CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 421–480 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2024-27443 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability MEDIUM6.1	Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor Zimbra Collaboration Suite (ZCS)	MEDIUM 6.1	24.6%	19 May 2025	—
CVE-2025-27920 Srimax Output Messenger Directory Traversal Vulnerability HIGH7.2	Srimax Output Messenger Directory Traversal Vulnerability Srimax Output Messenger	HIGH 7.2	1.9%	19 May 2025	—
CVE-2024-11182 MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability MEDIUM6.1	MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability MDaemon Email Server	MEDIUM 6.1	33.3%	19 May 2025	—
CVE-2025-4428 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH7.2	Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti Endpoint Manager Mobile (EPMM)	HIGH 7.2	88%	19 May 2025	—
CVE-2025-4427 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability MEDIUM5.3	Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability Ivanti Endpoint Manager Mobile (EPMM)	MEDIUM 5.3	99.9%	19 May 2025	—
CVE-2025-42999 SAP NetWeaver Deserialization Vulnerability CRITICAL9.1	SAP NetWeaver Deserialization Vulnerability SAP NetWeaver	CRITICAL 9.1	12.9%	15 May 2025	CISA: known use
CVE-2024-12987 DrayTek Vigor Routers OS Command Injection Vulnerability HIGH7.3	DrayTek Vigor Routers OS Command Injection Vulnerability DrayTek Vigor Routers	HIGH 7.3	98.2%	15 May 2025	—
CVE-2025-32756 Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability CRITICAL9.8	Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability Fortinet Multiple Products	CRITICAL 9.8	30.9%	14 May 2025	—
CVE-2025-32709 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability HIGH7.8	Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft Windows	HIGH 7.8	1.8%	13 May 2025	—
CVE-2025-30397 Microsoft Windows Scripting Engine Type Confusion Vulnerability HIGH7.5	Microsoft Windows Scripting Engine Type Confusion Vulnerability Microsoft Windows	HIGH 7.5	27.3%	13 May 2025	—
CVE-2025-32706 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability HIGH7.8	Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft Windows	HIGH 7.8	2.3%	13 May 2025	—
CVE-2025-32701 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability HIGH7.8	Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft Windows	HIGH 7.8	1.4%	13 May 2025	—
CVE-2025-30400 Microsoft Windows DWM Core Library Use-After-Free Vulnerability HIGH7.8	Microsoft Windows DWM Core Library Use-After-Free Vulnerability Microsoft Windows	HIGH 7.8	1.9%	13 May 2025	—
CVE-2025-47729 TeleMessage TM SGNL Hidden Functionality Vulnerability LOW1.9	TeleMessage TM SGNL Hidden Functionality Vulnerability TeleMessage TM SGNL	LOW 1.9	0.4%	12 May 2025	—
CVE-2024-11120 GeoVision Devices OS Command Injection Vulnerability CRITICAL9.8	GeoVision Devices OS Command Injection Vulnerability GeoVision Multiple Devices	CRITICAL 9.8	28.4%	7 May 2025	—
CVE-2024-6047 GeoVision Devices OS Command Injection Vulnerability CRITICAL9.8	GeoVision Devices OS Command Injection Vulnerability GeoVision Multiple Devices	CRITICAL 9.8	10.1%	7 May 2025	—
CVE-2025-27363 FreeType Out-of-Bounds Write Vulnerability HIGH8.1	FreeType Out-of-Bounds Write Vulnerability FreeType FreeType	HIGH 8.1	27.8%	6 May 2025	—
CVE-2025-3248 Langflow Missing Authentication Vulnerability CRITICAL9.8	Langflow Missing Authentication Vulnerability Langflow Langflow	CRITICAL 9.8	100%	5 May 2025	CISA: known use
CVE-2025-34028 Commvault Command Center Path Traversal Vulnerability CRITICAL10	Commvault Command Center Path Traversal Vulnerability Commvault Command Center	CRITICAL 10	97.6%	2 May 2025	—
CVE-2024-58136 Yiiframework Yii Improper Protection of Alternate Path Vulnerability CRITICAL9	Yiiframework Yii Improper Protection of Alternate Path Vulnerability Yiiframework Yii	CRITICAL 9	87.8%	2 May 2025	—
