Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2022-48618 | Apple | Multiple Products | 7.0 High | Apple Multiple Products Memory Corruption Vulnerability | 2024-01-31 | 2024-02-21 | Unknown |
| CVE-2023-22527 | Atlassian | Confluence Data Center and Server | 9.8 Critical | Atlassian Confluence Data Center and Server Template Injection Vulnerability | 2024-01-24 | 2024-02-14 | Known |
| CVE-2024-23222 | Apple | Multiple Products | 8.8 High | Apple Multiple Products WebKit Type Confusion Vulnerability | 2024-01-23 | 2024-02-13 | Unknown |
| CVE-2023-34048 | VMware | vCenter Server | 9.8 Critical | VMware vCenter Server Out-of-Bounds Write Vulnerability | 2024-01-22 | 2024-02-12 | Unknown |
| CVE-2023-35082 | Ivanti | Endpoint Manager Mobile (EPMM) and MobileIron Core | 9.8 Critical | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability | 2024-01-18 | 2024-02-08 | Known |
| CVE-2024-0519 | Chromium V8 | 8.8 High | Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | 2024-01-17 | 2024-02-07 | Unknown | |
| CVE-2023-6549 | Citrix | NetScaler ADC and NetScaler Gateway | 7.5 High | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 2024-01-17 | 2024-02-07 | Unknown |
| CVE-2023-6548 | Citrix | NetScaler ADC and NetScaler Gateway | 8.8 High | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 2024-01-17 | 2024-01-24 | Unknown |
| CVE-2018-15133 | Laravel | Laravel Framework | 8.1 High | Laravel Deserialization of Untrusted Data Vulnerability | 2024-01-16 | 2024-02-06 | Unknown |
| CVE-2024-21887 | Ivanti | Connect Secure and Policy Secure | 9.1 Critical | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | 2024-01-10 | 2024-01-22 | Known |
| CVE-2023-46805 | Ivanti | Connect Secure and Policy Secure | 8.2 High | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability | 2024-01-10 | 2024-01-22 | Known |
| CVE-2023-29357 | Microsoft | SharePoint Server | 9.8 Critical | Microsoft SharePoint Server Privilege Escalation Vulnerability | 2024-01-10 | 2024-01-31 | Known |
| CVE-2023-41990 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Code Execution Vulnerability | 2024-01-08 | 2024-01-29 | Unknown |
| CVE-2023-38203 | Adobe | ColdFusion | 9.8 Critical | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 2024-01-08 | 2024-01-29 | Known |
| CVE-2023-29300 | Adobe | ColdFusion | 9.8 Critical | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 2024-01-08 | 2024-01-29 | Known |
| CVE-2023-27524 | Apache | Superset | 9.8 Critical | Apache Superset Insecure Default Initialization of Resource Vulnerability | 2024-01-08 | 2024-01-29 | Unknown |
| CVE-2023-23752 | Joomla! | Joomla! | 5.3 Medium | Joomla! Improper Access Control Vulnerability | 2024-01-08 | 2024-01-29 | Unknown |
| CVE-2016-20017 | D-Link | DSL-2750B Devices | 9.8 Critical | D-Link DSL-2750B Devices Command Injection Vulnerability | 2024-01-08 | 2024-01-29 | Unknown |
| CVE-2023-7101 | Spreadsheet::ParseExcel | Spreadsheet::ParseExcel | 7.8 High | Spreadsheet::ParseExcel Remote Code Execution Vulnerability | 2024-01-02 | 2024-01-23 | Unknown |
| CVE-2023-7024 | Chromium WebRTC | 8.8 High | Google Chromium WebRTC Heap Buffer Overflow Vulnerability | 2024-01-02 | 2024-01-23 | Unknown | |
| CVE-2023-49897 | FXC | AE1021, AE1021PE | 8.8 High | FXC AE1021, AE1021PE OS Command Injection Vulnerability | 2023-12-21 | 2024-01-11 | Unknown |
| CVE-2023-47565 | QNAP | VioStor NVR | 8.8 High | QNAP VioStor NVR OS Command Injection Vulnerability | 2023-12-21 | 2024-01-11 | Unknown |
| CVE-2023-6448 | Unitronics | Vision PLC and HMI | 9.8 Critical | Unitronics Vision PLC and HMI Insecure Default Password Vulnerability | 2023-12-11 | 2023-12-18 | Unknown |
| CVE-2023-41266 | Qlik | Sense | 6.5 Medium | Qlik Sense Path Traversal Vulnerability | 2023-12-07 | 2023-12-28 | Known |
