Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 460new in the last 7 days
- 8added as actively exploited
- 40critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2025-59689 Exploited |
Not yet scored | Libraesva Email Security Gateway Network & security devices |
Libraesva Email Security Gateway Command Injection Vulnerability | 29 Sep 2025 |
| CVE-2025-20333 Exploited |
Not yet scored | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Network & security devices |
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | 25 Sep 2025 |
| CVE-2025-20362 Exploited |
Not yet scored | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Network & security devices |
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | 25 Sep 2025 |
| CVE-2025-10585 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 23 Sep 2025 |
| CVE-2025-5086 Exploited |
Not yet scored | Dassault Systèmes DELMIA Apriso Operating systems & software |
Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability | 11 Sep 2025 |
| CVE-2025-48543 Exploited |
Not yet scored | Android Runtime Operating systems & software |
Android Runtime Use-After-Free Vulnerability | 4 Sep 2025 |
| CVE-2025-38352 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability | 4 Sep 2025 |
| CVE-2025-53690 Exploited |
Not yet scored | Sitecore Multiple Products Cloud & SaaS |
Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability | 4 Sep 2025 |
| CVE-2025-9377 Exploited |
Not yet scored | TP-Link Multiple Routers Network & security devices |
TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability | 3 Sep 2025 |
| CVE-2023-50224 Exploited |
Not yet scored | TP-Link TL-WR841N Operating systems & software |
TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability | 3 Sep 2025 |
| CVE-2020-24363 Exploited |
Not yet scored | TP-Link TL-WA855RE Operating systems & software |
TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability | 2 Sep 2025 |
| CVE-2025-55177 Exploited |
Not yet scored | Meta Platforms Operating systems & software |
Meta Platforms WhatsApp Incorrect Authorization Vulnerability | 2 Sep 2025 |
| CVE-2025-57819 Exploited |
Not yet scored | Sangoma FreePBX Operating systems & software |
Sangoma FreePBX Authentication Bypass Vulnerability | 29 Aug 2025 |
| CVE-2025-7775 Exploited |
Not yet scored | Citrix NetScaler Network & security devices |
Citrix NetScaler Memory Overflow Vulnerability | 26 Aug 2025 |
| CVE-2025-48384 Exploited |
Not yet scored | Git Git Operating systems & software |
Git Link Following Vulnerability | 25 Aug 2025 |
| CVE-2024-8068 Exploited |
Not yet scored | Citrix Session Recording Identity & access |
Citrix Session Recording Improper Privilege Management Vulnerability | 25 Aug 2025 |
| CVE-2024-8069 Exploited |
Not yet scored | Citrix Session Recording Network & security devices |
Citrix Session Recording Deserialization of Untrusted Data Vulnerability | 25 Aug 2025 |
| CVE-2025-43300 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | 21 Aug 2025 |
| CVE-2025-54948 Exploited |
Not yet scored | Trend Micro Apex One Operating systems & software |
Trend Micro Apex One OS Command Injection Vulnerability | 18 Aug 2025 |
| CVE-2025-8875 Exploited |
Not yet scored | N-able N-Central Identity & access |
N-able N-Central Insecure Deserialization Vulnerability | 13 Aug 2025 |
| CVE-2025-8876 Exploited |
Not yet scored | N-able N-Central Identity & access |
N-able N-Central Command Injection Vulnerability | 13 Aug 2025 |
| CVE-2007-0671 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Excel Remote Code Execution Vulnerability | 12 Aug 2025 |
| CVE-2013-3893 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Resource Management Errors Vulnerability | 12 Aug 2025 |
| CVE-2025-8088 Exploited |
Not yet scored | RARLAB WinRAR Operating systems & software |
RARLAB WinRAR Path Traversal Vulnerability | 12 Aug 2025 |
| CVE-2022-40799 Exploited |
Not yet scored | D-Link DNR-322L Operating systems & software |
D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | 5 Aug 2025 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.