CVE-2024-1212
Added Nov 18, 2024
Progress Kemp LoadMaster OS Command Injection Vulnerability
Progress · Kemp LoadMaster
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 11 of 35
CVE-2024-9474
Added Nov 18, 2024
Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
Palo Alto Networks · PAN-OS
Ransomware: Known
CVE-2024-9463
Added Nov 14, 2024
Palo Alto Networks Expedition OS Command Injection Vulnerability
Palo Alto Networks · Expedition
Ransomware: Unknown
CVE-2024-9465
Added Nov 14, 2024
Palo Alto Networks Expedition SQL Injection Vulnerability
Palo Alto Networks · Expedition
Ransomware: Unknown
CVE-2014-2120
Added Nov 12, 2024
Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
Cisco · Adaptive Security Appliance (ASA)
Ransomware: Unknown
CVE-2021-26086
Added Nov 12, 2024
Atlassian Jira Server and Data Center Path Traversal Vulnerability
Atlassian · Jira Server and Data Center
Ransomware: Unknown
CVE-2021-41277
Added Nov 12, 2024
Metabase GeoJSON API Local File Inclusion Vulnerability
Metabase · Metabase
Ransomware: Unknown
CVE-2024-43451
Added Nov 12, 2024
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-49039
Added Nov 12, 2024
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2019-16278
Added Nov 7, 2024
Nostromo nhttpd Directory Traversal Vulnerability
Nostromo · nhttpd
Ransomware: Unknown
CVE-2024-43093
Added Nov 7, 2024
Android Framework Privilege Escalation Vulnerability
Android · Framework
Ransomware: Unknown
CVE-2024-51567
Added Nov 7, 2024
CyberPanel Incorrect Default Permissions Vulnerability
CyberPersons · CyberPanel
Ransomware: Known
CVE-2024-5910
Added Nov 7, 2024
Palo Alto Networks Expedition Missing Authentication Vulnerability
Palo Alto Networks · Expedition
Ransomware: Unknown
CVE-2024-8956
Added Nov 4, 2024
PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability
PTZOptics · PT30X-SDI/NDI Cameras
Ransomware: Unknown
CVE-2024-8957
Added Nov 4, 2024
PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability
PTZOptics · PT30X-SDI/NDI Cameras
Ransomware: Unknown
CVE-2024-20481
Added Oct 24, 2024
Cisco ASA and FTD Denial-of-Service Vulnerability
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
Ransomware: Unknown
CVE-2024-37383
Added Oct 24, 2024
RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability
Roundcube · Webmail
Ransomware: Unknown
CVE-2024-47575
Added Oct 23, 2024
Fortinet FortiManager Missing Authentication Vulnerability
Fortinet · FortiManager
Ransomware: Unknown
CVE-2024-38094
Added Oct 22, 2024
Microsoft SharePoint Deserialization Vulnerability
Microsoft · SharePoint
Ransomware: Known
CVE-2024-9537
Added Oct 21, 2024
ScienceLogic SL1 Unspecified Vulnerability
ScienceLogic · SL1
Ransomware: Unknown
CVE-2024-40711
Added Oct 17, 2024
Veeam Backup and Replication Deserialization Vulnerability
Veeam · Backup & Replication
Ransomware: Known
CVE-2024-28987
Added Oct 15, 2024
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
SolarWinds · Web Help Desk
Ransomware: Unknown
CVE-2024-30088
Added Oct 15, 2024
Microsoft Windows Kernel TOCTOU Race Condition Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2024-9680
Added Oct 15, 2024
Mozilla Firefox Use-After-Free Vulnerability
Mozilla · Firefox
Ransomware: Known
CVE-2024-23113
Added Oct 9, 2024
Fortinet Multiple Products Format String Vulnerability
Fortinet · Multiple Products
Ransomware: Unknown
CVE-2024-9379
Added Oct 9, 2024
Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
Ivanti · Cloud Services Appliance (CSA)
Ransomware: Unknown
CVE-2024-9380
Added Oct 9, 2024
Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
Ivanti · Cloud Services Appliance (CSA)
Ransomware: Unknown
CVE-2024-43047
Added Oct 8, 2024
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Qualcomm · Multiple Chipsets
Ransomware: Unknown
CVE-2024-43572
Added Oct 8, 2024
Microsoft Windows Management Console Remote Code Execution Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-43573
Added Oct 8, 2024
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-45519
Added Oct 3, 2024
Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Ransomware: Unknown
CVE-2024-29824
Added Oct 2, 2024
Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
Ivanti · Endpoint Manager (EPM)
Ransomware: Unknown
CVE-2019-0344
Added Sep 30, 2024
SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
SAP · Commerce Cloud
Ransomware: Unknown
CVE-2020-15415
Added Sep 30, 2024
DrayTek Multiple Vigor Routers OS Command Injection Vulnerability
DrayTek · Multiple Vigor Routers
Ransomware: Unknown
CVE-2023-25280
Added Sep 30, 2024
D-Link DIR-820 Router OS Command Injection Vulnerability
D-Link · DIR-820 Router
Ransomware: Unknown
CVE-2024-7593
Added Sep 24, 2024
Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
Ivanti · Virtual Traffic Manager
Ransomware: Unknown
CVE-2024-8963
Added Sep 19, 2024
Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
Ivanti · Cloud Services Appliance (CSA)
Ransomware: Unknown
CVE-2020-0618
Added Sep 18, 2024
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
Microsoft · SQL Server
Ransomware: Known
CVE-2020-14644
Added Sep 18, 2024
Oracle WebLogic Server Remote Code Execution Vulnerability
Oracle · WebLogic Server
Ransomware: Unknown
CVE-2022-21445
Added Sep 18, 2024
Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
Oracle · ADF Faces
Ransomware: Unknown
CVE-2024-27348
Added Sep 18, 2024
Apache HugeGraph-Server Improper Access Control Vulnerability
Apache · HugeGraph-Server
Ransomware: Unknown
CVE-2013-0643
Added Sep 17, 2024
Adobe Flash Player Incorrect Default Permissions Vulnerability
Adobe · Flash Player
Ransomware: Unknown
CVE-2013-0648
Added Sep 17, 2024
Adobe Flash Player Code Execution Vulnerability
Adobe · Flash Player
Ransomware: Unknown
CVE-2014-0497
Added Sep 17, 2024
Adobe Flash Player Integer Underflow Vulnerablity
Adobe · Flash Player
Ransomware: Unknown
CVE-2014-0502
Added Sep 17, 2024
Adobe Flash Player Double Free Vulnerablity
Adobe · Flash Player
Ransomware: Unknown
CVE-2024-43461
Added Sep 16, 2024
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-6670
Added Sep 16, 2024
Progress WhatsUp Gold SQL Injection Vulnerability
Progress · WhatsUp Gold
Ransomware: Known
CVE-2024-8190
Added Sep 13, 2024
Ivanti Cloud Services Appliance OS Command Injection Vulnerability
Ivanti · Cloud Services Appliance
Ransomware: Unknown
CVE-2024-38014
Added Sep 10, 2024
Microsoft Windows Installer Improper Privilege Management Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-38217
Added Sep 10, 2024
Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
Microsoft · Windows
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.