All CVEs, page 14
1724 CVEs, sorted by threat level then EPSS. Showing 1561-1680. Use search to combine filters.
MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2018-25080CVE-2018-25080: A vulnerability, which was classified as problematic, has been found in MobileDetect 2.8.3…
mobiledetect · mobiledetect · EPSS 2.66% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2017-6478CVE-2017-6478: paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/inde…
mangoswebv4 project · mangoswebv4 · EPSS 2.55% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2025-54589CVE-2025-54589: Copyparty is a portable file server. In versions 1.18.6 and below, when accessing the rece…
9001 · copyparty · EPSS 2.39% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2018-1000638CVE-2018-1000638: MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.…
1234n · minicms · EPSS 2.19% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2024-41358CVE-2024-41358: phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import…
phpipam · phpipam · EPSS 1.59% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2025-27840CVE-2025-27840: Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).
espressif · esp32 firmware · EPSS 1.36% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2024-28623CVE-2024-28623: RiteCMS v3.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via th…
ritecms · ritecms · EPSS 1.32% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2025-28121CVE-2025-28121: code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS)…
code-projects · online exam mastering system · EPSS 0.91% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2026-51133CVE-2026-51133: Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104…
Unknown · · EPSS 0.91% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2026-54644CVE-2026-54644: CubeCart is an ecommerce software solution. Prior to 6.7.5, the _errorMessage method in cl…
Unknown · · EPSS 0.90% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2024-42831CVE-2024-42831: A reflected cross-site scripting (XSS) vulnerability in Elaine's Realtime CRM Automation v…
Unknown · · EPSS 0.84% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2024-50861CVE-2024-50861: The ip_mod_dns_key_form.cgi request in GestioIP v3.5.7 is vulnerable to Stored XSS. An att…
gestioip · gestioip · EPSS 0.83% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2026-44376CVE-2026-44376: CubeCart is an ecommerce software solution. Prior to 6.7.0, an unauthenticated Reflected X…
Unknown · · EPSS 0.69% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2025-48804CVE-2025-48804: Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an u…
microsoft · windows 10 1507 · EPSS 0.65% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2026-32223CVE-2026-32223: Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to …
microsoft · windows 11 24h2 · EPSS 0.56% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2026-45585CVE-2026-45585: Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred…
microsoft · windows 11 24h2 · EPSS 0.49% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2025-31702CVE-2025-31702: A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker …
Unknown · · EPSS 0.46% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2024-5909CVE-2024-5909: A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Window…
paloaltonetworks · cortex xdr agent · EPSS 0.41% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2025-27591CVE-2025-27591: A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to t…
facebook · below · EPSS 0.37% · Threat 38MEDIUM 6.7
Public PoCATT&CK inferred
CVE-2023-20564CVE-2023-20564: Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryz…
amd · ryzen master · EPSS 0.30% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2026-40003CVE-2026-40003: ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via US…
zte · zx297520v3 firmware · EPSS 0.25% · Threat 38MEDIUM 6.7
Public PoCATT&CK inferred
CVE-2021-1931CVE-2021-1931: Possible buffer overflow due to improper validation of buffer length while processing fast…
qualcomm · aqt1000 firmware · EPSS 0.22% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2021-30327CVE-2021-30327: Buffer overflow in sahara protocol while processing commands leads to overwrite of secure …
qualcomm · apq8097 firmware · EPSS 0.20% · Threat 38MEDIUM 6.8
Public PoCATT&CK inferred
