KEV

Known Exploited Vulnerabilities Catalog

External catalog of known exploited vulnerabilities conforming to GCVE BCP-07 standard.
Catalog UUID: c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8 (Shadowserver)

KEV Entries
1231
Vulnerability ID Status Exploited Status Updated Evidence Characteristics Actions
EDB-40344 Confirmed
Asserted: 2024-01-13
Yes 2024-09-13
First seen: 2024-01-13
1 source
honeypot
- Details
CVE-2021-3287 Confirmed
Asserted: 2024-01-13
Yes 2024-09-13
First seen: 2024-01-13
1 source
honeypot
Severity: 98.0
Details
CVE-2023-50358
QNAP Systems Inc. - QTS , QNAP Systems Inc. - QuTS hero +1 more
Confirmed
Asserted: 2024-05-16
Yes 2024-08-31
First seen: 2024-05-16
1 source
honeypot
Severity: 0.0
Details
CVE-2021-22205
GitLab - GitLab
Confirmed
Asserted: 2023-10-26
Yes 2024-08-31
First seen: 2023-10-26
1 source
honeypot
Severity: 100.0
Details
CVE-2021-20090 Confirmed
Asserted: 2023-12-30
Yes 2024-08-30
First seen: 2023-12-30
1 source
honeypot
Severity: 98.0
Details
CVE-2018-20062 Confirmed
Asserted: 2023-10-15
Yes 2024-08-21
First seen: 2023-10-15
1 source
honeypot
- Details
CVE-2014-3120 Confirmed
Asserted: 2023-10-15
Yes 2024-08-21
First seen: 2023-10-15
1 source
honeypot
- Details
CVE-2019-9082 Confirmed
Asserted: 2023-10-15
Yes 2024-08-21
First seen: 2023-10-15
1 source
honeypot
- Details
CVE-2017-17106 Confirmed
Asserted: 2023-11-23
Yes 2024-08-10
First seen: 2023-11-23
1 source
honeypot
Severity: 98.0
Details
CVE-2024-27130
QNAP Systems Inc. - QTS , QNAP Systems Inc. - QuTS hero +2 more
Confirmed
Asserted: 2024-05-27
Yes 2024-08-07
First seen: 2024-05-27
1 source
honeypot
Severity: 0.0
Details
displaying 1201 - 1210 KEV entries in total 1231
About this Catalog

Vulnerabilities actively exploited in the wild as observed by The Shadowserver Foundation's global honeypot network (honeypot/exploited-vulnerabilities API), ranked by number of unique IPs per day and enriched with CVSS scores and CISA KEV status.

This Known Exploited Vulnerabilities (KEV) catalog conforms to the GCVE BCP-07 standard (Best Current Practice) standard for documenting vulnerabilities with confirmed or suspected active exploitation.

Each entry includes exploitation status, evidence sources, and characteristics to help organizations prioritize vulnerability remediation efforts.