CVE-2025-21391
Added Feb 11, 2025
Microsoft Windows Storage Link Following Vulnerability
Microsoft · Windows
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 10 of 35
CVE-2025-21418
Added Feb 11, 2025
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-0994
Added Feb 7, 2025
Trimble Cityworks Deserialization Vulnerability
Trimble · Cityworks
Ransomware: Unknown
CVE-2020-15069
Added Feb 6, 2025
Sophos XG Firewall Buffer Overflow Vulnerability
Sophos · XG Firewall
Ransomware: Unknown
CVE-2020-29574
Added Feb 6, 2025
CyberoamOS (CROS) SQL Injection Vulnerability
Sophos · CyberoamOS
Ransomware: Known
CVE-2022-23748
Added Feb 6, 2025
Dante Discovery Process Control Vulnerability
Audinate · Dante Discovery
Ransomware: Unknown
CVE-2024-21413
Added Feb 6, 2025
Microsoft Outlook Improper Input Validation Vulnerability
Microsoft · Office Outlook
Ransomware: Unknown
CVE-2025-0411
Added Feb 6, 2025
7-Zip Mark of the Web Bypass Vulnerability
7-Zip · 7-Zip
Ransomware: Unknown
CVE-2024-53104
Added Feb 5, 2025
Linux Kernel Out-of-Bounds Write Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2018-19410
Added Feb 4, 2025
Paessler PRTG Network Monitor Local File Inclusion Vulnerability
Paessler · PRTG Network Monitor
Ransomware: Unknown
CVE-2018-9276
Added Feb 4, 2025
Paessler PRTG Network Monitor OS Command Injection Vulnerability
Paessler · PRTG Network Monitor
Ransomware: Unknown
CVE-2024-29059
Added Feb 4, 2025
Microsoft .NET Framework Information Disclosure Vulnerability
Microsoft · .NET Framework
Ransomware: Unknown
CVE-2024-45195
Added Feb 4, 2025
Apache OFBiz Forced Browsing Vulnerability
Apache · OFBiz
Ransomware: Unknown
CVE-2025-24085
Added Jan 29, 2025
Apple Multiple Products Use-After-Free Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2025-23006
Added Jan 24, 2025
SonicWall SMA1000 Appliances Deserialization Vulnerability
SonicWall · SMA1000 Appliances
Ransomware: Known
CVE-2020-11023
Added Jan 23, 2025
JQuery Cross-Site Scripting (XSS) Vulnerability
JQuery · JQuery
Ransomware: Unknown
CVE-2024-50603
Added Jan 16, 2025
Aviatrix Controllers OS Command Injection Vulnerability
Aviatrix · Controllers
Ransomware: Unknown
CVE-2024-55591
Added Jan 14, 2025
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Fortinet · FortiOS and FortiProxy
Ransomware: Known
CVE-2025-21333
Added Jan 14, 2025
Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-21334
Added Jan 14, 2025
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-21335
Added Jan 14, 2025
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2023-48365
Added Jan 13, 2025
Qlik Sense HTTP Tunneling Vulnerability
Qlik · Sense
Ransomware: Known
CVE-2024-12686
Added Jan 13, 2025
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
Ransomware: Unknown
CVE-2025-0282
Added Jan 8, 2025
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Ivanti · Connect Secure, Policy Secure, and ZTA Gateways
Ransomware: Known
CVE-2020-2883
Added Jan 7, 2025
Oracle WebLogic Server Unspecified Vulnerability
Oracle · WebLogic Server
Ransomware: Unknown
CVE-2024-41713
Added Jan 7, 2025
Mitel MiCollab Path Traversal Vulnerability
Mitel · MiCollab
Ransomware: Known
CVE-2024-55550
Added Jan 7, 2025
Mitel MiCollab Path Traversal Vulnerability
Mitel · MiCollab
Ransomware: Known
CVE-2024-3393
Added Dec 30, 2024
Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
Palo Alto Networks · PAN-OS
Ransomware: Unknown
CVE-2021-44207
Added Dec 23, 2024
Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability
Acclaim Systems · USAHERDS
Ransomware: Unknown
CVE-2024-12356
Added Dec 19, 2024
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability
BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
Ransomware: Unknown
CVE-2018-14933
Added Dec 18, 2024
NUUO NVRmini Devices OS Command Injection Vulnerability
NUUO · NVRmini Devices
Ransomware: Unknown
CVE-2019-11001
Added Dec 18, 2024
Reolink Multiple IP Cameras OS Command Injection Vulnerability
Reolink · Multiple IP Cameras
Ransomware: Unknown
CVE-2021-40407
Added Dec 18, 2024
Reolink RLC-410W IP Camera OS Command Injection Vulnerability
Reolink · RLC-410W IP Camera
Ransomware: Unknown
CVE-2022-23227
Added Dec 18, 2024
NUUO NVRmini2 Devices Missing Authentication Vulnerability
NUUO · NVRmini2 Devices
Ransomware: Unknown
CVE-2024-55956
Added Dec 17, 2024
Cleo Multiple Products Unauthenticated File Upload Vulnerability
Cleo · Multiple Products
Ransomware: Known
CVE-2024-20767
Added Dec 16, 2024
Adobe ColdFusion Improper Access Control Vulnerability
Adobe · ColdFusion
Ransomware: Unknown
CVE-2024-35250
Added Dec 16, 2024
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-50623
Added Dec 13, 2024
Cleo Multiple Products Unrestricted File Upload Vulnerability
Cleo · Multiple Products
Ransomware: Known
CVE-2024-49138
Added Dec 10, 2024
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-51378
Added Dec 4, 2024
CyberPanel Incorrect Default Permissions Vulnerability
CyberPersons · CyberPanel
Ransomware: Known
CVE-2023-45727
Added Dec 3, 2024
North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability
North Grid · Proself
Ransomware: Unknown
CVE-2024-11667
Added Dec 3, 2024
Zyxel Multiple Firewalls Path Traversal Vulnerability
Zyxel · Multiple Firewalls
Ransomware: Known
CVE-2024-11680
Added Dec 3, 2024
ProjectSend Improper Authentication Vulnerability
ProjectSend · ProjectSend
Ransomware: Unknown
CVE-2023-28461
Added Nov 25, 2024
Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
Array Networks · AG/vxAG ArrayOS
Ransomware: Known
CVE-2024-21287
Added Nov 21, 2024
Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
Oracle · Agile Product Lifecycle Management (PLM)
Ransomware: Unknown
CVE-2024-44308
Added Nov 21, 2024
Apple Multiple Products Code Execution Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2024-44309
Added Nov 21, 2024
Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2024-38812
Added Nov 20, 2024
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
VMware · vCenter Server
Ransomware: Unknown
CVE-2024-38813
Added Nov 20, 2024
VMware vCenter Server Privilege Escalation Vulnerability
VMware · vCenter Server
Ransomware: Unknown
CVE-2024-0012
Added Nov 18, 2024
Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
Palo Alto Networks · PAN-OS
Ransomware: Known
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.