CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 541–600 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability CRITICAL9.8	Cleo Multiple Products Unrestricted File Upload Vulnerability Cleo Multiple Products	CRITICAL 9.8	98.6%	13 Dec 2024	Clop
CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability HIGH7.8	Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft Windows	HIGH 7.8	26.2%	10 Dec 2024	—
CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability CRITICAL10	CyberPanel Incorrect Default Permissions Vulnerability CyberPersons CyberPanel	CRITICAL 10	94.7%	4 Dec 2024	CISA: known use
CVE-2024-11667 Zyxel Multiple Firewalls Path Traversal Vulnerability HIGH7.5	Zyxel Multiple Firewalls Path Traversal Vulnerability Zyxel Multiple Firewalls	HIGH 7.5	3%	3 Dec 2024	CISA: known use
CVE-2024-11680 ProjectSend Improper Authentication Vulnerability CRITICAL9.8	ProjectSend Improper Authentication Vulnerability ProjectSend ProjectSend	CRITICAL 9.8	91.8%	3 Dec 2024	—
CVE-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability HIGH7.5	North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability North Grid Proself	HIGH 7.5	4.8%	3 Dec 2024	—
CVE-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability CRITICAL9.8	Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability Array Networks AG/vxAG ArrayOS	CRITICAL 9.8	68.1%	25 Nov 2024	CISA: known use
CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability HIGH7.5	Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability Oracle Agile Product Lifecycle Management (PLM)	HIGH 7.5	1.7%	21 Nov 2024	—
CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability MEDIUM6.3	Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability Apple Multiple Products	MEDIUM 6.3	21.9%	21 Nov 2024	—
CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability HIGH8.8	Apple Multiple Products Code Execution Vulnerability Apple Multiple Products	HIGH 8.8	9.9%	21 Nov 2024	—
CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability HIGH7.5	VMware vCenter Server Privilege Escalation Vulnerability VMware vCenter Server	HIGH 7.5	17.4%	20 Nov 2024	—
CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability CRITICAL9.8	VMware vCenter Server Heap-Based Buffer Overflow Vulnerability VMware vCenter Server	CRITICAL 9.8	54.6%	20 Nov 2024	—
CVE-2024-9474 Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability HIGH7.2	Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability Palo Alto Networks PAN-OS	HIGH 7.2	93.8%	18 Nov 2024	CISA: known use
CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability CRITICAL9.8	Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability Palo Alto Networks PAN-OS	CRITICAL 9.8	99.8%	18 Nov 2024	CISA: known use
CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability CRITICAL10	Progress Kemp LoadMaster OS Command Injection Vulnerability Progress Kemp LoadMaster	CRITICAL 10	95.4%	18 Nov 2024	—
CVE-2024-9465 Palo Alto Networks Expedition SQL Injection Vulnerability CRITICAL9.1	Palo Alto Networks Expedition SQL Injection Vulnerability Palo Alto Networks Expedition	CRITICAL 9.1	99.6%	14 Nov 2024	—
CVE-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability HIGH7.5	Palo Alto Networks Expedition OS Command Injection Vulnerability Palo Alto Networks Expedition	HIGH 7.5	98.5%	14 Nov 2024	—
CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability MEDIUM5.3	Atlassian Jira Server and Data Center Path Traversal Vulnerability Atlassian Jira Server and Data Center	MEDIUM 5.3	100%	12 Nov 2024	—
CVE-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability MEDIUM6.1	Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability Cisco Adaptive Security Appliance (ASA)	MEDIUM 6.1	22.6%	12 Nov 2024	—
CVE-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability CRITICAL10	Metabase GeoJSON API Local File Inclusion Vulnerability Metabase Metabase	CRITICAL 10	97.2%	12 Nov 2024	—
