Skip to content
VulniPulse

Complete feed

Exploited / KEV

Known exploitation or KEV-listed

Home overview

Android app · Google Play

Take your CVE monitoring with you.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

HighCommvault Exploited CISA KEV

High [CVE-2025-3928] Critical Webserver Vulnerability

CVE.Org link: CVE-2025-3928 Save as PDF A vulnerability has been identified and remediated in all supported versions of the Commvault software. Webservers can be compromised through bad actors creating and executing webshells. Exploiting this vulnerability requires a bad actor to have authenticated user credentials within the Commvault Software environment. Unauthenticated access is not exploitable. For software customers, this means your environment must be: (i) accessible via the internet, (ii) compromised through an unrelated avenue, and (iii) accessed leveraging legitimate user credentials.

CVE-2025-3928
Unclassified
May 1, 2025
HighCommvault Exploited CISA KEV

High [CVE-2021-4034] Local Privilege Escalation Vulnerability in Polkit's pkexec Utility

Local Privilege Escalation Vulnerability in Polkit's pkexec Utility

CVE-2021-4034
Unclassified
Jan 29, 2022