All CVEs, page 13
1724 CVEs, sorted by threat level then EPSS. Showing 1441-1560. Use search to combine filters.
HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-39875CVE-2026-39875: A permissions issue was addressed with additional restrictions. This issue is fixed in mac…
apple · macos · EPSS 0.15% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2024-38399CVE-2024-38399: Memory corruption while processing user packets to generate page faults.
qualcomm · wsa8835 firmware · EPSS 0.14% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-29923CVE-2026-29923: The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escal…
Unknown · · EPSS 0.14% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-64468CVE-2026-64468: In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in bi…
Unknown · · EPSS 0.14% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-98260CVE-2026-98260: In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX t…
Unknown · · EPSS 0.13% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-43783CVE-2026-43783: A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 2…
apple · macos · EPSS 0.13% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2023-40130CVE-2023-40130: In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to…
google · android · EPSS 0.11% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-52910CVE-2026-52910: In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport c…
linux · linux kernel · EPSS 0.11% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-49881CVE-2026-49881: In serviceClassExists of InCallController.java, there is a possible arbitrary code executi…
google · android · EPSS 0.10% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-0023CVE-2026-0023: In createSessionInternal of PackageInstallerService.java, there is a possible way for an a…
google · android · EPSS 0.08% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-0091CVE-2026-0091: In multiple locations, there is a possible way to execute code in the launcher process due…
google · android · EPSS 0.07% · Threat 43HIGH 7.1
Public PoCATT&CK inferred
CVE-2025-36911CVE-2025-36911: In key-based pairing, there is a possible ID due to a logic error in the code. This could …
google · android · EPSS 8.41% · Threat 42MEDIUM 5.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2024-8068Citrix Session Recording Improper Privilege Management Vulnerability
Citrix · Session Recording · EPSS 3.48% · Threat 42MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2024-48852CVE-2024-48852: Insertion of Sensitive Information into Log File vulnerability observed in FLEXON. Some in…
Unknown · · EPSS 2.45% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-5287CVE-2025-5287: The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the …
Unknown · · EPSS 2.38% · Threat 42MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2025-4255CVE-2025-4255: A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affe…
pcman · ftp server · EPSS 2.14% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-47227CVE-2025-47227: In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the A…
Unknown · · EPSS 1.92% · Threat 42MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2025-34282CVE-2025-34282: ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in…
thingsboard · thingsboard · EPSS 1.82% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2023-39910CVE-2023-39910: The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 thro…
libbitcoin · libbitcoin explorer · EPSS 1.80% · Threat 42MEDIUM 6.8
Exploit-DBATT&CK inferred
CVE-2024-23922CVE-2024-23922: Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerabilit…
sony · xav-ax5500 firmware · EPSS 1.76% · Threat 42MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2025-4871CVE-2025-4871: A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.…
pcman · ftp server · EPSS 1.73% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-2539CVE-2025-2539: The File Away plugin for WordPress is vulnerable to unauthorized access of data due to a m…
file away project · file away · EPSS 1.69% · Threat 42HIGH 7.6
Public PoCATT&CK inferred
CVE-2025-23369CVE-2025-23369: An improper verification of cryptographic signature vulnerability was identified in GitHub…
github · enterprise server · EPSS 1.62% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-23869CVE-2026-23869: A denial of service vulnerability exists in React Server Components, affecting the followi…
Unknown · · EPSS 1.55% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-23870CVE-2026-23870: A denial of service vulnerability could be triggered by sending specially crafted HTTP req…
facebook · react-server-dom-parcel · EPSS 1.53% · Threat 42MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2026-58058CVE-2026-58058: Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet …
nmap · nmap · EPSS 1.45% · Threat 42MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2024-10758CVE-2024-10758: A vulnerability, which was classified as critical, was found in code-projects/anirbandutta…
anirbandutta9 · news-buzz · EPSS 1.43% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-26686CVE-2025-26686: Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorize…
microsoft · windows 10 1507 · EPSS 1.40% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-67303CVE-2025-67303: An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially …
comfy · comfyui-manager · EPSS 1.39% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-4138CVE-2025-4138: Allows the extraction filter to be ignored, allowing symlink targets to point outside the …
Unknown · · EPSS 1.39% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-5201CVE-2026-5201: A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability …
gnome · gdk-pixbuf · EPSS 1.22% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-29969CVE-2025-29969: Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an author…
microsoft · windows 10 1507 · EPSS 1.16% · Threat 42HIGH 7
Exploit-DBATT&CK inferred
CVE-2025-49677CVE-2025-49677: Use after free in Microsoft Brokering File System allows an authorized attacker to elevate…
microsoft · windows 11 22h2 · EPSS 1.12% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2024-40815CVE-2024-40815: A race condition was addressed with additional validation. This issue is fixed in iOS 17.6…
apple · ipados · EPSS 1.09% · Threat 42MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2025-5298CVE-2025-5298: A vulnerability, which was classified as critical, was found in Campcodes Online Hospital …
campcodes · online hospital management system · EPSS 1.01% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-58726CVE-2025-58726: Improper access control in Windows SMB Server allows an authorized attacker to elevate pri…
microsoft · windows 10 1507 · EPSS 1.01% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-49049CVE-2026-49049: The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated att…
ollyo · helix3 · EPSS 0.99% · Threat 42MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2024-12955CVE-2024-12955: A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and …
phpgurukul · blood bank \& donor management system · EPSS 0.81% · Threat 42HIGH 7
Exploit-DBATT&CK inferred
CVE-2025-49744CVE-2025-49744: Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker t…
microsoft · windows 10 1507 · EPSS 0.81% · Threat 42HIGH 7
Exploit-DBATT&CK inferred
CVE-2026-26157CVE-2026-26157: A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilit…
Unknown · · EPSS 0.69% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-65343CVE-2026-65343: A use after free issue was addressed with improved memory management. This issue is fixed …
apple · ipados · EPSS 0.69% · Threat 42MEDIUM 5.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-66384JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
JFrog · Artifactory · EPSS 0.66% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-28695CVE-2026-28695: Craft is a content management system (CMS). There is an authenticated admin RCE in Craft C…
craftcms · craft cms · EPSS 0.65% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-31635CVE-2026-31635: In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix oversized …
linux · linux kernel · EPSS 0.63% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-28990CVE-2026-28990: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 …
apple · ipados · EPSS 0.52% · Threat 42MEDIUM 5.3
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-96652Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex · Media Server · EPSS 0.46% · Threat 42MEDIUM 5.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-96655Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex · Media Server · EPSS 0.46% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2024-56426CVE-2024-56426: An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990…
samsung · exynos 1080 firmware · EPSS 0.44% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-84543CVE-2026-84543: An out-of-bounds access issue was addressed with improved bounds checking. This issue is f…
apple · macos · EPSS 0.43% · Threat 42HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-0828CVE-2026-0828: Kernel driver ProcessMonitorDriver.sys in Safetica's endpoint client x64 , versions 10.5.7…
Unknown · · EPSS 0.41% · Threat 42MEDIUM 6.7
Public PoCATT&CK inferred
CVE-2023-24932CVE-2023-24932: Secure Boot Security Feature Bypass Vulnerability
microsoft · windows 10 1507 · EPSS 10.56% · Threat 41MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2018-16606CVE-2018-16606: In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to vie…
proconf · proconf · EPSS 5.95% · Threat 41MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2022-46945CVE-2022-46945: Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via th…
nagvis · nagvis · EPSS 4.13% · Threat 41HIGH 7.1
Public PoCATT&CK inferred
CVE-2025-24118CVE-2025-24118: The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.…
apple · ipados · EPSS 3.75% · Threat 41MEDIUM 4.9
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2023-22894Strapi Cleartext Storage of Sensitive Information Vulnerability
Strapi · Strapi · EPSS 3.61% · Threat 41HIGH 7.2
Public PoCATT&CK inferred
CVE-2025-53779CVE-2025-53779: Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privi…
microsoft · windows server 2025 · EPSS 2.70% · Threat 41MEDIUM 6.7
Exploit-DBATT&CK inferred
CVE-2025-47171CVE-2025-47171: Improper input validation in Microsoft Office Outlook allows an authorized attacker to exe…
microsoft · 365 apps · EPSS 1.68% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-31133CVE-2025-31133: runc is a CLI tool for spawning and running containers according to the OCI specification.…
linuxfoundation · runc · EPSS 0.84% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-49144CVE-2025-49144: Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a pri…
Unknown · · EPSS 0.66% · Threat 41HIGH 7.4
Public PoCATT&CK inferred
CVE-2025-59489CVE-2025-59489: Unity Runtime before 2025-10-02 on Android, Windows, macOS, and Linux allows argument inje…
