GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
KEV

Known Exploited Vulnerabilities Catalog

External catalog of known exploited vulnerabilities conforming to GCVE BCP-07 standard.
Catalog UUID: c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8 (Shadowserver)

Publication activity Vulnerabilities this catalog listed per day, by its earliest observation date (first seen, then recorded, falling back to the status update). Select a day to filter the entries below.

Hover a day to see what this catalog listed on it.

Less More
KEV Entries
1306
Vulnerability ID Status Exploited Status Updated Evidence Characteristics Actions
CVE-2022-3982
Unknown - Booking calendar, Appointment Booking System
Confirmed
Asserted: 2023-11-12
Yes 2023-11-12
First seen: 2023-11-12
1 source
honeypot
Severity: 98.0
Details
CVE-2022-1950
Unknown - Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
Confirmed
Asserted: 2023-11-12
Yes 2023-11-12
First seen: 2023-11-12
1 source
honeypot
Severity: 98.0
Details
CVE-2022-31474
iThemes - BackupBuddy
Confirmed
Asserted: 2023-11-12
Yes 2023-11-12
First seen: 2023-11-12
1 source
honeypot
Severity: 75.0
Details
CVE-2023-0297
pyload - pyload/pyload
Confirmed
Asserted: 2023-11-12
Yes 2023-11-12
First seen: 2023-11-12
1 source
honeypot
Severity: 98.0
Details
CVE-2019-12988 Confirmed
Asserted: 2023-10-31
Yes 2023-10-31
First seen: 2023-10-31
1 source
honeypot
Severity: 98.0
Details
CVE-UNASSIGNED-2022-RUIJIE-RCE-01 Confirmed
Asserted: 2023-10-25
Yes 2023-10-25
First seen: 2023-10-25
1 source
honeypot
- Details
EDB-46792 Confirmed
Asserted: 2023-10-24
Yes 2023-10-24
First seen: 2023-10-24
1 source
honeypot
- Details
CVE-2014-9727 Confirmed
Asserted: 2023-10-24
Yes 2023-10-24
First seen: 2023-10-24
1 source
honeypot
Severity: 0.0
Details
CVE-2022-40734 Confirmed
Asserted: 2023-10-24
Yes 2023-10-24
First seen: 2023-10-24
1 source
honeypot
Severity: 65.0
Details
EDB-49457 Confirmed
Asserted: 2023-10-23
Yes 2023-10-23
First seen: 2023-10-23
1 source
honeypot
- Details
displaying 1251 - 1260 KEV entries in total 1306
About this Catalog

Vulnerabilities actively exploited in the wild as observed by The Shadowserver Foundation's global honeypot network (honeypot/exploited-vulnerabilities API), ranked by number of unique IPs per day and enriched with CVSS scores and CISA KEV status.

This Known Exploited Vulnerabilities (KEV) catalog conforms to the GCVE BCP-07 standard (Best Current Practice) standard for documenting vulnerabilities with confirmed or suspected active exploitation.

Each entry includes exploitation status, evidence sources, and characteristics to help organizations prioritize vulnerability remediation efforts.