CVE-2018-18809
Added Dec 29, 2022
TIBCO JasperReports Library Directory Traversal Vulnerability
TIBCO · JasperReports
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 18 of 35
CVE-2018-5430
Added Dec 29, 2022
TIBCO JasperReports Server Information Disclosure Vulnerability
TIBCO · JasperReports
Ransomware: Unknown
CVE-2022-42856
Added Dec 14, 2022
Apple iOS Type Confusion Vulnerability
Apple · iOS
Ransomware: Unknown
CVE-2022-26500
Added Dec 13, 2022
Veeam Backup & Replication Remote Code Execution Vulnerability
Veeam · Backup & Replication
Ransomware: Known
CVE-2022-26501
Added Dec 13, 2022
Veeam Backup & Replication Remote Code Execution Vulnerability
Veeam · Backup & Replication
Ransomware: Known
CVE-2022-27518
Added Dec 13, 2022
Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
Citrix · Application Delivery Controller (ADC) and Gateway
Ransomware: Unknown
CVE-2022-42475
Added Dec 13, 2022
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
Fortinet · FortiOS
Ransomware: Known
CVE-2022-44698
Added Dec 13, 2022
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability
Microsoft · Defender
Ransomware: Known
CVE-2022-4262
Added Dec 5, 2022
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2021-35587
Added Nov 28, 2022
Oracle Fusion Middleware Unspecified Vulnerability
Oracle · Fusion Middleware
Ransomware: Unknown
CVE-2022-4135
Added Nov 28, 2022
Google Chromium GPU Heap Buffer Overflow Vulnerability
Google · Chromium GPU
Ransomware: Unknown
CVE-2022-41049
Added Nov 14, 2022
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2021-25337
Added Nov 8, 2022
Samsung Mobile Devices Improper Access Control Vulnerability
Samsung · Mobile Devices
Ransomware: Unknown
CVE-2021-25369
Added Nov 8, 2022
Samsung Mobile Devices Improper Access Control Vulnerability
Samsung · Mobile Devices
Ransomware: Unknown
CVE-2021-25370
Added Nov 8, 2022
Samsung Mobile Devices Memory Corruption Vulnerability
Samsung · Mobile Devices
Ransomware: Unknown
CVE-2022-41073
Added Nov 8, 2022
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2022-41091
Added Nov 8, 2022
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2022-41125
Added Nov 8, 2022
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2022-41128
Added Nov 8, 2022
Microsoft Windows Scripting Languages Remote Code Execution Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2022-3723
Added Oct 28, 2022
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2022-42827
Added Oct 25, 2022
Apple iOS and iPadOS Out-of-Bounds Write Vulnerability
Apple · iOS and iPadOS
Ransomware: Unknown
CVE-2018-19320
Added Oct 24, 2022
GIGABYTE Multiple Products Unspecified Vulnerability
GIGABYTE · Multiple Products
Ransomware: Known
CVE-2018-19321
Added Oct 24, 2022
GIGABYTE Multiple Products Privilege Escalation Vulnerability
GIGABYTE · Multiple Products
Ransomware: Known
CVE-2018-19322
Added Oct 24, 2022
GIGABYTE Multiple Products Code Execution Vulnerability
GIGABYTE · Multiple Products
Ransomware: Known
CVE-2018-19323
Added Oct 24, 2022
GIGABYTE Multiple Products Privilege Escalation Vulnerability
GIGABYTE · Multiple Products
Ransomware: Known
CVE-2020-3153
Added Oct 24, 2022
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
Cisco · AnyConnect Secure
Ransomware: Known
CVE-2020-3433
Added Oct 24, 2022
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
Cisco · AnyConnect Secure
Ransomware: Known
CVE-2021-3493
Added Oct 20, 2022
Linux Kernel Privilege Escalation Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2022-41352
Added Oct 20, 2022
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Ransomware: Known
CVE-2022-40684
Added Oct 11, 2022
Fortinet Multiple Products Authentication Bypass Vulnerability
Fortinet · Multiple Products
Ransomware: Known
CVE-2022-41033
Added Oct 11, 2022
Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability
Microsoft · Windows COM+ Event System Service
Ransomware: Unknown
CVE-2022-36804
Added Sep 30, 2022
Atlassian Bitbucket Server and Data Center Command Injection Vulnerability
Atlassian · Bitbucket Server and Data Center
Ransomware: Unknown
CVE-2022-41040
Added Sep 30, 2022
Microsoft Exchange Server Server-Side Request Forgery Vulnerability
Microsoft · Exchange Server
Ransomware: Known
CVE-2022-41082
Added Sep 30, 2022
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft · Exchange Server
Ransomware: Known
CVE-2022-3236
Added Sep 23, 2022
Sophos Firewall Code Injection Vulnerability
Sophos · Firewall
Ransomware: Unknown
CVE-2022-35405
Added Sep 22, 2022
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
Zoho · ManageEngine
Ransomware: Unknown
CVE-2010-2568
Added Sep 15, 2022
Microsoft Windows Remote Code Execution Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2013-2094
Added Sep 15, 2022
Linux Kernel Privilege Escalation Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2013-2596
Added Sep 15, 2022
Linux Kernel Integer Overflow Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2013-2597
Added Sep 15, 2022
Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability
Code Aurora · ACDB Audio Driver
Ransomware: Unknown
CVE-2013-6282
Added Sep 15, 2022
Linux Kernel Improper Input Validation Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2022-40139
Added Sep 15, 2022
Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability
Trend Micro · Apex One and Apex One as a Service
Ransomware: Unknown
CVE-2022-32917
Added Sep 14, 2022
Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability
Apple · iOS, iPadOS, and macOS
Ransomware: Unknown
CVE-2022-37969
Added Sep 14, 2022
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2011-1823
Added Sep 8, 2022
Android OS Privilege Escalation Vulnerability
Android · Android OS
Ransomware: Unknown
CVE-2011-4723
Added Sep 8, 2022
D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
D-Link · DIR-300 Router
Ransomware: Unknown
CVE-2017-5521
Added Sep 8, 2022
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
NETGEAR · Multiple Devices
Ransomware: Unknown
CVE-2018-13374
Added Sep 8, 2022
Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
Fortinet · FortiOS and FortiADC
Ransomware: Known
CVE-2018-2628
Added Sep 8, 2022
Oracle WebLogic Server Unspecified Vulnerability
Oracle · WebLogic Server
Ransomware: Unknown
CVE-2018-6530
Added Sep 8, 2022
D-Link Multiple Routers OS Command Injection Vulnerability
D-Link · Multiple Routers
Ransomware: Known
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.