CVE-2015-1130
Added Feb 10, 2022
Apple OS X Authentication Bypass Vulnerability
Apple · OS X
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 28 of 35
CVE-2015-1635
Added Feb 10, 2022
Microsoft HTTP.sys Remote Code Execution Vulnerability
Microsoft · HTTP.sys
Ransomware: Unknown
CVE-2015-2051
Added Feb 10, 2022
D-Link DIR-645 Router Remote Code Execution Vulnerability
D-Link · DIR-645 Router
Ransomware: Unknown
CVE-2016-3088
Added Feb 10, 2022
Apache ActiveMQ Improper Input Validation Vulnerability
Apache · ActiveMQ
Ransomware: Unknown
CVE-2017-0144
Added Feb 10, 2022
Microsoft SMBv1 Remote Code Execution Vulnerability
Microsoft · SMBv1
Ransomware: Known
CVE-2017-0145
Added Feb 10, 2022
Microsoft SMBv1 Remote Code Execution Vulnerability
Microsoft · SMBv1
Ransomware: Known
CVE-2017-0262
Added Feb 10, 2022
Microsoft Office Remote Code Execution Vulnerability
Microsoft · Office
Ransomware: Unknown
CVE-2017-0263
Added Feb 10, 2022
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Ransomware: Unknown
CVE-2017-10271
Added Feb 10, 2022
Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
Oracle · WebLogic Server
Ransomware: Known
CVE-2017-8464
Added Feb 10, 2022
Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2017-9791
Added Feb 10, 2022
Apache Struts 1 Improper Input Validation Vulnerability
Apache · Struts 1
Ransomware: Unknown
CVE-2018-1000861
Added Feb 10, 2022
Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
Jenkins · Jenkins Stapler Web Framework
Ransomware: Unknown
CVE-2020-0796
Added Feb 10, 2022
Microsoft SMBv3 Remote Code Execution Vulnerability
Microsoft · SMBv3
Ransomware: Known
CVE-2021-36934
Added Feb 10, 2022
Microsoft Windows SAM Local Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2022-21882
Added Feb 4, 2022
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Ransomware: Known
CVE-2014-1776
Added Jan 28, 2022
Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft · Internet Explorer
Ransomware: Unknown
CVE-2014-6271
Added Jan 28, 2022
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU · Bourne-Again Shell (Bash)
Ransomware: Unknown
CVE-2014-7169
Added Jan 28, 2022
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU · Bourne-Again Shell (Bash)
Ransomware: Unknown
CVE-2017-5689
Added Jan 28, 2022
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
Intel · Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability
Ransomware: Unknown
CVE-2020-0787
Added Jan 28, 2022
Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2020-5722
Added Jan 28, 2022
Grandstream Networks UCM6200 Series SQL Injection Vulnerability
Grandstream · UCM6200
Ransomware: Unknown
CVE-2021-20038
Added Jan 28, 2022
SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
SonicWall · SMA 100 Appliances
Ransomware: Known
CVE-2022-22587
Added Jan 28, 2022
Apple Memory Corruption Vulnerability
Apple · iOS and macOS
Ransomware: Unknown
CVE-2006-1547
Added Jan 21, 2022
Apache Struts 1 ActionForm Denial-of-Service Vulnerability
Apache · Struts 1
Ransomware: Unknown
CVE-2012-0391
Added Jan 21, 2022
Apache Struts 2 Improper Input Validation Vulnerability
Apache · Struts 2
Ransomware: Unknown
CVE-2018-8453
Added Jan 21, 2022
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Ransomware: Known
CVE-2021-35247
Added Jan 21, 2022
SolarWinds Serv-U Improper Input Validation Vulnerability
SolarWinds · Serv-U
Ransomware: Unknown
CVE-2020-11978
Added Jan 18, 2022
Apache Airflow Command Injection
Apache · Airflow
Ransomware: Unknown
CVE-2020-13671
Added Jan 18, 2022
Drupal core Un-restricted Upload of File
Drupal · Drupal core
Ransomware: Unknown
CVE-2020-13927
Added Jan 18, 2022
Apache Airflow's Experimental API Authentication Bypass
Apache · Airflow's Experimental API
Ransomware: Unknown
CVE-2020-14864
Added Jan 18, 2022
Oracle Business Intelligence Enterprise Edition Path Transversal
Oracle · Intelligence Enterprise Edition
Ransomware: Unknown
CVE-2021-21315
Added Jan 18, 2022
System Information Library for Node.JS Command Injection
Npm package · System Information Library for Node.JS
Ransomware: Unknown
CVE-2021-21975
Added Jan 18, 2022
VMware Server Side Request Forgery in vRealize Operations Manager API
VMware · vRealize Operations Manager API
Ransomware: Known
CVE-2021-22991
Added Jan 18, 2022
F5 BIG-IP Traffic Management Microkernel Buffer Overflow
F5 · BIG-IP Traffic Management Microkernel
Ransomware: Unknown
CVE-2021-25296
Added Jan 18, 2022
Nagios XI OS Command Injection
Nagios · Nagios XI
Ransomware: Unknown
CVE-2021-25297
Added Jan 18, 2022
Nagios XI OS Command Injection
Nagios · Nagios XI
Ransomware: Unknown
CVE-2021-25298
Added Jan 18, 2022
Nagios XI OS Command Injection
Nagios · Nagios XI
Ransomware: Unknown
CVE-2021-32648
Added Jan 18, 2022
October CMS Improper Authentication
October CMS · October CMS
Ransomware: Unknown
CVE-2021-33766
Added Jan 18, 2022
Microsoft Exchange Server Information Disclosure
Microsoft · Exchange Server
Ransomware: Unknown
CVE-2021-40870
Added Jan 18, 2022
Aviatrix Controller Unrestricted Upload of File
Aviatrix · Aviatrix Controller
Ransomware: Unknown
CVE-2013-3900
Added Jan 10, 2022
Microsoft WinVerifyTrust function Remote Code Execution
Microsoft · WinVerifyTrust function
Ransomware: Unknown
CVE-2015-7450
Added Jan 10, 2022
IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
IBM · WebSphere Application Server and Server Hypervisor Edition
Ransomware: Unknown
CVE-2017-1000486
Added Jan 10, 2022
Primetek Primefaces Remote Code Execution Vulnerability
Primetek · Primefaces Application
Ransomware: Unknown
CVE-2018-13382
Added Jan 10, 2022
Fortinet FortiOS and FortiProxy Improper Authorization
Fortinet · FortiOS and FortiProxy
Ransomware: Known
CVE-2018-13383
Added Jan 10, 2022
Fortinet FortiOS and FortiProxy Out-of-bounds Write
Fortinet · FortiOS and FortiProxy
Ransomware: Known
CVE-2019-10149
Added Jan 10, 2022
Exim Mail Transfer Agent (MTA) Improper Input Validation
Exim · Mail Transfer Agent (MTA)
Ransomware: Unknown
CVE-2019-1458
Added Jan 10, 2022
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Ransomware: Known
CVE-2019-1579
Added Jan 10, 2022
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Palo Alto Networks · PAN-OS
Ransomware: Known
CVE-2019-2725
Added Jan 10, 2022
Oracle WebLogic Server, Injection
Oracle · WebLogic Server
Ransomware: Known
CVE-2019-7609
Added Jan 10, 2022
Kibana Arbitrary Code Execution
Elastic · Kibana
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.