Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-8069 Citrix Session Recording Deserialization of Untrusted Data Vulnerability MEDIUM 5.1 14.64% cvelistv5 2025-08-25
cve-2024-8068 Citrix Session Recording Improper Privilege Management Vulnerability HIGH N/A 3.48% cvelistv5 2025-08-25
cve-2025-43300 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals. CRITICAL 10.0 21.99% cvelistv5 2026-06-17
cve-2025-54948 Trend Micro Apex One OS Command Injection Vulnerability HIGH N/A 22.04% cvelistv5 2025-08-18
cve-2025-8876 N-able N-Central Command Injection Vulnerability HIGH N/A 3.45% cvelistv5 2025-08-13
cve-2025-8875 N-able N-Central Insecure Deserialization Vulnerability CRITICAL 9.4 1.90% cvelistv5 2025-08-13
cve-2025-8088 RARLAB WinRAR Path Traversal Vulnerability CRITICAL N/A 94.05% cvelistv5 2025-08-12
cve-2013-3893 Microsoft Internet Explorer Resource Management Errors Vulnerability HIGH N/A 87.53% cvelistv5 2025-08-12
cve-2007-0671 Microsoft Office Excel Remote Code Execution Vulnerability HIGH N/A 43.24% cvelistv5 2025-08-12
cve-2022-40799 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability HIGH N/A 33.65% cvelistv5 2025-08-05
cve-2020-25079 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability HIGH N/A 54.01% cvelistv5 2025-08-05
cve-2020-25078 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability HIGH N/A 97.51% cvelistv5 2025-08-05
cve-2025-20337 Cisco Identity Services Engine Injection Vulnerability HIGH N/A 67.83% cvelistv5 2025-07-28
cve-2025-20281 Cisco Identity Services Engine Injection Vulnerability HIGH N/A 97.60% cvelistv5 2025-07-28
cve-2023-2533 PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability HIGH 8.4 29.25% cvelistv5 2025-07-28
cve-2025-6558 angle: insufficient input validation can cause undefined behavior HIGH 8.8 9.59% cvelistv5 2026-06-29
cve-2025-54309 CrushFTP Unprotected Alternate Channel Vulnerability HIGH N/A 94.91% cvelistv5 2025-07-22
cve-2025-49706 Microsoft SharePoint Improper Authentication Vulnerability CRITICAL N/A 99.06% cvelistv5 2025-07-22
cve-2025-49704 Microsoft SharePoint Code Injection Vulnerability HIGH 8.8 100.00% cvelistv5 2025-07-22
cve-2025-2776 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability CRITICAL 9.3 64.40% cvelistv5 2025-07-22
cve-2025-2775 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability CRITICAL 9.3 42.95% cvelistv5 2025-07-22
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2025-25257 Fortinet FortiWeb SQL Injection Vulnerability HIGH N/A 99.78% cvelistv5 2025-07-18
cve-2025-47812 Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability HIGH N/A 92.86% cvelistv5 2025-07-14
cve-2025-5777 Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability CRITICAL N/A 99.97% cvelistv5 2025-07-10
cve-2019-9621 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability HIGH 7.5 81.04% cvelistv5 2025-07-07
cve-2019-5418 Rails Ruby on Rails Path Traversal Vulnerability HIGH N/A 98.51% cvelistv5 2025-07-07
cve-2016-10033 PHPMailer Command Injection Vulnerability HIGH N/A 99.71% cvelistv5 2025-07-07
cve-2014-3931 Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability CRITICAL 9.8 28.98% cvelistv5 2025-07-07
cve-2025-6554 Google Chromium V8 Type Confusion Vulnerability HIGH N/A 12.56% cvelistv5 2025-07-02