Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2018-4063 Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability HIGH N/A 27.26% cvelistv5 2025-12-11
cve-2025-8110 Gogs Path Traversal Vulnerability HIGH 8.7 N/A cvelistv5 2025-12-10
cve-2025-62221 Microsoft Windows Use After Free Vulnerability HIGH 7.8 N/A cvelistv5 2025-12-09
cve-2025-58443 FOGProject fogproject Improper Authentication HIGH N/A N/A cvelistv5 2025-12-08
cve-2024-44902 ThinkPHP ThinkPHP Deserialization of Untrusted Data HIGH N/A N/A cvelistv5 2025-12-08
cve-2023-52076 mate-desktop atril Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2025-12-08
cve-2023-26464 SUSE CVE CVE-2023-26464 UNKNOWN N/A N/A cvelistv5 2026-08-31
cve-2022-31197 postgresql postgresql_jdbc_driver Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2025-12-08
cve-2020-1066 .NET Framework Elevation of Privilege Vulnerability CRITICAL N/A 2.52% cvelistv5 2025-12-08
cve-2018-10661 Axis IP Cameras Authorization Bypass Vulnerability HIGH N/A 86.00% cvelistv5 2025-12-08
cve-2025-66644 Array Networks ArrayOS AG OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2025-12-05
cve-2025-58360 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability HIGH 8.2 N/A cvelistv5 2025-12-05
cve-2024-37656 sir gnuboard URL Redirection to Untrusted Site HIGH N/A N/A cvelistv5 2025-12-05
cve-2025-55182 Meta React Server Components Remote Code Execution Vulnerability CRITICAL N/A N/A cvelistv5 2025-12-03
cve-2025-13390 wpdirectorykit wp_directory_kit Incorrect Implementation of Authentication Algorithm CRITICAL 10.0 N/A cvelistv5 2025-12-03
cve-2025-13342 dynamiapps frontend_admin Missing Authorization CRITICAL 9.8 N/A cvelistv5 2025-12-03
cve-2025-13486 acfextended advanced_custom_fields_extended Improper Control of Generation of Code CRITICAL 9.8 N/A cvelistv5 2025-12-02
cve-2023-52251 provectus ui Improper Control of Generation of Code HIGH 8.8 N/A cvelistv5 2025-12-02
cve-2025-53364 parseplatform parse-server Exposure of Sensitive System Information to an Unauthorized Control Sphere HIGH N/A N/A cvelistv5 2025-12-01
cve-2025-48633 Android Framework Information Disclosure Vulnerability MEDIUM 5.5 N/A cvelistv5 2025-12-01
cve-2025-48572 Android Framework Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2025-12-01
cve-2022-0142 vfbpro visual_form_builder Improper Neutralization of Formula Elements in a CSV File HIGH N/A N/A cvelistv5 2025-12-01
cve-2024-49380 plenti plenti Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2025-11-29
cve-2025-5605 WSO2 api_control_plane Authentication Bypass by Spoofing HIGH N/A N/A cvelistv5 2025-11-28
cve-2025-22214 Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2025-11-28
cve-2024-8852 servmask all-in-one_wp_migration Exposure of Sensitive Information to an Unauthorized Actor HIGH N/A N/A cvelistv5 2025-11-28
cve-2024-6690 wp-buy wp_content_copy_protection_\&_no_right_click URL Redirection to Untrusted Site HIGH N/A N/A cvelistv5 2025-11-28
cve-2025-9985 fifu featured_image_from_url Insertion of Sensitive Information into Log File MEDIUM 5.3 N/A cvelistv5 2025-11-27
cve-2025-8943 FlowiseAI Flowise Missing Authentication for Critical Functionality HIGH N/A N/A cvelistv5 2025-11-27
cve-2025-64095 dnnsoftware DotNetNuke (DNN) Unrestricted Upload of File with Dangerous Type CRITICAL 10.0 N/A cvelistv5 2025-11-27