Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2019-9621 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability HIGH 7.5 81.04% cvelistv5 2023-09-18
cve-2019-5418 Rails Ruby on Rails Path Traversal Vulnerability HIGH N/A 98.51% cvelistv5 2025-07-07
cve-2016-10033 PHPMailer Command Injection Vulnerability HIGH N/A 99.71% cvelistv5 2022-01-26
cve-2014-3931 Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability CRITICAL 9.8 28.98% cvelistv5 2025-07-07
cve-2025-6554 Google Chromium V8 Type Confusion Vulnerability HIGH N/A 14.14% cvelistv5 2025-06-30
cve-2025-48928 TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability HIGH N/A 0.58% cvelistv5 2025-05-28
cve-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability HIGH N/A 11.57% cvelistv5 2025-05-28
cve-2025-6543 Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability HIGH N/A 10.43% cvelistv5 2025-06-25
cve-2024-54085 AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability CRITICAL 10.0 60.75% cvelistv5 2025-06-25
cve-2024-0769 D-Link DIR-859 Router Path Traversal Vulnerability MEDIUM 5.3 82.71% cvelistv5 2024-06-25
cve-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability CRITICAL N/A 6.64% cvelistv5 2023-08-23
cve-2023-0386 Linux Kernel Improper Ownership Management Vulnerability HIGH N/A 7.88% cvelistv5 2025-06-17
cve-2025-43200 Apple Multiple Products Unspecified Vulnerability MEDIUM 4.2 1.19% cvelistv5 2025-06-11
cve-2023-33538 TP-Link Multiple Routers Command Injection Vulnerability HIGH N/A 41.61% cvelistv5 2025-06-16
cve-2025-33053 Microsoft Windows External Control of File Name or Path Vulnerability HIGH N/A 87.02% cvelistv5 2025-06-10
cve-2025-24016 Wazuh Server Deserialization of Untrusted Data Vulnerability HIGH N/A 93.84% cvelistv5 2025-05-03
cve-2025-32433 Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability CRITICAL N/A 98.92% cvelistv5 2025-06-09
cve-2024-42009 RoundCube Webmail Cross-Site Scripting Vulnerability HIGH N/A 82.88% cvelistv5 2025-06-05
cve-2025-5419 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability HIGH N/A 7.49% cvelistv5 2025-06-02
cve-2025-27038 Qualcomm Multiple Chipsets Use-After-Free Vulnerability HIGH N/A 1.04% cvelistv5 2025-06-02
cve-2025-21480 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability HIGH N/A 0.43% cvelistv5 2025-06-02
cve-2025-21479 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability HIGH N/A 0.78% cvelistv5 2025-06-02
cve-2025-3935 ConnectWise ScreenConnect Improper Authentication Vulnerability HIGH N/A 3.60% cvelistv5 2025-05-30
cve-2025-35939 Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability HIGH N/A 1.35% cvelistv5 2025-06-02
cve-2024-56145 Craft CMS Code Injection Vulnerability HIGH N/A 97.48% cvelistv5 2025-05-27
cve-2023-39780 ASUS RT-AX55 Routers OS Command Injection Vulnerability HIGH N/A 39.51% cvelistv5 2025-05-28
cve-2021-32030 ASUS Routers Improper Authentication Vulnerability CRITICAL 9.8 99.39% cvelistv5 2023-11-16
cve-2025-4632 Samsung MagicINFO 9 Server Path Traversal Vulnerability HIGH N/A 24.07% cvelistv5 2025-05-06
cve-2025-4428 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 88.00% cvelistv5 2025-05-13
cve-2025-4427 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability HIGH N/A 99.93% cvelistv5 2025-05-13