ToolShell: a story of five vulnerabilities in Microsoft SharePointKaspersky Securelist·Jul 25, 07:00 UTC · Jul 25, 2025Vulnerability in the wildCVE-2025-49704CVE-2025-49706CVE-2025-53770+1 CVEs160
Vulnerability Spotlight: Multiple vulnerabilities in AT&T Labs’ Xmill utilityCisco Talos·Aug 10, 17:22 UTC · Aug 10, 2021Vulnerability in the wildCVE-2021-21810CVE-2021-21811CVE-2021-21825+6 CVEs60
Ivanti, Fortinet, and SAP Release Patches for Multiple Critical VulnerabilitiesThe Hacker News·Jun 12, 18:42 UTC · Jun 12, 2026Vulnerability in the wildCVE-2026-25089CVE-2026-10520CVE-2026-10523+4 CVEs160
A patched Windows attack surface is still exploitableKaspersky Securelist·Mar 14, 10:00 UTC · Mar 14, 2024Vulnerability in the wildCVE-2022-22047CVE-2022-37989CVE-2022-29104+3 CVEs60
Vulnerability Spotlight: Two code execution vulnerabilities in Microsoft ExcelCisco Talos·Jun 10, 20:21 UTC · Jun 10, 2020Vulnerability in the wildCVE-2020-1226CVE-2020-1225160
Oracle Releases January 2025 Patch to Address 318 Flaws Across Major ProductsThe Hacker News·Jan 22, 13:39 UTC · Jan 22, 2025Vulnerability in the wildCVE-2025-21556CVE-2024-21287CVE-2025-21524+10 CVEs60
Vulnerability Spotlight: Vulnerability in ManageEngine OpManager could lead to XXE attackCisco Talos·Mar 30, 19:00 UTC · Mar 30, 2023Vulnerability in the wildCVE-2022-4347360
VMware patches critical injection flaw in Carbon Black App Control (CVE-2023-20858)Help Net Security·Feb 22, 00:00 UTC · Feb 22, 2023Vulnerability in the wildCVE-2023-20858CVE-2023-2085560
Vulnerability Spotlight: Vulnerabilities in Abode Systems home security kit could allow attacker to take over cameras, remotely disable themCisco Talos·Oct 20, 13:27 UTC · Oct 20, 2022Vulnerability in the wildCVE-2022-35884CVE-2022-35887CVE-2022-33938+20 CVEs60
New Zoom Flaws Could Let Attackers Hack Victims Just by Sending them a MessageThe Hacker News·May 25, 09:51 UTC · May 25, 2022Vulnerability in the wildCVE-2022-22784CVE-2022-22787CVE-2022-22785+4 CVEs160
2 New Mozilla Firefox 0-Day Bugs Under Active Attack — Patch Your Browser ASAP!The Hacker News·Mar 8, 03:33 UTC · Mar 8, 2022Vulnerability in the wildCVE-2022-26485CVE-2022-2648660
Magento Update Released to Fix Critical Flaws Affecting EThe Hacker News·Aug 11, 06:53 UTC · Aug 11, 2021Vulnerability in the wildCVE-2021-36021CVE-2021-36024CVE-2021-36025+17 CVEs60
Vulnerability Spotlight: Multiple vulnerabilities in Nitro Pro PDF readerCisco Talos·May 18, 14:12 UTC · May 18, 2020Vulnerability in the wildCVE-2020-6074CVE-2020-6092CVE-2020-609360
Vulnerability Spotlight: Two buffer overflow vulnerabilities in OpenCVCisco Talos·Jan 2, 22:35 UTC · Jan 2, 2020Vulnerability in the wildCVE-2019-5063CVE-2019-506460
Vulnerability Spotlight: Multiple bugs in several Jenkins pluginsCisco Talos·May 6, 14:20 UTC · May 6, 2019Vulnerability in the wildCVE-2019-10323CVE-2019-5022CVE-2019-5025+2 CVEs60
Microsoft October Patch Tuesday Fixes 12 Critical VulnerabilitiesThe Hacker News·Oct 9, 18:40 UTC · Oct 9, 2018Vulnerability in the wildCVE-2018-8453CVE-2018-8494CVE-2018-8423+2 CVEs60
Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word ProcessorCisco Talos·Oct 1, 12:30 UTC · Oct 1, 2018Vulnerability in the wildCVE-2018-3975CVE-2018-3978CVE-2018-3982+5 CVEs60
Vulnerability Spotlight: Hyland Perceptive Document Filters Multiple VulnerabilitesCisco Talos·Apr 26, 13:54 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-3855CVE-2018-3844CVE-2018-3845+1 CVEs60
Microsoft Patch TuesdayCisco Talos·Mar 14, 21:26 UTC · Mar 14, 2017Vulnerability in the wildCVE-2017-0149CVE-2017-0012CVE-2017-0037+1 CVEs60
Vulnerability Spotlight: Multiple remote code execution vulnerabilities in Iceni Argus PDF Content Extraction affect MarkLogicCisco Talos·Feb 27, 17:59 UTC · Feb 27, 2017Vulnerability in the wildCVE-2016-8385CVE-2016-8386CVE-2016-8387+4 CVEs60
January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office ZeroRecorded Future·Feb 24, 00:00 UTC · Feb 24, 2026Vulnerability in the wildCVE-2026-21509CVE-2026-23760CVE-2026-1281+1 CVEs160
December 2025 CVE Landscape: 22 Critical Vulnerabilities Mark 120% Surge, React2Shell Dominates Threat ActivityRecorded Future·Jan 13, 00:00 UTC · Jan 13, 2026Vulnerability in the wildCVE-2025-55182CVE-2025-20393CVE-2025-8110+1 CVEs60
"Perfect" Adobe Experience Manager vulnerability is being exploited (CVE-2025-54253)Help Net Security·Oct 16, 00:00 UTC · Oct 16, 2025Vulnerability in the wildCVE-2025-54253CVE-2025-54254160
CrowdStrike ties Oracle EBS RCE (CVE-2025Security Affairs·Oct 7, 08:42 UTC · Oct 7, 2025Vulnerability in the wildCVE-2025-6188260
NAKIVO Backup & Replication vulnerability exploited by attackers (CVE-2024-48248)Help Net Security·Apr 2, 08:47 UTC · Apr 2, 2025Vulnerability in the wildCVE-2024-4824860
Vulnerability landscape analysis for Q4 2024Kaspersky Securelist·Feb 26, 10:12 UTC · Feb 26, 2025Vulnerability in the wildCVE-2018-0802CVE-2017-11882CVE-2017-0199+8 CVEs160
Cleo File Transfer Vulnerability Under ExploitationThe Hacker News·Dec 18, 04:09 UTC · Dec 18, 2024Vulnerability in the wildCVE-2024-50623CVE-2024-5595660
CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024The Hacker News·Nov 3, 05:44 UTC · Nov 3, 2024Vulnerability in the wildCVE-2024-38094CVE-2024-4406860
Ivanti fixes critical vulnerabilities in Endpoint Management (CVE-2024-29847)Help Net Security·Sep 16, 14:44 UTC · Sep 16, 2024Vulnerability in the wildCVE-2024-29847CVE-2024-819060
Microsoft Fixes 149 Flaws in Huge April Patch Release, ZeroThe Hacker News·Apr 11, 11:08 UTC · Apr 11, 2024Vulnerability in the wildCVE-2024-26234CVE-2024-29988CVE-2024-21412+2 CVEs60
Warning: New Ivanti Auth Bypass Flaw Affects Connect Secure and ZTA GatewaysThe Hacker News·Feb 10, 06:48 UTC · Feb 10, 2024Vulnerability in the wildCVE-2024-22024CVE-2023-46805CVE-2024-21887+2 CVEs60
Microsoft adds novel feature to Exchange servers to allow it to deploy emergency temporary fixesThe Record·Dec 14, 00:00 UTC · Dec 14, 2022Vulnerability in the wild57
Adobe addresses over 60 vulnerabilities in multiple productsSecurity Affairs·Dec 14, 22:33 UTC · Dec 14, 2021Vulnerability in the wildCVE-2021-43018CVE-2021-43020CVE-2021-44184+8 CVEs60
Vulnerability Spotlight: Multiple vulnerabilities in Genivia gSOAPCisco Talos·Jan 5, 17:22 UTC · Jan 5, 2021Vulnerability in the wildCVE-2020-13574CVE-2020-13575CVE-2020-13576+2 CVEs60
Vulnerability Spotlight: Code execution vulnerability in Microsoft ExcelCisco Talos·Feb 11, 19:31 UTC · Feb 11, 2020Vulnerability in the wildCVE-2020-0759160
Vulnerability Spotlight: Remote code execution vulnerability in Microsoft ExcelCisco Talos·Nov 12, 19:07 UTC · Nov 12, 2019Vulnerability in the wildCVE-2019-144860
Vulnerability Spotlight: Multiple vulnerabilities in Sierra Wireless AirLink ES450Cisco Talos·Apr 25, 18:06 UTC · Apr 25, 2019Vulnerability in the wildCVE-2018-4061CVE-2018-4062CVE-2018-4063+10 CVEs60
Microsoft Releases April 2019 Security Updates — Two Flaws Under Active AttackThe Hacker News·Apr 9, 18:01 UTC · Apr 9, 2019Vulnerability in the wildCVE-2019-0803CVE-2019-085960
Microsoft January 2019 Patch Tuesday updates fix 7 critical vulnerabilitiesSecurity Affairs·Jan 9, 09:19 UTC · Jan 9, 2019Vulnerability in the wildCVE-2019-0547CVE-2019-0550CVE-2019-0551+46 CVEs60
Vulnerability Spotlight: CVE-2018-3952 / CVE-2018-4010 - Multi-provider VPN Client Privilege Escalation VulnerabilitiesCisco Talos·Sep 7, 12:44 UTC · Sep 7, 2018Vulnerability in the wildCVE-2018-3952CVE-2018-4010CVE-2018-1016960