HackZoneLabs News
Newsletter

Known exploited vulnerabilities

From CISA’s Known Exploited Vulnerabilities catalogue: flaws that attackers are using now, when each was added, and the date federal agencies were told to fix it by.

Feed of new additions

In the catalogue
1781
Added in the last 7 days
12
Used in ransomware
361

The catalogue, newest first

CVEVendorProductNameAddedFix dueRansomware
CVE-2025-25257FortinetFortiWebFortinet FortiWeb SQL Injection Vulnerability18 Jul 20258 Aug 2025Unknown
CVE-2025-47812Wing FTP ServerWing FTP ServerWing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability14 Jul 20254 Aug 2025Unknown
CVE-2025-5777CitrixNetScaler ADC and GatewayCitrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability10 Jul 202511 Jul 2025Known
CVE-2014-3931Looking GlassMulti-Router Looking Glass (MRLG)Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability7 Jul 202528 Jul 2025Unknown
CVE-2016-10033PHPPHPMailerPHPMailer Command Injection Vulnerability7 Jul 202528 Jul 2025Unknown
CVE-2019-5418RailsRuby on RailsRails Ruby on Rails Path Traversal Vulnerability7 Jul 202528 Jul 2025Unknown
CVE-2019-9621SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability7 Jul 202528 Jul 2025Unknown
CVE-2025-6554GoogleChromium V8Google Chromium V8 Type Confusion Vulnerability2 Jul 202523 Jul 2025Unknown
CVE-2025-48927TeleMessageTM SGNLTeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability1 Jul 202522 Jul 2025Unknown
CVE-2025-48928TeleMessageTM SGNLTeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability1 Jul 202522 Jul 2025Unknown
CVE-2025-6543CitrixNetScaler ADC and GatewayCitrix NetScaler ADC and Gateway Buffer Overflow Vulnerability30 Jun 202521 Jul 2025Unknown
CVE-2019-6693FortinetFortiOSFortinet FortiOS Use of Hard-Coded Credentials Vulnerability25 Jun 202516 Jul 2025Known
CVE-2024-0769D-LinkDIR-859 RouterD-Link DIR-859 Router Path Traversal Vulnerability25 Jun 202516 Jul 2025Unknown
CVE-2024-54085AMIMegaRAC SPxAMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability25 Jun 202516 Jul 2025Unknown
CVE-2023-0386LinuxKernelLinux Kernel Improper Ownership Management Vulnerability17 Jun 20258 Jul 2025Unknown
CVE-2023-33538TP-LinkMultiple RoutersTP-Link Multiple Routers Command Injection Vulnerability16 Jun 20257 Jul 2025Unknown
CVE-2025-43200AppleMultiple ProductsApple Multiple Products Unspecified Vulnerability16 Jun 20257 Jul 2025Unknown
CVE-2025-24016WazuhWazuh ServerWazuh Server Deserialization of Untrusted Data Vulnerability10 Jun 20251 Jul 2025Unknown
CVE-2025-33053MicrosoftWindowsMicrosoft Windows External Control of File Name or Path Vulnerability10 Jun 20251 Jul 2025Unknown
CVE-2024-42009RoundcubeWebmailRoundCube Webmail Cross-Site Scripting Vulnerability9 Jun 202530 Jun 2025Unknown
CVE-2025-32433ErlangErlang/OTPErlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability9 Jun 202530 Jun 2025Unknown
CVE-2025-5419GoogleChromium V8Google Chromium V8 Out-of-Bounds Read and Write Vulnerability5 Jun 202526 Jun 2025Unknown
CVE-2025-21479QualcommMultiple ChipsetsQualcomm Multiple Chipsets Incorrect Authorization Vulnerability3 Jun 202524 Jun 2025Unknown
CVE-2025-21480QualcommMultiple ChipsetsQualcomm Multiple Chipsets Incorrect Authorization Vulnerability3 Jun 202524 Jun 2025Unknown
CVE-2025-27038QualcommMultiple ChipsetsQualcomm Multiple Chipsets Use-After-Free Vulnerability3 Jun 202524 Jun 2025Unknown
CVE-2021-32030ASUSRoutersASUS Routers Improper Authentication Vulnerability2 Jun 202523 Jun 2025Unknown
CVE-2023-39780ASUSRT-AX55 RoutersASUS RT-AX55 Routers OS Command Injection Vulnerability2 Jun 202523 Jun 2025Unknown
CVE-2024-56145Craft CMSCraft CMSCraft CMS Code Injection Vulnerability2 Jun 202523 Jun 2025Unknown
CVE-2025-35939Craft CMSCraft CMSCraft CMS External Control of Assumed-Immutable Web Parameter Vulnerability2 Jun 202523 Jun 2025Unknown
CVE-2025-3935ConnectWiseScreenConnectConnectWise ScreenConnect Improper Authentication Vulnerability2 Jun 202523 Jun 2025Unknown
CVE-2025-4632SamsungMagicINFO 9 ServerSamsung MagicINFO 9 Server Path Traversal Vulnerability22 May 202512 Jun 2025Unknown
CVE-2023-38950ZKTecoBioTimeZKTeco BioTime Path Traversal Vulnerability19 May 20259 Jun 2025Unknown
CVE-2024-11182MDaemonEmail ServerMDaemon Email Server Cross-Site Scripting (XSS) Vulnerability19 May 20259 Jun 2025Unknown
CVE-2024-27443SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability19 May 20259 Jun 2025Unknown
CVE-2025-27920SrimaxOutput MessengerSrimax Output Messenger Directory Traversal Vulnerability19 May 20259 Jun 2025Unknown
CVE-2025-4427IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability19 May 20259 Jun 2025Unknown
CVE-2025-4428IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability19 May 20259 Jun 2025Unknown
CVE-2024-12987DrayTekVigor RoutersDrayTek Vigor Routers OS Command Injection Vulnerability15 May 20255 Jun 2025Unknown
CVE-2025-42999SAPNetWeaverSAP NetWeaver Deserialization Vulnerability15 May 20255 Jun 2025Known
CVE-2025-32756FortinetMultiple ProductsFortinet Multiple Products Stack-Based Buffer Overflow Vulnerability14 May 20254 Jun 2025Unknown
CVE-2025-30397MicrosoftWindowsMicrosoft Windows Scripting Engine Type Confusion Vulnerability13 May 20253 Jun 2025Unknown
CVE-2025-30400MicrosoftWindowsMicrosoft Windows DWM Core Library Use-After-Free Vulnerability13 May 20253 Jun 2025Unknown
CVE-2025-32701MicrosoftWindowsMicrosoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability13 May 20253 Jun 2025Unknown
CVE-2025-32706MicrosoftWindowsMicrosoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability13 May 20253 Jun 2025Unknown
CVE-2025-32709MicrosoftWindowsMicrosoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability13 May 20253 Jun 2025Unknown
CVE-2025-47729TeleMessageTM SGNLTeleMessage TM SGNL Hidden Functionality Vulnerability12 May 20252 Jun 2025Unknown
CVE-2024-11120GeoVisionMultiple DevicesGeoVision Devices OS Command Injection Vulnerability7 May 202528 May 2025Unknown
CVE-2024-6047GeoVisionMultiple DevicesGeoVision Devices OS Command Injection Vulnerability7 May 202528 May 2025Unknown
CVE-2025-27363FreeTypeFreeTypeFreeType Out-of-Bounds Write Vulnerability6 May 202527 May 2025Unknown
CVE-2025-3248LangflowLangflowLangflow Missing Authentication Vulnerability5 May 202526 May 2025Known
CVE-2024-58136YiiframeworkYiiYiiframework Yii Improper Protection of Alternate Path Vulnerability2 May 202523 May 2025Unknown
CVE-2025-34028CommvaultCommand CenterCommvault Command Center Path Traversal Vulnerability2 May 202523 May 2025Unknown
CVE-2023-44221SonicWallSMA100 AppliancesSonicWall SMA100 Appliances OS Command Injection Vulnerability1 May 202522 May 2025Unknown
CVE-2024-38475ApacheHTTP ServerApache HTTP Server Improper Escaping of Output Vulnerability1 May 202522 May 2025Unknown
CVE-2025-31324SAPNetWeaverSAP NetWeaver Unrestricted File Upload Vulnerability29 Apr 202520 May 2025Known
CVE-2025-1976BroadcomBrocade Fabric OSBroadcom Brocade Fabric OS Code Injection Vulnerability28 Apr 202519 May 2025Unknown
CVE-2025-3928CommvaultWeb ServerCommvault Web Server Unspecified Vulnerability28 Apr 202519 May 2025Unknown
CVE-2025-42599QualitiaActive! MailQualitia Active! Mail Stack-Based Buffer Overflow Vulnerability28 Apr 202519 May 2025Unknown
CVE-2025-24054MicrosoftWindowsMicrosoft Windows NTLM Hash Disclosure Spoofing Vulnerability17 Apr 20258 May 2025Unknown
CVE-2025-31200AppleMultiple ProductsApple Multiple Products Memory Corruption Vulnerability17 Apr 20258 May 2025Unknown
CVE-2025-31201AppleMultiple ProductsApple Multiple Products Arbitrary Read and Write Vulnerability17 Apr 20258 May 2025Unknown
CVE-2021-20035SonicWallSMA100 AppliancesSonicWall SMA100 Appliances OS Command Injection Vulnerability16 Apr 20257 May 2025Unknown
CVE-2024-53150LinuxKernelLinux Kernel Out-of-Bounds Read Vulnerability9 Apr 202530 Apr 2025Unknown
CVE-2024-53197LinuxKernelLinux Kernel Out-of-Bounds Access Vulnerability9 Apr 202530 Apr 2025Unknown
CVE-2025-29824MicrosoftWindowsMicrosoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability8 Apr 202529 Apr 2025Known
CVE-2025-30406GladinetCentreStackGladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability8 Apr 202529 Apr 2025Unknown
CVE-2025-31161CrushFTPCrushFTPCrushFTP Authentication Bypass Vulnerability7 Apr 202528 Apr 2025Known
CVE-2025-22457IvantiConnect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability4 Apr 202511 Apr 2025Known
CVE-2025-24813ApacheTomcatApache Tomcat Path Equivalence Vulnerability1 Apr 202522 Apr 2025Unknown
CVE-2024-20439CiscoSmart Licensing UtilityCisco Smart Licensing Utility Static Credential Vulnerability31 Mar 202521 Apr 2025Unknown
CVE-2025-2783GoogleChromium MojoGoogle Chromium Mojo Sandbox Escape Vulnerability27 Mar 202517 Apr 2025Unknown
CVE-2019-9874SitecoreCMS and Experience Platform (XP)Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability26 Mar 202516 Apr 2025Unknown
CVE-2019-9875SitecoreCMS and Experience Platform (XP)Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability26 Mar 202516 Apr 2025Unknown
CVE-2025-30154reviewdogaction-setup GitHub Actionreviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability24 Mar 202514 Apr 2025Unknown
CVE-2017-12637SAPNetWeaverSAP NetWeaver Directory Traversal Vulnerability19 Mar 20259 Apr 2025Unknown
CVE-2024-48248NAKIVOBackup and ReplicationNAKIVO Backup and Replication Absolute Path Traversal Vulnerability19 Mar 20259 Apr 2025Unknown
CVE-2025-1316EdimaxIC-7100 IP CameraEdimax IC-7100 IP Camera OS Command Injection Vulnerability19 Mar 20259 Apr 2025Unknown
CVE-2025-24472FortinetFortiOS and FortiProxyFortinet FortiOS and FortiProxy Authentication Bypass Vulnerability18 Mar 20258 Apr 2025Known
CVE-2025-30066tj-actionschanged-files GitHub Actiontj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability18 Mar 20258 Apr 2025Unknown
CVE-2025-21590JuniperJunos OSJuniper Junos OS Improper Isolation or Compartmentalization Vulnerability13 Mar 20253 Apr 2025Unknown
CVE-2025-24201AppleMultiple ProductsApple Multiple Products WebKit Out-of-Bounds Write Vulnerability13 Mar 20253 Apr 2025Unknown
CVE-2025-24983MicrosoftWindowsMicrosoft Windows Win32k Use-After-Free Vulnerability11 Mar 20251 Apr 2025Unknown
CVE-2025-24984MicrosoftWindowsMicrosoft Windows NTFS Information Disclosure Vulnerability11 Mar 20251 Apr 2025Unknown
CVE-2025-24985MicrosoftWindowsMicrosoft Windows Fast FAT File System Driver Integer Overflow Vulnerability11 Mar 20251 Apr 2025Unknown
CVE-2025-24991MicrosoftWindowsMicrosoft Windows NTFS Out-Of-Bounds Read Vulnerability11 Mar 20251 Apr 2025Unknown
CVE-2025-24993MicrosoftWindowsMicrosoft Windows NTFS Heap-Based Buffer Overflow Vulnerability11 Mar 20251 Apr 2025Unknown
CVE-2025-26633MicrosoftWindowsMicrosoft Windows Management Console (MMC) Improper Neutralization Vulnerability11 Mar 20251 Apr 2025Known
CVE-2024-13159IvantiEndpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability10 Mar 202531 Mar 2025Unknown
CVE-2024-13160IvantiEndpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability10 Mar 202531 Mar 2025Unknown
CVE-2024-13161IvantiEndpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability10 Mar 202531 Mar 2025Unknown
CVE-2024-57968AdvantiveVeraCoreAdvantive VeraCore Unrestricted File Upload Vulnerability10 Mar 202531 Mar 2025Unknown
CVE-2025-25181AdvantiveVeraCoreAdvantive VeraCore SQL Injection Vulnerability10 Mar 202531 Mar 2025Unknown
CVE-2024-50302LinuxKernelLinux Kernel Use of Uninitialized Resource Vulnerability4 Mar 202525 Mar 2025Unknown
CVE-2025-22224VMwareESXi and WorkstationVMware ESXi and Workstation TOCTOU Race Condition Vulnerability4 Mar 202525 Mar 2025Unknown
CVE-2025-22225VMwareESXiVMware ESXi Arbitrary Write Vulnerability4 Mar 202525 Mar 2025Known
CVE-2025-22226VMwareESXi, Workstation, and FusionVMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability4 Mar 202525 Mar 2025Unknown
CVE-2018-8639MicrosoftWindowsMicrosoft Windows Win32k Improper Resource Shutdown or Release Vulnerability3 Mar 202524 Mar 2025Known
CVE-2022-43769Hitachi VantaraPentaho Business Analytics (BA) ServerHitachi Vantara Pentaho BA Server Special Element Injection Vulnerability3 Mar 202524 Mar 2025Unknown
CVE-2022-43939Hitachi VantaraPentaho Business Analytics (BA) ServerHitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability3 Mar 202524 Mar 2025Unknown
CVE-2023-20118CiscoSmall Business RV Series RoutersCisco Small Business RV Series Routers Command Injection Vulnerability3 Mar 202524 Mar 2025Unknown