Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-66376 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability HIGH 7.2 N/A cvelistv5 2026-03-17
cve-2025-47813 Wing FTP Server Information Disclosure Vulnerability HIGH N/A N/A cvelistv5 2026-03-16
cve-2020-37123 Improper Neutralization of Special Elements used in an OS Command HIGH N/A 3.35% cvelistv5 2026-03-16
cve-2026-21902 Juniper junos_os_evolved Incorrect Permission Assignment for Critical Resource HIGH N/A N/A cvelistv5 2026-03-14
cve-2026-3910 Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability HIGH N/A N/A cvelistv5 2026-03-12
cve-2026-3909 Google Skia Out-of-Bounds Write Vulnerability HIGH N/A N/A cvelistv5 2026-03-12
cve-2026-3657 premio my_sticky_bar Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-03-12
cve-2024-13030 D-Link dir-823g_firmware Incorrect Privilege Assignment HIGH N/A N/A cvelistv5 2026-03-12
cve-2019-12314 deltek maconomy Improper Limitation of a Pathname to a Restricted Directory HIGH N/A 83.82% cvelistv5 2026-03-12
cve-2025-8937 TOTOLINK n350r_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2026-03-11
cve-2025-62593 Ray-Project Ray Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-03-11
cve-2025-57296 Tenda ac6_firmware Improper Neutralization of Special Elements used in a Command MEDIUM 6.5 N/A cvelistv5 2026-03-11
cve-2025-52089 TOTOLINK n300rb_firmware Missing Authentication for Critical Functionality HIGH N/A N/A cvelistv5 2026-03-11
cve-2025-34117 netis-systems netcore_router_firmware Improper Neutralization of Special Elements used in an OS Command HIGH N/A N/A cvelistv5 2026-03-11
cve-2024-4841 lollms lollms-webui Path Traversal: '\..\filename' MEDIUM 4.0 N/A cvelistv5 2026-03-11
cve-2023-24796 Vinga WR-AC1200 Password Parameter Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-03-11
cve-2022-30425 Tenda hg6_firmware Improper Neutralization of Special Elements used in an OS Command HIGH N/A N/A cvelistv5 2026-03-11
cve-2020-14080 trendnet tew-827dru_firmware Out-of-bounds Write HIGH N/A 2.35% cvelistv5 2026-03-11
cve-2019-19492 freeswitch freeswitch Use of Hard-coded Credentials HIGH N/A 29.45% cvelistv5 2026-03-11
cve-2018-6000 CVE-2018-6000 HIGH N/A 85.16% cvelistv5
cve-2025-15503 Sangfor operation_and_maintenance_security_management_system Improper Access Control HIGH N/A N/A cvelistv5 2026-03-10
cve-2025-10353 Path Equivalence: 'filename....' (Multiple Trailing Dot) CRITICAL 9.3 N/A cvelistv5 2026-03-10
cve-2022-0785 daily_prayer_time_project daily_prayer_time Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-03-10
cve-2021-44868 mingsoft mcms Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-03-10
cve-2021-4458 webnus modern_events_calendar_lite Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-03-10
cve-2021-24915 contest_gallery contest_gallery Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-03-10
cve-2026-0953 Themeum tutor_lms Improper Authentication HIGH N/A N/A cvelistv5 2026-03-09
cve-2022-0948 pluginbazaar order_listener_for_woocommerce Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-03-09
cve-2019-5434 revive-sas revive_adserver Deserialization of Untrusted Data HIGH N/A 57.02% cvelistv5 2026-03-09
cve-2026-21891 zimaspace zimaos Improper Authentication HIGH N/A N/A cvelistv5 2026-03-07