CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 17:00 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-25249 In wildKEV | FO FortiOS Fortinet | 9.8 | Jan 13 | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability |
| CVE-2025-66376 In wildKEV | CO Collaboration Zimbra | 6.1 | Jan 5 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability |
| CVE-2025-52691 RansomwareIn wildKEV | SM SmarterMail SmarterTools | 10.0 | Dec 29 | Upload Arbitrary Files |
| CVE-2025-68645 In wildKEV | ZC Zimbra Collaboration Suite Synacor | 8.8 | Dec 22 | Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability |
| CVE-2025-68613 In wildKEV | N8 n8n n8n-io | 8.8 | Dec 19 | n8n Vulnerable to Remote Code Execution via Expression Injection |
| CVE-2025-14847 In wildKEV | MO MongoDB MongoDB | 7.5 | Dec 19 | Zlib compressed protocol header length confusion may allow memory read |
| CVE-2025-14733 RansomwareIn wildKEV | FO Fireware OS WatchGuard | 9.8 | Dec 19 | WatchGuard Firebox iked Out of Bounds Write Vulnerability |
| CVE-2025-40602 In wildKEV | SM SMA1000 SonicWall | 6.6 | Dec 18 | SonicWall SMA1000 Missing Authorization Vulnerability |
| CVE-2025-68461 In wildKEV | WE Webmail Roundcube | 6.1 | Dec 18 | RoundCube Webmail Cross-site Scripting Vulnerability |
| CVE-2025-43529 In wildKEV | MA macOS Apple | 8.8 | Dec 17 | Apple Multiple Products Use-After-Free WebKit Vulnerability |
| CVE-2025-20393 In wildKEV | CS Cisco Secure Email Cisco | 10.0 | Dec 17 | Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability |
| CVE-2025-59374 In wildKEV | LU live update ASUS | 9.8 | Dec 17 | ASUS Live Update Embedded Malicious Code Vulnerability |
| CVE-2025-37164 In wildKEV | HO HPE OneView Hewlett Packard Enterprise (HPE) | 9.8 | Dec 16 | Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability |
| CVE-2025-14611 In wildKEV | CA CentreStack and TrioFox Gladinet | 9.8 | Dec 12 | Gladinet CentreStack and TrioFox Hard Coded AES Keys |
| CVE-2025-43510 In wildKEV | MA macOS Apple | 7.8 | Dec 12 | Apple Multiple Products Improper Locking Vulnerability |
| CVE-2025-43520 In wildKEV | MA macOS Apple | 5.5 | Dec 12 | Apple Multiple Products Classic Buffer Overflow Vulnerability |
| CVE-2025-14174 In wildKEV | CH Chrome Google | 8.8 | Dec 12 | Google Chromium Out of Bounds Memory Access Vulnerability |
| CVE-2025-8110 In wildKEV | GO Gogs Gogs | 8.8 | Dec 10 | File overwrite in file update API in Gogs |
| CVE-2025-62221 In wildKEV | WI Windows Microsoft | 7.8 | Dec 9 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2025-59718 In wildKEV | FO FortiOS Fortinet | 9.8 | Dec 9 | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability |
| CVE-2025-48633 In wildKEV | AN Android Google | 5.5 | Dec 8 | Android Framework Information Disclosure Vulnerability |
| CVE-2025-48572 In wildKEV | AN Android Google | 7.8 | Dec 8 | Android Framework Privilege Escalation Vulnerability |
| CVE-2025-34291 In wildKEV | LA Langflow Langflow | 8.8 | Dec 5 | Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE |
| CVE-2025-66644 In wildKEV | AA ArrayOS AG Array Networks | 9.8 | Dec 5 | Array Networks ArrayOS AG OS Command Injection Vulnerability |
| CVE-2025-55182 RansomwareIn wildKEV | RE react-server-dom-parcel Meta | 10.0 | Dec 3 | Meta React Server Components Remote Code Execution Vulnerability |
| CVE-2025-62593 In wildKEV | RA ray ray-project | 8.8 | Nov 26 | Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack |
| CVE-2025-58360 In wildKEV | GE geoserver geoserver | 9.8 | Nov 25 | GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature |
| CVE-2025-58034 In wildKEV | FO FortiWeb Fortinet | 7.2 | Nov 18 | Fortinet FortiWeb OS Command Injection Vulnerability |
| CVE-2025-13223 In wildKEV | CH Chrome Google | 8.8 | Nov 17 | Google Chromium V8 Type Confusion Vulnerability |
| CVE-2025-64446 In wildKEV | FO FortiWeb Fortinet | 9.8 | Nov 14 | Fortinet FortiWeb Path Traversal Vulnerability |
| CVE-2025-62215 In wildKEV | WI Windows Microsoft | 7.0 | Nov 11 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2025-60710 RansomwareIn wildKEV | WI Windows Microsoft | 7.8 | Nov 11 | Host Process for Windows Tasks Elevation of Privilege Vulnerability |
| CVE-2025-12480 In wildKEV | TR TrioFox TrioFox | 9.1 | Nov 10 | Gladinet Triofox Improper Access Control Vulnerability |
| CVE-2025-64328 In wildKEV | FI filestore FreePBX | 7.2 | Nov 7 | FreePBX Administration GUI is Vulnerable to Authenticated Command Injection |
| CVE-2023-43000 In wildKEV | MA macOS Apple | 8.8 | Nov 5 | Apple Multiple products Use-After-Free Vulnerability |
| CVE-2025-11953 In wildKEV | RN React Native Community Cli React-native-community | 9.8 | Nov 3 | Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests |
| CVE-2025-61757 In wildKEV | FM Fusion Middleware Oracle | 9.8 | Oct 21 | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability |
| CVE-2025-61932 In wildKEV | LE Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) MOTEX Inc. | 9.8 | Oct 20 | Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability |
| CVE-2025-53521 In wildKEV | BI BIG-IP F5 | 9.8 | Oct 15 | BigIP APM Vulnerability |
| CVE-2025-59287 In wildKEV | WI Windows Microsoft | 9.8 | Oct 14 | Windows Server Update Service (WSUS) Remote Code Execution Vulnerability |
| CVE-2025-59230 In wildKEV | WI Windows Microsoft | 7.8 | Oct 14 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
| CVE-2025-24990 In wildKEV | WI Windows Microsoft | 7.8 | Oct 14 | Windows Agere Modem Driver Elevation of Privilege Vulnerability |
| CVE-2025-39964 In wildKEV | KE Kernel Linux | 5.5 | Oct 13 | crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg |
| CVE-2025-61884 RansomwareIn wildKEV | OC Oracle Configurator Oracle Corporation | 7.5 | Oct 12 | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability |
| CVE-2025-11371 In wildKEV | CA CentreStack and TrioFox Gladinet | 7.5 | Oct 9 | Gladinet CentreStack and TrioFox Local File Inclusion Flaw |
| CVE-2025-61882 RansomwareIn wildKEV | OC Oracle Concurrent Processing Oracle Corporation | 9.8 | Oct 5 | Oracle E-Business Suite Unspecified Vulnerability |
| CVE-2025-41244 In wildKEV | VO VCF operations VMware | 7.8 | Sep 29 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) |
| CVE-2025-20362 In wildKEV | CS Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Cisco | 8.6 | Sep 25 | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability |
| CVE-2025-20333 In wildKEV | CS Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Cisco | 9.9 | Sep 25 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability |
| CVE-2025-20352 In wildKEV | IX IOS XE Cisco | 7.7 | Sep 24 | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability |