Verdict
Weaponised and widely attempted
Reliable public exploit code exists, or mass exploitation attempts are probable. Patch inside days, not weeks. 637 vulnerabilities in this band.
- CVE-2016-10033 PHPMailer Command Injection Vulnerability PHP · PHPMailer
- CVE-2024-0769 D-Link DIR-859 Router Path Traversal Vulnerability D-Link · DIR-859 Router
- CVE-2024-54085 AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability AMI · MegaRAC SPx
- CVE-2025-33053 Microsoft Windows External Control of File Name or Path Vulnerability Microsoft · Windows
- CVE-2025-24016 Wazuh Server Deserialization of Untrusted Data Vulnerability Wazuh · Wazuh Server
- CVE-2024-42009 RoundCube Webmail Cross-Site Scripting Vulnerability Roundcube · Webmail
- CVE-2025-32433 Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability Erlang · Erlang/OTP
- CVE-2021-32030 ASUS Routers Improper Authentication Vulnerability ASUS · Routers
- CVE-2024-56145 Craft CMS Code Injection Vulnerability Craft CMS · Craft CMS
- CVE-2023-38950 ZKTeco BioTime Path Traversal Vulnerability ZKTeco · BioTime
- CVE-2025-4428 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2025-4427 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2024-12987 DrayTek Vigor Routers OS Command Injection Vulnerability DrayTek · Vigor Routers
- CVE-2025-34028 Commvault Command Center Path Traversal Vulnerability Commvault · Command Center
- CVE-2024-58136 Yiiframework Yii Improper Protection of Alternate Path Vulnerability Yiiframework · Yii
- CVE-2024-38475 Apache HTTP Server Improper Escaping of Output Vulnerability Apache · HTTP Server
- CVE-2023-44221 SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall · SMA100 Appliances
- CVE-2025-24054 Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability Microsoft · Windows
- CVE-2025-30406 Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability Gladinet · CentreStack
- CVE-2025-24813 Apache Tomcat Path Equivalence Vulnerability Apache · Tomcat
- CVE-2024-20439 Cisco Smart Licensing Utility Static Credential Vulnerability Cisco · Smart Licensing Utility
- CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore · CMS and Experience Platform (XP)
- CVE-2017-12637 SAP NetWeaver Directory Traversal Vulnerability SAP · NetWeaver
- CVE-2024-48248 NAKIVO Backup and Replication Absolute Path Traversal Vulnerability NAKIVO · Backup and Replication
- CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection Vulnerability Edimax · IC-7100 IP Camera
- CVE-2025-30066 tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability tj-actions · changed-files GitHub Action
- CVE-2024-13161 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2024-13160 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2024-13159 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2025-25181 Advantive VeraCore SQL Injection Vulnerability Advantive · VeraCore
- CVE-2024-4885 Progress WhatsUp Gold Path Traversal Vulnerability Progress · WhatsUp Gold
- CVE-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability Hitachi Vantara · Pentaho Business Analytics (BA) Server
- CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability Hitachi Vantara · Pentaho Business Analytics (BA) Server
- CVE-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability Cisco · Small Business RV Series Routers
- CVE-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2017-3066 Adobe ColdFusion Deserialization Vulnerability Adobe · ColdFusion
- CVE-2025-0108 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks · PAN-OS
- CVE-2024-21413 Microsoft Outlook Improper Input Validation Vulnerability Microsoft · Office Outlook
- CVE-2025-0411 7-Zip Mark of the Web Bypass Vulnerability 7-Zip · 7-Zip
- CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability Paessler · PRTG Network Monitor
- CVE-2018-9276 Paessler PRTG Network Monitor OS Command Injection Vulnerability Paessler · PRTG Network Monitor
- CVE-2024-29059 Microsoft .NET Framework Information Disclosure Vulnerability Microsoft · .NET Framework
- CVE-2024-45195 Apache OFBiz Forced Browsing Vulnerability Apache · OFBiz
- CVE-2020-11023 JQuery Cross-Site Scripting (XSS) Vulnerability JQuery · JQuery
- CVE-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability Aviatrix · Controllers
- CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server
- CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
- CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability NUUO · NVRmini Devices
- CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability Adobe · ColdFusion
- CVE-2024-11680 ProjectSend Improper Authentication Vulnerability ProjectSend · ProjectSend
- CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability VMware · vCenter Server
- CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability Progress · Kemp LoadMaster
- CVE-2024-9465 Palo Alto Networks Expedition SQL Injection Vulnerability Palo Alto Networks · Expedition
- CVE-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability Palo Alto Networks · Expedition
- CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability Atlassian · Jira Server and Data Center
- CVE-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability Metabase · Metabase
- CVE-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability Microsoft · Windows
- CVE-2019-16278 Nostromo nhttpd Directory Traversal Vulnerability Nostromo · nhttpd
- CVE-2024-5910 Palo Alto Networks Expedition Missing Authentication Vulnerability Palo Alto Networks · Expedition
