| CVE ID | Title | CVSS | OWASP | Date Added |
|---|---|---|---|---|
| CVE-2026-16812 | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | 10.0 CRITICAL | A03 | 2026-07-27 |
| CVE-2026-15409 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 10.0 CRITICAL | A10 | 2026-07-14 |
| CVE-2026-48282 | Adobe ColdFusion Path Traversal Vulnerability | 10.0 CRITICAL | A01 A03 | 2026-07-07 |
| CVE-2026-48558 | SimpleHelp Authentication Bypass Vulnerability | 10.0 CRITICAL | A07 | 2026-06-29 |
| CVE-2026-34908 | Ubiquiti UniFi OS Improper Access Control Vulnerability | 10.0 CRITICAL | 2026-06-23 | |
| CVE-2026-34909 | Ubiquiti UniFi OS Path Traversal Vulnerability | 10.0 CRITICAL | A01 | 2026-06-23 |
| CVE-2008-4250 | Microsoft Windows Buffer Overflow Vulnerability | 10.0 CRITICAL | 2026-05-20 | |
| CVE-2026-20182 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | 10.0 CRITICAL | A07 | 2026-05-14 |
| CVE-2025-32975 | Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability | 10.0 CRITICAL | A07 | 2026-04-20 |
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | 10.0 CRITICAL | A07 | 2026-02-25 |
| CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability | 10.0 CRITICAL | A07 | 2026-02-18 |
| CVE-2025-52691 | SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability | 10.0 CRITICAL | A04 | 2026-01-26 |
| CVE-2026-20805 | Microsoft Windows Information Disclosure 0-DAY | 10 CRITICAL | A01 | 2026-01-20 |
| CVE-2026-23550 | WordPress Ecosystem 0-DAY | 10 CRITICAL | A07 | 2026-01-18 |
| CVE-2024-57726 | SimpleHelp Missing Authorization Vulnerability | 9.9 CRITICAL | 2026-04-24 | |
| CVE-2025-68613 | n8n Improper Control of Dynamically-Managed Code Resources Vulnerability | 9.9 CRITICAL | 2026-03-11 | |
| CVE-2025-49113 | RoundCube Webmail Deserialization of Untrusted Data Vulnerability | 9.9 CRITICAL | A03 A08 | 2026-02-20 |
| CVE-2026-50522 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 9.8 CRITICAL | A08 | 2026-07-22 |
| CVE-2026-0770 | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 9.8 CRITICAL | 2026-07-21 | |
| CVE-2026-63030 | WordPress Core Interpretation Conflict Vulnerability | 9.8 CRITICAL | 2026-07-21 | |
| CVE-2026-39808 | Fortinet FortiSandbox OS Command Injection Vulnerability | 9.8 CRITICAL | A03 | 2026-07-16 |
| CVE-2026-25089 | Fortinet FortiSandbox OS Command Injection Vulnerability | 9.8 CRITICAL | A03 | 2026-07-16 |
| CVE-2026-58644 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 9.8 CRITICAL | A08 | 2026-07-16 |
| CVE-2026-46817 | Oracle E-Business Suite Improper Privilege Management Vulnerability | 9.8 CRITICAL | A04 | 2026-07-15 |
| CVE-2026-48939 | iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability | 9.8 CRITICAL | A04 | 2026-07-10 |
| CVE-2026-56291 | Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | 9.8 CRITICAL | A04 | 2026-07-10 |
| CVE-2026-56290 | Joomlack Page Builder Improper Access Control Vulnerability | 9.8 CRITICAL | A03 | 2026-07-07 |
| CVE-2026-48908 | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability | 9.8 CRITICAL | A04 | 2026-07-07 |
| CVE-2026-12569 | PTC Windchill and FlexPLM Improper Input Validation Vulnerability | 9.8 CRITICAL | A03 | 2026-06-25 |
| CVE-2025-67038 | Lantronix EDS5000 Code Injection Vulnerability | 9.8 CRITICAL | A03 | 2026-06-23 |
| CVE-2026-20253 | Splunk Enterprise Missing Authentication for Critical Function Vulnerability | 9.8 CRITICAL | A07 | 2026-06-18 |
| CVE-2026-45247 | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability | 9.8 CRITICAL | A08 | 2026-06-03 |
| CVE-2026-48172 | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | 9.8 CRITICAL | A04 | 2026-05-26 |
| CVE-2026-8398 | Daemon Tools Lite Embedded Malicious Code Vulnerability | 9.8 CRITICAL | A08 | 2026-05-27 |
| CVE-2026-42208 | BerriAI LiteLLM SQL Injection Vulnerability | 9.8 CRITICAL | A03 | 2026-05-08 |
| CVE-2026-41940 | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability | 9.8 CRITICAL | A07 | 2026-04-30 |
| CVE-2026-39987 | Marimo Remote Code Execution Vulnerability | 9.8 CRITICAL | A03 | 2026-04-23 |
| CVE-2026-21643 | Fortinet SQL Injection Vulnerability | 9.8 CRITICAL | A03 | 2026-04-13 |
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 9.8 CRITICAL | A03 | 2026-04-08 |
| CVE-2026-33017 | Langflow Code Injection Vulnerability | 9.8 CRITICAL | A03 | 2026-03-25 |
| CVE-2025-53521 | F5 BIG-IP Stack-Based Buffer Overflow Vulnerability | 9.8 CRITICAL | 2026-03-27 | |
| CVE-2026-3055 | Citrix NetScaler Out-of-Bounds Read Vulnerability | 9.8 CRITICAL | 2026-03-30 | |
| CVE-2026-35616 | Fortinet FortiClient EMS Improper Access Control Vulnerability | 9.8 CRITICAL | 2026-04-06 | |
| CVE-2021-22681 | Rockwell Multiple Products Insufficient Protected Credentials Vulnerability | 9.8 CRITICAL | 2026-03-05 | |
| CVE-2017-7921 | Hikvision Multiple Products Improper Authentication Vulnerability | 9.8 CRITICAL | A07 | 2026-03-05 |
| CVE-2025-26399 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 9.8 CRITICAL | A08 | 2026-03-09 |
| CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability | 9.8 CRITICAL | A03 | 2026-02-13 |
| CVE-2020-7796 | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability | 9.8 CRITICAL | A10 | 2026-02-17 |
| CVE-2024-43468 | Microsoft Configuration Manager SQL Injection Vulnerability | 9.8 CRITICAL | A03 | 2026-02-12 |
| CVE-2026-24423 | SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability | 9.8 CRITICAL | A07 | 2026-02-05 |
| CVE-2025-11953 | React Native Community CLI OS Command Injection Vulnerability | 9.8 CRITICAL | A03 | 2026-02-05 |
| CVE-2026-23760 | SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability | 9.8 CRITICAL | A07 | 2026-01-26 |
| CVE-2025-40551 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 9.8 CRITICAL | A08 | 2026-02-03 |
| CVE-2019-19006 | Sangoma FreePBX Improper Authentication Vulnerability | 9.8 CRITICAL | A07 | 2026-02-03 |
| CVE-2024-37079 | Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability | 9.8 CRITICAL | 2026-01-23 | |
| CVE-2026-24061 | GNU InetUtils Argument Injection Vulnerability | 9.8 CRITICAL | A03 | 2026-01-26 |
| CVE-2026-24858 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | 9.8 CRITICAL | A07 | 2026-01-27 |
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 9.8 CRITICAL | A03 | 2026-01-29 |
| CVE-2026-45321 | TanStack Unspecified Vulnerability | 9.6 CRITICAL | 2026-05-27 | |
| CVE-2026-50751 | Check Point Security Gateway Improper Authentication Vulnerability | 9.3 CRITICAL | A07 | 2026-06-08 |
| CVE-2026-48027 | Nx Console Embedded Malicious Code Vulnerability | 9.3 CRITICAL | A08 | 2026-05-27 |
| CVE-2010-0806 | Microsoft Internet Explorer Use-After-Free Vulnerability | 9.3 CRITICAL | 2026-05-20 | |
| CVE-2009-3459 | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | 9.3 CRITICAL | 2026-05-20 | |
| CVE-2009-1537 | Microsoft DirectX NULL Byte Overwrite Vulnerability | 9.3 CRITICAL | 2026-05-20 | |
| CVE-2026-0300 | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | 9.3 CRITICAL | 2026-05-06 | |
| CVE-2026-16232 | Check Point SmartConsole Improper Authentication Vulnerability | 9.1 CRITICAL | A07 | 2026-07-22 |
| CVE-2026-0257 | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 9.1 CRITICAL | A07 | 2026-05-29 |
| CVE-2026-45659 | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | 8.8 HIGH | A08 | 2026-07-01 |
| CVE-2026-11645 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 8.8 HIGH | 2026-06-09 | |
| CVE-2026-42271 | BerriAI LiteLLM Command Injection Vulnerability | 8.8 HIGH | A03 | 2026-06-08 |
| CVE-2025-34291 | Langflow Origin Validation Error Vulnerability | 8.8 HIGH | 2026-05-21 | |
| CVE-2010-0249 | Microsoft Internet Explorer Use-After-Free Vulnerability | 8.8 HIGH | 2026-06-03 | |
| CVE-2024-7399 | Samsung MagicINFO 9 Server Path Traversal Vulnerability | 8.8 HIGH | A01 | 2026-04-24 |
| CVE-2026-34197 | Apache ActiveMQ Improper Input Validation Vulnerability | 8.8 HIGH | A03 | 2026-04-16 |
| CVE-2009-0238 | Microsoft Office Remote Code Execution | 8.8 HIGH | A03 | 2026-04-14 |
| CVE-2023-21529 | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability | 8.8 HIGH | A08 | 2026-04-13 |
| CVE-2026-33634 | Aquasecurity Trivy Embedded Malicious Code Vulnerability | 8.8 HIGH | A08 | 2026-03-26 |
| CVE-2026-5281 | Google Dawn Use-After-Free Vulnerability | 8.8 HIGH | 2026-04-01 | |
| CVE-2023-43000 | Apple Multiple products Use-After-Free Vulnerability | 8.8 HIGH | 2026-03-05 | |
| CVE-2026-3909 | Google Skia Out-of-Bounds Write Vulnerability | 8.8 HIGH | 2026-03-13 | |
| CVE-2026-3910 | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | 8.8 HIGH | 2026-03-13 | |
| CVE-2026-25108 | Soliton Systems K.K FileZen OS Command Injection Vulnerability | 8.8 HIGH | A03 | 2026-02-24 |
| CVE-2026-2441 | Google Chromium CSS Use-After-Free Vulnerability | 8.8 HIGH | 2026-02-17 | |
| CVE-2008-0015 | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | 8.8 HIGH | A03 | 2026-02-17 |
| CVE-2026-21510 | Microsoft Windows Shell Protection Mechanism Failure Vulnerability | 8.8 HIGH | 2026-02-10 | |
| CVE-2026-21513 | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | 8.8 HIGH | 2026-02-10 | |
| CVE-2026-0628 | Microsoft Edge (Chromium WebView) | 8.8 HIGH | 2026-01-15 | |
| CVE-2026-20230 | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | 8.6 HIGH | A10 | 2026-06-25 |
| CVE-2026-34621 | Adobe Acrobat and Reader Prototype Pollution Vulnerability | 8.6 HIGH | A03 | 2026-04-13 |
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | 8.6 HIGH | A07 | 2026-03-09 |
| CVE-2025-64328 | Sangoma FreePBX OS Command Injection Vulnerability | 8.6 HIGH | A03 | 2026-02-03 |
| CVE-2026-54420 | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability | 8.5 HIGH | 2026-06-15 | |
| CVE-2026-55255 | Langflow Authorization Bypass Through User-Controlled Key Vulnerability | 8.4 HIGH | A01 | 2026-07-07 |
| CVE-2025-48595 | Android Framework Integer Overflow Vulnerability | 8.4 HIGH | 2026-06-02 | |
| CVE-2024-1708 | ConnectWise ScreenConnect Path Traversal Vulnerability | 8.4 HIGH | A01 | 2026-04-28 |
| CVE-2026-20952 | Microsoft Windows (January 2026) | 8.4 HIGH | A03 | 2026-01-14 |
| CVE-2026-20953 | Microsoft Office (January 2026) | 8.4 HIGH | A03 | 2026-01-14 |
| CVE-2026-20045 | Cisco Unified Communications Manager | 8.2 HIGH | A03 | 2026-01-12 |
| CVE-2021-27137 | DD-WRT Stack-Based Buffer Overflow Vulnerability | 8.1 HIGH | 2026-07-21 | |
| CVE-2026-42897 | Microsoft Exchange Server Cross-Site Scripting Vulnerability | 8.1 HIGH | A03 | 2026-05-15 |
| CVE-2025-40536 | SolarWinds Web Help Desk Security Control Bypass Vulnerability | 8.1 HIGH | 2026-02-12 | |
| CVE-2026-22719 | Broadcom VMware Aria Operations Command Injection Vulnerability | 8.1 HIGH | A03 | 2026-03-03 |
| CVE-2026-56155 | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | 7.8 HIGH | 2026-07-14 | |
| CVE-2026-20245 | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | 7.8 HIGH | 2026-06-09 | |
| CVE-2022-0492 | Linux Kernel Improper Authentication Vulnerability | 7.8 HIGH | A04 A07 | 2026-06-02 |
| CVE-2026-41091 | Microsoft Defender Link Following Vulnerability | 7.8 HIGH | 2026-05-20 | |
| CVE-2026-31431 | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | 7.8 HIGH | A03 | 2026-05-01 |
| CVE-2026-33825 | Microsoft Defender Insufficient Granularity of Access Control Vulnerability | 7.8 HIGH | 2026-04-22 | |
| CVE-2020-9715 | Adobe Acrobat Use-After-Free Vulnerability | 7.8 HIGH | 2026-04-13 | |
| CVE-2023-36424 | Microsoft Windows Out-of-Bounds Read Vulnerability | 7.8 HIGH | 2026-04-13 | |
| CVE-2025-60710 | Microsoft Windows Link Following Vulnerability | 7.8 HIGH | A04 | 2026-04-13 |
| CVE-2012-1854 | Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability | 7.8 HIGH | 2026-04-13 | |
| CVE-2026-3502 | TrueConf Client Download of Code Without Integrity Check Vulnerability | 7.8 HIGH | A08 | 2026-04-02 |
| CVE-2023-41974 | Apple iOS and iPadOS Use-After-Free Vulnerability | 7.8 HIGH | 2026-03-05 | |
| CVE-2021-30952 | Apple Multiple Products Integer Overflow or Wraparound Vulnerability | 7.8 HIGH | 2026-03-05 | |
| CVE-2022-20775 | Cisco SD-WAN Path Traversal Vulnerability | 7.8 HIGH | A01 | 2026-02-25 |
| CVE-2026-21514 | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability | 7.8 HIGH | A04 | 2026-02-10 |
| CVE-2026-21519 | Microsoft Windows Type Confusion Vulnerability | 7.8 HIGH | 2026-02-10 | |
| CVE-2026-21533 | Microsoft Windows Improper Privilege Management Vulnerability | 7.8 HIGH | A04 | 2026-02-10 |
| CVE-2026-20700 | Apple Multiple Buffer Overflow Vulnerability | 7.8 HIGH | 2026-02-12 | |
| CVE-2026-21509 | Microsoft Office Security Feature Bypass Vulnerability | 7.8 HIGH | A04 | 2026-01-26 |
| CVE-2018-14634 | Linux Kernel Integer Overflow Vulnerability | 7.8 HIGH | 2026-01-26 | |
| CVE-2026-20944 | Microsoft Word Remote Code Execution | 7.8 HIGH | A03 | 2026-01-10 |
| CVE-2026-21385 | Qualcomm Multiple Chipsets Memory Corruption Vulnerability 0-DAY | 7.8 HIGH | 2026-03-03 | |
| CVE-2025-15556 | Notepad++ Download of Code Without Integrity Check Vulnerability | 7.7 HIGH | A08 | 2026-02-12 |
| CVE-2023-4346 | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | 7.5 HIGH | 2026-07-15 | |
| CVE-2026-28318 | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | 7.5 HIGH | A03 | 2026-06-05 |
| CVE-2024-21182 | Oracle WebLogic Server Unspecified Vulnerability | 7.5 HIGH | 2026-06-01 | |
| CVE-2026-20128 | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | 7.5 HIGH | 2026-04-20 | |
| CVE-2023-27351 | PaperCut NG/MF Improper Authentication Vulnerability | 7.5 HIGH | A07 | 2026-04-20 |
| CVE-2021-22054 | Omnissa Workspace ONE Server-Side Request Forgery | 7.5 HIGH | A10 | 2026-03-09 |
| CVE-2024-27199 | JetBrains TeamCity Relative Path Traversal Vulnerability | 7.3 HIGH | A01 | 2026-04-20 |
| CVE-2026-15410 | SonicWall SMA1000 Appliances Code Injection Vulnerability | 7.2 HIGH | A03 | 2026-07-14 |
| CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | 7.2 HIGH | A03 | 2026-05-07 |
| CVE-2024-57728 | SimpleHelp Path Traversal Vulnerability | 7.2 HIGH | A01 | 2026-04-24 |
