CISA Known Exploited Vulnerabilities Catalog

ronjor · Feb 29, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 29 Feb 2024

Release Date February 29, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation
Click to expand...

.CVE-2023-29360 Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Mar 4, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 04 Mar 2024

Release Date March 04, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

NOTICE
NIST is currently working to establish a consortium to address challenges in the NVD program and develop improved tools and methods. You will temporarily see delays in analysis efforts during this transition. We apologize for the inconvenience and ask for your patience as we work to improve the NVD program.
Click to expand...

ronjor · Mar 5, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 05 Mar 2024

Release Date March 05, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-21237 Android Pixel Information Disclosure Vulnerability
CVE-2021-36380 Sunhillo SureLine OS Command Injection Vulnerablity
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Mar 6, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 06 Mar 2024

Release Date March 06, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-23225 Apple iOS and iPadOS Memory Corruption Vulnerability
CVE-2024-23296 Apple iOS and iPadOS Memory Corruption Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Mar 7, 2024

CISA Adds One Known Exploited JetBrains Vulnerability, CVE-2024-27198, to Catalog 07 Mar 2024

Release Date March 07, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-27198 JetBrains TeamCity Authentication Bypass Vulnerability
Click to expand...

CISA urges organizations to review the following JetBrains blog post and apply the necessary updates: Additional Critical Security Issues Affecting TeamCity On-Premises (CVE-2024-27198 and CVE-2024-27199) – Update to 2023.11.4 Now
These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Mar 25, 2024

CISA Adds Three Known Exploited Vulnerabilities to Catalog 25 Mar 2024

Release Date March 25, 2024
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability
CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
CVE-2019-7256 Nice Linear eMerge E3-Series OS Command Injection Vulnerability

ronjor · Mar 26, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 26 Mar 2024

Release Date March 26, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
CVE-2023-24955 Microsoft SharePoint Server Code Injection Vulnerability
These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 4, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 04 Apr 2024

Release Date April 04, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-29745 Android Pixel Information Disclosure Vulnerability
CVE-2024-29748 Android Pixel Privilege Escalation Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 11, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 11 Apr 2024

Release Date April 11, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-3272 D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
CVE-2024-3273 D-Link Multiple NAS Devices Command Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 12, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 12 Apr 2024

Release Date April 12, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-3400 Palo Alto Networks PAN-OS Command Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 23, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 23 Apr 2024

Release Date April 23, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 24, 2024

CISA Adds Three Known Exploited Vulnerabilities to Catalog 24 Apr 2024

Release Date April 24, 2024
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-20353 Cisco ASA and FTD Denial of Service Vulnerability
CVE-2024-20359 Cisco ASA and FTD Privilege Escalation Vulnerability
CVE-2024-4040 CrushFTP VFS Sandbox Escape Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 30, 2024 at 4:23 PM

CISA Adds One Known Exploited Vulnerability to Catalog Release Date 30 Apr 2024

April 30, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-29988 Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 1, 2024 at 1:03 PM

CISA Adds One Known Exploited Vulnerability to Catalog 01 May 2024

Release Date May 01, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation
Click to expand...

.

CVE-2023-7028 GitLab Community and Enterprise Editions Improper Access Control Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

Log in or Sign up

CISA Known Exploited Vulnerabilities Catalog

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

CISA Known Exploited Vulnerabilities Catalog

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches