CVE-2019-9670
Added Jan 10, 2022
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
Synacor · Zimbra Collaboration Suite (ZCS)
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 29 of 35
CVE-2020-6572
Added Jan 10, 2022
Google Chrome Media Use-After-Free Vulnerability
Google · Chrome Media
Ransomware: Unknown
CVE-2021-22017
Added Jan 10, 2022
VMware vCenter Server Improper Access Control
VMware · vCenter Server
Ransomware: Unknown
CVE-2021-27860
Added Jan 10, 2022
FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit
FatPipe · WARP, IPVPN, and MPVPN software
Ransomware: Unknown
CVE-2021-36260
Added Jan 10, 2022
Hikvision Improper Input Validation
Hikvision · Security cameras web server
Ransomware: Unknown
CVE-2021-4102
Added Dec 15, 2021
Google Chromium V8 Use-After-Free Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2021-43890
Added Dec 15, 2021
Microsoft Windows AppX Installer Spoofing Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2010-1871
Added Dec 10, 2021
Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
Red Hat · JBoss Seam 2
Ransomware: Unknown
CVE-2017-12149
Added Dec 10, 2021
Red Hat JBoss Application Server Remote Code Execution Vulnerability
Red Hat · JBoss Application Server
Ransomware: Known
CVE-2017-17562
Added Dec 10, 2021
Embedthis GoAhead Remote Code Execution Vulnerability
Embedthis · GoAhead
Ransomware: Unknown
CVE-2019-0193
Added Dec 10, 2021
Apache Solr DataImportHandler Code Injection Vulnerability
Apache · Solr
Ransomware: Unknown
CVE-2019-10758
Added Dec 10, 2021
MongoDB mongo-express Remote Code Execution Vulnerability
MongoDB · mongo-express
Ransomware: Unknown
CVE-2019-13272
Added Dec 10, 2021
Linux Kernel Improper Privilege Management Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2019-7238
Added Dec 10, 2021
Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
Sonatype · Nexus Repository Manager
Ransomware: Unknown
CVE-2020-17463
Added Dec 10, 2021
Fuel CMS SQL Injection Vulnerability
Fuel CMS · Fuel CMS
Ransomware: Unknown
CVE-2020-8816
Added Dec 10, 2021
Pi-Hole AdminLTE Remote Code Execution Vulnerability
Pi-hole · AdminLTE
Ransomware: Unknown
CVE-2021-35394
Added Dec 10, 2021
Realtek Jungle SDK Remote Code Execution Vulnerability
Realtek · Jungle Software Development Kit (SDK)
Ransomware: Unknown
CVE-2021-44168
Added Dec 10, 2021
Fortinet FortiOS Arbitrary File Download
Fortinet · FortiOS
Ransomware: Unknown
CVE-2021-44228
Added Dec 10, 2021
Apache Log4j2 Remote Code Execution Vulnerability
Apache · Log4j2
Ransomware: Known
CVE-2021-44515
Added Dec 10, 2021
Zoho Desktop Central Authentication Bypass Vulnerability
Zoho · Desktop Central
Ransomware: Unknown
CVE-2018-14847
Added Dec 1, 2021
MikroTik Router OS Directory Traversal Vulnerability
MikroTik · RouterOS
Ransomware: Unknown
CVE-2020-11261
Added Dec 1, 2021
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
Qualcomm · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Ransomware: Unknown
CVE-2021-37415
Added Dec 1, 2021
Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
Zoho · ManageEngine ServiceDesk Plus (SDP)
Ransomware: Unknown
CVE-2021-40438
Added Dec 1, 2021
Apache HTTP Server-Side Request Forgery (SSRF)
Apache · Apache
Ransomware: Known
CVE-2021-44077
Added Dec 1, 2021
Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus
Ransomware: Unknown
CVE-2021-22204
Added Nov 17, 2021
ExifTool Remote Code Execution Vulnerability
Perl · Exiftool
Ransomware: Unknown
CVE-2021-40449
Added Nov 17, 2021
Microsoft Windows Win32k Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2021-42292
Added Nov 17, 2021
Microsoft Excel Security Feature Bypass
Microsoft · Office
Ransomware: Unknown
CVE-2021-42321
Added Nov 17, 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft · Exchange
Ransomware: Known
CVE-2010-5326
Added Nov 3, 2021
SAP NetWeaver Remote Code Execution Vulnerability
SAP · NetWeaver
Ransomware: Unknown
CVE-2012-0158
Added Nov 3, 2021
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
Microsoft · MSCOMCTL.OCX
Ransomware: Known
CVE-2012-3152
Added Nov 3, 2021
Oracle Fusion Middleware Unspecified Vulnerability
Oracle · Fusion Middleware
Ransomware: Unknown
CVE-2014-1812
Added Nov 3, 2021
Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2015-1641
Added Nov 3, 2021
Microsoft Office Memory Corruption Vulnerability
Microsoft · Office
Ransomware: Unknown
CVE-2015-4852
Added Nov 3, 2021
Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability
Oracle · WebLogic Server
Ransomware: Unknown
CVE-2016-0167
Added Nov 3, 2021
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Ransomware: Known
CVE-2016-0185
Added Nov 3, 2021
Microsoft Windows Media Center Remote Code Execution Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2016-3235
Added Nov 3, 2021
Microsoft Office OLE DLL Side Loading Vulnerability
Microsoft · Office
Ransomware: Unknown
CVE-2016-3643
Added Nov 3, 2021
SolarWinds Virtualization Manager Privilege Escalation Vulnerability
SolarWinds · Virtualization Manager
Ransomware: Unknown
CVE-2016-3715
Added Nov 3, 2021
ImageMagick Arbitrary File Deletion Vulnerability
ImageMagick · ImageMagick
Ransomware: Unknown
CVE-2016-3718
Added Nov 3, 2021
ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
ImageMagick · ImageMagick
Ransomware: Unknown
CVE-2016-3976
Added Nov 3, 2021
SAP NetWeaver Directory Traversal Vulnerability
SAP · NetWeaver
Ransomware: Unknown
CVE-2016-4437
Added Nov 3, 2021
Apache Shiro Code Execution Vulnerability
Apache · Shiro
Ransomware: Unknown
CVE-2016-7255
Added Nov 3, 2021
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Ransomware: Known
CVE-2016-9563
Added Nov 3, 2021
SAP NetWeaver XML External Entity (XXE) Vulnerability
SAP · NetWeaver
Ransomware: Unknown
CVE-2017-0143
Added Nov 3, 2021
Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2017-0199
Added Nov 3, 2021
Microsoft Office and WordPad Remote Code Execution Vulnerability
Microsoft · Office and WordPad
Ransomware: Known
CVE-2017-11774
Added Nov 3, 2021
Microsoft Office Outlook Security Feature Bypass Vulnerability
Microsoft · Office
Ransomware: Unknown
CVE-2017-11882
Added Nov 3, 2021
Microsoft Office Memory Corruption Vulnerability
Microsoft · Office
Ransomware: Known
CVE-2017-16651
Added Nov 3, 2021
Roundcube Webmail File Disclosure Vulnerability
Roundcube · Roundcube Webmail
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.