Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2012-0518 | Oracle | Fusion Middleware | 4.7 Medium | Oracle Fusion Middleware Unspecified Vulnerability | 2022-03-28 | 2022-04-18 | Unknown |
| CVE-2011-2005 | Microsoft | Ancillary Function Driver (afd.sys) | 7.8 High | Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability | 2022-03-28 | 2022-04-18 | Unknown |
| CVE-2010-4398 | Microsoft | Windows | 7.8 High | Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability | 2022-03-28 | 2022-04-21 | Unknown |
| CVE-2022-26318 | WatchGuard | Firebox and XTM Appliances | 9.8 Critical | WatchGuard Firebox and XTM Appliances Arbitrary Code Execution | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2022-26143 | Mitel | MiCollab, MiVoice Business Express | 9.8 Critical | MiCollab, MiVoice Business Express Access Control Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2022-21999 | Microsoft | Windows | 7.8 High | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2021-42237 | Sitecore | XP | 9.8 Critical | Sitecore XP Remote Command Execution Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2021-22941 | Citrix | ShareFile | 9.8 Critical | Citrix ShareFile Improper Access Control Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2020-9377 | D-Link | DIR-610 Devices | 8.8 High | D-Link DIR-610 Devices Remote Command Execution | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2020-9054 | Zyxel | Multiple Network-Attached Storage (NAS) Devices | 9.8 Critical | Zyxel Multiple NAS Devices OS Command Injection Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2020-7247 | OpenBSD | OpenSMTPD | 9.8 Critical | OpenSMTPD Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2020-5410 | VMware Tanzu | Spring Cloud Configuration (Config) Server | 7.5 High | VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2020-25223 | Sophos | SG UTM | 9.8 Critical | Sophos SG UTM Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2020-2506 | QNAP Systems | Helpdesk | 9.8 Critical | QNAP Helpdesk Improper Access Control Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2020-2021 | Palo Alto Networks | PAN-OS | 10.0 Critical | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2020-1956 | Apache | Kylin | 8.8 High | Apache Kylin OS Command Injection Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2020-1631 | Juniper | Junos OS | 9.8 Critical | Juniper Junos OS Path Traversal Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2019-6340 | Drupal | Core | 8.1 High | Drupal Core Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2019-2616 | Oracle | BI Publisher (Formerly XML Publisher) | 7.2 High | Oracle BI Publisher Unauthorized Access Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2019-16920 | D-Link | Multiple Routers | 9.8 Critical | D-Link Multiple Routers Command Injection Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2019-15107 | Webmin | Webmin | 9.8 Critical | Webmin Command Injection Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2019-12991 | Citrix | SD-WAN and NetScaler | 8.8 High | Citrix SD-WAN and NetScaler Command Injection Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2019-12989 | Citrix | SD-WAN and NetScaler | 9.8 Critical | Citrix SD-WAN and NetScaler SQL Injection Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2019-11043 | PHP | FastCGI Process Manager (FPM) | 9.8 Critical | PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2019-10068 | Kentico | Xperience | 9.8 Critical | Kentico Xperience Deserialization of Untrusted Data Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2019-1003030 | Jenkins | Matrix Project Plugin | 9.9 Critical | Jenkins Matrix Project Plugin Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2019-0903 | Microsoft | Graphics Device Interface (GDI) | 8.8 High | Microsoft GDI Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2018-8414 | Microsoft | Windows | 8.8 High | Microsoft Windows Shell Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2018-8373 | Microsoft | Internet Explorer Scripting Engine | 7.5 High | Microsoft Scripting Engine Memory Corruption Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2018-6961 | VMware | SD-WAN Edge | 8.1 High | VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2018-14839 | LG | N1A1 NAS | 9.8 Critical | LG N1A1 NAS Remote Command Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2018-1273 | VMware Tanzu | Spring Data Commons | 9.8 Critical | VMware Tanzu Spring Data Commons Property Binder Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2018-11138 | Quest | KACE System Management Appliance | 9.8 Critical | Quest KACE System Management Appliance Remote Command Execution Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2018-0147 | Cisco | Secure Access Control System (ACS) | 9.8 Critical | Cisco Secure Access Control System Java Deserialization Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2018-0125 | Cisco | VPN Routers | 9.8 Critical | Cisco VPN Routers Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2017-6334 | NETGEAR | DGN2200 Devices | 8.8 High | NETGEAR DGN2200 Devices OS Command Injection Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2017-6316 | Citrix | NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | 9.8 Critical | Citrix Multiple Products Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2017-3881 | Cisco | IOS and IOS XE | 9.8 Critical | Cisco IOS and IOS XE Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2017-12617 | Apache | Tomcat | 8.1 High | Apache Tomcat Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2017-12615 | Apache | Tomcat | 8.1 High | Apache Tomcat on Windows Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2017-0146 | Microsoft | Windows | 8.8 High | Microsoft Windows SMB Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Known |
| CVE-2016-7892 | Adobe | Flash Player | 8.8 High | Adobe Flash Player Use-After-Free Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2016-4171 | Adobe | Flash Player | 9.8 Critical | Adobe Flash Player Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2016-1555 | NETGEAR | Wireless Access Point (WAP) Devices | 9.8 Critical | NETGEAR Multiple WAP Devices Command Injection Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2016-11021 | D-Link | DCS-930L Devices | 7.2 High | D-Link DCS-930L Devices OS Command Injection Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2016-10174 | NETGEAR | WNR2000v5 Router | 9.8 Critical | NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2016-0752 | Rails | Ruby on Rails | 7.5 High | Ruby on Rails Directory Traversal Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2015-4068 | Arcserve | Unified Data Protection (UDP) | 9.1 Critical | Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2015-3035 | TP-Link | Multiple Archer Devices | 7.5 High | TP-Link Multiple Archer Devices Directory Traversal Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |
| CVE-2015-1427 | Elastic | Elasticsearch | 9.8 Critical | Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability | 2022-03-25 | 2022-04-15 | Unknown |