All CVEs, page 11
1724 CVEs, sorted by threat level then EPSS. Showing 1201-1320. Use search to combine filters.
HIGH 8.8
Public PoCATT&CK inferred
CVE-2024-37054CVE-2024-37054: Deserialization of untrusted data can occur in versions of the MLflow platform running ver…
lfprojects · mlflow · EPSS 0.70% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-56399CVE-2025-56399: alexusmai laravel-file-manager 3.3.1 and before allows an authenticated attacker to achiev…
Unknown · · EPSS 0.60% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-0073CVE-2026-0073: In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual aut…
google · android · EPSS 0.54% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-8451CVE-2026-8451: Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory ove…
citrix · netscaler application delivery controller · EPSS 0.50% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-41651CVE-2026-41651: PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a sec…
packagekit project · packagekit · EPSS 0.46% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-8389CVE-2026-8389: JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed i…
mozilla · firefox · EPSS 0.46% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-6307CVE-2026-6307: Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attac…
google · chrome · EPSS 0.45% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-65817CVE-2025-65817: LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in start_app.sh.
lsc · smart connect indoor ip camera firmware · EPSS 0.34% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-64561CVE-2026-64561: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for i…
Unknown · · EPSS 0.27% · Threat 48HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-74580CVE-2026-74580: In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vrin…
Unknown · · EPSS 0.13% · Threat 48MEDIUM 6.7
Exploit-DBATT&CK inferred
CVE-2025-47228CVE-2025-47228: In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell…
Unknown · · EPSS 23.08% · Threat 47HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2023-1545CVE-2023-1545: SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.
teampass · teampass · EPSS 8.35% · Threat 47MEDIUM 6.9
Metasploit moduleATT&CK inferred
CVE-2025-57788CVE-2025-57788: A vulnerability in a known login mechanism allows unauthenticated attackers to execute API…
commvault · commvault · EPSS 7.76% · Threat 47MEDIUM 6.2
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-21525Microsoft Windows NULL Pointer Dereference Vulnerability
Microsoft · Windows · EPSS 4.83% · Threat 47MEDIUM 6.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-24200Apple iOS and iPadOS Incorrect Authorization Vulnerability
Apple · iOS and iPadOS · EPSS 4.42% · Threat 47HIGH 7.7
Exploit-DBATT&CK inferred
CVE-2025-46822CVE-2025-46822: OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets,…
Unknown · · EPSS 4.07% · Threat 47HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2024-23346CVE-2024-23346: Pymatgen (Python Materials Genomics) is an open-source Python library for materials analys…
materialsvirtuallab · pymatgen · EPSS 3.85% · Threat 47HIGH 7.1
Metasploit moduleATT&CK inferred
CVE-2026-34414CVE-2026-34414: Xerte Online Toolkits versions 3.15 and earlier contain a relative path traversal vulnerab…
Unknown · · EPSS 3.63% · Threat 47HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-27751CVE-2025-27751: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code l…
microsoft · 365 apps · EPSS 2.48% · Threat 47HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-47175CVE-2025-47175: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute c…
microsoft · 365 apps · EPSS 2.39% · Threat 47CRITICAL 9.3
ATT&CK inferred
CVE-2026-114575CVE-2026-114575: A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is…
Unknown · · EPSS 2.21% · Threat 47HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-47165CVE-2025-47165: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code l…
microsoft · 365 apps · EPSS 2.19% · Threat 47HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-49683CVE-2025-49683: Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker…
microsoft · windows 10 1507 · EPSS 2.06% · Threat 47HIGH 8.5
Public PoCATT&CK inferred
CVE-2026-3227CVE-2026-3227: A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, a…
tp-link · tl-wr802n firmware · EPSS 1.88% · Threat 47HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-47987CVE-2025-47987: Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attack…
microsoft · windows 10 1507 · EPSS 1.79% · Threat 47HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2024-21111CVE-2024-21111: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor…
oracle · vm virtualbox · EPSS 1.78% · Threat 47HIGH 8.6
Public PoCATT&CK inferred
CVE-2025-40778CVE-2025-40778: Under certain circumstances, BIND is too lenient when accepting records from answers, allo…
Unknown · · EPSS 0.67% · Threat 47CRITICAL 9.3
ATT&CK inferred
CVE-2022-51026CVE-2022-51026: Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows u…
Unknown · · EPSS 0.61% · Threat 47HIGH 7.3
Metasploit moduleATT&CK inferred
CVE-2024-53326CVE-2024-53326: LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.Auto…
Unknown · · EPSS 0.49% · Threat 47CRITICAL 9.3
ATT&CK inferred
CVE-2021-48016CVE-2021-48016: DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where …
Unknown · · EPSS 0.44% · Threat 47HIGH 8.6
Public PoCATT&CK inferred
CVE-2026-44011CVE-2026-44011: Craft CMS is a content management system (CMS). From 4.0.0 to before 4.17.12 and 5.9.18, C…
Unknown · · EPSS 0.44% · Threat 47CRITICAL 9.4
ATT&CK inferred
CVE-2026-115375CVE-2026-115375: Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability th…
Unknown · · EPSS 0.40% · Threat 47CRITICAL 9.4
ATT&CK inferred
CVE-2026-115377CVE-2026-115377: Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file …
Unknown · · EPSS 0.40% · Threat 47HIGH 8.6
Public PoCATT&CK inferred
CVE-2026-107181CVE-2026-107181: Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in …
Unknown · · EPSS 0.34% · Threat 47CRITICAL 9.4
ATT&CK inferred
CVE-2026-115384CVE-2026-115384: Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vu…
Unknown · · EPSS 0.31% · Threat 47HIGH 8.5
Public PoCATT&CK inferred
CVE-2026-78306CVE-2026-78306: DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an …
Unknown · · EPSS 0.24% · Threat 47CRITICAL 9.3
ATT&CK inferred
CVE-2026-114220CVE-2026-114220: NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerabil…
Unknown · · EPSS 0.16% · Threat 47CRITICAL 9.4
ATT&CK inferred
CVE-2026-115995CVE-2026-115995: A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4.…
Unknown · · EPSS n/a · Threat 47MEDIUM 5.9
Public PoCATT&CK inferred
CVE-2025-26466CVE-2025-26466: A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a p…
openbsd · openssh · EPSS 40.65% · Threat 46MEDIUM 6.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-24071CVE-2025-24071: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows…
microsoft · windows 10 1507 · EPSS 23.33% · Threat 46MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2024-21320CVE-2024-21320: Windows Themes Spoofing Vulnerability
microsoft · windows 10 1507 · EPSS 22.60% · Threat 46HIGH 7
Public PoCATT&CK inferred
CVE-2020-17103CVE-2020-17103: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
microsoft · windows 10 · EPSS 22.15% · Threat 46MEDIUM 6.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2024-38200CVE-2024-38200: Microsoft Office Spoofing Vulnerability
microsoft · 365 apps · EPSS 20.45% · Threat 46MEDIUM 6.9
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-5548CVE-2025-5548: A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. …
freefloat · freefloat ftp server · EPSS 14.99% · Threat 46HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-20841CVE-2026-20841: Improper neutralization of special elements used in a command ('command injection') in Win…
microsoft · windows notepad · EPSS 9.01% · Threat 46HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-26980CVE-2026-26980: Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthe…
ghost · ghost · EPSS 5.57% · Threat 46HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2025-31131CVE-2025-31131: YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path tra…
yeswiki · yeswiki · EPSS 5.47% · Threat 46MEDIUM 5.9
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-60137WordPress Core SQL Injection Vulnerability
WordPress · Core · EPSS 5.32% · Threat 46HIGH 8.2
Public PoCATT&CK inferred
CVE-2025-10184CVE-2025-10184: The vulnerability allows any application installed on the device to read SMS/MMS data and …
Unknown · · EPSS 4.32% · Threat 46HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-0737CVE-2024-0737: A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. T…
xlightftpd · xlight ftp server · EPSS 4.20% · Threat 46HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2025-49741CVE-2025-49741: No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker t…
microsoft · edge chromium · EPSS 3.91% · Threat 46HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-60188CVE-2025-60188: Insertion of Sensitive Information Into Sent Data vulnerability in Vito Peleg Atarim atari…
Unknown · · EPSS 3.73% · Threat 46HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2023-45131CVE-2023-45131: Discourse is an open source platform for community discussion. New chat messages can be re…
discourse · discourse · EPSS 3.72% · Threat 46HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-0723CVE-2024-0723: A vulnerability was found in freeSSHd 1.0.9 on Windows. It has been classified as problema…
freesshd · freesshd · EPSS 3.65% · Threat 46HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-0725CVE-2024-0725: A vulnerability was found in ProSSHD 1.2 on Windows. It has been declared as problematic. …
prosshd · prosshd · EPSS 3.65% · Threat 46HIGH 8.1
Public PoCATT&CK inferred
CVE-2026-10795CVE-2026-10795: The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Authen…
Unknown · · EPSS 3.64% · Threat 46HIGH 8.1
Public PoCATT&CK inferred
CVE-2026-5718CVE-2026-5718: The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerab…
Unknown · · EPSS 3.46% · Threat 46HIGH 7
Metasploit moduleATT&CK inferred
CVE-2025-4653CVE-2025-4653: Improper Neutralization of Special Elements in the backup name field may allow OS command …
Unknown · · EPSS 3.35% · Threat 46HIGH 8.2
Public PoCATT&CK inferred
CVE-2026-39363CVE-2026-39363: Vite is a frontend tooling framework for JavaScript. From 6.0.0 to before 6.4.2, 7.3.2, an…
vitejs · vite · EPSS 2.62% · Threat 46MEDIUM 6.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-59689Libraesva Email Security Gateway Command Injection Vulnerability
Libraesva · Email Security Gateway · EPSS 1.86% · Threat 46MEDIUM 6
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-22226VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
VMware · ESXi, Workstation, and Fusion · EPSS 1.77% · Threat 46MEDIUM 6.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-48700Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS) · EPSS 1.71% · Threat 46HIGH 7.2
Metasploit moduleATT&CK inferred
CVE-2025-68109CVE-2025-68109: ChurchCRM is an open-source church management system. In versions prior to 6.5.3, the Data…
churchcrm · churchcrm · EPSS 1.53% · Threat 46HIGH 7.2
Metasploit moduleATT&CK inferred
CVE-2026-39980CVE-2026-39980: OpenCTI is an open source platform for managing cyber threat intelligence knowledge and ob…
citeum · opencti · EPSS 1.31% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-59254CVE-2025-59254: Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to el…
microsoft · windows 10 1507 · EPSS 1.11% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2026-21250CVE-2026-21250: Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate…
microsoft · windows 11 24h2 · EPSS 1.11% · Threat 46HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-6018CVE-2025-6018: A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within …
suse · pam-config · EPSS 1.10% · Threat 46HIGH 7.2
Metasploit moduleATT&CK inferred
CVE-2026-0265CVE-2026-0265: An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an u…
paloaltonetworks · pan-os · EPSS 1.05% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-1731CVE-2025-1731: An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel U…
zyxel · uos · EPSS 0.94% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-47161CVE-2025-47161: Improper access control in Microsoft Defender for Endpoint allows an authorized attacker t…
microsoft · defender for endpoint · EPSS 0.84% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2026-23231CVE-2026-23231: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables:…
linux · linux kernel · EPSS 0.84% · Threat 46HIGH 7.7
Exploit-DBATT&CK inferred
CVE-2024-43687CVE-2024-43687: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'…
microchip · timeprovider 4100 firmware · EPSS 0.83% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2026-33641CVE-2026-33641: Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.3, G…
nicolargo · glances · EPSS 0.78% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-37928CVE-2025-37928: In the Linux kernel, the following vulnerability has been resolved: dm-bufio: don't sched…
linux · linux kernel · EPSS 0.74% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-49730CVE-2025-49730: Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allow…
microsoft · windows 10 1507 · EPSS 0.68% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2026-48778CVE-2026-48778: Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <GUIConfig n…
notepad-plus-plus · notepad\+\+ · EPSS 0.62% · Threat 46HIGH 8.4
Public PoCATT&CK inferred
CVE-2025-3464CVE-2025-3464: A race condition vulnerability exists in Armoury Crate. This vulnerability arises from a T…
Unknown · · EPSS 0.61% · Threat 46HIGH 7.7
Exploit-DBATT&CK inferred
CVE-2026-36355CVE-2026-36355: The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions th…
Unknown · · EPSS 0.56% · Threat 46MEDIUM 6.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-42897Microsoft Exchange Server Cross-Site Scripting Vulnerability
Microsoft · Microsoft · EPSS 0.52% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2025-40271CVE-2025-40271: In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in p…
Unknown · · EPSS 0.46% · Threat 46HIGH 8.4
Public PoCATT&CK inferred
CVE-2026-46529CVE-2026-46529: Atril Document Viewer is the default document reader of the MATE desktop environment for L…
Unknown · · EPSS 0.41% · Threat 46HIGH 7.8
Exploit-DBATT&CK inferred
CVE-2026-36213CVE-2026-36213: An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate pr…
Unknown · · EPSS 0.38% · Threat 46HIGH 8.4
Public PoCATT&CK inferred
CVE-2025-56383CVE-2025-56383: Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL fil…
Unknown · · EPSS 0.38% · Threat 46HIGH 8.4
Public PoCATT&CK inferred
CVE-2025-31710CVE-2025-31710: In engineermode service, there is a possible command injection due to improper input valid…
google · android · EPSS 0.36% · Threat 46HIGH 8.3
Public PoCATT&CK inferred
CVE-2026-10961CVE-2026-10961: Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a …
google · chrome · EPSS 0.27% · Threat 46HIGH 8.4
Public PoCATT&CK inferred
CVE-2026-0047CVE-2026-0047: In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to …
google · android · EPSS 0.14% · Threat 46LOW 2.7Ransomware
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-55550Mitel MiCollab Path Traversal Vulnerability
Mitel · MiCollab · EPSS 38.16% · Threat 45UNKNOWN
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2024-20481Cisco ASA and FTD Denial-of-Service Vulnerability
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) · EPSS 15.87% · Threat 45MEDIUM 5.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2024-8069Citrix Session Recording Deserialization of Untrusted Data Vulnerability
Citrix · Session Recording · EPSS 14.64% · Threat 45MEDIUM 5.3
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-48927TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability
TeleMessage · TM SGNL · EPSS 11.57% · Threat 45HIGH 7.1
Exploit-DBATT&CK inferred
CVE-2024-12342CVE-2024-12342: A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as criti…
Unknown · · EPSS 9.37% · Threat 45HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2021-28976CVE-2021-28976: Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via …
get-simple · getsimplecms · EPSS 7.55% · Threat 45MEDIUM 5.5
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-20805Microsoft Windows Information Disclosure Vulnerability
Microsoft · Windows · EPSS 7.46% · Threat 45HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2019-10652CVE-2019-10652: An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated adminis…
flatcore · flatcore · EPSS 6.96% · Threat 45HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2020-20969CVE-2020-20969: File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitra…
pluck-cms · pluck · EPSS 6.21% · Threat 45HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2020-5509CVE-2020-5509: PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in …
