CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 361–420 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2025-9377 TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability HIGH7.2	TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability TP-Link Multiple Routers	HIGH 7.2	41.3%	3 Sep 2025	—
CVE-2020-24363 TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability HIGH8.8	TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability TP-Link TL-WA855RE	HIGH 8.8	22.2%	2 Sep 2025	—
CVE-2025-55177 Meta Platforms WhatsApp Incorrect Authorization Vulnerability MEDIUM5.4	Meta Platforms WhatsApp Incorrect Authorization Vulnerability Meta Platforms WhatsApp	MEDIUM 5.4	13.5%	2 Sep 2025	—
CVE-2025-57819 Sangoma FreePBX Authentication Bypass Vulnerability CRITICAL9.8	Sangoma FreePBX Authentication Bypass Vulnerability Sangoma FreePBX	CRITICAL 9.8	95.2%	29 Aug 2025	—
CVE-2025-7775 Citrix NetScaler Memory Overflow Vulnerability CRITICAL9.8	Citrix NetScaler Memory Overflow Vulnerability Citrix NetScaler	CRITICAL 9.8	20.7%	26 Aug 2025	—
CVE-2025-48384 Git Link Following Vulnerability HIGH8	Git Link Following Vulnerability Git Git	HIGH 8	4.4%	25 Aug 2025	—
CVE-2024-8068 Citrix Session Recording Improper Privilege Management Vulnerability HIGH8	Citrix Session Recording Improper Privilege Management Vulnerability Citrix Session Recording	HIGH 8	3.5%	25 Aug 2025	—
CVE-2024-8069 Citrix Session Recording Deserialization of Untrusted Data Vulnerability HIGH8	Citrix Session Recording Deserialization of Untrusted Data Vulnerability Citrix Session Recording	HIGH 8	18.2%	25 Aug 2025	—
CVE-2025-43300 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability CRITICAL10	Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability Apple iOS, iPadOS, and macOS	CRITICAL 10	65.2%	21 Aug 2025	—
CVE-2025-54948 Trend Micro Apex One OS Command Injection Vulnerability CRITICAL9.4	Trend Micro Apex One OS Command Injection Vulnerability Trend Micro Apex One	CRITICAL 9.4	32.9%	18 Aug 2025	—
CVE-2025-8876 N-able N-Central Command Injection Vulnerability HIGH8.8	N-able N-Central Command Injection Vulnerability N-able N-Central	HIGH 8.8	4.1%	13 Aug 2025	—
CVE-2025-8875 N-able N-Central Insecure Deserialization Vulnerability HIGH7.8	N-able N-Central Insecure Deserialization Vulnerability N-able N-Central	HIGH 7.8	2.3%	13 Aug 2025	—
CVE-2025-8088 RARLAB WinRAR Path Traversal Vulnerability HIGH8.8	RARLAB WinRAR Path Traversal Vulnerability RARLAB WinRAR	HIGH 8.8	94%	12 Aug 2025	CISA: known use
CVE-2007-0671 Microsoft Office Excel Remote Code Execution Vulnerability HIGH8.8	Microsoft Office Excel Remote Code Execution Vulnerability Microsoft Office	HIGH 8.8	44.1%	12 Aug 2025	—
CVE-2013-3893 Microsoft Internet Explorer Resource Management Errors Vulnerability HIGH8.8	Microsoft Internet Explorer Resource Management Errors Vulnerability Microsoft Internet Explorer	HIGH 8.8	87.6%	12 Aug 2025	—
CVE-2020-25078 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability HIGH7.5	D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability D-Link DCS-2530L and DCS-2670L Devices	HIGH 7.5	97.5%	5 Aug 2025	—
CVE-2020-25079 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability HIGH8.8	D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability D-Link DCS-2530L and DCS-2670L Devices	HIGH 8.8	54%	5 Aug 2025	—
CVE-2022-40799 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability HIGH8.8	D-Link DNR-322L Download of Code Without Integrity Check Vulnerability D-Link DNR-322L	HIGH 8.8	33.7%	5 Aug 2025	—
CVE-2023-2533 PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability HIGH8.4	PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability PaperCut NG/MF	HIGH 8.4	28.8%	28 Jul 2025	—
CVE-2025-20337 Cisco Identity Services Engine Injection Vulnerability CRITICAL10	Cisco Identity Services Engine Injection Vulnerability Cisco Identity Services Engine	CRITICAL 10	74.5%	28 Jul 2025	—
CVE-2025-20281 Cisco Identity Services Engine Injection Vulnerability CRITICAL10	Cisco Identity Services Engine Injection Vulnerability Cisco Identity Services Engine	CRITICAL 10	97.6%	28 Jul 2025	—
CVE-2025-2775 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability CRITICAL9.3	SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability SysAid On-Prem	CRITICAL 9.3	43.2%	22 Jul 2025	—
CVE-2025-2776 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability CRITICAL9.3	SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability SysAid On-Prem	CRITICAL 9.3	65.2%	22 Jul 2025	—
CVE-2025-6558 Google Chromium ANGLE and GPU Improper Input Validation Vulnerability HIGH8.8	Google Chromium ANGLE and GPU Improper Input Validation Vulnerability Google Chromium	HIGH 8.8	10.9%	22 Jul 2025	—
CVE-2025-54309 CrushFTP Unprotected Alternate Channel Vulnerability CRITICAL9	CrushFTP Unprotected Alternate Channel Vulnerability CrushFTP CrushFTP	CRITICAL 9	93.5%	22 Jul 2025	—
CVE-2025-49704 Microsoft SharePoint Code Injection Vulnerability HIGH8.8	Microsoft SharePoint Code Injection Vulnerability Microsoft SharePoint	HIGH 8.8	100%	22 Jul 2025	Warlock
CVE-2025-49706 Microsoft SharePoint Improper Authentication Vulnerability MEDIUM6.5	Microsoft SharePoint Improper Authentication Vulnerability Microsoft SharePoint	MEDIUM 6.5	99.1%	22 Jul 2025	Warlock
CVE-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL9.8	Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft SharePoint	CRITICAL 9.8	100%	20 Jul 2025	Warlock
CVE-2025-25257 Fortinet FortiWeb SQL Injection Vulnerability CRITICAL9.8	Fortinet FortiWeb SQL Injection Vulnerability Fortinet FortiWeb	CRITICAL 9.8	99.9%	18 Jul 2025	—
CVE-2025-47812 Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability CRITICAL10	Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability Wing FTP Server Wing FTP Server	CRITICAL 10	93.9%	14 Jul 2025	—
CVE-2025-5777 Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability HIGH7.5	Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Citrix NetScaler ADC and Gateway	HIGH 7.5	100%	10 Jul 2025	Dragonforce
CVE-2019-9621 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability HIGH7.5	Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability Synacor Zimbra Collaboration Suite (ZCS)	HIGH 7.5	81%	7 Jul 2025	—
CVE-2019-5418 Rails Ruby on Rails Path Traversal Vulnerability HIGH7.5	Rails Ruby on Rails Path Traversal Vulnerability Rails Ruby on Rails	HIGH 7.5	98.5%	7 Jul 2025	—
CVE-2016-10033 PHPMailer Command Injection Vulnerability CRITICAL9.8	PHPMailer Command Injection Vulnerability PHP PHPMailer	CRITICAL 9.8	99.7%	7 Jul 2025	—
CVE-2014-3931 Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability CRITICAL9.8	Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability Looking Glass Multi-Router Looking Glass (MRLG)	CRITICAL 9.8	29%	7 Jul 2025	—
CVE-2025-6554 Google Chromium V8 Type Confusion Vulnerability HIGH8.1	Google Chromium V8 Type Confusion Vulnerability Google Chromium V8	HIGH 8.1	14.1%	2 Jul 2025	—
CVE-2025-48928 TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability MEDIUM4	TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability TeleMessage TM SGNL	MEDIUM 4	0.6%	1 Jul 2025	—
CVE-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability MEDIUM5.3	TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability TeleMessage TM SGNL	MEDIUM 5.3	12.2%	1 Jul 2025	—
CVE-2025-6543 Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability CRITICAL9.8	Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability Citrix NetScaler ADC and Gateway	CRITICAL 9.8	10.4%	30 Jun 2025	—
CVE-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability MEDIUM6.5	Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Fortinet FortiOS	MEDIUM 6.5	6.6%	25 Jun 2025	Akira
