CISA Known Exploited Vulnerabilities Catalog

ronjor · Feb 29, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 29 Feb 2024

Release Date February 29, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation
Click to expand...

.CVE-2023-29360 Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Mar 4, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 04 Mar 2024

Release Date March 04, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

NOTICE
NIST is currently working to establish a consortium to address challenges in the NVD program and develop improved tools and methods. You will temporarily see delays in analysis efforts during this transition. We apologize for the inconvenience and ask for your patience as we work to improve the NVD program.
Click to expand...

ronjor · Mar 5, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 05 Mar 2024

Release Date March 05, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-21237 Android Pixel Information Disclosure Vulnerability
CVE-2021-36380 Sunhillo SureLine OS Command Injection Vulnerablity
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Mar 6, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 06 Mar 2024

Release Date March 06, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-23225 Apple iOS and iPadOS Memory Corruption Vulnerability
CVE-2024-23296 Apple iOS and iPadOS Memory Corruption Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Mar 7, 2024

CISA Adds One Known Exploited JetBrains Vulnerability, CVE-2024-27198, to Catalog 07 Mar 2024

Release Date March 07, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-27198 JetBrains TeamCity Authentication Bypass Vulnerability
Click to expand...

CISA urges organizations to review the following JetBrains blog post and apply the necessary updates: Additional Critical Security Issues Affecting TeamCity On-Premises (CVE-2024-27198 and CVE-2024-27199) – Update to 2023.11.4 Now
These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Mar 25, 2024

CISA Adds Three Known Exploited Vulnerabilities to Catalog 25 Mar 2024

Release Date March 25, 2024
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability
CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
CVE-2019-7256 Nice Linear eMerge E3-Series OS Command Injection Vulnerability

ronjor · Mar 26, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 26 Mar 2024

Release Date March 26, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
CVE-2023-24955 Microsoft SharePoint Server Code Injection Vulnerability
These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 4, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 04 Apr 2024

Release Date April 04, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-29745 Android Pixel Information Disclosure Vulnerability
CVE-2024-29748 Android Pixel Privilege Escalation Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 11, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 11 Apr 2024

Release Date April 11, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-3272 D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
CVE-2024-3273 D-Link Multiple NAS Devices Command Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 12, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 12 Apr 2024

Release Date April 12, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-3400 Palo Alto Networks PAN-OS Command Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 23, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 23 Apr 2024

Release Date April 23, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 24, 2024

CISA Adds Three Known Exploited Vulnerabilities to Catalog 24 Apr 2024

Release Date April 24, 2024
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-20353 Cisco ASA and FTD Denial of Service Vulnerability
CVE-2024-20359 Cisco ASA and FTD Privilege Escalation Vulnerability
CVE-2024-4040 CrushFTP VFS Sandbox Escape Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Apr 30, 2024

CISA Adds One Known Exploited Vulnerability to Catalog Release Date 30 Apr 2024

April 30, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-29988 Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 1, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 01 May 2024

Release Date May 01, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation
Click to expand...

.

CVE-2023-7028 GitLab Community and Enterprise Editions Improper Access Control Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 13, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 13 May 2024

Release Date
May 13, 2024 CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-4671 Google Chromium in Visuals Use-After-Free Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 14, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 14 May 2024

Release Date May 14, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-30051 Microsoft DWM Core Library Privilege Escalation Vulnerability
CVE-2024-30040 Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 16, 2024

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. 16 May 2024[/

CVE-2014-100005 D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
CVE-2021-40655 D-Link DIR-605 Router Information Disclosure Vulnerability
CVE-2024-4761 Google Chromium V8 Out-of-Bounds Memory Write Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 20, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog May 20, 2024

Release Date May 20, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-4947 Google Chromium V8 Type Confusion Vulnerability
CVE-2023-43208 NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 23, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 23 May 2024

Release Date May 23, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2020-17519 Apache Flink Improper Access Control Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 28, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 28 May 2024

Release Date May 28, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-5274 Google Chromium V8 Type Confusion Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 29, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 29 May 2024

Release Date May 29, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-4978 Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · May 30, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 30 May 2024

Release Date May 30, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-24919 Check Point Quantum Security Gateways Information Disclosure Vulnerability
CVE-2024-1086 Linux Kernel Use-After-Free Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jun 3, 2024

CISA Adds One Known Exploited Vulnerability to Catalog 03 Jun 2024

Release Date June 03, 2024
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2017-3506 Oracle WebLogic Server OS Command Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jun 12, 2024

CISA Adds Two Known Exploited Vulnerabilities to Catalog 12 June 2024

Release Date June 12, 2024
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-4610 ARM Mali GPU Kernel Driver Use-After-Free Vulnerability
CVE-2024-4577 PHP-CGI OS Command Injection Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

ronjor · Jun 13, 2024

CISA Adds Three Known Exploited Vulnerabilities to Catalog 13 June 2024

Release Date June 13, 2024
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

CVE-2024-32896 Android Pixel Privilege Escalation Vulnerability
CVE-2024-26169 Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability
CVE-2024-4358 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
Click to expand...

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Click to expand...

Log in or Sign up

CISA Known Exploited Vulnerabilities Catalog

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

CISA Known Exploited Vulnerabilities Catalog

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches