Skip to content
RequestGuard Vulnerabilities
Pricing

CISA catalog

Known exploited vulnerabilities

Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.

1,716 catalog entriesReleased Sep 18, 2026
Clear

Catalog results

1,716 vulnerabilities

Page 14 of 35

CVE-2024-0519

Added Jan 17, 2024

Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

Google · Chromium V8

Ransomware: Unknown
CVE-2018-15133

Added Jan 16, 2024

Laravel Deserialization of Untrusted Data Vulnerability

Laravel · Laravel Framework

Ransomware: Unknown
CVE-2023-29357

Added Jan 10, 2024

Microsoft SharePoint Server Privilege Escalation Vulnerability

Microsoft · SharePoint Server

Ransomware: Known
CVE-2023-46805

Added Jan 10, 2024

Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

Ivanti · Connect Secure and Policy Secure

Ransomware: Known
CVE-2024-21887

Added Jan 10, 2024

Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

Ivanti · Connect Secure and Policy Secure

Ransomware: Known
CVE-2016-20017

Added Jan 8, 2024

D-Link DSL-2750B Devices Command Injection Vulnerability

D-Link · DSL-2750B Devices

Ransomware: Unknown
CVE-2023-23752

Added Jan 8, 2024

Joomla! Improper Access Control Vulnerability

Joomla! · Joomla!

