Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2618new in the last 7 days
- 2added as actively exploited
- 195critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2025-14847 Exploited |
Not yet scored | MongoDB MongoDB and MongoDB Server Operating systems & software |
MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability | 29 Dec 2025 |
| CVE-2023-52163 Exploited |
Not yet scored | Digiever DS-2105 Pro Operating systems & software |
Digiever DS-2105 Pro Missing Authorization Vulnerability | 22 Dec 2025 |
| CVE-2025-14733 Exploited |
Not yet scored | WatchGuard Firebox Network & security devices |
WatchGuard Firebox Out of Bounds Write Vulnerability | 19 Dec 2025 |
| CVE-2025-59374 Exploited |
Not yet scored | ASUS Live Update Applications & supply chain |
ASUS Live Update Embedded Malicious Code Vulnerability | 17 Dec 2025 |
| CVE-2025-40602 Exploited |
Not yet scored | SonicWall SMA1000 appliance Network & security devices |
SonicWall SMA1000 Missing Authorization Vulnerability | 17 Dec 2025 |
| CVE-2025-20393 Exploited |
Not yet scored | Cisco Multiple Products Network & security devices |
Cisco Multiple Products Improper Input Validation Vulnerability | 17 Dec 2025 |
| CVE-2025-59718 Exploited |
Not yet scored | Fortinet Multiple Products Identity & access |
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability | 16 Dec 2025 |
| CVE-2025-14611 Exploited |
Not yet scored | Gladinet CentreStack and Triofox Operating systems & software |
Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability | 15 Dec 2025 |
| CVE-2025-43529 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Use-After-Free WebKit Vulnerability | 15 Dec 2025 |
| CVE-2025-14174 Exploited |
Not yet scored | Google Chromium Operating systems & software |
Google Chromium Out of Bounds Memory Access Vulnerability | 12 Dec 2025 |
| CVE-2018-4063 Exploited |
Not yet scored | Sierra Wireless AirLink ALEOS Operating systems & software |
Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability | 12 Dec 2025 |
| CVE-2025-58360 Exploited |
Not yet scored | OSGeo GeoServer Operating systems & software |
OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability | 11 Dec 2025 |
| CVE-2025-62221 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Use After Free Vulnerability | 9 Dec 2025 |
| CVE-2025-6218 Exploited |
Not yet scored | RARLAB WinRAR Operating systems & software |
RARLAB WinRAR Path Traversal Vulnerability | 9 Dec 2025 |
| CVE-2022-37055 Exploited |
Not yet scored | D-Link Routers Network & security devices |
D-Link Routers Buffer Overflow Vulnerability | 8 Dec 2025 |
| CVE-2025-66644 Exploited |
Not yet scored | Array Networks ArrayOS AG Operating systems & software |
Array Networks ArrayOS AG OS Command Injection Vulnerability | 8 Dec 2025 |
| CVE-2025-55182 Exploited |
Not yet scored | Meta React Server Components Operating systems & software |
Meta React Server Components Remote Code Execution Vulnerability | 5 Dec 2025 |
| CVE-2021-26828 Exploited |
Not yet scored | OpenPLC ScadaBR OT, ICS & IoT |
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability | 3 Dec 2025 |
| CVE-2025-48633 Exploited |
Not yet scored | Android Framework Operating systems & software |
Android Framework Information Disclosure Vulnerability | 2 Dec 2025 |
| CVE-2025-48572 Exploited |
Not yet scored | Android Framework Operating systems & software |
Android Framework Privilege Escalation Vulnerability | 2 Dec 2025 |
| CVE-2021-26829 Exploited |
Not yet scored | OpenPLC ScadaBR OT, ICS & IoT |
OpenPLC ScadaBR Cross-site Scripting Vulnerability | 28 Nov 2025 |
| CVE-2025-61757 Exploited |
Not yet scored | Oracle Fusion Middleware Identity & access |
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | 21 Nov 2025 |
| CVE-2025-13223 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 19 Nov 2025 |
| CVE-2025-58034 Exploited |
Not yet scored | Fortinet FortiWeb Network & security devices |
Fortinet FortiWeb OS Command Injection Vulnerability | 18 Nov 2025 |
| CVE-2025-64446 Exploited |
Not yet scored | Fortinet FortiWeb Network & security devices |
Fortinet FortiWeb Path Traversal Vulnerability | 14 Nov 2025 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.