Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2024-27348 | Apache HugeGraph-Server | – | – | |
| CVE-2022-21445 | Oracle ADF Faces | – | – | |
| CVE-2020-14644 | Oracle WebLogic Server | – | – | |
| CVE-2020-0618 | Microsoft SQL Server | – | – | |
| CVE-2014-0502 | Adobe Flash Player | – | – | |
| CVE-2014-0497 | Adobe Flash Player | – | – | |
| CVE-2013-0648 | Adobe Flash Player | – | – | |
| CVE-2013-0643 | Adobe Flash Player | – | – | |
| CVE-2024-6670 | Progress WhatsUp Gold | – | – | |
| CVE-2024-43461 | Microsoft Windows | – | – | |
| CVE-2024-8190 | Ivanti Cloud Services Appliance | – | – | |
| CVE-2024-38226 | Microsoft Publisher | – | – | |
| CVE-2024-38217 | Microsoft Windows | – | – | |
| CVE-2024-38014 | Microsoft Windows | – | – | |
| CVE-2024-40766 | SonicWall SonicOS | – | – | |
| CVE-2017-1000253 | Linux Kernel | – | – | |
| CVE-2016-3714 | ImageMagick | – | – | |
| CVE-2024-7262 | Kingsoft WPS Office | – | – | |
| CVE-2021-20124 | DrayTek VigorConnect | – | – | |
| CVE-2021-20123 | DrayTek VigorConnect | – | – | |
| CVE-2024-7965 | Google Chromium V8 | – | – | |
| CVE-2024-38856 | Apache OFBiz | – | – | |
| CVE-2024-7971 | Google Chromium V8 | – | – | |
| CVE-2024-39717 | Versa Director | – | – | |
| CVE-2022-0185 | Linux Kernel | – | – | |
| CVE-2021-33045 | Dahua IP Camera Firmware | – | – | |
| CVE-2021-33044 | Dahua IP Camera Firmware | – | – | |
| CVE-2021-31196 | Microsoft Exchange Server | – | – | |
| CVE-2024-23897 | Jenkins Command Line Interface (CLI) | – | – | |
| CVE-2024-28986 | SolarWinds Web Help Desk | – | – | |
| CVE-2024-38213 | Microsoft Windows | – | – | |
| CVE-2024-38193 | Microsoft Windows | – | – | |
| CVE-2024-38189 | Microsoft Project | – | – | |
| CVE-2024-38178 | Microsoft Windows | – | – | |
| CVE-2024-38107 | Microsoft Windows | – | – | |
| CVE-2024-38106 | Microsoft Windows | – | – | |
| CVE-2024-36971 | Android Kernel | – | – | |
| CVE-2024-32113 | Apache OFBiz | – | – | |
| CVE-2018-0824 | Microsoft Windows | – | – | |
| CVE-2024-37085 | VMware ESXi | – | – | |
| CVE-2024-5217 | ServiceNow Utah, Vancouver, and Washington DC Now Platform | – | – | |
| CVE-2024-4879 | ServiceNow Utah, Vancouver, and Washington DC Now Platform | – | – | |
| CVE-2023-45249 | Acronis Cyber Infrastructure (ACI) | – | – | |
| CVE-2024-39891 | Twilio Authy | – | – | |
| CVE-2012-4792 | Microsoft Internet Explorer | – | – | |
| CVE-2024-34102 | Adobe Commerce and Magento Open Source | – | – | |
| CVE-2024-28995 | SolarWinds Serv-U | – | – | |
| CVE-2022-22948 | VMware vCenter Server | – | – | |
| CVE-2024-36401 | OSGeo GeoServer | – | – | |
| CVE-2024-38112 | Microsoft Windows | – | – |