Ransomware: Unknown
CVE-2023-27524

Added Jan 8, 2024

Apache Superset Insecure Default Initialization of Resource Vulnerability

Apache · Superset

Ransomware: Unknown
CVE-2023-29300

Added Jan 8, 2024

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe · ColdFusion

Ransomware: Known
CVE-2023-38203

Added Jan 8, 2024

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe · ColdFusion

Ransomware: Known
CVE-2023-41990

Added Jan 8, 2024

Apple Multiple Products Code Execution Vulnerability

Apple · Multiple Products

Ransomware: Unknown
CVE-2023-7024

Added Jan 2, 2024

Google Chromium WebRTC Heap Buffer Overflow Vulnerability

Google · Chromium WebRTC

Ransomware: Unknown
CVE-2023-7101

Added Jan 2, 2024

Spreadsheet::ParseExcel Remote Code Execution Vulnerability

Spreadsheet::ParseExcel · Spreadsheet::ParseExcel

Ransomware: Unknown
CVE-2023-47565

Added Dec 21, 2023

QNAP VioStor NVR OS Command Injection Vulnerability

QNAP · VioStor NVR

Ransomware: Unknown
CVE-2023-49897

Added Dec 21, 2023

FXC AE1021, AE1021PE OS Command Injection Vulnerability

FXC · AE1021, AE1021PE

Ransomware: Unknown
CVE-2023-6448

Added Dec 11, 2023

Unitronics Vision PLC and HMI Insecure Default Password Vulnerability

Unitronics · Vision PLC and HMI

Ransomware: Unknown
CVE-2023-41265

Added Dec 7, 2023

Qlik Sense HTTP Tunneling Vulnerability

Qlik · Sense

Ransomware: Known
CVE-2023-41266

Added Dec 7, 2023

Qlik Sense Path Traversal Vulnerability

Qlik · Sense

Ransomware: Known
CVE-2022-22071

Added Dec 5, 2023

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm · Multiple Chipsets

Ransomware: Unknown
CVE-2023-33063

Added Dec 5, 2023

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm · Multiple Chipsets

Ransomware: Unknown
CVE-2023-33106

Added Dec 5, 2023

Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

Qualcomm · Multiple Chipsets

Ransomware: Unknown
CVE-2023-33107

Added Dec 5, 2023

Qualcomm Multiple Chipsets Integer Overflow Vulnerability

Qualcomm · Multiple Chipsets

Ransomware: Unknown
CVE-2023-42916

Added Dec 4, 2023

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Apple · Multiple Products

Ransomware: Unknown
CVE-2023-42917

Added Dec 4, 2023

Apple Multiple Products WebKit Memory Corruption Vulnerability

Apple · Multiple Products

Ransomware: Unknown
CVE-2023-49103

Added Nov 30, 2023

ownCloud graphapi Information Disclosure Vulnerability

ownCloud · ownCloud graphapi

Ransomware: Unknown
CVE-2023-6345

Added Nov 30, 2023

Google Skia Integer Overflow Vulnerability

Google · Chromium Skia

Ransomware: Unknown
CVE-2023-4911

Added Nov 21, 2023

GNU C Library Buffer Overflow Vulnerability

GNU · GNU C Library

Ransomware: Unknown
CVE-2020-2551

Added Nov 16, 2023

Oracle Fusion Middleware Unspecified Vulnerability

Oracle · Fusion Middleware

Ransomware: Unknown
CVE-2023-1671

Added Nov 16, 2023

Sophos Web Appliance Command Injection Vulnerability

Sophos · Web Appliance

Ransomware: Unknown
CVE-2023-36584

Added Nov 16, 2023

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2023-36025

Added Nov 14, 2023

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2023-36033

Added Nov 14, 2023

Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2023-36036

Added Nov 14, 2023

Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2023-36844

Added Nov 13, 2023

Juniper Junos OS EX Series PHP External Variable Modification Vulnerability

Juniper · Junos OS

Ransomware: Unknown
CVE-2023-36845

Added Nov 13, 2023

Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

Juniper · Junos OS

Ransomware: Unknown
CVE-2023-36846

Added Nov 13, 2023

Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

Juniper · Junos OS

Ransomware: Unknown
CVE-2023-36847

Added Nov 13, 2023

Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability

Juniper · Junos OS

Ransomware: Unknown
CVE-2023-36851

Added Nov 13, 2023

Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

Juniper · Junos OS

Ransomware: Unknown
CVE-2023-47246

Added Nov 13, 2023

SysAid Server Path Traversal Vulnerability

SysAid · SysAid Server

Ransomware: Known
CVE-2023-29552

Added Nov 8, 2023

Service Location Protocol (SLP) Denial-of-Service Vulnerability

IETF · Service Location Protocol (SLP)

Ransomware: Unknown
CVE-2023-22518

Added Nov 7, 2023

Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

Atlassian · Confluence Data Center and Server

Ransomware: Known
CVE-2023-46604

Added Nov 2, 2023

Apache ActiveMQ Deserialization of Untrusted Data Vulnerability

Apache · ActiveMQ

Ransomware: Known
CVE-2023-46747

Added Oct 31, 2023

F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability

F5 · BIG-IP Configuration Utility

Ransomware: Known
CVE-2023-46748

Added Oct 31, 2023

F5 BIG-IP Configuration Utility SQL Injection Vulnerability

F5 · BIG-IP Configuration Utility

Ransomware: Unknown
CVE-2023-5631

Added Oct 26, 2023

Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

Roundcube · Webmail

Ransomware: Unknown
CVE-2023-20273

Added Oct 23, 2023

Cisco IOS XE Web UI Command Injection Vulnerability

Cisco · Cisco IOS XE Web UI

Ransomware: Unknown
CVE-2023-4966

Added Oct 18, 2023

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

Citrix · NetScaler ADC and NetScaler Gateway

Ransomware: Known
CVE-2023-20198

Added Oct 16, 2023

Cisco IOS XE Web UI Privilege Escalation Vulnerability

Cisco · IOS XE Web UI

Ransomware: Unknown
CVE-2023-20109

Added Oct 10, 2023

Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

Cisco · IOS and IOS XE

Ransomware: Unknown
CVE-2023-21608

Added Oct 10, 2023

Adobe Acrobat and Reader Use-After-Free Vulnerability

Adobe · Acrobat and Reader

Ransomware: Unknown

Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.