[ Exploited · 1,754 CVEs ]
Exploited in the wild.
Every CVE on CISA's Known Exploited Vulnerabilities catalogue, most recently added first. If you run one of these products, patch it now.
KEV catalogue version 2026.10.21
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2024-56145 | 18 Dec 2024 | CVSS 9.8 | Craft CMS Code InjectionCraft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Users of affected versions are affected by this… | ExploitedFix |
| CVE-2023-39780 | 11 Sep 2023 | CVSS 8.8 | ASUS RT-AX55 Routers OS Command InjectionOn ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist… | Exploited |
| CVE-2021-32030 | 6 May 2021 | CVSS 9.8 | ASUS Routers Improper AuthenticationThe administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass… | Exploited |
| CVE-2025-4632 | 13 May 2025 | CVSS 9.8 | Samsung MagicINFO 9 Server Path TraversalImproper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to… | ExploitedFix |
| CVE-2025-4428 | 13 May 2025 | CVSS 8.8 | Ivanti Endpoint Manager Mobile (EPMM) Code InjectionRemote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers… | Exploited |
| CVE-2025-4427 | 13 May 2025 | CVSS 7.5 | Ivanti Endpoint Manager Mobile (EPMM) Authentication BypassAn authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources… | Exploited |
| CVE-2025-27920 | 5 May 2025 | CVSS 8.8 | Srimax Output Messenger Directory TraversalOutput Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences in… | Exploited |
| CVE-2024-27443 | 12 Aug 2024 | CVSS 6.1 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS)An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature… | Exploited |
| CVE-2024-11182 | 15 Nov 2024 | CVSS 6.1 | MDaemon Email Server Cross-Site Scripting (XSS)An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img… | Exploited |
| CVE-2023-38950 | 3 Aug 2023 | CVSS 7.5 | ZKTeco BioTime Path TraversalA path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a… | Exploited |
| CVE-2025-42999 | 13 May 2025 | CVSS 9.1 | SAP NetWeaver DeserializationSAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when… | Exploited |
| CVE-2024-12987 | 27 Dec 2024 | CVSS 9.8 | DrayTek Vigor Routers OS Command InjectionA vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file… | Exploited |
| CVE-2025-32756 | 13 May 2025 | CVSS 9.8 | Fortinet Multiple Products Stack-Based Buffer OverflowA stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions… | Exploited |
| CVE-2025-32709 | 13 May 2025 | CVSS 7.8 | Microsoft Windows Ancillary Function Driver for WinSock Use-After-FreeNull pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | Exploited |
| CVE-2025-32706 | 13 May 2025 | CVSS 7.8 | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer OverflowImproper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | Exploited |
| CVE-2025-32701 | 13 May 2025 | CVSS 7.8 | Microsoft Windows Common Log File System (CLFS) Driver Use-After-FreeUse after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | Exploited |
| CVE-2025-30400 | 13 May 2025 | CVSS 7.8 | Microsoft Windows DWM Core Library Use-After-FreeUse after free in Windows DWM allows an authorized attacker to elevate privileges locally. | Exploited |
| CVE-2025-30397 | 13 May 2025 | CVSS 7.5 | Microsoft Windows Scripting Engine Type ConfusionAccess of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a… | Exploited |
| CVE-2025-47729 | 8 May 2025 | CVSS 4.9 | TeleMessage TM SGNL Hidden FunctionalityThe TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is… | Exploited |
| CVE-2024-6047 | 17 Jun 2024 | CVSS 9.8 | GeoVision Devices OS Command InjectionCertain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this… | Exploited |
| CVE-2024-11120 | 15 Nov 2024 | CVSS 9.8 | GeoVision Devices OS Command InjectionCertain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject… | Exploited |
| CVE-2025-27363 | 11 Mar 2025 | CVSS 8.1 | FreeType Out-of-Bounds WriteAn out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font… | Exploited |
| CVE-2025-3248 | 7 Apr 2025 | CVSS 9.8 | Langflow Missing AuthenticationLangflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can… | ExploitedFix |
| CVE-2025-34028 | 22 Apr 2025 | CVSS 10.0 | Commvault Command Center Path TraversalThe Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when… | Exploited |
| CVE-2024-58136 | 10 Apr 2025 | CVSS 9.8 | Yiiframework Yii Improper Protection of Alternate PathYii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the… | ExploitedFix |
| CVE-2024-38475 | 1 Jul 2024 | CVSS 9.1 | Apache HTTP Server Improper Escaping of OutputImproper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are… | ExploitedFix |
| CVE-2023-44221 | 5 Dec 2023 | CVSS 7.2 | SonicWall SMA100 Appliances OS Command InjectionImproper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative… | Exploited |
| CVE-2025-31324 | 24 Apr 2025 | CVSS 9.8 | SAP NetWeaver Unrestricted File UploadSAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially… | Exploited |
| CVE-2025-42599 | 18 Apr 2025 | CVSS 9.8 | Qualitia Active! Mail Stack-Based Buffer OverflowActive! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request… | Exploited |
| CVE-2025-3928 | 25 Apr 2025 | CVSS 8.8 | Commvault Web Server UnspecifiedCommvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory… | Exploited |
| CVE-2025-1976 | 24 Apr 2025 | CVSS 6.7 | Broadcom Brocade Fabric OS Code InjectionBrocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary… | Exploited |
| CVE-2025-31201 | 16 Apr 2025 | CVSS 9.8 | Apple Multiple Products Arbitrary Read and WriteThis issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1… | Exploited |
| CVE-2025-31200 | 16 Apr 2025 | CVSS 9.8 | Apple Multiple Products Memory CorruptionA memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1… | Exploited |
| CVE-2025-24054 | 11 Mar 2025 | CVSS 5.4 | Microsoft Windows NTLM Hash Disclosure SpoofingExternal control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. | Exploited |
| CVE-2021-20035 | 27 Sep 2021 | CVSS 6.5 | SonicWall SMA100 Appliances OS Command InjectionImproper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as… | Exploited |
| CVE-2024-53197 | 27 Dec 2024 | CVSS 7.8 | Linux Kernel Out-of-Bounds AccessIn the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices… | ExploitedFix |
| CVE-2024-53150 | 24 Dec 2024 | CVSS 7.1 | Linux Kernel Out-of-Bounds ReadIn the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current… | ExploitedFix |
| CVE-2025-30406 | 3 Apr 2025 | CVSS 9.8 | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic KeyGladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's… | ExploitedFix |
| CVE-2025-29824 | 8 Apr 2025 | CVSS 7.8 | Microsoft Windows Common Log File System (CLFS) Driver Use-After-FreeUse after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | Exploited |
| CVE-2025-31161 | 3 Apr 2025 | CVSS 9.8 | CrushFTP Authentication BypassCrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy instance is… | Exploited |
| CVE-2025-22457 | 3 Apr 2025 | CVSS 9.8 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer OverflowA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways… | Exploited |
| CVE-2025-24813 | 10 Mar 2025 | CVSS 9.8 | Apache Tomcat Path EquivalencePath Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to… | Exploited |
| CVE-2024-20439 | 4 Sep 2024 | CVSS 9.8 | Cisco Smart Licensing Utility Static CredentialA vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a… | Exploited |
| CVE-2025-2783 | 26 Mar 2025 | CVSS 8.3 | Google Chromium Mojo Sandbox EscapeIncorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to… | Exploited |
| CVE-2019-9875 | 31 May 2019 | CVSS 8.8 | Sitecore CMS and Experience Platform (XP) DeserializationDeserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to execute arbitrary code by… | ExploitedFix |
| CVE-2019-9874 | 31 May 2019 | CVSS 9.8 | Sitecore CMS and Experience Platform (XP) DeserializationDeserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in Sitecore CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2… | ExploitedFix |
| CVE-2025-30154 | 19 Mar 2025 | CVSS 8.6 | reviewdog/action-setup GitHub Action Embedded Malicious Codereviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31… | ExploitedFix |
| CVE-2025-1316 | 5 Mar 2025 | CVSS 9.8 | Edimax IC-7100 IP Camera OS Command InjectionEdimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device | Exploited |
