Skip to content
RequestGuard Vulnerabilities
Pricing

CISA catalog

Known exploited vulnerabilities

Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.

1,716 catalog entriesReleased Sep 18, 2026
Clear

Catalog results

1,716 vulnerabilities

Page 22 of 35

CVE-2021-0920

Added May 23, 2022

Android Kernel Race Condition Vulnerability

Android · Kernel

Ransomware: Unknown
CVE-2021-1048

Added May 23, 2022

Android Kernel Use-After-Free Vulnerability

Android · Kernel

Ransomware: Unknown
CVE-2021-30883

Added May 23, 2022

Apple Multiple Products Memory Corruption Vulnerability

Apple · Multiple Products

Ransomware: Unknown
CVE-2022-20821

Added May 23, 2022

Cisco IOS XR Open Port Vulnerability

Cisco · IOS XR

Ransomware: Unknown
CVE-2022-22947

Added May 16, 2022

VMware Spring Cloud Gateway Code Injection Vulnerability

VMware · Spring Cloud Gateway

Ransomware: Unknown
CVE-2022-30525

Added May 16, 2022

Zyxel Multiple Firewalls OS Command Injection Vulnerability

Zyxel · Multiple Firewalls

Ransomware: Unknown
CVE-2022-1388

Added May 10, 2022

F5 BIG-IP Missing Authentication Vulnerability

F5 · BIG-IP

Ransomware: Known
CVE-2014-0160

Added May 4, 2022

OpenSSL Information Disclosure Vulnerability

OpenSSL · OpenSSL

Ransomware: Unknown
CVE-2014-0322

Added May 4, 2022

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorer

Ransomware: Unknown
CVE-2014-4113

Added May 4, 2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k

Ransomware: Unknown
CVE-2019-8506

Added May 4, 2022

Apple Multiple Products Type Confusion Vulnerability

Apple · Multiple Products

Ransomware: Unknown
CVE-2021-1789

Added May 4, 2022

Apple Multiple Products Type Confusion Vulnerability

Apple · Multiple Products

Ransomware: Unknown
CVE-2019-1003029

Added Apr 25, 2022

Jenkins Script Security Plugin Sandbox Bypass Vulnerability

Jenkins · Script Security Plugin

Ransomware: Unknown
CVE-2021-40450

Added Apr 25, 2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k

Ransomware: Unknown
CVE-2021-41357

Added Apr 25, 2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k

Ransomware: Unknown
CVE-2022-0847

Added Apr 25, 2022

Linux Kernel Privilege Escalation Vulnerability

Linux · Kernel

Ransomware: Unknown
CVE-2022-21919

Added Apr 25, 2022

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2022-26904

Added Apr 25, 2022

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2022-29464

Added Apr 25, 2022

WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

WSO2 · Multiple Products

Ransomware: Known
CVE-2018-6882

Added Apr 19, 2022

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)

Ransomware: Known
CVE-2019-3568

Added Apr 19, 2022

WhatsApp VOIP Stack Buffer Overflow Vulnerability

Meta Platforms · WhatsApp

Ransomware: Unknown
CVE-2022-22718

Added Apr 19, 2022

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2007-3010

Added Apr 15, 2022

Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability

Alcatel · OmniPCX Enterprise

Ransomware: Unknown
CVE-2010-5330

Added Apr 15, 2022

Ubiquiti AirOS Command Injection Vulnerability

Ubiquiti · AirOS

Ransomware: Unknown
CVE-2014-0780

Added Apr 15, 2022

InduSoft Web Studio NTWebServer Directory Traversal Vulnerability

InduSoft · Web Studio

Ransomware: Unknown
CVE-2016-4523

Added Apr 15, 2022

Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability

Trihedral · VTScada (formerly VTS)

Ransomware: Unknown
CVE-2018-7841

Added Apr 15, 2022

Schneider Electric U.motion Builder SQL Injection Vulnerability

Schneider Electric · U.motion Builder

Ransomware: Unknown
CVE-2019-16057

Added Apr 15, 2022

D-Link DNS-320 Remote Code Execution Vulnerability

D-Link · DNS-320 Storage Device

Ransomware: Known
CVE-2019-3929

Added Apr 15, 2022

Crestron Multiple Products Command Injection Vulnerability

Crestron · Multiple Products

Ransomware: Unknown
CVE-2022-1364

Added Apr 15, 2022

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8

Ransomware: Unknown
CVE-2022-22960

Added Apr 15, 2022

VMware Multiple Products Privilege Escalation Vulnerability

VMware · Multiple Products

Ransomware: Unknown
CVE-2022-22954

Added Apr 14, 2022

VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

VMware · Workspace ONE Access and Identity Manager

Ransomware: Known
CVE-2014-9163

Added Apr 13, 2022

Adobe Flash Player Stack-Based Buffer Overflow Vulnerability

Adobe · Flash Player

Ransomware: Unknown
CVE-2015-0311

Added Apr 13, 2022

Adobe Flash Player Remote Code Execution Vulnerability

Adobe · Flash Player

Ransomware: Unknown
CVE-2015-0313

Added Apr 13, 2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player

Ransomware: Unknown
CVE-2015-2502

Added Apr 13, 2022

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorer

Ransomware: Unknown
CVE-2015-3113

Added Apr 13, 2022

Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

Adobe · Flash Player

Ransomware: Unknown
CVE-2015-5122

Added Apr 13, 2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player

Ransomware: Unknown
CVE-2015-5123

Added Apr 13, 2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player

Ransomware: Unknown
CVE-2018-20753

Added Apr 13, 2022

Kaseya VSA Remote Code Execution Vulnerability

Kaseya · Virtual System/Server Administrator (VSA)

Ransomware: Known
CVE-2018-7602

Added Apr 13, 2022

Drupal Core Remote Code Execution Vulnerability

Drupal · Core

Ransomware: Known
CVE-2022-24521

Added Apr 13, 2022

Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

Microsoft · Windows

Ransomware: Known
CVE-2017-11317

Added Apr 11, 2022

Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability

Telerik · User Interface (UI) for ASP.NET AJAX

Ransomware: Unknown
CVE-2020-2509

Added Apr 11, 2022

QNAP Network-Attached Storage (NAS) Command Injection Vulnerability

QNAP · QNAP Network-Attached Storage (NAS)

Ransomware: Unknown
CVE-2021-22600

Added Apr 11, 2022

Linux Kernel Privilege Escalation Vulnerability

Linux · Kernel

Ransomware: Unknown
CVE-2021-27852

Added Apr 11, 2022

Checkbox Survey Deserialization of Untrusted Data Vulnerability

Checkbox · Checkbox Survey

Ransomware: Unknown
CVE-2021-39793

Added Apr 11, 2022

Google Pixel Out-of-Bounds Write Vulnerability

Google · Pixel

Ransomware: Unknown
CVE-2021-42278

Added Apr 11, 2022

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directory

Ransomware: Known
CVE-2021-42287

Added Apr 11, 2022

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directory

Ransomware: Known
CVE-2022-23176

Added Apr 11, 2022

WatchGuard Firebox and XTM Privilege Escalation Vulnerability

WatchGuard · Firebox and XTM

Ransomware: Unknown

Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.