Security Digest · page 7 of 8
Known exploited vulnerabilities (page 7)
Every CVE CISA has added to its Known Exploited Vulnerabilities catalog since October 1, 2023 (748), newest first. If you run the product, these come first. Browse by vendor.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2024-08-21 | CVE-2021-33045 | Dahua IP Camera Firmware Dahua IP Camera Authentication Bypass Vulnerability | 2024-09-11 |
| 2024-08-21 | CVE-2021-33044 | Dahua IP Camera Firmware Dahua IP Camera Authentication Bypass Vulnerability | 2024-09-11 |
| 2024-08-21 | CVE-2021-31196 | Microsoft Exchange Server Microsoft Exchange Server Information Disclosure Vulnerability | 2024-09-11 |
| 2024-08-19 | CVE-2024-23897 | Jenkins Jenkins Command Line Interface (CLI) Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Ransomware | 2024-09-09 |
| 2024-08-15 | CVE-2024-28986 | SolarWinds Web Help Desk SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 2024-09-05 |
| 2024-08-13 | CVE-2024-38213 | Microsoft Windows Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 2024-09-03 |
| 2024-08-13 | CVE-2024-38193 | Microsoft Windows Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability | 2024-09-03 |
| 2024-08-13 | CVE-2024-38189 | Microsoft Project Microsoft Project Remote Code Execution Vulnerability | 2024-09-03 |
| 2024-08-13 | CVE-2024-38178 | Microsoft Windows Microsoft Windows Scripting Engine Memory Corruption Vulnerability | 2024-09-03 |
| 2024-08-13 | CVE-2024-38107 | Microsoft Windows Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability | 2024-09-03 |
| 2024-08-13 | CVE-2024-38106 | Microsoft Windows Microsoft Windows Kernel Privilege Escalation Vulnerability | 2024-09-03 |
| 2024-08-07 | CVE-2024-36971 | Android Kernel Android Kernel Remote Code Execution Vulnerability | 2024-08-28 |
| 2024-08-07 | CVE-2024-32113 | Apache OFBiz Apache OFBiz Path Traversal Vulnerability | 2024-08-28 |
| 2024-08-05 | CVE-2018-0824 | Microsoft Windows Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability | 2024-08-26 |
| 2024-07-30 | CVE-2024-37085 | VMware ESXi VMware ESXi Authentication Bypass Vulnerability Ransomware | 2024-08-20 |
| 2024-07-29 | CVE-2024-5217 | ServiceNow Utah, Vancouver, and Washington DC Now Platform ServiceNow Incomplete List of Disallowed Inputs Vulnerability | 2024-08-19 |
| 2024-07-29 | CVE-2024-4879 | ServiceNow Utah, Vancouver, and Washington DC Now Platform ServiceNow Improper Input Validation Vulnerability | 2024-08-19 |
| 2024-07-29 | CVE-2023-45249 | Acronis Cyber Infrastructure (ACI) Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability | 2024-08-19 |
| 2024-07-23 | CVE-2024-39891 | Twilio Authy Twilio Authy Information Disclosure Vulnerability | 2024-08-13 |
| 2024-07-23 | CVE-2012-4792 | Microsoft Internet Explorer Microsoft Internet Explorer Use-After-Free Vulnerability | 2024-08-13 |
| 2024-07-17 | CVE-2024-34102 | Adobe Commerce and Magento Open Source Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability | 2024-08-07 |
| 2024-07-17 | CVE-2024-28995 | SolarWinds Serv-U SolarWinds Serv-U Path Traversal Vulnerability | 2024-08-07 |
| 2024-07-17 | CVE-2022-22948 | VMware vCenter Server VMware vCenter Server Incorrect Default File Permissions Vulnerability | 2024-08-07 |
| 2024-07-15 | CVE-2024-36401 | OSGeo GeoServer OSGeo GeoServer GeoTools Eval Injection Vulnerability | 2024-08-05 |
| 2024-07-09 | CVE-2024-38112 | Microsoft Windows Microsoft Windows MSHTML Platform Spoofing Vulnerability | 2024-07-30 |
| 2024-07-09 | CVE-2024-38080 | Microsoft Windows Microsoft Windows Hyper-V Privilege Escalation Vulnerability | 2024-07-30 |
| 2024-07-09 | CVE-2024-23692 | Rejetto HTTP File Server Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Ransomware | 2024-07-30 |
| 2024-07-02 | CVE-2024-20399 | Cisco NX-OS Cisco NX-OS Command Injection Vulnerability | 2024-07-23 |
| 2024-06-26 | CVE-2022-2586 | Linux Kernel Linux Kernel Use-After-Free Vulnerability | 2024-07-17 |
| 2024-06-26 | CVE-2022-24816 | OSGeo JAI-EXT OSGeo GeoServer JAI-EXT Code Injection Vulnerability | 2024-07-17 |
| 2024-06-26 | CVE-2020-13965 | Roundcube Webmail Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | 2024-07-17 |
| 2024-06-13 | CVE-2024-4358 | Progress Telerik Report Server Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability | 2024-07-04 |
