Skip to content
RequestGuard Vulnerabilities
Pricing

CISA catalog

Known exploited vulnerabilities

Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.

1,716 catalog entriesReleased Sep 18, 2026
Clear

Catalog results

1,716 vulnerabilities

Page 31 of 35

CVE-2019-18935

Added Nov 3, 2021

Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability

Progress · Telerik UI for ASP.NET AJAX

Ransomware: Known
CVE-2019-18988

Added Nov 3, 2021

TeamViewer Desktop Bypass Remote Login Vulnerability

TeamViewer · Desktop

Ransomware: Unknown
CVE-2019-19356

Added Nov 3, 2021

Netis WF2419 Devices Remote Code Execution Vulnerability

Netis · WF2419 Devices

Ransomware: Unknown
CVE-2019-19781

Added Nov 3, 2021

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability

Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance

Ransomware: Known
CVE-2019-20085

Added Nov 3, 2021

TVT NVMS-1000 Directory Traversal Vulnerability

TVT · NVMS-1000

Ransomware: Unknown
CVE-2019-2215

Added Nov 3, 2021

Android Kernel Use-After-Free Vulnerability

Android · Android Kernel

Ransomware: Unknown
CVE-2019-3396

Added Nov 3, 2021

Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability

Atlassian · Confluence Server and Data Server

Ransomware: Known
CVE-2019-3398

Added Nov 3, 2021

Atlassian Confluence Server and Data Center Path Traversal Vulnerability

Atlassian · Confluence Server and Data Center

Ransomware: Unknown
CVE-2019-4716

Added Nov 3, 2021

IBM Planning Analytics Remote Code Execution Vulnerability

IBM · Planning Analytics

Ransomware: Unknown
CVE-2019-5544

Added Nov 3, 2021

VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

VMware · VMware ESXi and Horizon DaaS

Ransomware: Known
CVE-2019-5591

Added Nov 3, 2021

Fortinet FortiOS Default Configuration Vulnerability

Fortinet · FortiOS

Ransomware: Known
CVE-2019-6223

Added Nov 3, 2021

Apple iOS and macOS Group Facetime Vulnerability

Apple · iOS and macOS

Ransomware: Unknown
CVE-2019-7481

Added Nov 3, 2021

SonicWall SMA100 SQL Injection Vulnerability

SonicWall · SMA100

Ransomware: Known
CVE-2019-8394

Added Nov 3, 2021

Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability

Zoho · ManageEngine

Ransomware: Unknown
CVE-2019-9082

Added Nov 3, 2021

ThinkPHP Remote Code Execution Vulnerability

ThinkPHP · ThinkPHP

Ransomware: Unknown
CVE-2019-9978

Added Nov 3, 2021

WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability

WordPress · Social Warfare Plugin

Ransomware: Unknown
CVE-2020-0041

Added Nov 3, 2021

Android Kernel Out-of-Bounds Write Vulnerability

Android · Android Kernel

Ransomware: Unknown
CVE-2020-0069

Added Nov 3, 2021

Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability

MediaTek · Multiple Chipsets

Ransomware: Unknown
CVE-2020-0601

Added Nov 3, 2021

Microsoft Windows CryptoAPI Spoofing Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2020-0646

Added Nov 3, 2021

Microsoft .NET Framework Remote Code Execution Vulnerability

Microsoft · .NET Framework

Ransomware: Unknown
CVE-2020-0674

Added Nov 3, 2021

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft · Internet Explorer

Ransomware: Unknown
CVE-2020-0683

Added Nov 3, 2021

Microsoft Windows Installer Privilege Escalation Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2020-0688

Added Nov 3, 2021

Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

Microsoft · Exchange Server

Ransomware: Known
CVE-2020-0878

Added Nov 3, 2021

Microsoft Edge and Internet Explorer Memory Corruption Vulnerability

Microsoft · Edge and Internet Explorer

Ransomware: Known
CVE-2020-0938

Added Nov 3, 2021

Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2020-0968

Added Nov 3, 2021

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft · Internet Explorer

Ransomware: Known
CVE-2020-0986

Added Nov 3, 2021

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2020-10148

Added Nov 3, 2021

SolarWinds Orion Authentication Bypass Vulnerability

SolarWinds · Orion

Ransomware: Unknown
CVE-2020-10181

Added Nov 3, 2021

Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability

Sumavision · Enhanced Multimedia Router (EMR)

Ransomware: Unknown
CVE-2020-10189

Added Nov 3, 2021

Zoho ManageEngine Desktop Central File Upload Vulnerability

Zoho · ManageEngine

Ransomware: Unknown
CVE-2020-10199

Added Nov 3, 2021

Sonatype Nexus Repository Remote Code Execution Vulnerability

Sonatype · Nexus Repository

Ransomware: Unknown
CVE-2020-1020

Added Nov 3, 2021

Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2020-10221

Added Nov 3, 2021

rConfig OS Command Injection Vulnerability

rConfig · rConfig

Ransomware: Unknown
CVE-2020-1040

Added Nov 3, 2021

Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

Microsoft · Hyper-V RemoteFX

Ransomware: Unknown
CVE-2020-1054

Added Nov 3, 2021

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k

Ransomware: Unknown
CVE-2020-10987

Added Nov 3, 2021

Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability

Tenda · AC1900 Router AC15 Model

Ransomware: Unknown
CVE-2020-1147

Added Nov 3, 2021

Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

Microsoft · .NET Framework, SharePoint, Visual Studio

Ransomware: Unknown
CVE-2020-11651

Added Nov 3, 2021

SaltStack Salt Authentication Bypass Vulnerability

SaltStack · Salt

Ransomware: Unknown
CVE-2020-11652

Added Nov 3, 2021

SaltStack Salt Path Traversal Vulnerability

SaltStack · Salt

Ransomware: Unknown
CVE-2020-11738

Added Nov 3, 2021

WordPress Snap Creek Duplicator Plugin File Download Vulnerability

WordPress · Snap Creek Duplicator Plugin

Ransomware: Unknown
CVE-2020-12271

Added Nov 3, 2021

Sophos SFOS SQL Injection Vulnerability

Sophos · SFOS

Ransomware: Known
CVE-2020-12812

Added Nov 3, 2021

Fortinet FortiOS SSL VPN Improper Authentication Vulnerability

Fortinet · FortiOS

Ransomware: Known
CVE-2020-1350

Added Nov 3, 2021

Microsoft Windows DNS Server Remote Code Execution Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2020-1380

Added Nov 3, 2021

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft · Internet Explorer

Ransomware: Unknown
CVE-2020-1464

Added Nov 3, 2021

Microsoft Windows Spoofing Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2020-1472

Added Nov 3, 2021

Microsoft Netlogon Privilege Escalation Vulnerability

Microsoft · Netlogon

Ransomware: Known
CVE-2020-14750

Added Nov 3, 2021

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle · WebLogic Server

Ransomware: Unknown
CVE-2020-14871

Added Nov 3, 2021

Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability

Oracle · Solaris and Zettabyte File System (ZFS)

Ransomware: Unknown
CVE-2020-14882

Added Nov 3, 2021

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle · WebLogic Server

Ransomware: Unknown
CVE-2020-14883

Added Nov 3, 2021

Oracle WebLogic Server Unspecified Vulnerability

Oracle · WebLogic Server

Ransomware: Unknown

Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.