Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2024-50623 | Cleo Multiple Products | – | – | |
| CVE-2024-49138 | Microsoft Windows | – | – | |
| CVE-2024-51378 | CyberPersons CyberPanel | – | – | |
| CVE-2024-11680 | ProjectSend | – | – | |
| CVE-2024-11667 | Zyxel Multiple Firewalls | – | – | |
| CVE-2023-45727 | North Grid Proself | – | – | |
| CVE-2023-28461 | Array Networks AG/vxAG ArrayOS | – | – | |
| CVE-2024-44309 | Apple Multiple Products | – | – | |
| CVE-2024-44308 | Apple Multiple Products | – | – | |
| CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) | – | – | |
| CVE-2024-38813 | VMware vCenter Server | – | – | |
| CVE-2024-38812 | VMware vCenter Server | – | – | |
| CVE-2024-9474 | Palo Alto Networks PAN-OS | – | – | |
| CVE-2024-1212 | Progress Kemp LoadMaster | – | – | |
| CVE-2024-0012 | Palo Alto Networks PAN-OS | – | – | |
| CVE-2024-9465 | Palo Alto Networks Expedition | – | – | |
| CVE-2024-9463 | Palo Alto Networks Expedition | – | – | |
| CVE-2024-49039 | Microsoft Windows | – | – | |
| CVE-2024-43451 | Microsoft Windows | – | – | |
| CVE-2021-41277 | Metabase | – | – | |
| CVE-2021-26086 | Atlassian Jira Server and Data Center | – | – | |
| CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) | – | – | |
| CVE-2024-5910 | Palo Alto Networks Expedition | – | – | |
| CVE-2024-51567 | CyberPersons CyberPanel | – | – | |
| CVE-2024-43093 | Android Framework | – | – | |
| CVE-2019-16278 | Nostromo nhttpd | – | – | |
| CVE-2024-8957 | PTZOptics PT30X-SDI/NDI Cameras | – | – | |
| CVE-2024-8956 | PTZOptics PT30X-SDI/NDI Cameras | – | – | |
| CVE-2024-37383 | Roundcube Webmail | – | – | |
| CVE-2024-20481 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | – | – | |
| CVE-2024-47575 | Fortinet FortiManager | – | – | |
| CVE-2024-38094 | Microsoft SharePoint | – | – | |
| CVE-2024-9537 | ScienceLogic SL1 | – | – | |
| CVE-2024-40711 | Veeam Backup & Replication | – | – | |
| CVE-2024-9680 | Mozilla Firefox | – | – | |
| CVE-2024-30088 | Microsoft Windows | – | – | |
| CVE-2024-28987 | SolarWinds Web Help Desk | – | – | |
| CVE-2024-9380 | Ivanti Cloud Services Appliance (CSA) | – | – | |
| CVE-2024-9379 | Ivanti Cloud Services Appliance (CSA) | – | – | |
| CVE-2024-23113 | Fortinet Multiple Products | – | – | |
| CVE-2024-43573 | Microsoft Windows | – | – | |
| CVE-2024-43572 | Microsoft Windows | – | – | |
| CVE-2024-43047 | Qualcomm Multiple Chipsets | – | – | |
| CVE-2024-45519 | Synacor Zimbra Collaboration Suite (ZCS) | – | – | |
| CVE-2024-29824 | Ivanti Endpoint Manager (EPM) | – | – | |
| CVE-2023-25280 | D-Link DIR-820 Router | – | – | |
| CVE-2020-15415 | DrayTek Multiple Vigor Routers | – | – | |
| CVE-2019-0344 | SAP Commerce Cloud | – | – | |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager | – | – | |
| CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) | – | – |