All CVEs, page 15
1724 CVEs, sorted by threat level then EPSS. Showing 1681-1724. Use search to combine filters.
MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2025-70336CVE-2025-70336: A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in PodcastGene…
podcastgenerator · podcast generator · EPSS 0.57% · Threat 31MEDIUM 4.7
Exploit-DBATT&CK inferred
CVE-2026-14620CVE-2026-14620: webpack-dev-server versions 5.2.5 and earlier expose two internal developer endpoints, /we…
webpack.js · webpack-dev-server · EPSS 0.52% · Threat 31MEDIUM 4.7
Exploit-DBATT&CK inferred
CVE-2025-67586CVE-2025-67586: Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-sh…
Unknown · · EPSS 0.44% · Threat 31MEDIUM 5.4
Public PoCATT&CK inferred
CVE-2026-20643CVE-2026-20643: A cross-origin issue in the Navigation API was addressed with improved input validation. T…
apple · ipados · EPSS 0.36% · Threat 31MEDIUM 5.4
Public PoCATT&CK inferred
CVE-2026-30368CVE-2026-30368: A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows …
Unknown · · EPSS 0.34% · Threat 31MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2026-33829CVE-2026-33829: Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows…
microsoft · windows 10 1607 · EPSS 3.51% · Threat 30MEDIUM 5
Public PoCATT&CK inferred
CVE-2012-2459CVE-2012-2459: Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.6, 0.5.x before 0.5.5, 0.6…
bitcoin · bitcoin core · EPSS 3.08% · Threat 30MEDIUM 5.1
Public PoCATT&CK inferred
CVE-2025-0087CVE-2025-0087: In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different …
google · android · EPSS 0.22% · Threat 30MEDIUM 4.8
Public PoCATT&CK inferred
CVE-2025-59501CVE-2025-59501: Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized …
microsoft · configuration manager 2403 · EPSS 3.26% · Threat 29MEDIUM 4.8
Public PoCATT&CK inferred
CVE-2026-40175CVE-2026-40175: Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0…
axios · axios · EPSS 2.02% · Threat 29MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2026-33534CVE-2026-33534: EspoCRM is an open source customer relationship management application. Versions 9.3.3 and…
espocrm · espocrm · EPSS 1.68% · Threat 29MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2024-46528CVE-2024-46528: An Insecure Direct Object Reference (IDOR) vulnerability in KubeSphere 4.x before 4.1.3 an…
Unknown · · EPSS 1.58% · Threat 29MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2024-51464CVE-2024-51464: IBM i 7.3, 7.4, and 7.5 is vulnerable to bypassing Navigator for i interface restrictions.…
ibm · i · EPSS 1.41% · Threat 29MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2026-44595CVE-2026-44595: Yamcs is a mission control framework. Prior to 5.12.7, the IAM API endpoints listUsers, ge…
spaceapplications · yamcs · EPSS 1.06% · Threat 29MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2026-42568CVE-2026-42568: Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injecti…
Unknown · · EPSS 1.01% · Threat 29MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2025-41228CVE-2025-41228: VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due …
Unknown · · EPSS 0.90% · Threat 29MEDIUM 5
Public PoCATT&CK inferred
CVE-2025-24203CVE-2025-24203: The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 1…
apple · ipad os · EPSS 0.64% · Threat 29UNKNOWN
Public PoCATT&CK inferred
CVE-2026-80844CVE-2026-80844: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate r…
Unknown · · EPSS 0.43% · Threat 29MEDIUM 5
Public PoCATT&CK inferred
CVE-2026-34990CVE-2026-34990: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operatin…
openprinting · cups · EPSS 0.18% · Threat 29UNKNOWN
Public PoCATT&CK inferred
CVE-2026-111943CVE-2026-111943: On most platforms, Go uses the given system root certificates. However, in some narrower c…
Unknown · · EPSS 0.14% · Threat 29UNKNOWN
Public PoCATT&CK inferred
CVE-2025-34085CVE-2025-34085: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority…
Unknown · · EPSS n/a · Threat 29MEDIUM 4.7
Public PoCATT&CK inferred