| CVE-2024-48248 | 4 Mar 2025 | CVSS 8.6 | NAKIVO Backup and Replication Absolute Path TraversalNAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to… | Exploited |
| CVE-2017-12637 | 7 Aug 2017 | CVSS 7.5 | SAP NetWeaver Directory TraversalDirectory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote… | Exploited |
| CVE-2025-30066 | 15 Mar 2025 | CVSS 8.6 | tj-actions/changed-files GitHub Action Embedded Malicious Codetj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected on… | Exploited |
| CVE-2025-24472 | 11 Feb 2025 | CVSS 8.1 | Fortinet FortiOS and FortiProxy Authentication BypassAn Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0… | Exploited |
| CVE-2025-24201 | 11 Mar 2025 | CVSS 10.0 | Apple Multiple Products WebKit Out-of-Bounds WriteAn out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and… | Exploited |
| CVE-2025-21590 | 12 Mar 2025 | CVSS 4.4 | Juniper Junos OS Improper Isolation or CompartmentalizationAn Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges… | Exploited |
| CVE-2025-26633 | 11 Mar 2025 | CVSS 7.0 | Microsoft Windows Management Console (MMC) Improper NeutralizationImproper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally. | Exploited |
| CVE-2025-24993 | 11 Mar 2025 | CVSS 7.8 | Microsoft Windows NTFS Heap-Based Buffer OverflowHeap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | Exploited |
| CVE-2025-24991 | 11 Mar 2025 | CVSS 5.5 | Microsoft Windows NTFS Out-Of-Bounds ReadOut-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | Exploited |
| CVE-2025-24985 | 11 Mar 2025 | CVSS 7.8 | Microsoft Windows Fast FAT File System Driver Integer OverflowInteger overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. | ExploitedFix |
| CVE-2025-24984 | 11 Mar 2025 | CVSS 4.6 | Microsoft Windows NTFS Information DisclosureInsertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. | ExploitedFix |
| CVE-2025-24983 | 11 Mar 2025 | CVSS 7.0 | Microsoft Windows Win32k Use-After-FreeUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ExploitedFix |
| CVE-2025-25181 | 3 Feb 2025 | CVSS 7.5 | Advantive VeraCore SQL InjectionA SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL commands… | Exploited |
| CVE-2024-57968 | 3 Feb 2025 | CVSS 8.8 | Advantive VeraCore Unrestricted File UploadAdvantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during… | Exploited |
| CVE-2024-13161 | 14 Jan 2025 | CVSS 7.5 | Ivanti Endpoint Manager (EPM) Absolute Path TraversalAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote… | Exploited |
| CVE-2024-13160 | 14 Jan 2025 | CVSS 7.5 | Ivanti Endpoint Manager (EPM) Absolute Path TraversalAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote… | Exploited |
| CVE-2024-13159 | 14 Jan 2025 | CVSS 7.5 | Ivanti Endpoint Manager (EPM) Absolute Path TraversalAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote… | Exploited |
| CVE-2025-22226 | 4 Mar 2025 | CVSS 6.0 | VMware ESXi, Workstation, and Fusion Information DisclosureVMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with… | Exploited |
| CVE-2025-22225 | 4 Mar 2025 | CVSS 8.2 | VMware ESXi Arbitrary WriteVMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write… | Exploited |
| CVE-2025-22224 | 4 Mar 2025 | CVSS 8.2 | VMware ESXi and Workstation TOCTOU Race ConditionVMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with… | Exploited |
| CVE-2024-50302 | 19 Nov 2024 | CVSS 5.5 | Linux Kernel Use of Uninitialized ResourceIn the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by… | ExploitedFix |
| CVE-2024-4885 | 25 Jun 2024 | CVSS 9.8 | Progress WhatsUp Gold Path TraversalIn WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The… | Exploited |
| CVE-2023-20118 | 13 Apr 2023 | CVSS 7.2 | Cisco Small Business RV Series Routers Command InjectionA vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could… | Exploited |
| CVE-2022-43939 | 3 Apr 2023 | CVSS 9.8 | Hitachi Vantara Pentaho BA Server Authorization BypassHitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using… | Exploited |
| CVE-2022-43769 | 3 Apr 2023 | CVSS 7.2 | Hitachi Vantara Pentaho BA Server Special Element InjectionHitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property… | Exploited |
