---
title: "Known exploited vulnerabilities (page 5)"
url: https://erroneo.us/security/kev/5/
description: "All 748 vulnerabilities CISA added to its Known Exploited Vulnerabilities catalog since October 2023, newest first, with federal due dates. Page 5 of 8."
type: kev
section: "Security Digest"
date_modified: 2025-06-02
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Known exploited vulnerabilities (page 5)

- 2025-06-02 [CVE-2024-56145](https://erroneo.us/security/cve/CVE-2024-56145/index.md) Craft CMS Craft CMS: Craft CMS Code Injection Vulnerability (due 2025-06-23; ransomware: Unknown)
- 2025-06-02 [CVE-2023-39780](https://erroneo.us/security/cve/CVE-2023-39780/index.md) ASUS RT-AX55 Routers: ASUS RT-AX55 Routers OS Command Injection Vulnerability (due 2025-06-23; ransomware: Unknown)
- 2025-06-02 [CVE-2021-32030](https://erroneo.us/security/cve/CVE-2021-32030/index.md) ASUS Routers: ASUS Routers Improper Authentication Vulnerability (due 2025-06-23; ransomware: Unknown)
- 2025-05-22 [CVE-2025-4632](https://erroneo.us/security/cve/CVE-2025-4632/index.md) Samsung MagicINFO 9 Server: Samsung MagicINFO 9 Server Path Traversal Vulnerability (due 2025-06-12; ransomware: Unknown)
- 2025-05-19 [CVE-2025-4428](https://erroneo.us/security/cve/CVE-2025-4428/index.md) Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability (due 2025-06-09; ransomware: Unknown)
- 2025-05-19 [CVE-2025-4427](https://erroneo.us/security/cve/CVE-2025-4427/index.md) Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability (due 2025-06-09; ransomware: Unknown)
- 2025-05-19 [CVE-2025-27920](https://erroneo.us/security/cve/CVE-2025-27920/index.md) Srimax Output Messenger: Srimax Output Messenger Directory Traversal Vulnerability (due 2025-06-09; ransomware: Unknown)
- 2025-05-19 [CVE-2024-27443](https://erroneo.us/security/cve/CVE-2024-27443/index.md) Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability (due 2025-06-09; ransomware: Unknown)
- 2025-05-19 [CVE-2024-11182](https://erroneo.us/security/cve/CVE-2024-11182/index.md) MDaemon Email Server: MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability (due 2025-06-09; ransomware: Unknown)
- 2025-05-19 [CVE-2023-38950](https://erroneo.us/security/cve/CVE-2023-38950/index.md) ZKTeco BioTime: ZKTeco BioTime Path Traversal Vulnerability (due 2025-06-09; ransomware: Unknown)
- 2025-05-15 [CVE-2025-42999](https://erroneo.us/security/cve/CVE-2025-42999/index.md) SAP NetWeaver: SAP NetWeaver Deserialization Vulnerability (due 2025-06-05; ransomware: Known)
- 2025-05-15 [CVE-2024-12987](https://erroneo.us/security/cve/CVE-2024-12987/index.md) DrayTek Vigor Routers: DrayTek Vigor Routers OS Command Injection Vulnerability (due 2025-06-05; ransomware: Unknown)
- 2025-05-14 [CVE-2025-32756](https://erroneo.us/security/cve/CVE-2025-32756/index.md) Fortinet Multiple Products: Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability (due 2025-06-04; ransomware: Unknown)
- 2025-05-13 [CVE-2025-32709](https://erroneo.us/security/cve/CVE-2025-32709/index.md) Microsoft Windows: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability (due 2025-06-03; ransomware: Unknown)
- 2025-05-13 [CVE-2025-32706](https://erroneo.us/security/cve/CVE-2025-32706/index.md) Microsoft Windows: Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability (due 2025-06-03; ransomware: Unknown)
- 2025-05-13 [CVE-2025-32701](https://erroneo.us/security/cve/CVE-2025-32701/index.md) Microsoft Windows: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability (due 2025-06-03; ransomware: Unknown)
