--- title: "CISA KEV catalog, page 6 | CubePath" description: "The CISA Known Exploited Vulnerabilities catalog: CVEs with evidence of exploitation in the wild, newest first, with the date added and the federal due date." language: en source: https://cubepath.com/security/cve/kev?page=6 --- # CISA KEV catalog, page 6 | CubePath | CVE | Vulnerability | Added | Federal due date | Ransomware | | ------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ | ---------------- | ---------- | | [CVE-2024-49035](https://cubepath.com/security/cve/CVE-2024-49035) | Microsoft Partner Center Improper Access Control Vulnerability Microsoft / Partner Center | Feb 25, 2025 | Mar 18, 2025 | | | [CVE-2017-3066](https://cubepath.com/security/cve/CVE-2017-3066) | Adobe ColdFusion Deserialization Vulnerability Adobe / ColdFusion | Feb 24, 2025 | Mar 17, 2025 | | | [CVE-2024-20953](https://cubepath.com/security/cve/CVE-2024-20953) | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability Oracle / Agile Product Lifecycle Management (PLM) | Feb 24, 2025 | Mar 17, 2025 | | | [CVE-2025-24989](https://cubepath.com/security/cve/CVE-2025-24989) | Microsoft Power Pages Improper Access Control Vulnerability Microsoft / Power Pages | Feb 21, 2025 | Mar 14, 2025 | | | [CVE-2025-0111](https://cubepath.com/security/cve/CVE-2025-0111) | Palo Alto Networks PAN-OS File Read Vulnerability Palo Alto Networks / PAN-OS | Feb 20, 2025 | Mar 13, 2025 | | | [CVE-2025-23209](https://cubepath.com/security/cve/CVE-2025-23209) | Craft CMS Code Injection Vulnerability Craft CMS / Craft CMS | Feb 20, 2025 | Mar 13, 2025 | | | [CVE-2024-53704](https://cubepath.com/security/cve/CVE-2024-53704) | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability SonicWall / SonicOS | Feb 18, 2025 | Mar 11, 2025 | Known | | [CVE-2025-0108](https://cubepath.com/security/cve/CVE-2025-0108) | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks / PAN-OS | Feb 18, 2025 | Mar 11, 2025 | | | [CVE-2024-57727](https://cubepath.com/security/cve/CVE-2024-57727) | SimpleHelp Path Traversal Vulnerability SimpleHelp / SimpleHelp | Feb 13, 2025 | Mar 6, 2025 | Known | | [CVE-2024-41710](https://cubepath.com/security/cve/CVE-2024-41710) | Mitel SIP Phones Argument Injection Vulnerability Mitel / SIP Phones | Feb 12, 2025 | Mar 5, 2025 | | | [CVE-2025-24200](https://cubepath.com/security/cve/CVE-2025-24200) | Apple iOS and iPadOS Incorrect Authorization Vulnerability Apple / iOS and iPadOS | Feb 12, 2025 | Mar 5, 2025 | | | [CVE-2024-40890](https://cubepath.com/security/cve/CVE-2024-40890) | Zyxel DSL CPE OS Command Injection Vulnerability Zyxel / DSL CPE Devices | Feb 11, 2025 | Mar 4, 2025 | | | [CVE-2024-40891](https://cubepath.com/security/cve/CVE-2024-40891) | Zyxel DSL CPE OS Command Injection Vulnerability Zyxel / DSL CPE Devices | Feb 11, 2025 | Mar 4, 2025 | | | [CVE-2025-21391](https://cubepath.com/security/cve/CVE-2025-21391) | Microsoft Windows Storage Link Following Vulnerability Microsoft / Windows | Feb 11, 2025 | Mar 4, 2025 | | | [CVE-2025-21418](https://cubepath.com/security/cve/CVE-2025-21418) | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability Microsoft / Windows | Feb 11, 2025 | Mar 4, 2025 | | | [CVE-2025-0994](https://cubepath.com/security/cve/CVE-2025-0994) | Trimble Cityworks Deserialization Vulnerability Trimble / Cityworks | Feb 7, 2025 | Feb 28, 2025 | | | [CVE-2020-15069](https://cubepath.com/security/cve/CVE-2020-15069) | Sophos XG Firewall Buffer Overflow Vulnerability Sophos / XG Firewall | Feb 6, 2025 | Feb 27, 2025 | | | [CVE-2020-29574](https://cubepath.com/security/cve/CVE-2020-29574) | CyberoamOS (CROS) SQL Injection Vulnerability Sophos / CyberoamOS | Feb 6, 2025 | Feb 27, 2025 | Known | | [CVE-2022-23748](https://cubepath.com/security/cve/CVE-2022-23748) | Dante Discovery Process Control Vulnerability Audinate / Dante Discovery | Feb 6, 2025 | Feb 27, 2025 | | | [CVE-2024-21413](https://cubepath.com/security/cve/CVE-2024-21413) | Microsoft Outlook Improper Input Validation Vulnerability Microsoft / Office Outlook | Feb 6, 2025 | Feb 27, 2025 | | | [CVE-2025-0411](https://cubepath.com/security/cve/CVE-2025-0411) | 7-Zip Mark of the Web Bypass Vulnerability 7-Zip / 7-Zip | Feb 6, 2025 | Feb 27, 2025 | | | [CVE-2024-53104](https://cubepath.com/security/cve/CVE-2024-53104) | Linux Kernel Out-of-Bounds Write Vulnerability Linux / Kernel | Feb 5, 2025 | Feb 26, 2025 | | | [CVE-2018-19410](https://cubepath.com/security/cve/CVE-2018-19410) | Paessler PRTG Network Monitor Local File Inclusion Vulnerability Paessler / PRTG Network Monitor | Feb 4, 2025 | Feb 25, 2025 | | | [CVE-2018-9276](https://cubepath.com/security/cve/CVE-2018-9276) | Paessler PRTG Network Monitor OS Command Injection Vulnerability Paessler / PRTG Network Monitor | Feb 4, 2025 | Feb 25, 2025 | | | [CVE-2024-29059](https://cubepath.com/security/cve/CVE-2024-29059) | Microsoft .NET Framework Information Disclosure Vulnerability Microsoft / .NET Framework | Feb 4, 2025 | Feb 25, 2025 | | | [CVE-2024-45195](https://cubepath.com/security/cve/CVE-2024-45195) | Apache OFBiz Forced Browsing Vulnerability Apache / OFBiz | Feb 4, 2025 | Feb 25, 2025 | | | [CVE-2025-24085](https://cubepath.com/security/cve/CVE-2025-24085) | Apple Multiple Products Use-After-Free Vulnerability Apple / Multiple Products | Jan 29, 2025 | Feb 19, 2025 | | | [CVE-2025-23006](https://cubepath.com/security/cve/CVE-2025-23006) | SonicWall SMA1000 Appliances Deserialization Vulnerability SonicWall / SMA1000 Appliances | Jan 24, 2025 | Feb 14, 2025 | Known | | [CVE-2020-11023](https://cubepath.com/security/cve/CVE-2020-11023) | JQuery Cross-Site Scripting (XSS) Vulnerability JQuery / JQuery | Jan 23, 2025 | Feb 13, 2025 | | | [CVE-2024-50603](https://cubepath.com/security/cve/CVE-2024-50603) | Aviatrix Controllers OS Command Injection Vulnerability Aviatrix / Controllers | Jan 16, 2025 | Feb 6, 2025 | | | [CVE-2024-55591](https://cubepath.com/security/cve/CVE-2024-55591) | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet / FortiOS and FortiProxy | Jan 14, 2025 | Jan 21, 2025 | Known | | [CVE-2025-21333](https://cubepath.com/security/cve/CVE-2025-21333) | Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability Microsoft / Windows | Jan 14, 2025 | Feb 4, 2025 | | | [CVE-2025-21334](https://cubepath.com/security/cve/CVE-2025-21334) | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft / Windows | Jan 14, 2025 | Feb 4, 2025 | | | [CVE-2025-21335](https://cubepath.com/security/cve/CVE-2025-21335) | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft / Windows | Jan 14, 2025 | Feb 4, 2025 | | | [CVE-2023-48365](https://cubepath.com/security/cve/CVE-2023-48365) | Qlik Sense HTTP Tunneling Vulnerability Qlik / Sense | Jan 13, 2025 | Feb 3, 2025 | Known | | [CVE-2024-12686](https://cubepath.com/security/cve/CVE-2024-12686) | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability BeyondTrust / Privileged Remote Access (PRA) and Remote Support (RS) | Jan 13, 2025 | Feb 3, 2025 | | | [CVE-2025-0282](https://cubepath.com/security/cve/CVE-2025-0282) | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti / Connect Secure, Policy Secure, and ZTA Gateways | Jan 8, 2025 | Jan 15, 2025 | Known | | [CVE-2020-2883](https://cubepath.com/security/cve/CVE-2020-2883) | Oracle WebLogic Server Unspecified Vulnerability Oracle / WebLogic Server | Jan 7, 2025 | Jan 28, 2025 | | | [CVE-2024-41713](https://cubepath.com/security/cve/CVE-2024-41713) | Mitel MiCollab Path Traversal Vulnerability Mitel / MiCollab | Jan 7, 2025 | Jan 28, 2025 | Known | | [CVE-2024-55550](https://cubepath.com/security/cve/CVE-2024-55550) | Mitel MiCollab Path Traversal Vulnerability Mitel / MiCollab | Jan 7, 2025 | Jan 28, 2025 | Known | | [CVE-2024-3393](https://cubepath.com/security/cve/CVE-2024-3393) | Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability Palo Alto Networks / PAN-OS | Dec 30, 2024 | Jan 20, 2025 | | | [CVE-2021-44207](https://cubepath.com/security/cve/CVE-2021-44207) | Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability Acclaim Systems / USAHERDS | Dec 23, 2024 | Jan 13, 2025 | | | [CVE-2024-12356](https://cubepath.com/security/cve/CVE-2024-12356) | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability BeyondTrust / Privileged Remote Access (PRA) and Remote Support (RS) | Dec 19, 2024 | Dec 27, 2024 | | | [CVE-2018-14933](https://cubepath.com/security/cve/CVE-2018-14933) | NUUO NVRmini Devices OS Command Injection Vulnerability NUUO / NVRmini Devices | Dec 18, 2024 | Jan 8, 2025 | | | [CVE-2019-11001](https://cubepath.com/security/cve/CVE-2019-11001) | Reolink Multiple IP Cameras OS Command Injection Vulnerability Reolink / Multiple IP Cameras | Dec 18, 2024 | Jan 8, 2025 | | | [CVE-2021-40407](https://cubepath.com/security/cve/CVE-2021-40407) | Reolink RLC-410W IP Camera OS Command Injection Vulnerability Reolink / RLC-410W IP Camera | Dec 18, 2024 | Jan 8, 2025 | | | [CVE-2022-23227](https://cubepath.com/security/cve/CVE-2022-23227) | NUUO NVRmini2 Devices Missing Authentication Vulnerability NUUO / NVRmini2 Devices | Dec 18, 2024 | Jan 8, 2025 | | | [CVE-2024-55956](https://cubepath.com/security/cve/CVE-2024-55956) | Cleo Multiple Products Unauthenticated File Upload Vulnerability Cleo / Multiple Products | Dec 17, 2024 | Jan 7, 2025 | Known | | [CVE-2024-20767](https://cubepath.com/security/cve/CVE-2024-20767) | Adobe ColdFusion Improper Access Control Vulnerability Adobe / ColdFusion | Dec 16, 2024 | Jan 6, 2025 | | | [CVE-2024-35250](https://cubepath.com/security/cve/CVE-2024-35250) | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability Microsoft / Windows | Dec 16, 2024 | Jan 6, 2025 | | | [CVE-2024-50623](https://cubepath.com/security/cve/CVE-2024-50623) | Cleo Multiple Products Unrestricted File Upload Vulnerability Cleo / Multiple Products | Dec 13, 2024 | Jan 3, 2025 | Known | | [CVE-2024-49138](https://cubepath.com/security/cve/CVE-2024-49138) | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft / Windows | Dec 10, 2024 | Dec 31, 2024 | | | [CVE-2024-51378](https://cubepath.com/security/cve/CVE-2024-51378) | CyberPanel Incorrect Default Permissions Vulnerability CyberPersons / CyberPanel | Dec 4, 2024 | Dec 25, 2024 | Known | | [CVE-2023-45727](https://cubepath.com/security/cve/CVE-2023-45727) | North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability North Grid / Proself | Dec 3, 2024 | Dec 24, 2024 | | | [CVE-2024-11667](https://cubepath.com/security/cve/CVE-2024-11667) | Zyxel Multiple Firewalls Path Traversal Vulnerability Zyxel / Multiple Firewalls | Dec 3, 2024 | Dec 24, 2024 | Known | | [CVE-2024-11680](https://cubepath.com/security/cve/CVE-2024-11680) | ProjectSend Improper Authentication Vulnerability ProjectSend / ProjectSend | Dec 3, 2024 | Dec 24, 2024 | | | [CVE-2023-28461](https://cubepath.com/security/cve/CVE-2023-28461) | Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability Array Networks / AG/vxAG ArrayOS | Nov 25, 2024 | Dec 16, 2024 | Known | | [CVE-2024-21287](https://cubepath.com/security/cve/CVE-2024-21287) | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability Oracle / Agile Product Lifecycle Management (PLM) | Nov 21, 2024 | Dec 12, 2024 | | | [CVE-2024-44308](https://cubepath.com/security/cve/CVE-2024-44308) | Apple Multiple Products Code Execution Vulnerability Apple / Multiple Products | Nov 21, 2024 | Dec 12, 2024 | | | [CVE-2024-44309](https://cubepath.com/security/cve/CVE-2024-44309) | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability Apple / Multiple Products | Nov 21, 2024 | Dec 12, 2024 | | | [CVE-2024-38812](https://cubepath.com/security/cve/CVE-2024-38812) | VMware vCenter Server Heap-Based Buffer Overflow Vulnerability VMware / vCenter Server | Nov 20, 2024 | Dec 11, 2024 | | | [CVE-2024-38813](https://cubepath.com/security/cve/CVE-2024-38813) | VMware vCenter Server Privilege Escalation Vulnerability VMware / vCenter Server | Nov 20, 2024 | Dec 11, 2024 | | | [CVE-2024-0012](https://cubepath.com/security/cve/CVE-2024-0012) | Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability Palo Alto Networks / PAN-OS | Nov 18, 2024 | Dec 9, 2024 | Known | | [CVE-2024-1212](https://cubepath.com/security/cve/CVE-2024-1212) | Progress Kemp LoadMaster OS Command Injection Vulnerability Progress / Kemp LoadMaster | Nov 18, 2024 | Dec 9, 2024 | | | [CVE-2024-9474](https://cubepath.com/security/cve/CVE-2024-9474) | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability Palo Alto Networks / PAN-OS | Nov 18, 2024 | Dec 9, 2024 | Known | | [CVE-2024-9463](https://cubepath.com/security/cve/CVE-2024-9463) | Palo Alto Networks Expedition OS Command Injection Vulnerability Palo Alto Networks / Expedition | Nov 14, 2024 | Dec 5, 2024 | | | [CVE-2024-9465](https://cubepath.com/security/cve/CVE-2024-9465) | Palo Alto Networks Expedition SQL Injection Vulnerability Palo Alto Networks / Expedition | Nov 14, 2024 | Dec 5, 2024 | | | [CVE-2014-2120](https://cubepath.com/security/cve/CVE-2014-2120) | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability Cisco / Adaptive Security Appliance (ASA) | Nov 12, 2024 | Dec 3, 2024 | | | [CVE-2021-26086](https://cubepath.com/security/cve/CVE-2021-26086) | Atlassian Jira Server and Data Center Path Traversal Vulnerability Atlassian / Jira Server and Data Center | Nov 12, 2024 | Dec 3, 2024 | | | [CVE-2021-41277](https://cubepath.com/security/cve/CVE-2021-41277) | Metabase GeoJSON API Local File Inclusion Vulnerability Metabase / Metabase | Nov 12, 2024 | Dec 3, 2024 | | | [CVE-2024-43451](https://cubepath.com/security/cve/CVE-2024-43451) | Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability Microsoft / Windows | Nov 12, 2024 | Dec 3, 2024 | | | [CVE-2024-49039](https://cubepath.com/security/cve/CVE-2024-49039) | Microsoft Windows Task Scheduler Privilege Escalation Vulnerability Microsoft / Windows | Nov 12, 2024 | Dec 3, 2024 | Known | | [CVE-2019-16278](https://cubepath.com/security/cve/CVE-2019-16278) | Nostromo nhttpd Directory Traversal Vulnerability Nostromo / nhttpd | Nov 7, 2024 | Nov 28, 2024 | | | [CVE-2024-43093](https://cubepath.com/security/cve/CVE-2024-43093) | Android Framework Privilege Escalation Vulnerability Android / Framework | Nov 7, 2024 | Nov 28, 2024 | | | [CVE-2024-51567](https://cubepath.com/security/cve/CVE-2024-51567) | CyberPanel Incorrect Default Permissions Vulnerability CyberPersons / CyberPanel | Nov 7, 2024 | Nov 28, 2024 | Known | | [CVE-2024-5910](https://cubepath.com/security/cve/CVE-2024-5910) | Palo Alto Networks Expedition Missing Authentication Vulnerability Palo Alto Networks / Expedition | Nov 7, 2024 | Nov 28, 2024 | | | [CVE-2024-8956](https://cubepath.com/security/cve/CVE-2024-8956) | PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability PTZOptics / PT30X-SDI/NDI Cameras | Nov 4, 2024 | Nov 25, 2024 | | | [CVE-2024-8957](https://cubepath.com/security/cve/CVE-2024-8957) | PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability PTZOptics / PT30X-SDI/NDI Cameras | Nov 4, 2024 | Nov 25, 2024 | | | [CVE-2024-20481](https://cubepath.com/security/cve/CVE-2024-20481) | Cisco ASA and FTD Denial-of-Service Vulnerability Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Oct 24, 2024 | Nov 14, 2024 | | | [CVE-2024-37383](https://cubepath.com/security/cve/CVE-2024-37383) | RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube / Webmail | Oct 24, 2024 | Nov 14, 2024 | | | [CVE-2024-47575](https://cubepath.com/security/cve/CVE-2024-47575) | Fortinet FortiManager Missing Authentication Vulnerability Fortinet / FortiManager | Oct 23, 2024 | Nov 13, 2024 | | | [CVE-2024-38094](https://cubepath.com/security/cve/CVE-2024-38094) | Microsoft SharePoint Deserialization Vulnerability Microsoft / SharePoint | Oct 22, 2024 | Nov 12, 2024 | Known | | [CVE-2024-9537](https://cubepath.com/security/cve/CVE-2024-9537) | ScienceLogic SL1 Unspecified Vulnerability ScienceLogic / SL1 | Oct 21, 2024 | Nov 11, 2024 | | | [CVE-2024-40711](https://cubepath.com/security/cve/CVE-2024-40711) | Veeam Backup and Replication Deserialization Vulnerability Veeam / Backup & Replication | Oct 17, 2024 | Nov 7, 2024 | Known | | [CVE-2024-28987](https://cubepath.com/security/cve/CVE-2024-28987) | SolarWinds Web Help Desk Hardcoded Credential Vulnerability SolarWinds / Web Help Desk | Oct 15, 2024 | Nov 5, 2024 | | | [CVE-2024-30088](https://cubepath.com/security/cve/CVE-2024-30088) | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability Microsoft / Windows | Oct 15, 2024 | Nov 5, 2024 | Known | | [CVE-2024-9680](https://cubepath.com/security/cve/CVE-2024-9680) | Mozilla Firefox Use-After-Free Vulnerability Mozilla / Firefox | Oct 15, 2024 | Nov 5, 2024 | Known | | [CVE-2024-23113](https://cubepath.com/security/cve/CVE-2024-23113) | Fortinet Multiple Products Format String Vulnerability Fortinet / Multiple Products | Oct 9, 2024 | Oct 30, 2024 | | | [CVE-2024-9379](https://cubepath.com/security/cve/CVE-2024-9379) | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability Ivanti / Cloud Services Appliance (CSA) | Oct 9, 2024 | Oct 30, 2024 | | | [CVE-2024-9380](https://cubepath.com/security/cve/CVE-2024-9380) | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability Ivanti / Cloud Services Appliance (CSA) | Oct 9, 2024 | Oct 30, 2024 | | | [CVE-2024-43047](https://cubepath.com/security/cve/CVE-2024-43047) | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm / Multiple Chipsets | Oct 8, 2024 | Oct 29, 2024 | | | [CVE-2024-43572](https://cubepath.com/security/cve/CVE-2024-43572) | Microsoft Windows Management Console Remote Code Execution Vulnerability Microsoft / Windows | Oct 8, 2024 | Oct 29, 2024 | | | [CVE-2024-43573](https://cubepath.com/security/cve/CVE-2024-43573) | Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft / Windows | Oct 8, 2024 | Oct 29, 2024 | | | [CVE-2024-45519](https://cubepath.com/security/cve/CVE-2024-45519) | Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Oct 3, 2024 | Oct 24, 2024 | | | [CVE-2024-29824](https://cubepath.com/security/cve/CVE-2024-29824) | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability Ivanti / Endpoint Manager (EPM) | Oct 2, 2024 | Oct 23, 2024 | | | [CVE-2019-0344](https://cubepath.com/security/cve/CVE-2019-0344) | SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability SAP / Commerce Cloud | Sep 30, 2024 | Oct 21, 2024 | | | [CVE-2020-15415](https://cubepath.com/security/cve/CVE-2020-15415) | DrayTek Multiple Vigor Routers OS Command Injection Vulnerability DrayTek / Multiple Vigor Routers | Sep 30, 2024 | Oct 21, 2024 | | | [CVE-2023-25280](https://cubepath.com/security/cve/CVE-2023-25280) | D-Link DIR-820 Router OS Command Injection Vulnerability D-Link / DIR-820 Router | Sep 30, 2024 | Oct 21, 2024 | | | [CVE-2024-7593](https://cubepath.com/security/cve/CVE-2024-7593) | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability Ivanti / Virtual Traffic Manager | Sep 24, 2024 | Oct 15, 2024 | | | [CVE-2024-8963](https://cubepath.com/security/cve/CVE-2024-8963) | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability Ivanti / Cloud Services Appliance (CSA) | Sep 19, 2024 | Oct 10, 2024 | | [Newer](https://cubepath.com/security/cve/kev?page=5) Page 6 of 18 [Older](https://cubepath.com/security/cve/kev?page=7) Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. [Sources and licenses](https://cubepath.com/security/cve/legal)