CVE Intelligence
Home / CVEs

Exploited vulnerabilities (CISA KEV)

CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.

Severity
Clear

1.756 result(s)

Export this search: RSS · CSV · STIX
CVE-2024-49138 High · 7.8 KEV Urgent · 70 Public exploit CWE-122 Dec 11, 2024
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-55550 Low · 2.7 KEV High · 67 Public exploit Ransomware CWE-22 Dec 10, 2024
Mitel MiCollab Path Traversal Vulnerability
Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation.
CVE-2024-53104 High · 7.8 KEV High · 60 Public exploit CWE-787 Dec 2, 2024
Linux Kernel Out-of-Bounds Write Vulnerability
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.
CVE-2024-11667 Critical · 9.8 KEV Urgent · 71 Ransomware CWE-22 Nov 27, 2024
Zyxel Multiple Firewalls Path Traversal Vulnerability
A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.
CVE-2024-49035 Critical · 9.8 KEV High · 56 CWE-269 Nov 26, 2024
Microsoft Partner Center Improper Access Control Vulnerability
An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.
CVE-2024-11680 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-306 Nov 26, 2024
ProjectSend Improper Authentication Vulnerability
ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit this flaw by sending crafted HTTP requests to options.php, enabling unauthorized modification of the application's configuration. Successful exploitation allows attackers to create accounts, upload webshells, and embed malicious JavaScript.
CVE-2024-44308 High · 8.8 KEV High · 61 Public exploit Nov 19, 2024
Apple Multiple Products Code Execution Vulnerability
The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.
CVE-2024-44309 Medium · 6.3 KEV High · 53 CWE-79 Nov 19, 2024
Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.
CVE-2024-50302 Medium · 5.5 KEV High · 46 CWE-908 Nov 18, 2024
Linux Kernel Use of Uninitialized Resource Vulnerability
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
CVE-2024-21287 High · 7.5 KEV High · 56 CWE-863 Nov 18, 2024
Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM Framework accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
CVE-2024-9474 High · 7.2 KEV Urgent · 86 Public exploit Ransomware CWE-78 Nov 18, 2024
Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.
CVE-2024-0012 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-306 Nov 18, 2024
Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like CVE-2024-9474 https://security.paloaltonetworks.com/CVE-2024-9474 . The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable only to PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS 11.2 software. Cloud NGFW and Prisma Access are not impacted by this vulnerability.
CVE-2024-11182 Medium · 6.1 KEV High · 53 CWE-79 Nov 15, 2024
MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability
An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window.
CVE-2024-11120 Critical · 9.8 KEV High · 63 CWE-78 Nov 14, 2024
GeoVision Devices OS Command Injection Vulnerability
Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports.
CVE-2024-43093 High · 7.3 KEV High · 49 CWE-176 Nov 13, 2024
Android Framework Privilege Escalation Vulnerability
In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2024-8069 High · 8.0 KEV High · 62 Public exploit CWE-502 Nov 12, 2024
Citrix Session Recording Deserialization of Untrusted Data Vulnerability
Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server
CVE-2024-8068 High · 8.0 KEV High · 60 Public exploit CWE-269 Nov 12, 2024
Citrix Session Recording Improper Privilege Management Vulnerability
Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain
CVE-2024-49039 High · 8.8 KEV Urgent · 71 Public exploit Ransomware CWE-287 Nov 12, 2024
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
Windows Task Scheduler Elevation of Privilege Vulnerability
CVE-2024-43451 Medium · 6.5 KEV High · 59 Public exploit CWE-73 Nov 12, 2024
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
NTLM Hash Disclosure Spoofing Vulnerability
CVE-2024-51567 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-306 Oct 29, 2024
CyberPanel Incorrect Default Permissions Vulnerability
upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.
CVE-2024-51378 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-78 Oct 29, 2024
CyberPanel Incorrect Default Permissions Vulnerability
getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.
CVE-2024-50623 Critical · 9.8 KEV Urgent · 80 Public exploit Ransomware CWE-434 Oct 27, 2024
Cleo Multiple Products Unrestricted File Upload Vulnerability
In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.
CVE-2024-20481 Medium · 5.8 KEV High · 56 CWE-772 Oct 23, 2024
Cisco ASA and FTD Denial-of-Service Vulnerability
A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of the RAVPN service. This vulnerability is due to resource exhaustion. An attacker could exploit this vulnerability by sending a large number of VPN authentication requests to an affected device. A successful exploit could allow the attacker to exhaust resources, resulting in a DoS of the RAVPN service on the affected device. Depending on the impact of the attack, a reload of the device may be required to restore the RAVPN service. Services that are not related to VPN are not affected. Cisco Talos discussed these attacks in the blog post Large-scale brute-force activity targeting VPNs, SSH services with commonly used login credentials.
CVE-2024-47575 Critical · 9.8 KEV Urgent · 78 Public exploit CWE-306 Oct 23, 2024
Fortinet FortiManager Missing Authentication Vulnerability
A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.
CVE-2024-41713 Critical · 9.1 KEV Urgent · 83 Public exploit Ransomware CWE-22 Oct 21, 2024
Mitel MiCollab Path Traversal Vulnerability
A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations.