CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 14:38 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-33053 In wildKEV | WI Windows Microsoft | 8.8 | Jun 10 | Internet Shortcut Files Remote Code Execution Vulnerability |
| CVE-2025-47827 In wildKEV | IO Igel OS Igel | 4.6 | Jun 5 | IGEL OS Use of a Key Past its Expiration Date Vulnerability |
| CVE-2025-21479 In wildKEV | SN Snapdragon Qualcomm, Inc. | 8.6 | Jun 3 | Incorrect Authorization in Graphics |
| CVE-2025-27038 In wildKEV | SN Snapdragon Qualcomm, Inc. | 7.5 | Jun 3 | Use After Free in Graphics |
| CVE-2025-21480 In wildKEV | SN Snapdragon Qualcomm, Inc. | 8.6 | Jun 3 | Incorrect Authorization in Graphics Windows |
| CVE-2025-5419 In wildKEV | CH Chrome Google | 8.8 | Jun 2 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability |
| CVE-2025-5086 In wildKEV | DA DELMIA Apriso Dassault Systèmes | 9.0 | Jun 2 | Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 |
| CVE-2025-49113 In wildKEV | WE Webmail Roundcube | 8.8 | Jun 2 | RoundCube Webmail Deserialization of Untrusted Data Vulnerability |
| CVE-2025-48927 In wildKEV | SE service TeleMessage | 5.3 | May 28 | TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability |
| CVE-2025-48928 In wildKEV | SE service TeleMessage | 4.0 | May 28 | TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability |
| CVE-2025-34026 In wildKEV | CO Concerto Versa | 7.5 | May 21 | Versa Concerto Actuator Authentication Bypass Information Leak |
| CVE-2025-4008 In wildKEV | ME MeteoBridge Smartbedded | 8.8 | May 21 | Arbitrary Command Injection in Smartbedded MeteoBridge |
| CVE-2025-30397 In wildKEV | WI Windows Microsoft | 7.5 | May 13 | Scripting Engine Memory Corruption Vulnerability |
| CVE-2025-32709 In wildKEV | WI Windows Microsoft | 7.8 | May 13 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2025-32706 In wildKEV | WI Windows Microsoft | 7.8 | May 13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2025-32701 In wildKEV | WI Windows Microsoft | 7.8 | May 13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2025-30400 In wildKEV | WI Windows Microsoft | 7.8 | May 13 | Microsoft DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2025-4428 In wildKEV | EM Endpoint Manager Mobile Ivanti | 8.8 | May 13 | Remote Code Execution |
| CVE-2025-4427 In wildKEV | EM Endpoint Manager Mobile Ivanti | 7.5 | May 13 | Authentication Bypass |
| CVE-2025-32756 In wildKEV | FO FortiCamera Fortinet | 9.8 | May 13 | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability |
| CVE-2025-4632 In wildKEV | M9 MagicINFO 9 Server Samsung Electronics | 9.8 | May 13 | Samsung MagicINFO 9 Server Path Traversal Vulnerability |
| CVE-2025-42999 RansomwareIn wildKEV | SN SAP NetWeaver (Visual Composer development server) SAP_SE | 9.1 | May 13 | Insecure Deserialization in SAP NetWeaver (Visual Composer development server) |
| CVE-2025-47729 In wildKEV | AB archiving backend TeleMessage | 4.9 | May 8 | TeleMessage TM SGNL Hidden Functionality Vulnerability |
| CVE-2025-35939 In wildKEV | CM CMS Craft | 5.3 | May 7 | Craft CMS stores user-provided content in session files |
| CVE-2025-2776 In wildKEV | SO SysAid On-Prem SysAid | 9.8 | May 7 | SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection |
| CVE-2025-2775 In wildKEV | SO SysAid On-Prem SysAid | 7.5 | May 7 | SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection |
| CVE-2025-27920 In wildKEV | OM Output Messenger Srimax | 8.8 | May 5 | Srimax Output Messenger Directory Traversal Vulnerability |
| CVE-2025-3935 In wildKEV | SC ScreenConnect ConnectWise | 7.2 | Apr 25 | ScreenConnect Exposure to ASP.NET ViewState Code Injection |
| CVE-2025-3928 In wildKEV | WS Web Server Commvault | 8.8 | Apr 25 | Commvault Web Server unspecified vulnerability |
| CVE-2025-32432 In wildKEV | CM cms craftcms | 10.0 | Apr 25 | Craft CMS Allows Remote Code Execution |
| CVE-2025-31324 RansomwareIn wildKEV | SN SAP NetWeaver (Visual Composer development server) SAP_SE | 9.8 | Apr 24 | Missing Authorization check in SAP NetWeaver (Visual Composer development server) |
| CVE-2025-1976 In wildKEV | FO Fabric OS Brocade | 6.7 | Apr 24 | Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 |
| CVE-2025-34028 In wildKEV | CC Command Center Innovation Release Commvault | 10.0 | Apr 22 | Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal |
| CVE-2025-42599 In wildKEV | AM Active! mail 6 QUALITIA CO., LTD. | 9.8 | Apr 18 | Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability |
| CVE-2025-32433 In wildKEV | OT otp erlang | 10.0 | Apr 16 | Erlang/OTP SSH Vulnerable to Pre-Authentication RCE |
| CVE-2025-31200 In wildKEV | MA macOS Apple | 9.8 | Apr 16 | Apple Multiple Products Memory Corruption Vulnerability |
| CVE-2025-31201 In wildKEV | MA macOS Apple | 9.8 | Apr 16 | Apple Multiple Products Arbitrary Read and Write Vulnerability |
| CVE-2024-58136 In wildKEV | YI Yii yiiframework | 9.8 | Apr 10 | Yiiframework Yii Improper Protection of Alternate Path Vulnerability |
| CVE-2025-29824 RansomwareIn wildKEV | WI Windows Microsoft | 7.8 | Apr 8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2025-3248 RansomwareIn wildKEV | LA langflow langflow-ai | 9.8 | Apr 7 | Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code |
| CVE-2025-22457 RansomwareIn wildKEV | CS Connect Secure Ivanti | 9.8 | Apr 3 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability |
| CVE-2025-31161 RansomwareIn wildKEV | CR CrushFTP CrushFTP | 9.8 | Apr 3 | CrushFTP Authentication Bypass Vulnerability |
| CVE-2025-30406 In wildKEV | CE CentreStack Gladinet | 9.8 | Apr 3 | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability |
| CVE-2025-31125 In wildKEV | VI vite vitejs | 7.5 | Mar 31 | Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query |
| CVE-2025-2783 In wildKEV | CH Chrome Google | 8.3 | Mar 26 | Google Chromium Mojo Sandbox Escape Vulnerability |
| CVE-2025-29635 In wildKEV | DF Dir-823x Firmware Dlink | 7.2 | Mar 25 | D-Link DIR-823X Command Injection Vulnerability |
| CVE-2025-2749 In wildKEV | XP Xperience Kentico | 7.2 | Mar 24 | Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE |
| CVE-2025-2747 In wildKEV | XP Xperience Kentico | 9.8 | Mar 24 | Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass |
| CVE-2025-2746 In wildKEV | XP Xperience Kentico | 9.8 | Mar 24 | Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass |
| CVE-2025-30154 In wildKEV | RE reviewdog reviewdog | 8.6 | Mar 19 | Multiple Reviewdog actions were compromised during a specific time period |