CVE-2020-2021
Added Mar 25, 2022
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Palo Alto Networks · PAN-OS
Ransomware: Known
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 25 of 35
CVE-2020-2506
Added Mar 25, 2022
QNAP Helpdesk Improper Access Control Vulnerability
QNAP Systems · Helpdesk
Ransomware: Unknown
CVE-2020-25223
Added Mar 25, 2022
Sophos SG UTM Remote Code Execution Vulnerability
Sophos · SG UTM
Ransomware: Unknown
CVE-2020-5410
Added Mar 25, 2022
VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
VMware Tanzu · Spring Cloud Configuration (Config) Server
Ransomware: Unknown
CVE-2020-7247
Added Mar 25, 2022
OpenSMTPD Remote Code Execution Vulnerability
OpenBSD · OpenSMTPD
Ransomware: Unknown
CVE-2020-9054
Added Mar 25, 2022
Zyxel Multiple NAS Devices OS Command Injection Vulnerability
Zyxel · Multiple Network-Attached Storage (NAS) Devices
Ransomware: Unknown
CVE-2020-9377
Added Mar 25, 2022
D-Link DIR-610 Devices Remote Command Execution
D-Link · DIR-610 Devices
Ransomware: Unknown
CVE-2021-22941
Added Mar 25, 2022
Citrix ShareFile Improper Access Control Vulnerability
Citrix · ShareFile
Ransomware: Known
CVE-2021-42237
Added Mar 25, 2022
Sitecore XP Remote Command Execution Vulnerability
Sitecore · XP
Ransomware: Known
CVE-2022-21999
Added Mar 25, 2022
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2022-26143
Added Mar 25, 2022
MiCollab, MiVoice Business Express Access Control Vulnerability
Mitel · MiCollab, MiVoice Business Express
Ransomware: Unknown
CVE-2022-26318
Added Mar 25, 2022
WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
WatchGuard · Firebox and XTM Appliances
Ransomware: Unknown
CVE-2015-2546
Added Mar 15, 2022
Microsoft Win32k Memory Corruption Vulnerability
Microsoft · Win32k
Ransomware: Known
CVE-2016-3309
Added Mar 15, 2022
Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2017-0101
Added Mar 15, 2022
Microsoft Windows Transaction Manager Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2018-8120
Added Mar 15, 2022
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Ransomware: Known
CVE-2019-0543
Added Mar 15, 2022
Microsoft Windows Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2019-0841
Added Mar 15, 2022
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2019-1064
Added Mar 15, 2022
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2019-1069
Added Mar 15, 2022
Microsoft Task Scheduler Privilege Escalation Vulnerability
Microsoft · Task Scheduler
Ransomware: Known
CVE-2019-1129
Added Mar 15, 2022
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2019-1132
Added Mar 15, 2022
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Ransomware: Unknown
CVE-2019-1253
Added Mar 15, 2022
Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2019-1315
Added Mar 15, 2022
Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2019-1322
Added Mar 15, 2022
Microsoft Windows Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2019-1405
Added Mar 15, 2022
Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2020-5135
Added Mar 15, 2022
SonicWall SonicOS Buffer Overflow Vulnerability
SonicWall · SonicOS
Ransomware: Known
CVE-2009-3960
Added Mar 7, 2022
Adobe BlazeDS Information Disclosure Vulnerability
Adobe · BlazeDS
Ransomware: Known
CVE-2013-0625
Added Mar 7, 2022
Adobe ColdFusion Authentication Bypass Vulnerability
Adobe · ColdFusion
Ransomware: Unknown
CVE-2013-0629
Added Mar 7, 2022
Adobe ColdFusion Directory Traversal Vulnerability
Adobe · ColdFusion
Ransomware: Unknown
CVE-2013-0631
Added Mar 7, 2022
Adobe ColdFusion Information Disclosure Vulnerability
Adobe · ColdFusion
Ransomware: Unknown
CVE-2016-6277
Added Mar 7, 2022
NETGEAR Multiple Routers Remote Code Execution Vulnerability
NETGEAR · Multiple Routers
Ransomware: Unknown
CVE-2017-6077
Added Mar 7, 2022
NETGEAR DGN2200 Remote Code Execution Vulnerability
NETGEAR · Wireless Router DGN2200
Ransomware: Unknown
CVE-2019-11581
Added Mar 7, 2022
Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
Atlassian · Jira Server and Data Center
Ransomware: Unknown
CVE-2020-8218
Added Mar 7, 2022
Pulse Connect Secure Code Injection Vulnerability
Pulse Secure · Pulse Connect Secure
Ransomware: Unknown
CVE-2021-21973
Added Mar 7, 2022
VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
VMware · vCenter Server and Cloud Foundation
Ransomware: Unknown
CVE-2022-26485
Added Mar 7, 2022
Mozilla Firefox Use-After-Free Vulnerability
Mozilla · Firefox
Ransomware: Unknown
CVE-2022-26486
Added Mar 7, 2022
Mozilla Firefox Use-After-Free Vulnerability
Mozilla · Firefox
Ransomware: Unknown
CVE-2002-0367
Added Mar 3, 2022
Microsoft Windows Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2004-0210
Added Mar 3, 2022
Microsoft Windows Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2008-2992
Added Mar 3, 2022
Adobe Reader and Acrobat Input Validation Vulnerability
Adobe · Acrobat and Reader
Ransomware: Known
CVE-2008-3431
Added Mar 3, 2022
Oracle VirtualBox Insufficient Input Validation Vulnerability
Oracle · VirtualBox
Ransomware: Unknown
CVE-2009-1123
Added Mar 3, 2022
Microsoft Windows Improper Input Validation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2009-3129
Added Mar 3, 2022
Microsoft Excel Featheader Record Memory Corruption Vulnerability
Microsoft · Excel
Ransomware: Unknown
CVE-2010-0188
Added Mar 3, 2022
Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
Adobe · Reader and Acrobat
Ransomware: Known
CVE-2010-0232
Added Mar 3, 2022
Microsoft Windows Kernel Exception Handler Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2010-3333
Added Mar 3, 2022
Microsoft Office Stack-based Buffer Overflow Vulnerability
Microsoft · Office
Ransomware: Unknown
CVE-2011-0611
Added Mar 3, 2022
Adobe Flash Player Remote Code Execution Vulnerability
Adobe · Flash Player
Ransomware: Unknown
CVE-2011-1889
Added Mar 3, 2022
Microsoft Forefront TMG Remote Code Execution Vulnerability
Microsoft · Forefront Threat Management Gateway (TMG)
Ransomware: Unknown
CVE-2011-3544
Added Mar 3, 2022
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Oracle · Java SE JDK and JRE
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.