Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2023-49897 | FXC | AE1021, AE1021PE | 8.8 High | FXC AE1021, AE1021PE OS Command Injection Vulnerability | 2023-12-21 | 2024-01-11 | Unknown |
| CVE-2023-47565 | QNAP | VioStor NVR | 8.8 High | QNAP VioStor NVR OS Command Injection Vulnerability | 2023-12-21 | 2024-01-11 | Unknown |
| CVE-2023-6448 | Unitronics | Vision PLC and HMI | 9.8 Critical | Unitronics Vision PLC and HMI Insecure Default Password Vulnerability | 2023-12-11 | 2023-12-18 | Unknown |
| CVE-2023-41266 | Qlik | Sense | 6.5 Medium | Qlik Sense Path Traversal Vulnerability | 2023-12-07 | 2023-12-28 | Known |
| CVE-2023-41265 | Qlik | Sense | 9.9 Critical | Qlik Sense HTTP Tunneling Vulnerability | 2023-12-07 | 2023-12-28 | Known |
| CVE-2023-33107 | Qualcomm | Multiple Chipsets | 7.8 High | Qualcomm Multiple Chipsets Integer Overflow Vulnerability | 2023-12-05 | 2023-12-26 | Unknown |
| CVE-2023-33106 | Qualcomm | Multiple Chipsets | 7.8 High | Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability | 2023-12-05 | 2023-12-26 | Unknown |
| CVE-2023-33063 | Qualcomm | Multiple Chipsets | 7.8 High | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 2023-12-05 | 2023-12-26 | Unknown |
| CVE-2022-22071 | Qualcomm | Multiple Chipsets | 7.8 High | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 2023-12-05 | 2023-12-26 | Unknown |
| CVE-2023-42917 | Apple | Multiple Products | 8.8 High | Apple Multiple Products WebKit Memory Corruption Vulnerability | 2023-12-04 | 2023-12-25 | Unknown |
| CVE-2023-42916 | Apple | Multiple Products | 6.5 Medium | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 2023-12-04 | 2023-12-25 | Unknown |
| CVE-2023-6345 | Chromium Skia | 9.6 Critical | Google Skia Integer Overflow Vulnerability | 2023-11-30 | 2023-12-21 | Unknown | |
| CVE-2023-49103 | ownCloud | ownCloud graphapi | 7.5 High | ownCloud graphapi Information Disclosure Vulnerability | 2023-11-30 | 2023-12-21 | Unknown |
| CVE-2023-4911 | GNU | GNU C Library | 7.8 High | GNU C Library Buffer Overflow Vulnerability | 2023-11-21 | 2023-12-12 | Unknown |
| CVE-2023-36584 | Microsoft | Windows | 5.4 Medium | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 2023-11-16 | 2023-12-07 | Unknown |
| CVE-2023-1671 | Sophos | Web Appliance | 9.8 Critical | Sophos Web Appliance Command Injection Vulnerability | 2023-11-16 | 2023-12-07 | Unknown |
| CVE-2020-2551 | Oracle | Fusion Middleware | 9.8 Critical | Oracle Fusion Middleware Unspecified Vulnerability | 2023-11-16 | 2023-12-07 | Unknown |
| CVE-2023-36036 | Microsoft | Windows | 7.8 High | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | 2023-11-14 | 2023-12-05 | Unknown |
| CVE-2023-36033 | Microsoft | Windows | 7.8 High | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 2023-11-14 | 2023-12-05 | Unknown |
| CVE-2023-36025 | Microsoft | Windows | 8.8 High | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 2023-11-14 | 2023-12-05 | Unknown |
| CVE-2023-47246 | SysAid | SysAid Server | 9.8 Critical | SysAid Server Path Traversal Vulnerability | 2023-11-13 | 2023-12-04 | Known |
| CVE-2023-36851 | Juniper | Junos OS | 5.3 Medium | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 2023-11-13 | 2023-11-17 | Unknown |
| CVE-2023-36847 | Juniper | Junos OS | 5.3 Medium | Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability | 2023-11-13 | 2023-11-17 | Unknown |
| CVE-2023-36846 | Juniper | Junos OS | 5.3 Medium | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 2023-11-13 | 2023-11-17 | Unknown |
| CVE-2023-36845 | Juniper | Junos OS | 9.8 Critical | Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability | 2023-11-13 | 2023-11-17 | Unknown |
| CVE-2023-36844 | Juniper | Junos OS | 5.3 Medium | Juniper Junos OS EX Series PHP External Variable Modification Vulnerability | 2023-11-13 | 2023-11-17 | Unknown |
| CVE-2023-29552 | IETF | Service Location Protocol (SLP) | 7.5 High | Service Location Protocol (SLP) Denial-of-Service Vulnerability | 2023-11-08 | 2023-11-29 | Unknown |
| CVE-2023-22518 | Atlassian | Confluence Data Center and Server | 9.8 Critical | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | 2023-11-07 | 2023-11-28 | Known |
| CVE-2023-46604 | Apache | ActiveMQ | 9.8 Critical | Apache ActiveMQ Deserialization of Untrusted Data Vulnerability | 2023-11-02 | 2023-11-23 | Known |
| CVE-2023-46748 | F5 | BIG-IP Configuration Utility | 8.8 High | F5 BIG-IP Configuration Utility SQL Injection Vulnerability | 2023-10-31 | 2023-11-21 | Unknown |
| CVE-2023-46747 | F5 | BIG-IP Configuration Utility | 9.8 Critical | F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability | 2023-10-31 | 2023-11-21 | Known |
| CVE-2023-5631 | Roundcube | Webmail | 5.4 Medium | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | 2023-10-26 | 2023-11-16 | Unknown |
| CVE-2023-20273 | Cisco | Cisco IOS XE Web UI | 7.2 High | Cisco IOS XE Web UI Command Injection Vulnerability | 2023-10-23 | 2023-10-27 | Unknown |
| CVE-2023-4966 | Citrix | NetScaler ADC and NetScaler Gateway | 7.5 High | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 2023-10-18 | 2023-11-08 | Known |
| CVE-2023-20198 | Cisco | IOS XE Web UI | 10.0 Critical | Cisco IOS XE Web UI Privilege Escalation Vulnerability | 2023-10-16 | 2023-10-20 | Unknown |
| CVE-2023-44487 | IETF | HTTP/2 | 7.5 High | HTTP/2 Rapid Reset Attack Vulnerability | 2023-10-10 | 2023-10-31 | Unknown |
| CVE-2023-41763 | Microsoft | Skype for Business | 5.3 Medium | Microsoft Skype for Business Privilege Escalation Vulnerability | 2023-10-10 | 2023-10-31 | Unknown |
| CVE-2023-36563 | Microsoft | WordPad | 5.5 Medium | Microsoft WordPad Information Disclosure Vulnerability | 2023-10-10 | 2023-10-31 | Unknown |
| CVE-2023-21608 | Adobe | Acrobat and Reader | 7.8 High | Adobe Acrobat and Reader Use-After-Free Vulnerability | 2023-10-10 | 2023-10-31 | Unknown |
| CVE-2023-20109 | Cisco | IOS and IOS XE | 6.6 Medium | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | 2023-10-10 | 2023-10-31 | Unknown |
| CVE-2023-42824 | Apple | iOS and iPadOS | 7.8 High | Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability | 2023-10-05 | 2023-10-26 | Unknown |
| CVE-2023-40044 | Progress | WS_FTP Server | 8.8 High | Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability | 2023-10-05 | 2023-10-26 | Known |
| CVE-2023-22515 | Atlassian | Confluence Data Center and Server | 9.8 Critical | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability | 2023-10-05 | 2023-10-13 | Known |
| CVE-2023-42793 | JetBrains | TeamCity | 9.8 Critical | JetBrains TeamCity Authentication Bypass Vulnerability | 2023-10-04 | 2023-10-25 | Known |
| CVE-2023-28229 | Microsoft | Windows CNG Key Isolation Service | 7.0 High | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 2023-10-04 | 2023-10-25 | Unknown |
| CVE-2023-4211 | Arm | Mali GPU Kernel Driver | 5.5 Medium | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 2023-10-03 | 2023-10-24 | Unknown |
| CVE-2023-5217 | Chromium libvpx | 8.8 High | Google Chromium libvpx Heap Buffer Overflow Vulnerability | 2023-10-02 | 2023-10-23 | Unknown | |
| CVE-2018-14667 | Red Hat | JBoss RichFaces Framework | 9.8 Critical | Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability | 2023-09-28 | 2023-10-19 | Unknown |
| CVE-2023-41993 | Apple | Multiple Products | 8.8 High | Apple Multiple Products WebKit Code Execution Vulnerability | 2023-09-25 | 2023-10-16 | Unknown |
| CVE-2023-41992 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Kernel Privilege Escalation Vulnerability | 2023-09-25 | 2023-10-16 | Unknown |