1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 9 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2024-6047GeoVision / Multiple DevicesGeoVision Devices OS Command Injection Vulnerability2025-05-07
10.1%
CVE-2025-27363FreeType / FreeTypeFreeType Out-of-Bounds Write Vulnerability2025-05-06
27.8%
CVE-2025-3248Langflow / LangflowLangflow Missing Authentication Vulnerability2025-05-05
100.0%
CVE-2024-58136Yiiframework / YiiYiiframework Yii Improper Protection of Alternate Path Vulnerability2025-05-02
87.8%
CVE-2025-34028Commvault / Command CenterCommvault Command Center Path Traversal Vulnerability2025-05-02
97.6%
CVE-2023-44221SonicWall / SMA100 AppliancesSonicWall SMA100 Appliances OS Command Injection Vulnerability2025-05-01
76.3%
CVE-2024-38475Apache / HTTP ServerApache HTTP Server Improper Escaping of Output Vulnerability2025-05-01
100.0%
CVE-2025-31324SAP / NetWeaverSAP NetWeaver Unrestricted File Upload Vulnerability2025-04-29
99.5%
CVE-2025-1976Broadcom / Brocade Fabric OSBroadcom Brocade Fabric OS Code Injection Vulnerability2025-04-28
0.7%
CVE-2025-3928Commvault / Web ServerCommvault Web Server Unspecified Vulnerability2025-04-28
2.3%
CVE-2025-42599Qualitia / Active! MailQualitia Active! Mail Stack-Based Buffer Overflow Vulnerability2025-04-28
3.3%
CVE-2025-24054Microsoft / WindowsMicrosoft Windows NTLM Hash Disclosure Spoofing Vulnerability2025-04-17
58.9%
CVE-2025-31200Apple / Multiple ProductsApple Multiple Products Memory Corruption Vulnerability2025-04-17
18.8%
CVE-2025-31201Apple / Multiple ProductsApple Multiple Products Arbitrary Read and Write Vulnerability2025-04-17
14.0%
CVE-2021-20035SonicWall / SMA100 AppliancesSonicWall SMA100 Appliances OS Command Injection Vulnerability2025-04-16
4.2%
CVE-2024-53150Linux / KernelLinux Kernel Out-of-Bounds Read Vulnerability2025-04-09
1.4%
CVE-2024-53197Linux / KernelLinux Kernel Out-of-Bounds Access Vulnerability2025-04-09
4.1%
CVE-2025-29824Microsoft / WindowsMicrosoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnera…2025-04-08
13.9%
CVE-2025-30406Gladinet / CentreStackGladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerab…2025-04-08
94.3%
CVE-2025-31161CrushFTP / CrushFTPCrushFTP Authentication Bypass Vulnerability2025-04-07
100.0%
CVE-2025-22457Ivanti / Connect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Ove…2025-04-04
100.0%
CVE-2025-24813Apache / TomcatApache Tomcat Path Equivalence Vulnerability2025-04-01
99.9%
CVE-2024-20439Cisco / Smart Licensing UtilityCisco Smart Licensing Utility Static Credential Vulnerability2025-03-31
97.1%
CVE-2025-2783Google / Chromium MojoGoogle Chromium Mojo Sandbox Escape Vulnerability2025-03-27
9.2%
CVE-2019-9874Sitecore / CMS and Experience Platform (XP)Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability2025-03-26
83.7%
CVE-2019-9875Sitecore / CMS and Experience Platform (XP)Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability2025-03-26
13.8%
CVE-2025-30154reviewdog / action-setup GitHub Actionreviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability2025-03-24
2.4%
CVE-2017-12637SAP / NetWeaverSAP NetWeaver Directory Traversal Vulnerability2025-03-19
95.1%
CVE-2024-48248NAKIVO / Backup and ReplicationNAKIVO Backup and Replication Absolute Path Traversal Vulnerability2025-03-19
94.4%
CVE-2025-1316Edimax / IC-7100 IP CameraEdimax IC-7100 IP Camera OS Command Injection Vulnerability2025-03-19
74.5%
CVE-2025-24472Fortinet / FortiOS and FortiProxyFortinet FortiOS and FortiProxy Authentication Bypass Vulnerability2025-03-18
7.2%
CVE-2025-30066tj-actions / changed-files GitHub Actiontj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability2025-03-18
72.1%
CVE-2025-21590Juniper / Junos OSJuniper Junos OS Improper Isolation or Compartmentalization Vulnerability2025-03-13
1.7%
CVE-2025-24201Apple / Multiple ProductsApple Multiple Products WebKit Out-of-Bounds Write Vulnerability2025-03-13
3.8%
CVE-2025-24983Microsoft / WindowsMicrosoft Windows Win32k Use-After-Free Vulnerability2025-03-11
1.4%
CVE-2025-24984Microsoft / WindowsMicrosoft Windows NTFS Information Disclosure Vulnerability2025-03-11
2.0%
CVE-2025-24985Microsoft / WindowsMicrosoft Windows Fast FAT File System Driver Integer Overflow Vulnerability2025-03-11
3.9%
CVE-2025-24991Microsoft / WindowsMicrosoft Windows NTFS Out-Of-Bounds Read Vulnerability2025-03-11
2.0%
CVE-2025-24993Microsoft / WindowsMicrosoft Windows NTFS Heap-Based Buffer Overflow Vulnerability2025-03-11
2.2%
CVE-2025-26633Microsoft / WindowsMicrosoft Windows Management Console (MMC) Improper Neutralization Vulnerability2025-03-11
30.4%
CVE-2024-13159Ivanti / Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability2025-03-10
100.0%
CVE-2024-13160Ivanti / Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability2025-03-10
91.2%
CVE-2024-13161Ivanti / Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability2025-03-10
90.1%
CVE-2024-57968Advantive / VeraCoreAdvantive VeraCore Unrestricted File Upload Vulnerability2025-03-10
32.3%
CVE-2025-25181Advantive / VeraCore Advantive VeraCore SQL Injection Vulnerability2025-03-10
55.5%
CVE-2024-50302Linux / KernelLinux Kernel Use of Uninitialized Resource Vulnerability2025-03-04
0.8%
CVE-2025-22224VMware / ESXi and WorkstationVMware ESXi and Workstation TOCTOU Race Condition Vulnerability2025-03-04
1.6%
CVE-2025-22225VMware / ESXiVMware ESXi Arbitrary Write Vulnerability2025-03-04
1.0%
CVE-2025-22226VMware / ESXi, Workstation, and FusionVMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability2025-03-04
1.8%
CVE-2018-8639Microsoft / WindowsMicrosoft Windows Win32k Improper Resource Shutdown or Release Vulnerability2025-03-03
22.2%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.