All CVEs, page 7
1724 CVEs, sorted by threat level then EPSS. Showing 721-840. Use search to combine filters.
HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-48543Android Runtime Use-After-Free Vulnerability
Android · Runtime · EPSS 0.63% · Threat 59HIGH 8.7
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-88779Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix · NetScaler · EPSS 0.59% · Threat 59HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-58704Google Pixel Improper Authorization Vulnerability
Google · Pixel · EPSS 0.59% · Threat 59HIGH 7.8Ransomware
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-33825Microsoft Defender Insufficient Granularity of Access Control Vulnerability
Microsoft · Defender · EPSS 0.40% · Threat 59MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2023-2745CVE-2023-2745: WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2,…
wordpress · wordpress · EPSS 79.39% · Threat 58HIGH 7.5
Public PoCATT&CK inferred
CVE-2024-38819CVE-2024-38819: Applications serving static resources through the functional web frameworks WebMvc.fn or W…
Unknown · · EPSS 56.04% · Threat 58HIGH 7.5
Metasploit moduleATT&CK inferred
CVE-2025-2264CVE-2025-2264: A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". A…
santesoft · sante pacs server · EPSS 35.38% · Threat 58HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2025-26264CVE-2025-26264: GeoVision GV-ASWeb with the version 6.1.2.0 or less (fixed in 6.2.0), contains a Remote Co…
Unknown · · EPSS 23.78% · Threat 58HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2023-48292CVE-2023-48292: The XWiki Admin Tools Application provides tools to help the administration of XWiki. Star…
xwiki · admin tools · EPSS 22.94% · Threat 58CRITICAL 9.1
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-64459CVE-2025-64459: An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The…
djangoproject · django · EPSS 19.26% · Threat 58CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-4322CVE-2025-4322: The Motors theme for WordPress is vulnerable to privilege escalation via account takeover …
Unknown · · EPSS 15.20% · Threat 58HIGH 7.8
Exploited in the wild · CISA KEVExploit-DBATT&CK inferred
CVE-2018-14634Linux Kernel Integer Overflow Vulnerability
Linux · Kernel · EPSS 14.69% · Threat 58CRITICAL 9.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-58138CVE-2026-58138: Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vu…
Unknown · · EPSS 14.69% · Threat 58HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2022-20775Cisco SD-WAN Path Traversal Vulnerability
Cisco · SD-WAN · EPSS 12.47% · Threat 58HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2023-36424Microsoft Windows Out-of-Bounds Read Vulnerability
Microsoft · Windows · EPSS 12.09% · Threat 58CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2024-50477CVE-2024-50477: Authentication Bypass Using an Alternate Path or Channel vulnerability in Stacks Stacks Mo…
stacksmarket · stacks mobile app builder · EPSS 8.12% · Threat 58CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2026-1830CVE-2026-1830: The Quick Playground plugin for WordPress is vulnerable to Remote Code Execution in all ve…
Unknown · · EPSS 8.09% · Threat 58CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2019-19245CVE-2019-19245: NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the…
napc · xinet elegant 6 asset library · EPSS 7.94% · Threat 58HIGH 8.2
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-18556N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
N-able · N-central · EPSS 7.88% · Threat 58CRITICAL 9.2
Metasploit moduleATT&CK inferred
CVE-2026-27175CVE-2026-27175: MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated OS command injectio…
mjdm · majordomo · EPSS 7.84% · Threat 58CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2025-3605CVE-2025-3605: The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege…
Unknown · · EPSS 7.70% · Threat 58CRITICAL 9.1
Metasploit moduleATT&CK inferred
CVE-2024-51092CVE-2024-51092: LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command …
librenms · librenms · EPSS 7.18% · Threat 58CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2022-2070CVE-2022-2070: In Grandstream GSD3710 in its 1.0.11.13 version, it's possible to overflow the stack since…
grandstream · gds3710 firmware · EPSS 5.84% · Threat 58CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-27174CVE-2026-27174: MajorDoMo (aka Major Domestic Module) allows unauthenticated remote code execution via the…
mjdm · majordomo · EPSS 5.70% · Threat 58CRITICAL 9.2
Metasploit moduleATT&CK inferred
CVE-2025-24293CVE-2025-24293: # Active Storage allowed transformation methods potentially unsafe Active Storage attem…
Unknown · · EPSS 5.66% · Threat 58CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2025-71243CVE-2025-71243: The 'Saisies pour formulaire' (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 cont…
spip · saisies · EPSS 5.59% · Threat 58CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2025-69985CVE-2025-69985: FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Cod…
frangoteam · fuxa · EPSS 5.49% · Threat 58CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2022-2025CVE-2022-2025: an attacker with knowledge of user/pass of Grandstream GSD3710 in its 1.0.11.13 version, c…
grandstream · gds3710 firmware · EPSS 5.45% · Threat 58CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2020-18662CVE-2020-18662: SQL Injection vulnerability in gnuboard5 <=v5.3.2.8 via the table_prefix parameter in inst…
sir · gnuboard · EPSS 5.38% · Threat 58CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2021-40617CVE-2021-40617: An SQL Injection vulnerability exists in openSIS Community Edition version 8.0 via ForgotP…
os4ed · opensis · EPSS 5.21% · Threat 58CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-34415CVE-2026-34415: Xerte Online Toolkits versions 3.15 and earlier contain an incomplete input validation vul…
Unknown · · EPSS 4.43% · Threat 58CRITICAL 10
Exploit-DBATT&CK inferred
CVE-2024-48841CVE-2024-48841: Network access can be used to execute arbitrary code with elevated privileges. This …
Unknown · · EPSS 4.40% · Threat 58CRITICAL 10
Exploit-DBATT&CK inferred
CVE-2026-61447CVE-2026-61447: PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execu…
Unknown · · EPSS 2.49% · Threat 58CRITICAL 9.4
Metasploit moduleATT&CK inferred
CVE-2026-19626CVE-2026-19626: A remote code execution vulnerability exists in Tenable Security Center's report generatio…
tenable · security center · EPSS 1.85% · Threat 58HIGH 8.4
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-48595Android Framework Integer Overflow Vulnerability
Android · Framework · EPSS 1.71% · Threat 58HIGH 8.6
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-0322Palo Alto Networks PAN-OS Code Injection Vulnerability
Palo Alto Networks · PAN-OS · EPSS 1.21% · Threat 58HIGH 8.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-106931EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
EG Secure Solutions · SiteGuard Server Edition · EPSS 1.17% · Threat 58HIGH 8.6
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) · EPSS 1.01% · Threat 58HIGH 8.6
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-21479Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Qualcomm · Multiple Chipsets · EPSS 0.84% · Threat 58HIGH 8.6
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-96656Plex Media Server External Control of File Name or Path Vulnerability
Plex · Media Server · EPSS 0.82% · Threat 58HIGH 8.5
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-54420LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
LiteSpeed · cPanel Plugin · EPSS 0.81% · Threat 58HIGH 8.6
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-1976Broadcom Brocade Fabric OS Code Injection Vulnerability
Broadcom · Brocade Fabric OS · EPSS 0.69% · Threat 58HIGH 8.6
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-21480Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Qualcomm · Multiple Chipsets · EPSS 0.46% · Threat 58MEDIUM 6.1
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2023-41425CVE-2023-41425: Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote atta…
wondercms · wondercms · EPSS 54.31% · Threat 57MEDIUM 5.3Ransomware
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-20316Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
Cisco · Secure Firewall Management Center (FMC) · EPSS 35.10% · Threat 57HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2025-47166CVE-2025-47166: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta…
microsoft · sharepoint enterprise server · EPSS 21.64% · Threat 57CRITICAL 9.2
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-109618CVE-2026-109618: PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort ha…
php · php · EPSS 11.84% · Threat 57CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2025-46811CVE-2025-46811: A Missing Authorization vulnerability in SUSE Linux Manager allows anyone with the ability…
Unknown · · EPSS 11.28% · Threat 57HIGH 7.8
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-21333Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
Microsoft · Windows · EPSS 10.07% · Threat 57HIGH 7.8
Exploited in the wild · CISA KEVMetasploit moduleATT&CK inferred
CVE-2026-83549SonicWall SMA1000 Appliances OS Command Injection Vulnerability
SonicWall · SMA1000 Appliances · EPSS 9.89% · Threat 57HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2023-41992Apple Multiple Products Kernel Privilege Escalation Vulnerability
Apple · Multiple Products · EPSS 9.52% · Threat 57HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2022-0995Linux Kernel Out-of-Bounds Write Vulnerability
Linux · Kernel · EPSS 8.86% · Threat 57HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-41244Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
Broadcom · VMware Aria Operations and VMware Tools · EPSS 8.63% · Threat 57CRITICAL 9.5
Exploit-DBATT&CK inferred
CVE-2026-25895CVE-2026-25895: FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. A path traversal…
frangoteam · fuxa · EPSS 6.92% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2019-16693CVE-2019-16693: phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter…
phpipam · phpipam · EPSS 4.34% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2024-53584CVE-2024-53584: OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the t…
openpanel · openpanel · EPSS 4.19% · Threat 57HIGH 8.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2021-27137DD-WRT Stack-Based Buffer Overflow Vulnerability
DD-WRT · DD-WRT · EPSS 4.00% · Threat 57CRITICAL 9.2
Metasploit moduleATT&CK inferred
CVE-2025-22896CVE-2025-22896: mySCADA myPRO Manager stores credentials in cleartext, which could allow an attacker to …
myscada · mypro · EPSS 3.57% · Threat 57CRITICAL 9.2
Metasploit moduleATT&CK inferred
CVE-2026-27760CVE-2026-27760: OpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in the instal…
Unknown · · EPSS 3.43% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2025-66039CVE-2025-66039: FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. …
sangoma · freepbx · EPSS 3.28% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2026-7567CVE-2026-7567: The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in version…
Unknown · · EPSS 2.93% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2026-2624CVE-2026-2624: Missing Authentication for Critical Function vulnerability in ePati Cyber Security Techn…
epati · antikor next generation firewall · EPSS 2.65% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2024-44541CVE-2024-44541: evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "us…
Unknown · · EPSS 2.58% · Threat 57CRITICAL 9.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-32746CVE-2026-32746: telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Se…
gnu · inetutils · EPSS 2.54% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2025-47917CVE-2025-47917: Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that a…
arm · mbed tls · EPSS 2.44% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2024-38944CVE-2024-38944: An issue in Intelight X-1L Traffic controller Maxtime v.1.9.6 allows a remote attacker to …
Unknown · · EPSS 2.37% · Threat 57CRITICAL 9.9
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-38526CVE-2026-38526: An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint…
Unknown · · EPSS 2.35% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2025-34089CVE-2025-34089: An unauthenticated remote code execution vulnerability exists in Remote for Mac, a macOS r…
Unknown · · EPSS 2.35% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2025-57174CVE-2025-57174: An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmw…
Unknown · · EPSS 2.21% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-28515CVE-2026-28515: openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerab…
opendcim · opendcim · EPSS 2.12% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2026-44596CVE-2026-44596: Yamcs is a mission control framework. Prior to 5.12.7, the authentication endpoint POST /a…
spaceapplications · yamcs · EPSS 2.06% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-32985CVE-2026-32985: Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file …
apereo · xerte online toolkits · EPSS 2.00% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2024-48445CVE-2024-48445: An issue in compop.ca ONLINE MALL v.3.5.3 allows a remote attacker to execute arbitrary co…
Unknown · · EPSS 1.99% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-28516CVE-2026-28516: openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in…
opendcim · opendcim · EPSS 1.58% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2025-34433CVE-2025-34433: AVideo versions 14.3.1 prior to 20.1 contain an unauthenticated remote code execution vuln…
Unknown · · EPSS 1.48% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2025-3096CVE-2025-3096: Clinic’s Patient Management System versions 2.0 suffers from a SQL injection vulnerability…
Unknown · · EPSS 1.46% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-88773CVE-2026-88773: Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerabi…
citrix · netscaler application delivery controller · EPSS 1.30% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-27180CVE-2026-27180: MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated remote code executi…
mjdm · majordomo · EPSS 1.26% · Threat 57HIGH 8.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-55255Langflow Authorization Bypass Through User-Controlled Key Vulnerability
Langflow · Langflow · EPSS 0.89% · Threat 57HIGH 8.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-110936Siemens Software Center Uncontrolled Search Path Element Vulnerability
Siemens · Software Center · EPSS 0.24% · Threat 57MEDIUM 5
Metasploit modulePublic PoCATT&CK inferred
CVE-2007-6750CVE-2007-6750: The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (d…
apache · http server · EPSS 70.53% · Threat 56MEDIUM 5.3
Metasploit moduleExploit-DBATT&CK inferred
CVE-2025-27218CVE-2025-27218: Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow …
Unknown · · EPSS 65.00% · Threat 56MEDIUM 5.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2021-26829OpenPLC ScadaBR Cross-site Scripting Vulnerability
OpenPLC · ScadaBR · EPSS 48.05% · Threat 56HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2023-32235CVE-2023-32235: Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active them…
ghost · ghost · EPSS 39.08% · Threat 56MEDIUM 6.9
Metasploit moduleATT&CK inferred
CVE-2025-9316CVE-2025-9316: N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affec…
Unknown · · EPSS 37.39% · Threat 56MEDIUM 6.9
Metasploit moduleATT&CK inferred
CVE-2025-57791CVE-2025-57791: A security vulnerability has been identified that allows remote attackers to inject or man…
commvault · commvault · EPSS 37.01% · Threat 56HIGH 7
Metasploit moduleATT&CK inferred
CVE-2025-5306CVE-2025-5306: Improper Neutralization of Special Elements in the Netflow directory field may allow OS co…
artica · pandora fms · EPSS 35.69% · Threat 56MEDIUM 6.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-20262Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
Cisco · Catalyst SD-WAN Manager · EPSS 28.17% · Threat 56HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-53772CVE-2025-53772: Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute c…
microsoft · web deploy 4.0 · EPSS 27.75% · Threat 56HIGH 8.7
Public PoCATT&CK inferred
CVE-2025-59536CVE-2025-59536: Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Inj…
anthropic · claude code · EPSS 27.21% · Threat 56HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-54136CVE-2025-54136: Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attack…
anysphere · cursor · EPSS 26.73% · Threat 56HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-27654CVE-2026-27654: NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module th…
f5 · nginx plus · EPSS 25.94% · Threat 56HIGH 8.8
Public PoCATT&CK inferred
CVE-2025-54918CVE-2025-54918: Improper authentication in Windows NTLM allows an authorized attacker to elevate privilege…
microsoft · windows 10 1507 · EPSS 25.28% · Threat 56HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2025-7769CVE-2025-7769: Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobil…
Unknown · · EPSS 19.10% · Threat 56CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-54123CVE-2025-54123: Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middlewa…
hoverfly · hoverfly · EPSS 10.54% · Threat 56CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2024-21534CVE-2024-21534: All versions of the package jsonpath-plus are vulnerable to Remote Code Execution (RCE) du…
Unknown · · EPSS 9.02% · Threat 56CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-19632CVE-2026-19632: The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress…
Unknown · · EPSS 8.96% · Threat 56HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2022-23748Dante Discovery Process Control Vulnerability
Audinate · Dante Discovery · EPSS 8.33% · Threat 56HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2023-0386Linux Kernel Improper Ownership Management Vulnerability
Linux · Kernel · EPSS 7.88% · Threat 56HIGH 8.7
Metasploit moduleATT&CK inferred
CVE-2026-56274CVE-2026-56274: Flowise before 3.1.2 contains multiple OS command injection vulnerabilities in the Custom …
flowiseai · flowise · EPSS 7.52% · Threat 56HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2021-30952Apple Multiple Products Integer Overflow or Wraparound Vulnerability
Apple · Multiple Products · EPSS 6.96% · Threat 56HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2024-55555CVE-2024-55555: Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route w…
Unknown · · EPSS 6.62% · Threat 56HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-24990Microsoft Windows Untrusted Pointer Dereference Vulnerability
Microsoft · Windows · EPSS 6.37% · Threat 56HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2022-0492Linux Kernel Improper Authentication Vulnerability
Linux · Kernel · EPSS 5.53% · Threat 56HIGH 7.8
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred
CVE-2015-5287Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
Red Hat · Automatic Bug Reporting Tool · EPSS 5.00% · Threat 56CRITICAL 9.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-48909CVE-2026-48909: SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without …
Unknown · · EPSS 4.94% · Threat 56HIGH 8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-48384Git Link Following Vulnerability
Git · Git · EPSS 4.38% · Threat 56CRITICAL 9
Metasploit modulePublic PoCATT&CK inferred
CVE-2026-75604CVE-2026-75604: Next.js is a React framework for building full-stack web applications. From 13.4.0 until 1…
Unknown · · EPSS 2.10% · Threat 56CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2024-50672CVE-2024-50672: A NoSQL injection vulnerability in Adapt Learning Adapt Authoring Tool <= 0.11.3 allows un…
Unknown · · EPSS 1.57% · Threat 56HIGH 8.2
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-22224VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
VMware · ESXi and Workstation · EPSS 1.56% · Threat 56CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2025-32370CVE-2025-32370: Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file exten…
kentico · xperience · EPSS 1.55% · Threat 56CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2026-15013CVE-2026-15013: The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication B…
Unknown · · EPSS 1.50% · Threat 56CRITICAL 9.2
Metasploit moduleATT&CK inferred
CVE-2026-41264CVE-2026-41264: Flowise is a drag & drop user interface to build a customized large language model flow. P…
flowiseai · flowise · EPSS 1.44% · Threat 56CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2024-48573CVE-2024-48573: A NoSQL injection vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated att…
aquila-cms · aquilacms · EPSS 1.03% · Threat 56CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2026-25544CVE-2026-25544: Payload is a free and open source headless content management system. Prior to 3.73.0, whe…
payloadcms · payload · EPSS 0.96% · Threat 56MEDIUM 4.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-47813Wing FTP Server Information Disclosure Vulnerability
Wing FTP Server · Wing FTP Server · EPSS 62.51% · Threat 55HIGH 7.2
Exploit-DBPublic PoCATT&CK inferred
CVE-2020-14008CVE-2020-14008: Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user…
zohocorp · manageengine applications manager · EPSS 39.57% · Threat 55HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-25253CVE-2026-25253: OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a quer…
openclaw · openclaw · EPSS 24.43% · Threat 55HIGH 8.7
Public PoCATT&CK inferred
CVE-2024-53691CVE-2024-53691: A link following vulnerability has been reported to affect several QNAP operating system v…
qnap · qts · EPSS 23.76% · Threat 55HIGH 7.8
Metasploit modulePublic PoCATT&CK inferred
CVE-2024-48990