Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-284
Entries37
Ransomware-linked3
Vendors23
By vendor
6
4
4
3
2
1
1
1
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2015-3306 | ProFTPD ProFTPD | 2026-10-08 | 96.7% | Unknown |
| CVE-2026-81963 | Microsoft Windows | 2026-09-08 | 0.3% | Unknown |
| CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in | 2026-08-24 | 73.1% | Unknown |
| CVE-2026-56290 | Joomlack Page Builder | 2026-07-07 | 30.8% | Unknown |
| CVE-2026-34908 | Ubiquiti UniFi OS | 2026-06-23 | 15.2% | Unknown |
| CVE-2026-48907 | Widget Factory Joomla Content Editor | 2026-06-16 | 16.1% | Unknown |
| CVE-2026-35616 | Fortinet FortiClient EMS | 2026-04-06 | 9.0% | Unknown |
| CVE-2025-31125 | Vite Vitejs | 2026-01-22 | 65.1% | Unknown |
| CVE-2025-12480 | Gladinet Triofox | 2025-11-12 | 95.4% | Unknown |
| CVE-2025-33073 | Microsoft Windows | 2025-10-20 | 82.6% | Unknown |
| CVE-2025-59230 | Microsoft Windows | 2025-10-14 | 2.6% | Unknown |
| CVE-2025-24989 | Microsoft Power Pages | 2025-02-21 | 1.6% | Unknown |
| CVE-2024-20767 | Adobe ColdFusion | 2024-12-16 | 98.5% | Unknown |
| CVE-2024-45519 | Synacor Zimbra Collaboration Suite (ZCS) | 2024-10-03 | 99.9% | Unknown |
| CVE-2024-27348 | Apache HugeGraph-Server | 2024-09-18 | 99.2% | Unknown |
| CVE-2024-40766 | SonicWall SonicOS | 2024-09-09 | 18.3% | Known |
| CVE-2023-7028 | GitLab GitLab CE/EE | 2024-05-01 | 94.6% | Unknown |
| CVE-2023-23752 | Joomla! Joomla! | 2024-01-08 | 99.8% | Unknown |
| CVE-2023-24489 | Citrix Content Collaboration | 2023-08-16 | 97.3% | Unknown |
| CVE-2023-38205 | Adobe ColdFusion | 2023-07-20 | 99.7% | Unknown |
| CVE-2023-29298 | Adobe ColdFusion | 2023-07-20 | 99.7% | Unknown |
| CVE-2016-8735 | Apache Tomcat | 2023-05-12 | 90.3% | Unknown |
| CVE-2023-27350 | PaperCut MF/NG | 2023-04-21 | 99.9% | Known |
| CVE-2023-26360 | Adobe ColdFusion | 2023-03-15 | 97.3% | Unknown |
| CVE-2016-7256 | Microsoft Windows | 2022-05-25 | 64.5% | Unknown |
| CVE-2016-3393 | Microsoft Windows | 2022-05-25 | 68.4% | Unknown |
| CVE-2021-22941 | Citrix ShareFile | 2022-03-25 | 53.5% | Known |
| CVE-2020-2506 | QNAP Systems Helpdesk | 2022-03-25 | 1.9% | Unknown |
| CVE-2015-1427 | Elastic Elasticsearch | 2022-03-25 | 99.9% | Unknown |
| CVE-2014-3120 | Elastic Elasticsearch | 2022-03-25 | 88.5% | Unknown |
| CVE-2022-23134 | Zabbix Frontend | 2022-02-22 | 95.2% | Unknown |
| CVE-2021-23874 | McAfee McAfee Total Protection (MTP) | 2021-11-03 | 1.0% | Unknown |
| CVE-2020-8196 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 26.3% | Unknown |
| CVE-2020-8193 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 88.4% | Unknown |
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers | 2021-11-03 | 99.8% | Unknown |
| CVE-2016-4437 | Apache Shiro | 2021-11-03 | 93.0% | Unknown |
| CVE-2016-3715 | ImageMagick ImageMagick | 2021-11-03 | 75.3% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
37 KEV entries are classified as CWE-284. CWE definition (MITRE)