1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 14 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2024-21338Microsoft / WindowsMicrosoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulne…2024-03-04
59.8%
CVE-2023-29360Microsoft / Streaming ServiceMicrosoft Streaming Service Untrusted Pointer Dereference Vulnerability2024-02-29
21.6%
CVE-2024-1709ConnectWise / ScreenConnectConnectWise ScreenConnect Authentication Bypass Vulnerability2024-02-22
100.0%
CVE-2020-3259Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Information Disclosure Vulnerability2024-02-15
71.8%
CVE-2024-21410Microsoft / Exchange ServerMicrosoft Exchange Server Privilege Escalation Vulnerability2024-02-15
12.6%
CVE-2024-21351Microsoft / WindowsMicrosoft Windows SmartScreen Security Feature Bypass Vulnerability2024-02-13
27.8%
CVE-2024-21412Microsoft / WindowsMicrosoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability2024-02-13
99.4%
CVE-2023-43770Roundcube / WebmailRoundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability2024-02-12
63.7%
CVE-2024-21762Fortinet / FortiOSFortinet FortiOS Out-of-Bound Write Vulnerability2024-02-09
83.4%
CVE-2023-4762Google / Chromium V8Google Chromium V8 Type Confusion Vulnerability2024-02-06
41.4%
CVE-2022-48618Apple / Multiple ProductsApple Multiple Products Memory Corruption Vulnerability2024-01-31
0.5%
CVE-2024-21893Ivanti / Connect Secure, Policy Secure, and NeuronsIvanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery…2024-01-31
100.0%
CVE-2023-22527Atlassian / Confluence Data Center and ServerAtlassian Confluence Data Center and Server Template Injection Vulnerability2024-01-24
100.0%
CVE-2024-23222Apple / Multiple ProductsApple Multiple Products WebKit Type Confusion Vulnerability2024-01-23
10.6%
CVE-2023-34048VMware / vCenter ServerVMware vCenter Server Out-of-Bounds Write Vulnerability2024-01-22
99.4%
CVE-2023-35082Ivanti / Endpoint Manager Mobile (EPMM) and MobileIron CoreIvanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypa…2024-01-18
100.0%
CVE-2023-6548Citrix / NetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability2024-01-17
3.2%
CVE-2023-6549Citrix / NetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability2024-01-17
57.6%
CVE-2024-0519Google / Chromium V8Google Chromium V8 Out-of-Bounds Memory Access Vulnerability2024-01-17
3.8%
CVE-2018-15133Laravel / Laravel FrameworkLaravel Deserialization of Untrusted Data Vulnerability2024-01-16
76.8%
CVE-2023-29357Microsoft / SharePoint ServerMicrosoft SharePoint Server Privilege Escalation Vulnerability2024-01-10
100.0%
CVE-2023-46805Ivanti / Connect Secure and Policy SecureIvanti Connect Secure and Policy Secure Authentication Bypass Vulnerability2024-01-10
100.0%
CVE-2024-21887Ivanti / Connect Secure and Policy SecureIvanti Connect Secure and Policy Secure Command Injection Vulnerability2024-01-10
100.0%
CVE-2016-20017D-Link / DSL-2750B DevicesD-Link DSL-2750B Devices Command Injection Vulnerability2024-01-08
64.2%
CVE-2023-23752Joomla! / Joomla!Joomla! Improper Access Control Vulnerability2024-01-08
99.8%
CVE-2023-27524Apache / SupersetApache Superset Insecure Default Initialization of Resource Vulnerability2024-01-08
97.4%
CVE-2023-29300Adobe / ColdFusionAdobe ColdFusion Deserialization of Untrusted Data Vulnerability2024-01-08
100.0%
CVE-2023-38203Adobe / ColdFusionAdobe ColdFusion Deserialization of Untrusted Data Vulnerability2024-01-08
97.1%
CVE-2023-41990Apple / Multiple ProductsApple Multiple Products Code Execution Vulnerability2024-01-08
1.4%
CVE-2023-7024Google / Chromium WebRTCGoogle Chromium WebRTC Heap Buffer Overflow Vulnerability2024-01-02
6.7%
CVE-2023-7101Spreadsheet::ParseExcel / Spreadsheet::ParseExcelSpreadsheet::ParseExcel Remote Code Execution Vulnerability2024-01-02
19.1%
CVE-2023-47565QNAP / VioStor NVRQNAP VioStor NVR OS Command Injection Vulnerability2023-12-21
73.3%
CVE-2023-49897FXC / AE1021, AE1021PEFXC AE1021, AE1021PE OS Command Injection Vulnerability2023-12-21
50.4%
CVE-2023-6448Unitronics / Vision PLC and HMIUnitronics Vision PLC and HMI Insecure Default Password Vulnerability2023-12-11
2.1%
CVE-2023-41265Qlik / SenseQlik Sense HTTP Tunneling Vulnerability2023-12-07
88.2%
CVE-2023-41266Qlik / SenseQlik Sense Path Traversal Vulnerability2023-12-07
84.8%
CVE-2022-22071Qualcomm / Multiple ChipsetsQualcomm Multiple Chipsets Use-After-Free Vulnerability2023-12-05
0.4%
CVE-2023-33063Qualcomm / Multiple ChipsetsQualcomm Multiple Chipsets Use-After-Free Vulnerability2023-12-05
0.7%
CVE-2023-33106Qualcomm / Multiple ChipsetsQualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability2023-12-05
0.8%
CVE-2023-33107Qualcomm / Multiple ChipsetsQualcomm Multiple Chipsets Integer Overflow Vulnerability2023-12-05
0.7%
CVE-2023-42916Apple / Multiple ProductsApple Multiple Products WebKit Out-of-Bounds Read Vulnerability2023-12-04
17.8%
CVE-2023-42917Apple / Multiple ProductsApple Multiple Products WebKit Memory Corruption Vulnerability2023-12-04
9.3%
CVE-2023-49103ownCloud / ownCloud graphapiownCloud graphapi Information Disclosure Vulnerability2023-11-30
78.4%
CVE-2023-6345Google / Chromium SkiaGoogle Skia Integer Overflow Vulnerability2023-11-30
16.5%
CVE-2023-4911GNU / GNU C LibraryGNU C Library Buffer Overflow Vulnerability2023-11-21
63.8%
CVE-2020-2551Oracle / Fusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability2023-11-16
93.2%
CVE-2023-1671Sophos / Web ApplianceSophos Web Appliance Command Injection Vulnerability2023-11-16
100.0%
CVE-2023-36584Microsoft / WindowsMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability2023-11-16
3.1%
CVE-2023-36025Microsoft / WindowsMicrosoft Windows SmartScreen Security Feature Bypass Vulnerability2023-11-14
88.1%
CVE-2023-36033Microsoft / WindowsMicrosoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalat…2023-11-14
10.9%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.
KEV explorer — Known Exploited Vulnerabilities | SQUR Knowledge Base