Exploited Vulnerabilities DailyVulnerabilities added to KEV in September 2024
Added25
Ransomware-linked4
Vendors13
By vendor
5
4
3
3
2
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2023-25280 | D-Link DIR-820 Router | 2024-09-30 | 97.8% | Unknown |
| CVE-2020-15415 | DrayTek Multiple Vigor Routers | 2024-09-30 | 84.4% | Unknown |
| CVE-2019-0344 | SAP Commerce Cloud | 2024-09-30 | 7.0% | Unknown |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager | 2024-09-24 | 99.9% | Unknown |
| CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) | 2024-09-19 | 98.6% | Unknown |
| CVE-2024-27348 | Apache HugeGraph-Server | 2024-09-18 | 99.2% | Unknown |
| CVE-2022-21445 | Oracle ADF Faces | 2024-09-18 | 62.4% | Unknown |
| CVE-2020-14644 | Oracle WebLogic Server | 2024-09-18 | 94.5% | Unknown |
| CVE-2020-0618 | Microsoft SQL Server | 2024-09-18 | 99.0% | Known |
| CVE-2014-0502 | Adobe Flash Player | 2024-09-17 | 24.8% | Unknown |
| CVE-2014-0497 | Adobe Flash Player | 2024-09-17 | 99.8% | Unknown |
| CVE-2013-0648 | Adobe Flash Player | 2024-09-17 | 11.0% | Unknown |
| CVE-2013-0643 | Adobe Flash Player | 2024-09-17 | 10.5% | Unknown |
| CVE-2024-6670 | Progress WhatsUp Gold | 2024-09-16 | 93.0% | Known |
| CVE-2024-43461 | Microsoft Windows | 2024-09-16 | 54.4% | Unknown |
| CVE-2024-8190 | Ivanti Cloud Services Appliance | 2024-09-13 | 88.5% | Unknown |
| CVE-2024-38226 | Microsoft Publisher | 2024-09-10 | 2.6% | Unknown |
| CVE-2024-38217 | Microsoft Windows | 2024-09-10 | 10.0% | Unknown |
| CVE-2024-38014 | Microsoft Windows | 2024-09-10 | 6.2% | Unknown |
| CVE-2024-40766 | SonicWall SonicOS | 2024-09-09 | 18.3% | Known |
| CVE-2017-1000253 | Linux Kernel | 2024-09-09 | 10.6% | Known |
| CVE-2016-3714 | ImageMagick ImageMagick | 2024-09-09 | 97.4% | Unknown |
| CVE-2024-7262 | Kingsoft WPS Office | 2024-09-03 | 2.9% | Unknown |
| CVE-2021-20124 | DrayTek VigorConnect | 2024-09-03 | 96.3% | Unknown |
| CVE-2021-20123 | DrayTek VigorConnect | 2024-09-03 | 90.2% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.