Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-29824 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability HIGH 7.8 N/A cvelistv5 2025-04-08
cve-2025-31161 CrushFTP Authentication Bypass Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-04-07
cve-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability CRITICAL N/A N/A cvelistv5 2025-04-04
cve-2025-24813 Apache Tomcat Path Equivalence Vulnerability HIGH N/A N/A cvelistv5 2025-04-01
cve-2024-20439 Cisco Smart Licensing Utility Static Credential Vulnerability HIGH N/A N/A cvelistv5 2025-03-31
cve-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability HIGH N/A N/A cvelistv5 2025-03-27
cve-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability HIGH N/A N/A cvelistv5 2025-03-26
cve-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-03-26
cve-2025-30154 reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability HIGH N/A N/A cvelistv5 2025-03-24
cve-2025-1316 Edimax IC-7100 IP Camera OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-03-19
cve-2024-48248 NAKIVO Backup and Replication Absolute Path Traversal Vulnerability HIGH 8.6 N/A cvelistv5 2025-03-19
cve-2017-12637 SAP NetWeaver Directory Traversal Vulnerability HIGH 7.5 N/A cvelistv5 2025-03-19
cve-2025-30066 tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability HIGH 8.6 N/A cvelistv5 2025-03-18
cve-2025-24472 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability CRITICAL N/A N/A cvelistv5 2025-03-18
cve-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability HIGH N/A N/A cvelistv5 2025-03-13
cve-2025-21590 Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability MEDIUM 6.7 N/A cvelistv5 2025-03-13
cve-2025-26633 Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability HIGH 7.0 N/A cvelistv5 2025-03-11
cve-2025-24993 Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability HIGH 7.8 N/A cvelistv5 2025-03-11
cve-2025-24991 Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability MEDIUM 5.5 N/A cvelistv5 2025-03-11
cve-2025-24985 Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability HIGH 7.8 N/A cvelistv5 2025-03-11
cve-2025-24984 Microsoft Windows NTFS Information Disclosure Vulnerability MEDIUM 4.6 N/A cvelistv5 2025-03-11
cve-2025-24983 Microsoft Windows Win32k Use-After-Free Vulnerability HIGH 7.0 N/A cvelistv5 2025-03-11
cve-2025-25181 Advantive VeraCore SQL Injection Vulnerability HIGH N/A N/A cvelistv5 2025-03-10
cve-2024-57968 Advantive VeraCore Unrestricted File Upload Vulnerability CRITICAL 9.9 N/A cvelistv5 2025-03-10
cve-2024-13161 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-03-10
cve-2024-13160 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-03-10
cve-2024-13159 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-03-10
cve-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability HIGH 7.1 N/A cvelistv5 2025-03-04
cve-2025-22225 VMware ESXi Arbitrary Write Vulnerability HIGH 8.2 N/A cvelistv5 2025-03-04
cve-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability CRITICAL 9.3 N/A cvelistv5 2025-03-04