Browse

CISA KEV catalog

Search and filter the complete official catalog.

Search CVE IDs and vulnerability names.
Filter the catalog Select one or more technologies to create a focused view.
Vendors
All vendors
Products
All products
1723 results
CVE Vendor Product CVSS Vulnerability Added Due Ransomware
CVE-2013-0648 Adobe Flash Player 8.8 High Adobe Flash Player Code Execution Vulnerability 2024-09-17 2024-10-08 Unknown
CVE-2013-0643 Adobe Flash Player 8.8 High Adobe Flash Player Incorrect Default Permissions Vulnerability 2024-09-17 2024-10-08 Unknown
CVE-2024-6670 Progress WhatsUp Gold 9.8 Critical Progress WhatsUp Gold SQL Injection Vulnerability 2024-09-16 2024-10-07 Known
CVE-2024-43461 Microsoft Windows 8.8 High Microsoft Windows MSHTML Platform Spoofing Vulnerability 2024-09-16 2024-10-07 Unknown
CVE-2024-8190 Ivanti Cloud Services Appliance 7.2 High Ivanti Cloud Services Appliance OS Command Injection Vulnerability 2024-09-13 2024-10-04 Unknown
CVE-2024-38226 Microsoft Publisher 7.3 High Microsoft Publisher Protection Mechanism Failure Vulnerability 2024-09-10 2024-10-01 Unknown
CVE-2024-38217 Microsoft Windows 5.4 Medium Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability 2024-09-10 2024-10-01 Unknown
CVE-2024-38014 Microsoft Windows 7.8 High Microsoft Windows Installer Improper Privilege Management Vulnerability 2024-09-10 2024-10-01 Unknown
CVE-2024-40766 SonicWall SonicOS 9.8 Critical SonicWall SonicOS Improper Access Control Vulnerability 2024-09-09 2024-09-30 Known
CVE-2017-1000253 Linux Kernel 7.8 High Linux Kernel PIE Stack Buffer Corruption Vulnerability 2024-09-09 2024-09-30 Known
CVE-2016-3714 ImageMagick ImageMagick 8.4 High ImageMagick Improper Input Validation Vulnerability 2024-09-09 2024-09-30 Unknown
CVE-2024-7262 Kingsoft WPS Office 9.3 Critical Kingsoft WPS Office Path Traversal Vulnerability 2024-09-03 2024-09-24 Unknown
CVE-2021-20124 DrayTek VigorConnect 7.5 High Draytek VigorConnect Path Traversal Vulnerability 2024-09-03 2024-09-24 Unknown
CVE-2021-20123 DrayTek VigorConnect 7.5 High Draytek VigorConnect Path Traversal Vulnerability 2024-09-03 2024-09-24 Unknown
CVE-2024-7965 Google Chromium V8 8.8 High Google Chromium V8 Inappropriate Implementation Vulnerability 2024-08-28 2024-09-18 Unknown
CVE-2024-38856 Apache OFBiz 9.8 Critical Apache OFBiz Incorrect Authorization Vulnerability 2024-08-27 2024-09-17 Unknown
CVE-2024-7971 Google Chromium V8 9.6 Critical Google Chromium V8 Type Confusion Vulnerability 2024-08-26 2024-09-16 Unknown
CVE-2024-39717 Versa Director 7.2 High Versa Director Dangerous File Type Upload Vulnerability 2024-08-23 2024-09-13 Unknown
CVE-2022-0185 Linux Kernel 8.4 High Linux Kernel Heap-Based Buffer Overflow Vulnerability 2024-08-21 2024-09-11 Unknown
CVE-2021-33045 Dahua IP Camera Firmware 9.8 Critical Dahua IP Camera Authentication Bypass Vulnerability 2024-08-21 2024-09-11 Unknown
CVE-2021-33044 Dahua IP Camera Firmware 9.8 Critical Dahua IP Camera Authentication Bypass Vulnerability 2024-08-21 2024-09-11 Unknown
CVE-2021-31196 Microsoft Exchange Server 7.2 High Microsoft Exchange Server Information Disclosure Vulnerability 2024-08-21 2024-09-11 Unknown
CVE-2024-23897 Jenkins Jenkins Command Line Interface (CLI) 9.8 Critical Jenkins Command Line Interface (CLI) Path Traversal Vulnerability 2024-08-19 2024-09-09 Known
CVE-2024-28986 SolarWinds Web Help Desk 9.8 Critical SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability 2024-08-15 2024-09-05 Unknown
