Complete index
Zero-Day Vulnerability Archive
Search all tracked zero-day vulnerabilities and narrow the results by year, vendor, software, weakness type, or presence in the CISA and ENISA known exploited vulnerability catalogs.
| CVE | Vendor / Product | Vulnerability | CWE | Discovered | KEV |
|---|---|---|---|---|---|
| CVE-2025-0626 | ContecCMS8000 Patient Monitor | Hidden functionality in CMS8000 Patient Monitor | CWE-912 | — | |
| CVE-2025-0994 | TrimbleCityworks | Deserialization of Untrusted Data in Cityworks and Cityworks with office companion | CWE-502 | CISA KEVENISA KEV | |
| CVE-2024-40891 | ZyXEL Communications Corp.Zyxel CPE Series | Command Injection in Zyxel CPE Series | CWE-77 | CISA KEVENISA KEV | |
| CVE-2025-24085 | Apple Inc.Apple iOS | Use-after-free in Apple iOS and iPadOS | CWE-416 | CISA KEVENISA KEV | |
| CVE-2025-23006 | SonicWallSonicWall SMA 1000 | Deserialization of untrusted data in SonicWall SMA 1000 | CWE-502 | CISA KEVENISA KEV | |
| CVE-2025-21335 | MicrosoftMicrosoft Windows | Use-after-free in Microsoft Windows and Windows Server | CWE-416 | CISA KEVENISA KEV | |
| CVE-2025-21334 | MicrosoftMicrosoft Windows | Use-after-free in Microsoft Windows and Windows Server | CWE-416 | CISA KEVENISA KEV | |
| CVE-2025-21333 | MicrosoftMicrosoft Windows | Heap-based buffer overflow in Microsoft Windows and Windows Server | CWE-122 | CISA KEVENISA KEV | |
| CVE-2024-55591 | Fortinet, IncFortiOS | Authentication bypass using an alternate path or channel in FortiProxy and FortiOS | CWE-288 | CISA KEVENISA KEV | |
| CVE-2025-0282 | IvantiIvanti Connect Secure (formerly Pulse Connect Secure) | Stack-based buffer overflow in Ivanti Connect Secure (formerly Pulse Connect Secure) | CWE-121 | CISA KEVENISA KEV | |
| CVE-2024-3393 | Palo Alto Networks, Inc.Palo Alto PAN-OS | Improper Check for Unusual or Exceptional Conditions in Palo Alto PAN-OS | CWE-754 | CISA KEVENISA KEV | |
| CVE-2024-12856 | Four-FaithF3x24, F3x36 | OS Command Injection in F3x24 and F3x36 | CWE-78 | — | |
| CVE-2024-12356 | BeyondTrustRemote Support | OS Command Injection in Remote Support and Privileged Remote Access (PRA) | CWE-78 | CISA KEVENISA KEV | |
| CVE-2024-12686 | BeyondTrustRemote Support | OS Command Injection in Remote Support and Privileged Remote Access (PRA) | CWE-78 | CISA KEVENISA KEV | |
| CVE-2024-49138 | MicrosoftMicrosoft Windows | Heap-based buffer overflow in Microsoft Windows and Windows Server | CWE-122 | CISA KEVENISA KEV | |
| CVE-2024-55956 | CleoCleo LexiCom | Arbitrary file upload in Cleo products | CWE-434 | CISA KEVENISA KEV | |
| CVE-2024-47133 | I-O DATAUD-LT1, UD-LT1/EX | OS Command Injection in UD-LT1 and UD-LT1/EX | CWE-78 | — | |
| CVE-2024-45841 | I-O DATAUD-LT1, UD-LT1/EX | Incorrect permission assignment for critical resource in UD-LT1 and UD-LT1/EX | CWE-732 | — | |
| CVE-2024-52564 | I-O DATAUD-LT1, UD-LT1/EX | Inclusion of Undocumented Features or Chicken Bits in UD-LT1 and UD-LT1/EX | CWE-1242 | — | |
| CVE-2024-44309 | Apple Inc.macOS | Universal cross-site scripting in WPE WebKit and WebKitGTK+ | CWE-79 | CISA KEVENISA KEV |
Showing 201–220 of 1,025 results