Vulnerabilities (CVE) being actively exploited, according to the CISA KEV catalog, with CVSS severity and exploitation probability (EPSS).
34exploited in the last 30 days
13critical (CVSS ≥ 9)
0used in ransomware
1768in the KEV catalog
CVE-2018-8639Severity under analysisRansomwareadded on 03/03/2025
Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
Microsoft · Windows · CWE-404
Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
CVE-2024-53704Severity under analysisRansomwareadded on 02/18/2025
SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication.
CVE-2024-57727Severity under analysisRansomwareadded on 02/13/2025
SimpleHelp Path Traversal Vulnerability
SimpleHelp · SimpleHelp · CWE-22
SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server configuration files and hashed user passwords.
CVE-2020-29574Severity under analysisRansomwareadded on 02/06/2025
CyberoamOS (CROS) SQL Injection Vulnerability
Sophos · CyberoamOS · CWE-89
CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely.
CVE-2025-23006Severity under analysisRansomwareadded on 01/24/2025
SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands.
CVE-2024-55591Severity under analysisRansomwareadded on 01/14/2025
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Fortinet · FortiOS and FortiProxy · CWE-288
Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
CVE-2023-48365Severity under analysisRansomwareadded on 01/13/2025
Qlik Sense HTTP Tunneling Vulnerability
Qlik · Sense · CWE-444
Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.
CVE-2025-0282Severity under analysisRansomwareadded on 01/08/2025
Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow which can lead to unauthenticated remote code execution.
CVE-2024-55550Severity under analysisRansomwareadded on 01/07/2025
Mitel MiCollab Path Traversal Vulnerability
Mitel · MiCollab · CWE-22
Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server.
CVE-2024-41713Severity under analysisRansomwareadded on 01/07/2025
Mitel MiCollab Path Traversal Vulnerability
Mitel · MiCollab · CWE-22
Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server.
CVE-2024-55956Severity under analysisRansomwareadded on 12/17/2024
Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload vulnerability that could allow an unauthenticated user to import and execute arbitrary bash or PowerShell commands on the host system by leveraging the default settings of the Autorun directory.
CVE-2024-50623Severity under analysisRansomwareadded on 12/13/2024
Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload and download vulnerability that can lead to remote code execution with elevated privileges.
CVE-2024-51378Severity under analysisRansomwareadded on 12/04/2024
CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the execution of arbitrary commands using shell metacharacters in the statusfile property.
CVE-2024-11667Severity under analysisRansomwareadded on 12/03/2024
Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or upload files via a crafted URL.
CVE-2023-28461Severity under analysisRansomwareadded on 11/25/2024
Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
Array Networks · AG/vxAG ArrayOS · CWE-306
Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway.
CVE-2024-9474Severity under analysisRansomwareadded on 11/18/2024
Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
Palo Alto Networks · PAN-OS · CWE-77
Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators.
CVE-2024-0012Severity under analysisRansomwareadded on 11/18/2024
Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators.
CVE-2024-49039Severity under analysisRansomwareadded on 11/12/2024
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
Microsoft · Windows · CWE-287
Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions.
CVE-2024-51567Severity under analysisRansomwareadded on 11/07/2024
CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthenticated attacker to execute commands as root.
CVE-2024-38094Severity under analysisRansomwareadded on 10/22/2024
Microsoft SharePoint Deserialization Vulnerability
Microsoft · SharePoint · CWE-502
Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution.
CVE-2024-40711Severity under analysisRansomwareadded on 10/17/2024
Veeam Backup and Replication Deserialization Vulnerability
Veeam · Backup & Replication · CWE-502
Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution.
CVE-2024-9680Severity under analysisRansomwareadded on 10/15/2024
Mozilla Firefox Use-After-Free Vulnerability
Mozilla · Firefox · CWE-416
Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.
CVE-2024-30088Severity under analysisRansomwareadded on 10/15/2024
Microsoft Windows Kernel TOCTOU Race Condition Vulnerability
Microsoft · Windows · CWE-367
Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation.
CVE-2020-0618Severity under analysisRansomwareadded on 09/18/2024
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
Microsoft · SQL Server · CWE-502
Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account.
Want to know if your environment is exposed?
We assess versions, access and integrations of your ERP and infrastructure and prioritize the fixes.
Bit is an AI and can make mistakes. Do not share passwords or personal data. Conversations are not stored. Learn more
Your privacy matters
We use essential cookies to make the site work and, with your permission, Google cookies to measure traffic and show ads — including personalized ones — that keep the tools free. You can change your choice at any time under “Cookie preferences” in the footer. Learn more.
