VulnTideExploited vulnerabilities, by vendor. Data as of 28 Oct 2026.

Vulnerabilities added to CISA KEV in 2024

186 entries, newest first.

CVENameVendorAddedRansomware
CVE-2024-3393Palo Alto Networks PAN-OS Malicious DNS Packet VulnerabilityPalo Alto Networks30 Dec 2024Unknown
CVE-2021-44207Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability Acclaim Systems23 Dec 2024Unknown
CVE-2024-12356BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability BeyondTrust19 Dec 2024Unknown
CVE-2018-14933NUUO NVRmini Devices OS Command Injection Vulnerability NUUO18 Dec 2024Unknown
CVE-2019-11001Reolink Multiple IP Cameras OS Command Injection VulnerabilityReolink18 Dec 2024Unknown
CVE-2021-40407Reolink RLC-410W IP Camera OS Command Injection Vulnerability Reolink18 Dec 2024Unknown
CVE-2022-23227NUUO NVRmini2 Devices Missing Authentication Vulnerability NUUO18 Dec 2024Unknown
CVE-2024-55956Cleo Multiple Products Unauthenticated File Upload VulnerabilityCleo17 Dec 2024Known
CVE-2024-20767Adobe ColdFusion Improper Access Control VulnerabilityAdobe16 Dec 2024Unknown
CVE-2024-35250Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability Microsoft16 Dec 2024Unknown
CVE-2024-50623Cleo Multiple Products Unrestricted File Upload VulnerabilityCleo13 Dec 2024Known
CVE-2024-49138Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityMicrosoft10 Dec 2024Unknown
CVE-2024-51378CyberPanel Incorrect Default Permissions VulnerabilityCyberPersons4 Dec 2024Known
CVE-2023-45727North Grid Proself Improper Restriction of XML External Entity (XXE) Reference VulnerabilityNorth Grid3 Dec 2024Unknown
CVE-2024-11667Zyxel Multiple Firewalls Path Traversal VulnerabilityZyxel3 Dec 2024Known
CVE-2024-11680ProjectSend Improper Authentication VulnerabilityProjectSend3 Dec 2024Unknown
CVE-2023-28461Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function VulnerabilityArray Networks25 Nov 2024Known
CVE-2024-21287Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization VulnerabilityOracle21 Nov 2024Unknown
CVE-2024-44308Apple Multiple Products Code Execution VulnerabilityApple21 Nov 2024Unknown
CVE-2024-44309Apple Multiple Products Cross-Site Scripting (XSS) VulnerabilityApple21 Nov 2024Unknown
CVE-2024-38812VMware vCenter Server Heap-Based Buffer Overflow VulnerabilityVMware20 Nov 2024Unknown
CVE-2024-38813VMware vCenter Server Privilege Escalation VulnerabilityVMware20 Nov 2024Unknown
CVE-2024-0012Palo Alto Networks PAN-OS Management Interface Authentication Bypass VulnerabilityPalo Alto Networks18 Nov 2024Known
CVE-2024-1212Progress Kemp LoadMaster OS Command Injection VulnerabilityProgress18 Nov 2024Unknown
CVE-2024-9474Palo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityPalo Alto Networks18 Nov 2024Known
CVE-2024-9463Palo Alto Networks Expedition OS Command Injection VulnerabilityPalo Alto Networks14 Nov 2024Unknown
CVE-2024-9465Palo Alto Networks Expedition SQL Injection VulnerabilityPalo Alto Networks14 Nov 2024Unknown
CVE-2014-2120Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) VulnerabilityCisco12 Nov 2024Unknown
