Known exploited vulnerabilities

Added Sep 25, 2025

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense

Added Sep 23, 2025

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8

Added Sep 11, 2025

Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

Dassault Systèmes · DELMIA Apriso

Added Sep 4, 2025

Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

Linux · Kernel

Added Sep 4, 2025

Android Runtime Use-After-Free Vulnerability

Android · Runtime

Added Sep 4, 2025

Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

Sitecore · Multiple Products

Added Sep 3, 2025

TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

TP-Link · TL-WR841N

Added Sep 3, 2025

TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability

TP-Link · Multiple Routers

Added Sep 2, 2025

TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability

TP-Link · TL-WA855RE

Added Sep 2, 2025

Meta Platforms WhatsApp Incorrect Authorization Vulnerability

Meta Platforms · WhatsApp

Added Aug 29, 2025

Sangoma FreePBX Authentication Bypass Vulnerability

Sangoma · FreePBX

Added Aug 26, 2025

Citrix NetScaler Memory Overflow Vulnerability

Citrix · NetScaler

Added Aug 25, 2025

Citrix Session Recording Improper Privilege Management Vulnerability

Citrix · Session Recording

Added Aug 25, 2025

Citrix Session Recording Deserialization of Untrusted Data Vulnerability

Citrix · Session Recording

Added Aug 25, 2025

Git Link Following Vulnerability

Git · Git

Added Aug 21, 2025

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Apple · iOS, iPadOS, and macOS

Added Aug 18, 2025

Trend Micro Apex One OS Command Injection Vulnerability

Trend Micro · Apex One

Added Aug 13, 2025

N-able N-Central Insecure Deserialization Vulnerability

N-able · N-Central

Added Aug 13, 2025

N-able N-Central Command Injection Vulnerability

N-able · N-Central

Added Aug 12, 2025

Microsoft Office Excel Remote Code Execution Vulnerability

Microsoft · Office

Added Aug 12, 2025

Microsoft Internet Explorer Resource Management Errors Vulnerability

Microsoft · Internet Explorer

Added Aug 12, 2025

RARLAB WinRAR Path Traversal Vulnerability

RARLAB · WinRAR

Added Aug 5, 2025

D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability

D-Link · DCS-2530L and DCS-2670L Devices

Added Aug 5, 2025

D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability

D-Link · DCS-2530L and DCS-2670L Devices

Added Aug 5, 2025

D-Link DNR-322L Download of Code Without Integrity Check Vulnerability

D-Link · DNR-322L

Added Jul 28, 2025

PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

PaperCut · NG/MF

Added Jul 28, 2025

Cisco Identity Services Engine Injection Vulnerability

Cisco · Identity Services Engine

Added Jul 28, 2025

Cisco Identity Services Engine Injection Vulnerability

Cisco · Identity Services Engine

Added Jul 22, 2025

SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

SysAid · SysAid On-Prem

Added Jul 22, 2025

SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

SysAid · SysAid On-Prem

Added Jul 22, 2025

Microsoft SharePoint Code Injection Vulnerability

Microsoft · SharePoint

Added Jul 22, 2025

Microsoft SharePoint Improper Authentication Vulnerability

Microsoft · SharePoint

Added Jul 22, 2025

CrushFTP Unprotected Alternate Channel Vulnerability

CrushFTP · CrushFTP

Added Jul 22, 2025

Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Google · Chromium

Added Jul 20, 2025

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Microsoft · SharePoint

Added Jul 18, 2025

Fortinet FortiWeb SQL Injection Vulnerability

Fortinet · FortiWeb

Added Jul 14, 2025

Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

Wing FTP Server · Wing FTP Server

Added Jul 10, 2025

Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

Citrix · NetScaler ADC and Gateway

Added Jul 7, 2025

Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability

Looking Glass · Multi-Router Looking Glass (MRLG)

Added Jul 7, 2025

PHPMailer Command Injection Vulnerability

PHP · PHPMailer

Added Jul 7, 2025

Rails Ruby on Rails Path Traversal Vulnerability

Rails · Ruby on Rails

Added Jul 7, 2025

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)

Added Jul 2, 2025

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8

Added Jul 1, 2025

TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

TeleMessage · TM SGNL

Added Jul 1, 2025

TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

TeleMessage · TM SGNL

Added Jun 30, 2025

Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability

Citrix · NetScaler ADC and Gateway

Added Jun 25, 2025

Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

Fortinet · FortiOS

Added Jun 25, 2025

D-Link DIR-859 Router Path Traversal Vulnerability

D-Link · DIR-859 Router

Added Jun 25, 2025

AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

AMI · MegaRAC SPx

Added Jun 17, 2025

Linux Kernel Improper Ownership Management Vulnerability

Linux · Kernel