| 2024-06-13 | CVE-2024-32896 | Android Pixel Android Pixel Privilege Escalation Vulnerability | 2024-07-04 |
| 2024-06-13 | CVE-2024-26169 | Microsoft Windows Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability Ransomware | 2024-07-04 |
| 2024-06-12 | CVE-2024-4610 | Arm Mali GPU Kernel Driver Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 2024-07-03 |
| 2024-06-12 | CVE-2024-4577 | PHP Group PHP PHP-CGI OS Command Injection Vulnerability Ransomware | 2024-07-03 |
| 2024-06-03 | CVE-2017-3506 | Oracle WebLogic Server Oracle WebLogic Server OS Command Injection Vulnerability | 2024-06-24 |
| 2024-05-30 | CVE-2024-24919 | Check Point Quantum Security Gateways Check Point Quantum Security Gateways Information Disclosure Vulnerability Ransomware | 2024-06-20 |
| 2024-05-30 | CVE-2024-1086 | Linux Kernel Linux Kernel Use-After-Free Vulnerability Ransomware | 2024-06-20 |
| 2024-05-29 | CVE-2024-4978 | Justice AV Solutions Viewer Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability | 2024-06-19 |
| 2024-05-28 | CVE-2024-5274 | Google Chromium V8 Google Chromium V8 Type Confusion Vulnerability | 2024-06-18 |
| 2024-05-23 | CVE-2020-17519 | Apache Flink Apache Flink Improper Access Control Vulnerability | 2024-06-13 |
| 2024-05-20 | CVE-2024-4947 | Google Chromium V8 Google Chromium V8 Type Confusion Vulnerability | 2024-06-10 |
| 2024-05-20 | CVE-2023-43208 | NextGen Healthcare Mirth Connect NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability Ransomware | 2024-06-10 |
| 2024-05-16 | CVE-2024-4761 | Google Chromium V8 Google Chromium V8 Out-of-Bounds Memory Write Vulnerability | 2024-06-06 |
| 2024-05-16 | CVE-2021-40655 | D-Link DIR-605 Router D-Link DIR-605 Router Information Disclosure Vulnerability | 2024-06-06 |
| 2024-05-16 | CVE-2014-100005 | D-Link DIR-600 Router D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | 2024-06-06 |
| 2024-05-14 | CVE-2024-30051 | Microsoft DWM Core Library Microsoft DWM Core Library Privilege Escalation Vulnerability Ransomware | 2024-06-04 |
| 2024-05-14 | CVE-2024-30040 | Microsoft Windows Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability | 2024-06-04 |
| 2024-05-13 | CVE-2024-4671 | Google Chromium Google Chromium Visuals Use-After-Free Vulnerability | 2024-06-03 |
| 2024-05-01 | CVE-2023-7028 | GitLab GitLab CE/EE GitLab Community and Enterprise Editions Improper Access Control Vulnerability | 2024-05-22 |
| 2024-04-30 | CVE-2024-29988 | Microsoft SmartScreen Prompt Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability | 2024-05-21 |
| 2024-04-24 | CVE-2024-4040 | CrushFTP CrushFTP CrushFTP VFS Sandbox Escape Vulnerability | 2024-05-01 |
| 2024-04-24 | CVE-2024-20359 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Privilege Escalation Vulnerability | 2024-05-01 |
| 2024-04-24 | CVE-2024-20353 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Denial of Service Vulnerability | 2024-05-01 |
| 2024-04-23 | CVE-2022-38028 | Microsoft Windows Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 2024-05-14 |
| 2024-04-12 | CVE-2024-3400 | Palo Alto Networks PAN-OS Palo Alto Networks PAN-OS Command Injection Vulnerability Ransomware | 2024-04-19 |
| 2024-04-11 | CVE-2024-3273 | D-Link Multiple NAS Devices D-Link Multiple NAS Devices Command Injection Vulnerability | 2024-05-02 |
| 2024-04-11 | CVE-2024-3272 | D-Link Multiple NAS Devices D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability | 2024-05-02 |
| 2024-04-04 | CVE-2024-29748 | Android Pixel Android Pixel Privilege Escalation Vulnerability | 2024-04-25 |
| 2024-04-04 | CVE-2024-29745 | Android Pixel Android Pixel Information Disclosure Vulnerability | 2024-04-25 |
| 2024-03-26 | CVE-2023-24955 | Microsoft SharePoint Server Microsoft SharePoint Server Code Injection Vulnerability Ransomware | 2024-04-16 |
| 2024-03-25 | CVE-2023-48788 | Fortinet FortiClient EMS Fortinet FortiClient EMS SQL Injection Vulnerability Ransomware | 2024-04-15 |
| 2024-03-25 | CVE-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ransomware | 2024-04-15 |
| 2024-03-25 | CVE-2019-7256 | Nice Linear eMerge E3-Series Nice Linear eMerge E3-Series OS Command Injection Vulnerability | 2024-04-15 |
| 2024-03-07 | CVE-2024-27198 | JetBrains TeamCity JetBrains TeamCity Authentication Bypass Vulnerability Ransomware | 2024-03-28 |
| 2024-03-06 | CVE-2024-23296 | Apple Multiple Products Apple Multiple Products Memory Corruption Vulnerability | 2024-03-27 |
| 2024-03-06 | CVE-2024-23225 | Apple Multiple Products Apple Multiple Products Memory Corruption Vulnerability | 2024-03-27 |
| 2024-03-05 | CVE-2023-21237 | Android Pixel Android Pixel Information Disclosure Vulnerability | 2024-03-26 |
| 2024-03-05 | CVE-2021-36380 | Sunhillo SureLine Sunhillo SureLine OS Command Injection Vulnerablity | 2024-03-26 |
| 2024-03-04 | CVE-2024-21338 | Microsoft Windows Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability Ransomware | 2024-03-25 |
| 2024-02-29 | CVE-2023-29360 | Microsoft Streaming Service Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability | 2024-03-21 |
| 2024-02-22 | CVE-2024-1709 | ConnectWise ScreenConnect ConnectWise ScreenConnect Authentication Bypass Vulnerability Ransomware | 2024-02-29 |
| 2024-02-15 | CVE-2024-21410 | Microsoft Exchange Server Microsoft Exchange Server Privilege Escalation Vulnerability | 2024-03-07 |
| 2024-02-15 | CVE-2020-3259 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Information Disclosure Vulnerability Ransomware | 2024-03-07 |
| 2024-02-13 | CVE-2024-21412 | Microsoft Windows Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability Ransomware | 2024-03-05 |
| 2024-02-13 | CVE-2024-21351 | Microsoft Windows Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 2024-03-05 |
| 2024-02-12 | CVE-2023-43770 | Roundcube Webmail Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | 2024-03-04 |
| 2024-02-09 | CVE-2024-21762 | Fortinet FortiOS Fortinet FortiOS Out-of-Bound Write Vulnerability Ransomware | 2024-02-16 |
| 2024-02-06 | CVE-2023-4762 | Google Chromium V8 Google Chromium V8 Type Confusion Vulnerability | 2024-02-27 |
| 2024-01-31 | CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Ransomware | 2024-02-02 |
| 2024-01-31 | CVE-2022-48618 | Apple Multiple Products Apple Multiple Products Memory Corruption Vulnerability | 2024-02-21 |
| 2024-01-24 | CVE-2023-22527 | Atlassian Confluence Data Center and Server Atlassian Confluence Data Center and Server Template Injection Vulnerability Ransomware | 2024-02-14 |
| 2024-01-23 | CVE-2024-23222 | Apple Multiple Products Apple Multiple Products WebKit Type Confusion Vulnerability | 2024-02-13 |
| 2024-01-22 | CVE-2023-34048 | VMware vCenter Server VMware vCenter Server Out-of-Bounds Write Vulnerability | 2024-02-12 |
| 2024-01-18 | CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Ransomware | 2024-02-08 |
| 2024-01-17 | CVE-2024-0519 | Google Chromium V8 Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | 2024-02-07 |
| 2024-01-17 | CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 2024-02-07 |
| 2024-01-17 | CVE-2023-6548 | Citrix NetScaler ADC and NetScaler Gateway Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 2024-01-24 |
| 2024-01-16 | CVE-2018-15133 | Laravel Laravel Framework Laravel Deserialization of Untrusted Data Vulnerability | 2024-02-06 |
| 2024-01-10 | CVE-2024-21887 | Ivanti Connect Secure and Policy Secure Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Ransomware | 2024-01-22 |
| 2024-01-10 | CVE-2023-46805 | Ivanti Connect Secure and Policy Secure Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Ransomware | 2024-01-22 |
| 2024-01-10 | CVE-2023-29357 | Microsoft SharePoint Server Microsoft SharePoint Server Privilege Escalation Vulnerability Ransomware | 2024-01-31 |
| 2024-01-08 | CVE-2023-41990 | Apple Multiple Products Apple Multiple Products Code Execution Vulnerability | 2024-01-29 |
| 2024-01-08 | CVE-2023-38203 | Adobe ColdFusion Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Ransomware | 2024-01-29 |
| 2024-01-08 | CVE-2023-29300 | Adobe ColdFusion Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Ransomware | 2024-01-29 |
| 2024-01-08 | CVE-2023-27524 | Apache Superset Apache Superset Insecure Default Initialization of Resource Vulnerability | 2024-01-29 |
| 2024-01-08 | CVE-2023-23752 | Joomla! Joomla! Joomla! Improper Access Control Vulnerability | 2024-01-29 |
| 2024-01-08 | CVE-2016-20017 | D-Link DSL-2750B Devices D-Link DSL-2750B Devices Command Injection Vulnerability | 2024-01-29 |
| 2024-01-02 | CVE-2023-7101 | Spreadsheet::ParseExcel Spreadsheet::ParseExcel Spreadsheet::ParseExcel Remote Code Execution Vulnerability | 2024-01-23 |