Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2023-5683 | CVE-2023-5683 | MEDIUM | 6.5 | 17.98% | cvelistv5 | |
| cve-2023-5631 | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | HIGH | N/A | 75.87% | cvelistv5 | 2023-10-26 |
| cve-2023-54391 | Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-con... | CRITICAL | 9.3 | 3.03% | cvelistv5 | 2026-09-08 |
| cve-2023-54359 | CVE-2023-54359 | HIGH | 8.8 | 0.27% | cvelistv5 | |
| cve-2023-53691 | Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild in 2024 and 2025. | HIGH | 8.3 | 1.29% | cvelistv5 | 2026-06-17 |
| cve-2023-5360 | CVE-2023-5360 | HIGH | N/A | 81.69% | cvelistv5 | |
| cve-2023-5285 | CVE-2023-5285 | MEDIUM | 6.5 | 0.62% | cvelistv5 | |
| cve-2023-5222 | CVE-2023-5222 | MEDIUM | 6.3 | 74.52% | cvelistv5 | |
| cve-2023-5217 | Google Chromium libvpx Heap Buffer Overflow Vulnerability | HIGH | N/A | 49.01% | cvelistv5 | 2023-10-02 |
| cve-2023-52163 | Digiever DS-2105 Pro Missing Authorization Vulnerability | HIGH | 8.8 | 96.92% | cvelistv5 | 2025-12-22 |
| cve-2023-52028 | CVE-2023-52028 | CRITICAL | 9.8 | 1.67% | cvelistv5 | |
| cve-2023-51833 | CVE-2023-51833 | HIGH | 8.1 | 4.43% | cvelistv5 | |
| cve-2023-5148 | D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload | MEDIUM | 6.3 | 30.66% | cvelistv5 | 2026-06-17 |
| cve-2023-51467 | CVE-2023-51467 | HIGH | N/A | 96.00% | cvelistv5 | |
| cve-2023-51409 | CVE-2023-51409 | CRITICAL | 10.0 | 63.08% | cvelistv5 | |
| cve-2023-50968 | CVE-2023-50968 | HIGH | N/A | 63.37% | cvelistv5 | |
| cve-2023-5074 | Authentication Bypass in D-Link D-View 8 | CRITICAL | 9.8 | 69.56% | cvelistv5 | 2026-06-17 |
| cve-2023-50358 | CVE-2023-50358 | MEDIUM | 5.8 | 13.52% | cvelistv5 | |
| cve-2023-50224 | TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability | MEDIUM | 6.5 | 15.56% | cvelistv5 | 2025-09-03 |
| cve-2023-49897 | FXC AE1021, AE1021PE OS Command Injection Vulnerability | HIGH | 8.8 | 50.45% | cvelistv5 | 2023-12-21 |
| cve-2023-49785 | CVE-2023-49785 | CRITICAL | 9.1 | 83.16% | cvelistv5 | |
| cve-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | CRITICAL | 9.4 | 100.00% | cvelistv5 | 2023-10-18 |
| cve-2023-4911 | GNU C Library Buffer Overflow Vulnerability | HIGH | N/A | 81.42% | cvelistv5 | 2023-11-21 |
| cve-2023-49105 | ownCloud Improper Authentication Vulnerability | CRITICAL | 9.8 | 42.92% | cvelistv5 | 2026-08-27 |
| cve-2023-49103 | ownCloud graphapi Information Disclosure Vulnerability | CRITICAL | 10.0 | 78.43% | cvelistv5 | 2023-11-30 |
| cve-2023-49070 | CVE-2023-49070 | HIGH | N/A | 95.37% | cvelistv5 | |
| cve-2023-48788 | Fortinet FortiClient EMS SQL Injection Vulnerability | CRITICAL | 9.3 | 98.45% | cvelistv5 | 2024-03-25 |
| cve-2023-4863 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | HIGH | N/A | 99.98% | cvelistv5 | 2023-09-13 |
| cve-2023-48365 | Qlik Sense HTTP Tunneling Vulnerability | CRITICAL | N/A | 47.45% | cvelistv5 | 2025-01-13 |
| cve-2023-48022 | ray: Ray Job Submission Arbitrary Code Execution | UNKNOWN | N/A | 83.94% | cvelistv5 | 2026-06-26 |