Browse

CISA KEV catalog

Search and filter the complete official catalog.

Search CVE IDs and vulnerability names.
Filter the catalog Select one or more technologies to create a focused view.
Vendors
All vendors
Products
All products
1653 results
CVE Vendor Product CVSS Vulnerability Added Due Ransomware
CVE-2025-41244 Broadcom VMware Aria Operations and VMware Tools 7.8 High Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability 2025-10-30 2025-11-20 Unknown
CVE-2025-24893 XWiki Platform 9.8 Critical XWiki Platform Eval Injection Vulnerability 2025-10-30 2025-11-20 Unknown
CVE-2025-6205 Dassault Systèmes DELMIA Apriso 9.1 Critical Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability 2025-10-28 2025-11-18 Unknown
CVE-2025-6204 Dassault Systèmes DELMIA Apriso 8.0 High Dassault Systèmes DELMIA Apriso Code Injection Vulnerability 2025-10-28 2025-11-18 Unknown
CVE-2025-59287 Microsoft Windows 9.8 Critical Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability 2025-10-24 2025-11-14 Unknown
CVE-2025-54236 Adobe Commerce and Magento 9.1 Critical Adobe Commerce and Magento Improper Input Validation Vulnerability 2025-10-24 2025-11-14 Unknown
CVE-2025-61932 Motex LANSCOPE Endpoint Manager 9.3 Critical Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability 2025-10-22 2025-11-12 Unknown
CVE-2025-61884 Oracle E-Business Suite 7.5 High Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability 2025-10-20 2025-11-10 Known
CVE-2025-33073 Microsoft Windows 8.8 High Microsoft Windows SMB Client Improper Access Control Vulnerability 2025-10-20 2025-11-10 Unknown
CVE-2025-2747 Kentico Xperience CMS 9.8 Critical Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability 2025-10-20 2025-11-10 Unknown
CVE-2025-2746 Kentico Xperience CMS 9.8 Critical Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability 2025-10-20 2025-11-10 Unknown
CVE-2022-48503 Apple Multiple Products 8.8 High Apple Multiple Products Unspecified Vulnerability 2025-10-20 2025-11-10 Unknown
CVE-2025-54253 Adobe Experience Manager (AEM) Forms 10.0 Critical Adobe Experience Manager Forms Code Execution Vulnerability 2025-10-15 2025-11-05 Unknown
CVE-2025-59230 Microsoft Windows 7.8 High Microsoft Windows Improper Access Control Vulnerability 2025-10-14 2025-11-04 Unknown
CVE-2025-47827 IGEL IGEL OS 4.6 Medium IGEL OS Use of a Key Past its Expiration Date Vulnerability 2025-10-14 2025-11-04 Unknown
CVE-2025-24990 Microsoft Windows 7.8 High Microsoft Windows Untrusted Pointer Dereference Vulnerability 2025-10-14 2025-11-04 Unknown
CVE-2016-7836 SKYSEA Client View 9.8 Critical SKYSEA Client View Improper Authentication Vulnerability 2025-10-14 2025-11-04 Unknown
CVE-2021-43798 Grafana Labs Grafana 7.5 High Grafana Path Traversal Vulnerability 2025-10-09 2025-10-30 Unknown
CVE-2025-27915 Synacor Zimbra Collaboration Suite (ZCS) 5.4 Medium Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability 2025-10-07 2025-10-28 Unknown
CVE-2025-61882 Oracle E-Business Suite 9.8 Critical Oracle E-Business Suite Unspecified Vulnerability 2025-10-06 2025-10-27 Known
CVE-2021-43226 Microsoft Windows 7.8 High Microsoft Windows Privilege Escalation Vulnerability 2025-10-06 2025-10-27 Unknown
CVE-2021-22555 Linux Kernel 7.8 High Linux Kernel Heap Out-of-Bounds Write Vulnerability 2025-10-06 2025-10-27 Unknown
CVE-2013-3918 Microsoft Windows 8.8 High Microsoft Windows Out-of-Bounds Write Vulnerability 2025-10-06 2025-10-27 Unknown
CVE-2011-3402 Microsoft Windows 8.8 High Microsoft Windows Remote Code Execution Vulnerability 2025-10-06 2025-10-27 Unknown
