Browse

CISA KEV catalog

Search and filter the complete official catalog.

Search CVE IDs and vulnerability names.
Filter the catalog Select one or more technologies to create a focused view.
Vendors
All vendors
Products
All products
1723 results
CVE Vendor Product CVSS Vulnerability Added Due Ransomware
CVE-2025-58360 OSGeo GeoServer 9.8 Critical OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability 2025-12-11 2026-01-01 Unknown
CVE-2025-62221 Microsoft Windows 7.8 High Microsoft Windows Use After Free Vulnerability 2025-12-09 2025-12-30 Unknown
CVE-2025-6218 RARLAB WinRAR 7.8 High RARLAB WinRAR Path Traversal Vulnerability 2025-12-09 2025-12-30 Unknown
CVE-2025-66644 Array Networks ArrayOS AG 9.8 Critical Array Networks ArrayOS AG OS Command Injection Vulnerability 2025-12-08 2025-12-29 Unknown
CVE-2022-37055 D-Link Routers 9.8 Critical D-Link Routers Buffer Overflow Vulnerability 2025-12-08 2025-12-29 Unknown
CVE-2025-55182 Meta React Server Components 10.0 Critical Meta React Server Components Remote Code Execution Vulnerability 2025-12-05 2025-12-12 Known
CVE-2021-26828 OpenPLC ScadaBR 8.8 High OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability 2025-12-03 2025-12-24 Unknown
CVE-2025-48633 Android Framework 5.5 Medium Android Framework Information Disclosure Vulnerability 2025-12-02 2025-12-23 Unknown
CVE-2025-48572 Android Framework 7.8 High Android Framework Privilege Escalation Vulnerability 2025-12-02 2025-12-23 Unknown
CVE-2021-26829 OpenPLC ScadaBR 5.4 Medium OpenPLC ScadaBR Cross-site Scripting Vulnerability 2025-11-28 2025-12-19 Unknown
CVE-2025-61757 Oracle Fusion Middleware 9.8 Critical Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability 2025-11-21 2025-12-12 Unknown
CVE-2025-13223 Google Chromium V8 8.8 High Google Chromium V8 Type Confusion Vulnerability 2025-11-19 2025-12-10 Unknown
CVE-2025-58034 Fortinet FortiWeb 7.2 High Fortinet FortiWeb OS Command Injection Vulnerability 2025-11-18 2025-11-25 Unknown
CVE-2025-64446 Fortinet FortiWeb 9.8 Critical Fortinet FortiWeb Path Traversal Vulnerability 2025-11-14 2025-11-21 Unknown
CVE-2025-9242 WatchGuard Firebox 9.3 Critical WatchGuard Firebox Out-of-Bounds Write Vulnerability 2025-11-12 2025-12-03 Unknown
CVE-2025-62215 Microsoft Windows 7.0 High Microsoft Windows Race Condition Vulnerability 2025-11-12 2025-12-03 Unknown
CVE-2025-12480 Gladinet Triofox 9.1 Critical Gladinet Triofox Improper Access Control Vulnerability 2025-11-12 2025-12-03 Unknown
CVE-2025-21042 Samsung Mobile Devices 9.8 Critical Samsung Mobile Devices Out-of-Bounds Write Vulnerability 2025-11-10 2025-12-01 Unknown
CVE-2025-48703 CWP Control Web Panel 9.0 Critical CWP Control Web Panel OS Command Injection Vulnerability 2025-11-04 2025-11-25 Unknown
CVE-2025-11371 Gladinet CentreStack and Triofox 7.5 High Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability 2025-11-04 2025-11-25 Unknown
CVE-2025-41244 Broadcom VMware Aria Operations and VMware Tools 7.8 High Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability 2025-10-30 2025-11-20 Unknown
CVE-2025-24893 XWiki Platform 9.8 Critical XWiki Platform Eval Injection Vulnerability 2025-10-30 2025-11-20 Unknown
CVE-2025-6205 Dassault Systèmes DELMIA Apriso 9.1 Critical Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability 2025-10-28 2025-11-18 Unknown
CVE-2025-6204 Dassault Systèmes DELMIA Apriso 8.0 High Dassault Systèmes DELMIA Apriso Code Injection Vulnerability 2025-10-28 2025-11-18 Unknown
