CISA Known Exploited Vulnerabilities Catalog

ronjor · Nov 16, 2023

CISA Adds Three Known Exploited Vulnerabilities to Catalog 16 Nov 2023

Release Date November 16, 2023
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-36584 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
CVE-2023-1671 Sophos Web Appliance Command Injection Vulnerability
CVE-2023-2551 Oracle Fusion Middleware Unspecified Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Note: To view other newly added vulnerabilities in the catalog, click on the arrow in the "Date Added to Catalog" column—which will sort by descending dates.
Click to expand...

ronjor · Nov 21, 2023

CISA Adds One Known Exploited Vulnerability to Catalog 21 Nov 2023

Release Date November 21, 2023
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-4911 GNU C Library Buffer Overflow Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Dec 1, 2023

CISA Removes One Known Exploited Vulnerability From Catalog

Release Date December 01, 2023
CISA is continually collaborating with partners across government and the private sector. As a result of this collaboration, CISA has concluded that there is insufficient evidence to keep the following CVE in the catalog and has removed it:
Click to expand...

CVE-2022-28958 DIR-816L Remote Code Execution Vulnerability
Click to expand...

ronjor · Dec 4, 2023

CISA Adds Two Known Exploited Vulnerabilities to Catalog 04 Dec 2023

Release Date December 04, 2023
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-42917 Apple Multiple Products WebKit Memory Corruption Vulnerability
CVE-2023-42916 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Note: To view other newly added vulnerabilities in the catalog, click on the arrow in the "Date Added to Catalog" column—which will sort by descending dates.
Click to expand...

ronjor · Dec 5, 2023

CISA Adds Four Known Exploited Vulnerabilities to Catalog 05 Dec 2023
Release Date December 05, 2023

CVE-2023-33106 Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability
CVE-2023-33063 Qualcomm Multiple Chipsets Use-After-Free Vulnerability
CVE-2023-33107 Qualcomm Multiple Chipsets Integer Overflow Vulnerability
CVE-2022-22071 Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Dec 7, 2023

CISA Adds Two Known Exploited Vulnerabilities to Catalog
Release Date December 07, 2023

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-41265 Qlik Sense HTTP Tunneling Vulnerability
CVE-2023-41266 Qlik Sense Path Traversal Vulnerability

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Note: To view other newly added vulnerabilities in the catalog, click on the arrow in the "Date Added to Catalog" column—which will sort by descending dates.
Click to expand...

ronjor · Dec 12, 2023

CISA Adds One Known Exploited Vulnerability to Catalog 11 Dec 2023

Release Date December 11, 2023
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-6448 Unitronics Vision PLC and HMI Insecure Default Password
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Dec 21, 2023

CISA Adds Two Known Exploited Vulnerabilities to Catalog 21 Dec 2023

Release Date December 21, 2023
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-49897 FXC AE1021, AE1021PE OS Command Injection Vulnerability
CVE-2023-47565 QNAP VioStor NVR OS Command Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jan 2, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 02 Jan 2024

Release Date January 02, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-7024 Google Chromium WebRTC Heap Buffer Overflow Vulnerability
CVE-2023-7101 Spreadsheet: ParseExcel Remote Code Execution Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jan 8, 2024

CISA Adds Six Known Exploited Vulnerabilities to Catalog

Release Date January 08, 2024
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-38203 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
CVE-2023-27524 Apache Superset Insecure Default Initialization of Resource Vulnerability
CVE-2023-41990 Apple Multiple Products Code Execution Vulnerability
CVE-2016-20017 D-Link DSL-2750B Devices Command Injection Vulnerability
CVE-2023-23752 Joomla! Improper Access Control Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jan 10, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 10 Jan 2024

Release Date January 10, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-29357 Microsoft SharePoint Server Privilege Escalation Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jan 10, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 10 Jan 2024

Release Date January 10, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-21887 Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
CVE-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jan 16, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 16 Jan 2024

Release Date January 16, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2018-15133 Laravel Deserialization of Untrusted Data Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jan 17, 2024

CISA Adds Three Known Exploited Vulnerabilities to Catalog 17 Jan 2024

Release Date January 17, 2024
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-6549 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
CVE-2023-6548 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
CVE-2024-0519 Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jan 22, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 22 Jan 2024

Release Date January 22, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-34048 VMware vCenter Server Out-of-Bounds Write Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jan 23, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 23 Jan 2024

Release Date January 23, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-23222 Apple Multiple Products Type Confusion Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jan 24, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 24 Jan 2024

Release Date January 24, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-22527 Atlassian Confluence Data Center and Server Template Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jan 31, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 31 Jan 2024

Release Date January 31, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2022-48618 Apple Multiple Products Improper Authentication Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jan 31, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 31 Jan 2024

Release Date January 31, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-21893 Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 6, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 06 Feb 2024

Release Date February 06, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-4762 Google Chromium V8 Type Confusion Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 9, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 09 Feb 2024

Release Date February 09, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-21762 Fortinet FortiOS Out-of-Bound Write Vulnerability
These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 12, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 12 Feb 2024

Release Date February 12, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-43770 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 13, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 13 Feb 2024

Release Date February 13, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-21412 Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability
CVE-2024-21351 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 15, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 15 Feb 2024

Release Date February 15, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2020-3259 Cisco ASA and FTD Information Disclosure Vulnerability
CVE-2024-21410 Microsoft Exchange Server Privilege Escalation Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Feb 22, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 22 Feb 2024

Release Date February 22, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-1709 ConnectWise ScreenConnect Authentication Bypass Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

Log in or Sign up

CISA Known Exploited Vulnerabilities Catalog

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

CISA Known Exploited Vulnerabilities Catalog

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches