Browse

CISA KEV catalog

Search and filter the complete official catalog.

Search CVE IDs and vulnerability names.
Filter the catalog Select one or more technologies to create a focused view.
Vendors
All vendors
Products
All products
1723 results
CVE Vendor Product CVSS Vulnerability Added Due Ransomware
CVE-2023-28461 Array Networks AG/vxAG ArrayOS 9.8 Critical Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability 2024-11-25 2024-12-16 Known
CVE-2024-44309 Apple Multiple Products 6.3 Medium Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability 2024-11-21 2024-12-12 Unknown
CVE-2024-44308 Apple Multiple Products 8.8 High Apple Multiple Products Code Execution Vulnerability 2024-11-21 2024-12-12 Unknown
CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) 7.5 High Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability 2024-11-21 2024-12-12 Unknown
CVE-2024-38813 VMware vCenter Server 9.8 Critical VMware vCenter Server Privilege Escalation Vulnerability 2024-11-20 2024-12-11 Unknown
CVE-2024-38812 VMware vCenter Server 9.8 Critical VMware vCenter Server Heap-Based Buffer Overflow Vulnerability 2024-11-20 2024-12-11 Unknown
CVE-2024-9474 Palo Alto Networks PAN-OS 6.9 Medium Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability 2024-11-18 2024-12-09 Known
CVE-2024-1212 Progress Kemp LoadMaster 9.8 Critical Progress Kemp LoadMaster OS Command Injection Vulnerability 2024-11-18 2024-12-09 Unknown
CVE-2024-0012 Palo Alto Networks PAN-OS 9.3 Critical Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability 2024-11-18 2024-12-09 Known
CVE-2024-9465 Palo Alto Networks Expedition 9.2 Critical Palo Alto Networks Expedition SQL Injection Vulnerability 2024-11-14 2024-12-05 Unknown
CVE-2024-9463 Palo Alto Networks Expedition 9.9 Critical Palo Alto Networks Expedition OS Command Injection Vulnerability 2024-11-14 2024-12-05 Unknown
CVE-2024-49039 Microsoft Windows 8.8 High Microsoft Windows Task Scheduler Privilege Escalation Vulnerability 2024-11-12 2024-12-03 Known
CVE-2024-43451 Microsoft Windows 6.5 Medium Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability 2024-11-12 2024-12-03 Unknown
CVE-2021-41277 Metabase Metabase 7.5 High Metabase GeoJSON API Local File Inclusion Vulnerability 2024-11-12 2024-12-03 Unknown
CVE-2021-26086 Atlassian Jira Server and Data Center 5.3 Medium Atlassian Jira Server and Data Center Path Traversal Vulnerability 2024-11-12 2024-12-03 Unknown
CVE-2014-2120 Cisco Adaptive Security Appliance (ASA) 6.1 Medium Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability 2024-11-12 2024-12-03 Unknown
CVE-2024-5910 Palo Alto Networks Expedition 9.3 Critical Palo Alto Networks Expedition Missing Authentication Vulnerability 2024-11-07 2024-11-28 Unknown
CVE-2024-51567 CyberPersons CyberPanel 9.8 Critical CyberPanel Incorrect Default Permissions Vulnerability 2024-11-07 2024-11-28 Known
CVE-2024-43093 Android Framework 7.3 High Android Framework Privilege Escalation Vulnerability 2024-11-07 2024-11-28 Unknown
CVE-2019-16278 Nostromo nhttpd 9.8 Critical Nostromo nhttpd Directory Traversal Vulnerability 2024-11-07 2024-11-28 Unknown
CVE-2024-8957 PTZOptics PT30X-SDI/NDI Cameras 7.2 High PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability 2024-11-04 2024-11-25 Unknown
CVE-2024-8956 PTZOptics PT30X-SDI/NDI Cameras 9.1 Critical PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability 2024-11-04 2024-11-25 Unknown
CVE-2024-37383 Roundcube Webmail 6.1 Medium RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability 2024-10-24 2024-11-14 Unknown
CVE-2024-20481 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) 5.8 Medium Cisco ASA and FTD Denial-of-Service Vulnerability 2024-10-24 2024-11-14 Unknown
CVE-2024-47575 Fortinet FortiManager 9.8 Critical Fortinet FortiManager Missing Authentication Vulnerability 2024-10-23 2024-11-13 Unknown
CVE-2024-38094 Microsoft SharePoint 7.2 High Microsoft SharePoint Deserialization Vulnerability 2024-10-22 2024-11-12 Known
CVE-2024-9537 ScienceLogic SL1 9.3 Critical ScienceLogic SL1 Unspecified Vulnerability 2024-10-21 2024-11-11 Unknown
CVE-2024-40711 Veeam Backup & Replication 9.8 Critical Veeam Backup and Replication Deserialization Vulnerability 2024-10-17 2024-11-07 Known
CVE-2024-9680 Mozilla Firefox 9.8 Critical Mozilla Firefox Use-After-Free Vulnerability 2024-10-15 2024-11-05 Known
CVE-2024-30088 Microsoft Windows 7.0 High Microsoft Windows Kernel TOCTOU Race Condition Vulnerability 2024-10-15 2024-11-05 Known
CVE-2024-28987 SolarWinds Web Help Desk 9.1 Critical SolarWinds Web Help Desk Hardcoded Credential Vulnerability 2024-10-15 2024-11-05 Unknown
CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) 7.2 High Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability 2024-10-09 2024-10-30 Unknown
CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) 7.2 High Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability 2024-10-09 2024-10-30 Unknown
CVE-2024-23113 Fortinet Multiple Products 9.8 Critical Fortinet Multiple Products Format String Vulnerability 2024-10-09 2024-10-30 Unknown
CVE-2024-43573 Microsoft Windows 8.1 High Microsoft Windows MSHTML Platform Spoofing Vulnerability 2024-10-08 2024-10-29 Unknown
CVE-2024-43572 Microsoft Windows 7.8 High Microsoft Windows Management Console Remote Code Execution Vulnerability 2024-10-08 2024-10-29 Unknown
CVE-2024-43047 Qualcomm Multiple Chipsets 7.8 High Qualcomm Multiple Chipsets Use-After-Free Vulnerability 2024-10-08 2024-10-29 Unknown
CVE-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) 9.8 Critical Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability 2024-10-03 2024-10-24 Unknown
CVE-2024-29824 Ivanti Endpoint Manager (EPM) 8.8 High Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability 2024-10-02 2024-10-23 Unknown
CVE-2023-25280 D-Link DIR-820 Router 9.8 Critical D-Link DIR-820 Router OS Command Injection Vulnerability 2024-09-30 2024-10-21 Unknown
CVE-2020-15415 DrayTek Multiple Vigor Routers 9.8 Critical DrayTek Multiple Vigor Routers OS Command Injection Vulnerability 2024-09-30 2024-10-21 Unknown
CVE-2019-0344 SAP Commerce Cloud 9.8 Critical SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability 2024-09-30 2024-10-21 Unknown
CVE-2024-7593 Ivanti Virtual Traffic Manager 9.8 Critical Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability 2024-09-24 2024-10-15 Unknown
CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) 9.1 Critical Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability 2024-09-19 2024-10-10 Unknown
CVE-2024-27348 Apache HugeGraph-Server 9.8 Critical Apache HugeGraph-Server Improper Access Control Vulnerability 2024-09-18 2024-10-09 Unknown
CVE-2022-21445 Oracle ADF Faces 9.8 Critical Oracle ADF Faces Deserialization of Untrusted Data Vulnerability 2024-09-18 2024-10-09 Unknown
CVE-2020-14644 Oracle WebLogic Server 9.8 Critical Oracle WebLogic Server Remote Code Execution Vulnerability 2024-09-18 2024-10-09 Unknown
CVE-2020-0618 Microsoft SQL Server 8.8 High Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability 2024-09-18 2024-10-09 Known
CVE-2014-0502 Adobe Flash Player 8.8 High Adobe Flash Player Double Free Vulnerablity 2024-09-17 2024-10-08 Unknown
CVE-2014-0497 Adobe Flash Player 9.8 Critical Adobe Flash Player Integer Underflow Vulnerablity 2024-09-17 2024-10-08 Unknown