--- title: "CISA KEV catalog, page 5 | CubePath" description: "The CISA Known Exploited Vulnerabilities catalog: CVEs with evidence of exploitation in the wild, newest first, with the date added and the federal due date." language: en source: https://cubepath.com/security/cve/kev?page=5 --- # CISA KEV catalog, page 5 | CubePath | CVE | Vulnerability | Added | Federal due date | Ransomware | | ------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ | ---------------- | ---------- | | [CVE-2025-5777](https://cubepath.com/security/cve/CVE-2025-5777) | Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Citrix / NetScaler ADC and Gateway | Jul 10, 2025 | Jul 11, 2025 | Known | | [CVE-2014-3931](https://cubepath.com/security/cve/CVE-2014-3931) | Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability Looking Glass / Multi-Router Looking Glass (MRLG) | Jul 7, 2025 | Jul 28, 2025 | | | [CVE-2016-10033](https://cubepath.com/security/cve/CVE-2016-10033) | PHPMailer Command Injection Vulnerability PHP / PHPMailer | Jul 7, 2025 | Jul 28, 2025 | | | [CVE-2019-5418](https://cubepath.com/security/cve/CVE-2019-5418) | Rails Ruby on Rails Path Traversal Vulnerability Rails / Ruby on Rails | Jul 7, 2025 | Jul 28, 2025 | | | [CVE-2019-9621](https://cubepath.com/security/cve/CVE-2019-9621) | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Jul 7, 2025 | Jul 28, 2025 | | | [CVE-2025-6554](https://cubepath.com/security/cve/CVE-2025-6554) | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | Jul 2, 2025 | Jul 23, 2025 | | | [CVE-2025-48927](https://cubepath.com/security/cve/CVE-2025-48927) | TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability TeleMessage / TM SGNL | Jul 1, 2025 | Jul 22, 2025 | | | [CVE-2025-48928](https://cubepath.com/security/cve/CVE-2025-48928) | TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability TeleMessage / TM SGNL | Jul 1, 2025 | Jul 22, 2025 | | | [CVE-2025-6543](https://cubepath.com/security/cve/CVE-2025-6543) | Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability Citrix / NetScaler ADC and Gateway | Jun 30, 2025 | Jul 21, 2025 | | | [CVE-2019-6693](https://cubepath.com/security/cve/CVE-2019-6693) | Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Fortinet / FortiOS | Jun 25, 2025 | Jul 16, 2025 | Known | | [CVE-2024-0769](https://cubepath.com/security/cve/CVE-2024-0769) | D-Link DIR-859 Router Path Traversal Vulnerability D-Link / DIR-859 Router | Jun 25, 2025 | Jul 16, 2025 | | | [CVE-2024-54085](https://cubepath.com/security/cve/CVE-2024-54085) | AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability AMI / MegaRAC SPx | Jun 25, 2025 | Jul 16, 2025 | | | [CVE-2023-0386](https://cubepath.com/security/cve/CVE-2023-0386) | Linux Kernel Improper Ownership Management Vulnerability Linux / Kernel | Jun 17, 2025 | Jul 8, 2025 | | | [CVE-2023-33538](https://cubepath.com/security/cve/CVE-2023-33538) | TP-Link Multiple Routers Command Injection Vulnerability TP-Link / Multiple Routers | Jun 16, 2025 | Jul 7, 2025 | | | [CVE-2025-43200](https://cubepath.com/security/cve/CVE-2025-43200) | Apple Multiple Products Unspecified Vulnerability Apple / Multiple Products | Jun 16, 2025 | Jul 7, 2025 | | | [CVE-2025-24016](https://cubepath.com/security/cve/CVE-2025-24016) | Wazuh Server Deserialization of Untrusted Data Vulnerability Wazuh / Wazuh Server | Jun 10, 2025 | Jul 1, 2025 | | | [CVE-2025-33053](https://cubepath.com/security/cve/CVE-2025-33053) | Microsoft Windows External Control of File Name or Path Vulnerability Microsoft / Windows | Jun 10, 2025 | Jul 1, 2025 | | | [CVE-2024-42009](https://cubepath.com/security/cve/CVE-2024-42009) | RoundCube Webmail Cross-Site Scripting Vulnerability Roundcube / Webmail | Jun 9, 2025 | Jun 30, 2025 | | | [CVE-2025-32433](https://cubepath.com/security/cve/CVE-2025-32433) | Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability Erlang / Erlang/OTP | Jun 9, 2025 | Jun 30, 2025 | | | [CVE-2025-5419](https://cubepath.com/security/cve/CVE-2025-5419) | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google / Chromium V8 | Jun 5, 2025 | Jun 26, 2025 | | | [CVE-2025-21479](https://cubepath.com/security/cve/CVE-2025-21479) | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Qualcomm / Multiple Chipsets | Jun 3, 2025 | Jun 24, 2025 | | | [CVE-2025-21480](https://cubepath.com/security/cve/CVE-2025-21480) | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Qualcomm / Multiple Chipsets | Jun 3, 2025 | Jun 24, 2025 | | | [CVE-2025-27038](https://cubepath.com/security/cve/CVE-2025-27038) | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm / Multiple Chipsets | Jun 3, 2025 | Jun 24, 2025 | | | [CVE-2021-32030](https://cubepath.com/security/cve/CVE-2021-32030) | ASUS Routers Improper Authentication Vulnerability ASUS / Routers | Jun 2, 2025 | Jun 23, 2025 | | | [CVE-2023-39780](https://cubepath.com/security/cve/CVE-2023-39780) | ASUS RT-AX55 Routers OS Command Injection Vulnerability ASUS / RT-AX55 Routers | Jun 2, 2025 | Jun 23, 2025 | | | [CVE-2024-56145](https://cubepath.com/security/cve/CVE-2024-56145) | Craft CMS Code Injection Vulnerability Craft CMS / Craft CMS | Jun 2, 2025 | Jun 23, 2025 | | | [CVE-2025-35939](https://cubepath.com/security/cve/CVE-2025-35939) | Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability Craft CMS / Craft CMS | Jun 2, 2025 | Jun 23, 2025 | | | [CVE-2025-3935](https://cubepath.com/security/cve/CVE-2025-3935) | ConnectWise ScreenConnect Improper Authentication Vulnerability ConnectWise / ScreenConnect | Jun 2, 2025 | Jun 23, 2025 | | | [CVE-2025-4632](https://cubepath.com/security/cve/CVE-2025-4632) | Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung / MagicINFO 9 Server | May 22, 2025 | Jun 12, 2025 | | | [CVE-2023-38950](https://cubepath.com/security/cve/CVE-2023-38950) | ZKTeco BioTime Path Traversal Vulnerability ZKTeco / BioTime | May 19, 2025 | Jun 9, 2025 | | | [CVE-2024-11182](https://cubepath.com/security/cve/CVE-2024-11182) | MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability MDaemon / Email Server | May 19, 2025 | Jun 9, 2025 | | | [CVE-2024-27443](https://cubepath.com/security/cve/CVE-2024-27443) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | May 19, 2025 | Jun 9, 2025 | | | [CVE-2025-27920](https://cubepath.com/security/cve/CVE-2025-27920) | Srimax Output Messenger Directory Traversal Vulnerability Srimax / Output Messenger | May 19, 2025 | Jun 9, 2025 | | | [CVE-2025-4427](https://cubepath.com/security/cve/CVE-2025-4427) | Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability Ivanti / Endpoint Manager Mobile (EPMM) | May 19, 2025 | Jun 9, 2025 | | | [CVE-2025-4428](https://cubepath.com/security/cve/CVE-2025-4428) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti / Endpoint Manager Mobile (EPMM) | May 19, 2025 | Jun 9, 2025 | | | [CVE-2024-12987](https://cubepath.com/security/cve/CVE-2024-12987) | DrayTek Vigor Routers OS Command Injection Vulnerability DrayTek / Vigor Routers | May 15, 2025 | Jun 5, 2025 | | | [CVE-2025-42999](https://cubepath.com/security/cve/CVE-2025-42999) | SAP NetWeaver Deserialization Vulnerability SAP / NetWeaver | May 15, 2025 | Jun 5, 2025 | Known | | [CVE-2025-32756](https://cubepath.com/security/cve/CVE-2025-32756) | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability Fortinet / Multiple Products | May 14, 2025 | Jun 4, 2025 | | | [CVE-2025-30397](https://cubepath.com/security/cve/CVE-2025-30397) | Microsoft Windows Scripting Engine Type Confusion Vulnerability Microsoft / Windows | May 13, 2025 | Jun 3, 2025 | | | [CVE-2025-30400](https://cubepath.com/security/cve/CVE-2025-30400) | Microsoft Windows DWM Core Library Use-After-Free Vulnerability Microsoft / Windows | May 13, 2025 | Jun 3, 2025 | | | [CVE-2025-32701](https://cubepath.com/security/cve/CVE-2025-32701) | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft / Windows | May 13, 2025 | Jun 3, 2025 | | | [CVE-2025-32706](https://cubepath.com/security/cve/CVE-2025-32706) | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft / Windows | May 13, 2025 | Jun 3, 2025 | | | [CVE-2025-32709](https://cubepath.com/security/cve/CVE-2025-32709) | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft / Windows | May 13, 2025 | Jun 3, 2025 | | | [CVE-2025-47729](https://cubepath.com/security/cve/CVE-2025-47729) | TeleMessage TM SGNL Hidden Functionality Vulnerability TeleMessage / TM SGNL | May 12, 2025 | Jun 2, 2025 | | | [CVE-2024-11120](https://cubepath.com/security/cve/CVE-2024-11120) | GeoVision Devices OS Command Injection Vulnerability GeoVision / Multiple Devices | May 7, 2025 | May 28, 2025 | | | [CVE-2024-6047](https://cubepath.com/security/cve/CVE-2024-6047) | GeoVision Devices OS Command Injection Vulnerability GeoVision / Multiple Devices | May 7, 2025 | May 28, 2025 | | | [CVE-2025-27363](https://cubepath.com/security/cve/CVE-2025-27363) | FreeType Out-of-Bounds Write Vulnerability FreeType / FreeType | May 6, 2025 | May 27, 2025 | | | [CVE-2025-3248](https://cubepath.com/security/cve/CVE-2025-3248) | Langflow Missing Authentication Vulnerability Langflow / Langflow | May 5, 2025 | May 26, 2025 | Known | | [CVE-2024-58136](https://cubepath.com/security/cve/CVE-2024-58136) | Yiiframework Yii Improper Protection of Alternate Path Vulnerability Yiiframework / Yii | May 2, 2025 | May 23, 2025 | | | [CVE-2025-34028](https://cubepath.com/security/cve/CVE-2025-34028) | Commvault Command Center Path Traversal Vulnerability Commvault / Command Center | May 2, 2025 | May 23, 2025 | | | [CVE-2023-44221](https://cubepath.com/security/cve/CVE-2023-44221) | SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall / SMA100 Appliances | May 1, 2025 | May 22, 2025 | | | [CVE-2024-38475](https://cubepath.com/security/cve/CVE-2024-38475) | Apache HTTP Server Improper Escaping of Output Vulnerability Apache / HTTP Server | May 1, 2025 | May 22, 2025 | | | [CVE-2025-31324](https://cubepath.com/security/cve/CVE-2025-31324) | SAP NetWeaver Unrestricted File Upload Vulnerability SAP / NetWeaver | Apr 29, 2025 | May 20, 2025 | Known | | [CVE-2025-1976](https://cubepath.com/security/cve/CVE-2025-1976) | Broadcom Brocade Fabric OS Code Injection Vulnerability Broadcom / Brocade Fabric OS | Apr 28, 2025 | May 19, 2025 | | | [CVE-2025-3928](https://cubepath.com/security/cve/CVE-2025-3928) | Commvault Web Server Unspecified Vulnerability Commvault / Web Server | Apr 28, 2025 | May 19, 2025 | | | [CVE-2025-42599](https://cubepath.com/security/cve/CVE-2025-42599) | Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability Qualitia / Active! Mail | Apr 28, 2025 | May 19, 2025 | | | [CVE-2025-24054](https://cubepath.com/security/cve/CVE-2025-24054) | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability Microsoft / Windows | Apr 17, 2025 | May 8, 2025 | | | [CVE-2025-31200](https://cubepath.com/security/cve/CVE-2025-31200) | Apple Multiple Products Memory Corruption Vulnerability Apple / Multiple Products | Apr 17, 2025 | May 8, 2025 | | | [CVE-2025-31201](https://cubepath.com/security/cve/CVE-2025-31201) | Apple Multiple Products Arbitrary Read and Write Vulnerability Apple / Multiple Products | Apr 17, 2025 | May 8, 2025 | | | [CVE-2021-20035](https://cubepath.com/security/cve/CVE-2021-20035) | SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall / SMA100 Appliances | Apr 16, 2025 | May 7, 2025 | | | [CVE-2024-53150](https://cubepath.com/security/cve/CVE-2024-53150) | Linux