CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 301–360 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2025-66644 Array Networks ArrayOS AG OS Command Injection Vulnerability HIGH7.2	Array Networks ArrayOS AG OS Command Injection Vulnerability Array Networks ArrayOS AG	HIGH 7.2	3.3%	8 Dec 2025	—
CVE-2025-55182 Meta React Server Components Remote Code Execution Vulnerability CRITICAL10	Meta React Server Components Remote Code Execution Vulnerability Meta React Server Components	CRITICAL 10	99.7%	5 Dec 2025	Thegentlemen
CVE-2021-26828 OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability HIGH8.8	OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability OpenPLC ScadaBR	HIGH 8.8	39.1%	3 Dec 2025	—
CVE-2025-48633 Android Framework Information Disclosure Vulnerability MEDIUM5.5	Android Framework Information Disclosure Vulnerability Android Framework	MEDIUM 5.5	0.3%	2 Dec 2025	—
CVE-2025-48572 Android Framework Privilege Escalation Vulnerability HIGH7.8	Android Framework Privilege Escalation Vulnerability Android Framework	HIGH 7.8	0.3%	2 Dec 2025	—
CVE-2021-26829 OpenPLC ScadaBR Cross-site Scripting Vulnerability MEDIUM5.4	OpenPLC ScadaBR Cross-site Scripting Vulnerability OpenPLC ScadaBR	MEDIUM 5.4	48.1%	28 Nov 2025	—
CVE-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability CRITICAL9.8	Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability Oracle Fusion Middleware	CRITICAL 9.8	88.6%	21 Nov 2025	—
CVE-2025-13223 Google Chromium V8 Type Confusion Vulnerability HIGH8.8	Google Chromium V8 Type Confusion Vulnerability Google Chromium V8	HIGH 8.8	4.9%	19 Nov 2025	—
CVE-2025-58034 Fortinet FortiWeb OS Command Injection Vulnerability HIGH7.2	Fortinet FortiWeb OS Command Injection Vulnerability Fortinet FortiWeb	HIGH 7.2	54.7%	18 Nov 2025	—
CVE-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability CRITICAL9.8	Fortinet FortiWeb Path Traversal Vulnerability Fortinet FortiWeb	CRITICAL 9.8	91.1%	14 Nov 2025	—
CVE-2025-12480 Gladinet Triofox Improper Access Control Vulnerability CRITICAL9.1	Gladinet Triofox Improper Access Control Vulnerability Gladinet Triofox	CRITICAL 9.1	95.7%	12 Nov 2025	—
CVE-2025-62215 Microsoft Windows Race Condition Vulnerability HIGH7	Microsoft Windows Race Condition Vulnerability Microsoft Windows	HIGH 7	4.5%	12 Nov 2025	—
CVE-2025-9242 WatchGuard Firebox Out-of-Bounds Write Vulnerability CRITICAL9.8	WatchGuard Firebox Out-of-Bounds Write Vulnerability WatchGuard Firebox	CRITICAL 9.8	92.2%	12 Nov 2025	Qilin
CVE-2025-21042 Samsung Mobile Devices Out-of-Bounds Write Vulnerability HIGH8.8	Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung Mobile Devices	HIGH 8.8	35.6%	10 Nov 2025	—
CVE-2025-48703 CWP Control Web Panel OS Command Injection Vulnerability CRITICAL9	CWP Control Web Panel OS Command Injection Vulnerability CWP Control Web Panel	CRITICAL 9	99.7%	4 Nov 2025	—
CVE-2025-11371 Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability HIGH7.5	Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability Gladinet CentreStack and Triofox	HIGH 7.5	92.1%	4 Nov 2025	—
CVE-2025-41244 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability HIGH7.8	Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Broadcom VMware Aria Operations and VMware Tools	HIGH 7.8	15.8%	30 Oct 2025	—
CVE-2025-24893 XWiki Platform Eval Injection Vulnerability CRITICAL9.8	XWiki Platform Eval Injection Vulnerability XWiki Platform	CRITICAL 9.8	100%	30 Oct 2025	—
CVE-2025-6204 Dassault Systèmes DELMIA Apriso Code Injection Vulnerability HIGH8	Dassault Systèmes DELMIA Apriso Code Injection Vulnerability Dassault Systèmes DELMIA Apriso	HIGH 8	76.6%	28 Oct 2025	—
CVE-2025-6205 Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability CRITICAL9.1	Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability Dassault Systèmes DELMIA Apriso	CRITICAL 9.1	67.2%	28 Oct 2025	—
CVE-2025-54236 Adobe Commerce and Magento Improper Input Validation Vulnerability CRITICAL9.1	Adobe Commerce and Magento Improper Input Validation Vulnerability Adobe Commerce and Magento	CRITICAL 9.1	95.4%	24 Oct 2025	—
CVE-2025-59287 Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability CRITICAL9.8	Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability Microsoft Windows	CRITICAL 9.8	100%	24 Oct 2025	—
CVE-2025-61932 Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability CRITICAL9.8	Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability Motex LANSCOPE Endpoint Manager	CRITICAL 9.8	2.8%	22 Oct 2025	—
CVE-2022-48503 Apple Multiple Products Unspecified Vulnerability HIGH8.8	Apple Multiple Products Unspecified Vulnerability Apple Multiple Products	HIGH 8.8	3.2%	20 Oct 2025	—
CVE-2025-2746 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL9.8	Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Kentico Xperience CMS	CRITICAL 9.8	74.1%	20 Oct 2025	—
CVE-2025-2747 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL9.8	Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Kentico Xperience CMS	CRITICAL 9.8	97.2%	20 Oct 2025	—
CVE-2025-33073 Microsoft Windows SMB Client Improper Access Control Vulnerability HIGH8.8	Microsoft Windows SMB Client Improper Access Control Vulnerability Microsoft Windows	HIGH 8.8	82.8%	20 Oct 2025	Thegentlemen
CVE-2025-61884 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability HIGH7.5	Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Oracle E-Business Suite	HIGH 7.5	95.9%	20 Oct 2025	CISA: known use
CVE-2025-54253 Adobe Experience Manager Forms Code Execution Vulnerability CRITICAL10	Adobe Experience Manager Forms Code Execution Vulnerability Adobe Experience Manager (AEM) Forms	CRITICAL 10	80.8%	15 Oct 2025	—
CVE-2025-47827 IGEL OS Use of a Key Past its Expiration Date Vulnerability MEDIUM4.6	IGEL OS Use of a Key Past its Expiration Date Vulnerability IGEL OS	MEDIUM 4.6	5.2%	14 Oct 2025	—
CVE-2025-24990 Microsoft Windows Untrusted Pointer Dereference Vulnerability HIGH7.8	Microsoft Windows Untrusted Pointer Dereference Vulnerability Microsoft Windows	HIGH 7.8	6.5%	14 Oct 2025	—
CVE-2025-59230 Microsoft Windows Improper Access Control Vulnerability HIGH7.8	Microsoft Windows Improper Access Control Vulnerability Microsoft Windows	HIGH 7.8	2.7%	14 Oct 2025	—
CVE-2016-7836 SKYSEA Client View Improper Authentication Vulnerability CRITICAL9.8	SKYSEA Client View Improper Authentication Vulnerability SKYSEA Client View	CRITICAL 9.8	19.2%	14 Oct 2025	—
CVE-2021-43798 Grafana Path Traversal Vulnerability HIGH7.5	Grafana Path Traversal Vulnerability Grafana Labs Grafana	HIGH 7.5	88.5%	9 Oct 2025	—
CVE-2025-27915 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability MEDIUM5.4	Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor Zimbra Collaboration Suite (ZCS)	MEDIUM 5.4	4.1%	7 Oct 2025	—
CVE-2021-22555 Linux Kernel Heap Out-of-Bounds Write Vulnerability HIGH8.3	Linux Kernel Heap Out-of-Bounds Write Vulnerability Linux Kernel	HIGH 8.3	78.7%	6 Oct 2025	—
CVE-2010-3962 Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability HIGH8.1	Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability Microsoft Internet Explorer	HIGH 8.1	96.8%	6 Oct 2025	—
CVE-2021-43226 Microsoft Windows Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	3.3%	6 Oct 2025	CISA: known use
CVE-2013-3918 Microsoft Windows Out-of-Bounds Write Vulnerability HIGH8.8	Microsoft Windows Out-of-Bounds Write Vulnerability Microsoft Windows	HIGH 8.8	73.7%	6 Oct 2025	—
CVE-2011-3402 Microsoft Windows Remote Code Execution Vulnerability HIGH8.8	Microsoft Windows Remote Code Execution Vulnerability Microsoft Windows	HIGH 8.8	78.1%	6 Oct 2025	—
