Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-27920 Srimax Output Messenger Directory Traversal Vulnerability HIGH N/A 1.86% cvelistv5 2025-05-12
cve-2024-27443 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability HIGH N/A 24.61% cvelistv5 2025-05-15
cve-2024-11182 MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability HIGH N/A 33.26% cvelistv5 2025-05-15
cve-2023-38950 CVE-2023-38950 HIGH N/A 92.47% cvelistv5
cve-2025-42999 SAP NetWeaver Deserialization Vulnerability CRITICAL N/A 12.85% cvelistv5 2025-04-27
cve-2024-12987 DrayTek Vigor Routers OS Command Injection Vulnerability HIGH N/A 98.16% cvelistv5 2025-02-12
cve-2025-32756 Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability CRITICAL N/A 30.94% cvelistv5 2025-05-13
cve-2025-32709 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability HIGH N/A 1.82% cvelistv5 2025-05-13
cve-2025-32706 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability HIGH N/A 2.33% cvelistv5 2025-05-13
cve-2025-32701 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability HIGH N/A 1.42% cvelistv5 2025-05-13
cve-2025-30400 Microsoft Windows DWM Core Library Use-After-Free Vulnerability HIGH N/A 1.92% cvelistv5 2025-05-13
cve-2025-30397 Microsoft Windows Scripting Engine Type Confusion Vulnerability HIGH N/A 27.26% cvelistv5 2025-05-13
cve-2025-47729 TeleMessage TM SGNL Hidden Functionality Vulnerability HIGH N/A 0.45% cvelistv5 2025-05-08
cve-2024-6047 CVE-2024-6047 CRITICAL 9.8 10.07% cvelistv5
cve-2024-11120 GeoVision Devices OS Command Injection Vulnerability CRITICAL 9.8 28.39% cvelistv5 2024-11-15
cve-2025-27363 FreeType Out-of-Bounds Write Vulnerability HIGH N/A 27.77% cvelistv5 2025-03-11
cve-2025-3248 Langflow Missing Authentication Vulnerability CRITICAL 9.8 99.99% cvelistv5 2025-04-12
cve-2025-34028 Commvault Command Center Path Traversal Vulnerability HIGH N/A 97.60% cvelistv5 2025-04-30
cve-2024-58136 Yiiframework Yii Improper Protection of Alternate Path Vulnerability HIGH N/A 87.76% cvelistv5 2025-04-09
cve-2024-38475 Apache HTTP Server Improper Escaping of Output Vulnerability HIGH N/A 99.96% cvelistv5 2025-04-29
cve-2023-44221 SonicWall SMA100 Appliances OS Command Injection Vulnerability HIGH N/A 76.25% cvelistv5 2025-04-29
cve-2025-31324 SAP NetWeaver Unrestricted File Upload Vulnerability CRITICAL N/A 99.49% cvelistv5 2025-04-22
cve-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability CRITICAL 9.8 3.36% cvelistv5 2025-04-18
cve-2025-3928 Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker HIGH 8.7 2.53% cvelistv5 2026-10-08
cve-2025-1976 Broadcom Brocade Fabric OS Code Injection Vulnerability HIGH N/A 0.69% cvelistv5 2025-04-17
cve-2025-31201 Apple Multiple Products Arbitrary Read and Write Vulnerability HIGH N/A 13.97% cvelistv5 2025-04-16
cve-2025-31200 Apple Multiple Products Memory Corruption Vulnerability HIGH N/A 20.90% cvelistv5 2025-04-16
cve-2025-24054 Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability HIGH N/A 62.27% cvelistv5 2025-04-16
cve-2021-20035 SonicWall SMA100 Appliances OS Command Injection Vulnerability HIGH N/A 4.41% cvelistv5 2025-04-15
cve-2024-53197 Linux Kernel Out-of-Bounds Access Vulnerability HIGH N/A 4.12% cvelistv5 2024-12-04