CWE-345

CVEs per yearBy the year they were published

1. 201511
2. 201613
3. 201718
4. 201815
5. 201942
6. 202051
7. 202150
8. 202281
9. 202375
10. 202463
11. 202562
12. 2026435

Known exploitedNewest addition to KEV first

• CVE-2023-38831

  RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because…

  Product not named

  ExploitedHigh7.8
• CVE-2022-26871

  An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead…

  Trend Micro · Trend Micro Apex Central

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-123599

  Hickory DNS before 0.26.0-beta.1 DNSSEC Validation Bypass via Non-IN Class Records

  hickory-dns · hickory-dns

  Medium6.3
• CVE-2026-123596

  Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC

  hickory-dns · hickory-dns

  High8.7
• CVE-2026-123595

  Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC3

  hickory-dns · hickory-dns

  High8.7
• CVE-2026-123594

  Hickory DNS through 0.26.0-alpha.1 DNSSEC NSEC Validation Bypass for Empty Non-Terminals

  hickory-dns · hickory-dns

  Medium6.3
• CVE-2026-123591

  Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Missing RFC 6840 Checks

  hickory-dns · hickory-dns

  High8.2
• CVE-2026-123582

  Hickory DNS 0.25.0 before 0.26.2 DNSSEC Validation Bypass via SOA Record

  hickory-dns · hickory-dns

  Medium6.3
• CVE-2026-123581

  Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Unrelated RRset

  hickory-dns · hickory-dns

  Medium6.9
• CVE-2025-66621

  Apache James: SASL OAUTHBEARER do not validate aud in JWT payload if misconfigred

  Apache Software Foundation · Apache James

  Not scored
• CVE-2026-121636

  Quick Event Manager 9.9.5 - 9.18 - Unauthenticated PayPal IPN Verification Bypass via the 'debug' Parameter

  Unknown · Quick Event Manager

  Medium5.3
• CVE-2026-121633

  Order Tracking < 3.6.0 - Unauthenticated Payment Confirmation Forgery via PayPal IPN Listener

  Unknown · Order Tracking

  Medium5.3

Vendors it comes up for most

1. Cisco17
2. Red Hat16
3. Mozilla13
4. Apache Software Foundation12
5. Microsoft12
6. Google10
7. openclaw9
8. hickory-dns8
9. GitroomHQ7
10. AMD6