HackZoneLabs News
Newsletter

Known exploited vulnerabilities

From CISA’s Known Exploited Vulnerabilities catalogue: flaws that attackers are using now, when each was added, and the date federal agencies were told to fix it by.

Feed of new additions

In the catalogue
1781
Added in the last 7 days
12
Used in ransomware
361

The catalogue, newest first

CVEVendorProductNameAddedFix dueRansomware
CVE-2024-7593IvantiVirtual Traffic ManagerIvanti Virtual Traffic Manager Authentication Bypass Vulnerability24 Sep 202415 Oct 2024Unknown
CVE-2024-8963IvantiCloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability19 Sep 202410 Oct 2024Unknown
CVE-2020-0618MicrosoftSQL ServerMicrosoft SQL Server Reporting Services Remote Code Execution Vulnerability18 Sep 20249 Oct 2024Known
CVE-2020-14644OracleWebLogic ServerOracle WebLogic Server Remote Code Execution Vulnerability18 Sep 20249 Oct 2024Unknown
CVE-2022-21445OracleADF FacesOracle ADF Faces Deserialization of Untrusted Data Vulnerability18 Sep 20249 Oct 2024Unknown
CVE-2024-27348ApacheHugeGraph-ServerApache HugeGraph-Server Improper Access Control Vulnerability18 Sep 20249 Oct 2024Unknown
CVE-2013-0643AdobeFlash PlayerAdobe Flash Player Incorrect Default Permissions Vulnerability17 Sep 20248 Oct 2024Unknown
CVE-2013-0648AdobeFlash PlayerAdobe Flash Player Code Execution Vulnerability17 Sep 20248 Oct 2024Unknown
CVE-2014-0497AdobeFlash PlayerAdobe Flash Player Integer Underflow Vulnerablity17 Sep 20248 Oct 2024Unknown
CVE-2014-0502AdobeFlash PlayerAdobe Flash Player Double Free Vulnerablity17 Sep 20248 Oct 2024Unknown
CVE-2024-43461MicrosoftWindowsMicrosoft Windows MSHTML Platform Spoofing Vulnerability16 Sep 20247 Oct 2024Unknown
CVE-2024-6670ProgressWhatsUp GoldProgress WhatsUp Gold SQL Injection Vulnerability16 Sep 20247 Oct 2024Known
CVE-2024-8190IvantiCloud Services ApplianceIvanti Cloud Services Appliance OS Command Injection Vulnerability13 Sep 20244 Oct 2024Unknown
CVE-2024-38014MicrosoftWindowsMicrosoft Windows Installer Improper Privilege Management Vulnerability10 Sep 20241 Oct 2024Unknown
CVE-2024-38217MicrosoftWindowsMicrosoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability10 Sep 20241 Oct 2024Unknown
CVE-2024-38226MicrosoftPublisherMicrosoft Publisher Protection Mechanism Failure Vulnerability10 Sep 20241 Oct 2024Unknown
CVE-2016-3714ImageMagickImageMagickImageMagick Improper Input Validation Vulnerability9 Sep 202430 Sep 2024Unknown
CVE-2017-1000253LinuxKernelLinux Kernel PIE Stack Buffer Corruption Vulnerability9 Sep 202430 Sep 2024Known
CVE-2024-40766SonicWallSonicOSSonicWall SonicOS Improper Access Control Vulnerability9 Sep 202430 Sep 2024Known
CVE-2021-20123DrayTekVigorConnectDraytek VigorConnect Path Traversal Vulnerability3 Sep 202424 Sep 2024Unknown
CVE-2021-20124DrayTekVigorConnectDraytek VigorConnect Path Traversal Vulnerability3 Sep 202424 Sep 2024Unknown
CVE-2024-7262KingsoftWPS OfficeKingsoft WPS Office Path Traversal Vulnerability3 Sep 202424 Sep 2024Unknown
CVE-2024-7965GoogleChromium V8Google Chromium V8 Inappropriate Implementation Vulnerability28 Aug 202418 Sep 2024Unknown
CVE-2024-38856ApacheOFBizApache OFBiz Incorrect Authorization Vulnerability27 Aug 202417 Sep 2024Unknown
CVE-2024-7971GoogleChromium V8Google Chromium V8 Type Confusion Vulnerability26 Aug 202416 Sep 2024Unknown
CVE-2024-39717VersaDirectorVersa Director Dangerous File Type Upload Vulnerability23 Aug 202413 Sep 2024Unknown
CVE-2021-31196MicrosoftExchange ServerMicrosoft Exchange Server Information Disclosure Vulnerability21 Aug 202411 Sep 2024Unknown
CVE-2021-33044DahuaIP Camera FirmwareDahua IP Camera Authentication Bypass Vulnerability21 Aug 202411 Sep 2024Unknown
CVE-2021-33045DahuaIP Camera FirmwareDahua IP Camera Authentication Bypass Vulnerability21 Aug 202411 Sep 2024Unknown
CVE-2022-0185LinuxKernelLinux Kernel Heap-Based Buffer Overflow Vulnerability21 Aug 202411 Sep 2024Unknown
CVE-2024-23897JenkinsJenkins Command Line Interface (CLI)Jenkins Command Line Interface (CLI) Path Traversal Vulnerability19 Aug 20249 Sep 2024Known
CVE-2024-28986SolarWindsWeb Help DeskSolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability15 Aug 20245 Sep 2024Unknown
CVE-2024-38106MicrosoftWindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability13 Aug 20243 Sep 2024Unknown
CVE-2024-38107MicrosoftWindowsMicrosoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability13 Aug 20243 Sep 2024Unknown
CVE-2024-38178MicrosoftWindowsMicrosoft Windows Scripting Engine Memory Corruption Vulnerability13 Aug 20243 Sep 2024Unknown
CVE-2024-38189MicrosoftProjectMicrosoft Project Remote Code Execution Vulnerability13 Aug 20243 Sep 2024Unknown
CVE-2024-38193MicrosoftWindowsMicrosoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability13 Aug 20243 Sep 2024Unknown
CVE-2024-38213MicrosoftWindowsMicrosoft Windows SmartScreen Security Feature Bypass Vulnerability13 Aug 20243 Sep 2024Unknown
CVE-2024-32113ApacheOFBizApache OFBiz Path Traversal Vulnerability7 Aug 202428 Aug 2024Unknown
CVE-2024-36971AndroidKernelAndroid Kernel Remote Code Execution Vulnerability7 Aug 202428 Aug 2024Unknown
CVE-2018-0824MicrosoftWindowsMicrosoft COM for Windows Deserialization of Untrusted Data Vulnerability5 Aug 202426 Aug 2024Unknown
CVE-2024-37085VMwareESXiVMware ESXi Authentication Bypass Vulnerability30 Jul 202420 Aug 2024Known
CVE-2023-45249AcronisCyber Infrastructure (ACI)Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability29 Jul 202419 Aug 2024Unknown
CVE-2024-4879ServiceNowUtah, Vancouver, and Washington DC Now PlatformServiceNow Improper Input Validation Vulnerability29 Jul 202419 Aug 2024Unknown
CVE-2024-5217ServiceNowUtah, Vancouver, and Washington DC Now PlatformServiceNow Incomplete List of Disallowed Inputs Vulnerability29 Jul 202419 Aug 2024Unknown
CVE-2012-4792MicrosoftInternet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability23 Jul 202413 Aug 2024Unknown
CVE-2024-39891TwilioAuthyTwilio Authy Information Disclosure Vulnerability23 Jul 202413 Aug 2024Unknown
CVE-2022-22948VMwarevCenter ServerVMware vCenter Server Incorrect Default File Permissions Vulnerability17 Jul 20247 Aug 2024Unknown
CVE-2024-28995SolarWindsServ-USolarWinds Serv-U Path Traversal Vulnerability17 Jul 20247 Aug 2024Unknown
CVE-2024-34102AdobeCommerce and Magento Open SourceAdobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability17 Jul 20247 Aug 2024Unknown
CVE-2024-36401OSGeoGeoServerOSGeo GeoServer GeoTools Eval Injection Vulnerability15 Jul 20245 Aug 2024Unknown
CVE-2024-23692RejettoHTTP File ServerRejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability9 Jul 202430 Jul 2024Known
CVE-2024-38080MicrosoftWindowsMicrosoft Windows Hyper-V Privilege Escalation Vulnerability9 Jul 202430 Jul 2024Unknown
CVE-2024-38112MicrosoftWindowsMicrosoft Windows MSHTML Platform Spoofing Vulnerability9 Jul 202430 Jul 2024Unknown
CVE-2024-20399CiscoNX-OSCisco NX-OS Command Injection Vulnerability2 Jul 202423 Jul 2024Unknown
CVE-2020-13965RoundcubeWebmailRoundcube Webmail Cross-Site Scripting (XSS) Vulnerability26 Jun 202417 Jul 2024Unknown
CVE-2022-24816OSGeoJAI-EXTOSGeo GeoServer JAI-EXT Code Injection Vulnerability26 Jun 202417 Jul 2024Unknown
CVE-2022-2586LinuxKernelLinux Kernel Use-After-Free Vulnerability26 Jun 202417 Jul 2024Unknown
CVE-2024-26169MicrosoftWindowsMicrosoft Windows Error Reporting Service Improper Privilege Management Vulnerability13 Jun 20244 Jul 2024Known
CVE-2024-32896AndroidPixelAndroid Pixel Privilege Escalation Vulnerability13 Jun 20244 Jul 2024Unknown
CVE-2024-4358ProgressTelerik Report ServerProgress Telerik Report Server Authentication Bypass by Spoofing Vulnerability13 Jun 20244 Jul 2024Unknown
CVE-2024-4577PHP GroupPHPPHP-CGI OS Command Injection Vulnerability12 Jun 20243 Jul 2024Known
CVE-2024-4610ArmMali GPU Kernel DriverArm Mali GPU Kernel Driver Use-After-Free Vulnerability12 Jun 20243 Jul 2024Unknown
CVE-2017-3506OracleWebLogic ServerOracle WebLogic Server OS Command Injection Vulnerability3 Jun 202424 Jun 2024Unknown
CVE-2024-1086LinuxKernelLinux Kernel Use-After-Free Vulnerability30 May 202420 Jun 2024Known
CVE-2024-24919Check PointQuantum Security GatewaysCheck Point Quantum Security Gateways Information Disclosure Vulnerability30 May 202420 Jun 2024Known
CVE-2024-4978Justice AV SolutionsViewerJustice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability29 May 202419 Jun 2024Unknown
CVE-2024-5274GoogleChromium V8Google Chromium V8 Type Confusion Vulnerability28 May 202418 Jun 2024Unknown
CVE-2020-17519ApacheFlinkApache Flink Improper Access Control Vulnerability23 May 202413 Jun 2024Unknown
CVE-2023-43208NextGen HealthcareMirth ConnectNextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability20 May 202410 Jun 2024Known
CVE-2024-4947GoogleChromium V8Google Chromium V8 Type Confusion Vulnerability20 May 202410 Jun 2024Unknown
CVE-2014-100005D-LinkDIR-600 RouterD-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability16 May 20246 Jun 2024Unknown
CVE-2021-40655D-LinkDIR-605 RouterD-Link DIR-605 Router Information Disclosure Vulnerability16 May 20246 Jun 2024Unknown
CVE-2024-4761GoogleChromium V8Google Chromium V8 Out-of-Bounds Memory Write Vulnerability16 May 20246 Jun 2024Unknown
CVE-2024-30040MicrosoftWindowsMicrosoft Windows MSHTML Platform Security Feature Bypass Vulnerability14 May 20244 Jun 2024Unknown
