1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 11 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2021-40407Reolink / RLC-410W IP CameraReolink RLC-410W IP Camera OS Command Injection Vulnerability 2024-12-18
47.6%
CVE-2022-23227NUUO / NVRmini2 DevicesNUUO NVRmini2 Devices Missing Authentication Vulnerability 2024-12-18
48.5%
CVE-2024-55956Cleo / Multiple ProductsCleo Multiple Products Unauthenticated File Upload Vulnerability2024-12-17
94.0%
CVE-2024-20767Adobe / ColdFusionAdobe ColdFusion Improper Access Control Vulnerability2024-12-16
98.5%
CVE-2024-35250Microsoft / WindowsMicrosoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerabil…2024-12-16
25.2%
CVE-2024-50623cleo / harmonyCVE-2024-506232024-12-13
98.6%
CVE-2024-49138Microsoft / WindowsMicrosoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Over…2024-12-10
26.2%
CVE-2024-51378CyberPersons / CyberPanelCyberPanel Incorrect Default Permissions Vulnerability2024-12-04
94.7%
CVE-2023-45727North Grid / ProselfNorth Grid Proself Improper Restriction of XML External Entity (XXE) Referenc…2024-12-03
3.5%
CVE-2024-11667Zyxel / Multiple FirewallsZyxel Multiple Firewalls Path Traversal Vulnerability2024-12-03
2.9%
CVE-2024-11680ProjectSend / ProjectSendProjectSend Improper Authentication Vulnerability2024-12-03
91.7%
CVE-2023-28461Array Networks / AG/vxAG ArrayOSArray Networks AG and vxAG ArrayOS Missing Authentication for Critical Functi…2024-11-25
68.1%
CVE-2024-21287Oracle / Agile Product Lifecycle Management (PLM)Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulne…2024-11-21
1.7%
CVE-2024-44308Apple / Multiple ProductsApple Multiple Products Code Execution Vulnerability2024-11-21
10.1%
CVE-2024-44309Apple / Multiple ProductsApple Multiple Products Cross-Site Scripting (XSS) Vulnerability2024-11-21
22.6%
CVE-2024-38812VMware / vCenter ServerVMware vCenter Server Heap-Based Buffer Overflow Vulnerability2024-11-20
54.6%
CVE-2024-38813VMware / vCenter ServerVMware vCenter Server Privilege Escalation Vulnerability2024-11-20
17.4%
CVE-2024-0012Palo Alto Networks / PAN-OSPalo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerab…2024-11-18
99.9%
CVE-2024-1212Progress / Kemp LoadMasterProgress Kemp LoadMaster OS Command Injection Vulnerability2024-11-18
95.4%
CVE-2024-9474Palo Alto Networks / PAN-OSPalo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerabi…2024-11-18
94.8%
CVE-2024-9463Palo Alto Networks / ExpeditionPalo Alto Networks Expedition OS Command Injection Vulnerability2024-11-14
98.5%
CVE-2024-9465Palo Alto Networks / ExpeditionPalo Alto Networks Expedition SQL Injection Vulnerability2024-11-14
99.6%
CVE-2014-2120Cisco / Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability2024-11-12
22.6%
CVE-2021-26086Atlassian / Jira Server and Data CenterAtlassian Jira Server and Data Center Path Traversal Vulnerability2024-11-12
100.0%
CVE-2021-41277metabase / metabaseCVE-2021-412772024-11-12
97.2%
CVE-2024-43451Microsoft / WindowsMicrosoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability2024-11-12
84.1%
CVE-2024-49039Microsoft / WindowsMicrosoft Windows Task Scheduler Privilege Escalation Vulnerability2024-11-12
14.2%
CVE-2019-16278Nostromo / nhttpdNostromo nhttpd Directory Traversal Vulnerability2024-11-07
99.0%
CVE-2024-43093Android / FrameworkAndroid Framework Privilege Escalation Vulnerability2024-11-07
0.7%
CVE-2024-51567CyberPersons / CyberPanelCyberPanel Incorrect Default Permissions Vulnerability2024-11-07
86.6%
CVE-2024-5910Palo Alto Networks / ExpeditionPalo Alto Networks Expedition Missing Authentication Vulnerability2024-11-07
91.7%
CVE-2024-8956PTZOptics / PT30X-SDI/NDI CamerasPTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability2024-11-04
58.8%
CVE-2024-8957PTZOptics / PT30X-SDI/NDI CamerasPTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability2024-11-04
79.7%
CVE-2024-20481Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Denial-of-Service Vulnerability2024-10-24
15.9%
CVE-2024-37383Roundcube / WebmailRoundCube Webmail Cross-Site Scripting (XSS) Vulnerability2024-10-24
73.3%
CVE-2024-47575Fortinet / FortiManagerFortinet FortiManager Missing Authentication Vulnerability2024-10-23
94.8%
CVE-2024-38094Microsoft / SharePointMicrosoft SharePoint Deserialization Vulnerability2024-10-22
50.9%
CVE-2024-9537ScienceLogic / SL1ScienceLogic SL1 Unspecified Vulnerability2024-10-21
3.8%
CVE-2024-40711Veeam / Backup & ReplicationVeeam Backup and Replication Deserialization Vulnerability2024-10-17
90.4%
CVE-2024-28987SolarWinds / Web Help DeskSolarWinds Web Help Desk Hardcoded Credential Vulnerability2024-10-15
93.3%
CVE-2024-30088Microsoft / Windows Microsoft Windows Kernel TOCTOU Race Condition Vulnerability2024-10-15
68.2%
CVE-2024-9680Mozilla / FirefoxMozilla Firefox Use-After-Free Vulnerability2024-10-15
23.2%
CVE-2024-23113Fortinet / Multiple ProductsFortinet Multiple Products Format String Vulnerability2024-10-09
61.7%
CVE-2024-9379Ivanti / Cloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability2024-10-09
43.8%
CVE-2024-9380Ivanti / Cloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability2024-10-09
59.7%
CVE-2024-43047Qualcomm / Multiple Chipsets Qualcomm Multiple Chipsets Use-After-Free Vulnerability2024-10-08
0.7%
CVE-2024-43572Microsoft / WindowsMicrosoft Windows Management Console Remote Code Execution Vulnerability2024-10-08
66.7%
CVE-2024-43573Microsoft / WindowsMicrosoft Windows MSHTML Platform Spoofing Vulnerability2024-10-08
46.1%
CVE-2024-45519Synacor / Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability2024-10-03
99.9%
CVE-2024-29824Ivanti / Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability2024-10-02
99.9%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.