Γνωστές εκμεταλλευόμενες ευπάθειες
Δημιουργήθηκε από τον κατάλογο γνωστών εκμεταλλευόμενων ευπαθειών της CISA, όπως ήταν στις 3 Νοεμβρίου 2026.
Οι 503 καταχωρίσεις του καταλόγου της CISA για τις οποίες το Vardion διαθέτει έλεγχο. Οι νεότερες πρώτες.
Τελευταία ενημέρωση: 3 Νοεμβρίου 2026. Η νεότερη καταχώριση με έλεγχο του Vardion προστέθηκε στις 25 Σεπτεμβρίου 2026.
Οι πιο πρόσφατες
- CVE-2026-87902WordPress Core
- CVE-2026-71362Adobe Commerce and Magento
- CVE-2026-85706GitLab Community Edition and Enterprise Edition
- CVE-2026-42018JFrog Artifactory
- CVE-2026-20079Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
- CVE-2026-86218N-able N-central
Ανά τεχνολογία
- Adobe 13 καταχωρίσεις
- Apache 36 καταχωρίσεις
- Atlassian 13 καταχωρίσεις
- Cisco 13 καταχωρίσεις
- Citrix 10 καταχωρίσεις
- D-Link 11 καταχωρίσεις
- Drupal 4 καταχωρίσεις
- F5 4 καταχωρίσεις
- Fortinet 11 καταχωρίσεις
- Ivanti 21 καταχωρίσεις
- Joomla 3 καταχωρίσεις
- Microsoft 17 καταχωρίσεις
- Microsoft Exchange 3 καταχωρίσεις
- Oracle 19 καταχωρίσεις
- Palo Alto Networks 9 καταχωρίσεις
- PHP 4 καταχωρίσεις
- Progress 7 καταχωρίσεις
- QNAP 5 καταχωρίσεις
- SAP 5 καταχωρίσεις
- SolarWinds 8 καταχωρίσεις
- SonicWall 6 καταχωρίσεις
- Sophos 4 καταχωρίσεις
- VMware 17 καταχωρίσεις
- WordPress 6 καταχωρίσεις
- Zimbra 16 καταχωρίσεις
- Zoho 7 καταχωρίσεις
Όλες οι ευπάθειες υπό εκμετάλλευση
| CVE | Προϊόν | Από | |
|---|---|---|---|
| CVE-2026-87902 | WordPress Core | ||
| CVE-2026-71362 | Adobe Commerce and Magento | ||
| CVE-2026-85706 | GitLab Community Edition and Enterprise Edition | ||
| CVE-2026-42018 | JFrog Artifactory | ||
| CVE-2026-20079 | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | ||
| CVE-2026-86218 | N-able N-central | ||
| CVE-2026-9586 | Sangoma Switchvox | ||
| CVE-2026-83548 | SonicWall SMA1000 Appliances | ||
| CVE-2026-82329 | JFrog Artifactory | ||
| CVE-2026-48710 | Kludex Starlette | ||
| CVE-2026-81578 | PaperCut NG/MF | ||
| CVE-2026-60004 | Gitea Gitea | ||
| CVE-2026-73570 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2026-64849 | MLflow MLflow | ||
| CVE-2026-55040 | Microsoft SharePoint | ||
| CVE-2025-62593 | Ray-Project Ray | ||
| CVE-2026-72898 | Metabase Metabase | ||
| CVE-2026-8037 | Progress LoadMaster | ||
| CVE-2026-63077 | JetBrains TeamCity | Ransomware | |
| CVE-2026-9198 | IBM Langflow | ||
| CVE-2026-34486 | Apache Tomcat | ||
| CVE-2026-18577 | N-able N-central | ||
| CVE-2026-16232 | Check Point SmartConsole | ||
| CVE-2026-63030 | WordPress Core | ||
| CVE-2026-0770 | Langflow Langflow | ||
| CVE-2026-58644 | Microsoft SharePoint | ||
| CVE-2026-39808 | Fortinet FortiSandbox | ||
| CVE-2026-15409 | SonicWall SMA1000 Appliances | Ransomware | |
| CVE-2026-56291 | Balbooa Forms | ||
| CVE-2026-48939 | iCagenda iCagenda | ||
| CVE-2026-56290 | Joomlack Page Builder | ||
| CVE-2026-48908 | JoomShaper SP Page Builder | ||
| CVE-2026-48282 | Adobe ColdFusion | ||
| CVE-2026-48558 | SimpleHelp SimpleHelp | ||
| CVE-2026-34910 | Ubiquiti UniFi OS | ||
| CVE-2026-34908 | Ubiquiti UniFi OS | ||
| CVE-2026-20253 | Splunk Enterprise | ||
| CVE-2026-48907 | Widget Factory Joomla Content Editor | ||
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools | Ransomware | |
| CVE-2026-10520 | Ivanti Sentry | ||
| CVE-2026-50751 | Check Point Security Gateway | Ransomware | |
| CVE-2026-42271 | BerriAI LiteLLM | ||
| CVE-2026-0257 | Palo Alto Networks PAN-OS | Ransomware | |
| CVE-2026-9082 | Drupal Core | ||
| CVE-2025-34291 | Langflow Langflow | ||
| CVE-2026-42208 | BerriAI LiteLLM | ||
| CVE-2026-41940 | WebPros cPanel & WHM and WP2 (WordPress Squared) | Ransomware | |
| CVE-2024-1708 | ConnectWise ScreenConnect | Ransomware | |
| CVE-2025-29635 | D-Link DIR-823X | ||
| CVE-2024-7399 | Samsung MagicINFO 9 Server | ||
| CVE-2024-57728 | SimpleHelp SimpleHelp | Ransomware | |
| CVE-2024-57726 | SimpleHelp SimpleHelp | Ransomware | |
| CVE-2026-39987 | Marimo Marimo | ||
| CVE-2024-27199 | JetBrains TeamCity | Ransomware | |
| CVE-2023-27351 | PaperCut NG/MF | Ransomware | |
| CVE-2026-34197 | Apache ActiveMQ | ||
| CVE-2026-21643 | Fortinet FortiClient EMS | ||
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) | ||
| CVE-2026-35616 | Fortinet FortiClient EMS | ||
| CVE-2026-3055 | Citrix NetScaler | ||
| CVE-2026-33017 | Langflow Langflow | ||
| CVE-2025-54068 | Laravel Livewire | ||
| CVE-2025-32432 | Craft CMS Craft CMS | ||
| CVE-2025-47813 | Wing FTP Server Wing FTP Server | ||
| CVE-2025-68613 | n8n n8n | ||
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) | ||
| CVE-2025-26399 | SolarWinds Web Help Desk | Ransomware | |
| CVE-2021-22054 | Omnissa Workspace One UEM | ||
| CVE-2017-7921 | Hikvision Multiple Products | ||
| CVE-2025-49113 | Roundcube Webmail | ||
| CVE-2021-22175 | GitLab GitLab | ||
| CVE-2020-7796 | Synacor Zimbra Collaboration Suite | ||
| CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | Ransomware | |
| CVE-2025-40536 | SolarWinds Web Help Desk | ||
| CVE-2026-24423 | SmarterTools SmarterMail | Ransomware | |
| CVE-2025-11953 | React Native Community CLI | ||
| CVE-2025-64328 | Sangoma FreePBX | ||
| CVE-2025-40551 | SolarWinds Web Help Desk | ||
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | ||
| CVE-2026-23760 | SmarterTools SmarterMail | Ransomware | |
| CVE-2025-52691 | SmarterTools SmarterMail | Ransomware | |
| CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2025-34026 | Versa Concerto | ||
| CVE-2025-31125 | Vite Vitejs | ||
| CVE-2025-8110 | Gogs Gogs | ||
| CVE-2025-37164 | Hewlett Packard Enterprise (HPE) OneView | ||
| CVE-2025-14847 | MongoDB MongoDB and MongoDB Server | ||
| CVE-2023-52163 | Digiever DS-2105 Pro | ||
| CVE-2025-14611 | Gladinet CentreStack and Triofox | ||
| CVE-2025-58360 | OSGeo GeoServer | ||
| CVE-2025-55182 | Meta React Server Components | Ransomware | |
| CVE-2025-61757 | Oracle Fusion Middleware | ||
| CVE-2025-64446 | Fortinet FortiWeb | ||
| CVE-2025-12480 | Gladinet Triofox | ||
| CVE-2025-48703 | CWP Control Web Panel | ||
| CVE-2025-11371 | Gladinet CentreStack and Triofox | ||
| CVE-2025-24893 | XWiki Platform | ||
| CVE-2025-6205 | Dassault Systèmes DELMIA Apriso | ||
| CVE-2025-6204 | Dassault Systèmes DELMIA Apriso | ||
| CVE-2025-59287 | Microsoft Windows | ||
| CVE-2025-54236 | Adobe Commerce and Magento | ||
| CVE-2025-61884 | Oracle E-Business Suite | Ransomware | |
| CVE-2025-2747 | Kentico Xperience CMS | ||
| CVE-2025-2746 | Kentico Xperience CMS | ||
| CVE-2021-43798 | Grafana Labs Grafana | ||
| CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2025-61882 | Oracle E-Business Suite | Ransomware | |
| CVE-2025-4008 | Smartbedded Meteobridge | ||
| CVE-2025-10035 | Fortra GoAnywhere MFT | Ransomware | |
| CVE-2021-21311 | Adminer Adminer | ||
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | ||
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso | ||
| CVE-2025-57819 | Sangoma FreePBX | ||
| CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices | ||
| CVE-2025-20281 | Cisco Identity Services Engine | ||
| CVE-2025-49706 | Microsoft SharePoint | Ransomware | |
| CVE-2025-2776 | SysAid SysAid On-Prem | ||
| CVE-2025-2775 | SysAid SysAid On-Prem | ||
| CVE-2025-53770 | Microsoft SharePoint | Ransomware | |
| CVE-2025-25257 | Fortinet FortiWeb | ||
| CVE-2025-47812 | Wing FTP Server Wing FTP Server | ||
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway | Ransomware | |
| CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2019-5418 | Rails Ruby on Rails | ||
| CVE-2016-10033 | PHP PHPMailer | ||
| CVE-2025-24016 | Wazuh Wazuh Server | ||
| CVE-2024-42009 | Roundcube Webmail | ||
| CVE-2024-56145 | Craft CMS Craft CMS | ||
| CVE-2021-32030 | ASUS Routers | ||
| CVE-2025-4632 | Samsung MagicINFO 9 Server | ||
| CVE-2025-4427 | Ivanti Endpoint Manager Mobile (EPMM) | ||
| CVE-2024-27443 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2023-38950 | ZKTeco BioTime | ||
| CVE-2024-12987 | DrayTek Vigor Routers | ||
| CVE-2025-3248 | Langflow Langflow | Ransomware | |
| CVE-2025-34028 | Commvault Command Center | ||
| CVE-2024-58136 | Yiiframework Yii | ||
| CVE-2024-38475 | Apache HTTP Server | ||
| CVE-2025-31324 | SAP NetWeaver | Ransomware | |
| CVE-2025-30406 | Gladinet CentreStack | ||
| CVE-2025-31161 | CrushFTP CrushFTP | Ransomware | |
| CVE-2025-24813 | Apache Tomcat | ||
| CVE-2024-20439 | Cisco Smart Licensing Utility | ||
| CVE-2019-9874 | Sitecore CMS and Experience Platform (XP) | ||
| CVE-2024-48248 | NAKIVO Backup and Replication | ||
| CVE-2017-12637 | SAP NetWeaver | ||
| CVE-2024-13161 | Ivanti Endpoint Manager (EPM) | ||
| CVE-2024-13160 | Ivanti Endpoint Manager (EPM) | ||
| CVE-2024-13159 | Ivanti Endpoint Manager (EPM) | ||
| CVE-2024-4885 | Progress WhatsUp Gold | ||
| CVE-2022-43939 | Hitachi Vantara Pentaho Business Analytics (BA) Server | ||
| CVE-2022-43769 | Hitachi Vantara Pentaho Business Analytics (BA) Server | ||
| CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2025-0108 | Palo Alto Networks PAN-OS | ||
| CVE-2024-53704 | SonicWall SonicOS | Ransomware | |
| CVE-2024-57727 | SimpleHelp SimpleHelp | Ransomware | |
| CVE-2024-45195 | Apache OFBiz | ||
| CVE-2024-29059 | Microsoft .NET Framework | ||
| CVE-2018-19410 | Paessler PRTG Network Monitor | ||
| CVE-2024-50603 | Aviatrix Controllers | ||
| CVE-2024-55591 | Fortinet FortiOS and FortiProxy | Ransomware | |
| CVE-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | Ransomware | |
| CVE-2024-55550 | Mitel MiCollab | Ransomware | |
| CVE-2024-41713 | Mitel MiCollab | Ransomware | |
| CVE-2020-2883 | Oracle WebLogic Server | ||
| CVE-2018-14933 | NUUO NVRmini Devices | ||
| CVE-2024-55956 | Cleo Multiple Products | Ransomware | |
| CVE-2024-20767 | Adobe ColdFusion | ||
| CVE-2024-50623 | Cleo Multiple Products | Ransomware | |
| CVE-2024-51378 | CyberPersons CyberPanel | Ransomware | |
| CVE-2024-11680 | ProjectSend ProjectSend | ||
| CVE-2024-9474 | Palo Alto Networks PAN-OS | Ransomware | |
| CVE-2024-1212 | Progress Kemp LoadMaster | ||
| CVE-2024-0012 | Palo Alto Networks PAN-OS | Ransomware | |
| CVE-2024-9465 | Palo Alto Networks Expedition | ||
| CVE-2024-9463 | Palo Alto Networks Expedition | ||
| CVE-2021-41277 | Metabase Metabase | ||
| CVE-2021-26086 | Atlassian Jira Server and Data Center | ||
| CVE-2024-5910 | Palo Alto Networks Expedition | ||
| CVE-2024-51567 | CyberPersons CyberPanel | Ransomware | |
| CVE-2019-16278 | Nostromo nhttpd | ||
| CVE-2024-40711 | Veeam Backup & Replication | Ransomware | |
| CVE-2024-28987 | SolarWinds Web Help Desk | ||
| CVE-2024-45519 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2024-29824 | Ivanti Endpoint Manager (EPM) | ||
| CVE-2023-25280 | D-Link DIR-820 Router | ||
| CVE-2020-15415 | DrayTek Multiple Vigor Routers | ||
| CVE-2024-7593 | Ivanti Virtual Traffic Manager | ||
| CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) | ||
| CVE-2024-27348 | Apache HugeGraph-Server | ||
| CVE-2020-14644 | Oracle WebLogic Server | ||
| CVE-2020-0618 | Microsoft SQL Server | Ransomware | |
| CVE-2024-6670 | Progress WhatsUp Gold | Ransomware | |
| CVE-2021-20124 | DrayTek VigorConnect | ||
| CVE-2021-20123 | DrayTek VigorConnect | ||
| CVE-2024-38856 | Apache OFBiz | ||
| CVE-2021-33045 | Dahua IP Camera Firmware | ||
| CVE-2021-33044 | Dahua IP Camera Firmware | ||
| CVE-2024-23897 | Jenkins Jenkins Command Line Interface (CLI) | Ransomware | |
| CVE-2024-28986 | SolarWinds Web Help Desk | ||
| CVE-2024-32113 | Apache OFBiz | ||
| CVE-2024-5217 | ServiceNow Utah, Vancouver, and Washington DC Now Platform | ||
| CVE-2024-4879 | ServiceNow Utah, Vancouver, and Washington DC Now Platform | ||
| CVE-2023-45249 | Acronis Cyber Infrastructure (ACI) | ||
| CVE-2024-34102 | Adobe Commerce and Magento Open Source | ||
| CVE-2024-28995 | SolarWinds Serv-U | ||
| CVE-2024-36401 | OSGeo GeoServer | ||
| CVE-2024-23692 | Rejetto HTTP File Server | Ransomware | |
| CVE-2022-24816 | OSGeo JAI-EXT | ||
| CVE-2024-4358 | Progress Telerik Report Server | ||
| CVE-2024-4577 | PHP Group PHP | Ransomware | |
| CVE-2017-3506 | Oracle WebLogic Server | ||
| CVE-2024-24919 | Check Point Quantum Security Gateways | Ransomware | |
| CVE-2020-17519 | Apache Flink | ||
| CVE-2023-43208 | NextGen Healthcare Mirth Connect | Ransomware | |
| CVE-2021-40655 | D-Link DIR-605 Router | ||
| CVE-2023-7028 | GitLab GitLab CE/EE | ||
| CVE-2024-4040 | CrushFTP CrushFTP | ||
| CVE-2024-3400 | Palo Alto Networks PAN-OS | Ransomware | |
| CVE-2024-3273 | D-Link Multiple NAS Devices | ||
| CVE-2024-3272 | D-Link Multiple NAS Devices | ||
| CVE-2023-48788 | Fortinet FortiClient EMS | Ransomware | |
| CVE-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) | Ransomware | |
| CVE-2019-7256 | Nice Linear eMerge E3-Series | ||
| CVE-2024-27198 | JetBrains TeamCity | Ransomware | |
| CVE-2021-36380 | Sunhillo SureLine | ||
| CVE-2024-1709 | ConnectWise ScreenConnect | Ransomware | |
| CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons | Ransomware | |
| CVE-2023-22527 | Atlassian Confluence Data Center and Server | Ransomware | |
| CVE-2023-34048 | VMware vCenter Server | ||
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core | Ransomware | |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway | ||
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure | Ransomware | |
| CVE-2023-46805 | Ivanti Connect Secure and Policy Secure | Ransomware | |
| CVE-2023-29357 | Microsoft SharePoint Server | Ransomware | |
| CVE-2023-38203 | Adobe ColdFusion | Ransomware | |
| CVE-2023-29300 | Adobe ColdFusion | Ransomware | |
| CVE-2023-27524 | Apache Superset | ||
| CVE-2023-23752 | Joomla! Joomla! | ||
| CVE-2023-41266 | Qlik Sense | Ransomware | |
| CVE-2023-41265 | Qlik Sense | Ransomware | |
| CVE-2023-49103 | ownCloud ownCloud graphapi | ||
| CVE-2023-1671 | Sophos Web Appliance | ||
| CVE-2020-2551 | Oracle Fusion Middleware | ||
| CVE-2023-47246 | SysAid SysAid Server | Ransomware | |
| CVE-2023-36845 | Juniper Junos OS | ||
| CVE-2023-36844 | Juniper Junos OS | ||
| CVE-2023-22518 | Atlassian Confluence Data Center and Server | Ransomware | |
| CVE-2023-46604 | Apache ActiveMQ | Ransomware | |
| CVE-2023-46747 | F5 BIG-IP Configuration Utility | Ransomware | |
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway | Ransomware | |
| CVE-2023-20198 | Cisco IOS XE Web UI | ||
| CVE-2023-41763 | Microsoft Skype for Business | ||
| CVE-2023-40044 | Progress WS_FTP Server | Ransomware | |
| CVE-2023-22515 | Atlassian Confluence Data Center and Server | Ransomware | |
| CVE-2023-42793 | JetBrains TeamCity | Ransomware | |
| CVE-2021-3129 | Laravel Ignition | Ransomware | |
| CVE-2023-33246 | Apache RocketMQ | ||
| CVE-2023-32315 | Ignite Realtime Openfire | ||
| CVE-2023-38035 | Ivanti Sentry | Ransomware | |
| CVE-2023-24489 | Citrix Content Collaboration | ||
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile (EPMM) | Ransomware | |
| CVE-2023-38205 | Adobe ColdFusion | ||
| CVE-2023-29298 | Adobe ColdFusion | ||
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway | Ransomware | |
| CVE-2022-29303 | SolarView Compact | ||
| CVE-2023-20887 | VMware Aria Operations for Networks | ||
| CVE-2020-12641 | Roundcube Roundcube Webmail | ||
| CVE-2023-34362 | Progress MOVEit Transfer | Ransomware | |
| CVE-2023-2868 | Barracuda Networks Email Security Gateway (ESG) Appliance | ||
| CVE-2023-25717 | Ruckus Wireless Multiple Products | ||
| CVE-2023-21839 | Oracle WebLogic Server | ||
| CVE-2023-1389 | TP-Link Archer AX21 | ||
| CVE-2021-45046 | Apache Log4j2 | Ransomware | |
| CVE-2023-28432 | MinIO MinIO | ||
| CVE-2023-27350 | PaperCut MF/NG | Ransomware | |
| CVE-2021-27877 | Veritas Backup Exec Agent | Ransomware | |
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2023-26360 | Adobe ColdFusion | ||
| CVE-2021-39144 | XStream XStream | ||
| CVE-2022-35914 | Teclib GLPI | ||
| CVE-2022-33891 | Apache Spark | ||
| CVE-2022-36537 | ZK Framework AuUploader | Ransomware | |
| CVE-2022-47986 | IBM Aspera Faspex | Ransomware | |
| CVE-2022-46169 | Cacti Cacti | ||
| CVE-2023-0669 | Fortra GoAnywhere MFT | Ransomware | |
| CVE-2022-24990 | TerraMaster TerraMaster OS | Ransomware | |
| CVE-2023-22952 | SugarCRM Multiple Products | ||
| CVE-2022-21587 | Oracle E-Business Suite | Ransomware | |
| CVE-2022-47966 | Zoho ManageEngine | Ransomware | |
| CVE-2022-44877 | CWP Control Web Panel | ||
| CVE-2018-18809 | TIBCO JasperReports | ||
| CVE-2022-42475 | Fortinet FortiOS | Ransomware | |
| CVE-2021-35587 | Oracle Fusion Middleware | ||
| CVE-2022-41352 | Synacor Zimbra Collaboration Suite (ZCS) | Ransomware | |
| CVE-2022-40684 | Fortinet Multiple Products | Ransomware | |
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center | ||
| CVE-2022-3236 | Sophos Firewall | ||
| CVE-2022-35405 | Zoho ManageEngine | ||
| CVE-2022-27593 | QNAP Photo Station | Ransomware | |
| CVE-2018-6530 | D-Link Multiple Routers | Ransomware | |
| CVE-2018-2628 | Oracle WebLogic Server | ||
| CVE-2017-5521 | NETGEAR Multiple Devices | ||
| CVE-2022-26352 | dotCMS dotCMS | Ransomware | |
| CVE-2022-24706 | Apache CouchDB | ||
| CVE-2022-24112 | Apache APISIX | ||
| CVE-2022-22963 | VMware Tanzu Spring Cloud | ||
| CVE-2021-39226 | Grafana Labs Grafana | ||
| CVE-2022-22536 | SAP Multiple Products | ||
| CVE-2017-15944 | Palo Alto Networks PAN-OS | ||
| CVE-2022-37042 | Synacor Zimbra Collaboration Suite (ZCS) | Ransomware | |
| CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) | Ransomware | |
| CVE-2022-26138 | Atlassian Confluence | ||
| CVE-2019-7195 | QNAP Photo Station | Ransomware | |
| CVE-2019-7194 | QNAP Photo Station | Ransomware | |
| CVE-2019-7192 | QNAP Photo Station | Ransomware | |
| CVE-2022-26134 | Atlassian Confluence Server/Data Center | Ransomware | |
| CVE-2017-18362 | Kaseya Virtual System/Server Administrator (VSA) | Ransomware | |
| CVE-2022-30525 | Zyxel Multiple Firewalls | ||
| CVE-2022-22947 | VMware Spring Cloud Gateway | ||
| CVE-2022-1388 | F5 BIG-IP | Ransomware | |
| CVE-2014-0160 | OpenSSL OpenSSL | ||
| CVE-2022-29464 | WSO2 Multiple Products | Ransomware | |
| CVE-2022-0847 | Linux Kernel | ||
| CVE-2018-6882 | Synacor Zimbra Collaboration Suite (ZCS) | Ransomware | |
| CVE-2019-3929 | Crestron Multiple Products | ||
| CVE-2019-16057 | D-Link DNS-320 Storage Device | Ransomware | |
| CVE-2018-7841 | Schneider Electric U.motion Builder | ||
| CVE-2007-3010 | Alcatel OmniPCX Enterprise | ||
| CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager | Ransomware | |
| CVE-2018-7602 | Drupal Core | Ransomware | |
| CVE-2022-22965 | VMware Spring Framework | ||
| CVE-2021-45382 | D-Link Multiple Routers | ||
| CVE-2022-1040 | Sophos Firewall | ||
| CVE-2021-28799 | QNAP Network Attached Storage (NAS) | Ransomware | |
| CVE-2018-10562 | Dasan Gigabit Passive Optical Network (GPON) Routers | Ransomware | |
| CVE-2022-0543 | Redis Debian-specific Redis Servers | ||
| CVE-2021-26085 | Atlassian Confluence Server | Ransomware | |
| CVE-2022-26143 | Mitel MiCollab, MiVoice Business Express | ||
| CVE-2021-42237 | Sitecore XP | Ransomware | |
| CVE-2020-9054 | Zyxel Multiple Network-Attached Storage (NAS) Devices | ||
| CVE-2020-7247 | OpenBSD OpenSMTPD | ||
| CVE-2020-5410 | VMware Tanzu Spring Cloud Configuration (Config) Server | ||
| CVE-2020-25223 | Sophos SG UTM | ||
| CVE-2020-1956 | Apache Kylin | ||
| CVE-2019-6340 | Drupal Core | ||
| CVE-2019-2616 | Oracle BI Publisher (Formerly XML Publisher) | ||
| CVE-2019-16920 | D-Link Multiple Routers | ||
| CVE-2019-15107 | Webmin Webmin | Ransomware | |
| CVE-2019-12989 | Citrix SD-WAN and NetScaler | ||
| CVE-2019-11043 | PHP FastCGI Process Manager (FPM) | Ransomware | |
| CVE-2019-10068 | Kentico Xperience | ||
| CVE-2019-1003030 | Jenkins Matrix Project Plugin | ||
| CVE-2018-6961 | VMware SD-WAN Edge | ||
| CVE-2018-1273 | VMware Tanzu Spring Data Commons | Ransomware | |
| CVE-2018-11138 | Quest KACE System Management Appliance | Ransomware | |
| CVE-2017-3881 | Cisco IOS and IOS XE | ||
| CVE-2017-12617 | Apache Tomcat | ||
| CVE-2017-12615 | Apache Tomcat | Ransomware | |
| CVE-2016-1555 | NETGEAR Wireless Access Point (WAP) Devices | ||
| CVE-2015-3035 | TP-Link Multiple Archer Devices | ||
| CVE-2015-1427 | Elastic Elasticsearch | ||
| CVE-2014-6287 | Rejetto HTTP File Server (HFS) | ||
| CVE-2014-3120 | Elastic Elasticsearch | ||
| CVE-2013-2251 | Apache Struts | ||
| CVE-2012-1823 | PHP PHP | ||
| CVE-2010-2861 | Adobe ColdFusion | Ransomware | |
| CVE-2009-1151 | phpMyAdmin phpMyAdmin | ||
| CVE-2021-21973 | VMware vCenter Server and Cloud Foundation | ||
| CVE-2019-11581 | Atlassian Jira Server and Data Center | ||
| CVE-2016-6277 | NETGEAR Multiple Routers | ||
| CVE-2020-1938 | Apache Tomcat | ||
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) | Ransomware | |
| CVE-2022-23134 | Zabbix Frontend | ||
| CVE-2022-23131 | Zabbix Frontend | ||
| CVE-2022-24086 | Adobe Commerce and Magento Open Source | ||
| CVE-2017-9841 | PHPUnit PHPUnit | ||
| CVE-2020-0796 | Microsoft SMBv3 | Ransomware | |
| CVE-2018-1000861 | Jenkins Jenkins Stapler Web Framework | ||
| CVE-2017-9791 | Apache Struts 1 | ||
| CVE-2017-10271 | Oracle WebLogic Server | Ransomware | |
| CVE-2016-3088 | Apache ActiveMQ | ||
| CVE-2015-1635 | Microsoft HTTP.sys | ||
| CVE-2021-20038 | SonicWall SMA 100 Appliances | Ransomware | |
| CVE-2020-5722 | Grandstream UCM6200 | ||
| CVE-2017-5689 | Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability | ||
| CVE-2014-6271 | GNU Bourne-Again Shell (Bash) | ||
| CVE-2021-40870 | Aviatrix Aviatrix Controller | ||
| CVE-2021-33766 | Microsoft Exchange Server | ||
| CVE-2021-32648 | October CMS October CMS | ||
| CVE-2021-25298 | Nagios Nagios XI | ||
| CVE-2021-25297 | Nagios Nagios XI | ||
| CVE-2021-25296 | Nagios Nagios XI | ||
| CVE-2021-21975 | VMware vRealize Operations Manager API | Ransomware | |
| CVE-2021-21315 | Npm package System Information Library for Node.JS | ||
| CVE-2020-14864 | Oracle Intelligence Enterprise Edition | ||
| CVE-2020-13927 | Apache Airflow's Experimental API | ||
| CVE-2020-11978 | Apache Airflow | ||
| CVE-2021-36260 | Hikvision Security cameras web server | ||
| CVE-2021-22017 | VMware vCenter Server | ||
| CVE-2019-9670 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2019-7609 | Elastic Kibana | ||
| CVE-2019-2725 | Oracle WebLogic Server | Ransomware | |
| CVE-2017-1000486 | Primetek Primefaces Application | ||
| CVE-2015-7450 | IBM WebSphere Application Server and Server Hypervisor Edition | ||
| CVE-2021-44515 | Zoho Desktop Central | ||
| CVE-2021-44228 | Apache Log4j2 | Ransomware | |
| CVE-2021-35394 | Realtek Jungle Software Development Kit (SDK) | ||
| CVE-2020-17463 | Fuel CMS Fuel CMS | ||
| CVE-2019-7238 | Sonatype Nexus Repository Manager | ||
| CVE-2019-10758 | MongoDB mongo-express | ||
| CVE-2019-0193 | Apache Solr | ||
| CVE-2017-17562 | Embedthis GoAhead | ||
| CVE-2017-12149 | Red Hat JBoss Application Server | Ransomware | |
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | ||
| CVE-2021-40438 | Apache Apache | Ransomware | |
| CVE-2021-37415 | Zoho ManageEngine ServiceDesk Plus (SDP) | ||
| CVE-2021-42258 | BQE BillQuick Web Suite | Ransomware | |
| CVE-2021-42013 | Apache HTTP Server | Ransomware | |
| CVE-2021-41773 | Apache HTTP Server | Ransomware | |
| CVE-2021-40539 | Zoho ManageEngine | Ransomware | |
| CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) | Ransomware | |
| CVE-2021-35464 | ForgeRock Access Management (AM) | Ransomware | |
| CVE-2021-35395 | Realtek AP-Router SDK | ||
| CVE-2021-35211 | SolarWinds Serv-U | Ransomware | |
| CVE-2021-34473 | Microsoft Exchange Server | Ransomware | |
| CVE-2021-31755 | Tenda AC11 Router | ||
| CVE-2021-30116 | Kaseya Virtual System/Server Administrator (VSA) | Ransomware | |
| CVE-2021-27561 | Yealink Device Management | ||
| CVE-2021-26855 | Microsoft Exchange Server | Ransomware | |
| CVE-2021-26084 | Atlassian Confluence Server and Data Center | Ransomware | |
| CVE-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Management | Ransomware | |
| CVE-2021-22502 | Micro Focus Operation Bridge Reporter (OBR) | ||
| CVE-2021-22205 | GitLab Community and Enterprise Editions | Ransomware | |
| CVE-2021-22005 | VMware vCenter Server | Ransomware | |
| CVE-2021-21985 | VMware vCenter Server | Ransomware | |
| CVE-2021-21972 | VMware vCenter Server | Ransomware | |
| CVE-2021-20090 | Arcadyan Buffalo Firmware | ||
| CVE-2021-20021 | SonicWall SonicWall Email Security | Ransomware | |
