Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2016-10033 PHPMailer Command Injection Vulnerability HIGH N/A N/A cvelistv5 2025-07-07
cve-2014-3931 Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-07-07
cve-2025-6554 Google Chromium V8 Type Confusion Vulnerability HIGH N/A N/A cvelistv5 2025-07-02
cve-2025-48928 TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability MEDIUM 4.0 N/A cvelistv5 2025-07-01
cve-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability MEDIUM 5.3 N/A cvelistv5 2025-07-01
cve-2025-6543 Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2025-06-30
cve-2024-54085 AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability CRITICAL 10.0 N/A cvelistv5 2025-06-25
cve-2024-0769 D-Link DIR-859 Router Path Traversal Vulnerability MEDIUM 5.3 N/A cvelistv5 2025-06-25
cve-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability CRITICAL N/A N/A cvelistv5 2025-06-25
cve-2023-0386 Linux Kernel Improper Ownership Management Vulnerability HIGH N/A N/A cvelistv5 2025-06-17
cve-2025-43200 Apple Multiple Products Unspecified Vulnerability MEDIUM 4.2 N/A cvelistv5 2025-06-16
cve-2023-33538 TP-Link Multiple Routers Command Injection Vulnerability HIGH N/A N/A cvelistv5 2025-06-16
cve-2025-33053 Microsoft Windows External Control of File Name or Path Vulnerability HIGH N/A N/A cvelistv5 2025-06-10
cve-2025-24016 Wazuh Server Deserialization of Untrusted Data Vulnerability HIGH N/A N/A cvelistv5 2025-06-10
cve-2025-32433 SUSE CVE CVE-2025-32433 CRITICAL 9.8 N/A cvelistv5 2026-08-29
cve-2024-42009 SUSE CVE CVE-2024-42009 CRITICAL 9.3 N/A cvelistv5 2025-03-15
cve-2025-5419 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability HIGH N/A N/A cvelistv5 2025-06-05
cve-2025-27038 Qualcomm Multiple Chipsets Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2025-06-03
cve-2025-21480 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability HIGH 8.6 N/A cvelistv5 2025-06-03
cve-2025-21479 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability HIGH 8.6 N/A cvelistv5 2025-06-03
cve-2025-3935 ConnectWise ScreenConnect Improper Authentication Vulnerability HIGH N/A N/A cvelistv5 2025-06-02
cve-2025-35939 Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability MEDIUM 6.9 N/A cvelistv5 2025-06-02
cve-2024-56145 Craft CMS Code Injection Vulnerability HIGH N/A N/A cvelistv5 2025-06-02
cve-2023-39780 ASUS RT-AX55 Routers OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2025-06-02
cve-2021-32030 ASUS Routers Improper Authentication Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-06-02
cve-2025-4632 Samsung MagicINFO 9 Server Path Traversal Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-05-22
cve-2025-4428 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A N/A cvelistv5 2025-05-19
cve-2025-4427 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability MEDIUM 5.3 N/A cvelistv5 2025-05-19
cve-2025-27920 Srimax Output Messenger Directory Traversal Vulnerability HIGH N/A N/A cvelistv5 2025-05-19
cve-2024-27443 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability MEDIUM 6.1 N/A cvelistv5 2025-05-19