CISA Known Exploited Vulnerabilities catalog (page 5)
Page 5 of 18 of the CISA Known Exploited Vulnerabilities catalog, newest additions first, with PoC counts, Metasploit and EPSS.
Known exploited CVEs, newest addition first (page 5 of 18)
| CVE | Product | Severity | Added to KEV | Due date | Ransomware use | Public PoCs | Metasploit | EPSS | Summary |
|---|---|---|---|---|---|---|---|---|---|
CVE-2025-47812 | Wftpserver Wing FTP Server +1 | Critical 10.0 | — | 22 | Yes | 0.939 (99.8th percentile) | In Wing FTP Server before 7.4.4. | ||
CVE-2025-5777 | Citrix Netscaler Application Delivery Controller +3 | High 7.5 | Known | 34 | — | 1.000 (100.0th percentile) | Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server | ||
CVE-2019-9621 | — | High 7.5 | — | 1 | Yes | 0.810 (99.6th percentile) | Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component. | ||
CVE-2019-5418 | Debian Debian Linux +6 | High 7.5 | — | 13 | Yes | 0.985 (99.9th percentile) | There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the targ… | ||
CVE-2016-10033 | Joomla Joomla\! +3 | Critical 9.8 | — | 21 | Yes | 0.997 (100.0th percentile) | The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (ba… | ||
CVE-2014-3931 | Multi-Router Looking Glass Project Multi-Router Looking Glass +1 | Critical 9.8 | — | 0 | — | 0.290 (98.2th percentile) | fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption. | ||
CVE-2025-6554 | Google Chrome | High 8.1 | — | 12 | — | 0.141 (96.6th percentile) | Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. | ||
CVE-2025-48928 | Smarsh Telemessage +1 | Medium 4.0 | — | 0 | — | 0.006 (47.9th percentile) | The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be includ… | ||
CVE-2025-48927 | Smarsh Telemessage +1 | Medium 5.3 | — | 0 | — | 0.122 (96.2th percentile) | The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025. | ||
CVE-2025-6543 | Citrix Netscaler Application Delivery Controller +3 | Critical 9.8 | — | 4 | — | 0.104 (95.8th percentile) | Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Prox… | ||
CVE-2024-54085 | Ami Megarac-Spx +10 | Critical 9.8 | — | 1 | — | 0.607 (99.2th percentile) | AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. | ||
CVE-2024-0769 | D-Link Dir-859 +1 | Medium 5.3 | — | 0 | — | 0.827 (99.7th percentile) | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. | ||
CVE-2019-6693 | Fortinet Fortigate +1 | Medium 6.5 | Known | 5 | — | 0.066 (93.9th percentile) | Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge… | ||
CVE-2023-0386 | Canonical Ubuntu Linux +8 | High 7.8 | — | 26 | Yes | 0.079 (94.8th percentile) | A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capabl… | ||
CVE-2025-43200 | Apple iOS And Ipados +5 | Medium 4.2 | — | 0 | — | 0.012 (68.2th percentile) | This issue was addressed with improved checks. | ||
CVE-2023-33538 | — | High 8.8 | — | 3 | — | 0.416 (98.7th percentile) | TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm . | ||
CVE-2025-33053 | Microsoft Windows 10 1507 +39 | High 8.8 | — | 6 | Yes | 0.871 (99.8th percentile) | External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network. | ||
CVE-2025-24016 | Wazuh Wazuh | Critical 9.9 | — | 9 | Yes | 0.938 (99.8th percentile) | Wazuh is a free and open source platform used for threat prevention, detection, and response. | ||
CVE-2025-32433 | Cisco Cloud Native Broadband Network Gateway +23 | Critical 10.0 | — | 55 | Yes | 0.989 (99.9th percentile) | Erlang/OTP is a set of libraries for the Erlang programming language. | ||
CVE-2024-42009 | — | Critical 9.3 | — | 6 | — | 0.829 (99.7th percentile) | A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desani… | ||
CVE-2025-5419 | Google Chrome +1 | High 8.8 | — | 8 | — | 0.076 (94.6th percentile) | Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2025-27038 | Qualcomm Ar8031 Firmware +44 | High 7.5 | — | 0 | — | 0.010 (64.4th percentile) | Memory corruption while rendering graphics using Adreno GPU drivers in Chrome. | ||
CVE-2025-21480 | Qualcomm Aqt1000 Firmware +76 | High 8.6 | — | 0 | — | 0.004 (37.4th percentile) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. | ||
CVE-2025-21479 | Qualcomm Aqt1000 Firmware +75 | High 8.6 | — | 18 | — | 0.008 (56.3th percentile) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. | ||
CVE-2025-3935 | Connectwise Screenconnect | High 8.1 | — | 0 | — | 0.036 (89.5th percentile) | ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. | ||
CVE-2025-35939 | Craft Cms +1 | Medium 5.3 | — | 0 | — | 0.014 (72.2th percentile) | Craft CMS stores arbitrary content provided by unauthenticated users in session files. | ||
CVE-2024-56145 | Craftcms Cms +1 | Critical 9.8 | — | 4 | Yes | 0.975 (99.9th percentile) | Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. | ||
CVE-2023-39780 | ASUS Rt-Ax55 +1 | High 8.8 | — | 1 | — | 0.395 (98.6th percentile) | On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. | ||
CVE-2021-32030 | ASUS Gt-Ac2900 Firmware +2 | Critical 9.8 | — | 0 | — | 0.994 (99.9th percentile) | The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticat… | ||
CVE-2025-4632 | Samsung Magicinfo 9 Server +1 | Critical 9.8 | — | 2 | — | 0.241 (97.9th percentile) | Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority. | ||
CVE-2025-4428 | Ivanti Endpoint Manager Mobile | High 7.2 | — | 3 | Yes | 0.880 (99.8th percentile) | Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests. | ||
CVE-2025-4427 | Ivanti Endpoint Manager Mobile | Medium 5.3 | — | 2 | Yes | 0.999 (100.0th percentile) | An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API. | ||
CVE-2025-27920 | Srimax Output Messenger +1 | High 7.2 | — | 0 | — | 0.019 (79.8th percentile) | Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. | ||
CVE-2024-27443 | — | Medium 6.1 | — | 0 | — | 0.246 (97.9th percentile) | An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. | ||
CVE-2024-11182 | Mdaemon Email Server +1 | Medium 6.1 | — | 0 | — | 0.333 (98.4th percentile) | An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. | ||
CVE-2023-38950 | — | High 7.5 | — | 0 | — | 0.925 (99.8th percentile) | A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. | ||
CVE-2025-42999 | SAP Netweaver +1 | Critical 9.1 | Known | 0 | — | 0.129 (96.3th percentile) | SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of conf… | ||
CVE-2024-12987 | Draytek Vigor2960 +3 | High 7.3 | — | 0 | — | 0.982 (99.9th percentile) | A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. | ||
CVE-2025-32756 | Fortinet Forticamera +5 | Critical 9.8 | — | 6 | — | 0.309 (98.3th percentile) | A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7… | ||
CVE-2025-32709 | Microsoft Windows 10 1507 +39 | High 7.8 | — | 1 | — | 0.018 (78.9th percentile) | Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||
CVE-2025-32706 | Microsoft Windows 10 1507 +39 | High 7.8 | — | 0 | — | 0.023 (83.7th percentile) | Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | ||
CVE-2025-32701 | Microsoft Windows 10 1507 +39 | High 7.8 | — | 0 | — | 0.014 (73.0th percentile) | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | ||
CVE-2025-30400 | Microsoft Windows 10 1809 +22 | High 7.8 | — | 1 | — | 0.019 (80.0th percentile) | Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. | ||
CVE-2025-30397 | Microsoft Windows 10 1507 +39 | High 7.5 | — | 2 | — | 0.273 (98.1th percentile) | Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network. | ||
CVE-2025-47729 | Telemessage Archiving Backend +1 | Low 1.9 | — | 0 | — | 0.005 (39.7th percentile) | The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage… | ||
CVE-2024-6047 | Geovision Gv-Bx130 Firmware +39 | Critical 9.8 | — | 0 | — | 0.101 (95.7th percentile) | Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. | ||
CVE-2024-11120 | Geovision Gv-Dsp Lpr Firmware +8 | Critical 9.8 | — | 0 | — | 0.284 (98.1th percentile) | Certain EOL GeoVision devices have an OS Command Injection vulnerability. | ||
CVE-2025-27363 | Debian Debian Linux +1 | High 8.1 | — | 3 | — | 0.278 (98.1th percentile) | An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variab… | ||
CVE-2025-3248 | Langflow Langflow +1 | Critical 9.8 | Known | 34 | Yes | 1.000 (100.0th percentile) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. | ||
CVE-2025-34028 | Commvault Command Center Innovation Release +1 | Critical 10.0 | — | 4 | — | 0.976 (99.9th percentile) | The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path tr… | ||
CVE-2024-58136 | Yiiframework Yii | Critical 9.0 | — | 0 | — | 0.878 (99.8th percentile) | Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025. | ||
CVE-2024-38475 | Apache HTTP Server +7 | Critical 9.1 | — | 6 | — | 1.000 (100.0th percentile) | Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not in… | ||
CVE-2023-44221 | SonicWall Sma100 +5 | High 7.2 | — | 0 | — | 0.762 (99.5th percentile) | Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody'… | ||
CVE-2025-31324 | SAP Netweaver +1 | Critical 10.0 | Known | 24 | — | 0.995 (99.9th percentile) | SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely ha… | ||
CVE-2025-42599 | Qualitia Active\! Mail +1 | Critical 9.8 | — | 0 | — | 0.034 (88.8th percentile) | Active! | ||
CVE-2025-3928 | Commvault Commvault +1 | High 8.8 | — | 0 | — | 0.025 (85.0th percentile) | Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. | ||
CVE-2025-1976 | Broadcom Fabric Operating System +1 | Medium 6.7 | — | 0 | — | 0.007 (53.1th percentile) | Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versi… | ||
CVE-2025-31201 | Apple iOS And Ipados +5 | Critical 9.8 | — | 1 | — | 0.140 (96.6th percentile) | This issue was addressed by removing the vulnerable code. | ||
CVE-2025-31200 | Apple iOS And Ipados +6 | Critical 9.8 | — | 5 | — | 0.209 (97.6th percentile) | A memory corruption issue was addressed with improved bounds checking. | ||
CVE-2025-24054 | Microsoft Windows 10 1507 +37 | Medium 6.5 | — | 14 | — | 0.623 (99.2th percentile) | External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. | ||
CVE-2021-20035 | SonicWall Sma100 +5 | Medium 6.5 | — | 0 | — | 0.044 (91.4th percentile) | Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS. | ||
CVE-2024-53197 | Debian Debian Linux +2 | High 7.8 | — | 0 | — | 0.041 (90.9th percentile) | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations… | ||
CVE-2024-53150 | Debian Debian Linux +2 | High 7.1 | — | 0 | — | 0.014 (71.8th percentile) | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn't check bLength of ea… | ||
CVE-2025-30406 | Gladinet Centrestack | Critical 9.0 | — | 5 | Yes | 0.943 (99.9th percentile) | Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in Mar… | ||
CVE-2025-29824 | Microsoft Windows 10 1507 +39 | High 7.8 | Known | 4 | — | 0.193 (97.4th percentile) | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | ||
CVE-2025-31161 | Crushftp Crushftp | Critical 9.8 | Known | 27 | — | 1.000 (100.0th percentile) | CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy instance is used), as exploited in the wild in March and April 2… | ||
CVE-2025-22457 | Ivanti Connect Secure +2 | Critical 9.0 | Known | 9 | Yes | 1.000 (100.0th percentile) | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthent… | ||
CVE-2025-24813 | Apache Tomcat +3 | Critical 9.8 | — | 73 | Yes | 0.999 (100.0th percentile) | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apach… | ||
CVE-2024-20439 | Cisco Cisco Smart License Utility +1 | Critical 9.8 | — | 0 | — | 0.971 (99.9th percentile) | A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential. This vulnerabili… | ||
CVE-2025-2783 | Google Chrome | High 8.3 | — | 6 | — | 0.092 (95.4th percentile) | Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. | ||
CVE-2019-9875 | — | High 8.8 | — | 0 | — | 0.254 (98.0th percentile) | Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to execute arbitrary code by sending a serialized .NET object in an HTTP POST parame… | ||
CVE-2019-9874 | — | Critical 9.8 | — | 0 | — | 0.837 (99.7th percentile) | Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in Sitecore CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an unauthenticated attacker to execute arbitrar… | ||
CVE-2025-30154 | Reviewdog Action-Ast-Grep +6 | High 8.6 | — | 0 | — | 0.025 (84.7th percentile) | reviewdog/action-setup is a GitHub action that installs reviewdog. | ||
CVE-2025-1316 | Edimax Ic-7100 Firmware +1 | Critical 9.8 | — | 0 | — | 0.745 (99.5th percentile) | Edimax IC-7100 does not properly neutralize requests. | ||
CVE-2024-48248 | Nakivo Backup & Replication Director +1 | High 8.6 | — | 1 | — | 0.944 (99.9th percentile) | NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because… | ||
