| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2025-5777 Ransomware
Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability |
Citrix · NetScaler ADC and Gateway | Jul 10, 2025 | Jul 11, 2025 | 100.0% | — |
| CVE-2014-3931
Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability |
Looking Glass · Multi-Router Looking Glass (MRLG) | Jul 7, 2025 | Jul 28, 2025 | 29.0% | — |
| CVE-2016-10033
PHPMailer Command Injection Vulnerability |
PHP · PHPMailer | Jul 7, 2025 | Jul 28, 2025 | 99.7% | — |
| CVE-2019-5418
Rails Ruby on Rails Path Traversal Vulnerability |
Rails · Ruby on Rails | Jul 7, 2025 | Jul 28, 2025 | 98.5% | — |
| CVE-2019-9621
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vul… |
Synacor · Zimbra Collaboration Suite (ZCS) | Jul 7, 2025 | Jul 28, 2025 | 81.0% | — |
| CVE-2025-6554
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Jul 2, 2025 | Jul 23, 2025 | 14.1% | — |
| CVE-2025-48927
TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulne… |
TeleMessage · TM SGNL | Jul 1, 2025 | Jul 22, 2025 | 12.2% | — |
| CVE-2025-48928
TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Spher… |
TeleMessage · TM SGNL | Jul 1, 2025 | Jul 22, 2025 | 0.6% | — |
| CVE-2025-6543
Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability |
Citrix · NetScaler ADC and Gateway | Jun 30, 2025 | Jul 21, 2025 | 10.4% | — |
| CVE-2019-6693 Ransomware
Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability |
Fortinet · FortiOS | Jun 25, 2025 | Jul 16, 2025 | 6.6% | — |
| CVE-2024-0769
D-Link DIR-859 Router Path Traversal Vulnerability |
D-Link · DIR-859 Router | Jun 25, 2025 | Jul 16, 2025 | 82.7% | — |
| CVE-2024-54085
AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability |
AMI · MegaRAC SPx | Jun 25, 2025 | Jul 16, 2025 | 60.7% | — |
| CVE-2023-0386
Linux Kernel Improper Ownership Management Vulnerability |
Linux · Kernel | Jun 17, 2025 | Jul 8, 2025 | 7.9% | — |
| CVE-2023-33538
TP-Link Multiple Routers Command Injection Vulnerability |
TP-Link · Multiple Routers | Jun 16, 2025 | Jul 7, 2025 | 41.6% | — |
| CVE-2025-43200
Apple Multiple Products Unspecified Vulnerability |
Apple · Multiple Products | Jun 16, 2025 | Jul 7, 2025 | 1.0% | — |
| CVE-2025-24016
Wazuh Server Deserialization of Untrusted Data Vulnerability |
Wazuh · Wazuh Server | Jun 10, 2025 | Jul 1, 2025 | 93.8% | — |
| CVE-2025-33053
Microsoft Windows External Control of File Name or Path Vulnerability |
Microsoft · Windows | Jun 10, 2025 | Jul 1, 2025 | 87.1% | — |
| CVE-2024-42009
RoundCube Webmail Cross-Site Scripting Vulnerability |
Roundcube · Webmail | Jun 9, 2025 | Jun 30, 2025 | 82.9% | — |
| CVE-2025-32433
Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulne… |
Erlang · Erlang/OTP | Jun 9, 2025 | Jun 30, 2025 | 98.9% | — |
| CVE-2025-5419
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability |
Google · Chromium V8 | Jun 5, 2025 | Jun 26, 2025 | 7.6% | — |
| CVE-2025-21479
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability |
Qualcomm · Multiple Chipsets | Jun 3, 2025 | Jun 24, 2025 | 0.8% | — |
| CVE-2025-21480
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability |
Qualcomm · Multiple Chipsets | Jun 3, 2025 | Jun 24, 2025 | 0.4% | — |
| CVE-2025-27038
Qualcomm Multiple Chipsets Use-After-Free Vulnerability |
Qualcomm · Multiple Chipsets | Jun 3, 2025 | Jun 24, 2025 | 1.0% | — |
| CVE-2021-32030
ASUS Routers Improper Authentication Vulnerability |
ASUS · Routers | Jun 2, 2025 | Jun 23, 2025 | 99.4% | — |
| CVE-2023-39780
ASUS RT-AX55 Routers OS Command Injection Vulnerability |
ASUS · RT-AX55 Routers | Jun 2, 2025 | Jun 23, 2025 | 39.5% | — |
