Known Exploited Vulnerabilities
Page 7 of 18. 1731 CVEs confirmed as actively exploited, per the CISA KEV catalog.
Catalog Entries
1731 total| CVE | Vulnerability | CVSS | EPSS | Added | Due |
|---|---|---|---|---|---|
| CVE-2024-36401 | OSGeo GeoServer GeoTools Eval Injection Vulnerability | 9.8 | 99.8% | 2024-07-15 | 2024-08-05 |
| CVE-2024-38112 | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 7.5 | 84.2% | 2024-07-09 | 2024-07-30 |
| CVE-2024-38080 | Microsoft Windows Hyper-V Privilege Escalation Vulnerability | 7.8 | 7.1% | 2024-07-09 | 2024-07-30 |
| CVE-2024-23692 | Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Ransomware | 9.8 | 99.5% | 2024-07-09 | 2024-07-30 |
| CVE-2024-20399 | Cisco NX-OS Command Injection Vulnerability | 6.0 | 4.3% | 2024-07-02 | 2024-07-23 |
| CVE-2022-2586 | Linux Kernel Use-After-Free Vulnerability | 5.3 | 10.2% | 2024-06-26 | 2024-07-17 |
| CVE-2022-24816 | OSGeo GeoServer JAI-EXT Code Injection Vulnerability | 10.0 | 99.9% | 2024-06-26 | 2024-07-17 |
| CVE-2020-13965 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | 6.3 | 76.6% | 2024-06-26 | 2024-07-17 |
| CVE-2024-4358 | Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability | 9.8 | 97.5% | 2024-06-13 | 2024-07-04 |
| CVE-2024-32896 | Android Pixel Privilege Escalation Vulnerability | 8.1 | 3.0% | 2024-06-13 | 2024-07-04 |
| CVE-2024-26169 | Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability Ransomware | 7.8 | 4.0% | 2024-06-13 | 2024-07-04 |
| CVE-2024-4610 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 7.4 | 0.8% | 2024-06-12 | 2024-07-03 |
| CVE-2024-4577 | PHP-CGI OS Command Injection Vulnerability Ransomware | 9.8 | 100.0% | 2024-06-12 | 2024-07-03 |
| CVE-2017-3506 | Oracle WebLogic Server OS Command Injection Vulnerability | 7.4 | 96.3% | 2024-06-03 | 2024-06-24 |
| CVE-2024-24919 | Check Point Quantum Security Gateways Information Disclosure Vulnerability Ransomware | 8.6 | 100.0% | 2024-05-30 | 2024-06-20 |
| CVE-2024-1086 | Linux Kernel Use-After-Free Vulnerability Ransomware | 7.8 | 28.1% | 2024-05-30 | 2024-06-20 |
| CVE-2024-4978 | Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability | 8.7 | 26.9% | 2024-05-29 | 2024-06-19 |
| CVE-2024-5274 | Google Chromium V8 Type Confusion Vulnerability | 8.3 | 7.5% | 2024-05-28 | 2024-06-18 |
| CVE-2020-17519 | Apache Flink Improper Access Control Vulnerability | 9.1 | 97.8% | 2024-05-23 | 2024-06-13 |
| CVE-2024-4947 | Google Chromium V8 Type Confusion Vulnerability | 9.6 | 15.2% | 2024-05-20 | 2024-06-10 |
| CVE-2023-43208 | NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability Ransomware | 9.8 | 82.7% | 2024-05-20 | 2024-06-10 |
| CVE-2024-4761 | Google Chromium V8 Out-of-Bounds Memory Write Vulnerability | 8.3 | 11.0% | 2024-05-16 | 2024-06-06 |
| CVE-2021-40655 | D-Link DIR-605 Router Information Disclosure Vulnerability | 7.5 | 86.7% | 2024-05-16 | 2024-06-06 |
| CVE-2014-100005 | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | 8.0 | 43.5% | 2024-05-16 | 2024-06-06 |
| CVE-2024-30051 | Microsoft DWM Core Library Privilege Escalation Vulnerability Ransomware | 7.8 | 5.6% | 2024-05-14 | 2024-06-04 |
| CVE-2024-30040 | Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability | 8.8 | 3.9% | 2024-05-14 | 2024-06-04 |
| CVE-2024-4671 | Google Chromium Visuals Use-After-Free Vulnerability | 9.6 | 8.3% | 2024-05-13 | 2024-06-03 |
| CVE-2023-7028 | GitLab Community and Enterprise Editions Improper Access Control Vulnerability | 10.0 | 94.6% | 2024-05-01 | 2024-05-22 |
| CVE-2024-29988 | Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability | 8.8 | 44.9% | 2024-04-30 | 2024-05-21 |
| CVE-2024-4040 | CrushFTP VFS Sandbox Escape Vulnerability | 9.8 | 99.5% | 2024-04-24 | 2024-05-01 |
| CVE-2024-20359 | Cisco ASA and FTD Privilege Escalation Vulnerability | 6.0 | 19.4% | 2024-04-24 | 2024-05-01 |
| CVE-2024-20353 | Cisco ASA and FTD Denial of Service Vulnerability | 8.6 | 70.7% | 2024-04-24 | 2024-05-01 |
| CVE-2022-38028 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 7.8 | 14.9% | 2024-04-23 | 2024-05-14 |
| CVE-2024-3400 | Palo Alto Networks PAN-OS Command Injection Vulnerability Ransomware | 10.0 | 100.0% | 2024-04-12 | 2024-04-19 |
| CVE-2024-3273 | D-Link Multiple NAS Devices Command Injection Vulnerability | 7.5 | 100.0% | 2024-04-11 | 2024-05-02 |
| CVE-2024-3272 | D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability | 10.0 | 98.0% | 2024-04-11 | 2024-05-02 |
| CVE-2024-29748 | Android Pixel Privilege Escalation Vulnerability | 7.8 | 0.7% | 2024-04-04 | 2024-04-25 |
| CVE-2024-29745 | Android Pixel Information Disclosure Vulnerability | 5.5 | 0.5% | 2024-04-04 | 2024-04-25 |
| CVE-2023-24955 | Microsoft SharePoint Server Code Injection Vulnerability Ransomware | 7.2 | 85.4% | 2024-03-26 | 2024-04-16 |
| CVE-2023-48788 | Fortinet FortiClient EMS SQL Injection Vulnerability Ransomware | 9.3 | 98.4% | 2024-03-25 | 2024-04-15 |
| CVE-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ransomware | 9.8 | 99.1% | 2024-03-25 | 2024-04-15 |
| CVE-2019-7256 | Nice Linear eMerge E3-Series OS Command Injection Vulnerability | 9.8 | 97.1% | 2024-03-25 | 2024-04-15 |
| CVE-2024-27198 | JetBrains TeamCity Authentication Bypass Vulnerability Ransomware | 9.8 | 99.9% | 2024-03-07 | 2024-03-28 |
| CVE-2024-23296 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 1.4% | 2024-03-06 | 2024-03-27 |
| CVE-2024-23225 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 1.5% | 2024-03-06 | 2024-03-27 |
| CVE-2023-21237 | Android Pixel Information Disclosure Vulnerability | 6.2 | 0.3% | 2024-03-05 | 2024-03-26 |
| CVE-2021-36380 | Sunhillo SureLine OS Command Injection Vulnerablity | 9.8 | 97.6% | 2024-03-05 | 2024-03-26 |
| CVE-2024-21338 | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability Ransomware | 7.8 | 59.8% | 2024-03-04 | 2024-03-25 |
| CVE-2023-29360 | Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability | 8.4 | 21.6% | 2024-02-29 | 2024-03-21 |
| CVE-2024-1709 | ConnectWise ScreenConnect Authentication Bypass Vulnerability Ransomware | 10.0 | 100.0% | 2024-02-22 | 2024-02-29 |
| CVE-2024-21410 | Microsoft Exchange Server Privilege Escalation Vulnerability | 9.8 | 12.6% | 2024-02-15 | 2024-03-07 |
| CVE-2020-3259 | Cisco ASA and FTD Information Disclosure Vulnerability Ransomware | 7.5 | 71.8% | 2024-02-15 | 2024-03-07 |
| CVE-2024-21412 | Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability Ransomware | 8.1 | 99.4% | 2024-02-13 | 2024-03-05 |
| CVE-2024-21351 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 7.6 | 27.8% | 2024-02-13 | 2024-03-05 |
| CVE-2023-43770 | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | 6.1 | 63.7% | 2024-02-12 | 2024-03-04 |
| CVE-2024-21762 | Fortinet FortiOS Out-of-Bound Write Vulnerability Ransomware | 9.6 | 83.4% | 2024-02-09 | 2024-02-16 |
| CVE-2023-4762 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 41.4% | 2024-02-06 | 2024-02-27 |
| CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Ransomware | 8.2 | 100.0% | 2024-01-31 | 2024-02-02 |
| CVE-2022-48618 | Apple Multiple Products Memory Corruption Vulnerability | 7.0 | 0.5% | 2024-01-31 | 2024-02-21 |
| CVE-2023-22527 | Atlassian Confluence Data Center and Server Template Injection Vulnerability Ransomware | 10.0 | 100.0% | 2024-01-24 | 2024-02-14 |
| CVE-2024-23222 | Apple Multiple Products WebKit Type Confusion Vulnerability | 8.8 | 10.6% | 2024-01-23 | 2024-02-13 |
| CVE-2023-34048 | VMware vCenter Server Out-of-Bounds Write Vulnerability | 9.8 | 99.4% | 2024-01-22 | 2024-02-12 |
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Ransomware | 10.0 | 100.0% | 2024-01-18 | 2024-02-08 |
| CVE-2024-0519 | Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | 8.8 | 3.8% | 2024-01-17 | 2024-02-07 |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 8.2 | 57.6% | 2024-01-17 | 2024-02-07 |
| CVE-2023-6548 | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 5.5 | 3.2% | 2024-01-17 | 2024-01-24 |
