Browse

CISA KEV catalog

Search and filter the complete official catalog.

Search CVE IDs and vulnerability names.
Filter the catalog Select one or more technologies to create a focused view.
Vendors
All vendors
Products
All products
1723 results
CVE Vendor Product CVSS Vulnerability Added Due Ransomware
CVE-2024-4358 Progress Telerik Report Server 9.8 Critical Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability 2024-06-13 2024-07-04 Unknown
CVE-2024-32896 Android Pixel 7.8 High Android Pixel Privilege Escalation Vulnerability 2024-06-13 2024-07-04 Unknown
CVE-2024-26169 Microsoft Windows 7.8 High Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability 2024-06-13 2024-07-04 Known
CVE-2024-4610 Arm Mali GPU Kernel Driver 7.8 High Arm Mali GPU Kernel Driver Use-After-Free Vulnerability 2024-06-12 2024-07-03 Unknown
CVE-2024-4577 PHP Group PHP 9.8 Critical PHP-CGI OS Command Injection Vulnerability 2024-06-12 2024-07-03 Known
CVE-2017-3506 Oracle WebLogic Server 7.4 High Oracle WebLogic Server OS Command Injection Vulnerability 2024-06-03 2024-06-24 Unknown
CVE-2024-24919 Check Point Quantum Security Gateways 8.6 High Check Point Quantum Security Gateways Information Disclosure Vulnerability 2024-05-30 2024-06-20 Known
CVE-2024-1086 Linux Kernel 7.8 High Linux Kernel Use-After-Free Vulnerability 2024-05-30 2024-06-20 Known
CVE-2024-4978 Justice AV Solutions Viewer 8.7 High Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability 2024-05-29 2024-06-19 Unknown
CVE-2024-5274 Google Chromium V8 9.6 Critical Google Chromium V8 Type Confusion Vulnerability 2024-05-28 2024-06-18 Unknown
CVE-2020-17519 Apache Flink 7.5 High Apache Flink Improper Access Control Vulnerability 2024-05-23 2024-06-13 Unknown
CVE-2024-4947 Google Chromium V8 9.6 Critical Google Chromium V8 Type Confusion Vulnerability 2024-05-20 2024-06-10 Unknown
CVE-2023-43208 NextGen Healthcare Mirth Connect 9.8 Critical NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability 2024-05-20 2024-06-10 Known
CVE-2024-4761 Google Chromium V8 8.8 High Google Chromium V8 Out-of-Bounds Memory Write Vulnerability 2024-05-16 2024-06-06 Unknown
CVE-2021-40655 D-Link DIR-605 Router 7.5 High D-Link DIR-605 Router Information Disclosure Vulnerability 2024-05-16 2024-06-06 Unknown
CVE-2014-100005 D-Link DIR-600 Router 8.0 High D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability 2024-05-16 2024-06-06 Unknown
CVE-2024-30051 Microsoft DWM Core Library 7.8 High Microsoft DWM Core Library Privilege Escalation Vulnerability 2024-05-14 2024-06-04 Known
CVE-2024-30040 Microsoft Windows 8.8 High Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability 2024-05-14 2024-06-04 Unknown
CVE-2024-4671 Google Chromium 9.6 Critical Google Chromium Visuals Use-After-Free Vulnerability 2024-05-13 2024-06-03 Unknown
CVE-2023-7028 GitLab GitLab CE/EE 9.8 Critical GitLab Community and Enterprise Editions Improper Access Control Vulnerability 2024-05-01 2024-05-22 Unknown
CVE-2024-29988 Microsoft SmartScreen Prompt 8.8 High Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability 2024-04-30 2024-05-21 Unknown
CVE-2024-4040 CrushFTP CrushFTP 10.0 Critical CrushFTP VFS Sandbox Escape Vulnerability 2024-04-24 2024-05-01 Unknown
CVE-2024-20359 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) 6.0 Medium Cisco ASA and FTD Privilege Escalation Vulnerability 2024-04-24 2024-05-01 Unknown
CVE-2024-20353 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) 8.6 High Cisco ASA and FTD Denial of Service Vulnerability 2024-04-24 2024-05-01 Unknown
