Most likely to be exploited
Highest EPSS probability (FIRST.org) of exploitation activity in the next 30 days, across every published CVE.
Updated : EPSS (FIRST.org)
Latest critical vulnerabilities · Libraries recently hit by a critical vulnerability · Most likely to be exploited · Recently added to CISA KEV
| CVE | Library / product — vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-109619 | PHP Group PHP 8.2.* – < 8.2.35 ; 8.3.* – < 8.3.36 ; 8.4.* – < 8.4.27 ; … | RCE via stale global state | CRITICAL 9.2 | 100 % | KEV | |
| CVE-2026-109618 | PHP Group PHP 8.2.* – < 8.2.35 ; 8.3.* – < 8.3.36 ; 8.4.* – < 8.4.27 ; … | RCE via OOM corruption | CRITICAL 9.2 | 100 % | KEV | |
| CVE-2025-53770 | Microsoft Microsoft SharePoint Enterprise Server 2016 16.0.0 – < 16.0.5513.1001Microsoft Microsoft SharePoint Server 2019 16.0.0 – < 16.0.10417.20037+1 more | Microsoft SharePoint Server Remote Code Execution Vulnerability | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2024-7593 | Ivanti vTM fixed in 22.7R2, 22.2R1 | Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated a | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2024-3400 | Palo Alto Networks PAN-OS 10.2.0 – < 10.2.9-h1 ; 11.0.0 – < 11.0.4-h1 ; 11.1.0 – < 11.1.2-h3Palo Alto Networks Cloud NGFW +1 more | PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect | CRITICAL 10.0 | 100 % | KEV | |
| CVE-2024-23897 | org.jenkins-ci.main/jenkins-core Maven 1.606 – < 2.426.3 ; 2.427 – < 2.440.1 ; 2.441 – < 2.442 | Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character follo | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2024-21893 | Ivanti ICS 9.1R18 ; 22.6R2Ivanti IPS 9.1R18 ; 22.6R1 | A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) | HIGH 8.2 | 100 % | KEV | |
| CVE-2024-21887 | Ivanti ICS 9.1R18 ; 22.6R2Ivanti IPS 9.1R18 ; 22.6R1 | A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an aut | CRITICAL 9.1 | 100 % | KEV | |
| CVE-2023-4966 | Citrix NetScaler ADC 14.1 – < 8.50 ; 13.1 – < 49.15 ; 13.0 – < 92.19 ; …Citrix NetScaler Gateway 14.1 – < 8.50 ; 13.1 – < 49.15 ; 13.0 – < 92.19 | Unauthenticated sensitive information disclosure | CRITICAL 9.4 | 100 % | KEV | |
| CVE-2023-44487 | golang.org/x/net Go < 0.17.0com.typesafe.akka/akka-http-core Maven < 10.5.3+9 more | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as | HIGH 7.5 | 100 % | KEV | |
| CVE-2023-35082 | Ivanti EPMM 11.10 | An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resou | CRITICAL 10.0 | 100 % | KEV | |
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile fixed in 11.10, 11.9, 11.8 | An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the appli | CRITICAL 10.0 | 100 % | KEV | |
| CVE-2023-32315 | org.igniterealtime.openfire/xmppserver Maven 3.10.0 – < 4.6.8 ; 4.7.0 – < 4.7.5 | Openfire administration console authentication bypass | HIGH 8.6 | 100 % | KEV | |
| CVE-2023-27350 | PaperCut NG 22.0.5 (Build 63914) | This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentic | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2023-22518 | Atlassian Confluence Data Center >= 1.0.0Atlassian Confluence Server >= 1.0.0 | All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability | CRITICAL 10.0 | 100 % | KEV | |
| CVE-2023-1671 | Sophos Sophos Web Appliance unspecified – < 4.3.10.4 | A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2023-1389 | TP-Link Archer AX21 (AX1800) All versions prior to version 1.14 Build 20230219 | TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form o | HIGH 8.8 | 100 % | KEV | |
| CVE-2023-0669 | Fortra Goanywhere MFT ≤ 7.1.1 | Fortra GoAnywhere MFT License Response Servlet Command Injection | HIGH 7.2 | 100 % | KEV | |