| CVE-2024-56145
Craft CMS Code Injection Vulnerability |
Craft CMS · Craft CMS | Jun 2, 2025 | Jun 23, 2025 | 97.5% | — |
| CVE-2025-35939
Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability |
Craft CMS · Craft CMS | Jun 2, 2025 | Jun 23, 2025 | 1.4% | — |
| CVE-2025-3935
ConnectWise ScreenConnect Improper Authentication Vulnerability |
ConnectWise · ScreenConnect | Jun 2, 2025 | Jun 23, 2025 | 3.6% | — |
| CVE-2025-4632
Samsung MagicINFO 9 Server Path Traversal Vulnerability |
Samsung · MagicINFO 9 Server | May 22, 2025 | Jun 12, 2025 | 24.1% | — |
| CVE-2023-38950
ZKTeco BioTime Path Traversal Vulnerability |
ZKTeco · BioTime | May 19, 2025 | Jun 9, 2025 | 92.5% | — |
| CVE-2024-11182
MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability |
MDaemon · Email Server | May 19, 2025 | Jun 9, 2025 | 33.3% | — |
| CVE-2024-27443
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerabili… |
Synacor · Zimbra Collaboration Suite (ZCS) | May 19, 2025 | Jun 9, 2025 | 24.6% | — |
| CVE-2025-27920
Srimax Output Messenger Directory Traversal Vulnerability |
Srimax · Output Messenger | May 19, 2025 | Jun 9, 2025 | 1.9% | — |
| CVE-2025-4427
Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability |
Ivanti · Endpoint Manager Mobile (EPMM) | May 19, 2025 | Jun 9, 2025 | 99.9% | — |
| CVE-2025-4428
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
Ivanti · Endpoint Manager Mobile (EPMM) | May 19, 2025 | Jun 9, 2025 | 88.0% | — |
| CVE-2024-12987
DrayTek Vigor Routers OS Command Injection Vulnerability |
DrayTek · Vigor Routers | May 15, 2025 | Jun 5, 2025 | 98.2% | — |
| CVE-2025-42999 Ransomware
SAP NetWeaver Deserialization Vulnerability |
SAP · NetWeaver | May 15, 2025 | Jun 5, 2025 | 12.9% | — |
| CVE-2025-32756
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability |
Fortinet · Multiple Products | May 14, 2025 | Jun 4, 2025 | 30.9% | — |
| CVE-2025-30397
Microsoft Windows Scripting Engine Type Confusion Vulnerability |
Microsoft · Windows | May 13, 2025 | Jun 3, 2025 | 27.5% | — |
| CVE-2025-30400
Microsoft Windows DWM Core Library Use-After-Free Vulnerability |
Microsoft · Windows | May 13, 2025 | Jun 3, 2025 | 1.9% | — |
| CVE-2025-32701
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerabi… |
Microsoft · Windows | May 13, 2025 | Jun 3, 2025 | 1.4% | — |
| CVE-2025-32706
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overfl… |
Microsoft · Windows | May 13, 2025 | Jun 3, 2025 | 2.3% | — |
| CVE-2025-32709
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerab… |
Microsoft · Windows | May 13, 2025 | Jun 3, 2025 | 1.8% | — |
| CVE-2025-47729
TeleMessage TM SGNL Hidden Functionality Vulnerability |
TeleMessage · TM SGNL | May 12, 2025 | Jun 2, 2025 | 0.5% | — |
| CVE-2024-11120
GeoVision Devices OS Command Injection Vulnerability |
GeoVision · Multiple Devices | May 7, 2025 | May 28, 2025 | 28.4% | — |
| CVE-2024-6047
GeoVision Devices OS Command Injection Vulnerability |
GeoVision · Multiple Devices | May 7, 2025 | May 28, 2025 | 10.1% | — |
| CVE-2025-27363
FreeType Out-of-Bounds Write Vulnerability |
FreeType · FreeType | May 6, 2025 | May 27, 2025 | 27.8% | — |
| CVE-2025-3248 Ransomware
Langflow Missing Authentication Vulnerability |
Langflow · Langflow | May 5, 2025 | May 26, 2025 | 100.0% | — |
| CVE-2024-58136
Yiiframework Yii Improper Protection of Alternate Path Vulnerability |
Yiiframework · Yii | May 2, 2025 | May 23, 2025 | 87.8% | — |
| CVE-2025-34028
Commvault Command Center Path Traversal Vulnerability |
Commvault · Command Center | May 2, 2025 | May 23, 2025 | 97.6% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.