Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-0520 showdoc showdoc Unrestricted Upload of File with Dangerous Type CRITICAL 9.4 N/A cvelistv5 2026-04-10
cve-2024-21833 TP-Link archer_ax3000_firmware Improper Neutralization of Special Elements used in an OS Command HIGH N/A N/A cvelistv5 2026-04-10
cve-2026-39987 Marimo Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2026-04-23
cve-2026-21445 Langflow Langflow Missing Authentication for Critical Functionality HIGH N/A N/A cvelistv5 2026-04-09
cve-2025-71243 SPIP saisies Improper Control of Generation of Code HIGH N/A N/A cvelistv5 2026-04-09
cve-2025-68043 lottiefile lottiefiles Missing Authorization HIGH N/A N/A cvelistv5 2026-04-09
cve-2025-1338 Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2026-04-09
cve-2026-4406 gravityforms gravity_forms Improper Neutralization of Input During Web Page Generation HIGH N/A N/A cvelistv5 2026-04-08
cve-2025-27817 Apache Kafka Client: Arbitrary file read and SSRF vulnerability HIGH 7.5 N/A cvelistv5 2026-06-17
cve-2020-8497 artica pandora_fms Missing Authentication for Critical Functionality HIGH N/A N/A cvelistv5 2026-04-08
cve-2020-13851 pandorafms pandora_fms Improper Neutralization of Special Elements used in an OS Command HIGH N/A 90.99% cvelistv5 2026-04-08
cve-2026-34621 Adobe Acrobat and Reader Prototype Pollution Vulnerability HIGH 8.6 N/A cvelistv5 2026-04-13
cve-2026-34424 Smart Slider 3 Pro 3.5.1.35 Supply Chain Attack Remote Access Toolkit CRITICAL 9.8 N/A cvelistv5 2026-06-17
cve-2026-22679 Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerabil... CRITICAL 9.3 N/A cvelistv5 2026-10-26
cve-2025-46289 A logic issue was addressed with improved file handling MEDIUM 5.5 N/A cvelistv5 2026-10-07
cve-2025-43542 This issue was addressed with improved state management HIGH 7.5 N/A cvelistv5 2026-10-07
cve-2025-43532 A memory corruption issue was addressed with improved bounds checking LOW 2.8 N/A cvelistv5 2026-10-07
cve-2025-43517 A privacy issue was addressed with improved private data redaction for log entries LOW 3.3 N/A cvelistv5 2026-10-07
cve-2025-43512 A logic issue was addressed with improved checks HIGH 7.8 N/A cvelistv5 2026-10-07
cve-2025-43482 The issue was addressed with improved input validation MEDIUM 5.5 N/A cvelistv5 2026-10-07
cve-2025-24113 Apple Safari/iOS/iPadOS/visionOS/watchOS and macOS Sequoia Interface Spoofing Vulnerability HIGH N/A N/A cvelistv5 2026-04-07
cve-2024-3605 thimpress wp_hotel_booking Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-04-07
cve-2026-3965 whyour qinglong API express.ts protection mechanism MEDIUM 6.3 N/A cvelistv5 2026-06-17
cve-2026-35029 LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format HIGH 8.7 N/A cvelistv5 2026-10-23
cve-2026-1405 franchidesign slider_future Unrestricted Upload of File with Dangerous Type HIGH N/A N/A cvelistv5 2026-04-06
cve-2026-0740 The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type ... CRITICAL 9.8 N/A cvelistv5 2026-10-26
cve-2023-49606 SUSE CVE CVE-2023-49606 UNKNOWN N/A N/A cvelistv5 2025-08-22
cve-2023-39964 fit2cloud 1panel Improper Limitation of a Pathname to a Restricted Directory HIGH 7.5 N/A cvelistv5 2026-04-06
cve-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability CRITICAL N/A N/A cvelistv5 2026-04-06
cve-2021-4473 topsecgroup tianxin_internet_behavior_management_system Improper Neutralization of Special Elements used in an OS Command HIGH N/A N/A cvelistv5 2026-04-06