| CVE-2023-41265 | Qlik | Sense | 9.9 Critical | Qlik Sense HTTP Tunneling Vulnerability | 2023-12-07 | 2023-12-28 | Known |
| CVE-2023-33107 | Qualcomm | Multiple Chipsets | 7.8 High | Qualcomm Multiple Chipsets Integer Overflow Vulnerability | 2023-12-05 | 2023-12-26 | Unknown |
| CVE-2023-33106 | Qualcomm | Multiple Chipsets | 7.8 High | Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability | 2023-12-05 | 2023-12-26 | Unknown |
| CVE-2023-33063 | Qualcomm | Multiple Chipsets | 7.8 High | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 2023-12-05 | 2023-12-26 | Unknown |
| CVE-2022-22071 | Qualcomm | Multiple Chipsets | 7.8 High | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 2023-12-05 | 2023-12-26 | Unknown |
| CVE-2023-42917 | Apple | Multiple Products | 8.8 High | Apple Multiple Products WebKit Memory Corruption Vulnerability | 2023-12-04 | 2023-12-25 | Unknown |
| CVE-2023-42916 | Apple | Multiple Products | 6.5 Medium | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 2023-12-04 | 2023-12-25 | Unknown |
| CVE-2023-6345 | Chromium Skia | 9.6 Critical | Google Skia Integer Overflow Vulnerability | 2023-11-30 | 2023-12-21 | Unknown | |
| CVE-2023-49103 | ownCloud | ownCloud graphapi | 7.5 High | ownCloud graphapi Information Disclosure Vulnerability | 2023-11-30 | 2023-12-21 | Unknown |
| CVE-2023-4911 | GNU | GNU C Library | 7.8 High | GNU C Library Buffer Overflow Vulnerability | 2023-11-21 | 2023-12-12 | Unknown |
| CVE-2023-36584 | Microsoft | Windows | 5.4 Medium | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 2023-11-16 | 2023-12-07 | Unknown |
| CVE-2023-1671 | Sophos | Web Appliance | 9.8 Critical | Sophos Web Appliance Command Injection Vulnerability | 2023-11-16 | 2023-12-07 | Unknown |
| CVE-2020-2551 | Oracle | Fusion Middleware | 9.8 Critical | Oracle Fusion Middleware Unspecified Vulnerability | 2023-11-16 | 2023-12-07 | Unknown |
| CVE-2023-36036 | Microsoft | Windows | 7.8 High | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | 2023-11-14 | 2023-12-05 | Unknown |
| CVE-2023-36033 | Microsoft | Windows | 7.8 High | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 2023-11-14 | 2023-12-05 | Unknown |
| CVE-2023-36025 | Microsoft | Windows | 8.8 High | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 2023-11-14 | 2023-12-05 | Unknown |
| CVE-2023-47246 | SysAid | SysAid Server | 9.8 Critical | SysAid Server Path Traversal Vulnerability | 2023-11-13 | 2023-12-04 | Known |
| CVE-2023-36851 | Juniper | Junos OS | 5.3 Medium | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 2023-11-13 | 2023-11-17 | Unknown |
| CVE-2023-36847 | Juniper | Junos OS | 5.3 Medium | Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability | 2023-11-13 | 2023-11-17 | Unknown |
| CVE-2023-36846 | Juniper | Junos OS | 5.3 Medium | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 2023-11-13 | 2023-11-17 | Unknown |
| CVE-2023-36845 | Juniper | Junos OS | 9.8 Critical | Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability | 2023-11-13 | 2023-11-17 | Unknown |
| CVE-2023-36844 | Juniper | Junos OS | 5.3 Medium | Juniper Junos OS EX Series PHP External Variable Modification Vulnerability | 2023-11-13 | 2023-11-17 | Unknown |
| CVE-2023-29552 | IETF | Service Location Protocol (SLP) | 7.5 High | Service Location Protocol (SLP) Denial-of-Service Vulnerability | 2023-11-08 | 2023-11-29 | Unknown |
| CVE-2023-22518 | Atlassian | Confluence Data Center and Server | 9.8 Critical | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | 2023-11-07 | 2023-11-28 | Known |
| CVE-2023-46604 | Apache | ActiveMQ | 9.8 Critical | Apache ActiveMQ Deserialization of Untrusted Data Vulnerability | 2023-11-02 | 2023-11-23 | Known |
| CVE-2023-46748 | F5 | BIG-IP Configuration Utility | 8.8 High | F5 BIG-IP Configuration Utility SQL Injection Vulnerability | 2023-10-31 | 2023-11-21 | Unknown |