https://db.gcve.eu/known-exploited-vulnerabilities-catalog/feed 2026-07-02T02:17:39.426950+00:00 Shadowserver info@gcve.eu python-feedgen KEV catalog conforming to GCVE BCP-07. Contains the most recent 20 entries. https://db.gcve.eu/known-exploited-vulnerabilities-catalog/fe026380-c375-4ff6-b489-8b01e189972d 2026-07-02T01:01:19.397202+00:00 <h3>CVE-2017-12542</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 13:11 UTC</p> <p><strong>Characteristics:</strong> Severity: 100</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-06-30</p> <p><strong>Asserted:</strong> 2026-06-30</p> <p><strong>Scope Notes:</strong> Affected: HP / HP iLO 4 | Class: device-management-platform | Severity: Critical (CVSS 10) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-06-30: 9</p> 2026-06-30T13:11:03+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/91fb4a77-2fe2-42cc-b943-ea44b06d790d 2026-07-02T01:01:24.420846+00:00 <h3>CVE-2025-25231</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 75</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-12-28</p> <p><strong>Asserted:</strong> 2025-12-28</p> <p><strong>Scope Notes:</strong> Affected: Omnissa / Omnissa Workspace ONE UEM | Class: device-management-platform | Severity: High (CVSS 7.5) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e3d326d7-dd79-478d-b974-a1edfbef1374 2026-07-02T01:00:34.263193+00:00 <h3>CVE-2019-5128</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: YouPHPTube / YouPHPTube Encoder | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 11</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9f319a87-ef63-4b63-aaf3-376fbd9b4784 2026-07-02T01:01:29.279611+00:00 <h3>CVE-2025-22214</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 43</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-11-28</p> <p><strong>Asserted:</strong> 2025-11-28</p> <p><strong>Scope Notes:</strong> Affected: Landray / Landray EIS | Class: other-software | Severity: Medium (CVSS 4.3) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/78030535-ff22-41f8-8859-a6dfd0801c6f 2026-07-02T01:01:32.132207+00:00 <h3>CVE-2020-10189</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-07-21</p> <p><strong>Asserted:</strong> 2024-07-21</p> <p><strong>Scope Notes:</strong> Affected: Zoho / ManageEngine Desktop Central (now Engine Central) | Class: device-management-platform | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-06-30: 1</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/27de3994-3412-4469-b9e4-4a6927b202c3 2026-07-02T01:01:32.237782+00:00 <h3>CVE-2024-2330</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 63</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-09-26</p> <p><strong>Asserted:</strong> 2024-09-26</p> <p><strong>Scope Notes:</strong> Affected: Netentsec / NS-ASG Application Security Gateway | Class: firewall | Severity: Medium (CVSS 6.3) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/b18a7779-58cc-40ba-a795-077289fe2afd 2026-07-02T01:01:16.840735+00:00 <h3>CVE-2022-38627</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-07-13</p> <p><strong>Asserted:</strong> 2025-07-13</p> <p><strong>Scope Notes:</strong> Affected: Linear / eMerge E3-series | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/798e4ec0-659a-427c-898b-25408fff3803 2026-07-02T01:01:03.176689+00:00 <h3>CVE-2023-34659</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: JEECG / jeecg-boot | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6c846690-fcf6-4cc2-9834-effb3bd4bc9d 2026-07-02T01:01:37.564474+00:00 <h3>CVE-2024-53944</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-07-02</p> <p><strong>Asserted:</strong> 2025-07-02</p> <p><strong>Scope Notes:</strong> Affected: Tuoshi/Dionlink / Tuoshi/Dionlink LT15D 4G Wi-Fi | Class: router | Severity: Critical (CVSS 9.8) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-06-30: 13</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/078d66c4-f021-45fa-ae5d-e8597f625323 2026-07-02T01:01:39.521122+00:00 <h3>CVE-2023-43795</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-07-22</p> <p><strong>Asserted:</strong> 2024-07-22</p> <p><strong>Scope Notes:</strong> Affected: GeoServer / GeoServer | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8a7dccd3-97eb-4bc5-8f6b-ae5d5937caa9 2026-07-02T01:00:07.121558+00:00 <h3>CVE-2017-17215</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 88</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2022-05-04</p> <p><strong>Asserted:</strong> 2022-05-04</p> <p><strong>Scope Notes:</strong> Affected: Huawei / Huawei Home Gateway HG532 | Class: router | Severity: High (CVSS 8.8) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-06-30: 5578</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/fab19a2e-741d-48f5-a85a-f515a0752b4b 2026-07-02T01:00:17.736610+00:00 <h3>CVE-2019-7238</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Sonatype / Nexus Repository Manager | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-06-30: 7</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3f8aee59-58b8-48ae-9a44-1a532441fe6a 2026-07-02T01:00:20.724419+00:00 <h3>CVE-2017-12635</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Apache / CouchDB | Class: database | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 9</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/1f561a43-e0f5-4f1d-a729-65b58c66c82f 2026-07-02T01:01:13.156142+00:00 <h3>CVE-2022-25369</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 0</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Dynamicweb Software / Dynamicweb | Class: other-software | Severity: None (CVSS 0) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/675695a4-8240-4ad0-bdbd-b495c071a804 2026-07-02T01:00:58.512986+00:00 <h3>CVE-2022-22897</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-08-06</p> <p><strong>Asserted:</strong> 2024-08-06</p> <p><strong>Scope Notes:</strong> Affected: PrestaShop / PrestaShop ApolloTheme AP PageBuilder module | Class: cms | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/d9ba8e8b-cb40-4a94-8693-3c9e62750a8a 2026-07-02T01:01:36.594979+00:00 <h3>CVE-2021-27670</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-01-21</p> <p><strong>Asserted:</strong> 2026-01-21</p> <p><strong>Scope Notes:</strong> Affected: Appspace / Appspace | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/0b5cbe91-7dc9-4d59-8175-c88c42af8d9e 2026-07-02T01:01:07.957819+00:00 <h3>CVE-2020-10148</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: SolarWinds / SolarWinds Orion | Class: device-management-platform | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-06-30: 1</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e25a7e89-9e31-4cc0-bfa2-d2cdfe4152e0 2026-07-02T01:01:36.806066+00:00 <h3>CVE-2022-25486</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 78</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: CuppaCMS / CuppaCMS | Class: cms | Severity: High (CVSS 7.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/fcbf12dc-9ee2-4a67-a133-50786fa1e696 2026-07-02T01:00:18.029311+00:00 <h3>CVE-2021-21402</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 65</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-17</p> <p><strong>Asserted:</strong> 2023-10-17</p> <p><strong>Scope Notes:</strong> Affected: Jellyfin / Jellyfin | Class: other-software | Severity: Medium (CVSS 6.5) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 10</p> 2026-06-30T00:00:00+00:00 https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e8ee18e0-e94b-43a1-b1a5-d810997b2e7f 2026-07-02T01:00:07.927431+00:00 <h3>CVE-2021-42013</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-07-19</p> <p><strong>Asserted:</strong> 2024-07-19</p> <p><strong>Scope Notes:</strong> Affected: Apache / Apache HTTP Server | Class: web-server | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-06-30: 1345</p> 2026-06-30T00:00:00+00:00