| CVE-2018-15133 | Laravel Deserialization of Untrusted Data Vulnerability | 8.1 | 76.8% | 2024-01-16 | 2024-02-06 |
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Ransomware | 9.1 | 100.0% | 2024-01-10 | 2024-01-22 |
| CVE-2023-46805 | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Ransomware | 8.2 | 100.0% | 2024-01-10 | 2024-01-22 |
| CVE-2023-29357 | Microsoft SharePoint Server Privilege Escalation Vulnerability Ransomware | 9.8 | 100.0% | 2024-01-10 | 2024-01-31 |
| CVE-2023-41990 | Apple Multiple Products Code Execution Vulnerability | 7.8 | 1.4% | 2024-01-08 | 2024-01-29 |
| CVE-2023-38203 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Ransomware | 9.8 | 97.1% | 2024-01-08 | 2024-01-29 |
| CVE-2023-29300 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Ransomware | 9.8 | 100.0% | 2024-01-08 | 2024-01-29 |
| CVE-2023-27524 | Apache Superset Insecure Default Initialization of Resource Vulnerability | 8.9 | 97.4% | 2024-01-08 | 2024-01-29 |
| CVE-2023-23752 | Joomla! Improper Access Control Vulnerability | 5.3 | 99.8% | 2024-01-08 | 2024-01-29 |
| CVE-2016-20017 | D-Link DSL-2750B Devices Command Injection Vulnerability | 9.8 | 64.2% | 2024-01-08 | 2024-01-29 |
| CVE-2023-7101 | Spreadsheet::ParseExcel Remote Code Execution Vulnerability | 7.8 | 19.1% | 2024-01-02 | 2024-01-23 |
| CVE-2023-7024 | Google Chromium WebRTC Heap Buffer Overflow Vulnerability | 8.8 | 6.7% | 2024-01-02 | 2024-01-23 |
| CVE-2023-49897 | FXC AE1021, AE1021PE OS Command Injection Vulnerability | 8.8 | 50.4% | 2023-12-21 | 2024-01-11 |
| CVE-2023-47565 | QNAP VioStor NVR OS Command Injection Vulnerability | 8.0 | 73.3% | 2023-12-21 | 2024-01-11 |
| CVE-2023-6448 | Unitronics Vision PLC and HMI Insecure Default Password Vulnerability | 9.8 | 2.1% | 2023-12-11 | 2023-12-18 |
| CVE-2023-41266 | Qlik Sense Path Traversal Vulnerability Ransomware | 8.2 | 84.8% | 2023-12-07 | 2023-12-28 |
| CVE-2023-41265 | Qlik Sense HTTP Tunneling Vulnerability Ransomware | 9.6 | 88.2% | 2023-12-07 | 2023-12-28 |
| CVE-2023-33107 | Qualcomm Multiple Chipsets Integer Overflow Vulnerability | 8.4 | 0.9% | 2023-12-05 | 2023-12-26 |
| CVE-2023-33106 | Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability | 8.4 | 0.9% | 2023-12-05 | 2023-12-26 |
| CVE-2023-33063 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 7.8 | 0.7% | 2023-12-05 | 2023-12-26 |
| CVE-2022-22071 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 8.4 | 0.5% | 2023-12-05 | 2023-12-26 |
| CVE-2023-42917 | Apple Multiple Products WebKit Memory Corruption Vulnerability | 8.8 | 9.3% | 2023-12-04 | 2023-12-25 |
| CVE-2023-42916 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 6.5 | 17.8% | 2023-12-04 | 2023-12-25 |
| CVE-2023-6345 | Google Skia Integer Overflow Vulnerability | 9.6 | 16.5% | 2023-11-30 | 2023-12-21 |
| CVE-2023-49103 | ownCloud graphapi Information Disclosure Vulnerability | 10.0 | 78.4% | 2023-11-30 | 2023-12-21 |
| CVE-2023-4911 | GNU C Library Buffer Overflow Vulnerability | 7.8 | 81.4% | 2023-11-21 | 2023-12-12 |
| CVE-2023-36584 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 5.4 | 3.1% | 2023-11-16 | 2023-12-07 |
| CVE-2023-1671 | Sophos Web Appliance Command Injection Vulnerability | 9.8 | 100.0% | 2023-11-16 | 2023-12-07 |
| CVE-2020-2551 | Oracle Fusion Middleware Unspecified Vulnerability | 9.8 | 93.2% | 2023-11-16 | 2023-12-07 |
| CVE-2023-36036 | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | 7.8 | 16.7% | 2023-11-14 | 2023-12-05 |
| CVE-2023-36033 | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 7.8 | 12.0% | 2023-11-14 | 2023-12-05 |
| CVE-2023-36025 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 8.8 | 88.1% | 2023-11-14 | 2023-12-05 |
| CVE-2023-47246 | SysAid Server Path Traversal Vulnerability Ransomware | 9.8 | 98.9% | 2023-11-13 | 2023-12-04 |
| CVE-2023-36851 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 5.3 | 1.1% | 2023-11-13 | 2023-11-17 |