Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2023-39470 | CVE-2023-39470 | HIGH | 7.2 | 1.76% | cvelistv5 | |
| cve-2023-39361 | cacti: Unauthenticated SQL Injection when viewing graphs | CRITICAL | 9.8 | 88.79% | cvelistv5 | 2025-11-21 |
| cve-2023-39296 | CVE-2023-39296 | HIGH | 7.5 | 1.56% | cvelistv5 | |
| cve-2023-39026 | CVE-2023-39026 | HIGH | N/A | 17.92% | cvelistv5 | |
| cve-2023-38950 | ZKTeco BioTime Path Traversal Vulnerability | HIGH | N/A | 92.47% | cvelistv5 | 2025-05-19 |
| cve-2023-38831 | RARLAB WinRAR Code Execution Vulnerability | CRITICAL | N/A | 99.81% | cvelistv5 | 2023-08-24 |
| cve-2023-38646 | CVE-2023-38646 | HIGH | N/A | 98.68% | cvelistv5 | |
| cve-2023-38606 | Apple Multiple Products Kernel Unspecified Vulnerability | HIGH | N/A | 2.90% | cvelistv5 | 2023-07-26 |
| cve-2023-38433 | CVE-2023-38433 | HIGH | N/A | 3.72% | cvelistv5 | |
| cve-2023-3836 | CVE-2023-3836 | MEDIUM | 6.5 | 73.67% | cvelistv5 | |
| cve-2023-38205 | Adobe ColdFusion Improper Access Control Vulnerability | HIGH | 7.5 | 99.74% | cvelistv5 | 2023-07-20 |
| cve-2023-38203 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | CRITICAL | N/A | 97.07% | cvelistv5 | 2024-01-08 |
| cve-2023-38192 | CVE-2023-38192 | HIGH | N/A | 1.11% | cvelistv5 | |
| cve-2023-38180 | SUSE CVE CVE-2023-38180 | HIGH | 7.5 | 14.02% | cvelistv5 | 2025-07-07 |
| cve-2023-38035 | Ivanti Sentry Authentication Bypass Vulnerability | CRITICAL | N/A | 99.95% | cvelistv5 | 2023-08-22 |
| cve-2023-37999 | CVE-2023-37999 | CRITICAL | 9.8 | 3.35% | cvelistv5 | |
| cve-2023-3793 | Weaver e-cology HTTP POST Request filelFileDownloadForOutDoc.class sql injection | MEDIUM | 5.5 | 0.49% | cvelistv5 | 2026-06-17 |
| cve-2023-37679 | CVE-2023-37679 | HIGH | N/A | 99.43% | cvelistv5 | |
| cve-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | HIGH | N/A | 49.08% | cvelistv5 | 2023-07-27 |
| cve-2023-37569 | CVE-2023-37569 | HIGH | 8.8 | 33.89% | cvelistv5 | |
| cve-2023-37462 | CVE-2023-37462 | HIGH | N/A | 91.59% | cvelistv5 | |
| cve-2023-37450 | Apple Multiple Products WebKit Code Execution Vulnerability | HIGH | N/A | 18.95% | cvelistv5 | 2023-07-13 |
| cve-2023-3722 | CVE-2023-3722 | HIGH | 8.6 | 3.86% | cvelistv5 | |
| cve-2023-3710 | Printer web page invalid command execution | CRITICAL | 9.9 | 49.04% | cvelistv5 | 2026-06-17 |
| cve-2023-36934 | CVE-2023-36934 | HIGH | N/A | 95.18% | cvelistv5 | |
| cve-2023-36884 | Microsoft Windows Search Remote Code Execution Vulnerability | HIGH | 7.5 | 98.93% | cvelistv5 | 2023-07-17 |
| cve-2023-36874 | Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | HIGH | 7.8 | 43.41% | cvelistv5 | 2023-07-11 |
| cve-2023-36851 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | HIGH | N/A | 1.12% | cvelistv5 | 2023-11-13 |
| cve-2023-36847 | Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability | HIGH | N/A | 83.45% | cvelistv5 | 2023-11-13 |
| cve-2023-36846 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | HIGH | N/A | 93.47% | cvelistv5 | 2023-11-13 |