CVE-2021-26086Atlassian Jira Server and Data Center Path Traversal VulnerabilityAtlassian12 Nov 2024Unknown
CVE-2021-41277Metabase GeoJSON API Local File Inclusion VulnerabilityMetabase12 Nov 2024Unknown
CVE-2024-43451Microsoft Windows NTLMv2 Hash Disclosure Spoofing VulnerabilityMicrosoft12 Nov 2024Unknown
CVE-2024-49039Microsoft Windows Task Scheduler Privilege Escalation VulnerabilityMicrosoft12 Nov 2024Known
CVE-2019-16278Nostromo nhttpd Directory Traversal VulnerabilityNostromo7 Nov 2024Unknown
CVE-2024-43093Android Framework Privilege Escalation VulnerabilityAndroid7 Nov 2024Unknown
CVE-2024-51567CyberPanel Incorrect Default Permissions VulnerabilityCyberPersons7 Nov 2024Known
CVE-2024-5910Palo Alto Networks Expedition Missing Authentication VulnerabilityPalo Alto Networks7 Nov 2024Unknown
CVE-2024-8956PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass VulnerabilityPTZOptics4 Nov 2024Unknown
CVE-2024-8957PTZOptics PT30X-SDI/NDI Cameras OS Command Injection VulnerabilityPTZOptics4 Nov 2024Unknown
CVE-2024-20481Cisco ASA and FTD Denial-of-Service VulnerabilityCisco24 Oct 2024Unknown
CVE-2024-37383RoundCube Webmail Cross-Site Scripting (XSS) VulnerabilityRoundcube24 Oct 2024Unknown
CVE-2024-47575Fortinet FortiManager Missing Authentication VulnerabilityFortinet23 Oct 2024Unknown
CVE-2024-38094Microsoft SharePoint Deserialization VulnerabilityMicrosoft22 Oct 2024Known
CVE-2024-9537ScienceLogic SL1 Unspecified VulnerabilityScienceLogic21 Oct 2024Unknown
CVE-2024-40711Veeam Backup and Replication Deserialization VulnerabilityVeeam17 Oct 2024Known
CVE-2024-28987SolarWinds Web Help Desk Hardcoded Credential VulnerabilitySolarWinds15 Oct 2024Unknown
CVE-2024-30088Microsoft Windows Kernel TOCTOU Race Condition VulnerabilityMicrosoft15 Oct 2024Known
CVE-2024-9680Mozilla Firefox Use-After-Free VulnerabilityMozilla15 Oct 2024Known
CVE-2024-23113Fortinet Multiple Products Format String VulnerabilityFortinet9 Oct 2024Unknown
CVE-2024-9379Ivanti Cloud Services Appliance (CSA) SQL Injection VulnerabilityIvanti9 Oct 2024Unknown
CVE-2024-9380Ivanti Cloud Services Appliance (CSA) OS Command Injection VulnerabilityIvanti9 Oct 2024Unknown
CVE-2024-43047Qualcomm Multiple Chipsets Use-After-Free VulnerabilityQualcomm8 Oct 2024Unknown
CVE-2024-43572Microsoft Windows Management Console Remote Code Execution VulnerabilityMicrosoft8 Oct 2024Unknown
CVE-2024-43573Microsoft Windows MSHTML Platform Spoofing VulnerabilityMicrosoft8 Oct 2024Unknown
CVE-2024-45519Synacor Zimbra Collaboration Suite (ZCS) Command Execution VulnerabilitySynacor3 Oct 2024Unknown
CVE-2024-29824Ivanti Endpoint Manager (EPM) SQL Injection VulnerabilityIvanti2 Oct 2024Unknown
CVE-2019-0344SAP Commerce Cloud Deserialization of Untrusted Data VulnerabilitySAP30 Sep 2024Unknown
CVE-2020-15415DrayTek Multiple Vigor Routers OS Command Injection VulnerabilityDrayTek30 Sep 2024Unknown
CVE-2023-25280D-Link DIR-820 Router OS Command Injection VulnerabilityD-Link30 Sep 2024Unknown
CVE-2024-7593Ivanti Virtual Traffic Manager Authentication Bypass VulnerabilityIvanti24 Sep 2024Unknown
CVE-2024-8963Ivanti Cloud Services Appliance (CSA) Path Traversal VulnerabilityIvanti19 Sep 2024Unknown