CVE-2026-28992CVE-2026-28992: A memory corruption vulnerability was addressed with improved locking. This issue is fixed…
apple · ipados · EPSS 0.11% · Threat 28MEDIUM 4.3
Public PoCATT&CK inferred
CVE-2025-4664CVE-2025-4664: Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed…
google · chrome · EPSS 5.43% · Threat 27MEDIUM 4.2
Public PoCATT&CK inferred
CVE-2024-38143CVE-2024-38143: Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
microsoft · windows 10 1507 · EPSS 1.69% · Threat 26MEDIUM 4.3
Public PoCATT&CK inferred
CVE-2026-24332CVE-2026-24332: Discord through 2026-01-16 allows gathering information about whether a user's client stat…
Unknown · · EPSS 0.29% · Threat 26MEDIUM 4.4
Public PoCATT&CK inferred
CVE-2026-2002CVE-2026-2002: The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPre…
Unknown · · EPSS 0.19% · Threat 26LOW 2.7
Metasploit moduleATT&CK inferred
CVE-2024-48455CVE-2024-48455: An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router N…
Unknown · · EPSS 6.29% · Threat 25LOW 3.3
Exploit-DBATT&CK inferred
CVE-2025-47226CVE-2025-47226: Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset informat…
snipeitapp · snipe-it · EPSS 1.30% · Threat 24LOW 3.7
Public PoCATT&CK inferred
CVE-2024-9506CVE-2024-9506: Improper regular expression in Vue's parseHTML function leads to a potential regular expre…
Unknown · · EPSS 0.53% · Threat 23LOW 3.7
Public PoCATT&CK inferred
CVE-2025-54352CVE-2025-54352: WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft p…
Unknown · · EPSS 0.40% · Threat 23LOW 2.1
Exploit-DBATT&CK inferred
CVE-2025-9090CVE-2025-9090: A vulnerability was identified in Tenda AC20 16.03.08.12. Affected is the function websFor…
tenda · ac20 firmware · EPSS 16.65% · Threat 22LOW 3.6
Public PoCATT&CK inferred
CVE-2025-55188CVE-2025-55188: 7-Zip before 25.01 does not always properly handle symbolic links during extraction.
7-zip · 7-zip · EPSS 1.00% · Threat 22LOW 2.1
Exploit-DBATT&CK inferred
CVE-2025-10327CVE-2025-10327: A weakness has been identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this …
sourcefabric · rpi-jukebox-rfid · EPSS 10.16% · Threat 21LOW 2
Metasploit moduleATT&CK inferred
CVE-2025-8518CVE-2025-8518: A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected b…
vvveb · vvveb · EPSS 2.10% · Threat 21LOW 3.3
Public PoCATT&CK inferred
CVE-2026-50416CVE-2026-50416: Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an aut…
microsoft · windows 11 24h2 · EPSS 0.46% · Threat 21LOW 2.3
Exploit-DBATT&CK inferred
CVE-2026-58057CVE-2026-58057: Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist u…
flowiseai · flowise · EPSS 1.56% · Threat 19LOW 2.4
Exploit-DBATT&CK inferred
CVE-2026-55780CVE-2026-55780: NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1…
Unknown · · EPSS 0.42% · Threat 19LOW 2
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-8191CVE-2025-8191: A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1…
macrozheng · mall · EPSS 1.79% · Threat 18LOW 2.1
Exploit-DBATT&CK inferred
CVE-2025-9140CVE-2025-9140: A vulnerability was identified in Shanghai Lingdang Information Technology Lingdang CRM up…
51mis · lingdang crm · EPSS 0.52% · Threat 18LOW 2
Exploit-DBATT&CK inferred
CVE-2025-10370CVE-2025-10370: A vulnerability was identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. This vulnerabilit…
sourcefabric · rpi-jukebox-rfid · EPSS 0.70% · Threat 17LOW 1.9
Exploit-DBATT&CK inferred
CVE-2025-8550CVE-2025-8550: A vulnerability was found in atjiu pybbs up to 6.0.0. It has been declared as problematic.…
pybbs project · pybbs · EPSS 0.65% · Threat 17LOW 2
Exploit-DBATT&CK inferred
CVE-2025-8573CVE-2025-8573: Concrete CMS versions 9 through 9.4.2 are vulnerable to Stored XSS from Home Folder on Mem…
concretecms · concrete cms · EPSS 0.44% · Threat 17LOW 1.8
Exploit-DBATT&CK inferred
CVE-2026-57588CVE-2026-57588: A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan resul…
tenable · nessus · EPSS 0.33% · Threat 16LOW 1.2
Exploit-DBATT&CK inferred
CVE-2025-69210