| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2020-0618 Ransomware
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability |
Microsoft · SQL Server | Sep 18, 2024 | Oct 9, 2024 | 99.0% | — |
| CVE-2020-14644
Oracle WebLogic Server Remote Code Execution Vulnerability |
Oracle · WebLogic Server | Sep 18, 2024 | Oct 9, 2024 | 94.5% | — |
| CVE-2022-21445
Oracle ADF Faces Deserialization of Untrusted Data Vulnerability |
Oracle · ADF Faces | Sep 18, 2024 | Oct 9, 2024 | 62.5% | — |
| CVE-2024-27348
Apache HugeGraph-Server Improper Access Control Vulnerability |
Apache · HugeGraph-Server | Sep 18, 2024 | Oct 9, 2024 | 99.2% | — |
| CVE-2013-0643
Adobe Flash Player Incorrect Default Permissions Vulnerability |
Adobe · Flash Player | Sep 17, 2024 | Oct 8, 2024 | 10.5% | — |
| CVE-2013-0648
Adobe Flash Player Code Execution Vulnerability |
Adobe · Flash Player | Sep 17, 2024 | Oct 8, 2024 | 11.1% | — |
| CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity |
Adobe · Flash Player | Sep 17, 2024 | Oct 8, 2024 | 99.9% | — |
| CVE-2014-0502
Adobe Flash Player Double Free Vulnerablity |
Adobe · Flash Player | Sep 17, 2024 | Oct 8, 2024 | 24.8% | — |
| CVE-2024-43461
Microsoft Windows MSHTML Platform Spoofing Vulnerability |
Microsoft · Windows | Sep 16, 2024 | Oct 7, 2024 | 54.2% | — |
| CVE-2024-6670 Ransomware
Progress WhatsUp Gold SQL Injection Vulnerability |
Progress · WhatsUp Gold | Sep 16, 2024 | Oct 7, 2024 | 92.9% | — |
| CVE-2024-8190
Ivanti Cloud Services Appliance OS Command Injection Vulnerability |
Ivanti · Cloud Services Appliance | Sep 13, 2024 | Oct 4, 2024 | 88.5% | — |
| CVE-2024-38014
Microsoft Windows Installer Improper Privilege Management Vulnerability |
Microsoft · Windows | Sep 10, 2024 | Oct 1, 2024 | 6.3% | — |
| CVE-2024-38217
Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerabi… |
Microsoft · Windows | Sep 10, 2024 | Oct 1, 2024 | 10.0% | — |
| CVE-2024-38226
Microsoft Publisher Protection Mechanism Failure Vulnerability |
Microsoft · Publisher | Sep 10, 2024 | Oct 1, 2024 | 2.7% | — |
| CVE-2016-3714
ImageMagick Improper Input Validation Vulnerability |
ImageMagick · ImageMagick | Sep 9, 2024 | Sep 30, 2024 | 97.5% | — |
| CVE-2017-1000253 Ransomware
Linux Kernel PIE Stack Buffer Corruption Vulnerability |
Linux · Kernel | Sep 9, 2024 | Sep 30, 2024 | 10.7% | — |
| CVE-2024-40766 Ransomware
SonicWall SonicOS Improper Access Control Vulnerability |
SonicWall · SonicOS | Sep 9, 2024 | Sep 30, 2024 | 18.4% | — |
| CVE-2021-20123
Draytek VigorConnect Path Traversal Vulnerability |
DrayTek · VigorConnect | Sep 3, 2024 | Sep 24, 2024 | 90.3% | — |
| CVE-2021-20124
Draytek VigorConnect Path Traversal Vulnerability |
DrayTek · VigorConnect | Sep 3, 2024 | Sep 24, 2024 | 95.9% | — |
| CVE-2024-7262
Kingsoft WPS Office Path Traversal Vulnerability |
Kingsoft · WPS Office | Sep 3, 2024 | Sep 24, 2024 | 3.1% | — |
| CVE-2024-7965
Google Chromium V8 Inappropriate Implementation Vulnerability |
Google · Chromium V8 | Aug 28, 2024 | Sep 18, 2024 | 18.5% | — |
| CVE-2024-38856
Apache OFBiz Incorrect Authorization Vulnerability |
Apache · OFBiz | Aug 27, 2024 | Sep 17, 2024 | 99.4% | — |
| CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Aug 26, 2024 | Sep 16, 2024 | 21.0% | — |
| CVE-2024-39717
Versa Director Dangerous File Type Upload Vulnerability |
Versa · Director | Aug 23, 2024 | Sep 13, 2024 | 4.0% | — |
| CVE-2021-31196
Microsoft Exchange Server Information Disclosure Vulnerability |
Microsoft · Exchange Server | Aug 21, 2024 | Sep 11, 2024 | 54.1% | — |
| CVE-2021-33044
Dahua IP Camera Authentication Bypass Vulnerability |
Dahua · IP Camera Firmware | Aug 21, 2024 | Sep 11, 2024 | 100.0% | — |
| CVE-2021-33045
Dahua IP Camera Authentication Bypass Vulnerability |
Dahua · IP Camera Firmware | Aug 21, 2024 | Sep 11, 2024 | 99.6% | — |
| CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability |
Linux · Kernel | Aug 21, 2024 | Sep 11, 2024 | 25.2% | — |
| CVE-2024-23897 Ransomware
Jenkins Command Line Interface (CLI) Path Traversal Vulnerability |
Jenkins · Jenkins Command Line Interface (CLI) | Aug 19, 2024 | Sep 9, 2024 | 100.0% | — |
| CVE-2024-28986
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability |
SolarWinds · Web Help Desk | Aug 15, 2024 | Sep 5, 2024 | 84.6% | — |
| CVE-2024-38106
Microsoft Windows Kernel Privilege Escalation Vulnerability |
Microsoft · Windows | Aug 13, 2024 | Sep 3, 2024 | 6.3% | — |
| CVE-2024-38107
Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerabili… |
Microsoft · Windows | Aug 13, 2024 | Sep 3, 2024 | 1.6% | — |
| CVE-2024-38178
Microsoft Windows Scripting Engine Memory Corruption Vulnerability |
Microsoft · Windows | Aug 13, 2024 | Sep 3, 2024 | 41.4% | — |
| CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability |
Microsoft · Project | Aug 13, 2024 | Sep 3, 2024 | 8.2% | — |
| CVE-2024-38193
Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vu… |
Microsoft · Windows | Aug 13, 2024 | Sep 3, 2024 | 28.5% | — |
| CVE-2024-38213
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability |
Microsoft · Windows | Aug 13, 2024 | Sep 3, 2024 | 13.6% | — |
| CVE-2024-32113
Apache OFBiz Path Traversal Vulnerability |
Apache · OFBiz | Aug 7, 2024 | Aug 28, 2024 | 99.9% | — |
| CVE-2024-36971
Android Kernel Remote Code Execution Vulnerability |
Android · Kernel | Aug 7, 2024 | Aug 28, 2024 | 2.7% | — |
| CVE-2018-0824
Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability |
Microsoft · Windows | Aug 5, 2024 | Aug 26, 2024 | 73.0% | — |
| CVE-2024-37085 Ransomware
VMware ESXi Authentication Bypass Vulnerability |
VMware · ESXi | Jul 30, 2024 | Aug 20, 2024 | 26.8% | — |
| CVE-2023-45249
Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability |
Acronis · Cyber Infrastructure (ACI) | Jul 29, 2024 | Aug 19, 2024 | 53.5% | — |
| CVE-2024-4879
ServiceNow Improper Input Validation Vulnerability |
ServiceNow · Utah, Vancouver, and Washington DC Now Platform | Jul 29, 2024 | Aug 19, 2024 | 100.0% | — |
| CVE-2024-5217
ServiceNow Incomplete List of Disallowed Inputs Vulnerability |
ServiceNow · Utah, Vancouver, and Washington DC Now Platform | Jul 29, 2024 | Aug 19, 2024 | 99.6% | — |
| CVE-2012-4792
Microsoft Internet Explorer Use-After-Free Vulnerability |
Microsoft · Internet Explorer | Jul 23, 2024 | Aug 13, 2024 | 78.8% | — |
| CVE-2024-39891
Twilio Authy Information Disclosure Vulnerability |
Twilio · Authy | Jul 23, 2024 | Aug 13, 2024 | 1.7% | — |
| CVE-2022-22948
VMware vCenter Server Incorrect Default File Permissions Vulnerability |
VMware · vCenter Server | Jul 17, 2024 | Aug 7, 2024 | 13.3% | — |
| CVE-2024-28995
SolarWinds Serv-U Path Traversal Vulnerability |
SolarWinds · Serv-U | Jul 17, 2024 | Aug 7, 2024 | 99.6% | — |
| CVE-2024-34102
Adobe Commerce and Magento Open Source Improper Restriction of XML External Ent… |
Adobe · Commerce and Magento Open Source | Jul 17, 2024 | Aug 7, 2024 | 100.0% | — |
| CVE-2024-36401
OSGeo GeoServer GeoTools Eval Injection Vulnerability |
OSGeo · GeoServer | Jul 15, 2024 | Aug 5, 2024 | 99.8% | — |
| CVE-2024-23692 Ransomware
Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a … |
Rejetto · HTTP File Server | Jul 9, 2024 | Jul 30, 2024 | 99.5% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.