CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 16:51 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-30066 In wildKEV | CH changed-files tj-actions | 8.6 | Mar 15 | tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability |
| CVE-2025-21590 In wildKEV | JO Junos OS Juniper | 4.4 | Mar 12 | Junos OS: An local attacker with shell access can execute arbitrary code |
| CVE-2025-27915 In wildKEV | ZC Zimbra Collaboration Suite Synacor | 5.4 | Mar 12 | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability |
| CVE-2025-24201 In wildKEV | IO iOS Apple | 10.0 | Mar 11 | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability |
| CVE-2025-26633 RansomwareIn wildKEV | WI Windows Microsoft | 7.0 | Mar 11 | Microsoft Management Console Security Feature Bypass Vulnerability |
| CVE-2025-24993 In wildKEV | WI Windows Microsoft | 7.8 | Mar 11 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2025-24991 In wildKEV | WI Windows Microsoft | 5.5 | Mar 11 | Windows NTFS Information Disclosure Vulnerability |
| CVE-2025-24985 In wildKEV | WI Windows Microsoft | 7.8 | Mar 11 | Windows Fast FAT File System Driver Remote Code Execution Vulnerability |
| CVE-2025-24984 In wildKEV | WI Windows Microsoft | 4.6 | Mar 11 | Windows NTFS Information Disclosure Vulnerability |
| CVE-2025-24983 In wildKEV | WI Windows Microsoft | 7.0 | Mar 11 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2025-24054 In wildKEV | WI Windows Microsoft | 5.4 | Mar 11 | NTLM Hash Disclosure Spoofing Vulnerability |
| CVE-2024-54085 In wildKEV | ME MegaRAC-SPx AMI | 9.8 | Mar 11 | Redfish Authentication Bypass |
| CVE-2025-27363 In wildKEV | FR FreeType FreeType | 8.1 | Mar 11 | FreeType Out-of-Bounds Write Vulnerability |
| CVE-2025-24813 In wildKEV | TO Tomcat Apache | 9.8 | Mar 10 | Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT |
| CVE-2025-1316 In wildKEV | II IC-7100 IP Camera Edimax | 9.8 | Mar 4 | Edimax IC-7100 IP Camera OS Command Injection |
| CVE-2025-22226 In wildKEV | ES ESXi VMware | 6.0 | Mar 4 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability |
| CVE-2025-22225 RansomwareIn wildKEV | ES ESXi VMware | 8.2 | Mar 4 | VMware ESXi Arbitrary Write Vulnerability |
| CVE-2025-22224 In wildKEV | ES ESXi VMware | 8.2 | Mar 4 | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability |
| CVE-2024-48248 In wildKEV | BR Backup & Replication Director NAKIVO | 8.6 | Mar 4 | NAKIVO Backup and Replication Absolute Path Traversal Vulnerability |
| CVE-2025-24893 In wildKEV | XW xwiki-platform xwiki | 9.8 | Feb 20 | Remote code execution as guest via SolrSearchMacros request in xwiki |
| CVE-2025-24989 In wildKEV | MP Microsoft Power Pages Microsoft | 9.8 | Feb 19 | Microsoft Power Pages Elevation of Privilege Vulnerability |
| CVE-2025-0111 In wildKEV | PA PAN-OS Palo Alto Networks | 6.5 | Feb 12 | PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface |
| CVE-2025-0108 In wildKEV | PA PAN-OS Palo Alto Networks | 9.1 | Feb 12 | PAN-OS: Authentication Bypass in the Management Web Interface |
| CVE-2025-21418 In wildKEV | WI Windows Microsoft | 7.8 | Feb 11 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2025-21391 In wildKEV | WI Windows Microsoft | 7.1 | Feb 11 | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2025-24472 RansomwareIn wildKEV | FO FortiOS Fortinet | 8.1 | Feb 11 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability |
| CVE-2025-24016 In wildKEV | WA wazuh wazuh | 9.9 | Feb 10 | Remote code execution in Wazuh server |
| CVE-2025-24200 In wildKEV | IO iOS Apple | 6.1 | Feb 10 | Apple iOS and iPadOS Incorrect Authorization Vulnerability |
| CVE-2025-0994 In wildKEV | CI Cityworks Trimble | 8.8 | Feb 6 | Trimble Cityworks Deserialization Vulnerability |
| CVE-2024-40891 In wildKEV | VF VMG4325-B10A firmware Zyxel | 8.8 | Feb 4 | Zyxel DSL CPE OS Command Injection Vulnerability |
| CVE-2024-40890 In wildKEV | VF VMG4325-B10A firmware Zyxel | 8.8 | Feb 4 | Zyxel DSL CPE OS Command Injection Vulnerability |
| CVE-2024-57968 In wildKEV | VE VeraCore Advantive | 8.8 | Feb 3 | Advantive VeraCore Unrestricted File Upload Vulnerability |
| CVE-2023-52163 In wildKEV | DP Ds-2105 Pro Firmware Digiever | 8.8 | Feb 3 | Digiever DS-2105 Pro Missing Authorization Vulnerability |
| CVE-2025-25181 In wildKEV | VE VeraCore Advantive | 7.5 | Feb 3 | Advantive VeraCore SQL Injection Vulnerability |
| CVE-2025-24085 In wildKEV | IO iOS Apple | 10.0 | Jan 27 | Apple Multiple Products Use-After-Free Vulnerability |
| CVE-2025-0411 In wildKEV | 7Z 7-Zip 7-Zip | 7.0 | Jan 25 | 7-Zip Mark-of-the-Web Bypass Vulnerability |
| CVE-2025-23006 RansomwareIn wildKEV | SM SMA1000 SonicWall | 9.8 | Jan 23 | SonicWall SMA1000 Appliances Deserialization Vulnerability |
| CVE-2025-23209 In wildKEV | CM cms craftcms | 8.1 | Jan 18 | Potential RCE with a compromised security key in craft/cms |
| CVE-2024-57726 RansomwareIn wildKEV | SI Simplehelp Simple-help | 9.9 | Jan 15 | SimpleHelp Missing Authorization Vulnerability |
| CVE-2024-57727 RansomwareIn wildKEV | SI Simplehelp Simple-help | 7.5 | Jan 15 | SimpleHelp Path Traversal Vulnerability |
| CVE-2024-57728 RansomwareIn wildKEV | SI Simplehelp Simple-help | 7.2 | Jan 15 | SimpleHelp Path Traversal Vulnerability |
| CVE-2025-21334 In wildKEV | WI Windows Microsoft | 7.8 | Jan 14 | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
| CVE-2025-21333 In wildKEV | WI Windows Microsoft | 7.8 | Jan 14 | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
| CVE-2025-21335 In wildKEV | WI Windows Microsoft | 7.8 | Jan 14 | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
| CVE-2024-13159 In wildKEV | EM Endpoint Manager Ivanti | 7.5 | Jan 14 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability |
| CVE-2024-13160 In wildKEV | EM Endpoint Manager Ivanti | 7.5 | Jan 14 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability |
| CVE-2024-13161 In wildKEV | EM Endpoint Manager Ivanti | 7.5 | Jan 14 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability |
| CVE-2024-55591 RansomwareIn wildKEV | FO FortiOS Fortinet | 9.8 | Jan 14 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability |
| CVE-2024-53704 RansomwareIn wildKEV | SO SonicOS SonicWall | 9.8 | Jan 9 | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability |
| CVE-2025-0282 RansomwareIn wildKEV | CS Connect Secure Ivanti | 9.0 | Jan 8 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability |