CVEs: Exploit-DB, page 4
582 CVEs with a public exploit on Exploit-DB, sorted by threat level then EPSS. Showing 361-480. Use search to combine filters.
HIGH 8.4
Exploit-DBATT&CK inferred
CVE-2025-47957CVE-2025-47957: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code lo…
microsoft · 365 apps · EPSS 1.31% · Threat 49HIGH 8.3
Exploit-DBATT&CK inferred
CVE-2025-68137CVE-2025-68137: EVerest is an EV charging software stack. Prior to version 2025.10.0, an integer overflow …
linuxfoundation · everest · EPSS 1.30% · Threat 49MEDIUM 6.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-50154CVE-2025-50154: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows…
microsoft · windows 10 1507 · EPSS 29.77% · Threat 48HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2025-20125CVE-2025-20125: A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with …
cisco · identity services engine · EPSS 16.36% · Threat 48HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2024-44871CVE-2024-44871: An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0…
mozilo · mozilocms · EPSS 16.24% · Threat 48HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2021-43579CVE-2021-43579: A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote c…
htmldoc project · htmldoc · EPSS 7.35% · Threat 48HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-32023CVE-2025-32023: Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.…
redis · redis · EPSS 6.47% · Threat 48HIGH 7.2
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-14558CVE-2025-14558: The rtsol(8) and rtsold(8) programs do not validate the domain search list options provide…
freebsd · freebsd · EPSS 6.38% · Threat 48HIGH 8.1
Exploit-DBATT&CK inferred
CVE-2024-51774CVE-2024-51774: qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation…
qbittorrent · qbittorrent · EPSS 3.30% · Threat 48HIGH 8.1
Exploit-DBATT&CK inferred
CVE-2024-0399CVE-2024-0399: The WooCommerce Customers Manager WordPress plugin before 29.7 does not properly sanitise …
vanquish · woocommerce customers manager · EPSS 2.88% · Threat 48HIGH 8.1
Exploit-DBATT&CK inferred
CVE-2026-25994CVE-2026-25994: PJSIP is a free and open source multimedia communication library written in C. In 2.16 and…
pjsip · pjsip · EPSS 2.25% · Threat 48HIGH 8.1
Exploit-DBATT&CK inferred
CVE-2026-42471CVE-2026-42471: Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The sync-invoke …
Unknown · · EPSS 1.91% · Threat 48HIGH 8.2
Exploit-DBATT&CK inferred
CVE-2024-47773CVE-2024-47773: Discourse is an open source platform for community discussion. An attacker can make severa…
discourse · discourse · EPSS 1.66% · Threat 48HIGH 8.1
Exploit-DBATT&CK inferred
CVE-2025-28062CVE-2025-28062: A Cross-Site Request Forgery (CSRF) vulnerability was discovered in ERPNEXT 14.82.1 and 14…
frappe · erpnext · EPSS 0.80% · Threat 48MEDIUM 6.7
Exploit-DBATT&CK inferred
CVE-2025-47228CVE-2025-47228: In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell…
Unknown · · EPSS 23.08% · Threat 47HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2023-1545CVE-2023-1545: SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.
teampass · teampass · EPSS 8.35% · Threat 47HIGH 7.7
Exploit-DBATT&CK inferred
CVE-2025-46822CVE-2025-46822: OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets,…
Unknown · · EPSS 4.07% · Threat 47HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2024-23346CVE-2024-23346: Pymatgen (Python Materials Genomics) is an open-source Python library for materials analys…
materialsvirtuallab · pymatgen · EPSS 3.85% · Threat 47HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-27751CVE-2025-27751: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code l…
microsoft · 365 apps · EPSS 2.48% · Threat 47HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-47175CVE-2025-47175: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute c…
microsoft · 365 apps · EPSS 2.39% · Threat 47HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-47165CVE-2025-47165: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code l…
microsoft · 365 apps · EPSS 2.19% · Threat 47HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-49683CVE-2025-49683: Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker…
microsoft · windows 10 1507 · EPSS 2.06% · Threat 47HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-47987CVE-2025-47987: Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attack…
microsoft · windows 10 1507 · EPSS 1.79% · Threat 47HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2024-21111CVE-2024-21111: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor…
oracle · vm virtualbox · EPSS 1.78% · Threat 47MEDIUM 6.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-24071CVE-2025-24071: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows…
microsoft · windows 10 1507 · EPSS 23.33% · Threat 46MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2024-21320CVE-2024-21320: Windows Themes Spoofing Vulnerability
microsoft · windows 10 1507 · EPSS 22.60% · Threat 46MEDIUM 6.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2024-38200CVE-2024-38200: Microsoft Office Spoofing Vulnerability
microsoft · 365 apps · EPSS 20.45% · Threat 46MEDIUM 6.9
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-5548CVE-2025-5548: A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. …
freefloat · freefloat ftp server · EPSS 14.99% · Threat 46HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-26980CVE-2026-26980: Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthe…
ghost · ghost · EPSS 5.57% · Threat 46HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2025-31131CVE-2025-31131: YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path tra…
yeswiki · yeswiki · EPSS 5.47% · Threat 46HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-0737CVE-2024-0737: A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. T…
xlightftpd · xlight ftp server · EPSS 4.20% · Threat 46HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2025-49741CVE-2025-49741: No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker t…
microsoft · edge chromium · EPSS 3.91% · Threat 46HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-60188CVE-2025-60188: Insertion of Sensitive Information Into Sent Data vulnerability in Vito Peleg Atarim atari…
Unknown · · EPSS 3.73% · Threat 46HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2023-45131CVE-2023-45131: Discourse is an open source platform for community discussion. New chat messages can be re…
discourse · discourse · EPSS 3.72% · Threat 46HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-0723CVE-2024-0723: A vulnerability was found in freeSSHd 1.0.9 on Windows. It has been classified as problema…
freesshd · freesshd · EPSS 3.65% · Threat 46HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-0725CVE-2024-0725: A vulnerability was found in ProSSHD 1.2 on Windows. It has been declared as problematic. …
prosshd · prosshd · EPSS 3.65% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-59254CVE-2025-59254: Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to el…
microsoft · windows 10 1507 · EPSS 1.11% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2026-21250CVE-2026-21250: Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate…
microsoft · windows 11 24h2 · EPSS 1.11% · Threat 46HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-6018CVE-2025-6018: A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within …
suse · pam-config · EPSS 1.10% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-1731CVE-2025-1731: An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel U…
zyxel · uos · EPSS 0.94% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-47161CVE-2025-47161: Improper access control in Microsoft Defender for Endpoint allows an authorized attacker t…
microsoft · defender for endpoint · EPSS 0.84% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2026-23231CVE-2026-23231: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables:…
linux · linux kernel · EPSS 0.84% · Threat 46HIGH 7.7
Exploit-DBATT&CK inferred
CVE-2024-43687CVE-2024-43687: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'…
microchip · timeprovider 4100 firmware · EPSS 0.83% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2026-33641CVE-2026-33641: Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.3, G…
nicolargo · glances · EPSS 0.78% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-37928CVE-2025-37928: In the Linux kernel, the following vulnerability has been resolved: dm-bufio: don't sched…
linux · linux kernel · EPSS 0.74% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-49730CVE-2025-49730: Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allow…
microsoft · windows 10 1507 · EPSS 0.68% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2026-48778CVE-2026-48778: Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <GUIConfig n…
notepad-plus-plus · notepad\+\+ · EPSS 0.62% · Threat 46HIGH 7.7
Exploit-DBATT&CK inferred
CVE-2026-36355CVE-2026-36355: The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions th…
Unknown · · EPSS 0.56% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-40271CVE-2025-40271: In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in p…
Unknown · · EPSS 0.46% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2026-36213CVE-2026-36213: An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate pr…
Unknown · · EPSS 0.38% · Threat 46HIGH 7.1
Exploit-DBATT&CK inferred
CVE-2024-12342CVE-2024-12342: A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as criti…
Unknown · · EPSS 9.37% · Threat 45HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2021-28976CVE-2021-28976: Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via …
get-simple · getsimplecms · EPSS 7.55% · Threat 45HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2019-10652CVE-2019-10652: An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated adminis…
flatcore · flatcore · EPSS 6.96% · Threat 45HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2020-20969CVE-2020-20969: File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitra…
pluck-cms · pluck · EPSS 6.21% · Threat 45HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2020-5509CVE-2020-5509: PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in …
phpgurukul · car rental portal · EPSS 5.81% · Threat 45HIGH 7.4
Exploit-DBATT&CK inferred
CVE-2025-7795CVE-2025-7795: A vulnerability, which was classified as critical, has been found in Tenda FH451 1.0.0.9. …
tenda · fh451 firmware · EPSS 3.43% · Threat 45HIGH 7.4
Exploit-DBATT&CK inferred
CVE-2025-10666CVE-2025-10666: A security flaw has been discovered in D-Link DIR-825 up to 2.10. Affected by this vulnera…
dlink · dir-825 firmware · EPSS 3.37% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-25732CVE-2026-25732: NiceGUI is a Python-based UI framework. Prior to 3.7.0, NiceGUI's FileUpload.name property…
zauberzeug · nicegui · EPSS 3.28% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-53582CVE-2024-53582: An issue found in the Copy and View functions in the File Manager component of OpenPanel v…
openpanel · openpanel · EPSS 3.27% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-42471CVE-2024-42471: actions/artifact is the GitHub ToolKit for developing GitHub Actions. Versions of `action…
github · actions\/artifact · EPSS 3.22% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-23733CVE-2024-23733: The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG …
Unknown · · EPSS 2.42% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-12905CVE-2024-12905: An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation …
Unknown · · EPSS 2.30% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2025-60751CVE-2025-60751: GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode.
Unknown · · EPSS 2.28% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-24486CVE-2026-24486: Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Pa…
fastapiexpert · python-multipart · EPSS 2.21% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-34474CVE-2026-34474: Sensitive data exposure leading to admin/WLAN credential leak in ZTE ZXHN H298A 1.1 and H1…
Unknown · · EPSS 2.08% · Threat 45HIGH 7.4
Exploit-DBATT&CK inferred
CVE-2022-0088CVE-2022-0088: Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.
yourls · yourls · EPSS 1.99% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-46522CVE-2026-46522: ImageMagick is free and open-source software used for editing and manipulating digital ima…
imagemagick · imagemagick · EPSS 1.93% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-55584CVE-2026-55584: phpSysInfo is a customizable PHP script that displays system information. Prior to 3.4.6, …
Unknown · · EPSS 1.91% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-34473CVE-2026-34473: Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A,…
Unknown · · EPSS 1.87% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-51134CVE-2026-51134: The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Tr…
Unknown · · EPSS 1.74% · Threat 45HIGH 7.6
Exploit-DBATT&CK inferred
CVE-2026-44680CVE-2026-44680: MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity M…
Unknown · · EPSS 1.29% · Threat 45HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-3180CVE-2026-3180: The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for Wo…
Unknown · · EPSS 0.99% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2025-10042CVE-2025-10042: The Quiz Maker plugin for WordPress is vulnerable to SQL Injection via spoofed IP headers …
ays-pro · quiz maker · EPSS 0.94% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-25961CVE-2026-25961: SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF's upda…
sumatrapdfreader · sumatrapdf · EPSS 0.48% · Threat 45HIGH 7.6
Exploit-DBATT&CK inferred
CVE-2025-65027CVE-2025-65027: RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections wi…
romm.app · romm · EPSS 0.33% · Threat 45MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2025-27533CVE-2025-27533: Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During unma…
apache · activemq · EPSS 8.96% · Threat 44HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2024-33896CVE-2024-33896: Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vu…
hms-networks · ewon cosy\+ firmware · EPSS 4.02% · Threat 44HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2024-0566CVE-2024-0566: The Smart Manager WordPress plugin before 8.28.0 does not properly sanitise and escape a p…
storeapps · smart manager · EPSS 3.30% · Threat 44HIGH 7.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-22241CVE-2026-22241: The Open eClass platform (formerly known as GUnet eClass) is a complete course management …
openeclass · openeclass · EPSS 3.26% · Threat 44HIGH 7.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-24076CVE-2025-24076: Improper access control in Windows Cross Device Service allows an authorized attacker to e…
microsoft · windows 11 22h2 · EPSS 3.21% · Threat 44HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2023-1211CVE-2023-1211: SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2.
phpipam · phpipam · EPSS 3.05% · Threat 44HIGH 7.3
Exploit-DBATT&CK inferred
CVE-2025-1550CVE-2025-1550: The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=…
keras · keras · EPSS 2.63% · Threat 44HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2025-48868CVE-2025-48868: Horilla is a free and open source Human Resource Management System (HRMS). An authenticate…
horilla · horilla · EPSS 2.47% · Threat 44HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2024-55889CVE-2024-55889: phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability e…
phpmyfaq · phpmyfaq · EPSS 2.19% · Threat 44HIGH 7.3
Exploit-DBATT&CK inferred
CVE-2025-55912CVE-2025-55912: An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exp…
oxygenz · clipbucket · EPSS 1.53% · Threat 44HIGH 7.3
Exploit-DBATT&CK inferred
CVE-2026-21244CVE-2026-21244: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute cod…
microsoft · windows 10 1607 · EPSS 1.33% · Threat 44HIGH 7.3
Exploit-DBATT&CK inferred
CVE-2026-21248CVE-2026-21248: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute cod…
microsoft · windows 10 1607 · EPSS 1.33% · Threat 44HIGH 7.3
Exploit-DBATT&CK inferred
CVE-2025-45542CVE-2025-45542: SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project…
vishalmathur · cloudclassroom-php project · EPSS 1.09% · Threat 44HIGH 7.3
Exploit-DBATT&CK inferred
CVE-2025-14018CVE-2025-14018: Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura a…
Unknown · · EPSS 0.45% · Threat 44HIGH 7.1
Exploit-DBATT&CK inferred
CVE-2026-34472CVE-2026-34472: Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_…
zte · zxhn h188a firmware · EPSS 2.27% · Threat 43HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2025-57642CVE-2025-57642: A Shell Upload vulnerability in Tourism Management System 2.0 allows an attacker to upload…
sohamjuhin · tourism management system · EPSS 1.59% · Threat 43HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2026-54646CVE-2026-54646: CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/maintenance.inde…