Kernel Out-of-Bounds Read Vulnerability Linux / Kernel | Apr 9, 2025 | Apr 30, 2025 | | | [CVE-2024-53197](https://cubepath.com/security/cve/CVE-2024-53197) | Linux Kernel Out-of-Bounds Access Vulnerability Linux / Kernel | Apr 9, 2025 | Apr 30, 2025 | | | [CVE-2025-29824](https://cubepath.com/security/cve/CVE-2025-29824) | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft / Windows | Apr 8, 2025 | Apr 29, 2025 | Known | | [CVE-2025-30406](https://cubepath.com/security/cve/CVE-2025-30406) | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability Gladinet / CentreStack | Apr 8, 2025 | Apr 29, 2025 | | | [CVE-2025-31161](https://cubepath.com/security/cve/CVE-2025-31161) | CrushFTP Authentication Bypass Vulnerability CrushFTP / CrushFTP | Apr 7, 2025 | Apr 28, 2025 | Known | | [CVE-2025-22457](https://cubepath.com/security/cve/CVE-2025-22457) | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti / Connect Secure, Policy Secure, and ZTA Gateways | Apr 4, 2025 | Apr 11, 2025 | Known | | [CVE-2025-24813](https://cubepath.com/security/cve/CVE-2025-24813) | Apache Tomcat Path Equivalence Vulnerability Apache / Tomcat | Apr 1, 2025 | Apr 22, 2025 | | | [CVE-2024-20439](https://cubepath.com/security/cve/CVE-2024-20439) | Cisco Smart Licensing Utility Static Credential Vulnerability Cisco / Smart Licensing Utility | Mar 31, 2025 | Apr 21, 2025 | | | [CVE-2025-2783](https://cubepath.com/security/cve/CVE-2025-2783) | Google Chromium Mojo Sandbox Escape Vulnerability Google / Chromium Mojo | Mar 27, 2025 | Apr 17, 2025 | | | [CVE-2019-9874](https://cubepath.com/security/cve/CVE-2019-9874) | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore / CMS and Experience Platform (XP) | Mar 26, 2025 | Apr 16, 2025 | | | [CVE-2019-9875](https://cubepath.com/security/cve/CVE-2019-9875) | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore / CMS and Experience Platform (XP) | Mar 26, 2025 | Apr 16, 2025 | | | [CVE-2025-30154](https://cubepath.com/security/cve/CVE-2025-30154) | reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability reviewdog / action-setup GitHub Action | Mar 24, 2025 | Apr 14, 2025 | | | [CVE-2017-12637](https://cubepath.com/security/cve/CVE-2017-12637) | SAP NetWeaver Directory Traversal Vulnerability SAP / NetWeaver | Mar 19, 2025 | Apr 9, 2025 | | | [CVE-2024-48248](https://cubepath.com/security/cve/CVE-2024-48248) | NAKIVO Backup and Replication Absolute Path Traversal Vulnerability NAKIVO / Backup and Replication | Mar 19, 2025 | Apr 9, 2025 | | | [CVE-2025-1316](https://cubepath.com/security/cve/CVE-2025-1316) | Edimax IC-7100 IP Camera OS Command Injection Vulnerability Edimax / IC-7100 IP Camera | Mar 19, 2025 | Apr 9, 2025 | | | [CVE-2025-24472](https://cubepath.com/security/cve/CVE-2025-24472) | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet / FortiOS and FortiProxy | Mar 18, 2025 | Apr 8, 2025 | Known | | [CVE-2025-30066](https://cubepath.com/security/cve/CVE-2025-30066) | tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability tj-actions / changed-files GitHub Action | Mar 18, 2025 | Apr 8, 2025 | | | [CVE-2025-21590](https://cubepath.com/security/cve/CVE-2025-21590) | Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability Juniper / Junos OS | Mar 13, 2025 | Apr 3, 2025 | | | [CVE-2025-24201](https://cubepath.com/security/cve/CVE-2025-24201) | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability Apple / Multiple Products | Mar 13, 2025 | Apr 3, 2025 | | | [CVE-2025-24983](https://cubepath.com/security/cve/CVE-2025-24983) | Microsoft Windows Win32k Use-After-Free Vulnerability Microsoft / Windows | Mar 11, 2025 | Apr 1, 2025 | | | [CVE-2025-24984](https://cubepath.com/security/cve/CVE-2025-24984) | Microsoft Windows NTFS Information Disclosure Vulnerability Microsoft / Windows | Mar 11, 2025 | Apr 1, 2025 | | | [CVE-2025-24985](https://cubepath.com/security/cve/CVE-2025-24985) | Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability Microsoft / Windows | Mar 11, 2025 | Apr 1, 2025 | | | [CVE-2025-24991](https://cubepath.com/security/cve/CVE-2025-24991) | Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability Microsoft / Windows | Mar 11, 2025 | Apr 1, 2025 | | | [CVE-2025-24993](https://cubepath.com/security/cve/CVE-2025-24993) | Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability Microsoft / Windows | Mar 11, 2025 | Apr 1, 2025 | | | [CVE-2025-26633](https://cubepath.com/security/cve/CVE-2025-26633) | Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability Microsoft / Windows | Mar 11, 2025 | Apr 1, 2025 | Known | | [CVE-2024-13159](https://cubepath.com/security/cve/CVE-2024-13159) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti / Endpoint Manager (EPM) | Mar 10, 2025 | Mar 31, 2025 | | | [CVE-2024-13160](https://cubepath.com/security/cve/CVE-2024-13160) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti / Endpoint Manager (EPM) | Mar 10, 2025 | Mar 31, 2025 | | | [CVE-2024-13161](https://cubepath.com/security/cve/CVE-2024-13161) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti / Endpoint Manager (EPM) | Mar 10, 2025 | Mar 31, 2025 | | | [CVE-2024-57968](https://cubepath.com/security/cve/CVE-2024-57968) | Advantive VeraCore Unrestricted File Upload Vulnerability Advantive / VeraCore | Mar 10, 2025 | Mar 31, 2025 | | | [CVE-2025-25181](https://cubepath.com/security/cve/CVE-2025-25181) | Advantive VeraCore SQL Injection Vulnerability Advantive / VeraCore | Mar 10, 2025 | Mar 31, 2025 | | | [CVE-2024-50302](https://cubepath.com/security/cve/CVE-2024-50302) | Linux Kernel Use of Uninitialized Resource Vulnerability Linux / Kernel | Mar 4, 2025 | Mar 25, 2025 | | | [CVE-2025-22224](https://cubepath.com/security/cve/CVE-2025-22224) | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability VMware / ESXi and Workstation | Mar 4, 2025 | Mar 25, 2025 | | | [CVE-2025-22225](https://cubepath.com/security/cve/CVE-2025-22225) | VMware ESXi Arbitrary Write Vulnerability VMware / ESXi | Mar 4, 2025 | Mar 25, 2025 | Known | | [CVE-2025-22226](https://cubepath.com/security/cve/CVE-2025-22226) | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability VMware / ESXi, Workstation, and Fusion | Mar 4, 2025 | Mar 25, 2025 | | | [CVE-2018-8639](https://cubepath.com/security/cve/CVE-2018-8639) | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability Microsoft / Windows | Mar 3, 2025 | Mar 24, 2025 | Known | | [CVE-2022-43769](https://cubepath.com/security/cve/CVE-2022-43769) | Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability Hitachi Vantara / Pentaho Business Analytics (BA) Server | Mar 3, 2025 | Mar 24, 2025 | | | [CVE-2022-43939](https://cubepath.com/security/cve/CVE-2022-43939) | Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability Hitachi Vantara / Pentaho Business Analytics (BA) Server | Mar 3, 2025 | Mar 24, 2025 | | | [CVE-2023-20118](https://cubepath.com/security/cve/CVE-2023-20118) | Cisco Small Business RV Series Routers Command Injection Vulnerability Cisco / Small Business RV Series Routers | Mar 3, 2025 | Mar 24, 2025 | | | [CVE-2024-4885](https://cubepath.com/security/cve/CVE-2024-4885) | Progress WhatsUp Gold Path Traversal Vulnerability Progress / WhatsUp Gold | Mar 3, 2025 | Mar 24, 2025 | | | [CVE-2023-34192](https://cubepath.com/security/cve/CVE-2023-34192) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Feb 25, 2025 | Mar 18, 2025 | | [Newer](https://cubepath.com/security/cve/kev?page=4) Page 5 of 18 [Older](https://cubepath.com/security/cve/kev?page=6) Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. [Sources and licenses](https://cubepath.com/security/cve/legal)