Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (63 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-53897 2 Accellion, Kiteworks 2 Kiteworks Managed File Transfer, Mft 2025-12-03 6.8 Medium
Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, this vulnerability could allow an external attacker to gain access to log information from the system by tricking an administrator into browsing a specifically crafted fake page of Kiteworks MFT. This issue has been patched in version 9.1.0.
CVE-2025-53896 2 Accellion, Kiteworks 2 Kiteworks Managed File Transfer, Mft 2025-12-03 7.1 High
Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0.
CVE-2024-28063 2 Kiteworks, Totemo 2 Totemomail, Totemomail 2025-06-17 6.1 Medium
Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS.