Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2023-28461 | Array Networks | AG/vxAG ArrayOS | 9.8 Critical | Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability | 2024-11-25 | 2024-12-16 | Known |
| CVE-2024-44309 | Apple | Multiple Products | 6.3 Medium | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability | 2024-11-21 | 2024-12-12 | Unknown |
| CVE-2024-44308 | Apple | Multiple Products | 8.8 High | Apple Multiple Products Code Execution Vulnerability | 2024-11-21 | 2024-12-12 | Unknown |
| CVE-2024-21287 | Oracle | Agile Product Lifecycle Management (PLM) | 7.5 High | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability | 2024-11-21 | 2024-12-12 | Unknown |
| CVE-2024-38813 | VMware | vCenter Server | 9.8 Critical | VMware vCenter Server Privilege Escalation Vulnerability | 2024-11-20 | 2024-12-11 | Unknown |
| CVE-2024-38812 | VMware | vCenter Server | 9.8 Critical | VMware vCenter Server Heap-Based Buffer Overflow Vulnerability | 2024-11-20 | 2024-12-11 | Unknown |
| CVE-2024-9474 | Palo Alto Networks | PAN-OS | 6.9 Medium | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | 2024-11-18 | 2024-12-09 | Known |
| CVE-2024-1212 | Progress | Kemp LoadMaster | 9.8 Critical | Progress Kemp LoadMaster OS Command Injection Vulnerability | 2024-11-18 | 2024-12-09 | Unknown |
| CVE-2024-0012 | Palo Alto Networks | PAN-OS | 9.3 Critical | Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability | 2024-11-18 | 2024-12-09 | Known |
| CVE-2024-9465 | Palo Alto Networks | Expedition | 9.2 Critical | Palo Alto Networks Expedition SQL Injection Vulnerability | 2024-11-14 | 2024-12-05 | Unknown |
| CVE-2024-9463 | Palo Alto Networks | Expedition | 9.9 Critical | Palo Alto Networks Expedition OS Command Injection Vulnerability | 2024-11-14 | 2024-12-05 | Unknown |
| CVE-2024-49039 | Microsoft | Windows | 8.8 High | Microsoft Windows Task Scheduler Privilege Escalation Vulnerability | 2024-11-12 | 2024-12-03 | Known |
| CVE-2024-43451 | Microsoft | Windows | 6.5 Medium | Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability | 2024-11-12 | 2024-12-03 | Unknown |
| CVE-2021-41277 | Metabase | Metabase | 7.5 High | Metabase GeoJSON API Local File Inclusion Vulnerability | 2024-11-12 | 2024-12-03 | Unknown |
| CVE-2021-26086 | Atlassian | Jira Server and Data Center | 5.3 Medium | Atlassian Jira Server and Data Center Path Traversal Vulnerability | 2024-11-12 | 2024-12-03 | Unknown |
| CVE-2014-2120 | Cisco | Adaptive Security Appliance (ASA) | 6.1 Medium | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability | 2024-11-12 | 2024-12-03 | Unknown |
| CVE-2024-5910 | Palo Alto Networks | Expedition | 9.3 Critical | Palo Alto Networks Expedition Missing Authentication Vulnerability | 2024-11-07 | 2024-11-28 | Unknown |
| CVE-2024-51567 | CyberPersons | CyberPanel | 9.8 Critical | CyberPanel Incorrect Default Permissions Vulnerability | 2024-11-07 | 2024-11-28 | Known |
| CVE-2024-43093 | Android | Framework | 7.3 High | Android Framework Privilege Escalation Vulnerability | 2024-11-07 | 2024-11-28 | Unknown |
| CVE-2019-16278 | Nostromo | nhttpd | 9.8 Critical | Nostromo nhttpd Directory Traversal Vulnerability | 2024-11-07 | 2024-11-28 | Unknown |
| CVE-2024-8957 | PTZOptics | PT30X-SDI/NDI Cameras | 7.2 High | PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability | 2024-11-04 | 2024-11-25 | Unknown |
| CVE-2024-8956 | PTZOptics | PT30X-SDI/NDI Cameras | 9.1 Critical | PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability | 2024-11-04 | 2024-11-25 | Unknown |
| CVE-2024-37383 | Roundcube | Webmail | 6.1 Medium | RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability | 2024-10-24 | 2024-11-14 | Unknown |
| CVE-2024-20481 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 5.8 Medium | Cisco ASA and FTD Denial-of-Service Vulnerability | 2024-10-24 | 2024-11-14 | Unknown |
| CVE-2024-47575 | Fortinet | FortiManager | 9.8 Critical | Fortinet FortiManager Missing Authentication Vulnerability | 2024-10-23 | 2024-11-13 | Unknown |
| CVE-2024-38094 | Microsoft | SharePoint | 7.2 High | Microsoft SharePoint Deserialization Vulnerability | 2024-10-22 | 2024-11-12 | Known |
| CVE-2024-9537 | ScienceLogic | SL1 | 9.3 Critical | ScienceLogic SL1 Unspecified Vulnerability | 2024-10-21 | 2024-11-11 | Unknown |
| CVE-2024-40711 | Veeam | Backup & Replication | 9.8 Critical | Veeam Backup and Replication Deserialization Vulnerability | 2024-10-17 | 2024-11-07 | Known |
| CVE-2024-9680 | Mozilla | Firefox | 9.8 Critical | Mozilla Firefox Use-After-Free Vulnerability | 2024-10-15 | 2024-11-05 | Known |
| CVE-2024-30088 | Microsoft | Windows | 7.0 High | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability | 2024-10-15 | 2024-11-05 | Known |
| CVE-2024-28987 | SolarWinds | Web Help Desk | 9.1 Critical | SolarWinds Web Help Desk Hardcoded Credential Vulnerability | 2024-10-15 | 2024-11-05 | Unknown |
| CVE-2024-9380 | Ivanti | Cloud Services Appliance (CSA) | 7.2 High | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | 2024-10-09 | 2024-10-30 | Unknown |
| CVE-2024-9379 | Ivanti | Cloud Services Appliance (CSA) | 7.2 High | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | 2024-10-09 | 2024-10-30 | Unknown |
| CVE-2024-23113 | Fortinet | Multiple Products | 9.8 Critical | Fortinet Multiple Products Format String Vulnerability | 2024-10-09 | 2024-10-30 | Unknown |
| CVE-2024-43573 | Microsoft | Windows | 8.1 High | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 2024-10-08 | 2024-10-29 | Unknown |
| CVE-2024-43572 | Microsoft | Windows | 7.8 High | Microsoft Windows Management Console Remote Code Execution Vulnerability | 2024-10-08 | 2024-10-29 | Unknown |
| CVE-2024-43047 | Qualcomm | Multiple Chipsets | 7.8 High | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 2024-10-08 | 2024-10-29 | Unknown |
| CVE-2024-45519 | Synacor | Zimbra Collaboration Suite (ZCS) | 9.8 Critical | Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability | 2024-10-03 | 2024-10-24 | Unknown |
| CVE-2024-29824 | Ivanti | Endpoint Manager (EPM) | 8.8 High | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | 2024-10-02 | 2024-10-23 | Unknown |
| CVE-2023-25280 | D-Link | DIR-820 Router | 9.8 Critical | D-Link DIR-820 Router OS Command Injection Vulnerability | 2024-09-30 | 2024-10-21 | Unknown |
| CVE-2020-15415 | DrayTek | Multiple Vigor Routers | 9.8 Critical | DrayTek Multiple Vigor Routers OS Command Injection Vulnerability | 2024-09-30 | 2024-10-21 | Unknown |
| CVE-2019-0344 | SAP | Commerce Cloud | 9.8 Critical | SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability | 2024-09-30 | 2024-10-21 | Unknown |
| CVE-2024-7593 | Ivanti | Virtual Traffic Manager | 9.8 Critical | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | 2024-09-24 | 2024-10-15 | Unknown |
| CVE-2024-8963 | Ivanti | Cloud Services Appliance (CSA) | 9.1 Critical | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | 2024-09-19 | 2024-10-10 | Unknown |
| CVE-2024-27348 | Apache | HugeGraph-Server | 9.8 Critical | Apache HugeGraph-Server Improper Access Control Vulnerability | 2024-09-18 | 2024-10-09 | Unknown |
| CVE-2022-21445 | Oracle | ADF Faces | 9.8 Critical | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability | 2024-09-18 | 2024-10-09 | Unknown |
| CVE-2020-14644 | Oracle | WebLogic Server | 9.8 Critical | Oracle WebLogic Server Remote Code Execution Vulnerability | 2024-09-18 | 2024-10-09 | Unknown |
| CVE-2020-0618 | Microsoft | SQL Server | 8.8 High | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability | 2024-09-18 | 2024-10-09 | Known |
| CVE-2014-0502 | Adobe | Flash Player | 8.8 High | Adobe Flash Player Double Free Vulnerablity | 2024-09-17 | 2024-10-08 | Unknown |
| CVE-2014-0497 | Adobe | Flash Player | 9.8 Critical | Adobe Flash Player Integer Underflow Vulnerablity | 2024-09-17 | 2024-10-08 | Unknown |