zerodayfindings.com
The public CVE record, lined up.
Metadata from CVE.org, NVD, CISA KEV, OSV, and the other public catalogs. Sort it by source, severity, weakness, and stack. Exploit code stays where it was published.
- Records
- 7,341
- Known exploited
- 1,745
- Critical
- 1,135
- Sources live
- 17/17
Priority
Known exploited- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 100.0%Jul 19, 2025
- Critical9.8Ivanti Virtual Traffic Manager Authentication Bypass VulnerabilityKEVEPSS 100.0%Aug 13, 2024
- Critical10.0Palo Alto Networks PAN-OS Command Injection VulnerabilityKEVEPSS 100.0%Apr 12, 2024
- High8.2Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityKEVEPSS 100.0%Jan 31, 2024
- Critical9.8Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityKEVEPSS 100.0%Jan 24, 2024
- Critical9.1Ivanti Connect Secure and Policy Secure Command Injection VulnerabilityKEVEPSS 100.0%Jan 10, 2024
Fresh
All findings- Medium5.7A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.Oct 15, 2026
- Medium4.7A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.Oct 15, 2026
- High7.1A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.Oct 15, 2026
- Medium6.4Kirki <= 6.2.0 - Authenticated (Custom+) Stored Cross-Site Scripting via Page Builder Text ContentOct 15, 2026
- Critical9.810Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' ParameterOct 15, 2026
- High7.3PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' ParameterOct 15, 2026