CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 661–720 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2021-40655 D-Link DIR-605 Router Information Disclosure Vulnerability HIGH7.5	D-Link DIR-605 Router Information Disclosure Vulnerability D-Link DIR-605 Router	HIGH 7.5	87%	16 May 2024	—
CVE-2014-100005 D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability HIGH8	D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability D-Link DIR-600 Router	HIGH 8	43.5%	16 May 2024	—
CVE-2024-30040 Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability HIGH8.8	Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability Microsoft Windows	HIGH 8.8	3.9%	14 May 2024	—
CVE-2024-30051 Microsoft DWM Core Library Privilege Escalation Vulnerability HIGH7.8	Microsoft DWM Core Library Privilege Escalation Vulnerability Microsoft DWM Core Library	HIGH 7.8	5.7%	14 May 2024	CISA: known use
CVE-2024-4671 Google Chromium Visuals Use-After-Free Vulnerability CRITICAL9.6	Google Chromium Visuals Use-After-Free Vulnerability Google Chromium	CRITICAL 9.6	8.3%	13 May 2024	—
CVE-2023-7028 GitLab Community and Enterprise Editions Improper Access Control Vulnerability CRITICAL10	GitLab Community and Enterprise Editions Improper Access Control Vulnerability GitLab CE/EE	CRITICAL 10	94.5%	1 May 2024	—
CVE-2024-29988 Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability HIGH8.8	Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability Microsoft SmartScreen Prompt	HIGH 8.8	45.2%	30 Apr 2024	—
CVE-2024-4040 CrushFTP VFS Sandbox Escape Vulnerability CRITICAL9.8	CrushFTP VFS Sandbox Escape Vulnerability CrushFTP CrushFTP	CRITICAL 9.8	99.5%	24 Apr 2024	—
CVE-2024-20359 Cisco ASA and FTD Privilege Escalation Vulnerability MEDIUM6	Cisco ASA and FTD Privilege Escalation Vulnerability Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)	MEDIUM 6	18.8%	24 Apr 2024	—
CVE-2024-20353 Cisco ASA and FTD Denial of Service Vulnerability HIGH8.6	Cisco ASA and FTD Denial of Service Vulnerability Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)	HIGH 8.6	69.8%	24 Apr 2024	—
CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	14.9%	23 Apr 2024	—
CVE-2024-3400 Palo Alto Networks PAN-OS Command Injection Vulnerability CRITICAL10	Palo Alto Networks PAN-OS Command Injection Vulnerability Palo Alto Networks PAN-OS	CRITICAL 10	100%	12 Apr 2024	CISA: known use
CVE-2024-3273 D-Link Multiple NAS Devices Command Injection Vulnerability HIGH7.3	D-Link Multiple NAS Devices Command Injection Vulnerability D-Link Multiple NAS Devices	HIGH 7.3	100%	11 Apr 2024	—
CVE-2024-3272 D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability CRITICAL9.8	D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability D-Link Multiple NAS Devices	CRITICAL 9.8	98.1%	11 Apr 2024	—
CVE-2024-29748 Android Pixel Privilege Escalation Vulnerability HIGH7.8	Android Pixel Privilege Escalation Vulnerability Android Pixel	HIGH 7.8	0.7%	4 Apr 2024	—
CVE-2024-29745 Android Pixel Information Disclosure Vulnerability MEDIUM5.5	Android Pixel Information Disclosure Vulnerability Android Pixel	MEDIUM 5.5	0.5%	4 Apr 2024	—
CVE-2023-24955 Microsoft SharePoint Server Code Injection Vulnerability HIGH7.2	Microsoft SharePoint Server Code Injection Vulnerability Microsoft SharePoint Server	HIGH 7.2	85%	26 Mar 2024	CISA: known use
CVE-2019-7256 Nice Linear eMerge E3-Series OS Command Injection Vulnerability CRITICAL9.8	Nice Linear eMerge E3-Series OS Command Injection Vulnerability Nice Linear eMerge E3-Series	CRITICAL 9.8	97.1%	25 Mar 2024	—
CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability CRITICAL9.8	Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA)	CRITICAL 9.8	99.1%	25 Mar 2024	CISA: known use
CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability CRITICAL9.8	Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet FortiClient EMS	CRITICAL 9.8	98.4%	25 Mar 2024	Akira Ransomhub
CVE-2024-27198 JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL9.8	JetBrains TeamCity Authentication Bypass Vulnerability JetBrains TeamCity	CRITICAL 9.8	99.9%	7 Mar 2024	CISA: known use
CVE-2024-23225 Apple Multiple Products Memory Corruption Vulnerability HIGH7.8	Apple Multiple Products Memory Corruption Vulnerability Apple Multiple Products	HIGH 7.8	1.5%	6 Mar 2024	—
CVE-2024-23296 Apple Multiple Products Memory Corruption Vulnerability HIGH7.8	Apple Multiple Products Memory Corruption Vulnerability Apple Multiple Products	HIGH 7.8	1.4%	6 Mar 2024	—
CVE-2023-21237 Android Pixel Information Disclosure Vulnerability MEDIUM5.5	Android Pixel Information Disclosure Vulnerability Android Pixel	MEDIUM 5.5	0.3%	5 Mar 2024	—
CVE-2021-36380 Sunhillo SureLine OS Command Injection Vulnerablity CRITICAL9.8	Sunhillo SureLine OS Command Injection Vulnerablity Sunhillo SureLine	CRITICAL 9.8	97.8%	5 Mar 2024	—
CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability HIGH7.8	Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability Microsoft Windows	HIGH 7.8	59.8%	4 Mar 2024	CISA: known use
CVE-2023-29360 Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability HIGH8.4	Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability Microsoft Streaming Service	HIGH 8.4	21.6%	29 Feb 2024	—
CVE-2024-1709 ConnectWise ScreenConnect Authentication Bypass Vulnerability CRITICAL10	ConnectWise ScreenConnect Authentication Bypass Vulnerability ConnectWise ScreenConnect	CRITICAL 10	100%	22 Feb 2024	Blackbasta
CVE-2020-3259 Cisco ASA and FTD Information Disclosure Vulnerability HIGH7.5	Cisco ASA and FTD Information Disclosure Vulnerability Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)	HIGH 7.5	71.5%	15 Feb 2024	Akira
CVE-2024-21410 Microsoft Exchange Server Privilege Escalation Vulnerability CRITICAL9.8	Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft Exchange Server	CRITICAL 9.8	12.7%	15 Feb 2024	—
CVE-2024-21412 Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability HIGH8.1	Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability Microsoft Windows	HIGH 8.1	99.4%	13 Feb 2024	Thegentlemen Dragonforce
CVE-2024-21351 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability HIGH7.6	Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft Windows	HIGH 7.6	27.8%	13 Feb 2024	—
CVE-2023-43770 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability MEDIUM6.1	Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability Roundcube Webmail	MEDIUM 6.1	63.7%	12 Feb 2024	—
CVE-2024-21762 Fortinet FortiOS Out-of-Bound Write Vulnerability CRITICAL9.8	Fortinet FortiOS Out-of-Bound Write Vulnerability Fortinet FortiOS	CRITICAL 9.8	84.6%	9 Feb 2024	Qilin Dragonforce
CVE-2023-4762 Google Chromium V8 Type Confusion Vulnerability HIGH8.8	Google Chromium V8 Type Confusion Vulnerability Google Chromium V8	HIGH 8.8	41.4%	6 Feb 2024	—
CVE-2022-48618 Apple Multiple Products Memory Corruption Vulnerability HIGH7	Apple Multiple Products Memory Corruption Vulnerability Apple Multiple Products	HIGH 7	0.5%	31 Jan 2024	—
CVE-2024-21893 Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability HIGH8.2	Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Ivanti Connect Secure, Policy Secure, and Neurons	HIGH 8.2	100%	31 Jan 2024	Dragonforce
CVE-2023-22527 Atlassian Confluence Data Center and Server Template Injection Vulnerability CRITICAL9.8	Atlassian Confluence Data Center and Server Template Injection Vulnerability Atlassian Confluence Data Center and Server	CRITICAL 9.8	100%	24 Jan 2024	CISA: known use
CVE-2024-23222 Apple Multiple Products WebKit Type Confusion Vulnerability HIGH8.8	Apple Multiple Products WebKit Type Confusion Vulnerability Apple Multiple Products	HIGH 8.8	10.6%	23 Jan 2024	—
CVE-2023-34048 VMware vCenter Server Out-of-Bounds Write Vulnerability CRITICAL9.8	VMware vCenter Server Out-of-Bounds Write Vulnerability VMware vCenter Server	CRITICAL 9.8	99.2%	22 Jan 2024	—
CVE-2023-35082 Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability CRITICAL9.8	Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core	CRITICAL 9.8	100%	18 Jan 2024	CISA: known use
CVE-2024-0519 Google Chromium V8 Out-of-Bounds Memory Access Vulnerability HIGH8.8	Google Chromium V8 Out-of-Bounds Memory Access Vulnerability Google Chromium V8	HIGH 8.8	3.8%	17 Jan 2024	—
CVE-2023-6549 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability HIGH8.2	Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Citrix NetScaler ADC and NetScaler Gateway	HIGH 8.2	57.6%	17 Jan 2024	—
CVE-2023-6548 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability MEDIUM5.5	Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Citrix NetScaler ADC and NetScaler Gateway	MEDIUM 5.5	3.2%	17 Jan 2024	—
CVE-2018-15133 Laravel Deserialization of Untrusted Data Vulnerability HIGH8.1	Laravel Deserialization of Untrusted Data Vulnerability Laravel Framework	HIGH 8.1	76.6%	16 Jan 2024	—
CVE-2023-29357 Microsoft SharePoint Server Privilege Escalation Vulnerability CRITICAL9.8	Microsoft SharePoint Server Privilege Escalation Vulnerability Microsoft SharePoint Server	CRITICAL 9.8	100%	10 Jan 2024	CISA: known use
CVE-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability HIGH8.2	Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Ivanti Connect Secure and Policy Secure	HIGH 8.2	100%	10 Jan 2024	Dragonforce
CVE-2024-21887 Ivanti Connect Secure and Policy Secure Command Injection Vulnerability CRITICAL9.1	Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Ivanti Connect Secure and Policy Secure	CRITICAL 9.1	100%	10 Jan 2024	Dragonforce
CVE-2023-23752 Joomla! Improper Access Control Vulnerability MEDIUM5.3	Joomla! Improper Access Control Vulnerability Joomla! Joomla!	MEDIUM 5.3	99.8%	8 Jan 2024	—
CVE-2016-20017 D-Link DSL-2750B Devices Command Injection Vulnerability CRITICAL9.8	D-Link DSL-2750B Devices Command Injection Vulnerability D-Link DSL-2750B Devices	CRITICAL 9.8	65.8%	8 Jan 2024	—
CVE-2023-41990 Apple Multiple Products Code Execution Vulnerability HIGH7.8	Apple Multiple Products Code Execution Vulnerability Apple Multiple Products	HIGH 7.8	1.4%	8 Jan 2024	—
CVE-2023-27524 Apache Superset Insecure Default Initialization of Resource Vulnerability HIGH8.9	Apache Superset Insecure Default Initialization of Resource Vulnerability Apache Superset	HIGH 8.9	98.1%	8 Jan 2024	—
CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CRITICAL9.8	Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe ColdFusion	CRITICAL 9.8	100%	8 Jan 2024	CISA: known use
CVE-2023-38203 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CRITICAL9.8	Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe ColdFusion	CRITICAL 9.8	97.1%	8 Jan 2024	CISA: known use
CVE-2023-7101 Spreadsheet::ParseExcel Remote Code Execution Vulnerability HIGH7.8	Spreadsheet::ParseExcel Remote Code Execution Vulnerability Spreadsheet::ParseExcel Spreadsheet::ParseExcel	HIGH 7.8	19%	2 Jan 2024	—
CVE-2023-7024 Google Chromium WebRTC Heap Buffer Overflow Vulnerability HIGH8.8	Google Chromium WebRTC Heap Buffer Overflow Vulnerability Google Chromium WebRTC	HIGH 8.8	6.7%	2 Jan 2024	—
CVE-2023-49897 FXC AE1021, AE1021PE OS Command Injection Vulnerability HIGH8.8	FXC AE1021, AE1021PE OS Command Injection Vulnerability FXC AE1021, AE1021PE	HIGH 8.8	50.4%	21 Dec 2023	—
CVE-2023-47565 QNAP VioStor NVR OS Command Injection Vulnerability HIGH8	QNAP VioStor NVR OS Command Injection Vulnerability QNAP VioStor NVR	HIGH 8	73.3%	21 Dec 2023	—
CVE-2023-6448 Unitronics Vision PLC and HMI Insecure Default Password Vulnerability CRITICAL9.8	Unitronics Vision PLC and HMI Insecure Default Password Vulnerability Unitronics Vision PLC and HMI	CRITICAL 9.8	2.1%	11 Dec 2023	—
CVE-2023-41266 Qlik Sense Path Traversal Vulnerability HIGH8.2	Qlik Sense Path Traversal Vulnerability Qlik Sense	HIGH 8.2	84.8%	7 Dec 2023	CISA: known use

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.