CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 19:02 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-10585 In wildKEV | CH Chrome Google | 9.8 | Sep 24 | Google Chromium V8 Type Confusion Vulnerability |
| CVE-2025-26399 RansomwareIn wildKEV | WH Web Help Desk SolarWinds | 9.8 | Sep 23 | SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability |
| CVE-2025-48703 In wildKEV | CW CentOS Web Panel centos-webpanel | 9.0 | Sep 19 | CWP Control Web Panel OS Command Injection Vulnerability |
| CVE-2025-59689 In wildKEV | ES Email Security Gateway Libraesva | 6.1 | Sep 19 | Libraesva Email Security Gateway Command Injection Vulnerability |
| CVE-2025-10035 RansomwareIn wildKEV | GM GoAnywhere MFT Fortra | 9.8 | Sep 18 | Deserialization Vulnerability in GoAnywhere MFT's License Servlet |
| CVE-2025-9242 In wildKEV | FO Fireware OS WatchGuard | 9.8 | Sep 17 | WatchGuard Firebox iked Out of Bounds Write Vulnerability |
| CVE-2025-21043 In wildKEV | SM Samsung Mobile Devices Samsung Mobile | 9.8 | Sep 12 | Samsung Mobile Devices Out-of-Bounds Write Vulnerability |
| CVE-2025-21042 In wildKEV | SM Samsung Mobile Devices Samsung Mobile | 9.8 | Sep 12 | Samsung Mobile Devices Out-of-Bounds Write Vulnerability |
| CVE-2025-54236 In wildKEV | CO Commerce Adobe | 9.1 | Sep 9 | Adobe Commerce | Improper Input Validation (CWE-20) |
| CVE-2025-39682 In wildKEV | KE Kernel Linux | 9.8 | Sep 5 | tls: fix handling of zero-length records on the rx_list |
| CVE-2025-48543 In wildKEV | AN Android Google | 8.8 | Sep 4 | Android Runtime Use-After-Free Vulnerability |
| CVE-2025-53690 In wildKEV | EM Experience Manager (XM) Sitecore | 9.0 | Sep 3 | Sitecore Products ViewState Deserialization Vulnerability |
| CVE-2025-9377 In wildKEV | AC Archer C7(EU) V2 TP-Link Systems Inc. | 7.2 | Aug 29 | Authenticated RCE via Parental Control command injection |
| CVE-2025-55177 In wildKEV | WB WhatsApp Business for iOS Facebook | 5.4 | Aug 29 | Meta Platforms WhatsApp Incorrect Authorization Vulnerability |
| CVE-2025-57819 In wildKEV | EN endpoint FreePBX | 9.8 | Aug 28 | FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE |
| CVE-2025-7775 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Aug 26 | Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service |
| CVE-2025-43300 In wildKEV | IO iOS Apple | 10.0 | Aug 21 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability |
| CVE-2025-8875 In wildKEV | NC N-central N-able | 7.8 | Aug 14 | Insecure Deserialization Vulnerability |
| CVE-2025-8876 In wildKEV | NC N-central N-able | 8.8 | Aug 14 | Command Injection Vulnerability |
| CVE-2025-8088 RansomwareIn wildKEV | WI WinRAR win.rar GmbH | 8.8 | Aug 8 | Path traversal vulnerability in WinRAR |
| CVE-2025-54253 In wildKEV | AE Adobe Experience Manager Adobe | 10.0 | Aug 5 | Adobe Experience Manager | Incorrect Authorization (CWE-863) |
| CVE-2025-54948 In wildKEV | AO Apex One Trend Micro | 9.8 | Aug 5 | Trend Micro Apex One OS Command Injection Vulnerability |
| CVE-2025-6205 In wildKEV | DA DELMIA Apriso Dassault Systèmes | 9.1 | Aug 4 | Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 |
| CVE-2025-6204 In wildKEV | DA DELMIA Apriso Dassault Systèmes | 8.0 | Aug 4 | Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 |
| CVE-2025-31277 In wildKEV | MA macOS Apple | 8.8 | Jul 29 | Apple Multiple Products Buffer Overflow Vulnerability |
| CVE-2025-38352 In wildKEV | KE Kernel Linux | 7.8 | Jul 22 | posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() |
| CVE-2025-53770 RansomwareIn wildKEV | SH SharePoint Microsoft | 9.8 | Jul 20 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2025-54313 In wildKEV | ES eslint-config-prettier prettier | 7.5 | Jul 19 | Prettier eslint-config-prettier Embedded Malicious Code Vulnerability |
| CVE-2025-54309 In wildKEV | CR CrushFTP CrushFTP | 9.8 | Jul 18 | CrushFTP Unprotected Alternate Channel Vulnerability |
| CVE-2025-54068 In wildKEV | LI livewire livewire | 9.8 | Jul 17 | Livewire vulnerable to remote command execution during property update hydration |
| CVE-2025-25257 In wildKEV | FO FortiWeb Fortinet | 9.8 | Jul 17 | Fortinet FortiWeb SQL Injection Vulnerability |
| CVE-2025-20337 In wildKEV | CI Cisco Identity Services Engine Software Cisco | 10.0 | Jul 16 | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability |
| CVE-2025-6558 In wildKEV | CH Chrome Google | 8.8 | Jul 15 | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability |
| CVE-2025-47812 In wildKEV | WF Wing FTP Server wftpserver | 10.0 | Jul 10 | Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability |
| CVE-2025-47813 In wildKEV | WF Wing FTP Server wftpserver | 4.3 | Jul 10 | Wing FTP Server Information Disclosure Vulnerability |
| CVE-2025-48384 In wildKEV | GI git git | 8.0 | Jul 8 | Git allows arbitrary code execution through broken config quoting |
| CVE-2025-49706 RansomwareIn wildKEV | SH SharePoint Microsoft | 6.5 | Jul 8 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2025-49704 RansomwareIn wildKEV | SH SharePoint Microsoft | 8.8 | Jul 8 | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2025-6554 In wildKEV | CH Chrome Google | 8.1 | Jun 30 | Google Chromium V8 Type Confusion Vulnerability |
| CVE-2025-32463 In wildKEV | SU Sudo Sudo project | 7.8 | Jun 30 | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability |
| CVE-2025-20281 In wildKEV | CI Cisco Identity Services Engine Software Cisco | 10.0 | Jun 25 | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability |
| CVE-2025-6543 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Jun 25 | Memory overflow vulnerability leading to unintended control flow and Denial of Service |
| CVE-2025-32975 In wildKEV | KS Kace Systems Management Appliance Quest | 10.0 | Jun 24 | Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability |
| CVE-2025-48700 In wildKEV | ZC Zimbra Collaboration Suite Synacor | 6.1 | Jun 23 | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability |
| CVE-2025-6218 In wildKEV | WI WinRAR RARLAB | 7.8 | Jun 21 | RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability |
| CVE-2025-5777 RansomwareIn wildKEV | NA NetScaler ADC Citrix | 7.5 | Jun 17 | NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread |
| CVE-2025-43200 In wildKEV | IO iOS Apple | 4.2 | Jun 16 | Apple Multiple Products Unspecified Vulnerability |
| CVE-2025-33073 In wildKEV | WI Windows Microsoft | 8.8 | Jun 10 | Windows SMB Client Elevation of Privilege Vulnerability |
| CVE-2025-33053 In wildKEV | WI Windows Microsoft | 8.8 | Jun 10 | Internet Shortcut Files Remote Code Execution Vulnerability |
| CVE-2025-47827 In wildKEV | IO Igel OS Igel | 4.6 | Jun 5 | IGEL OS Use of a Key Past its Expiration Date Vulnerability |