Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-48928 TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability MEDIUM 4.0 0.55% cvelistv5 2025-07-01
cve-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability MEDIUM 5.3 11.10% cvelistv5 2025-07-01
cve-2025-6543 Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability HIGH N/A 10.56% cvelistv5 2025-06-30
cve-2024-54085 AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability CRITICAL 10.0 60.75% cvelistv5 2025-06-25
cve-2024-0769 D-Link DIR-859 Router Path Traversal Vulnerability MEDIUM 5.3 82.71% cvelistv5 2025-06-25
cve-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability CRITICAL N/A 5.83% cvelistv5 2025-06-25
cve-2023-0386 Linux Kernel Improper Ownership Management Vulnerability HIGH N/A 7.88% cvelistv5 2025-06-17
cve-2025-43200 Apple Multiple Products Unspecified Vulnerability MEDIUM 4.2 1.19% cvelistv5 2025-06-16
cve-2023-33538 TP-Link Multiple Routers Command Injection Vulnerability HIGH N/A 41.61% cvelistv5 2025-06-16
cve-2025-33053 Microsoft Windows External Control of File Name or Path Vulnerability HIGH N/A 87.02% cvelistv5 2025-06-10
cve-2025-24016 Wazuh Server Deserialization of Untrusted Data Vulnerability HIGH N/A 93.84% cvelistv5 2025-06-10
cve-2025-32433 Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability HIGH N/A 98.79% cvelistv5 2025-06-09
cve-2024-42009 RoundCube Webmail Cross-Site Scripting Vulnerability HIGH N/A 82.88% cvelistv5 2025-06-09
cve-2025-5419 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability HIGH N/A 7.82% cvelistv5 2025-06-05
cve-2025-27038 Qualcomm Multiple Chipsets Use-After-Free Vulnerability HIGH N/A 1.02% cvelistv5 2025-06-03
cve-2025-21480 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability HIGH 8.6 0.46% cvelistv5 2025-06-03
cve-2025-21479 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability HIGH 8.6 0.84% cvelistv5 2025-06-03
cve-2025-3935 ConnectWise ScreenConnect Improper Authentication Vulnerability HIGH N/A 3.51% cvelistv5 2025-06-02
cve-2025-35939 Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability MEDIUM 6.9 1.32% cvelistv5 2025-06-02
cve-2024-56145 Craft CMS Code Injection Vulnerability HIGH N/A 97.41% cvelistv5 2025-06-02
cve-2023-39780 ASUS RT-AX55 Routers OS Command Injection Vulnerability HIGH N/A 40.19% cvelistv5 2025-06-02
cve-2021-32030 ASUS Routers Improper Authentication Vulnerability CRITICAL 9.8 99.39% cvelistv5 2025-06-02
cve-2025-4632 Samsung MagicINFO 9 Server Path Traversal Vulnerability CRITICAL 9.8 24.30% cvelistv5 2025-05-22
cve-2025-37899 SUSE CVE CVE-2025-37899 UNKNOWN N/A 1.00% cvelistv5 2026-08-28
cve-2025-4428 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 86.52% cvelistv5 2025-05-19
cve-2025-4427 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability MEDIUM 5.3 99.93% cvelistv5 2025-05-19
cve-2025-27920 Srimax Output Messenger Directory Traversal Vulnerability HIGH N/A 1.85% cvelistv5 2025-05-19
cve-2024-27443 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability MEDIUM 6.1 23.63% cvelistv5 2025-05-19
cve-2024-11182 MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability HIGH N/A 17.71% cvelistv5 2025-05-19
cve-2023-38950 ZKTeco BioTime Path Traversal Vulnerability HIGH N/A 92.47% cvelistv5 2025-05-19