CVE-2024-24919
Added May 30, 2024
Check Point Quantum Security Gateways Information Disclosure Vulnerability
Check Point · Quantum Security Gateways
Ransomware: Known
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 13 of 35
CVE-2024-4978
Added May 29, 2024
Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability
Justice AV Solutions · Viewer
Ransomware: Unknown
CVE-2024-5274
Added May 28, 2024
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2020-17519
Added May 23, 2024
Apache Flink Improper Access Control Vulnerability
Apache · Flink
Ransomware: Unknown
CVE-2023-43208
Added May 20, 2024
NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability
NextGen Healthcare · Mirth Connect
Ransomware: Known
CVE-2024-4947
Added May 20, 2024
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2014-100005
Added May 16, 2024
D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
D-Link · DIR-600 Router
Ransomware: Unknown
CVE-2021-40655
Added May 16, 2024
D-Link DIR-605 Router Information Disclosure Vulnerability
D-Link · DIR-605 Router
Ransomware: Unknown
CVE-2024-4761
Added May 16, 2024
Google Chromium V8 Out-of-Bounds Memory Write Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2024-30040
Added May 14, 2024
Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-30051
Added May 14, 2024
Microsoft DWM Core Library Privilege Escalation Vulnerability
Microsoft · DWM Core Library
Ransomware: Known
CVE-2024-4671
Added May 13, 2024
Google Chromium Visuals Use-After-Free Vulnerability
Google · Chromium
Ransomware: Unknown
CVE-2023-7028
Added May 1, 2024
GitLab Community and Enterprise Editions Improper Access Control Vulnerability
GitLab · GitLab CE/EE
Ransomware: Unknown
CVE-2024-29988
Added Apr 30, 2024
Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
Microsoft · SmartScreen Prompt
Ransomware: Unknown
CVE-2024-20353
Added Apr 24, 2024
Cisco ASA and FTD Denial of Service Vulnerability
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
Ransomware: Unknown
CVE-2024-20359
Added Apr 24, 2024
Cisco ASA and FTD Privilege Escalation Vulnerability
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
Ransomware: Unknown
CVE-2024-4040
Added Apr 24, 2024
CrushFTP VFS Sandbox Escape Vulnerability
CrushFTP · CrushFTP
Ransomware: Unknown
CVE-2022-38028
Added Apr 23, 2024
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-3400
Added Apr 12, 2024
Palo Alto Networks PAN-OS Command Injection Vulnerability
Palo Alto Networks · PAN-OS
Ransomware: Known
CVE-2024-3272
Added Apr 11, 2024
D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
D-Link · Multiple NAS Devices
Ransomware: Unknown
CVE-2024-3273
Added Apr 11, 2024
D-Link Multiple NAS Devices Command Injection Vulnerability
D-Link · Multiple NAS Devices
Ransomware: Unknown
CVE-2024-29745
Added Apr 4, 2024
Android Pixel Information Disclosure Vulnerability
Android · Pixel
Ransomware: Unknown
CVE-2024-29748
Added Apr 4, 2024
Android Pixel Privilege Escalation Vulnerability
Android · Pixel
Ransomware: Unknown
CVE-2023-24955
Added Mar 26, 2024
Microsoft SharePoint Server Code Injection Vulnerability
Microsoft · SharePoint Server
Ransomware: Known
CVE-2019-7256
Added Mar 25, 2024
Nice Linear eMerge E3-Series OS Command Injection Vulnerability
Nice · Linear eMerge E3-Series
Ransomware: Unknown
CVE-2021-44529
Added Mar 25, 2024
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA)
Ransomware: Known
CVE-2023-48788
Added Mar 25, 2024
Fortinet FortiClient EMS SQL Injection Vulnerability
Fortinet · FortiClient EMS
Ransomware: Known
CVE-2024-27198
Added Mar 7, 2024
JetBrains TeamCity Authentication Bypass Vulnerability
JetBrains · TeamCity
Ransomware: Known
CVE-2024-23225
Added Mar 6, 2024
Apple Multiple Products Memory Corruption Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2024-23296
Added Mar 6, 2024
Apple Multiple Products Memory Corruption Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2021-36380
Added Mar 5, 2024
Sunhillo SureLine OS Command Injection Vulnerablity
Sunhillo · SureLine
Ransomware: Unknown
CVE-2023-21237
Added Mar 5, 2024
Android Pixel Information Disclosure Vulnerability
Android · Pixel
Ransomware: Unknown
CVE-2024-21338
Added Mar 4, 2024
Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2023-29360
Added Feb 29, 2024
Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability
Microsoft · Streaming Service
Ransomware: Unknown
CVE-2024-1709
Added Feb 22, 2024
ConnectWise ScreenConnect Authentication Bypass Vulnerability
ConnectWise · ScreenConnect
Ransomware: Known
CVE-2020-3259
Added Feb 15, 2024
Cisco ASA and FTD Information Disclosure Vulnerability
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
Ransomware: Known
CVE-2024-21410
Added Feb 15, 2024
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft · Exchange Server
Ransomware: Unknown
CVE-2024-21351
Added Feb 13, 2024
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-21412
Added Feb 13, 2024
Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2023-43770
Added Feb 12, 2024
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
Roundcube · Webmail
Ransomware: Unknown
CVE-2024-21762
Added Feb 9, 2024
Fortinet FortiOS Out-of-Bound Write Vulnerability
Fortinet · FortiOS
Ransomware: Known
CVE-2023-4762
Added Feb 6, 2024
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2022-48618
Added Jan 31, 2024
Apple Multiple Products Memory Corruption Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2024-21893
Added Jan 31, 2024
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
Ivanti · Connect Secure, Policy Secure, and Neurons
Ransomware: Known
CVE-2023-22527
Added Jan 24, 2024
Atlassian Confluence Data Center and Server Template Injection Vulnerability
Atlassian · Confluence Data Center and Server
Ransomware: Known
CVE-2024-23222
Added Jan 23, 2024
Apple Multiple Products WebKit Type Confusion Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2023-34048
Added Jan 22, 2024
VMware vCenter Server Out-of-Bounds Write Vulnerability
VMware · vCenter Server
Ransomware: Unknown
CVE-2023-35082
Added Jan 18, 2024
Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
Ivanti · Endpoint Manager Mobile (EPMM) and MobileIron Core
Ransomware: Known
CVE-2023-6548
Added Jan 17, 2024
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
Citrix · NetScaler ADC and NetScaler Gateway
Ransomware: Unknown
CVE-2023-6549
Added Jan 17, 2024
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
Citrix · NetScaler ADC and NetScaler Gateway
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.