CISA Known Exploited Vulnerabilities
1,764 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2025-0994 |
Trimble | Cityworks | — | 0.3131 | 2025-02-07 | 2025-02-28 | |
CVE-2020-15069 |
Sophos | XG Firewall | — | 0.1067 | 2025-02-06 | 2025-02-27 | |
CVE-2020-29574 |
Sophos | CyberoamOS | — | 0.0470 | 2025-02-06 | 2025-02-27 | RW |
CVE-2024-21413 |
Microsoft | Office Outlook | — | 0.9466 | 2025-02-06 | 2025-02-27 | |
CVE-2022-23748 |
Audinate | Dante Discovery | — | 0.0833 | 2025-02-06 | 2025-02-27 | |
CVE-2025-0411 |
7-Zip | 7-Zip | — | 0.6707 | 2025-02-06 | 2025-02-27 | |
CVE-2024-53104 |
Linux | Kernel | — | 0.0340 | 2025-02-05 | 2025-02-26 | |
CVE-2018-19410 |
Paessler | PRTG Network Monitor | — | 0.9794 | 2025-02-04 | 2025-02-25 | |
CVE-2018-9276 |
Paessler | PRTG Network Monitor | — | 0.8700 | 2025-02-04 | 2025-02-25 | |
CVE-2024-29059 |
Microsoft | .NET Framework | — | 0.9862 | 2025-02-04 | 2025-02-25 | |
CVE-2024-45195 |
Apache | OFBiz | — | 0.9998 | 2025-02-04 | 2025-02-25 | |
CVE-2025-24085 |
Apple | Multiple Products | — | 0.1751 | 2025-01-29 | 2025-02-19 | |
CVE-2025-23006 |
SonicWall | SMA1000 Appliances | — | 0.2343 | 2025-01-24 | 2025-02-14 | RW |
CVE-2020-11023 |
JQuery | JQuery | — | 0.8489 | 2025-01-23 | 2025-02-13 | |
CVE-2024-50603 |
Aviatrix | Controllers | — | 0.9852 | 2025-01-16 | 2025-02-06 | |
CVE-2025-21335 |
Microsoft | Windows | — | 0.0140 | 2025-01-14 | 2025-02-04 | |
CVE-2025-21334 |
Microsoft | Windows | — | 0.0157 | 2025-01-14 | 2025-02-04 | |
CVE-2025-21333 |
Microsoft | Windows | — | 0.1007 | 2025-01-14 | 2025-02-04 | |
CVE-2024-55591 |
Fortinet | FortiOS and FortiProxy | — | 0.9435 | 2025-01-14 | 2025-01-21 | RW |
CVE-2023-48365 |
Qlik | Sense | — | 0.4773 | 2025-01-13 | 2025-02-03 | RW |
CVE-2024-12686 |
BeyondTrust | Privileged Remote Access (PRA) and Remote Support (RS) | — | 0.3222 | 2025-01-13 | 2025-02-03 | |
CVE-2025-0282 |
Ivanti | Connect Secure, Policy Secure, and ZTA Gateways | — | 0.9998 | 2025-01-08 | 2025-01-15 | RW |
CVE-2020-2883 |
Oracle | WebLogic Server | — | 0.9458 | 2025-01-07 | 2025-01-28 | |
CVE-2024-55550 |
Mitel | MiCollab | — | 0.3816 | 2025-01-07 | 2025-01-28 | RW |
CVE-2024-41713 |
Mitel | MiCollab | — | 0.9721 | 2025-01-07 | 2025-01-28 | RW |
CVE-2024-3393 |
Palo Alto Networks | PAN-OS | — | 0.2912 | 2024-12-30 | 2025-01-20 | |
CVE-2021-44207 |
Acclaim Systems | USAHERDS | — | 0.1758 | 2024-12-23 | 2025-01-13 | |
CVE-2024-12356 |
BeyondTrust | Privileged Remote Access (PRA) and Remote Support (RS) | — | 0.8726 | 2024-12-19 | 2024-12-27 | |
CVE-2021-40407 |
Reolink | RLC-410W IP Camera | — | 0.4763 | 2024-12-18 | 2025-01-08 | |
CVE-2019-11001 |
Reolink | Multiple IP Cameras | — | 0.3754 | 2024-12-18 | 2025-01-08 | |
CVE-2022-23227 |
NUUO | NVRmini2 Devices | — | 0.4850 | 2024-12-18 | 2025-01-08 | |
CVE-2018-14933 |
NUUO | NVRmini Devices | — | 0.9476 | 2024-12-18 | 2025-01-08 | |
CVE-2024-55956 |
Cleo | Multiple Products | — | 0.9397 | 2024-12-17 | 2025-01-07 | RW |
CVE-2024-35250 |
Microsoft | Windows | — | 0.2522 | 2024-12-16 | 2025-01-06 | |
CVE-2024-20767 |
Adobe | ColdFusion | — | 0.9851 | 2024-12-16 | 2025-01-06 | |
CVE-2024-50623 |
Cleo | Multiple Products | — | 0.9861 | 2024-12-13 | 2025-01-03 | RW |
CVE-2024-49138 |
Microsoft | Windows | — | 0.2621 | 2024-12-10 | 2024-12-31 | |
CVE-2024-51378 |
CyberPersons | CyberPanel | — | 0.9475 | 2024-12-04 | 2024-12-25 | RW |
CVE-2024-11667 |
Zyxel | Multiple Firewalls | — | 0.0293 | 2024-12-03 | 2024-12-24 | RW |
CVE-2024-11680 |
ProjectSend | ProjectSend | — | 0.9185 | 2024-12-03 | 2024-12-24 | |
CVE-2023-45727 |
North Grid | Proself | — | 0.0482 | 2024-12-03 | 2024-12-24 | |
CVE-2023-28461 |
Array Networks | AG/vxAG ArrayOS | — | 0.6808 | 2024-11-25 | 2024-12-16 | RW |
CVE-2024-21287 |
Oracle | Agile Product Lifecycle Management (PLM) | — | 0.0172 | 2024-11-21 | 2024-12-12 | |
CVE-2024-44309 |
Apple | Multiple Products | — | 0.2195 | 2024-11-21 | 2024-12-12 | |
CVE-2024-44308 |
Apple | Multiple Products | — | 0.0985 | 2024-11-21 | 2024-12-12 | |
CVE-2024-38813 |
VMware | vCenter Server | — | 0.1736 | 2024-11-20 | 2024-12-11 | |
CVE-2024-38812 |
VMware | vCenter Server | — | 0.5457 | 2024-11-20 | 2024-12-11 | |
CVE-2024-9474 |
Palo Alto Networks | PAN-OS | — | 0.9375 | 2024-11-18 | 2024-12-09 | RW |
CVE-2024-0012 |
Palo Alto Networks | PAN-OS | — | 0.9979 | 2024-11-18 | 2024-12-09 | RW |
CVE-2024-1212 |
Progress | Kemp LoadMaster | — | 0.9539 | 2024-11-18 | 2024-12-09 |