- 2025-05-13 [CVE-2025-30400](https://erroneo.us/security/cve/CVE-2025-30400/index.md) Microsoft Windows: Microsoft Windows DWM Core Library Use-After-Free Vulnerability (due 2025-06-03; ransomware: Unknown)
- 2025-05-13 [CVE-2025-30397](https://erroneo.us/security/cve/CVE-2025-30397/index.md) Microsoft Windows: Microsoft Windows Scripting Engine Type Confusion Vulnerability (due 2025-06-03; ransomware: Unknown)
- 2025-05-12 [CVE-2025-47729](https://erroneo.us/security/cve/CVE-2025-47729/index.md) TeleMessage TM SGNL: TeleMessage TM SGNL Hidden Functionality Vulnerability (due 2025-06-02; ransomware: Unknown)
- 2025-05-07 [CVE-2024-6047](https://erroneo.us/security/cve/CVE-2024-6047/index.md) GeoVision Multiple Devices: GeoVision Devices OS Command Injection Vulnerability (due 2025-05-28; ransomware: Unknown)
- 2025-05-07 [CVE-2024-11120](https://erroneo.us/security/cve/CVE-2024-11120/index.md) GeoVision Multiple Devices: GeoVision Devices OS Command Injection Vulnerability (due 2025-05-28; ransomware: Unknown)
- 2025-05-06 [CVE-2025-27363](https://erroneo.us/security/cve/CVE-2025-27363/index.md) FreeType FreeType: FreeType Out-of-Bounds Write Vulnerability (due 2025-05-27; ransomware: Unknown)
- 2025-05-05 [CVE-2025-3248](https://erroneo.us/security/cve/CVE-2025-3248/index.md) Langflow Langflow: Langflow Missing Authentication Vulnerability (due 2025-05-26; ransomware: Known)
- 2025-05-02 [CVE-2025-34028](https://erroneo.us/security/cve/CVE-2025-34028/index.md) Commvault Command Center: Commvault Command Center Path Traversal Vulnerability (due 2025-05-23; ransomware: Unknown)
- 2025-05-02 [CVE-2024-58136](https://erroneo.us/security/cve/CVE-2024-58136/index.md) Yiiframework Yii: Yiiframework Yii Improper Protection of Alternate Path Vulnerability (due 2025-05-23; ransomware: Unknown)
- 2025-05-01 [CVE-2024-38475](https://erroneo.us/security/cve/CVE-2024-38475/index.md) Apache HTTP Server: Apache HTTP Server Improper Escaping of Output Vulnerability (due 2025-05-22; ransomware: Unknown)
- 2025-05-01 [CVE-2023-44221](https://erroneo.us/security/cve/CVE-2023-44221/index.md) SonicWall SMA100 Appliances: SonicWall SMA100 Appliances OS Command Injection Vulnerability (due 2025-05-22; ransomware: Unknown)
- 2025-04-29 [CVE-2025-31324](https://erroneo.us/security/cve/CVE-2025-31324/index.md) SAP NetWeaver: SAP NetWeaver Unrestricted File Upload Vulnerability (due 2025-05-20; ransomware: Known)
- 2025-04-28 [CVE-2025-42599](https://erroneo.us/security/cve/CVE-2025-42599/index.md) Qualitia Active! Mail: Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability (due 2025-05-19; ransomware: Unknown)
- 2025-04-28 [CVE-2025-3928](https://erroneo.us/security/cve/CVE-2025-3928/index.md) Commvault Web Server: Commvault Web Server Unspecified Vulnerability (due 2025-05-19; ransomware: Unknown)
- 2025-04-28 [CVE-2025-1976](https://erroneo.us/security/cve/CVE-2025-1976/index.md) Broadcom Brocade Fabric OS: Broadcom Brocade Fabric OS Code Injection Vulnerability (due 2025-05-19; ransomware: Unknown)
- 2025-04-17 [CVE-2025-31201](https://erroneo.us/security/cve/CVE-2025-31201/index.md) Apple Multiple Products: Apple Multiple Products Arbitrary Read and Write Vulnerability (due 2025-05-08; ransomware: Unknown)
- 2025-04-17 [CVE-2025-31200](https://erroneo.us/security/cve/CVE-2025-31200/index.md) Apple Multiple Products: Apple Multiple Products Memory Corruption Vulnerability (due 2025-05-08; ransomware: Unknown)
- 2025-04-17 [CVE-2025-24054](https://erroneo.us/security/cve/CVE-2025-24054/index.md) Microsoft Windows: Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability (due 2025-05-08; ransomware: Unknown)
- 2025-04-16 [CVE-2021-20035](https://erroneo.us/security/cve/CVE-2021-20035/index.md) SonicWall SMA100 Appliances: SonicWall SMA100 Appliances OS Command Injection Vulnerability (due 2025-05-07; ransomware: Unknown)
- 2025-04-09 [CVE-2024-53197](https://erroneo.us/security/cve/CVE-2024-53197/index.md) Linux Kernel: Linux Kernel Out-of-Bounds Access Vulnerability (due 2025-04-30; ransomware: Unknown)
- 2025-04-09 [CVE-2024-53150](https://erroneo.us/security/cve/CVE-2024-53150/index.md) Linux Kernel: Linux Kernel Out-of-Bounds Read Vulnerability (due 2025-04-30; ransomware: Unknown)
- 2025-04-08 [CVE-2025-30406](https://erroneo.us/security/cve/CVE-2025-30406/index.md) Gladinet CentreStack: Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability (due 2025-04-29; ransomware: Unknown)
- 2025-04-08 [CVE-2025-29824](https://erroneo.us/security/cve/CVE-2025-29824/index.md) Microsoft Windows: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability (due 2025-04-29; ransomware: Known)
- 2025-04-07 [CVE-2025-31161](https://erroneo.us/security/cve/CVE-2025-31161/index.md) CrushFTP CrushFTP: CrushFTP Authentication Bypass Vulnerability (due 2025-04-28; ransomware: Known)
- 2025-04-04 [CVE-2025-22457](https://erroneo.us/security/cve/CVE-2025-22457/index.md) Ivanti Connect Secure, Policy Secure, and ZTA Gateways: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability (due 2025-04-11; ransomware: Known)
- 2025-04-01 [CVE-2025-24813](https://erroneo.us/security/cve/CVE-2025-24813/index.md) Apache Tomcat: Apache Tomcat Path Equivalence Vulnerability (due 2025-04-22; ransomware: Unknown)
- 2025-03-31 [CVE-2024-20439](https://erroneo.us/security/cve/CVE-2024-20439/index.md) Cisco Smart Licensing Utility: Cisco Smart Licensing Utility Static Credential Vulnerability (due 2025-04-21; ransomware: Unknown)
- 2025-03-27 [CVE-2025-2783](https://erroneo.us/security/cve/CVE-2025-2783/index.md) Google Chromium Mojo: Google Chromium Mojo Sandbox Escape Vulnerability (due 2025-04-17; ransomware: Unknown)
- 2025-03-26 [CVE-2019-9875](https://erroneo.us/security/cve/CVE-2019-9875/index.md) Sitecore CMS and Experience Platform (XP): Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability (due 2025-04-16; ransomware: Unknown)
- 2025-03-26 [CVE-2019-9874](https://erroneo.us/security/cve/CVE-2019-9874/index.md) Sitecore CMS and Experience Platform (XP): Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability (due 2025-04-16; ransomware: Unknown)
- 2025-03-24 [CVE-2025-30154](https://erroneo.us/security/cve/CVE-2025-30154/index.md) reviewdog action-setup GitHub Action: reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability (due 2025-04-14; ransomware: Unknown)
- 2025-03-19 [CVE-2025-1316](https://erroneo.us/security/cve/CVE-2025-1316/index.md) Edimax IC-7100 IP Camera: Edimax IC-7100 IP Camera OS Command Injection Vulnerability (due 2025-04-09; ransomware: Unknown)
- 2025-03-19 [CVE-2024-48248](https://erroneo.us/security/cve/CVE-2024-48248/index.md) NAKIVO Backup and Replication: NAKIVO Backup and Replication Absolute Path Traversal Vulnerability (due 2025-04-09; ransomware: Unknown)
- 2025-03-19 [CVE-2017-12637](https://erroneo.us/security/cve/CVE-2017-12637/index.md) SAP NetWeaver: SAP NetWeaver Directory Traversal Vulnerability (due 2025-04-09; ransomware: Unknown)
- 2025-03-18 [CVE-2025-30066](https://erroneo.us/security/cve/CVE-2025-30066/index.md) tj-actions changed-files GitHub Action: tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability (due 2025-04-08; ransomware: Unknown)
- 2025-03-18 [CVE-2025-24472](https://erroneo.us/security/cve/CVE-2025-24472/index.md) Fortinet FortiOS and FortiProxy: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability (due 2025-04-08; ransomware: Known)
- 2025-03-13 [CVE-2025-24201](https://erroneo.us/security/cve/CVE-2025-24201/index.md) Apple Multiple Products: Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability (due 2025-04-03; ransomware: Unknown)
- 2025-03-13 [CVE-2025-21590](https://erroneo.us/security/cve/CVE-2025-21590/index.md) Juniper Junos OS: Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability (due 2025-04-03; ransomware: Unknown)
- 2025-03-11 [CVE-2025-26633](https://erroneo.us/security/cve/CVE-2025-26633/index.md) Microsoft Windows: Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability (due 2025-04-01; ransomware: Known)
- 2025-03-11 [CVE-2025-24993](https://erroneo.us/security/cve/CVE-2025-24993/index.md) Microsoft Windows: Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability (due 2025-04-01; ransomware: Unknown)
- 2025-03-11 [CVE-2025-24991](https://erroneo.us/security/cve/CVE-2025-24991/index.md) Microsoft Windows: Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability (due 2025-04-01; ransomware: Unknown)
- 2025-03-11 [CVE-2025-24985](https://erroneo.us/security/cve/CVE-2025-24985/index.md) Microsoft Windows: Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability (due 2025-04-01; ransomware: Unknown)
- 2025-03-11 [CVE-2025-24984](https://erroneo.us/security/cve/CVE-2025-24984/index.md) Microsoft Windows: Microsoft Windows NTFS Information Disclosure Vulnerability (due 2025-04-01; ransomware: Unknown)
- 2025-03-11 [CVE-2025-24983](https://erroneo.us/security/cve/CVE-2025-24983/index.md) Microsoft Windows: Microsoft Windows Win32k Use-After-Free Vulnerability (due 2025-04-01; ransomware: Unknown)
- 2025-03-10 [CVE-2025-25181](https://erroneo.us/security/cve/CVE-2025-25181/index.md) Advantive VeraCore:  Advantive VeraCore SQL Injection Vulnerability (due 2025-03-31; ransomware: Unknown)
- 2025-03-10 [CVE-2024-57968](https://erroneo.us/security/cve/CVE-2024-57968/index.md) Advantive VeraCore: Advantive VeraCore Unrestricted File Upload Vulnerability (due 2025-03-31; ransomware: Unknown)
- 2025-03-10 [CVE-2024-13161](https://erroneo.us/security/cve/CVE-2024-13161/index.md) Ivanti Endpoint Manager (EPM): Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability (due 2025-03-31; ransomware: Unknown)
- 2025-03-10 [CVE-2024-13160](https://erroneo.us/security/cve/CVE-2024-13160/index.md) Ivanti Endpoint Manager (EPM): Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability (due 2025-03-31; ransomware: Unknown)
- 2025-03-10 [CVE-2024-13159](https://erroneo.us/security/cve/CVE-2024-13159/index.md) Ivanti Endpoint Manager (EPM): Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability (due 2025-03-31; ransomware: Unknown)
- 2025-03-04 [CVE-2025-22226](https://erroneo.us/security/cve/CVE-2025-22226/index.md) VMware ESXi, Workstation, and Fusion: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability (due 2025-03-25; ransomware: Unknown)
- 2025-03-04 [CVE-2025-22225](https://erroneo.us/security/cve/CVE-2025-22225/index.md) VMware ESXi: VMware ESXi Arbitrary Write Vulnerability (due 2025-03-25; ransomware: Known)
- 2025-03-04 [CVE-2025-22224](https://erroneo.us/security/cve/CVE-2025-22224/index.md) VMware ESXi and Workstation: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability (due 2025-03-25; ransomware: Unknown)
- 2025-03-04 [CVE-2024-50302](https://erroneo.us/security/cve/CVE-2024-50302/index.md) Linux Kernel: Linux Kernel Use of Uninitialized Resource Vulnerability (due 2025-03-25; ransomware: Unknown)
- 2025-03-03 [CVE-2024-4885](https://erroneo.us/security/cve/CVE-2024-4885/index.md) Progress WhatsUp Gold: Progress WhatsUp Gold Path Traversal Vulnerability (due 2025-03-24; ransomware: Unknown)
- 2025-03-03 [CVE-2023-20118](https://erroneo.us/security/cve/CVE-2023-20118/index.md) Cisco Small Business RV Series Routers: Cisco Small Business RV Series Routers Command Injection Vulnerability (due 2025-03-24; ransomware: Unknown)
- 2025-03-03 [CVE-2022-43939](https://erroneo.us/security/cve/CVE-2022-43939/index.md) Hitachi Vantara Pentaho Business Analytics (BA) Server: Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability (due 2025-03-24; ransomware: Unknown)
- 2025-03-03 [CVE-2022-43769](https://erroneo.us/security/cve/CVE-2022-43769/index.md) Hitachi Vantara Pentaho Business Analytics (BA) Server: Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability (due 2025-03-24; ransomware: Unknown)
- 2025-03-03 [CVE-2018-8639](https://erroneo.us/security/cve/CVE-2018-8639/index.md) Microsoft Windows: Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability (due 2025-03-24; ransomware: Known)
- 2025-02-25 [CVE-2024-49035](https://erroneo.us/security/cve/CVE-2024-49035/index.md) Microsoft Partner Center: Microsoft Partner Center Improper Access Control Vulnerability (due 2025-03-18; ransomware: Unknown)
- 2025-02-25 [CVE-2023-34192](https://erroneo.us/security/cve/CVE-2023-34192/index.md) Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability (due 2025-03-18; ransomware: Unknown)
- 2025-02-24 [CVE-2024-20953](https://erroneo.us/security/cve/CVE-2024-20953/index.md) Oracle Agile Product Lifecycle Management (PLM): Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability (due 2025-03-17; ransomware: Unknown)
- 2025-02-24 [CVE-2017-3066](https://erroneo.us/security/cve/CVE-2017-3066/index.md) Adobe ColdFusion: Adobe ColdFusion Deserialization Vulnerability (due 2025-03-17; ransomware: Unknown)
- 2025-02-21 [CVE-2025-24989](https://erroneo.us/security/cve/CVE-2025-24989/index.md) Microsoft Power Pages: Microsoft Power Pages Improper Access Control Vulnerability (due 2025-03-14; ransomware: Unknown)
- 2025-02-20 [CVE-2025-23209](https://erroneo.us/security/cve/CVE-2025-23209/index.md) Craft CMS Craft CMS: Craft CMS Code Injection Vulnerability (due 2025-03-13; ransomware: Unknown)
- 2025-02-20 [CVE-2025-0111](https://erroneo.us/security/cve/CVE-2025-0111/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS File Read Vulnerability (due 2025-03-13; ransomware: Unknown)
- 2025-02-18 [CVE-2025-0108](https://erroneo.us/security/cve/CVE-2025-0108/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability (due 2025-03-11; ransomware: Unknown)
- 2025-02-18 [CVE-2024-53704](https://erroneo.us/security/cve/CVE-2024-53704/index.md) SonicWall SonicOS: SonicWall SonicOS SSLVPN Improper Authentication Vulnerability (due 2025-03-11; ransomware: Known)
- 2025-02-13 [CVE-2024-57727](https://erroneo.us/security/cve/CVE-2024-57727/index.md) SimpleHelp  SimpleHelp: SimpleHelp Path Traversal Vulnerability (due 2025-03-06; ransomware: Known)
- 2025-02-12 [CVE-2025-24200](https://erroneo.us/security/cve/CVE-2025-24200/index.md) Apple iOS and iPadOS: Apple iOS and iPadOS Incorrect Authorization Vulnerability (due 2025-03-05; ransomware: Unknown)
- 2025-02-12 [CVE-2024-41710](https://erroneo.us/security/cve/CVE-2024-41710/index.md) Mitel SIP Phones: Mitel SIP Phones Argument Injection Vulnerability (due 2025-03-05; ransomware: Unknown)
- 2025-02-11 [CVE-2025-21418](https://erroneo.us/security/cve/CVE-2025-21418/index.md) Microsoft Windows: Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability (due 2025-03-04; ransomware: Unknown)
- 2025-02-11 [CVE-2025-21391](https://erroneo.us/security/cve/CVE-2025-21391/index.md) Microsoft Windows: Microsoft Windows Storage Link Following Vulnerability (due 2025-03-04; ransomware: Unknown)
- 2025-02-11 [CVE-2024-40891](https://erroneo.us/security/cve/CVE-2024-40891/index.md) Zyxel DSL CPE Devices: Zyxel DSL CPE OS Command Injection Vulnerability (due 2025-03-04; ransomware: Unknown)
- 2025-02-11 [CVE-2024-40890](https://erroneo.us/security/cve/CVE-2024-40890/index.md) Zyxel DSL CPE Devices: Zyxel DSL CPE OS Command Injection Vulnerability (due 2025-03-04; ransomware: Unknown)
- 2025-02-07 [CVE-2025-0994](https://erroneo.us/security/cve/CVE-2025-0994/index.md) Trimble Cityworks: Trimble Cityworks Deserialization Vulnerability (due 2025-02-28; ransomware: Unknown)
- 2025-02-06 [CVE-2025-0411](https://erroneo.us/security/cve/CVE-2025-0411/index.md) 7-Zip 7-Zip: 7-Zip Mark of the Web Bypass Vulnerability (due 2025-02-27; ransomware: Unknown)
- 2025-02-06 [CVE-2024-21413](https://erroneo.us/security/cve/CVE-2024-21413/index.md) Microsoft Office Outlook: Microsoft Outlook Improper Input Validation Vulnerability (due 2025-02-27; ransomware: Unknown)
- 2025-02-06 [CVE-2022-23748](https://erroneo.us/security/cve/CVE-2022-23748/index.md) Audinate Dante Discovery: Dante Discovery Process Control Vulnerability (due 2025-02-27; ransomware: Unknown)
- 2025-02-06 [CVE-2020-29574](https://erroneo.us/security/cve/CVE-2020-29574/index.md) Sophos CyberoamOS: CyberoamOS (CROS) SQL Injection Vulnerability (due 2025-02-27; ransomware: Known)
- 2025-02-06 [CVE-2020-15069](https://erroneo.us/security/cve/CVE-2020-15069/index.md) Sophos XG Firewall: Sophos XG Firewall Buffer Overflow Vulnerability (due 2025-02-27; ransomware: Unknown)
- 2025-02-05 [CVE-2024-53104](https://erroneo.us/security/cve/CVE-2024-53104/index.md) Linux Kernel: Linux Kernel Out-of-Bounds Write Vulnerability (due 2025-02-26; ransomware: Unknown)
- 2025-02-04 [CVE-2024-45195](https://erroneo.us/security/cve/CVE-2024-45195/index.md) Apache OFBiz: Apache OFBiz Forced Browsing Vulnerability (due 2025-02-25; ransomware: Unknown)
- 2025-02-04 [CVE-2024-29059](https://erroneo.us/security/cve/CVE-2024-29059/index.md) Microsoft .NET Framework: Microsoft .NET Framework Information Disclosure Vulnerability (due 2025-02-25; ransomware: Unknown)
- 2025-02-04 [CVE-2018-9276](https://erroneo.us/security/cve/CVE-2018-9276/index.md) Paessler PRTG Network Monitor: Paessler PRTG Network Monitor OS Command Injection Vulnerability (due 2025-02-25; ransomware: Unknown)

Pages: https://erroneo.us/security/kev/index.md · https://erroneo.us/security/kev/2/index.md · https://erroneo.us/security/kev/3/index.md · https://erroneo.us/security/kev/4/index.md · https://erroneo.us/security/kev/5/index.md · https://erroneo.us/security/kev/6/index.md · https://erroneo.us/security/kev/7/index.md · https://erroneo.us/security/kev/8/index.md

---
Source page: https://erroneo.us/security/kev/5/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt