CVE-2010-2861
Added Mar 25, 2022
Adobe ColdFusion Directory Traversal Vulnerability
Adobe · ColdFusion
Ransomware: Known
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 24 of 35
CVE-2010-3035
Added Mar 25, 2022
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
Cisco · IOS XR
Ransomware: Unknown
CVE-2010-4344
Added Mar 25, 2022
Exim Heap-Based Buffer Overflow Vulnerability
Exim · Exim
Ransomware: Unknown
CVE-2010-4345
Added Mar 25, 2022
Exim Privilege Escalation Vulnerability
Exim · Exim
Ransomware: Unknown
CVE-2012-1823
Added Mar 25, 2022
PHP-CGI Query String Parameter Vulnerability
PHP · PHP
Ransomware: Unknown
CVE-2013-2251
Added Mar 25, 2022
Apache Struts Improper Input Validation Vulnerability
Apache · Struts
Ransomware: Unknown
CVE-2013-4810
Added Mar 25, 2022
HP Multiple Products Remote Code Execution Vulnerability
Hewlett Packard (HP) · ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management
Ransomware: Unknown
CVE-2013-5223
Added Mar 25, 2022
D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability
D-Link · DSL-2760U
Ransomware: Unknown
CVE-2014-0130
Added Mar 25, 2022
Ruby on Rails Directory Traversal Vulnerability
Rails · Ruby on Rails
Ransomware: Unknown
CVE-2014-3120
Added Mar 25, 2022
Elasticsearch Remote Code Execution Vulnerability
Elastic · Elasticsearch
Ransomware: Unknown
CVE-2014-6287
Added Mar 25, 2022
Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability
Rejetto · HTTP File Server (HFS)
Ransomware: Unknown
CVE-2014-6324
Added Mar 25, 2022
Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
Microsoft · Kerberos Key Distribution Center (KDC)
Ransomware: Unknown
CVE-2014-6332
Added Mar 25, 2022
Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2015-0666
Added Mar 25, 2022
Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
Cisco · Prime Data Center Network Manager (DCNM)
Ransomware: Unknown
CVE-2015-1187
Added Mar 25, 2022
D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
D-Link and TRENDnet · Multiple Devices
Ransomware: Unknown
CVE-2015-1427
Added Mar 25, 2022
Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
Elastic · Elasticsearch
Ransomware: Unknown
CVE-2015-3035
Added Mar 25, 2022
TP-Link Multiple Archer Devices Directory Traversal Vulnerability
TP-Link · Multiple Archer Devices
Ransomware: Unknown
CVE-2015-4068
Added Mar 25, 2022
Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability
Arcserve · Unified Data Protection (UDP)
Ransomware: Unknown
CVE-2016-0752
Added Mar 25, 2022
Ruby on Rails Directory Traversal Vulnerability
Rails · Ruby on Rails
Ransomware: Unknown
CVE-2016-10174
Added Mar 25, 2022
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
NETGEAR · WNR2000v5 Router
Ransomware: Unknown
CVE-2016-11021
Added Mar 25, 2022
D-Link DCS-930L Devices OS Command Injection Vulnerability
D-Link · DCS-930L Devices
Ransomware: Unknown
CVE-2016-1555
Added Mar 25, 2022
NETGEAR Multiple WAP Devices Command Injection Vulnerability
NETGEAR · Wireless Access Point (WAP) Devices
Ransomware: Unknown
CVE-2016-4171
Added Mar 25, 2022
Adobe Flash Player Remote Code Execution Vulnerability
Adobe · Flash Player
Ransomware: Unknown
CVE-2016-7892
Added Mar 25, 2022
Adobe Flash Player Use-After-Free Vulnerability
Adobe · Flash Player
Ransomware: Unknown
CVE-2017-0146
Added Mar 25, 2022
Microsoft Windows SMB Remote Code Execution Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2017-12615
Added Mar 25, 2022
Apache Tomcat on Windows Remote Code Execution Vulnerability
Apache · Tomcat
Ransomware: Known
CVE-2017-12617
Added Mar 25, 2022
Apache Tomcat Remote Code Execution Vulnerability
Apache · Tomcat
Ransomware: Unknown
CVE-2017-3881
Added Mar 25, 2022
Cisco IOS and IOS XE Remote Code Execution Vulnerability
Cisco · IOS and IOS XE
Ransomware: Unknown
CVE-2017-6316
Added Mar 25, 2022
Citrix Multiple Products Remote Code Execution Vulnerability
Citrix · NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server
Ransomware: Unknown
CVE-2017-6334
Added Mar 25, 2022
NETGEAR DGN2200 Devices OS Command Injection Vulnerability
NETGEAR · DGN2200 Devices
Ransomware: Unknown
CVE-2018-0125
Added Mar 25, 2022
Cisco VPN Routers Remote Code Execution Vulnerability
Cisco · VPN Routers
Ransomware: Unknown
CVE-2018-0147
Added Mar 25, 2022
Cisco Secure Access Control System Java Deserialization Vulnerability
Cisco · Secure Access Control System (ACS)
Ransomware: Unknown
CVE-2018-11138
Added Mar 25, 2022
Quest KACE System Management Appliance Remote Command Execution Vulnerability
Quest · KACE System Management Appliance
Ransomware: Known
CVE-2018-1273
Added Mar 25, 2022
VMware Tanzu Spring Data Commons Property Binder Vulnerability
VMware Tanzu · Spring Data Commons
Ransomware: Known
CVE-2018-14839
Added Mar 25, 2022
LG N1A1 NAS Remote Command Execution Vulnerability
LG · N1A1 NAS
Ransomware: Unknown
CVE-2018-6961
Added Mar 25, 2022
VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability
VMware · SD-WAN Edge
Ransomware: Unknown
CVE-2018-8373
Added Mar 25, 2022
Microsoft Scripting Engine Memory Corruption Vulnerability
Microsoft · Internet Explorer Scripting Engine
Ransomware: Unknown
CVE-2018-8414
Added Mar 25, 2022
Microsoft Windows Shell Remote Code Execution Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2019-0903
Added Mar 25, 2022
Microsoft GDI Remote Code Execution Vulnerability
Microsoft · Graphics Device Interface (GDI)
Ransomware: Unknown
CVE-2019-1003030
Added Mar 25, 2022
Jenkins Matrix Project Plugin Remote Code Execution Vulnerability
Jenkins · Matrix Project Plugin
Ransomware: Unknown
CVE-2019-10068
Added Mar 25, 2022
Kentico Xperience Deserialization of Untrusted Data Vulnerability
Kentico · Xperience
Ransomware: Unknown
CVE-2019-11043
Added Mar 25, 2022
PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
PHP · FastCGI Process Manager (FPM)
Ransomware: Known
CVE-2019-12989
Added Mar 25, 2022
Citrix SD-WAN and NetScaler SQL Injection Vulnerability
Citrix · SD-WAN and NetScaler
Ransomware: Unknown
CVE-2019-12991
Added Mar 25, 2022
Citrix SD-WAN and NetScaler Command Injection Vulnerability
Citrix · SD-WAN and NetScaler
Ransomware: Unknown
CVE-2019-15107
Added Mar 25, 2022
Webmin Command Injection Vulnerability
Webmin · Webmin
Ransomware: Known
CVE-2019-16920
Added Mar 25, 2022
D-Link Multiple Routers Command Injection Vulnerability
D-Link · Multiple Routers
Ransomware: Unknown
CVE-2019-2616
Added Mar 25, 2022
Oracle BI Publisher Unauthorized Access Vulnerability
Oracle · BI Publisher (Formerly XML Publisher)
Ransomware: Unknown
CVE-2019-6340
Added Mar 25, 2022
Drupal Core Remote Code Execution Vulnerability
Drupal · Core
Ransomware: Unknown
CVE-2020-1631
Added Mar 25, 2022
Juniper Junos OS Path Traversal Vulnerability
Juniper · Junos OS
Ransomware: Unknown
CVE-2020-1956
Added Mar 25, 2022
Apache Kylin OS Command Injection Vulnerability
Apache · Kylin
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.