CVEs used in ransomware attacks, newest first, page 2
Filter
The CVEs CISA's Known Exploited Vulnerabilities catalog marks as used in ransomware campaigns, newest first, with CVSS, EPSS and fixes for each. Narrow it: in CISA KEV · critical. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, New CVEs today, This week, Patch Tuesday
- 6.9CVE-2024-9474KEVExploitEPSS 94%
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are…
- 9.3CVE-2024-0012KEVExploitEPSS 99.7%
An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with t…
- 8.8CVE-2024-49039KEVEPSS 14%
Windows Task Scheduler Elevation of Privilege Vulnerability
- 9.8CVE-2024-51567KEVExploitEPSS 84%
upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is …
- 9.8CVE-2024-51378KEVExploitEPSS 95%
getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secM…
- 9.8CVE-2024-50623KEVExploitEPSS 99%
In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.
- 9.1CVE-2024-41713KEVExploitEPSS 97%
A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successf…
- 9.8CVE-2024-9680KEVEPSS 23%
An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.…
- 9.8CVE-2024-40711KEVExploitEPSS 90%
A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).
- 9.8CVE-2024-6670KEVExploitEPSS 93%
In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.
- 9.8CVE-2024-40766KEVEPSS 18%
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects Soni…
- 7.2CVE-2024-38094KEVEPSS 51%
Microsoft SharePoint Remote Code Execution Vulnerability
- 7.2CVE-2024-37085KEVEPSS 27%
VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blo…
- 7.0CVE-2024-30088KEVEPSS 68%
Windows Kernel Elevation of Privilege Vulnerability
- 9.8CVE-2024-4577KEVExploitEPSS >99.9%
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command…
- 9.8CVE-2024-23692KEVExploitEPSS 99.4%
Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a…
- 8.6CVE-2024-24919KEVExploitEPSS >99.9%
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerabil…
- 7.8CVE-2024-30051KEVEPSS 6.2%
Windows DWM Core Library Elevation of Privilege Vulnerability
- 10.0CVE-2024-3400KEVExploitEPSS >99.9%
A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated atta…
- 7.8CVE-2024-26169KEVEPSS 4.0%
Windows Error Reporting Service Elevation of Privilege Vulnerability
- 9.8CVE-2023-48788KEVExploitEPSS 98%
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via…
- 7.3CVE-2024-27199KEVExploitEPSS >99.9%
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
- 9.8CVE-2024-27198KEVExploitEPSS >99.9%
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
- 10.0CVE-2024-1709KEVExploitEPSS >99.9%
ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.
- 8.4CVE-2024-1708KEVExploitEPSS 95%
ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems.
- 8.1CVE-2024-21412KEVEPSS 99.4%
Internet Shortcut Files Security Feature Bypass Vulnerability
- 7.8CVE-2024-21338KEVExploitEPSS 62%
Windows Kernel Elevation of Privilege Vulnerability
- 9.8CVE-2024-21762KEVEPSS 85%
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 …
- 8.2CVE-2024-21893KEVExploitEPSS >99.9%
A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authen…
- 7.8CVE-2024-1086KEVEPSS 28%
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, an…
- 9.8CVE-2024-23897KEVExploitEPSS >99.9%
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to r…
- 9.8CVE-2023-22527KEVExploitEPSS >99.9%
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most rece…
- 9.1CVE-2024-21887KEVExploitEPSS >99.9%
A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the a…
- 8.2CVE-2023-46805KEVExploitEPSS >99.9%
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.
- 9.9CVE-2023-48365KEVEPSS 48%
Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP req…
- 9.8CVE-2023-47246KEVExploitEPSS 99%
In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.
- 9.8CVE-2023-22518KEVExploitEPSS >99.9%
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrat…
- 9.8CVE-2023-46604KEVExploitEPSS >99.9%
The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipul…
- 9.8CVE-2023-46747KEVExploitEPSS 97%
Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands. Note: Software …
- 9.8CVE-2023-43208KEVExploitEPSS 86%
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-2023-37679.
- 7.5CVE-2023-4966KEVExploitEPSS >99.9%
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
- 9.8CVE-2023-22515KEVExploitEPSS 99.2%
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauth…
- 8.8CVE-2023-40044KEVExploitEPSS 90%
In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.
- 9.8CVE-2023-42793KEVExploitEPSS >99.9%
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
- 9.1CVE-2023-20269KEVEPSS 27%
A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an at…
- 6.5CVE-2023-41266KEVExploitEPSS 85%
A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unau…
- 9.9CVE-2023-41265KEVExploitEPSS 88%
An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allow…
- 7.8CVE-2023-38831KEVExploitEPSS 99.8%
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file (such as an ordinary .JPG file) and also…
- 9.8CVE-2023-38035KEVExploitEPSS >99.9%
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache …
- 9.8CVE-2023-35082KEVExploitEPSS >99.9%
An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-350…