1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 6 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2025-14847MongoDB / MongoDB and MongoDB ServerMongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistenc…2025-12-29
83.2%
CVE-2023-52163Digiever / DS-2105 ProDigiever DS-2105 Pro Missing Authorization Vulnerability2025-12-22
96.9%
CVE-2025-14733WatchGuard / FireboxWatchGuard Firebox Out of Bounds Write Vulnerability2025-12-19
26.5%
CVE-2025-20393Cisco / Multiple ProductsCisco Multiple Products Improper Input Validation Vulnerability2025-12-17
32.4%
CVE-2025-40602SonicWall / SMA1000 applianceSonicWall SMA1000 Missing Authorization Vulnerability2025-12-17
2.8%
CVE-2025-59374ASUS / Live UpdateASUS Live Update Embedded Malicious Code Vulnerability2025-12-17
1.2%
CVE-2025-59718Fortinet / Multiple ProductsFortinet Multiple Products Improper Verification of Cryptographic Signature V…2025-12-16
68.3%
CVE-2025-14611Gladinet / CentreStack and TriofoxGladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability2025-12-15
53.3%
CVE-2025-43529Apple / Multiple ProductsApple Multiple Products Use-After-Free WebKit Vulnerability2025-12-15
8.8%
CVE-2018-4063Sierra Wireless / AirLink ALEOSSierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type…2025-12-12
27.1%
CVE-2025-14174Google / ChromiumGoogle Chromium Out of Bounds Memory Access Vulnerability2025-12-12
22.3%
CVE-2025-58360OSGeo / GeoServerOSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnera…2025-12-11
60.5%
CVE-2025-6218RARLAB / WinRARRARLAB WinRAR Path Traversal Vulnerability2025-12-09
90.5%
CVE-2025-62221Microsoft / WindowsMicrosoft Windows Use After Free Vulnerability2025-12-09
2.5%
CVE-2022-37055D-Link / RoutersD-Link Routers Buffer Overflow Vulnerability2025-12-08
55.5%
CVE-2025-66644Array Networks / ArrayOS AGArray Networks ArrayOS AG OS Command Injection Vulnerability2025-12-08
3.4%
CVE-2025-55182Meta / React Server ComponentsMeta React Server Components Remote Code Execution Vulnerability2025-12-05
99.8%
CVE-2021-26828OpenPLC / ScadaBROpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability2025-12-03
39.4%
CVE-2025-48572Android / FrameworkAndroid Framework Privilege Escalation Vulnerability2025-12-02
0.3%
CVE-2025-48633Android / FrameworkAndroid Framework Information Disclosure Vulnerability2025-12-02
0.3%
CVE-2021-26829OpenPLC / ScadaBROpenPLC ScadaBR Cross-site Scripting Vulnerability2025-11-28
48.0%
CVE-2025-61757Oracle / Fusion MiddlewareOracle Fusion Middleware Missing Authentication for Critical Function Vulnera…2025-11-21
88.6%
CVE-2025-13223Google / Chromium V8Google Chromium V8 Type Confusion Vulnerability2025-11-19
5.0%
CVE-2025-58034Fortinet / FortiWebFortinet FortiWeb OS Command Injection Vulnerability2025-11-18
55.6%
CVE-2025-64446Fortinet / FortiWebFortinet FortiWeb Path Traversal Vulnerability2025-11-14
91.8%
CVE-2025-12480Gladinet / TriofoxGladinet Triofox Improper Access Control Vulnerability2025-11-12
95.4%
CVE-2025-62215Microsoft / WindowsMicrosoft Windows Race Condition Vulnerability2025-11-12
6.0%
CVE-2025-9242WatchGuard / FireboxWatchGuard Firebox Out-of-Bounds Write Vulnerability2025-11-12
91.3%
CVE-2025-21042Samsung / Mobile DevicesSamsung Mobile Devices Out-of-Bounds Write Vulnerability2025-11-10
33.2%
CVE-2025-11371Gladinet / CentreStack and TriofoxGladinet CentreStack and Triofox Files or Directories Accessible to External …2025-11-04
92.1%
CVE-2025-48703CWP / Control Web PanelCWP Control Web Panel OS Command Injection Vulnerability2025-11-04
99.7%
CVE-2025-24893XWiki / PlatformXWiki Platform Eval Injection Vulnerability2025-10-30
99.9%
CVE-2025-41244Broadcom / VMware Aria Operations and VMware ToolsBroadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsaf…2025-10-30
8.4%
CVE-2025-6204Dassault Systèmes / DELMIA AprisoDassault Systèmes DELMIA Apriso Code Injection Vulnerability2025-10-28
79.3%
CVE-2025-6205Dassault Systèmes / DELMIA AprisoDassault Systèmes DELMIA Apriso Missing Authorization Vulnerability2025-10-28
73.8%
CVE-2025-54236Adobe / Commerce and MagentoAdobe Commerce and Magento Improper Input Validation Vulnerability2025-10-24
94.5%
CVE-2025-59287Microsoft / WindowsMicrosoft Windows Server Update Service (WSUS) Deserialization of Untrusted D…2025-10-24
100.0%
CVE-2025-61932Motex / LANSCOPE Endpoint ManagerMotex LANSCOPE Endpoint Manager Improper Verification of Source of a Communic…2025-10-22
2.8%
CVE-2022-48503Apple / Multiple ProductsApple Multiple Products Unspecified Vulnerability2025-10-20
3.2%
CVE-2025-2746Kentico / Xperience CMSKentico Xperience CMS Authentication Bypass Using an Alternate Path or Channe…2025-10-20
73.0%
CVE-2025-2747Kentico / Xperience CMSKentico Xperience CMS Authentication Bypass Using an Alternate Path or Channe…2025-10-20
97.2%
CVE-2025-33073Microsoft / WindowsMicrosoft Windows SMB Client Improper Access Control Vulnerability2025-10-20
82.7%
CVE-2025-61884Oracle / E-Business SuiteOracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability2025-10-20
95.9%
CVE-2025-54253Adobe / Experience Manager (AEM) FormsAdobe Experience Manager Forms Code Execution Vulnerability2025-10-15
88.3%
CVE-2016-7836SKYSEA / Client ViewSKYSEA Client View Improper Authentication Vulnerability2025-10-14
19.2%
CVE-2025-24990Microsoft / WindowsMicrosoft Windows Untrusted Pointer Dereference Vulnerability2025-10-14
6.4%
CVE-2025-47827IGEL / IGEL OSIGEL OS Use of a Key Past its Expiration Date Vulnerability2025-10-14
4.9%
CVE-2025-59230Microsoft / WindowsMicrosoft Windows Improper Access Control Vulnerability2025-10-14
2.7%
CVE-2021-43798Grafana Labs / GrafanaGrafana Path Traversal Vulnerability2025-10-09
88.5%
CVE-2025-27915Synacor / Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability2025-10-07
4.1%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.