Unknown · · EPSS 1.45% · Threat 43HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2026-54647CVE-2026-54647: CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/settings.index.i…
Unknown · · EPSS 1.45% · Threat 43HIGH 7.1
Exploit-DBATT&CK inferred
CVE-2024-41357CVE-2024-41357: phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edi…
phpipam · phpipam · EPSS 1.12% · Threat 43HIGH 7.1
Exploit-DBATT&CK inferred
CVE-2024-13946CVE-2024-13946: DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the …
Unknown · · EPSS 1.09% · Threat 43HIGH 7.1
Exploit-DBATT&CK inferred
CVE-2026-49069CVE-2026-49069: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne…
Unknown · · EPSS 0.93% · Threat 43HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2024-48844CVE-2024-48844: Denial of Service vulnerabilities where found providing a potiential for device service di…
abb · aspect-ent-2 firmware · EPSS 0.87% · Threat 43HIGH 7.1
Exploit-DBATT&CK inferred
CVE-2024-48846CVE-2024-48846: Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing…
abb · aspect-ent-2 firmware · EPSS 0.64% · Threat 43MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2024-48852CVE-2024-48852: Insertion of Sensitive Information into Log File vulnerability observed in FLEXON. Some in…
Unknown · · EPSS 2.45% · Threat 42MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2025-4255CVE-2025-4255: A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affe…
pcman · ftp server · EPSS 2.14% · Threat 42MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2025-34282CVE-2025-34282: ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in…
thingsboard · thingsboard · EPSS 1.82% · Threat 42MEDIUM 6.8
Exploit-DBATT&CK inferred
CVE-2024-23922CVE-2024-23922: Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerabilit…
sony · xav-ax5500 firmware · EPSS 1.76% · Threat 42MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2025-4871CVE-2025-4871: A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.…
pcman · ftp server · EPSS 1.73% · Threat 42MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2026-58058CVE-2026-58058: Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet …
nmap · nmap · EPSS 1.45% · Threat 42MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2024-10758CVE-2024-10758: A vulnerability, which was classified as critical, was found in code-projects/anirbandutta…
anirbandutta9 · news-buzz · EPSS 1.43% · Threat 42HIGH 7
Exploit-DBATT&CK inferred
CVE-2025-49677CVE-2025-49677: Use after free in Microsoft Brokering File System allows an authorized attacker to elevate…
microsoft · windows 11 22h2 · EPSS 1.12% · Threat 42MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2025-5298CVE-2025-5298: A vulnerability, which was classified as critical, was found in Campcodes Online Hospital …
campcodes · online hospital management system · EPSS 1.01% · Threat 42MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2024-12955CVE-2024-12955: A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and …
phpgurukul · blood bank \& donor management system · EPSS 0.81% · Threat 42HIGH 7
Exploit-DBATT&CK inferred
CVE-2025-49744CVE-2025-49744: Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker t…
microsoft · windows 10 1507 · EPSS 0.81% · Threat 42HIGH 7
Exploit-DBATT&CK inferred
CVE-2026-26157CVE-2026-26157: A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilit…
Unknown · · EPSS 0.69% · Threat 42MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2018-16606CVE-2018-16606: In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to vie…
proconf · proconf · EPSS 5.95% · Threat 41MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2022-46945CVE-2022-46945: Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via th…
nagvis · nagvis · EPSS 4.13% · Threat 41MEDIUM 6.7
Exploit-DBATT&CK inferred
CVE-2025-47171CVE-2025-47171: Improper input validation in Microsoft Office Outlook allows an authorized attacker to exe…
microsoft · 365 apps · EPSS 1.68% · Threat 41MEDIUM 6.3
Exploit-DBATT&CK inferred
CVE-2024-12483CVE-2024-12483: A vulnerability classified as problematic has been found in Dromara UJCMS up to 9.6.3. Thi…
ujcms · ujcms · EPSS 3.56% · Threat 40MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2023-34927CVE-2023-34927: Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) i…
casbin · casdoor · EPSS 3.07% · Threat 40MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2026-24849CVE-2026-24849: OpenEMR is a free and open source electronic health records and medical practice managemen…
open-emr · openemr · EPSS 2.17% · Threat 40MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2026-24421CVE-2026-24421: phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below have flawed auth…
phpmyfaq · phpmyfaq · EPSS 1.74% · Threat 40MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2025-51403CVE-2025-51403: A stored cross-site scripting (XSS) vulnerability in the department assignment editing mod…
livehelperchat · live helper chat · EPSS 1.58% · Threat 40MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2024-35539CVE-2024-35539: Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commen…
typecho · typecho · EPSS 1.44% · Threat 40MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2025-55911