Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2023-45727 | North Grid Proself Enterprise/Standard, Gateway, and Mail Sanitize contain an improper restriction of XML External Entity (XXE) reference… | North Grid / Proself | Dec 3, 2024 | — | View → |
| CVE-2024-11667 | Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download… | Zyxel / Multiple Firewalls | Dec 3, 2024 | Ransomware | View → |
| CVE-2024-11680 | ProjectSend contains an improper authentication vulnerability that allows a remote, unauthenticated attacker to enable unauthorized… | ProjectSend / ProjectSend | Dec 3, 2024 | — | View → |
| CVE-2023-28461 | Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read… | Array Networks / AG/vxAG ArrayOS | Nov 25, 2024 | Ransomware | View → |
| CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of… | Oracle / Agile Product Lifecycle Management (PLM) | Nov 21, 2024 | — | View → |
| CVE-2024-44308 | Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may… | Apple / Multiple Products | Nov 21, 2024 | — | View → |
| CVE-2024-44309 | Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may… | Apple / Multiple Products | Nov 21, 2024 | — | View → |
| CVE-2024-38812 | VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability… | VMware / vCenter Server | Nov 20, 2024 | — | View → |
| CVE-2024-38813 | VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network… | VMware / vCenter Server | Nov 20, 2024 | — | View → |
| CVE-2024-0012 | Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS… | Palo Alto Networks / PAN-OS | Nov 18, 2024 | Ransomware | View → |
| CVE-2024-1212 | Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the… | Progress / Kemp LoadMaster | Nov 18, 2024 | — | View → |
| CVE-2024-9474 | Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based… | Palo Alto Networks / PAN-OS | Nov 18, 2024 | Ransomware | View → |
| CVE-2024-9463 | Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS… | Palo Alto Networks / Expedition | Nov 14, 2024 | — | View → |
| CVE-2024-9465 | Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to reveal Expedition database… | Palo Alto Networks / Expedition | Nov 14, 2024 | — | View → |
| CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability… | Cisco / Adaptive Security Appliance (ASA) | Nov 12, 2024 | — | View → |
| CVE-2021-26086 | Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the… | Atlassian / Jira Server and Data Center | Nov 12, 2024 | — | View → |
| CVE-2021-41277 | Metabase contains a local file inclusion vulnerability in the custom map support in the API to read GeoJSON formatted data. | Metabase / Metabase | Nov 12, 2024 | — | View → |
| CVE-2024-43451 | Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a… | Microsoft / Windows | Nov 12, 2024 | — | View → |
| CVE-2024-49039 | Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to… | Microsoft / Windows | Nov 12, 2024 | Ransomware | View → |
| CVE-2019-16278 | Nostromo nhttpd contains a directory traversal vulnerability in the http_verify() function in a non-chrooted nhttpd server allowing for… | Nostromo / nhttpd | Nov 7, 2024 | — | View → |