unity · editor · EPSS 0.64% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-52881CVE-2025-52881: runc is a CLI tool for spawning and running containers according to the OCI specification.…
linuxfoundation · runc · EPSS 0.57% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-26125CVE-2025-26125: An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows atta…
Unknown · · EPSS 0.52% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-39459CVE-2025-39459: Incorrect Privilege Assignment vulnerability in contempoinc Real Estate 7 realestate-7 all…
Unknown · · EPSS 0.40% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-8061CVE-2025-8061: A potential insufficient access control vulnerability was reported in the Lenovo Dispatche…
Unknown · · EPSS 0.39% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-27237CVE-2025-27237: In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a pa…
Unknown · · EPSS 0.33% · Threat 41HIGH 7.3
Public PoCATT&CK inferred
CVE-2025-22441CVE-2025-22441: In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a pos…
google · android · EPSS 0.12% · Threat 41MEDIUM 5.3
Public PoCATT&CK inferred
CVE-2024-50629CVE-2024-50629: Improper encoding or escaping of output vulnerability in the webapi component in Synology …
synology · beestation os · EPSS 31.71% · Threat 40MEDIUM 6.3
Exploit-DBATT&CK inferred
CVE-2024-12483CVE-2024-12483: A vulnerability classified as problematic has been found in Dromara UJCMS up to 9.6.3. Thi…
ujcms · ujcms · EPSS 3.56% · Threat 40MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2023-34927CVE-2023-34927: Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) i…
casbin · casdoor · EPSS 3.07% · Threat 40MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2026-24849CVE-2026-24849: OpenEMR is a free and open source electronic health records and medical practice managemen…
open-emr · openemr · EPSS 2.17% · Threat 40MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2026-24421CVE-2026-24421: phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below have flawed auth…
phpmyfaq · phpmyfaq · EPSS 1.74% · Threat 40MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2025-51403CVE-2025-51403: A stored cross-site scripting (XSS) vulnerability in the department assignment editing mod…
livehelperchat · live helper chat · EPSS 1.58% · Threat 40MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2024-35539CVE-2024-35539: Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commen…
typecho · typecho · EPSS 1.44% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2024-7014CVE-2024-7014: EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for …
telegram · telegram · EPSS 1.38% · Threat 40MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2025-55911CVE-2025-55911: An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes …
oxygenz · clipbucket · EPSS 1.07% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2026-46333CVE-2026-46333: In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly sane…
linux · linux kernel · EPSS 0.97% · Threat 40HIGH 7.2
Public PoCATT&CK inferred
CVE-2026-33725CVE-2026-33725: Metabase is an open source business intelligence and embedded analytics tool. In Metabase …
metabase · metabase · EPSS 0.87% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2024-44258CVE-2024-44258: This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 17…
apple · ipados · EPSS 0.75% · Threat 40MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2025-68930CVE-2025-68930: Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain…
traccar · traccar · EPSS 0.56% · Threat 40HIGH 7.2
Public PoCATT&CK inferred
CVE-2026-26026CVE-2026-26026: GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, tem…
glpi-project · glpi · EPSS 0.54% · Threat 40HIGH 7.2
Public PoCATT&CK inferred
CVE-2026-38751CVE-2026-38751: OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in…
devcode · openstamanager · EPSS 0.53% · Threat 40MEDIUM 4.9
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-47729TeleMessage TM SGNL Hidden Functionality Vulnerability
TeleMessage · TM SGNL · EPSS 0.45% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2026-17106CVE-2026-17106: The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompress…
Unknown · · EPSS 0.44% · Threat 40MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2025-57176CVE-2025-57176: On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antenna…
Unknown · · EPSS 0.41% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2026-46243CVE-2026-46243: In the Linux kernel, the following vulnerability has been resolved: smb: client: reject u…
linux · linux kernel · EPSS 0.38% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2026-93485CVE-2026-93485: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne…
Unknown · · EPSS 0.35% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2026-20687CVE-2026-20687: A use after free issue was addressed with improved memory management. This issue is fixed …
apple · ipados · EPSS 0.35% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2025-65018CVE-2025-65018: LIBPNG is a reference library for use in applications that read, create, and manipulate PN…
libpng · libpng · EPSS 0.26% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2026-53361CVE-2026-53361: In the Linux kernel, the following vulnerability has been resolved: af_unix: Set gc_in_pr…
linux · linux kernel · EPSS 0.18% · Threat 40HIGH 7.1
Public PoCATT&CK inferred
CVE-2026-102282CVE-2026-102282: adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior…
Unknown · · EPSS 0.15% · Threat 40MEDIUM 5.3
Public PoCATT&CK inferred
CVE-2020-10136CVE-2020-10136: IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that dec…
cisco · nx-os · EPSS 28.54% · Threat 39MEDIUM 5.3
Public PoCATT&CK inferred
CVE-2026-21852CVE-2026-21852: Claude Code is an agentic coding tool. Prior to version 2.0.65, vulnerability in Claude Co…
anthropic · claude code · EPSS 27.50% · Threat 39MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-60689CVE-2025-60689: An unauthenticated command injection vulnerability exists in the Start_EPI function of the…
linksys · e1200 firmware · EPSS 18.32% · Threat 39MEDIUM 5.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-21876CVE-2026-21876: The OWASP core rule set (CRS) is a set of generic attack detection rules for use with comp…
owasp · owasp modsecurity core rule set · EPSS 17.88% · Threat 39MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2022-3766CVE-2022-3766: Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1…
phpmyfaq · phpmyfaq · EPSS 6.48% · Threat 39MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2020-7656CVE-2020-7656: jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load me…
jquery · jquery · EPSS 6.43% · Threat 39MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2020-15718CVE-2020-15718: RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied inpu…
rosariosis · rosariosis · EPSS 6.30% · Threat 39MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2020-15716CVE-2020-15716: RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied inpu…
rosariosis · rosariosis · EPSS 5.56% · Threat 39MEDIUM 4.6
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-47827IGEL OS Use of a Key Past its Expiration Date Vulnerability
IGEL · IGEL OS · EPSS 4.93% · Threat 39MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2022-4407CVE-2022-4407: Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1…
phpmyfaq · phpmyfaq · EPSS 4.85% · Threat 39MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2023-24657CVE-2023-24657: phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerabilit…
phpipam · phpipam · EPSS 3.90% · Threat 39MEDIUM 6.9
Public PoCATT&CK inferred
CVE-2026-29059CVE-2026-29059: Windmill is an open-source developer platform for internal code: APIs, background jobs, wo…
windmill · windmill · EPSS 2.17% · Threat 39MEDIUM 4.6
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-24984Microsoft Windows NTFS Information Disclosure Vulnerability
Microsoft · Windows · EPSS 1.99% · Threat 39MEDIUM 6.3
Exploit-DBATT&CK inferred
CVE-2024-54761CVE-2024-54761: BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter…
bigantsoft · bigant office messenger 5 · EPSS 1.77% · Threat 39MEDIUM 6.9
Public PoCATT&CK inferred
CVE-2025-0401CVE-2025-0401: A vulnerability classified as critical has been found in 1902756969 reggie 1.0. Affected i…
1902756969 · reggie · EPSS 1.30% · Threat 39MEDIUM 6.3
Exploit-DBATT&CK inferred
CVE-2024-30167CVE-2024-30167: /cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated u…
Unknown · · EPSS 1.14% · Threat 39MEDIUM 6.3
Exploit-DBATT&CK inferred
CVE-2024-7801CVE-2024-7801: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne…
microchip · timeprovider 4100 firmware · EPSS 0.84% · Threat 39HIGH 7
Public PoCATT&CK inferred
CVE-2023-32413CVE-2023-32413: A race condition was addressed with improved state handling. This issue is fixed in watchO…
apple · ipados · EPSS 0.54% · Threat 39HIGH 7
Public PoCATT&CK inferred
CVE-2024-43535CVE-2024-43535: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
microsoft · windows 10 1507 · EPSS 0.53% · Threat 39HIGH 7
Public PoCATT&CK inferred
CVE-2025-6019CVE-2025-6019: A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the …
Unknown · · EPSS 0.48% · Threat 39HIGH 7
Public PoCATT&CK inferred
CVE-2026-21508CVE-2026-21508: Improper authentication in Windows Storage allows an authorized attacker to elevate privil…
microsoft · windows 10 1607 · EPSS 0.45% · Threat 39HIGH 7
Public PoCATT&CK inferred
CVE-2026-50656CVE-2026-50656: Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine…
microsoft · malware protection engine · EPSS 0.37% · Threat 39HIGH 7
Public PoCATT&CK inferred
CVE-2026-20980CVE-2026-20980: Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker…
samsung · android · EPSS 0.26% · Threat 39MEDIUM 6.9
Public PoCATT&CK inferred
CVE-2026-0827CVE-2026-0827: During an internal security assessment, a potential vulnerability was discovered in Lenovo…
lenovo · diagnostics · EPSS 0.21% · Threat 39HIGH 7
Public PoCATT&CK inferred
CVE-2026-83834CVE-2026-83834: Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate pri…
Unknown · · EPSS 0.21% · Threat 39MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2024-8945CVE-2024-8945: A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and class…
fairsketch · rise ultimate project manager · EPSS 15.96% · Threat 38MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2024-30269CVE-2024-30269: DataEase, an open source data visualization and analysis tool, has a database configuratio…
dataease · dataease · EPSS 15.88% · Threat 38MEDIUM 4.3
Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred
CVE-2026-32202Microsoft Windows Protection Mechanism Failure Vulnerability
Microsoft · Windows · EPSS 4.90% · Threat 38MEDIUM 5.3
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2024-28397CVE-2024-28397: An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers t…
Unknown · · EPSS 4.55% · Threat 38MEDIUM 5.4
Metasploit moduleExploit-DBATT&CK inferred
CVE-2025-52367