CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 481–540 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability HIGH7.1	VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability VMware ESXi, Workstation, and Fusion	HIGH 7.1	1.6%	4 Mar 2025	—
CVE-2025-22225 VMware ESXi Arbitrary Write Vulnerability HIGH8.2	VMware ESXi Arbitrary Write Vulnerability VMware ESXi	HIGH 8.2	1%	4 Mar 2025	CISA: known use
CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability CRITICAL9.3	VMware ESXi and Workstation TOCTOU Race Condition Vulnerability VMware ESXi and Workstation	CRITICAL 9.3	1.6%	4 Mar 2025	—
CVE-2024-50302 Linux Kernel Use of Uninitialized Resource Vulnerability MEDIUM5.5	Linux Kernel Use of Uninitialized Resource Vulnerability Linux Kernel	MEDIUM 5.5	0.8%	4 Mar 2025	—
CVE-2024-4885 Progress WhatsUp Gold Path Traversal Vulnerability CRITICAL9.8	Progress WhatsUp Gold Path Traversal Vulnerability Progress WhatsUp Gold	CRITICAL 9.8	99.3%	3 Mar 2025	—
CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability HIGH7.8	Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability Microsoft Windows	HIGH 7.8	22.3%	3 Mar 2025	CISA: known use
CVE-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability HIGH8.8	Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability Hitachi Vantara Pentaho Business Analytics (BA) Server	HIGH 8.8	97.7%	3 Mar 2025	—
CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability HIGH8.6	Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability Hitachi Vantara Pentaho Business Analytics (BA) Server	HIGH 8.6	92.3%	3 Mar 2025	—
CVE-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability MEDIUM6.5	Cisco Small Business RV Series Routers Command Injection Vulnerability Cisco Small Business RV Series Routers	MEDIUM 6.5	54.1%	3 Mar 2025	—
CVE-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CRITICAL9	Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor Zimbra Collaboration Suite (ZCS)	CRITICAL 9	77.3%	25 Feb 2025	—
CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability HIGH8.7	Microsoft Partner Center Improper Access Control Vulnerability Microsoft Partner Center	HIGH 8.7	1.4%	25 Feb 2025	—
CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability HIGH8.8	Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability Oracle Agile Product Lifecycle Management (PLM)	HIGH 8.8	3.9%	24 Feb 2025	—
CVE-2017-3066 Adobe ColdFusion Deserialization Vulnerability CRITICAL9.8	Adobe ColdFusion Deserialization Vulnerability Adobe ColdFusion	CRITICAL 9.8	90.6%	24 Feb 2025	—
CVE-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability HIGH8.2	Microsoft Power Pages Improper Access Control Vulnerability Microsoft Power Pages	HIGH 8.2	1.6%	21 Feb 2025	—
CVE-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability MEDIUM6.5	Palo Alto Networks PAN-OS File Read Vulnerability Palo Alto Networks PAN-OS	MEDIUM 6.5	2%	20 Feb 2025	—
CVE-2025-23209 Craft CMS Code Injection Vulnerability HIGH8	Craft CMS Code Injection Vulnerability Craft CMS Craft CMS	HIGH 8	21.6%	20 Feb 2025	—
CVE-2025-0108 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability CRITICAL9.1	Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks PAN-OS	CRITICAL 9.1	98.5%	18 Feb 2025	—
CVE-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability CRITICAL9.8	SonicWall SonicOS SSLVPN Improper Authentication Vulnerability SonicWall SonicOS	CRITICAL 9.8	95.3%	18 Feb 2025	Sinobi
CVE-2024-57727 SimpleHelp Path Traversal Vulnerability HIGH7.5	SimpleHelp Path Traversal Vulnerability SimpleHelp SimpleHelp	HIGH 7.5	96.8%	13 Feb 2025	Dragonforce Medusa
CVE-2025-24200 Apple iOS and iPadOS Incorrect Authorization Vulnerability MEDIUM6.1	Apple iOS and iPadOS Incorrect Authorization Vulnerability Apple iOS and iPadOS	MEDIUM 6.1	4.5%	12 Feb 2025	—
CVE-2024-41710 Mitel SIP Phones Argument Injection Vulnerability HIGH7.2	Mitel SIP Phones Argument Injection Vulnerability Mitel SIP Phones	HIGH 7.2	41.6%	12 Feb 2025	—
CVE-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability HIGH8.8	Zyxel DSL CPE OS Command Injection Vulnerability Zyxel DSL CPE Devices	HIGH 8.8	22.9%	11 Feb 2025	—
CVE-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability HIGH8.8	Zyxel DSL CPE OS Command Injection Vulnerability Zyxel DSL CPE Devices	HIGH 8.8	20.7%	11 Feb 2025	—
CVE-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability HIGH7.8	Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability Microsoft Windows	HIGH 7.8	2.1%	11 Feb 2025	—
CVE-2025-21391 Microsoft Windows Storage Link Following Vulnerability HIGH7.1	Microsoft Windows Storage Link Following Vulnerability Microsoft Windows	HIGH 7.1	2.3%	11 Feb 2025	—
CVE-2025-0994 Trimble Cityworks Deserialization Vulnerability HIGH8.8	Trimble Cityworks Deserialization Vulnerability Trimble Cityworks	HIGH 8.8	31.3%	7 Feb 2025	—
CVE-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability CRITICAL9.8	Sophos XG Firewall Buffer Overflow Vulnerability Sophos XG Firewall	CRITICAL 9.8	10.7%	6 Feb 2025	—
CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability CRITICAL9.8	CyberoamOS (CROS) SQL Injection Vulnerability Sophos CyberoamOS	CRITICAL 9.8	4.7%	6 Feb 2025	CISA: known use
CVE-2024-21413 Microsoft Outlook Improper Input Validation Vulnerability CRITICAL9.8	Microsoft Outlook Improper Input Validation Vulnerability Microsoft Office Outlook	CRITICAL 9.8	94.7%	6 Feb 2025	—
CVE-2022-23748 Dante Discovery Process Control Vulnerability HIGH7.8	Dante Discovery Process Control Vulnerability Audinate Dante Discovery	HIGH 7.8	8.3%	6 Feb 2025	—
CVE-2025-0411 7-Zip Mark of the Web Bypass Vulnerability HIGH7	7-Zip Mark of the Web Bypass Vulnerability 7-Zip 7-Zip	HIGH 7	47.6%	6 Feb 2025	—
CVE-2024-53104 Linux Kernel Out-of-Bounds Write Vulnerability HIGH7.8	Linux Kernel Out-of-Bounds Write Vulnerability Linux Kernel	HIGH 7.8	3.4%	5 Feb 2025	—
CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability CRITICAL9.8	Paessler PRTG Network Monitor Local File Inclusion Vulnerability Paessler PRTG Network Monitor	CRITICAL 9.8	97.9%	4 Feb 2025	—
CVE-2018-9276 Paessler PRTG Network Monitor OS Command Injection Vulnerability HIGH7.2	Paessler PRTG Network Monitor OS Command Injection Vulnerability Paessler PRTG Network Monitor	HIGH 7.2	87%	4 Feb 2025	—
CVE-2024-29059 Microsoft .NET Framework Information Disclosure Vulnerability HIGH7.5	Microsoft .NET Framework Information Disclosure Vulnerability Microsoft .NET Framework	HIGH 7.5	98.6%	4 Feb 2025	—
CVE-2024-45195 Apache OFBiz Forced Browsing Vulnerability HIGH7.5	Apache OFBiz Forced Browsing Vulnerability Apache OFBiz	HIGH 7.5	100%	4 Feb 2025	—
CVE-2025-24085 Apple Multiple Products Use-After-Free Vulnerability CRITICAL10	Apple Multiple Products Use-After-Free Vulnerability Apple Multiple Products	CRITICAL 10	17.4%	29 Jan 2025	—
CVE-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability CRITICAL9.8	SonicWall SMA1000 Appliances Deserialization Vulnerability SonicWall SMA1000 Appliances	CRITICAL 9.8	26.6%	24 Jan 2025	CISA: known use
CVE-2020-11023 JQuery Cross-Site Scripting (XSS) Vulnerability MEDIUM6.9	JQuery Cross-Site Scripting (XSS) Vulnerability JQuery JQuery	MEDIUM 6.9	84.9%	23 Jan 2025	—
CVE-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability CRITICAL10	Aviatrix Controllers OS Command Injection Vulnerability Aviatrix Controllers	CRITICAL 10	98.5%	16 Jan 2025	—