| CVE-2022-29464 | — | Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2022-26134 | Atlassian Confluence Data Center next of 1.3.0 – < unspecified ; unspecified – < 7.4.17 ; 7.13.0 – < unspecified ; …Atlassian Confluence Server next of 1.3.0 – < unspecified ; unspecified – < 7.4.17 ; 7.13.0 – < unspecified ; … | In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attack | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2021-45105 | org.apache.logging.log4j/log4j-core Maven 2.4.0 – < 2.12.3 ; 2.13.0 – < 2.17.0 ; < 2.3.1org.ops4j.pax.logging/pax-logging-log4j2 Maven 1.8.0 – < 1.9.2 ; 1.10.0 – < 1.10.9 ; 1.11.0 – < 1.11.12 ; … | Apache Log4j2 does not always protect from infinite recursion in lookup evaluation | MEDIUM 5.9 | 100 % | ||
| CVE-2021-44228 | com.guicedee.services/log4j-core Maven ≤ 1.2.1.2-jre17org.apache.logging.log4j/log4j-core Maven 2.13.0 – < 2.15.0 ; 2.0-beta9 – < 2.3.1 ; 2.4 – < 2.12.2+3 more | Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints | CRITICAL 10.0 | 100 % | KEV | |
| CVE-2021-40438 | Apache Software Foundation Apache HTTP Server Apache HTTP Server 2.4 – 2.4.48 | mod_proxy SSRF | CRITICAL 9.0 | 100 % | KEV | |
| CVE-2021-35464 | — | ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitatio | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2021-34473 | Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 15.00.0 – < 15.00.1497.015Microsoft Microsoft Exchange Server 2016 Cumulative Update 19 15.01.0 – < 15.01.2176.012+3 more | Microsoft Exchange Server Remote Code Execution Vulnerability | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2021-26086 | Atlassian Jira Server unspecified – < 8.5.14 ; 8.6.0 – < unspecified ; unspecified – < 8.13.6 ; …Atlassian Jira Data Center unspecified – < 8.5.14 ; 8.6.0 – < unspecified ; unspecified – < 8.13.6 ; … | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerabilit | MEDIUM 5.3 | 100 % | KEV | |
| CVE-2021-26084 | Atlassian Confluence Server unspecified – < 6.13.23 ; 6.14.0 – < unspecified ; unspecified – < 7.4.11 ; …Atlassian Confluence Data Center unspecified – < 6.13.23 ; 6.14.0 – < unspecified ; unspecified – < 7.4.11 ; … | In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attack | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2021-22005 | VMware vCenter Server, VMware Cloud Foundation VMware vCenter Server(7.x before 7.0 U2c and 6.7 before 6.7 U3o) and VMware Cloud Foundation (4.x before 4.3 and 3.x before 3.10.2.2) | The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 4 | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2021-21985 | VMware vCenter Server and VMware Cloud Foundation VMware vCenter Server (7.x before 7.0 U2b, 6.7 before 6.7 U3n, 6.5 before 6.5 U3p) and VMware Cloud Foundation (4.x before 4.2.1, 3.x before 3.10.2.1) | The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check pl | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2021-1498 | Cisco Cisco HyperFlex HX Data Platform n/a | Cisco HyperFlex HX Command Injection Vulnerabilities | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2020-5902 | BIG-IP 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, 11.6.1-11.6.5.1 | In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Inte | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2019-19781 | — | An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory T | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2019-11510 | — | In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attack | CRITICAL 10.0 | 100 % | KEV | |
| CVE-2019-0708 | Microsoft Windows 7 for 32-bit Systems Service Pack 1 ; 7 for x64-based Systems Service Pack 1Microsoft Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Core installation) ; 2008 R2 for Itanium-Based Systems Service Pack 1 ; 2008 R2 for x64-based Systems Service Pack 1 ; … | A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2018-13379 | Fortinet Fortinet FortiOS, FortiProxy FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12, FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 | An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4 | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2017-9841 | phpunit/phpunit Packagist 4.8.19 – < 4.8.28 ; 5.0.10 – < 5.6.3 | Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST da | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2017-5638 | org.apache.struts/struts2-core Maven 2.3.0 – < 2.3.32 ; 2.5.0 – < 2.5.10.1 | The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-mes | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2015-1635 | — | HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote a | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2014-6271 | — | GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attac | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2014-3566 | — | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man | LOW 3.4 | 100 % | ||
| CVE-2014-0160 | — | The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows rem | HIGH 7.5 | 100 % | KEV | |
| CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager Access 21.08.0.1, 21.08.0.0, 20.10.0.1, 20.10.0.0. Identity Manager 3.3.6, 3.3.5, 3.3.4, 3.3.3. | VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A mali | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2017-7921 | Hikvision Cameras Hikvision Cameras | An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2013-2251 | org.apache.struts/struts2-core Maven < 2.3.15.1 | Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2012-1823 | — | sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle que | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2020-14882 | Oracle Corporation WebLogic Server 10.3.6.0.0 ; 12.1.3.0.0 ; 12.2.1.3.0 ; … | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected a | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2021-26855 | Microsoft Microsoft Exchange Server 2013 Cumulative Update 21 15.00.0 – < 15.00.1395.012Microsoft Microsoft Exchange Server 2013 Cumulative Update 22 15.00.0 – < 15.00.1473.006+3 more | Microsoft Exchange Server Remote Code Execution Vulnerability | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2019-16920 | — | Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2018-11776 | org.apache.struts/struts2-core Maven 2.0.4 – < 2.3.35 ; 2.5 – < 2.5.17 | Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (ei | HIGH 8.1 | 100 % | KEV | |
| CVE-2025-49704 | Microsoft Microsoft SharePoint Enterprise Server 2016 16.0.0 – < 16.0.5508.1000Microsoft Microsoft SharePoint Server 2019 16.0.0 – < 16.0.10417.20027 | Microsoft SharePoint Remote Code Execution Vulnerability | HIGH 8.8 | 100 % | KEV | |
| CVE-2024-3273 | D-Link DNS-320L 20240403D-Link DNS-325 20240403+2 more | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2022-44877 | — | login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS comma | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2024-34102 | magento/community-edition Packagist 2.4.4 ; 2.4.6-p1 – < 2.4.6-p6 ; 2.4.5-p1 – < 2.4.5-p8 ; … | XXE can expose crypt key and other secrets granting full admin access | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2017-10271 | Oracle Corporation WebLogic Server 10.3.6.0.0 ; 12.1.3.0.0 ; 12.2.1.1.0 ; … | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are | HIGH 7.5 | 100 % | KEV | |
| CVE-2025-3248 | langflow PyPI < 1.3.0langflow-base PyPI < 0.3.0 | Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2024-13159 | Ivanti Endpoint Manager fixed in 2024 January-2025 Security Update, 2022 SU6 January-2025 Security Update | Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2020-8515 | — | DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code executi | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2021-41773 | Apache Software Foundation Apache HTTP Server Apache HTTP Server 2.4 2.4.49 | Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2020-3452 | Cisco Cisco Adaptive Security Appliance (ASA) Software unspecified – < 9.6.4.42 ; unspecified – < 9.8.4.20 ; unspecified – < 9.9.2.74 ; … | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability | HIGH 7.5 | 100 % | KEV | |
| CVE-2024-27199 | JetBrains TeamCity < 2023.11.4 | In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible | HIGH 7.3 | 100 % | KEV | |
| CVE-2023-29300 | Adobe ColdFusion ≤ 2023.0.0.330468 | Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2018-7600 | drupal/core Packagist 8.0.0 – < 8.3.9 ; 8.4.0 – < 8.4.6 ; 8.5.0 – < 8.5.1drupal/drupal Packagist 7.0 – < 7.58 ; 8.0 – < 8.3.9 ; 8.4 – < 8.4.6 ; … | Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because o | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2023-50387 | — | Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of ser | HIGH 7.5 | 100 % | ||
| CVE-2021-34523 | Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 15.00.0 – < 15.00.1497.015Microsoft Microsoft Exchange Server 2016 Cumulative Update 19 15.01.0 – < 15.01.2176.012+3 more | Microsoft Exchange Server Elevation of Privilege Vulnerability | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2021-33044 | Some Dahua IP Camera, Video Intercom, PTZ Dome Camera, Thermal Camera devices Dahua IP Camera devices IPC-HX3XXX, IPC-HX5XXX, and IPC-HUM7XXX, Video Intercom devices VTO75X95X, VTO65XXX, and VTH542XH, PTZ Dome Camera SD1A1, SD22, SD49, SD50, SD52C, and SD6AL, Thermal TPC-BF1241, TPC-BF2221, TPC-SD2221, TPC-BF5XXX, TPC-SD8X21, and TPC-PT8X21B devices Buildtime before June, 2021. | The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2020-9054 | ZyXEL NAS326 V5.21(AAZF.7)C0ZyXEL NAS520 V5.21(AASZ.3)C0+3 more | ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2024-4577 | PHP Group PHP 8.1.* – < 8.1.29 ; 8.2.* – < 8.2.20 ; 8.3.* – < 8.3.8 | Argument Injection in PHP-CGI | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2023-42793 | JetBrains TeamCity < 2023.05.4 | In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2019-9670 | — | mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2023-46805 | Ivanti ICS 9.1R18 ; 22.6R2Ivanti IPS 9.1R18 ; 22.6R1 | An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to acc | HIGH 8.2 | 100 % | KEV | |
| CVE-2023-29357 | Microsoft Microsoft SharePoint Server 2019 16.0.0 – < 16.0.10399.20005 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2023-22527 | Atlassian Confluence Data Center >= 8.0.0 ; >= 8.1.0 ; >= 8.2.0 ; …Atlassian Confluence Server >= 8.0.0 ; >= 8.1.0 ; >= 8.2.0 ; … | A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE | CRITICAL 10.0 | 100 % | KEV | |
| CVE-2022-40684 | Fortinet Fortinet FortiOS, FortiProxy, FortiSwitchManager FortiOS 7.2.1, 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiProxy 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiSwitchManager 7.2.0, 7.0.0 | An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0. | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2024-45195 | Apache Software Foundation Apache OFBiz < 18.12.16 | Apache OFBiz: Confused controller-view authorization logic (forced browsing) | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2021-20090 | Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3 WSR-2533DHPL2 <=1.02, WSR-2533DHP3 <= 1.24 | A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2025-22457 | Ivanti Connect Secure fixed in 22.7R2.6Ivanti Policy Secure fixed in 22.7R1.4+1 more | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2025-0282 | Ivanti Connect Secure 22.7R2 – 22.7R2.4Ivanti Policy Secure 22.7R1 – 22.7R1.2+1 more | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neu | CRITICAL 9.0 | 100 % | KEV | |
| CVE-2021-22204 | ExifTool ExifTool >=7.44, <12.24 | Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing t | HIGH 7.8 | 100 % | KEV | |
| CVE-2025-59287 | Microsoft Windows Server 2012 6.2.9200.0 – < 6.2.9200.25728Microsoft Windows Server 2012 (Server Core installation) 6.2.9200.0 – < 6.2.9200.25728+3 more | Windows Server Update Service (WSUS) Remote Code Execution Vulnerability | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2024-1709 | ConnectWise ScreenConnect ≤ 23.9.7 | Authentication bypass using an alternate path or channel | CRITICAL 10.0 | 100 % | KEV | |
| CVE-2023-4863 | github.com/chai2010/webp Go 1.1.2 – < 1.4.0 ; < 0.0.0-20250406010349-76805d5a8860 ; 0.0.0 – < 1.1.2-0.20250406010349-76805d5a8860electron npm 22.0.0 – < 22.3.24 ; 24.0.0 – < 24.8.3 ; 25.0.0 – < 25.8.1 ; …+8 more | Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bo | HIGH 8.8 | 100 % | KEV | |
| CVE-2024-24919 | checkpoint Check Point Quantum Gateway, Spark Gateway and CloudGuard Network Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20. | Information disclosure | HIGH 8.6 | 100 % | KEV | |
| CVE-2021-45046 | org.apache.logging.log4j/log4j-core Maven 2.13.0 – < 2.16.0 ; 2.4.0 – < 2.12.2 ; < 2.3.1org.ops4j.pax.logging/pax-logging-log4j2 Maven 1.8.0 – < 1.9.2 ; 1.10.0 – < 1.10.8 ; 1.11.0 – < 1.11.11 ; … | Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack | CRITICAL 9.0 | 100 % | KEV | |
| CVE-2019-2725 | Oracle Corporation Tape Library ACSLS 8.5 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2014-0195 | — | The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properl | MEDIUM 6.8 | 100 % | ||
| CVE-2024-4879 | ServiceNow Now Platform < Utah Patch 10 Hot Fix 3 ; < Utah Patch 10a Hot Fix 2 ; < Vancouver Patch 6 Hot Fix 2 ; … | Jelly Template Injection Vulnerability in ServiceNow UI Macros | CRITICAL 9.3 | 100 % | KEV | |
| CVE-2012-0158 | — | The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office | HIGH 8.8 | 100 % | KEV | |
| CVE-2025-24893 | org.xwiki.platform/xwiki-platform-search-solr-ui Maven 5.3-milestone-2 – < 15.10.11 ; 16.0.0-rc-1 – < 16.4.1 | Remote code execution as guest via SolrSearchMacros request in xwiki | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2014-3704 | — | The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, | HIGH 7.5 | 100 % | ||
| CVE-2025-5777 | NetScaler ADC 14.1 – < 43.56 ; 13.1 – < 58.32NetScaler Gateway 14.1 – < 43.56 ; 13.1 – < 58.32 | NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread | CRITICAL 9.3 | 100 % | KEV | |
| CVE-2014-8361 | — | The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploi | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2022-41082 | Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 15.00.0 – < 15.00.1497.044Microsoft Microsoft Exchange Server 2016 Cumulative Update 22 15.0.0 – < 15.01.2375.037+3 more | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH 8.0 | 100 % | KEV | |
| CVE-2025-31161 | CrushFTP CrushFTP 10 – < 10.8.4 ; 11 – < 11.3.1 | CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy insta | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2020-25506 | — | D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2017-12617 | org.apache.tomcat.embed/tomcat-embed-core Maven 9.0.0.M1 – < 9.0.1 ; 8.5.0 – < 8.5.23 ; 8.0.0-RC1 – < 8.0.47 ; …org.apache.tomcat/tomcat-catalina Maven 9.0.0.M1 – < 9.0.1 ; 8.5.0 – < 8.5.23 ; 8.0.0-RC1 – < 8.0.47 ; … | When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. | HIGH 8.1 | 100 % | KEV | |
| CVE-2015-7297 | — | SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a | HIGH 7.5 | 100 % | ||
| CVE-2022-47986 | IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier | IBM Aspera Faspex code execution | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2021-42013 | Apache Software Foundation Apache HTTP Server Apache HTTP Server 2.4.49 ; Apache HTTP Server 2.4.50 | Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2021-3156 | — | Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root | HIGH 7.8 | 100 % | KEV | |
| CVE-2020-0688 | Microsoft Microsoft Exchange Server 2013 Cumulative Update 23Microsoft Microsoft Exchange Server 2019 Cumulative Update 3 unspecified+3 more | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, ak | HIGH 8.8 | 100 % | KEV |