All CVEs, page 9
1724 CVEs, sorted by threat level then EPSS. Showing 961-1080. Use search to combine filters.
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-48572Android Framework Privilege Escalation Vulnerability
Android · Framework · EPSS 0.26% · Threat 54HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-87886Acronis Backup Incorrect Default Permissions Vulnerability
Acronis · Backup · EPSS 0.23% · Threat 54CRITICAL 10
Public PoCATT&CK inferred
CVE-2026-28576CVE-2026-28576: In Contacts Provider, there is a possible way to access the contacts database due to SQL i…
google · android · EPSS 0.18% · Threat 54HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2002-0082CVE-2002-0082: The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1…
apache-ssl · apache-ssl · EPSS 29.66% · Threat 53MEDIUM 5.9
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-68686Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Fortinet · FortiOS · EPSS 29.50% · Threat 53MEDIUM 6.1
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-27443Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS) · EPSS 24.61% · Threat 53MEDIUM 6.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2024-44309Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
Apple · Multiple Products · EPSS 22.59% · Threat 53HIGH 7.5
Metasploit moduleATT&CK inferred
CVE-2024-48456CVE-2024-48456: An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router N…
Unknown · · EPSS 16.95% · Threat 53HIGH 8.8
Public PoCATT&CK inferred
CVE-2026-22812CVE-2026-22812: OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode automatically start…
anoma · opencode · EPSS 16.54% · Threat 53HIGH 7.7
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2024-46987CVE-2024-46987: Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A…
tuzitio · camaleon cms · EPSS 14.56% · Threat 53HIGH 7.8
Metasploit moduleATT&CK inferred
CVE-2024-30085CVE-2024-30085: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
microsoft · windows 10 1809 · EPSS 14.32% · Threat 53CRITICAL 9
Public PoCATT&CK inferred
CVE-2026-4480CVE-2026-4480: A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job d…
redhat · openshift container platform · EPSS 13.93% · Threat 53CRITICAL 9.3
Public PoCATT&CK inferred
CVE-2025-2620CVE-2025-2620: A vulnerability has been found in D-Link DAP-1620 1.03 and classified as critical. This vu…
dlink · dap-1620 firmware · EPSS 8.85% · Threat 53CRITICAL 9.3
Public PoCATT&CK inferred
CVE-2026-33439CVE-2026-33439: Open Access Management (OpenAM) is an access management solution. Prior to 16.0.6, OpenIde…
openidentityplatform · openam · EPSS 8.43% · Threat 53HIGH 8.7
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-7771CVE-2025-7771: ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary r…
Unknown · · EPSS 8.14% · Threat 53HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2026-46368CVE-2026-46368: luci-app-https-dns-proxy through 2025.12.29-5 — an optional LuCI web UI add-on for the htt…
Unknown · · EPSS 7.83% · Threat 53HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-11392CVE-2024-11392: Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execut…
huggingface · transformers · EPSS 7.26% · Threat 53HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2023-33177CVE-2023-33177: Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xi…
xibosignage · xibo · EPSS 7.04% · Threat 53HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-24409CVE-2024-24409: Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege E…
zohocorp · manageengine admanager plus · EPSS 6.20% · Threat 53HIGH 8.9
Exploit-DBATT&CK inferred
CVE-2025-8730CVE-2025-8730: A vulnerability was found in Belkin F9K1009 and F9K1010 2.00.04/2.00.09 and classified as …
Unknown · · EPSS 3.53% · Threat 53CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2024-26503CVE-2024-26503: Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 an…
openeclass · openeclass · EPSS 2.96% · Threat 53CRITICAL 9
Exploit-DBATT&CK inferred
CVE-2024-35540CVE-2024-35540: A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to ex…
typecho · typecho · EPSS 2.83% · Threat 53CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2024-53537CVE-2024-53537: An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal i…
openpanel · openpanel · EPSS 2.36% · Threat 53CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2026-42607CVE-2026-42607: Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with admin…
Unknown · · EPSS 2.25% · Threat 53CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2024-42049CVE-2024-42049: TightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pip…
Unknown · · EPSS 2.15% · Threat 53HIGH 7.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2024-21287Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
Oracle · Agile Product Lifecycle Management (PLM) · EPSS 1.72% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-54957CVE-2025-54957: An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process …
Unknown · · EPSS 1.59% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-64564CVE-2026-64564: In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the …
Unknown · · EPSS 1.41% · Threat 53HIGH 8.6
Metasploit moduleATT&CK inferred
CVE-2025-66301CVE-2025-66301: Grav is a file-based Web platform. Prior to 1.8.0-beta.27, due to improper authorization c…
getgrav · grav · EPSS 1.34% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-63353CVE-2025-63353: A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default …
fiberhome · hg6145f1 firmware · EPSS 1.33% · Threat 53HIGH 7.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2023-4346KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
KNX Association · KNX Protocol Connection Authorization Option 1 · EPSS 1.29% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-85097CVE-2026-85097: The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file uploa…
Unknown · · EPSS 1.29% · Threat 53HIGH 7.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-45498Microsoft Defender Denial of Service Vulnerability
Microsoft · Defender · EPSS 1.27% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-34159CVE-2026-34159: llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC …
ggml · llama.cpp · EPSS 1.24% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-22738CVE-2026-22738: In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-suppl…
vmware · spring ai · EPSS 1.11% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-0920CVE-2026-0920: The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Administrati…
Unknown · · EPSS 1.11% · Threat 53CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2025-50455CVE-2025-50455: SQL injection vulnerability exists in the order_by parameter of the /customers/search endp…
Unknown · · EPSS 1.10% · Threat 53HIGH 7.5
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-27038Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Qualcomm · Multiple Chipsets · EPSS 1.02% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-54424CVE-2025-54424: 1Panel is a web interface and MCP Server that manages websites, files, containers, databas…
fit2cloud · 1panel · EPSS 1.01% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-27944CVE-2026-27944: Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.3, the /ap…
nginxui · nginx ui · EPSS 1.01% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-41089CVE-2026-41089: Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute…
microsoft · windows server 2012 · EPSS 0.97% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-41096CVE-2026-41096: Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to exe…
microsoft · windows 11 23h2 · EPSS 0.97% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-45185CVE-2026-45185: Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-f…
exim · exim · EPSS 0.94% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-63223CVE-2026-63223: CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, the is_image and mime_in up…
Unknown · · EPSS 0.80% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-8206CVE-2026-8206: The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vu…
Unknown · · EPSS 0.77% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-42779CVE-2026-42779: The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches. Here was the o…
apache · mina · EPSS 0.76% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-43682CVE-2026-43682: The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi…
apple · macos · EPSS 0.72% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2023-45612CVE-2023-45612: In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format…
jetbrains · ktor · EPSS 0.71% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-0006CVE-2026-0006: In multiple locations, there is a possible out of bounds read and write due to a heap buff…
google · android · EPSS 0.68% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-4606CVE-2025-4606: The Sala - Startup & SaaS WordPress Theme theme for WordPress is vulnerable to privilege e…
Unknown · · EPSS 0.66% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-54806CVE-2026-54806: Unauthenticated PHP Object Injection in WP Activity Log <= 5.6.3.1 versions.
Unknown · · EPSS 0.64% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-11551CVE-2026-11551: The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover…
Unknown · · EPSS 0.62% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-63888CVE-2025-63888: The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.…
thinkphp · thinkphp · EPSS 0.61% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-66034CVE-2025-66034: fontTools is a library for manipulating fonts, written in Python. In versions from 4.33.0 …
fonttools · fonttools · EPSS 0.55% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-14281CVE-2026-14281: The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code…
Unknown · · EPSS 0.53% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-5118CVE-2026-5118: The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versio…
Unknown · · EPSS 0.53% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-12793CVE-2026-12793: The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Pri…
Unknown · · EPSS 0.52% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-18366CVE-2026-18366: The Events Manager WordPress plugin before 7.4.1 does not properly scope its capability m…
Unknown · · EPSS 0.50% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2026-106173CVE-2026-106173: A improper limitation of a pathname to a restricted directory ('path traversal') vulnerabi…
Unknown · · EPSS 0.46% · Threat 53CRITICAL 9.8
Public PoCATT&CK inferred
CVE-2025-55575CVE-2025-55575: SQL Injection vulnerability in SMM Panel 3.1 allowing remote attackers to gain sensitive i…
Unknown · · EPSS 0.45% · Threat 53HIGH 8.1
Public PoCATT&CK inferred
CVE-2025-57833CVE-2025-57833: An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2…
djangoproject · django · EPSS 26.11% · Threat 52HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-56902CVE-2024-56902: Information disclosure vulnerability in Geovision GV-ASManager web application with the ve…
Unknown · · EPSS 23.41% · Threat 52MEDIUM 6.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2014-2120Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
Cisco · Adaptive Security Appliance (ASA) · EPSS 22.56% · Threat 52MEDIUM 6.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-66376Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS) · EPSS 20.23% · Threat 52HIGH 7.2
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-60787CVE-2025-60787: MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration para…
motioneye project · motioneye · EPSS 18.46% · Threat 52HIGH 8.8
Public PoCATT&CK inferred
CVE-2021-44967CVE-2021-44967: A Remote Code Execution (RCE) vulnerabilty exists in LimeSurvey 5.2.4 via the upload and i…
limesurvey · limesurvey · EPSS 13.50% · Threat 52HIGH 8.9
Public PoCATT&CK inferred
CVE-2025-1302CVE-2025-1302: Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Executio…
Unknown · · EPSS 10.39% · Threat 52CRITICAL 9.2
Public PoCATT&CK inferred
CVE-2026-67276CVE-2026-67276: RouterOS does not compare the complete RSA public key when matching an SSH authentication …
mikrotik · routeros · EPSS 6.45% · Threat 52CRITICAL 9.2
Public PoCATT&CK inferred
CVE-2026-109619CVE-2026-109619: PHP has various global state that temporarily points into request memory. In some scenario…
php · php · EPSS 6.22% · Threat 52CRITICAL 9.3
Public PoCATT&CK inferred
CVE-2026-61511CVE-2026-61511: vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability…
Unknown · · EPSS 5.61% · Threat 52HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2024-11237CVE-2024-11237: A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) …
tp-link · vn020-f3v\(t\) firmware · EPSS 5.33% · Threat 52HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2025-49484CVE-2025-49484: A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows…
Unknown · · EPSS 4.94% · Threat 52HIGH 8.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-5027CVE-2026-5027: The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the mult…
langflow · langflow · EPSS 4.76% · Threat 52HIGH 8.2
Metasploit moduleATT&CK inferred
CVE-2025-25205CVE-2025-25205: Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 a…
audiobookshelf · audiobookshelf · EPSS 4.75% · Threat 52HIGH 8.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-32462CVE-2025-32462: Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither …
sudo project · sudo · EPSS 4.48% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2025-60690CVE-2025-60690: A stack-based buffer overflow exists in the get_merge_ipaddr function of the httpd binary …
linksys · e1200 firmware · EPSS 4.15% · Threat 52HIGH 7.2
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-2749Kentico Xperience Path Traversal Vulnerability
Kentico · Kentico Xperience · EPSS 4.02% · Threat 52HIGH 8.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-59827CVE-2026-59827: Metabase is an open-source business intelligence and embedded analytics tool. Prior to 1.5…
metabase · metabase · EPSS 3.79% · Threat 52HIGH 7.2
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-3935ConnectWise ScreenConnect Improper Authentication Vulnerability
ConnectWise · ScreenConnect · EPSS 3.54% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-6244CVE-2024-6244: The PZ Frontend Manager WordPress plugin before 1.0.6 does not have CSRF checks in some pl…
projectzealous · pz frontend manager · EPSS 3.52% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2025-54769CVE-2025-54769: An authenticated, read-only user can upload a file and perform a directory traversal to ha…
xorux · lpar2rrd · EPSS 3.40% · Threat 52HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2024-52302CVE-2024-52302: common-user-management is a robust Spring Boot application featuring user management servi…
Unknown · · EPSS 3.36% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2026-24897CVE-2026-24897: Erugo is a self-hosted file-sharing platform. In versions up to and including 0.2.14, an a…
erugo · erugo · EPSS 3.27% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-39304CVE-2024-39304: ChurchCRM is an open-source church management system. Versions of the application prior to…
churchcrm · churchcrm · EPSS 2.98% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-48827CVE-2024-48827: An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code a…
sbond · watcharr · EPSS 2.79% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-56898CVE-2024-56898: Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. T…
Unknown · · EPSS 2.58% · Threat 52HIGH 7.2
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
Ivanti · Endpoint Manager Mobile (EPMM) · EPSS 2.54% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2019-13961CVE-2019-13961: A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary …
flatcore · flatcore · EPSS 2.25% · Threat 52CRITICAL 9.4
Public PoCATT&CK inferred
CVE-2025-69212CVE-2025-69212: OpenSTAManager is an open source management software for technical assistance and invoicin…
devcode · openstamanager · EPSS 1.94% · Threat 52HIGH 8.3
Metasploit moduleATT&CK inferred