CVE-2025-59287 Microsoft Windows 9.8 Critical Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability 2025-10-24 2025-11-14 Unknown
CVE-2025-54236 Adobe Commerce and Magento 9.1 Critical Adobe Commerce and Magento Improper Input Validation Vulnerability 2025-10-24 2025-11-14 Unknown
CVE-2025-61932 Motex LANSCOPE Endpoint Manager 9.3 Critical Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability 2025-10-22 2025-11-12 Unknown
CVE-2025-61884 Oracle E-Business Suite 7.5 High Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability 2025-10-20 2025-11-10 Known
CVE-2025-33073 Microsoft Windows 8.8 High Microsoft Windows SMB Client Improper Access Control Vulnerability 2025-10-20 2025-11-10 Unknown
CVE-2025-2747 Kentico Xperience CMS 9.8 Critical Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability 2025-10-20 2025-11-10 Unknown
CVE-2025-2746 Kentico Xperience CMS 9.8 Critical Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability 2025-10-20 2025-11-10 Unknown
CVE-2022-48503 Apple Multiple Products 8.8 High Apple Multiple Products Unspecified Vulnerability 2025-10-20 2025-11-10 Unknown
CVE-2025-54253 Adobe Experience Manager (AEM) Forms 10.0 Critical Adobe Experience Manager Forms Code Execution Vulnerability 2025-10-15 2025-11-05 Unknown
CVE-2025-59230 Microsoft Windows 7.8 High Microsoft Windows Improper Access Control Vulnerability 2025-10-14 2025-11-04 Unknown
CVE-2025-47827 IGEL IGEL OS 4.6 Medium IGEL OS Use of a Key Past its Expiration Date Vulnerability 2025-10-14 2025-11-04 Unknown
CVE-2025-24990 Microsoft Windows 7.8 High Microsoft Windows Untrusted Pointer Dereference Vulnerability 2025-10-14 2025-11-04 Unknown
CVE-2016-7836 SKYSEA Client View 9.8 Critical SKYSEA Client View Improper Authentication Vulnerability 2025-10-14 2025-11-04 Unknown
CVE-2021-43798 Grafana Labs Grafana 7.5 High Grafana Path Traversal Vulnerability 2025-10-09 2025-10-30 Unknown
CVE-2025-27915 Synacor Zimbra Collaboration Suite (ZCS) 5.4 Medium Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability 2025-10-07 2025-10-28 Unknown
CVE-2025-61882 Oracle E-Business Suite 9.8 Critical Oracle E-Business Suite Unspecified Vulnerability 2025-10-06 2025-10-27 Known
CVE-2021-43226 Microsoft Windows 7.8 High Microsoft Windows Privilege Escalation Vulnerability 2025-10-06 2025-10-27 Known
CVE-2021-22555 Linux Kernel 7.8 High Linux Kernel Heap Out-of-Bounds Write Vulnerability 2025-10-06 2025-10-27 Unknown
CVE-2013-3918 Microsoft Windows 8.8 High Microsoft Windows Out-of-Bounds Write Vulnerability 2025-10-06 2025-10-27 Unknown
CVE-2011-3402 Microsoft Windows 8.8 High Microsoft Windows Remote Code Execution Vulnerability 2025-10-06 2025-10-27 Unknown
CVE-2010-3962 Microsoft Internet Explorer 8.1 High Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability 2025-10-06 2025-10-27 Unknown
CVE-2010-3765 Mozilla Multiple Products 9.8 Critical Mozilla Multiple Products Remote Code Execution Vulnerability 2025-10-06 2025-10-27 Unknown
CVE-2025-4008 Smartbedded Meteobridge 8.7 High Smartbedded Meteobridge Command Injection Vulnerability 2025-10-02 2025-10-23 Unknown
CVE-2025-21043 Samsung Mobile Devices 9.8 Critical Samsung Mobile Devices Out-of-Bounds Write Vulnerability 2025-10-02 2025-10-23 Unknown
CVE-2017-1000353 Jenkins Jenkins 9.8 Critical Jenkins Remote Code Execution Vulnerability 2025-10-02 2025-10-23 Unknown
CVE-2015-7755 Juniper ScreenOS 9.8 Critical Juniper ScreenOS Improper Authentication Vulnerability 2025-10-02 2025-10-23 Unknown