--- title: "Known exploited vulnerabilities (page 6)" url: https://erroneo.us/security/kev/6/ description: "All 748 vulnerabilities CISA added to its Known Exploited Vulnerabilities catalog since October 2023, newest first, with federal due dates. Page 6 of 8." type: kev section: "Security Digest" date_modified: 2025-02-04 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Known exploited vulnerabilities (page 6) - 2025-02-04 [CVE-2018-19410](https://erroneo.us/security/cve/CVE-2018-19410/index.md) Paessler PRTG Network Monitor: Paessler PRTG Network Monitor Local File Inclusion Vulnerability (due 2025-02-25; ransomware: Unknown) - 2025-01-29 [CVE-2025-24085](https://erroneo.us/security/cve/CVE-2025-24085/index.md) Apple Multiple Products: Apple Multiple Products Use-After-Free Vulnerability (due 2025-02-19; ransomware: Unknown) - 2025-01-24 [CVE-2025-23006](https://erroneo.us/security/cve/CVE-2025-23006/index.md) SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Deserialization Vulnerability (due 2025-02-14; ransomware: Known) - 2025-01-23 [CVE-2020-11023](https://erroneo.us/security/cve/CVE-2020-11023/index.md) JQuery JQuery: JQuery Cross-Site Scripting (XSS) Vulnerability (due 2025-02-13; ransomware: Unknown) - 2025-01-16 [CVE-2024-50603](https://erroneo.us/security/cve/CVE-2024-50603/index.md) Aviatrix Controllers: Aviatrix Controllers OS Command Injection Vulnerability (due 2025-02-06; ransomware: Unknown) - 2025-01-14 [CVE-2025-21335](https://erroneo.us/security/cve/CVE-2025-21335/index.md) Microsoft Windows: Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability (due 2025-02-04; ransomware: Unknown) - 2025-01-14 [CVE-2025-21334](https://erroneo.us/security/cve/CVE-2025-21334/index.md) Microsoft Windows: Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability (due 2025-02-04; ransomware: Unknown) - 2025-01-14 [CVE-2025-21333](https://erroneo.us/security/cve/CVE-2025-21333/index.md) Microsoft Windows: Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability (due 2025-02-04; ransomware: Unknown) - 2025-01-14 [CVE-2024-55591](https://erroneo.us/security/cve/CVE-2024-55591/index.md) Fortinet FortiOS and FortiProxy: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability (due 2025-01-21; ransomware: Known) - 2025-01-13 [CVE-2024-12686](https://erroneo.us/security/cve/CVE-2024-12686/index.md) BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS): BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability (due 2025-02-03; ransomware: Unknown) - 2025-01-13 [CVE-2023-48365](https://erroneo.us/security/cve/CVE-2023-48365/index.md) Qlik Sense: Qlik Sense HTTP Tunneling Vulnerability (due 2025-02-03; ransomware: Known) - 2025-01-08 [CVE-2025-0282](https://erroneo.us/security/cve/CVE-2025-0282/index.md) Ivanti Connect Secure, Policy Secure, and ZTA Gateways: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability (due 2025-01-15; ransomware: Known) - 2025-01-07 [CVE-2024-55550](https://erroneo.us/security/cve/CVE-2024-55550/index.md) Mitel MiCollab: Mitel MiCollab Path Traversal Vulnerability (due 2025-01-28; ransomware: Known) - 2025-01-07 [CVE-2024-41713](https://erroneo.us/security/cve/CVE-2024-41713/index.md) Mitel MiCollab: Mitel MiCollab Path Traversal Vulnerability (due 2025-01-28; ransomware: Known) - 2025-01-07 [CVE-2020-2883](https://erroneo.us/security/cve/CVE-2020-2883/index.md) Oracle WebLogic Server: Oracle WebLogic Server Unspecified Vulnerability (due 2025-01-28; ransomware: Unknown) - 2024-12-30 [CVE-2024-3393](https://erroneo.us/security/cve/CVE-2024-3393/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (due 2025-01-20; ransomware: Unknown) - 2024-12-23 [CVE-2021-44207](https://erroneo.us/security/cve/CVE-2021-44207/index.md) Acclaim Systems USAHERDS: Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability (due 2025-01-13; ransomware: Unknown) - 2024-12-19 [CVE-2024-12356](https://erroneo.us/security/cve/CVE-2024-12356/index.md) BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) : BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability (due 2024-12-27; ransomware: Unknown) - 2024-12-18 [CVE-2022-23227](https://erroneo.us/security/cve/CVE-2022-23227/index.md) NUUO NVRmini2 Devices: NUUO NVRmini2 Devices Missing Authentication Vulnerability (due 2025-01-08; ransomware: Unknown) - 2024-12-18 [CVE-2021-40407](https://erroneo.us/security/cve/CVE-2021-40407/index.md) Reolink RLC-410W IP Camera: Reolink RLC-410W IP Camera OS Command Injection Vulnerability (due 2025-01-08; ransomware: Unknown) - 2024-12-18 [CVE-2019-11001](https://erroneo.us/security/cve/CVE-2019-11001/index.md) Reolink Multiple IP Cameras: Reolink Multiple IP Cameras OS Command Injection Vulnerability (due 2025-01-08; ransomware: Unknown) - 2024-12-18 [CVE-2018-14933](https://erroneo.us/security/cve/CVE-2018-14933/index.md) NUUO NVRmini Devices: NUUO NVRmini Devices OS Command Injection Vulnerability (due 2025-01-08; ransomware: Unknown) - 2024-12-17 [CVE-2024-55956](https://erroneo.us/security/cve/CVE-2024-55956/index.md) Cleo Multiple Products: Cleo Multiple Products Unauthenticated File Upload Vulnerability (due 2025-01-07; ransomware: Known) - 2024-12-16 [CVE-2024-35250](https://erroneo.us/security/cve/CVE-2024-35250/index.md) Microsoft Windows: Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability (due 2025-01-06; ransomware: Unknown) - 2024-12-16 [CVE-2024-20767](https://erroneo.us/security/cve/CVE-2024-20767/index.md) Adobe ColdFusion: Adobe ColdFusion Improper Access Control Vulnerability (due 2025-01-06; ransomware: Unknown) - 2024-12-13 [CVE-2024-50623](https://erroneo.us/security/cve/CVE-2024-50623/index.md) Cleo Multiple Products: Cleo Multiple Products Unrestricted File Upload Vulnerability (due 2025-01-03; ransomware: Known) - 2024-12-10 [CVE-2024-49138](https://erroneo.us/security/cve/CVE-2024-49138/index.md) Microsoft Windows: Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability (due 2024-12-31; ransomware: Unknown) - 2024-12-04 [CVE-2024-51378](https://erroneo.us/security/cve/CVE-2024-51378/index.md) CyberPersons CyberPanel: CyberPanel Incorrect Default Permissions Vulnerability (due 2024-12-25; ransomware: Known) - 2024-12-03 [CVE-2024-11680](https://erroneo.us/security/cve/CVE-2024-11680/index.md) ProjectSend ProjectSend: ProjectSend Improper Authentication Vulnerability (due 2024-12-24; ransomware: Unknown) - 2024-12-03 [CVE-2024-11667](https://erroneo.us/security/cve/CVE-2024-11667/index.md) Zyxel Multiple Firewalls: Zyxel Multiple Firewalls Path Traversal Vulnerability (due 2024-12-24; ransomware: Known) - 2024-12-03 [CVE-2023-45727](https://erroneo.us/security/cve/CVE-2023-45727/index.md) North Grid Proself: North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability (due 2024-12-24; ransomware: Unknown) - 2024-11-25 [CVE-2023-28461](https://erroneo.us/security/cve/CVE-2023-28461/index.md) Array Networks AG/vxAG ArrayOS: Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability (due 2024-12-16; ransomware: Known) - 2024-11-21 [CVE-2024-44309](https://erroneo.us/security/cve/CVE-2024-44309/index.md) Apple Multiple Products: Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability (due 2024-12-12; ransomware: Unknown) - 2024-11-21 [CVE-2024-44308](https://erroneo.us/security/cve/CVE-2024-44308/index.md) Apple Multiple Products: Apple Multiple Products Code Execution Vulnerability (due 2024-12-12; ransomware: Unknown) - 2024-11-21 [CVE-2024-21287](https://erroneo.us/security/cve/CVE-2024-21287/index.md) Oracle Agile Product Lifecycle Management (PLM): Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability (due 2024-12-12; ransomware: Unknown) - 2024-11-20 [CVE-2024-38813](https://erroneo.us/security/cve/CVE-2024-38813/index.md) VMware vCenter Server: VMware vCenter Server Privilege Escalation Vulnerability (due 2024-12-11; ransomware: Unknown) - 2024-11-20 [CVE-2024-38812](https://erroneo.us/security/cve/CVE-2024-38812/index.md) VMware vCenter Server: VMware vCenter Server Heap-Based Buffer Overflow Vulnerability (due 2024-12-11; ransomware: Unknown) - 2024-11-18 [CVE-2024-9474](https://erroneo.us/security/cve/CVE-2024-9474/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability (due 2024-12-09; ransomware: Known) - 2024-11-18 [CVE-2024-1212](https://erroneo.us/security/cve/CVE-2024-1212/index.md) Progress Kemp LoadMaster: Progress Kemp LoadMaster OS Command Injection Vulnerability (due 2024-12-09; ransomware: Unknown) - 2024-11-18 [CVE-2024-0012](https://erroneo.us/security/cve/CVE-2024-0012/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability (due 2024-12-09; ransomware: Known) - 2024-11-14 [CVE-2024-9465](https://erroneo.us/security/cve/CVE-2024-9465/index.md) Palo Alto Networks Expedition: Palo Alto Networks Expedition SQL Injection Vulnerability (due 2024-12-05; ransomware: Unknown) - 2024-11-14 [CVE-2024-9463](https://erroneo.us/security/cve/CVE-2024-9463/index.md) Palo Alto Networks Expedition: Palo Alto Networks Expedition OS Command Injection Vulnerability (due 2024-12-05; ransomware: Unknown) - 2024-11-12 [CVE-2024-49039](https://erroneo.us/security/cve/CVE-2024-49039/index.md) Microsoft Windows: Microsoft Windows Task Scheduler Privilege Escalation Vulnerability (due 2024-12-03; ransomware: Known) - 2024-11-12 [CVE-2024-43451](https://erroneo.us/security/cve/CVE-2024-43451/index.md) Microsoft Windows: Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability (due 2024-12-03; ransomware: Unknown) - 2024-11-12 [CVE-2021-41277](https://erroneo.us/security/cve/CVE-2021-41277/index.md) Metabase Metabase: Metabase GeoJSON API Local File Inclusion Vulnerability (due 2024-12-03; ransomware: Unknown) - 2024-11-12 [CVE-2021-26086](https://erroneo.us/security/cve/CVE-2021-26086/index.md) Atlassian Jira Server and Data Center: Atlassian Jira Server and Data Center Path Traversal Vulnerability (due 2024-12-03; ransomware: Unknown) - 2024-11-12 [CVE-2014-2120](https://erroneo.us/security/cve/CVE-2014-2120/index.md) Cisco Adaptive Security Appliance (ASA): Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability (due 2024-12-03; ransomware: Unknown) - 2024-11-07 [CVE-2024-5910](https://erroneo.us/security/cve/CVE-2024-5910/index.md) Palo Alto Networks Expedition: Palo Alto Networks Expedition Missing Authentication Vulnerability (due 2024-11-28; ransomware: Unknown) - 2024-11-07 [CVE-2024-51567](https://erroneo.us/security/cve/CVE-2024-51567/index.md) CyberPersons CyberPanel: CyberPanel Incorrect Default Permissions Vulnerability (due 2024-11-28; ransomware: Known) - 2024-11-07 [CVE-2024-43093](https://erroneo.us/security/cve/CVE-2024-43093/index.md) Android Framework: Android Framework Privilege Escalation Vulnerability (due 2024-11-28; ransomware: Unknown) - 2024-11-07 [CVE-2019-16278](https://erroneo.us/security/cve/CVE-2019-16278/index.md) Nostromo nhttpd: Nostromo nhttpd Directory Traversal Vulnerability (due 2024-11-28; ransomware: Unknown) - 2024-11-04 [CVE-2024-8957](https://erroneo.us/security/cve/CVE-2024-8957/index.md) PTZOptics PT30X-SDI/NDI Cameras: PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability (due 2024-11-25; ransomware: Unknown) - 2024-11-04 [CVE-2024-8956](https://erroneo.us/security/cve/CVE-2024-8956/index.md) PTZOptics PT30X-SDI/NDI Cameras: PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability (due 2024-11-25; ransomware: Unknown) - 2024-10-24 [CVE-2024-37383](https://erroneo.us/security/cve/CVE-2024-37383/index.md) Roundcube Webmail: RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability (due 2024-11-14; ransomware: Unknown) - 2024-10-24 [CVE-2024-20481](https://erroneo.us/security/cve/CVE-2024-20481/index.md) Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD): Cisco ASA and FTD Denial-of-Service Vulnerability (due 2024-11-14; ransomware: Unknown) - 2024-10-23 [CVE-2024-47575](https://erroneo.us/security/cve/CVE-2024-47575/index.md) Fortinet FortiManager: Fortinet FortiManager Missing Authentication Vulnerability (due 2024-11-13; ransomware: Unknown) - 2024-10-22 [CVE-2024-38094](https://erroneo.us/security/cve/CVE-2024-38094/index.md) Microsoft SharePoint: Microsoft SharePoint Deserialization Vulnerability (due 2024-11-12; ransomware: Known) - 2024-10-21 [CVE-2024-9537](https://erroneo.us/security/cve/CVE-2024-9537/index.md) ScienceLogic SL1: ScienceLogic SL1 Unspecified Vulnerability (due 2024-11-11; ransomware: Unknown) - 2024-10-17 [CVE-2024-40711](https://erroneo.us/security/cve/CVE-2024-40711/index.md) Veeam Backup & Replication: Veeam Backup and Replication Deserialization Vulnerability (due 2024-11-07; ransomware: Known) - 2024-10-15 [CVE-2024-9680](https://erroneo.us/security/cve/CVE-2024-9680/index.md) Mozilla Firefox: Mozilla Firefox Use-After-Free Vulnerability (due 2024-11-05; ransomware: Known) - 2024-10-15 [CVE-2024-30088](https://erroneo.us/security/cve/CVE-2024-30088/index.md) Microsoft Windows : Microsoft Windows Kernel TOCTOU Race Condition Vulnerability (due 2024-11-05; ransomware: Known) - 2024-10-15 [CVE-2024-28987](https://erroneo.us/security/cve/CVE-2024-28987/index.md) SolarWinds Web Help Desk: SolarWinds Web Help Desk Hardcoded Credential Vulnerability (due 2024-11-05; ransomware: Unknown) - 2024-10-09 [CVE-2024-9380](https://erroneo.us/security/cve/CVE-2024-9380/index.md) Ivanti Cloud Services Appliance (CSA): Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability (due 2024-10-30; ransomware: Unknown) - 2024-10-09 [CVE-2024-9379](https://erroneo.us/security/cve/CVE-2024-9379/index.md) Ivanti Cloud Services Appliance (CSA): Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability (due 2024-10-30; ransomware: Unknown) - 2024-10-09 [CVE-2024-23113](https://erroneo.us/security/cve/CVE-2024-23113/index.md) Fortinet Multiple Products: Fortinet Multiple Products Format String Vulnerability (due 2024-10-30; ransomware: Unknown) - 2024-10-08 [CVE-2024-43573](https://erroneo.us/security/cve/CVE-2024-43573/index.md) Microsoft Windows: Microsoft Windows MSHTML Platform Spoofing Vulnerability (due 2024-10-29; ransomware: Unknown) - 2024-10-08 [CVE-2024-43572](https://erroneo.us/security/cve/CVE-2024-43572/index.md) Microsoft Windows: Microsoft Windows Management Console Remote Code Execution Vulnerability (due 2024-10-29; ransomware: Unknown) - 2024-10-08 [CVE-2024-43047](https://erroneo.us/security/cve/CVE-2024-43047/index.md) Qualcomm Multiple Chipsets : Qualcomm Multiple Chipsets Use-After-Free Vulnerability (due 2024-10-29; ransomware: Unknown) - 2024-10-03 [CVE-2024-45519](https://erroneo.us/security/cve/CVE-2024-45519/index.md) Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability (due 2024-10-24; ransomware: Unknown) - 2024-10-02 [CVE-2024-29824](https://erroneo.us/security/cve/CVE-2024-29824/index.md) Ivanti Endpoint Manager (EPM): Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability (due 2024-10-23; ransomware: Unknown) - 2024-09-30 [CVE-2023-25280](https://erroneo.us/security/cve/CVE-2023-25280/index.md) D-Link DIR-820 Router: D-Link DIR-820 Router OS Command Injection Vulnerability (due 2024-10-21; ransomware: Unknown) - 2024-09-30 [CVE-2020-15415](https://erroneo.us/security/cve/CVE-2020-15415/index.md) DrayTek Multiple Vigor Routers: DrayTek Multiple Vigor Routers OS Command Injection Vulnerability (due 2024-10-21; ransomware: Unknown) - 2024-09-30 [CVE-2019-0344](https://erroneo.us/security/cve/CVE-2019-0344/index.md) SAP Commerce Cloud: SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability (due 2024-10-21; ransomware: Unknown) - 2024-09-24 [CVE-2024-7593](https://erroneo.us/security/cve/CVE-2024-7593/index.md) Ivanti Virtual Traffic Manager: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability (due 2024-10-15; ransomware: Unknown) - 2024-09-19 [CVE-2024-8963](https://erroneo.us/security/cve/CVE-2024-8963/index.md) Ivanti Cloud Services Appliance (CSA): Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability (due 2024-10-10; ransomware: Unknown) - 2024-09-18 [CVE-2024-27348](https://erroneo.us/security/cve/CVE-2024-27348/index.md) Apache HugeGraph-Server: Apache HugeGraph-Server Improper Access Control Vulnerability (due 2024-10-09; ransomware: Unknown) - 2024-09-18 [CVE-2022-21445](https://erroneo.us/security/cve/CVE-2022-21445/index.md) Oracle ADF Faces: Oracle ADF Faces Deserialization of Untrusted Data Vulnerability (due 2024-10-09; ransomware: Unknown) - 2024-09-18 [CVE-2020-14644](https://erroneo.us/security/cve/CVE-2020-14644/index.md) Oracle WebLogic Server: Oracle WebLogic Server Remote Code Execution Vulnerability (due 2024-10-09; ransomware: Unknown) - 2024-09-18 [CVE-2020-0618](https://erroneo.us/security/cve/CVE-2020-0618/index.md) Microsoft SQL Server: Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability (due 2024-10-09; ransomware: Known) - 2024-09-17 [CVE-2014-0502](https://erroneo.us/security/cve/CVE-2014-0502/index.md) Adobe Flash Player: Adobe Flash Player Double Free Vulnerablity (due 2024-10-08; ransomware: Unknown) - 2024-09-17 [CVE-2014-0497](https://erroneo.us/security/cve/CVE-2014-0497/index.md) Adobe Flash Player: Adobe Flash Player Integer Underflow Vulnerablity (due 2024-10-08; ransomware: Unknown) - 2024-09-17 [CVE-2013-0648](https://erroneo.us/security/cve/CVE-2013-0648/index.md) Adobe Flash Player: Adobe Flash Player Code Execution Vulnerability (due 2024-10-08; ransomware: Unknown) - 2024-09-17 [CVE-2013-0643](https://erroneo.us/security/cve/CVE-2013-0643/index.md) Adobe Flash Player: Adobe Flash Player Incorrect Default Permissions Vulnerability (due 2024-10-08; ransomware: Unknown) - 2024-09-16 [CVE-2024-6670](https://erroneo.us/security/cve/CVE-2024-6670/index.md) Progress WhatsUp Gold: Progress WhatsUp Gold SQL Injection Vulnerability (due 2024-10-07; ransomware: Known) - 2024-09-16 [CVE-2024-43461](https://erroneo.us/security/cve/CVE-2024-43461/index.md) Microsoft Windows: Microsoft Windows MSHTML Platform Spoofing Vulnerability (due 2024-10-07; ransomware: Unknown) - 2024-09-13 [CVE-2024-8190](https://erroneo.us/security/cve/CVE-2024-8190/index.md) Ivanti Cloud Services Appliance: Ivanti Cloud Services Appliance OS Command Injection Vulnerability (due 2024-10-04; ransomware: Unknown) - 2024-09-10 [CVE-2024-38226](https://erroneo.us/security/cve/CVE-2024-38226/index.md) Microsoft Publisher: Microsoft Publisher Protection Mechanism Failure Vulnerability (due 2024-10-01; ransomware: Unknown) - 2024-09-10 [CVE-2024-38217](https://erroneo.us/security/cve/CVE-2024-38217/index.md) Microsoft Windows: Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability (due 2024-10-01; ransomware: Unknown) - 2024-09-10 [CVE-2024-38014](https://erroneo.us/security/cve/CVE-2024-38014/index.md) Microsoft Windows: Microsoft Windows Installer Improper Privilege Management Vulnerability (due 2024-10-01; ransomware: Unknown) - 2024-09-09 [CVE-2024-40766](https://erroneo.us/security/cve/CVE-2024-40766/index.md) SonicWall SonicOS: SonicWall SonicOS Improper Access Control Vulnerability (due 2024-09-30; ransomware: Known) - 2024-09-09 [CVE-2017-1000253](https://erroneo.us/security/cve/CVE-2017-1000253/index.md) Linux Kernel: Linux Kernel PIE Stack Buffer Corruption Vulnerability (due 2024-09-30; ransomware: Known) - 2024-09-09 [CVE-2016-3714](https://erroneo.us/security/cve/CVE-2016-3714/index.md) ImageMagick ImageMagick: ImageMagick Improper Input Validation Vulnerability (due 2024-09-30; ransomware: Unknown) - 2024-09-03 [CVE-2024-7262](https://erroneo.us/security/cve/CVE-2024-7262/index.md) Kingsoft WPS Office: Kingsoft WPS Office Path Traversal Vulnerability (due 2024-09-24; ransomware: Unknown) - 2024-09-03 [CVE-2021-20124](https://erroneo.us/security/cve/CVE-2021-20124/index.md) DrayTek VigorConnect: Draytek VigorConnect Path Traversal Vulnerability (due 2024-09-24; ransomware: Unknown) - 2024-09-03 [CVE-2021-20123](https://erroneo.us/security/cve/CVE-2021-20123/index.md) DrayTek VigorConnect: Draytek VigorConnect Path Traversal Vulnerability (due 2024-09-24; ransomware: Unknown) - 2024-08-28 [CVE-2024-7965](https://erroneo.us/security/cve/CVE-2024-7965/index.md) Google Chromium V8: Google Chromium V8 Inappropriate Implementation Vulnerability (due 2024-09-18; ransomware: Unknown) - 2024-08-27 [CVE-2024-38856](https://erroneo.us/security/cve/CVE-2024-38856/index.md) Apache OFBiz: Apache OFBiz Incorrect Authorization Vulnerability (due 2024-09-17; ransomware: Unknown) - 2024-08-26 [CVE-2024-7971](https://erroneo.us/security/cve/CVE-2024-7971/index.md) Google Chromium V8: Google Chromium V8 Type Confusion Vulnerability (due 2024-09-16; ransomware: Unknown) - 2024-08-23 [CVE-2024-39717](https://erroneo.us/security/cve/CVE-2024-39717/index.md) Versa Director: Versa Director Dangerous File Type Upload Vulnerability (due 2024-09-13; ransomware: Unknown) - 2024-08-21 [CVE-2022-0185](https://erroneo.us/security/cve/CVE-2022-0185/index.md) Linux Kernel: Linux Kernel Heap-Based Buffer Overflow Vulnerability (due 2024-09-11; ransomware: Unknown) Pages: https://erroneo.us/security/kev/index.md · https://erroneo.us/security/kev/2/index.md · https://erroneo.us/security/kev/3/index.md · https://erroneo.us/security/kev/4/index.md · https://erroneo.us/security/kev/5/index.md · https://erroneo.us/security/kev/6/index.md · https://erroneo.us/security/kev/7/index.md · https://erroneo.us/security/kev/8/index.md --- Source page: https://erroneo.us/security/kev/6/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt