Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2024-8957 | PTZOptics | PT30X-SDI/NDI Cameras | 7.2 High | PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability | 2024-11-04 | 2024-11-25 | Unknown |
| CVE-2024-8956 | PTZOptics | PT30X-SDI/NDI Cameras | 9.1 Critical | PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability | 2024-11-04 | 2024-11-25 | Unknown |
| CVE-2024-37383 | Roundcube | Webmail | 6.1 Medium | RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability | 2024-10-24 | 2024-11-14 | Unknown |
| CVE-2024-20481 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 5.8 Medium | Cisco ASA and FTD Denial-of-Service Vulnerability | 2024-10-24 | 2024-11-14 | Unknown |
| CVE-2024-47575 | Fortinet | FortiManager | 9.8 Critical | Fortinet FortiManager Missing Authentication Vulnerability | 2024-10-23 | 2024-11-13 | Unknown |
| CVE-2024-38094 | Microsoft | SharePoint | 7.2 High | Microsoft SharePoint Deserialization Vulnerability | 2024-10-22 | 2024-11-12 | Known |
| CVE-2024-9537 | ScienceLogic | SL1 | 9.3 Critical | ScienceLogic SL1 Unspecified Vulnerability | 2024-10-21 | 2024-11-11 | Unknown |
| CVE-2024-40711 | Veeam | Backup & Replication | 9.8 Critical | Veeam Backup and Replication Deserialization Vulnerability | 2024-10-17 | 2024-11-07 | Known |
| CVE-2024-9680 | Mozilla | Firefox | 9.8 Critical | Mozilla Firefox Use-After-Free Vulnerability | 2024-10-15 | 2024-11-05 | Known |
| CVE-2024-30088 | Microsoft | Windows | 7.0 High | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability | 2024-10-15 | 2024-11-05 | Known |
| CVE-2024-28987 | SolarWinds | Web Help Desk | 9.1 Critical | SolarWinds Web Help Desk Hardcoded Credential Vulnerability | 2024-10-15 | 2024-11-05 | Unknown |
| CVE-2024-9380 | Ivanti | Cloud Services Appliance (CSA) | 7.2 High | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | 2024-10-09 | 2024-10-30 | Unknown |
| CVE-2024-9379 | Ivanti | Cloud Services Appliance (CSA) | 7.2 High | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | 2024-10-09 | 2024-10-30 | Unknown |
| CVE-2024-23113 | Fortinet | Multiple Products | 9.8 Critical | Fortinet Multiple Products Format String Vulnerability | 2024-10-09 | 2024-10-30 | Unknown |
| CVE-2024-43573 | Microsoft | Windows | 8.1 High | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 2024-10-08 | 2024-10-29 | Unknown |
| CVE-2024-43572 | Microsoft | Windows | 7.8 High | Microsoft Windows Management Console Remote Code Execution Vulnerability | 2024-10-08 | 2024-10-29 | Unknown |
| CVE-2024-43047 | Qualcomm | Multiple Chipsets | 7.8 High | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 2024-10-08 | 2024-10-29 | Unknown |
| CVE-2024-45519 | Synacor | Zimbra Collaboration Suite (ZCS) | 9.8 Critical | Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability | 2024-10-03 | 2024-10-24 | Unknown |
| CVE-2024-29824 | Ivanti | Endpoint Manager (EPM) | 8.8 High | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | 2024-10-02 | 2024-10-23 | Unknown |
| CVE-2023-25280 | D-Link | DIR-820 Router | 9.8 Critical | D-Link DIR-820 Router OS Command Injection Vulnerability | 2024-09-30 | 2024-10-21 | Unknown |
| CVE-2020-15415 | DrayTek | Multiple Vigor Routers | 9.8 Critical | DrayTek Multiple Vigor Routers OS Command Injection Vulnerability | 2024-09-30 | 2024-10-21 | Unknown |
| CVE-2019-0344 | SAP | Commerce Cloud | 9.8 Critical | SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability | 2024-09-30 | 2024-10-21 | Unknown |
| CVE-2024-7593 | Ivanti | Virtual Traffic Manager | 9.8 Critical | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | 2024-09-24 | 2024-10-15 | Unknown |
| CVE-2024-8963 | Ivanti | Cloud Services Appliance (CSA) | 9.1 Critical | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | 2024-09-19 | 2024-10-10 | Unknown |
| CVE-2024-27348 | Apache | HugeGraph-Server | 9.8 Critical | Apache HugeGraph-Server Improper Access Control Vulnerability | 2024-09-18 | 2024-10-09 | Unknown |
| CVE-2022-21445 | Oracle | ADF Faces | 9.8 Critical | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability | 2024-09-18 | 2024-10-09 | Unknown |
| CVE-2020-14644 | Oracle | WebLogic Server | 9.8 Critical | Oracle WebLogic Server Remote Code Execution Vulnerability | 2024-09-18 | 2024-10-09 | Unknown |
| CVE-2020-0618 | Microsoft | SQL Server | 8.8 High | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability | 2024-09-18 | 2024-10-09 | Unknown |
| CVE-2014-0502 | Adobe | Flash Player | 8.8 High | Adobe Flash Player Double Free Vulnerablity | 2024-09-17 | 2024-10-08 | Unknown |
| CVE-2014-0497 | Adobe | Flash Player | 9.8 Critical | Adobe Flash Player Integer Underflow Vulnerablity | 2024-09-17 | 2024-10-08 | Unknown |
| CVE-2013-0648 | Adobe | Flash Player | 8.8 High | Adobe Flash Player Code Execution Vulnerability | 2024-09-17 | 2024-10-08 | Unknown |
| CVE-2013-0643 | Adobe | Flash Player | 8.8 High | Adobe Flash Player Incorrect Default Permissions Vulnerability | 2024-09-17 | 2024-10-08 | Unknown |
| CVE-2024-6670 | Progress | WhatsUp Gold | 9.8 Critical | Progress WhatsUp Gold SQL Injection Vulnerability | 2024-09-16 | 2024-10-07 | Known |
| CVE-2024-43461 | Microsoft | Windows | 8.8 High | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 2024-09-16 | 2024-10-07 | Unknown |
| CVE-2024-8190 | Ivanti | Cloud Services Appliance | 7.2 High | Ivanti Cloud Services Appliance OS Command Injection Vulnerability | 2024-09-13 | 2024-10-04 | Unknown |
| CVE-2024-38226 | Microsoft | Publisher | 7.3 High | Microsoft Publisher Protection Mechanism Failure Vulnerability | 2024-09-10 | 2024-10-01 | Unknown |
| CVE-2024-38217 | Microsoft | Windows | 5.4 Medium | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability | 2024-09-10 | 2024-10-01 | Unknown |
| CVE-2024-38014 | Microsoft | Windows | 7.8 High | Microsoft Windows Installer Improper Privilege Management Vulnerability | 2024-09-10 | 2024-10-01 | Unknown |
| CVE-2024-40766 | SonicWall | SonicOS | 9.8 Critical | SonicWall SonicOS Improper Access Control Vulnerability | 2024-09-09 | 2024-09-30 | Known |
| CVE-2017-1000253 | Linux | Kernel | 7.8 High | Linux Kernel PIE Stack Buffer Corruption Vulnerability | 2024-09-09 | 2024-09-30 | Known |
| CVE-2016-3714 | ImageMagick | ImageMagick | 8.4 High | ImageMagick Improper Input Validation Vulnerability | 2024-09-09 | 2024-09-30 | Unknown |
| CVE-2024-7262 | Kingsoft | WPS Office | 9.3 Critical | Kingsoft WPS Office Path Traversal Vulnerability | 2024-09-03 | 2024-09-24 | Unknown |
| CVE-2021-20124 | DrayTek | VigorConnect | 7.5 High | Draytek VigorConnect Path Traversal Vulnerability | 2024-09-03 | 2024-09-24 | Unknown |
| CVE-2021-20123 | DrayTek | VigorConnect | 7.5 High | Draytek VigorConnect Path Traversal Vulnerability | 2024-09-03 | 2024-09-24 | Unknown |
| CVE-2024-7965 | Chromium V8 | 8.8 High | Google Chromium V8 Inappropriate Implementation Vulnerability | 2024-08-28 | 2024-09-18 | Unknown | |
| CVE-2024-38856 | Apache | OFBiz | 9.8 Critical | Apache OFBiz Incorrect Authorization Vulnerability | 2024-08-27 | 2024-09-17 | Unknown |
| CVE-2024-7971 | Chromium V8 | 9.6 Critical | Google Chromium V8 Type Confusion Vulnerability | 2024-08-26 | 2024-09-16 | Unknown | |
| CVE-2024-39717 | Versa | Director | 7.2 High | Versa Director Dangerous File Type Upload Vulnerability | 2024-08-23 | 2024-09-13 | Unknown |
| CVE-2022-0185 | Linux | Kernel | 8.4 High | Linux Kernel Heap-Based Buffer Overflow Vulnerability | 2024-08-21 | 2024-09-11 | Unknown |
| CVE-2021-33045 | Dahua | IP Camera Firmware | 9.8 Critical | Dahua IP Camera Authentication Bypass Vulnerability | 2024-08-21 | 2024-09-11 | Unknown |