Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2019-15107 | Webmin | Webmin | 9.8 Critical | Webmin Command Injection Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2019-12991 | Citrix | SD-WAN and NetScaler | 8.8 High | Citrix SD-WAN and NetScaler Command Injection Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2019-12989 | Citrix | SD-WAN and NetScaler | 9.8 Critical | Citrix SD-WAN and NetScaler SQL Injection Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2019-11043 | PHP | FastCGI Process Manager (FPM) | 9.8 Critical | PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2019-10068 | Kentico | Xperience | 9.8 Critical | Kentico Xperience Deserialization of Untrusted Data Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2019-1003030 | Jenkins | Matrix Project Plugin | 9.9 Critical | Jenkins Matrix Project Plugin Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2019-0903 | Microsoft | Graphics Device Interface (GDI) | 8.8 High | Microsoft GDI Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2018-8414 | Microsoft | Windows | 8.8 High | Microsoft Windows Shell Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2018-8373 | Microsoft | Internet Explorer Scripting Engine | 7.5 High | Microsoft Scripting Engine Memory Corruption Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2018-6961 | VMware | SD-WAN Edge | 8.1 High | VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2018-14839 | LG | N1A1 NAS | 9.8 Critical | LG N1A1 NAS Remote Command Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2018-1273 | VMware Tanzu | Spring Data Commons | 9.8 Critical | VMware Tanzu Spring Data Commons Property Binder Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2018-11138 | Quest | KACE System Management Appliance | 9.8 Critical | Quest KACE System Management Appliance Remote Command Execution Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2018-0147 | Cisco | Secure Access Control System (ACS) | 9.8 Critical | Cisco Secure Access Control System Java Deserialization Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2018-0125 | Cisco | VPN Routers | 9.8 Critical | Cisco VPN Routers Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2017-6334 | NETGEAR | DGN2200 Devices | 8.8 High | NETGEAR DGN2200 Devices OS Command Injection Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2017-6316 | Citrix | NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | 9.8 Critical | Citrix Multiple Products Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2017-3881 | Cisco | IOS and IOS XE | 9.8 Critical | Cisco IOS and IOS XE Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2017-12617 | Apache | Tomcat | 8.1 High | Apache Tomcat Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2017-12615 | Apache | Tomcat | 8.1 High | Apache Tomcat on Windows Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2017-0146 | Microsoft | Windows | 8.8 High | Microsoft Windows SMB Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2016-7892 | Adobe | Flash Player | 8.8 High | Adobe Flash Player Use-After-Free Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2016-4171 | Adobe | Flash Player | 9.8 Critical | Adobe Flash Player Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2016-1555 | NETGEAR | Wireless Access Point (WAP) Devices | 9.8 Critical | NETGEAR Multiple WAP Devices Command Injection Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2016-11021 | D-Link | DCS-930L Devices | 7.2 High | D-Link DCS-930L Devices OS Command Injection Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2016-10174 | NETGEAR | WNR2000v5 Router | 9.8 Critical | NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2016-0752 | Rails | Ruby on Rails | 7.5 High | Ruby on Rails Directory Traversal Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2015-4068 | Arcserve | Unified Data Protection (UDP) | 9.1 Critical | Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2015-3035 | TP-Link | Multiple Archer Devices | 7.5 High | TP-Link Multiple Archer Devices Directory Traversal Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2015-1427 | Elastic | Elasticsearch | 9.8 Critical | Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2015-1187 | D-Link and TRENDnet | Multiple Devices | 9.8 Critical | D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2015-0666 | Cisco | Prime Data Center Network Manager (DCNM) | 7.5 High | Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2014-6332 | Microsoft | Windows | 8.8 High | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2014-6324 | Microsoft | Kerberos Key Distribution Center (KDC) | 8.8 High | Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2014-6287 | Rejetto | HTTP File Server (HFS) | 9.8 Critical | Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2014-3120 | Elastic | Elasticsearch | 8.1 High | Elasticsearch Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2014-0130 | Rails | Ruby on Rails | 7.5 High | Ruby on Rails Directory Traversal Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2013-5223 | D-Link | DSL-2760U | 5.4 Medium | D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2013-4810 | Hewlett Packard (HP) | ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management | 9.8 Critical | HP Multiple Products Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2013-2251 | Apache | Struts | 9.8 Critical | Apache Struts Improper Input Validation Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2012-1823 | PHP | PHP | 9.8 Critical | PHP-CGI Query String Parameter Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2010-4345 | Exim | Exim | 7.8 High | Exim Privilege Escalation Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2010-4344 | Exim | Exim | 9.8 Critical | Exim Heap-Based Buffer Overflow Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2010-3035 | Cisco | IOS XR | 7.5 High | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2010-2861 | Adobe | ColdFusion | 9.8 Critical | Adobe ColdFusion Directory Traversal Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2009-2055 | Cisco | IOS XR | 5.9 Medium | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2009-1151 | phpMyAdmin | phpMyAdmin | 9.8 Critical | phpMyAdmin Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2009-0927 | Adobe | Reader and Acrobat | 8.8 High | Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2005-2773 | Hewlett Packard (HP) | OpenView Network Node Manager | 9.8 Critical | HP OpenView Network Node Manager Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2020-5135 | SonicWall | SonicOS | 9.8 Critical | SonicWall SonicOS Buffer Overflow Vulnerability | 2022-03-15 | 2022-04-05 | Unknown |