Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2019-0859 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2019-0808 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2019-0803 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2019-0797 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2019-0708 | Microsoft | Remote Desktop Services | 9.8 Critical | Microsoft Remote Desktop Services Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2019-0604 | Microsoft | SharePoint | 9.8 Critical | Microsoft SharePoint Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2019-0541 | Microsoft | MSHTML | 8.8 High | Microsoft MSHTML Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2019-0211 | Apache | HTTP Server | 7.8 High | Apache HTTP Server Privilege Escalation Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2018-8653 | Microsoft | Internet Explorer | 7.5 High | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2018-7600 | Drupal | Drupal Core | 9.8 Critical | Drupal Core Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2018-6789 | Exim | Exim | 9.8 Critical | Exim Buffer Overflow Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2018-4939 | Adobe | ColdFusion | 9.8 Critical | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2018-4878 | Adobe | Flash Player | 7.8 High | Adobe Flash Player Use-After-Free Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2018-2380 | SAP | Customer Relationship Management (CRM) | 6.6 Medium | SAP Customer Relationship Management (CRM) Path Traversal Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2018-20062 | ThinkPHP | noneCms | 9.8 Critical | ThinkPHP "noneCms" Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2018-18325 | DotNetNuke (DNN) | DotNetNuke (DNN) | 7.5 High | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2018-15961 | Adobe | ColdFusion | 9.8 Critical | Adobe ColdFusion Unrestricted File Upload Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2018-15811 | DotNetNuke (DNN) | DotNetNuke (DNN) | 7.5 High | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2018-14558 | Tenda | AC7, AC9, and AC10 Routers | 9.8 Critical | Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2018-13379 | Fortinet | FortiOS | 9.8 Critical | Fortinet FortiOS SSL VPN Path Traversal Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2018-11776 | Apache | Struts | 8.1 High | Apache Struts Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2018-0802 | Microsoft | Office | 7.8 High | Microsoft Office Memory Corruption Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2018-0798 | Microsoft | Office | 8.8 High | Microsoft Office Memory Corruption Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2018-0296 | Cisco | Adaptive Security Appliance (ASA) | 7.5 High | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2018-0171 | Cisco | IOS and IOS XE | 9.8 Critical | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2017-9822 | DotNetNuke (DNN) | DotNetNuke (DNN) | 8.8 High | DotNetNuke (DNN) Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2017-9805 | Apache | Struts | 8.1 High | Apache Struts Deserialization of Untrusted Data Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2017-9248 | Progress | ASP.NET AJAX and Sitefinity | 9.8 Critical | Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2017-8759 | Microsoft | .NET Framework | 7.8 High | Microsoft .NET Framework Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2017-7269 | Microsoft | Internet Information Services (IIS) | 9.8 Critical | Microsoft Windows Server Buffer Overflow Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2017-6327 | Symantec | Symantec Messaging Gateway | 8.8 High | Symantec Messaging Gateway Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2017-5638 | Apache | Struts | 9.8 Critical | Apache Struts Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2017-16651 | Roundcube | Roundcube Webmail | 7.8 High | Roundcube Webmail File Disclosure Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2017-11882 | Microsoft | Office | 7.8 High | Microsoft Office Memory Corruption Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2017-11774 | Microsoft | Office | 7.8 High | Microsoft Office Outlook Security Feature Bypass Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2017-0199 | Microsoft | Office and WordPad | 7.8 High | Microsoft Office and WordPad Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2017-0143 | Microsoft | Windows | 8.8 High | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2016-9563 | SAP | NetWeaver | 6.5 Medium | SAP NetWeaver XML External Entity (XXE) Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2016-7255 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2016-4437 | Apache | Shiro | 9.8 Critical | Apache Shiro Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2016-3976 | SAP | NetWeaver | 7.5 High | SAP NetWeaver Directory Traversal Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2016-3718 | ImageMagick | ImageMagick | 5.5 Medium | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2016-3715 | ImageMagick | ImageMagick | 5.5 Medium | ImageMagick Arbitrary File Deletion Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2016-3643 | SolarWinds | Virtualization Manager | 7.8 High | SolarWinds Virtualization Manager Privilege Escalation Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2016-3235 | Microsoft | Office | 7.8 High | Microsoft Office OLE DLL Side Loading Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2016-0185 | Microsoft | Windows | 7.8 High | Microsoft Windows Media Center Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2016-0167 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2015-4852 | Oracle | WebLogic Server | 9.8 Critical | Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2015-1641 | Microsoft | Office | 7.8 High | Microsoft Office Memory Corruption Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2014-1812 | Microsoft | Windows | 8.8 High | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability | 2021-11-03 | 2022-05-03 | Known |