Skip to content
RequestGuard Vulnerabilities
Pricing

CISA catalog

Known exploited vulnerabilities

Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.

1,716 catalog entriesReleased Sep 18, 2026
Clear

Catalog results

1,716 vulnerabilities

Page 27 of 35

CVE-2017-6738

Added Mar 3, 2022

Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Software

Ransomware: Unknown
CVE-2017-6739

Added Mar 3, 2022

Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Software

Ransomware: Unknown
CVE-2017-6740

Added Mar 3, 2022

Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Software

Ransomware: Unknown
CVE-2017-6743

Added Mar 3, 2022

Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Software

Ransomware: Unknown
CVE-2017-6744

Added Mar 3, 2022

Cisco IOS Software SNMP Remote Code Execution Vulnerability

Cisco · IOS software

Ransomware: Unknown
CVE-2017-8540

Added Mar 3, 2022

Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

Microsoft · Malware Protection Engine

Ransomware: Unknown
CVE-2018-0151

Added Mar 3, 2022

Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Software

Ransomware: Unknown
CVE-2018-0154

Added Mar 3, 2022

Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability

Cisco · IOS Software

Ransomware: Unknown
CVE-2018-0155

Added Mar 3, 2022

Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability

Cisco · Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches

Ransomware: Unknown
CVE-2018-0156

Added Mar 3, 2022

Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability

Cisco · IOS Software and Cisco IOS XE Software

Ransomware: Unknown
CVE-2018-0158

Added Mar 3, 2022

Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability

Cisco · IOS Software and Cisco IOS XE Software

Ransomware: Unknown
CVE-2018-0159

Added Mar 3, 2022

Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability

Cisco · IOS Software and Cisco IOS XE Software

Ransomware: Unknown
CVE-2018-0161

Added Mar 3, 2022

Cisco IOS Software Resource Management Errors Vulnerability

Cisco · IOS Software

Ransomware: Unknown
CVE-2018-0167

Added Mar 3, 2022

Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

Cisco · IOS, XR, and XE Software

Ransomware: Unknown
CVE-2018-0172

Added Mar 3, 2022

Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

Cisco · IOS and IOS XE Software

Ransomware: Unknown
CVE-2018-0173

Added Mar 3, 2022

Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

Cisco · IOS and IOS XE Software

Ransomware: Unknown
CVE-2018-0174

Added Mar 3, 2022

Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability

Cisco · IOS XE Software

Ransomware: Unknown
CVE-2018-0175

Added Mar 3, 2022

Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

Cisco · IOS, XR, and XE Software

Ransomware: Unknown
CVE-2018-0179

Added Mar 3, 2022

Cisco IOS Software Denial-of-Service Vulnerability

Cisco · IOS Software

Ransomware: Unknown
CVE-2018-0180

Added Mar 3, 2022

Cisco IOS Software Denial-of-Service Vulnerability

Cisco · IOS Software

Ransomware: Unknown
CVE-2018-8298

Added Mar 3, 2022

ChakraCore Scripting Engine Type Confusion Vulnerability

ChakraCore · ChakraCore scripting engine

Ransomware: Unknown
CVE-2018-8581

Added Mar 3, 2022

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft · Exchange Server

Ransomware: Known
CVE-2019-1297

Added Mar 3, 2022

Microsoft Excel Remote Code Execution Vulnerability

Microsoft · Excel

Ransomware: Unknown
CVE-2019-1652

Added Mar 3, 2022

Cisco Small Business Routers Improper Input Validation Vulnerability

Cisco · Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers

Ransomware: Unknown
CVE-2019-16928

Added Mar 3, 2022

Exim Out-of-bounds Write Vulnerability

Exim · Exim Internet Mailer

Ransomware: Unknown
CVE-2020-11899

Added Mar 3, 2022

Treck TCP/IP stack Out-of-Bounds Read Vulnerability

Treck TCP/IP stack · IPv6

Ransomware: Unknown
CVE-2020-1938

Added Mar 3, 2022

Apache Tomcat Improper Privilege Management Vulnerability

Apache · Tomcat

Ransomware: Unknown
CVE-2021-41379

Added Mar 3, 2022

Microsoft Windows Installer Privilege Escalation Vulnerability

Microsoft · Windows

Ransomware: Known
CVE-2022-20699

Added Mar 3, 2022

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers

Ransomware: Unknown
CVE-2022-20700

Added Mar 3, 2022

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers

Ransomware: Unknown
CVE-2022-20701

Added Mar 3, 2022

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers

Ransomware: Unknown
CVE-2022-20703

Added Mar 3, 2022

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers

Ransomware: Unknown
CVE-2022-20708

Added Mar 3, 2022

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers

Ransomware: Unknown
CVE-2014-6352

Added Feb 25, 2022

Microsoft Windows Code Injection Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2017-0222

Added Feb 25, 2022

Microsoft Internet Explorer Remote Code Execution Vulnerability

Microsoft · Internet Explorer

Ransomware: Unknown
CVE-2017-8570

Added Feb 25, 2022

Microsoft Office Remote Code Execution Vulnerability

Microsoft · Office

Ransomware: Unknown
CVE-2022-24682

Added Feb 25, 2022

Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability

Synacor · Zimbra Collaborate Suite (ZCS)

Ransomware: Known
CVE-2022-23131

Added Feb 22, 2022

Zabbix Frontend Authentication Bypass Vulnerability

Zabbix · Frontend

Ransomware: Unknown
CVE-2022-23134

Added Feb 22, 2022

Zabbix Frontend Improper Access Control Vulnerability

Zabbix · Frontend

Ransomware: Unknown
CVE-2013-3906

Added Feb 15, 2022

Microsoft Graphics Component Memory Corruption Vulnerability

Microsoft · Graphics Component

Ransomware: Unknown
CVE-2014-1761

Added Feb 15, 2022

Microsoft Word Memory Corruption Vulnerability

Microsoft · Word

Ransomware: Unknown
CVE-2017-9841

Added Feb 15, 2022

PHPUnit Command Injection Vulnerability

PHPUnit · PHPUnit

Ransomware: Unknown
CVE-2018-15982

Added Feb 15, 2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player

Ransomware: Known
CVE-2018-20250

Added Feb 15, 2022

WinRAR Absolute Path Traversal Vulnerability

RARLAB · WinRAR

Ransomware: Known
CVE-2018-8174

Added Feb 15, 2022

Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

Microsoft · Windows

Ransomware: Known
CVE-2019-0752

Added Feb 15, 2022

Microsoft Internet Explorer Type Confusion Vulnerability

Microsoft · Internet Explorer

Ransomware: Known
CVE-2022-0609

Added Feb 15, 2022

Google Chromium Animation Use-After-Free Vulnerability

Google · Chromium Animation

Ransomware: Unknown
CVE-2022-24086

Added Feb 15, 2022

Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability

Adobe · Commerce and Magento Open Source

Ransomware: Unknown
CVE-2022-22620

Added Feb 11, 2022

Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

Apple · iOS, iPadOS, and macOS

Ransomware: Unknown
CVE-2014-4404

Added Feb 10, 2022

Apple OS X Heap-Based Buffer Overflow Vulnerability

Apple · OS X

Ransomware: Unknown

Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.