| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2024-50623 Ransomware
Cleo Multiple Products Unrestricted File Upload Vulnerability |
Cleo · Multiple Products | Dec 13, 2024 | Jan 3, 2025 | 98.6% | — |
| CVE-2024-49138
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overfl… |
Microsoft · Windows | Dec 10, 2024 | Dec 31, 2024 | 26.2% | — |
| CVE-2024-51378 Ransomware
CyberPanel Incorrect Default Permissions Vulnerability |
CyberPersons · CyberPanel | Dec 4, 2024 | Dec 25, 2024 | 94.7% | — |
| CVE-2023-45727
North Grid Proself Improper Restriction of XML External Entity (XXE) Reference … |
North Grid · Proself | Dec 3, 2024 | Dec 24, 2024 | 4.8% | — |
| CVE-2024-11667 Ransomware
Zyxel Multiple Firewalls Path Traversal Vulnerability |
Zyxel · Multiple Firewalls | Dec 3, 2024 | Dec 24, 2024 | 3.0% | — |
| CVE-2024-11680
ProjectSend Improper Authentication Vulnerability |
ProjectSend · ProjectSend | Dec 3, 2024 | Dec 24, 2024 | 91.8% | — |
| CVE-2023-28461 Ransomware
Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function… |
Array Networks · AG/vxAG ArrayOS | Nov 25, 2024 | Dec 16, 2024 | 68.1% | — |
| CVE-2024-21287
Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnera… |
Oracle · Agile Product Lifecycle Management (PLM) | Nov 21, 2024 | Dec 12, 2024 | 1.7% | — |
| CVE-2024-44308
Apple Multiple Products Code Execution Vulnerability |
Apple · Multiple Products | Nov 21, 2024 | Dec 12, 2024 | 9.9% | — |
| CVE-2024-44309
Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability |
Apple · Multiple Products | Nov 21, 2024 | Dec 12, 2024 | 21.9% | — |
| CVE-2024-38812
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability |
VMware · vCenter Server | Nov 20, 2024 | Dec 11, 2024 | 54.6% | — |
| CVE-2024-38813
VMware vCenter Server Privilege Escalation Vulnerability |
VMware · vCenter Server | Nov 20, 2024 | Dec 11, 2024 | 17.4% | — |
| CVE-2024-0012 Ransomware
Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerabil… |
Palo Alto Networks · PAN-OS | Nov 18, 2024 | Dec 9, 2024 | 99.8% | — |
| CVE-2024-1212
Progress Kemp LoadMaster OS Command Injection Vulnerability |
Progress · Kemp LoadMaster | Nov 18, 2024 | Dec 9, 2024 | 95.4% | — |
| CVE-2024-9474 Ransomware
Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerabili… |
Palo Alto Networks · PAN-OS | Nov 18, 2024 | Dec 9, 2024 | 93.8% | — |
| CVE-2024-9463
Palo Alto Networks Expedition OS Command Injection Vulnerability |
Palo Alto Networks · Expedition | Nov 14, 2024 | Dec 5, 2024 | 98.5% | — |
| CVE-2024-9465
Palo Alto Networks Expedition SQL Injection Vulnerability |
Palo Alto Networks · Expedition | Nov 14, 2024 | Dec 5, 2024 | 99.6% | — |
| CVE-2014-2120
Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability |
Cisco · Adaptive Security Appliance (ASA) | Nov 12, 2024 | Dec 3, 2024 | 22.6% | — |
| CVE-2021-26086
Atlassian Jira Server and Data Center Path Traversal Vulnerability |
Atlassian · Jira Server and Data Center | Nov 12, 2024 | Dec 3, 2024 | 100.0% | — |
| CVE-2021-41277
Metabase GeoJSON API Local File Inclusion Vulnerability |
Metabase · Metabase | Nov 12, 2024 | Dec 3, 2024 | 97.2% | — |
| CVE-2024-43451
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability |
Microsoft · Windows | Nov 12, 2024 | Dec 3, 2024 | 84.3% | — |
| CVE-2024-49039 Ransomware
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability |
Microsoft · Windows | Nov 12, 2024 | Dec 3, 2024 | 14.2% | — |
| CVE-2019-16278
Nostromo nhttpd Directory Traversal Vulnerability |
Nostromo · nhttpd | Nov 7, 2024 | Nov 28, 2024 | 99.0% | — |
| CVE-2024-43093
Android Framework Privilege Escalation Vulnerability |
Android · Framework | Nov 7, 2024 | Nov 28, 2024 | 0.7% | — |
| CVE-2024-51567 Ransomware
CyberPanel Incorrect Default Permissions Vulnerability |
CyberPersons · CyberPanel | Nov 7, 2024 | Nov 28, 2024 | 84.4% | — |
| CVE-2024-5910
Palo Alto Networks Expedition Missing Authentication Vulnerability |
Palo Alto Networks · Expedition | Nov 7, 2024 | Nov 28, 2024 | 91.7% | — |
| CVE-2024-8956
PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability |
PTZOptics · PT30X-SDI/NDI Cameras | Nov 4, 2024 | Nov 25, 2024 | 58.8% | — |
| CVE-2024-8957
PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability |
PTZOptics · PT30X-SDI/NDI Cameras | Nov 4, 2024 | Nov 25, 2024 | 79.8% | — |
| CVE-2024-20481
Cisco ASA and FTD Denial-of-Service Vulnerability |
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Oct 24, 2024 | Nov 14, 2024 | 15.9% | — |
| CVE-2024-37383
RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability |
Roundcube · Webmail | Oct 24, 2024 | Nov 14, 2024 | 74.0% | — |
| CVE-2024-47575
Fortinet FortiManager Missing Authentication Vulnerability |
Fortinet · FortiManager | Oct 23, 2024 | Nov 13, 2024 | 94.8% | — |
| CVE-2024-38094 Ransomware
Microsoft SharePoint Deserialization Vulnerability |
Microsoft · SharePoint | Oct 22, 2024 | Nov 12, 2024 | 50.9% | — |
| CVE-2024-9537
ScienceLogic SL1 Unspecified Vulnerability |
ScienceLogic · SL1 | Oct 21, 2024 | Nov 11, 2024 | 3.8% | — |
| CVE-2024-40711 Ransomware
Veeam Backup and Replication Deserialization Vulnerability |
Veeam · Backup & Replication | Oct 17, 2024 | Nov 7, 2024 | 90.4% | — |
| CVE-2024-28987
SolarWinds Web Help Desk Hardcoded Credential Vulnerability |
SolarWinds · Web Help Desk | Oct 15, 2024 | Nov 5, 2024 | 93.3% | — |
| CVE-2024-30088 Ransomware
Microsoft Windows Kernel TOCTOU Race Condition Vulnerability |
Microsoft · Windows | Oct 15, 2024 | Nov 5, 2024 | 68.2% | — |
| CVE-2024-9680 Ransomware
Mozilla Firefox Use-After-Free Vulnerability |
Mozilla · Firefox | Oct 15, 2024 | Nov 5, 2024 | 23.2% | — |
| CVE-2024-23113
Fortinet Multiple Products Format String Vulnerability |
Fortinet · Multiple Products | Oct 9, 2024 | Oct 30, 2024 | 61.7% | — |
| CVE-2024-9379
Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability |
Ivanti · Cloud Services Appliance (CSA) | Oct 9, 2024 | Oct 30, 2024 | 44.3% | — |
| CVE-2024-9380
Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability |
Ivanti · Cloud Services Appliance (CSA) | Oct 9, 2024 | Oct 30, 2024 | 58.3% | — |
| CVE-2024-43047
Qualcomm Multiple Chipsets Use-After-Free Vulnerability |
Qualcomm · Multiple Chipsets | Oct 8, 2024 | Oct 29, 2024 | 0.7% | — |
| CVE-2024-43572
Microsoft Windows Management Console Remote Code Execution Vulnerability |
Microsoft · Windows | Oct 8, 2024 | Oct 29, 2024 | 66.7% | — |
| CVE-2024-43573
Microsoft Windows MSHTML Platform Spoofing Vulnerability |
Microsoft · Windows | Oct 8, 2024 | Oct 29, 2024 | 46.1% | — |
| CVE-2024-45519
Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability |
Synacor · Zimbra Collaboration Suite (ZCS) | Oct 3, 2024 | Oct 24, 2024 | 99.9% | — |
| CVE-2024-29824
Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability |
Ivanti · Endpoint Manager (EPM) | Oct 2, 2024 | Oct 23, 2024 | 99.9% | — |
| CVE-2019-0344
SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability |
SAP · Commerce Cloud | Sep 30, 2024 | Oct 21, 2024 | 7.5% | — |
| CVE-2020-15415
DrayTek Multiple Vigor Routers OS Command Injection Vulnerability |
DrayTek · Multiple Vigor Routers | Sep 30, 2024 | Oct 21, 2024 | 84.5% | — |
| CVE-2023-25280
D-Link DIR-820 Router OS Command Injection Vulnerability |
D-Link · DIR-820 Router | Sep 30, 2024 | Oct 21, 2024 | 97.9% | — |
| CVE-2024-7593
Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability |
Ivanti · Virtual Traffic Manager | Sep 24, 2024 | Oct 15, 2024 | 100.0% | — |
| CVE-2024-8963
Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability |
Ivanti · Cloud Services Appliance (CSA) | Sep 19, 2024 | Oct 10, 2024 | 98.6% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.