CISA Known Exploited Vulnerabilities
1,764 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2024-5274 |
Chromium V8 | — | 0.0773 | 2024-05-28 | 2024-06-18 | ||
CVE-2020-17519 |
Apache | Flink | — | 0.9800 | 2024-05-23 | 2024-06-13 | |
CVE-2024-4947 |
Chromium V8 | — | 0.1524 | 2024-05-20 | 2024-06-10 | ||
CVE-2023-43208 |
NextGen Healthcare | Mirth Connect | — | 0.8542 | 2024-05-20 | 2024-06-10 | RW |
CVE-2024-4761 |
Chromium V8 | — | 0.1101 | 2024-05-16 | 2024-06-06 | ||
CVE-2021-40655 |
D-Link | DIR-605 Router | — | 0.8704 | 2024-05-16 | 2024-06-06 | |
CVE-2014-100005 |
D-Link | DIR-600 Router | — | 0.4346 | 2024-05-16 | 2024-06-06 | |
CVE-2024-30040 |
Microsoft | Windows | — | 0.0394 | 2024-05-14 | 2024-06-04 | |
CVE-2024-30051 |
Microsoft | DWM Core Library | — | 0.0569 | 2024-05-14 | 2024-06-04 | RW |
CVE-2024-4671 |
Chromium | — | 0.0835 | 2024-05-13 | 2024-06-03 | ||
CVE-2023-7028 |
GitLab | GitLab CE/EE | — | 0.9446 | 2024-05-01 | 2024-05-22 | |
CVE-2024-29988 |
Microsoft | SmartScreen Prompt | — | 0.4515 | 2024-04-30 | 2024-05-21 | |
CVE-2024-4040 |
CrushFTP | CrushFTP | — | 0.9954 | 2024-04-24 | 2024-05-01 | |
CVE-2024-20359 |
Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | — | 0.1882 | 2024-04-24 | 2024-05-01 | |
CVE-2024-20353 |
Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | — | 0.6982 | 2024-04-24 | 2024-05-01 | |
CVE-2022-38028 |
Microsoft | Windows | — | 0.1495 | 2024-04-23 | 2024-05-14 | |
CVE-2024-3400 |
Palo Alto Networks | PAN-OS | — | 1.0000 | 2024-04-12 | 2024-04-19 | RW |
CVE-2024-3273 |
D-Link | Multiple NAS Devices | — | 1.0000 | 2024-04-11 | 2024-05-02 | |
CVE-2024-3272 |
D-Link | Multiple NAS Devices | — | 0.9811 | 2024-04-11 | 2024-05-02 | |
CVE-2024-29748 |
Android | Pixel | — | 0.0068 | 2024-04-04 | 2024-04-25 | |
CVE-2024-29745 |
Android | Pixel | — | 0.0049 | 2024-04-04 | 2024-04-25 | |
CVE-2023-24955 |
Microsoft | SharePoint Server | — | 0.8497 | 2024-03-26 | 2024-04-16 | RW |
CVE-2019-7256 |
Nice | Linear eMerge E3-Series | — | 0.9708 | 2024-03-25 | 2024-04-15 | |
CVE-2021-44529 |
Ivanti | Endpoint Manager Cloud Service Appliance (EPM CSA) | — | 0.9910 | 2024-03-25 | 2024-04-15 | RW |
CVE-2023-48788 |
Fortinet | FortiClient EMS | — | 0.9845 | 2024-03-25 | 2024-04-15 | RW |
CVE-2024-27198 |
JetBrains | TeamCity | — | 0.9994 | 2024-03-07 | 2024-03-28 | RW |
CVE-2024-23225 |
Apple | Multiple Products | — | 0.0148 | 2024-03-06 | 2024-03-27 | |
CVE-2024-23296 |
Apple | Multiple Products | — | 0.0141 | 2024-03-06 | 2024-03-27 | |
CVE-2023-21237 |
Android | Pixel | — | 0.0027 | 2024-03-05 | 2024-03-26 | |
CVE-2021-36380 |
Sunhillo | SureLine | — | 0.9783 | 2024-03-05 | 2024-03-26 | |
CVE-2024-21338 |
Microsoft | Windows | — | 0.5981 | 2024-03-04 | 2024-03-25 | RW |
CVE-2023-29360 |
Microsoft | Streaming Service | — | 0.2162 | 2024-02-29 | 2024-03-21 | |
CVE-2024-1709 |
ConnectWise | ScreenConnect | — | 0.9998 | 2024-02-22 | 2024-02-29 | RW |
CVE-2020-3259 |
Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | — | 0.7150 | 2024-02-15 | 2024-03-07 | RW |
CVE-2024-21410 |
Microsoft | Exchange Server | — | 0.1266 | 2024-02-15 | 2024-03-07 | |
CVE-2024-21412 |
Microsoft | Windows | — | 0.9941 | 2024-02-13 | 2024-03-05 | RW |
CVE-2024-21351 |
Microsoft | Windows | — | 0.2780 | 2024-02-13 | 2024-03-05 | |
CVE-2023-43770 |
Roundcube | Webmail | — | 0.6366 | 2024-02-12 | 2024-03-04 | |
CVE-2024-21762 |
Fortinet | FortiOS | 9.8 | 0.8459 | 2024-02-09 | 2024-02-16 | RW |
CVE-2023-4762 |
Chromium V8 | — | 0.4138 | 2024-02-06 | 2024-02-27 | ||
CVE-2022-48618 |
Apple | Multiple Products | — | 0.0049 | 2024-01-31 | 2024-02-21 | |
CVE-2024-21893 |
Ivanti | Connect Secure, Policy Secure, and Neurons | — | 1.0000 | 2024-01-31 | 2024-02-02 | RW |
CVE-2023-22527 |
Atlassian | Confluence Data Center and Server | — | 0.9998 | 2024-01-24 | 2024-02-14 | RW |
CVE-2024-23222 |
Apple | Multiple Products | — | 0.1059 | 2024-01-23 | 2024-02-13 | |
CVE-2023-34048 |
VMware | vCenter Server | — | 0.9923 | 2024-01-22 | 2024-02-12 | |
CVE-2023-35082 |
Ivanti | Endpoint Manager Mobile (EPMM) and MobileIron Core | — | 1.0000 | 2024-01-18 | 2024-02-08 | RW |
CVE-2024-0519 |
Chromium V8 | — | 0.0380 | 2024-01-17 | 2024-02-07 | ||
CVE-2023-6549 |
Citrix | NetScaler ADC and NetScaler Gateway | — | 0.5763 | 2024-01-17 | 2024-02-07 | |
CVE-2023-6548 |
Citrix | NetScaler ADC and NetScaler Gateway | — | 0.0319 | 2024-01-17 | 2024-01-24 | |
CVE-2018-15133 |
Laravel | Laravel Framework | — | 0.7657 | 2024-01-16 | 2024-02-06 |