CVE-2022-38028 Microsoft Windows 7.8 High Microsoft Windows Print Spooler Privilege Escalation Vulnerability 2024-04-23 2024-05-14 Unknown
CVE-2024-3400 Palo Alto Networks PAN-OS 10.0 Critical Palo Alto Networks PAN-OS Command Injection Vulnerability 2024-04-12 2024-04-19 Known
CVE-2024-3273 D-Link Multiple NAS Devices 9.8 Critical D-Link Multiple NAS Devices Command Injection Vulnerability 2024-04-11 2024-05-02 Unknown
CVE-2024-3272 D-Link Multiple NAS Devices 9.8 Critical D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability 2024-04-11 2024-05-02 Unknown
CVE-2024-29748 Android Pixel 7.8 High Android Pixel Privilege Escalation Vulnerability 2024-04-04 2024-04-25 Unknown
CVE-2024-29745 Android Pixel 5.5 Medium Android Pixel Information Disclosure Vulnerability 2024-04-04 2024-04-25 Unknown
CVE-2023-24955 Microsoft SharePoint Server 7.2 High Microsoft SharePoint Server Code Injection Vulnerability 2024-03-26 2024-04-16 Known
CVE-2023-48788 Fortinet FortiClient EMS 9.8 Critical Fortinet FortiClient EMS SQL Injection Vulnerability 2024-03-25 2024-04-15 Known
CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) 9.8 Critical Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability 2024-03-25 2024-04-15 Known
CVE-2019-7256 Nice Linear eMerge E3-Series 9.8 Critical Nice Linear eMerge E3-Series OS Command Injection Vulnerability 2024-03-25 2024-04-15 Unknown
CVE-2024-27198 JetBrains TeamCity 9.8 Critical JetBrains TeamCity Authentication Bypass Vulnerability 2024-03-07 2024-03-28 Known
CVE-2024-23296 Apple Multiple Products 7.8 High Apple Multiple Products Memory Corruption Vulnerability 2024-03-06 2024-03-27 Unknown
CVE-2024-23225 Apple Multiple Products 7.8 High Apple Multiple Products Memory Corruption Vulnerability 2024-03-06 2024-03-27 Unknown
CVE-2023-21237 Android Pixel 5.5 Medium Android Pixel Information Disclosure Vulnerability 2024-03-05 2024-03-26 Unknown
CVE-2021-36380 Sunhillo SureLine 9.8 Critical Sunhillo SureLine OS Command Injection Vulnerablity 2024-03-05 2024-03-26 Unknown
CVE-2024-21338 Microsoft Windows 7.8 High Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability 2024-03-04 2024-03-25 Known
CVE-2023-29360 Microsoft Streaming Service 8.4 High Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability 2024-02-29 2024-03-21 Unknown
CVE-2024-1709 ConnectWise ScreenConnect 10.0 Critical ConnectWise ScreenConnect Authentication Bypass Vulnerability 2024-02-22 2024-02-29 Known
CVE-2024-21410 Microsoft Exchange Server 9.8 Critical Microsoft Exchange Server Privilege Escalation Vulnerability 2024-02-15 2024-03-07 Unknown
CVE-2020-3259 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) 7.5 High Cisco ASA and FTD Information Disclosure Vulnerability 2024-02-15 2024-03-07 Known
CVE-2024-21412 Microsoft Windows 8.1 High Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability 2024-02-13 2024-03-05 Known
CVE-2024-21351 Microsoft Windows 7.6 High Microsoft Windows SmartScreen Security Feature Bypass Vulnerability 2024-02-13 2024-03-05 Unknown
CVE-2023-43770 Roundcube Webmail 6.1 Medium Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability 2024-02-12 2024-03-04 Unknown
CVE-2024-21762 Fortinet FortiOS 9.8 Critical Fortinet FortiOS Out-of-Bound Write Vulnerability 2024-02-09 2024-02-16 Known
CVE-2023-4762 Google Chromium V8 8.8 High Google Chromium V8 Type Confusion Vulnerability 2024-02-06 2024-02-27 Unknown
CVE-2024-21893 Ivanti Connect Secure, Policy Secure, and Neurons 8.2 High Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability 2024-01-31 2024-02-02 Known