Browse

CISA KEV catalog

Search and filter the complete official catalog.

Search CVE IDs and vulnerability names.
Filter the catalog Select one or more technologies to create a focused view.
Vendors
All vendors
Products
All products
1653 results
CVE Vendor Product CVSS Vulnerability Added Due Ransomware
CVE-2023-39780 ASUS RT-AX55 Routers 8.8 High ASUS RT-AX55 Routers OS Command Injection Vulnerability 2025-06-02 2025-06-23 Unknown
CVE-2021-32030 ASUS Routers 9.8 Critical ASUS Routers Improper Authentication Vulnerability 2025-06-02 2025-06-23 Unknown
CVE-2025-4632 Samsung MagicINFO 9 Server 9.8 Critical Samsung MagicINFO 9 Server Path Traversal Vulnerability 2025-05-22 2025-06-12 Unknown
CVE-2025-4428 Ivanti Endpoint Manager Mobile (EPMM) 8.8 High Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability 2025-05-19 2025-06-09 Unknown
CVE-2025-4427 Ivanti Endpoint Manager Mobile (EPMM) 7.5 High Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability 2025-05-19 2025-06-09 Unknown
CVE-2025-27920 Srimax Output Messenger 8.8 High Srimax Output Messenger Directory Traversal Vulnerability 2025-05-19 2025-06-09 Unknown
CVE-2024-27443 Synacor Zimbra Collaboration Suite (ZCS) 6.1 Medium Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability 2025-05-19 2025-06-09 Unknown
CVE-2024-11182 MDaemon Email Server 5.3 Medium MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability 2025-05-19 2025-06-09 Unknown
CVE-2023-38950 ZKTeco BioTime 7.5 High ZKTeco BioTime Path Traversal Vulnerability 2025-05-19 2025-06-09 Unknown
CVE-2025-42999 SAP NetWeaver 9.1 Critical SAP NetWeaver Deserialization Vulnerability 2025-05-15 2025-06-05 Unknown
CVE-2024-12987 DrayTek Vigor Routers 6.9 Medium DrayTek Vigor Routers OS Command Injection Vulnerability 2025-05-15 2025-06-05 Unknown
CVE-2025-32756 Fortinet Multiple Products 9.8 Critical Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability 2025-05-14 2025-06-04 Unknown
CVE-2025-32709 Microsoft Windows 7.8 High Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability 2025-05-13 2025-06-03 Unknown
CVE-2025-32706 Microsoft Windows 7.8 High Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability 2025-05-13 2025-06-03 Unknown
CVE-2025-32701 Microsoft Windows 7.8 High Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability 2025-05-13 2025-06-03 Unknown
CVE-2025-30400 Microsoft Windows 7.8 High Microsoft Windows DWM Core Library Use-After-Free Vulnerability 2025-05-13 2025-06-03 Unknown
CVE-2025-30397 Microsoft Windows 7.5 High Microsoft Windows Scripting Engine Type Confusion Vulnerability 2025-05-13 2025-06-03 Unknown
CVE-2025-47729 TeleMessage TM SGNL 4.9 Medium TeleMessage TM SGNL Hidden Functionality Vulnerability 2025-05-12 2025-06-02 Unknown
CVE-2024-6047 GeoVision Multiple Devices 9.8 Critical GeoVision Devices OS Command Injection Vulnerability 2025-05-07 2025-05-28 Unknown
CVE-2024-11120 GeoVision Multiple Devices 9.8 Critical GeoVision Devices OS Command Injection Vulnerability 2025-05-07 2025-05-28 Unknown
CVE-2025-27363 FreeType FreeType 8.1 High FreeType Out-of-Bounds Write Vulnerability 2025-05-06 2025-05-27 Unknown
CVE-2025-3248 Langflow Langflow 9.8 Critical Langflow Missing Authentication Vulnerability 2025-05-05 2025-05-26 Known
CVE-2025-34028 Commvault Command Center 9.3 Critical Commvault Command Center Path Traversal Vulnerability 2025-05-02 2025-05-23 Unknown
CVE-2024-58136 Yiiframework Yii 9.8 Critical Yiiframework Yii Improper Protection of Alternate Path Vulnerability 2025-05-02 2025-05-23 Unknown
