Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2023-46747 | F5 | BIG-IP Configuration Utility | 9.8 Critical | F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability | 2023-10-31 | 2023-11-21 | Known |
| CVE-2023-5631 | Roundcube | Webmail | 5.4 Medium | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | 2023-10-26 | 2023-11-16 | Unknown |
| CVE-2023-20273 | Cisco | Cisco IOS XE Web UI | 7.2 High | Cisco IOS XE Web UI Command Injection Vulnerability | 2023-10-23 | 2023-10-27 | Unknown |
| CVE-2023-4966 | Citrix | NetScaler ADC and NetScaler Gateway | 7.5 High | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 2023-10-18 | 2023-11-08 | Known |
| CVE-2023-20198 | Cisco | IOS XE Web UI | 10.0 Critical | Cisco IOS XE Web UI Privilege Escalation Vulnerability | 2023-10-16 | 2023-10-20 | Unknown |
| CVE-2023-44487 | IETF | HTTP/2 | 7.5 High | HTTP/2 Rapid Reset Attack Vulnerability | 2023-10-10 | 2023-10-31 | Unknown |
| CVE-2023-41763 | Microsoft | Skype for Business | 5.3 Medium | Microsoft Skype for Business Privilege Escalation Vulnerability | 2023-10-10 | 2023-10-31 | Unknown |
| CVE-2023-36563 | Microsoft | WordPad | 5.5 Medium | Microsoft WordPad Information Disclosure Vulnerability | 2023-10-10 | 2023-10-31 | Unknown |
| CVE-2023-21608 | Adobe | Acrobat and Reader | 7.8 High | Adobe Acrobat and Reader Use-After-Free Vulnerability | 2023-10-10 | 2023-10-31 | Unknown |
| CVE-2023-20109 | Cisco | IOS and IOS XE | 6.6 Medium | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | 2023-10-10 | 2023-10-31 | Unknown |
| CVE-2023-42824 | Apple | iOS and iPadOS | 7.8 High | Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability | 2023-10-05 | 2023-10-26 | Unknown |
| CVE-2023-40044 | Progress | WS_FTP Server | 8.8 High | Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability | 2023-10-05 | 2023-10-26 | Known |
| CVE-2023-22515 | Atlassian | Confluence Data Center and Server | 9.8 Critical | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability | 2023-10-05 | 2023-10-13 | Known |
| CVE-2023-42793 | JetBrains | TeamCity | 9.8 Critical | JetBrains TeamCity Authentication Bypass Vulnerability | 2023-10-04 | 2023-10-25 | Known |
| CVE-2023-28229 | Microsoft | Windows CNG Key Isolation Service | 7.0 High | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 2023-10-04 | 2023-10-25 | Unknown |
| CVE-2023-4211 | Arm | Mali GPU Kernel Driver | 5.5 Medium | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 2023-10-03 | 2023-10-24 | Unknown |
| CVE-2023-5217 | Chromium libvpx | 8.8 High | Google Chromium libvpx Heap Buffer Overflow Vulnerability | 2023-10-02 | 2023-10-23 | Unknown | |
| CVE-2018-14667 | Red Hat | JBoss RichFaces Framework | 9.8 Critical | Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability | 2023-09-28 | 2023-10-19 | Unknown |
| CVE-2023-41993 | Apple | Multiple Products | 8.8 High | Apple Multiple Products WebKit Code Execution Vulnerability | 2023-09-25 | 2023-10-16 | Unknown |
| CVE-2023-41992 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Kernel Privilege Escalation Vulnerability | 2023-09-25 | 2023-10-16 | Unknown |
| CVE-2023-41991 | Apple | Multiple Products | 5.5 Medium | Apple Multiple Products Improper Certificate Validation Vulnerability | 2023-09-25 | 2023-10-16 | Unknown |
| CVE-2023-41179 | Trend Micro | Apex One and Worry-Free Business Security | 7.2 High | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability | 2023-09-21 | 2023-10-12 | Unknown |
| CVE-2023-28434 | MinIO | MinIO | 8.8 High | MinIO Security Feature Bypass Vulnerability | 2023-09-19 | 2023-10-10 | Unknown |
| CVE-2022-22265 | Samsung | Mobile Devices | 7.8 High | Samsung Mobile Devices Use-After-Free Vulnerability | 2023-09-18 | 2023-10-09 | Unknown |
| CVE-2021-3129 | Laravel | Ignition | 9.8 Critical | Laravel Ignition File Upload Vulnerability | 2023-09-18 | 2023-10-09 | Known |
| CVE-2017-6884 | Zyxel | EMG2926 Routers | 8.8 High | Zyxel EMG2926 Routers Command Injection Vulnerability | 2023-09-18 | 2023-10-09 | Known |
| CVE-2014-8361 | Realtek | SDK | 9.8 Critical | Realtek SDK Improper Input Validation Vulnerability | 2023-09-18 | 2023-10-09 | Unknown |
| CVE-2023-26369 | Adobe | Acrobat and Reader | 7.8 High | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | 2023-09-14 | 2023-10-05 | Unknown |
| CVE-2023-4863 | Chromium WebP | 8.8 High | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | 2023-09-13 | 2023-10-04 | Unknown | |
| CVE-2023-35674 | Android | Framework | 7.8 High | Android Framework Privilege Escalation Vulnerability | 2023-09-13 | 2023-10-04 | Unknown |
| CVE-2023-20269 | Cisco | Adaptive Security Appliance and Firepower Threat Defense | 9.1 Critical | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability | 2023-09-13 | 2023-10-04 | Known |
| CVE-2023-36802 | Microsoft | Streaming Service Proxy | 7.8 High | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | 2023-09-12 | 2023-10-03 | Unknown |
| CVE-2023-36761 | Microsoft | Word | 6.5 Medium | Microsoft Word Information Disclosure Vulnerability | 2023-09-12 | 2023-10-03 | Unknown |
| CVE-2023-41064 | Apple | iOS, iPadOS, and macOS | 7.8 High | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability | 2023-09-11 | 2023-10-02 | Unknown |
| CVE-2023-41061 | Apple | iOS, iPadOS, and watchOS | 7.8 High | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability | 2023-09-11 | 2023-10-02 | Unknown |
| CVE-2023-33246 | Apache | RocketMQ | 9.8 Critical | Apache RocketMQ Command Execution Vulnerability | 2023-09-06 | 2023-09-27 | Unknown |
| CVE-2023-38831 | RARLAB | WinRAR | 7.8 High | RARLAB WinRAR Code Execution Vulnerability | 2023-08-24 | 2023-09-14 | Known |
| CVE-2023-32315 | Ignite Realtime | Openfire | 7.5 High | Ignite Realtime Openfire Path Traversal Vulnerability | 2023-08-24 | 2023-09-14 | Unknown |
| CVE-2023-38035 | Ivanti | Sentry | 9.8 Critical | Ivanti Sentry Authentication Bypass Vulnerability | 2023-08-22 | 2023-09-12 | Known |
| CVE-2023-27532 | Veeam | Backup & Replication | 7.5 High | Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability | 2023-08-22 | 2023-09-12 | Known |
| CVE-2023-26359 | Adobe | ColdFusion | 9.8 Critical | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 2023-08-21 | 2023-09-11 | Unknown |
| CVE-2023-24489 | Citrix | Content Collaboration | 9.8 Critical | Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | 2023-08-16 | 2023-09-06 | Unknown |
| CVE-2023-38180 | Microsoft | .NET Core and Visual Studio | 7.5 High | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability | 2023-08-09 | 2023-08-30 | Unknown |
| CVE-2017-18368 | Zyxel | P660HN-T1A Routers | 9.8 Critical | Zyxel P660HN-T1A Routers Command Injection Vulnerability | 2023-08-07 | 2023-08-28 | Unknown |
| CVE-2023-35081 | Ivanti | Endpoint Manager Mobile (EPMM) | 7.2 High | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | 2023-07-31 | 2023-08-21 | Unknown |
| CVE-2023-37580 | Synacor | Zimbra Collaboration Suite (ZCS) | 6.1 Medium | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 2023-07-27 | 2023-08-17 | Unknown |
| CVE-2023-38606 | Apple | Multiple Products | 5.5 Medium | Apple Multiple Products Kernel Unspecified Vulnerability | 2023-07-26 | 2023-08-16 | Unknown |
| CVE-2023-35078 | Ivanti | Endpoint Manager Mobile (EPMM) | 9.8 Critical | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | 2023-07-25 | 2023-08-15 | Known |
| CVE-2023-38205 | Adobe | ColdFusion | 7.5 High | Adobe ColdFusion Improper Access Control Vulnerability | 2023-07-20 | 2023-08-10 | Unknown |
| CVE-2023-29298 | Adobe | ColdFusion | 7.5 High | Adobe ColdFusion Improper Access Control Vulnerability | 2023-07-20 | 2023-08-10 | Unknown |