NVD · CISA KEV · CERT-In

CVE Tracker

Vulnerabilities ranked for Indian enterprises. Filter by severity, exploitation status and CERT-In advisories; sign in for WhatsApp/email alerts on your product stack.

102CRITICAL475HIGH0MEDIUM0LOW
Exploited (KEV)🇮🇳 CERT-InClear filters
10.0CVE-2020-0796A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1…Windows 10 1903KEV9.8CVE-2026-1842Microsoft Message Queuing Remote Code ExecutionMicrosoft MSMQKEVCERT-In9.8CVE-2025-57819FreePBX is an open-source web-based graphical user interface.FreepbxKEV9.8CVE-2018-19949If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands.QtsKEV9.8CVE-2020-12812An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may…FortiosKEV9.8CVE-2019-2725Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web…Agile Product Lifecycle ManagementKEV9.8CVE-2018-19323The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57,…Aorus Graphics EngineKEV9.8CVE-2018-7602A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x.DrupalKEV9.8CVE-2016-1019Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service…Flash Player Desktop RuntimeKEV9.8CVE-2012-1710Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware…Fusion MiddlewareKEV9.8CVE-2010-2861Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and…ColdfusionKEV9.0CVE-2025-0282A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure…Connect SecureKEV8.8CVE-2025-21042Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to…AndroidKEV8.8CVE-2025-6558Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157…ChromeKEV8.8CVE-2024-7399Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server…Magicinfo 9 ServerKEV8.8CVE-2021-26411Internet Explorer Memory Corruption VulnerabilityEdgeKEV8.8CVE-2017-6884A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware…Emg2926 FirmwareKEV8.2CVE-2023-46805An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy…Connect SecureKEV8.1CVE-2025-9103OpenSSL 3.x Memory CorruptionOpenSSL 3.xKEV8.1CVE-2019-1579Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and…Pan-OsKEV8.0CVE-2026-102490Zammad GmbH Zammad Improper Privilege Management VulnerabilityZammadKEV8.0CVE-2026-102489Zammad GmbH Zammad Session Fixation VulnerabilityZammadKEV8.0CVE-2026-104286Fortinet FortiMail Path Traversal VulnerabilityFortiMailKEV8.0CVE-2026-76504Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCatalyst SD-WAN ManagerKEV8.0CVE-2026-86950Apple Multiple Products Out-of-Bounds Write VulnerabilityMultiple ProductsKEV8.0CVE-2026-88771Citrix NetScaler Improper Input Validation VulnerabilityNetScalerKEV8.0CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityNetScalerKEV8.0CVE-2026-65660Microsoft SharePoint Code Injection VulnerabilitySharePointKEV8.0CVE-2026-67279Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityRouterOSKEV8.0CVE-2026-87902WordPress Core Remote File Inclusion VulnerabilityCoreKEV8.0CVE-2026-5430WSO2 Multiple Products Path Traversal Vulnerability Multiple ProductsKEV8.0CVE-2026-71362Adobe Commerce and Magento Incorrect Authorization Vulnerability Commerce and Magento KEV8.0CVE-2026-94127F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityBIG-IP APMKEV8.0CVE-2026-93616Check Point Multiple Products Path Traversal VulnerabilityMultiple ProductsKEV8.0CVE-2026-93952Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityVeloCloud OrchestratorKEV8.0CVE-2026-85102Check Point Multiple Products Improper Certificate Validation VulnerabilityMultiple ProductsKEV8.0CVE-2026-7273Zyxel GS1900 Series Switches Stack-Based Buffer Overflow VulnerabilityGS1900 Series SwitchesKEV8.0CVE-2025-39682Linux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityKernelKEV8.0CVE-2026-53266Linux Kernel Out-of-Bounds Write VulnerabilityKernelKEV8.0CVE-2025-39964Linux Kernel Race Condition VulnerabilityKernelKEV8.0CVE-2026-58704Google Pixel Improper Authorization VulnerabilityPixelKEV8.0CVE-2026-87886Acronis Backup Incorrect Default Permissions VulnerabilityBackupKEV8.0CVE-2026-76460Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityIdentity Services EngineKEV8.0CVE-2026-76461Cisco Secure Email Gateway SQL Injection VulnerabilitySecure Email GatewayKEV8.0CVE-2026-42016JFrog Artifactory Incorrect Authorization VulnerabilityArtifactoryKEV8.0CVE-2026-84869ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization VulnerabilityScreenConnectKEV8.0CVE-2026-85706GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityCommunity Edition and Enterprise EditionKEV8.0CVE-2026-42018JFrog Artifactory Improper Authentication VulnerabilityArtifactoryKEV8.0CVE-2026-67277MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityRouterOSKEV8.0CVE-2026-86060MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityRouterOSKEV8.0CVE-2026-87491Google Chromium V8 Out of Bounds Write VulnerabilityChromium V8KEV8.0CVE-2026-19490Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityNetScalerKEV8.0CVE-2025-25249Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityMultiple ProductsKEV8.0CVE-2026-20079Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilitySecure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementKEV8.0CVE-2026-81963Microsoft Windows Link Following VulnerabilityWindowsKEV8.0CVE-2026-86218N-able N-central Static Code Injection VulnerabilityN-centralKEV8.0CVE-2026-85880Microsoft Windows Heap-Based Buffer Overflow VulnerabilityWindowsKEV8.0CVE-2026-75650Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityCommerce and MagentoKEV8.0CVE-2026-85046Google Chromium V8 Type Confusion VulnerabilityChromium V8KEV8.0CVE-2026-9586Sangoma Switchvox SQL Injection VulnerabilitySwitchvoxKEV8.0CVE-2026-83549SonicWall SMA1000 Appliances OS Command Injection VulnerabilitySMA1000 AppliancesKEV8.0CVE-2026-83548SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilitySMA1000 AppliancesKEV8.0CVE-2026-59822BerriAI LiteLLM Improper Authentication VulnerabilityLiteLLMKEV8.0CVE-2026-48710Kludex Starlette HTTP Request/Response Smuggling VulnerabilityStarletteKEV8.0CVE-2026-49869Kestra OSS OS Command Injection VulnerabilityKestra OSSKEV8.0CVE-2026-82329JFrog Artifactory Improper Authentication VulnerabilityArtifactoryKEV8.0CVE-2026-82078PaperCut NG/MF Unsafe Reflection VulnerabilityNG/MFKEV8.0CVE-2026-81578PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityNG/MFKEV8.0CVE-2026-53362Linux Kernel Unspecified VulnerabilityKernelKEV8.0CVE-2023-49105ownCloud Improper Authentication VulnerabilityownCloudKEV8.0CVE-2026-66384JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory VulnerabilityArtifactoryKEV8.0CVE-2019-1068Microsoft SQL Server Remote Code Execution VulnerabilitySQL ServerKEV8.0CVE-2021-23758Ajax.NET Professional Deserialization of Untrusted Data VulnerabilityAjax.NET ProfessionalKEV8.0CVE-2015-5287Red Hat Automatic Bug Reporting Tool Privilege Escalation VulnerabilityAutomatic Bug Reporting ToolKEV8.0CVE-2022-0995Linux Kernel Out-of-Bounds Write VulnerabilityKernelKEV8.0CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityNetScaler ADC and NetScaler GatewayKEV8.0CVE-2026-60004Gitea Code Injection VulnerabilityGiteaKEV8.0CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityHTTP Server and Oracle Weblogic Server Proxy Plug-inKEV8.0CVE-2026-73570Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityZimbra Collaboration Suite (ZCS)KEV8.0CVE-2026-72529TrueConf Server Missing Authentication for Critical Function VulnerabilityServerKEV8.0CVE-2026-72530TrueConf Server Code Injection VulnerabilityServerKEV8.0CVE-2026-64849MLflow Server-Side Request Forgery VulnerabilityMLflowKEV8.0CVE-2026-55040Microsoft SharePoint Weak Authentication VulnerabilitySharePointKEV8.0CVE-2026-33824Microsoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityInternet Key Exchange (IKE) Service ExtensionsKEV8.0CVE-2026-59310Broadcom VMware vCenter Path Traversal VulnerabilityVMware vCenterKEV8.0CVE-2026-65400Apple macOS Improper Authentication VulnerabilitymacOSKEV8.0CVE-2025-62593Ray-Project Ray Code Injection VulnerabilityRayKEV8.0CVE-2026-68820Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityWindows Ancillary Function Driver for WinSock KEV8.0CVE-2026-72898Metabase SQL Injection VulnerabilityMetabaseKEV8.0CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilitySecure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) KEV8.0CVE-2026-8037Progress LoadMaster Command Injection VulnerabilityLoadMasterKEV8.0CVE-2026-63077JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityTeamCityKEV8.0CVE-2026-34486Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityTomcatKEV8.0CVE-2026-18556N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityN-centralKEV8.0CVE-2026-9198IBM Langflow Code Injection VulnerabilityLangflowKEV8.0CVE-2026-18577N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityN-centralKEV8.0CVE-2026-20316Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilitySecure Firewall Management Center (FMC)KEV8.0CVE-2026-16812Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityVeloCloud OrchestratorKEV8.0CVE-2025-68686Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityFortiOSKEV8.0CVE-2026-16232Check Point SmartConsole Improper Authentication VulnerabilitySmartConsoleKEV