cve-2024-45309 | CVE-2024-45309 | HIGH | 8.7 | 24.53% | cvelistv5 | |
| cve-2024-45195 | Apache OFBiz Forced Browsing Vulnerability | HIGH | N/A | 99.98% | cvelistv5 | 2025-02-04 |
| cve-2024-44849 | CVE-2024-44849 | CRITICAL | 9.8 | 46.29% | cvelistv5 |