Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-0297 | CVE-2024-0297 | HIGH | 7.5 | 3.83% | cvelistv5 | |
| cve-2024-0292 | CVE-2024-0292 | MEDIUM | 6.5 | 4.91% | cvelistv5 | |
| cve-2024-0250 | CVE-2024-0250 | MEDIUM | 6.1 | 1.25% | cvelistv5 | |
| cve-2024-0235 | CVE-2024-0235 | MEDIUM | 5.3 | 37.96% | cvelistv5 | |
| cve-2024-0204 | CVE-2024-0204 | CRITICAL | 9.8 | 95.09% | cvelistv5 | |
| cve-2024-0012 | Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability | CRITICAL | N/A | 99.85% | cvelistv5 | 2024-11-18 |
| cve-2023-7335 | EduSoho < 22.4.7 Arbitrary File Read via classroom-course-statistics | HIGH | 8.7 | 0.77% | cvelistv5 | 2026-07-15 |
| cve-2023-7334 | Changjetong T+ <= 16.x GetStoreWarehouseByStore Deserialization RCE | CRITICAL | 9.8 | 1.11% | cvelistv5 | 2026-06-17 |
| cve-2023-7330 | CVE-2023-7330 | CRITICAL | 9.3 | 0.62% | cvelistv5 | |
| cve-2023-7311 | BYTEVALUE Intelligent Flow Control Router Command Injection | CRITICAL | 9.3 | 1.86% | cvelistv5 | 2026-06-17 |
| cve-2023-7309 | A path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform (also referred to as the... | CRITICAL | 10.0 | 0.81% | cvelistv5 | 2026-09-03 |
| cve-2023-7308 | SecGate3600 Firewall Information Disclosure via authManageSet.cgi | HIGH | 7.5 | 7.48% | cvelistv5 | 2026-06-17 |
| cve-2023-7307 | CVE-2023-7307 | HIGH | 8.7 | 0.52% | cvelistv5 | |
| cve-2023-7305 | SmartBI V8, V9, and V10 contain an unrestricted file upload vulnerability via the RMIServlet request handling logic | CRITICAL | 9.2 | 0.53% | cvelistv5 | 2026-09-03 |
| cve-2023-7304 | Ruijie RG-UAC nmc_sync.php Command Injection | CRITICAL | 9.3 | 3.56% | cvelistv5 | 2026-06-17 |
| cve-2023-7101 | Spreadsheet::ParseExcel Remote Code Execution Vulnerability | HIGH | N/A | 19.11% | cvelistv5 | 2024-01-02 |
| cve-2023-7028 | GitLab Community and Enterprise Editions Improper Access Control Vulnerability | CRITICAL | 10.0 | 94.65% | cvelistv5 | 2024-05-01 |
| cve-2023-7024 | Google Chromium WebRTC Heap Buffer Overflow Vulnerability | HIGH | N/A | 6.67% | cvelistv5 | 2024-01-02 |
| cve-2023-6909 | CVE-2023-6909 | HIGH | 7.5 | 89.72% | cvelistv5 | |
| cve-2023-6875 | CVE-2023-6875 | CRITICAL | 9.8 | 90.34% | cvelistv5 | |
| cve-2023-6634 | CVE-2023-6634 | HIGH | 8.1 | 8.54% | cvelistv5 | |
| cve-2023-6567 | CVE-2023-6567 | CRITICAL | 9.8 | 51.39% | cvelistv5 | |
| cve-2023-6553 | CVE-2023-6553 | CRITICAL | 9.8 | 97.85% | cvelistv5 | |
| cve-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | HIGH | 8.2 | 57.63% | cvelistv5 | 2024-01-17 |
| cve-2023-6548 | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | MEDIUM | 5.5 | 3.19% | cvelistv5 | 2024-01-17 |
| cve-2023-6448 | Unitronics Vision PLC and HMI Insecure Default Password Vulnerability | CRITICAL | 9.8 | 2.07% | cvelistv5 | 2023-12-11 |
| cve-2023-6345 | Google Skia Integer Overflow Vulnerability | HIGH | N/A | 16.47% | cvelistv5 | 2023-11-30 |
| cve-2023-6329 | CVE-2023-6329 | CRITICAL | 9.8 | 65.00% | cvelistv5 | |
| cve-2023-6266 | CVE-2023-6266 | HIGH | N/A | 2.05% | cvelistv5 | |
| cve-2023-6184 | CVE-2023-6184 | MEDIUM | 5.0 | 46.61% | cvelistv5 |