CISA Known Exploited Vulnerabilities Catalog

ronjor · Jan 14, 2025

CISA Adds Two Known Exploited Vulnerabilities to Catalog 13 Jan 2025

Release Date January 13, 2025
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
CVE-2024-48365Qlik Sense HTTP Tunneling Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jan 16, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 16 Jan 2025

Release Date January 16, 2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jan 23, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 23 Jan 2025

01/23/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2020-11023 JQuery Cross-Site Scripting (XSS) Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise
Click to expand...

ronjor · Jan 24, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 24 Jan 2025

01/24/2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jan 29, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 29 Jan 2025

Release Date January 29, 2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation, as confirmed by Fortinet.
Click to expand...

CVE-2025-24085 Apple Multiple Products Use-After-Free Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 4, 2025

CISA Adds Four Known Exploited Vulnerabilities to Catalog 04 Feb 2025

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-45195 Apache OFBiz Forced Browsing Vulnerability
CVE-2024-29059 Microsoft .NET Framework Information Disclosure Vulnerability
CVE-2018-9276 Paessler PRTG Network Monitor OS Command Injection Vulnerability
CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 5, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 05 Feb 2025
Release Date February 05, 2025

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-53104 Linux Kernel Out-of-Bounds Write Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 6, 2025

CISA Adds Five Known Exploited Vulnerabilities to Catalog 06 Feb 2025

Release Date February 06, 2025
CISA has added five vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-0411 7-Zip Mark of the Web Bypass Vulnerability
CVE-2022-23748 Dante Discovery Process Control Vulnerability
CVE-2024-21413 Microsoft Outlook Improper Input Validation Vulnerability
CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability
CVE-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 7, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 07 Feb 2025

02/07/2025
CISA has added one vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-0994 Trimble Cityworks Deserialization Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 11, 2025

CISA Adds Four Known Exploited Vulnerabilities to Catalog 11 Feb 2025

02/11/2025
CISA has added four vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability
CVE-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability
CVE-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
CVE-2025-21391 Microsoft Windows Storage Link Following Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 12, 2025

CISA Adds Two Known Exploited Vulnerabilities to Catalog 12 Feb 2025

02/12/2025
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-24200 Apple iOS and iPadOS Incorrect Authorization Vulnerability
CVE-2024-41710 Mitel SIP Phones Argument Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 20, 2025

CISA Adds Two Known Exploited Vulnerabilities to Catalog 20 Feb 2025

02/20/2025
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-23209 Craft CMS Code Injection Vulnerability
CVE-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 21, 2025

CISA Adds One Known Exploited Vulnerability to Catalog 21 Feb 2025

Release Date February 21, 2025
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 24, 2025

CISA Adds Two Known Exploited Vulnerabilities to Catalog 24 Feb 2025

Release Date February 24, 2025
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2017-3066 Adobe ColdFusion Deserialization Vulnerability
CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 25, 2025

CISA Adds Two Known Exploited Vulnerabilities to Catalog 25 Feb 2025

Release Date February 25, 2025
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability
CVE-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Click to expand...

Users and administrators are also encouraged to review the Palo Alto Threat Brief: Operation Lunar Peek
related to CVE-2024-0012, the Palo Alto Security Bulletin for CVE-2024-0012, and the Palo Alto Security Bulletin for CVE-2024-9474 for additional information.
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Mar 3, 2025

CISA Adds Five Known Exploited Vulnerabilities to Catalog 03 Mar 2025

CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Release Date March 03, 2025
Click to expand...

CVE-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability
CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
CVE-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
Click to expand...

CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
CVE-2024-4885 Progress WhatsUp Gold Path Traversal Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Mar 4, 2025

CISA Adds Four Known Exploited Vulnerabilities to Catalog 04 Mar 2025

Release Date March 04, 2025
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-50302 Linux Kernel Use of Uninitialized Resource Vulnerability
CVE-2025-22225 VMware ESXi Arbitrary Write Vulnerability
CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
CVE-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Mar 10, 2025 at 5:18 PM

CISA Adds Five Known Exploited Vulnerabilities to Catalog 10 Mar 2025

Release Date March 10, 2025
CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-25181 Advantive VeraCore SQL Injection Vulnerability
CVE-2024-57968 Advantive VeraCore Unrestricted File Upload Vulnerability
CVE-2024-13159 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
Click to expand...

CVE-2024-13160 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVE-2024-13161 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability[/
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Mar 11, 2025 at 5:07 PM

CISA Adds Six Known Exploited Vulnerabilities to Catalog 11 Mar 2025

03/11/2025
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2025-24983 Microsoft Windows Win32k Use-After-Free Vulnerability
CVE-2025-24984 Microsoft Windows NTFS Information Disclosure Vulnerability
CVE-2025-24985 Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
CVE-2025-24991 Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability
CVE-2025-24993 Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability
CVE-2025-26633 Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

Log in or Sign up

CISA Known Exploited Vulnerabilities Catalog

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

CISA Known Exploited Vulnerabilities Catalog

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches