Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2021-21224 | Chromium V8 | 8.8 High | Google Chromium V8 Type Confusion Vulnerability | 2021-11-03 | 2021-11-17 | Unknown | |
| CVE-2021-21220 | Chromium V8 | 8.8 High | Google Chromium V8 Improper Input Validation Vulnerability | 2021-11-03 | 2021-11-17 | Unknown | |
| CVE-2021-21206 | Chromium Blink | 8.8 High | Google Chromium Blink Use-After-Free Vulnerability | 2021-11-03 | 2021-11-17 | Unknown | |
| CVE-2021-21193 | Chromium Blink | 8.8 High | Google Chromium Blink Use-After-Free Vulnerability | 2021-11-03 | 2021-11-17 | Unknown | |
| CVE-2021-21166 | Chromium | 8.8 High | Google Chromium Race Condition Vulnerability | 2021-11-03 | 2021-11-17 | Unknown | |
| CVE-2021-21148 | Chromium V8 | 8.8 High | Google Chromium V8 Heap Buffer Overflow Vulnerability | 2021-11-03 | 2021-11-17 | Unknown | |
| CVE-2021-21017 | Adobe | Acrobat and Reader | 8.8 High | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-20090 | Arcadyan | Buffalo Firmware | 9.8 Critical | Arcadyan Buffalo Firmware Path Traversal Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-20023 | SonicWall | SonicWall Email Security | 4.9 Medium | SonicWall Email Security Path Traversal Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-20022 | SonicWall | SonicWall Email Security | 7.2 High | SonicWall Email Security Unrestricted Upload of File Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-20021 | SonicWall | SonicWall Email Security | 9.8 Critical | SonicWall Email Security Improper Privilege Management Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-20016 | SonicWall | SSLVPN SMA100 | 9.8 Critical | SonicWall SSLVPN SMA100 SQL Injection Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-1906 | Qualcomm | Multiple Chipsets | 5.5 Medium | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-1905 | Qualcomm | Multiple Chipsets | 7.8 High | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2021-1879 | Apple | iOS, iPadOS, and watchOS | 6.1 Medium | Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-1871 | Apple | iOS, iPadOS, and macOS | 9.8 Critical | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-1870 | Apple | iOS, iPadOS, and macOS | 9.8 Critical | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-1782 | Apple | Multiple Products | 7.0 High | Apple Multiple Products Race Condition Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-1732 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-1675 | Microsoft | Windows | 7.8 High | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-1647 | Microsoft | Defender | 7.8 High | Microsoft Defender Remote Code Execution Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-1498 | Cisco | HyperFlex HX | 9.8 Critical | Cisco HyperFlex HX Data Platform Command Injection Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-1497 | Cisco | HyperFlex HX | 9.8 Critical | Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2020-9859 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-9819 | Apple | iOS, iPadOS, and watchOS | 4.3 Medium | Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-9818 | Apple | iOS, iPadOS, and watchOS | 8.8 High | Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8657 | EyesOfNetwork | EyesOfNetwork | 9.8 Critical | EyesOfNetwork Use of Hard-Coded Credentials Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8655 | EyesOfNetwork | EyesOfNetwork | 7.8 High | EyesOfNetwork Improper Privilege Management Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8644 | PlaySMS | PlaySMS | 9.8 Critical | PlaySMS Server-Side Template Injection Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8599 | Trend Micro | Apex One and OfficeScan | 9.8 Critical | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8515 | DrayTek | Multiple Vigor Routers | 9.8 Critical | Multiple DrayTek Vigor Routers Web Management Page Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8468 | Trend Micro | Apex One, OfficeScan and Worry-Free Business Security Agents | 8.8 High | Trend Micro Multiple Products Content Validation Escape Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8467 | Trend Micro | Apex One and OfficeScan | 8.8 High | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8260 | Ivanti | Pulse Connect Secure | 7.2 High | Ivanti Pulse Connect Secure Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8243 | Ivanti | Pulse Connect Secure | 7.2 High | Ivanti Pulse Connect Secure Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8196 | Citrix | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 4.3 Medium | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8195 | Citrix | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 6.5 Medium | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8193 | Citrix | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 6.5 Medium | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-7961 | Liferay | Liferay Portal | 9.8 Critical | Liferay Portal Deserialization of Untrusted Data Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-6820 | Mozilla | Firefox and Thunderbird | 8.1 High | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-6819 | Mozilla | Firefox and Thunderbird | 8.1 High | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-6418 | Chromium V8 | 8.8 High | Google Chromium V8 Type Confusion Vulnerability | 2021-11-03 | 2022-05-03 | Unknown | |
| CVE-2020-6287 | SAP | NetWeaver | 10.0 Critical | SAP NetWeaver Missing Authentication for Critical Function Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-6207 | SAP | Solution Manager | 9.8 Critical | SAP Solution Manager Missing Authentication for Critical Function Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-5902 | F5 | BIG-IP | 9.8 Critical | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2020-5849 | Unraid | Unraid | 7.5 High | Unraid Authentication Bypass Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-5847 | Unraid | Unraid | 9.8 Critical | Unraid Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-5735 | Amcrest | Cameras and Network Video Recorder (NVR) | 8.8 High | Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-4430 | IBM | Data Risk Manager | 4.3 Medium | IBM Data Risk Manager Directory Traversal Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-4428 | IBM | Data Risk Manager | 9.1 Critical | IBM Data Risk Manager Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |