Known Exploited Vulnerabilities
Page 5 of 18. 1731 CVEs confirmed as actively exploited, per the CISA KEV catalog.
Catalog Entries
1731 total| CVE | Vulnerability | CVSS | EPSS | Added | Due |
|---|---|---|---|---|---|
| CVE-2025-34028 | Commvault Command Center Path Traversal Vulnerability | 9.3 | 97.6% | 2025-05-02 | 2025-05-23 |
| CVE-2024-58136 | Yiiframework Yii Improper Protection of Alternate Path Vulnerability | 9.0 | 87.8% | 2025-05-02 | 2025-05-23 |
| CVE-2024-38475 | Apache HTTP Server Improper Escaping of Output Vulnerability | 9.1 | 100.0% | 2025-05-01 | 2025-05-22 |
| CVE-2023-44221 | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 7.2 | 76.3% | 2025-05-01 | 2025-05-22 |
| CVE-2025-31324 | SAP NetWeaver Unrestricted File Upload Vulnerability Ransomware | 10.0 | 99.5% | 2025-04-29 | 2025-05-20 |
| CVE-2025-42599 | Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability | 9.8 | 3.3% | 2025-04-28 | 2025-05-19 |
| CVE-2025-3928 | Commvault Web Server Unspecified Vulnerability | 8.8 | 2.3% | 2025-04-28 | 2025-05-19 |
| CVE-2025-1976 | Broadcom Brocade Fabric OS Code Injection Vulnerability | 8.6 | 0.7% | 2025-04-28 | 2025-05-19 |
| CVE-2025-31201 | Apple Multiple Products Arbitrary Read and Write Vulnerability | 9.8 | 14.0% | 2025-04-17 | 2025-05-08 |
| CVE-2025-31200 | Apple Multiple Products Memory Corruption Vulnerability | 9.8 | 18.8% | 2025-04-17 | 2025-05-08 |
| CVE-2025-24054 | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability | 6.5 | 58.9% | 2025-04-17 | 2025-05-08 |
| CVE-2021-20035 | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 6.5 | 4.2% | 2025-04-16 | 2025-05-07 |
| CVE-2024-53197 | Linux Kernel Out-of-Bounds Access Vulnerability | 7.8 | 3.6% | 2025-04-09 | 2025-04-30 |
| CVE-2024-53150 | Linux Kernel Out-of-Bounds Read Vulnerability | 7.1 | 1.4% | 2025-04-09 | 2025-04-30 |
| CVE-2025-30406 | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability | 9.0 | 94.3% | 2025-04-08 | 2025-04-29 |
| CVE-2025-29824 | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Ransomware | 7.8 | 13.9% | 2025-04-08 | 2025-04-29 |
| CVE-2025-31161 | CrushFTP Authentication Bypass Vulnerability Ransomware | 9.8 | 100.0% | 2025-04-07 | 2025-04-28 |
| CVE-2025-22457 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ransomware | 9.0 | 100.0% | 2025-04-04 | 2025-04-11 |
| CVE-2025-24813 | Apache Tomcat Path Equivalence Vulnerability | 10.0 | 99.9% | 2025-04-01 | 2025-04-22 |
| CVE-2024-20439 | Cisco Smart Licensing Utility Static Credential Vulnerability | 9.8 | 97.1% | 2025-03-31 | 2025-04-21 |
| CVE-2025-2783 | Google Chromium Mojo Sandbox Escape Vulnerability | 8.3 | 9.2% | 2025-03-27 | 2025-04-17 |
| CVE-2019-9875 | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | 8.8 | 13.8% | 2025-03-26 | 2025-04-16 |
| CVE-2019-9874 | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | 9.8 | 83.7% | 2025-03-26 | 2025-04-16 |
| CVE-2025-30154 | reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability | 8.6 | 2.4% | 2025-03-24 | 2025-04-14 |
| CVE-2025-1316 | Edimax IC-7100 IP Camera OS Command Injection Vulnerability | 9.8 | 74.5% | 2025-03-19 | 2025-04-09 |
| CVE-2024-48248 | NAKIVO Backup and Replication Absolute Path Traversal Vulnerability | 8.6 | 94.4% | 2025-03-19 | 2025-04-09 |
| CVE-2017-12637 | SAP NetWeaver Directory Traversal Vulnerability | 7.5 | 95.1% | 2025-03-19 | 2025-04-09 |
| CVE-2025-30066 | tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability | 8.6 | 72.1% | 2025-03-18 | 2025-04-08 |
| CVE-2025-24472 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Ransomware | 8.1 | 7.2% | 2025-03-18 | 2025-04-08 |
| CVE-2025-24201 | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability | 10.0 | 3.8% | 2025-03-13 | 2025-04-03 |
| CVE-2025-21590 | Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability | 6.7 | 1.7% | 2025-03-13 | 2025-04-03 |
| CVE-2025-26633 | Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability Ransomware | 7.0 | 30.4% | 2025-03-11 | 2025-04-01 |
| CVE-2025-24993 | Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability | 7.8 | 2.2% | 2025-03-11 | 2025-04-01 |
| CVE-2025-24991 | Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability | 5.5 | 2.0% | 2025-03-11 | 2025-04-01 |
| CVE-2025-24985 | Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability | 7.8 | 3.8% | 2025-03-11 | 2025-04-01 |
| CVE-2025-24984 | Microsoft Windows NTFS Information Disclosure Vulnerability | 4.6 | 2.0% | 2025-03-11 | 2025-04-01 |
| CVE-2025-24983 | Microsoft Windows Win32k Use-After-Free Vulnerability | 7.0 | 1.3% | 2025-03-11 | 2025-04-01 |
| CVE-2025-25181 | Advantive VeraCore SQL Injection Vulnerability | 5.8 | 55.5% | 2025-03-10 | 2025-03-31 |
| CVE-2024-57968 | Advantive VeraCore Unrestricted File Upload Vulnerability | 9.9 | 32.3% | 2025-03-10 | 2025-03-31 |
| CVE-2024-13161 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 9.8 | 90.1% | 2025-03-10 | 2025-03-31 |
| CVE-2024-13160 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 9.8 | 91.2% | 2025-03-10 | 2025-03-31 |
| CVE-2024-13159 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 9.8 | 100.0% | 2025-03-10 | 2025-03-31 |
| CVE-2025-22226 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability | 7.1 | 1.8% | 2025-03-04 | 2025-03-25 |
| CVE-2025-22225 | VMware ESXi Arbitrary Write Vulnerability Ransomware | 8.2 | 1.0% | 2025-03-04 | 2025-03-25 |
| CVE-2025-22224 | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability | 9.3 | 1.6% | 2025-03-04 | 2025-03-25 |
| CVE-2024-50302 | Linux Kernel Use of Uninitialized Resource Vulnerability | 5.5 | 0.8% | 2025-03-04 | 2025-03-25 |
| CVE-2024-4885 | Progress WhatsUp Gold Path Traversal Vulnerability | 9.8 | 99.3% | 2025-03-03 | 2025-03-24 |
| CVE-2023-20118 | Cisco Small Business RV Series Routers Command Injection Vulnerability | 6.5 | 54.1% | 2025-03-03 | 2025-03-24 |
| CVE-2022-43939 | Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability | 8.6 | 92.3% | 2025-03-03 | 2025-03-24 |
| CVE-2022-43769 | Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability | 8.8 | 97.7% | 2025-03-03 | 2025-03-24 |
| CVE-2018-8639 | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability Ransomware | 8.4 | 22.2% | 2025-03-03 | 2025-03-24 |
| CVE-2024-49035 | Microsoft Partner Center Improper Access Control Vulnerability | 8.7 | 1.3% | 2025-02-25 | 2025-03-18 |
| CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 9.0 | 77.3% | 2025-02-25 | 2025-03-18 |
| CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | 8.8 | 3.9% | 2025-02-24 | 2025-03-17 |
| CVE-2017-3066 | Adobe ColdFusion Deserialization Vulnerability | 9.8 | 90.6% | 2025-02-24 | 2025-03-17 |
| CVE-2025-24989 | Microsoft Power Pages Improper Access Control Vulnerability | 8.2 | 1.6% | 2025-02-21 | 2025-03-14 |
| CVE-2025-23209 | Craft CMS Code Injection Vulnerability | 8.1 | 21.8% | 2025-02-20 | 2025-03-13 |
| CVE-2025-0111 | Palo Alto Networks PAN-OS File Read Vulnerability | 7.1 | 2.0% | 2025-02-20 | 2025-03-13 |
| CVE-2025-0108 | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 8.8 | 98.5% | 2025-02-18 | 2025-03-11 |
| CVE-2024-53704 | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability Ransomware | 8.2 | 95.1% | 2025-02-18 | 2025-03-11 |
| CVE-2024-57727 | SimpleHelp Path Traversal Vulnerability Ransomware | 9.1 | 96.6% | 2025-02-13 | 2025-03-06 |
| CVE-2025-24200 | Apple iOS and iPadOS Incorrect Authorization Vulnerability | 6.1 | 4.5% | 2025-02-12 | 2025-03-05 |
| CVE-2024-41710 | Mitel SIP Phones Argument Injection Vulnerability | 6.8 | 41.6% | 2025-02-12 | 2025-03-05 |
| CVE-2025-21418 | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability | 7.8 | 1.6% | 2025-02-11 | 2025-03-04 |
| CVE-2025-21391 | Microsoft Windows Storage Link Following Vulnerability | 7.1 | 2.3% | 2025-02-11 | 2025-03-04 |
| CVE-2024-40891 | Zyxel DSL CPE OS Command Injection Vulnerability | 8.8 | 21.5% | 2025-02-11 | 2025-03-04 |
