Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2023-33831 | A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request. | CRITICAL | 9.8 | 25.95% | cvelistv5 | 2026-06-17 |
| cve-2023-3368 | CVE-2023-3368 | CRITICAL | 9.8 | 69.67% | cvelistv5 | |
| cve-2023-33538 | TP-Link Multiple Routers Command Injection Vulnerability | HIGH | N/A | 41.61% | cvelistv5 | 2025-06-16 |
| cve-2023-33246 | Apache RocketMQ Command Execution Vulnerability | HIGH | N/A | 96.57% | cvelistv5 | 2023-09-06 |
| cve-2023-33107 | Qualcomm Multiple Chipsets Integer Overflow Vulnerability | HIGH | 8.4 | 0.89% | cvelistv5 | 2023-12-05 |
| cve-2023-33063 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | HIGH | N/A | 0.69% | cvelistv5 | 2023-12-05 |
| cve-2023-33009 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | CRITICAL | 9.8 | 28.14% | cvelistv5 | 2023-06-05 |
| cve-2023-32563 | CVE-2023-32563 | HIGH | 8.8 | 89.10% | cvelistv5 | |
| cve-2023-32439 | SUSE CVE CVE-2023-32439 | HIGH | 8.8 | 23.97% | cvelistv5 | 2026-08-29 |
| cve-2023-32435 | webkitgtk: memory corruption issue leading to arbitrary code execution | HIGH | 8.8 | 22.95% | cvelistv5 | 2025-11-21 |
| cve-2023-32434 | Apple Multiple Products Integer Overflow Vulnerability | HIGH | 7.8 | 51.52% | cvelistv5 | 2023-06-23 |
| cve-2023-32409 | SUSE CVE CVE-2023-32409 | UNKNOWN | N/A | 16.53% | cvelistv5 | 2026-07-25 |
| cve-2023-32373 | webkitgtk: a use-after-free when processing maliciously crafted web content | HIGH | 8.8 | 12.17% | cvelistv5 | 2025-11-21 |
| cve-2023-32315 | Ignite Realtime Openfire Path Traversal Vulnerability | HIGH | 8.6 | 100.00% | cvelistv5 | 2023-08-24 |
| cve-2023-32243 | CVE-2023-32243 | CRITICAL | 9.8 | 75.53% | cvelistv5 | |
| cve-2023-32235 | CVE-2023-32235 | HIGH | 7.5 | 39.08% | cvelistv5 | |
| cve-2023-32117 | WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability | CRITICAL | 9.8 | 7.33% | cvelistv5 | 2026-06-17 |
| cve-2023-32049 | Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | HIGH | 8.8 | 4.16% | cvelistv5 | 2023-07-11 |
| cve-2023-32046 | Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | HIGH | 7.8 | 10.05% | cvelistv5 | 2023-07-11 |
| cve-2023-3162 | CVE-2023-3162 | HIGH | N/A | 1.19% | cvelistv5 | |
| cve-2023-31478 | CVE-2023-31478 | HIGH | 7.5 | 29.70% | cvelistv5 | |
| cve-2023-31465 | CVE-2023-31465 | HIGH | N/A | 46.30% | cvelistv5 | |
| cve-2023-31446 | CVE-2023-31446 | CRITICAL | 9.8 | 61.08% | cvelistv5 | |
| cve-2023-31059 | CVE-2023-31059 | HIGH | 7.5 | 5.57% | cvelistv5 | |
| cve-2023-30801 | qbittorrent: default credentials allowed by default | CRITICAL | 9.8 | 0.91% | cvelistv5 | 2026-06-26 |
| cve-2023-3079 | SUSE CVE CVE-2023-3079 | HIGH | 8.8 | 32.11% | cvelistv5 | 2025-03-15 |
| cve-2023-30625 | CVE-2023-30625 | HIGH | 8.8 | 85.82% | cvelistv5 | |
| cve-2023-30258 | CVE-2023-30258 | CRITICAL | 9.8 | 94.25% | cvelistv5 | |
| cve-2023-30194 | CVE-2023-30194 | CRITICAL | 9.8 | 32.41% | cvelistv5 | |
| cve-2023-29919 | CVE-2023-29919 | CRITICAL | 9.8 | 60.22% | cvelistv5 |