Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2025-3928 KEV [KEV] Vulnerability in Commvault web-server (CVE-2025-3928)
vulnerability in Commvault web-server (CVE-2025-3928). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-42599 KEV [KEV] Vulnerability in Qualitia active-mail (CVE-2025-42599)
vulnerability in Qualitia active-mail (CVE-2025-42599). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-31201 KEV [KEV] Vulnerability in Apple multiple-products (CVE-2025-31201)
vulnerability in Apple multiple-products (CVE-2025-31201). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-31200 KEV [KEV] Vulnerability in Apple multiple-products (CVE-2025-31200)
vulnerability in Apple multiple-products (CVE-2025-31200). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-24054 KEV [KEV] Vulnerability in Microsoft windows (CVE-2025-24054)
vulnerability in Microsoft windows (CVE-2025-24054). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-23131 Vulnerability in linux (CVE-2025-23131)
vulnerability in linux (CVE-2025-23131). Risk of unauthorized operations or information disclosure.
CVE-2025-22105 Vulnerability in c (CVE-2025-22105)
vulnerability in c (CVE-2025-22105). Risk of unauthorized operations or information disclosure.
CVE-2025-22107 Out-of-Bounds Read in linux (CVE-2025-22107)
vulnerability in linux (CVE-2025-22107). Confidential information can be exposed externally.
CVE-2025-22069 Vulnerability in c (CVE-2025-22069)
vulnerability in c (CVE-2025-22069). Successful exploitation can lead to full system takeover.
CVE-2025-22026 Vulnerability in linux (CVE-2025-22026)
vulnerability in linux (CVE-2025-22026). Risk of unauthorized operations or information disclosure.
CVE-2021-20035 KEV [KEV] OS Command Injection in Sonicwall sma100-appliances (CVE-2021-20035)
OS command injection in Sonicwall sma100-appliances (CVE-2021-20035). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-1782 Code Injection in CVE-2025-1782 (CVE-2025-1782)
code injection in CVE-2025-1782 (CVE-2025-1782). Successful exploitation can lead to full system takeover.
CVE-2025-27391 Vulnerability in apache (CVE-2025-27391)
vulnerability in apache (CVE-2025-27391). Confidential information can be exposed externally.
CVE-2024-53150 KEV [KEV] Out-of-Bounds Read in Linux kernel (CVE-2024-53150)
vulnerability in Linux kernel (CVE-2024-53150). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-53197 KEV [KEV] Out-of-Bounds Write in Linux kernel (CVE-2024-53197)
out-of-bounds write in Linux kernel (CVE-2024-53197). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-26687 Use-After-Free in microsoft (CVE-2025-26687)
vulnerability in microsoft (CVE-2025-26687). Successful exploitation can lead to full system takeover.
CVE-2024-32122 Vulnerability in fortinet (CVE-2024-32122)
vulnerability in fortinet (CVE-2024-32122). Risk of unauthorized operations or information disclosure.
CVE-2025-30406 KEV [KEV] Vulnerability in Gladinet centrestack (CVE-2025-30406)
vulnerability in Gladinet centrestack (CVE-2025-30406). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-29824 KEV [KEV] Use-After-Free in Microsoft windows (CVE-2025-29824)
vulnerability in Microsoft windows (CVE-2025-29824). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-71332 SQL Injection in flowise (CVE-2025-71332)
SQL injection in flowise (CVE-2025-71332). Confidential information can be exposed externally.
CVE-2025-31161 KEV [KEV] Vulnerability in crushftp (CVE-2025-31161)
vulnerability in crushftp (CVE-2025-31161). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Listed in CISA KEV — actively exploited.
CVE-2025-3198 Vulnerability in c (CVE-2025-3198)
vulnerability in c (CVE-2025-3198). Risk of unauthorized operations or information disclosure.
CVE-2025-22457 KEV [KEV] Vulnerability in Ivanti connect-secure (CVE-2025-22457)
vulnerability in Ivanti connect-secure (CVE-2025-22457). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-27427 Authorization Flaw in apache (CVE-2025-27427)
vulnerability in apache (CVE-2025-27427). Risk of unauthorized operations or information disclosure.
CVE-2025-24813 KEV [KEV] Vulnerability in Apache tomcat (CVE-2025-24813)
vulnerability in Apache tomcat (CVE-2025-24813). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-24170 A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13...
A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13...
