Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-52691 SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-01-26
cve-2018-14634 SUSE CVE CVE-2018-14634 HIGH 7.8 14.69% cvelistv5 2026-08-31
cve-2024-37079 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-01-23
cve-2025-68645 Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability HIGH N/A N/A cvelistv5 2026-01-22
cve-2025-54313 eslint-config-prettier: Eslint-config-prettier Supply Chain Compromise HIGH 7.5 N/A cvelistv5 2026-06-30
cve-2025-34026 Versa Concerto Improper Authentication Vulnerability CRITICAL 9.2 N/A cvelistv5 2026-01-22
cve-2025-31125 vite: Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query MEDIUM 5.3 N/A cvelistv5 2026-07-11
cve-2026-20045 Cisco Unified Communications Products Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-01-21
cve-2026-20805 Microsoft Windows Information Disclosure Vulnerability HIGH N/A N/A cvelistv5 2026-01-13
cve-2025-8110 SUSE CVE CVE-2025-8110 UNKNOWN N/A N/A cvelistv5 2026-07-28
cve-2025-37164 Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-01-07
cve-2009-0556 Microsoft Office PowerPoint Code Injection Vulnerability HIGH N/A 67.31% cvelistv5 2026-01-07
cve-2025-14847 MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability HIGH 8.7 N/A cvelistv5 2025-12-29
cve-2023-52163 Digiever DS-2105 Pro Missing Authorization Vulnerability HIGH 8.8 N/A cvelistv5 2025-12-22
cve-2025-14733 An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated at... CRITICAL 9.3 N/A cvelistv5 2026-09-09
cve-2025-59374 ASUS Live Update Embedded Malicious Code Vulnerability HIGH N/A N/A cvelistv5 2025-12-17
cve-2025-40602 SonicWall SMA1000 Missing Authorization Vulnerability HIGH N/A N/A cvelistv5 2025-12-17
cve-2025-20393 Cisco Multiple Products Improper Input Validation Vulnerability HIGH N/A N/A cvelistv5 2025-12-17
cve-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability CRITICAL 9.1 N/A cvelistv5 2025-12-16
cve-2025-43529 webkitgtk: webkitgtk: Use-after-free due to improper memory management HIGH 8.8 N/A cvelistv5 2026-06-30
cve-2025-14611 Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability HIGH 7.1 N/A cvelistv5 2025-12-15
cve-2025-14174 Google Chrome: chromium: webkitgtk: Out of bounds memory access via crafted HTML page HIGH 8.8 N/A cvelistv5 2026-06-29
cve-2018-4063 Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability HIGH 8.8 27.06% cvelistv5 2025-12-12
cve-2025-58360 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability HIGH N/A N/A cvelistv5 2025-12-11
cve-2025-62221 Microsoft Windows Use After Free Vulnerability HIGH 7.8 N/A cvelistv5 2025-12-09
cve-2025-6218 RARLAB WinRAR Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2025-12-09
cve-2025-66644 Array Networks ArrayOS AG OS Command Injection Vulnerability HIGH 7.2 N/A cvelistv5 2025-12-08
cve-2022-37055 D-Link Routers Buffer Overflow Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-12-08
cve-2025-55182 next: React Server Components: Pre-authentication remote code execution via unsafe deserialization CRITICAL 10.0 N/A cvelistv5 2026-08-04
cve-2021-26828 OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability HIGH 8.8 N/A cvelistv5 2025-12-03