CVE-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability MEDIUM6.5	Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability Microsoft Windows	MEDIUM 6.5	84.3%	12 Nov 2024	—
CVE-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability HIGH8.8	Microsoft Windows Task Scheduler Privilege Escalation Vulnerability Microsoft Windows	HIGH 8.8	14.2%	12 Nov 2024	CISA: known use
CVE-2019-16278 Nostromo nhttpd Directory Traversal Vulnerability CRITICAL9.8	Nostromo nhttpd Directory Traversal Vulnerability Nostromo nhttpd	CRITICAL 9.8	99%	7 Nov 2024	—
CVE-2024-51567 CyberPanel Incorrect Default Permissions Vulnerability CRITICAL10	CyberPanel Incorrect Default Permissions Vulnerability CyberPersons CyberPanel	CRITICAL 10	84.4%	7 Nov 2024	CISA: known use
CVE-2024-43093 Android Framework Privilege Escalation Vulnerability HIGH7.3	Android Framework Privilege Escalation Vulnerability Android Framework	HIGH 7.3	0.7%	7 Nov 2024	—
CVE-2024-5910 Palo Alto Networks Expedition Missing Authentication Vulnerability CRITICAL9.8	Palo Alto Networks Expedition Missing Authentication Vulnerability Palo Alto Networks Expedition	CRITICAL 9.8	91.7%	7 Nov 2024	—
CVE-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability CRITICAL9.1	PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability PTZOptics PT30X-SDI/NDI Cameras	CRITICAL 9.1	58.8%	4 Nov 2024	—
CVE-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability HIGH7.2	PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability PTZOptics PT30X-SDI/NDI Cameras	HIGH 7.2	79.8%	4 Nov 2024	—
CVE-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability MEDIUM6.1	RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube Webmail	MEDIUM 6.1	74%	24 Oct 2024	—
CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability MEDIUM5.8	Cisco ASA and FTD Denial-of-Service Vulnerability Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)	MEDIUM 5.8	15.9%	24 Oct 2024	—
CVE-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability CRITICAL9.8	Fortinet FortiManager Missing Authentication Vulnerability Fortinet FortiManager	CRITICAL 9.8	94.8%	23 Oct 2024	—
CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability HIGH7.2	Microsoft SharePoint Deserialization Vulnerability Microsoft SharePoint	HIGH 7.2	50.9%	22 Oct 2024	CISA: known use
CVE-2024-9537 ScienceLogic SL1 Unspecified Vulnerability CRITICAL9.8	ScienceLogic SL1 Unspecified Vulnerability ScienceLogic SL1	CRITICAL 9.8	3.8%	21 Oct 2024	—
CVE-2024-40711 Veeam Backup and Replication Deserialization Vulnerability CRITICAL9.8	Veeam Backup and Replication Deserialization Vulnerability Veeam Backup & Replication	CRITICAL 9.8	90.4%	17 Oct 2024	Akira
CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability CRITICAL9.1	SolarWinds Web Help Desk Hardcoded Credential Vulnerability SolarWinds Web Help Desk	CRITICAL 9.1	93.3%	15 Oct 2024	—
CVE-2024-9680 Mozilla Firefox Use-After-Free Vulnerability CRITICAL9.8	Mozilla Firefox Use-After-Free Vulnerability Mozilla Firefox	CRITICAL 9.8	23.2%	15 Oct 2024	CISA: known use
CVE-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerability HIGH7	Microsoft Windows Kernel TOCTOU Race Condition Vulnerability Microsoft Windows	HIGH 7	68.2%	15 Oct 2024	CISA: known use
CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability HIGH7.2	Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability Ivanti Cloud Services Appliance (CSA)	HIGH 7.2	58.3%	9 Oct 2024	—
CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability MEDIUM6.5	Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability Ivanti Cloud Services Appliance (CSA)	MEDIUM 6.5	44.3%	9 Oct 2024	—
CVE-2024-23113 Fortinet Multiple Products Format String Vulnerability CRITICAL9.8	Fortinet Multiple Products Format String Vulnerability Fortinet Multiple Products	CRITICAL 9.8	61.7%	9 Oct 2024	—
CVE-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability MEDIUM6.5	Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft Windows	MEDIUM 6.5	46.1%	8 Oct 2024	—
CVE-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability HIGH7.8	Microsoft Windows Management Console Remote Code Execution Vulnerability Microsoft Windows	HIGH 7.8	66.7%	8 Oct 2024	—
CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability HIGH7.8	Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm Multiple Chipsets	HIGH 7.8	0.7%	8 Oct 2024	—
CVE-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability CRITICAL10	Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability Synacor Zimbra Collaboration Suite (ZCS)	CRITICAL 10	99.9%	3 Oct 2024	—
CVE-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability HIGH8.8	Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability Ivanti Endpoint Manager (EPM)	HIGH 8.8	99.9%	2 Oct 2024	—
CVE-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability CRITICAL9.8	SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability SAP Commerce Cloud	CRITICAL 9.8	7.5%	30 Sep 2024	—
CVE-2020-15415 DrayTek Multiple Vigor Routers OS Command Injection Vulnerability CRITICAL9.8	DrayTek Multiple Vigor Routers OS Command Injection Vulnerability DrayTek Multiple Vigor Routers	CRITICAL 9.8	84.5%	30 Sep 2024	—
CVE-2023-25280 D-Link DIR-820 Router OS Command Injection Vulnerability CRITICAL9.8	D-Link DIR-820 Router OS Command Injection Vulnerability D-Link DIR-820 Router	CRITICAL 9.8	97.9%	30 Sep 2024	—
CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability CRITICAL9.8	Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability Ivanti Virtual Traffic Manager	CRITICAL 9.8	100%	24 Sep 2024	—
CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability CRITICAL9.4	Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability Ivanti Cloud Services Appliance (CSA)	CRITICAL 9.4	98.6%	19 Sep 2024	—
CVE-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability CRITICAL9.8	Oracle WebLogic Server Remote Code Execution Vulnerability Oracle WebLogic Server	CRITICAL 9.8	94.5%	18 Sep 2024	—
CVE-2022-21445 Oracle ADF Faces Deserialization of Untrusted Data Vulnerability CRITICAL9.8	Oracle ADF Faces Deserialization of Untrusted Data Vulnerability Oracle ADF Faces	CRITICAL 9.8	62.5%	18 Sep 2024	—
CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability HIGH8.8	Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability Microsoft SQL Server	HIGH 8.8	99%	18 Sep 2024	CISA: known use
CVE-2024-27348 Apache HugeGraph-Server Improper Access Control Vulnerability CRITICAL9.8	Apache HugeGraph-Server Improper Access Control Vulnerability Apache HugeGraph-Server	CRITICAL 9.8	99.2%	18 Sep 2024	—
CVE-2014-0502 Adobe Flash Player Double Free Vulnerablity HIGH8.8	Adobe Flash Player Double Free Vulnerablity Adobe Flash Player	HIGH 8.8	24.8%	17 Sep 2024	—
CVE-2013-0648 Adobe Flash Player Code Execution Vulnerability HIGH8.8	Adobe Flash Player Code Execution Vulnerability Adobe Flash Player	HIGH 8.8	11.1%	17 Sep 2024	—
CVE-2013-0643 Adobe Flash Player Incorrect Default Permissions Vulnerability HIGH8.8	Adobe Flash Player Incorrect Default Permissions Vulnerability Adobe Flash Player	HIGH 8.8	10.5%	17 Sep 2024	—
CVE-2014-0497 Adobe Flash Player Integer Underflow Vulnerablity CRITICAL9.8	Adobe Flash Player Integer Underflow Vulnerablity Adobe Flash Player	CRITICAL 9.8	99.9%	17 Sep 2024	—
CVE-2024-6670 Progress WhatsUp Gold SQL Injection Vulnerability CRITICAL9.8	Progress WhatsUp Gold SQL Injection Vulnerability Progress WhatsUp Gold	CRITICAL 9.8	92.9%	16 Sep 2024	CISA: known use
CVE-2024-43461 Microsoft Windows MSHTML Platform Spoofing Vulnerability HIGH8.8	Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft Windows	HIGH 8.8	54.5%	16 Sep 2024	—

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.