CVE-2024-0769 D-Link DIR-859 Router Path Traversal Vulnerability MEDIUM5.3	D-Link DIR-859 Router Path Traversal Vulnerability D-Link DIR-859 Router	MEDIUM 5.3	82.7%	25 Jun 2025	—
CVE-2024-54085 AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability CRITICAL9.8	AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability AMI MegaRAC SPx	CRITICAL 9.8	60.7%	25 Jun 2025	—
CVE-2023-0386 Linux Kernel Improper Ownership Management Vulnerability HIGH7.8	Linux Kernel Improper Ownership Management Vulnerability Linux Kernel	HIGH 7.8	7.9%	17 Jun 2025	—
CVE-2023-33538 TP-Link Multiple Routers Command Injection Vulnerability HIGH8.8	TP-Link Multiple Routers Command Injection Vulnerability TP-Link Multiple Routers	HIGH 8.8	41.6%	16 Jun 2025	—
CVE-2025-43200 Apple Multiple Products Unspecified Vulnerability MEDIUM4.2	Apple Multiple Products Unspecified Vulnerability Apple Multiple Products	MEDIUM 4.2	1.2%	16 Jun 2025	—
CVE-2025-33053 Microsoft Windows External Control of File Name or Path Vulnerability HIGH8.8	Microsoft Windows External Control of File Name or Path Vulnerability Microsoft Windows	HIGH 8.8	87.1%	10 Jun 2025	—
CVE-2025-24016 Wazuh Server Deserialization of Untrusted Data Vulnerability CRITICAL9.9	Wazuh Server Deserialization of Untrusted Data Vulnerability Wazuh Server	CRITICAL 9.9	93.8%	10 Jun 2025	—
CVE-2024-42009 RoundCube Webmail Cross-Site Scripting Vulnerability CRITICAL9.3	RoundCube Webmail Cross-Site Scripting Vulnerability Roundcube Webmail	CRITICAL 9.3	82.9%	9 Jun 2025	—
CVE-2025-32433 Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability CRITICAL10	Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability Erlang Erlang/OTP	CRITICAL 10	98.9%	9 Jun 2025	Thegentlemen
CVE-2025-5419 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability HIGH8.8	Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google Chromium V8	HIGH 8.8	7.5%	5 Jun 2025	—
CVE-2025-21479 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability HIGH8.6	Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Qualcomm Multiple Chipsets	HIGH 8.6	0.8%	3 Jun 2025	—
CVE-2025-21480 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability HIGH8.6	Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Qualcomm Multiple Chipsets	HIGH 8.6	0.4%	3 Jun 2025	—
CVE-2025-27038 Qualcomm Multiple Chipsets Use-After-Free Vulnerability HIGH7.5	Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm Multiple Chipsets	HIGH 7.5	1%	3 Jun 2025	—
CVE-2021-32030 ASUS Routers Improper Authentication Vulnerability CRITICAL9.8	ASUS Routers Improper Authentication Vulnerability ASUS Routers	CRITICAL 9.8	99.4%	2 Jun 2025	—
CVE-2025-3935 ConnectWise ScreenConnect Improper Authentication Vulnerability HIGH8.1	ConnectWise ScreenConnect Improper Authentication Vulnerability ConnectWise ScreenConnect	HIGH 8.1	3.6%	2 Jun 2025	—
CVE-2025-35939 Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability MEDIUM5.3	Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability Craft CMS Craft CMS	MEDIUM 5.3	1.4%	2 Jun 2025	—
CVE-2024-56145 Craft CMS Code Injection Vulnerability CRITICAL9.8	Craft CMS Code Injection Vulnerability Craft CMS Craft CMS	CRITICAL 9.8	97.5%	2 Jun 2025	—
CVE-2023-39780 ASUS RT-AX55 Routers OS Command Injection Vulnerability HIGH8.8	ASUS RT-AX55 Routers OS Command Injection Vulnerability ASUS RT-AX55 Routers	HIGH 8.8	39.5%	2 Jun 2025	—
CVE-2025-4632 Samsung MagicINFO 9 Server Path Traversal Vulnerability CRITICAL9.8	Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung MagicINFO 9 Server	CRITICAL 9.8	24.1%	22 May 2025	—
CVE-2023-38950 ZKTeco BioTime Path Traversal Vulnerability HIGH7.5	ZKTeco BioTime Path Traversal Vulnerability ZKTeco BioTime	HIGH 7.5	92.5%	19 May 2025	—

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.