Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,885CVE records
2,928Published, last 7 days
1,728In CISA KEV
1,438Critical, last 30 days
5,599Analysed
03:17 UTCLast NVD sync
Filters Show:
32 results. Linked to ransomware operations.
Page 1 of 2| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-20316 | Medium | 5.3 |  Cisco Secure Firewall Management Center | Hard-coded password | Listed · RW | Confirmed | 35% | Jul 29, 2026 |
| CVE-2025-68947 | Medium | 5.7 | Not yet mapped | Missing authorization | — | — | 0.13% | Jan 13, 2026 |
| CVE-2025-49706 | Medium | 6.5 |  Microsoft Sharepoint Enterprise Server +1 | Improper authentication | Listed · RW | Confirmed | 99% | Jul 8, 2025 |
| CVE-2024-9474 | Medium | 6.9 |  Paloaltonetworks Pan Os | OS command injection | Listed · RW | Confirmed | 95% | Nov 18, 2024 |
| CVE-2023-41266 | Medium | 6.5 |  Qlik Sense | Path traversal | Listed · RW | Confirmed | 85% | Aug 29, 2023 |
| CVE-2023-24880 | Medium | 4.4 | Microsoft Windows 10 1607 +9 | Incorrect authorization | Listed · RW | Confirmed | 78% | Mar 14, 2023 |
| CVE-2022-44698 | Medium | 5.4 | Microsoft Windows 10 1607 +9 | — | Listed · RW | Confirmed | 76% | Dec 13, 2022 |
| CVE-2022-41223 | Medium | 6.8 |  Mitel Mivoice Connect | Code injection | Listed · RW | Confirmed | 11% | Nov 22, 2022 |
| CVE-2022-40765 | Medium | 6.8 | Mitel Mivoice Connect | Command injection | Listed · RW | Confirmed | 11% | Nov 22, 2022 |
| CVE-2022-41091 | Medium | 5.4 | Microsoft Windows 10 1507 +11 | Incorrect authorization | Listed · RW | Confirmed | 1.8% | Nov 9, 2022 |
| CVE-2022-24682 | Medium | 6.1 | SSynacor Zimbra Collaboration Suite | CWE-116 | Listed · RW | Confirmed | 31% | Feb 9, 2022 |
| CVE-2021-41379 | Medium | 5.5 | Microsoft Windows 10 1507 +17 | Link following | Listed · RW | Confirmed | 19% | Nov 10, 2021 |
| CVE-2021-26085 | Medium | 5.3 |  Atlassian Confluence Data Center +1 | CWE-425 | Listed · RW | Confirmed | 100% | Aug 3, 2021 |
| CVE-2021-31207 | Medium | 6.6 | Microsoft Exchange Server | Unrestricted file upload | Listed · RW | Confirmed | 100% | May 11, 2021 |
| CVE-2021-20023 | Medium | 4.9 |  Sonicwall Email Security +10 | Path traversal | Listed · RW | Confirmed | 51% | Apr 20, 2021 |
| CVE-2018-19953 | Medium | 6.1 |  Qnap Qts | Cross-site scripting | Listed · RW | Confirmed | 29% | Oct 28, 2020 |
| CVE-2018-19943 | Medium | 5.4 | Qnap Qts | Cross-site scripting | Listed · RW | Confirmed | 21% | Oct 28, 2020 |
| CVE-2020-3580 | Medium | 6.1 | Cisco Secure Firewall Threat Defense +1 | Cross-site scripting | Listed · RW | Confirmed | 86% | Oct 21, 2020 |
| CVE-2020-0878 | Medium | 4.2 | Microsoft Internet Explorer +2 | Out-of-bounds write | Listed · RW | Confirmed | 2.7% | Sep 11, 2020 |
| CVE-2020-1472 | Medium | 5.5 | Microsoft Windows Server 1903 +14 | — | Listed · RW | Confirmed | 99% | Aug 17, 2020 |
