Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-35219 | openapi-generator-online: Path traversal via outputFolder option | HIGH | 8.3 | 3.59% | cvelistv5 | 2025-11-21 |
| cve-2024-34854 | CVE-2024-34854 | CRITICAL | 9.8 | 12.75% | cvelistv5 | |
| cve-2024-34257 | CVE-2024-34257 | CRITICAL | 9.8 | 3.82% | cvelistv5 | |
| cve-2024-34193 | CVE-2024-34193 | HIGH | 7.5 | 0.62% | cvelistv5 | |
| cve-2024-34102 | Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability | CRITICAL | 9.8 | 99.99% | cvelistv5 | 2024-07-17 |
| cve-2024-3400 | Palo Alto Networks PAN-OS Command Injection Vulnerability | CRITICAL | 10.0 | 100.00% | cvelistv5 | 2024-04-12 |
| cve-2024-3393 | Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability | HIGH | N/A | 28.41% | cvelistv5 | 2024-12-30 |
| cve-2024-32896 | Android Pixel Privilege Escalation Vulnerability | HIGH | 8.1 | 2.99% | cvelistv5 | 2024-06-13 |
| cve-2024-32739 | CVE-2024-32739 | HIGH | 7.5 | 5.41% | cvelistv5 | |
| cve-2024-32738 | CVE-2024-32738 | HIGH | 7.5 | 4.55% | cvelistv5 | |
| cve-2024-32737 | CVE-2024-32737 | HIGH | 7.5 | 5.41% | cvelistv5 | |
| cve-2024-32736 | CVE-2024-32736 | HIGH | 7.5 | 5.41% | cvelistv5 | |
| cve-2024-32735 | CVE-2024-32735 | CRITICAL | 9.8 | 6.77% | cvelistv5 | |
| cve-2024-3273 | D-Link Multiple NAS Devices Command Injection Vulnerability | HIGH | 7.5 | 100.00% | cvelistv5 | 2024-04-11 |
| cve-2024-3272 | D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability | CRITICAL | 10.0 | 98.04% | cvelistv5 | 2024-04-11 |
| cve-2024-32640 | MasaCMS SQL Injection vulnerability | CRITICAL | 9.8 | 76.56% | cvelistv5 | 2026-06-17 |
| cve-2024-32113 | Apache OFBiz Path Traversal Vulnerability | HIGH | N/A | 99.92% | cvelistv5 | 2024-08-07 |
| cve-2024-31750 | CVE-2024-31750 | CRITICAL | 9.8 | 19.27% | cvelistv5 | |
| cve-2024-30891 | CVE-2024-30891 | HIGH | 8.8 | 1.90% | cvelistv5 | |
| cve-2024-30269 | CVE-2024-30269 | MEDIUM | 5.3 | 15.88% | cvelistv5 | |
| cve-2024-30051 | Microsoft DWM Core Library Privilege Escalation Vulnerability | HIGH | 7.8 | 5.64% | cvelistv5 | 2024-05-14 |
| cve-2024-29988 | Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability | HIGH | N/A | 44.88% | cvelistv5 | 2024-04-30 |
| cve-2024-29973 | CVE-2024-29973 | CRITICAL | 9.8 | 86.09% | cvelistv5 | |
| cve-2024-29972 | CVE-2024-29972 | CRITICAL | 9.8 | 89.33% | cvelistv5 | |
| cve-2024-29895 | SUSE CVE CVE-2024-29895 | UNKNOWN | N/A | 98.45% | cvelistv5 | 2025-02-16 |
| cve-2024-29824 | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | HIGH | N/A | 99.94% | cvelistv5 | 2024-10-02 |
| cve-2024-29059 | Microsoft .NET Framework Information Disclosure Vulnerability | HIGH | N/A | 98.62% | cvelistv5 | 2025-02-04 |
| cve-2024-28995 | SolarWinds Serv-U Path Traversal Vulnerability | HIGH | 8.6 | 99.61% | cvelistv5 | 2024-07-17 |
| cve-2024-28987 | SolarWinds Web Help Desk Hardcoded Credential Vulnerability | HIGH | N/A | 93.30% | cvelistv5 | 2024-10-15 |
| cve-2024-28734 | CVE-2024-28734 | MEDIUM | 6.1 | 1.79% | cvelistv5 |