CVE-2024-38213 Microsoft Windows 6.5 Medium Microsoft Windows SmartScreen Security Feature Bypass Vulnerability 2024-08-13 2024-09-03 Unknown
CVE-2024-38193 Microsoft Windows 7.8 High Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability 2024-08-13 2024-09-03 Unknown
CVE-2024-38189 Microsoft Project 8.8 High Microsoft Project Remote Code Execution Vulnerability 2024-08-13 2024-09-03 Unknown
CVE-2024-38178 Microsoft Windows 7.5 High Microsoft Windows Scripting Engine Memory Corruption Vulnerability 2024-08-13 2024-09-03 Unknown
CVE-2024-38107 Microsoft Windows 7.8 High Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability 2024-08-13 2024-09-03 Unknown
CVE-2024-38106 Microsoft Windows 7.0 High Microsoft Windows Kernel Privilege Escalation Vulnerability 2024-08-13 2024-09-03 Unknown
CVE-2024-36971 Android Kernel 7.8 High Android Kernel Remote Code Execution Vulnerability 2024-08-07 2024-08-28 Unknown
CVE-2024-32113 Apache OFBiz 9.8 Critical Apache OFBiz Path Traversal Vulnerability 2024-08-07 2024-08-28 Unknown
CVE-2018-0824 Microsoft Windows 8.8 High Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability 2024-08-05 2024-08-26 Unknown
CVE-2024-37085 VMware ESXi 7.2 High VMware ESXi Authentication Bypass Vulnerability 2024-07-30 2024-08-20 Known
CVE-2024-5217 ServiceNow Utah, Vancouver, and Washington DC Now Platform 9.2 Critical ServiceNow Incomplete List of Disallowed Inputs Vulnerability 2024-07-29 2024-08-19 Unknown
CVE-2024-4879 ServiceNow Utah, Vancouver, and Washington DC Now Platform 9.3 Critical ServiceNow Improper Input Validation Vulnerability 2024-07-29 2024-08-19 Unknown
CVE-2023-45249 Acronis Cyber Infrastructure (ACI) 9.8 Critical Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability 2024-07-29 2024-08-19 Unknown
CVE-2024-39891 Twilio Authy 5.3 Medium Twilio Authy Information Disclosure Vulnerability 2024-07-23 2024-08-13 Unknown
CVE-2012-4792 Microsoft Internet Explorer 8.8 High Microsoft Internet Explorer Use-After-Free Vulnerability 2024-07-23 2024-08-13 Unknown
CVE-2024-34102 Adobe Commerce and Magento Open Source 9.8 Critical Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability 2024-07-17 2024-08-07 Unknown
CVE-2024-28995 SolarWinds Serv-U 7.5 High SolarWinds Serv-U Path Traversal Vulnerability 2024-07-17 2024-08-07 Unknown
CVE-2022-22948 VMware vCenter Server 6.5 Medium VMware vCenter Server Incorrect Default File Permissions Vulnerability 2024-07-17 2024-08-07 Unknown
CVE-2024-36401 OSGeo GeoServer 9.8 Critical OSGeo GeoServer GeoTools Eval Injection Vulnerability 2024-07-15 2024-08-05 Unknown
CVE-2024-38112 Microsoft Windows 7.5 High Microsoft Windows MSHTML Platform Spoofing Vulnerability 2024-07-09 2024-07-30 Unknown
CVE-2024-38080 Microsoft Windows 7.8 High Microsoft Windows Hyper-V Privilege Escalation Vulnerability 2024-07-09 2024-07-30 Unknown
CVE-2024-23692 Rejetto HTTP File Server 9.8 Critical Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability 2024-07-09 2024-07-30 Known
CVE-2024-20399 Cisco NX-OS 6.7 Medium Cisco NX-OS Command Injection Vulnerability 2024-07-02 2024-07-23 Unknown
CVE-2022-2586 Linux Kernel 7.8 High Linux Kernel Use-After-Free Vulnerability 2024-06-26 2024-07-17 Unknown
CVE-2022-24816 OSGeo JAI-EXT 10.0 Critical OSGeo GeoServer JAI-EXT Code Injection Vulnerability 2024-06-26 2024-07-17 Unknown
CVE-2020-13965 Roundcube Webmail 6.1 Medium Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability 2024-06-26 2024-07-17 Unknown