Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2024-45519 | Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an… | Synacor / Zimbra Collaboration Suite (ZCS) | Oct 3, 2024 | — | View → |
| CVE-2024-29824 | Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the… | Ivanti / Endpoint Manager (EPM) | Oct 2, 2024 | — | View → |
| CVE-2019-0344 | SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and… | SAP / Commerce Cloud | Sep 30, 2024 | — | View → |
| CVE-2020-15415 | DrayTek Vigor3900, Vigor2960, and Vigor300B devices contain an OS command injection vulnerability in cgi-bin/mainfunction.cgi/cvmcfgupload… | DrayTek / Multiple Vigor Routers | Sep 30, 2024 | — | View → |
| CVE-2023-25280 | D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges… | D-Link / DIR-820 Router | Sep 30, 2024 | — | View → |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows a remote, unauthenticated attacker to create a… | Ivanti / Virtual Traffic Manager | Sep 24, 2024 | — | View → |
| CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) contains a path traversal vulnerability that could allow a remote, unauthenticated attacker to… | Ivanti / Cloud Services Appliance (CSA) | Sep 19, 2024 | — | View → |
| CVE-2020-0618 | Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated… | Microsoft / SQL Server | Sep 18, 2024 | Ransomware | View → |
| CVE-2020-14644 | Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers… | Oracle / WebLogic Server | Sep 18, 2024 | — | View → |
| CVE-2022-21445 | Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vulnerability leading… | Oracle / ADF Faces | Sep 18, 2024 | — | View → |
| CVE-2024-27348 | Apache HugeGraph-Server contains an improper access control vulnerability that could allow a remote attacker to execute arbitrary code. | Apache / HugeGraph-Server | Sep 18, 2024 | — | View → |
| CVE-2013-0643 | Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute… | Adobe / Flash Player | Sep 17, 2024 | — | View → |
| CVE-2013-0648 | Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker… | Adobe / Flash Player | Sep 17, 2024 | — | View → |
| CVE-2014-0497 | Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code. | Adobe / Flash Player | Sep 17, 2024 | — | View → |
| CVE-2014-0502 | Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code. | Adobe / Flash Player | Sep 17, 2024 | — | View → |
| CVE-2024-43461 | Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an… | Microsoft / Windows | Sep 16, 2024 | — | View → |
| CVE-2024-6670 | Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted… | Progress / WhatsUp Gold | Sep 16, 2024 | Ransomware | View → |
| CVE-2024-8190 | Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an… | Ivanti / Cloud Services Appliance | Sep 13, 2024 | — | View → |
| CVE-2024-38014 | Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges. | Microsoft / Windows | Sep 10, 2024 | — | View → |
| CVE-2024-38217 | Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an attacker to bypass… | Microsoft / Windows | Sep 10, 2024 | — | View → |