CVE-2024-30051MicrosoftDWM Core LibraryMicrosoft DWM Core Library Privilege Escalation Vulnerability14 May 20244 Jun 2024Known
CVE-2024-4671GoogleChromiumGoogle Chromium Visuals Use-After-Free Vulnerability13 May 20243 Jun 2024Unknown
CVE-2023-7028GitLabGitLab CE/EEGitLab Community and Enterprise Editions Improper Access Control Vulnerability1 May 202422 May 2024Unknown
CVE-2024-29988MicrosoftSmartScreen PromptMicrosoft SmartScreen Prompt Security Feature Bypass Vulnerability30 Apr 202421 May 2024Unknown
CVE-2024-20353CiscoAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Denial of Service Vulnerability24 Apr 20241 May 2024Unknown
CVE-2024-20359CiscoAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Privilege Escalation Vulnerability24 Apr 20241 May 2024Unknown
CVE-2024-4040CrushFTPCrushFTPCrushFTP VFS Sandbox Escape Vulnerability24 Apr 20241 May 2024Unknown
CVE-2022-38028MicrosoftWindowsMicrosoft Windows Print Spooler Privilege Escalation Vulnerability23 Apr 202414 May 2024Unknown
CVE-2024-3400Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Command Injection Vulnerability12 Apr 202419 Apr 2024Known
CVE-2024-3272D-LinkMultiple NAS DevicesD-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability11 Apr 20242 May 2024Unknown
CVE-2024-3273D-LinkMultiple NAS DevicesD-Link Multiple NAS Devices Command Injection Vulnerability11 Apr 20242 May 2024Unknown
CVE-2024-29745AndroidPixelAndroid Pixel Information Disclosure Vulnerability4 Apr 202425 Apr 2024Unknown
CVE-2024-29748AndroidPixelAndroid Pixel Privilege Escalation Vulnerability4 Apr 202425 Apr 2024Unknown
CVE-2023-24955MicrosoftSharePoint ServerMicrosoft SharePoint Server Code Injection Vulnerability26 Mar 202416 Apr 2024Known
CVE-2019-7256NiceLinear eMerge E3-SeriesNice Linear eMerge E3-Series OS Command Injection Vulnerability25 Mar 202415 Apr 2024Unknown
CVE-2021-44529IvantiEndpoint Manager Cloud Service Appliance (EPM CSA)Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability25 Mar 202415 Apr 2024Known
CVE-2023-48788FortinetFortiClient EMSFortinet FortiClient EMS SQL Injection Vulnerability25 Mar 202415 Apr 2024Known
CVE-2024-27198JetBrainsTeamCityJetBrains TeamCity Authentication Bypass Vulnerability7 Mar 202428 Mar 2024Known
CVE-2024-23225AppleMultiple ProductsApple Multiple Products Memory Corruption Vulnerability6 Mar 202427 Mar 2024Unknown
CVE-2024-23296AppleMultiple ProductsApple Multiple Products Memory Corruption Vulnerability6 Mar 202427 Mar 2024Unknown
CVE-2021-36380SunhilloSureLineSunhillo SureLine OS Command Injection Vulnerablity5 Mar 202426 Mar 2024Unknown
CVE-2023-21237AndroidPixelAndroid Pixel Information Disclosure Vulnerability5 Mar 202426 Mar 2024Unknown
CVE-2024-21338MicrosoftWindowsMicrosoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability4 Mar 202425 Mar 2024Known
CVE-2023-29360MicrosoftStreaming ServiceMicrosoft Streaming Service Untrusted Pointer Dereference Vulnerability29 Feb 202421 Mar 2024Unknown
CVE-2024-1709ConnectWiseScreenConnectConnectWise ScreenConnect Authentication Bypass Vulnerability22 Feb 202429 Feb 2024Known