CVE-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability HIGH7.8	Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft Windows	HIGH 7.8	1.4%	14 Jan 2025	—
CVE-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability HIGH7.8	Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft Windows	HIGH 7.8	1.6%	14 Jan 2025	—
CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability HIGH7.8	Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability Microsoft Windows	HIGH 7.8	10.1%	14 Jan 2025	—
CVE-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability CRITICAL9.8	Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet FortiOS and FortiProxy	CRITICAL 9.8	94.4%	14 Jan 2025	Qilin Thegentlemen +1
CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability CRITICAL9.6	Qlik Sense HTTP Tunneling Vulnerability Qlik Sense	CRITICAL 9.6	47.7%	13 Jan 2025	CISA: known use
CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability MEDIUM6.6	BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS)	MEDIUM 6.6	32.6%	13 Jan 2025	—
CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability CRITICAL9	Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti Connect Secure, Policy Secure, and ZTA Gateways	CRITICAL 9	100%	8 Jan 2025	CISA: known use
CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability CRITICAL9.8	Oracle WebLogic Server Unspecified Vulnerability Oracle WebLogic Server	CRITICAL 9.8	94.6%	7 Jan 2025	—
CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability LOW2.7	Mitel MiCollab Path Traversal Vulnerability Mitel MiCollab	LOW 2.7	38.2%	7 Jan 2025	CISA: known use
CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability CRITICAL9.1	Mitel MiCollab Path Traversal Vulnerability Mitel MiCollab	CRITICAL 9.1	97.2%	7 Jan 2025	CISA: known use
CVE-2024-3393 Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability HIGH7.5	Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability Palo Alto Networks PAN-OS	HIGH 7.5	29.1%	30 Dec 2024	—
CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability HIGH8.1	Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability Acclaim Systems USAHERDS	HIGH 8.1	17.6%	23 Dec 2024	—
CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability CRITICAL9.8	BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS)	CRITICAL 9.8	87.4%	19 Dec 2024	—
CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability HIGH7.2	Reolink RLC-410W IP Camera OS Command Injection Vulnerability Reolink RLC-410W IP Camera	HIGH 7.2	47.6%	18 Dec 2024	—
CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability HIGH7.2	Reolink Multiple IP Cameras OS Command Injection Vulnerability Reolink Multiple IP Cameras	HIGH 7.2	37.5%	18 Dec 2024	—
CVE-2022-23227 NUUO NVRmini2 Devices Missing Authentication Vulnerability CRITICAL9.8	NUUO NVRmini2 Devices Missing Authentication Vulnerability NUUO NVRmini2 Devices	CRITICAL 9.8	48.5%	18 Dec 2024	—
CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability CRITICAL9.8	NUUO NVRmini Devices OS Command Injection Vulnerability NUUO NVRmini Devices	CRITICAL 9.8	94.8%	18 Dec 2024	—
CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability CRITICAL9.8	Cleo Multiple Products Unauthenticated File Upload Vulnerability Cleo Multiple Products	CRITICAL 9.8	94%	17 Dec 2024	Clop
CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability HIGH7.8	Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability Microsoft Windows	HIGH 7.8	25.2%	16 Dec 2024	—
CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability HIGH7.4	Adobe ColdFusion Improper Access Control Vulnerability Adobe ColdFusion	HIGH 7.4	98.5%	16 Dec 2024	—

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.