Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2023-4762 | SUSE CVE CVE-2023-4762 | HIGH | 8.8 | 41.38% | cvelistv5 | 2025-03-15 |
| cve-2023-47565 | QNAP VioStor NVR OS Command Injection Vulnerability | HIGH | 8.0 | 73.28% | cvelistv5 | 2023-12-21 |
| cve-2023-47253 | CVE-2023-47253 | CRITICAL | 9.8 | 14.31% | cvelistv5 | |
| cve-2023-47248 | SUSE CVE CVE-2023-47248 | CRITICAL | 9.8 | 14.53% | cvelistv5 | 2026-08-31 |
| cve-2023-47246 | SysAid Server Path Traversal Vulnerability | CRITICAL | 9.8 | 98.85% | cvelistv5 | 2023-11-13 |
| cve-2023-47218 | CVE-2023-47218 | MEDIUM | 5.8 | 89.92% | cvelistv5 | |
| cve-2023-46805 | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability | HIGH | 8.2 | 99.99% | cvelistv5 | 2024-01-10 |
| cve-2023-46748 | F5 BIG-IP Configuration Utility SQL Injection Vulnerability | HIGH | 8.8 | 4.47% | cvelistv5 | 2023-10-31 |
| cve-2023-46747 | F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability | CRITICAL | 9.8 | 96.52% | cvelistv5 | 2023-10-31 |
| cve-2023-46604 | activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack | CRITICAL | 9.8 | 99.89% | cvelistv5 | 2025-11-21 |
| cve-2023-46574 | CVE-2023-46574 | HIGH | N/A | 65.41% | cvelistv5 | |
| cve-2023-46347 | CVE-2023-46347 | CRITICAL | 9.8 | 49.89% | cvelistv5 | |
| cve-2023-4634 | CVE-2023-4634 | HIGH | N/A | 85.89% | cvelistv5 | |
| cve-2023-45878 | CVE-2023-45878 | HIGH | N/A | 63.11% | cvelistv5 | |
| cve-2023-45852 | CVE-2023-45852 | HIGH | N/A | 14.00% | cvelistv5 | |
| cve-2023-45727 | North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability | HIGH | 7.5 | 3.54% | cvelistv5 | 2024-12-03 |
| cve-2023-4542 | D-Link DAR-8000-10 sys1.php os command injection | MEDIUM | 6.3 | 84.69% | cvelistv5 | 2026-06-17 |
| cve-2023-45249 | Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability | CRITICAL | 9.8 | 53.25% | cvelistv5 | 2024-07-29 |
| cve-2023-45038 | CVE-2023-45038 | MEDIUM | 4.3 | 1.24% | cvelistv5 | |
| cve-2023-44976 | CVE-2023-44976 | LOW | 3.2 | 0.18% | cvelistv5 | |
| cve-2023-4490 | CVE-2023-4490 | CRITICAL | 9.8 | 3.12% | cvelistv5 | |
| cve-2023-4473 | CVE-2023-4473 | CRITICAL | 9.8 | 41.35% | cvelistv5 | |
| cve-2023-4450 | jeecgboot JimuReport Template injection | MEDIUM | 6.3 | 11.59% | cvelistv5 | 2026-06-17 |
| cve-2023-44487 | HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) | HIGH | 7.5 | 100.00% | cvelistv5 | 2026-08-19 |
| cve-2023-44221 | SonicWall SMA100 Appliances OS Command Injection Vulnerability | HIGH | N/A | 76.25% | cvelistv5 | 2025-05-01 |
| cve-2023-43795 | CVE-2023-43795 | HIGH | 8.6 | 67.72% | cvelistv5 | |
| cve-2023-43770 | SUSE CVE CVE-2023-43770 | UNKNOWN | N/A | 63.66% | cvelistv5 | 2025-02-16 |
| cve-2023-43654 | CVE-2023-43654 | CRITICAL | 10.0 | 35.50% | cvelistv5 | |
| cve-2023-4346 | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | HIGH | N/A | 1.29% | cvelistv5 | 2026-07-15 |
| cve-2023-43208 | NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability | CRITICAL | 9.8 | 82.71% | cvelistv5 | 2024-05-20 |