Known Exploited Vulnerabilities Catalog
External catalog of known exploited vulnerabilities conforming to GCVE BCP-07 standard.
Catalog UUID: caeb2787-0d58-4236-9039-7c86c3e566f3 (KEVIntel)
| Vulnerability ID | Status | Exploited | Status Updated | Evidence | Characteristics | Actions |
|---|---|---|---|---|---|---|
|
CVE-2024-43461
Microsoft - Windows 11 Version 24H2 , Microsoft - Windows 10 Version 1809 +23 more |
Confirmed
Asserted: 2024-09-16 |
Yes |
2024-09-16
First seen: 2024-09-16 |
1
source
public_report |
- | Details |
|
CVE-2024-8190
Ivanti - CSA (Cloud Services Appliance) , ivanti - endpoint_manager_cloud_services_appliance |
Confirmed
Asserted: 2024-09-13 |
Yes |
2024-09-13
First seen: 2024-09-13 |
1
source
public_report |
- | Details |
|
CVE-2024-38014
Microsoft - Windows 10 Version 1809 , Microsoft - Windows Server 2019 +23 more |
Confirmed
Asserted: 2024-09-10 |
Yes |
2024-09-10
First seen: 2024-09-10 |
1
source
public_report |
- | Details |
|
CVE-2024-38226
Microsoft - Microsoft Office 2019 , Microsoft - Microsoft Office LTSC 2021 +1 more |
Confirmed
Asserted: 2024-09-10 |
Yes |
2024-09-10
First seen: 2024-09-10 |
1
source
public_report |
- | Details |
|
CVE-2024-38217
Microsoft - Windows 10 Version 1809 , Microsoft - Windows Server 2019 +23 more |
Confirmed
Asserted: 2024-09-10 |
Yes |
2024-09-10
First seen: 2024-09-10 |
1
source
public_report |
- | Details |
|
CVE-2016-3714
imagemagick - imagemagick , canonical - ubuntu_linux +4 more |
Confirmed
Asserted: 2024-09-09 |
Yes |
2024-09-09
First seen: 2024-09-09 |
1
source
public_report |
- | Details |
|
CVE-2017-1000253
centos - centos , redhat - enterprise_linux +1 more |
Confirmed
Asserted: 2024-09-09 |
Yes |
2024-09-09
First seen: 2024-09-09 |
1
source
public_report |
- | Details |
|
CVE-2024-40766
SonicWall - SonicOS , sonicwall - sonicos |
Confirmed
Asserted: 2024-09-09 |
Yes |
2024-09-09
First seen: 2024-09-09 |
1
source
public_report |
- | Details |
|
CVE-2024-45506
haproxy - haproxy |
Confirmed
Asserted: 2024-09-04 |
Yes |
2024-09-04
First seen: 2024-09-04 |
1
source
public_report |
- | Details |
|
CVE-2021-20123
draytek - vigorconnect |
Confirmed
Asserted: 2024-09-03 |
Yes |
2024-09-03
First seen: 2024-09-03 |
1
source
public_report |
- | Details |
About this Catalog
Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.
This Known Exploited Vulnerabilities (KEV) catalog conforms to the GCVE BCP-07 standard (Best Current Practice) standard for documenting vulnerabilities with confirmed or suspected active exploitation.
Each entry includes exploitation status, evidence sources, and characteristics to help organizations prioritize vulnerability remediation efforts.