phpgurukul · car rental portal · EPSS 5.81% · Threat 45HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-20817CVE-2026-20817: Improper handling of insufficient permissions or privileges in Windows Error Reporting all…
microsoft · windows 10 21h2 · EPSS 5.42% · Threat 45HIGH 7.4
Exploit-DBATT&CK inferred
CVE-2025-7795CVE-2025-7795: A vulnerability, which was classified as critical, has been found in Tenda FH451 1.0.0.9. …
tenda · fh451 firmware · EPSS 3.43% · Threat 45HIGH 7.4
Exploit-DBATT&CK inferred
CVE-2025-10666CVE-2025-10666: A security flaw has been discovered in D-Link DIR-825 up to 2.10. Affected by this vulnera…
dlink · dir-825 firmware · EPSS 3.37% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-25732CVE-2026-25732: NiceGUI is a Python-based UI framework. Prior to 3.7.0, NiceGUI's FileUpload.name property…
zauberzeug · nicegui · EPSS 3.28% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-53582CVE-2024-53582: An issue found in the Copy and View functions in the File Manager component of OpenPanel v…
openpanel · openpanel · EPSS 3.27% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-42471CVE-2024-42471: actions/artifact is the GitHub ToolKit for developing GitHub Actions. Versions of `action…
github · actions\/artifact · EPSS 3.22% · Threat 45HIGH 8.1
Public PoCATT&CK inferred
CVE-2024-10220CVE-2024-10220: The Kubernetes kubelet component allows arbitrary command execution via specially crafted …
Unknown · · EPSS 3.03% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-23733CVE-2024-23733: The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG …
Unknown · · EPSS 2.42% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-12905CVE-2024-12905: An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation …
Unknown · · EPSS 2.30% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2025-60751CVE-2025-60751: GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode.
Unknown · · EPSS 2.28% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-24486CVE-2026-24486: Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Pa…
fastapiexpert · python-multipart · EPSS 2.21% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-34474CVE-2026-34474: Sensitive data exposure leading to admin/WLAN credential leak in ZTE ZXHN H298A 1.1 and H1…
Unknown · · EPSS 2.08% · Threat 45HIGH 7.4
Exploit-DBATT&CK inferred
CVE-2022-0088CVE-2022-0088: Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.
yourls · yourls · EPSS 1.99% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-46522CVE-2026-46522: ImageMagick is free and open-source software used for editing and manipulating digital ima…
imagemagick · imagemagick · EPSS 1.93% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-55584CVE-2026-55584: phpSysInfo is a customizable PHP script that displays system information. Prior to 3.4.6, …
Unknown · · EPSS 1.91% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-34473CVE-2026-34473: Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A,…
Unknown · · EPSS 1.87% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-51134CVE-2026-51134: The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Tr…
Unknown · · EPSS 1.74% · Threat 45HIGH 8.2
Public PoCATT&CK inferred
CVE-2026-27771CVE-2026-27771: Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer…
Unknown · · EPSS 1.39% · Threat 45HIGH 7.6
Exploit-DBATT&CK inferred
CVE-2026-44680CVE-2026-44680: MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity M…
Unknown · · EPSS 1.29% · Threat 45MEDIUM 6.9
Metasploit moduleATT&CK inferred
CVE-2026-6826CVE-2026-6826: Concrete CMS 9.5.0 and below is vulnerable to unauthenticated file usage disclosure via m…
concretecms · concrete cms · EPSS 1.28% · Threat 45MEDIUM 6.9
Metasploit moduleATT&CK inferred
CVE-2026-41459CVE-2026-41459: Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerab…
Unknown · · EPSS 1.11% · Threat 45HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-3180CVE-2026-3180: The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for Wo…
Unknown · · EPSS 0.99% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2025-10042CVE-2025-10042: The Quiz Maker plugin for WordPress is vulnerable to SQL Injection via spoofed IP headers …
ays-pro · quiz maker · EPSS 0.94% · Threat 45HIGH 8.1
Public PoCATT&CK inferred
CVE-2026-31857