CVE-2010-3962 Microsoft Internet Explorer 8.1 High Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability 2025-10-06 2025-10-27 Unknown
CVE-2010-3765 Mozilla Multiple Products 9.8 Critical Mozilla Multiple Products Remote Code Execution Vulnerability 2025-10-06 2025-10-27 Unknown
CVE-2025-4008 Smartbedded Meteobridge 8.7 High Smartbedded Meteobridge Command Injection Vulnerability 2025-10-02 2025-10-23 Unknown
CVE-2025-21043 Samsung Mobile Devices 9.8 Critical Samsung Mobile Devices Out-of-Bounds Write Vulnerability 2025-10-02 2025-10-23 Unknown
CVE-2017-1000353 Jenkins Jenkins 9.8 Critical Jenkins Remote Code Execution Vulnerability 2025-10-02 2025-10-23 Unknown
CVE-2015-7755 Juniper ScreenOS 9.8 Critical Juniper ScreenOS Improper Authentication Vulnerability 2025-10-02 2025-10-23 Unknown
CVE-2014-6278 GNU GNU Bash 8.8 High GNU Bash OS Command Injection Vulnerability 2025-10-02 2025-10-23 Unknown
CVE-2025-59689 Libraesva Email Security Gateway 6.1 Medium Libraesva Email Security Gateway Command Injection Vulnerability 2025-09-29 2025-10-20 Unknown
CVE-2025-32463 Sudo Sudo 7.8 High Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability 2025-09-29 2025-10-20 Unknown
CVE-2025-20352 Cisco IOS and IOS XE 7.7 High Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability 2025-09-29 2025-10-20 Unknown
CVE-2025-10035 Fortra GoAnywhere MFT 9.8 Critical Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability 2025-09-29 2025-10-20 Known
CVE-2021-21311 Adminer Adminer 7.2 High Adminer Server-Side Request Forgery Vulnerability 2025-09-29 2025-10-20 Unknown
CVE-2025-20362 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense 8.6 High Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability 2025-09-25 2025-09-26 Unknown
CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense 9.9 Critical Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability 2025-09-25 2025-09-26 Unknown
CVE-2025-10585 Google Chromium V8 9.8 Critical Google Chromium V8 Type Confusion Vulnerability 2025-09-23 2025-10-14 Unknown
CVE-2025-5086 Dassault Systèmes DELMIA Apriso 9.0 Critical Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability 2025-09-11 2025-10-02 Unknown
CVE-2025-53690 Sitecore Multiple Products 9.0 Critical Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability 2025-09-04 2025-09-25 Unknown
CVE-2025-48543 Android Runtime 8.8 High Android Runtime Use-After-Free Vulnerability 2025-09-04 2025-09-25 Unknown
CVE-2025-38352 Linux Kernel 7.4 High Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability 2025-09-04 2025-09-25 Unknown
CVE-2025-9377 TP-Link Multiple Routers 8.6 High TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability 2025-09-03 2025-09-24 Unknown
CVE-2023-50224 TP-Link TL-WR841N 6.5 Medium TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability 2025-09-03 2025-09-24 Unknown
CVE-2025-55177 Meta Platforms WhatsApp 5.4 Medium Meta Platforms WhatsApp Incorrect Authorization Vulnerability 2025-09-02 2025-09-23 Unknown
CVE-2020-24363 TP-Link TL-WA855RE 8.8 High TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability 2025-09-02 2025-09-23 Unknown
CVE-2025-57819 Sangoma FreePBX 10.0 Critical Sangoma FreePBX Authentication Bypass Vulnerability 2025-08-29 2025-09-19 Unknown
CVE-2025-7775 Citrix NetScaler 9.2 Critical Citrix NetScaler Memory Overflow Vulnerability 2025-08-26 2025-08-28 Unknown
CVE-2025-48384 Git Git 8.0 High Git Link Following Vulnerability 2025-08-25 2025-09-15 Unknown