CISA Known Exploited Vulnerabilities catalog (page 6)
Page 6 of 18 of the CISA Known Exploited Vulnerabilities catalog, newest additions first, with PoC counts, Metasploit and EPSS.
Known exploited CVEs, newest addition first (page 6 of 18)
| CVE | Product | Severity | Added to KEV | Due date | Ransomware use | Public PoCs | Metasploit | EPSS | Summary |
|---|---|---|---|---|---|---|---|---|---|
CVE-2024-49035 | Microsoft Microsoft Partner Center +1 | High 8.7 | — | 0 | — | 0.014 (72.3th percentile) | An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network. | ||
CVE-2023-34192 | — | Critical 9.0 | — | 0 | — | 0.773 (99.6th percentile) | Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function. | ||
CVE-2024-20953 | Oracle Agile Product Lifecycle Management +1 | High 8.8 | — | 0 | — | 0.039 (90.5th percentile) | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). | ||
CVE-2017-3066 | Adobe Coldfusion +1 | Critical 9.8 | — | 2 | — | 0.906 (99.8th percentile) | Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. | ||
CVE-2025-24989 | Microsoft Microsoft Power Pages +1 | High 8.2 | — | 0 | — | 0.016 (76.3th percentile) | An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. | ||
CVE-2025-23209 | Craftcms Cms +1 | High 8.0 | — | 0 | — | 0.216 (97.6th percentile) | Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. | ||
CVE-2025-0111 | Palo Alto Networks Pan-Os +1 | Medium 6.5 | — | 0 | — | 0.020 (80.9th percentile) | An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS fi… | ||
CVE-2025-0108 | Palo Alto Networks Pan-Os +1 | Critical 9.1 | — | 8 | — | 0.985 (99.9th percentile) | An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise requi… | ||
CVE-2024-53704 | SonicWall Sonicos | Critical 9.8 | Known | 3 | — | 0.953 (99.9th percentile) | An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication. | ||
CVE-2024-57727 | — | High 7.5 | Known | 1 | Yes | 0.968 (99.9th percentile) | SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleH… | ||
CVE-2025-24200 | Apple iOS And Ipados +2 | Medium 6.1 | — | 0 | — | 0.045 (91.5th percentile) | An authorization issue was addressed with improved state management. | ||
CVE-2024-41710 | Mitel 6863i Sip Firmware +15 | High 7.2 | — | 0 | — | 0.416 (98.7th percentile) | A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticated attacker with admi… | ||
CVE-2025-21418 | Microsoft Windows 10 1607 +38 | High 7.8 | — | 0 | — | 0.021 (82.1th percentile) | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | ||
CVE-2025-21391 | Microsoft Windows 10 1507 +29 | High 7.1 | — | 0 | — | 0.023 (83.3th percentile) | Windows Storage Elevation of Privilege Vulnerability | ||
CVE-2024-40891 | Zyxel Sbg3300-N000 Firmware +14 | High 8.8 | — | 2 | — | 0.229 (97.8th percentile) | **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could… | ||
CVE-2024-40890 | Zyxel Sbg3300-N000 Firmware +14 | High 8.8 | — | 0 | — | 0.207 (97.6th percentile) | **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an… | ||
CVE-2025-0994 | Trimble Cityworks +1 | High 8.8 | — | 1 | — | 0.313 (98.3th percentile) | Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability. | ||
CVE-2025-0411 | 7-Zip 7-Zip +1 | High 7.0 | — | 9 | — | 0.476 (98.9th percentile) | 7-Zip Mark-of-the-Web Bypass Vulnerability. | ||
CVE-2024-21413 | Microsoft 365 Apps +7 | Critical 9.8 | — | 48 | — | 0.947 (99.9th percentile) | Microsoft Outlook Remote Code Execution Vulnerability | ||
CVE-2022-23748 | Audinate Dante Application Library +1 | High 7.8 | — | 0 | — | 0.083 (95.0th percentile) | mDNSResponder.exe is vulnerable to DLL Sideloading attack. | ||
CVE-2020-29574 | — | Critical 9.8 | Known | 0 | — | 0.047 (91.9th percentile) | An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely. | ||
CVE-2020-15069 | — | Critical 9.8 | — | 0 | — | 0.107 (95.8th percentile) | Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. | ||
CVE-2024-53104 | Debian Debian Linux +2 | High 7.8 | — | 1 | — | 0.034 (88.9th percentile) | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since fra… | ||
CVE-2024-45195 | Apache Ofbiz +1 | High 7.5 | — | 1 | — | 1.000 (100.0th percentile) | Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. | ||
CVE-2024-29059 | Microsoft Microsoft .Net Framework 2.0 Service Pack 2 +11 | High 7.5 | — | 1 | — | 0.986 (99.9th percentile) | .NET Framework Information Disclosure Vulnerability | ||
CVE-2018-9276 | — | High 7.2 | — | 7 | Yes | 0.869 (99.7th percentile) | An issue was discovered in PRTG Network Monitor before 18.2.39. | ||
CVE-2018-19410 | — | Critical 9.8 | — | 1 | — | 0.979 (99.9th percentile) | PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). | ||
CVE-2025-24085 | Apple iOS And Ipados +6 | Critical 10.0 | — | 2 | — | 0.174 (97.1th percentile) | A use after free issue was addressed with improved memory management. | ||
CVE-2025-23006 | SonicWall Sma1000 +8 | Critical 9.8 | Known | 0 | — | 0.266 (98.0th percentile) | Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific condit… | ||
CVE-2020-11023 | Debian Debian Linux +51 | Medium 6.9 | — | 9 | — | 0.849 (99.7th percentile) | In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation m… | ||
CVE-2024-50603 | Aviatrix Controller | Critical 10.0 | — | 2 | — | 0.985 (99.9th percentile) | An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. | ||
CVE-2025-21335 | Microsoft Windows 10 21h2 +15 | High 7.8 | — | 0 | — | 0.014 (72.7th percentile) | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability | ||
CVE-2025-21334 | Microsoft Windows 10 21h2 +15 | High 7.8 | — | 0 | — | 0.016 (75.6th percentile) | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability | ||
CVE-2025-21333 | Microsoft Windows 10 21h2 +15 | High 7.8 | — | 7 | — | 0.101 (95.7th percentile) | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability | ||
CVE-2024-55591 | Fortinet Fortios +1 | Critical 9.8 | Known | 13 | — | 0.944 (99.9th percentile) | An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12… | ||
CVE-2024-12686 | Beyondtrust Privileged Remote Access +2 | Medium 6.6 | — | 0 | — | 0.326 (98.4th percentile) | A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site… | ||
CVE-2023-48365 | — | Critical 9.6 | Known | 0 | — | 0.477 (98.9th percentile) | Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. | ||
CVE-2025-0282 | Ivanti Connect Secure +5 | Critical 9.0 | Known | 13 | — | 1.000 (100.0th percentile) | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remo… | ||
CVE-2024-55550 | Mitel Micollab +1 | Low 2.7 | Known | 0 | — | 0.382 (98.6th percentile) | Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. | ||
CVE-2024-41713 | Mitel Micollab +1 | Critical 9.1 | Known | 5 | — | 0.972 (99.9th percentile) | A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to i… | ||
CVE-2020-2883 | Oracle Weblogic Server +1 | Critical 9.8 | — | 7 | Yes | 0.946 (99.9th percentile) | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | ||
CVE-2024-3393 | Palo Alto Networks Pan-Os +2 | High 7.5 | — | 2 | — | 0.302 (98.2th percentile) | A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewal… | ||
CVE-2021-44207 | Acclaimsystems Usaherds +1 | High 8.1 | — | 0 | — | 0.174 (97.2th percentile) | Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials. | ||
CVE-2024-12356 | Beyondtrust Privileged Remote Access +3 | Critical 9.8 | — | 2 | Yes | 0.874 (99.8th percentile) | A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site u… | ||
CVE-2022-23227 | — | Critical 9.8 | — | 0 | — | 0.485 (98.9th percentile) | NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handle_import_user.php authenticati… | ||
CVE-2021-40407 | — | High 7.2 | — | 0 | — | 0.476 (98.9th percentile) | An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. | ||
CVE-2019-11001 | — | High 7.2 | — | 0 | — | 0.375 (98.5th percentile) | On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and run OS commands as root, as demonstrate… | ||
CVE-2018-14933 | — | Critical 9.8 | — | 0 | Yes | 0.948 (99.9th percentile) | upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command. | ||
CVE-2024-55956 | Cleo Harmony +3 | Critical 9.8 | Known | 0 | Yes | 0.940 (99.8th percentile) | In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash or PowerShell commands on the host system by leve… | ||
CVE-2024-35250 | Microsoft Windows 10 1507 +35 | High 7.8 | — | 8 | Yes | 0.252 (98.0th percentile) | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | ||
