CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 12:57 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-52691 RansomwareIn wildKEV | SM SmarterMail SmarterTools | 10.0 | Dec 29 | Upload Arbitrary Files |
| CVE-2025-68645 In wildKEV | ZC Zimbra Collaboration Suite Synacor | 8.8 | Dec 22 | Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability |
| CVE-2025-68613 In wildKEV | N8 n8n n8n-io | 8.8 | Dec 19 | n8n Vulnerable to Remote Code Execution via Expression Injection |
| CVE-2025-14847 In wildKEV | MO MongoDB MongoDB | 7.5 | Dec 19 | Zlib compressed protocol header length confusion may allow memory read |
| CVE-2025-14733 RansomwareIn wildKEV | FO Fireware OS WatchGuard | 9.8 | Dec 19 | WatchGuard Firebox iked Out of Bounds Write Vulnerability |
| CVE-2025-40602 In wildKEV | SM SMA1000 SonicWall | 6.6 | Dec 18 | SonicWall SMA1000 Missing Authorization Vulnerability |
| CVE-2025-68461 In wildKEV | WE Webmail Roundcube | 6.1 | Dec 18 | RoundCube Webmail Cross-site Scripting Vulnerability |
| CVE-2025-43529 In wildKEV | MA macOS Apple | 8.8 | Dec 17 | Apple Multiple Products Use-After-Free WebKit Vulnerability |
| CVE-2025-20393 In wildKEV | CS Cisco Secure Email Cisco | 10.0 | Dec 17 | Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability |
| CVE-2025-59374 In wildKEV | LU live update ASUS | 9.8 | Dec 17 | ASUS Live Update Embedded Malicious Code Vulnerability |
| CVE-2025-37164 In wildKEV | HO HPE OneView Hewlett Packard Enterprise (HPE) | 9.8 | Dec 16 | Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability |
| CVE-2025-14611 In wildKEV | CA CentreStack and TrioFox Gladinet | 9.8 | Dec 12 | Gladinet CentreStack and TrioFox Hard Coded AES Keys |
| CVE-2025-43510 In wildKEV | MA macOS Apple | 7.8 | Dec 12 | Apple Multiple Products Improper Locking Vulnerability |
| CVE-2025-43520 In wildKEV | MA macOS Apple | 5.5 | Dec 12 | Apple Multiple Products Classic Buffer Overflow Vulnerability |
| CVE-2025-14174 In wildKEV | CH Chrome Google | 8.8 | Dec 12 | Google Chromium Out of Bounds Memory Access Vulnerability |
| CVE-2025-8110 In wildKEV | GO Gogs Gogs | 8.8 | Dec 10 | File overwrite in file update API in Gogs |
| CVE-2025-62221 In wildKEV | WI Windows Microsoft | 7.8 | Dec 9 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2025-59718 In wildKEV | FO FortiOS Fortinet | 9.8 | Dec 9 | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability |
| CVE-2025-48633 In wildKEV | AN Android Google | 5.5 | Dec 8 | Android Framework Information Disclosure Vulnerability |
| CVE-2025-48572 In wildKEV | AN Android Google | 7.8 | Dec 8 | Android Framework Privilege Escalation Vulnerability |
| CVE-2025-34291 In wildKEV | LA Langflow Langflow | 8.8 | Dec 5 | Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE |
| CVE-2025-66644 In wildKEV | AA ArrayOS AG Array Networks | 9.8 | Dec 5 | Array Networks ArrayOS AG OS Command Injection Vulnerability |
| CVE-2025-55182 RansomwareIn wildKEV | RE react-server-dom-parcel Meta | 10.0 | Dec 3 | Meta React Server Components Remote Code Execution Vulnerability |
| CVE-2025-62593 In wildKEV | RA ray ray-project | 8.8 | Nov 26 | Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack |
| CVE-2025-58360 In wildKEV | GE geoserver geoserver | 9.8 | Nov 25 | GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature |
| CVE-2025-58034 In wildKEV | FO FortiWeb Fortinet | 7.2 | Nov 18 | Fortinet FortiWeb OS Command Injection Vulnerability |
| CVE-2025-13223 In wildKEV | CH Chrome Google | 8.8 | Nov 17 | Google Chromium V8 Type Confusion Vulnerability |
| CVE-2025-64446 In wildKEV | FO FortiWeb Fortinet | 9.8 | Nov 14 | Fortinet FortiWeb Path Traversal Vulnerability |
| CVE-2025-62215 In wildKEV | WI Windows Microsoft | 7.0 | Nov 11 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2025-60710 RansomwareIn wildKEV | WI Windows Microsoft | 7.8 | Nov 11 | Host Process for Windows Tasks Elevation of Privilege Vulnerability |
| CVE-2025-12480 In wildKEV | TR TrioFox TrioFox | 9.1 | Nov 10 | Gladinet Triofox Improper Access Control Vulnerability |
| CVE-2025-64328 In wildKEV | FI filestore FreePBX | 7.2 | Nov 7 | FreePBX Administration GUI is Vulnerable to Authenticated Command Injection |
| CVE-2023-43000 In wildKEV | MA macOS Apple | 8.8 | Nov 5 | Apple Multiple products Use-After-Free Vulnerability |
| CVE-2025-11953 In wildKEV | RN React Native Community Cli React-native-community | 9.8 | Nov 3 | Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests |