Updated daily · official sources
Vulnerabilities (CVE) being actively exploited, according to the CISA KEV catalog, with CVSS severity and exploitation probability (EPSS).
CVE-2024-6670
Severity under analysis Ransomware added on 09/16/2024
Progress · WhatsUp Gold · CWE-89
Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user.
CVE-2024-40766
Severity under analysis Ransomware added on 09/09/2024
SonicWall · SonicOS · CWE-284
SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.
CVE-2017-1000253
Severity under analysis Ransomware added on 09/09/2024
Linux · Kernel · CWE-119
Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a local attacker to escalate privileges.
CVE-2024-23897
Severity under analysis Ransomware added on 08/19/2024
Jenkins · Jenkins Command Line Interface (CLI) · CWE-27
Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution.
CVE-2024-37085
Severity under analysis Ransomware added on 07/30/2024
VMware · ESXi · CWE-305
VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.
CVE-2024-23692
Severity under analysis Ransomware added on 07/09/2024
Rejetto · HTTP File Server · CWE-1336
Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.
CVE-2024-26169
Severity under analysis Ransomware added on 06/13/2024
Microsoft · Windows · CWE-269
Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.
CVE-2024-4577
Severity under analysis Ransomware added on 06/12/2024
PHP Group · PHP · CWE-78
PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823.
CVE-2024-24919
Severity under analysis Ransomware added on 05/30/2024
Check Point · Quantum Security Gateways · CWE-200
Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.
CVE-2024-1086
Severity under analysis Ransomware added on 05/30/2024
Linux · Kernel · CWE-416
Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.
CVE-2023-43208
Severity under analysis Ransomware added on 05/20/2024
NextGen Healthcare · Mirth Connect · CWE-502
NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code execution via a specially crafted request.
CVE-2024-30051
Severity under analysis Ransomware added on 05/14/2024
Microsoft · DWM Core Library · CWE-122
Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges.
CVE-2024-3400
Severity under analysis Ransomware added on 04/12/2024
Palo Alto Networks · PAN-OS · CWE-20, CWE-77
Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.
CVE-2023-24955
Severity under analysis Ransomware added on 03/26/2024
Microsoft · SharePoint Server · CWE-94
Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.
CVE-2023-48788
Severity under analysis Ransomware added on 03/25/2024
Fortinet · FortiClient EMS · CWE-89
Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.
CVE-2021-44529
Severity under analysis Ransomware added on 03/25/2024
Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA) · CWE-94
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).
CVE-2024-27198
Severity under analysis Ransomware added on 03/07/2024
JetBrains · TeamCity · CWE-288
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.
CVE-2024-21338
Severity under analysis Ransomware added on 03/04/2024
Microsoft · Windows · CWE-822
Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation.
CVE-2024-1709
Severity under analysis Ransomware added on 02/22/2024
ConnectWise · ScreenConnect · CWE-288
ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management interface to create a new, administrator-level account on affected devices.
CVE-2020-3259
Severity under analysis Ransomware added on 02/15/2024
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) · CWE-200
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. This vulnerability affects only specific AnyConnect and WebVPN configurations.
CVE-2024-21412
Severity under analysis Ransomware added on 02/13/2024
Microsoft · Windows · CWE-693
Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass.
CVE-2024-21762
Severity under analysis Ransomware added on 02/09/2024
Fortinet · FortiOS · CWE-787
Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.
CVE-2024-21893
Severity under analysis Ransomware added on 01/31/2024
Ivanti · Connect Secure, Policy Secure, and Neurons · CWE-918
Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request forgery (SSRF) vulnerability in the SAML component that allows an attacker to access certain restricted resources without authentication.
CVE-2023-22527
Severity under analysis Ransomware added on 01/24/2024
Atlassian · Confluence Data Center and Server · CWE-74
Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code execution.
We assess versions, access and integrations of your ERP and infrastructure and prioritize the fixes.
Sources: CISA Known Exploited Vulnerabilities Catalog, NIST National Vulnerability Database and FIRST EPSS. Informational content; always follow the vendor advisory and fix.
This product uses the NVD API but is not endorsed or certified by the NVD.
Bit is an AI and can make mistakes. Do not share passwords or personal data. Conversations are not stored. Learn more