CVE-2017-12637 | — | High 7.5 | — | 1 | — | 0.951 (99.9th percentile) | Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote attackers to read arbitrary files via a .. | ||
CVE-2025-30066 | Tj-Actions Changed-Files | High 8.6 | — | 2 | — | 0.721 (99.4th percentile) | tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. | ||
CVE-2025-24472 | Fortinet Fortios +1 | High 8.1 | Known | 1 | — | 0.072 (94.4th percentile) | An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 through 7.2.12, 7.0.0 through 7.0.19 may allow a remote… | ||
CVE-2025-24201 | Apple iOS And Ipados +7 | Critical 10.0 | — | 4 | — | 0.038 (90.2th percentile) | An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. | ||
CVE-2025-21590 | Juniper Junos +1 | Medium 4.4 | — | 0 | — | 0.017 (78.0th percentile) | An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. | ||
CVE-2025-26633 | Microsoft Windows 10 1507 +39 | High 7.0 | Known | 2 | — | 0.304 (98.2th percentile) | Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally. | ||
CVE-2025-24993 | Microsoft Windows 10 1507 +39 | High 7.8 | — | 0 | — | 0.022 (82.8th percentile) | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | ||
CVE-2025-24991 | Microsoft Windows 10 1507 +39 | Medium 5.5 | — | 0 | — | 0.020 (81.1th percentile) | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | ||
CVE-2025-24985 | Microsoft Windows 10 1507 +39 | High 7.8 | — | 1 | — | 0.039 (90.3th percentile) | Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. | ||
CVE-2025-24984 | Microsoft Windows 10 1507 +34 | Medium 4.6 | — | 0 | — | 0.020 (80.9th percentile) | Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. | ||
CVE-2025-24983 | Microsoft Windows 10 1507 +16 | High 7.0 | — | 0 | — | 0.019 (79.5th percentile) | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
CVE-2025-25181 | Advantive Veracore | Medium 5.8 | — | 0 | — | 0.548 (99.0th percentile) | A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL commands via the PmSess1 parameter. | ||
CVE-2024-57968 | Advantive Veracore | Critical 9.9 | — | 0 | — | 0.321 (98.3th percentile) | Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users). | ||
CVE-2024-13161 | Ivanti Endpoint Manager | Critical 9.8 | — | 0 | — | 0.898 (99.8th percentile) | Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information. | ||
CVE-2024-13160 | Ivanti Endpoint Manager | Critical 9.8 | — | 0 | — | 0.910 (99.8th percentile) | Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information. | ||
CVE-2024-13159 | Ivanti Endpoint Manager | Critical 9.8 | — | 1 | — | 1.000 (100.0th percentile) | Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information. | ||
CVE-2025-22226 | Esxi +11 | High 7.1 | — | 0 | — | 0.016 (76.5th percentile) | VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be… | ||
CVE-2025-22225 | VMware Cloud Foundation +7 | High 8.2 | Known | 0 | — | 0.010 (63.6th percentile) | VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox. | ||
CVE-2025-22224 | VMware Cloud Foundation +7 | Critical 9.3 | — | 0 | — | 0.016 (75.4th percentile) | VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machi… | ||
CVE-2024-50302 | Debian Debian Linux +5 | Medium 5.5 | — | 0 | — | 0.008 (57.2th percentile) | In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-… | ||
CVE-2024-4885 | Progress Whatsup Gold +1 | Critical 9.8 | — | 1 | — | 0.993 (99.9th percentile) | In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows e… | ||
CVE-2023-20118 | Cisco Cisco Small Business Rv Series Router Firmware +6 | Medium 6.5 | — | 0 | — | 0.541 (99.0th percentile) | A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute ar… | ||
CVE-2022-43939 | Hitachi Vantara Pentaho Business Analytics Server +1 | High 8.6 | — | 0 | Yes | 0.923 (99.8th percentile) | Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented. | ||
CVE-2022-43769 | Hitachi Vantara Pentaho Business Analytics Server +1 | High 8.8 | — | 0 | Yes | 0.977 (99.9th percentile) | Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are inte… | ||
CVE-2018-8639 | Microsoft Windows 10 +23 | High 7.8 | Known | 2 | — | 0.223 (97.7th percentile) | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows… |