CVE-2026-72844CVE-2026-72844: The Lean 4 kernel does not verify that the structure named in a projection expression matc…
Unknown · · EPSS 0.18% · Threat 38MEDIUM 6.7
Public PoCATT&CK inferred
CVE-2023-20696CVE-2023-20696: In preloader, there is a possible out of bounds write due to a missing bounds check. This …
google · android · EPSS 0.10% · Threat 38MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2025-2126CVE-2025-2126: A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as cr…
joomlaux · jux real estate · EPSS 11.23% · Threat 37MEDIUM 6.5
Public PoCATT&CK inferred
CVE-2025-53392CVE-2025-53392: In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading …
pfsense · pfsense · EPSS 1.85% · Threat 37MEDIUM 6.5
Public PoCATT&CK inferred
CVE-2026-2256CVE-2026-2256: A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier …
Unknown · · EPSS 1.68% · Threat 37MEDIUM 6.5
Public PoCATT&CK inferred
CVE-2024-7595CVE-2024-7595: GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet …
ietf · generic routing encapsulation · EPSS 1.61% · Threat 37MEDIUM 5.9
Exploit-DBATT&CK inferred
CVE-2026-9271CVE-2026-9271: Vulnerability Title
Unknown · · EPSS 0.61% · Threat 37MEDIUM 5.9
Exploit-DBATT&CK inferred
CVE-2026-6815CVE-2026-6815: An arbitrary file write vulnerability exists in Casdoor's Local File System storage provid…
casbin · casdoor · EPSS 0.59% · Threat 37MEDIUM 6.5
Public PoCATT&CK inferred
CVE-2025-31258CVE-2025-31258: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Seq…
apple · macos · EPSS 0.41% · Threat 37MEDIUM 6.5
Public PoCATT&CK inferred
CVE-2026-36425CVE-2026-36425: An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL han…
Unknown · · EPSS 0.39% · Threat 37MEDIUM 6.5
Public PoCATT&CK inferred
CVE-2023-52271CVE-2023-52271: The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers t…
topazevolution · antifraud · EPSS 0.33% · Threat 37MEDIUM 4.9
Exploit-DBATT&CK inferred
CVE-2022-23409CVE-2022-23409: The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files…
ethercreative · logs · EPSS 13.76% · Threat 36MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2024-45440CVE-2024-45440: core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging…
drupal · drupal · EPSS 9.27% · Threat 36MEDIUM 4.2
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-43200Apple Multiple Products Unspecified Vulnerability
Apple · Multiple Products · EPSS 1.19% · Threat 36MEDIUM 6.4
Public PoCATT&CK inferred
CVE-2022-37418CVE-2022-37418: The Remote Keyless Entry (RKE) receiving unit on certain Nissan, Kia, and Hyundai vehicles…
nissan · nissan firmware · EPSS 1.07% · Threat 36MEDIUM 5.7
Exploit-DBATT&CK inferred
CVE-2024-57708CVE-2024-57708: An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via…
Unknown · · EPSS 0.93% · Threat 36MEDIUM 6.3
Public PoCATT&CK inferred
CVE-2025-65640CVE-2025-65640: Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket …
Unknown · · EPSS 0.22% · Threat 36MEDIUM 6.3
Public PoCATT&CK inferred
CVE-2026-25262CVE-2026-25262: Memory corruption while processing a crafted ELF file in the Primary Bootloader.
qualcomm · mdm9207 firmware · EPSS 0.14% · Threat 36MEDIUM 5
Exploit-DBATT&CK inferred
CVE-2015-6830CVE-2015-6830: libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 …
phpmyadmin · phpmyadmin · EPSS 10.43% · Threat 35MEDIUM 5.5
Public PoCATT&CK inferred
CVE-2025-39946CVE-2025-39946: In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abo…
linux · linux kernel · EPSS 10.26% · Threat 35MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2022-41358CVE-2022-41358: A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows …
garage management system project · garage management system · EPSS 4.36% · Threat 35MEDIUM 5.5
Exploit-DBATT&CK inferred
CVE-2025-59342CVE-2025-59342: esm.sh is a nobuild content delivery network(CDN) for modern web development. In 136 and e…
Unknown · · EPSS 3.01% · Threat 35MEDIUM 6.1
Public PoCATT&CK inferred
CVE-2026-23631CVE-2026-23631: Redis is an in-memory data structure store. In all versions of redis-server with Lua scrip…
redis · redis · EPSS 2.80% · Threat 35MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2024-41947CVE-2024-41947: XWiki Platform is a generic wiki platform offering runtime services for applications built…
xwiki · xwiki · EPSS 1.67% · Threat 35MEDIUM 5.5
Exploit-DBATT&CK inferred
CVE-2026-100885CVE-2026-100885: A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown funct…
