1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 13 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2022-22948VMware / vCenter ServerVMware vCenter Server Incorrect Default File Permissions Vulnerability 2024-07-17
13.3%
CVE-2024-28995SolarWinds / Serv-USolarWinds Serv-U Path Traversal Vulnerability 2024-07-17
99.6%
CVE-2024-34102Adobe / Commerce and Magento Open SourceAdobe Commerce and Magento Open Source Improper Restriction of XML External E…2024-07-17
100.0%
CVE-2024-36401OSGeo / GeoServerOSGeo GeoServer GeoTools Eval Injection Vulnerability2024-07-15
99.8%
CVE-2024-23692Rejetto / HTTP File ServerRejetto HTTP File Server Improper Neutralization of Special Elements Used in …2024-07-09
99.5%
CVE-2024-38080Microsoft / Windows Microsoft Windows Hyper-V Privilege Escalation Vulnerability2024-07-09
7.1%
CVE-2024-38112Microsoft / WindowsMicrosoft Windows MSHTML Platform Spoofing Vulnerability2024-07-09
84.2%
CVE-2024-20399Cisco / NX-OSCisco NX-OS Command Injection Vulnerability2024-07-02
4.3%
CVE-2020-13965Roundcube / WebmailRoundcube Webmail Cross-Site Scripting (XSS) Vulnerability2024-06-26
76.6%
CVE-2022-24816OSGeo / JAI-EXTOSGeo GeoServer JAI-EXT Code Injection Vulnerability2024-06-26
99.9%
CVE-2022-2586Linux / KernelLinux Kernel Use-After-Free Vulnerability2024-06-26
10.2%
CVE-2024-26169Microsoft / WindowsMicrosoft Windows Error Reporting Service Improper Privilege Management Vulne…2024-06-13
4.0%
CVE-2024-32896Android / PixelAndroid Pixel Privilege Escalation Vulnerability2024-06-13
3.0%
CVE-2024-4358Progress / Telerik Report ServerProgress Telerik Report Server Authentication Bypass by Spoofing Vulnerability2024-06-13
97.5%
CVE-2024-4577PHP Group / PHPPHP-CGI OS Command Injection Vulnerability2024-06-12
100.0%
CVE-2024-4610Arm / Mali GPU Kernel DriverArm Mali GPU Kernel Driver Use-After-Free Vulnerability2024-06-12
0.8%
CVE-2017-3506Oracle / WebLogic ServerOracle WebLogic Server OS Command Injection Vulnerability2024-06-03
96.3%
CVE-2024-1086Linux / KernelLinux Kernel Use-After-Free Vulnerability2024-05-30
28.1%
CVE-2024-24919Check Point / Quantum Security GatewaysCheck Point Quantum Security Gateways Information Disclosure Vulnerability2024-05-30
100.0%
CVE-2024-4978Justice AV Solutions / Viewer Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerab…2024-05-29
26.9%
CVE-2024-5274Google / Chromium V8Google Chromium V8 Type Confusion Vulnerability2024-05-28
7.5%
CVE-2020-17519Apache / FlinkApache Flink Improper Access Control Vulnerability2024-05-23
97.8%
CVE-2023-43208NextGen Healthcare / Mirth ConnectNextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability2024-05-20
82.7%
CVE-2024-4947Google / Chromium V8Google Chromium V8 Type Confusion Vulnerability2024-05-20
15.2%
CVE-2014-100005D-Link / DIR-600 RouterD-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability2024-05-16
43.5%
CVE-2021-40655D-Link / DIR-605 RouterD-Link DIR-605 Router Information Disclosure Vulnerability2024-05-16
86.7%
CVE-2024-4761Google / Chromium V8Google Chromium V8 Out-of-Bounds Memory Write Vulnerability2024-05-16
11.0%
CVE-2024-30040Microsoft / WindowsMicrosoft Windows MSHTML Platform Security Feature Bypass Vulnerability2024-05-14
3.9%
CVE-2024-30051Microsoft / DWM Core Library Microsoft DWM Core Library Privilege Escalation Vulnerability2024-05-14
5.7%
CVE-2024-4671Google / ChromiumGoogle Chromium Visuals Use-After-Free Vulnerability2024-05-13
8.3%
CVE-2023-7028GitLab / GitLab CE/EEGitLab Community and Enterprise Editions Improper Access Control Vulnerability2024-05-01
94.6%
CVE-2024-29988Microsoft / SmartScreen PromptMicrosoft SmartScreen Prompt Security Feature Bypass Vulnerability2024-04-30
44.9%
CVE-2024-20353Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Denial of Service Vulnerability2024-04-24
70.7%
CVE-2024-20359Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Privilege Escalation Vulnerability2024-04-24
19.4%
CVE-2024-4040CrushFTP / CrushFTPCrushFTP VFS Sandbox Escape Vulnerability2024-04-24
99.5%
CVE-2022-38028Microsoft / WindowsMicrosoft Windows Print Spooler Privilege Escalation Vulnerability 2024-04-23
14.9%
CVE-2024-3400Palo Alto Networks / PAN-OSPalo Alto Networks PAN-OS Command Injection Vulnerability2024-04-12
100.0%
CVE-2024-3272D-Link / Multiple NAS DevicesD-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability2024-04-11
98.0%
CVE-2024-3273D-Link / Multiple NAS DevicesD-Link Multiple NAS Devices Command Injection Vulnerability2024-04-11
100.0%
CVE-2024-29745Android / PixelAndroid Pixel Information Disclosure Vulnerability2024-04-04
0.5%
CVE-2024-29748Android / PixelAndroid Pixel Privilege Escalation Vulnerability2024-04-04
0.7%
CVE-2023-24955Microsoft / SharePoint ServerMicrosoft SharePoint Server Code Injection Vulnerability2024-03-26
85.0%
CVE-2019-7256Nice / Linear eMerge E3-SeriesNice Linear eMerge E3-Series OS Command Injection Vulnerability2024-03-25
97.1%
CVE-2021-44529Ivanti / Endpoint Manager Cloud Service Appliance (EPM CSA)Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vuln…2024-03-25
99.1%
CVE-2023-48788Fortinet / FortiClient EMSFortinet FortiClient EMS SQL Injection Vulnerability2024-03-25
98.4%
CVE-2024-27198JetBrains / TeamCityJetBrains TeamCity Authentication Bypass Vulnerability2024-03-07
99.9%
CVE-2024-23225Apple / Multiple ProductsApple Multiple Products Memory Corruption Vulnerability2024-03-06
1.5%
CVE-2024-23296Apple / Multiple ProductsApple Multiple Products Memory Corruption Vulnerability2024-03-06
1.4%
CVE-2021-36380Sunhillo / SureLineSunhillo SureLine OS Command Injection Vulnerablity2024-03-05
97.6%
CVE-2023-21237Android / PixelAndroid Pixel Information Disclosure Vulnerability 2024-03-05
0.3%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.
KEV explorer — Known Exploited Vulnerabilities | SQUR Knowledge Base