1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 8 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2025-54309CrushFTP / CrushFTP CrushFTP Unprotected Alternate Channel Vulnerability2025-07-22
94.9%
CVE-2025-6558Google / ChromiumGoogle Chromium ANGLE and GPU Improper Input Validation Vulnerability2025-07-22
9.5%
CVE-2025-53770Microsoft / SharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability2025-07-20
100.0%
CVE-2025-25257Fortinet / FortiWebFortinet FortiWeb SQL Injection Vulnerability2025-07-18
99.8%
CVE-2025-47812Wing FTP Server / Wing FTP ServerWing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnera…2025-07-14
93.2%
CVE-2025-5777Citrix / NetScaler ADC and GatewayCitrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability2025-07-10
100.0%
CVE-2014-3931Looking Glass / Multi-Router Looking Glass (MRLG)Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability2025-07-07
29.0%
CVE-2016-10033PHP / PHPMailerPHPMailer Command Injection Vulnerability2025-07-07
99.7%
CVE-2019-5418Rails / Ruby on RailsRails Ruby on Rails Path Traversal Vulnerability2025-07-07
98.5%
CVE-2019-9621Synacor / Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) V…2025-07-07
81.0%
CVE-2025-6554Google / Chromium V8Google Chromium V8 Type Confusion Vulnerability2025-07-02
14.1%
CVE-2025-48927TeleMessage / TM SGNLTeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vul…2025-07-01
11.1%
CVE-2025-48928TeleMessage / TM SGNLTeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sph…2025-07-01
0.6%
CVE-2025-6543Citrix / NetScaler ADC and GatewayCitrix NetScaler ADC and Gateway Buffer Overflow Vulnerability2025-06-30
10.6%
CVE-2019-6693Fortinet / FortiOSFortinet FortiOS Use of Hard-Coded Credentials Vulnerability2025-06-25
5.8%
CVE-2024-0769D-Link / DIR-859 Router D-Link DIR-859 Router Path Traversal Vulnerability2025-06-25
82.7%
CVE-2024-54085AMI / MegaRAC SPxAMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability2025-06-25
60.7%
CVE-2023-0386Linux / KernelLinux Kernel Improper Ownership Management Vulnerability2025-06-17
7.9%
CVE-2023-33538TP-Link / Multiple RoutersTP-Link Multiple Routers Command Injection Vulnerability2025-06-16
41.6%
CVE-2025-43200Apple / Multiple ProductsApple Multiple Products Unspecified Vulnerability2025-06-16
1.2%
CVE-2025-24016Wazuh / Wazuh ServerWazuh Server Deserialization of Untrusted Data Vulnerability2025-06-10
93.8%
CVE-2025-33053Microsoft / Windows Microsoft Windows External Control of File Name or Path Vulnerability2025-06-10
87.0%
CVE-2024-42009Roundcube / WebmailRoundCube Webmail Cross-Site Scripting Vulnerability2025-06-09
82.9%
CVE-2025-32433Erlang / Erlang/OTPErlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vul…2025-06-09
98.8%
CVE-2025-5419Google / Chromium V8Google Chromium V8 Out-of-Bounds Read and Write Vulnerability2025-06-05
7.8%
CVE-2025-21479Qualcomm / Multiple ChipsetsQualcomm Multiple Chipsets Incorrect Authorization Vulnerability2025-06-03
0.8%
CVE-2025-21480Qualcomm / Multiple ChipsetsQualcomm Multiple Chipsets Incorrect Authorization Vulnerability2025-06-03
0.5%
CVE-2025-27038Qualcomm / Multiple ChipsetsQualcomm Multiple Chipsets Use-After-Free Vulnerability2025-06-03
1.0%
CVE-2021-32030ASUS / RoutersASUS Routers Improper Authentication Vulnerability2025-06-02
99.4%
CVE-2023-39780ASUS / RT-AX55 RoutersASUS RT-AX55 Routers OS Command Injection Vulnerability2025-06-02
39.5%
CVE-2024-56145Craft CMS / Craft CMSCraft CMS Code Injection Vulnerability2025-06-02
97.4%
CVE-2025-35939Craft CMS / Craft CMSCraft CMS External Control of Assumed-Immutable Web Parameter Vulnerability2025-06-02
1.3%
CVE-2025-3935ConnectWise / ScreenConnectConnectWise ScreenConnect Improper Authentication Vulnerability2025-06-02
3.5%
CVE-2025-4632Samsung / MagicINFO 9 ServerSamsung MagicINFO 9 Server Path Traversal Vulnerability2025-05-22
24.3%
CVE-2023-38950ZKTeco / BioTimeZKTeco BioTime Path Traversal Vulnerability2025-05-19
92.5%
CVE-2024-11182MDaemon / Email ServerMDaemon Email Server Cross-Site Scripting (XSS) Vulnerability2025-05-19
17.6%
CVE-2024-27443Synacor / Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerabi…2025-05-19
23.6%
CVE-2025-27920Srimax / Output MessengerSrimax Output Messenger Directory Traversal Vulnerability2025-05-19
1.9%
CVE-2025-4427Ivanti / Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability2025-05-19
99.9%
CVE-2025-4428Ivanti / Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability2025-05-19
86.5%
CVE-2024-12987DrayTek / Vigor RoutersDrayTek Vigor Routers OS Command Injection Vulnerability2025-05-15
98.2%
CVE-2025-42999SAP / NetWeaverSAP NetWeaver Deserialization Vulnerability2025-05-15
13.9%
CVE-2025-32756Fortinet / Multiple ProductsFortinet Multiple Products Stack-Based Buffer Overflow Vulnerability2025-05-14
29.8%
CVE-2025-30397Microsoft / WindowsMicrosoft Windows Scripting Engine Type Confusion Vulnerability2025-05-13
26.8%
CVE-2025-30400Microsoft / WindowsMicrosoft Windows DWM Core Library Use-After-Free Vulnerability2025-05-13
1.9%
CVE-2025-32701Microsoft / WindowsMicrosoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnera…2025-05-13
1.4%
CVE-2025-32706Microsoft / WindowsMicrosoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Over…2025-05-13
2.3%
CVE-2025-32709Microsoft / WindowsMicrosoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulner…2025-05-13
2.2%
CVE-2025-47729TeleMessage / TM SGNLTeleMessage TM SGNL Hidden Functionality Vulnerability2025-05-12
0.4%
CVE-2024-11120GeoVision / Multiple DevicesGeoVision Devices OS Command Injection Vulnerability2025-05-07
28.4%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.