CVE-2024-38475 Apache HTTP Server Improper Escaping of Output Vulnerability CRITICAL9.1	Apache HTTP Server Improper Escaping of Output Vulnerability Apache HTTP Server	CRITICAL 9.1	100%	1 May 2025	—
CVE-2023-44221 SonicWall SMA100 Appliances OS Command Injection Vulnerability HIGH7.2	SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall SMA100 Appliances	HIGH 7.2	76.3%	1 May 2025	—
CVE-2025-31324 SAP NetWeaver Unrestricted File Upload Vulnerability CRITICAL10	SAP NetWeaver Unrestricted File Upload Vulnerability SAP NetWeaver	CRITICAL 10	99.5%	29 Apr 2025	Qilin
CVE-2025-1976 Broadcom Brocade Fabric OS Code Injection Vulnerability MEDIUM6.7	Broadcom Brocade Fabric OS Code Injection Vulnerability Broadcom Brocade Fabric OS	MEDIUM 6.7	0.7%	28 Apr 2025	—
CVE-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability CRITICAL9.8	Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability Qualitia Active! Mail	CRITICAL 9.8	3.4%	28 Apr 2025	—
CVE-2025-3928 Commvault Web Server Unspecified Vulnerability HIGH8.8	Commvault Web Server Unspecified Vulnerability Commvault Web Server	HIGH 8.8	2.5%	28 Apr 2025	—
CVE-2025-24054 Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability MEDIUM6.5	Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability Microsoft Windows	MEDIUM 6.5	62.3%	17 Apr 2025	—
CVE-2025-31201 Apple Multiple Products Arbitrary Read and Write Vulnerability CRITICAL9.8	Apple Multiple Products Arbitrary Read and Write Vulnerability Apple Multiple Products	CRITICAL 9.8	14%	17 Apr 2025	—
CVE-2025-31200 Apple Multiple Products Memory Corruption Vulnerability CRITICAL9.8	Apple Multiple Products Memory Corruption Vulnerability Apple Multiple Products	CRITICAL 9.8	20.9%	17 Apr 2025	—
CVE-2021-20035 SonicWall SMA100 Appliances OS Command Injection Vulnerability MEDIUM6.5	SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall SMA100 Appliances	MEDIUM 6.5	4.4%	16 Apr 2025	—
CVE-2024-53150 Linux Kernel Out-of-Bounds Read Vulnerability HIGH7.1	Linux Kernel Out-of-Bounds Read Vulnerability Linux Kernel	HIGH 7.1	1.4%	9 Apr 2025	—
CVE-2024-53197 Linux Kernel Out-of-Bounds Access Vulnerability HIGH7.8	Linux Kernel Out-of-Bounds Access Vulnerability Linux Kernel	HIGH 7.8	4.1%	9 Apr 2025	—
CVE-2025-29824 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability HIGH7.8	Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft Windows	HIGH 7.8	19.3%	8 Apr 2025	CISA: known use
CVE-2025-30406 Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability CRITICAL9	Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability Gladinet CentreStack	CRITICAL 9	94.3%	8 Apr 2025	—
CVE-2025-31161 CrushFTP Authentication Bypass Vulnerability CRITICAL9.8	CrushFTP Authentication Bypass Vulnerability CrushFTP CrushFTP	CRITICAL 9.8	100%	7 Apr 2025	CISA: known use
CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability CRITICAL9	Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti Connect Secure, Policy Secure, and ZTA Gateways	CRITICAL 9	100%	4 Apr 2025	CISA: known use
CVE-2025-24813 Apache Tomcat Path Equivalence Vulnerability CRITICAL9.8	Apache Tomcat Path Equivalence Vulnerability Apache Tomcat	CRITICAL 9.8	99.9%	1 Apr 2025	—
CVE-2024-20439 Cisco Smart Licensing Utility Static Credential Vulnerability CRITICAL9.8	Cisco Smart Licensing Utility Static Credential Vulnerability Cisco Smart Licensing Utility	CRITICAL 9.8	97.1%	31 Mar 2025	—
CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability HIGH8.3	Google Chromium Mojo Sandbox Escape Vulnerability Google Chromium Mojo	HIGH 8.3	9.2%	27 Mar 2025	—
CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability HIGH8.8	Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore CMS and Experience Platform (XP)	HIGH 8.8	25.4%	26 Mar 2025	—
CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability CRITICAL9.8	Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore CMS and Experience Platform (XP)	CRITICAL 9.8	83.7%	26 Mar 2025	—
CVE-2025-30154 reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability HIGH8.6	reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability reviewdog action-setup GitHub Action	HIGH 8.6	2.5%	24 Mar 2025	—
CVE-2017-12637 SAP NetWeaver Directory Traversal Vulnerability HIGH7.5	SAP NetWeaver Directory Traversal Vulnerability SAP NetWeaver	HIGH 7.5	95.1%	19 Mar 2025	—
CVE-2024-48248 NAKIVO Backup and Replication Absolute Path Traversal Vulnerability HIGH8.6	NAKIVO Backup and Replication Absolute Path Traversal Vulnerability NAKIVO Backup and Replication	HIGH 8.6	94.4%	19 Mar 2025	—
CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection Vulnerability CRITICAL9.8	Edimax IC-7100 IP Camera OS Command Injection Vulnerability Edimax IC-7100 IP Camera	CRITICAL 9.8	74.5%	19 Mar 2025	—
CVE-2025-30066 tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability HIGH8.6	tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability tj-actions changed-files GitHub Action	HIGH 8.6	72.1%	18 Mar 2025	—
CVE-2025-24472 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability HIGH8.1	Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet FortiOS and FortiProxy	HIGH 8.1	7.2%	18 Mar 2025	CISA: known use
CVE-2025-21590 Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability MEDIUM4.4	Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability Juniper Junos OS	MEDIUM 4.4	1.7%	13 Mar 2025	—
CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability CRITICAL10	Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability Apple Multiple Products	CRITICAL 10	3.8%	13 Mar 2025	—
CVE-2025-24993 Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability HIGH7.8	Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability Microsoft Windows	HIGH 7.8	2.2%	11 Mar 2025	—
CVE-2025-24991 Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability MEDIUM5.5	Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability Microsoft Windows	MEDIUM 5.5	2%	11 Mar 2025	—
CVE-2025-24985 Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability HIGH7.8	Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability Microsoft Windows	HIGH 7.8	3.9%	11 Mar 2025	—
CVE-2025-24984 Microsoft Windows NTFS Information Disclosure Vulnerability MEDIUM4.6	Microsoft Windows NTFS Information Disclosure Vulnerability Microsoft Windows	MEDIUM 4.6	2%	11 Mar 2025	—
CVE-2025-24983 Microsoft Windows Win32k Use-After-Free Vulnerability HIGH7	Microsoft Windows Win32k Use-After-Free Vulnerability Microsoft Windows	HIGH 7	1.9%	11 Mar 2025	—
CVE-2025-26633 Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability HIGH7	Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability Microsoft Windows	HIGH 7	30.4%	11 Mar 2025	CISA: known use
CVE-2024-13161 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CRITICAL9.8	Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti Endpoint Manager (EPM)	CRITICAL 9.8	89.8%	10 Mar 2025	—
CVE-2024-13160 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CRITICAL9.8	Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti Endpoint Manager (EPM)	CRITICAL 9.8	91%	10 Mar 2025	—
CVE-2024-13159 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CRITICAL9.8	Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti Endpoint Manager (EPM)	CRITICAL 9.8	100%	10 Mar 2025	—
CVE-2024-57968 Advantive VeraCore Unrestricted File Upload Vulnerability CRITICAL9.9	Advantive VeraCore Unrestricted File Upload Vulnerability Advantive VeraCore	CRITICAL 9.9	32.3%	10 Mar 2025	—
CVE-2025-25181 Advantive VeraCore SQL Injection Vulnerability MEDIUM5.8	Advantive VeraCore SQL Injection Vulnerability Advantive VeraCore	MEDIUM 5.8	55.5%	10 Mar 2025	—

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.