Browse

CISA KEV catalog

Search and filter the complete official catalog.

Search CVE IDs and vulnerability names.
Filter the catalog Select one or more technologies to create a focused view.
Vendors
All vendors
Products
All products
1653 results
CVE Vendor Product CVSS Vulnerability Added Due Ransomware
CVE-2024-8957 PTZOptics PT30X-SDI/NDI Cameras 7.2 High PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability 2024-11-04 2024-11-25 Unknown
CVE-2024-8956 PTZOptics PT30X-SDI/NDI Cameras 9.1 Critical PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability 2024-11-04 2024-11-25 Unknown
CVE-2024-37383 Roundcube Webmail 6.1 Medium RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability 2024-10-24 2024-11-14 Unknown
CVE-2024-20481 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) 5.8 Medium Cisco ASA and FTD Denial-of-Service Vulnerability 2024-10-24 2024-11-14 Unknown
CVE-2024-47575 Fortinet FortiManager 9.8 Critical Fortinet FortiManager Missing Authentication Vulnerability 2024-10-23 2024-11-13 Unknown
CVE-2024-38094 Microsoft SharePoint 7.2 High Microsoft SharePoint Deserialization Vulnerability 2024-10-22 2024-11-12 Known
CVE-2024-9537 ScienceLogic SL1 9.3 Critical ScienceLogic SL1 Unspecified Vulnerability 2024-10-21 2024-11-11 Unknown
CVE-2024-40711 Veeam Backup & Replication 9.8 Critical Veeam Backup and Replication Deserialization Vulnerability 2024-10-17 2024-11-07 Known
CVE-2024-9680 Mozilla Firefox 9.8 Critical Mozilla Firefox Use-After-Free Vulnerability 2024-10-15 2024-11-05 Known
CVE-2024-30088 Microsoft Windows 7.0 High Microsoft Windows Kernel TOCTOU Race Condition Vulnerability 2024-10-15 2024-11-05 Known
CVE-2024-28987 SolarWinds Web Help Desk 9.1 Critical SolarWinds Web Help Desk Hardcoded Credential Vulnerability 2024-10-15 2024-11-05 Unknown
CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) 7.2 High Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability 2024-10-09 2024-10-30 Unknown
CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) 7.2 High Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability 2024-10-09 2024-10-30 Unknown
CVE-2024-23113 Fortinet Multiple Products 9.8 Critical Fortinet Multiple Products Format String Vulnerability 2024-10-09 2024-10-30 Unknown
CVE-2024-43573 Microsoft Windows 8.1 High Microsoft Windows MSHTML Platform Spoofing Vulnerability 2024-10-08 2024-10-29 Unknown
CVE-2024-43572 Microsoft Windows 7.8 High Microsoft Windows Management Console Remote Code Execution Vulnerability 2024-10-08 2024-10-29 Unknown
CVE-2024-43047 Qualcomm Multiple Chipsets 7.8 High Qualcomm Multiple Chipsets Use-After-Free Vulnerability 2024-10-08 2024-10-29 Unknown
CVE-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) 9.8 Critical Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability 2024-10-03 2024-10-24 Unknown
CVE-2024-29824 Ivanti Endpoint Manager (EPM) 8.8 High Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability 2024-10-02 2024-10-23 Unknown
CVE-2023-25280 D-Link DIR-820 Router 9.8 Critical D-Link DIR-820 Router OS Command Injection Vulnerability 2024-09-30 2024-10-21 Unknown
CVE-2020-15415 DrayTek Multiple Vigor Routers 9.8 Critical DrayTek Multiple Vigor Routers OS Command Injection Vulnerability 2024-09-30 2024-10-21 Unknown
CVE-2019-0344 SAP Commerce Cloud 9.8 Critical SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability 2024-09-30 2024-10-21 Unknown
CVE-2024-7593 Ivanti Virtual Traffic Manager 9.8 Critical Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability 2024-09-24 2024-10-15 Unknown
CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) 9.1 Critical Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability 2024-09-19 2024-10-10 Unknown
CVE-2024-27348 Apache HugeGraph-Server 9.8 Critical Apache HugeGraph-Server Improper Access Control Vulnerability 2024-09-18 2024-10-09 Unknown
CVE-2022-21445 Oracle ADF Faces 9.8 Critical Oracle ADF Faces Deserialization of Untrusted Data Vulnerability 2024-09-18 2024-10-09 Unknown
CVE-2020-14644 Oracle WebLogic Server 9.8 Critical Oracle WebLogic Server Remote Code Execution Vulnerability 2024-09-18 2024-10-09 Unknown
CVE-2020-0618 Microsoft SQL Server 8.8 High Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability 2024-09-18 2024-10-09 Unknown
CVE-2014-0502 Adobe Flash Player 8.8 High Adobe Flash Player Double Free Vulnerablity 2024-09-17 2024-10-08 Unknown
CVE-2014-0497 Adobe Flash Player 9.8 Critical Adobe Flash Player Integer Underflow Vulnerablity 2024-09-17 2024-10-08 Unknown
CVE-2013-0648 Adobe Flash Player 8.8 High Adobe Flash Player Code Execution Vulnerability 2024-09-17 2024-10-08 Unknown
CVE-2013-0643 Adobe Flash Player 8.8 High Adobe Flash Player Incorrect Default Permissions Vulnerability 2024-09-17 2024-10-08 Unknown
CVE-2024-6670 Progress WhatsUp Gold 9.8 Critical Progress WhatsUp Gold SQL Injection Vulnerability 2024-09-16 2024-10-07 Known
CVE-2024-43461 Microsoft Windows 8.8 High Microsoft Windows MSHTML Platform Spoofing Vulnerability 2024-09-16 2024-10-07 Unknown
CVE-2024-8190 Ivanti Cloud Services Appliance 7.2 High Ivanti Cloud Services Appliance OS Command Injection Vulnerability 2024-09-13 2024-10-04 Unknown
CVE-2024-38226 Microsoft Publisher 7.3 High Microsoft Publisher Protection Mechanism Failure Vulnerability 2024-09-10 2024-10-01 Unknown
CVE-2024-38217 Microsoft Windows 5.4 Medium Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability 2024-09-10 2024-10-01 Unknown
CVE-2024-38014 Microsoft Windows 7.8 High Microsoft Windows Installer Improper Privilege Management Vulnerability 2024-09-10 2024-10-01 Unknown
CVE-2024-40766 SonicWall SonicOS 9.8 Critical SonicWall SonicOS Improper Access Control Vulnerability 2024-09-09 2024-09-30 Known
CVE-2017-1000253 Linux Kernel 7.8 High Linux Kernel PIE Stack Buffer Corruption Vulnerability 2024-09-09 2024-09-30 Known
CVE-2016-3714 ImageMagick ImageMagick 8.4 High ImageMagick Improper Input Validation Vulnerability 2024-09-09 2024-09-30 Unknown
CVE-2024-7262 Kingsoft WPS Office 9.3 Critical Kingsoft WPS Office Path Traversal Vulnerability 2024-09-03 2024-09-24 Unknown
CVE-2021-20124 DrayTek VigorConnect 7.5 High Draytek VigorConnect Path Traversal Vulnerability 2024-09-03 2024-09-24 Unknown
CVE-2021-20123 DrayTek VigorConnect 7.5 High Draytek VigorConnect Path Traversal Vulnerability 2024-09-03 2024-09-24 Unknown
CVE-2024-7965 Google Chromium V8 8.8 High Google Chromium V8 Inappropriate Implementation Vulnerability 2024-08-28 2024-09-18 Unknown
CVE-2024-38856 Apache OFBiz 9.8 Critical Apache OFBiz Incorrect Authorization Vulnerability 2024-08-27 2024-09-17 Unknown
CVE-2024-7971 Google Chromium V8 9.6 Critical Google Chromium V8 Type Confusion Vulnerability 2024-08-26 2024-09-16 Unknown
CVE-2024-39717 Versa Director 7.2 High Versa Director Dangerous File Type Upload Vulnerability 2024-08-23 2024-09-13 Unknown
CVE-2022-0185 Linux Kernel 8.4 High Linux Kernel Heap-Based Buffer Overflow Vulnerability 2024-08-21 2024-09-11 Unknown
CVE-2021-33045 Dahua IP Camera Firmware 9.8 Critical Dahua IP Camera Authentication Bypass Vulnerability 2024-08-21 2024-09-11 Unknown