CVE-2020-0618Microsoft SQL Server Reporting Services Remote Code Execution VulnerabilityMicrosoft18 Sep 2024Known
CVE-2020-14644Oracle WebLogic Server Remote Code Execution VulnerabilityOracle18 Sep 2024Unknown
CVE-2022-21445Oracle ADF Faces Deserialization of Untrusted Data VulnerabilityOracle18 Sep 2024Unknown
CVE-2024-27348Apache HugeGraph-Server Improper Access Control VulnerabilityApache18 Sep 2024Unknown
CVE-2013-0643Adobe Flash Player Incorrect Default Permissions VulnerabilityAdobe17 Sep 2024Unknown
CVE-2013-0648Adobe Flash Player Code Execution VulnerabilityAdobe17 Sep 2024Unknown
CVE-2014-0497Adobe Flash Player Integer Underflow VulnerablityAdobe17 Sep 2024Unknown
CVE-2014-0502Adobe Flash Player Double Free VulnerablityAdobe17 Sep 2024Unknown
CVE-2024-43461Microsoft Windows MSHTML Platform Spoofing VulnerabilityMicrosoft16 Sep 2024Unknown
CVE-2024-6670Progress WhatsUp Gold SQL Injection VulnerabilityProgress16 Sep 2024Known
CVE-2024-8190Ivanti Cloud Services Appliance OS Command Injection VulnerabilityIvanti13 Sep 2024Unknown
CVE-2024-38014Microsoft Windows Installer Improper Privilege Management VulnerabilityMicrosoft10 Sep 2024Unknown
CVE-2024-38217Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure VulnerabilityMicrosoft10 Sep 2024Unknown
CVE-2024-38226Microsoft Publisher Protection Mechanism Failure VulnerabilityMicrosoft10 Sep 2024Unknown
CVE-2016-3714ImageMagick Improper Input Validation VulnerabilityImageMagick9 Sep 2024Unknown
CVE-2017-1000253Linux Kernel PIE Stack Buffer Corruption Vulnerability Linux9 Sep 2024Known
CVE-2024-40766SonicWall SonicOS Improper Access Control VulnerabilitySonicWall9 Sep 2024Known
CVE-2021-20123Draytek VigorConnect Path Traversal Vulnerability DrayTek3 Sep 2024Unknown
CVE-2021-20124Draytek VigorConnect Path Traversal Vulnerability DrayTek3 Sep 2024Unknown
CVE-2024-7262Kingsoft WPS Office Path Traversal VulnerabilityKingsoft3 Sep 2024Unknown
CVE-2024-7965Google Chromium V8 Inappropriate Implementation VulnerabilityGoogle28 Aug 2024Unknown
CVE-2024-38856Apache OFBiz Incorrect Authorization VulnerabilityApache27 Aug 2024Unknown
CVE-2024-7971Google Chromium V8 Type Confusion VulnerabilityGoogle26 Aug 2024Unknown
CVE-2024-39717Versa Director Dangerous File Type Upload VulnerabilityVersa23 Aug 2024Unknown
CVE-2021-31196Microsoft Exchange Server Information Disclosure VulnerabilityMicrosoft21 Aug 2024Unknown
CVE-2021-33044Dahua IP Camera Authentication Bypass VulnerabilityDahua21 Aug 2024Unknown
CVE-2021-33045Dahua IP Camera Authentication Bypass VulnerabilityDahua21 Aug 2024Unknown
CVE-2022-0185Linux Kernel Heap-Based Buffer Overflow VulnerabilityLinux21 Aug 2024Unknown
CVE-2024-23897Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityJenkins19 Aug 2024Known
CVE-2024-28986SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilitySolarWinds15 Aug 2024Unknown
CVE-2024-38106Microsoft Windows Kernel Privilege Escalation VulnerabilityMicrosoft13 Aug 2024Unknown
CVE-2024-38107Microsoft Windows Power Dependency Coordinator Privilege Escalation VulnerabilityMicrosoft13 Aug 2024Unknown
