HackZoneLabs News
Newsletter

Known exploited vulnerabilities

From CISA’s Known Exploited Vulnerabilities catalogue: flaws that attackers are using now, when each was added, and the date federal agencies were told to fix it by.

Feed of new additions

In the catalogue
1781
Added in the last 7 days
12
Used in ransomware
361

The catalogue, newest first

CVEVendorProductNameAddedFix dueRansomware
CVE-2024-4885ProgressWhatsUp GoldProgress WhatsUp Gold Path Traversal Vulnerability3 Mar 202524 Mar 2025Unknown
CVE-2023-34192SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability25 Feb 202518 Mar 2025Unknown
CVE-2024-49035MicrosoftPartner CenterMicrosoft Partner Center Improper Access Control Vulnerability25 Feb 202518 Mar 2025Unknown
CVE-2017-3066AdobeColdFusionAdobe ColdFusion Deserialization Vulnerability24 Feb 202517 Mar 2025Unknown
CVE-2024-20953OracleAgile Product Lifecycle Management (PLM)Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability24 Feb 202517 Mar 2025Unknown
CVE-2025-24989MicrosoftPower PagesMicrosoft Power Pages Improper Access Control Vulnerability21 Feb 202514 Mar 2025Unknown
CVE-2025-0111Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS File Read Vulnerability20 Feb 202513 Mar 2025Unknown
CVE-2025-23209Craft CMSCraft CMSCraft CMS Code Injection Vulnerability20 Feb 202513 Mar 2025Unknown
CVE-2024-53704SonicWallSonicOSSonicWall SonicOS SSLVPN Improper Authentication Vulnerability18 Feb 202511 Mar 2025Known
CVE-2025-0108Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Authentication Bypass Vulnerability18 Feb 202511 Mar 2025Unknown
CVE-2024-57727SimpleHelpSimpleHelpSimpleHelp Path Traversal Vulnerability13 Feb 20256 Mar 2025Known
CVE-2024-41710MitelSIP PhonesMitel SIP Phones Argument Injection Vulnerability12 Feb 20255 Mar 2025Unknown
CVE-2025-24200AppleiOS and iPadOSApple iOS and iPadOS Incorrect Authorization Vulnerability12 Feb 20255 Mar 2025Unknown
CVE-2024-40890ZyxelDSL CPE DevicesZyxel DSL CPE OS Command Injection Vulnerability11 Feb 20254 Mar 2025Unknown
CVE-2024-40891ZyxelDSL CPE DevicesZyxel DSL CPE OS Command Injection Vulnerability11 Feb 20254 Mar 2025Unknown
CVE-2025-21391MicrosoftWindowsMicrosoft Windows Storage Link Following Vulnerability11 Feb 20254 Mar 2025Unknown
CVE-2025-21418MicrosoftWindowsMicrosoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability11 Feb 20254 Mar 2025Unknown
CVE-2025-0994TrimbleCityworksTrimble Cityworks Deserialization Vulnerability7 Feb 202528 Feb 2025Unknown
CVE-2020-15069SophosXG FirewallSophos XG Firewall Buffer Overflow Vulnerability6 Feb 202527 Feb 2025Unknown
CVE-2020-29574SophosCyberoamOSCyberoamOS (CROS) SQL Injection Vulnerability6 Feb 202527 Feb 2025Known
CVE-2022-23748AudinateDante DiscoveryDante Discovery Process Control Vulnerability6 Feb 202527 Feb 2025Unknown
CVE-2024-21413MicrosoftOffice OutlookMicrosoft Outlook Improper Input Validation Vulnerability6 Feb 202527 Feb 2025Unknown
CVE-2025-04117-Zip7-Zip7-Zip Mark of the Web Bypass Vulnerability6 Feb 202527 Feb 2025Unknown
CVE-2024-53104LinuxKernelLinux Kernel Out-of-Bounds Write Vulnerability5 Feb 202526 Feb 2025Unknown
CVE-2018-19410PaesslerPRTG Network MonitorPaessler PRTG Network Monitor Local File Inclusion Vulnerability4 Feb 202525 Feb 2025Unknown
CVE-2018-9276PaesslerPRTG Network MonitorPaessler PRTG Network Monitor OS Command Injection Vulnerability4 Feb 202525 Feb 2025Unknown
CVE-2024-29059Microsoft.NET FrameworkMicrosoft .NET Framework Information Disclosure Vulnerability4 Feb 202525 Feb 2025Unknown
CVE-2024-45195ApacheOFBizApache OFBiz Forced Browsing Vulnerability4 Feb 202525 Feb 2025Unknown
CVE-2025-24085AppleMultiple ProductsApple Multiple Products Use-After-Free Vulnerability29 Jan 202519 Feb 2025Unknown
CVE-2025-23006SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances Deserialization Vulnerability24 Jan 202514 Feb 2025Known
CVE-2020-11023JQueryJQueryJQuery Cross-Site Scripting (XSS) Vulnerability23 Jan 202513 Feb 2025Unknown
CVE-2024-50603AviatrixControllersAviatrix Controllers OS Command Injection Vulnerability16 Jan 20256 Feb 2025Unknown
CVE-2024-55591FortinetFortiOS and FortiProxyFortinet FortiOS and FortiProxy Authentication Bypass Vulnerability14 Jan 202521 Jan 2025Known
CVE-2025-21333MicrosoftWindowsMicrosoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability14 Jan 20254 Feb 2025Unknown
CVE-2025-21334MicrosoftWindowsMicrosoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability14 Jan 20254 Feb 2025Unknown
CVE-2025-21335MicrosoftWindowsMicrosoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability14 Jan 20254 Feb 2025Unknown
CVE-2023-48365QlikSenseQlik Sense HTTP Tunneling Vulnerability13 Jan 20253 Feb 2025Known
CVE-2024-12686BeyondTrustPrivileged Remote Access (PRA) and Remote Support (RS)BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability13 Jan 20253 Feb 2025Unknown
CVE-2025-0282IvantiConnect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability8 Jan 202515 Jan 2025Known
CVE-2020-2883OracleWebLogic ServerOracle WebLogic Server Unspecified Vulnerability7 Jan 202528 Jan 2025Unknown
CVE-2024-41713MitelMiCollabMitel MiCollab Path Traversal Vulnerability7 Jan 202528 Jan 2025Known
CVE-2024-55550MitelMiCollabMitel MiCollab Path Traversal Vulnerability7 Jan 202528 Jan 2025Known
CVE-2024-3393Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability30 Dec 202420 Jan 2025Unknown
CVE-2021-44207Acclaim SystemsUSAHERDSAcclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability23 Dec 202413 Jan 2025Unknown
CVE-2024-12356BeyondTrustPrivileged Remote Access (PRA) and Remote Support (RS)BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability19 Dec 202427 Dec 2024Unknown
CVE-2018-14933NUUONVRmini DevicesNUUO NVRmini Devices OS Command Injection Vulnerability18 Dec 20248 Jan 2025Unknown
CVE-2019-11001ReolinkMultiple IP CamerasReolink Multiple IP Cameras OS Command Injection Vulnerability18 Dec 20248 Jan 2025Unknown
CVE-2021-40407ReolinkRLC-410W IP CameraReolink RLC-410W IP Camera OS Command Injection Vulnerability18 Dec 20248 Jan 2025Unknown
CVE-2022-23227NUUONVRmini2 DevicesNUUO NVRmini2 Devices Missing Authentication Vulnerability18 Dec 20248 Jan 2025Unknown
CVE-2024-55956CleoMultiple ProductsCleo Multiple Products Unauthenticated File Upload Vulnerability17 Dec 20247 Jan 2025Known
CVE-2024-20767AdobeColdFusionAdobe ColdFusion Improper Access Control Vulnerability16 Dec 20246 Jan 2025Unknown
CVE-2024-35250MicrosoftWindowsMicrosoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability16 Dec 20246 Jan 2025Unknown
CVE-2024-50623CleoMultiple ProductsCleo Multiple Products Unrestricted File Upload Vulnerability13 Dec 20243 Jan 2025Known
CVE-2024-49138MicrosoftWindowsMicrosoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability10 Dec 202431 Dec 2024Unknown
CVE-2024-51378CyberPersonsCyberPanelCyberPanel Incorrect Default Permissions Vulnerability4 Dec 202425 Dec 2024Known
CVE-2023-45727North GridProselfNorth Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability3 Dec 202424 Dec 2024Unknown
CVE-2024-11667ZyxelMultiple FirewallsZyxel Multiple Firewalls Path Traversal Vulnerability3 Dec 202424 Dec 2024Known
CVE-2024-11680ProjectSendProjectSendProjectSend Improper Authentication Vulnerability3 Dec 202424 Dec 2024Unknown
CVE-2023-28461Array NetworksAG/vxAG ArrayOSArray Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability25 Nov 202416 Dec 2024Known
CVE-2024-21287OracleAgile Product Lifecycle Management (PLM)Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability21 Nov 202412 Dec 2024Unknown
CVE-2024-44308AppleMultiple ProductsApple Multiple Products Code Execution Vulnerability21 Nov 202412 Dec 2024Unknown
CVE-2024-44309AppleMultiple ProductsApple Multiple Products Cross-Site Scripting (XSS) Vulnerability21 Nov 202412 Dec 2024Unknown
CVE-2024-38812VMwarevCenter ServerVMware vCenter Server Heap-Based Buffer Overflow Vulnerability20 Nov 202411 Dec 2024Unknown
CVE-2024-38813VMwarevCenter ServerVMware vCenter Server Privilege Escalation Vulnerability20 Nov 202411 Dec 2024Unknown
CVE-2024-0012Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability18 Nov 20249 Dec 2024Known
CVE-2024-1212ProgressKemp LoadMasterProgress Kemp LoadMaster OS Command Injection Vulnerability18 Nov 20249 Dec 2024Unknown
CVE-2024-9474Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability18 Nov 20249 Dec 2024Known
CVE-2024-9463Palo Alto NetworksExpeditionPalo Alto Networks Expedition OS Command Injection Vulnerability14 Nov 20245 Dec 2024Unknown
CVE-2024-9465Palo Alto NetworksExpeditionPalo Alto Networks Expedition SQL Injection Vulnerability14 Nov 20245 Dec 2024Unknown
CVE-2014-2120CiscoAdaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability12 Nov 20243 Dec 2024Unknown
CVE-2021-26086AtlassianJira Server and Data CenterAtlassian Jira Server and Data Center Path Traversal Vulnerability12 Nov 20243 Dec 2024Unknown
CVE-2021-41277MetabaseMetabaseMetabase GeoJSON API Local File Inclusion Vulnerability12 Nov 20243 Dec 2024Unknown
CVE-2024-43451MicrosoftWindowsMicrosoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability12 Nov 20243 Dec 2024Unknown
CVE-2024-49039MicrosoftWindowsMicrosoft Windows Task Scheduler Privilege Escalation Vulnerability12 Nov 20243 Dec 2024Known
CVE-2019-16278NostromonhttpdNostromo nhttpd Directory Traversal Vulnerability7 Nov 202428 Nov 2024Unknown
CVE-2024-43093AndroidFrameworkAndroid Framework Privilege Escalation Vulnerability7 Nov 202428 Nov 2024Unknown
CVE-2024-51567CyberPersonsCyberPanelCyberPanel Incorrect Default Permissions Vulnerability7 Nov 202428 Nov 2024Known
CVE-2024-5910Palo Alto NetworksExpeditionPalo Alto Networks Expedition Missing Authentication Vulnerability7 Nov 202428 Nov 2024Unknown
CVE-2024-8956PTZOpticsPT30X-SDI/NDI CamerasPTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability4 Nov 202425 Nov 2024Unknown
CVE-2024-8957PTZOpticsPT30X-SDI/NDI CamerasPTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability4 Nov 202425 Nov 2024Unknown
CVE-2024-20481CiscoAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Denial-of-Service Vulnerability24 Oct 202414 Nov 2024Unknown
CVE-2024-37383RoundcubeWebmailRoundCube Webmail Cross-Site Scripting (XSS) Vulnerability24 Oct 202414 Nov 2024Unknown
CVE-2024-47575FortinetFortiManagerFortinet FortiManager Missing Authentication Vulnerability23 Oct 202413 Nov 2024Unknown
CVE-2024-38094MicrosoftSharePointMicrosoft SharePoint Deserialization Vulnerability22 Oct 202412 Nov 2024Known
CVE-2024-9537ScienceLogicSL1ScienceLogic SL1 Unspecified Vulnerability21 Oct 202411 Nov 2024Unknown
CVE-2024-40711VeeamBackup & ReplicationVeeam Backup and Replication Deserialization Vulnerability17 Oct 20247 Nov 2024Known
CVE-2024-28987SolarWindsWeb Help DeskSolarWinds Web Help Desk Hardcoded Credential Vulnerability15 Oct 20245 Nov 2024Unknown
CVE-2024-30088MicrosoftWindowsMicrosoft Windows Kernel TOCTOU Race Condition Vulnerability15 Oct 20245 Nov 2024Known
CVE-2024-9680MozillaFirefoxMozilla Firefox Use-After-Free Vulnerability15 Oct 20245 Nov 2024Known
CVE-2024-23113FortinetMultiple ProductsFortinet Multiple Products Format String Vulnerability9 Oct 202430 Oct 2024Unknown
CVE-2024-9379IvantiCloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability9 Oct 202430 Oct 2024Unknown
CVE-2024-9380IvantiCloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability9 Oct 202430 Oct 2024Unknown
CVE-2024-43047QualcommMultiple ChipsetsQualcomm Multiple Chipsets Use-After-Free Vulnerability8 Oct 202429 Oct 2024Unknown
CVE-2024-43572MicrosoftWindowsMicrosoft Windows Management Console Remote Code Execution Vulnerability8 Oct 202429 Oct 2024Unknown
CVE-2024-43573MicrosoftWindowsMicrosoft Windows MSHTML Platform Spoofing Vulnerability8 Oct 202429 Oct 2024Unknown
CVE-2024-45519SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability3 Oct 202424 Oct 2024Unknown
CVE-2024-29824IvantiEndpoint Manager (EPM)Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability2 Oct 202423 Oct 2024Unknown
CVE-2019-0344SAPCommerce CloudSAP Commerce Cloud Deserialization of Untrusted Data Vulnerability30 Sep 202421 Oct 2024Unknown
CVE-2020-15415DrayTekMultiple Vigor RoutersDrayTek Multiple Vigor Routers OS Command Injection Vulnerability30 Sep 202421 Oct 2024Unknown
CVE-2023-25280D-LinkDIR-820 RouterD-Link DIR-820 Router OS Command Injection Vulnerability30 Sep 202421 Oct 2024Unknown