Known exploited vulnerabilities
Generated from CISA's catalogue of known exploited vulnerabilities as of 3 November 2026.
The 503 entries of CISA's catalogue that Vardion has a check for. The newest first.
Last updated 3 November 2026. The newest entry with a Vardion check was added on 25 September 2026.
Latest additions
- CVE-2026-87902WordPress Core
- CVE-2026-71362Adobe Commerce and Magento
- CVE-2026-85706GitLab Community Edition and Enterprise Edition
- CVE-2026-42018JFrog Artifactory
- CVE-2026-20079Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
- CVE-2026-86218N-able N-central
Browse by technology
- Adobe 13 entries
- Apache 36 entries
- Atlassian 13 entries
- Cisco 13 entries
- Citrix 10 entries
- D-Link 11 entries
- Drupal 4 entries
- F5 4 entries
- Fortinet 11 entries
- Ivanti 21 entries
- Joomla 3 entries
- Microsoft 17 entries
- Microsoft Exchange 3 entries
- Oracle 19 entries
- Palo Alto Networks 9 entries
- PHP 4 entries
- Progress 7 entries
- QNAP 5 entries
- SAP 5 entries
- SolarWinds 8 entries
- SonicWall 6 entries
- Sophos 4 entries
- VMware 17 entries
- WordPress 6 entries
- Zimbra 16 entries
- Zoho 7 entries
Every exploited vulnerability
| CVE | Product | Since | |
|---|---|---|---|
| CVE-2026-87902 | WordPress Core | ||
| CVE-2026-71362 | Adobe Commerce and Magento | ||
| CVE-2026-85706 | GitLab Community Edition and Enterprise Edition | ||
| CVE-2026-42018 | JFrog Artifactory | ||
| CVE-2026-20079 | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | ||
| CVE-2026-86218 | N-able N-central | ||
| CVE-2026-9586 | Sangoma Switchvox | ||
| CVE-2026-83548 | SonicWall SMA1000 Appliances | ||
| CVE-2026-82329 | JFrog Artifactory | ||
| CVE-2026-48710 | Kludex Starlette | ||
| CVE-2026-81578 | PaperCut NG/MF | ||
| CVE-2026-60004 | Gitea Gitea | ||
| CVE-2026-73570 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2026-64849 | MLflow MLflow | ||
| CVE-2026-55040 | Microsoft SharePoint | ||
| CVE-2025-62593 | Ray-Project Ray | ||
| CVE-2026-72898 | Metabase Metabase | ||
| CVE-2026-8037 | Progress LoadMaster | ||
| CVE-2026-63077 | JetBrains TeamCity | Ransomware | |
| CVE-2026-9198 | IBM Langflow | ||
| CVE-2026-34486 | Apache Tomcat | ||
| CVE-2026-18577 | N-able N-central | ||
| CVE-2026-16232 | Check Point SmartConsole | ||
| CVE-2026-63030 | WordPress Core | ||
| CVE-2026-0770 | Langflow Langflow | ||
| CVE-2026-58644 | Microsoft SharePoint | ||
| CVE-2026-39808 | Fortinet FortiSandbox | ||
| CVE-2026-15409 | SonicWall SMA1000 Appliances | Ransomware | |
| CVE-2026-56291 | Balbooa Forms | ||
| CVE-2026-48939 | iCagenda iCagenda | ||
| CVE-2026-56290 | Joomlack Page Builder | ||
| CVE-2026-48908 | JoomShaper SP Page Builder | ||
| CVE-2026-48282 | Adobe ColdFusion | ||
| CVE-2026-48558 | SimpleHelp SimpleHelp | ||
| CVE-2026-34910 | Ubiquiti UniFi OS | ||
| CVE-2026-34908 | Ubiquiti UniFi OS | ||
| CVE-2026-20253 | Splunk Enterprise | ||
| CVE-2026-48907 | Widget Factory Joomla Content Editor | ||
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools | Ransomware | |
| CVE-2026-10520 | Ivanti Sentry | ||
| CVE-2026-50751 | Check Point Security Gateway | Ransomware | |
| CVE-2026-42271 | BerriAI LiteLLM | ||
| CVE-2026-0257 | Palo Alto Networks PAN-OS | Ransomware | |
| CVE-2026-9082 | Drupal Core | ||
| CVE-2025-34291 | Langflow Langflow | ||
| CVE-2026-42208 | BerriAI LiteLLM | ||
| CVE-2026-41940 | WebPros cPanel & WHM and WP2 (WordPress Squared) | Ransomware | |
| CVE-2024-1708 | ConnectWise ScreenConnect | Ransomware | |
| CVE-2025-29635 | D-Link DIR-823X | ||
| CVE-2024-7399 | Samsung MagicINFO 9 Server | ||
| CVE-2024-57728 | SimpleHelp SimpleHelp | Ransomware | |
| CVE-2024-57726 | SimpleHelp SimpleHelp | Ransomware | |
| CVE-2026-39987 | Marimo Marimo | ||
| CVE-2024-27199 | JetBrains TeamCity | Ransomware | |
| CVE-2023-27351 | PaperCut NG/MF | Ransomware | |
| CVE-2026-34197 | Apache ActiveMQ | ||
| CVE-2026-21643 | Fortinet FortiClient EMS | ||
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) | ||
| CVE-2026-35616 | Fortinet FortiClient EMS | ||
| CVE-2026-3055 | Citrix NetScaler | ||
| CVE-2026-33017 | Langflow Langflow | ||
| CVE-2025-54068 | Laravel Livewire | ||
| CVE-2025-32432 | Craft CMS Craft CMS | ||
| CVE-2025-47813 | Wing FTP Server Wing FTP Server | ||
| CVE-2025-68613 | n8n n8n | ||
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) | ||
| CVE-2025-26399 | SolarWinds Web Help Desk | Ransomware | |
| CVE-2021-22054 | Omnissa Workspace One UEM | ||
| CVE-2017-7921 | Hikvision Multiple Products | ||
| CVE-2025-49113 | Roundcube Webmail | ||
| CVE-2021-22175 | GitLab GitLab | ||
| CVE-2020-7796 | Synacor Zimbra Collaboration Suite | ||
| CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | Ransomware | |
| CVE-2025-40536 | SolarWinds Web Help Desk | ||
| CVE-2026-24423 | SmarterTools SmarterMail | Ransomware | |
| CVE-2025-11953 | React Native Community CLI | ||
| CVE-2025-64328 | Sangoma FreePBX | ||
| CVE-2025-40551 | SolarWinds Web Help Desk | ||
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | ||
| CVE-2026-23760 | SmarterTools SmarterMail | Ransomware | |
| CVE-2025-52691 | SmarterTools SmarterMail | Ransomware | |
| CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2025-34026 | Versa Concerto | ||
| CVE-2025-31125 | Vite Vitejs | ||
| CVE-2025-8110 | Gogs Gogs | ||
| CVE-2025-37164 | Hewlett Packard Enterprise (HPE) OneView | ||
| CVE-2025-14847 | MongoDB MongoDB and MongoDB Server | ||
| CVE-2023-52163 | Digiever DS-2105 Pro | ||
| CVE-2025-14611 | Gladinet CentreStack and Triofox | ||
| CVE-2025-58360 | OSGeo GeoServer | ||
| CVE-2025-55182 | Meta React Server Components | Ransomware | |
| CVE-2025-61757 | Oracle Fusion Middleware | ||
| CVE-2025-64446 | Fortinet FortiWeb | ||
| CVE-2025-12480 | Gladinet Triofox | ||
| CVE-2025-48703 | CWP Control Web Panel | ||
| CVE-2025-11371 | Gladinet CentreStack and Triofox | ||
| CVE-2025-24893 | XWiki Platform | ||
| CVE-2025-6205 | Dassault Systèmes DELMIA Apriso | ||
| CVE-2025-6204 | Dassault Systèmes DELMIA Apriso | ||
| CVE-2025-59287 | Microsoft Windows | ||
| CVE-2025-54236 | Adobe Commerce and Magento | ||
| CVE-2025-61884 | Oracle E-Business Suite | Ransomware | |
| CVE-2025-2747 | Kentico Xperience CMS | ||
| CVE-2025-2746 | Kentico Xperience CMS | ||
| CVE-2021-43798 | Grafana Labs Grafana | ||
| CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2025-61882 | Oracle E-Business Suite | Ransomware | |
| CVE-2025-4008 | Smartbedded Meteobridge | ||
| CVE-2025-10035 | Fortra GoAnywhere MFT | Ransomware | |
| CVE-2021-21311 | Adminer Adminer | ||
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | ||
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso | ||
| CVE-2025-57819 | Sangoma FreePBX | ||
| CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices | ||
| CVE-2025-20281 | Cisco Identity Services Engine | ||
| CVE-2025-49706 | Microsoft SharePoint | Ransomware | |
| CVE-2025-2776 | SysAid SysAid On-Prem | ||
| CVE-2025-2775 | SysAid SysAid On-Prem | ||
| CVE-2025-53770 | Microsoft SharePoint | Ransomware | |
| CVE-2025-25257 | Fortinet FortiWeb | ||
| CVE-2025-47812 | Wing FTP Server Wing FTP Server | ||
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway | Ransomware | |
| CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2019-5418 | Rails Ruby on Rails | ||
| CVE-2016-10033 | PHP PHPMailer | ||
| CVE-2025-24016 | Wazuh Wazuh Server | ||
| CVE-2024-42009 | Roundcube Webmail | ||
| CVE-2024-56145 | Craft CMS Craft CMS | ||
| CVE-2021-32030 | ASUS Routers | ||
| CVE-2025-4632 | Samsung MagicINFO 9 Server | ||
| CVE-2025-4427 | Ivanti Endpoint Manager Mobile (EPMM) | ||
| CVE-2024-27443 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2023-38950 | ZKTeco BioTime | ||
| CVE-2024-12987 | DrayTek Vigor Routers | ||
| CVE-2025-3248 | Langflow Langflow | Ransomware | |
| CVE-2025-34028 | Commvault Command Center | ||
| CVE-2024-58136 | Yiiframework Yii | ||
| CVE-2024-38475 | Apache HTTP Server | ||
| CVE-2025-31324 | SAP NetWeaver | Ransomware | |
| CVE-2025-30406 | Gladinet CentreStack | ||
| CVE-2025-31161 | CrushFTP CrushFTP | Ransomware | |
| CVE-2025-24813 | Apache Tomcat | ||
| CVE-2024-20439 | Cisco Smart Licensing Utility | ||
| CVE-2019-9874 | Sitecore CMS and Experience Platform (XP) | ||
| CVE-2024-48248 | NAKIVO Backup and Replication | ||
| CVE-2017-12637 | SAP NetWeaver | ||
| CVE-2024-13161 | Ivanti Endpoint Manager (EPM) | ||
| CVE-2024-13160 | Ivanti Endpoint Manager (EPM) | ||
| CVE-2024-13159 | Ivanti Endpoint Manager (EPM) | ||
| CVE-2024-4885 | Progress WhatsUp Gold | ||
| CVE-2022-43939 | Hitachi Vantara Pentaho Business Analytics (BA) Server | ||
| CVE-2022-43769 | Hitachi Vantara Pentaho Business Analytics (BA) Server | ||
| CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2025-0108 | Palo Alto Networks PAN-OS | ||
| CVE-2024-53704 | SonicWall SonicOS | Ransomware | |
| CVE-2024-57727 | SimpleHelp SimpleHelp | Ransomware | |
| CVE-2024-45195 | Apache OFBiz | ||
| CVE-2024-29059 | Microsoft .NET Framework | ||
| CVE-2018-19410 | Paessler PRTG Network Monitor | ||
| CVE-2024-50603 | Aviatrix Controllers | ||
| CVE-2024-55591 | Fortinet FortiOS and FortiProxy | Ransomware | |
| CVE-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | Ransomware | |
| CVE-2024-55550 | Mitel MiCollab | Ransomware | |
| CVE-2024-41713 | Mitel MiCollab | Ransomware | |
| CVE-2020-2883 | Oracle WebLogic Server | ||
| CVE-2018-14933 | NUUO NVRmini Devices | ||
| CVE-2024-55956 | Cleo Multiple Products | Ransomware | |
| CVE-2024-20767 | Adobe ColdFusion | ||
| CVE-2024-50623 | Cleo Multiple Products | Ransomware | |
| CVE-2024-51378 | CyberPersons CyberPanel | Ransomware | |
| CVE-2024-11680 | ProjectSend ProjectSend | ||
| CVE-2024-9474 | Palo Alto Networks PAN-OS | Ransomware | |
| CVE-2024-1212 | Progress Kemp LoadMaster | ||
| CVE-2024-0012 | Palo Alto Networks PAN-OS | Ransomware | |
| CVE-2024-9465 | Palo Alto Networks Expedition | ||
| CVE-2024-9463 | Palo Alto Networks Expedition | ||
| CVE-2021-41277 | Metabase Metabase | ||
| CVE-2021-26086 | Atlassian Jira Server and Data Center | ||
| CVE-2024-5910 | Palo Alto Networks Expedition | ||
| CVE-2024-51567 | CyberPersons CyberPanel | Ransomware | |
| CVE-2019-16278 | Nostromo nhttpd | ||
| CVE-2024-40711 | Veeam Backup & Replication | Ransomware | |
| CVE-2024-28987 | SolarWinds Web Help Desk | ||
| CVE-2024-45519 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2024-29824 | Ivanti Endpoint Manager (EPM) | ||
| CVE-2023-25280 | D-Link DIR-820 Router | ||
| CVE-2020-15415 | DrayTek Multiple Vigor Routers | ||
| CVE-2024-7593 | Ivanti Virtual Traffic Manager | ||
| CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) | ||
| CVE-2024-27348 | Apache HugeGraph-Server | ||
| CVE-2020-14644 | Oracle WebLogic Server | ||
| CVE-2020-0618 | Microsoft SQL Server | Ransomware | |
| CVE-2024-6670 | Progress WhatsUp Gold | Ransomware | |
| CVE-2021-20124 | DrayTek VigorConnect | ||
| CVE-2021-20123 | DrayTek VigorConnect | ||
| CVE-2024-38856 | Apache OFBiz | ||
| CVE-2021-33045 | Dahua IP Camera Firmware | ||
| CVE-2021-33044 | Dahua IP Camera Firmware | ||
| CVE-2024-23897 | Jenkins Jenkins Command Line Interface (CLI) | Ransomware | |
| CVE-2024-28986 | SolarWinds Web Help Desk | ||
| CVE-2024-32113 | Apache OFBiz | ||
| CVE-2024-5217 | ServiceNow Utah, Vancouver, and Washington DC Now Platform | ||
| CVE-2024-4879 | ServiceNow Utah, Vancouver, and Washington DC Now Platform | ||
| CVE-2023-45249 | Acronis Cyber Infrastructure (ACI) | ||
| CVE-2024-34102 | Adobe Commerce and Magento Open Source | ||
| CVE-2024-28995 | SolarWinds Serv-U | ||
| CVE-2024-36401 | OSGeo GeoServer | ||
| CVE-2024-23692 | Rejetto HTTP File Server | Ransomware | |
| CVE-2022-24816 | OSGeo JAI-EXT | ||
| CVE-2024-4358 | Progress Telerik Report Server | ||
| CVE-2024-4577 | PHP Group PHP | Ransomware | |
| CVE-2017-3506 | Oracle WebLogic Server | ||
| CVE-2024-24919 | Check Point Quantum Security Gateways | Ransomware | |
| CVE-2020-17519 | Apache Flink | ||
| CVE-2023-43208 | NextGen Healthcare Mirth Connect | Ransomware | |
| CVE-2021-40655 | D-Link DIR-605 Router | ||
| CVE-2023-7028 | GitLab GitLab CE/EE | ||
| CVE-2024-4040 | CrushFTP CrushFTP | ||
| CVE-2024-3400 | Palo Alto Networks PAN-OS | Ransomware | |
| CVE-2024-3273 | D-Link Multiple NAS Devices | ||
| CVE-2024-3272 | D-Link Multiple NAS Devices | ||
| CVE-2023-48788 | Fortinet FortiClient EMS | Ransomware | |
| CVE-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) | Ransomware | |
| CVE-2019-7256 | Nice Linear eMerge E3-Series | ||
| CVE-2024-27198 | JetBrains TeamCity | Ransomware | |
| CVE-2021-36380 | Sunhillo SureLine | ||
| CVE-2024-1709 | ConnectWise ScreenConnect | Ransomware | |
| CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons | Ransomware | |
| CVE-2023-22527 | Atlassian Confluence Data Center and Server | Ransomware | |
| CVE-2023-34048 | VMware vCenter Server | ||
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core | Ransomware | |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway | ||
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure | Ransomware | |
| CVE-2023-46805 | Ivanti Connect Secure and Policy Secure | Ransomware | |
| CVE-2023-29357 | Microsoft SharePoint Server | Ransomware | |
| CVE-2023-38203 | Adobe ColdFusion | Ransomware | |
| CVE-2023-29300 | Adobe ColdFusion | Ransomware | |
| CVE-2023-27524 | Apache Superset | ||
| CVE-2023-23752 | Joomla! Joomla! | ||
| CVE-2023-41266 | Qlik Sense | Ransomware | |
| CVE-2023-41265 | Qlik Sense | Ransomware | |
| CVE-2023-49103 | ownCloud ownCloud graphapi | ||
| CVE-2023-1671 | Sophos Web Appliance | ||
| CVE-2020-2551 | Oracle Fusion Middleware | ||
| CVE-2023-47246 | SysAid SysAid Server | Ransomware | |
| CVE-2023-36845 | Juniper Junos OS | ||
| CVE-2023-36844 | Juniper Junos OS | ||
| CVE-2023-22518 | Atlassian Confluence Data Center and Server | Ransomware | |
| CVE-2023-46604 | Apache ActiveMQ | Ransomware | |
| CVE-2023-46747 | F5 BIG-IP Configuration Utility | Ransomware | |
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway | Ransomware | |
| CVE-2023-20198 | Cisco IOS XE Web UI | ||
| CVE-2023-41763 | Microsoft Skype for Business | ||
| CVE-2023-40044 | Progress WS_FTP Server | Ransomware | |
| CVE-2023-22515 | Atlassian Confluence Data Center and Server | Ransomware | |
| CVE-2023-42793 | JetBrains TeamCity | Ransomware | |
| CVE-2021-3129 | Laravel Ignition | Ransomware | |
| CVE-2023-33246 | Apache RocketMQ | ||
| CVE-2023-32315 | Ignite Realtime Openfire | ||
| CVE-2023-38035 | Ivanti Sentry | Ransomware | |
| CVE-2023-24489 | Citrix Content Collaboration | ||
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile (EPMM) | Ransomware | |
| CVE-2023-38205 | Adobe ColdFusion | ||
| CVE-2023-29298 | Adobe ColdFusion | ||
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway | Ransomware | |
| CVE-2022-29303 | SolarView Compact | ||
| CVE-2023-20887 | VMware Aria Operations for Networks | ||
| CVE-2020-12641 | Roundcube Roundcube Webmail | ||
| CVE-2023-34362 | Progress MOVEit Transfer | Ransomware | |
| CVE-2023-2868 | Barracuda Networks Email Security Gateway (ESG) Appliance | ||
| CVE-2023-25717 | Ruckus Wireless Multiple Products | ||
| CVE-2023-21839 | Oracle WebLogic Server | ||
| CVE-2023-1389 | TP-Link Archer AX21 | ||
| CVE-2021-45046 | Apache Log4j2 | Ransomware | |
| CVE-2023-28432 | MinIO MinIO | ||
| CVE-2023-27350 | PaperCut MF/NG | Ransomware | |
| CVE-2021-27877 | Veritas Backup Exec Agent | Ransomware | |
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2023-26360 | Adobe ColdFusion | ||
| CVE-2021-39144 | XStream XStream | ||
| CVE-2022-35914 | Teclib GLPI | ||
| CVE-2022-33891 | Apache Spark | ||
| CVE-2022-36537 | ZK Framework AuUploader | Ransomware | |
| CVE-2022-47986 | IBM Aspera Faspex | Ransomware | |
| CVE-2022-46169 | Cacti Cacti | ||
| CVE-2023-0669 | Fortra GoAnywhere MFT | Ransomware | |
| CVE-2022-24990 | TerraMaster TerraMaster OS | Ransomware | |
| CVE-2023-22952 | SugarCRM Multiple Products | ||
| CVE-2022-21587 | Oracle E-Business Suite | Ransomware | |
| CVE-2022-47966 | Zoho ManageEngine | Ransomware | |
| CVE-2022-44877 | CWP Control Web Panel | ||
| CVE-2018-18809 | TIBCO JasperReports | ||
| CVE-2022-42475 | Fortinet FortiOS | Ransomware | |
| CVE-2021-35587 | Oracle Fusion Middleware | ||
| CVE-2022-41352 | Synacor Zimbra Collaboration Suite (ZCS) | Ransomware | |
| CVE-2022-40684 | Fortinet Multiple Products | Ransomware | |
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center | ||
| CVE-2022-3236 | Sophos Firewall | ||
| CVE-2022-35405 | Zoho ManageEngine | ||
| CVE-2022-27593 | QNAP Photo Station | Ransomware | |
| CVE-2018-6530 | D-Link Multiple Routers | Ransomware | |
| CVE-2018-2628 | Oracle WebLogic Server | ||
| CVE-2017-5521 | NETGEAR Multiple Devices | ||
| CVE-2022-26352 | dotCMS dotCMS | Ransomware | |
| CVE-2022-24706 | Apache CouchDB | ||
| CVE-2022-24112 | Apache APISIX | ||
| CVE-2022-22963 | VMware Tanzu Spring Cloud | ||
| CVE-2021-39226 | Grafana Labs Grafana | ||
| CVE-2022-22536 | SAP Multiple Products | ||
| CVE-2017-15944 | Palo Alto Networks PAN-OS | ||
| CVE-2022-37042 | Synacor Zimbra Collaboration Suite (ZCS) | Ransomware | |
| CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) | Ransomware | |
| CVE-2022-26138 | Atlassian Confluence | ||
| CVE-2019-7195 | QNAP Photo Station | Ransomware | |
| CVE-2019-7194 | QNAP Photo Station | Ransomware | |
| CVE-2019-7192 | QNAP Photo Station | Ransomware | |
| CVE-2022-26134 | Atlassian Confluence Server/Data Center | Ransomware | |
| CVE-2017-18362 | Kaseya Virtual System/Server Administrator (VSA) | Ransomware | |
| CVE-2022-30525 | Zyxel Multiple Firewalls | ||
| CVE-2022-22947 | VMware Spring Cloud Gateway | ||
| CVE-2022-1388 | F5 BIG-IP | Ransomware | |
| CVE-2014-0160 | OpenSSL OpenSSL | ||
| CVE-2022-29464 | WSO2 Multiple Products | Ransomware | |
| CVE-2022-0847 | Linux Kernel | ||
| CVE-2018-6882 | Synacor Zimbra Collaboration Suite (ZCS) | Ransomware | |
| CVE-2019-3929 | Crestron Multiple Products | ||
| CVE-2019-16057 | D-Link DNS-320 Storage Device | Ransomware | |
| CVE-2018-7841 | Schneider Electric U.motion Builder | ||
| CVE-2007-3010 | Alcatel OmniPCX Enterprise | ||
| CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager | Ransomware | |
| CVE-2018-7602 | Drupal Core | Ransomware | |
| CVE-2022-22965 | VMware Spring Framework | ||
| CVE-2021-45382 | D-Link Multiple Routers | ||
| CVE-2022-1040 | Sophos Firewall | ||
| CVE-2021-28799 | QNAP Network Attached Storage (NAS) | Ransomware | |
| CVE-2018-10562 | Dasan Gigabit Passive Optical Network (GPON) Routers | Ransomware | |
| CVE-2022-0543 | Redis Debian-specific Redis Servers | ||
| CVE-2021-26085 | Atlassian Confluence Server | Ransomware | |
| CVE-2022-26143 | Mitel MiCollab, MiVoice Business Express | ||
| CVE-2021-42237 | Sitecore XP | Ransomware | |
| CVE-2020-9054 | Zyxel Multiple Network-Attached Storage (NAS) Devices | ||
| CVE-2020-7247 | OpenBSD OpenSMTPD | ||
| CVE-2020-5410 | VMware Tanzu Spring Cloud Configuration (Config) Server | ||
| CVE-2020-25223 | Sophos SG UTM | ||
| CVE-2020-1956 | Apache Kylin | ||
| CVE-2019-6340 | Drupal Core | ||
| CVE-2019-2616 | Oracle BI Publisher (Formerly XML Publisher) | ||
| CVE-2019-16920 | D-Link Multiple Routers | ||
| CVE-2019-15107 | Webmin Webmin | Ransomware | |
| CVE-2019-12989 | Citrix SD-WAN and NetScaler | ||
| CVE-2019-11043 | PHP FastCGI Process Manager (FPM) | Ransomware | |
| CVE-2019-10068 | Kentico Xperience | ||
| CVE-2019-1003030 | Jenkins Matrix Project Plugin | ||
| CVE-2018-6961 | VMware SD-WAN Edge | ||
| CVE-2018-1273 | VMware Tanzu Spring Data Commons | Ransomware | |
| CVE-2018-11138 | Quest KACE System Management Appliance | Ransomware | |
| CVE-2017-3881 | Cisco IOS and IOS XE | ||
| CVE-2017-12617 | Apache Tomcat | ||
| CVE-2017-12615 | Apache Tomcat | Ransomware | |
| CVE-2016-1555 | NETGEAR Wireless Access Point (WAP) Devices | ||
| CVE-2015-3035 | TP-Link Multiple Archer Devices | ||
| CVE-2015-1427 | Elastic Elasticsearch | ||
| CVE-2014-6287 | Rejetto HTTP File Server (HFS) | ||
| CVE-2014-3120 | Elastic Elasticsearch | ||
| CVE-2013-2251 | Apache Struts | ||
| CVE-2012-1823 | PHP PHP | ||
| CVE-2010-2861 | Adobe ColdFusion | Ransomware | |
| CVE-2009-1151 | phpMyAdmin phpMyAdmin | ||
| CVE-2021-21973 | VMware vCenter Server and Cloud Foundation | ||
| CVE-2019-11581 | Atlassian Jira Server and Data Center | ||
| CVE-2016-6277 | NETGEAR Multiple Routers | ||
| CVE-2020-1938 | Apache Tomcat | ||
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) | Ransomware | |
| CVE-2022-23134 | Zabbix Frontend | ||
| CVE-2022-23131 | Zabbix Frontend | ||
| CVE-2022-24086 | Adobe Commerce and Magento Open Source | ||
| CVE-2017-9841 | PHPUnit PHPUnit | ||
| CVE-2020-0796 | Microsoft SMBv3 | Ransomware | |
| CVE-2018-1000861 | Jenkins Jenkins Stapler Web Framework | ||
| CVE-2017-9791 | Apache Struts 1 | ||
| CVE-2017-10271 | Oracle WebLogic Server | Ransomware | |
| CVE-2016-3088 | Apache ActiveMQ | ||
| CVE-2015-1635 | Microsoft HTTP.sys | ||
| CVE-2021-20038 | SonicWall SMA 100 Appliances | Ransomware | |
| CVE-2020-5722 | Grandstream UCM6200 | ||
| CVE-2017-5689 | Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability | ||
| CVE-2014-6271 | GNU Bourne-Again Shell (Bash) | ||
| CVE-2021-40870 | Aviatrix Aviatrix Controller | ||
| CVE-2021-33766 | Microsoft Exchange Server | ||
| CVE-2021-32648 | October CMS October CMS | ||
| CVE-2021-25298 | Nagios Nagios XI | ||
| CVE-2021-25297 | Nagios Nagios XI | ||
| CVE-2021-25296 | Nagios Nagios XI | ||
| CVE-2021-21975 | VMware vRealize Operations Manager API | Ransomware | |
| CVE-2021-21315 | Npm package System Information Library for Node.JS | ||
| CVE-2020-14864 | Oracle Intelligence Enterprise Edition | ||
| CVE-2020-13927 | Apache Airflow's Experimental API | ||
| CVE-2020-11978 | Apache Airflow | ||
| CVE-2021-36260 | Hikvision Security cameras web server | ||
| CVE-2021-22017 | VMware vCenter Server | ||
| CVE-2019-9670 | Synacor Zimbra Collaboration Suite (ZCS) | ||
| CVE-2019-7609 | Elastic Kibana | ||
| CVE-2019-2725 | Oracle WebLogic Server | Ransomware | |
| CVE-2017-1000486 | Primetek Primefaces Application | ||
| CVE-2015-7450 | IBM WebSphere Application Server and Server Hypervisor Edition | ||
| CVE-2021-44515 | Zoho Desktop Central | ||
| CVE-2021-44228 | Apache Log4j2 | Ransomware | |
| CVE-2021-35394 | Realtek Jungle Software Development Kit (SDK) | ||
| CVE-2020-17463 | Fuel CMS Fuel CMS | ||
| CVE-2019-7238 | Sonatype Nexus Repository Manager | ||
| CVE-2019-10758 | MongoDB mongo-express | ||
| CVE-2019-0193 | Apache Solr | ||
| CVE-2017-17562 | Embedthis GoAhead | ||
| CVE-2017-12149 | Red Hat JBoss Application Server | Ransomware | |
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | ||
| CVE-2021-40438 | Apache Apache | Ransomware | |
| CVE-2021-37415 | Zoho ManageEngine ServiceDesk Plus (SDP) | ||
| CVE-2021-42258 | BQE BillQuick Web Suite | Ransomware | |
| CVE-2021-42013 | Apache HTTP Server | Ransomware | |
| CVE-2021-41773 | Apache HTTP Server | Ransomware | |
| CVE-2021-40539 | Zoho ManageEngine | Ransomware | |
| CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) | Ransomware | |
| CVE-2021-35464 | ForgeRock Access Management (AM) | Ransomware | |
| CVE-2021-35395 | Realtek AP-Router SDK | ||
| CVE-2021-35211 | SolarWinds Serv-U | Ransomware | |
| CVE-2021-34473 | Microsoft Exchange Server | Ransomware | |
| CVE-2021-31755 | Tenda AC11 Router | ||
| CVE-2021-30116 | Kaseya Virtual System/Server Administrator (VSA) | Ransomware | |
| CVE-2021-27561 | Yealink Device Management | ||
| CVE-2021-26855 | Microsoft Exchange Server | Ransomware | |
| CVE-2021-26084 | Atlassian Confluence Server and Data Center | Ransomware | |
| CVE-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Management | Ransomware | |
| CVE-2021-22502 | Micro Focus Operation Bridge Reporter (OBR) | ||
| CVE-2021-22205 | GitLab Community and Enterprise Editions | Ransomware | |
| CVE-2021-22005 | VMware vCenter Server | Ransomware | |
| CVE-2021-21985 | VMware vCenter Server | Ransomware | |
| CVE-2021-21972 | VMware vCenter Server | Ransomware | |
| CVE-2021-20090 | Arcadyan Buffalo Firmware | ||
| CVE-2021-20021 | SonicWall SonicWall Email Security | Ransomware | |
| CVE-2021-1498 | Cisco HyperFlex HX | ||
| CVE-2021-1497 | Cisco HyperFlex HX | ||
| CVE-2020-8657 | EyesOfNetwork EyesOfNetwork | ||
| CVE-2020-8644 | PlaySMS PlaySMS | ||
| CVE-2020-8515 | DrayTek Multiple Vigor Routers | ||
| CVE-2020-8193 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | ||
| CVE-2020-7961 | Liferay Liferay Portal | ||
| CVE-2020-6287 | SAP NetWeaver | ||
| CVE-2020-6207 | SAP Solution Manager | ||
| CVE-2020-5902 | F5 BIG-IP | Ransomware | |
| CVE-2020-5847 | Unraid Unraid | ||
| CVE-2020-4427 | IBM Data Risk Manager | ||
| CVE-2020-3952 | VMware vCenter Server | ||
| CVE-2020-3580 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Ransomware | |
| CVE-2020-3452 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | ||
| CVE-2020-29583 | Zyxel Multiple Products | ||
| CVE-2020-26919 | NETGEAR JGS516PE Devices | ||
| CVE-2020-25506 | D-Link DNS-320 Device | ||
| CVE-2020-25213 | WordPress File Manager Plugin | ||
| CVE-2020-17530 | Apache Struts | ||
| CVE-2020-17496 | vBulletin vBulletin | ||
| CVE-2020-16846 | SaltStack Salt | ||
| CVE-2020-15505 | Ivanti MobileIron Multiple Products | ||
| CVE-2020-14883 | Oracle WebLogic Server | ||
| CVE-2020-14882 | Oracle WebLogic Server | ||
| CVE-2020-14750 | Oracle WebLogic Server | ||
| CVE-2020-1472 | Microsoft Netlogon | Ransomware | |
| CVE-2020-11738 | WordPress Snap Creek Duplicator Plugin | ||
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model | ||
| CVE-2020-10221 | rConfig rConfig | ||
| CVE-2020-10199 | Sonatype Nexus Repository | ||
| CVE-2020-10189 | Zoho ManageEngine | ||
| CVE-2020-10148 | SolarWinds Orion | ||
| CVE-2019-9978 | WordPress Social Warfare Plugin | ||
| CVE-2019-9082 | ThinkPHP ThinkPHP | ||
| CVE-2019-7481 | SonicWall SMA100 | Ransomware | |
| CVE-2019-5591 | Fortinet FortiOS | Ransomware | |
| CVE-2019-5544 | VMware VMware ESXi and Horizon DaaS | Ransomware | |
| CVE-2019-4716 | IBM Planning Analytics | ||
| CVE-2019-3398 | Atlassian Confluence Server and Data Center | ||
| CVE-2019-3396 | Atlassian Confluence Server and Data Server | Ransomware | |
| CVE-2019-20085 | TVT NVMS-1000 | ||
| CVE-2019-19781 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Ransomware | |
| CVE-2019-17558 | Apache Solr | ||
| CVE-2019-16759 | vBulletin vBulletin | ||
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers | ||
| CVE-2019-13608 | Citrix StoreFront Server | Ransomware | |
| CVE-2019-11580 | Atlassian Crowd and Crowd Data Center | Ransomware | |
| CVE-2019-11510 | Ivanti Pulse Connect Secure | Ransomware | |
| CVE-2018-7600 | Drupal Drupal Core | Ransomware | |
| CVE-2018-20062 | ThinkPHP noneCms | ||
| CVE-2018-18325 | DotNetNuke (DNN) DotNetNuke (DNN) | ||
| CVE-2018-15961 | Adobe ColdFusion | ||
| CVE-2018-15811 | DotNetNuke (DNN) DotNetNuke (DNN) | ||
| CVE-2018-13379 | Fortinet FortiOS | Ransomware | |
| CVE-2018-11776 | Apache Struts | ||
| CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) | ||
| CVE-2018-0171 | Cisco IOS and IOS XE | ||
| CVE-2017-9822 | DotNetNuke (DNN) DotNetNuke (DNN) | Ransomware | |
| CVE-2017-9805 | Apache Struts | ||
| CVE-2017-7269 | Microsoft Internet Information Services (IIS) | ||
| CVE-2017-5638 | Apache Struts | Ransomware | |
| CVE-2016-4437 | Apache Shiro |
Know before an attacker does
Vardion scans the servers and websites you approve on the schedule you set. A known exploited vulnerability it finds goes to the top of the fix list.