CVE-2024-38178Microsoft Windows Scripting Engine Memory Corruption VulnerabilityMicrosoft13 Aug 2024Unknown
CVE-2024-38189Microsoft Project Remote Code Execution Vulnerability Microsoft13 Aug 2024Unknown
CVE-2024-38193Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation VulnerabilityMicrosoft13 Aug 2024Unknown
CVE-2024-38213Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft13 Aug 2024Unknown
CVE-2024-32113Apache OFBiz Path Traversal VulnerabilityApache7 Aug 2024Unknown
CVE-2024-36971Android Kernel Remote Code Execution VulnerabilityAndroid7 Aug 2024Unknown
CVE-2018-0824Microsoft COM for Windows Deserialization of Untrusted Data VulnerabilityMicrosoft5 Aug 2024Unknown
CVE-2024-37085VMware ESXi Authentication Bypass VulnerabilityVMware30 Jul 2024Known
CVE-2023-45249Acronis Cyber Infrastructure (ACI) Insecure Default Password VulnerabilityAcronis29 Jul 2024Unknown
CVE-2024-4879ServiceNow Improper Input Validation VulnerabilityServiceNow29 Jul 2024Unknown
CVE-2024-5217ServiceNow Incomplete List of Disallowed Inputs VulnerabilityServiceNow29 Jul 2024Unknown
CVE-2012-4792Microsoft Internet Explorer Use-After-Free VulnerabilityMicrosoft23 Jul 2024Unknown
CVE-2024-39891Twilio Authy Information Disclosure VulnerabilityTwilio23 Jul 2024Unknown
CVE-2022-22948VMware vCenter Server Incorrect Default File Permissions Vulnerability VMware17 Jul 2024Unknown
CVE-2024-28995SolarWinds Serv-U Path Traversal Vulnerability SolarWinds17 Jul 2024Unknown
CVE-2024-34102Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityAdobe17 Jul 2024Unknown
CVE-2024-36401OSGeo GeoServer GeoTools Eval Injection VulnerabilityOSGeo15 Jul 2024Unknown
CVE-2024-23692Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityRejetto9 Jul 2024Known
CVE-2024-38080Microsoft Windows Hyper-V Privilege Escalation VulnerabilityMicrosoft9 Jul 2024Unknown
CVE-2024-38112Microsoft Windows MSHTML Platform Spoofing VulnerabilityMicrosoft9 Jul 2024Unknown
CVE-2024-20399Cisco NX-OS Command Injection VulnerabilityCisco2 Jul 2024Unknown
CVE-2020-13965Roundcube Webmail Cross-Site Scripting (XSS) VulnerabilityRoundcube26 Jun 2024Unknown
CVE-2022-24816OSGeo GeoServer JAI-EXT Code Injection VulnerabilityOSGeo26 Jun 2024Unknown
CVE-2022-2586Linux Kernel Use-After-Free VulnerabilityLinux26 Jun 2024Unknown
CVE-2024-26169Microsoft Windows Error Reporting Service Improper Privilege Management VulnerabilityMicrosoft13 Jun 2024Known
CVE-2024-32896Android Pixel Privilege Escalation VulnerabilityAndroid13 Jun 2024Unknown
CVE-2024-4358Progress Telerik Report Server Authentication Bypass by Spoofing VulnerabilityProgress13 Jun 2024Unknown
CVE-2024-4577PHP-CGI OS Command Injection VulnerabilityPHP12 Jun 2024Known
CVE-2024-4610Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityArm12 Jun 2024Unknown
CVE-2017-3506Oracle WebLogic Server OS Command Injection VulnerabilityOracle3 Jun 2024Unknown
CVE-2024-1086Linux Kernel Use-After-Free VulnerabilityLinux30 May 2024Known
CVE-2024-24919Check Point Quantum Security Gateways Information Disclosure VulnerabilityCheck Point30 May 2024Known
CVE-2024-4978Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code VulnerabilityJustice AV Solutions29 May 2024Unknown
CVE-2024-5274Google Chromium V8 Type Confusion VulnerabilityGoogle28 May 2024Unknown
CVE-2020-17519Apache Flink Improper Access Control VulnerabilityApache23 May 2024Unknown
CVE-2023-43208NextGen Healthcare Mirth Connect Deserialization of Untrusted Data VulnerabilityNextGen Healthcare20 May 2024Known
CVE-2024-4947Google Chromium V8 Type Confusion VulnerabilityGoogle20 May 2024Unknown
CVE-2014-100005D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) VulnerabilityD-Link16 May 2024Unknown
CVE-2021-40655D-Link DIR-605 Router Information Disclosure VulnerabilityD-Link16 May 2024Unknown
CVE-2024-4761Google Chromium V8 Out-of-Bounds Memory Write VulnerabilityGoogle16 May 2024Unknown
CVE-2024-30040Microsoft Windows MSHTML Platform Security Feature Bypass VulnerabilityMicrosoft14 May 2024Unknown
CVE-2024-30051 Microsoft DWM Core Library Privilege Escalation VulnerabilityMicrosoft14 May 2024Known
CVE-2024-4671Google Chromium Visuals Use-After-Free VulnerabilityGoogle13 May 2024Unknown
CVE-2023-7028GitLab Community and Enterprise Editions Improper Access Control VulnerabilityGitLab1 May 2024Unknown
CVE-2024-29988Microsoft SmartScreen Prompt Security Feature Bypass VulnerabilityMicrosoft30 Apr 2024Unknown
CVE-2024-20353Cisco ASA and FTD Denial of Service VulnerabilityCisco24 Apr 2024Unknown
CVE-2024-20359Cisco ASA and FTD Privilege Escalation VulnerabilityCisco24 Apr 2024Unknown
CVE-2024-4040CrushFTP VFS Sandbox Escape VulnerabilityCrushFTP24 Apr 2024Unknown
CVE-2022-38028Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft23 Apr 2024Unknown
CVE-2024-3400Palo Alto Networks PAN-OS Command Injection VulnerabilityPalo Alto Networks12 Apr 2024Known
CVE-2024-3272D-Link Multiple NAS Devices Use of Hard-Coded Credentials VulnerabilityD-Link11 Apr 2024Unknown
CVE-2024-3273D-Link Multiple NAS Devices Command Injection VulnerabilityD-Link11 Apr 2024Unknown
CVE-2024-29745Android Pixel Information Disclosure VulnerabilityAndroid4 Apr 2024Unknown
CVE-2024-29748Android Pixel Privilege Escalation VulnerabilityAndroid4 Apr 2024Unknown
CVE-2023-24955Microsoft SharePoint Server Code Injection VulnerabilityMicrosoft26 Mar 2024Known
CVE-2019-7256Nice Linear eMerge E3-Series OS Command Injection VulnerabilityNice25 Mar 2024Unknown
CVE-2021-44529Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ivanti25 Mar 2024Known
CVE-2023-48788Fortinet FortiClient EMS SQL Injection VulnerabilityFortinet25 Mar 2024Known
CVE-2024-27198JetBrains TeamCity Authentication Bypass VulnerabilityJetBrains7 Mar 2024Known
CVE-2024-23225Apple Multiple Products Memory Corruption VulnerabilityApple6 Mar 2024Unknown
CVE-2024-23296Apple Multiple Products Memory Corruption VulnerabilityApple6 Mar 2024Unknown
CVE-2021-36380Sunhillo SureLine OS Command Injection VulnerablitySunhillo5 Mar 2024Unknown
CVE-2023-21237Android Pixel Information Disclosure Vulnerability Android5 Mar 2024Unknown
CVE-2024-21338Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control VulnerabilityMicrosoft4 Mar 2024Known
CVE-2023-29360Microsoft Streaming Service Untrusted Pointer Dereference VulnerabilityMicrosoft29 Feb 2024Unknown
CVE-2024-1709ConnectWise ScreenConnect Authentication Bypass VulnerabilityConnectWise22 Feb 2024Known
CVE-2020-3259Cisco ASA and FTD Information Disclosure VulnerabilityCisco15 Feb 2024Known
CVE-2024-21410Microsoft Exchange Server Privilege Escalation VulnerabilityMicrosoft15 Feb 2024Unknown
CVE-2024-21351Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft13 Feb 2024Unknown
CVE-2024-21412Microsoft Windows Internet Shortcut Files Security Feature Bypass VulnerabilityMicrosoft13 Feb 2024Known
CVE-2023-43770Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityRoundcube12 Feb 2024Unknown
CVE-2024-21762Fortinet FortiOS Out-of-Bound Write VulnerabilityFortinet9 Feb 2024Known
CVE-2023-4762Google Chromium V8 Type Confusion VulnerabilityGoogle6 Feb 2024Unknown
CVE-2022-48618Apple Multiple Products Memory Corruption VulnerabilityApple31 Jan 2024Unknown
CVE-2024-21893Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityIvanti31 Jan 2024Known
CVE-2023-22527Atlassian Confluence Data Center and Server Template Injection VulnerabilityAtlassian24 Jan 2024Known
CVE-2024-23222Apple Multiple Products WebKit Type Confusion VulnerabilityApple23 Jan 2024Unknown
CVE-2023-34048VMware vCenter Server Out-of-Bounds Write VulnerabilityVMware22 Jan 2024Unknown
CVE-2023-35082Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass VulnerabilityIvanti18 Jan 2024Known
CVE-2023-6548Citrix NetScaler ADC and NetScaler Gateway Code Injection VulnerabilityCitrix17 Jan 2024Unknown
CVE-2023-6549Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow VulnerabilityCitrix17 Jan 2024Unknown
CVE-2024-0519Google Chromium V8 Out-of-Bounds Memory Access VulnerabilityGoogle17 Jan 2024Unknown
CVE-2018-15133Laravel Deserialization of Untrusted Data VulnerabilityLaravel16 Jan 2024Unknown
CVE-2023-29357Microsoft SharePoint Server Privilege Escalation VulnerabilityMicrosoft10 Jan 2024Known
CVE-2023-46805Ivanti Connect Secure and Policy Secure Authentication Bypass VulnerabilityIvanti10 Jan 2024Known
CVE-2024-21887Ivanti Connect Secure and Policy Secure Command Injection VulnerabilityIvanti10 Jan 2024Known
CVE-2016-20017D-Link DSL-2750B Devices Command Injection VulnerabilityD-Link8 Jan 2024Unknown
CVE-2023-23752Joomla! Improper Access Control VulnerabilityJoomla8 Jan 2024Unknown
CVE-2023-27524Apache Superset Insecure Default Initialization of Resource VulnerabilityApache8 Jan 2024Unknown
CVE-2023-29300Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityAdobe8 Jan 2024Known
CVE-2023-38203Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityAdobe8 Jan 2024Known
CVE-2023-41990Apple Multiple Products Code Execution VulnerabilityApple8 Jan 2024Unknown
CVE-2023-7024Google Chromium WebRTC Heap Buffer Overflow VulnerabilityGoogle2 Jan 2024Unknown
CVE-2023-7101Spreadsheet::ParseExcel Remote Code Execution VulnerabilitySpreadsheet::ParseExcel2 Jan 2024Unknown

Source: CISA Known Exploited Vulnerabilities (KEV) catalog, 2026.10.28, as of 28 Oct 2026. About the data.

All years