Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) | – | – | |
| CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) | – | – | |
| CVE-2017-3066 | Adobe ColdFusion | – | – | |
| CVE-2025-24989 | Microsoft Power Pages | – | – | |
| CVE-2025-23209 | Craft CMS | – | – | |
| CVE-2025-0111 | Palo Alto Networks PAN-OS | – | – | |
| CVE-2025-0108 | Palo Alto Networks PAN-OS | – | – | |
| CVE-2024-53704 | SonicWall SonicOS | 9.8 | – | |
| CVE-2024-57727 | SimpleHelp | – | – | |
| CVE-2025-24200 | Apple iOS and iPadOS | – | – | |
| CVE-2024-41710 | Mitel SIP Phones | – | – | |
| CVE-2025-21418 | Microsoft Windows | – | – | |
| CVE-2025-21391 | Microsoft Windows | – | – | |
| CVE-2024-40891 | Zyxel DSL CPE Devices | – | – | |
| CVE-2024-40890 | Zyxel DSL CPE Devices | – | – | |
| CVE-2025-0994 | Trimble Cityworks | – | – | |
| CVE-2025-0411 | 7-Zip | – | – | |
| CVE-2024-21413 | Microsoft Office Outlook | – | – | |
| CVE-2022-23748 | Audinate Dante Discovery | – | – | |
| CVE-2020-29574 | Sophos CyberoamOS | – | – | |
| CVE-2020-15069 | Sophos XG Firewall | – | – | |
| CVE-2024-53104 | Linux Kernel | – | – | |
| CVE-2024-45195 | Apache OFBiz | – | – | |
| CVE-2024-29059 | Microsoft .NET Framework | – | – | |
| CVE-2018-9276 | Paessler PRTG Network Monitor | – | – | |
| CVE-2018-19410 | Paessler PRTG Network Monitor | – | – | |
| CVE-2025-24085 | Apple Multiple Products | – | – | |
| CVE-2025-23006 | SonicWall SMA1000 Appliances | – | – | |
| CVE-2020-11023 | JQuery | – | – | |
| CVE-2024-50603 | Aviatrix Controllers | – | – | |
| CVE-2025-21335 | Microsoft Windows | – | – | |
| CVE-2025-21334 | Microsoft Windows | – | – | |
| CVE-2025-21333 | Microsoft Windows | – | – | |
| CVE-2024-55591 | Fortinet FortiOS and FortiProxy | – | – | |
| CVE-2024-12686 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) | – | – | |
| CVE-2023-48365 | Qlik Sense | – | – | |
| CVE-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | – | – | |
| CVE-2024-55550 | Mitel MiCollab | – | – | |
| CVE-2024-41713 | Mitel MiCollab | – | – | |
| CVE-2020-2883 | Oracle WebLogic Server | – | – | |
| CVE-2024-3393 | Palo Alto Networks PAN-OS | – | – | |
| CVE-2021-44207 | Acclaim Systems USAHERDS | – | – | |
| CVE-2024-12356 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) | – | – | |
| CVE-2022-23227 | NUUO NVRmini2 Devices | – | – | |
| CVE-2021-40407 | Reolink RLC-410W IP Camera | – | – | |
| CVE-2019-11001 | Reolink Multiple IP Cameras | – | – | |
| CVE-2018-14933 | NUUO NVRmini Devices | – | – | |
| CVE-2024-55956 | Cleo Multiple Products | – | – | |
| CVE-2024-35250 | Microsoft Windows | – | – | |
| CVE-2024-20767 | Adobe ColdFusion | – | – |