Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-20337 Cisco Identity Services Engine Injection Vulnerability HIGH N/A 67.60% cvelistv5 2025-07-28
cve-2025-20281 Cisco Identity Services Engine Injection Vulnerability HIGH N/A 97.23% cvelistv5 2025-07-28
cve-2023-2533 PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability HIGH 8.4 29.25% cvelistv5 2025-07-28
cve-2025-6558 Google Chromium ANGLE and GPU Improper Input Validation Vulnerability HIGH N/A 9.59% cvelistv5 2025-07-22
cve-2025-54309 CrushFTP Unprotected Alternate Channel Vulnerability HIGH N/A 94.91% cvelistv5 2025-07-22
cve-2025-49706 Microsoft SharePoint Improper Authentication Vulnerability CRITICAL N/A 99.06% cvelistv5 2025-07-22
cve-2025-49704 Microsoft SharePoint Code Injection Vulnerability HIGH 8.8 100.00% cvelistv5 2025-07-22
cve-2025-2776 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability CRITICAL 9.3 64.40% cvelistv5 2025-07-22
cve-2025-2775 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability CRITICAL 9.3 42.95% cvelistv5 2025-07-22
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2025-25257 Fortinet FortiWeb SQL Injection Vulnerability HIGH N/A 99.78% cvelistv5 2025-07-18
cve-2025-47812 Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability HIGH N/A 92.86% cvelistv5 2025-07-14
cve-2025-5777 Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability CRITICAL N/A 99.97% cvelistv5 2025-07-10
cve-2019-9621 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability HIGH 7.5 81.04% cvelistv5 2025-07-07
cve-2019-5418 rubygem-actionpack: render file directory traversal in Action View HIGH 8.1 98.51% cvelistv5 2026-06-28
cve-2016-10033 PHPMailer Command Injection Vulnerability HIGH N/A 99.71% cvelistv5 2025-07-07
cve-2014-3931 Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability CRITICAL 9.8 28.98% cvelistv5 2025-07-07
cve-2025-6554 Google Chromium V8 Type Confusion Vulnerability HIGH N/A 12.56% cvelistv5 2025-07-02
cve-2025-48928 TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability MEDIUM 4.0 0.55% cvelistv5 2025-07-01
cve-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability MEDIUM 5.3 11.10% cvelistv5 2025-07-01
cve-2025-6543 Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability HIGH N/A 10.14% cvelistv5 2025-06-30
cve-2024-54085 AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability CRITICAL 10.0 60.75% cvelistv5 2025-06-25
cve-2024-0769 D-Link DIR-859 Router Path Traversal Vulnerability MEDIUM 5.3 82.71% cvelistv5 2025-06-25
cve-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability CRITICAL N/A 5.83% cvelistv5 2025-06-25
cve-2023-0386 Linux Kernel Improper Ownership Management Vulnerability HIGH N/A 7.88% cvelistv5 2025-06-17
cve-2025-43200 Apple Multiple Products Unspecified Vulnerability HIGH N/A 1.09% cvelistv5 2025-06-16
cve-2023-33538 TP-Link Multiple Routers Command Injection Vulnerability HIGH N/A 41.87% cvelistv5 2025-06-16
cve-2025-33053 Microsoft Windows External Control of File Name or Path Vulnerability HIGH N/A 87.61% cvelistv5 2025-06-10
cve-2025-24016 Wazuh Server Deserialization of Untrusted Data Vulnerability HIGH N/A 93.84% cvelistv5 2025-06-10
cve-2025-32433 SUSE CVE CVE-2025-32433 CRITICAL 9.8 98.75% cvelistv5 2026-08-29