CVE-2024-20767 | Adobe Coldfusion | High 7.4 | — | 7 | Yes | 0.985 (99.9th percentile) | ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. | ||
CVE-2024-50623 | Cleo Harmony +3 | Critical 9.8 | Known | 4 | — | 0.986 (99.9th percentile) | In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution. | ||
CVE-2024-49138 | Microsoft Windows 10 1507 +40 | High 7.8 | — | 18 | — | 0.262 (98.0th percentile) | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
CVE-2024-51378 | Cyberpanel Cyberpanel +1 | Critical 10.0 | Known | 4 | Yes | 0.947 (99.9th percentile) | getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus… | ||
CVE-2024-11680 | Projectsend Projectsend | Critical 9.8 | — | 2 | Yes | 0.918 (99.8th percentile) | ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. | ||
CVE-2024-11667 | Zyxel Atp Series Firmware +4 | High 7.5 | Known | 0 | — | 0.030 (87.3th percentile) | A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) se… | ||
CVE-2023-45727 | Northgrid Proself +3 | High 7.5 | — | 0 | — | 0.048 (92.1th percentile) | Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to… | ||
CVE-2023-28461 | Arraynetworks Arrayos Ag +1 | Critical 9.8 | Known | 0 | — | 0.681 (99.3th percentile) | Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. | ||
CVE-2024-44309 | Apple iOS And Ipados +6 | Medium 6.3 | — | 0 | — | 0.219 (97.7th percentile) | A cookie management issue was addressed with improved state management. | ||
CVE-2024-44308 | Apple iOS And Ipados +6 | High 8.8 | — | 1 | — | 0.099 (95.6th percentile) | The issue was addressed with improved checks. | ||
CVE-2024-21287 | Oracle Agile Product Lifecycle Management +1 | High 7.5 | — | 0 | — | 0.017 (77.7th percentile) | Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension). | ||
CVE-2024-38813 | VMware Cloud Foundation +3 | High 7.5 | — | 0 | — | 0.174 (97.1th percentile) | The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a sp… | ||
CVE-2024-38812 | VMware Cloud Foundation +3 | Critical 9.8 | — | 1 | — | 0.546 (99.0th percentile) | The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sendi… | ||
CVE-2024-9474 | Palo Alto Networks Pan-Os +1 | High 7.2 | Known | 6 | Yes | 0.938 (99.8th percentile) | A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privi… | ||
CVE-2024-1212 | Progress Loadmaster +1 | Critical 10.0 | — | 4 | Yes | 0.954 (99.9th percentile) | Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution. | ||
CVE-2024-0012 | Palo Alto Networks Pan-Os +1 | Critical 9.8 | Known | 13 | Yes | 0.998 (100.0th percentile) | An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perfo… | ||
CVE-2024-9465 | Palo Alto Networks Expedition +1 | Critical 9.1 | — | 5 | — | 0.996 (99.9th percentile) | An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, a… | ||
CVE-2024-9463 | Palo Alto Networks Expedition +1 | High 7.5 | — | 2 | — | 0.985 (99.9th percentile) | An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cle… | ||
CVE-2024-49039 | Microsoft Windows 10 1507 +29 | High 8.8 | Known | 3 | — | 0.142 (96.6th percentile) | Windows Task Scheduler Elevation of Privilege Vulnerability | ||
CVE-2024-43451 | Microsoft Windows 10 1507 +38 | Medium 6.5 | — | 2 | — | 0.843 (99.7th percentile) | NTLM Hash Disclosure Spoofing Vulnerability | ||
CVE-2021-41277 | Metabase Metabase | Critical 10.0 | — | 14 | — | 0.972 (99.9th percentile) | Metabase is an open source data analytics platform. | ||
CVE-2021-26086 | Atlassian Jira Data Center +3 | Medium 5.3 | — | 3 | — | 1.000 (100.0th percentile) | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/web.xml endpoint. | ||
CVE-2014-2120 | Cisco Adaptive Security Appliance Software +1 | Medium 6.1 | — | 0 | — | 0.226 (97.7th percentile) | Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified… | ||
CVE-2024-5910 | Palo Alto Networks Expedition +1 | Critical 9.8 | — | 1 | Yes | 0.917 (99.8th percentile) | Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. | ||
CVE-2024-51567 | Cyberpanel Cyberpanel +1 | Critical 10.0 | Known | 4 | Yes | 0.844 (99.7th percentile) | upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstat… | ||
CVE-2024-43093 | Google Android | High 7.3 | — | 3 | — | 0.007 (53.8th percentile) | In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. | ||
CVE-2019-16278 | — | Critical 9.8 | — | 27 | Yes | 0.990 (99.9th percentile) | Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request. | ||
CVE-2024-8957 | Ptzoptics Pt30x-Ndi +3 | High 7.2 | — | 0 | — | 0.798 (99.6th percentile) | PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. | ||
CVE-2024-8956 | Ptzoptics Pt30x-Ndi +3 | Critical 9.1 | — | 0 | — | 0.588 (99.1th percentile) | PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. | ||
CVE-2024-37383 | Debian Debian Linux +2 | Medium 6.1 | — | 3 | — | 0.740 (99.5th percentile) | Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes. | ||
CVE-2024-20481 | Cisco Adaptive Security Appliance Software +3 | Medium 5.8 | — | 0 | — | 0.159 (96.9th percentile) | A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote a… | ||
CVE-2024-47575 | Fortinet Fortimanager +1 | Critical 9.8 | — | 14 | Yes | 0.948 (99.9th percentile) | A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through… | ||
CVE-2024-38094 | Microsoft Microsoft Sharepoint Enterprise Server 2016 +3 | High 7.2 | Known | 0 | — | 0.509 (98.9th percentile) | Microsoft SharePoint Remote Code Execution Vulnerability | ||
CVE-2024-9537 | Sciencelogic Sl1 | Critical 9.8 | — | 1 | — | 0.038 (90.2th percentile) | ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. | ||
CVE-2024-40711 | Veeam Backup And Recovery +1 | Critical 9.8 | Known | 3 | — | 0.904 (99.8th percentile) | A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE). | ||
CVE-2024-9680 | Debian Debian Linux +3 | Critical 9.8 | Known | 3 | — | 0.232 (97.8th percentile) | An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. | ||
CVE-2024-30088 | Microsoft Windows 10 1507 +25 | High 7.0 | Known | 12 | — | 0.682 (99.3th percentile) | Windows Kernel Elevation of Privilege Vulnerability | ||
CVE-2024-28987 | Solarwinds Web Help Desk +1 | Critical 9.1 | — | 8 | Yes | 0.933 (99.8th percentile) | The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data. | ||
CVE-2024-9380 | Ivanti Endpoint Manager Cloud Services Appliance | High 7.2 | — | 1 | — | 0.583 (99.1th percentile) | An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution. | ||
CVE-2024-9379 | Ivanti Endpoint Manager Cloud Services Appliance | Medium 6.5 | — | 1 | — | 0.443 (98.8th percentile) | SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements. | ||
CVE-2024-23113 | Fortinet Fortios +3 | Critical 9.8 | — | 22 | — | 0.617 (99.2th percentile) | A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8… | ||
CVE-2024-43573 | Microsoft Windows 10 1507 +31 | Medium 6.5 | — | 0 | — | 0.461 (98.8th percentile) | Windows MSHTML Platform Spoofing Vulnerability | ||
CVE-2024-43572 | Microsoft Windows 10 1507 +39 | High 7.8 | — | 0 | — | 0.667 (99.3th percentile) | Microsoft Management Console Remote Code Execution Vulnerability | ||
CVE-2024-43047 | Qualcomm Fastconnect 6700 Firmware +64 | High 7.8 | — | 1 | — | 0.007 (52.5th percentile) | Memory corruption while maintaining memory maps of HLOS memory. | ||
CVE-2024-45519 | — | Critical 10.0 | — | 7 | — | 0.999 (100.0th percentile) | The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute comma… | ||
CVE-2024-29824 | Ivanti Endpoint Manager +1 | High 8.8 | — | 3 | Yes | 0.999 (100.0th percentile) | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code. | ||
CVE-2023-25280 | Dlink Dir-820l Firmware +1 | Critical 9.8 | — | 0 | — | 0.979 (99.9th percentile) | OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp. | ||
CVE-2020-15415 | Draytek Vigor2960 Firmware +3 | Critical 9.8 | — | 0 | — | 0.845 (99.7th percentile) | On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via shell metacharacters in a filename when the text/x-pytho… | ||
CVE-2019-0344 | SAP Commerce Cloud +1 | Critical 9.8 | — | 0 | — | 0.075 (94.5th percentile) | Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hyb… | ||
CVE-2024-7593 | Ivanti Virtual Traffic Manager | Critical 9.8 | — | 12 | Yes | 1.000 (100.0th percentile) | Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel. |