| CVE-2021-1498 | Cisco HyperFlex HX | ||
| CVE-2021-1497 | Cisco HyperFlex HX | ||
| CVE-2020-8657 | EyesOfNetwork EyesOfNetwork | ||
| CVE-2020-8644 | PlaySMS PlaySMS | ||
| CVE-2020-8515 | DrayTek Multiple Vigor Routers | ||
| CVE-2020-8193 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | ||
| CVE-2020-7961 | Liferay Liferay Portal | ||
| CVE-2020-6287 | SAP NetWeaver | ||
| CVE-2020-6207 | SAP Solution Manager | ||
| CVE-2020-5902 | F5 BIG-IP | Ransomware | |
| CVE-2020-5847 | Unraid Unraid | ||
| CVE-2020-4427 | IBM Data Risk Manager | ||
| CVE-2020-3952 | VMware vCenter Server | ||
| CVE-2020-3580 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Ransomware | |
| CVE-2020-3452 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | ||
| CVE-2020-29583 | Zyxel Multiple Products | ||
| CVE-2020-26919 | NETGEAR JGS516PE Devices | ||
| CVE-2020-25506 | D-Link DNS-320 Device | ||
| CVE-2020-25213 | WordPress File Manager Plugin | ||
| CVE-2020-17530 | Apache Struts | ||
| CVE-2020-17496 | vBulletin vBulletin | ||
| CVE-2020-16846 | SaltStack Salt | ||
| CVE-2020-15505 | Ivanti MobileIron Multiple Products | ||
| CVE-2020-14883 | Oracle WebLogic Server | ||
| CVE-2020-14882 | Oracle WebLogic Server | ||
| CVE-2020-14750 | Oracle WebLogic Server | ||
| CVE-2020-1472 | Microsoft Netlogon | Ransomware | |
| CVE-2020-11738 | WordPress Snap Creek Duplicator Plugin | ||
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model | ||
| CVE-2020-10221 | rConfig rConfig | ||
| CVE-2020-10199 | Sonatype Nexus Repository | ||
| CVE-2020-10189 | Zoho ManageEngine | ||
| CVE-2020-10148 | SolarWinds Orion | ||
| CVE-2019-9978 | WordPress Social Warfare Plugin | ||
| CVE-2019-9082 | ThinkPHP ThinkPHP | ||
| CVE-2019-7481 | SonicWall SMA100 | Ransomware | |
| CVE-2019-5591 | Fortinet FortiOS | Ransomware | |
| CVE-2019-5544 | VMware VMware ESXi and Horizon DaaS | Ransomware | |
| CVE-2019-4716 | IBM Planning Analytics | ||
| CVE-2019-3398 | Atlassian Confluence Server and Data Center | ||
| CVE-2019-3396 | Atlassian Confluence Server and Data Server | Ransomware | |
| CVE-2019-20085 | TVT NVMS-1000 | ||
| CVE-2019-19781 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Ransomware | |
| CVE-2019-17558 | Apache Solr | ||
| CVE-2019-16759 | vBulletin vBulletin | ||
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers | ||
| CVE-2019-13608 | Citrix StoreFront Server | Ransomware | |
| CVE-2019-11580 | Atlassian Crowd and Crowd Data Center | Ransomware | |
| CVE-2019-11510 | Ivanti Pulse Connect Secure | Ransomware | |
| CVE-2018-7600 | Drupal Drupal Core | Ransomware | |
| CVE-2018-20062 | ThinkPHP noneCms | ||
| CVE-2018-18325 | DotNetNuke (DNN) DotNetNuke (DNN) | ||
| CVE-2018-15961 | Adobe ColdFusion | ||
| CVE-2018-15811 | DotNetNuke (DNN) DotNetNuke (DNN) | ||
| CVE-2018-13379 | Fortinet FortiOS | Ransomware | |
| CVE-2018-11776 | Apache Struts | ||
| CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) | ||
| CVE-2018-0171 | Cisco IOS and IOS XE | ||
| CVE-2017-9822 | DotNetNuke (DNN) DotNetNuke (DNN) | Ransomware | |
| CVE-2017-9805 | Apache Struts | ||
| CVE-2017-7269 | Microsoft Internet Information Services (IIS) | ||
| CVE-2017-5638 | Apache Struts | Ransomware | |
| CVE-2016-4437 | Apache Shiro |
Μάθετε πριν από τον επιτιθέμενο
Το Vardion σαρώνει τους διακομιστές και τις ιστοσελίδες που εγκρίνετε, με το πρόγραμμα που ορίζετε. Μια γνωστή εκμεταλλευόμενη ευπάθεια που βρίσκει μπαίνει στην κορυφή της λίστας διορθώσεων.