| CVE-2024-40890 | Zyxel DSL CPE OS Command Injection Vulnerability | 8.8 | 20.7% | 2025-02-11 | 2025-03-04 |
| CVE-2025-0994 | Trimble Cityworks Deserialization Vulnerability | 8.6 | 31.3% | 2025-02-07 | 2025-02-28 |
| CVE-2025-0411 | 7-Zip Mark of the Web Bypass Vulnerability | 7.0 | 67.1% | 2025-02-06 | 2025-02-27 |
| CVE-2024-21413 | Microsoft Outlook Improper Input Validation Vulnerability | 9.8 | 94.7% | 2025-02-06 | 2025-02-27 |
| CVE-2022-23748 | Dante Discovery Process Control Vulnerability | 7.8 | 9.1% | 2025-02-06 | 2025-02-27 |
| CVE-2020-29574 | CyberoamOS (CROS) SQL Injection Vulnerability Ransomware | 9.8 | 4.7% | 2025-02-06 | 2025-02-27 |
| CVE-2020-15069 | Sophos XG Firewall Buffer Overflow Vulnerability | 9.8 | 10.7% | 2025-02-06 | 2025-02-27 |
| CVE-2024-53104 | Linux Kernel Out-of-Bounds Write Vulnerability | 7.8 | 3.4% | 2025-02-05 | 2025-02-26 |
| CVE-2024-45195 | Apache OFBiz Forced Browsing Vulnerability | 9.8 | 100.0% | 2025-02-04 | 2025-02-25 |
| CVE-2024-29059 | Microsoft .NET Framework Information Disclosure Vulnerability | 7.5 | 98.6% | 2025-02-04 | 2025-02-25 |
| CVE-2018-9276 | Paessler PRTG Network Monitor OS Command Injection Vulnerability | 7.2 | 87.0% | 2025-02-04 | 2025-02-25 |
| CVE-2018-19410 | Paessler PRTG Network Monitor Local File Inclusion Vulnerability | 9.8 | 97.9% | 2025-02-04 | 2025-02-25 |
| CVE-2025-24085 | Apple Multiple Products Use-After-Free Vulnerability | 10.0 | 17.5% | 2025-01-29 | 2025-02-19 |
| CVE-2025-23006 | SonicWall SMA1000 Appliances Deserialization Vulnerability Ransomware | 9.8 | 23.4% | 2025-01-24 | 2025-02-14 |
| CVE-2020-11023 | JQuery Cross-Site Scripting (XSS) Vulnerability | 6.9 | 84.9% | 2025-01-23 | 2025-02-13 |
| CVE-2024-50603 | Aviatrix Controllers OS Command Injection Vulnerability | 10.0 | 98.5% | 2025-01-16 | 2025-02-06 |
| CVE-2025-21335 | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | 7.8 | 1.4% | 2025-01-14 | 2025-02-04 |
| CVE-2025-21334 | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | 7.8 | 1.6% | 2025-01-14 | 2025-02-04 |
| CVE-2025-21333 | Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability | 7.8 | 10.0% | 2025-01-14 | 2025-02-04 |
| CVE-2024-55591 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Ransomware | 9.6 | 94.1% | 2025-01-14 | 2025-01-21 |
| CVE-2024-12686 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability | 6.6 | 13.7% | 2025-01-13 | 2025-02-03 |
| CVE-2023-48365 | Qlik Sense HTTP Tunneling Vulnerability Ransomware | 9.6 | 47.5% | 2025-01-13 | 2025-02-03 |
| CVE-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ransomware | 9.0 | 100.0% | 2025-01-08 | 2025-01-15 |
| CVE-2024-55550 | Mitel MiCollab Path Traversal Vulnerability Ransomware | 4.4 | 38.2% | 2025-01-07 | 2025-01-28 |
| CVE-2024-41713 | Mitel MiCollab Path Traversal Vulnerability Ransomware | 9.1 | 98.1% | 2025-01-07 | 2025-01-28 |
| CVE-2020-2883 | Oracle WebLogic Server Unspecified Vulnerability | 9.8 | 94.9% | 2025-01-07 | 2025-01-28 |
| CVE-2024-3393 | Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability | 8.7 | 28.6% | 2024-12-30 | 2025-01-20 |
| CVE-2021-44207 | Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability | 8.1 | 17.6% | 2024-12-23 | 2025-01-13 |
| CVE-2024-12356 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability | 9.8 | 87.3% | 2024-12-19 | 2024-12-27 |
| CVE-2022-23227 | NUUO NVRmini2 Devices Missing Authentication Vulnerability | 9.8 | 48.5% | 2024-12-18 | 2025-01-08 |
| CVE-2021-40407 | Reolink RLC-410W IP Camera OS Command Injection Vulnerability | 9.1 | 47.6% | 2024-12-18 | 2025-01-08 |
| CVE-2019-11001 | Reolink Multiple IP Cameras OS Command Injection Vulnerability | 7.2 | 37.5% | 2024-12-18 | 2025-01-08 |
| CVE-2018-14933 | NUUO NVRmini Devices OS Command Injection Vulnerability | 9.8 | 94.9% | 2024-12-18 | 2025-01-08 |
| CVE-2024-55956 | Cleo Multiple Products Unauthenticated File Upload Vulnerability Ransomware | 9.8 | 94.0% | 2024-12-17 | 2025-01-07 |