Browse

CISA KEV catalog

Search and filter the complete official catalog.

Search CVE IDs and vulnerability names.
Filter the catalog Select one or more technologies to create a focused view.
Vendors
All vendors
Products
All products
1723 results
CVE Vendor Product CVSS Vulnerability Added Due Ransomware
CVE-2012-0518 Oracle Fusion Middleware 4.7 Medium Oracle Fusion Middleware Unspecified Vulnerability 2022-03-28 2022-04-18 Unknown
CVE-2011-2005 Microsoft Ancillary Function Driver (afd.sys) 7.8 High Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability 2022-03-28 2022-04-18 Unknown
CVE-2010-4398 Microsoft Windows 7.8 High Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability 2022-03-28 2022-04-21 Unknown
CVE-2022-26318 WatchGuard Firebox and XTM Appliances 9.8 Critical WatchGuard Firebox and XTM Appliances Arbitrary Code Execution 2022-03-25 2022-04-15 Unknown
CVE-2022-26143 Mitel MiCollab, MiVoice Business Express 9.8 Critical MiCollab, MiVoice Business Express Access Control Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2022-21999 Microsoft Windows 7.8 High Microsoft Windows Print Spooler Privilege Escalation Vulnerability 2022-03-25 2022-04-15 Known
CVE-2021-42237 Sitecore XP 9.8 Critical Sitecore XP Remote Command Execution Vulnerability 2022-03-25 2022-04-15 Known
CVE-2021-22941 Citrix ShareFile 9.8 Critical Citrix ShareFile Improper Access Control Vulnerability 2022-03-25 2022-04-15 Known
CVE-2020-9377 D-Link DIR-610 Devices 8.8 High D-Link DIR-610 Devices Remote Command Execution 2022-03-25 2022-04-15 Unknown
CVE-2020-9054 Zyxel Multiple Network-Attached Storage (NAS) Devices 9.8 Critical Zyxel Multiple NAS Devices OS Command Injection Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2020-7247 OpenBSD OpenSMTPD 9.8 Critical OpenSMTPD Remote Code Execution Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2020-5410 VMware Tanzu Spring Cloud Configuration (Config) Server 7.5 High VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2020-25223 Sophos SG UTM 9.8 Critical Sophos SG UTM Remote Code Execution Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2020-2506 QNAP Systems Helpdesk 9.8 Critical QNAP Helpdesk Improper Access Control Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2020-2021 Palo Alto Networks PAN-OS 10.0 Critical Palo Alto Networks PAN-OS Authentication Bypass Vulnerability 2022-03-25 2022-04-15 Known
CVE-2020-1956 Apache Kylin 8.8 High Apache Kylin OS Command Injection Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2020-1631 Juniper Junos OS 9.8 Critical Juniper Junos OS Path Traversal Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2019-6340 Drupal Core 8.1 High Drupal Core Remote Code Execution Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2019-2616 Oracle BI Publisher (Formerly XML Publisher) 7.2 High Oracle BI Publisher Unauthorized Access Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2019-16920 D-Link Multiple Routers 9.8 Critical D-Link Multiple Routers Command Injection Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2019-15107 Webmin Webmin 9.8 Critical Webmin Command Injection Vulnerability 2022-03-25 2022-04-15 Known
CVE-2019-12991 Citrix SD-WAN and NetScaler 8.8 High Citrix SD-WAN and NetScaler Command Injection Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2019-12989 Citrix SD-WAN and NetScaler 9.8 Critical Citrix SD-WAN and NetScaler SQL Injection Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2019-11043 PHP FastCGI Process Manager (FPM) 9.8 Critical PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability 2022-03-25 2022-04-15 Known
CVE-2019-10068 Kentico Xperience 9.8 Critical Kentico Xperience Deserialization of Untrusted Data Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2019-1003030 Jenkins Matrix Project Plugin 9.9 Critical Jenkins Matrix Project Plugin Remote Code Execution Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2019-0903 Microsoft Graphics Device Interface (GDI) 8.8 High Microsoft GDI Remote Code Execution Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2018-8414 Microsoft Windows 8.8 High Microsoft Windows Shell Remote Code Execution Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2018-8373 Microsoft Internet Explorer Scripting Engine 7.5 High Microsoft Scripting Engine Memory Corruption Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2018-6961 VMware SD-WAN Edge 8.1 High VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2018-14839 LG N1A1 NAS 9.8 Critical LG N1A1 NAS Remote Command Execution Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2018-1273 VMware Tanzu Spring Data Commons 9.8 Critical VMware Tanzu Spring Data Commons Property Binder Vulnerability 2022-03-25 2022-04-15 Known
CVE-2018-11138 Quest KACE System Management Appliance 9.8 Critical Quest KACE System Management Appliance Remote Command Execution Vulnerability 2022-03-25 2022-04-15 Known
CVE-2018-0147 Cisco Secure Access Control System (ACS) 9.8 Critical Cisco Secure Access Control System Java Deserialization Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2018-0125 Cisco VPN Routers 9.8 Critical Cisco VPN Routers Remote Code Execution Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2017-6334 NETGEAR DGN2200 Devices 8.8 High NETGEAR DGN2200 Devices OS Command Injection Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2017-6316 Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server 9.8 Critical Citrix Multiple Products Remote Code Execution Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2017-3881 Cisco IOS and IOS XE 9.8 Critical Cisco IOS and IOS XE Remote Code Execution Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2017-12617 Apache Tomcat 8.1 High Apache Tomcat Remote Code Execution Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2017-12615 Apache Tomcat 8.1 High Apache Tomcat on Windows Remote Code Execution Vulnerability 2022-03-25 2022-04-15 Known
CVE-2017-0146 Microsoft Windows 8.8 High Microsoft Windows SMB Remote Code Execution Vulnerability 2022-03-25 2022-04-15 Known
CVE-2016-7892 Adobe Flash Player 8.8 High Adobe Flash Player Use-After-Free Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2016-4171 Adobe Flash Player 9.8 Critical Adobe Flash Player Remote Code Execution Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2016-1555 NETGEAR Wireless Access Point (WAP) Devices 9.8 Critical NETGEAR Multiple WAP Devices Command Injection Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2016-11021 D-Link DCS-930L Devices 7.2 High D-Link DCS-930L Devices OS Command Injection Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2016-10174 NETGEAR WNR2000v5 Router 9.8 Critical NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2016-0752 Rails Ruby on Rails 7.5 High Ruby on Rails Directory Traversal Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2015-4068 Arcserve Unified Data Protection (UDP) 9.1 Critical Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2015-3035 TP-Link Multiple Archer Devices 7.5 High TP-Link Multiple Archer Devices Directory Traversal Vulnerability 2022-03-25 2022-04-15 Unknown
CVE-2015-1427 Elastic Elasticsearch 9.8 Critical Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability 2022-03-25 2022-04-15 Unknown