CISA Known Exploited Vulnerabilities Catalog

ronjor · Jul 30, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 30 Jul 2024

Release Date July 30, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-37085 VMware ESXi Authentication Bypass Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Aug 5, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 05 Aug 2024

Release Date August 05, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Aug 7, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog Release Date 07 Aug 2024

August 07, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-36971 Android Kernel Remote Code Execution Vulnerability
CVE-2024-32113 Apache OFBiz Path Traversal Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Aug 13, 2024

CISA Adds Six Known Exploited Vulnerabilities to Catalog 13 Aug 2024

Release Date August 13, 2024
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation
Click to expand...

CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability
CVE-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability
CVE-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Click to expand...

CVE-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
CVE-2024-38106 Microsoft Windows Kernel Privilege Escalation Vulnerability
CVE-2024-38107 Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Aug 15, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 15 Aug 2024

Release Date August 15, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-28986 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Aug 19, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 19 Aug 2024

Release Date August 19, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-23897 Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Aug 21, 2024

CISA Adds Four Known Exploited Vulnerabilities to Catalog 21 Aug 2024

Release Date August 21, 2024
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2021-33044 Dahua IP Camera Authentication Bypass Vulnerability
CVE-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability
CVE-2022-0185 Linux Kernel Heap-Based Buffer Overflow
CVE-2021-31196 Microsoft Exchange Server Information Disclosure Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Aug 24, 2024

CISA Adds One Known Exploited Vulnerability to Catalog for Versa Networks Director 23 Aug 2024

Release Date August 23, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-39717 Versa Director Dangerous File Type Upload Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Aug 26, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 26 Aug 2024

Release Date August 26, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-7971Google Chromium V8 Type Confusion Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Aug 27, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 27 Aug 2024

Release Date August 27, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-38856 Apache OFBiz Incorrect Authorization Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Aug 28, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 28 Aug 2025

Release Date August 28, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-7965Google Chromium V8 Inappropriate Implementation Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Sep 3, 2024

CISA Adds Three Known Exploited Vulnerabilities to Catalog 03 Sep 2024

Release Date September 03, 2024
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2021-20123 Draytek VigorConnect Path Traversal Vulnerability
CVE-2021-20124 Draytek VigorConnect Path Traversal Vulnerability
CVE-2024-7262 Kingsoft WPS Office Path Traversal Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Sep 9, 2024

CISA Adds Three Known Exploited Vulnerabilities to Catalog 09 Sep 2024

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2016-3714 ImageMagick Improper Input Validation Vulnerability
CVE-2017-1000253 Linux Kernel PIE Stack Buffer Corruption Vulnerability
CVE-2024-40766 SonicWall SonicOS Improper Access Control Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Sep 10, 2024

CISA Adds Four Known Exploited Vulnerabilities to Catalog 10 Sep 2024

Release Date September 10, 2024
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-38226 Microsoft Publisher Security Feature Bypass Vulnerability
CVE-2024-43491 Microsoft Windows Update Remote Code Execution Vulnerability
CVE-2024-38014 Microsoft Windows Installer Privilege Escalation Vulnerability
CVE-2024-38217 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Sep 13, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 13 Sep 2024

Release Date September 13, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Sep 16, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 16 Sep 2024

Release Date September 16, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-43461Microsoft Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-6670 Progress WhatsUp Gold SQL Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Sep 17, 2024

CISA Adds Four Known Exploited Vulnerabilities to Catalog 17 Sep 2024

Release Date September 17, 2024
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2014-0497 Adobe Flash Player Integer Underflow Vulnerability
CVE-2013-0643 Adobe Flash Player Incorrect Default Permissions Vulnerability
CVE-2013-0648 Adobe Flash Player Code Execution Vulnerability
CVE-2014-0502 Adobe Flash Player Double Free Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Sep 18, 2024

CISA Adds Five Known Exploited Vulnerabilities to Catalog 18 Sep 2024

Release Date
September 18, 2024
CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-27348 Apache HugeGraph-Server Improper Access Control Vulnerability
CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
CVE-2019-1069 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
CVE-2022-21445 Oracle JDeveloper Remote Code Execution Vulnerability
CVE-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Sep 19, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 19 Sep 2024

Release Date September 19, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Sep 24, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 24 Sep 2024

Release Date September 24, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Sep 30, 2024

CISA Adds Four Known Exploited Vulnerabilities to Catalog 30 Sep 2024

Release Date September 30, 2024
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-25280 D-Link DIR-820 Router OS Command Injection Vulnerability
CVE-2020-15415 DrayTek Multiple Vigor Routers OS Command Injection Vulnerability
CVE-2021-4043 Motion Spell GPAC Null Pointer Dereference Vulnerability
CVE-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Oct 2, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 02 Oct 2024

Release Date October 02, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Oct 3, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 03 Oct 2023
Release Date October 03, 2024

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-45519 Synacor Zimbra Collaboration Command Execution Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise
Click to expand...

ronjor · Oct 8, 2024

CISA Adds Three Known Exploited Vulnerabilities to Catalog 08 Oct 2024

Release Date October 08, 2024
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability
CVE-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability
CVE-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Oct 9, 2024

CISA Adds Three Known Exploited Vulnerabilities to Catalog 09 Oct 2024

Release Date October 09, 2024
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-23113 Fortinet Multiple Products Format String Vulnerability
CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

Log in or Sign up

CISA Known Exploited Vulnerabilities Catalog

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

CISA Known Exploited Vulnerabilities Catalog

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches