Latest vulnerabilities

10 results · Clear filters · Feed

• Low 2.7
  CVE-2026-41709 Exploited

  ESX insufficient logging vulnerability

  VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

  VMware Cloud Foundation Telco Cloud Platform vSphere Foundation Virtualization
  Jul 30, 2026

  KEV Oct 28, 2026
• Low 1.9
  CVE-2025-47729 Exploited

  The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signa…

  TeleMessage archiving backend
  May 8, 2025

  KEV May 12, 2025
• Low 3.9
  CVE-2023-20867 Exploited EPSS 14%

  VMware Tools Authentication Bypass Vulnerability

  A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

  VMware VMware tools open-vm-tools open-vm-tools Debian Ubuntu Alpine
  Jun 13, 2023

  KEV Jun 23, 2023
• Low 3.3
  CVE-2023-26083 Exploited Public exploit

  Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifros…

  Apr 6, 2023

  KEV Apr 7, 2023
• Low 3.7
  CVE-2022-23134 Exploited Public exploit EPSS 95%

  Possible view of the setup pages by unauthenticated users if config file already exists

  After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.

  Zabbix Frontend zabbix Debian
  Jan 13, 2022

  KEV Feb 22, 2022
• Low 3.3
  CVE-2021-44168 Exploited Public exploit

  A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0…

  Fortinet Fortinet FortiOS Network devices
  Jan 4, 2022

  KEV Dec 10, 2021
• Low 3.3
  CVE-2021-25489 Exploited

  Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1…

  Samsung Mobile Samsung Mobile Devices
  Oct 6, 2021

  KEV Jun 29, 2023
• Low 3.7
  CVE-2013-2423 Exploited Public exploit EPSS 85%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, an…

  Apr 17, 2013

  KEV May 25, 2022
• Low 3.7
  CVE-2013-0431 Exploited · Ransomware Public exploit EPSS 90%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and Op…

  Jan 31, 2013

  KEV May 25, 2022
• Low 3.7
  CVE-2010-0738 Exploited · Ransomware Public exploit EPSS 74%

  The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.…

  Apr 28, 2010

  KEV May 25, 2022