CVE-2017-5638
Added Nov 3, 2021
Apache Struts Remote Code Execution Vulnerability
Apache · Struts
Ransomware: Known
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 30 of 35
CVE-2017-6327
Added Nov 3, 2021
Symantec Messaging Gateway Remote Code Execution Vulnerability
Symantec · Symantec Messaging Gateway
Ransomware: Unknown
CVE-2017-7269
Added Nov 3, 2021
Microsoft Windows Server Buffer Overflow Vulnerability
Microsoft · Internet Information Services (IIS)
Ransomware: Unknown
CVE-2017-8759
Added Nov 3, 2021
Microsoft .NET Framework Remote Code Execution Vulnerability
Microsoft · .NET Framework
Ransomware: Unknown
CVE-2017-9248
Added Nov 3, 2021
Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability
Progress · ASP.NET AJAX and Sitefinity
Ransomware: Unknown
CVE-2017-9805
Added Nov 3, 2021
Apache Struts Deserialization of Untrusted Data Vulnerability
Apache · Struts
Ransomware: Unknown
CVE-2017-9822
Added Nov 3, 2021
DotNetNuke (DNN) Remote Code Execution Vulnerability
DotNetNuke (DNN) · DotNetNuke (DNN)
Ransomware: Known
CVE-2018-0171
Added Nov 3, 2021
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
Cisco · IOS and IOS XE
Ransomware: Unknown
CVE-2018-0296
Added Nov 3, 2021
Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
Cisco · Adaptive Security Appliance (ASA)
Ransomware: Unknown
CVE-2018-0798
Added Nov 3, 2021
Microsoft Office Memory Corruption Vulnerability
Microsoft · Office
Ransomware: Unknown
CVE-2018-0802
Added Nov 3, 2021
Microsoft Office Memory Corruption Vulnerability
Microsoft · Office
Ransomware: Known
CVE-2018-11776
Added Nov 3, 2021
Apache Struts Remote Code Execution Vulnerability
Apache · Struts
Ransomware: Unknown
CVE-2018-13379
Added Nov 3, 2021
Fortinet FortiOS SSL VPN Path Traversal Vulnerability
Fortinet · FortiOS
Ransomware: Known
CVE-2018-14558
Added Nov 3, 2021
Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability
Tenda · AC7, AC9, and AC10 Routers
Ransomware: Unknown
CVE-2018-15811
Added Nov 3, 2021
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
DotNetNuke (DNN) · DotNetNuke (DNN)
Ransomware: Unknown
CVE-2018-15961
Added Nov 3, 2021
Adobe ColdFusion Unrestricted File Upload Vulnerability
Adobe · ColdFusion
Ransomware: Unknown
CVE-2018-18325
Added Nov 3, 2021
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
DotNetNuke (DNN) · DotNetNuke (DNN)
Ransomware: Unknown
CVE-2018-20062
Added Nov 3, 2021
ThinkPHP "noneCms" Remote Code Execution Vulnerability
ThinkPHP · noneCms
Ransomware: Unknown
CVE-2018-2380
Added Nov 3, 2021
SAP Customer Relationship Management (CRM) Path Traversal Vulnerability
SAP · Customer Relationship Management (CRM)
Ransomware: Known
CVE-2018-4878
Added Nov 3, 2021
Adobe Flash Player Use-After-Free Vulnerability
Adobe · Flash Player
Ransomware: Known
CVE-2018-4939
Added Nov 3, 2021
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Adobe · ColdFusion
Ransomware: Unknown
CVE-2018-6789
Added Nov 3, 2021
Exim Buffer Overflow Vulnerability
Exim · Exim
Ransomware: Known
CVE-2018-7600
Added Nov 3, 2021
Drupal Core Remote Code Execution Vulnerability
Drupal · Drupal Core
Ransomware: Known
CVE-2018-8653
Added Nov 3, 2021
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
Microsoft · Internet Explorer
Ransomware: Unknown
CVE-2019-0211
Added Nov 3, 2021
Apache HTTP Server Privilege Escalation Vulnerability
Apache · HTTP Server
Ransomware: Unknown
CVE-2019-0541
Added Nov 3, 2021
Microsoft MSHTML Remote Code Execution Vulnerability
Microsoft · MSHTML
Ransomware: Unknown
CVE-2019-0604
Added Nov 3, 2021
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft · SharePoint
Ransomware: Known
CVE-2019-0708
Added Nov 3, 2021
Microsoft Remote Desktop Services Remote Code Execution Vulnerability
Microsoft · Remote Desktop Services
Ransomware: Known
CVE-2019-0797
Added Nov 3, 2021
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Ransomware: Unknown
CVE-2019-0803
Added Nov 3, 2021
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Ransomware: Known
CVE-2019-0808
Added Nov 3, 2021
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Ransomware: Unknown
CVE-2019-0859
Added Nov 3, 2021
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Ransomware: Known
CVE-2019-0863
Added Nov 3, 2021
Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2019-11510
Added Nov 3, 2021
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
Ivanti · Pulse Connect Secure
Ransomware: Known
CVE-2019-11539
Added Nov 3, 2021
Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
Ivanti · Pulse Connect Secure and Pulse Policy Secure
Ransomware: Known
CVE-2019-11580
Added Nov 3, 2021
Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
Atlassian · Crowd and Crowd Data Center
Ransomware: Known
CVE-2019-11634
Added Nov 3, 2021
Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
Citrix · Workspace Application and Receiver for Windows
Ransomware: Known
CVE-2019-1214
Added Nov 3, 2021
Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2019-1215
Added Nov 3, 2021
Microsoft Windows Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2019-13608
Added Nov 3, 2021
Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
Citrix · StoreFront Server
Ransomware: Known
CVE-2019-1367
Added Nov 3, 2021
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
Microsoft · Internet Explorer
Ransomware: Known
CVE-2019-1429
Added Nov 3, 2021
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
Microsoft · Internet Explorer
Ransomware: Unknown
CVE-2019-15752
Added Nov 3, 2021
Docker Desktop Community Edition Privilege Escalation Vulnerability
Docker · Desktop Community Edition
Ransomware: Unknown
CVE-2019-15949
Added Nov 3, 2021
Nagios XI Remote Code Execution Vulnerability
Nagios · Nagios XI
Ransomware: Unknown
CVE-2019-16256
Added Nov 3, 2021
SIMalliance Toolbox Browser Command Injection Vulnerability
SIMalliance · Toolbox Browser
Ransomware: Unknown
CVE-2019-1653
Added Nov 3, 2021
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
Cisco · Small Business RV320 and RV325 Routers
Ransomware: Unknown
CVE-2019-16759
Added Nov 3, 2021
vBulletin PHP Module Remote Code Execution Vulnerability
vBulletin · vBulletin
Ransomware: Unknown
CVE-2019-17026
Added Nov 3, 2021
Mozilla Firefox And Thunderbird Type Confusion Vulnerability
Mozilla · Firefox and Thunderbird
Ransomware: Unknown
CVE-2019-17558
Added Nov 3, 2021
Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability
Apache · Solr
Ransomware: Unknown
CVE-2019-18187
Added Nov 3, 2021
Trend Micro OfficeScan Directory Traversal Vulnerability
Trend Micro · OfficeScan
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.