CVE-2024-38475 Apache HTTP Server 9.1 Critical Apache HTTP Server Improper Escaping of Output Vulnerability 2025-05-01 2025-05-22 Unknown
CVE-2023-44221 SonicWall SMA100 Appliances 7.2 High SonicWall SMA100 Appliances OS Command Injection Vulnerability 2025-05-01 2025-05-22 Unknown
CVE-2025-31324 SAP NetWeaver 9.8 Critical SAP NetWeaver Unrestricted File Upload Vulnerability 2025-04-29 2025-05-20 Known
CVE-2025-42599 Qualitia Active! Mail 9.8 Critical Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability 2025-04-28 2025-05-19 Unknown
CVE-2025-3928 Commvault Web Server 8.7 High Commvault Web Server Unspecified Vulnerability 2025-04-28 2025-05-19 Unknown
CVE-2025-1976 Broadcom Brocade Fabric OS 8.6 High Broadcom Brocade Fabric OS Code Injection Vulnerability 2025-04-28 2025-05-19 Unknown
CVE-2025-31201 Apple Multiple Products 9.8 Critical Apple Multiple Products Arbitrary Read and Write Vulnerability 2025-04-17 2025-05-08 Unknown
CVE-2025-31200 Apple Multiple Products 9.8 Critical Apple Multiple Products Memory Corruption Vulnerability 2025-04-17 2025-05-08 Unknown
CVE-2025-24054 Microsoft Windows 5.4 Medium Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability 2025-04-17 2025-05-08 Unknown
CVE-2021-20035 SonicWall SMA100 Appliances 6.5 Medium SonicWall SMA100 Appliances OS Command Injection Vulnerability 2025-04-16 2025-05-07 Unknown
CVE-2024-53197 Linux Kernel 7.8 High Linux Kernel Out-of-Bounds Access Vulnerability 2025-04-09 2025-04-30 Unknown
CVE-2024-53150 Linux Kernel 7.1 High Linux Kernel Out-of-Bounds Read Vulnerability 2025-04-09 2025-04-30 Unknown
CVE-2025-30406 Gladinet CentreStack 9.8 Critical Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability 2025-04-08 2025-04-29 Unknown
CVE-2025-29824 Microsoft Windows 7.8 High Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability 2025-04-08 2025-04-29 Known
CVE-2025-31161 CrushFTP CrushFTP 9.8 Critical CrushFTP Authentication Bypass Vulnerability 2025-04-07 2025-04-28 Known
CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways 9.8 Critical Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability 2025-04-04 2025-04-11 Known
CVE-2025-24813 Apache Tomcat 9.8 Critical Apache Tomcat Path Equivalence Vulnerability 2025-04-01 2025-04-22 Unknown
CVE-2024-20439 Cisco Smart Licensing Utility 9.8 Critical Cisco Smart Licensing Utility Static Credential Vulnerability 2025-03-31 2025-04-21 Unknown
CVE-2025-2783 Google Chromium Mojo 8.3 High Google Chromium Mojo Sandbox Escape Vulnerability 2025-03-27 2025-04-17 Unknown
CVE-2019-9875 Sitecore CMS and Experience Platform (XP) 8.8 High Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability 2025-03-26 2025-04-16 Unknown
CVE-2019-9874 Sitecore CMS and Experience Platform (XP) 9.8 Critical Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability 2025-03-26 2025-04-16 Unknown
CVE-2025-30154 reviewdog action-setup GitHub Action 8.6 High reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability 2025-03-24 2025-04-14 Unknown
CVE-2025-1316 Edimax IC-7100 IP Camera 9.3 Critical Edimax IC-7100 IP Camera OS Command Injection Vulnerability 2025-03-19 2025-04-09 Unknown
CVE-2024-48248 NAKIVO Backup and Replication 8.6 High NAKIVO Backup and Replication Absolute Path Traversal Vulnerability 2025-03-19 2025-04-09 Unknown
CVE-2017-12637 SAP NetWeaver 7.5 High SAP NetWeaver Directory Traversal Vulnerability 2025-03-19 2025-04-09 Unknown
CVE-2025-30066 tj-actions changed-files GitHub Action 8.6 High tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability 2025-03-18 2025-04-08 Unknown