CISA Known Exploited Vulnerabilities Catalog

ronjor · Apr 1, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 01 Apr 2025

04/01/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-24813 Apache Tomcat Path Equivalence Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 4, 2025

CISA Adds One Vulnerability to the KEV Catalog 04 Apr 2025

04/04/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-22457 Ivanti Connect Secure, Policy Secure and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 7, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 07 Apr 2025

04/07/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-31161 CrushFTP Authentication Bypass Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 8, 2025

CISA Adds Two Known Exploited Vulnerabilities to Catalog 08 Apr 2025

04/08/2025
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-30406 Gladinet CentreStack Use of Hard-coded Cryptographic Key Vulnerability
CVE-2025-29824 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 9, 2025

CISA Adds Two Known Exploited Vulnerabilities to Catalog 09 Apr 2025

Release Date April 09, 2025
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-53197 Linux Kernel Out-of-Bounds Access Vulnerability
CVE-2024-53150 Linux Kernel Out-of-Bounds Read Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 16, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 16 Apr 2025

Release Date April 16, 2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2021-20035 SonicWall SMA100 Appliances OS Command Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 17, 2025

CISA Adds Three Known Exploited Vulnerabilities to Catalog 17 Apr 2025

Release Date April 17, 2025
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-31200 Apple Multiple Products Memory Corruption Vulnerability
CVE-2025-31201 Apple Multiple Products Arbitrary Read and Write Vulnerability
CVE-2025-24054 Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 28, 2025

CISA Adds Three Known Exploited Vulnerabilities to Catalog 28 Apr 2025

Release Date April 28, 2025
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-1976 Broadcom Brocade Fabric OS Code Injection Vulnerability
CVE-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability
CVE-2025-3928 Commvault Web Server Unspecified Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 29, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 29 Apr 2025

04/29/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-31324 SAP NetWeaver Unrestricted File Upload Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 1, 2025

CISA Adds Two Known Exploited Vulnerabilities to Catalog 01 May 2025

05/01/2025
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-38475 Apache HTTP Server Improper Escaping of Output Vulnerability
CVE-2023-44221 SonicWall SMA100 Appliances OS Command Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 2, 2025

CISA Adds Two Known Exploited Vulnerabilities to Catalog 02 May 2025

05/02/2025
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-34028 Commvault Command Center Path Traversal Vulnerability
CVE-2024-58136 Yiiframework Yii Improper Protection of Alternate Path Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 5, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 05 May 2025

Release Date May 05, 2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-3248 Langflow Missing Authentication Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 6, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 06 May 2025

Release Date May 06, 2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-27363 FreeType Out-of-Bounds Write Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 7, 2025

CISA Adds Two Known Exploited Vulnerabilities to Catalog 07 May 2025

Release Date May 07, 2025
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-6047 GeoVision Devices OS Command Injection Vulnerability
CVE-2024-11120 GeoVision Devices OS Command Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 12, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 12 May 2025

05/12/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-47729 TeleMessage TM SGNL Hidden Functionality Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 13, 2025

CISA Adds Five Known Exploited Vulnerabilities to Catalog 13 May 2025

05/13/2025
CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-30400 Microsoft Windows DWM Core Library Use-After-Free Vulnerability
CVE-2025-32701 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
CVE-2025-32706 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Click to expand...

CVE-2025-30397 Microsoft Windows Scripting Engine Type Confusion Vulnerability
CVE-2025-32709 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 14, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 14 May 2025

05/14/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-32756 Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 15, 2025

CISA Adds Three Known Exploited Vulnerabilities to Catalog 15 May 2025

Release Date May 15, 2025
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-12987 DrayTek Vigor Routers OS Command Injection Vulnerability
CVE-2025-4664 Google Chromium Loader Insufficient Policy Enforcement Vulnerability
CVE-2025-42999 SAP NetWeaver Deserialization Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 19, 2025

CISA Adds Six Known Exploited Vulnerabilities to Catalog 19 May 2025

Release Date May 19, 2025
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-4427 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
CVE-2025-4428 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
CVE-2024-11182 MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability
Click to expand...

CVE-2025-27920 Srimax Output Messenger Directory Traversal Vulnerability
CVE-2024-27443 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVE-2023-38950 ZKTeco BioTime Path Traversal Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 22, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 22 May 2022

Release Date May 22, 2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-4632 Samsung MagicINFO 9 Server Path Traversal Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jun 2, 2025 at 2:39 PM

CISA Adds Five Known Exploited Vulnerabilities to Catalog 02 June 2025

Release Date June 02, 2025
CISA added five new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2021-32030 ASUS Routers Improper Authentication Vulnerability
CVE-2023-39780 ASUS RT-AX55 Routers OS Command Injection Vulnerability
CVE-2024-56145 Craft CMS Code Injection Vulnerability
CVE-2025-3935 ConnectWise ScreenConnect Improper Authentication Vulnerability
CVE-2025-35939 Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jun 3, 2025 at 2:41 PM

CISA Adds Three Known Exploited Vulnerabilities to Catalog 03 June 2025

06/03/2025
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-21479 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
CVE-2025-21480 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
CVE-2025-27038 Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jun 5, 2025 at 3:46 PM

CISA Adds One Known Exploited Vulnerability to Catalog 05 June 2025

06/05/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-5419 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
Click to expand...

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Click to expand...

Log in or Sign up

CISA Known Exploited Vulnerabilities Catalog

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

CISA Known Exploited Vulnerabilities Catalog

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches