CISA Known Exploited Vulnerabilities catalog (page 4)
Page 4 of 18 of the CISA Known Exploited Vulnerabilities catalog, newest additions first, with PoC counts, Metasploit and EPSS.
Known exploited CVEs, newest addition first (page 4 of 18)
| CVE | Product | Severity | Added to KEV | Due date | Ransomware use | Public PoCs | Metasploit | EPSS | Summary |
|---|---|---|---|---|---|---|---|---|---|
CVE-2025-40602 | SonicWall Sma1000 +5 | Medium 6.6 | — | 2 | — | 0.028 (86.4th percentile) | A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC). | ||
CVE-2025-20393 | Cisco Asyncos +2 | Critical 10.0 | — | 5 | — | 0.324 (98.3th percentile) | A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execu… | ||
CVE-2025-59718 | Fortinet Fortios +3 | Critical 9.8 | — | 2 | — | 0.681 (99.3th percentile) | A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, Fort… | ||
CVE-2025-43529 | Apple iOS And Ipados +7 | High 8.8 | — | 9 | — | 0.257 (98.0th percentile) | A use-after-free issue was addressed with improved memory management. | ||
CVE-2025-14611 | Gladinet Centrestack +2 | Critical 9.8 | — | 1 | Yes | 0.533 (99.0th percentile) | Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. | ||
CVE-2025-14174 | Apple Ipados +8 | High 8.8 | — | 3 | — | 0.553 (99.0th percentile) | Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. | ||
CVE-2018-4063 | Sierra Wireless +1 | High 8.8 | — | 0 | — | 0.273 (98.1th percentile) | An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. | ||
CVE-2025-58360 | Geoserver Geoserver | High 8.2 | — | 6 | Yes | 0.612 (99.2th percentile) | GeoServer is an open source server that allows users to share and edit geospatial data. | ||
CVE-2025-62221 | Microsoft Windows 10 1809 +22 | High 7.8 | — | 1 | — | 0.025 (84.9th percentile) | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | ||
CVE-2025-6218 | Rarlab Winrar | High 7.8 | — | 6 | — | 0.905 (99.8th percentile) | RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. | ||
CVE-2025-66644 | Array Networks Arrayos Ag +1 | High 7.2 | — | 0 | — | 0.033 (88.7th percentile) | Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025. | ||
CVE-2022-37055 | Dlink Go-Rt-Ac750 Firmware +1 | Critical 9.8 | — | 0 | — | 0.555 (99.0th percentile) | D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main, | ||
CVE-2025-55182 | Facebook React +4 | Critical 10.0 | Known | 525 | Yes | 0.997 (100.0th percentile) | A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react… | ||
CVE-2021-26828 | — | High 8.8 | — | 5 | — | 0.391 (98.6th percentile) | OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm. | ||
CVE-2025-48633 | Google Android | Medium 5.5 | — | 0 | — | 0.003 (17.2th percentile) | In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code. | ||
CVE-2025-48572 | Google Android | High 7.8 | — | 0 | — | 0.003 (16.8th percentile) | In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. | ||
CVE-2021-26829 | — | Medium 5.4 | — | 0 | — | 0.480 (98.9th percentile) | OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm. | ||
CVE-2025-61757 | Oracle Identity Manager +1 | Critical 9.8 | — | 2 | — | 0.886 (99.8th percentile) | Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). | ||
CVE-2025-13223 | Google Chrome +1 | High 8.8 | — | 0 | — | 0.049 (92.2th percentile) | Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2025-58034 | Fortinet Fortiweb | High 7.2 | — | 0 | Yes | 0.547 (99.0th percentile) | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6… | ||
CVE-2025-64446 | Fortinet Fortiweb | Critical 9.8 | — | 16 | Yes | 0.911 (99.8th percentile) | A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0… | ||
CVE-2025-9242 | Watchguard Fireware +1 | Critical 9.8 | — | 4 | — | 0.922 (99.8th percentile) | An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. | ||
CVE-2025-62215 | Microsoft Windows 10 1809 +22 | High 7.0 | — | 8 | — | 0.045 (91.5th percentile) | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
CVE-2025-12480 | Gladinet Triofox +1 | Critical 9.1 | — | 0 | — | 0.957 (99.9th percentile) | Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete. | ||
CVE-2025-21042 | Samsung Android | High 8.8 | — | 1 | — | 0.356 (98.5th percentile) | Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. | ||
CVE-2025-48703 | Centos-Webpanel Centos Web Panel +1 | Critical 9.0 | — | 4 | — | 0.997 (99.9th percentile) | CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. | ||
CVE-2025-11371 | Gladinet Centrestack +2 | High 7.5 | — | 4 | Yes | 0.921 (99.8th percentile) | In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. | ||
CVE-2025-41244 | Debian Debian Linux +13 | High 7.8 | — | 3 | — | 0.164 (97.0th percentile) | VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installe… | ||
CVE-2025-24893 | Xwiki Xwiki +1 | Critical 9.8 | — | 49 | Yes | 1.000 (100.0th percentile) | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. | ||
CVE-2025-6205 | 3ds Delmia Apriso +1 | Critical 9.1 | — | 0 | — | 0.672 (99.3th percentile) | A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application. | ||
CVE-2025-6204 | 3ds Delmia Apriso +1 | High 8.0 | — | 0 | — | 0.766 (99.5th percentile) | An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code. | ||
CVE-2025-59287 | Microsoft Windows Server 2012 +17 | Critical 9.8 | — | 26 | Yes | 1.000 (100.0th percentile) | Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network. | ||
CVE-2025-54236 | Adobe Adobe Commerce +3 | Critical 9.1 | — | 8 | Yes | 0.955 (99.9th percentile) | Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. | ||
CVE-2025-61932 | Motex Lanscope Endpoint Manager +1 | Critical 9.8 | — | 0 | — | 0.028 (86.4th percentile) | Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending s… | ||
CVE-2025-61884 | Oracle Configurator +1 | High 7.5 | Known | 3 | — | 0.959 (99.9th percentile) | Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). | ||
CVE-2025-33073 | Microsoft Windows 10 1507 +39 | High 8.8 | — | 13 | — | 0.828 (99.7th percentile) | Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network. | ||
CVE-2025-2747 | Kentico Xperience | Critical 9.8 | — | 0 | — | 0.972 (99.9th percentile) | An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. | ||
CVE-2025-2746 | Kentico Xperience | Critical 9.8 | — | 0 | — | 0.741 (99.5th percentile) | An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. | ||
CVE-2022-48503 | Apple iOS And Ipados +6 | High 8.8 | — | 0 | — | 0.032 (88.3th percentile) | The issue was addressed with improved bounds checks. | ||
CVE-2025-54253 | Adobe Adobe Experience Manager +1 | Critical 10.0 | — | 9 | — | 0.808 (99.6th percentile) | Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. | ||
CVE-2025-59230 | Microsoft Windows 10 1507 +41 | High 7.8 | — | 0 | — | 0.027 (86.1th percentile) | Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | ||
CVE-2025-47827 | Igel Igel OS +16 | Medium 4.6 | — | 1 | — | 0.052 (92.5th percentile) | In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. | ||
CVE-2025-24990 | Microsoft Windows 10 1507 +40 | High 7.8 | — | 2 | — | 0.065 (93.8th percentile) | Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. | ||
CVE-2016-7836 | Sky Co., Ltd. Skysea Client View +1 | Critical 9.8 | — | 0 | — | 0.192 (97.4th percentile) | SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program. | ||
CVE-2021-43798 | Grafana Grafana | High 7.5 | — | 82 | Yes | 0.885 (99.8th percentile) | Grafana is an open-source platform for monitoring and observability. | ||
CVE-2025-27915 | — | Medium 5.4 | — | 0 | — | 0.041 (90.8th percentile) | An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. | ||
CVE-2025-61882 | Oracle Concurrent Processing +1 | Critical 9.8 | Known | 18 | Yes | 0.997 (100.0th percentile) | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). | ||
CVE-2021-43226 | Microsoft Windows 10 1507 +46 | High 7.8 | Known | 1 | — | 0.033 (88.5th percentile) | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
CVE-2021-22555 | Broadcom Fabric Operating System +21 | High 8.3 | — | 13 | Yes | 0.787 (99.6th percentile) | A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. | ||
CVE-2013-3918 | Microsoft Windows 7 +10 | High 8.8 | — | 0 | Yes | 0.737 (99.5th percentile) | The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1… | ||
CVE-2011-3402 | Microsoft Windows 7 +5 | High 8.8 | — | 0 | Yes | 0.781 (99.6th percentile) | Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server… | ||
CVE-2010-3962 | Microsoft Internet Explorer +1 | High 8.1 | — | 0 | Yes | 0.968 (99.9th percentile) | Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the c… | ||
CVE-2010-3765 | Mozilla Firefox +3 | Critical 9.8 | — | 0 | Yes | 0.832 (99.7th percentile) | Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attac… | ||
CVE-2025-4008 | Smartbedded Meteobridge +2 | High 8.8 | — | 0 | — | 0.934 (99.8th percentile) | The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts… | ||
CVE-2025-21043 | Samsung Android | High 8.8 | — | 0 | — | 0.022 (82.8th percentile) | Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. | ||
CVE-2017-1000353 | Jenkins Jenkins +2 | Critical 9.8 | — | 2 | Yes | 0.997 (100.0th percentile) | Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. | ||
CVE-2015-7755 | Juniper Screenos +1 | Critical 9.8 | — | 2 | Yes | 0.614 (99.2th percentile) | Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3… | ||
CVE-2014-6278 | GNU Bash +1 | High 8.8 | — | 0 | Yes | 0.997 (100.0th percentile) | GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via a crafted environm… | ||
CVE-2025-59689 | Libraesva Email Security Gateway +1 | Medium 6.1 | — | 0 | — | 0.020 (80.4th percentile) | Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. | ||
CVE-2025-32463 | Canonical Ubuntu Linux +8 | Critical 9.3 | — | 101 | Yes | 0.563 (99.1th percentile) | Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. | ||
CVE-2025-20352 | Cisco Cisco iOS Xe Catalyst Sd-Wan +4 | High 7.7 | — | 2 | — | 0.406 (98.7th percentile) | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low p… | ||
CVE-2025-10035 | Fortra Goanywhere Managed File Transfer +1 | Critical 10.0 | Known | 6 | — | 0.998 (100.0th percentile) | A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object… | ||
CVE-2021-21311 | Adminer Adminer +2 | High 7.2 | — | 3 | — | 0.985 (99.9th percentile) | Adminer is an open-source database management in a single PHP file. | ||
CVE-2025-20362 | Cisco Adaptive Security Appliance Software +3 | Medium 6.5 | — | 1 | — | 0.867 (99.7th percentile) | Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and… | ||
CVE-2025-20333 | Cisco Adaptive Security Appliance Software +3 | Critical 9.9 | — | 4 | — | 0.720 (99.4th percentile) | A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote… | ||
CVE-2025-10585 | Google Chrome +1 | Critical 9.8 | — | 3 | — | 0.090 (95.3th percentile) | Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2025-5086 | 3ds Delmia Apriso +1 | Critical 9.0 | — | 0 | — | 0.972 (99.9th percentile) | A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution. | ||
CVE-2025-53690 | Sitecore Experience Commerce +5 | Critical 9.0 | — | 4 | — | 0.607 (99.2th percentile) | Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; E… | ||
CVE-2025-48543 | Google Android | High 8.8 | — | 1 | — | 0.007 (51.8th percentile) | In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. | ||
CVE-2025-38352 | Debian Debian Linux +2 | High 7.8 | — | 6 | — | 0.014 (71.9th percentile) | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has alr… | ||
CVE-2025-9377 | TP-Link Archer C7 Firmware +4 | High 7.2 | — | 0 | — | 0.413 (98.7th percentile) | The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9. | ||
CVE-2023-50224 | TP-Link Archer C1900 Firmware +57 | Medium 6.5 | — | 0 | — | 0.200 (97.5th percentile) | TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. | ||
CVE-2025-55177 | Facebook Whatsapp Business For iOS +4 | Medium 5.4 | — | 1 | — | 0.135 (96.5th percentile) | Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, and WhatsApp for Mac v2.25.21.78 could have allowed… | ||
CVE-2020-24363 | — | High 8.8 | — | 0 | — | 0.222 (97.7th percentile) | TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. | ||
CVE-2025-57819 | Freepbx Endpoint +1 | Critical 9.8 | — | 37 | Yes | 0.952 (99.9th percentile) | FreePBX is an open-source web-based graphical user interface. | ||
CVE-2025-7775 | Citrix Netscaler Application Delivery Controller +3 | Critical 9.8 | — | 5 | — | 0.207 (97.5th percentile) | Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy… | ||
CVE-2025-48384 | Apple Xcode +3 | High 8.0 | — | 55 | — | 0.044 (91.4th percentile) | Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. | ||
CVE-2024-8069 | Citrix Session Recording +1 | High 8.0 | — | 2 | — | 0.182 (97.2th percentile) | Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording serv… | ||
CVE-2024-8068 | Citrix Citrix Session Recording +1 | High 8.0 | — | 1 | — | 0.035 (89.2th percentile) | Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server… | ||
CVE-2025-43300 | Apple iOS And Ipados +3 | Critical 10.0 | — | 11 | — | 0.652 (99.3th percentile) | An out-of-bounds write issue was addressed with improved bounds checking. | ||
CVE-2025-54948 | Trendmicro Apex One +1 | Critical 9.4 | — | 1 | — | 0.329 (98.4th percentile) | A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. | ||
CVE-2025-8876 | N-Able N-Central | High 8.8 | — | 1 | — | 0.041 (90.8th percentile) | Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1. | ||
CVE-2025-8875 | N-Able N-Central | High 7.8 | — | 1 | — | 0.023 (83.6th percentile) | Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1. | ||
CVE-2025-8088 | Dtsearch Dtsearch +2 | High 8.8 | Known | 49 | — | 0.943 (99.9th percentile) | A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. | ||
CVE-2013-3893 | Microsoft Internet Explorer +1 | High 8.8 | — | 1 | Yes | 0.876 (99.8th percentile) | Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript s… | ||
CVE-2007-0671 | Microsoft Access +14 | High 8.8 | — | 0 | — | 0.441 (98.8th percentile) | Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack v… | ||
CVE-2022-40799 | Dlink Dnr-322l Firmware +1 | High 8.8 | — | 1 | — | 0.337 (98.4th percentile) | Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device. | ||
CVE-2020-25079 | Dlink Dcs-2530l Firmware +9 | High 8.8 | — | 0 | — | 0.540 (99.0th percentile) | An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. | ||
CVE-2020-25078 | Dlink Dcs-2530l Firmware +9 | High 7.5 | — | 4 | — | 0.975 (99.9th percentile) | An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. | ||
CVE-2025-20337 | Cisco Cisco Identity Services Engine Software +3 | Critical 10.0 | — | 1 | — | 0.745 (99.5th percentile) | A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. | ||
CVE-2025-20281 | Cisco Cisco Identity Services Engine Software +2 | Critical 10.0 | — | 4 | — | 0.976 (99.9th percentile) | A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. | ||
CVE-2023-2533 | Papercut Papercut Mf +2 | High 8.4 | — | 1 | — | 0.288 (98.2th percentile) | A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable an attacker to alter security settings or execute a… | ||
CVE-2025-6558 | Apple Ipados +9 | High 8.8 | — | 2 | — | 0.109 (95.9th percentile) | Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. | ||
CVE-2025-54309 | Crushftp Crushftp | Critical 9.0 | — | 11 | — | 0.935 (99.8th percentile) | CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers to obtain admin access via HTTPS, as expl… | ||
CVE-2025-49706 | Microsoft Microsoft Sharepoint Enterprise Server 2016 +4 | Medium 6.5 | Known | 1 | Yes | 0.991 (99.9th percentile) | Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | ||
CVE-2025-49704 | Microsoft Microsoft Sharepoint Enterprise Server 2016 +2 | High 8.8 | Known | 0 | Yes | 1.000 (100.0th percentile) | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||
CVE-2025-2776 | Sysaid Sysaid +1 | Critical 9.3 | — | 1 | — | 0.652 (99.3th percentile) | SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover… | ||
CVE-2025-2775 | Sysaid Sysaid +1 | Critical 9.3 | — | 1 | — | 0.432 (98.7th percentile) | SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing functionality, allowing for administrator account takeover a… | ||
CVE-2025-53770 | Microsoft Microsoft Sharepoint Enterprise Server 2016 +3 | Critical 9.8 | Known | 61 | Yes | 1.000 (100.0th percentile) | Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. | ||
CVE-2025-25257 | Fortinet Fortiweb | Critical 9.8 | — | 15 | — | 0.999 (100.0th percentile) | An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7, Fo… |