Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | HIGH | N/A | 1.62% | cvelistv5 | 2026-08-18 |
| cve-2026-3381 | SUSE CVE CVE-2026-3381 | UNKNOWN | N/A | 0.76% | cvelistv5 | 2026-04-24 |
| cve-2026-2950 | lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass | MEDIUM | 6.5 | 0.38% | cvelistv5 | 2026-08-06 |
| cve-2026-29170 | SUSE CVE CVE-2026-29170 | MEDIUM | 5.4 | 1.04% | cvelistv5 | 2026-09-11 |
| cve-2026-27171 | zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions | LOW | 3.3 | 0.19% | cvelistv5 | 2026-09-01 |
| cve-2026-21992 | PUBLISHED | CRITICAL | 9.8 | 1.01% | cvelistv5 | 2026-03-24 |
| cve-2026-0968 | A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending ... | LOW | 3.1 | 0.44% | cvelistv5 | 2026-09-01 |
| cve-2026-0967 | A flaw was found in libssh | MEDIUM | 5.5 | 0.22% | cvelistv5 | 2026-09-01 |
| cve-2026-0966 | A flaw was found in libssh | HIGH | 8.2 | 0.58% | cvelistv5 | 2026-09-01 |
| cve-2026-0965 | SUSE CVE CVE-2026-0965 | LOW | 3.3 | 0.16% | cvelistv5 | 2026-09-01 |
| cve-2026-0964 | SUSE CVE CVE-2026-0964 | MEDIUM | 5.0 | 0.41% | cvelistv5 | 2026-09-01 |
| cve-2025-15599 | DOMPurify: DOMPurify: Cross-site scripting | MEDIUM | 6.1 | 0.24% | cvelistv5 | 2026-07-02 |
| cve-2024-9143 | SUSE CVE CVE-2024-9143 | HIGH | 7.0 | 5.84% | cvelistv5 | 2026-08-31 |
| cve-2024-7575 | Improper neutralization special element in hyperlinks | HIGH | 7.8 | 0.70% | cvelistv5 | 2024-09-25 |
| cve-2024-6119 | SUSE CVE CVE-2024-6119 | MEDIUM | 5.9 | 66.58% | cvelistv5 | 2026-08-31 |
| cve-2024-5535 | SUSE CVE CVE-2024-5535 | MEDIUM | 5.9 | 5.58% | cvelistv5 | 2026-09-19 |
| cve-2024-4741 | SUSE CVE CVE-2024-4741 | HIGH | 8.1 | 2.93% | cvelistv5 | 2026-09-19 |
| cve-2024-2511 | SUSE CVE CVE-2024-2511 | MEDIUM | 5.9 | 52.42% | cvelistv5 | 2026-09-12 |
| cve-2024-20931 | PUBLISHED | HIGH | 7.5 | 59.41% | cvelistv5 | 2025-03-28 |
| cve-2024-13176 | SUSE CVE CVE-2024-13176 | MEDIUM | 5.9 | 0.61% | cvelistv5 | 2026-08-29 |
| cve-2024-10095 | Progress UI for WPF format provider unsafe deserialization vulnerability | HIGH | 8.4 | 0.74% | cvelistv5 | 2026-06-17 |
| cve-2024-0727 | SUSE CVE CVE-2024-0727 | LOW | 3.3 | 3.19% | cvelistv5 | 2026-09-12 |
| cve-2023-6237 | SUSE CVE CVE-2023-6237 | MEDIUM | 5.9 | 2.30% | cvelistv5 | 2026-09-02 |
| cve-2023-6129 | openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC | MEDIUM | 6.5 | 2.32% | cvelistv5 | 2026-08-09 |
| cve-2023-50164 | Struts: File upload component had a directory traversal vulnerability | CRITICAL | 9.8 | 80.82% | cvelistv5 | 2026-08-10 |
| cve-2023-26464 | SUSE CVE CVE-2023-26464 | UNKNOWN | N/A | 1.91% | cvelistv5 | 2026-08-31 |
| cve-2022-40152 | woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks | HIGH | 7.5 | 19.65% | cvelistv5 | 2026-08-25 |
| cve-2022-40150 | jettison: memory exhaustion via user-supplied XML or JSON data | HIGH | 7.5 | 1.64% | cvelistv5 | 2026-08-25 |
| cve-2022-37434 | zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field | HIGH | 7.0 | 17.85% | cvelistv5 | 2026-08-04 |
| cve-2022-34169 | SUSE CVE CVE-2022-34169 | HIGH | 7.5 | 81.04% | cvelistv5 | 2026-09-03 |