Critical Alert 2 Active Exploits Detected Today

CVE-2022-0492 Linux Kernel Improper Authentication Vulnerability →
CVE-2025-48595 Android Framework Integer Overflow Vulnerability →
Powered by CVE Watchtower
×

CVE Watchtower

Advanced Threat Data Export

Filter and download the raw CVE repository (CSV/JSON) for SIEM integration and internal reporting.

Data export is locked. Upgrade your package to enable filtering and downloading.

πŸ”” Premium Features
πŸ” Filter Threats
Title
SeverityEPSS (30-Day)
PoCActively ExploitedSourceDate
CVE-2026-10297
A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown part of the file /manage_course.php. The manipulati...
MEDIUMπŸ”’ LOCKED??????????NVD1 day ago
CVE-2026-10296
A vulnerability was determined in itsourcecode Fees Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php....
MEDIUMπŸ”’ LOCKED??????????NVD1 day ago
???-????-????
??????????????????????????????????
??????????????????????????????????
UNKNOWNπŸ”’ LOCKED??????????SA1 day ago
CVE-2026-10295
A vulnerability was found in SourceCodester Customer Review App 1.0. Affected by this vulnerability is the function add_review/save_review/get_all_rev...
LOWπŸ”’ LOCKED??????????NVD1 day ago
CVE-2019-25718
DrΓ€ger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the underlyin...
HIGHπŸ”’ LOCKED??????????NVD1 day ago
CVE-2026-10294
A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. ...
MEDIUMπŸ”’ LOCKED??????????NVD1 day ago
CVE-2026-40965
Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a vulnerability where EC (Elliptic ...
CRITICALπŸ”’ LOCKED??????????NVD1 day ago
CVE-2026-5419
A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remot...
LOWπŸ”’ LOCKED??????????NVD1 day ago
CVE-2026-37234
FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple E42_SETUP_REQUESTs. On disconnect, only the first registe...
HIGHπŸ”’ LOCKED??????????NVD1 day ago
CVE-2026-24751
Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Data Forms could allow an externa...
HIGHπŸ”’ LOCKED??????????NVD1 day ago
CVE-2025-70099
A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows attackers to cause a denial of servic...
HIGHπŸ”’ LOCKED??????????NVD1 day ago
CVE-2026-10293
A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/formFireWall. This manipulation of ...
HIGHπŸ”’ LOCKED??????????NVD1 day ago
CVE-2019-25716
DrΓ€ger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monit...
MEDIUMπŸ”’ LOCKED??????????NVD1 day ago
CVE-2026-49491
Pixa Bank 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract sensitive data by injecting SQL code into the &...
HIGHπŸ”’ LOCKED??????????NVD1 day ago
CVE-2018-25435
ZeusCart 4.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of victims by craftin...
MEDIUMπŸ”’ LOCKED??????????NVD1 day ago
CVE-2018-25434
WP AutoSuggest 0.24 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malici...
HIGHπŸ”’ LOCKED??????????NVD1 day ago
CVE-2018-25433
Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by...
HIGHπŸ”’ LOCKED??????????NVD1 day ago
CVE-2018-25432
Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception ...
HIGHπŸ”’ LOCKED??????????NVD1 day ago
CVE-2018-25431
No-Cms 1.0 contains an SQL injection vulnerability in the order_by parameter of the manage_privilege export endpoint that allows authenticated attacke...
HIGHπŸ”’ LOCKED??????????NVD1 day ago
CVE-2018-25430
Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious co...
HIGHπŸ”’ LOCKED??????????NVD1 day ago