| CVE-2024-20481Cisco ASA and FTD Denial-of-Service Vulnerability Cisco Cisco Adaptive Security Appliance (ASA) Software, Cisco Cisco Firepower Threat Defense Software Versions & vendor guidance → |
Known exploitedCISA KEV |
5.8Medium |
| CVE-2024-20439Cisco Smart Licensing Utility Static Credential Vulnerability Cisco Cisco Smart License Utility Versions & vendor guidance → |
Known exploitedCISA KEV |
9.8Critical |
| CVE-2024-20399Cisco NX-OS Software CLI Command Injection Vulnerability Cisco Cisco NX-OS Software Versions & vendor guidance → |
Known exploitedCISA KEV |
6Medium |
| CVE-2024-20359Cisco ASA and FTD Privilege Escalation Vulnerability Cisco Cisco Adaptive Security Appliance (ASA) Software, Cisco Cisco Firepower Threat Defense Software Versions & vendor guidance → |
Known exploitedCISA KEV |
6Medium |
| CVE-2024-20353Cisco ASA and FTD Denial of Service Vulnerability Cisco Cisco Adaptive Security Appliance (ASA) Software, Cisco Cisco Firepower Threat Defense Software Versions & vendor guidance → |
Known exploitedCISA KEV |
8.6High |
| CVE-2024-1709Authentication bypass using an alternate path or channel ConnectWise ScreenConnect Versions & vendor guidance → |
Known exploitedCISA KEV |
10Critical |
| CVE-2024-1708Improper limitation of a pathname to a restricted directory (“path traversal”) ConnectWise ScreenConnect Versions & vendor guidance → |
Known exploitedCISA KEV |
8.4High |
| CVE-2024-13161Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti Endpoint Manager Versions & vendor guidance → |
Known exploitedCISA KEV |
9.8Critical |
| CVE-2024-13160Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti Endpoint Manager Versions & vendor guidance → |
Known exploitedCISA KEV |
9.8Critical |
| CVE-2024-13159Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti Endpoint Manager Versions & vendor guidance → |
Known exploitedCISA KEV |
9.8Critical |
| CVE-2024-12987DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection DrayTek Vigor2960, DrayTek Vigor300B Versions & vendor guidance → |
Known exploitedCISA KEV |
6.9Medium |
| CVE-2024-12686Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA) BeyondTrust Remote Support(RS) & Privileged Remote Access(PRA) Versions & vendor guidance → |
Known exploitedCISA KEV |
6.6Medium |
| CVE-2024-12356Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA) BeyondTrust Remote Support, BeyondTrust Privileged Remote Access Versions & vendor guidance → |
Known exploitedCISA KEV |
9.8Critical |
| CVE-2024-1212LoadMaster Pre-Authenticated OS Command Injection Progress Software LoadMaster Versions & vendor guidance → |
Known exploitedCISA KEV |
10Critical |
| CVE-2024-11680ProjectSend Unauthenticated Configuration Modification ProjectSend ProjectSend Versions & vendor guidance → |
Known exploitedCISA KEV |
9.8Critical |
| CVE-2024-11667Zyxel Multiple Firewalls Path Traversal Vulnerability Zyxel ATP series firmware, Zyxel USG FLEX series firmware, Zyxel USG FLEX 50(W) series firmware, Zyxel USG20(W)-VPN series firmware Versions & vendor guidance → |
Known exploitedCISA KEV |
7.5High |
| CVE-2024-11182Stored XSS vulnerability in MDaemon Email Server MDaemon Email Server Versions & vendor guidance → |
Known exploitedCISA KEV |
5.3Medium |
| CVE-2024-11120GeoVision EOL devices - OS Command Injection GeoVision GV-VS12, GeoVision GV-VS11, GeoVision GV-DSP_LPR_V3, GeoVision GVLX 4 V2, GeoVision GVLX 4 V3 Reported fix guidance → |
Known exploitedCISA KEV |
9.8Critical |
| CVE-2024-1086Use-after-free in Linux kernel's netfilter: nf_tables component Linux Kernel Versions & vendor guidance → |
Known exploitedCISA KEV |
7.8High |
| CVE-2024-0769D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal D-Link DIR-859 Versions & vendor guidance → |
Known exploitedCISA KEV |
5.3Medium |
| CVE-2024-0519Google Chromium V8 Out-of-Bounds Memory Access Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV |
8.8High |
| CVE-2024-0012PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) Palo Alto Networks Cloud NGFW, Palo Alto Networks PAN-OS, Palo Alto Networks Prisma Access Reported fix guidance → |
Known exploitedCISA KEV |
9.3Critical |
| CVE-2023-7102Remote Code Execution (RCE) Vulnerability Barracuda Networks Inc. Barracuda ESG Appliance Versions & vendor guidance → |
Not in downloaded KEV |
Unknown |
| CVE-2023-7101Arbitrary Code Execution (ACE) Vulnerability Douglas Wilson Spreadsheet::ParseExcel Reported fix guidance → |
Known exploitedCISA KEV |
7.8High |
| CVE-2023-7028Weak Password Recovery Mechanism for Forgotten Password in GitLab GitLab GitLab Reported fix guidance → |
Known exploitedCISA KEV |
10Critical |