[{"added":"2026-09-18","id":"CVE-2026-53266","name":"Linux Kernel Out-of-Bounds Write Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-53266","vendor":"Linux"},{"added":"2026-09-18","id":"CVE-2025-39964","name":"Linux Kernel Race Condition Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-39964","vendor":"Linux"},{"added":"2026-09-18","id":"CVE-2025-39682","name":"Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-39682","vendor":"Linux"},{"added":"2026-09-16","id":"CVE-2026-87886","name":"Acronis Backup Incorrect Default Permissions Vulnerability","product":"Backup","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-87886","vendor":"Acronis"},{"added":"2026-09-16","id":"CVE-2026-76460","name":"Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability","product":"Identity Services Engine","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76460","vendor":"Cisco"},{"added":"2026-09-16","id":"CVE-2026-58704","name":"Google Pixel Improper Authorization Vulnerability","product":"Pixel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-58704","vendor":"Google"},{"added":"2026-09-14","id":"CVE-2026-76461","name":"Cisco Secure Email Gateway SQL Injection Vulnerability","product":"Secure Email Gateway","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76461","vendor":"Cisco"},{"added":"2026-09-11","id":"CVE-2026-85706","name":"GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability","product":"Community Edition and Enterprise Edition","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-85706","vendor":"GitLab"},{"added":"2026-09-11","id":"CVE-2026-84869","name":"ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability","product":"ScreenConnect","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-84869","vendor":"ConnectWise"},{"added":"2026-09-11","id":"CVE-2026-42018","name":"JFrog Artifactory Improper Authentication Vulnerability","product":"Artifactory","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42018","vendor":"JFrog"},{"added":"2026-09-11","id":"CVE-2026-42016","name":"JFrog Artifactory Incorrect Authorization Vulnerability","product":"Artifactory","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42016","vendor":"JFrog"},{"added":"2026-09-10","id":"CVE-2026-86060","name":"MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability","product":"RouterOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-86060","vendor":"MikroTik"},{"added":"2026-09-10","id":"CVE-2026-67277","name":"MikroTik RouterOS Missing Authentication for Critical Function Vulnerability","product":"RouterOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-67277","vendor":"MikroTik"},{"added":"2026-09-09","id":"CVE-2026-87491","name":"Google Chromium V8 Out of Bounds Write Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-87491","vendor":"Google"},{"added":"2026-09-09","id":"CVE-2026-20079","name":"Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability","product":"Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20079","vendor":"Cisco"},{"added":"2026-09-09","id":"CVE-2026-19490","name":"Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability","product":"NetScaler","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-19490","vendor":"Citrix"},{"added":"2026-09-09","id":"CVE-2025-25249","name":"Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-25249","vendor":"Fortinet"},{"added":"2026-09-08","id":"CVE-2026-86218","name":"N-able N-central Static Code Injection Vulnerability","product":"N-central","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-86218","vendor":"N-able"},{"added":"2026-09-08","id":"CVE-2026-85880","name":"Microsoft Windows Heap-Based Buffer Overflow Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-85880","vendor":"Microsoft"},{"added":"2026-09-08","id":"CVE-2026-81963","name":"Microsoft Windows Link Following Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-81963","vendor":"Microsoft"},{"added":"2026-09-08","id":"CVE-2026-75650","name":"Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability","product":"Commerce and Magento","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-75650","vendor":"Adobe"},{"added":"2026-09-04","id":"CVE-2026-85046","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-85046","vendor":"Google"},{"added":"2026-09-02","id":"CVE-2026-9586","name":"Sangoma Switchvox SQL Injection Vulnerability","product":"Switchvox","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9586","vendor":"Sangoma"},{"added":"2026-09-02","id":"CVE-2026-83549","name":"SonicWall SMA1000 Appliances OS Command Injection Vulnerability","product":"SMA1000 Appliances","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-83549","vendor":"SonicWall"},{"added":"2026-09-02","id":"CVE-2026-83548","name":"SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","product":"SMA1000 Appliances","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-83548","vendor":"SonicWall"},{"added":"2026-09-02","id":"CVE-2026-82329","name":"JFrog Artifactory Improper Authentication Vulnerability","product":"Artifactory","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-82329","vendor":"JFrog"},{"added":"2026-09-02","id":"CVE-2026-59822","name":"BerriAI LiteLLM Improper Authentication Vulnerability","product":"LiteLLM","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-59822","vendor":"BerriAI"},{"added":"2026-09-02","id":"CVE-2026-49869","name":"Kestra OSS OS Command Injection Vulnerability","product":"Kestra OSS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-49869","vendor":"Kestra"},{"added":"2026-09-02","id":"CVE-2026-48710","name":"Kludex Starlette HTTP Request/Response Smuggling Vulnerability","product":"Starlette","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48710","vendor":"Kludex"},{"added":"2026-08-31","id":"CVE-2026-82078","name":"PaperCut NG/MF Unsafe Reflection Vulnerability","product":"NG/MF","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-82078","vendor":"PaperCut"},{"added":"2026-08-31","id":"CVE-2026-81578","name":"PaperCut NG/MF Missing Authentication for Critical Function Vulnerability","product":"NG/MF","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-81578","vendor":"PaperCut"},{"added":"2026-08-27","id":"CVE-2026-66384","name":"JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability","product":"Artifactory","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-66384","vendor":"JFrog"},{"added":"2026-08-27","id":"CVE-2026-53362","name":"Linux Kernel Unspecified Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-53362","vendor":"Linux"},{"added":"2026-08-27","id":"CVE-2023-49105","name":"ownCloud Improper Authentication Vulnerability","product":"ownCloud","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49105","vendor":"ownCloud"},{"added":"2026-08-26","id":"CVE-2026-8452","name":"Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","product":"NetScaler ADC and NetScaler Gateway","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8452","vendor":"Citrix"},{"added":"2026-08-26","id":"CVE-2022-0995","name":"Linux Kernel Out-of-Bounds Write Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0995","vendor":"Linux"},{"added":"2026-08-26","id":"CVE-2021-23758","name":"Ajax.NET Professional Deserialization of Untrusted Data Vulnerability","product":"Ajax.NET Professional","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-23758","vendor":"Ajax.NET Professional"},{"added":"2026-08-26","id":"CVE-2019-1068","name":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1068","vendor":"Microsoft"},{"added":"2026-08-26","id":"CVE-2015-5287","name":"Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability","product":"Automatic Bug Reporting Tool","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5287","vendor":"Red Hat"},{"added":"2026-08-26","id":"CVE-2015-3246","name":"Red Hat Libuser Race Condition Vulnerability","product":"Libuser","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3246","vendor":"Red Hat"},{"added":"2026-08-25","id":"CVE-2026-60004","name":"Gitea Code Injection Vulnerability","product":"Gitea","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-60004","vendor":"Gitea"},{"added":"2026-08-24","id":"CVE-2026-21962","name":"Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability","product":"HTTP Server and Oracle Weblogic Server Proxy Plug-in","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21962","vendor":"Oracle"},{"added":"2026-08-21","id":"CVE-2026-73570","name":"Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-73570","vendor":"Synacor"},{"added":"2026-08-20","id":"CVE-2026-72530","name":"TrueConf Server Code Injection Vulnerability","product":"Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72530","vendor":"TrueConf"},{"added":"2026-08-20","id":"CVE-2026-72529","name":"TrueConf Server Missing Authentication for Critical Function Vulnerability","product":"Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72529","vendor":"TrueConf"},{"added":"2026-08-19","id":"CVE-2026-64849","name":"MLflow Server-Side Request Forgery Vulnerability","product":"MLflow","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-64849","vendor":"MLflow"},{"added":"2026-08-18","id":"CVE-2026-65400","name":"Apple macOS Improper Authentication Vulnerability","product":"macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-65400","vendor":"Apple"},{"added":"2026-08-18","id":"CVE-2026-59310","name":"Broadcom VMware vCenter Path Traversal Vulnerability","product":"VMware vCenter","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-59310","vendor":"Broadcom"},{"added":"2026-08-18","id":"CVE-2026-55040","name":"Microsoft SharePoint Weak Authentication Vulnerability","product":"SharePoint","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-55040","vendor":"Microsoft"},{"added":"2026-08-18","id":"CVE-2026-33824","name":"Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability","product":"Internet Key Exchange (IKE) Service Extensions","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33824","vendor":"Microsoft"},{"added":"2026-08-17","id":"CVE-2025-62593","name":"Ray-Project Ray Code Injection Vulnerability","product":"Ray","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-62593","vendor":"Ray-Project"},{"added":"2026-08-11","id":"CVE-2026-72898","name":"Metabase SQL Injection Vulnerability","product":"Metabase","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72898","vendor":"Metabase"},{"added":"2026-08-11","id":"CVE-2026-68820","name":"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","product":"Windows Ancillary Function Driver for WinSock ","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-68820","vendor":"Microsoft"},{"added":"2026-08-11","id":"CVE-2026-20349","name":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability","product":"Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) ","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20349","vendor":"Cisco"},{"added":"2026-08-07","id":"CVE-2026-8037","name":"Progress LoadMaster Command Injection Vulnerability","product":"LoadMaster","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8037","vendor":"Progress"},{"added":"2026-08-05","id":"CVE-2026-63077","name":"JetBrains TeamCity Deserialization of Untrusted Data Vulnerability","product":"TeamCity","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-63077","vendor":"JetBrains"},{"added":"2026-08-04","id":"CVE-2026-9198","name":"IBM Langflow Code Injection Vulnerability","product":"Langflow","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9198","vendor":"IBM"},{"added":"2026-08-04","id":"CVE-2026-34486","name":"Apache Tomcat Missing Encryption of Sensitive Data Vulnerability","product":"Tomcat","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34486","vendor":"Apache"},{"added":"2026-08-04","id":"CVE-2026-18556","name":"N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability","product":"N-central","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-18556","vendor":"N-able"},{"added":"2026-08-03","id":"CVE-2026-18577","name":"N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability","product":"N-central","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-18577","vendor":"N-able"},{"added":"2026-07-29","id":"CVE-2026-20316","name":"Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability","product":"Secure Firewall Management Center (FMC)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20316","vendor":"Cisco"},{"added":"2026-07-27","id":"CVE-2026-16812","name":"Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability","product":"VeloCloud Orchestrator","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-16812","vendor":"Arista"},{"added":"2026-07-27","id":"CVE-2025-68686","name":"Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","product":"FortiOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-68686","vendor":"Fortinet"},{"added":"2026-07-22","id":"CVE-2026-50522","name":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability ","product":"SharePoint","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-50522","vendor":"Microsoft"},{"added":"2026-07-22","id":"CVE-2026-16232","name":"Check Point SmartConsole Improper Authentication Vulnerability","product":"SmartConsole","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-16232","vendor":"Check Point"},{"added":"2026-07-21","id":"CVE-2026-63030","name":"WordPress Core Interpretation Conflict Vulnerability","product":"Core","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-63030","vendor":"WordPress"},{"added":"2026-07-21","id":"CVE-2026-60137","name":"WordPress Core SQL Injection Vulnerability","product":"Core","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-60137","vendor":"WordPress"},{"added":"2026-07-21","id":"CVE-2026-0770","name":"Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability","product":"Langflow","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0770","vendor":"Langflow"},{"added":"2026-07-21","id":"CVE-2021-27137","name":"DD-WRT Stack-Based Buffer Overflow Vulnerability","product":"DD-WRT","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27137","vendor":"DD-WRT"},{"added":"2026-07-16","id":"CVE-2026-58644","name":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","product":"SharePoint","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-58644","vendor":"Microsoft"},{"added":"2026-07-16","id":"CVE-2026-39808","name":"Fortinet FortiSandbox OS Command Injection Vulnerability","product":"FortiSandbox","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-39808","vendor":"Fortinet"},{"added":"2026-07-16","id":"CVE-2026-25089","name":"Fortinet FortiSandbox OS Command Injection Vulnerability","product":"FortiSandbox","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-25089","vendor":"Fortinet"},{"added":"2026-07-15","id":"CVE-2026-46817","name":"Oracle E-Business Suite Improper Privilege Management Vulnerability","product":"E-Business Suite","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-46817","vendor":"Oracle"},{"added":"2026-07-15","id":"CVE-2023-4346","name":"KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability","product":"KNX Protocol Connection Authorization Option 1","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4346","vendor":"KNX Association"},{"added":"2026-07-14","id":"CVE-2026-56164","name":"Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability","product":"SharePoint Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-56164","vendor":"Microsoft"},{"added":"2026-07-14","id":"CVE-2026-56155","name":"Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability ","product":"Active Directory Federation Services","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-56155","vendor":"Microsoft"},{"added":"2026-07-14","id":"CVE-2026-15410","name":"SonicWall SMA1000 Appliances Code Injection Vulnerability","product":"SMA1000 Appliances","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-15410","vendor":"SonicWall"},{"added":"2026-07-14","id":"CVE-2026-15409","name":"SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","product":"SMA1000 Appliances","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-15409","vendor":"SonicWall"},{"added":"2026-07-13","id":"CVE-2008-4128","name":"Cisco IOS Cross-Site Request Forgery Vulnerability","product":"IOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-4128","vendor":"Cisco"},{"added":"2026-07-10","id":"CVE-2026-56291","name":"Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability","product":"Forms","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-56291","vendor":"Balbooa"},{"added":"2026-07-10","id":"CVE-2026-48939","name":"iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability","product":"iCagenda","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48939","vendor":"iCagenda"},{"added":"2026-07-07","id":"CVE-2026-56290","name":"Joomlack Page Builder Improper Access Control Vulnerability","product":"Page Builder","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-56290","vendor":"Joomlack"},{"added":"2026-07-07","id":"CVE-2026-55255","name":"Langflow Authorization Bypass Through User-Controlled Key Vulnerability","product":"Langflow","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-55255","vendor":"Langflow"},{"added":"2026-07-07","id":"CVE-2026-48908","name":"JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability","product":"SP Page Builder","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48908","vendor":"JoomShaper"},{"added":"2026-07-07","id":"CVE-2026-48282","name":"Adobe ColdFusion Path Traversal Vulnerability","product":"ColdFusion","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48282","vendor":"Adobe"},{"added":"2026-07-01","id":"CVE-2026-45659","name":"Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability","product":"SharePoint Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45659","vendor":"Microsoft"},{"added":"2026-06-29","id":"CVE-2026-48558","name":"SimpleHelp Authentication Bypass Vulnerability","product":"SimpleHelp","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48558","vendor":"SimpleHelp "},{"added":"2026-06-25","id":"CVE-2026-20230","name":"Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability","product":"Unified Communications Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20230","vendor":"Cisco"},{"added":"2026-06-25","id":"CVE-2026-12569","name":"PTC Windchill and FlexPLM Improper Input Validation Vulnerability","product":"Windchill and FlexPLM","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-12569","vendor":"PTC"},{"added":"2026-06-23","id":"CVE-2026-34910","name":"Ubiquiti UniFi OS Improper Input Validation Vulnerability","product":"UniFi OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34910","vendor":"Ubiquiti"},{"added":"2026-06-23","id":"CVE-2026-34909","name":"Ubiquiti UniFi OS Path Traversal Vulnerability","product":"UniFi OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34909","vendor":"Ubiquiti"},{"added":"2026-06-23","id":"CVE-2026-34908","name":"Ubiquiti UniFi OS Improper Access Control Vulnerability","product":"UniFi OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34908","vendor":"Ubiquiti"},{"added":"2026-06-23","id":"CVE-2025-67038","name":"Lantronix EDS5000 Code Injection Vulnerability","product":"EDS5000","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-67038","vendor":"Lantronix"},{"added":"2026-06-18","id":"CVE-2026-20253","name":"Splunk Enterprise Missing Authentication for Critical Function Vulnerability","product":"Enterprise","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20253","vendor":"Splunk"},{"added":"2026-06-16","id":"CVE-2026-48907","name":"Widget Factory Joomla Content Editor Improper Access Control Vulnerability","product":"Joomla Content Editor ","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48907","vendor":"Widget Factory"},{"added":"2026-06-15","id":"CVE-2026-54420","name":"LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability","product":"cPanel Plugin","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-54420","vendor":"LiteSpeed"},{"added":"2026-06-15","id":"CVE-2026-20262","name":"Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability","product":"Catalyst SD-WAN Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20262","vendor":"Cisco"},{"added":"2026-06-12","id":"CVE-2026-35273","name":"Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability","product":" PeopleSoft Enterprise PeopleTools","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35273","vendor":"Oracle"},{"added":"2026-06-11","id":"CVE-2026-10520","name":"Ivanti Sentry OS Command Injection Vulnerability","product":"Sentry","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-10520","vendor":"Ivanti"},{"added":"2026-06-09","id":"CVE-2026-7473","name":"Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability","product":"Extensible Operating System","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-7473","vendor":"Arista"},{"added":"2026-06-09","id":"CVE-2026-20245","name":"Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability","product":"Catalyst SD-WAN Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20245","vendor":"Cisco"},{"added":"2026-06-09","id":"CVE-2026-11645","name":"Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-11645","vendor":"Google"},{"added":"2026-06-08","id":"CVE-2026-50751","name":"Check Point Security Gateway Improper Authentication Vulnerability","product":"Security Gateway","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-50751","vendor":"Check Point"},{"added":"2026-06-08","id":"CVE-2026-42271","name":"BerriAI LiteLLM Command Injection Vulnerability","product":"LiteLLM","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42271","vendor":"BerriAI"},{"added":"2026-06-05","id":"CVE-2026-28318","name":"SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability","product":"Serv-U","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-28318","vendor":"SolarWinds"},{"added":"2026-06-03","id":"CVE-2026-45247","name":"Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability","product":"Mirasvit Full Page Cache Warmer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45247","vendor":"Mirasvit"},{"added":"2026-06-02","id":"CVE-2025-48595","name":"Android Framework Integer Overflow Vulnerability","product":"Framework","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48595","vendor":"Android"},{"added":"2026-06-02","id":"CVE-2022-0492","name":"Linux Kernel Improper Authentication Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0492","vendor":"Linux"},{"added":"2026-06-01","id":"CVE-2024-21182","name":"Oracle WebLogic Server Unspecified Vulnerability","product":"WebLogic Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21182","vendor":"Oracle"},{"added":"2026-05-29","id":"CVE-2026-0257","name":"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","product":"PAN-OS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0257","vendor":"Palo Alto Networks"},{"added":"2026-05-27","id":"CVE-2026-8398","name":"Daemon Tools Lite Embedded Malicious Code Vulnerability","product":"Daemon Tools Lite","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8398","vendor":"Daemon"},{"added":"2026-05-27","id":"CVE-2026-48027","name":"Nx Console Embedded Malicious Code Vulnerability","product":"Nx Console","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48027","vendor":"Nx"},{"added":"2026-05-27","id":"CVE-2026-45321","name":"TanStack Unspecified Vulnerability","product":"TanStack","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45321","vendor":"TanStack"},{"added":"2026-05-26","id":"CVE-2026-48172","name":"LiteSpeed cPanel Plugin Privilege Escalation Vulnerability","product":"cPanel Plugin","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48172","vendor":"LiteSpeed"},{"added":"2026-05-22","id":"CVE-2026-9082","name":"Drupal Core SQL Injection Vulnerability","product":"Core","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9082","vendor":"Drupal"},{"added":"2026-05-21","id":"CVE-2026-34926","name":"Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability","product":"Apex One","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34926","vendor":"Trend Micro"},{"added":"2026-05-21","id":"CVE-2025-34291","name":"Langflow Origin Validation Error Vulnerability","product":"Langflow","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-34291","vendor":"Langflow"},{"added":"2026-05-20","id":"CVE-2026-45498","name":"Microsoft Defender Denial of Service Vulnerability","product":"Defender","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45498","vendor":"Microsoft"},{"added":"2026-05-20","id":"CVE-2026-41091","name":"Microsoft Defender Link Following Vulnerability","product":"Defender","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41091","vendor":"Microsoft"},{"added":"2026-05-20","id":"CVE-2010-0806","name":"Microsoft Internet Explorer Use-After-Free Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0806","vendor":"Microsoft"},{"added":"2026-05-20","id":"CVE-2010-0249","name":"Microsoft Internet Explorer Use-After-Free Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0249","vendor":"Microsoft"},{"added":"2026-05-20","id":"CVE-2009-3459","name":"Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability","product":"Acrobat and Reader","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3459","vendor":"Adobe"},{"added":"2026-05-20","id":"CVE-2009-1537","name":"Microsoft DirectX NULL Byte Overwrite Vulnerability","product":"DirectX","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-1537","vendor":"Microsoft"},{"added":"2026-05-20","id":"CVE-2008-4250","name":"Microsoft Windows Buffer Overflow Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-4250","vendor":"Microsoft"},{"added":"2026-05-15","id":"CVE-2026-42897","name":"Microsoft Exchange Server Cross-Site Scripting Vulnerability","product":"Microsoft","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42897","vendor":"Microsoft"},{"added":"2026-05-14","id":"CVE-2026-20182","name":"Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability","product":"Catalyst SD-WAN","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20182","vendor":"Cisco"},{"added":"2026-05-08","id":"CVE-2026-42208","name":"BerriAI LiteLLM SQL Injection Vulnerability","product":"LiteLLM","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42208","vendor":"BerriAI"},{"added":"2026-05-07","id":"CVE-2026-6973","name":"Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability","product":"Endpoint Manager Mobile (EPMM)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-6973","vendor":"Ivanti"},{"added":"2026-05-06","id":"CVE-2026-0300","name":"Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability","product":"PAN-OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0300","vendor":"Palo Alto Networks"},{"added":"2026-05-01","id":"CVE-2026-31431","name":"Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-31431","vendor":"Linux"},{"added":"2026-04-30","id":"CVE-2026-41940","name":"WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability","product":"cPanel & WHM and WP2 (WordPress Squared)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41940","vendor":"WebPros"},{"added":"2026-04-28","id":"CVE-2026-32202","name":"Microsoft Windows Protection Mechanism Failure Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32202","vendor":"Microsoft"},{"added":"2026-04-28","id":"CVE-2024-1708","name":"ConnectWise ScreenConnect Path Traversal Vulnerability","product":"ScreenConnect","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-1708","vendor":"ConnectWise"},{"added":"2026-04-24","id":"CVE-2025-29635","name":"D-Link DIR-823X Command Injection Vulnerability","product":"DIR-823X","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-29635","vendor":"D-Link"},{"added":"2026-04-24","id":"CVE-2024-7399","name":"Samsung MagicINFO 9 Server Path Traversal Vulnerability","product":"MagicINFO 9 Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-7399","vendor":"Samsung"},{"added":"2026-04-24","id":"CVE-2024-57728","name":"SimpleHelp Path Traversal Vulnerability","product":"SimpleHelp","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57728","vendor":"SimpleHelp "},{"added":"2026-04-24","id":"CVE-2024-57726","name":"SimpleHelp Missing Authorization Vulnerability","product":"SimpleHelp","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57726","vendor":"SimpleHelp "},{"added":"2026-04-23","id":"CVE-2026-39987","name":"Marimo Remote Code Execution Vulnerability","product":"Marimo","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-39987","vendor":"Marimo"},{"added":"2026-04-22","id":"CVE-2026-33825","name":"Microsoft Defender Insufficient Granularity of Access Control Vulnerability","product":"Defender","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33825","vendor":"Microsoft"},{"added":"2026-04-20","id":"CVE-2026-20133","name":"Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","product":"Catalyst SD-WAN Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20133","vendor":"Cisco"},{"added":"2026-04-20","id":"CVE-2026-20128","name":"Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability","product":"Catalyst SD-WAN Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20128","vendor":"Cisco"},{"added":"2026-04-20","id":"CVE-2026-20122","name":"Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability","product":"Catalyst SD-WAN Manger","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20122","vendor":"Cisco"},{"added":"2026-04-20","id":"CVE-2025-48700","name":"Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48700","vendor":"Synacor"},{"added":"2026-04-20","id":"CVE-2025-32975","name":"Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability","product":"KACE Systems Management Appliance (SMA)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32975","vendor":"Quest"},{"added":"2026-04-20","id":"CVE-2025-2749","name":"Kentico Xperience Path Traversal Vulnerability","product":"Kentico Xperience","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2749","vendor":"Kentico"},{"added":"2026-04-20","id":"CVE-2024-27199","name":"JetBrains TeamCity Relative Path Traversal Vulnerability","product":"TeamCity","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27199","vendor":"JetBrains"},{"added":"2026-04-20","id":"CVE-2023-27351","name":"PaperCut NG/MF Improper Authentication Vulnerability","product":"NG/MF","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27351","vendor":"PaperCut"},{"added":"2026-04-16","id":"CVE-2026-34197","name":"Apache ActiveMQ Improper Input Validation Vulnerability","product":"ActiveMQ","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34197","vendor":"Apache"},{"added":"2026-04-14","id":"CVE-2026-32201","name":"Microsoft SharePoint Server Improper Input Validation Vulnerability","product":"SharePoint Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32201","vendor":"Microsoft"},{"added":"2026-04-14","id":"CVE-2009-0238","name":"Microsoft Office Remote Code Execution","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0238","vendor":"Microsoft"},{"added":"2026-04-13","id":"CVE-2026-34621","name":"Adobe Acrobat and Reader Prototype Pollution Vulnerability","product":"Acrobat and Reader","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34621","vendor":"Adobe"},{"added":"2026-04-13","id":"CVE-2026-21643","name":"Fortinet FortiClient EMS SQL Injection Vulnerability","product":"FortiClient EMS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21643","vendor":"Fortinet"},{"added":"2026-04-13","id":"CVE-2025-60710","name":"Microsoft Windows Link Following Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-60710","vendor":"Microsoft"},{"added":"2026-04-13","id":"CVE-2023-36424","name":"Microsoft Windows Out-of-Bounds Read Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36424","vendor":"Microsoft"},{"added":"2026-04-13","id":"CVE-2023-21529","name":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","product":"Exchange Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21529","vendor":"Microsoft"},{"added":"2026-04-13","id":"CVE-2020-9715","name":"Adobe Acrobat Use-After-Free Vulnerability","product":"Acrobat","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9715","vendor":"Adobe"},{"added":"2026-04-13","id":"CVE-2012-1854","name":"Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability","product":"Visual Basic for Applications (VBA)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1854","vendor":"Microsoft"},{"added":"2026-04-08","id":"CVE-2026-1340","name":"Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","product":"Endpoint Manager Mobile (EPMM)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-1340","vendor":"Ivanti"},{"added":"2026-04-06","id":"CVE-2026-35616","name":"Fortinet FortiClient EMS Improper Access Control Vulnerability","product":"FortiClient EMS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35616","vendor":"Fortinet"},{"added":"2026-04-02","id":"CVE-2026-3502","name":"TrueConf Client Download of Code Without Integrity Check Vulnerability","product":"Client","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3502","vendor":"TrueConf"},{"added":"2026-04-01","id":"CVE-2026-5281","name":"Google Dawn Use-After-Free Vulnerability","product":"Dawn","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-5281","vendor":"Google"},{"added":"2026-03-30","id":"CVE-2026-3055","name":"Citrix NetScaler Out-of-Bounds Read Vulnerability","product":"NetScaler","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3055","vendor":"Citrix"},{"added":"2026-03-27","id":"CVE-2025-53521","name":"F5 BIG-IP Stack-Based Buffer Overflow Vulnerability","product":"BIG-IP","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53521","vendor":"F5"},{"added":"2026-03-26","id":"CVE-2026-33634","name":"Aquasecurity Trivy Embedded Malicious Code Vulnerability","product":"Trivy","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33634","vendor":"Aquasecurity"},{"added":"2026-03-25","id":"CVE-2026-33017","name":"Langflow Code Injection Vulnerability","product":"Langflow","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33017","vendor":"Langflow"},{"added":"2026-03-20","id":"CVE-2025-54068","name":"Laravel Livewire Code Injection Vulnerability","product":"Livewire","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-54068","vendor":"Laravel"},{"added":"2026-03-20","id":"CVE-2025-43520","name":"Apple Multiple Products Classic Buffer Overflow Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43520","vendor":"Apple"},{"added":"2026-03-20","id":"CVE-2025-43510","name":"Apple Multiple Products Improper Locking Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43510","vendor":"Apple"},{"added":"2026-03-20","id":"CVE-2025-32432","name":"Craft CMS Code Injection Vulnerability","product":"Craft CMS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32432","vendor":"Craft CMS"},{"added":"2026-03-20","id":"CVE-2025-31277","name":"Apple Multiple Products Buffer Overflow Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-31277","vendor":"Apple"},{"added":"2026-03-19","id":"CVE-2026-20131","name":"Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability","product":"Secure Firewall Management Center (FMC)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20131","vendor":"Cisco"},{"added":"2026-03-18","id":"CVE-2026-20963","name":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","product":"SharePoint","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20963","vendor":"Microsoft"},{"added":"2026-03-18","id":"CVE-2025-66376","name":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-66376","vendor":"Synacor"},{"added":"2026-03-16","id":"CVE-2025-47813","name":"Wing FTP Server Information Disclosure Vulnerability","product":"Wing FTP Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-47813","vendor":"Wing FTP Server"},{"added":"2026-03-13","id":"CVE-2026-3910","name":"Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3910","vendor":"Google"},{"added":"2026-03-13","id":"CVE-2026-3909","name":"Google Skia Out-of-Bounds Write Vulnerability","product":"Skia","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3909","vendor":"Google"},{"added":"2026-03-11","id":"CVE-2025-68613","name":"n8n Improper Control of Dynamically-Managed Code Resources Vulnerability","product":"n8n","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-68613","vendor":"n8n"},{"added":"2026-03-09","id":"CVE-2026-1603","name":"Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability","product":" Endpoint Manager (EPM)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-1603","vendor":"Ivanti"},{"added":"2026-03-09","id":"CVE-2025-26399","name":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","product":"Web Help Desk","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-26399","vendor":"SolarWinds"},{"added":"2026-03-09","id":"CVE-2021-22054","name":"Omnissa Workspace ONE Server-Side Request Forgery","product":"Workspace One UEM","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22054","vendor":"Omnissa"},{"added":"2026-03-05","id":"CVE-2023-43000","name":"Apple Multiple products Use-After-Free Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-43000","vendor":"Apple"},{"added":"2026-03-05","id":"CVE-2023-41974","name":"Apple iOS and iPadOS Use-After-Free Vulnerability","product":"iOS and iPadOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41974","vendor":"Apple"},{"added":"2026-03-05","id":"CVE-2021-30952","name":"Apple Multiple Products Integer Overflow or Wraparound Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30952","vendor":"Apple"},{"added":"2026-03-05","id":"CVE-2021-22681","name":"Rockwell Multiple Products Insufficient Protected Credentials Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22681","vendor":"Rockwell"},{"added":"2026-03-05","id":"CVE-2017-7921","name":"Hikvision Multiple Products Improper Authentication Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-7921","vendor":"Hikvision"},{"added":"2026-03-03","id":"CVE-2026-22719","name":"Broadcom VMware Aria Operations Command Injection Vulnerability","product":"VMware Aria Operations","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-22719","vendor":"Broadcom"},{"added":"2026-03-03","id":"CVE-2026-21385","name":"Qualcomm Multiple Chipsets Memory Corruption Vulnerability","product":"Multiple Chipsets","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21385","vendor":"Qualcomm"},{"added":"2026-02-25","id":"CVE-2026-20127","name":"Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability","product":"Catalyst SD-WAN Controller and Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20127","vendor":"Cisco"},{"added":"2026-02-25","id":"CVE-2022-20775","name":"Cisco SD-WAN Path Traversal Vulnerability","product":"SD-WAN","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-20775","vendor":"Cisco"},{"added":"2026-02-24","id":"CVE-2026-25108","name":"Soliton Systems K.K FileZen OS Command Injection Vulnerability","product":"FileZen","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-25108","vendor":"Soliton Systems K.K"},{"added":"2026-02-20","id":"CVE-2025-68461","name":"RoundCube Webmail Cross-site Scripting Vulnerability","product":"Webmail","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-68461","vendor":"Roundcube"},{"added":"2026-02-20","id":"CVE-2025-49113","name":"RoundCube Webmail Deserialization of Untrusted Data Vulnerability","product":"Webmail","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-49113","vendor":"Roundcube"},{"added":"2026-02-18","id":"CVE-2026-22769","name":"Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability","product":"RecoverPoint for Virtual Machines (RP4VMs)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-22769","vendor":"Dell"},{"added":"2026-02-18","id":"CVE-2021-22175","name":"GitLab Server-Side Request Forgery (SSRF) Vulnerability","product":"GitLab","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22175","vendor":"GitLab"},{"added":"2026-02-17","id":"CVE-2026-2441","name":"Google Chromium CSS Use-After-Free Vulnerability","product":"Chromium","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-2441","vendor":"Google"},{"added":"2026-02-17","id":"CVE-2024-7694","name":"TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability","product":"ThreatSonar Anti-Ransomware","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-7694","vendor":"TeamT5"},{"added":"2026-02-17","id":"CVE-2020-7796","name":"Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability","product":"Zimbra Collaboration Suite","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-7796","vendor":"Synacor"},{"added":"2026-02-17","id":"CVE-2008-0015","name":" Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-0015","vendor":"Microsoft"},{"added":"2026-02-13","id":"CVE-2026-1731","name":"BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability","product":"Remote Support (RS) and Privileged Remote Access (PRA)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-1731","vendor":"BeyondTrust"},{"added":"2026-02-12","id":"CVE-2026-20700","name":"Apple Multiple Buffer Overflow Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20700","vendor":"Apple"},{"added":"2026-02-12","id":"CVE-2025-40536","name":"SolarWinds Web Help Desk Security Control Bypass Vulnerability","product":"Web Help Desk","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-40536","vendor":"SolarWinds"},{"added":"2026-02-12","id":"CVE-2025-15556","name":"Notepad++ Download of Code Without Integrity Check Vulnerability","product":"Notepad++","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-15556","vendor":"Notepad++"},{"added":"2026-02-12","id":"CVE-2024-43468","name":"Microsoft Configuration Manager SQL Injection Vulnerability","product":"Configuration Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43468","vendor":"Microsoft"},{"added":"2026-02-10","id":"CVE-2026-21533","name":"Microsoft Windows Improper Privilege Management Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21533","vendor":"Microsoft"},{"added":"2026-02-10","id":"CVE-2026-21525","name":"Microsoft Windows NULL Pointer Dereference Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21525","vendor":"Microsoft"},{"added":"2026-02-10","id":"CVE-2026-21519","name":"Microsoft Windows Type Confusion Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21519","vendor":"Microsoft"},{"added":"2026-02-10","id":"CVE-2026-21514","name":"Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21514","vendor":"Microsoft"},{"added":"2026-02-10","id":"CVE-2026-21513","name":"Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21513","vendor":"Microsoft"},{"added":"2026-02-10","id":"CVE-2026-21510","name":"Microsoft