Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-22024 | CVE-2024-22024 | HIGH | 8.3 | 94.72% | cvelistv5 | |
| cve-2024-21899 | CVE-2024-21899 | CRITICAL | 9.8 | 24.37% | cvelistv5 | |
| cve-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability | CRITICAL | N/A | 100.00% | cvelistv5 | 2024-01-31 |
| cve-2024-21887 | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | CRITICAL | 9.1 | 100.00% | cvelistv5 | 2024-01-10 |
| cve-2024-21762 | Fortinet FortiOS Out-of-Bound Write Vulnerability | CRITICAL | N/A | 83.43% | cvelistv5 | 2024-02-09 |
| cve-2024-21683 | CVE-2024-21683 | HIGH | 7.2 | 88.27% | cvelistv5 | |
| cve-2024-21620 | CVE-2024-21620 | HIGH | 8.8 | 0.91% | cvelistv5 | |
| cve-2024-21413 | Microsoft Outlook Improper Input Validation Vulnerability | CRITICAL | 9.8 | 94.66% | cvelistv5 | 2025-02-06 |
| cve-2024-21412 | Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability | CRITICAL | N/A | 99.41% | cvelistv5 | 2024-02-13 |
| cve-2024-21410 | Microsoft Exchange Server Privilege Escalation Vulnerability | CRITICAL | 9.8 | 12.56% | cvelistv5 | 2024-02-15 |
| cve-2024-21351 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | HIGH | N/A | 27.80% | cvelistv5 | 2024-02-13 |
| cve-2024-21338 | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability | HIGH | 7.8 | 59.81% | cvelistv5 | 2024-03-04 |
| cve-2024-21182 | Oracle WebLogic Server Unspecified Vulnerability | HIGH | 7.5 | 74.16% | cvelistv5 | 2026-06-01 |
| cve-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | HIGH | 8.8 | 3.93% | cvelistv5 | 2025-02-24 |
| cve-2024-20767 | Adobe ColdFusion Improper Access Control Vulnerability | HIGH | 7.4 | 98.51% | cvelistv5 | 2024-12-16 |
| cve-2024-20481 | Cisco ASA and FTD Denial-of-Service Vulnerability | MEDIUM | 5.8 | 15.75% | cvelistv5 | 2024-10-24 |
| cve-2024-20440 | CVE-2024-20440 | HIGH | 7.5 | 51.90% | cvelistv5 | |
| cve-2024-20439 | Cisco Smart Licensing Utility Static Credential Vulnerability | HIGH | N/A | 97.09% | cvelistv5 | 2025-03-31 |
| cve-2024-20404 | CVE-2024-20404 | HIGH | 7.2 | 22.64% | cvelistv5 | |
| cve-2024-20399 | Cisco NX-OS Command Injection Vulnerability | MEDIUM | 6.0 | 4.31% | cvelistv5 | 2024-07-02 |
| cve-2024-20359 | Cisco ASA and FTD Privilege Escalation Vulnerability | MEDIUM | 6.0 | 19.43% | cvelistv5 | 2024-04-24 |
| cve-2024-20353 | Cisco ASA and FTD Denial of Service Vulnerability | HIGH | 8.6 | 70.69% | cvelistv5 | 2024-04-24 |
| cve-2024-1709 | ConnectWise ScreenConnect Authentication Bypass Vulnerability | CRITICAL | 10.0 | 99.98% | cvelistv5 | 2024-02-22 |
| cve-2024-1708 | ConnectWise ScreenConnect Path Traversal Vulnerability | CRITICAL | N/A | 95.44% | cvelistv5 | 2026-04-28 |
| cve-2024-1698 | CVE-2024-1698 | CRITICAL | 9.8 | 77.59% | cvelistv5 | |
| cve-2024-1561 | CVE-2024-1561 | HIGH | 7.5 | 9.31% | cvelistv5 | |
| cve-2024-13985 | Dahua EIMS capture_handle.action RCE | CRITICAL | 10.0 | 15.10% | cvelistv5 | 2026-06-17 |
| cve-2024-13984 | CVE-2024-13984 | CRITICAL | 10.0 | 0.82% | cvelistv5 | |
| cve-2024-13982 | CVE-2024-13982 | HIGH | 8.7 | 1.06% | cvelistv5 | |
| cve-2024-13981 | CVE-2024-13981 | CRITICAL | 10.0 | 0.90% | cvelistv5 |