| CVE-2018-8639 | 12 Dec 2018 | CVSS 7.8 | Microsoft Windows Win32k Improper Resource Shutdown or ReleaseAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation… | ExploitedFix |
| CVE-2024-49035 | 26 Nov 2024 | CVSS 9.8 | Microsoft Partner Center Improper Access ControlAn improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network. | Exploited |
| CVE-2023-34192 | 6 Jul 2023 | CVSS 9.0 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS)Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to… | Exploited |
| CVE-2024-20953 | 17 Feb 2024 | CVSS 8.8 | Oracle Agile Product Lifecycle Management (PLM) DeserializationVulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily… | Exploited |
| CVE-2017-3066 | 27 Apr 2017 | CVSS 9.8 | Adobe ColdFusion DeserializationAdobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization… | ExploitedFix |
| CVE-2025-24989 | 19 Feb 2025 | CVSS 9.8 | Microsoft Power Pages Improper Access ControlAn improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing… | ExploitedFix |
| CVE-2025-23209 | 18 Jan 2025 | CVSS 8.1 | Craft CMS Code InjectionCraft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE)… | ExploitedFix |
| CVE-2025-0111 | 12 Feb 2025 | CVSS 6.5 | Palo Alto Networks PAN-OS File ReadAn authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the… | Exploited |
| CVE-2025-0108 | 12 Feb 2025 | CVSS 9.1 | Palo Alto Networks PAN-OS Authentication BypassAn authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web… | Exploited |
| CVE-2024-53704 | 9 Jan 2025 | CVSS 9.8 | SonicWall SonicOS SSLVPN Improper AuthenticationAn Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication. | Exploited |
| CVE-2024-57727 | 15 Jan 2025 | CVSS 7.5 | SimpleHelp Path TraversalSimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote… | Exploited |
| CVE-2025-24200 | 10 Feb 2025 | CVSS 6.1 | Apple iOS and iPadOS Incorrect AuthorizationAn authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS… | Exploited |
| CVE-2024-41710 | 12 Aug 2024 | CVSS 7.2 | Mitel SIP Phones Argument InjectionA vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1… | Exploited |
| CVE-2025-21418 | 11 Feb 2025 | CVSS 7.8 | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer OverflowWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2025-21391 | 11 Feb 2025 | CVSS 7.1 | Microsoft Windows Storage Link FollowingWindows Storage Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2024-40891 | 4 Feb 2025 | CVSS 8.8 | Zyxel DSL CPE OS Command Injection**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel… | Exploited |
| CVE-2024-40890 | 4 Feb 2025 | CVSS 8.8 | Zyxel DSL CPE OS Command Injection**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A… | Exploited |
| CVE-2025-0994 | 6 Feb 2025 | CVSS 8.8 | Trimble Cityworks DeserializationTrimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization… | Exploited |
| CVE-2025-0411 | 25 Jan 2025 | CVSS 7.0 | 7-Zip Mark of the Web Bypass7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected… | Exploited |
| CVE-2024-21413 | 13 Feb 2024 | CVSS 9.8 | Microsoft Outlook Improper Input ValidationMicrosoft Outlook Remote Code Execution Vulnerability | ExploitedFix |
| CVE-2022-23748 | 17 Nov 2022 | CVSS 7.8 | Dante Discovery Process ControlmDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what… | Exploited |
| CVE-2020-29574 | 11 Dec 2020 | CVSS 9.8 | CyberoamOS (CROS) SQL InjectionAn SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements… | Exploited |
| CVE-2020-15069 | 29 Jun 2020 | CVSS 9.8 | Sophos XG Firewall Buffer OverflowSophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access… | Exploited |
| CVE-2024-53104 | 2 Dec 2024 | CVSS 7.8 | Linux Kernel Out-of-Bounds WriteIn the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format… | ExploitedFix |
| CVE-2024-45195 | 4 Sep 2024 | CVSS 7.5 | Apache OFBiz Forced BrowsingDirect Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade… | Exploited |
| CVE-2024-29059 | 23 Mar 2024 | CVSS 7.5 | Microsoft .NET Framework Information Disclosure.NET Framework Information Disclosure Vulnerability | Exploited |
| CVE-2018-9276 | 2 Jul 2018 | CVSS 7.2 | Paessler PRTG Network Monitor OS Command InjectionAn issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with… | Exploited |
Page 5 of 18