CVE-2024-20439 KEV [KEV] Vulnerability in Cisco smart-licensing-utility (CVE-2024-20439)
vulnerability in Cisco smart-licensing-utility (CVE-2024-20439). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-58130 Cross-Site Scripting (XSS) in misp-project (CVE-2024-58130)
cross-site scripting in misp-project (CVE-2024-58130). Risk of unauthorized operations or information disclosure.
CVE-2025-2783 KEV [KEV] Vulnerability in Google chromium-mojo (CVE-2025-2783)
vulnerability in Google chromium-mojo (CVE-2025-2783). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-9875 KEV [KEV] Unsafe Deserialization in Sitecore cms-and-experience-platform-xp (CVE-2019-9875)
vulnerability in Sitecore cms-and-experience-platform-xp (CVE-2019-9875). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-9874 KEV [KEV] Unsafe Deserialization in Sitecore cms-and-experience-platform-xp (CVE-2019-9874)
vulnerability in Sitecore cms-and-experience-platform-xp (CVE-2019-9874). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-27809 Vulnerability in arm (CVE-2025-27809)
vulnerability in arm (CVE-2025-27809). Risk of unauthorized operations or information disclosure.
CVE-2025-27810 Vulnerability in arm (CVE-2025-27810)
vulnerability in arm (CVE-2025-27810). Risk of unauthorized operations or information disclosure.
CVE-2025-30154 KEV [KEV] Vulnerability in Reviewdog action-setup-github-action (CVE-2025-30154)
vulnerability in Reviewdog action-setup-github-action (CVE-2025-30154). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-29217 Vulnerability in dos (CVE-2025-29217)
vulnerability in dos (CVE-2025-29217). Risk of unauthorized operations or information disclosure.
CVE-2017-12637 KEV [KEV] Path Traversal in Sap netweaver (CVE-2017-12637)
path traversal in Sap netweaver (CVE-2017-12637). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-48248 KEV [KEV] Vulnerability in Nakivo backup-and-replication (CVE-2024-48248)
vulnerability in Nakivo backup-and-replication (CVE-2024-48248). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-1316 KEV [KEV] OS Command Injection in Edimax ic-7100-ip-camera (CVE-2025-1316)
OS command injection in Edimax ic-7100-ip-camera (CVE-2025-1316). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-24472 KEV [KEV] Vulnerability in Fortinet fortios-and-fortiproxy (CVE-2025-24472)
vulnerability in Fortinet fortios-and-fortiproxy (CVE-2025-24472). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2025-30066 KEV [KEV] Vulnerability in Tj-actions changed-files-github-action (CVE-2025-30066)
vulnerability in Tj-actions changed-files-github-action (CVE-2025-30066). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-52927 Use-After-Free in linux (CVE-2023-52927)
vulnerability in linux (CVE-2023-52927). Successful exploitation can lead to full system takeover.
CVE-2025-24201 KEV [KEV] Out-of-Bounds Write in Apple multiple-products (CVE-2025-24201)
out-of-bounds write in Apple multiple-products (CVE-2025-24201). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-21590 KEV [KEV] Vulnerability in Juniper junos-os (CVE-2025-21590)
vulnerability in Juniper junos-os (CVE-2025-21590). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-21862 Vulnerability in c (CVE-2025-21862)
vulnerability in c (CVE-2025-21862). Risk of unauthorized operations or information disclosure.
CVE-2025-21864 Vulnerability in linux (CVE-2025-21864)
vulnerability in linux (CVE-2025-21864). Risk of unauthorized operations or information disclosure.
CVE-2025-21865 Out-of-Bounds Write in c (CVE-2025-21865)
out-of-bounds write in c (CVE-2025-21865). Risk of unauthorized operations or information disclosure.
CVE-2025-21863 Vulnerability in linux (CVE-2025-21863)
vulnerability in linux (CVE-2025-21863). Successful exploitation can lead to full system takeover.
CVE-2025-21858 Use-After-Free in c (CVE-2025-21858)
vulnerability in c (CVE-2025-21858). Successful exploitation can lead to full system takeover.
CVE-2025-21859 Vulnerability in linux (CVE-2025-21859)
vulnerability in linux (CVE-2025-21859). Risk of unauthorized operations or information disclosure.
CVE-2025-21848 Vulnerability in linux (CVE-2025-21848)
vulnerability in linux (CVE-2025-21848). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →