Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 460new in the last 7 days
- 8added as actively exploited
- 40critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2024-8068 Exploited |
Not yet scored | Citrix Session Recording Identity & access |
Citrix Session Recording Improper Privilege Management Vulnerability | 25 Aug 2025 |
| CVE-2024-8069 Exploited |
Not yet scored | Citrix Session Recording Network & security devices |
Citrix Session Recording Deserialization of Untrusted Data Vulnerability | 25 Aug 2025 |
| CVE-2025-43300 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | 21 Aug 2025 |
| CVE-2025-54948 Exploited |
Not yet scored | Trend Micro Apex One Operating systems & software |
Trend Micro Apex One OS Command Injection Vulnerability | 18 Aug 2025 |
| CVE-2025-8876 Exploited |
Not yet scored | N-able N-Central Identity & access |
N-able N-Central Command Injection Vulnerability | 13 Aug 2025 |
| CVE-2025-8875 Exploited |
Not yet scored | N-able N-Central Identity & access |
N-able N-Central Insecure Deserialization Vulnerability | 13 Aug 2025 |
| CVE-2007-0671 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Excel Remote Code Execution Vulnerability | 12 Aug 2025 |
| CVE-2025-8088 Exploited |
Not yet scored | RARLAB WinRAR Operating systems & software |
RARLAB WinRAR Path Traversal Vulnerability | 12 Aug 2025 |
| CVE-2013-3893 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Resource Management Errors Vulnerability | 12 Aug 2025 |
| CVE-2020-25078 Exploited |
Not yet scored | D-Link DCS-2530L and DCS-2670L Devices Operating systems & software |
D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | 5 Aug 2025 |
| CVE-2020-25079 Exploited |
Not yet scored | D-Link DCS-2530L and DCS-2670L Devices Operating systems & software |
D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability | 5 Aug 2025 |
| CVE-2022-40799 Exploited |
Not yet scored | D-Link DNR-322L Operating systems & software |
D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | 5 Aug 2025 |
| CVE-2025-20281 Exploited |
Not yet scored | Cisco Identity Services Engine Identity & access |
Cisco Identity Services Engine Injection Vulnerability | 28 Jul 2025 |
| CVE-2023-2533 Exploited |
Not yet scored | PaperCut NG/MF Operating systems & software |
PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability | 28 Jul 2025 |
| CVE-2025-20337 Exploited |
Not yet scored | Cisco Identity Services Engine Identity & access |
Cisco Identity Services Engine Injection Vulnerability | 28 Jul 2025 |
| CVE-2025-49704 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Code Injection Vulnerability | 22 Jul 2025 |
| CVE-2025-49706 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Improper Authentication Vulnerability | 22 Jul 2025 |
| CVE-2025-2775 Exploited |
Not yet scored | SysAid SysAid On-Prem Identity & access |
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 22 Jul 2025 |
| CVE-2025-2776 Exploited |
Not yet scored | SysAid SysAid On-Prem Identity & access |
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 22 Jul 2025 |
| CVE-2025-6558 Exploited |
Not yet scored | Google Chromium Operating systems & software |
Google Chromium ANGLE and GPU Improper Input Validation Vulnerability | 22 Jul 2025 |
| CVE-2025-54309 Exploited |
Not yet scored | CrushFTP CrushFTP Operating systems & software |
CrushFTP Unprotected Alternate Channel Vulnerability | 22 Jul 2025 |
| CVE-2025-53770 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 20 Jul 2025 |
| CVE-2025-25257 Exploited |
Not yet scored | Fortinet FortiWeb Network & security devices |
Fortinet FortiWeb SQL Injection Vulnerability | 18 Jul 2025 |
| CVE-2025-47812 Exploited |
Not yet scored | Wing FTP Server Wing FTP Server Operating systems & software |
Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability | 14 Jul 2025 |
| CVE-2025-5777 Exploited |
Not yet scored | Citrix NetScaler ADC and Gateway Network & security devices |
Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability | 10 Jul 2025 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.