CVE-2025-30005CVE-2025-30005: Xorcom CompletePBX is vulnerable to a path traversal via the Diagnostics reporting module,…
xorcom · completepbx · EPSS 1.88% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-56901CVE-2024-56901: A Cross-Site Request Forgery (CSRF) vulnerability in Geovision GV-ASWeb application with t…
Unknown · · EPSS 1.81% · Threat 52CRITICAL 9.4
Public PoCATT&CK inferred
CVE-2025-7783CVE-2025-7783: Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollu…
Unknown · · EPSS 1.81% · Threat 52HIGH 7.2
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2024-7694TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability
TeamT5 · ThreatSonar Anti-Ransomware · EPSS 1.79% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-50858CVE-2024-50858: Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF).…
gestioip · gestioip · EPSS 1.78% · Threat 52HIGH 7.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2024-43093Android Framework Privilege Escalation Vulnerability
Android · Framework · EPSS 0.71% · Threat 52MEDIUM 5.3
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-11182MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability
MDaemon · Email Server · EPSS 33.26% · Threat 51HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2025-58180CVE-2025-58180: OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint version…
octoprint · octoprint · EPSS 22.14% · Threat 51HIGH 8.3
Exploit-DBATT&CK inferred
CVE-2025-29471CVE-2025-29471: Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attac…
nagios · log server · EPSS 7.28% · Threat 51HIGH 7
Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred
CVE-2025-62215Microsoft Windows Race Condition Vulnerability
Microsoft · Windows · EPSS 4.46% · Threat 51HIGH 8.6
Exploit-DBATT&CK inferred
CVE-2025-10162CVE-2025-10162: The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin t…
Unknown · · EPSS 4.44% · Threat 51CRITICAL 9.2
Public PoCATT&CK inferred
CVE-2026-55200CVE-2026-55200: libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in …
libssh2 · libssh2 · EPSS 4.02% · Threat 51CRITICAL 9.2
Public PoCATT&CK inferred
CVE-2026-42945CVE-2026-42945: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module modul…
f5 · dos · EPSS 3.40% · Threat 51CRITICAL 9.3
Public PoCATT&CK inferred
CVE-2023-54391CVE-2023-54391: Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnera…
Unknown · · EPSS 3.06% · Threat 51HIGH 8.1
Metasploit moduleATT&CK inferred
CVE-2026-28289CVE-2026-28289: FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A patch…
freescout · freescout · EPSS 2.72% · Threat 51CRITICAL 9.2
Public PoCATT&CK inferred
CVE-2026-9256CVE-2026-9256: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module modul…
f5 · nginx open source · EPSS 2.70% · Threat 51CRITICAL 9.2
Public PoCATT&CK inferred
CVE-2026-27886CVE-2026-27886: Strapi is an open source headless content management system. Strapi versions starting in 4…
strapi · strapi · EPSS 2.52% · Threat 51HIGH 8.6
Exploit-DBATT&CK inferred
CVE-2026-56766CVE-2026-56766: Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authe…
Unknown · · EPSS 2.44% · Threat 51CRITICAL 9.3
Public PoCATT&CK inferred
CVE-2025-32434CVE-2025-32434: PyTorch is a Python package that provides tensor computation with strong GPU acceleration …
linuxfoundation · pytorch · EPSS 2.37% · Threat 51HIGH 7.1
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-21391Microsoft Windows Storage Link Following Vulnerability
Microsoft · Windows · EPSS 2.28% · Threat 51HIGH 8.6
Exploit-DBATT&CK inferred
CVE-2026-44403CVE-2026-44403: Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability…
wftpserver · wing ftp server · EPSS 2.28% · Threat 51CRITICAL 9.3
Public PoCATT&CK inferred
CVE-2024-54152CVE-2024-54152: Angular Expressions provides expressions for the Angular.JS web framework as a standalone …
Unknown · · EPSS 2.24% · Threat 51HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2026-26235CVE-2026-26235: JUNG Smart Visu Server 1.1.1050 contains a denial of service vulnerability that allows una…
jung-group · smart visu server firmware · EPSS 2.20% · Threat 51CRITICAL 9.2
Public PoCATT&CK inferred
CVE-2025-68428CVE-2025-68428: jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of…
parall · jspdf · EPSS 2.18% · Threat 51HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2026-67206CVE-2026-67206: Wolf CMS through 0.8.3.1 contains a remote code execution vulnerability in FileManagerCont…
Unknown · · EPSS 2.13% · Threat 51HIGH 8.6
Exploit-DBATT&CK inferred
CVE-2025-7766CVE-2025-7766: Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configurati…
Unknown · · EPSS 2.05% · Threat 51HIGH 7.1
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-0111Palo Alto Networks PAN-OS File Read Vulnerability
Palo Alto Networks · PAN-OS · EPSS 2.00% · Threat 51HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2026-25099CVE-2026-25099: Bludit’s API plugin allows an authenticated attacker with a valid API token to upload file…
bludit · bludit · EPSS 1.99% · Threat 51HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2024-4007CVE-2024-4007: Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3…
abb · aspect-ent-12 firmware · EPSS 1.51% · Threat 51HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2024-51546CVE-2024-51546: Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. …
abb · aspect-ent-12 firmware · EPSS 1.47% · Threat 51CRITICAL 9.4
Public PoCATT&CK inferred
CVE-2025-4517