Unknown · · EPSS 1.00% · Threat 35MEDIUM 5.5
Exploit-DBATT&CK inferred
CVE-2024-36424CVE-2024-36424: K7RKScan.sys in K7 Ultimate Security before 17.0.2019 allows local users to cause a denial…
k7computing · k7 ultimate security · EPSS 0.99% · Threat 35MEDIUM 5.5
Exploit-DBATT&CK inferred
CVE-2025-8471CVE-2025-8471: A vulnerability, which was classified as critical, has been found in projectworlds Online …
projectworlds · online admission system · EPSS 0.73% · Threat 35MEDIUM 5.5
Exploit-DBATT&CK inferred
CVE-2022-1257CVE-2022-1257: Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Window…
mcafee · agent · EPSS 0.65% · Threat 35MEDIUM 4
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-48928TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability
TeleMessage · TM SGNL · EPSS 0.58% · Threat 35MEDIUM 6.1
Public PoCATT&CK inferred
CVE-2025-26529CVE-2025-26529: Description information displayed in the site administration live log required additional…
moodle · moodle · EPSS 0.52% · Threat 35MEDIUM 6.1
Public PoCATT&CK inferred
CVE-2025-70849CVE-2025-70849: Arbitrary File Upload in podinfo thru 6.9.0 allows unauthenticated attackers to upload arb…
stefanprodan · podinfo · EPSS 0.29% · Threat 35MEDIUM 6.2
Public PoCATT&CK inferred
CVE-2026-28867CVE-2026-28867: This issue was addressed with improved authentication. This issue is fixed in iOS 18.7.7 a…
apple · ipados · EPSS 0.21% · Threat 35MEDIUM 6.2
Public PoCATT&CK inferred
CVE-2026-20637CVE-2026-20637: A use after free issue was addressed with improved memory management. This issue is fixed …
apple · ipados · EPSS 0.21% · Threat 35MEDIUM 6.2
Public PoCATT&CK inferred
CVE-2026-33320CVE-2026-33320: Dasel is a command-line tool and library for querying, modifying, and transforming data st…
tomwright · dasel · EPSS 0.18% · Threat 35MEDIUM 6.2
Public PoCATT&CK inferred
CVE-2026-15430CVE-2026-15430: Improper access control in the IRP_MJ_WRITE command interface in Wellbia XIGNCODE3 xhunte…
Unknown · · EPSS 0.15% · Threat 35UNKNOWN
Metasploit moduleATT&CK inferred
CVE-2025-0655CVE-2025-0655: Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a …
Unknown · · EPSS n/a · Threat 35UNKNOWN
Metasploit modulePublic PoCATT&CK inferred
CVE-2025-2825CVE-2025-2825: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-31161. Reason: This Reco…
Unknown · · EPSS n/a · Threat 35UNKNOWN
Metasploit modulePublic PoCATT&CK inferred
CVE-2025-66478CVE-2025-66478: Rejected reason: This CVE is a duplicate of CVE-2025-55182.
Unknown · · EPSS n/a · Threat 35MEDIUM 4
Public PoCATT&CK inferred
CVE-1999-0524CVE-1999-0524: ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
apple · mac os x · EPSS 32.15% · Threat 34MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2024-44762CVE-2024-44762: A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows…
webmin · usermin · EPSS 2.57% · Threat 34MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2024-53586CVE-2024-53586: An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform…
Unknown · · EPSS 1.87% · Threat 34MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2024-12344CVE-2024-12344: A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6…
tp-link · vn020 f3v firmware · EPSS 1.87% · Threat 34MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2025-6082CVE-2025-6082: The Birth Chart Compatibility plugin for WordPress is vulnerable to Full Path Disclosure i…
Unknown · · EPSS 1.70% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2024-1234CVE-2024-1234: The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site…
exclusiveaddons · exclusive addons for elementor · EPSS 1.59% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2024-47605CVE-2024-47605: silverstripe-asset-admin is a silverstripe assets gallery for asset management. When using…
Unknown · · EPSS 1.18% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2026-22704CVE-2026-22704: HAX CMS helps manage microsite universe with PHP or NodeJs backends. In versions 11.0.6 to…
psu · haxcms-nodejs · EPSS 1.03% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-51396CVE-2025-51396: A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attacke…
livehelperchat · live helper chat · EPSS 1.02% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-51397CVE-2025-51397: A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Help…
livehelperchat · live helper chat · EPSS 1.00% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-51398CVE-2025-51398: A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Liv…
livehelperchat · live helper chat · EPSS 0.97% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-51400CVE-2025-51400: A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live …
livehelperchat · live helper chat · EPSS 0.97% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-51401CVE-2025-51401: A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live He…
livehelperchat · live helper chat · EPSS 0.97% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2024-39143CVE-2024-39143: A stored cross-site scripting (XSS) vulnerability exists in ResidenceCMS 2.10.1 that allow…
coderberg · residencecms · EPSS 0.93% · Threat 34MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2025-10493CVE-2025-10493: The Chained Quiz plugin for WordPress is vulnerable to Insecure Direct Object Reference in…
Unknown · · EPSS 0.92% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-52392CVE-2025-52392: Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missi…
Unknown · · EPSS 0.90% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2024-51463CVE-2024-51463: IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF). This may al…
ibm · i · EPSS 0.85% · Threat 34MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2024-6039CVE-2024-6039: A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affe…
fengoffice · feng office · EPSS 0.73% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2024-48120CVE-2024-48120: X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" mod…
x2engine · x2crm · EPSS 0.68% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-46041CVE-2025-46041: A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers t…
anchorcms · anchor cms · EPSS 0.62% · Threat 34MEDIUM 5.9
Public PoCATT&CK inferred
CVE-2026-0075CVE-2026-0075: In multiple functions, there is a possible way to access the contacts database due to a SQ…
google · android · EPSS 0.10% · Threat 34MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2015-6176CVE-2015-6176: Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers…
microsoft · edge · EPSS 14.12% · Threat 33MEDIUM 5.1
Exploit-DBATT&CK inferred
CVE-2026-41456CVE-2026-41456: Bludit CMS prior to commit 6732dde contains a reflected cross-site scripting vulnerability…
Unknown · · EPSS 2.72% · Threat 33MEDIUM 5.1
Exploit-DBATT&CK inferred
CVE-2025-26263CVE-2025-26263: GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less (fixed in…
Unknown · · EPSS 1.37% · Threat 33MEDIUM 5.1
Exploit-DBATT&CK inferred
CVE-2024-7815CVE-2024-7815: A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and clas…
online railway reservation system project · online railway reservation system · EPSS 1.20% · Threat 33MEDIUM 5.1
Exploit-DBATT&CK inferred
CVE-2024-11954CVE-2024-11954: A vulnerability classified as problematic was found in Pimcore 11.4.2. Affected by this vu…
pimcore · pimcore · EPSS 1.09% · Threat 33MEDIUM 5.1
Exploit-DBATT&CK inferred
CVE-2024-11956CVE-2024-11956: A vulnerability, which was classified as critical, has been found in Pimcore customer-data…
pimcore · pimcore · EPSS 0.86% · Threat 33MEDIUM 5.7
Public PoCATT&CK inferred
CVE-2023-1206CVE-2023-1206: A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s …
linux · linux kernel · EPSS 0.63% · Threat 33MEDIUM 5.5
Public PoCATT&CK inferred
CVE-2025-24104CVE-2025-24104: This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18…
apple · ipados · EPSS 1.51% · Threat 32MEDIUM 5.5
Public PoCATT&CK inferred
CVE-2025-53136CVE-2025-53136: Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows …
microsoft · windows 10 1507 · EPSS 0.97% · Threat 32MEDIUM 4.9
Exploit-DBATT&CK inferred
CVE-2025-10046CVE-2025-10046: The ELEX WooCommerce Google Shopping (Google Product Feed) plugin for WordPress is vulnera…
Unknown · · EPSS 0.71% · Threat 32MEDIUM 5.5
Public PoCATT&CK inferred
CVE-2025-38001CVE-2025-38001: In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Addr…
linux · linux kernel · EPSS 0.52% · Threat 32MEDIUM 5.5
Public PoCATT&CK inferred
CVE-2024-27876CVE-2024-27876: A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and …
apple · ipados · EPSS 0.49% · Threat 32MEDIUM 5.5
Public PoCATT&CK inferred
CVE-2026-2636CVE-2026-2636: This vulnerability is caused by a CWE‑159: "Improper Handling of Invalid Use of Special El…
Unknown · · EPSS 0.47% · Threat 32MEDIUM 5.5
Public PoCATT&CK inferred
CVE-2025-40040CVE-2025-40040: In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-drop…
linux · linux kernel · EPSS 0.38% · Threat 32MEDIUM 5.5
Public PoCATT&CK inferred
CVE-2023-3280CVE-2023-3280: A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Window…
paloaltonetworks · cortex xdr agent · EPSS 0.32% · Threat 32MEDIUM 5.5
Public PoCATT&CK inferred
CVE-2026-83991CVE-2026-83991: Missing authentication for critical function in Windows Cloud Files Mini Filter Driver all…
microsoft · windows 10 1809 · EPSS 0.30% · Threat 32MEDIUM 5.5
Public PoCATT&CK inferred
CVE-2025-61155CVE-2025-61155: The GameDriverX64.sys kernel-mode anti-cheat driver (v7.23.4.7 and earlier) contains an ac…
Unknown · · EPSS 0.28% · Threat 32MEDIUM 5.5
Public PoCATT&CK inferred
CVE-2025-70795CVE-2025-70795: STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privil…
Unknown · · EPSS 0.26% · Threat 32MEDIUM 5.6
Public PoCATT&CK inferred
CVE-2025-1055CVE-2025-1055: A vulnerability in the K7RKScan.sys driver, part of the K7 Security Anti-Malware suite, al…
Unknown · · EPSS 0.23% · Threat 32MEDIUM 5.5
Public PoCATT&CK inferred
CVE-2025-39965CVE-2025-39965: In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi …
linux · linux kernel · EPSS 0.20% · Threat 32MEDIUM 5.5
Public PoCATT&CK inferred
CVE-2026-53365CVE-2026-53365: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zer…
linux · linux kernel · EPSS 0.20% · Threat 32MEDIUM 5.5
Public PoCATT&CK inferred
CVE-2026-84616CVE-2026-84616: A type confusion issue was addressed with improved memory handling. This issue is fixed in…
apple · ipados · EPSS 0.15% · Threat 32MEDIUM 5.5
Public PoCATT&CK inferred
CVE-2025-48561CVE-2025-48561: In multiple locations, there is a possible way to access data displayed on the screen due …
google · android · EPSS 0.14% · Threat 32UNKNOWN
Exploit-DBATT&CK inferred
CVE-2025-62639CVE-2025-62639: Rejected reason: Not used
Unknown · · EPSS n/a · Threat 32LOW 2.7
Public PoCATT&CK inferred
CVE-2025-0133CVE-2025-0133: A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and por…
Unknown · · EPSS 46.30% · Threat 31MEDIUM 5.3
Public PoCATT&CK inferred
CVE-2020-28042CVE-2020-28042: ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has …
servicestack · servicestack · EPSS 2.33% · Threat 31MEDIUM 5.4
Public PoCATT&CK inferred
CVE-2024-54772CVE-2024-54772: An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43…
mikrotik · routeros · EPSS 1.29% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2024-50857CVE-2024-50857: The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It a…
gestioip · gestioip · EPSS 1.25% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2024-11605CVE-2024-11605: The wp-publications WordPress plugin through 1.2 does not escape filenames before outputti…
wp-publications project · wp-publications · EPSS 1.24% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2024-50562CVE-2024-50562: An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.…
fortinet · fortisase · EPSS 1.16% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2026-54645CVE-2026-54645: CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/products.index.i…
Unknown · · EPSS 1.08% · Threat 31MEDIUM 5.3
Public PoCATT&CK inferred
CVE-2026-94545CVE-2026-94545: Satori is a library to convert HTML and CSS to SVG. Starting in version 0.0.27 and prior t…
Unknown · · EPSS 1.04% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2025-5640CVE-2025-5640: A vulnerability was found in PX4-Autopilot 1.12.3. It has been classified as problematic. …
Unknown · · EPSS 1.02% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2024-50859CVE-2024-50859: The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a us…
gestioip · gestioip · EPSS 0.90% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2024-9458CVE-2024-9458: The Reservit Hotel WordPress plugin before 3.0 does not sanitise and escape some of its se…
reservit · reservit hotel · EPSS 0.89% · Threat 31MEDIUM 5.3
Public PoCATT&CK inferred
CVE-2024-38828CVE-2024-38828: Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable …
Unknown · · EPSS 0.72% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2025-6563CVE-2025-6563: A cross-site scripting vulnerability is present in the hotspot of MikroTik's RouterOS on v…
Unknown · · EPSS 0.72% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2025-50481