Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-11182 MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability MEDIUM 5.3 N/A cvelistv5 2025-05-19
cve-2023-38950 ZKTeco BioTime Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2025-05-19
cve-2025-42999 SAP NetWeaver Deserialization Vulnerability CRITICAL 9.1 N/A cvelistv5 2025-05-15
cve-2024-12987 DrayTek Vigor Routers OS Command Injection Vulnerability HIGH 7.5 N/A cvelistv5 2025-05-15
cve-2025-32756 Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability CRITICAL 9.6 N/A cvelistv5 2025-05-14
cve-2025-32709 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2025-05-13
cve-2025-32706 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2025-05-13
cve-2025-32701 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2025-05-13
cve-2025-30400 Microsoft Windows DWM Core Library Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2025-05-13
cve-2025-30397 Microsoft Windows Scripting Engine Type Confusion Vulnerability HIGH 7.5 N/A cvelistv5 2025-05-13
cve-2025-47729 TeleMessage TM SGNL Hidden Functionality Vulnerability LOW 1.9 N/A cvelistv5 2025-05-12
cve-2024-6047 GeoVision Devices OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-05-07
cve-2024-11120 GeoVision Devices OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-05-07
cve-2025-27363 FreeType Out-of-Bounds Write Vulnerability HIGH N/A N/A cvelistv5 2025-05-06
cve-2025-3248 Langflow Missing Authentication Vulnerability CRITICAL N/A N/A cvelistv5 2025-05-05
cve-2025-34028 Commvault Command Center Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2025-05-02
cve-2024-58136 Yiiframework Yii Improper Protection of Alternate Path Vulnerability HIGH N/A N/A cvelistv5 2025-05-02
cve-2024-38475 Apache HTTP Server Improper Escaping of Output Vulnerability HIGH N/A N/A cvelistv5 2025-05-01
cve-2023-44221 SonicWall SMA100 Appliances OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2025-05-01
cve-2025-31324 SAP NetWeaver Unrestricted File Upload Vulnerability CRITICAL N/A N/A cvelistv5 2025-04-29
cve-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-04-28
cve-2025-3928 Commvault Web Server Unspecified Vulnerability HIGH N/A N/A cvelistv5 2025-04-28
cve-2025-1976 Broadcom Brocade Fabric OS Code Injection Vulnerability HIGH N/A N/A cvelistv5 2025-04-28
cve-2025-31201 Apple Multiple Products Arbitrary Read and Write Vulnerability HIGH N/A N/A cvelistv5 2025-04-17
cve-2025-31200 Apple Multiple Products Memory Corruption Vulnerability HIGH N/A N/A cvelistv5 2025-04-17
cve-2025-24054 Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability MEDIUM 6.5 N/A cvelistv5 2025-04-17
cve-2021-20035 SonicWall SMA100 Appliances OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2025-04-16
cve-2024-53197 Linux Kernel Out-of-Bounds Access Vulnerability HIGH N/A N/A cvelistv5 2025-04-09
cve-2024-53150 Linux Kernel Out-of-Bounds Read Vulnerability HIGH N/A N/A cvelistv5 2025-04-09
cve-2025-30406 Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability HIGH N/A N/A cvelistv5 2025-04-08