| CVE-2025-29635 | D-Link DIR-823X Command Injection Vulnerability | 7.2 HIGH | A03 | 2026-04-24 |
| CVE-2025-2749 | Kentico Xperience Path Traversal Vulnerability | 7.2 HIGH | A01 | 2026-04-20 |
| CVE-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability | 7.2 HIGH | A04 | 2026-02-17 |
| CVE-2025-68461 | RoundCube Webmail Cross-site Scripting Vulnerability | 7.2 HIGH | A03 | 2026-02-20 |
| CVE-2021-22175 | GitLab Server-Side Request Forgery (SSRF) Vulnerability | 6.8 MEDIUM | A10 | 2026-02-18 |
| CVE-2021-39935 | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability | 6.8 MEDIUM | A10 | 2026-02-03 |
| CVE-2026-34926 | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | 6.7 MEDIUM | A01 | 2026-05-21 |
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | 6.5 MEDIUM | A01 | 2026-06-15 |
| CVE-2026-9082 | Drupal Core SQL Injection Vulnerability | 6.5 MEDIUM | A03 A04 | 2026-05-22 |
| CVE-2026-20133 | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 6.5 MEDIUM | 2026-04-20 | |
| CVE-2026-32201 | Microsoft SharePoint Server Improper Input Validation Vulnerability | 6.5 MEDIUM | A03 | 2026-04-14 |
| CVE-2026-21525 | Microsoft Windows NULL Pointer Dereference Vulnerability | 6.2 MEDIUM | 2026-02-10 | |
| CVE-2025-48700 | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 6.1 MEDIUM | A03 | 2026-04-20 |
| CVE-2025-68686 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 5.9 MEDIUM | 2026-07-27 | |
| CVE-2026-60137 | WordPress Core SQL Injection Vulnerability | 5.9 MEDIUM | A03 | 2026-07-21 |
| CVE-2026-7473 | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | 5.8 MEDIUM | 2026-06-09 | |
| CVE-2026-20122 | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | 5.4 MEDIUM | 2026-04-20 | |
| CVE-2026-56164 | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | 5.3 MEDIUM | A07 | 2026-07-14 |
| CVE-2008-4128 | Cisco IOS Cross-Site Request Forgery Vulnerability | 4.3 MEDIUM | A01 | 2026-07-13 |
| CVE-2026-32202 | Microsoft Windows Protection Mechanism Failure Vulnerability | 4.3 MEDIUM | 2026-04-28 | |
| CVE-2026-45498 | Microsoft Defender Denial of Service Vulnerability | 4.0 MEDIUM | 2026-05-20 | |
| CVE-2026-34910 | Ubiquiti UniFi OS Improper Input Validation Vulnerability | N/A UNKNOWN | A03 | 2026-06-23 |
| CVE-2026-48907 | Widget Factory Joomla Content Editor Improper Access Control Vulnerability | N/A UNKNOWN | 2026-06-16 | |
| CVE-2026-10520 | Ivanti Sentry OS Command Injection Vulnerability | N/A UNKNOWN | A03 | 2026-06-11 |
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | N/A UNKNOWN | A07 | 2026-06-12 |
| CVE ID | Title | CVSS | OWASP | Date Added |
|---|---|---|---|---|
| CVE-2025-37164 | Hewlett Packard Enterprise (HPE) OneView | 9.8 CRITICAL | A03 | 2025-12-15 |
| CVE-2025-34026 | Versa Concerto | 9.2 CRITICAL | A07 | 2025-11-20 |
| CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) | 8.8 HIGH | A03 | 2025-10-05 |
| CVE-2025-8110 | Gogs | 8.1 HIGH | A01 | 2025-09-18 |
| CVE-2025-31125 | Vite Vitejs | 7.5 HIGH | 2025-08-22 | |
| CVE-2025-36911 | Bluetooth Ecosystem | 7.5 HIGH | 2025-07-10 | |
| CVE-2025-53690 | State-Sponsored Exploitation (Sitecore) 0-DAY | 10 CRITICAL | 2025-06-05 | |
| CVE-2025-54313 | Prettier eslint-config-prettier | N/A UNKNOWN | A08 | 2025-05-15 |
| CVE-2009-0556 | Microsoft Office PowerPoint Code Injection 0-DAY | 9.3 CRITICAL | A03 | 2009-04-02 |
FixTheVuln Store
Master Vulnerability Management
Structured study planners for Security+, CySA+, and 60+ certifications. Domain trackers, time blocking, and exam strategies.
Shop Study Planners