- CVE-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability PTZOptics · PT30X-SDI/NDI Cameras
- CVE-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability PTZOptics · PT30X-SDI/NDI Cameras
- CVE-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability Fortinet · FortiManager
- CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability SolarWinds · Web Help Desk
- CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability Ivanti · Cloud Services Appliance (CSA)
- CVE-2024-23113 Fortinet Multiple Products Format String Vulnerability Fortinet · Multiple Products
- CVE-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2020-15415 DrayTek Multiple Vigor Routers OS Command Injection Vulnerability DrayTek · Multiple Vigor Routers
- CVE-2023-25280 D-Link DIR-820 Router OS Command Injection Vulnerability D-Link · DIR-820 Router
- CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability Ivanti · Virtual Traffic Manager
- CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability Ivanti · Cloud Services Appliance (CSA)
- CVE-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability Oracle · WebLogic Server
- CVE-2022-21445 Oracle ADF Faces Deserialization of Untrusted Data Vulnerability Oracle · ADF Faces
- CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability Microsoft · SQL Server
- CVE-2024-27348 Apache HugeGraph-Server Improper Access Control Vulnerability Apache · HugeGraph-Server
- CVE-2014-0497 Adobe Flash Player Integer Underflow Vulnerablity Adobe · Flash Player
- CVE-2024-43461 Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft · Windows
- CVE-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability Ivanti · Cloud Services Appliance
- CVE-2016-3714 ImageMagick Improper Input Validation Vulnerability ImageMagick · ImageMagick
- CVE-2021-20124 Draytek VigorConnect Path Traversal Vulnerability DrayTek · VigorConnect
- CVE-2021-20123 Draytek VigorConnect Path Traversal Vulnerability DrayTek · VigorConnect
- CVE-2024-38856 Apache OFBiz Incorrect Authorization Vulnerability Apache · OFBiz
- CVE-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability Dahua · IP Camera Firmware
- CVE-2021-33044 Dahua IP Camera Authentication Bypass Vulnerability Dahua · IP Camera Firmware
- CVE-2024-28986 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds · Web Help Desk
- CVE-2024-32113 Apache OFBiz Path Traversal Vulnerability Apache · OFBiz
- CVE-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability Microsoft · Windows
- CVE-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability Acronis · Cyber Infrastructure (ACI)
- CVE-2024-5217 ServiceNow Incomplete List of Disallowed Inputs Vulnerability ServiceNow · Utah, Vancouver, and Washington DC Now Platform
- CVE-2024-4879 ServiceNow Improper Input Validation Vulnerability ServiceNow · Utah, Vancouver, and Washington DC Now Platform
- CVE-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2024-28995 SolarWinds Serv-U Path Traversal Vulnerability SolarWinds · Serv-U
- CVE-2024-34102 Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability Adobe · Commerce and Magento Open Source
- CVE-2024-36401 OSGeo GeoServer GeoTools Eval Injection Vulnerability OSGeo · GeoServer
- CVE-2024-23692 Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Rejetto · HTTP File Server
- CVE-2024-38112 Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft · Windows
- CVE-2020-13965 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2022-24816 OSGeo GeoServer JAI-EXT Code Injection Vulnerability OSGeo · JAI-EXT
- CVE-2024-4358 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability Progress · Telerik Report Server
- CVE-2017-3506 Oracle WebLogic Server OS Command Injection Vulnerability Oracle · WebLogic Server
- CVE-2020-17519 Apache Flink Improper Access Control Vulnerability Apache · Flink
- CVE-2021-40655 D-Link DIR-605 Router Information Disclosure Vulnerability D-Link · DIR-605 Router
- CVE-2023-7028 GitLab Community and Enterprise Editions Improper Access Control Vulnerability GitLab · GitLab CE/EE
- CVE-2024-4040 CrushFTP VFS Sandbox Escape Vulnerability CrushFTP · CrushFTP
- CVE-2024-20353 Cisco ASA and FTD Denial of Service Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2024-3273 D-Link Multiple NAS Devices Command Injection Vulnerability D-Link · Multiple NAS Devices
- CVE-2024-3272 D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability D-Link · Multiple NAS Devices
- CVE-2019-7256 Nice Linear eMerge E3-Series OS Command Injection Vulnerability Nice · Linear eMerge E3-Series
- CVE-2021-36380 Sunhillo SureLine OS Command Injection Vulnerablity Sunhillo · SureLine
- CVE-2023-43770 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2023-34048 VMware vCenter Server Out-of-Bounds Write Vulnerability VMware · vCenter Server
- CVE-2023-6549 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2018-15133 Laravel Deserialization of Untrusted Data Vulnerability Laravel · Laravel Framework
- CVE-2023-23752 Joomla! Improper Access Control Vulnerability Joomla! · Joomla!
- CVE-2016-20017 D-Link DSL-2750B Devices Command Injection Vulnerability D-Link · DSL-2750B Devices
- CVE-2023-27524 Apache Superset Insecure Default Initialization of Resource Vulnerability Apache · Superset
- CVE-2023-49897 FXC AE1021, AE1021PE OS Command Injection Vulnerability FXC · AE1021, AE1021PE
- CVE-2023-47565 QNAP VioStor NVR OS Command Injection Vulnerability QNAP · VioStor NVR
Nothing on this page matches that filter.