CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 601–660 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability HIGH7.2	Ivanti Cloud Services Appliance OS Command Injection Vulnerability Ivanti Cloud Services Appliance	HIGH 7.2	88.5%	13 Sep 2024	—
CVE-2024-38217 Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability MEDIUM5.4	Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability Microsoft Windows	MEDIUM 5.4	10%	10 Sep 2024	—
CVE-2024-38014 Microsoft Windows Installer Improper Privilege Management Vulnerability HIGH7.8	Microsoft Windows Installer Improper Privilege Management Vulnerability Microsoft Windows	HIGH 7.8	6.3%	10 Sep 2024	—
CVE-2024-38226 Microsoft Publisher Protection Mechanism Failure Vulnerability HIGH7.3	Microsoft Publisher Protection Mechanism Failure Vulnerability Microsoft Publisher	HIGH 7.3	2.7%	10 Sep 2024	—
CVE-2024-40766 SonicWall SonicOS Improper Access Control Vulnerability CRITICAL9.8	SonicWall SonicOS Improper Access Control Vulnerability SonicWall SonicOS	CRITICAL 9.8	18.4%	9 Sep 2024	Akira Dragonforce +1
CVE-2017-1000253 Linux Kernel PIE Stack Buffer Corruption Vulnerability HIGH7.8	Linux Kernel PIE Stack Buffer Corruption Vulnerability Linux Kernel	HIGH 7.8	10.7%	9 Sep 2024	CISA: known use
CVE-2016-3714 ImageMagick Improper Input Validation Vulnerability HIGH8.4	ImageMagick Improper Input Validation Vulnerability ImageMagick ImageMagick	HIGH 8.4	97.5%	9 Sep 2024	—
CVE-2024-7262 Kingsoft WPS Office Path Traversal Vulnerability HIGH7.8	Kingsoft WPS Office Path Traversal Vulnerability Kingsoft WPS Office	HIGH 7.8	3.1%	3 Sep 2024	—
CVE-2021-20124 Draytek VigorConnect Path Traversal Vulnerability HIGH7.5	Draytek VigorConnect Path Traversal Vulnerability DrayTek VigorConnect	HIGH 7.5	95.9%	3 Sep 2024	—
CVE-2021-20123 Draytek VigorConnect Path Traversal Vulnerability HIGH7.5	Draytek VigorConnect Path Traversal Vulnerability DrayTek VigorConnect	HIGH 7.5	89.7%	3 Sep 2024	—
CVE-2024-7965 Google Chromium V8 Inappropriate Implementation Vulnerability HIGH8.8	Google Chromium V8 Inappropriate Implementation Vulnerability Google Chromium V8	HIGH 8.8	18.5%	28 Aug 2024	—
CVE-2024-38856 Apache OFBiz Incorrect Authorization Vulnerability CRITICAL9.8	Apache OFBiz Incorrect Authorization Vulnerability Apache OFBiz	CRITICAL 9.8	99.4%	27 Aug 2024	—
CVE-2024-7971 Google Chromium V8 Type Confusion Vulnerability CRITICAL9.6	Google Chromium V8 Type Confusion Vulnerability Google Chromium V8	CRITICAL 9.6	21%	26 Aug 2024	—
CVE-2024-39717 Versa Director Dangerous File Type Upload Vulnerability HIGH7.2	Versa Director Dangerous File Type Upload Vulnerability Versa Director	HIGH 7.2	4%	23 Aug 2024	—
CVE-2021-31196 Microsoft Exchange Server Information Disclosure Vulnerability HIGH7.2	Microsoft Exchange Server Information Disclosure Vulnerability Microsoft Exchange Server	HIGH 7.2	54.1%	21 Aug 2024	—
CVE-2022-0185 Linux Kernel Heap-Based Buffer Overflow Vulnerability HIGH8.4	Linux Kernel Heap-Based Buffer Overflow Vulnerability Linux Kernel	HIGH 8.4	25.2%	21 Aug 2024	—
CVE-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability CRITICAL9.8	Dahua IP Camera Authentication Bypass Vulnerability Dahua IP Camera Firmware	CRITICAL 9.8	99.6%	21 Aug 2024	—
CVE-2021-33044 Dahua IP Camera Authentication Bypass Vulnerability CRITICAL9.8	Dahua IP Camera Authentication Bypass Vulnerability Dahua IP Camera Firmware	CRITICAL 9.8	100%	21 Aug 2024	—
CVE-2024-23897 Jenkins Command Line Interface (CLI) Path Traversal Vulnerability CRITICAL9.8	Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Jenkins Command Line Interface (CLI)	CRITICAL 9.8	100%	19 Aug 2024	CISA: known use
CVE-2024-28986 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CRITICAL9.8	SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds Web Help Desk	CRITICAL 9.8	84.6%	15 Aug 2024	—
CVE-2024-38107 Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	1.6%	13 Aug 2024	—
CVE-2024-38106 Microsoft Windows Kernel Privilege Escalation Vulnerability HIGH7	Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows	HIGH 7	6.3%	13 Aug 2024	—
CVE-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	28.7%	13 Aug 2024	—
CVE-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability MEDIUM6.5	Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft Windows	MEDIUM 6.5	13.6%	13 Aug 2024	—
CVE-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability HIGH7.5	Microsoft Windows Scripting Engine Memory Corruption Vulnerability Microsoft Windows	HIGH 7.5	41.4%	13 Aug 2024	Tengu
CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability HIGH8.8	Microsoft Project Remote Code Execution Vulnerability Microsoft Project	HIGH 8.8	8.2%	13 Aug 2024	—
CVE-2024-32113 Apache OFBiz Path Traversal Vulnerability CRITICAL9.8	Apache OFBiz Path Traversal Vulnerability Apache OFBiz	CRITICAL 9.8	99.9%	7 Aug 2024	—
CVE-2024-36971 Android Kernel Remote Code Execution Vulnerability HIGH7.8	Android Kernel Remote Code Execution Vulnerability Android Kernel	HIGH 7.8	2.7%	7 Aug 2024	—
CVE-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability HIGH8.8	Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability Microsoft Windows	HIGH 8.8	73%	5 Aug 2024	—
CVE-2024-37085 VMware ESXi Authentication Bypass Vulnerability MEDIUM6.8	VMware ESXi Authentication Bypass Vulnerability VMware ESXi	MEDIUM 6.8	26.8%	30 Jul 2024	Akira Blackbasta
CVE-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability CRITICAL9.8	Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability Acronis Cyber Infrastructure (ACI)	CRITICAL 9.8	53.5%	29 Jul 2024	—
CVE-2024-5217 ServiceNow Incomplete List of Disallowed Inputs Vulnerability CRITICAL9.8	ServiceNow Incomplete List of Disallowed Inputs Vulnerability ServiceNow Utah, Vancouver, and Washington DC Now Platform	CRITICAL 9.8	99.6%	29 Jul 2024	—
CVE-2024-4879 ServiceNow Improper Input Validation Vulnerability CRITICAL9.8	ServiceNow Improper Input Validation Vulnerability ServiceNow Utah, Vancouver, and Washington DC Now Platform	CRITICAL 9.8	100%	29 Jul 2024	—
CVE-2024-39891 Twilio Authy Information Disclosure Vulnerability MEDIUM5.3	Twilio Authy Information Disclosure Vulnerability Twilio Authy	MEDIUM 5.3	1.7%	23 Jul 2024	—
CVE-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability HIGH8.8	Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft Internet Explorer	HIGH 8.8	78.8%	23 Jul 2024	—
CVE-2022-22948 VMware vCenter Server Incorrect Default File Permissions Vulnerability MEDIUM6.5	VMware vCenter Server Incorrect Default File Permissions Vulnerability VMware vCenter Server	MEDIUM 6.5	13.3%	17 Jul 2024	—
CVE-2024-28995 SolarWinds Serv-U Path Traversal Vulnerability HIGH8.6	SolarWinds Serv-U Path Traversal Vulnerability SolarWinds Serv-U	HIGH 8.6	99.6%	17 Jul 2024	—
CVE-2024-34102 Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability CRITICAL9.8	Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability Adobe Commerce and Magento Open Source	CRITICAL 9.8	100%	17 Jul 2024	—
CVE-2024-36401 OSGeo GeoServer GeoTools Eval Injection Vulnerability CRITICAL9.8	OSGeo GeoServer GeoTools Eval Injection Vulnerability OSGeo GeoServer	CRITICAL 9.8	99.8%	15 Jul 2024	—
CVE-2024-23692 Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL9.8	Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Rejetto HTTP File Server	CRITICAL 9.8	99.5%	9 Jul 2024	CISA: known use
CVE-2024-38080 Microsoft Windows Hyper-V Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Hyper-V Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	7.1%	9 Jul 2024	—
CVE-2024-38112 Microsoft Windows MSHTML Platform Spoofing Vulnerability HIGH7.5	Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft Windows	HIGH 7.5	84.2%	9 Jul 2024	—
CVE-2024-20399 Cisco NX-OS Command Injection Vulnerability MEDIUM6	Cisco NX-OS Command Injection Vulnerability Cisco NX-OS	MEDIUM 6	4.3%	2 Jul 2024	—
CVE-2020-13965 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability MEDIUM6.1	Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube Webmail	MEDIUM 6.1	76.6%	26 Jun 2024	—
CVE-2022-2586 Linux Kernel Use-After-Free Vulnerability MEDIUM5.3	Linux Kernel Use-After-Free Vulnerability Linux Kernel	MEDIUM 5.3	10.2%	26 Jun 2024	—
CVE-2022-24816 OSGeo GeoServer JAI-EXT Code Injection Vulnerability CRITICAL10	OSGeo GeoServer JAI-EXT Code Injection Vulnerability OSGeo JAI-EXT	CRITICAL 10	99.9%	26 Jun 2024	—
CVE-2024-4358 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability CRITICAL9.8	Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability Progress Telerik Report Server	CRITICAL 9.8	97.5%	13 Jun 2024	—
CVE-2024-26169 Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability HIGH7.8	Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability Microsoft Windows	HIGH 7.8	4%	13 Jun 2024	Blackbasta
CVE-2024-32896 Android Pixel Privilege Escalation Vulnerability HIGH7.8	Android Pixel Privilege Escalation Vulnerability Android Pixel	HIGH 7.8	3%	13 Jun 2024	—
CVE-2024-4577 PHP-CGI OS Command Injection Vulnerability CRITICAL9.8	PHP-CGI OS Command Injection Vulnerability PHP Group PHP	CRITICAL 9.8	100%	12 Jun 2024	CISA: known use
CVE-2024-4610 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability HIGH7.8	Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm Mali GPU Kernel Driver	HIGH 7.8	0.8%	12 Jun 2024	—
CVE-2017-3506 Oracle WebLogic Server OS Command Injection Vulnerability HIGH7.4	Oracle WebLogic Server OS Command Injection Vulnerability Oracle WebLogic Server	HIGH 7.4	96%	3 Jun 2024	—
CVE-2024-1086 Linux Kernel Use-After-Free Vulnerability HIGH7.8	Linux Kernel Use-After-Free Vulnerability Linux Kernel	HIGH 7.8	28.1%	30 May 2024	CISA: known use
CVE-2024-24919 Check Point Quantum Security Gateways Information Disclosure Vulnerability HIGH8.6	Check Point Quantum Security Gateways Information Disclosure Vulnerability Check Point Quantum Security Gateways	HIGH 8.6	100%	30 May 2024	CISA: known use
CVE-2024-4978 Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability HIGH8.4	Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability Justice AV Solutions Viewer	HIGH 8.4	26.9%	29 May 2024	—
CVE-2024-5274 Google Chromium V8 Type Confusion Vulnerability CRITICAL9.6	Google Chromium V8 Type Confusion Vulnerability Google Chromium V8	CRITICAL 9.6	7.7%	28 May 2024	—
CVE-2020-17519 Apache Flink Improper Access Control Vulnerability HIGH7.5	Apache Flink Improper Access Control Vulnerability Apache Flink	HIGH 7.5	98%	23 May 2024	—
CVE-2024-4947 Google Chromium V8 Type Confusion Vulnerability CRITICAL9.6	Google Chromium V8 Type Confusion Vulnerability Google Chromium V8	CRITICAL 9.6	15.2%	20 May 2024	—
CVE-2023-43208 NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability CRITICAL9.8	NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability NextGen Healthcare Mirth Connect	CRITICAL 9.8	85.9%	20 May 2024	CISA: known use
CVE-2024-4761 Google Chromium V8 Out-of-Bounds Memory Write Vulnerability HIGH8.8	Google Chromium V8 Out-of-Bounds Memory Write Vulnerability Google Chromium V8	HIGH 8.8	11%	16 May 2024	—

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.