CVE-2025-30406
Added Apr 8, 2025
Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability
Gladinet · CentreStack
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 9 of 35
CVE-2025-31161
Added Apr 7, 2025
CrushFTP Authentication Bypass Vulnerability
CrushFTP · CrushFTP
Ransomware: Known
CVE-2025-22457
Added Apr 4, 2025
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Ivanti · Connect Secure, Policy Secure, and ZTA Gateways
Ransomware: Known
CVE-2025-24813
Added Apr 1, 2025
Apache Tomcat Path Equivalence Vulnerability
Apache · Tomcat
Ransomware: Unknown
CVE-2024-20439
Added Mar 31, 2025
Cisco Smart Licensing Utility Static Credential Vulnerability
Cisco · Smart Licensing Utility
Ransomware: Unknown
CVE-2025-2783
Added Mar 27, 2025
Google Chromium Mojo Sandbox Escape Vulnerability
Google · Chromium Mojo
Ransomware: Unknown
CVE-2019-9874
Added Mar 26, 2025
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
Sitecore · CMS and Experience Platform (XP)
Ransomware: Unknown
CVE-2019-9875
Added Mar 26, 2025
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
Sitecore · CMS and Experience Platform (XP)
Ransomware: Unknown
CVE-2025-30154
Added Mar 24, 2025
reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability
reviewdog · action-setup GitHub Action
Ransomware: Unknown
CVE-2017-12637
Added Mar 19, 2025
SAP NetWeaver Directory Traversal Vulnerability
SAP · NetWeaver
Ransomware: Unknown
CVE-2024-48248
Added Mar 19, 2025
NAKIVO Backup and Replication Absolute Path Traversal Vulnerability
NAKIVO · Backup and Replication
Ransomware: Unknown
CVE-2025-1316
Added Mar 19, 2025
Edimax IC-7100 IP Camera OS Command Injection Vulnerability
Edimax · IC-7100 IP Camera
Ransomware: Unknown
CVE-2025-24472
Added Mar 18, 2025
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Fortinet · FortiOS and FortiProxy
Ransomware: Known
CVE-2025-30066
Added Mar 18, 2025
tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
tj-actions · changed-files GitHub Action
Ransomware: Unknown
CVE-2025-21590
Added Mar 13, 2025
Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
Juniper · Junos OS
Ransomware: Unknown
CVE-2025-24201
Added Mar 13, 2025
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2025-24983
Added Mar 11, 2025
Microsoft Windows Win32k Use-After-Free Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-24984
Added Mar 11, 2025
Microsoft Windows NTFS Information Disclosure Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-24985
Added Mar 11, 2025
Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-24991
Added Mar 11, 2025
Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-24993
Added Mar 11, 2025
Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-26633
Added Mar 11, 2025
Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2024-13159
Added Mar 10, 2025
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
Ivanti · Endpoint Manager (EPM)
Ransomware: Unknown
CVE-2024-13160
Added Mar 10, 2025
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
Ivanti · Endpoint Manager (EPM)
Ransomware: Unknown
CVE-2024-13161
Added Mar 10, 2025
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
Ivanti · Endpoint Manager (EPM)
Ransomware: Unknown
CVE-2024-57968
Added Mar 10, 2025
Advantive VeraCore Unrestricted File Upload Vulnerability
Advantive · VeraCore
Ransomware: Unknown
CVE-2025-25181
Added Mar 10, 2025
Advantive VeraCore SQL Injection Vulnerability
Advantive · VeraCore
Ransomware: Unknown
CVE-2024-50302
Added Mar 4, 2025
Linux Kernel Use of Uninitialized Resource Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2025-22224
Added Mar 4, 2025
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
VMware · ESXi and Workstation
Ransomware: Unknown
CVE-2025-22225
Added Mar 4, 2025
VMware ESXi Arbitrary Write Vulnerability
VMware · ESXi
Ransomware: Known
CVE-2025-22226
Added Mar 4, 2025
VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
VMware · ESXi, Workstation, and Fusion
Ransomware: Unknown
CVE-2018-8639
Added Mar 3, 2025
Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2022-43769
Added Mar 3, 2025
Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
Hitachi Vantara · Pentaho Business Analytics (BA) Server
Ransomware: Unknown
CVE-2022-43939
Added Mar 3, 2025
Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
Hitachi Vantara · Pentaho Business Analytics (BA) Server
Ransomware: Unknown
CVE-2023-20118
Added Mar 3, 2025
Cisco Small Business RV Series Routers Command Injection Vulnerability
Cisco · Small Business RV Series Routers
Ransomware: Unknown
CVE-2024-4885
Added Mar 3, 2025
Progress WhatsUp Gold Path Traversal Vulnerability
Progress · WhatsUp Gold
Ransomware: Unknown
CVE-2023-34192
Added Feb 25, 2025
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Ransomware: Unknown
CVE-2024-49035
Added Feb 25, 2025
Microsoft Partner Center Improper Access Control Vulnerability
Microsoft · Partner Center
Ransomware: Unknown
CVE-2017-3066
Added Feb 24, 2025
Adobe ColdFusion Deserialization Vulnerability
Adobe · ColdFusion
Ransomware: Unknown
CVE-2024-20953
Added Feb 24, 2025
Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
Oracle · Agile Product Lifecycle Management (PLM)
Ransomware: Unknown
CVE-2025-24989
Added Feb 21, 2025
Microsoft Power Pages Improper Access Control Vulnerability
Microsoft · Power Pages
Ransomware: Unknown
CVE-2025-0111
Added Feb 20, 2025
Palo Alto Networks PAN-OS File Read Vulnerability
Palo Alto Networks · PAN-OS
Ransomware: Unknown
CVE-2025-23209
Added Feb 20, 2025
Craft CMS Code Injection Vulnerability
Craft CMS · Craft CMS
Ransomware: Unknown
CVE-2024-53704
Added Feb 18, 2025
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
SonicWall · SonicOS
Ransomware: Known
CVE-2025-0108
Added Feb 18, 2025
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Palo Alto Networks · PAN-OS
Ransomware: Unknown
CVE-2024-57727
Added Feb 13, 2025
SimpleHelp Path Traversal Vulnerability
SimpleHelp · SimpleHelp
Ransomware: Known
CVE-2024-41710
Added Feb 12, 2025
Mitel SIP Phones Argument Injection Vulnerability
Mitel · SIP Phones
Ransomware: Unknown
CVE-2025-24200
Added Feb 12, 2025
Apple iOS and iPadOS Incorrect Authorization Vulnerability
Apple · iOS and iPadOS
Ransomware: Unknown
CVE-2024-40890
Added Feb 11, 2025
Zyxel DSL CPE OS Command Injection Vulnerability
Zyxel · DSL CPE Devices
Ransomware: Unknown
CVE-2024-40891
Added Feb 11, 2025
Zyxel DSL CPE OS Command Injection Vulnerability
Zyxel · DSL CPE Devices
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.