CVE-2010-3765 Mozilla Multiple Products Remote Code Execution Vulnerability CRITICAL9.8	Mozilla Multiple Products Remote Code Execution Vulnerability Mozilla Multiple Products	CRITICAL 9.8	83.2%	6 Oct 2025	—
CVE-2025-61882 Oracle E-Business Suite Unspecified Vulnerability CRITICAL9.8	Oracle E-Business Suite Unspecified Vulnerability Oracle E-Business Suite	CRITICAL 9.8	99.7%	6 Oct 2025	Clop Sinobi +1
CVE-2014-6278 GNU Bash OS Command Injection Vulnerability HIGH8.8	GNU Bash OS Command Injection Vulnerability GNU Bash	HIGH 8.8	99.7%	2 Oct 2025	—
CVE-2017-1000353 Jenkins Remote Code Execution Vulnerability CRITICAL9.8	Jenkins Remote Code Execution Vulnerability Jenkins Jenkins	CRITICAL 9.8	99.7%	2 Oct 2025	—
CVE-2015-7755 Juniper ScreenOS Improper Authentication Vulnerability CRITICAL9.8	Juniper ScreenOS Improper Authentication Vulnerability Juniper ScreenOS	CRITICAL 9.8	61.1%	2 Oct 2025	—
CVE-2025-21043 Samsung Mobile Devices Out-of-Bounds Write Vulnerability HIGH8.8	Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung Mobile Devices	HIGH 8.8	2.2%	2 Oct 2025	—
CVE-2025-4008 Smartbedded Meteobridge Command Injection Vulnerability HIGH8.8	Smartbedded Meteobridge Command Injection Vulnerability Smartbedded Meteobridge	HIGH 8.8	93.3%	2 Oct 2025	—
CVE-2025-32463 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability CRITICAL9.3	Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability Sudo Sudo	CRITICAL 9.3	56.3%	29 Sep 2025	—
CVE-2025-59689 Libraesva Email Security Gateway Command Injection Vulnerability MEDIUM6.1	Libraesva Email Security Gateway Command Injection Vulnerability Libraesva Email Security Gateway	MEDIUM 6.1	2%	29 Sep 2025	—
CVE-2025-10035 Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability CRITICAL10	Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Fortra GoAnywhere MFT	CRITICAL 10	99.8%	29 Sep 2025	CISA: known use
CVE-2025-20352 Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability HIGH7.7	Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Cisco IOS and IOS XE	HIGH 7.7	40.6%	29 Sep 2025	—
CVE-2021-21311 Adminer Server-Side Request Forgery Vulnerability HIGH7.2	Adminer Server-Side Request Forgery Vulnerability Adminer Adminer	HIGH 7.2	98.5%	29 Sep 2025	—
CVE-2025-20362 Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability MEDIUM6.5	Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense	MEDIUM 6.5	86.7%	25 Sep 2025	—
CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability CRITICAL9.9	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense	CRITICAL 9.9	72%	25 Sep 2025	—
CVE-2025-10585 Google Chromium V8 Type Confusion Vulnerability CRITICAL9.8	Google Chromium V8 Type Confusion Vulnerability Google Chromium V8	CRITICAL 9.8	9%	23 Sep 2025	—
CVE-2025-5086 Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability CRITICAL9	Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability Dassault Systèmes DELMIA Apriso	CRITICAL 9	97.1%	11 Sep 2025	—
CVE-2025-38352 Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability HIGH7.8	Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability Linux Kernel	HIGH 7.8	1.4%	4 Sep 2025	—
CVE-2025-48543 Android Runtime Use-After-Free Vulnerability HIGH8.8	Android Runtime Use-After-Free Vulnerability Android Runtime	HIGH 8.8	0.7%	4 Sep 2025	—
CVE-2025-53690 Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability CRITICAL9	Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability Sitecore Multiple Products	CRITICAL 9	60.7%	4 Sep 2025	—
CVE-2023-50224 TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability MEDIUM6.5	TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability TP-Link TL-WR841N	MEDIUM 6.5	20%	3 Sep 2025	—

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.