Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2023-39780 | ASUS | RT-AX55 Routers | 8.8 High | ASUS RT-AX55 Routers OS Command Injection Vulnerability | 2025-06-02 | 2025-06-23 | Unknown |
| CVE-2021-32030 | ASUS | Routers | 9.8 Critical | ASUS Routers Improper Authentication Vulnerability | 2025-06-02 | 2025-06-23 | Unknown |
| CVE-2025-4632 | Samsung | MagicINFO 9 Server | 9.8 Critical | Samsung MagicINFO 9 Server Path Traversal Vulnerability | 2025-05-22 | 2025-06-12 | Unknown |
| CVE-2025-4428 | Ivanti | Endpoint Manager Mobile (EPMM) | 8.8 High | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 2025-05-19 | 2025-06-09 | Unknown |
| CVE-2025-4427 | Ivanti | Endpoint Manager Mobile (EPMM) | 7.5 High | Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability | 2025-05-19 | 2025-06-09 | Unknown |
| CVE-2025-27920 | Srimax | Output Messenger | 8.8 High | Srimax Output Messenger Directory Traversal Vulnerability | 2025-05-19 | 2025-06-09 | Unknown |
| CVE-2024-27443 | Synacor | Zimbra Collaboration Suite (ZCS) | 6.1 Medium | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 2025-05-19 | 2025-06-09 | Unknown |
| CVE-2024-11182 | MDaemon | Email Server | 5.3 Medium | MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability | 2025-05-19 | 2025-06-09 | Unknown |
| CVE-2023-38950 | ZKTeco | BioTime | 7.5 High | ZKTeco BioTime Path Traversal Vulnerability | 2025-05-19 | 2025-06-09 | Unknown |
| CVE-2025-42999 | SAP | NetWeaver | 9.1 Critical | SAP NetWeaver Deserialization Vulnerability | 2025-05-15 | 2025-06-05 | Unknown |
| CVE-2024-12987 | DrayTek | Vigor Routers | 6.9 Medium | DrayTek Vigor Routers OS Command Injection Vulnerability | 2025-05-15 | 2025-06-05 | Unknown |
| CVE-2025-32756 | Fortinet | Multiple Products | 9.8 Critical | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability | 2025-05-14 | 2025-06-04 | Unknown |
| CVE-2025-32709 | Microsoft | Windows | 7.8 High | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | 2025-05-13 | 2025-06-03 | Unknown |
| CVE-2025-32706 | Microsoft | Windows | 7.8 High | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | 2025-05-13 | 2025-06-03 | Unknown |
| CVE-2025-32701 | Microsoft | Windows | 7.8 High | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | 2025-05-13 | 2025-06-03 | Unknown |
| CVE-2025-30400 | Microsoft | Windows | 7.8 High | Microsoft Windows DWM Core Library Use-After-Free Vulnerability | 2025-05-13 | 2025-06-03 | Unknown |
| CVE-2025-30397 | Microsoft | Windows | 7.5 High | Microsoft Windows Scripting Engine Type Confusion Vulnerability | 2025-05-13 | 2025-06-03 | Unknown |
| CVE-2025-47729 | TeleMessage | TM SGNL | 4.9 Medium | TeleMessage TM SGNL Hidden Functionality Vulnerability | 2025-05-12 | 2025-06-02 | Unknown |
| CVE-2024-6047 | GeoVision | Multiple Devices | 9.8 Critical | GeoVision Devices OS Command Injection Vulnerability | 2025-05-07 | 2025-05-28 | Unknown |
| CVE-2024-11120 | GeoVision | Multiple Devices | 9.8 Critical | GeoVision Devices OS Command Injection Vulnerability | 2025-05-07 | 2025-05-28 | Unknown |
| CVE-2025-27363 | FreeType | FreeType | 8.1 High | FreeType Out-of-Bounds Write Vulnerability | 2025-05-06 | 2025-05-27 | Unknown |
| CVE-2025-3248 | Langflow | Langflow | 9.8 Critical | Langflow Missing Authentication Vulnerability | 2025-05-05 | 2025-05-26 | Known |
| CVE-2025-34028 | Commvault | Command Center | 9.3 Critical | Commvault Command Center Path Traversal Vulnerability | 2025-05-02 | 2025-05-23 | Unknown |
| CVE-2024-58136 | Yiiframework | Yii | 9.8 Critical | Yiiframework Yii Improper Protection of Alternate Path Vulnerability | 2025-05-02 | 2025-05-23 | Unknown |
| CVE-2024-38475 | Apache | HTTP Server | 9.1 Critical | Apache HTTP Server Improper Escaping of Output Vulnerability | 2025-05-01 | 2025-05-22 | Unknown |
| CVE-2023-44221 | SonicWall | SMA100 Appliances | 7.2 High | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 2025-05-01 | 2025-05-22 | Unknown |
| CVE-2025-31324 | SAP | NetWeaver | 9.8 Critical | SAP NetWeaver Unrestricted File Upload Vulnerability | 2025-04-29 | 2025-05-20 | Known |
| CVE-2025-42599 | Qualitia | Active! Mail | 9.8 Critical | Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability | 2025-04-28 | 2025-05-19 | Unknown |
| CVE-2025-3928 | Commvault | Web Server | 8.7 High | Commvault Web Server Unspecified Vulnerability | 2025-04-28 | 2025-05-19 | Unknown |
| CVE-2025-1976 | Broadcom | Brocade Fabric OS | 8.6 High | Broadcom Brocade Fabric OS Code Injection Vulnerability | 2025-04-28 | 2025-05-19 | Unknown |
| CVE-2025-31201 | Apple | Multiple Products | 9.8 Critical | Apple Multiple Products Arbitrary Read and Write Vulnerability | 2025-04-17 | 2025-05-08 | Unknown |
| CVE-2025-31200 | Apple | Multiple Products | 9.8 Critical | Apple Multiple Products Memory Corruption Vulnerability | 2025-04-17 | 2025-05-08 | Unknown |
| CVE-2025-24054 | Microsoft | Windows | 5.4 Medium | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability | 2025-04-17 | 2025-05-08 | Unknown |
| CVE-2021-20035 | SonicWall | SMA100 Appliances | 6.5 Medium | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 2025-04-16 | 2025-05-07 | Unknown |
| CVE-2024-53197 | Linux | Kernel | 7.8 High | Linux Kernel Out-of-Bounds Access Vulnerability | 2025-04-09 | 2025-04-30 | Unknown |
| CVE-2024-53150 | Linux | Kernel | 7.1 High | Linux Kernel Out-of-Bounds Read Vulnerability | 2025-04-09 | 2025-04-30 | Unknown |
| CVE-2025-30406 | Gladinet | CentreStack | 9.8 Critical | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability | 2025-04-08 | 2025-04-29 | Unknown |
| CVE-2025-29824 | Microsoft | Windows | 7.8 High | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | 2025-04-08 | 2025-04-29 | Known |
| CVE-2025-31161 | CrushFTP | CrushFTP | 9.8 Critical | CrushFTP Authentication Bypass Vulnerability | 2025-04-07 | 2025-04-28 | Known |
| CVE-2025-22457 | Ivanti | Connect Secure, Policy Secure, and ZTA Gateways | 9.8 Critical | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | 2025-04-04 | 2025-04-11 | Known |
| CVE-2025-24813 | Apache | Tomcat | 9.8 Critical | Apache Tomcat Path Equivalence Vulnerability | 2025-04-01 | 2025-04-22 | Unknown |
| CVE-2024-20439 | Cisco | Smart Licensing Utility | 9.8 Critical | Cisco Smart Licensing Utility Static Credential Vulnerability | 2025-03-31 | 2025-04-21 | Unknown |
| CVE-2025-2783 | Chromium Mojo | 8.3 High | Google Chromium Mojo Sandbox Escape Vulnerability | 2025-03-27 | 2025-04-17 | Unknown | |
| CVE-2019-9875 | Sitecore | CMS and Experience Platform (XP) | 8.8 High | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | 2025-03-26 | 2025-04-16 | Unknown |
| CVE-2019-9874 | Sitecore | CMS and Experience Platform (XP) | 9.8 Critical | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | 2025-03-26 | 2025-04-16 | Unknown |
| CVE-2025-30154 | reviewdog | action-setup GitHub Action | 8.6 High | reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability | 2025-03-24 | 2025-04-14 | Unknown |
| CVE-2025-1316 | Edimax | IC-7100 IP Camera | 9.3 Critical | Edimax IC-7100 IP Camera OS Command Injection Vulnerability | 2025-03-19 | 2025-04-09 | Unknown |
| CVE-2024-48248 | NAKIVO | Backup and Replication | 8.6 High | NAKIVO Backup and Replication Absolute Path Traversal Vulnerability | 2025-03-19 | 2025-04-09 | Unknown |
| CVE-2017-12637 | SAP | NetWeaver | 7.5 High | SAP NetWeaver Directory Traversal Vulnerability | 2025-03-19 | 2025-04-09 | Unknown |
| CVE-2025-30066 | tj-actions | changed-files GitHub Action | 8.6 High | tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability | 2025-03-18 | 2025-04-08 | Unknown |