CVE-2023-33538
Added Jun 16, 2025
TP-Link Multiple Routers Command Injection Vulnerability
TP-Link · Multiple Routers
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 8 of 35
CVE-2025-43200
Added Jun 16, 2025
Apple Multiple Products Unspecified Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2025-24016
Added Jun 10, 2025
Wazuh Server Deserialization of Untrusted Data Vulnerability
Wazuh · Wazuh Server
Ransomware: Unknown
CVE-2025-33053
Added Jun 10, 2025
Microsoft Windows External Control of File Name or Path Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-42009
Added Jun 9, 2025
RoundCube Webmail Cross-Site Scripting Vulnerability
Roundcube · Webmail
Ransomware: Unknown
CVE-2025-32433
Added Jun 9, 2025
Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability
Erlang · Erlang/OTP
Ransomware: Unknown
CVE-2025-5419
Added Jun 5, 2025
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2025-21479
Added Jun 3, 2025
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Qualcomm · Multiple Chipsets
Ransomware: Unknown
CVE-2025-21480
Added Jun 3, 2025
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Qualcomm · Multiple Chipsets
Ransomware: Unknown
CVE-2025-27038
Added Jun 3, 2025
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Qualcomm · Multiple Chipsets
Ransomware: Unknown
CVE-2021-32030
Added Jun 2, 2025
ASUS Routers Improper Authentication Vulnerability
ASUS · Routers
Ransomware: Unknown
CVE-2023-39780
Added Jun 2, 2025
ASUS RT-AX55 Routers OS Command Injection Vulnerability
ASUS · RT-AX55 Routers
Ransomware: Unknown
CVE-2024-56145
Added Jun 2, 2025
Craft CMS Code Injection Vulnerability
Craft CMS · Craft CMS
Ransomware: Unknown
CVE-2025-35939
Added Jun 2, 2025
Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability
Craft CMS · Craft CMS
Ransomware: Unknown
CVE-2025-3935
Added Jun 2, 2025
ConnectWise ScreenConnect Improper Authentication Vulnerability
ConnectWise · ScreenConnect
Ransomware: Unknown
CVE-2025-4632
Added May 22, 2025
Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung · MagicINFO 9 Server
Ransomware: Unknown
CVE-2023-38950
Added May 19, 2025
ZKTeco BioTime Path Traversal Vulnerability
ZKTeco · BioTime
Ransomware: Unknown
CVE-2024-11182
Added May 19, 2025
MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability
MDaemon · Email Server
Ransomware: Unknown
CVE-2024-27443
Added May 19, 2025
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Ransomware: Unknown
CVE-2025-27920
Added May 19, 2025
Srimax Output Messenger Directory Traversal Vulnerability
Srimax · Output Messenger
Ransomware: Unknown
CVE-2025-4427
Added May 19, 2025
Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
Ivanti · Endpoint Manager Mobile (EPMM)
Ransomware: Unknown
CVE-2025-4428
Added May 19, 2025
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
Ivanti · Endpoint Manager Mobile (EPMM)
Ransomware: Unknown
CVE-2024-12987
Added May 15, 2025
DrayTek Vigor Routers OS Command Injection Vulnerability
DrayTek · Vigor Routers
Ransomware: Unknown
CVE-2025-42999
Added May 15, 2025
SAP NetWeaver Deserialization Vulnerability
SAP · NetWeaver
Ransomware: Known
CVE-2025-32756
Added May 14, 2025
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
Fortinet · Multiple Products
Ransomware: Unknown
CVE-2025-30397
Added May 13, 2025
Microsoft Windows Scripting Engine Type Confusion Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-30400
Added May 13, 2025
Microsoft Windows DWM Core Library Use-After-Free Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-32701
Added May 13, 2025
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-32706
Added May 13, 2025
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-32709
Added May 13, 2025
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-47729
Added May 12, 2025
TeleMessage TM SGNL Hidden Functionality Vulnerability
TeleMessage · TM SGNL
Ransomware: Unknown
CVE-2024-11120
Added May 7, 2025
GeoVision Devices OS Command Injection Vulnerability
GeoVision · Multiple Devices
Ransomware: Unknown
CVE-2024-6047
Added May 7, 2025
GeoVision Devices OS Command Injection Vulnerability
GeoVision · Multiple Devices
Ransomware: Unknown
CVE-2025-27363
Added May 6, 2025
FreeType Out-of-Bounds Write Vulnerability
FreeType · FreeType
Ransomware: Unknown
CVE-2025-3248
Added May 5, 2025
Langflow Missing Authentication Vulnerability
Langflow · Langflow
Ransomware: Known
CVE-2024-58136
Added May 2, 2025
Yiiframework Yii Improper Protection of Alternate Path Vulnerability
Yiiframework · Yii
Ransomware: Unknown
CVE-2025-34028
Added May 2, 2025
Commvault Command Center Path Traversal Vulnerability
Commvault · Command Center
Ransomware: Unknown
CVE-2023-44221
Added May 1, 2025
SonicWall SMA100 Appliances OS Command Injection Vulnerability
SonicWall · SMA100 Appliances
Ransomware: Unknown
CVE-2024-38475
Added May 1, 2025
Apache HTTP Server Improper Escaping of Output Vulnerability
Apache · HTTP Server
Ransomware: Unknown
CVE-2025-31324
Added Apr 29, 2025
SAP NetWeaver Unrestricted File Upload Vulnerability
SAP · NetWeaver
Ransomware: Known
CVE-2025-1976
Added Apr 28, 2025
Broadcom Brocade Fabric OS Code Injection Vulnerability
Broadcom · Brocade Fabric OS
Ransomware: Unknown
CVE-2025-3928
Added Apr 28, 2025
Commvault Web Server Unspecified Vulnerability
Commvault · Web Server
Ransomware: Unknown
CVE-2025-42599
Added Apr 28, 2025
Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability
Qualitia · Active! Mail
Ransomware: Unknown
CVE-2025-24054
Added Apr 17, 2025
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-31200
Added Apr 17, 2025
Apple Multiple Products Memory Corruption Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2025-31201
Added Apr 17, 2025
Apple Multiple Products Arbitrary Read and Write Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2021-20035
Added Apr 16, 2025
SonicWall SMA100 Appliances OS Command Injection Vulnerability
SonicWall · SMA100 Appliances
Ransomware: Unknown
CVE-2024-53150
Added Apr 9, 2025
Linux Kernel Out-of-Bounds Read Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2024-53197
Added Apr 9, 2025
Linux Kernel Out-of-Bounds Access Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2025-29824
Added Apr 8, 2025
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Microsoft · Windows
Ransomware: Known
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.