Windows Shell Protection Mechanism Failure Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21510","vendor":"Microsoft"},{"added":"2026-02-05","id":"CVE-2026-24423","name":"SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability","product":"SmarterMail","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-24423","vendor":"SmarterTools"},{"added":"2026-02-05","id":"CVE-2025-11953","name":"React Native Community CLI OS Command Injection Vulnerability","product":"CLI","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-11953","vendor":"React Native Community"},{"added":"2026-02-03","id":"CVE-2025-64328","name":"Sangoma FreePBX OS Command Injection Vulnerability","product":"FreePBX ","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-64328","vendor":"Sangoma"},{"added":"2026-02-03","id":"CVE-2025-40551","name":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","product":"Web Help Desk","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-40551","vendor":"SolarWinds"},{"added":"2026-02-03","id":"CVE-2021-39935","name":"GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability","product":"Community and Enterprise Editions","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-39935","vendor":"GitLab"},{"added":"2026-02-03","id":"CVE-2019-19006","name":" Sangoma FreePBX Improper Authentication Vulnerability","product":"FreePBX","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-19006","vendor":"Sangoma"},{"added":"2026-01-29","id":"CVE-2026-1281","name":"Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","product":"Endpoint Manager Mobile (EPMM)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-1281","vendor":"Ivanti"},{"added":"2026-01-27","id":"CVE-2026-24858","name":"Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-24858","vendor":"Fortinet"},{"added":"2026-01-26","id":"CVE-2026-24061","name":"GNU InetUtils Argument Injection Vulnerability","product":"InetUtils","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-24061","vendor":"GNU"},{"added":"2026-01-26","id":"CVE-2026-23760","name":"SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability","product":"SmarterMail","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-23760","vendor":"SmarterTools"},{"added":"2026-01-26","id":"CVE-2026-21509","name":"Microsoft Office Security Feature Bypass Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21509","vendor":"Microsoft"},{"added":"2026-01-26","id":"CVE-2025-52691","name":"SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability","product":"SmarterMail","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-52691","vendor":"SmarterTools"},{"added":"2026-01-26","id":"CVE-2018-14634","name":"Linux Kernel Integer Overflow Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14634","vendor":"Linux"},{"added":"2026-01-23","id":"CVE-2024-37079","name":"Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability","product":"VMware vCenter Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37079","vendor":"Broadcom"},{"added":"2026-01-22","id":"CVE-2025-68645","name":"Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability","product":" Zimbra Collaboration Suite (ZCS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-68645","vendor":"Synacor"},{"added":"2026-01-22","id":"CVE-2025-54313","name":"Prettier eslint-config-prettier Embedded Malicious Code Vulnerability","product":"eslint-config-prettier","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-54313","vendor":"Prettier"},{"added":"2026-01-22","id":"CVE-2025-34026","name":"Versa Concerto Improper Authentication Vulnerability","product":"Concerto","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-34026","vendor":"Versa"},{"added":"2026-01-22","id":"CVE-2025-31125","name":"Vite Vitejs Improper Access Control Vulnerability","product":"Vitejs","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-31125","vendor":"Vite"},{"added":"2026-01-21","id":"CVE-2026-20045","name":"Cisco Unified Communications Products Code Injection Vulnerability","product":"Unified Communications Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20045","vendor":"Cisco"},{"added":"2026-01-13","id":"CVE-2026-20805","name":"Microsoft Windows Information Disclosure Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20805","vendor":"Microsoft"},{"added":"2026-01-12","id":"CVE-2025-8110","name":"Gogs Path Traversal Vulnerability","product":"Gogs","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-8110","vendor":"Gogs"},{"added":"2026-01-07","id":"CVE-2025-37164","name":"Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability","product":"OneView","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-37164","vendor":"Hewlett Packard Enterprise (HPE)"},{"added":"2026-01-07","id":"CVE-2009-0556","name":"Microsoft Office PowerPoint Code Injection Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0556","vendor":"Microsoft"},{"added":"2025-12-29","id":"CVE-2025-14847","name":"MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability","product":"MongoDB and MongoDB Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-14847","vendor":"MongoDB"},{"added":"2025-12-22","id":"CVE-2023-52163","name":"Digiever DS-2105 Pro Missing Authorization Vulnerability","product":"DS-2105 Pro","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-52163","vendor":"Digiever"},{"added":"2025-12-19","id":"CVE-2025-14733","name":"WatchGuard Firebox Out of Bounds Write Vulnerability","product":"Firebox","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-14733","vendor":"WatchGuard"},{"added":"2025-12-17","id":"CVE-2025-59374","name":"ASUS Live Update Embedded Malicious Code Vulnerability","product":"Live Update","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59374","vendor":"ASUS"},{"added":"2025-12-17","id":"CVE-2025-40602","name":"SonicWall SMA1000 Missing Authorization Vulnerability","product":"SMA1000 appliance","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-40602","vendor":"SonicWall"},{"added":"2025-12-17","id":"CVE-2025-20393","name":"Cisco Multiple Products Improper Input Validation Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20393","vendor":"Cisco"},{"added":"2025-12-16","id":"CVE-2025-59718","name":"Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59718","vendor":"Fortinet"},{"added":"2025-12-15","id":"CVE-2025-43529","name":"Apple Multiple Products Use-After-Free WebKit Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43529","vendor":"Apple"},{"added":"2025-12-15","id":"CVE-2025-14611","name":"Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability","product":"CentreStack and Triofox","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-14611","vendor":"Gladinet"},{"added":"2025-12-12","id":"CVE-2025-14174","name":"Google Chromium Out of Bounds Memory Access Vulnerability","product":"Chromium","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-14174","vendor":"Google"},{"added":"2025-12-12","id":"CVE-2018-4063","name":"Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability","product":"AirLink ALEOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-4063","vendor":"Sierra Wireless"},{"added":"2025-12-11","id":"CVE-2025-58360","name":"OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability","product":"GeoServer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-58360","vendor":"OSGeo"},{"added":"2025-12-09","id":"CVE-2025-62221","name":"Microsoft Windows Use After Free Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-62221","vendor":"Microsoft"},{"added":"2025-12-09","id":"CVE-2025-6218","name":"RARLAB WinRAR Path Traversal Vulnerability","product":"WinRAR","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-6218","vendor":"RARLAB"},{"added":"2025-12-08","id":"CVE-2025-66644","name":"Array Networks ArrayOS AG OS Command Injection Vulnerability","product":"ArrayOS AG","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-66644","vendor":"Array Networks "},{"added":"2025-12-08","id":"CVE-2022-37055","name":"D-Link Routers Buffer Overflow Vulnerability","product":"Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-37055","vendor":"D-Link"},{"added":"2025-12-05","id":"CVE-2025-55182","name":"Meta React Server Components Remote Code Execution Vulnerability","product":"React Server Components","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-55182","vendor":"Meta"},{"added":"2025-12-03","id":"CVE-2021-26828","name":"OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability","product":"ScadaBR","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26828","vendor":"OpenPLC"},{"added":"2025-12-02","id":"CVE-2025-48633","name":"Android Framework Information Disclosure Vulnerability","product":"Framework","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48633","vendor":"Android"},{"added":"2025-12-02","id":"CVE-2025-48572","name":"Android Framework Privilege Escalation Vulnerability","product":"Framework","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48572","vendor":"Android"},{"added":"2025-11-28","id":"CVE-2021-26829","name":"OpenPLC ScadaBR Cross-site Scripting Vulnerability","product":"ScadaBR","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26829","vendor":"OpenPLC"},{"added":"2025-11-21","id":"CVE-2025-61757","name":"Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability","product":"Fusion Middleware","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-61757","vendor":"Oracle"},{"added":"2025-11-19","id":"CVE-2025-13223","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-13223","vendor":"Google"},{"added":"2025-11-18","id":"CVE-2025-58034","name":"Fortinet FortiWeb OS Command Injection Vulnerability","product":"FortiWeb","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-58034","vendor":"Fortinet"},{"added":"2025-11-14","id":"CVE-2025-64446","name":"Fortinet FortiWeb Path Traversal Vulnerability","product":"FortiWeb","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-64446","vendor":"Fortinet"},{"added":"2025-11-12","id":"CVE-2025-9242","name":"WatchGuard Firebox Out-of-Bounds Write Vulnerability","product":"Firebox","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-9242","vendor":"WatchGuard"},{"added":"2025-11-12","id":"CVE-2025-62215","name":"Microsoft Windows Race Condition Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-62215","vendor":"Microsoft"},{"added":"2025-11-12","id":"CVE-2025-12480","name":"Gladinet Triofox Improper Access Control Vulnerability","product":"Triofox","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-12480","vendor":"Gladinet"},{"added":"2025-11-10","id":"CVE-2025-21042","name":"Samsung Mobile Devices Out-of-Bounds Write Vulnerability","product":"Mobile Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21042","vendor":"Samsung"},{"added":"2025-11-04","id":"CVE-2025-48703","name":"CWP Control Web Panel OS Command Injection Vulnerability","product":"Control Web Panel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48703","vendor":"CWP"},{"added":"2025-11-04","id":"CVE-2025-11371","name":"Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability","product":"CentreStack and Triofox","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-11371","vendor":"Gladinet"},{"added":"2025-10-30","id":"CVE-2025-41244","name":"Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability","product":"VMware Aria Operations and VMware Tools","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-41244","vendor":"Broadcom"},{"added":"2025-10-30","id":"CVE-2025-24893","name":"XWiki Platform Eval Injection Vulnerability","product":"Platform","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24893","vendor":"XWiki"},{"added":"2025-10-28","id":"CVE-2025-6205","name":"Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability","product":"DELMIA Apriso","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-6205","vendor":"Dassault Systèmes"},{"added":"2025-10-28","id":"CVE-2025-6204","name":"Dassault Systèmes DELMIA Apriso Code Injection Vulnerability","product":"DELMIA Apriso","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-6204","vendor":"Dassault Systèmes"},{"added":"2025-10-24","id":"CVE-2025-59287","name":"Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59287","vendor":"Microsoft"},{"added":"2025-10-24","id":"CVE-2025-54236","name":"Adobe Commerce and Magento Improper Input Validation Vulnerability","product":"Commerce and Magento","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-54236","vendor":"Adobe"},{"added":"2025-10-22","id":"CVE-2025-61932","name":"Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability","product":"LANSCOPE Endpoint Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-61932","vendor":"Motex"},{"added":"2025-10-20","id":"CVE-2025-61884","name":"Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability","product":"E-Business Suite","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-61884","vendor":"Oracle"},{"added":"2025-10-20","id":"CVE-2025-33073","name":"Microsoft Windows SMB Client Improper Access Control Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-33073","vendor":"Microsoft"},{"added":"2025-10-20","id":"CVE-2025-2747","name":"Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability","product":"Xperience CMS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2747","vendor":"Kentico"},{"added":"2025-10-20","id":"CVE-2025-2746","name":"Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability","product":"Xperience CMS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2746","vendor":"Kentico"},{"added":"2025-10-20","id":"CVE-2022-48503","name":"Apple Multiple Products Unspecified Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-48503","vendor":"Apple"},{"added":"2025-10-15","id":"CVE-2025-54253","name":"Adobe Experience Manager Forms Code Execution Vulnerability","product":"Experience Manager (AEM) Forms","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-54253","vendor":"Adobe"},{"added":"2025-10-14","id":"CVE-2025-59230","name":"Microsoft Windows Improper Access Control Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59230","vendor":"Microsoft"},{"added":"2025-10-14","id":"CVE-2025-47827","name":"IGEL OS Use of a Key Past its Expiration Date Vulnerability","product":"IGEL OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-47827","vendor":"IGEL"},{"added":"2025-10-14","id":"CVE-2025-24990","name":"Microsoft Windows Untrusted Pointer Dereference Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24990","vendor":"Microsoft"},{"added":"2025-10-14","id":"CVE-2016-7836","name":"SKYSEA Client View Improper Authentication Vulnerability","product":"Client View","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7836","vendor":"SKYSEA"},{"added":"2025-10-09","id":"CVE-2021-43798","name":"Grafana Path Traversal Vulnerability","product":"Grafana","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-43798","vendor":"Grafana Labs"},{"added":"2025-10-07","id":"CVE-2025-27915","name":"Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27915","vendor":"Synacor"},{"added":"2025-10-06","id":"CVE-2025-61882","name":"Oracle E-Business Suite Unspecified Vulnerability","product":"E-Business Suite","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-61882","vendor":"Oracle"},{"added":"2025-10-06","id":"CVE-2021-43226","name":"Microsoft Windows Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-43226","vendor":"Microsoft"},{"added":"2025-10-06","id":"CVE-2021-22555","name":"Linux Kernel Heap Out-of-Bounds Write Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22555","vendor":"Linux"},{"added":"2025-10-06","id":"CVE-2013-3918","name":"Microsoft Windows Out-of-Bounds Write Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3918","vendor":"Microsoft"},{"added":"2025-10-06","id":"CVE-2011-3402","name":"Microsoft Windows Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-3402","vendor":"Microsoft"},{"added":"2025-10-06","id":"CVE-2010-3962","name":"Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-3962","vendor":"Microsoft"},{"added":"2025-10-06","id":"CVE-2010-3765","name":"Mozilla Multiple Products Remote Code Execution Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-3765","vendor":"Mozilla"},{"added":"2025-10-02","id":"CVE-2025-4008","name":"Smartbedded Meteobridge Command Injection Vulnerability","product":"Meteobridge","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4008","vendor":"Smartbedded"},{"added":"2025-10-02","id":"CVE-2025-21043","name":"Samsung Mobile Devices Out-of-Bounds Write Vulnerability","product":"Mobile Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21043","vendor":"Samsung"},{"added":"2025-10-02","id":"CVE-2017-1000353","name":"Jenkins Remote Code Execution Vulnerability","product":"Jenkins","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-1000353","vendor":"Jenkins"},{"added":"2025-10-02","id":"CVE-2015-7755","name":"Juniper ScreenOS Improper Authentication Vulnerability","product":"ScreenOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-7755","vendor":"Juniper"},{"added":"2025-10-02","id":"CVE-2014-6278","name":"GNU Bash OS Command Injection Vulnerability","product":"GNU Bash","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-6278","vendor":"GNU"},{"added":"2025-09-29","id":"CVE-2025-59689","name":"Libraesva Email Security Gateway Command Injection Vulnerability","product":"Email Security Gateway","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59689","vendor":"Libraesva"},{"added":"2025-09-29","id":"CVE-2025-32463","name":"Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","product":"Sudo","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32463","vendor":"Sudo"},{"added":"2025-09-29","id":"CVE-2025-20352","name":"Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability","product":"IOS and IOS XE","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20352","vendor":"Cisco"},{"added":"2025-09-29","id":"CVE-2025-10035","name":"Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability","product":"GoAnywhere MFT","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10035","vendor":"Fortra"},{"added":"2025-09-29","id":"CVE-2021-21311","name":"Adminer Server-Side Request Forgery Vulnerability","product":"Adminer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21311","vendor":"Adminer"},{"added":"2025-09-25","id":"CVE-2025-20362","name":"Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability","product":"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20362","vendor":"Cisco"},{"added":"2025-09-25","id":"CVE-2025-20333","name":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability","product":"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20333","vendor":"Cisco"},{"added":"2025-09-23","id":"CVE-2025-10585","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10585","vendor":"Google"},{"added":"2025-09-11","id":"CVE-2025-5086","name":"Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability","product":"DELMIA Apriso","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5086","vendor":"Dassault Systèmes"},{"added":"2025-09-04","id":"CVE-2025-53690","name":"Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690","vendor":"Sitecore"},{"added":"2025-09-04","id":"CVE-2025-48543","name":"Android Runtime Use-After-Free Vulnerability","product":"Runtime","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48543","vendor":"Android"},{"added":"2025-09-04","id":"CVE-2025-38352","name":"Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-38352","vendor":"Linux"},{"added":"2025-09-03","id":"CVE-2025-9377","name":"TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability","product":"Multiple Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-9377","vendor":"TP-Link"},{"added":"2025-09-03","id":"CVE-2023-50224","name":"TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability","product":"TL-WR841N","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-50224","vendor":"TP-Link"},{"added":"2025-09-02","id":"CVE-2025-55177","name":"Meta Platforms WhatsApp Incorrect Authorization Vulnerability","product":"WhatsApp","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-55177","vendor":"Meta Platforms"},{"added":"2025-09-02","id":"CVE-2020-24363","name":"TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability","product":"TL-WA855RE","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-24363","vendor":"TP-Link"},{"added":"2025-08-29","id":"CVE-2025-57819","name":"Sangoma FreePBX Authentication Bypass Vulnerability","product":"FreePBX","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-57819","vendor":"Sangoma"},{"added":"2025-08-26","id":"CVE-2025-7775","name":"Citrix NetScaler Memory Overflow Vulnerability","product":"NetScaler","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-7775","vendor":"Citrix"},{"added":"2025-08-25","id":"CVE-2025-48384","name":"Git Link Following Vulnerability","product":"Git","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48384","vendor":"Git"},{"added":"2025-08-25","id":"CVE-2024-8069","name":"Citrix Session Recording Deserialization of Untrusted Data Vulnerability","product":"Session Recording","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8069","vendor":"Citrix"},{"added":"2025-08-25","id":"CVE-2024-8068","name":"Citrix Session Recording Improper Privilege Management Vulnerability","product":"Session Recording","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8068","vendor":"Citrix"},{"added":"2025-08-21","id":"CVE-2025-43300","name":"Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","product":"iOS, iPadOS, and macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43300","vendor":"Apple"},{"added":"2025-08-18","id":"CVE-2025-54948","name":"Trend Micro Apex One OS Command Injection Vulnerability","product":"Apex One","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-54948","vendor":"Trend Micro"},{"added":"2025-08-13","id":"CVE-2025-8876","name":"N-able N-Central Command Injection Vulnerability","product":"N-Central","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-8876","vendor":"N-able"},{"added":"2025-08-13","id":"CVE-2025-8875","name":"N-able N-Central Insecure Deserialization Vulnerability","product":"N-Central","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-8875","vendor":"N-able"},{"added":"2025-08-12","id":"CVE-2025-8088","name":"RARLAB WinRAR Path Traversal Vulnerability","product":"WinRAR","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-8088","vendor":"RARLAB"},{"added":"2025-08-12","id":"CVE-2013-3893","name":"Microsoft Internet Explorer Resource Management Errors Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3893","vendor":"Microsoft"},{"added":"2025-08-12","id":"CVE-2007-0671","name":"Microsoft Office Excel Remote Code Execution Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2007-0671","vendor":"Microsoft"},{"added":"2025-08-05","id":"CVE-2022-40799","name":"D-Link DNR-322L Download of Code Without Integrity Check Vulnerability","product":"DNR-322L","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-40799","vendor":"D-Link"},{"added":"2025-08-05","id":"CVE-2020-25079","name":"D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability","product":"DCS-2530L and DCS-2670L Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-25079","vendor":"D-Link"},{"added":"2025-08-05","id":"CVE-2020-25078","name":"D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability","product":"DCS-2530L and DCS-2670L Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-25078","vendor":"D-Link"},{"added":"2025-07-28","id":"CVE-2025-20337","name":"Cisco Identity Services Engine Injection Vulnerability","product":"Identity Services Engine","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20337","vendor":"Cisco"},{"added":"2025-07-28","id":"CVE-2025-20281","name":"Cisco Identity Services Engine Injection Vulnerability","product":"Identity Services Engine","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20281","vendor":"Cisco"},{"added":"2025-07-28","id":"CVE-2023-2533","name":"PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability","product":"NG/MF","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-2533","vendor":"PaperCut"},{"added":"2025-07-22","id":"CVE-2025-6558","name":"Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","product":"Chromium","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-6558","vendor":"Google"},{"added":"2025-07-22","id":"CVE-2025-54309","name":" CrushFTP Unprotected Alternate Channel Vulnerability","product":"CrushFTP","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-54309","vendor":"CrushFTP"},{"added":"2025-07-22","id":"CVE-2025-49706","name":"Microsoft SharePoint Improper Authentication Vulnerability","product":"SharePoint","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-49706","vendor":"Microsoft"},{"added":"2025-07-22","id":"CVE-2025-49704","name":"Microsoft SharePoint Code Injection Vulnerability","product":"SharePoint","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-49704","vendor":"Microsoft"},{"added":"2025-07-22","id":"CVE-2025-2776","name":"SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability","product":"SysAid On-Prem","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2776","vendor":"SysAid"},{"added":"2025-07-22","id":"CVE-2025-2775","name":"SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability","product":"SysAid On-Prem","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2775","vendor":"SysAid"},{"added":"2025-07-20","id":"CVE-2025-53770","name":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","product":"SharePoint","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53770","vendor":"Microsoft"},{"added":"2025-07-18","id":"CVE-2025-25257","name":"Fortinet FortiWeb SQL Injection Vulnerability","product":"FortiWeb","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-25257","vendor":"Fortinet"},{"added":"2025-07-14","id":"CVE-2025-47812","name":"Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability","product":"Wing FTP Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-47812","vendor":"Wing FTP Server"},{"added":"2025-07-10","id":"CVE-2025-5777","name":"Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability","product":"NetScaler ADC and Gateway","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5777","vendor":"Citrix"},{"added":"2025-07-07","id":"CVE-2019-9621","name":"Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-9621","vendor":"Synacor"},{"added":"2025-07-07","id":"CVE-2019-5418","name":"Rails Ruby on Rails Path Traversal Vulnerability","product":"Ruby on Rails","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-5418","vendor":"Rails"},{"added":"2025-07-07","id":"CVE-2016-10033","name":"PHPMailer Command Injection Vulnerability","product":"PHPMailer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-10033","vendor":"PHP"},{"added":"2025-07-07","id":"CVE-2014-3931","name":"Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability","product":"Multi-Router Looking Glass (MRLG)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-3931","vendor":"Looking Glass"},{"added":"2025-07-02","id":"CVE-2025-6554","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-6554","vendor":"Google"},{"added":"2025-07-01","id":"CVE-2025-48928","name":"TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability","product":"TM SGNL","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48928","vendor":"TeleMessage"},{"added":"2025-07-01","id":"CVE-2025-48927","name":"TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability","product":"TM SGNL","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48927","vendor":"TeleMessage"},{"added":"2025-06-30","id":"CVE-2025-6543","name":"Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability","product":"NetScaler ADC and Gateway","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-6543","vendor":"Citrix"},{"added":"2025-06-25","id":"CVE-2024-54085","name":"AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability","product":"MegaRAC SPx","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-54085","vendor":"AMI"},{"added":"2025-06-25","id":"CVE-2024-0769","name":" D-Link DIR-859 Router Path Traversal Vulnerability","product":"DIR-859 Router","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-0769","vendor":"D-Link"},{"added":"2025-06-25","id":"CVE-2019-6693","name":"Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability","product":"FortiOS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-6693","vendor":"Fortinet"},{"added":"2025-06-17","id":"CVE-2023-0386","name":"Linux Kernel Improper Ownership Management Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-0386","vendor":"Linux"},{"added":"2025-06-16","id":"CVE-2025-43200","name":"Apple Multiple Products Unspecified Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43200","vendor":"Apple"},{"added":"2025-06-16","id":"CVE-2023-33538","name":"TP-Link Multiple Routers Command Injection Vulnerability","product":"Multiple Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33538","vendor":"TP-Link"},{"added":"2025-06-10","id":"CVE-2025-33053","name":" Microsoft Windows External Control of File Name or Path Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-33053","vendor":"Microsoft"},{"added":"2025-06-10","id":"CVE-2025-24016","name":"Wazuh Server Deserialization of Untrusted Data Vulnerability","product":"Wazuh Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24016","vendor":"Wazuh"},{"added":"2025-06-09","id":"CVE-2025-32433","name":"Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability","product":"Erlang/OTP","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32433","vendor":"Erlang"},{"added":"2025-06-09","id":"CVE-2024-42009","name":"RoundCube Webmail Cross-Site Scripting Vulnerability","product":"Webmail","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-42009","vendor":"Roundcube"},{"added":"2025-06-05","id":"CVE-2025-5419","name":"Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5419","vendor":"Google"},{"added":"2025-06-03","id":"CVE-2025-27038","name":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","product":"Multiple Chipsets","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27038","vendor":"Qualcomm"},{"added":"2025-06-03","id":"CVE-2025-21480","name":"Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability","product":"Multiple Chipsets","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21480","vendor":"Qualcomm"},{"added":"2025-06-03","id":"CVE-2025-21479","name":"Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability","product":"Multiple Chipsets","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21479","vendor":"Qualcomm"},{"added":"2025-06-02","id":"CVE-2025-3935","name":"ConnectWise ScreenConnect Improper Authentication Vulnerability","product":"ScreenConnect","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3935","vendor":"ConnectWise"},{"added":"2025-06-02","id":"CVE-2025-35939","name":"Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability","product":"Craft CMS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-35939","vendor":"Craft CMS"},{"added":"2025-06-02","id":"CVE-2024-56145","name":"Craft CMS Code Injection Vulnerability","product":"Craft CMS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-56145","vendor":"Craft CMS"},{"added":"2025-06-02","id":"CVE-2023-39780","name":"ASUS RT-AX55 Routers OS Command Injection Vulnerability","product":"RT-AX55 Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-39780","vendor":"ASUS"},{"added":"2025-06-02","id":"CVE-2021-32030","name":"ASUS Routers Improper Authentication Vulnerability","product":"Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-32030","vendor":"ASUS"},{"added":"2025-05-22","id":"CVE-2025-4632","name":"Samsung MagicINFO 9 Server Path Traversal Vulnerability","product":"MagicINFO 9 Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4632","vendor":"Samsung"},{"added":"2025-05-19","id":"CVE-2025-4428","name":"Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","product":"Endpoint Manager Mobile (EPMM)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4428","vendor":"Ivanti"},{"added":"2025-05-19","id":"CVE-2025-4427","name":"Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability","product":"Endpoint Manager Mobile (EPMM)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4427","vendor":"Ivanti"},{"added":"2025-05-19","id":"CVE-2025-27920","name":"Srimax Output Messenger Directory Traversal Vulnerability","product":"Output Messenger","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27920","vendor":"Srimax"},{"added":"2025-05-19","id":"CVE-2024-27443","name":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27443","vendor":"Synacor"},{"added":"2025-05-19","id":"CVE-2024-11182","name":"MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability","product":"Email Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11182","vendor":"MDaemon"},{"added":"2025-05-19","id":"CVE-2023-38950","name":"ZKTeco BioTime Path Traversal Vulnerability","product":"BioTime","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38950","vendor":"ZKTeco"},{"added":"2025-05-15","id":"CVE-2025-42999","name":"SAP NetWeaver Deserialization Vulnerability","product":"NetWeaver","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-42999","vendor":"SAP"},{"added":"2025-05-15","id":"CVE-2024-12987","name":"DrayTek Vigor Routers OS Command Injection Vulnerability","product":"Vigor Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-12987","vendor":"DrayTek"},{"added":"2025-05-14","id":"CVE-2025-32756","name":"Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32756","vendor":"Fortinet"},{"added":"2025-05-13","id":"CVE-2025-32709","name":"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32709","vendor":"Microsoft"},{"added":"2025-05-13","id":"CVE-2025-32706","name":"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32706","vendor":"Microsoft"},{"added":"2025-05-13","id":"CVE-2025-32701","name":"Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32701","vendor":"Microsoft"},{"added":"2025-05-13","id":"CVE-2025-30400","name":"Microsoft Windows DWM Core Library Use-After-Free Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-30400","vendor":"Microsoft"},{"added":"2025-05-13","id":"CVE-2025-30397","name":"Microsoft Windows Scripting Engine Type Confusion Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-30397","vendor":"Microsoft"},{"added":"2025-05-12","id":"CVE-2025-47729","name":"TeleMessage TM SGNL Hidden Functionality Vulnerability","product":"TM SGNL","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-47729","vendor":"TeleMessage"},{"added":"2025-05-07","id":"CVE-2024-6047","name":"GeoVision Devices OS Command Injection Vulnerability","product":"Multiple Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-6047","vendor":"GeoVision"},{"added":"2025-05-07","id":"CVE-2024-11120","name":"GeoVision Devices OS Command Injection Vulnerability","product":"Multiple Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11120","vendor":"GeoVision"},{"added":"2025-05-06","id":"CVE-2025-27363","name":"FreeType Out-of-Bounds Write Vulnerability","product":"FreeType","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27363","vendor":"FreeType"},{"added":"2025-05-05","id":"CVE-2025-3248","name":"Langflow Missing Authentication Vulnerability","product":"Langflow","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3248","vendor":"Langflow"},{"added":"2025-05-02","id":"CVE-2025-34028","name":"Commvault Command Center Path Traversal Vulnerability","product":"Command Center","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-34028","vendor":"Commvault"},{"added":"2025-05-02","id":"CVE-2024-58136","name":"Yiiframework Yii Improper Protection of Alternate Path Vulnerability","product":"Yii","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-58136","vendor":"Yiiframework"},{"added":"2025-05-01","id":"CVE-2024-38475","name":"Apache HTTP Server Improper Escaping of Output Vulnerability","product":"HTTP Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38475","vendor":"Apache"},{"added":"2025-05-01","id":"CVE-2023-44221","name":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","product":"SMA100 Appliances","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-44221","vendor":"SonicWall"},{"added":"2025-04-29","id":"CVE-2025-31324","name":"SAP NetWeaver Unrestricted File Upload Vulnerability","product":"NetWeaver","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-31324","vendor":"SAP"},{"added":"2025-04-28","id":"CVE-2025-42599","name":"Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability","product":"Active! Mail","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-42599","vendor":"Qualitia"},{"added":"2025-04-28","id":"CVE-2025-3928","name":"Commvault Web Server Unspecified Vulnerability","product":"Web Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3928","vendor":"Commvault"},{"added":"2025-04-28","id":"CVE-2025-1976","name":"Broadcom Brocade Fabric OS Code Injection Vulnerability","product":"Brocade Fabric OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-1976","vendor":"Broadcom"},{"added":"2025-04-17","id":"CVE-2025-31201","name":"Apple Multiple Products Arbitrary Read and Write Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-31201","vendor":"Apple"},{"added":"2025-04-17","id":"CVE-2025-31200","name":"Apple Multiple Products Memory Corruption Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-31200","vendor":"Apple"},{"added":"2025-04-17","id":"CVE-2025-24054","name":"Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24054","vendor":"Microsoft"},{"added":"2025-04-16","id":"CVE-2021-20035","name":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","product":"SMA100 Appliances","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-20035","vendor":"SonicWall"},{"added":"2025-04-09","id":"CVE-2024-53197","name":"Linux Kernel Out-of-Bounds Access Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-53197","vendor":"Linux"},{"added":"2025-04-09","id":"CVE-2024-53150","name":"Linux Kernel Out-of-Bounds Read Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-53150","vendor":"Linux"},{"added":"2025-04-08","id":"CVE-2025-30406","name":"Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability","product":"CentreStack","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-30406","vendor":"Gladinet"},{"added":"2025-04-08","id":"CVE-2025-29824","name":"Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-29824","vendor":"Microsoft"},{"added":"2025-04-07","id":"CVE-2025-31161","name":"CrushFTP Authentication Bypass Vulnerability","product":"CrushFTP","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-31161","vendor":"CrushFTP"},{"added":"2025-04-04","id":"CVE-2025-22457","name":"Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","product":"Connect Secure, Policy Secure, and ZTA Gateways","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-22457","vendor":"Ivanti"},{"added":"2025-04-01","id":"CVE-2025-24813","name":"Apache Tomcat Path Equivalence Vulnerability","product":"Tomcat","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24813","vendor":"Apache"},{"added":"2025-03-31","id":"CVE-2024-20439","name":"Cisco Smart Licensing Utility Static Credential Vulnerability","product":"Smart Licensing Utility","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20439","vendor":"Cisco"},{"added":"2025-03-27","id":"CVE-2025-2783","name":"Google Chromium Mojo Sandbox Escape Vulnerability","product":"Chromium Mojo","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2783","vendor":"Google"},{"added":"2025-03-26","id":"CVE-2019-9875","name":"Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability","product":"CMS and Experience Platform (XP)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-9875","vendor":"Sitecore"},{"added":"2025-03-26","id":"CVE-2019-9874","name":"Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability","product":"CMS and Experience Platform (XP)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-9874","vendor":"Sitecore"},{"added":"2025-03-24","id":"CVE-2025-30154","name":"reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability","product":"action-setup GitHub Action","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-30154","vendor":"reviewdog"},{"added":"2025-03-19","id":"CVE-2025-1316","name":"Edimax IC-7100 IP Camera OS Command Injection Vulnerability","product":"IC-7100 IP Camera","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-1316","vendor":"Edimax"},{"added":"2025-03-19","id":"CVE-2024-48248","name":"NAKIVO Backup and Replication Absolute Path Traversal Vulnerability","product":"Backup and Replication","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-48248","vendor":"NAKIVO"},{"added":"2025-03-19","id":"CVE-2017-12637","name":"SAP NetWeaver Directory Traversal Vulnerability","product":"NetWeaver","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12637","vendor":"SAP"},{"added":"2025-03-18","id":"CVE-2025-30066","name":"tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability","product":"changed-files GitHub Action","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-30066","vendor":"tj-actions"},{"added":"2025-03-18","id":"CVE-2025-24472","name":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","product":"FortiOS and FortiProxy","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24472","vendor":"Fortinet"},{"added":"2025-03-13","id":"CVE-2025-24201","name":"Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24201","vendor":"Apple"},{"added":"2025-03-13","id":"CVE-2025-21590","name":"Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability","product":"Junos OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21590","vendor":"Juniper"},{"added":"2025-03-11","id":"CVE-2025-26633","name":"Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-26633","vendor":"Microsoft"},{"added":"2025-03-11","id":"CVE-2025-24993","name":"Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24993","vendor":"Microsoft"},{"added":"2025-03-11","id":"CVE-2025-24991","name":"Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24991","vendor":"Microsoft"},{"added":"2025-03-11","id":"CVE-2025-24985","name":"Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24985","vendor":"Microsoft"},{"added":"2025-03-11","id":"CVE-2025-24984","name":"Microsoft Windows NTFS Information Disclosure Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24984","vendor":"Microsoft"},{"added":"2025-03-11","id":"CVE-2025-24983","name":"Microsoft Windows Win32k Use-After-Free Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24983","vendor":"Microsoft"},{"added":"2025-03-10","id":"CVE-2025-25181","name":" Advantive VeraCore SQL Injection Vulnerability","product":"VeraCore","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-25181","vendor":"Advantive"},{"added":"2025-03-10","id":"CVE-2024-57968","name":"Advantive VeraCore Unrestricted File Upload Vulnerability","product":"VeraCore","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57968","vendor":"Advantive"},{"added":"2025-03-10","id":"CVE-2024-13161","name":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","product":"Endpoint Manager (EPM)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-13161","vendor":"Ivanti"},{"added":"2025-03-10","id":"CVE-2024-13160","name":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","product":"Endpoint Manager (EPM)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-13160","vendor":"Ivanti"},{"added":"2025-03-10","id":"CVE-2024-13159","name":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","product":"Endpoint Manager (EPM)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-13159","vendor":"Ivanti"},{"added":"2025-03-04","id":"CVE-2025-22226","name":"VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability","product":"ESXi, Workstation, and Fusion","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-22226","vendor":"VMware"},{"added":"2025-03-04","id":"CVE-2025-22225","name":"VMware ESXi Arbitrary Write Vulnerability","product":"ESXi","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-22225","vendor":"VMware"},{"added":"2025-03-04","id":"CVE-2025-22224","name":"VMware ESXi and Workstation TOCTOU Race Condition Vulnerability","product":"ESXi and Workstation","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-22224","vendor":"VMware"},{"added":"2025-03-04","id":"CVE-2024-50302","name":"Linux Kernel Use of Uninitialized Resource Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-50302","vendor":"Linux"},{"added":"2025-03-03","id":"CVE-2024-4885","name":"Progress WhatsUp Gold Path Traversal Vulnerability","product":"WhatsUp Gold","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4885","vendor":"Progress"},{"added":"2025-03-03","id":"CVE-2023-20118","name":"Cisco Small Business RV Series Routers Command Injection Vulnerability","product":"Small Business RV Series Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20118","vendor":"Cisco"},{"added":"2025-03-03","id":"CVE-2022-43939","name":"Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability","product":"Pentaho Business Analytics (BA) Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-43939","vendor":"Hitachi Vantara"},{"added":"2025-03-03","id":"CVE-2022-43769","name":"Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability","product":"Pentaho Business Analytics (BA) Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-43769","vendor":"Hitachi Vantara"},{"added":"2025-03-03","id":"CVE-2018-8639","name":"Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8639","vendor":"Microsoft"},{"added":"2025-02-25","id":"CVE-2024-49035","name":"Microsoft Partner Center Improper Access Control Vulnerability","product":"Partner Center","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-49035","vendor":"Microsoft"},{"added":"2025-02-25","id":"CVE-2023-34192","name":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-34192","vendor":"Synacor"},{"added":"2025-02-24","id":"CVE-2024-20953","name":"Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability","product":"Agile Product Lifecycle Management (PLM)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20953","vendor":"Oracle"},{"added":"2025-02-24","id":"CVE-2017-3066","name":"Adobe ColdFusion Deserialization Vulnerability","product":"ColdFusion","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-3066","vendor":"Adobe"},{"added":"2025-02-21","id":"CVE-2025-24989","name":"Microsoft Power Pages Improper Access Control Vulnerability","product":"Power Pages","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24989","vendor":"Microsoft"},{"added":"2025-02-20","id":"CVE-2025-23209","name":"Craft CMS Code Injection Vulnerability","product":"Craft CMS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-23209","vendor":"Craft CMS"},{"added":"2025-02-20","id":"CVE-2025-0111","name":"Palo Alto Networks PAN-OS File Read Vulnerability","product":"PAN-OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0111","vendor":"Palo Alto Networks"},{"added":"2025-02-18","id":"CVE-2025-0108","name":"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","product":"PAN-OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0108","vendor":"Palo Alto Networks"},{"added":"2025-02-18","id":"CVE-2024-53704","name":"SonicWall SonicOS SSLVPN Improper Authentication Vulnerability","product":"SonicOS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-53704","vendor":"SonicWall"},{"added":"2025-02-13","id":"CVE-2024-57727","name":"SimpleHelp Path Traversal Vulnerability","product":"SimpleHelp","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57727","vendor":"SimpleHelp "},{"added":"2025-02-12","id":"CVE-2025-24200","name":"Apple iOS and iPadOS Incorrect Authorization Vulnerability","product":"iOS and iPadOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24200","vendor":"Apple"},{"added":"2025-02-12","id":"CVE-2024-41710","name":"Mitel SIP Phones Argument Injection Vulnerability","product":"SIP Phones","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-41710","vendor":"Mitel"},{"added":"2025-02-11","id":"CVE-2025-21418","name":"Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21418","vendor":"Microsoft"},{"added":"2025-02-11","id":"CVE-2025-21391","name":"Microsoft Windows Storage Link Following Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21391","vendor":"Microsoft"},{"added":"2025-02-11","id":"CVE-2024-40891","name":"Zyxel DSL CPE OS Command Injection Vulnerability","product":"DSL CPE Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40891","vendor":"Zyxel"},{"added":"2025-02-11","id":"CVE-2024-40890","name":"Zyxel DSL CPE OS Command Injection Vulnerability","product":"DSL CPE Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40890","vendor":"Zyxel"},{"added":"2025-02-07","id":"CVE-2025-0994","name":"Trimble Cityworks Deserialization Vulnerability","product":"Cityworks","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0994","vendor":"Trimble"},{"added":"2025-02-06","id":"CVE-2025-0411","name":"7-Zip Mark of the Web Bypass Vulnerability","product":"7-Zip","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0411","vendor":"7-Zip"},{"added":"2025-02-06","id":"CVE-2024-21413","name":"Microsoft Outlook Improper Input Validation Vulnerability","product":"Office Outlook","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21413","vendor":"Microsoft"},{"added":"2025-02-06","id":"CVE-2022-23748","name":"Dante Discovery Process Control Vulnerability","product":"Dante Discovery","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-23748","vendor":"Audinate"},{"added":"2025-02-06","id":"CVE-2020-29574","name":"CyberoamOS (CROS) SQL Injection Vulnerability","product":"CyberoamOS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-29574","vendor":"Sophos"},{"added":"2025-02-06","id":"CVE-2020-15069","name":"Sophos XG Firewall Buffer Overflow Vulnerability","product":"XG Firewall","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-15069","vendor":"Sophos"},{"added":"2025-02-05","id":"CVE-2024-53104","name":"Linux Kernel Out-of-Bounds Write Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-53104","vendor":"Linux"},{"added":"2025-02-04","id":"CVE-2024-45195","name":"Apache OFBiz Forced Browsing Vulnerability","product":"OFBiz","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45195","vendor":"Apache"},{"added":"2025-02-04","id":"CVE-2024-29059","name":"Microsoft .NET Framework Information Disclosure Vulnerability","product":".NET Framework","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29059","vendor":"Microsoft"},{"added":"2025-02-04","id":"CVE-2018-9276","name":"Paessler PRTG Network Monitor OS Command Injection Vulnerability","product":"PRTG Network Monitor","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-9276","vendor":"Paessler"},{"added":"2025-02-04","id":"CVE-2018-19410","name":"Paessler PRTG Network Monitor Local File Inclusion Vulnerability","product":"PRTG Network Monitor","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-19410","vendor":"Paessler"},{"added":"2025-01-29","id":"CVE-2025-24085","name":"Apple Multiple Products Use-After-Free Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24085","vendor":"Apple"},{"added":"2025-01-24","id":"CVE-2025-23006","name":"SonicWall SMA1000 Appliances Deserialization Vulnerability","product":"SMA1000 Appliances","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-23006","vendor":"SonicWall"},{"added":"2025-01-23","id":"CVE-2020-11023","name":"JQuery Cross-Site Scripting (XSS) Vulnerability","product":"JQuery","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-11023","vendor":"JQuery"},{"added":"2025-01-16","id":"CVE-2024-50603","name":"Aviatrix Controllers OS Command Injection Vulnerability","product":"Controllers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-50603","vendor":"Aviatrix"},{"added":"2025-01-14","id":"CVE-2025-21335","name":"Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21335","vendor":"Microsoft"},{"added":"2025-01-14","id":"CVE-2025-21334","name":"Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21334","vendor":"Microsoft"},{"added":"2025-01-14","id":"CVE-2025-21333","name":"Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21333","vendor":"Microsoft"},{"added":"2025-01-14","id":"CVE-2024-55591","name":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","product":"FortiOS and FortiProxy","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-55591","vendor":"Fortinet"},{"added":"2025-01-13","id":"CVE-2024-12686","name":"BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability","product":"Privileged Remote Access (PRA) and Remote Support (RS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-12686","vendor":"BeyondTrust"},{"added":"2025-01-13","id":"CVE-2023-48365","name":"Qlik Sense HTTP Tunneling Vulnerability","product":"Sense","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-48365","vendor":"Qlik"},{"added":"2025-01-08","id":"CVE-2025-0282","name":"Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","product":"Connect Secure, Policy Secure, and ZTA Gateways","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0282","vendor":"Ivanti"},{"added":"2025-01-07","id":"CVE-2024-55550","name":"Mitel MiCollab Path Traversal Vulnerability","product":"MiCollab","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-55550","vendor":"Mitel"},{"added":"2025-01-07","id":"CVE-2024-41713","name":"Mitel MiCollab Path Traversal Vulnerability","product":"MiCollab","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-41713","vendor":"Mitel"},{"added":"2025-01-07","id":"CVE-2020-2883","name":"Oracle WebLogic Server Unspecified Vulnerability","product":"WebLogic Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2883","vendor":"Oracle"},{"added":"2024-12-30","id":"CVE-2024-3393","name":"Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability","product":"PAN-OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3393","vendor":"Palo Alto Networks"},{"added":"2024-12-23","id":"CVE-2021-44207","name":"Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability ","product":"USAHERDS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44207","vendor":"Acclaim Systems"},{"added":"2024-12-19","id":"CVE-2024-12356","name":"BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability ","product":"Privileged Remote Access (PRA) and Remote Support (RS) ","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-12356","vendor":"BeyondTrust"},{"added":"2024-12-18","id":"CVE-2022-23227","name":"NUUO NVRmini2 Devices Missing Authentication Vulnerability ","product":"NVRmini2 Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-23227","vendor":"NUUO"},{"added":"2024-12-18","id":"CVE-2021-40407","name":"Reolink RLC-410W IP Camera OS Command Injection Vulnerability ","product":"RLC-410W IP Camera","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40407","vendor":"Reolink"},{"added":"2024-12-18","id":"CVE-2019-11001","name":"Reolink Multiple IP Cameras OS Command Injection Vulnerability","product":"Multiple IP Cameras","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11001","vendor":"Reolink"},{"added":"2024-12-18","id":"CVE-2018-14933","name":"NUUO NVRmini Devices OS Command Injection Vulnerability ","product":"NVRmini Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14933","vendor":"NUUO"},{"added":"2024-12-17","id":"CVE-2024-55956","name":"Cleo Multiple Products Unauthenticated File Upload Vulnerability","product":"Multiple Products","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-55956","vendor":"Cleo"},{"added":"2024-12-16","id":"CVE-2024-35250","name":"Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability ","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-35250","vendor":"Microsoft"},{"added":"2024-12-16","id":"CVE-2024-20767","name":"Adobe ColdFusion Improper Access Control Vulnerability","product":"ColdFusion","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20767","vendor":"Adobe"},{"added":"2024-12-13","id":"CVE-2024-50623","name":"Cleo Multiple Products Unrestricted File Upload Vulnerability","product":"Multiple Products","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-50623","vendor":"Cleo"},{"added":"2024-12-10","id":"CVE-2024-49138","name":"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-49138","vendor":"Microsoft"},{"added":"2024-12-04","id":"CVE-2024-51378","name":"CyberPanel Incorrect Default Permissions Vulnerability","product":"CyberPanel","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-51378","vendor":"CyberPersons"},{"added":"2024-12-03","id":"CVE-2024-11680","name":"ProjectSend Improper Authentication Vulnerability","product":"ProjectSend","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11680","vendor":"ProjectSend"},{"added":"2024-12-03","id":"CVE-2024-11667","name":"Zyxel Multiple Firewalls Path Traversal Vulnerability","product":"Multiple Firewalls","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11667","vendor":"Zyxel"},{"added":"2024-12-03","id":"CVE-2023-45727","name":"North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability","product":"Proself","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45727","vendor":"North Grid"},{"added":"2024-11-25","id":"CVE-2023-28461","name":"Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability","product":"AG/vxAG ArrayOS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28461","vendor":"Array Networks "},{"added":"2024-11-21","id":"CVE-2024-44309","name":"Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-44309","vendor":"Apple"},{"added":"2024-11-21","id":"CVE-2024-44308","name":"Apple Multiple Products Code Execution Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-44308","vendor":"Apple"},{"added":"2024-11-21","id":"CVE-2024-21287","name":"Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability","product":"Agile Product Lifecycle Management (PLM)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21287","vendor":"Oracle"},{"added":"2024-11-20","id":"CVE-2024-38813","name":"VMware vCenter Server Privilege Escalation Vulnerability","product":"vCenter Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38813","vendor":"VMware"},{"added":"2024-11-20","id":"CVE-2024-38812","name":"VMware vCenter Server Heap-Based Buffer Overflow Vulnerability","product":"vCenter Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38812","vendor":"VMware"},{"added":"2024-11-18","id":"CVE-2024-9474","name":"Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability","product":"PAN-OS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9474","vendor":"Palo Alto Networks"},{"added":"2024-11-18","id":"CVE-2024-1212","name":"Progress Kemp LoadMaster OS Command Injection Vulnerability","product":"Kemp LoadMaster","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-1212","vendor":"Progress"},{"added":"2024-11-18","id":"CVE-2024-0012","name":"Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability","product":"PAN-OS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-0012","vendor":"Palo Alto Networks"},{"added":"2024-11-14","id":"CVE-2024-9465","name":"Palo Alto Networks Expedition SQL Injection Vulnerability","product":"Expedition","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9465","vendor":"Palo Alto Networks"},{"added":"2024-11-14","id":"CVE-2024-9463","name":"Palo Alto Networks Expedition OS Command Injection Vulnerability","product":"Expedition","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9463","vendor":"Palo Alto Networks"},{"added":"2024-11-12","id":"CVE-2024-49039","name":"Microsoft Windows Task Scheduler Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-49039","vendor":"Microsoft"},{"added":"2024-11-12","id":"CVE-2024-43451","name":"Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43451","vendor":"Microsoft"},{"added":"2024-11-12","id":"CVE-2021-41277","name":"Metabase GeoJSON API Local File Inclusion Vulnerability","product":"Metabase","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-41277","vendor":"Metabase"},{"added":"2024-11-12","id":"CVE-2021-26086","name":"Atlassian Jira Server and Data Center Path Traversal Vulnerability","product":"Jira Server and Data Center","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26086","vendor":"Atlassian"},{"added":"2024-11-12","id":"CVE-2014-2120","name":"Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","product":"Adaptive Security Appliance (ASA)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-2120","vendor":"Cisco"},{"added":"2024-11-07","id":"CVE-2024-5910","name":"Palo Alto Networks Expedition Missing Authentication Vulnerability","product":"Expedition","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5910","vendor":"Palo Alto Networks"},{"added":"2024-11-07","id":"CVE-2024-51567","name":"CyberPanel Incorrect Default Permissions Vulnerability","product":"CyberPanel","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-51567","vendor":"CyberPersons"},{"added":"2024-11-07","id":"CVE-2024-43093","name":"Android Framework Privilege Escalation Vulnerability","product":"Framework","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43093","vendor":"Android"},{"added":"2024-11-07","id":"CVE-2019-16278","name":"Nostromo nhttpd Directory Traversal Vulnerability","product":"nhttpd","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-16278","vendor":"Nostromo"},{"added":"2024-11-04","id":"CVE-2024-8957","name":"PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability","product":"PT30X-SDI/NDI Cameras","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957","vendor":"PTZOptics"},{"added":"2024-11-04","id":"CVE-2024-8956","name":"PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability","product":"PT30X-SDI/NDI Cameras","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956","vendor":"PTZOptics"},{"added":"2024-10-24","id":"CVE-2024-37383","name":"RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability","product":"Webmail","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383","vendor":"Roundcube"},{"added":"2024-10-24","id":"CVE-2024-20481","name":"Cisco ASA and FTD Denial-of-Service Vulnerability","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481","vendor":"Cisco"},{"added":"2024-10-23","id":"CVE-2024-47575","name":"Fortinet FortiManager Missing Authentication Vulnerability","product":"FortiManager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575","vendor":"Fortinet"},{"added":"2024-10-22","id":"CVE-2024-38094","name":"Microsoft SharePoint Deserialization Vulnerability","product":"SharePoint","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094","vendor":"Microsoft"},{"added":"2024-10-21","id":"CVE-2024-9537","name":"ScienceLogic SL1 Unspecified Vulnerability","product":"SL1","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537","vendor":"ScienceLogic"},{"added":"2024-10-17","id":"CVE-2024-40711","name":"Veeam Backup and Replication Deserialization Vulnerability","product":"Backup & Replication","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711","vendor":"Veeam"},{"added":"2024-10-15","id":"CVE-2024-9680","name":"Mozilla Firefox Use-After-Free Vulnerability","product":"Firefox","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680","vendor":"Mozilla"},{"added":"2024-10-15","id":"CVE-2024-30088","name":"Microsoft Windows Kernel TOCTOU Race Condition Vulnerability","product":"Windows ","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30088","vendor":"Microsoft"},{"added":"2024-10-15","id":"CVE-2024-28987","name":"SolarWinds Web Help Desk Hardcoded Credential Vulnerability","product":"Web Help Desk","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987","vendor":"SolarWinds"},{"added":"2024-10-09","id":"CVE-2024-9380","name":"Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability","product":"Cloud Services Appliance (CSA)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380","vendor":"Ivanti"},{"added":"2024-10-09","id":"CVE-2024-9379","name":"Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability","product":"Cloud Services Appliance (CSA)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379","vendor":"Ivanti"},{"added":"2024-10-09","id":"CVE-2024-23113","name":"Fortinet Multiple Products Format String Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113","vendor":"Fortinet"},{"added":"2024-10-08","id":"CVE-2024-43573","name":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43573","vendor":"Microsoft"},{"added":"2024-10-08","id":"CVE-2024-43572","name":"Microsoft Windows Management Console Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43572","vendor":"Microsoft"},{"added":"2024-10-08","id":"CVE-2024-43047","name":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","product":"Multiple Chipsets ","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047","vendor":"Qualcomm"},{"added":"2024-10-03","id":"CVE-2024-45519","name":"Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519","vendor":"Synacor"},{"added":"2024-10-02","id":"CVE-2024-29824","name":"Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability","product":"Endpoint Manager (EPM)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824","vendor":"Ivanti"},{"added":"2024-09-30","id":"CVE-2023-25280","name":"D-Link DIR-820 Router OS Command Injection Vulnerability","product":"DIR-820 Router","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-25280","vendor":"D-Link"},{"added":"2024-09-30","id":"CVE-2020-15415","name":"DrayTek Multiple Vigor Routers OS Command Injection Vulnerability","product":"Multiple Vigor Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-15415","vendor":"DrayTek"},{"added":"2024-09-30","id":"CVE-2019-0344","name":"SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability","product":"Commerce Cloud","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344","vendor":"SAP"},{"added":"2024-09-24","id":"CVE-2024-7593","name":"Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability","product":"Virtual Traffic Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-7593","vendor":"Ivanti"},{"added":"2024-09-19","id":"CVE-2024-8963","name":"Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability","product":"Cloud Services Appliance (CSA)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8963","vendor":"Ivanti"},{"added":"2024-09-18","id":"CVE-2024-27348","name":"Apache HugeGraph-Server Improper Access Control Vulnerability","product":"HugeGraph-Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27348","vendor":"Apache"},{"added":"2024-09-18","id":"CVE-2022-21445","name":"Oracle ADF Faces Deserialization of Untrusted Data Vulnerability","product":"ADF Faces","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21445","vendor":"Oracle"},{"added":"2024-09-18","id":"CVE-2020-14644","name":"Oracle WebLogic Server Remote Code Execution Vulnerability","product":"WebLogic Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-14644","vendor":"Oracle"},{"added":"2024-09-18","id":"CVE-2020-0618","name":"Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability","product":"SQL Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0618","vendor":"Microsoft"},{"added":"2024-09-17","id":"CVE-2014-0502","name":"Adobe Flash Player Double Free Vulnerablity","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0502","vendor":"Adobe"},{"added":"2024-09-17","id":"CVE-2014-0497","name":"Adobe Flash Player Integer Underflow Vulnerablity","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0497","vendor":"Adobe"},{"added":"2024-09-17","id":"CVE-2013-0648","name":"Adobe Flash Player Code Execution Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0648","vendor":"Adobe"},{"added":"2024-09-17","id":"CVE-2013-0643","name":"Adobe Flash Player Incorrect Default Permissions Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0643","vendor":"Adobe"},{"added":"2024-09-16","id":"CVE-2024-6670","name":"Progress WhatsUp Gold SQL Injection Vulnerability","product":"WhatsUp Gold","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-6670","vendor":"Progress"},{"added":"2024-09-16","id":"CVE-2024-43461","name":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43461","vendor":"Microsoft"},{"added":"2024-09-13","id":"CVE-2024-8190","name":"Ivanti Cloud Services Appliance OS Command Injection Vulnerability","product":"Cloud Services Appliance","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8190","vendor":"Ivanti"},{"added":"2024-09-10","id":"CVE-2024-38226","name":"Microsoft Publisher Protection Mechanism Failure Vulnerability","product":"Publisher","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38226","vendor":"Microsoft"},{"added":"2024-09-10","id":"CVE-2024-38217","name":"Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38217","vendor":"Microsoft"},{"added":"2024-09-10","id":"CVE-2024-38014","name":"Microsoft Windows Installer Improper Privilege Management Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38014","vendor":"Microsoft"},{"added":"2024-09-09","id":"CVE-2024-40766","name":"SonicWall SonicOS Improper Access Control Vulnerability","product":"SonicOS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40766","vendor":"SonicWall"},{"added":"2024-09-09","id":"CVE-2017-1000253","name":"Linux Kernel PIE Stack Buffer Corruption Vulnerability ","product":"Kernel","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-1000253","vendor":"Linux"},{"added":"2024-09-09","id":"CVE-2016-3714","name":"ImageMagick Improper Input Validation Vulnerability","product":"ImageMagick","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3714","vendor":"ImageMagick"},{"added":"2024-09-03","id":"CVE-2024-7262","name":"Kingsoft WPS Office Path Traversal Vulnerability","product":"WPS Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-7262","vendor":"Kingsoft"},{"added":"2024-09-03","id":"CVE-2021-20124","name":"Draytek VigorConnect Path Traversal Vulnerability ","product":"VigorConnect","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-20124","vendor":"DrayTek"},{"added":"2024-09-03","id":"CVE-2021-20123","name":"Draytek VigorConnect Path Traversal Vulnerability ","product":"VigorConnect","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-20123","vendor":"DrayTek"},{"added":"2024-08-28","id":"CVE-2024-7965","name":"Google Chromium V8 Inappropriate Implementation Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-7965","vendor":"Google"},{"added":"2024-08-27","id":"CVE-2024-38856","name":"Apache OFBiz Incorrect Authorization Vulnerability","product":"OFBiz","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38856","vendor":"Apache"},{"added":"2024-08-26","id":"CVE-2024-7971","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-7971","vendor":"Google"},{"added":"2024-08-23","id":"CVE-2024-39717","name":"Versa Director Dangerous File Type Upload Vulnerability","product":"Director","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39717","vendor":"Versa"},{"added":"2024-08-21","id":"CVE-2022-0185","name":"Linux Kernel Heap-Based Buffer Overflow Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0185","vendor":"Linux"},{"added":"2024-08-21","id":"CVE-2021-33045","name":"Dahua IP Camera Authentication Bypass Vulnerability","product":"IP Camera Firmware","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-33045","vendor":"Dahua"},{"added":"2024-08-21","id":"CVE-2021-33044","name":"Dahua IP Camera Authentication Bypass Vulnerability","product":"IP Camera Firmware","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-33044","vendor":"Dahua"},{"added":"2024-08-21","id":"CVE-2021-31196","name":"Microsoft Exchange Server Information Disclosure Vulnerability","product":"Exchange Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31196","vendor":"Microsoft"},{"added":"2024-08-19","id":"CVE-2024-23897","name":"Jenkins Command Line Interface (CLI) Path Traversal Vulnerability","product":"Jenkins Command Line Interface (CLI)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23897","vendor":"Jenkins"},{"added":"2024-08-15","id":"CVE-2024-28986","name":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","product":"Web Help Desk","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28986","vendor":"SolarWinds"},{"added":"2024-08-13","id":"CVE-2024-38213","name":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38213","vendor":"Microsoft"},{"added":"2024-08-13","id":"CVE-2024-38193","name":"Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38193","vendor":"Microsoft"},{"added":"2024-08-13","id":"CVE-2024-38189","name":"Microsoft Project Remote Code Execution Vulnerability ","product":"Project","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38189","vendor":"Microsoft"},{"added":"2024-08-13","id":"CVE-2024-38178","name":"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38178","vendor":"Microsoft"},{"added":"2024-08-13","id":"CVE-2024-38107","name":"Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38107","vendor":"Microsoft"},{"added":"2024-08-13","id":"CVE-2024-38106","name":"Microsoft Windows Kernel Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38106","vendor":"Microsoft"},{"added":"2024-08-07","id":"CVE-2024-36971","name":"Android Kernel Remote Code Execution Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36971","vendor":"Android"},{"added":"2024-08-07","id":"CVE-2024-32113","name":"Apache OFBiz Path Traversal Vulnerability","product":"OFBiz","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113","vendor":"Apache"},{"added":"2024-08-05","id":"CVE-2018-0824","name":"Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824","vendor":"Microsoft"},{"added":"2024-07-30","id":"CVE-2024-37085","name":"VMware ESXi Authentication Bypass Vulnerability","product":"ESXi","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085","vendor":"VMware"},{"added":"2024-07-29","id":"CVE-2024-5217","name":"ServiceNow Incomplete List of Disallowed Inputs Vulnerability","product":"Utah, Vancouver, and Washington DC Now Platform","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5217","vendor":"ServiceNow"},{"added":"2024-07-29","id":"CVE-2024-4879","name":"ServiceNow Improper Input Validation Vulnerability","product":"Utah, Vancouver, and Washington DC Now Platform","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879","vendor":"ServiceNow"},{"added":"2024-07-29","id":"CVE-2023-45249","name":"Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability","product":"Cyber Infrastructure (ACI)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249","vendor":"Acronis"},{"added":"2024-07-23","id":"CVE-2024-39891","name":"Twilio Authy Information Disclosure Vulnerability","product":"Authy","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891","vendor":"Twilio"},{"added":"2024-07-23","id":"CVE-2012-4792","name":"Microsoft Internet Explorer Use-After-Free Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792","vendor":"Microsoft"},{"added":"2024-07-17","id":"CVE-2024-34102","name":"Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability","product":"Commerce and Magento Open Source","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102","vendor":"Adobe"},{"added":"2024-07-17","id":"CVE-2024-28995","name":"SolarWinds Serv-U Path Traversal Vulnerability ","product":"Serv-U","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995","vendor":"SolarWinds"},{"added":"2024-07-17","id":"CVE-2022-22948","name":"VMware vCenter Server Incorrect Default File Permissions Vulnerability ","product":"vCenter Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948","vendor":"VMware"},{"added":"2024-07-15","id":"CVE-2024-36401","name":"OSGeo GeoServer GeoTools Eval Injection Vulnerability","product":"GeoServer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401","vendor":"OSGeo"},{"added":"2024-07-09","id":"CVE-2024-38112","name":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112","vendor":"Microsoft"},{"added":"2024-07-09","id":"CVE-2024-38080","name":"Microsoft Windows Hyper-V Privilege Escalation Vulnerability","product":"Windows ","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080","vendor":"Microsoft"},{"added":"2024-07-09","id":"CVE-2024-23692","name":"Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability","product":"HTTP File Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692","vendor":"Rejetto"},{"added":"2024-07-02","id":"CVE-2024-20399","name":"Cisco NX-OS Command Injection Vulnerability","product":"NX-OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20399","vendor":"Cisco"},{"added":"2024-06-26","id":"CVE-2022-2586","name":"Linux Kernel Use-After-Free Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2586","vendor":"Linux"},{"added":"2024-06-26","id":"CVE-2022-24816","name":"OSGeo GeoServer JAI-EXT Code Injection Vulnerability","product":"JAI-EXT","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24816","vendor":"OSGeo"},{"added":"2024-06-26","id":"CVE-2020-13965","name":"Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","product":"Webmail","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965","vendor":"Roundcube"},{"added":"2024-06-13","id":"CVE-2024-4358","name":"Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability","product":"Telerik Report Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4358","vendor":"Progress"},{"added":"2024-06-13","id":"CVE-2024-32896","name":"Android Pixel Privilege Escalation Vulnerability","product":"Pixel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32896","vendor":"Android"},{"added":"2024-06-13","id":"CVE-2024-26169","name":"Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-26169","vendor":"Microsoft"},{"added":"2024-06-12","id":"CVE-2024-4610","name":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","product":"Mali GPU Kernel Driver","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4610","vendor":"Arm"},{"added":"2024-06-12","id":"CVE-2024-4577","name":"PHP-CGI OS Command Injection Vulnerability","product":"PHP","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4577","vendor":"PHP Group"},{"added":"2024-06-03","id":"CVE-2017-3506","name":"Oracle WebLogic Server OS Command Injection Vulnerability","product":"WebLogic Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-3506","vendor":"Oracle"},{"added":"2024-05-30","id":"CVE-2024-24919","name":"Check Point Quantum Security Gateways Information Disclosure Vulnerability","product":"Quantum Security Gateways","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-24919","vendor":"Check Point"},{"added":"2024-05-30","id":"CVE-2024-1086","name":"Linux Kernel Use-After-Free Vulnerability","product":"Kernel","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-1086","vendor":"Linux"},{"added":"2024-05-29","id":"CVE-2024-4978","name":"Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability","product":"Viewer ","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4978","vendor":"Justice AV Solutions"},{"added":"2024-05-28","id":"CVE-2024-5274","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5274","vendor":"Google"},{"added":"2024-05-23","id":"CVE-2020-17519","name":"Apache Flink Improper Access Control Vulnerability","product":"Flink","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17519","vendor":"Apache"},{"added":"2024-05-20","id":"CVE-2024-4947","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4947","vendor":"Google"},{"added":"2024-05-20","id":"CVE-2023-43208","name":"NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability","product":"Mirth Connect","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-43208","vendor":"NextGen Healthcare"},{"added":"2024-05-16","id":"CVE-2024-4761","name":"Google Chromium V8 Out-of-Bounds Memory Write Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4761","vendor":"Google"},{"added":"2024-05-16","id":"CVE-2021-40655","name":"D-Link DIR-605 Router Information Disclosure Vulnerability","product":"DIR-605 Router","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40655","vendor":"D-Link"},{"added":"2024-05-16","id":"CVE-2014-100005","name":"D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability","product":"DIR-600 Router","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-100005","vendor":"D-Link"},{"added":"2024-05-14","id":"CVE-2024-30051","name":" Microsoft DWM Core Library Privilege Escalation Vulnerability","product":"DWM Core Library","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051","vendor":"Microsoft"},{"added":"2024-05-14","id":"CVE-2024-30040","name":"Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30040","vendor":"Microsoft"},{"added":"2024-05-13","id":"CVE-2024-4671","name":"Google Chromium Visuals Use-After-Free Vulnerability","product":"Chromium","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671","vendor":"Google"},{"added":"2024-05-01","id":"CVE-2023-7028","name":"GitLab Community and Enterprise Editions Improper Access Control Vulnerability","product":"GitLab CE/EE","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028","vendor":"GitLab"},{"added":"2024-04-30","id":"CVE-2024-29988","name":"Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability","product":"SmartScreen Prompt","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988","vendor":"Microsoft"},{"added":"2024-04-24","id":"CVE-2024-4040","name":"CrushFTP VFS Sandbox Escape Vulnerability","product":"CrushFTP","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040","vendor":"CrushFTP"},{"added":"2024-04-24","id":"CVE-2024-20359","name":"Cisco ASA and FTD Privilege Escalation Vulnerability","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20359","vendor":"Cisco"},{"added":"2024-04-24","id":"CVE-2024-20353","name":"Cisco ASA and FTD Denial of Service Vulnerability","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20353","vendor":"Cisco"},{"added":"2024-04-23","id":"CVE-2022-38028","name":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability ","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38028","vendor":"Microsoft"},{"added":"2024-04-12","id":"CVE-2024-3400","name":"Palo Alto Networks PAN-OS Command Injection Vulnerability","product":"PAN-OS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400","vendor":"Palo Alto Networks"},{"added":"2024-04-11","id":"CVE-2024-3273","name":"D-Link Multiple NAS Devices Command Injection Vulnerability","product":"Multiple NAS Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273","vendor":"D-Link"},{"added":"2024-04-11","id":"CVE-2024-3272","name":"D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability","product":"Multiple NAS Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272","vendor":"D-Link"},{"added":"2024-04-04","id":"CVE-2024-29748","name":"Android Pixel Privilege Escalation Vulnerability","product":"Pixel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748","vendor":"Android"},{"added":"2024-04-04","id":"CVE-2024-29745","name":"Android Pixel Information Disclosure Vulnerability","product":"Pixel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745","vendor":"Android"},{"added":"2024-03-26","id":"CVE-2023-24955","name":"Microsoft SharePoint Server Code Injection Vulnerability","product":"SharePoint Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955","vendor":"Microsoft"},{"added":"2024-03-25","id":"CVE-2023-48788","name":"Fortinet FortiClient EMS SQL Injection Vulnerability","product":"FortiClient EMS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-48788","vendor":"Fortinet"},{"added":"2024-03-25","id":"CVE-2021-44529","name":"Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability ","product":"Endpoint Manager Cloud Service Appliance (EPM CSA)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529","vendor":"Ivanti"},{"added":"2024-03-25","id":"CVE-2019-7256","name":"Nice Linear eMerge E3-Series OS Command Injection Vulnerability","product":"Linear eMerge E3-Series","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256","vendor":"Nice"},{"added":"2024-03-07","id":"CVE-2024-27198","name":"JetBrains TeamCity Authentication Bypass Vulnerability","product":"TeamCity","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27198","vendor":"JetBrains"},{"added":"2024-03-06","id":"CVE-2024-23296","name":"Apple Multiple Products Memory Corruption Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23296","vendor":"Apple"},{"added":"2024-03-06","id":"CVE-2024-23225","name":"Apple Multiple Products Memory Corruption Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23225","vendor":"Apple"},{"added":"2024-03-05","id":"CVE-2023-21237","name":"Android Pixel Information Disclosure Vulnerability ","product":"Pixel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21237","vendor":"Android"},{"added":"2024-03-05","id":"CVE-2021-36380","name":"Sunhillo SureLine OS Command Injection Vulnerablity","product":"SureLine","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-36380","vendor":"Sunhillo"},{"added":"2024-03-04","id":"CVE-2024-21338","name":"Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21338","vendor":"Microsoft"},{"added":"2024-02-29","id":"CVE-2023-29360","name":"Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability","product":"Streaming Service","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29360","vendor":"Microsoft"},{"added":"2024-02-22","id":"CVE-2024-1709","name":"ConnectWise ScreenConnect Authentication Bypass Vulnerability","product":"ScreenConnect","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-1709","vendor":"ConnectWise"},{"added":"2024-02-15","id":"CVE-2024-21410","name":"Microsoft Exchange Server Privilege Escalation Vulnerability","product":"Exchange Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21410","vendor":"Microsoft"},{"added":"2024-02-15","id":"CVE-2020-3259","name":"Cisco ASA and FTD Information Disclosure Vulnerability","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3259","vendor":"Cisco"},{"added":"2024-02-13","id":"CVE-2024-21412","name":"Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21412","vendor":"Microsoft"},{"added":"2024-02-13","id":"CVE-2024-21351","name":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21351","vendor":"Microsoft"},{"added":"2024-02-12","id":"CVE-2023-43770","name":"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","product":"Webmail","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-43770","vendor":"Roundcube"},{"added":"2024-02-09","id":"CVE-2024-21762","name":"Fortinet FortiOS Out-of-Bound Write Vulnerability","product":"FortiOS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21762","vendor":"Fortinet"},{"added":"2024-02-06","id":"CVE-2023-4762","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4762","vendor":"Google"},{"added":"2024-01-31","id":"CVE-2024-21893","name":"Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability","product":"Connect Secure, Policy Secure, and Neurons","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21893","vendor":"Ivanti"},{"added":"2024-01-31","id":"CVE-2022-48618","name":"Apple Multiple Products Memory Corruption Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-48618","vendor":"Apple"},{"added":"2024-01-24","id":"CVE-2023-22527","name":"Atlassian Confluence Data Center and Server Template Injection Vulnerability","product":"Confluence Data Center and Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-22527","vendor":"Atlassian"},{"added":"2024-01-23","id":"CVE-2024-23222","name":"Apple Multiple Products WebKit Type Confusion Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23222","vendor":"Apple"},{"added":"2024-01-22","id":"CVE-2023-34048","name":"VMware vCenter Server Out-of-Bounds Write Vulnerability","product":"vCenter Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-34048","vendor":"VMware"},{"added":"2024-01-18","id":"CVE-2023-35082","name":"Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability","product":"Endpoint Manager Mobile (EPMM) and MobileIron Core","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35082","vendor":"Ivanti"},{"added":"2024-01-17","id":"CVE-2024-0519","name":"Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-0519","vendor":"Google"},{"added":"2024-01-17","id":"CVE-2023-6549","name":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","product":"NetScaler ADC and NetScaler Gateway","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6549","vendor":"Citrix"},{"added":"2024-01-17","id":"CVE-2023-6548","name":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","product":"NetScaler ADC and NetScaler Gateway","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6548","vendor":"Citrix"},{"added":"2024-01-16","id":"CVE-2018-15133","name":"Laravel Deserialization of Untrusted Data Vulnerability","product":"Laravel Framework","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-15133","vendor":"Laravel"},{"added":"2024-01-10","id":"CVE-2024-21887","name":"Ivanti Connect Secure and Policy Secure Command Injection Vulnerability","product":"Connect Secure and Policy Secure","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21887","vendor":"Ivanti"},{"added":"2024-01-10","id":"CVE-2023-46805","name":"Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability","product":"Connect Secure and Policy Secure","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-46805","vendor":"Ivanti"},{"added":"2024-01-10","id":"CVE-2023-29357","name":"Microsoft SharePoint Server Privilege Escalation Vulnerability","product":"SharePoint Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29357","vendor":"Microsoft"},{"added":"2024-01-08","id":"CVE-2023-41990","name":"Apple Multiple Products Code Execution Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41990","vendor":"Apple"},{"added":"2024-01-08","id":"CVE-2023-38203","name":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","product":"ColdFusion","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203","vendor":"Adobe"},{"added":"2024-01-08","id":"CVE-2023-29300","name":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","product":"ColdFusion","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29300","vendor":"Adobe"},{"added":"2024-01-08","id":"CVE-2023-27524","name":"Apache Superset Insecure Default Initialization of Resource Vulnerability","product":"Superset","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27524","vendor":"Apache"},{"added":"2024-01-08","id":"CVE-2023-23752","name":"Joomla! Improper Access Control Vulnerability","product":"Joomla!","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-23752","vendor":"Joomla!"},{"added":"2024-01-08","id":"CVE-2016-20017","name":"D-Link DSL-2750B Devices Command Injection Vulnerability","product":"DSL-2750B Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-20017","vendor":"D-Link"},{"added":"2024-01-02","id":"CVE-2023-7101","name":"Spreadsheet::ParseExcel Remote Code Execution Vulnerability","product":"Spreadsheet::ParseExcel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101","vendor":"Spreadsheet::ParseExcel"},{"added":"2024-01-02","id":"CVE-2023-7024","name":"Google Chromium WebRTC Heap Buffer Overflow Vulnerability","product":"Chromium WebRTC","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024","vendor":"Google"},{"added":"2023-12-21","id":"CVE-2023-49897","name":"FXC AE1021, AE1021PE OS Command Injection Vulnerability","product":"AE1021, AE1021PE","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49897","vendor":"FXC"},{"added":"2023-12-21","id":"CVE-2023-47565","name":"QNAP VioStor NVR OS Command Injection Vulnerability","product":"VioStor NVR","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565","vendor":"QNAP"},{"added":"2023-12-11","id":"CVE-2023-6448","name":"Unitronics Vision PLC and HMI Insecure Default Password Vulnerability","product":"Vision PLC and HMI","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6448","vendor":"Unitronics"},{"added":"2023-12-07","id":"CVE-2023-41266","name":"Qlik Sense Path Traversal Vulnerability","product":"Sense","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266","vendor":"Qlik"},{"added":"2023-12-07","id":"CVE-2023-41265","name":"Qlik Sense HTTP Tunneling Vulnerability","product":"Sense","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265","vendor":"Qlik"},{"added":"2023-12-05","id":"CVE-2023-33107","name":"Qualcomm Multiple Chipsets Integer Overflow Vulnerability","product":"Multiple Chipsets","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107","vendor":"Qualcomm"},{"added":"2023-12-05","id":"CVE-2023-33106","name":"Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability","product":"Multiple Chipsets","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106","vendor":"Qualcomm"},{"added":"2023-12-05","id":"CVE-2023-33063","name":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","product":"Multiple Chipsets","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063","vendor":"Qualcomm"},{"added":"2023-12-05","id":"CVE-2022-22071","name":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","product":"Multiple Chipsets","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071","vendor":"Qualcomm"},{"added":"2023-12-04","id":"CVE-2023-42917","name":"Apple Multiple Products WebKit Memory Corruption Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917","vendor":"Apple"},{"added":"2023-12-04","id":"CVE-2023-42916","name":"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916","vendor":"Apple"},{"added":"2023-11-30","id":"CVE-2023-6345","name":"Google Skia Integer Overflow Vulnerability","product":"Chromium Skia","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345","vendor":"Google"},{"added":"2023-11-30","id":"CVE-2023-49103","name":"ownCloud graphapi Information Disclosure Vulnerability","product":"ownCloud graphapi","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103","vendor":"ownCloud"},{"added":"2023-11-21","id":"CVE-2023-4911","name":"GNU C Library Buffer Overflow Vulnerability","product":"GNU C Library","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4911","vendor":"GNU"},{"added":"2023-11-16","id":"CVE-2023-36584","name":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36584","vendor":"Microsoft"},{"added":"2023-11-16","id":"CVE-2023-1671","name":"Sophos Web Appliance Command Injection Vulnerability","product":"Web Appliance","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671","vendor":"Sophos"},{"added":"2023-11-16","id":"CVE-2020-2551","name":"Oracle Fusion Middleware Unspecified Vulnerability","product":"Fusion Middleware","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551","vendor":"Oracle"},{"added":"2023-11-14","id":"CVE-2023-36036","name":"Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36036","vendor":"Microsoft"},{"added":"2023-11-14","id":"CVE-2023-36033","name":"Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36033","vendor":"Microsoft"},{"added":"2023-11-14","id":"CVE-2023-36025","name":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36025","vendor":"Microsoft"},{"added":"2023-11-13","id":"CVE-2023-47246","name":"SysAid Server Path Traversal Vulnerability","product":"SysAid Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47246","vendor":"SysAid"},{"added":"2023-11-13","id":"CVE-2023-36851","name":"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","product":"Junos OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36851","vendor":"Juniper"},{"added":"2023-11-13","id":"CVE-2023-36847","name":"Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability","product":"Junos OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36847","vendor":"Juniper"},{"added":"2023-11-13","id":"CVE-2023-36846","name":"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","product":"Junos OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36846","vendor":"Juniper"},{"added":"2023-11-13","id":"CVE-2023-36845","name":"Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability","product":"Junos OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36845","vendor":"Juniper"},{"added":"2023-11-13","id":"CVE-2023-36844","name":"Juniper Junos OS EX Series PHP External Variable Modification Vulnerability","product":"Junos OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36844","vendor":"Juniper"},{"added":"2023-11-08","id":"CVE-2023-29552","name":"Service Location Protocol (SLP) Denial-of-Service Vulnerability","product":"Service Location Protocol (SLP)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29552","vendor":"IETF"},{"added":"2023-11-07","id":"CVE-2023-22518","name":"Atlassian Confluence Data Center and Server Improper Authorization Vulnerability","product":"Confluence Data Center and Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-22518","vendor":"Atlassian"},{"added":"2023-11-02","id":"CVE-2023-46604","name":"Apache ActiveMQ Deserialization of Untrusted Data Vulnerability","product":"ActiveMQ","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-46604","vendor":"Apache"},{"added":"2023-10-31","id":"CVE-2023-46748","name":"F5 BIG-IP Configuration Utility SQL Injection Vulnerability","product":"BIG-IP Configuration Utility","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-46748","vendor":"F5"},{"added":"2023-10-31","id":"CVE-2023-46747","name":"F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability","product":"BIG-IP Configuration Utility","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-46747","vendor":"F5"},{"added":"2023-10-26","id":"CVE-2023-5631","name":"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","product":"Webmail","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5631","vendor":"Roundcube"},{"added":"2023-10-23","id":"CVE-2023-20273","name":"Cisco IOS XE Web UI Command Injection Vulnerability","product":"Cisco IOS XE Web UI","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20273","vendor":"Cisco"},{"added":"2023-10-18","id":"CVE-2023-4966","name":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","product":"NetScaler ADC and NetScaler Gateway","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4966","vendor":"Citrix"},{"added":"2023-10-16","id":"CVE-2023-20198","name":"Cisco IOS XE Web UI Privilege Escalation Vulnerability","product":"IOS XE Web UI","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20198","vendor":"Cisco"},{"added":"2023-10-10","id":"CVE-2023-44487","name":"HTTP/2 Rapid Reset Attack Vulnerability","product":"HTTP/2","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-44487","vendor":"IETF"},{"added":"2023-10-10","id":"CVE-2023-41763","name":"Microsoft Skype for Business Privilege Escalation Vulnerability","product":"Skype for Business","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41763","vendor":"Microsoft"},{"added":"2023-10-10","id":"CVE-2023-36563","name":"Microsoft WordPad Information Disclosure Vulnerability","product":"WordPad","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36563","vendor":"Microsoft"},{"added":"2023-10-10","id":"CVE-2023-21608","name":"Adobe Acrobat and Reader Use-After-Free Vulnerability","product":"Acrobat and Reader","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21608","vendor":"Adobe"},{"added":"2023-10-10","id":"CVE-2023-20109","name":"Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability","product":"IOS and IOS XE","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20109","vendor":"Cisco"},{"added":"2023-10-05","id":"CVE-2023-42824","name":"Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability","product":"iOS and iPadOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42824","vendor":"Apple"},{"added":"2023-10-05","id":"CVE-2023-40044","name":"Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability","product":"WS_FTP Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044","vendor":"Progress"},{"added":"2023-10-05","id":"CVE-2023-22515","name":"Atlassian Confluence Data Center and Server Broken Access Control Vulnerability","product":"Confluence Data Center and Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-22515","vendor":"Atlassian"},{"added":"2023-10-04","id":"CVE-2023-42793","name":"JetBrains TeamCity Authentication Bypass Vulnerability","product":"TeamCity","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793","vendor":"JetBrains"},{"added":"2023-10-04","id":"CVE-2023-28229","name":"Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability","product":"Windows CNG Key Isolation Service","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28229","vendor":"Microsoft"},{"added":"2023-10-03","id":"CVE-2023-4211","name":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","product":"Mali GPU Kernel Driver","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211","vendor":"Arm"},{"added":"2023-10-02","id":"CVE-2023-5217","name":"Google Chromium libvpx Heap Buffer Overflow Vulnerability","product":"Chromium libvpx","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217","vendor":"Google"},{"added":"2023-09-28","id":"CVE-2018-14667","name":"Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability","product":"JBoss RichFaces Framework","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14667","vendor":"Red Hat"},{"added":"2023-09-25","id":"CVE-2023-41993","name":"Apple Multiple Products WebKit Code Execution Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993","vendor":"Apple"},{"added":"2023-09-25","id":"CVE-2023-41992","name":"Apple Multiple Products Kernel Privilege Escalation Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992","vendor":"Apple"},{"added":"2023-09-25","id":"CVE-2023-41991","name":"Apple Multiple Products Improper Certificate Validation Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991","vendor":"Apple"},{"added":"2023-09-21","id":"CVE-2023-41179","name":"Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability","product":"Apex One and Worry-Free Business Security","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41179","vendor":"Trend Micro"},{"added":"2023-09-19","id":"CVE-2023-28434","name":"MinIO Security Feature Bypass Vulnerability","product":"MinIO","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434","vendor":"MinIO"},{"added":"2023-09-18","id":"CVE-2022-22265","name":"Samsung Mobile Devices Use-After-Free Vulnerability","product":"Mobile Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265","vendor":"Samsung"},{"added":"2023-09-18","id":"CVE-2021-3129","name":"Laravel Ignition File Upload Vulnerability","product":"Ignition","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129","vendor":"Laravel"},{"added":"2023-09-18","id":"CVE-2017-6884","name":"Zyxel EMG2926 Routers Command Injection Vulnerability","product":"EMG2926 Routers","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884","vendor":"Zyxel"},{"added":"2023-09-18","id":"CVE-2014-8361","name":"Realtek SDK Improper Input Validation Vulnerability","product":"SDK","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361","vendor":"Realtek"},{"added":"2023-09-14","id":"CVE-2023-26369","name":"Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability","product":"Acrobat and Reader","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369","vendor":"Adobe"},{"added":"2023-09-13","id":"CVE-2023-4863","name":"Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","product":"Chromium WebP","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863","vendor":"Google"},{"added":"2023-09-13","id":"CVE-2023-35674","name":"Android Framework Privilege Escalation Vulnerability","product":"Framework","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35674","vendor":"Android"},{"added":"2023-09-13","id":"CVE-2023-20269","name":"Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability","product":"Adaptive Security Appliance and Firepower Threat Defense","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20269","vendor":"Cisco"},{"added":"2023-09-12","id":"CVE-2023-36802","name":"Microsoft Streaming Service Proxy Privilege Escalation Vulnerability","product":"Streaming Service Proxy","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36802","vendor":"Microsoft"},{"added":"2023-09-12","id":"CVE-2023-36761","name":"Microsoft Word Information Disclosure Vulnerability","product":"Word","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36761","vendor":"Microsoft"},{"added":"2023-09-11","id":"CVE-2023-41064","name":"Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability","product":"iOS, iPadOS, and macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41064","vendor":"Apple"},{"added":"2023-09-11","id":"CVE-2023-41061","name":"Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability","product":"iOS, iPadOS, and watchOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41061","vendor":"Apple"},{"added":"2023-09-06","id":"CVE-2023-33246","name":"Apache RocketMQ Command Execution Vulnerability","product":"RocketMQ","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33246","vendor":"Apache"},{"added":"2023-08-24","id":"CVE-2023-38831","name":"RARLAB WinRAR Code Execution Vulnerability","product":"WinRAR","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38831","vendor":"RARLAB"},{"added":"2023-08-24","id":"CVE-2023-32315","name":"Ignite Realtime Openfire Path Traversal Vulnerability","product":"Openfire","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-32315","vendor":"Ignite Realtime"},{"added":"2023-08-22","id":"CVE-2023-38035","name":"Ivanti Sentry Authentication Bypass Vulnerability","product":"Sentry","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38035","vendor":"Ivanti"},{"added":"2023-08-22","id":"CVE-2023-27532","name":"Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability","product":"Backup & Replication","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27532","vendor":"Veeam"},{"added":"2023-08-21","id":"CVE-2023-26359","name":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","product":"ColdFusion","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26359","vendor":"Adobe"},{"added":"2023-08-16","id":"CVE-2023-24489","name":"Citrix Content Collaboration ShareFile Improper Access Control Vulnerability","product":"Content Collaboration","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24489","vendor":"Citrix"},{"added":"2023-08-09","id":"CVE-2023-38180","name":"Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability","product":".NET Core and Visual Studio","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38180","vendor":"Microsoft"},{"added":"2023-08-07","id":"CVE-2017-18368","name":"Zyxel P660HN-T1A Routers Command Injection Vulnerability","product":"P660HN-T1A Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-18368","vendor":"Zyxel"},{"added":"2023-07-31","id":"CVE-2023-35081","name":"Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability","product":"Endpoint Manager Mobile (EPMM)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35081","vendor":"Ivanti"},{"added":"2023-07-27","id":"CVE-2023-37580","name":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-37580","vendor":"Synacor"},{"added":"2023-07-26","id":"CVE-2023-38606","name":"Apple Multiple Products Kernel Unspecified Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38606","vendor":"Apple"},{"added":"2023-07-25","id":"CVE-2023-35078","name":"Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability","product":"Endpoint Manager Mobile (EPMM)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35078","vendor":"Ivanti"},{"added":"2023-07-20","id":"CVE-2023-38205","name":"Adobe ColdFusion Improper Access Control Vulnerability","product":"ColdFusion","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38205","vendor":"Adobe"},{"added":"2023-07-20","id":"CVE-2023-29298","name":"Adobe ColdFusion Improper Access Control Vulnerability","product":"ColdFusion","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29298","vendor":"Adobe"},{"added":"2023-07-19","id":"CVE-2023-3519","name":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","product":"NetScaler ADC and NetScaler Gateway","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-3519","vendor":"Citrix"},{"added":"2023-07-17","id":"CVE-2023-36884","name":"Microsoft Windows Search Remote Code Execution Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36884","vendor":"Microsoft"},{"added":"2023-07-13","id":"CVE-2023-37450","name":"Apple Multiple Products WebKit Code Execution Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-37450","vendor":"Apple"},{"added":"2023-07-13","id":"CVE-2022-29303","name":"SolarView Compact Command Injection Vulnerability","product":"Compact","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-29303","vendor":"SolarView"},{"added":"2023-07-11","id":"CVE-2023-36874","name":"Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36874","vendor":"Microsoft"},{"added":"2023-07-11","id":"CVE-2023-35311","name":"Microsoft Outlook Security Feature Bypass Vulnerability","product":"Outlook","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35311","vendor":"Microsoft"},{"added":"2023-07-11","id":"CVE-2023-32049","name":"Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-32049","vendor":"Microsoft"},{"added":"2023-07-11","id":"CVE-2023-32046","name":"Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-32046","vendor":"Microsoft"},{"added":"2023-07-11","id":"CVE-2022-31199","name":"Netwrix Auditor Insecure Object Deserialization Vulnerability","product":"Auditor","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-31199","vendor":"Netwrix"},{"added":"2023-07-07","id":"CVE-2021-29256","name":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","product":"Mali Graphics Processing Unit (GPU)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-29256","vendor":"Arm"},{"added":"2023-06-29","id":"CVE-2021-25489","name":"Samsung Mobile Devices Improper Input Validation Vulnerability","product":"Mobile Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25489","vendor":"Samsung"},{"added":"2023-06-29","id":"CVE-2021-25487","name":"Samsung Mobile Devices Out-of-Bounds Read Vulnerability","product":"Mobile Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25487","vendor":"Samsung"},{"added":"2023-06-29","id":"CVE-2021-25395","name":"Samsung Mobile Devices Race Condition Vulnerability","product":"Mobile Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25395","vendor":"Samsung"},{"added":"2023-06-29","id":"CVE-2021-25394","name":"Samsung Mobile Devices Race Condition Vulnerability","product":"Mobile Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25394","vendor":"Samsung"},{"added":"2023-06-29","id":"CVE-2021-25372","name":"Samsung Mobile Devices Improper Boundary Check Vulnerability","product":"Mobile Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25372","vendor":"Samsung"},{"added":"2023-06-29","id":"CVE-2021-25371","name":"Samsung Mobile Devices Unspecified Vulnerability","product":"Mobile Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25371","vendor":"Samsung"},{"added":"2023-06-29","id":"CVE-2019-20500","name":"D-Link DWL-2600AP Access Point Command Injection Vulnerability","product":"DWL-2600AP Access Point","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-20500","vendor":"D-Link"},{"added":"2023-06-29","id":"CVE-2019-17621","name":"D-Link DIR-859 Router Command Execution Vulnerability","product":"DIR-859 Router","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-17621","vendor":"D-Link"},{"added":"2023-06-23","id":"CVE-2023-32439","name":"Apple Multiple Products WebKit Type Confusion Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-32439","vendor":"Apple"},{"added":"2023-06-23","id":"CVE-2023-32435","name":"Apple Multiple Products WebKit Memory Corruption Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-32435","vendor":"Apple"},{"added":"2023-06-23","id":"CVE-2023-32434","name":"Apple Multiple Products Integer Overflow Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-32434","vendor":"Apple"},{"added":"2023-06-23","id":"CVE-2023-27992","name":"Zyxel Multiple NAS Devices Command Injection Vulnerability","product":"Multiple Network-Attached Storage (NAS) Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27992","vendor":"Zyxel"},{"added":"2023-06-23","id":"CVE-2023-20867","name":"VMware Tools Authentication Bypass Vulnerability","product":"Tools","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20867","vendor":"VMware"},{"added":"2023-06-22","id":"CVE-2023-20887","name":"Vmware Aria Operations for Networks Command Injection Vulnerability","product":"Aria Operations for Networks","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20887","vendor":"VMware"},{"added":"2023-06-22","id":"CVE-2021-44026","name":"Roundcube Webmail SQL Injection Vulnerability","product":"Roundcube Webmail","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44026","vendor":"Roundcube"},{"added":"2023-06-22","id":"CVE-2020-35730","name":"Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","product":"Roundcube Webmail","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-35730","vendor":"Roundcube"},{"added":"2023-06-22","id":"CVE-2020-12641","name":"Roundcube Webmail Remote Code Execution Vulnerability","product":"Roundcube Webmail","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-12641","vendor":"Roundcube"},{"added":"2023-06-22","id":"CVE-2016-9079","name":"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","product":"Firefox, Firefox ESR, and Thunderbird","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-9079","vendor":"Mozilla"},{"added":"2023-06-22","id":"CVE-2016-0165","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0165","vendor":"Microsoft"},{"added":"2023-06-13","id":"CVE-2023-27997","name":"Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability","product":"FortiOS and FortiProxy SSL-VPN","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27997","vendor":"Fortinet"},{"added":"2023-06-07","id":"CVE-2023-3079","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-3079","vendor":"Google"},{"added":"2023-06-05","id":"CVE-2023-33010","name":"Zyxel Multiple Firewalls Buffer Overflow Vulnerability","product":"Multiple Firewalls","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33010","vendor":"Zyxel"},{"added":"2023-06-05","id":"CVE-2023-33009","name":"Zyxel Multiple Firewalls Buffer Overflow Vulnerability","product":"Multiple Firewalls","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33009","vendor":"Zyxel"},{"added":"2023-06-02","id":"CVE-2023-34362","name":"Progress MOVEit Transfer SQL Injection Vulnerability","product":"MOVEit Transfer","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-34362","vendor":"Progress"},{"added":"2023-05-31","id":"CVE-2023-28771","name":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","product":"Multiple Firewalls","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28771","vendor":"Zyxel"},{"added":"2023-05-26","id":"CVE-2023-2868","name":"Barracuda Networks ESG Appliance Improper Input Validation Vulnerability","product":"Email Security Gateway (ESG) Appliance","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-2868","vendor":"Barracuda Networks"},{"added":"2023-05-22","id":"CVE-2023-32409","name":"Apple Multiple Products WebKit Sandbox Escape Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-32409","vendor":"Apple"},{"added":"2023-05-22","id":"CVE-2023-32373","name":"Apple Multiple Products WebKit Use-After-Free Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-32373","vendor":"Apple"},{"added":"2023-05-22","id":"CVE-2023-28204","name":"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28204","vendor":"Apple"},{"added":"2023-05-19","id":"CVE-2023-21492","name":"Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability","product":"Mobile Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21492","vendor":"Samsung"},{"added":"2023-05-19","id":"CVE-2016-6415","name":"Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability","product":"IOS, IOS XR, and IOS XE","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-6415","vendor":"Cisco"},{"added":"2023-05-19","id":"CVE-2004-1464","name":"Cisco IOS Denial-of-Service Vulnerability","product":"IOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2004-1464","vendor":"Cisco"},{"added":"2023-05-12","id":"CVE-2023-25717","name":"Multiple Ruckus Wireless Products CSRF and RCE Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-25717","vendor":"Ruckus Wireless"},{"added":"2023-05-12","id":"CVE-2021-3560","name":"Red Hat Polkit Incorrect Authorization Vulnerability","product":"Polkit","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3560","vendor":"Red Hat"},{"added":"2023-05-12","id":"CVE-2016-8735","name":"Apache Tomcat Remote Code Execution Vulnerability","product":"Tomcat","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-8735","vendor":"Apache"},{"added":"2023-05-12","id":"CVE-2016-3427","name":"Oracle Java SE and JRockit Unspecified Vulnerability","product":"Java SE and JRockit","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3427","vendor":"Oracle"},{"added":"2023-05-12","id":"CVE-2015-5317","name":"Jenkins User Interface (UI) Information Disclosure Vulnerability","product":"Jenkins User Interface (UI)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5317","vendor":"Jenkins"},{"added":"2023-05-12","id":"CVE-2014-0196","name":"Linux Kernel Race Condition Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0196","vendor":"Linux"},{"added":"2023-05-12","id":"CVE-2010-3904","name":"Linux Kernel Improper Input Validation Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-3904","vendor":"Linux"},{"added":"2023-05-09","id":"CVE-2023-29336","name":"Microsoft Win32K Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29336","vendor":"Microsoft"},{"added":"2023-05-01","id":"CVE-2023-21839","name":"Oracle WebLogic Server Unspecified Vulnerability","product":"WebLogic Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21839","vendor":"Oracle"},{"added":"2023-05-01","id":"CVE-2023-1389","name":"TP-Link Archer AX-21 Command Injection Vulnerability","product":"Archer AX21","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1389","vendor":"TP-Link"},{"added":"2023-05-01","id":"CVE-2021-45046","name":"Apache Log4j2 Deserialization of Untrusted Data Vulnerability","product":"Log4j2","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-45046","vendor":"Apache"},{"added":"2023-04-21","id":"CVE-2023-28432","name":"MinIO Information Disclosure Vulnerability","product":"MinIO","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28432","vendor":"MinIO"},{"added":"2023-04-21","id":"CVE-2023-27350","name":"PaperCut MF/NG Improper Access Control Vulnerability","product":"MF/NG","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27350","vendor":"PaperCut"},{"added":"2023-04-21","id":"CVE-2023-2136","name":"Google Chrome Skia Integer Overflow Vulnerability","product":"Chromium Skia","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-2136","vendor":"Google"},{"added":"2023-04-19","id":"CVE-2017-6742","name":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","product":"IOS and IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6742","vendor":"Cisco"},{"added":"2023-04-17","id":"CVE-2023-2033","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-2033","vendor":"Google"},{"added":"2023-04-17","id":"CVE-2019-8526","name":"Apple macOS Use-After-Free Vulnerability","product":"macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-8526","vendor":"Apple"},{"added":"2023-04-13","id":"CVE-2023-29492","name":"Novi Survey Insecure Deserialization Vulnerability","product":"Novi Survey","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29492","vendor":"Novi Survey"},{"added":"2023-04-13","id":"CVE-2023-20963","name":"Android Framework Privilege Escalation Vulnerability","product":"Framework","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20963","vendor":"Android"},{"added":"2023-04-11","id":"CVE-2023-28252","name":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28252","vendor":"Microsoft"},{"added":"2023-04-10","id":"CVE-2023-28206","name":"Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability","product":"iOS, iPadOS, and macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28206","vendor":"Apple"},{"added":"2023-04-10","id":"CVE-2023-28205","name":"Apple Multiple Products WebKit Use-After-Free Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28205","vendor":"Apple"},{"added":"2023-04-07","id":"CVE-2023-26083","name":"Arm Mali GPU Kernel Driver Information Disclosure Vulnerability","product":"Mali Graphics Processing Unit (GPU)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26083","vendor":"Arm"},{"added":"2023-04-07","id":"CVE-2021-27878","name":"Veritas Backup Exec Agent Command Execution Vulnerability","product":"Backup Exec Agent","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27878","vendor":"Veritas"},{"added":"2023-04-07","id":"CVE-2021-27877","name":"Veritas Backup Exec Agent Improper Authentication Vulnerability","product":"Backup Exec Agent","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27877","vendor":"Veritas"},{"added":"2023-04-07","id":"CVE-2021-27876","name":"Veritas Backup Exec Agent File Access Vulnerability","product":"Backup Exec Agent","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27876","vendor":"Veritas"},{"added":"2023-04-07","id":"CVE-2019-1388","name":"Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1388","vendor":"Microsoft"},{"added":"2023-04-03","id":"CVE-2022-27926","name":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-27926","vendor":"Synacor"},{"added":"2023-03-30","id":"CVE-2023-0266","name":"Linux Kernel Use-After-Free Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-0266","vendor":"Linux"},{"added":"2023-03-30","id":"CVE-2022-42948","name":"Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability","product":"Cobalt Strike","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-42948","vendor":"Fortra"},{"added":"2023-03-30","id":"CVE-2022-39197","name":"Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability","product":"Cobalt Strike","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-39197","vendor":"Fortra"},{"added":"2023-03-30","id":"CVE-2022-38181","name":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","product":"Mali Graphics Processing Unit (GPU)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38181","vendor":"Arm"},{"added":"2023-03-30","id":"CVE-2022-3038","name":"Google Chromium Network Service Use-After-Free Vulnerability","product":"Chromium Network Service","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-3038","vendor":"Google"},{"added":"2023-03-30","id":"CVE-2022-22706","name":"Arm Mali GPU Kernel Driver Unspecified Vulnerability","product":"Mali Graphics Processing Unit (GPU)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22706","vendor":"Arm"},{"added":"2023-03-30","id":"CVE-2021-30900","name":"Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","product":"iOS, iPadOS, and macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30900","vendor":"Apple"},{"added":"2023-03-30","id":"CVE-2017-7494","name":"Samba Remote Code Execution Vulnerability","product":"Samba","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-7494","vendor":"Samba"},{"added":"2023-03-30","id":"CVE-2013-3163","name":"Microsoft Internet Explorer Memory Corruption Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3163","vendor":"Microsoft"},{"added":"2023-03-15","id":"CVE-2023-26360","name":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","product":"ColdFusion","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26360","vendor":"Adobe"},{"added":"2023-03-14","id":"CVE-2023-24880","name":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24880","vendor":"Microsoft"},{"added":"2023-03-14","id":"CVE-2023-23397","name":"Microsoft Office Outlook Privilege Escalation Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-23397","vendor":"Microsoft"},{"added":"2023-03-14","id":"CVE-2022-41328","name":"Fortinet FortiOS Path Traversal Vulnerability","product":"FortiOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41328","vendor":"Fortinet"},{"added":"2023-03-10","id":"CVE-2021-39144","name":"XStream Remote Code Execution Vulnerability","product":"XStream","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-39144","vendor":"XStream"},{"added":"2023-03-10","id":"CVE-2020-5741","name":"Plex Media Server Remote Code Execution Vulnerability","product":"Media Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-5741","vendor":"Plex"},{"added":"2023-03-07","id":"CVE-2022-35914","name":"Teclib GLPI Remote Code Execution Vulnerability","product":"GLPI","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-35914","vendor":"Teclib"},{"added":"2023-03-07","id":"CVE-2022-33891","name":"Apache Spark Command Injection Vulnerability","product":"Spark","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-33891","vendor":"Apache"},{"added":"2023-03-07","id":"CVE-2022-28810","name":"Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability","product":"ManageEngine","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-28810","vendor":"Zoho"},{"added":"2023-02-27","id":"CVE-2022-36537","name":"ZK Framework AuUploader Unspecified Vulnerability","product":"AuUploader","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-36537","vendor":"ZK Framework"},{"added":"2023-02-21","id":"CVE-2022-47986","name":"IBM Aspera Faspex Code Execution Vulnerability","product":"Aspera Faspex","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-47986","vendor":"IBM"},{"added":"2023-02-21","id":"CVE-2022-41223","name":"Mitel MiVoice Connect Code Injection Vulnerability","product":"MiVoice Connect","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41223","vendor":"Mitel"},{"added":"2023-02-21","id":"CVE-2022-40765","name":"Mitel MiVoice Connect Command Injection Vulnerability","product":"MiVoice Connect","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-40765","vendor":"Mitel"},{"added":"2023-02-16","id":"CVE-2022-46169","name":"Cacti Command Injection Vulnerability","product":"Cacti","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-46169","vendor":"Cacti"},{"added":"2023-02-14","id":"CVE-2023-23529","name":"Apple Multiple Products WebKit Type Confusion Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-23529","vendor":"Apple"},{"added":"2023-02-14","id":"CVE-2023-23376","name":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-23376","vendor":"Microsoft"},{"added":"2023-02-14","id":"CVE-2023-21823","name":"Microsoft Windows Graphic Component Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21823","vendor":"Microsoft"},{"added":"2023-02-14","id":"CVE-2023-21715","name":"Microsoft Office Publisher Security Feature Bypass Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21715","vendor":"Microsoft"},{"added":"2023-02-10","id":"CVE-2023-0669","name":"Fortra GoAnywhere MFT Remote Code Execution Vulnerability","product":"GoAnywhere MFT","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-0669","vendor":"Fortra"},{"added":"2023-02-10","id":"CVE-2022-24990","name":"TerraMaster OS Remote Command Execution Vulnerability","product":"TerraMaster OS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24990","vendor":"TerraMaster"},{"added":"2023-02-10","id":"CVE-2015-2291","name":"Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability","product":"Ethernet Diagnostics Driver for Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2291","vendor":"Intel"},{"added":"2023-02-02","id":"CVE-2023-22952","name":"Multiple SugarCRM Products Remote Code Execution Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-22952","vendor":"SugarCRM"},{"added":"2023-02-02","id":"CVE-2022-21587","name":"Oracle E-Business Suite Unspecified Vulnerability","product":"E-Business Suite","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21587","vendor":"Oracle"},{"added":"2023-01-26","id":"CVE-2017-11357","name":"Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability","product":"User Interface (UI) for ASP.NET AJAX","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11357","vendor":"Telerik"},{"added":"2023-01-23","id":"CVE-2022-47966","name":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","product":"ManageEngine","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-47966","vendor":"Zoho"},{"added":"2023-01-17","id":"CVE-2022-44877","name":"CWP Control Web Panel OS Command Injection Vulnerability","product":"Control Web Panel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-44877","vendor":"CWP"},{"added":"2023-01-10","id":"CVE-2023-21674","name":"Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21674","vendor":"Microsoft"},{"added":"2023-01-10","id":"CVE-2022-41080","name":"Microsoft Exchange Server Privilege Escalation Vulnerability","product":"Exchange Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41080","vendor":"Microsoft"},{"added":"2022-12-29","id":"CVE-2018-5430","name":"TIBCO JasperReports Server Information Disclosure Vulnerability","product":"JasperReports","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-5430","vendor":"TIBCO"},{"added":"2022-12-29","id":"CVE-2018-18809","name":"TIBCO JasperReports Library Directory Traversal Vulnerability","product":"JasperReports","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-18809","vendor":"TIBCO"},{"added":"2022-12-14","id":"CVE-2022-42856","name":"Apple iOS Type Confusion Vulnerability","product":"iOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-42856","vendor":"Apple"},{"added":"2022-12-13","id":"CVE-2022-44698","name":"Microsoft Defender SmartScreen Security Feature Bypass Vulnerability","product":"Defender","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-44698","vendor":"Microsoft"},{"added":"2022-12-13","id":"CVE-2022-42475","name":"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","product":"FortiOS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-42475","vendor":"Fortinet"},{"added":"2022-12-13","id":"CVE-2022-27518","name":"Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability","product":"Application Delivery Controller (ADC) and Gateway","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-27518","vendor":"Citrix"},{"added":"2022-12-13","id":"CVE-2022-26501","name":"Veeam Backup & Replication Remote Code Execution Vulnerability","product":"Backup & Replication","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26501","vendor":"Veeam"},{"added":"2022-12-13","id":"CVE-2022-26500","name":"Veeam Backup & Replication Remote Code Execution Vulnerability","product":"Backup & Replication","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26500","vendor":"Veeam"},{"added":"2022-12-05","id":"CVE-2022-4262","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-4262","vendor":"Google"},{"added":"2022-11-28","id":"CVE-2022-4135","name":"Google Chromium GPU Heap Buffer Overflow Vulnerability","product":"Chromium GPU","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-4135","vendor":"Google"},{"added":"2022-11-28","id":"CVE-2021-35587","name":"Oracle Fusion Middleware Unspecified Vulnerability","product":"Fusion Middleware","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-35587","vendor":"Oracle"},{"added":"2022-11-14","id":"CVE-2022-41049","name":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41049","vendor":"Microsoft"},{"added":"2022-11-08","id":"CVE-2022-41128","name":"Microsoft Windows Scripting Languages Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41128","vendor":"Microsoft"},{"added":"2022-11-08","id":"CVE-2022-41125","name":"Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41125","vendor":"Microsoft"},{"added":"2022-11-08","id":"CVE-2022-41091","name":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41091","vendor":"Microsoft"},{"added":"2022-11-08","id":"CVE-2022-41073","name":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41073","vendor":"Microsoft"},{"added":"2022-11-08","id":"CVE-2021-25370","name":"Samsung Mobile Devices Memory Corruption Vulnerability","product":"Mobile Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25370","vendor":"Samsung"},{"added":"2022-11-08","id":"CVE-2021-25369","name":"Samsung Mobile Devices Improper Access Control Vulnerability","product":"Mobile Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25369","vendor":"Samsung"},{"added":"2022-11-08","id":"CVE-2021-25337","name":"Samsung Mobile Devices Improper Access Control Vulnerability","product":"Mobile Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25337","vendor":"Samsung"},{"added":"2022-10-28","id":"CVE-2022-3723","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-3723","vendor":"Google"},{"added":"2022-10-25","id":"CVE-2022-42827","name":"Apple iOS and iPadOS Out-of-Bounds Write Vulnerability","product":"iOS and iPadOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-42827","vendor":"Apple"},{"added":"2022-10-24","id":"CVE-2020-3433","name":"Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability","product":"AnyConnect Secure","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3433","vendor":"Cisco"},{"added":"2022-10-24","id":"CVE-2020-3153","name":"Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability","product":"AnyConnect Secure","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3153","vendor":"Cisco"},{"added":"2022-10-24","id":"CVE-2018-19323","name":"GIGABYTE Multiple Products Privilege Escalation Vulnerability","product":"Multiple Products","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-19323","vendor":"GIGABYTE"},{"added":"2022-10-24","id":"CVE-2018-19322","name":"GIGABYTE Multiple Products Code Execution Vulnerability","product":"Multiple Products","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-19322","vendor":"GIGABYTE"},{"added":"2022-10-24","id":"CVE-2018-19321","name":"GIGABYTE Multiple Products Privilege Escalation Vulnerability","product":"Multiple Products","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-19321","vendor":"GIGABYTE"},{"added":"2022-10-24","id":"CVE-2018-19320","name":"GIGABYTE Multiple Products Unspecified Vulnerability","product":"Multiple Products","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-19320","vendor":"GIGABYTE"},{"added":"2022-10-20","id":"CVE-2022-41352","name":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41352","vendor":"Synacor"},{"added":"2022-10-20","id":"CVE-2021-3493","name":"Linux Kernel Privilege Escalation Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3493","vendor":"Linux"},{"added":"2022-10-11","id":"CVE-2022-41033","name":"Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability","product":"Windows COM+ Event System Service","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41033","vendor":"Microsoft"},{"added":"2022-10-11","id":"CVE-2022-40684","name":"Fortinet Multiple Products Authentication Bypass Vulnerability","product":"Multiple Products","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-40684","vendor":"Fortinet"},{"added":"2022-09-30","id":"CVE-2022-41082","name":"Microsoft Exchange Server Remote Code Execution Vulnerability","product":"Exchange Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41082","vendor":"Microsoft"},{"added":"2022-09-30","id":"CVE-2022-41040","name":"Microsoft Exchange Server Server-Side Request Forgery Vulnerability","product":"Exchange Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41040","vendor":"Microsoft"},{"added":"2022-09-30","id":"CVE-2022-36804","name":"Atlassian Bitbucket Server and Data Center Command Injection Vulnerability","product":"Bitbucket Server and Data Center","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-36804","vendor":"Atlassian"},{"added":"2022-09-23","id":"CVE-2022-3236","name":"Sophos Firewall Code Injection Vulnerability","product":"Firewall","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-3236","vendor":"Sophos"},{"added":"2022-09-22","id":"CVE-2022-35405","name":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","product":"ManageEngine","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-35405","vendor":"Zoho"},{"added":"2022-09-15","id":"CVE-2022-40139","name":"Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability","product":"Apex One and Apex One as a Service","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-40139","vendor":"Trend Micro"},{"added":"2022-09-15","id":"CVE-2013-6282","name":"Linux Kernel Improper Input Validation Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-6282","vendor":"Linux"},{"added":"2022-09-15","id":"CVE-2013-2597","name":"Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability","product":"ACDB Audio Driver","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2597","vendor":"Code Aurora"},{"added":"2022-09-15","id":"CVE-2013-2596","name":"Linux Kernel Integer Overflow Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2596","vendor":"Linux"},{"added":"2022-09-15","id":"CVE-2013-2094","name":"Linux Kernel Privilege Escalation Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2094","vendor":"Linux"},{"added":"2022-09-15","id":"CVE-2010-2568","name":"Microsoft Windows Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-2568","vendor":"Microsoft"},{"added":"2022-09-14","id":"CVE-2022-37969","name":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-37969","vendor":"Microsoft"},{"added":"2022-09-14","id":"CVE-2022-32917","name":"Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability","product":"iOS, iPadOS, and macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-32917","vendor":"Apple"},{"added":"2022-09-08","id":"CVE-2022-3075","name":"Google Chromium Mojo Insufficient Data Validation Vulnerability","product":"Chromium Mojo","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-3075","vendor":"Google"},{"added":"2022-09-08","id":"CVE-2022-27593","name":"QNAP Photo Station Externally Controlled Reference Vulnerability","product":"Photo Station","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-27593","vendor":"QNAP"},{"added":"2022-09-08","id":"CVE-2022-26258","name":"D-Link DIR-820L Remote Code Execution Vulnerability","product":"DIR-820L","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26258","vendor":"D-Link"},{"added":"2022-09-08","id":"CVE-2020-9934","name":"Apple iOS, iPadOS, and macOS Input Validation Vulnerability","product":"iOS, iPadOS, and macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9934","vendor":"Apple"},{"added":"2022-09-08","id":"CVE-2018-7445","name":"MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability","product":"RouterOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-7445","vendor":"MikroTik"},{"added":"2022-09-08","id":"CVE-2018-6530","name":"D-Link Multiple Routers OS Command Injection Vulnerability","product":"Multiple Routers","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-6530","vendor":"D-Link"},{"added":"2022-09-08","id":"CVE-2018-2628","name":"Oracle WebLogic Server Unspecified Vulnerability","product":"WebLogic Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-2628","vendor":"Oracle"},{"added":"2022-09-08","id":"CVE-2018-13374","name":"Fortinet FortiOS and FortiADC Improper Access Control Vulnerability","product":"FortiOS and FortiADC","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-13374","vendor":"Fortinet"},{"added":"2022-09-08","id":"CVE-2017-5521","name":"NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability","product":"Multiple Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-5521","vendor":"NETGEAR"},{"added":"2022-09-08","id":"CVE-2011-4723","name":"D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability","product":"DIR-300 Router","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-4723","vendor":"D-Link"},{"added":"2022-09-08","id":"CVE-2011-1823","name":"Android OS Privilege Escalation Vulnerability","product":"Android OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-1823","vendor":"Android"},{"added":"2022-08-25","id":"CVE-2022-26352","name":"dotCMS Unrestricted Upload of File Vulnerability","product":"dotCMS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26352","vendor":"dotCMS"},{"added":"2022-08-25","id":"CVE-2022-24706","name":"Apache CouchDB Insecure Default Initialization of Resource Vulnerability","product":"CouchDB","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24706","vendor":"Apache"},{"added":"2022-08-25","id":"CVE-2022-24112","name":"Apache APISIX Authentication Bypass Vulnerability","product":"APISIX","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24112","vendor":"Apache"},{"added":"2022-08-25","id":"CVE-2022-22963","name":"VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability","product":"Spring Cloud","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22963","vendor":"VMware Tanzu"},{"added":"2022-08-25","id":"CVE-2022-2294","name":"WebRTC Heap Buffer Overflow Vulnerability","product":"WebRTC","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2294","vendor":"WebRTC"},{"added":"2022-08-25","id":"CVE-2021-39226","name":"Grafana Authentication Bypass Vulnerability","product":"Grafana","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-39226","vendor":"Grafana Labs"},{"added":"2022-08-25","id":"CVE-2021-38406","name":"Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability","product":"DOPSoft 2","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-38406","vendor":"Delta Electronics"},{"added":"2022-08-25","id":"CVE-2021-31010","name":"Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability","product":"iOS, macOS, watchOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31010","vendor":"Apple"},{"added":"2022-08-25","id":"CVE-2020-36193","name":"PEAR Archive_Tar Improper Link Resolution Vulnerability","product":"Archive_Tar","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-36193","vendor":"PEAR"},{"added":"2022-08-25","id":"CVE-2020-28949","name":"PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability","product":"Archive_Tar","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-28949","vendor":"PEAR"},{"added":"2022-08-22","id":"CVE-2022-0028","name":"Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability","product":"PAN-OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0028","vendor":"Palo Alto Networks"},{"added":"2022-08-18","id":"CVE-2022-32894","name":"Apple iOS and macOS Out-of-Bounds Write Vulnerability","product":"iOS and macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-32894","vendor":"Apple"},{"added":"2022-08-18","id":"CVE-2022-32893","name":"Apple iOS and macOS Out-of-Bounds Write Vulnerability","product":"iOS and macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-32893","vendor":"Apple"},{"added":"2022-08-18","id":"CVE-2022-2856","name":"Google Chromium Intents Insufficient Input Validation Vulnerability","product":"Chromium Intents","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2856","vendor":"Google"},{"added":"2022-08-18","id":"CVE-2022-26923","name":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","product":"Active Directory","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26923","vendor":"Microsoft"},{"added":"2022-08-18","id":"CVE-2022-22536","name":"SAP Multiple Products HTTP Request Smuggling Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22536","vendor":"SAP"},{"added":"2022-08-18","id":"CVE-2022-21971","name":"Microsoft Windows Runtime Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21971","vendor":"Microsoft"},{"added":"2022-08-18","id":"CVE-2017-15944","name":"Palo Alto Networks PAN-OS Remote Code Execution Vulnerability","product":"PAN-OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-15944","vendor":"Palo Alto Networks"},{"added":"2022-08-11","id":"CVE-2022-37042","name":"Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-37042","vendor":"Synacor"},{"added":"2022-08-11","id":"CVE-2022-27925","name":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-27925","vendor":"Synacor"},{"added":"2022-08-09","id":"CVE-2022-34713","name":"Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-34713","vendor":"Microsoft"},{"added":"2022-08-09","id":"CVE-2022-30333","name":"RARLAB UnRAR Directory Traversal Vulnerability","product":"UnRAR","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-30333","vendor":"RARLAB"},{"added":"2022-08-04","id":"CVE-2022-27924","name":"Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-27924","vendor":"Synacor"},{"added":"2022-07-29","id":"CVE-2022-26138","name":"Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability","product":"Confluence","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26138","vendor":"Atlassian"},{"added":"2022-07-12","id":"CVE-2022-22047","name":"Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22047","vendor":"Microsoft"},{"added":"2022-07-01","id":"CVE-2022-26925","name":"Microsoft Windows LSA Spoofing Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26925","vendor":"Microsoft"},{"added":"2022-06-27","id":"CVE-2022-29499","name":"Mitel MiVoice Connect Data Validation Vulnerability","product":"MiVoice Connect","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-29499","vendor":"Mitel"},{"added":"2022-06-27","id":"CVE-2021-4034","name":"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","product":"Polkit","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-4034","vendor":"Red Hat"},{"added":"2022-06-27","id":"CVE-2021-30983","name":"Apple iOS and iPadOS Buffer Overflow Vulnerability","product":"iOS and iPadOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30983","vendor":"Apple"},{"added":"2022-06-27","id":"CVE-2021-30533","name":"Google Chromium PopupBlocker Security Bypass Vulnerability","product":"Chromium PopupBlocker","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30533","vendor":"Google"},{"added":"2022-06-27","id":"CVE-2020-9907","name":"Apple Multiple Products Memory Corruption Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9907","vendor":"Apple"},{"added":"2022-06-27","id":"CVE-2020-3837","name":"Apple Multiple Products Memory Corruption Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3837","vendor":"Apple"},{"added":"2022-06-27","id":"CVE-2019-8605","name":"Apple Multiple Products Use-After-Free Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-8605","vendor":"Apple"},{"added":"2022-06-27","id":"CVE-2018-4344","name":"Apple Multiple Products Memory Corruption Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-4344","vendor":"Apple"},{"added":"2022-06-14","id":"CVE-2022-30190","name":"Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-30190","vendor":"Microsoft"},{"added":"2022-06-09","id":"CVE-2021-38163","name":"SAP NetWeaver Unrestricted File Upload Vulnerability","product":"NetWeaver","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-38163","vendor":"SAP"},{"added":"2022-06-09","id":"CVE-2016-2388","name":"SAP NetWeaver Information Disclosure Vulnerability","product":"NetWeaver","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-2388","vendor":"SAP"},{"added":"2022-06-09","id":"CVE-2016-2386","name":"SAP NetWeaver SQL Injection Vulnerability","product":"NetWeaver","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-2386","vendor":"SAP"},{"added":"2022-06-08","id":"CVE-2019-7195","name":"QNAP Photo Station Path Traversal Vulnerability","product":"Photo Station","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7195","vendor":"QNAP"},{"added":"2022-06-08","id":"CVE-2019-7194","name":"QNAP Photo Station Path Traversal Vulnerability","product":"Photo Station","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7194","vendor":"QNAP"},{"added":"2022-06-08","id":"CVE-2019-7193","name":"QNAP QTS Improper Input Validation Vulnerability","product":"QTS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7193","vendor":"QNAP"},{"added":"2022-06-08","id":"CVE-2019-7192","name":"QNAP Photo Station Improper Access Control Vulnerability","product":"Photo Station","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7192","vendor":"QNAP"},{"added":"2022-06-08","id":"CVE-2019-5825","name":"Google Chromium V8 Out-of-Bounds Write Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-5825","vendor":"Google"},{"added":"2022-06-08","id":"CVE-2019-15271","name":"Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability","product":"RV Series Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-15271","vendor":"Cisco"},{"added":"2022-06-08","id":"CVE-2018-6065","name":"Google Chromium V8 Integer Overflow Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-6065","vendor":"Google"},{"added":"2022-06-08","id":"CVE-2018-4990","name":"Adobe Acrobat and Reader Double Free Vulnerability","product":"Acrobat and Reader","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-4990","vendor":"Adobe"},{"added":"2022-06-08","id":"CVE-2018-17480","name":"Google Chromium V8 Out-of-Bounds Write Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-17480","vendor":"Google"},{"added":"2022-06-08","id":"CVE-2018-17463","name":"Google Chromium V8 Remote Code Execution Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-17463","vendor":"Google"},{"added":"2022-06-08","id":"CVE-2017-6862","name":"NETGEAR Multiple Devices Buffer Overflow Vulnerability","product":"Multiple Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6862","vendor":"NETGEAR"},{"added":"2022-06-08","id":"CVE-2017-5070","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-5070","vendor":"Google"},{"added":"2022-06-08","id":"CVE-2017-5030","name":"Google Chromium V8 Memory Corruption Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-5030","vendor":"Google"},{"added":"2022-06-08","id":"CVE-2016-5198","name":"Google Chromium V8 Out-of-Bounds Memory Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-5198","vendor":"Google"},{"added":"2022-06-08","id":"CVE-2016-1646","name":"Google Chromium V8 Out-of-Bounds Read Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-1646","vendor":"Google"},{"added":"2022-06-08","id":"CVE-2013-1331","name":"Microsoft Office Buffer Overflow Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1331","vendor":"Microsoft"},{"added":"2022-06-08","id":"CVE-2012-5054","name":"Adobe Flash Player Integer Overflow Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-5054","vendor":"Adobe"},{"added":"2022-06-08","id":"CVE-2012-4969","name":"Microsoft Internet Explorer Use-After-Free Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4969","vendor":"Microsoft"},{"added":"2022-06-08","id":"CVE-2012-1889","name":"Microsoft XML Core Services Memory Corruption Vulnerability","product":"XML Core Services","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1889","vendor":"Microsoft"},{"added":"2022-06-08","id":"CVE-2012-0767","name":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0767","vendor":"Adobe"},{"added":"2022-06-08","id":"CVE-2012-0754","name":"Adobe Flash Player Memory Corruption Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0754","vendor":"Adobe"},{"added":"2022-06-08","id":"CVE-2012-0151","name":"Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0151","vendor":"Microsoft"},{"added":"2022-06-08","id":"CVE-2011-2462","name":"Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability","product":"Reader and Acrobat","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-2462","vendor":"Adobe"},{"added":"2022-06-08","id":"CVE-2011-0609","name":"Adobe Flash Player Unspecified Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-0609","vendor":"Adobe"},{"added":"2022-06-08","id":"CVE-2010-2883","name":"Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability","product":"Acrobat and Reader","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-2883","vendor":"Adobe"},{"added":"2022-06-08","id":"CVE-2010-2572","name":"Microsoft PowerPoint Buffer Overflow Vulnerability","product":"PowerPoint","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-2572","vendor":"Microsoft"},{"added":"2022-06-08","id":"CVE-2010-1297","name":"Adobe Flash Player Memory Corruption Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-1297","vendor":"Adobe"},{"added":"2022-06-08","id":"CVE-2009-4324","name":"Adobe Acrobat and Reader Use-After-Free Vulnerability","product":"Acrobat and Reader","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-4324","vendor":"Adobe"},{"added":"2022-06-08","id":"CVE-2009-3953","name":"Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability","product":"Acrobat and Reader","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3953","vendor":"Adobe"},{"added":"2022-06-08","id":"CVE-2009-1862","name":"Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability","product":"Acrobat and Reader, Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-1862","vendor":"Adobe"},{"added":"2022-06-08","id":"CVE-2009-0563","name":"Microsoft Office Buffer Overflow Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0563","vendor":"Microsoft"},{"added":"2022-06-08","id":"CVE-2009-0557","name":"Microsoft Office Object Record Corruption Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0557","vendor":"Microsoft"},{"added":"2022-06-08","id":"CVE-2008-0655","name":"Adobe Acrobat and Reader Unspecified Vulnerability","product":"Acrobat and Reader","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-0655","vendor":"Adobe"},{"added":"2022-06-08","id":"CVE-2007-5659","name":"Adobe Acrobat and Reader Buffer Overflow Vulnerability","product":"Acrobat and Reader","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2007-5659","vendor":"Adobe"},{"added":"2022-06-08","id":"CVE-2006-2492","name":"Microsoft Word Malformed Object Pointer Vulnerability","product":"Word","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2006-2492","vendor":"Microsoft"},{"added":"2022-06-02","id":"CVE-2022-26134","name":"Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","product":"Confluence Server/Data Center","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26134","vendor":"Atlassian"},{"added":"2022-05-25","id":"CVE-2019-3010","name":"Oracle Solaris Privilege Escalation Vulnerability","product":"Solaris","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-3010","vendor":"Oracle"},{"added":"2022-05-25","id":"CVE-2016-7256","name":"Microsoft Windows Open Type Font Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7256","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2016-3393","name":"Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3393","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2016-1010","name":"Adobe Flash Player and AIR Integer Overflow Vulnerability","product":"Flash Player and AIR","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-1010","vendor":"Adobe"},{"added":"2022-05-25","id":"CVE-2016-0984","name":"Adobe Flash Player and AIR Use-After-Free Vulnerability","product":"Flash Player and AIR","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0984","vendor":"Adobe"},{"added":"2022-05-25","id":"CVE-2016-0034","name":"Microsoft Silverlight Runtime Remote Code Execution Vulnerability","product":"Silverlight","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0034","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2015-8651","name":"Adobe Flash Player Integer Overflow Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-8651","vendor":"Adobe"},{"added":"2022-05-25","id":"CVE-2015-6175","name":"Microsoft Windows Kernel Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-6175","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2015-4495","name":"Mozilla Firefox Security Feature Bypass Vulnerability","product":"Firefox","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-4495","vendor":"Mozilla"},{"added":"2022-05-25","id":"CVE-2015-2425","name":"Microsoft Internet Explorer Memory Corruption Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2425","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2015-2360","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2360","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2015-1769","name":"Microsoft Windows Mount Manager Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1769","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2015-1671","name":"Microsoft Windows Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1671","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2015-0310","name":"Adobe Flash Player ASLR Bypass Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0310","vendor":"Adobe"},{"added":"2022-05-25","id":"CVE-2015-0071","name":"Microsoft Internet Explorer ASLR Bypass Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0071","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2015-0016","name":"Microsoft Windows TS WebProxy Directory Traversal Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0016","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2014-8439","name":"Adobe Flash Player Dereferenced Pointer Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8439","vendor":"Adobe"},{"added":"2022-05-25","id":"CVE-2014-4148","name":"Microsoft Windows Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4148","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2014-4123","name":"Microsoft Internet Explorer Privilege Escalation Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4123","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2014-4077","name":"Microsoft IME Japanese Privilege Escalation Vulnerability","product":"Input Method Editor (IME) Japanese","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4077","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2014-3153","name":"Linux Kernel Privilege Escalation Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-3153","vendor":"Linux"},{"added":"2022-05-25","id":"CVE-2014-2817","name":"Microsoft Internet Explorer Privilege Escalation Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-2817","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2014-0546","name":"Adobe Reader and Acrobat Sandbox Bypass Vulnerability","product":"Reader and Acrobat","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0546","vendor":"Adobe"},{"added":"2022-05-25","id":"CVE-2013-7331","name":"Microsoft Internet Explorer Information Disclosure Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-7331","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2013-3993","name":"IBM InfoSphere BigInsights Invalid Input Vulnerability","product":"InfoSphere BigInsights","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3993","vendor":"IBM"},{"added":"2022-05-25","id":"CVE-2013-3896","name":"Microsoft Silverlight Information Disclosure Vulnerability","product":"Silverlight","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3896","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2013-2423","name":"Oracle JRE Unspecified Vulnerability","product":"Java Runtime Environment (JRE)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2423","vendor":"Oracle"},{"added":"2022-05-25","id":"CVE-2013-0431","name":"Oracle JRE Sandbox Bypass Vulnerability","product":"Java Runtime Environment (JRE)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0431","vendor":"Oracle"},{"added":"2022-05-25","id":"CVE-2013-0422","name":"Oracle JRE Remote Code Execution Vulnerability","product":"Java Runtime Environment (JRE)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0422","vendor":"Oracle"},{"added":"2022-05-25","id":"CVE-2013-0074","name":"Microsoft Silverlight Double Dereference Vulnerability","product":"Silverlight","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0074","vendor":"Microsoft"},{"added":"2022-05-25","id":"CVE-2012-1710","name":"Oracle Fusion Middleware Unspecified Vulnerability","product":"Fusion Middleware","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1710","vendor":"Oracle"},{"added":"2022-05-25","id":"CVE-2010-1428","name":"Red Hat JBoss Information Disclosure Vulnerability","product":"JBoss","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-1428","vendor":"Red Hat"},{"added":"2022-05-25","id":"CVE-2010-0840","name":"Oracle JRE Unspecified Vulnerability","product":"Java Runtime Environment (JRE)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0840","vendor":"Oracle"},{"added":"2022-05-25","id":"CVE-2010-0738","name":"Red Hat JBoss Authentication Bypass Vulnerability","product":"JBoss","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0738","vendor":"Red Hat"},{"added":"2022-05-24","id":"CVE-2018-8611","name":"Microsoft Windows Kernel Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8611","vendor":"Microsoft"},{"added":"2022-05-24","id":"CVE-2018-19953","name":"QNAP NAS File Station Cross-Site Scripting Vulnerability","product":"Network Attached Storage (NAS)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-19953","vendor":"QNAP"},{"added":"2022-05-24","id":"CVE-2018-19949","name":"QNAP NAS File Station Command Injection Vulnerability","product":"Network Attached Storage (NAS)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-19949","vendor":"QNAP"},{"added":"2022-05-24","id":"CVE-2018-19943","name":"QNAP NAS File Station Cross-Site Scripting Vulnerability","product":"Network Attached Storage (NAS)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-19943","vendor":"QNAP"},{"added":"2022-05-24","id":"CVE-2017-8543","name":"Microsoft Windows Search Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-8543","vendor":"Microsoft"},{"added":"2022-05-24","id":"CVE-2017-8291","name":"Artifex Ghostscript Type Confusion Vulnerability","product":"Ghostscript","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-8291","vendor":"Artifex"},{"added":"2022-05-24","id":"CVE-2017-18362","name":"Kaseya VSA SQL Injection Vulnerability","product":"Virtual System/Server Administrator (VSA)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-18362","vendor":"Kaseya"},{"added":"2022-05-24","id":"CVE-2017-0210","name":"Microsoft Internet Explorer Privilege Escalation Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0210","vendor":"Microsoft"},{"added":"2022-05-24","id":"CVE-2017-0149","name":"Microsoft Internet Explorer Memory Corruption Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0149","vendor":"Microsoft"},{"added":"2022-05-24","id":"CVE-2017-0147","name":"Microsoft Windows SMBv1 Information Disclosure Vulnerability","product":"SMBv1 server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0147","vendor":"Microsoft"},{"added":"2022-05-24","id":"CVE-2017-0022","name":"Microsoft XML Core Services Information Disclosure Vulnerability","product":"XML Core Services","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0022","vendor":"Microsoft"},{"added":"2022-05-24","id":"CVE-2017-0005","name":"Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0005","vendor":"Microsoft"},{"added":"2022-05-24","id":"CVE-2016-6367","name":"Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability","product":"Adaptive Security Appliance (ASA)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-6367","vendor":"Cisco"},{"added":"2022-05-24","id":"CVE-2016-6366","name":"Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability","product":"Adaptive Security Appliance (ASA)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-6366","vendor":"Cisco"},{"added":"2022-05-24","id":"CVE-2016-4657","name":"Apple iOS Webkit Memory Corruption Vulnerability","product":"iOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4657","vendor":"Apple"},{"added":"2022-05-24","id":"CVE-2016-4656","name":"Apple iOS Memory Corruption Vulnerability","product":"iOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4656","vendor":"Apple"},{"added":"2022-05-24","id":"CVE-2016-4655","name":"Apple iOS Information Disclosure Vulnerability","product":"iOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4655","vendor":"Apple"},{"added":"2022-05-24","id":"CVE-2016-3351","name":"Microsoft Internet Explorer and Edge Information Disclosure Vulnerability","product":"Internet Explorer and Edge","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3351","vendor":"Microsoft"},{"added":"2022-05-24","id":"CVE-2016-3298","name":"Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3298","vendor":"Microsoft"},{"added":"2022-05-24","id":"CVE-2016-0162","name":"Microsoft Internet Explorer Information Disclosure Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0162","vendor":"Microsoft"},{"added":"2022-05-23","id":"CVE-2022-20821","name":"Cisco IOS XR Open Port Vulnerability","product":"IOS XR","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-20821","vendor":"Cisco"},{"added":"2022-05-23","id":"CVE-2021-30883","name":"Apple Multiple Products Memory Corruption Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30883","vendor":"Apple"},{"added":"2022-05-23","id":"CVE-2021-1048","name":"Android Kernel Use-After-Free Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1048","vendor":"Android"},{"added":"2022-05-23","id":"CVE-2021-0920","name":"Android Kernel Race Condition Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-0920","vendor":"Android"},{"added":"2022-05-23","id":"CVE-2020-1027","name":"Microsoft Windows Kernel Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1027","vendor":"Microsoft"},{"added":"2022-05-23","id":"CVE-2020-0638","name":"Microsoft Update Notification Manager Privilege Escalation Vulnerability","product":"Update Notification Manager","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0638","vendor":"Microsoft"},{"added":"2022-05-23","id":"CVE-2019-8720","name":"WebKitGTK Memory Corruption Vulnerability","product":"WebKitGTK","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-8720","vendor":"WebKitGTK"},{"added":"2022-05-23","id":"CVE-2019-7287","name":"Apple iOS Memory Corruption Vulnerability","product":"iOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7287","vendor":"Apple"},{"added":"2022-05-23","id":"CVE-2019-7286","name":"Apple Multiple Products Memory Corruption Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7286","vendor":"Apple"},{"added":"2022-05-23","id":"CVE-2019-5786","name":"Google Chrome Blink Use-After-Free Vulnerability","product":"Chrome Blink","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-5786","vendor":"Google"},{"added":"2022-05-23","id":"CVE-2019-18426","name":"WhatsApp Cross-Site Scripting Vulnerability","product":"WhatsApp","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-18426","vendor":"Meta Platforms"},{"added":"2022-05-23","id":"CVE-2019-1385","name":"Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1385","vendor":"Microsoft"},{"added":"2022-05-23","id":"CVE-2019-13720","name":"Google Chrome WebAudio Use-After-Free Vulnerability","product":"Chrome WebAudio","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-13720","vendor":"Google"},{"added":"2022-05-23","id":"CVE-2019-11708","name":"Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","product":"Firefox and Thunderbird","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11708","vendor":"Mozilla"},{"added":"2022-05-23","id":"CVE-2019-11707","name":"Mozilla Firefox and Thunderbird Type Confusion Vulnerability","product":"Firefox and Thunderbird","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11707","vendor":"Mozilla"},{"added":"2022-05-23","id":"CVE-2019-1130","name":"Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1130","vendor":"Microsoft"},{"added":"2022-05-23","id":"CVE-2019-0880","name":"Microsoft Windows Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0880","vendor":"Microsoft"},{"added":"2022-05-23","id":"CVE-2019-0703","name":"Microsoft Windows SMB Information Disclosure Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0703","vendor":"Microsoft"},{"added":"2022-05-23","id":"CVE-2019-0676","name":"Microsoft Internet Explorer Information Disclosure Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0676","vendor":"Microsoft"},{"added":"2022-05-23","id":"CVE-2018-8589","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8589","vendor":"Microsoft"},{"added":"2022-05-23","id":"CVE-2018-5002","name":"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-5002","vendor":"Adobe"},{"added":"2022-05-16","id":"CVE-2022-30525","name":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","product":"Multiple Firewalls","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-30525","vendor":"Zyxel"},{"added":"2022-05-16","id":"CVE-2022-22947","name":"VMware Spring Cloud Gateway Code Injection Vulnerability","product":"Spring Cloud Gateway","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22947","vendor":"VMware"},{"added":"2022-05-10","id":"CVE-2022-1388","name":"F5 BIG-IP Missing Authentication Vulnerability","product":"BIG-IP","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-1388","vendor":"F5"},{"added":"2022-05-04","id":"CVE-2021-1789","name":"Apple Multiple Products Type Confusion Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1789","vendor":"Apple"},{"added":"2022-05-04","id":"CVE-2019-8506","name":"Apple Multiple Products Type Confusion Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-8506","vendor":"Apple"},{"added":"2022-05-04","id":"CVE-2014-4113","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4113","vendor":"Microsoft"},{"added":"2022-05-04","id":"CVE-2014-0322","name":"Microsoft Internet Explorer Use-After-Free Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0322","vendor":"Microsoft"},{"added":"2022-05-04","id":"CVE-2014-0160","name":"OpenSSL Information Disclosure Vulnerability","product":"OpenSSL","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0160","vendor":"OpenSSL"},{"added":"2022-04-25","id":"CVE-2022-29464","name":"WSO2 Multiple Products Unrestrictive Upload of File Vulnerability","product":"Multiple Products","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-29464","vendor":"WSO2"},{"added":"2022-04-25","id":"CVE-2022-26904","name":"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26904","vendor":"Microsoft"},{"added":"2022-04-25","id":"CVE-2022-21919","name":"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21919","vendor":"Microsoft"},{"added":"2022-04-25","id":"CVE-2022-0847","name":"Linux Kernel Privilege Escalation Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0847","vendor":"Linux"},{"added":"2022-04-25","id":"CVE-2021-41357","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-41357","vendor":"Microsoft"},{"added":"2022-04-25","id":"CVE-2021-40450","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40450","vendor":"Microsoft"},{"added":"2022-04-25","id":"CVE-2019-1003029","name":"Jenkins Script Security Plugin Sandbox Bypass Vulnerability","product":"Script Security Plugin","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1003029","vendor":"Jenkins"},{"added":"2022-04-19","id":"CVE-2022-22718","name":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22718","vendor":"Microsoft"},{"added":"2022-04-19","id":"CVE-2019-3568","name":"WhatsApp VOIP Stack Buffer Overflow Vulnerability","product":"WhatsApp","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-3568","vendor":"Meta Platforms"},{"added":"2022-04-19","id":"CVE-2018-6882","name":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-6882","vendor":"Synacor"},{"added":"2022-04-15","id":"CVE-2022-22960","name":"VMware Multiple Products Privilege Escalation Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22960","vendor":"VMware"},{"added":"2022-04-15","id":"CVE-2022-1364","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-1364","vendor":"Google"},{"added":"2022-04-15","id":"CVE-2019-3929","name":"Crestron Multiple Products Command Injection Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-3929","vendor":"Crestron"},{"added":"2022-04-15","id":"CVE-2019-16057","name":"D-Link DNS-320 Remote Code Execution Vulnerability","product":"DNS-320 Storage Device","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-16057","vendor":"D-Link"},{"added":"2022-04-15","id":"CVE-2018-7841","name":"Schneider Electric U.motion Builder SQL Injection Vulnerability","product":"U.motion Builder","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-7841","vendor":"Schneider Electric"},{"added":"2022-04-15","id":"CVE-2016-4523","name":"Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability","product":"VTScada (formerly VTS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4523","vendor":"Trihedral"},{"added":"2022-04-15","id":"CVE-2014-0780","name":"InduSoft Web Studio NTWebServer Directory Traversal Vulnerability","product":"Web Studio","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0780","vendor":"InduSoft"},{"added":"2022-04-15","id":"CVE-2010-5330","name":"Ubiquiti AirOS Command Injection Vulnerability","product":"AirOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-5330","vendor":"Ubiquiti"},{"added":"2022-04-15","id":"CVE-2007-3010","name":"Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability","product":"OmniPCX Enterprise","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2007-3010","vendor":"Alcatel"},{"added":"2022-04-14","id":"CVE-2022-22954","name":"VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability","product":"Workspace ONE Access and Identity Manager","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22954","vendor":"VMware"},{"added":"2022-04-13","id":"CVE-2022-24521","name":"Microsoft Windows CLFS Driver Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24521","vendor":"Microsoft"},{"added":"2022-04-13","id":"CVE-2018-7602","name":"Drupal Core Remote Code Execution Vulnerability","product":"Core","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-7602","vendor":"Drupal"},{"added":"2022-04-13","id":"CVE-2018-20753","name":"Kaseya VSA Remote Code Execution Vulnerability","product":"Virtual System/Server Administrator (VSA)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-20753","vendor":"Kaseya"},{"added":"2022-04-13","id":"CVE-2015-5123","name":"Adobe Flash Player Use-After-Free Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5123","vendor":"Adobe"},{"added":"2022-04-13","id":"CVE-2015-5122","name":"Adobe Flash Player Use-After-Free Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5122","vendor":"Adobe"},{"added":"2022-04-13","id":"CVE-2015-3113","name":"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3113","vendor":"Adobe"},{"added":"2022-04-13","id":"CVE-2015-2502","name":"Microsoft Internet Explorer Memory Corruption Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2502","vendor":"Microsoft"},{"added":"2022-04-13","id":"CVE-2015-0313","name":"Adobe Flash Player Use-After-Free Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0313","vendor":"Adobe"},{"added":"2022-04-13","id":"CVE-2015-0311","name":"Adobe Flash Player Remote Code Execution Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0311","vendor":"Adobe"},{"added":"2022-04-13","id":"CVE-2014-9163","name":"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-9163","vendor":"Adobe"},{"added":"2022-04-11","id":"CVE-2022-23176","name":"WatchGuard Firebox and XTM Privilege Escalation Vulnerability","product":"Firebox and XTM","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-23176","vendor":"WatchGuard"},{"added":"2022-04-11","id":"CVE-2021-42287","name":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","product":"Active Directory","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-42287","vendor":"Microsoft"},{"added":"2022-04-11","id":"CVE-2021-42278","name":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","product":"Active Directory","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-42278","vendor":"Microsoft"},{"added":"2022-04-11","id":"CVE-2021-39793","name":"Google Pixel Out-of-Bounds Write Vulnerability","product":"Pixel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-39793","vendor":"Google"},{"added":"2022-04-11","id":"CVE-2021-27852","name":"Checkbox Survey Deserialization of Untrusted Data Vulnerability","product":"Checkbox Survey","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27852","vendor":"Checkbox"},{"added":"2022-04-11","id":"CVE-2021-22600","name":"Linux Kernel Privilege Escalation Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22600","vendor":"Linux"},{"added":"2022-04-11","id":"CVE-2020-2509","name":"QNAP Network-Attached Storage (NAS) Command Injection Vulnerability","product":"QNAP Network-Attached Storage (NAS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2509","vendor":"QNAP"},{"added":"2022-04-11","id":"CVE-2017-11317","name":"Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability","product":"User Interface (UI) for ASP.NET AJAX","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11317","vendor":"Telerik"},{"added":"2022-04-06","id":"CVE-2021-3156","name":"Sudo Heap-Based Buffer Overflow Vulnerability","product":"Sudo","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3156","vendor":"Sudo"},{"added":"2022-04-06","id":"CVE-2021-31166","name":"Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability","product":"HTTP Protocol Stack","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31166","vendor":"Microsoft"},{"added":"2022-04-06","id":"CVE-2017-0148","name":"Microsoft SMBv1 Server Remote Code Execution Vulnerability","product":"SMBv1 server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0148","vendor":"Microsoft"},{"added":"2022-04-04","id":"CVE-2022-22965","name":"Spring Framework JDK 9+ Remote Code Execution Vulnerability","product":"Spring Framework","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22965","vendor":"VMware"},{"added":"2022-04-04","id":"CVE-2022-22675","name":"Apple macOS Out-of-Bounds Write Vulnerability","product":"macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22675","vendor":"Apple"},{"added":"2022-04-04","id":"CVE-2022-22674","name":"Apple macOS Out-of-Bounds Read Vulnerability","product":"macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22674","vendor":"Apple"},{"added":"2022-04-04","id":"CVE-2021-45382","name":"D-Link Multiple Routers Remote Code Execution Vulnerability","product":"Multiple Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-45382","vendor":"D-Link"},{"added":"2022-03-31","id":"CVE-2022-26871","name":"Trend Micro Apex Central Arbitrary File Upload Vulnerability","product":"Apex Central","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26871","vendor":"Trend Micro"},{"added":"2022-03-31","id":"CVE-2022-1040","name":"Sophos Firewall Authentication Bypass Vulnerability","product":"Firewall","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-1040","vendor":"Sophos"},{"added":"2022-03-31","id":"CVE-2021-34484","name":"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34484","vendor":"Microsoft"},{"added":"2022-03-31","id":"CVE-2021-28799","name":"QNAP NAS Improper Authorization Vulnerability","product":"Network Attached Storage (NAS)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28799","vendor":"QNAP"},{"added":"2022-03-31","id":"CVE-2021-21551","name":"Dell dbutil Driver Insufficient Access Control Vulnerability","product":"dbutil Driver","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21551","vendor":"Dell"},{"added":"2022-03-31","id":"CVE-2018-10562","name":"Dasan GPON Routers Command Injection Vulnerability","product":"Gigabit Passive Optical Network (GPON) Routers","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-10562","vendor":"Dasan"},{"added":"2022-03-31","id":"CVE-2018-10561","name":"Dasan GPON Routers Authentication Bypass Vulnerability","product":"Gigabit Passive Optical Network (GPON) Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-10561","vendor":"Dasan"},{"added":"2022-03-28","id":"CVE-2022-1096","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-1096","vendor":"Google"},{"added":"2022-03-28","id":"CVE-2022-0543","name":"Debian-specific Redis Server Lua Sandbox Escape Vulnerability","product":"Debian-specific Redis Servers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0543","vendor":"Redis"},{"added":"2022-03-28","id":"CVE-2021-38646","name":"Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability","product":"Office","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-38646","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2021-34486","name":"Microsoft Windows Event Tracing Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34486","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2021-26085","name":"Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability","product":"Confluence Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26085","vendor":"Atlassian"},{"added":"2022-03-28","id":"CVE-2021-20028","name":"SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability","product":"Secure Remote Access (SRA)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-20028","vendor":"SonicWall"},{"added":"2022-03-28","id":"CVE-2019-7483","name":"SonicWall SMA100 Directory Traversal Vulnerability","product":"SMA100","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7483","vendor":"SonicWall"},{"added":"2022-03-28","id":"CVE-2018-8440","name":"Microsoft Windows Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8440","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2018-8406","name":"Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability","product":"DirectX Graphics Kernel (DXGKRNL)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8406","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2018-8405","name":"Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability","product":"DirectX Graphics Kernel (DXGKRNL)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8405","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2017-0213","name":"Microsoft Windows Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0213","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2017-0059","name":"Microsoft Internet Explorer Information Disclosure Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0059","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2017-0037","name":"Microsoft Edge and Internet Explorer Type Confusion Vulnerability","product":"Edge and Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0037","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2016-7201","name":"Microsoft Edge Memory Corruption Vulnerability","product":"Edge","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7201","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2016-7200","name":"Microsoft Edge Memory Corruption Vulnerability","product":"Edge","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7200","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2016-0189","name":"Microsoft Internet Explorer Memory Corruption Vulnerability","product":"Internet Explorer","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0189","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2016-0151","name":"Microsoft Windows CSRSS Security Feature Bypass Vulnerability","product":"Client-Server Run-time Subsystem (CSRSS)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0151","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2016-0040","name":"Microsoft Windows Kernel Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0040","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2015-2426","name":"Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2426","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2015-2419","name":"Microsoft Internet Explorer Memory Corruption Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2419","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2015-1770","name":"Microsoft Office Uninitialized Memory Use Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1770","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2013-3660","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3660","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2013-2729","name":"Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","product":"Reader and Acrobat","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2729","vendor":"Adobe"},{"added":"2022-03-28","id":"CVE-2013-2551","name":"Microsoft Internet Explorer Use-After-Free Vulnerability","product":"Internet Explorer","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2551","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2013-2465","name":"Oracle Java SE Unspecified Vulnerability","product":"Java SE","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2465","vendor":"Oracle"},{"added":"2022-03-28","id":"CVE-2013-1690","name":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","product":"Firefox and Thunderbird","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1690","vendor":"Mozilla"},{"added":"2022-03-28","id":"CVE-2012-5076","name":"Oracle Java SE Sandbox Bypass Vulnerability","product":"Java SE","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-5076","vendor":"Oracle"},{"added":"2022-03-28","id":"CVE-2012-2539","name":"Microsoft Word Remote Code Execution Vulnerability","product":"Word","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-2539","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2012-2034","name":"Adobe Flash Player Memory Corruption Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-2034","vendor":"Adobe"},{"added":"2022-03-28","id":"CVE-2012-0518","name":"Oracle Fusion Middleware Unspecified Vulnerability","product":"Fusion Middleware","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0518","vendor":"Oracle"},{"added":"2022-03-28","id":"CVE-2011-2005","name":"Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability","product":"Ancillary Function Driver (afd.sys)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-2005","vendor":"Microsoft"},{"added":"2022-03-28","id":"CVE-2010-4398","name":"Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-4398","vendor":"Microsoft"},{"added":"2022-03-25","id":"CVE-2022-26318","name":"WatchGuard Firebox and XTM Appliances Arbitrary Code Execution","product":"Firebox and XTM Appliances","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26318","vendor":"WatchGuard"},{"added":"2022-03-25","id":"CVE-2022-26143","name":"MiCollab, MiVoice Business Express Access Control Vulnerability","product":"MiCollab, MiVoice Business Express","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26143","vendor":"Mitel"},{"added":"2022-03-25","id":"CVE-2022-21999","name":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21999","vendor":"Microsoft"},{"added":"2022-03-25","id":"CVE-2021-42237","name":"Sitecore XP Remote Command Execution Vulnerability","product":"XP","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-42237","vendor":"Sitecore"},{"added":"2022-03-25","id":"CVE-2021-22941","name":"Citrix ShareFile Improper Access Control Vulnerability","product":"ShareFile","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22941","vendor":"Citrix"},{"added":"2022-03-25","id":"CVE-2020-9377","name":"D-Link DIR-610 Devices Remote Command Execution","product":"DIR-610 Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9377","vendor":"D-Link"},{"added":"2022-03-25","id":"CVE-2020-9054","name":"Zyxel Multiple NAS Devices OS Command Injection Vulnerability","product":"Multiple Network-Attached Storage (NAS) Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9054","vendor":"Zyxel"},{"added":"2022-03-25","id":"CVE-2020-7247","name":"OpenSMTPD Remote Code Execution Vulnerability","product":"OpenSMTPD","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-7247","vendor":"OpenBSD"},{"added":"2022-03-25","id":"CVE-2020-5410","name":"VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability","product":"Spring Cloud Configuration (Config) Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-5410","vendor":"VMware Tanzu"},{"added":"2022-03-25","id":"CVE-2020-25223","name":"Sophos SG UTM Remote Code Execution Vulnerability","product":"SG UTM","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-25223","vendor":"Sophos"},{"added":"2022-03-25","id":"CVE-2020-2506","name":"QNAP Helpdesk Improper Access Control Vulnerability","product":"Helpdesk","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2506","vendor":"QNAP Systems"},{"added":"2022-03-25","id":"CVE-2020-2021","name":"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","product":"PAN-OS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2021","vendor":"Palo Alto Networks"},{"added":"2022-03-25","id":"CVE-2020-1956","name":"Apache Kylin OS Command Injection Vulnerability","product":"Kylin","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1956","vendor":"Apache"},{"added":"2022-03-25","id":"CVE-2020-1631","name":"Juniper Junos OS Path Traversal Vulnerability","product":"Junos OS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1631","vendor":"Juniper"},{"added":"2022-03-25","id":"CVE-2019-6340","name":"Drupal Core Remote Code Execution Vulnerability","product":"Core","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-6340","vendor":"Drupal"},{"added":"2022-03-25","id":"CVE-2019-2616","name":"Oracle BI Publisher Unauthorized Access Vulnerability","product":"BI Publisher (Formerly XML Publisher)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-2616","vendor":"Oracle"},{"added":"2022-03-25","id":"CVE-2019-16920","name":"D-Link Multiple Routers Command Injection Vulnerability","product":"Multiple Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-16920","vendor":"D-Link"},{"added":"2022-03-25","id":"CVE-2019-15107","name":"Webmin Command Injection Vulnerability","product":"Webmin","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-15107","vendor":"Webmin"},{"added":"2022-03-25","id":"CVE-2019-12991","name":"Citrix SD-WAN and NetScaler Command Injection Vulnerability","product":"SD-WAN and NetScaler","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-12991","vendor":"Citrix"},{"added":"2022-03-25","id":"CVE-2019-12989","name":"Citrix SD-WAN and NetScaler SQL Injection Vulnerability","product":"SD-WAN and NetScaler","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-12989","vendor":"Citrix"},{"added":"2022-03-25","id":"CVE-2019-11043","name":"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","product":"FastCGI Process Manager (FPM)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11043","vendor":"PHP"},{"added":"2022-03-25","id":"CVE-2019-10068","name":"Kentico Xperience Deserialization of Untrusted Data Vulnerability","product":"Xperience","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-10068","vendor":"Kentico"},{"added":"2022-03-25","id":"CVE-2019-1003030","name":"Jenkins Matrix Project Plugin Remote Code Execution Vulnerability","product":"Matrix Project Plugin","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1003030","vendor":"Jenkins"},{"added":"2022-03-25","id":"CVE-2019-0903","name":"Microsoft GDI Remote Code Execution Vulnerability","product":"Graphics Device Interface (GDI)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0903","vendor":"Microsoft"},{"added":"2022-03-25","id":"CVE-2018-8414","name":"Microsoft Windows Shell Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8414","vendor":"Microsoft"},{"added":"2022-03-25","id":"CVE-2018-8373","name":"Microsoft Scripting Engine Memory Corruption Vulnerability","product":"Internet Explorer Scripting Engine","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8373","vendor":"Microsoft"},{"added":"2022-03-25","id":"CVE-2018-6961","name":"VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability","product":"SD-WAN Edge","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-6961","vendor":"VMware"},{"added":"2022-03-25","id":"CVE-2018-14839","name":"LG N1A1 NAS Remote Command Execution Vulnerability","product":"N1A1 NAS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14839","vendor":"LG"},{"added":"2022-03-25","id":"CVE-2018-1273","name":"VMware Tanzu Spring Data Commons Property Binder Vulnerability","product":"Spring Data Commons","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-1273","vendor":"VMware Tanzu"},{"added":"2022-03-25","id":"CVE-2018-11138","name":"Quest KACE System Management Appliance Remote Command Execution Vulnerability","product":"KACE System Management Appliance","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-11138","vendor":"Quest"},{"added":"2022-03-25","id":"CVE-2018-0147","name":"Cisco Secure Access Control System Java Deserialization Vulnerability","product":"Secure Access Control System (ACS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0147","vendor":"Cisco"},{"added":"2022-03-25","id":"CVE-2018-0125","name":"Cisco VPN Routers Remote Code Execution Vulnerability","product":"VPN Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0125","vendor":"Cisco"},{"added":"2022-03-25","id":"CVE-2017-6334","name":"NETGEAR DGN2200 Devices OS Command Injection Vulnerability","product":"DGN2200 Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6334","vendor":"NETGEAR"},{"added":"2022-03-25","id":"CVE-2017-6316","name":"Citrix Multiple Products Remote Code Execution Vulnerability","product":"NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6316","vendor":"Citrix"},{"added":"2022-03-25","id":"CVE-2017-3881","name":"Cisco IOS and IOS XE Remote Code Execution Vulnerability","product":"IOS and IOS XE","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-3881","vendor":"Cisco"},{"added":"2022-03-25","id":"CVE-2017-12617","name":"Apache Tomcat Remote Code Execution Vulnerability","product":"Tomcat","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12617","vendor":"Apache"},{"added":"2022-03-25","id":"CVE-2017-12615","name":"Apache Tomcat on Windows Remote Code Execution Vulnerability","product":"Tomcat","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12615","vendor":"Apache"},{"added":"2022-03-25","id":"CVE-2017-0146","name":"Microsoft Windows SMB Remote Code Execution Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0146","vendor":"Microsoft"},{"added":"2022-03-25","id":"CVE-2016-7892","name":"Adobe Flash Player Use-After-Free Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7892","vendor":"Adobe"},{"added":"2022-03-25","id":"CVE-2016-4171","name":"Adobe Flash Player Remote Code Execution Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4171","vendor":"Adobe"},{"added":"2022-03-25","id":"CVE-2016-1555","name":"NETGEAR Multiple WAP Devices Command Injection Vulnerability","product":"Wireless Access Point (WAP) Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-1555","vendor":"NETGEAR"},{"added":"2022-03-25","id":"CVE-2016-11021","name":"D-Link DCS-930L Devices OS Command Injection Vulnerability","product":"DCS-930L Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-11021","vendor":"D-Link"},{"added":"2022-03-25","id":"CVE-2016-10174","name":"NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability","product":"WNR2000v5 Router","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-10174","vendor":"NETGEAR"},{"added":"2022-03-25","id":"CVE-2016-0752","name":"Ruby on Rails Directory Traversal Vulnerability","product":"Ruby on Rails","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0752","vendor":"Rails"},{"added":"2022-03-25","id":"CVE-2015-4068","name":"Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability","product":"Unified Data Protection (UDP)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-4068","vendor":"Arcserve"},{"added":"2022-03-25","id":"CVE-2015-3035","name":"TP-Link Multiple Archer Devices Directory Traversal Vulnerability","product":"Multiple Archer Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3035","vendor":"TP-Link"},{"added":"2022-03-25","id":"CVE-2015-1427","name":"Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability","product":"Elasticsearch","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1427","vendor":"Elastic"},{"added":"2022-03-25","id":"CVE-2015-1187","name":"D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability","product":"Multiple Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1187","vendor":"D-Link and TRENDnet"},{"added":"2022-03-25","id":"CVE-2015-0666","name":"Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability","product":"Prime Data Center Network Manager (DCNM)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0666","vendor":"Cisco"},{"added":"2022-03-25","id":"CVE-2014-6332","name":"Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-6332","vendor":"Microsoft"},{"added":"2022-03-25","id":"CVE-2014-6324","name":"Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability","product":"Kerberos Key Distribution Center (KDC)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-6324","vendor":"Microsoft"},{"added":"2022-03-25","id":"CVE-2014-6287","name":"Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability","product":"HTTP File Server (HFS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-6287","vendor":"Rejetto"},{"added":"2022-03-25","id":"CVE-2014-3120","name":"Elasticsearch Remote Code Execution Vulnerability","product":"Elasticsearch","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-3120","vendor":"Elastic"},{"added":"2022-03-25","id":"CVE-2014-0130","name":"Ruby on Rails Directory Traversal Vulnerability","product":"Ruby on Rails","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0130","vendor":"Rails"},{"added":"2022-03-25","id":"CVE-2013-5223","name":"D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability","product":"DSL-2760U","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-5223","vendor":"D-Link"},{"added":"2022-03-25","id":"CVE-2013-4810","name":"HP Multiple Products Remote Code Execution Vulnerability","product":"ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-4810","vendor":"Hewlett Packard (HP)"},{"added":"2022-03-25","id":"CVE-2013-2251","name":"Apache Struts Improper Input Validation Vulnerability","product":"Struts","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2251","vendor":"Apache"},{"added":"2022-03-25","id":"CVE-2012-1823","name":"PHP-CGI Query String Parameter Vulnerability","product":"PHP","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1823","vendor":"PHP"},{"added":"2022-03-25","id":"CVE-2010-4345","name":"Exim Privilege Escalation Vulnerability","product":"Exim","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-4345","vendor":"Exim"},{"added":"2022-03-25","id":"CVE-2010-4344","name":"Exim Heap-Based Buffer Overflow Vulnerability","product":"Exim","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-4344","vendor":"Exim"},{"added":"2022-03-25","id":"CVE-2010-3035","name":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","product":"IOS XR","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-3035","vendor":"Cisco"},{"added":"2022-03-25","id":"CVE-2010-2861","name":"Adobe ColdFusion Directory Traversal Vulnerability","product":"ColdFusion","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-2861","vendor":"Adobe"},{"added":"2022-03-25","id":"CVE-2009-2055","name":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","product":"IOS XR","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-2055","vendor":"Cisco"},{"added":"2022-03-25","id":"CVE-2009-1151","name":"phpMyAdmin Remote Code Execution Vulnerability","product":"phpMyAdmin","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-1151","vendor":"phpMyAdmin"},{"added":"2022-03-25","id":"CVE-2009-0927","name":"Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability","product":"Reader and Acrobat","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0927","vendor":"Adobe"},{"added":"2022-03-25","id":"CVE-2005-2773","name":"HP OpenView Network Node Manager Remote Code Execution Vulnerability","product":"OpenView Network Node Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2005-2773","vendor":"Hewlett Packard (HP)"},{"added":"2022-03-15","id":"CVE-2020-5135","name":"SonicWall SonicOS Buffer Overflow Vulnerability","product":"SonicOS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-5135","vendor":"SonicWall"},{"added":"2022-03-15","id":"CVE-2019-1405","name":"Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1405","vendor":"Microsoft"},{"added":"2022-03-15","id":"CVE-2019-1322","name":"Microsoft Windows Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1322","vendor":"Microsoft"},{"added":"2022-03-15","id":"CVE-2019-1315","name":"Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1315","vendor":"Microsoft"},{"added":"2022-03-15","id":"CVE-2019-1253","name":"Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1253","vendor":"Microsoft"},{"added":"2022-03-15","id":"CVE-2019-1132","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1132","vendor":"Microsoft"},{"added":"2022-03-15","id":"CVE-2019-1129","name":"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1129","vendor":"Microsoft"},{"added":"2022-03-15","id":"CVE-2019-1069","name":"Microsoft Task Scheduler Privilege Escalation Vulnerability","product":"Task Scheduler","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1069","vendor":"Microsoft"},{"added":"2022-03-15","id":"CVE-2019-1064","name":"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1064","vendor":"Microsoft"},{"added":"2022-03-15","id":"CVE-2019-0841","name":"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0841","vendor":"Microsoft"},{"added":"2022-03-15","id":"CVE-2019-0543","name":"Microsoft Windows Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0543","vendor":"Microsoft"},{"added":"2022-03-15","id":"CVE-2018-8120","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8120","vendor":"Microsoft"},{"added":"2022-03-15","id":"CVE-2017-0101","name":"Microsoft Windows Transaction Manager Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0101","vendor":"Microsoft"},{"added":"2022-03-15","id":"CVE-2016-3309","name":"Microsoft Windows Kernel Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3309","vendor":"Microsoft"},{"added":"2022-03-15","id":"CVE-2015-2546","name":"Microsoft Win32k Memory Corruption Vulnerability","product":"Win32k","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2546","vendor":"Microsoft"},{"added":"2022-03-07","id":"CVE-2022-26486","name":"Mozilla Firefox Use-After-Free Vulnerability","product":"Firefox","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26486","vendor":"Mozilla"},{"added":"2022-03-07","id":"CVE-2022-26485","name":"Mozilla Firefox Use-After-Free Vulnerability","product":"Firefox","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26485","vendor":"Mozilla"},{"added":"2022-03-07","id":"CVE-2021-21973","name":"VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability","product":"vCenter Server and Cloud Foundation","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21973","vendor":"VMware"},{"added":"2022-03-07","id":"CVE-2020-8218","name":"Pulse Connect Secure Code Injection Vulnerability","product":"Pulse Connect Secure","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8218","vendor":"Pulse Secure"},{"added":"2022-03-07","id":"CVE-2019-11581","name":"Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability","product":"Jira Server and Data Center","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11581","vendor":"Atlassian"},{"added":"2022-03-07","id":"CVE-2017-6077","name":"NETGEAR DGN2200 Remote Code Execution Vulnerability","product":"Wireless Router DGN2200","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6077","vendor":"NETGEAR"},{"added":"2022-03-07","id":"CVE-2016-6277","name":"NETGEAR Multiple Routers Remote Code Execution Vulnerability","product":"Multiple Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-6277","vendor":"NETGEAR"},{"added":"2022-03-07","id":"CVE-2013-0631","name":"Adobe ColdFusion Information Disclosure Vulnerability","product":"ColdFusion","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0631","vendor":"Adobe"},{"added":"2022-03-07","id":"CVE-2013-0629","name":"Adobe ColdFusion Directory Traversal Vulnerability","product":"ColdFusion","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0629","vendor":"Adobe"},{"added":"2022-03-07","id":"CVE-2013-0625","name":"Adobe ColdFusion Authentication Bypass Vulnerability","product":"ColdFusion","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0625","vendor":"Adobe"},{"added":"2022-03-07","id":"CVE-2009-3960","name":"Adobe BlazeDS Information Disclosure Vulnerability","product":"BlazeDS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3960","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2022-20708","name":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-20708","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2022-20703","name":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-20703","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2022-20701","name":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-20701","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2022-20700","name":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-20700","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2022-20699","name":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-20699","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2021-41379","name":"Microsoft Windows Installer Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-41379","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2020-1938","name":"Apache Tomcat Improper Privilege Management Vulnerability","product":"Tomcat","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1938","vendor":"Apache"},{"added":"2022-03-03","id":"CVE-2020-11899","name":"Treck TCP/IP stack Out-of-Bounds Read Vulnerability","product":"IPv6","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-11899","vendor":"Treck TCP/IP stack"},{"added":"2022-03-03","id":"CVE-2019-16928","name":"Exim Out-of-bounds Write Vulnerability","product":"Exim Internet Mailer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-16928","vendor":"Exim"},{"added":"2022-03-03","id":"CVE-2019-1652","name":"Cisco Small Business Routers Improper Input Validation Vulnerability","product":"Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1652","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2019-1297","name":"Microsoft Excel Remote Code Execution Vulnerability","product":"Excel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1297","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2018-8581","name":"Microsoft Exchange Server Privilege Escalation Vulnerability","product":"Exchange Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8581","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2018-8298","name":"ChakraCore Scripting Engine Type Confusion Vulnerability","product":"ChakraCore scripting engine","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8298","vendor":"ChakraCore"},{"added":"2022-03-03","id":"CVE-2018-0180","name":"Cisco IOS Software Denial-of-Service Vulnerability","product":"IOS Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0180","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2018-0179","name":"Cisco IOS Software Denial-of-Service Vulnerability","product":"IOS Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0179","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2018-0175","name":"Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","product":"IOS, XR, and XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0175","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2018-0174","name":"Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability","product":"IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0174","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2018-0173","name":"Cisco IOS and IOS XE Software Improper Input Validation Vulnerability","product":"IOS and IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0173","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2018-0172","name":"Cisco IOS and IOS XE Software Improper Input Validation Vulnerability","product":"IOS and IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0172","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2018-0167","name":"Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","product":"IOS, XR, and XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0167","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2018-0161","name":"Cisco IOS Software Resource Management Errors Vulnerability","product":"IOS Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0161","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2018-0159","name":"Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability","product":"IOS Software and Cisco IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0159","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2018-0158","name":"Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability","product":"IOS Software and Cisco IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0158","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2018-0156","name":"Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability","product":"IOS Software and Cisco IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0156","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2018-0155","name":"Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability","product":"Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0155","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2018-0154","name":"Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability","product":"IOS Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0154","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2018-0151","name":"Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability","product":"IOS and IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0151","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-8540","name":"Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability","product":"Malware Protection Engine","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-8540","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2017-6744","name":"Cisco IOS Software SNMP Remote Code Execution Vulnerability","product":"IOS software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6744","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-6743","name":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","product":"IOS and IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6743","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-6740","name":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","product":"IOS and IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6740","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-6739","name":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","product":"IOS and IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6739","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-6738","name":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","product":"IOS and IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6738","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-6737","name":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","product":"IOS and IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6737","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-6736","name":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","product":"IOS and IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6736","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-6663","name":"Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability","product":"IOS and IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6663","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-6627","name":"Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability","product":"IOS and IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6627","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-12319","name":"Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability","product":"IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12319","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-12240","name":"Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability","product":"IOS and IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12240","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-12238","name":"Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability","product":"Catalyst 6800 Series Switches","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12238","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-12237","name":"Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability","product":"IOS and IOS XE Software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12237","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-12235","name":"Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability","product":"IOS software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12235","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-12234","name":"Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability","product":"IOS software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12234","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-12233","name":"Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability","product":"IOS software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12233","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-12232","name":"Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability","product":"IOS software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12232","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-12231","name":"Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability","product":"IOS software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12231","vendor":"Cisco"},{"added":"2022-03-03","id":"CVE-2017-11826","name":"Microsoft Office Remote Code Execution Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11826","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2017-11292","name":"Adobe Flash Player Type Confusion Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11292","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2017-0261","name":"Microsoft Office Use-After-Free Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0261","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2017-0001","name":"Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability","product":"Graphics Device Interface (GDI)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0001","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2016-8562","name":"Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability","product":"SIMATIC CP","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-8562","vendor":"Siemens"},{"added":"2022-03-03","id":"CVE-2016-7855","name":"Adobe Flash Player Use-After-Free Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7855","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2016-7262","name":"Microsoft Office Security Feature Bypass Vulnerability","product":"Excel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7262","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2016-7193","name":"Microsoft Office Memory Corruption Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7193","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2016-5195","name":"Linux Kernel Race Condition Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-5195","vendor":"Linux"},{"added":"2022-03-03","id":"CVE-2016-4117","name":"Adobe Flash Player Arbitrary Code Execution Vulnerability","product":"Flash Player","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4117","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2016-1019","name":"Adobe Flash Player Arbitrary Code Execution Vulnerability","product":"Flash Player","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-1019","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2016-0099","name":"Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0099","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2015-7645","name":"Adobe Flash Player Arbitrary Code Execution Vulnerability","product":"Flash Player","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-7645","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2015-5119","name":"Adobe Flash Player Use-After-Free Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5119","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2015-4902","name":"Oracle Java SE Integrity Check Vulnerability","product":"Java SE","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-4902","vendor":"Oracle"},{"added":"2022-03-03","id":"CVE-2015-3043","name":"Adobe Flash Player Memory Corruption Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3043","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2015-2590","name":"Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","product":"Java SE","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2590","vendor":"Oracle"},{"added":"2022-03-03","id":"CVE-2015-2545","name":"Microsoft Office Malformed EPS File Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2545","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2015-2424","name":"Microsoft PowerPoint Memory Corruption Vulnerability","product":"PowerPoint","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2424","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2015-2387","name":"Microsoft ATM Font Driver Privilege Escalation Vulnerability","product":"ATM Font Driver","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2387","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2015-1701","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1701","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2015-1642","name":"Microsoft Office Memory Corruption Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1642","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2014-4114","name":"Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4114","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2014-0496","name":"Adobe Reader and Acrobat Use-After-Free Vulnerability","product":"Reader and Acrobat","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0496","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2013-5065","name":"Microsoft Windows Kernel Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-5065","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2013-3897","name":"Microsoft Internet Explorer Use-After-Free Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3897","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2013-3346","name":"Adobe Reader and Acrobat Memory Corruption Vulnerability","product":"Reader and Acrobat","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3346","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2013-1675","name":"Mozilla Firefox Information Disclosure Vulnerability","product":"Firefox","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1675","vendor":"Mozilla"},{"added":"2022-03-03","id":"CVE-2013-1347","name":"Microsoft Internet Explorer Remote Code Execution Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1347","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2013-0641","name":"Adobe Reader Buffer Overflow Vulnerability","product":"Reader","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0641","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2013-0640","name":"Adobe Reader and Acrobat Memory Corruption Vulnerability","product":"Reader and Acrobat","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0640","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2013-0632","name":"Adobe ColdFusion Authentication Bypass Vulnerability","product":"ColdFusion","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0632","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2012-4681","name":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","product":"Java SE","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4681","vendor":"Oracle"},{"added":"2022-03-03","id":"CVE-2012-1856","name":"Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1856","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2012-1723","name":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","product":"Java SE","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1723","vendor":"Oracle"},{"added":"2022-03-03","id":"CVE-2012-1535","name":"Adobe Flash Player Arbitrary Code Execution Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1535","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2012-0507","name":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","product":"Java SE","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0507","vendor":"Oracle"},{"added":"2022-03-03","id":"CVE-2011-3544","name":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","product":"Java SE JDK and JRE","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-3544","vendor":"Oracle"},{"added":"2022-03-03","id":"CVE-2011-1889","name":"Microsoft Forefront TMG Remote Code Execution Vulnerability","product":"Forefront Threat Management Gateway (TMG)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-1889","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2011-0611","name":"Adobe Flash Player Remote Code Execution Vulnerability","product":"Flash Player","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-0611","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2010-3333","name":"Microsoft Office Stack-based Buffer Overflow Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-3333","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2010-0232","name":"Microsoft Windows Kernel Exception Handler Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0232","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2010-0188","name":"Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability","product":"Reader and Acrobat","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0188","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2009-3129","name":"Microsoft Excel Featheader Record Memory Corruption Vulnerability","product":"Excel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3129","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2009-1123","name":"Microsoft Windows Improper Input Validation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-1123","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2008-3431","name":"Oracle VirtualBox Insufficient Input Validation Vulnerability","product":"VirtualBox","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-3431","vendor":"Oracle"},{"added":"2022-03-03","id":"CVE-2008-2992","name":"Adobe Reader and Acrobat Input Validation Vulnerability","product":"Acrobat and Reader","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-2992","vendor":"Adobe"},{"added":"2022-03-03","id":"CVE-2004-0210","name":"Microsoft Windows Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2004-0210","vendor":"Microsoft"},{"added":"2022-03-03","id":"CVE-2002-0367","name":"Microsoft Windows Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2002-0367","vendor":"Microsoft"},{"added":"2022-02-25","id":"CVE-2022-24682","name":"Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","product":"Zimbra Collaborate Suite (ZCS)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24682","vendor":"Synacor"},{"added":"2022-02-25","id":"CVE-2017-8570","name":"Microsoft Office Remote Code Execution Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-8570","vendor":"Microsoft"},{"added":"2022-02-25","id":"CVE-2017-0222","name":"Microsoft Internet Explorer Remote Code Execution Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0222","vendor":"Microsoft"},{"added":"2022-02-25","id":"CVE-2014-6352","name":"Microsoft Windows Code Injection Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-6352","vendor":"Microsoft"},{"added":"2022-02-22","id":"CVE-2022-23134","name":"Zabbix Frontend Improper Access Control Vulnerability","product":"Frontend","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-23134","vendor":"Zabbix"},{"added":"2022-02-22","id":"CVE-2022-23131","name":"Zabbix Frontend Authentication Bypass Vulnerability","product":"Frontend","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-23131","vendor":"Zabbix"},{"added":"2022-02-15","id":"CVE-2022-24086","name":"Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability","product":"Commerce and Magento Open Source","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24086","vendor":"Adobe"},{"added":"2022-02-15","id":"CVE-2022-0609","name":"Google Chromium Animation Use-After-Free Vulnerability","product":"Chromium Animation","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0609","vendor":"Google"},{"added":"2022-02-15","id":"CVE-2019-0752","name":"Microsoft Internet Explorer Type Confusion Vulnerability","product":"Internet Explorer","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0752","vendor":"Microsoft"},{"added":"2022-02-15","id":"CVE-2018-8174","name":"Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8174","vendor":"Microsoft"},{"added":"2022-02-15","id":"CVE-2018-20250","name":"WinRAR Absolute Path Traversal Vulnerability","product":"WinRAR","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-20250","vendor":"RARLAB"},{"added":"2022-02-15","id":"CVE-2018-15982","name":"Adobe Flash Player Use-After-Free Vulnerability","product":"Flash Player","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-15982","vendor":"Adobe"},{"added":"2022-02-15","id":"CVE-2017-9841","name":"PHPUnit Command Injection Vulnerability","product":"PHPUnit","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-9841","vendor":"PHPUnit"},{"added":"2022-02-15","id":"CVE-2014-1761","name":"Microsoft Word Memory Corruption Vulnerability","product":"Word","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-1761","vendor":"Microsoft"},{"added":"2022-02-15","id":"CVE-2013-3906","name":"Microsoft Graphics Component Memory Corruption Vulnerability","product":"Graphics Component","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3906","vendor":"Microsoft"},{"added":"2022-02-11","id":"CVE-2022-22620","name":"Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability","product":"iOS, iPadOS, and macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22620","vendor":"Apple"},{"added":"2022-02-10","id":"CVE-2021-36934","name":"Microsoft Windows SAM Local Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-36934","vendor":"Microsoft"},{"added":"2022-02-10","id":"CVE-2020-0796","name":"Microsoft SMBv3 Remote Code Execution Vulnerability","product":"SMBv3","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0796","vendor":"Microsoft"},{"added":"2022-02-10","id":"CVE-2018-1000861","name":"Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability","product":"Jenkins Stapler Web Framework","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-1000861","vendor":"Jenkins"},{"added":"2022-02-10","id":"CVE-2017-9791","name":"Apache Struts 1 Improper Input Validation Vulnerability","product":"Struts 1","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-9791","vendor":"Apache"},{"added":"2022-02-10","id":"CVE-2017-8464","name":"Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-8464","vendor":"Microsoft"},{"added":"2022-02-10","id":"CVE-2017-10271","name":"Oracle Corporation WebLogic Server Remote Code Execution Vulnerability","product":"WebLogic Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-10271","vendor":"Oracle"},{"added":"2022-02-10","id":"CVE-2017-0263","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0263","vendor":"Microsoft"},{"added":"2022-02-10","id":"CVE-2017-0262","name":"Microsoft Office Remote Code Execution Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0262","vendor":"Microsoft"},{"added":"2022-02-10","id":"CVE-2017-0145","name":"Microsoft SMBv1 Remote Code Execution Vulnerability","product":"SMBv1","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0145","vendor":"Microsoft"},{"added":"2022-02-10","id":"CVE-2017-0144","name":"Microsoft SMBv1 Remote Code Execution Vulnerability","product":"SMBv1","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0144","vendor":"Microsoft"},{"added":"2022-02-10","id":"CVE-2016-3088","name":"Apache ActiveMQ Improper Input Validation Vulnerability","product":"ActiveMQ","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3088","vendor":"Apache"},{"added":"2022-02-10","id":"CVE-2015-2051","name":"D-Link DIR-645 Router Remote Code Execution Vulnerability","product":"DIR-645 Router","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2051","vendor":"D-Link"},{"added":"2022-02-10","id":"CVE-2015-1635","name":"Microsoft HTTP.sys Remote Code Execution Vulnerability","product":"HTTP.sys","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1635","vendor":"Microsoft"},{"added":"2022-02-10","id":"CVE-2015-1130","name":"Apple OS X Authentication Bypass Vulnerability","product":"OS X","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1130","vendor":"Apple"},{"added":"2022-02-10","id":"CVE-2014-4404","name":"Apple OS X Heap-Based Buffer Overflow Vulnerability","product":"OS X","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4404","vendor":"Apple"},{"added":"2022-02-04","id":"CVE-2022-21882","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21882","vendor":"Microsoft"},{"added":"2022-01-28","id":"CVE-2022-22587","name":"Apple Memory Corruption Vulnerability","product":"iOS and macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22587","vendor":"Apple"},{"added":"2022-01-28","id":"CVE-2021-20038","name":"SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability","product":"SMA 100 Appliances","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-20038","vendor":"SonicWall"},{"added":"2022-01-28","id":"CVE-2020-5722","name":"Grandstream Networks UCM6200 Series SQL Injection Vulnerability","product":"UCM6200","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-5722","vendor":"Grandstream"},{"added":"2022-01-28","id":"CVE-2020-0787","name":"Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0787","vendor":"Microsoft"},{"added":"2022-01-28","id":"CVE-2017-5689","name":"Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability","product":"Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-5689","vendor":"Intel"},{"added":"2022-01-28","id":"CVE-2014-7169","name":"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","product":"Bourne-Again Shell (Bash)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-7169","vendor":"GNU"},{"added":"2022-01-28","id":"CVE-2014-6271","name":"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","product":"Bourne-Again Shell (Bash)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-6271","vendor":"GNU"},{"added":"2022-01-28","id":"CVE-2014-1776","name":"Microsoft Internet Explorer Memory Corruption Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-1776","vendor":"Microsoft"},{"added":"2022-01-21","id":"CVE-2021-35247","name":"SolarWinds Serv-U Improper Input Validation Vulnerability","product":"Serv-U","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-35247","vendor":"SolarWinds"},{"added":"2022-01-21","id":"CVE-2018-8453","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8453","vendor":"Microsoft"},{"added":"2022-01-21","id":"CVE-2012-0391","name":"Apache Struts 2 Improper Input Validation Vulnerability","product":"Struts 2","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0391","vendor":"Apache"},{"added":"2022-01-21","id":"CVE-2006-1547","name":"Apache Struts 1 ActionForm Denial-of-Service Vulnerability","product":"Struts 1","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2006-1547","vendor":"Apache"},{"added":"2022-01-18","id":"CVE-2021-40870","name":"Aviatrix Controller Unrestricted Upload of File","product":"Aviatrix Controller","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40870","vendor":"Aviatrix"},{"added":"2022-01-18","id":"CVE-2021-33766","name":"Microsoft Exchange Server Information Disclosure","product":"Exchange Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-33766","vendor":"Microsoft"},{"added":"2022-01-18","id":"CVE-2021-32648","name":"October CMS Improper Authentication","product":"October CMS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-32648","vendor":"October CMS"},{"added":"2022-01-18","id":"CVE-2021-25298","name":"Nagios XI OS Command Injection","product":"Nagios XI","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25298","vendor":"Nagios"},{"added":"2022-01-18","id":"CVE-2021-25297","name":"Nagios XI OS Command Injection","product":"Nagios XI","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25297","vendor":"Nagios"},{"added":"2022-01-18","id":"CVE-2021-25296","name":"Nagios XI OS Command Injection","product":"Nagios XI","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25296","vendor":"Nagios"},{"added":"2022-01-18","id":"CVE-2021-22991","name":"F5 BIG-IP Traffic Management Microkernel Buffer Overflow","product":"BIG-IP Traffic Management Microkernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22991","vendor":"F5"},{"added":"2022-01-18","id":"CVE-2021-21975","name":"VMware Server Side Request Forgery in vRealize Operations Manager API","product":"vRealize Operations Manager API","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21975","vendor":"VMware"},{"added":"2022-01-18","id":"CVE-2021-21315","name":"System Information Library for Node.JS Command Injection","product":"System Information Library for Node.JS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21315","vendor":"Npm package"},{"added":"2022-01-18","id":"CVE-2020-14864","name":"Oracle Business Intelligence Enterprise Edition Path Transversal","product":"Intelligence Enterprise Edition","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-14864","vendor":"Oracle"},{"added":"2022-01-18","id":"CVE-2020-13927","name":"Apache Airflow's Experimental API Authentication Bypass","product":"Airflow's Experimental API","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13927","vendor":"Apache"},{"added":"2022-01-18","id":"CVE-2020-13671","name":"Drupal core Un-restricted Upload of File","product":"Drupal core","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13671","vendor":"Drupal"},{"added":"2022-01-18","id":"CVE-2020-11978","name":"Apache Airflow Command Injection","product":"Airflow","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-11978","vendor":"Apache"},{"added":"2022-01-10","id":"CVE-2021-36260","name":"Hikvision Improper Input Validation","product":"Security cameras web server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-36260","vendor":"Hikvision"},{"added":"2022-01-10","id":"CVE-2021-27860","name":"FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit","product":"WARP, IPVPN, and MPVPN software","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27860","vendor":"FatPipe"},{"added":"2022-01-10","id":"CVE-2021-22017","name":"VMware vCenter Server Improper Access Control","product":"vCenter Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22017","vendor":"VMware"},{"added":"2022-01-10","id":"CVE-2020-6572","name":"Google Chrome Media Use-After-Free Vulnerability","product":"Chrome Media","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6572","vendor":"Google"},{"added":"2022-01-10","id":"CVE-2019-9670","name":"Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference","product":"Zimbra Collaboration Suite (ZCS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-9670","vendor":"Synacor"},{"added":"2022-01-10","id":"CVE-2019-7609","name":"Kibana Arbitrary Code Execution","product":"Kibana","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7609","vendor":"Elastic"},{"added":"2022-01-10","id":"CVE-2019-2725","name":"Oracle WebLogic Server, Injection","product":"WebLogic Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-2725","vendor":"Oracle"},{"added":"2022-01-10","id":"CVE-2019-1579","name":"Palo Alto Networks PAN-OS Remote Code Execution Vulnerability","product":"PAN-OS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1579","vendor":"Palo Alto Networks"},{"added":"2022-01-10","id":"CVE-2019-1458","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1458","vendor":"Microsoft"},{"added":"2022-01-10","id":"CVE-2019-10149","name":"Exim Mail Transfer Agent (MTA) Improper Input Validation","product":"Mail Transfer Agent (MTA)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-10149","vendor":"Exim"},{"added":"2022-01-10","id":"CVE-2018-13383","name":"Fortinet FortiOS and FortiProxy Out-of-bounds Write","product":"FortiOS and FortiProxy","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-13383","vendor":"Fortinet"},{"added":"2022-01-10","id":"CVE-2018-13382","name":"Fortinet FortiOS and FortiProxy Improper Authorization","product":"FortiOS and FortiProxy","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-13382","vendor":"Fortinet"},{"added":"2022-01-10","id":"CVE-2017-1000486","name":"Primetek Primefaces Remote Code Execution Vulnerability","product":"Primefaces Application","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-1000486","vendor":"Primetek"},{"added":"2022-01-10","id":"CVE-2015-7450","name":"IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.","product":"WebSphere Application Server and Server Hypervisor Edition","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-7450","vendor":"IBM"},{"added":"2022-01-10","id":"CVE-2013-3900","name":"Microsoft WinVerifyTrust function Remote Code Execution","product":"WinVerifyTrust function","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3900","vendor":"Microsoft"},{"added":"2021-12-15","id":"CVE-2021-43890","name":"Microsoft Windows AppX Installer Spoofing Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-43890","vendor":"Microsoft"},{"added":"2021-12-15","id":"CVE-2021-4102","name":"Google Chromium V8 Use-After-Free Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-4102","vendor":"Google"},{"added":"2021-12-10","id":"CVE-2021-44515","name":"Zoho Desktop Central Authentication Bypass Vulnerability","product":"Desktop Central","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44515","vendor":"Zoho"},{"added":"2021-12-10","id":"CVE-2021-44228","name":"Apache Log4j2 Remote Code Execution Vulnerability","product":"Log4j2","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44228","vendor":"Apache"},{"added":"2021-12-10","id":"CVE-2021-44168","name":"Fortinet FortiOS Arbitrary File Download","product":"FortiOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44168","vendor":"Fortinet"},{"added":"2021-12-10","id":"CVE-2021-35394","name":"Realtek Jungle SDK Remote Code Execution Vulnerability","product":"Jungle Software Development Kit (SDK)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-35394","vendor":"Realtek"},{"added":"2021-12-10","id":"CVE-2020-8816","name":"Pi-Hole AdminLTE Remote Code Execution Vulnerability","product":"AdminLTE","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8816","vendor":"Pi-hole"},{"added":"2021-12-10","id":"CVE-2020-17463","name":"Fuel CMS SQL Injection Vulnerability","product":"Fuel CMS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17463","vendor":"Fuel CMS"},{"added":"2021-12-10","id":"CVE-2019-7238","name":"Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability","product":"Nexus Repository Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7238","vendor":"Sonatype"},{"added":"2021-12-10","id":"CVE-2019-13272","name":"Linux Kernel Improper Privilege Management Vulnerability","product":"Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-13272","vendor":"Linux"},{"added":"2021-12-10","id":"CVE-2019-10758","name":"MongoDB mongo-express Remote Code Execution Vulnerability","product":"mongo-express","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-10758","vendor":"MongoDB"},{"added":"2021-12-10","id":"CVE-2019-0193","name":"Apache Solr DataImportHandler Code Injection Vulnerability","product":"Solr","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0193","vendor":"Apache"},{"added":"2021-12-10","id":"CVE-2017-17562","name":"Embedthis GoAhead Remote Code Execution Vulnerability","product":"GoAhead","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-17562","vendor":"Embedthis"},{"added":"2021-12-10","id":"CVE-2017-12149","name":"Red Hat JBoss Application Server Remote Code Execution Vulnerability","product":"JBoss Application Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12149","vendor":"Red Hat"},{"added":"2021-12-10","id":"CVE-2010-1871","name":"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","product":"JBoss Seam 2","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-1871","vendor":"Red Hat"},{"added":"2021-12-01","id":"CVE-2021-44077","name":"Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability","product":"ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44077","vendor":"Zoho"},{"added":"2021-12-01","id":"CVE-2021-40438","name":"Apache HTTP Server-Side Request Forgery (SSRF)","product":"Apache","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40438","vendor":"Apache"},{"added":"2021-12-01","id":"CVE-2021-37415","name":"Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability","product":"ManageEngine ServiceDesk Plus (SDP)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-37415","vendor":"Zoho"},{"added":"2021-12-01","id":"CVE-2020-11261","name":"Qualcomm Multiple Chipsets Improper Input Validation Vulnerability","product":"Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-11261","vendor":"Qualcomm"},{"added":"2021-12-01","id":"CVE-2018-14847","name":"MikroTik Router OS Directory Traversal Vulnerability","product":"RouterOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14847","vendor":"MikroTik"},{"added":"2021-11-17","id":"CVE-2021-42321","name":"Microsoft Exchange Server Remote Code Execution Vulnerability","product":"Exchange","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-42321","vendor":"Microsoft"},{"added":"2021-11-17","id":"CVE-2021-42292","name":"Microsoft Excel Security Feature Bypass","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-42292","vendor":"Microsoft"},{"added":"2021-11-17","id":"CVE-2021-40449","name":"Microsoft Windows Win32k Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40449","vendor":"Microsoft"},{"added":"2021-11-17","id":"CVE-2021-22204","name":"ExifTool Remote Code Execution Vulnerability","product":"Exiftool","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22204","vendor":"Perl"},{"added":"2021-11-03","id":"CVE-2021-42258","name":"BQE BillQuick Web Suite SQL Injection Vulnerability","product":"BillQuick Web Suite","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-42258","vendor":"BQE"},{"added":"2021-11-03","id":"CVE-2021-42013","name":"Apache HTTP Server Path Traversal Vulnerability","product":"HTTP Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-42013","vendor":"Apache"},{"added":"2021-11-03","id":"CVE-2021-41773","name":"Apache HTTP Server Path Traversal Vulnerability","product":"HTTP Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-41773","vendor":"Apache"},{"added":"2021-11-03","id":"CVE-2021-40539","name":"Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability","product":"ManageEngine","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40539","vendor":"Zoho"},{"added":"2021-11-03","id":"CVE-2021-40444","name":"Microsoft MSHTML Remote Code Execution Vulnerability","product":"MSHTML","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40444","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-38649","name":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","product":"Open Management Infrastructure (OMI)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-38649","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-38648","name":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","product":"Open Management Infrastructure (OMI)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-38648","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-38647","name":"Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability","product":"Open Management Infrastructure (OMI)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-38647","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-38645","name":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","product":"Open Management Infrastructure (OMI)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-38645","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-38003","name":"Google Chromium V8 Memory Corruption Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-38003","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-38000","name":"Google Chromium Intents Improper Input Validation Vulnerability","product":"Chromium Intents","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-38000","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-37976","name":"Google Chromium Information Disclosure Vulnerability","product":"Chromium","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-37976","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-37975","name":"Google Chromium V8 Use-After-Free Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-37975","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-37973","name":"Google Chromium Portals Use-After-Free Vulnerability","product":"Chromium Portals","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-37973","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-36955","name":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-36955","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-36948","name":"Microsoft Windows Update Medic Service Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-36948","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-36942","name":"Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-36942","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-36742","name":"Trend Micro Multiple Products Improper Input Validation Vulnerability","product":"Apex One, Apex One as a Service, and Worry-Free Business Security","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-36742","vendor":"Trend Micro"},{"added":"2021-11-03","id":"CVE-2021-36741","name":"Trend Micro Multiple Products Improper Input Validation Vulnerability","product":"Apex One, Apex One as a Service, and Worry-Free Business Security","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-36741","vendor":"Trend Micro"},{"added":"2021-11-03","id":"CVE-2021-35464","name":"ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability","product":"Access Management (AM)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-35464","vendor":"ForgeRock"},{"added":"2021-11-03","id":"CVE-2021-35395","name":"Realtek AP-Router SDK Buffer Overflow Vulnerability","product":"AP-Router SDK","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-35395","vendor":"Realtek"},{"added":"2021-11-03","id":"CVE-2021-35211","name":"SolarWinds Serv-U Remote Code Execution Vulnerability","product":"Serv-U","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-35211","vendor":"SolarWinds"},{"added":"2021-11-03","id":"CVE-2021-34527","name":"Microsoft Windows Print Spooler Remote Code Execution Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34527","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-34523","name":"Microsoft Exchange Server Privilege Escalation Vulnerability","product":"Exchange Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34523","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-34473","name":"Microsoft Exchange Server Remote Code Execution Vulnerability","product":"Exchange Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34473","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-34448","name":"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34448","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-33771","name":"Microsoft Windows Kernel Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-33771","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-33742","name":"Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-33742","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-33739","name":"Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-33739","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-31979","name":"Microsoft Windows Kernel Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31979","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-31956","name":"Microsoft Windows NTFS Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31956","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-31955","name":"Microsoft Windows Kernel Information Disclosure Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31955","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-31755","name":"Tenda AC11 Router Stack Buffer Overflow Vulnerability","product":"AC11 Router","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31755","vendor":"Tenda"},{"added":"2021-11-03","id":"CVE-2021-31207","name":"Microsoft Exchange Server Security Feature Bypass Vulnerability","product":"Exchange Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31207","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-31201","name":"Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability","product":"Enhanced Cryptographic Provider","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31201","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-31199","name":"Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability","product":"Enhanced Cryptographic Provider","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31199","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-30869","name":"Apple iOS, iPadOS, and macOS Type Confusion Vulnerability","product":"iOS, iPadOS, and macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30869","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-30860","name":"Apple Multiple Products Integer Overflow Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30860","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-30858","name":"Apple iOS, iPadOS, macOS Use-After-Free Vulnerability","product":"iOS, iPadOS, and macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30858","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-30807","name":"Apple Multiple Products Memory Corruption Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30807","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-30762","name":"Apple iOS WebKit Use-After-Free Vulnerability","product":"iOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30762","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-30761","name":"Apple iOS WebKit Memory Corruption Vulnerability","product":"iOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30761","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-30713","name":"Apple macOS Unspecified Vulnerability","product":"macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30713","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-30666","name":"Apple iOS WebKit Buffer Overflow Vulnerability","product":"iOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30666","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-30665","name":"Apple Multiple Products WebKit Memory Corruption Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30665","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-30663","name":"Apple Multiple Products WebKit Integer Overflow Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30663","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-30661","name":"Apple Multiple Products WebKit Storage Use-After-Free Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30661","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-30657","name":"Apple macOS Unspecified Vulnerability","product":"macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30657","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-30633","name":"Google Chromium Indexed DB API Use-After-Free Vulnerability","product":"Chromium Indexed DB API","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30633","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-30632","name":"Google Chromium V8 Out-of-Bounds Write Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30632","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-30563","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30563","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-30554","name":"Google Chromium WebGL Use-After-Free Vulnerability","product":"Chromium WebGL","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30554","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-30551","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30551","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-30116","name":"Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability","product":"Virtual System/Server Administrator (VSA)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30116","vendor":"Kaseya"},{"added":"2021-11-03","id":"CVE-2021-28664","name":"Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability","product":"Mali Graphics Processing Unit (GPU)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28664","vendor":"Arm"},{"added":"2021-11-03","id":"CVE-2021-28663","name":"Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability","product":"Mali Graphics Processing Unit (GPU)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28663","vendor":"Arm"},{"added":"2021-11-03","id":"CVE-2021-28550","name":"Adobe Acrobat and Reader Use-After-Free Vulnerability","product":"Acrobat and Reader","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28550","vendor":"Adobe"},{"added":"2021-11-03","id":"CVE-2021-28310","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28310","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-27562","name":"Arm Trusted Firmware Out-of-Bounds Write Vulnerability","product":"Trusted Firmware","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27562","vendor":"Arm"},{"added":"2021-11-03","id":"CVE-2021-27561","name":"Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability","product":"Device Management","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27561","vendor":"Yealink"},{"added":"2021-11-03","id":"CVE-2021-27104","name":"Accellion FTA OS Command Injection Vulnerability","product":"FTA","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27104","vendor":"Accellion"},{"added":"2021-11-03","id":"CVE-2021-27103","name":"Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability","product":"FTA","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27103","vendor":"Accellion"},{"added":"2021-11-03","id":"CVE-2021-27102","name":"Accellion FTA OS Command Injection Vulnerability","product":"FTA","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27102","vendor":"Accellion"},{"added":"2021-11-03","id":"CVE-2021-27101","name":"Accellion FTA SQL Injection Vulnerability","product":"FTA","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27101","vendor":"Accellion"},{"added":"2021-11-03","id":"CVE-2021-27085","name":"Microsoft Internet Explorer Remote Code Execution Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27085","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-27065","name":"Microsoft Exchange Server Remote Code Execution Vulnerability","product":"Exchange Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-27059","name":"Microsoft Office Remote Code Execution Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27059","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-26858","name":"Microsoft Exchange Server Remote Code Execution Vulnerability","product":"Exchange Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-26857","name":"Microsoft Exchange Server Remote Code Execution Vulnerability","product":"Exchange Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-26855","name":"Microsoft Exchange Server Remote Code Execution Vulnerability","product":"Exchange Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-26411","name":"Microsoft Internet Explorer Memory Corruption Vulnerability","product":"Internet Explorer","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26411","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-26084","name":"Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability","product":"Confluence Server and Data Center","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26084","vendor":"Atlassian"},{"added":"2021-11-03","id":"CVE-2021-23874","name":"McAfee Total Protection (MTP) Improper Privilege Management Vulnerability","product":"McAfee Total Protection (MTP)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-23874","vendor":"McAfee"},{"added":"2021-11-03","id":"CVE-2021-22986","name":"F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability","product":"BIG-IP and BIG-IQ Centralized Management","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22986","vendor":"F5"},{"added":"2021-11-03","id":"CVE-2021-22900","name":"Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability","product":"Pulse Connect Secure","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22900","vendor":"Ivanti"},{"added":"2021-11-03","id":"CVE-2021-22899","name":"Ivanti Pulse Connect Secure Command Injection Vulnerability","product":"Pulse Connect Secure","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22899","vendor":"Ivanti"},{"added":"2021-11-03","id":"CVE-2021-22894","name":"Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability","product":"Pulse Connect Secure","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22894","vendor":"Ivanti"},{"added":"2021-11-03","id":"CVE-2021-22893","name":"Ivanti Pulse Connect Secure Use-After-Free Vulnerability","product":"Pulse Connect Secure","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22893","vendor":"Ivanti"},{"added":"2021-11-03","id":"CVE-2021-22506","name":"Micro Focus Access Manager Information Leakage Vulnerability","product":"Micro Focus Access Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22506","vendor":"Micro Focus"},{"added":"2021-11-03","id":"CVE-2021-22502","name":"Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability","product":"Operation Bridge Reporter (OBR)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22502","vendor":"Micro Focus"},{"added":"2021-11-03","id":"CVE-2021-22205","name":"GitLab Community and Enterprise Editions Remote Code Execution Vulnerability","product":"Community and Enterprise Editions","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22205","vendor":"GitLab"},{"added":"2021-11-03","id":"CVE-2021-22005","name":"VMware vCenter Server File Upload Vulnerability","product":"vCenter Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22005","vendor":"VMware"},{"added":"2021-11-03","id":"CVE-2021-21985","name":"VMware vCenter Server Improper Input Validation Vulnerability","product":"vCenter Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21985","vendor":"VMware"},{"added":"2021-11-03","id":"CVE-2021-21972","name":"VMware vCenter Server Remote Code Execution Vulnerability","product":"vCenter Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21972","vendor":"VMware"},{"added":"2021-11-03","id":"CVE-2021-21224","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21224","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-21220","name":"Google Chromium V8 Improper Input Validation Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21220","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-21206","name":"Google Chromium Blink Use-After-Free Vulnerability","product":"Chromium Blink","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21206","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-21193","name":"Google Chromium Blink Use-After-Free Vulnerability","product":"Chromium Blink","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21193","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-21166","name":"Google Chromium Race Condition Vulnerability","product":"Chromium","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21166","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-21148","name":"Google Chromium V8 Heap Buffer Overflow Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21148","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2021-21017","name":"Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability","product":"Acrobat and Reader","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21017","vendor":"Adobe"},{"added":"2021-11-03","id":"CVE-2021-20090","name":"Arcadyan Buffalo Firmware Path Traversal Vulnerability","product":"Buffalo Firmware","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-20090","vendor":"Arcadyan"},{"added":"2021-11-03","id":"CVE-2021-20023","name":"SonicWall Email Security Path Traversal Vulnerability","product":"SonicWall Email Security","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-20023","vendor":"SonicWall"},{"added":"2021-11-03","id":"CVE-2021-20022","name":"SonicWall Email Security Unrestricted Upload of File Vulnerability","product":"SonicWall Email Security","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-20022","vendor":"SonicWall"},{"added":"2021-11-03","id":"CVE-2021-20021","name":"SonicWall Email Security Improper Privilege Management Vulnerability","product":"SonicWall Email Security","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-20021","vendor":"SonicWall"},{"added":"2021-11-03","id":"CVE-2021-20016","name":"SonicWall SSLVPN SMA100 SQL Injection Vulnerability","product":"SSLVPN SMA100","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-20016","vendor":"SonicWall"},{"added":"2021-11-03","id":"CVE-2021-1906","name":"Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability","product":"Multiple Chipsets","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1906","vendor":"Qualcomm"},{"added":"2021-11-03","id":"CVE-2021-1905","name":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","product":"Multiple Chipsets","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1905","vendor":"Qualcomm"},{"added":"2021-11-03","id":"CVE-2021-1879","name":"Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability","product":"iOS, iPadOS, and watchOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1879","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-1871","name":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","product":"iOS, iPadOS, and macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1871","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-1870","name":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","product":"iOS, iPadOS, and macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1870","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-1782","name":"Apple Multiple Products Race Condition Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1782","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2021-1732","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1732","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-1675","name":"Microsoft Windows Print Spooler Remote Code Execution Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1675","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-1647","name":"Microsoft Defender Remote Code Execution Vulnerability","product":"Defender","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1647","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2021-1498","name":"Cisco HyperFlex HX Data Platform Command Injection Vulnerability","product":"HyperFlex HX","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1498","vendor":"Cisco"},{"added":"2021-11-03","id":"CVE-2021-1497","name":"Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability","product":"HyperFlex HX","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1497","vendor":"Cisco"},{"added":"2021-11-03","id":"CVE-2020-9859","name":"Apple Multiple Products Code Execution Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9859","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2020-9819","name":"Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability","product":"iOS, iPadOS, and watchOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9819","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2020-9818","name":"Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability","product":"iOS, iPadOS, and watchOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9818","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2020-8657","name":"EyesOfNetwork Use of Hard-Coded Credentials Vulnerability","product":"EyesOfNetwork","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8657","vendor":"EyesOfNetwork"},{"added":"2021-11-03","id":"CVE-2020-8655","name":"EyesOfNetwork Improper Privilege Management Vulnerability","product":"EyesOfNetwork","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8655","vendor":"EyesOfNetwork"},{"added":"2021-11-03","id":"CVE-2020-8644","name":"PlaySMS Server-Side Template Injection Vulnerability","product":"PlaySMS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8644","vendor":"PlaySMS"},{"added":"2021-11-03","id":"CVE-2020-8599","name":"Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability","product":"Apex One and OfficeScan","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8599","vendor":"Trend Micro"},{"added":"2021-11-03","id":"CVE-2020-8515","name":"Multiple DrayTek Vigor Routers Web Management Page Vulnerability","product":"Multiple Vigor Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8515","vendor":"DrayTek"},{"added":"2021-11-03","id":"CVE-2020-8468","name":"Trend Micro Multiple Products Content Validation Escape Vulnerability","product":"Apex One, OfficeScan and Worry-Free Business Security Agents","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8468","vendor":"Trend Micro"},{"added":"2021-11-03","id":"CVE-2020-8467","name":"Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability","product":"Apex One and OfficeScan","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8467","vendor":"Trend Micro"},{"added":"2021-11-03","id":"CVE-2020-8260","name":"Ivanti Pulse Connect Secure Code Execution Vulnerability","product":"Pulse Connect Secure","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8260","vendor":"Ivanti"},{"added":"2021-11-03","id":"CVE-2020-8243","name":"Ivanti Pulse Connect Secure Code Execution Vulnerability","product":"Pulse Connect Secure","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8243","vendor":"Ivanti"},{"added":"2021-11-03","id":"CVE-2020-8196","name":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8196","vendor":"Citrix"},{"added":"2021-11-03","id":"CVE-2020-8195","name":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8195","vendor":"Citrix"},{"added":"2021-11-03","id":"CVE-2020-8193","name":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8193","vendor":"Citrix"},{"added":"2021-11-03","id":"CVE-2020-7961","name":"Liferay Portal Deserialization of Untrusted Data Vulnerability","product":"Liferay Portal","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-7961","vendor":"Liferay"},{"added":"2021-11-03","id":"CVE-2020-6820","name":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","product":"Firefox and Thunderbird","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6820","vendor":"Mozilla"},{"added":"2021-11-03","id":"CVE-2020-6819","name":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","product":"Firefox and Thunderbird","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6819","vendor":"Mozilla"},{"added":"2021-11-03","id":"CVE-2020-6418","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6418","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2020-6287","name":"SAP NetWeaver Missing Authentication for Critical Function Vulnerability","product":"NetWeaver","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6287","vendor":"SAP"},{"added":"2021-11-03","id":"CVE-2020-6207","name":"SAP Solution Manager Missing Authentication for Critical Function Vulnerability","product":"Solution Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6207","vendor":"SAP"},{"added":"2021-11-03","id":"CVE-2020-5902","name":"F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability","product":"BIG-IP","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-5902","vendor":"F5"},{"added":"2021-11-03","id":"CVE-2020-5849","name":"Unraid Authentication Bypass Vulnerability","product":"Unraid","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-5849","vendor":"Unraid"},{"added":"2021-11-03","id":"CVE-2020-5847","name":"Unraid Remote Code Execution Vulnerability","product":"Unraid","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-5847","vendor":"Unraid"},{"added":"2021-11-03","id":"CVE-2020-5735","name":"Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability","product":"Cameras and Network Video Recorder (NVR)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-5735","vendor":"Amcrest"},{"added":"2021-11-03","id":"CVE-2020-4430","name":"IBM Data Risk Manager Directory Traversal Vulnerability","product":"Data Risk Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-4430","vendor":"IBM"},{"added":"2021-11-03","id":"CVE-2020-4428","name":"IBM Data Risk Manager Remote Code Execution Vulnerability","product":"Data Risk Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-4428","vendor":"IBM"},{"added":"2021-11-03","id":"CVE-2020-4427","name":"IBM Data Risk Manager Security Bypass Vulnerability","product":"Data Risk Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-4427","vendor":"IBM"},{"added":"2021-11-03","id":"CVE-2020-4006","name":"Multiple VMware Products Command Injection Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-4006","vendor":"VMware"},{"added":"2021-11-03","id":"CVE-2020-3992","name":"VMware ESXi OpenSLP Use-After-Free Vulnerability","product":"ESXi","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3992","vendor":"VMware"},{"added":"2021-11-03","id":"CVE-2020-3952","name":"VMware vCenter Server Information Disclosure Vulnerability","product":"vCenter Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3952","vendor":"VMware"},{"added":"2021-11-03","id":"CVE-2020-3950","name":"VMware Multiple Products Privilege Escalation Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3950","vendor":"VMware"},{"added":"2021-11-03","id":"CVE-2020-3580","name":"Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3580","vendor":"Cisco"},{"added":"2021-11-03","id":"CVE-2020-3569","name":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","product":"IOS XR","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3569","vendor":"Cisco"},{"added":"2021-11-03","id":"CVE-2020-3566","name":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","product":"IOS XR","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3566","vendor":"Cisco"},{"added":"2021-11-03","id":"CVE-2020-3452","name":"Cisco ASA and FTD Read-Only Path Traversal Vulnerability","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3452","vendor":"Cisco"},{"added":"2021-11-03","id":"CVE-2020-3161","name":"Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability","product":"Cisco IP Phones","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3161","vendor":"Cisco"},{"added":"2021-11-03","id":"CVE-2020-3118","name":"Cisco IOS XR Software Discovery Protocol Format String Vulnerability","product":"IOS XR","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3118","vendor":"Cisco"},{"added":"2021-11-03","id":"CVE-2020-29583","name":"Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-29583","vendor":"Zyxel"},{"added":"2021-11-03","id":"CVE-2020-29557","name":"D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability","product":"DIR-825 R1 Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-29557","vendor":"D-Link"},{"added":"2021-11-03","id":"CVE-2020-27950","name":"Apple Multiple Products Memory Initialization Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-27950","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2020-27932","name":"Apple Multiple Products Type Confusion Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-27932","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2020-27930","name":"Apple Multiple Products Memory Corruption Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-27930","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2020-26919","name":"Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability","product":"JGS516PE Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-26919","vendor":"NETGEAR"},{"added":"2021-11-03","id":"CVE-2020-2555","name":"Oracle Multiple Products Remote Code Execution Vulnerability","product":"Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2555","vendor":"Oracle"},{"added":"2021-11-03","id":"CVE-2020-25506","name":"D-Link DNS-320 Device Command Injection Vulnerability","product":"DNS-320 Device","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-25506","vendor":"D-Link"},{"added":"2021-11-03","id":"CVE-2020-25213","name":"WordPress File Manager Plugin Remote Code Execution Vulnerability","product":"File Manager Plugin","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-25213","vendor":"WordPress"},{"added":"2021-11-03","id":"CVE-2020-24557","name":"Trend Micro Multiple Products Improper Access Control Vulnerability","product":"Apex One, OfficeScan, and Worry-Free Business Security","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-24557","vendor":"Trend Micro"},{"added":"2021-11-03","id":"CVE-2020-17530","name":"Apache Struts Remote Code Execution Vulnerability","product":"Struts","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17530","vendor":"Apache"},{"added":"2021-11-03","id":"CVE-2020-17496","name":"vBulletin PHP Module Remote Code Execution Vulnerability","product":"vBulletin","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17496","vendor":"vBulletin"},{"added":"2021-11-03","id":"CVE-2020-17144","name":"Microsoft Exchange Server Remote Code Execution Vulnerability","product":"Exchange Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-17087","name":"Microsoft Windows Kernel Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17087","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-16846","name":"SaltStack Salt Shell Injection Vulnerability","product":"Salt","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-16846","vendor":"SaltStack"},{"added":"2021-11-03","id":"CVE-2020-16017","name":"Google Chrome Use-After-Free Vulnerability","product":"Chrome","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-16017","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2020-16013","name":"Google Chromium V8 Incorrect Implementation Vulnerabililty","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-16013","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2020-16010","name":"Google Chrome for Android UI Heap Buffer Overflow Vulnerability","product":"Chrome for Android UI","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-16010","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2020-16009","name":"Google Chromium V8 Type Confusion Vulnerability","product":"Chromium V8","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-16009","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2020-15999","name":"Google Chrome FreeType Heap Buffer Overflow Vulnerability","product":"Chrome FreeType","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-15999","vendor":"Google"},{"added":"2021-11-03","id":"CVE-2020-15505","name":"Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability","product":"MobileIron Multiple Products","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-15505","vendor":"Ivanti"},{"added":"2021-11-03","id":"CVE-2020-14883","name":"Oracle WebLogic Server Unspecified Vulnerability","product":"WebLogic Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-14883","vendor":"Oracle"},{"added":"2021-11-03","id":"CVE-2020-14882","name":"Oracle WebLogic Server Remote Code Execution Vulnerability","product":"WebLogic Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-14882","vendor":"Oracle"},{"added":"2021-11-03","id":"CVE-2020-14871","name":"Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability","product":"Solaris and Zettabyte File System (ZFS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-14871","vendor":"Oracle"},{"added":"2021-11-03","id":"CVE-2020-14750","name":"Oracle WebLogic Server Remote Code Execution Vulnerability","product":"WebLogic Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-14750","vendor":"Oracle"},{"added":"2021-11-03","id":"CVE-2020-1472","name":"Microsoft Netlogon Privilege Escalation Vulnerability","product":"Netlogon","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1472","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-1464","name":"Microsoft Windows Spoofing Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1464","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-1380","name":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1380","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-1350","name":"Microsoft Windows DNS Server Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1350","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-12812","name":"Fortinet FortiOS SSL VPN Improper Authentication Vulnerability","product":"FortiOS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-12812","vendor":"Fortinet"},{"added":"2021-11-03","id":"CVE-2020-12271","name":"Sophos SFOS SQL Injection Vulnerability","product":"SFOS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-12271","vendor":"Sophos"},{"added":"2021-11-03","id":"CVE-2020-11738","name":"WordPress Snap Creek Duplicator Plugin File Download Vulnerability","product":"Snap Creek Duplicator Plugin","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-11738","vendor":"WordPress"},{"added":"2021-11-03","id":"CVE-2020-11652","name":"SaltStack Salt Path Traversal Vulnerability","product":"Salt","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-11652","vendor":"SaltStack"},{"added":"2021-11-03","id":"CVE-2020-11651","name":"SaltStack Salt Authentication Bypass Vulnerability","product":"Salt","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-11651","vendor":"SaltStack"},{"added":"2021-11-03","id":"CVE-2020-1147","name":"Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability","product":".NET Framework, SharePoint, Visual Studio","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1147","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-10987","name":"Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability","product":"AC1900 Router AC15 Model","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-10987","vendor":"Tenda"},{"added":"2021-11-03","id":"CVE-2020-1054","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1054","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-1040","name":"Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability","product":"Hyper-V RemoteFX","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1040","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-10221","name":"rConfig OS Command Injection Vulnerability","product":"rConfig","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-10221","vendor":"rConfig"},{"added":"2021-11-03","id":"CVE-2020-1020","name":"Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1020","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-10199","name":"Sonatype Nexus Repository Remote Code Execution Vulnerability","product":"Nexus Repository","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-10199","vendor":"Sonatype"},{"added":"2021-11-03","id":"CVE-2020-10189","name":"Zoho ManageEngine Desktop Central File Upload Vulnerability","product":"ManageEngine","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-10189","vendor":"Zoho"},{"added":"2021-11-03","id":"CVE-2020-10181","name":"Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability","product":"Enhanced Multimedia Router (EMR)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-10181","vendor":"Sumavision"},{"added":"2021-11-03","id":"CVE-2020-10148","name":"SolarWinds Orion Authentication Bypass Vulnerability","product":"Orion","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-10148","vendor":"SolarWinds"},{"added":"2021-11-03","id":"CVE-2020-0986","name":"Microsoft Windows Kernel Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0986","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-0968","name":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","product":"Internet Explorer","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0968","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-0938","name":"Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0938","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-0878","name":"Microsoft Edge and Internet Explorer Memory Corruption Vulnerability","product":"Edge and Internet Explorer","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0878","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-0688","name":"Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","product":"Exchange Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-0683","name":"Microsoft Windows Installer Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0683","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-0674","name":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0674","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-0646","name":"Microsoft .NET Framework Remote Code Execution Vulnerability","product":".NET Framework","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0646","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-0601","name":"Microsoft Windows CryptoAPI Spoofing Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0601","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2020-0069","name":"Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability","product":"Multiple Chipsets","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0069","vendor":"MediaTek"},{"added":"2021-11-03","id":"CVE-2020-0041","name":"Android Kernel Out-of-Bounds Write Vulnerability","product":"Android Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0041","vendor":"Android"},{"added":"2021-11-03","id":"CVE-2019-9978","name":"WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability","product":"Social Warfare Plugin","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-9978","vendor":"WordPress"},{"added":"2021-11-03","id":"CVE-2019-9082","name":"ThinkPHP Remote Code Execution Vulnerability","product":"ThinkPHP","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-9082","vendor":"ThinkPHP"},{"added":"2021-11-03","id":"CVE-2019-8394","name":"Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability","product":"ManageEngine","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-8394","vendor":"Zoho"},{"added":"2021-11-03","id":"CVE-2019-7481","name":"SonicWall SMA100 SQL Injection Vulnerability","product":"SMA100","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7481","vendor":"SonicWall"},{"added":"2021-11-03","id":"CVE-2019-6223","name":"Apple iOS and macOS Group Facetime Vulnerability","product":"iOS and macOS","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-6223","vendor":"Apple"},{"added":"2021-11-03","id":"CVE-2019-5591","name":"Fortinet FortiOS Default Configuration Vulnerability","product":"FortiOS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-5591","vendor":"Fortinet"},{"added":"2021-11-03","id":"CVE-2019-5544","name":"VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability","product":"VMware ESXi and Horizon DaaS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-5544","vendor":"VMware"},{"added":"2021-11-03","id":"CVE-2019-4716","name":"IBM Planning Analytics Remote Code Execution Vulnerability","product":"Planning Analytics","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-4716","vendor":"IBM"},{"added":"2021-11-03","id":"CVE-2019-3398","name":"Atlassian Confluence Server and Data Center Path Traversal Vulnerability","product":"Confluence Server and Data Center","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-3398","vendor":"Atlassian"},{"added":"2021-11-03","id":"CVE-2019-3396","name":"Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability","product":"Confluence Server and Data Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-3396","vendor":"Atlassian"},{"added":"2021-11-03","id":"CVE-2019-2215","name":"Android Kernel Use-After-Free Vulnerability","product":"Android Kernel","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-2215","vendor":"Android"},{"added":"2021-11-03","id":"CVE-2019-20085","name":"TVT NVMS-1000 Directory Traversal Vulnerability","product":"NVMS-1000","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-20085","vendor":"TVT"},{"added":"2021-11-03","id":"CVE-2019-19781","name":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-19781","vendor":"Citrix"},{"added":"2021-11-03","id":"CVE-2019-19356","name":"Netis WF2419 Devices Remote Code Execution Vulnerability","product":"WF2419 Devices","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-19356","vendor":"Netis"},{"added":"2021-11-03","id":"CVE-2019-18988","name":"TeamViewer Desktop Bypass Remote Login Vulnerability","product":"Desktop","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-18988","vendor":"TeamViewer"},{"added":"2021-11-03","id":"CVE-2019-18935","name":"Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability","product":"Telerik UI for ASP.NET AJAX","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-18935","vendor":"Progress"},{"added":"2021-11-03","id":"CVE-2019-18187","name":"Trend Micro OfficeScan Directory Traversal Vulnerability","product":"OfficeScan","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-18187","vendor":"Trend Micro"},{"added":"2021-11-03","id":"CVE-2019-17558","name":"Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability","product":"Solr","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-17558","vendor":"Apache"},{"added":"2021-11-03","id":"CVE-2019-17026","name":"Mozilla Firefox And Thunderbird Type Confusion Vulnerability","product":"Firefox and Thunderbird","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-17026","vendor":"Mozilla"},{"added":"2021-11-03","id":"CVE-2019-16759","name":"vBulletin PHP Module Remote Code Execution Vulnerability","product":"vBulletin","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-16759","vendor":"vBulletin"},{"added":"2021-11-03","id":"CVE-2019-1653","name":"Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability","product":"Small Business RV320 and RV325 Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1653","vendor":"Cisco"},{"added":"2021-11-03","id":"CVE-2019-16256","name":"SIMalliance Toolbox Browser Command Injection Vulnerability","product":"Toolbox Browser","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-16256","vendor":"SIMalliance"},{"added":"2021-11-03","id":"CVE-2019-15949","name":"Nagios XI Remote Code Execution Vulnerability","product":"Nagios XI","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-15949","vendor":"Nagios"},{"added":"2021-11-03","id":"CVE-2019-15752","name":"Docker Desktop Community Edition Privilege Escalation Vulnerability","product":"Desktop Community Edition","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-15752","vendor":"Docker"},{"added":"2021-11-03","id":"CVE-2019-1429","name":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1429","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2019-1367","name":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","product":"Internet Explorer","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1367","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2019-13608","name":"Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability","product":"StoreFront Server","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-13608","vendor":"Citrix"},{"added":"2021-11-03","id":"CVE-2019-1215","name":"Microsoft Windows Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1215","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2019-1214","name":"Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1214","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2019-11634","name":"Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability","product":"Workspace Application and Receiver for Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11634","vendor":"Citrix"},{"added":"2021-11-03","id":"CVE-2019-11580","name":"Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability","product":"Crowd and Crowd Data Center","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11580","vendor":"Atlassian"},{"added":"2021-11-03","id":"CVE-2019-11539","name":"Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability","product":"Pulse Connect Secure and Pulse Policy Secure","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11539","vendor":"Ivanti"},{"added":"2021-11-03","id":"CVE-2019-11510","name":"Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability","product":"Pulse Connect Secure","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11510","vendor":"Ivanti"},{"added":"2021-11-03","id":"CVE-2019-0863","name":"Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0863","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2019-0859","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0859","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2019-0808","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0808","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2019-0803","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0803","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2019-0797","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0797","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2019-0708","name":"Microsoft Remote Desktop Services Remote Code Execution Vulnerability","product":"Remote Desktop Services","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0708","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2019-0604","name":"Microsoft SharePoint Remote Code Execution Vulnerability","product":"SharePoint","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0604","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2019-0541","name":"Microsoft MSHTML Remote Code Execution Vulnerability","product":"MSHTML","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0541","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2019-0211","name":"Apache HTTP Server Privilege Escalation Vulnerability","product":"HTTP Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0211","vendor":"Apache"},{"added":"2021-11-03","id":"CVE-2018-8653","name":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","product":"Internet Explorer","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8653","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2018-7600","name":"Drupal Core Remote Code Execution Vulnerability","product":"Drupal Core","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-7600","vendor":"Drupal"},{"added":"2021-11-03","id":"CVE-2018-6789","name":"Exim Buffer Overflow Vulnerability","product":"Exim","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-6789","vendor":"Exim"},{"added":"2021-11-03","id":"CVE-2018-4939","name":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","product":"ColdFusion","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-4939","vendor":"Adobe"},{"added":"2021-11-03","id":"CVE-2018-4878","name":"Adobe Flash Player Use-After-Free Vulnerability","product":"Flash Player","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-4878","vendor":"Adobe"},{"added":"2021-11-03","id":"CVE-2018-2380","name":"SAP Customer Relationship Management (CRM) Path Traversal Vulnerability","product":"Customer Relationship Management (CRM)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-2380","vendor":"SAP"},{"added":"2021-11-03","id":"CVE-2018-20062","name":"ThinkPHP \"noneCms\" Remote Code Execution Vulnerability","product":"noneCms","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-20062","vendor":"ThinkPHP"},{"added":"2021-11-03","id":"CVE-2018-18325","name":"DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","product":"DotNetNuke (DNN)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-18325","vendor":"DotNetNuke (DNN)"},{"added":"2021-11-03","id":"CVE-2018-15961","name":"Adobe ColdFusion Unrestricted File Upload Vulnerability","product":"ColdFusion","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-15961","vendor":"Adobe"},{"added":"2021-11-03","id":"CVE-2018-15811","name":"DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","product":"DotNetNuke (DNN)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-15811","vendor":"DotNetNuke (DNN)"},{"added":"2021-11-03","id":"CVE-2018-14558","name":"Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability","product":"AC7, AC9, and AC10 Routers","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14558","vendor":"Tenda"},{"added":"2021-11-03","id":"CVE-2018-13379","name":"Fortinet FortiOS SSL VPN Path Traversal Vulnerability","product":"FortiOS","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-13379","vendor":"Fortinet"},{"added":"2021-11-03","id":"CVE-2018-11776","name":"Apache Struts Remote Code Execution Vulnerability","product":"Struts","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-11776","vendor":"Apache"},{"added":"2021-11-03","id":"CVE-2018-0802","name":"Microsoft Office Memory Corruption Vulnerability","product":"Office","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0802","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2018-0798","name":"Microsoft Office Memory Corruption Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0798","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2018-0296","name":"Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability","product":"Adaptive Security Appliance (ASA)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0296","vendor":"Cisco"},{"added":"2021-11-03","id":"CVE-2018-0171","name":"Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability","product":"IOS and IOS XE","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0171","vendor":"Cisco"},{"added":"2021-11-03","id":"CVE-2017-9822","name":"DotNetNuke (DNN) Remote Code Execution Vulnerability","product":"DotNetNuke (DNN)","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-9822","vendor":"DotNetNuke (DNN)"},{"added":"2021-11-03","id":"CVE-2017-9805","name":"Apache Struts Deserialization of Untrusted Data Vulnerability","product":"Struts","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-9805","vendor":"Apache"},{"added":"2021-11-03","id":"CVE-2017-9248","name":"Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability","product":"ASP.NET AJAX and Sitefinity","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-9248","vendor":"Progress"},{"added":"2021-11-03","id":"CVE-2017-8759","name":"Microsoft .NET Framework Remote Code Execution Vulnerability","product":".NET Framework","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-8759","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2017-7269","name":"Microsoft Windows Server Buffer Overflow Vulnerability","product":"Internet Information Services (IIS)","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-7269","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2017-6327","name":"Symantec Messaging Gateway Remote Code Execution Vulnerability","product":"Symantec Messaging Gateway","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6327","vendor":"Symantec"},{"added":"2021-11-03","id":"CVE-2017-5638","name":"Apache Struts Remote Code Execution Vulnerability","product":"Struts","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-5638","vendor":"Apache"},{"added":"2021-11-03","id":"CVE-2017-16651","name":"Roundcube Webmail File Disclosure Vulnerability","product":"Roundcube Webmail","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-16651","vendor":"Roundcube"},{"added":"2021-11-03","id":"CVE-2017-11882","name":"Microsoft Office Memory Corruption Vulnerability","product":"Office","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11882","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2017-11774","name":"Microsoft Office Outlook Security Feature Bypass Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11774","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2017-0199","name":"Microsoft Office and WordPad Remote Code Execution Vulnerability","product":"Office and WordPad","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0199","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2017-0143","name":"Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0143","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2016-9563","name":"SAP NetWeaver XML External Entity (XXE) Vulnerability","product":"NetWeaver","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-9563","vendor":"SAP"},{"added":"2021-11-03","id":"CVE-2016-7255","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7255","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2016-4437","name":"Apache Shiro Code Execution Vulnerability","product":"Shiro","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4437","vendor":"Apache"},{"added":"2021-11-03","id":"CVE-2016-3976","name":"SAP NetWeaver Directory Traversal Vulnerability","product":"NetWeaver","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3976","vendor":"SAP"},{"added":"2021-11-03","id":"CVE-2016-3718","name":"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","product":"ImageMagick","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3718","vendor":"ImageMagick"},{"added":"2021-11-03","id":"CVE-2016-3715","name":"ImageMagick Arbitrary File Deletion Vulnerability","product":"ImageMagick","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3715","vendor":"ImageMagick"},{"added":"2021-11-03","id":"CVE-2016-3643","name":"SolarWinds Virtualization Manager Privilege Escalation Vulnerability","product":"Virtualization Manager","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3643","vendor":"SolarWinds"},{"added":"2021-11-03","id":"CVE-2016-3235","name":"Microsoft Office OLE DLL Side Loading Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3235","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2016-0185","name":"Microsoft Windows Media Center Remote Code Execution Vulnerability","product":"Windows","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0185","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2016-0167","name":"Microsoft Win32k Privilege Escalation Vulnerability","product":"Win32k","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0167","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2015-4852","name":"Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability","product":"WebLogic Server","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-4852","vendor":"Oracle"},{"added":"2021-11-03","id":"CVE-2015-1641","name":"Microsoft Office Memory Corruption Vulnerability","product":"Office","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1641","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2014-1812","name":"Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability","product":"Windows","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-1812","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2012-3152","name":"Oracle Fusion Middleware Unspecified Vulnerability","product":"Fusion Middleware","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-3152","vendor":"Oracle"},{"added":"2021-11-03","id":"CVE-2012-0158","name":"Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability","product":"MSCOMCTL.OCX","ransomware":"Known","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0158","vendor":"Microsoft"},{"added":"2021-11-03","id":"CVE-2010-5326","name":"SAP NetWeaver Remote Code Execution Vulnerability","product":"NetWeaver","ransomware":"Unknown","source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-5326","vendor":"SAP"}]