Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-28255 | CVE-2024-28255 | CRITICAL | 9.8 | 73.26% | cvelistv5 | |
| cve-2024-28000 | CVE-2024-28000 | CRITICAL | 9.8 | 68.27% | cvelistv5 | |
| cve-2024-27956 | WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability | CRITICAL | 9.9 | 94.06% | cvelistv5 | 2026-06-17 |
| cve-2024-27954 | CVE-2024-27954 | CRITICAL | 9.3 | 72.77% | cvelistv5 | |
| cve-2024-27564 | CVE-2024-27564 | MEDIUM | 5.8 | 40.64% | cvelistv5 | |
| cve-2024-27497 | CVE-2024-27497 | HIGH | 8.8 | 26.66% | cvelistv5 | |
| cve-2024-27348 | Apache HugeGraph-Server Improper Access Control Vulnerability | CRITICAL | 9.8 | 99.21% | cvelistv5 | 2024-09-18 |
| cve-2024-27199 | JetBrains TeamCity Relative Path Traversal Vulnerability | HIGH | 7.3 | 99.99% | cvelistv5 | 2026-04-20 |
| cve-2024-27198 | JetBrains TeamCity Authentication Bypass Vulnerability | CRITICAL | 9.8 | 99.94% | cvelistv5 | 2024-03-07 |
| cve-2024-27130 | CVE-2024-27130 | HIGH | 7.2 | 37.52% | cvelistv5 | |
| cve-2024-26169 | Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability | HIGH | 7.8 | 4.01% | cvelistv5 | 2024-06-13 |
| cve-2024-25852 | CVE-2024-25852 | HIGH | 8.8 | 16.52% | cvelistv5 | |
| cve-2024-25735 | CVE-2024-25735 | CRITICAL | 9.1 | 50.62% | cvelistv5 | |
| cve-2024-24329 | CVE-2024-24329 | CRITICAL | 9.8 | 6.17% | cvelistv5 | |
| cve-2024-24328 | CVE-2024-24328 | HIGH | 8.8 | 6.17% | cvelistv5 | |
| cve-2024-23897 | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability | CRITICAL | N/A | 100.00% | cvelistv5 | 2024-08-19 |
| cve-2024-2389 | CVE-2024-2389 | CRITICAL | 10.0 | 93.04% | cvelistv5 | |
| cve-2024-23692 | Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | CRITICAL | N/A | 99.48% | cvelistv5 | 2024-07-09 |
| cve-2024-23660 | CVE-2024-23660 | HIGH | 7.5 | 0.55% | cvelistv5 | |
| cve-2024-2353 | CVE-2024-2353 | CRITICAL | 9.0 | 3.95% | cvelistv5 | |
| cve-2024-2330 | CVE-2024-2330 | MEDIUM | 6.5 | 17.62% | cvelistv5 | |
| cve-2024-23296 | Apple Multiple Products Memory Corruption Vulnerability | HIGH | 7.8 | 1.41% | cvelistv5 | 2024-03-06 |
| cve-2024-23225 | Apple Multiple Products Memory Corruption Vulnerability | HIGH | 7.8 | 1.48% | cvelistv5 | 2024-03-06 |
| cve-2024-23222 | Apple Multiple Products WebKit Type Confusion Vulnerability | HIGH | N/A | 10.59% | cvelistv5 | 2024-01-23 |
| cve-2024-23113 | Fortinet Multiple Products Format String Vulnerability | CRITICAL | 9.8 | 61.72% | cvelistv5 | 2024-10-09 |
| cve-2024-22927 | Cross Site Scripting (XSS) vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL. | MEDIUM | 6.1 | 1.02% | cvelistv5 | 2026-06-17 |
| cve-2024-22768 | CVE-2024-22768 | HIGH | 7.4 | 0.56% | cvelistv5 | |
| cve-2024-22729 | CVE-2024-22729 | CRITICAL | 9.8 | 70.78% | cvelistv5 | |
| cve-2024-22320 | CVE-2024-22320 | CRITICAL | 9.8 | 73.40% | cvelistv5 | |
| cve-2024-22319 | CVE-2024-22319 | HIGH | 8.1 | 76.40% | cvelistv5 |