Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-47812 Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability HIGH N/A N/A cvelistv5 2025-07-14
cve-2025-47729 TeleMessage TM SGNL Hidden Functionality Vulnerability LOW 1.9 N/A cvelistv5 2025-05-12
cve-2025-47539 CVE-2025-47539 CRITICAL 9.8 N/A cvelistv5
cve-2025-47204 CVE-2025-47204 MEDIUM 6.1 N/A cvelistv5
cve-2025-47188 CVE-2025-47188 MEDIUM 6.5 N/A cvelistv5
cve-2025-4632 Samsung MagicINFO 9 Server Path Traversal Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-05-22
cve-2025-45988 Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bs_SetCmd function. CRITICAL 9.8 N/A cvelistv5 2026-06-17
cve-2025-44846 CVE-2025-44846 MEDIUM 6.3 N/A cvelistv5
cve-2025-4428 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A N/A cvelistv5 2025-05-19
cve-2025-4427 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability MEDIUM 5.3 N/A cvelistv5 2025-05-19
cve-2025-44177 A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences. HIGH 8.2 N/A cvelistv5 2026-06-17
cve-2025-43529 Apple Multiple Products Use-After-Free WebKit Vulnerability HIGH N/A N/A cvelistv5 2025-12-15
cve-2025-43520 Apple Multiple Products Classic Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2026-03-20
cve-2025-43300 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability CRITICAL 10.0 N/A cvelistv5 2025-08-21
cve-2025-4322 Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover CRITICAL 9.8 N/A cvelistv5 2026-06-17
cve-2025-43200 Apple Multiple Products Unspecified Vulnerability MEDIUM 4.2 N/A cvelistv5 2025-06-16
cve-2025-42999 SAP NetWeaver Deserialization Vulnerability CRITICAL 9.1 N/A cvelistv5 2025-05-15
cve-2025-4283 SourceCodester/oretnom23 Stock Management System Login.php sql injection HIGH 7.3 N/A cvelistv5 2026-06-17
cve-2025-4281 CVE-2025-4281 MEDIUM 5.3 N/A cvelistv5
cve-2025-4270 CVE-2025-4270 MEDIUM 6.9 N/A cvelistv5
cve-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-04-28
cve-2025-4210 SUSE CVE CVE-2025-4210 UNKNOWN N/A N/A cvelistv5 2026-08-27
cve-2025-41646 CVE-2025-41646 HIGH N/A N/A cvelistv5
cve-2025-41244 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability HIGH N/A N/A cvelistv5 2025-10-30
cve-2025-4123 SUSE CVE CVE-2025-4123 HIGH 7.6 N/A cvelistv5 2026-08-25
cve-2025-40602 SonicWall SMA1000 Missing Authorization Vulnerability HIGH N/A N/A cvelistv5 2025-12-17
cve-2025-40553 SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-06-17
cve-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability HIGH N/A N/A cvelistv5 2026-02-03
cve-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability HIGH N/A N/A cvelistv5 2026-02-12
cve-2025-4009 CVE-2025-4009 CRITICAL 9.3 N/A cvelistv5