Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2025-71324 | CVE-2025-71324 | HIGH | 8.7 | N/A | cvelistv5 | |
| cve-2025-71284 | CVE-2025-71284 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2025-7081 | CVE-2025-7081 | MEDIUM | 6.5 | N/A | cvelistv5 | |
| cve-2025-69200 | phpMyFAQ has unauthenticated config backup download via /api/setup/backup | HIGH | 7.5 | N/A | cvelistv5 | 2026-06-17 |
| cve-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-01-22 |
| cve-2025-68493 | org.apache.struts: Apache Struts: Information disclosure and denial of service via missing XML validation | HIGH | 7.1 | N/A | cvelistv5 | 2026-06-30 |
| cve-2025-68461 | RoundCube Webmail Cross-site Scripting Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-02-20 |
| cve-2025-67303 | CVE-2025-67303 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2025-67038 | Lantronix EDS5000 Code Injection Vulnerability | CRITICAL | 9.3 | N/A | cvelistv5 | 2026-06-23 |
| cve-2025-66644 | Array Networks ArrayOS AG OS Command Injection Vulnerability | HIGH | 7.2 | N/A | cvelistv5 | 2025-12-08 |
| cve-2025-6558 | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-07-22 |
| cve-2025-6554 | Google Chromium V8 Type Confusion Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-07-02 |
| cve-2025-6543 | Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-06-30 |
| cve-2025-6485 | TOTOLINK A3002R formWlSiteSurvey os command injection | MEDIUM | 6.3 | N/A | cvelistv5 | 2026-06-17 |
| cve-2025-64446 | Fortinet FortiWeb Path Traversal Vulnerability | CRITICAL | 9.4 | N/A | cvelistv5 | 2025-11-14 |
| cve-2025-64095 | CVE-2025-64095 | CRITICAL | 10.0 | N/A | cvelistv5 | |
| cve-2025-62593 | Ray-Project Ray Code Injection Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-08-17 |
| cve-2025-62221 | Microsoft Windows Use After Free Vulnerability | HIGH | 7.8 | N/A | cvelistv5 | 2025-12-09 |
| cve-2025-62215 | Microsoft Windows Race Condition Vulnerability | HIGH | 7.0 | N/A | cvelistv5 | 2025-11-12 |
| cve-2025-6218 | RARLAB WinRAR Path Traversal Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-12-09 |
| cve-2025-6205 | Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-10-28 |
| cve-2025-6204 | Dassault Systèmes DELMIA Apriso Code Injection Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-10-28 |
| cve-2025-61932 | Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-10-22 |
| cve-2025-61884 | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2025-10-20 |
| cve-2025-61882 | Oracle E-Business Suite Unspecified Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2025-10-06 |
| cve-2025-61757 | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-11-21 |
| cve-2025-61666 | CVE-2025-61666 | HIGH | 8.7 | N/A | cvelistv5 | |
| cve-2025-60702 | CVE-2025-60702 | MEDIUM | 6.5 | N/A | cvelistv5 | |
| cve-2025-60698 | CVE-2025-60698 | HIGH | 7.3 | N/A | cvelistv5 | |
| cve-2025-60687 | CVE-2025-60687 | MEDIUM | 6.5 | N/A | cvelistv5 |