Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-39682 kernel: tls: fix handling of zero-length records on the rx_list HIGH 7.0 N/A cvelistv5 2026-07-30
cve-2023-54399 CVE-2023-54399 HIGH N/A N/A cvelistv5
cve-2021-48008 Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2023-10-18
cve-2019-25776 CVE-2019-25776 HIGH N/A 0.60% cvelistv5
cve-2017-20284 caucho resin Improper Limitation of a Pathname to a Restricted Directory HIGH N/A 1.17% cvelistv5 2026-09-18
cve-2026-53266 Linux Kernel Out-of-Bounds Write Vulnerability HIGH N/A N/A cvelistv5 2026-09-18
cve-2025-39964 kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg MEDIUM 5.5 N/A cvelistv5 2026-08-21
cve-2026-42796 workiva arelle Missing Authentication for Critical Functionality HIGH N/A N/A cvelistv5 2026-09-18
cve-2024-53900 mongoosejs mongoose Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2025-11-27
cve-2023-46359 hardy-barth cph2_echarge_firmware Improper Neutralization of Special Elements used in an OS Command CRITICAL 9.8 N/A cvelistv5 2026-09-18
cve-2023-29827 ejs ejs Improper Neutralization of Special Elements in Output Used by a Downstream Component CRITICAL 9.8 N/A cvelistv5 2026-09-18
cve-2026-0769 Langflow Langflow Improper Neutralization of Directives in Dynamically Evaluated Code HIGH N/A N/A cvelistv5 2026-06-24
cve-2026-89013 dolibarr dolibarr_erp\/crm Incorrect Authorization HIGH 8.7 N/A cvelistv5 2026-09-17
cve-2026-86538 Improper Limitation of a Pathname to a Restricted Directory HIGH 8.7 N/A cvelistv5 2026-09-17
cve-2026-40242 getarcane arcane Server-Side Request Forgery HIGH 7.2 N/A cvelistv5 2026-09-17
cve-2026-32255 kan kan Server-Side Request Forgery HIGH N/A N/A cvelistv5 2026-09-17
cve-2022-45362 paytm payment_gateway Server-Side Request Forgery HIGH 7.2 N/A cvelistv5 2026-09-17
cve-2022-25497 cuppacms cuppacms Files or Directories Accessible to External Parties HIGH N/A N/A cvelistv5 2026-09-17
cve-2021-24946 webnus modern_events_calendar_lite Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2021-11-15
cve-2016-15043 wp_mobile_detector_project wp_mobile_detector Unrestricted Upload of File with Dangerous Type HIGH N/A 8.89% cvelistv5 2016-06-03
cve-2026-53266 Linux Kernel Out-of-Bounds Write Vulnerability HIGH N/A N/A cvelistv5 2026-09-18
cve-2025-39964 kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg MEDIUM 5.5 N/A cvelistv5 2026-08-21
cve-2025-39682 kernel: tls: fix handling of zero-length records on the rx_list HIGH 7.0 N/A cvelistv5 2026-07-30
cve-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-09-16
cve-2026-54196 Crocoblock jetformbuilder Incorrect Privilege Assignment MEDIUM 6.8 N/A cvelistv5 2026-09-16
cve-2022-0434 a3rev page_view_count Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2025-06-07
cve-2022-0412 templateinvaders ti_woocommerce_wishlist Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-09-16
cve-2019-1003000 Script Security Plugin Sandboxed Script Execution Vulnerability HIGH N/A 98.38% cvelistv5 2020-01-31
cve-2026-58704 In Cellular Modem, there is a possible permission bypass due to a logic error in the code HIGH 8.8 N/A cvelistv5 2026-10-07
cve-2026-5430 WSO2 Multiple Products Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2026-09-24