Browse

CISA KEV catalog

Search and filter the complete official catalog.

Search CVE IDs and vulnerability names.
Filter the catalog Select one or more technologies to create a focused view.
Vendors
All vendors
Products
All products
1723 results
CVE Vendor Product CVSS Vulnerability Added Due Ransomware
CVE-2025-31201 Apple Multiple Products 9.8 Critical Apple Multiple Products Arbitrary Read and Write Vulnerability 2025-04-17 2025-05-08 Unknown
CVE-2025-31200 Apple Multiple Products 9.8 Critical Apple Multiple Products Memory Corruption Vulnerability 2025-04-17 2025-05-08 Unknown
CVE-2025-24054 Microsoft Windows 5.4 Medium Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability 2025-04-17 2025-05-08 Unknown
CVE-2021-20035 SonicWall SMA100 Appliances 6.5 Medium SonicWall SMA100 Appliances OS Command Injection Vulnerability 2025-04-16 2025-05-07 Unknown
CVE-2024-53197 Linux Kernel 7.8 High Linux Kernel Out-of-Bounds Access Vulnerability 2025-04-09 2025-04-30 Unknown
CVE-2024-53150 Linux Kernel 7.1 High Linux Kernel Out-of-Bounds Read Vulnerability 2025-04-09 2025-04-30 Unknown
CVE-2025-30406 Gladinet CentreStack 9.8 Critical Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability 2025-04-08 2025-04-29 Unknown
CVE-2025-29824 Microsoft Windows 7.8 High Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability 2025-04-08 2025-04-29 Known
CVE-2025-31161 CrushFTP CrushFTP 9.8 Critical CrushFTP Authentication Bypass Vulnerability 2025-04-07 2025-04-28 Known
CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways 9.8 Critical Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability 2025-04-04 2025-04-11 Known
CVE-2025-24813 Apache Tomcat 9.8 Critical Apache Tomcat Path Equivalence Vulnerability 2025-04-01 2025-04-22 Unknown
CVE-2024-20439 Cisco Smart Licensing Utility 9.8 Critical Cisco Smart Licensing Utility Static Credential Vulnerability 2025-03-31 2025-04-21 Unknown
CVE-2025-2783 Google Chromium Mojo 8.3 High Google Chromium Mojo Sandbox Escape Vulnerability 2025-03-27 2025-04-17 Unknown
CVE-2019-9875 Sitecore CMS and Experience Platform (XP) 8.8 High Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability 2025-03-26 2025-04-16 Unknown
CVE-2019-9874 Sitecore CMS and Experience Platform (XP) 9.8 Critical Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability 2025-03-26 2025-04-16 Unknown
CVE-2025-30154 reviewdog action-setup GitHub Action 8.6 High reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability 2025-03-24 2025-04-14 Unknown
CVE-2025-1316 Edimax IC-7100 IP Camera 9.3 Critical Edimax IC-7100 IP Camera OS Command Injection Vulnerability 2025-03-19 2025-04-09 Unknown
CVE-2024-48248 NAKIVO Backup and Replication 8.6 High NAKIVO Backup and Replication Absolute Path Traversal Vulnerability 2025-03-19 2025-04-09 Unknown
CVE-2017-12637 SAP NetWeaver 7.5 High SAP NetWeaver Directory Traversal Vulnerability 2025-03-19 2025-04-09 Unknown
CVE-2025-30066 tj-actions changed-files GitHub Action 8.6 High tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability 2025-03-18 2025-04-08 Unknown
CVE-2025-24472 Fortinet FortiOS and FortiProxy 8.1 High Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability 2025-03-18 2025-04-08 Known
CVE-2025-24201 Apple Multiple Products 10.0 Critical Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability 2025-03-13 2025-04-03 Unknown
CVE-2025-21590 Juniper Junos OS 6.7 Medium Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability 2025-03-13 2025-04-03 Unknown
CVE-2025-26633 Microsoft Windows 7.0 High Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability 2025-03-11 2025-04-01 Known
CVE-2025-24993 Microsoft Windows 7.8 High Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability 2025-03-11 2025-04-01 Unknown
CVE-2025-24991 Microsoft Windows 5.5 Medium Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability 2025-03-11 2025-04-01 Unknown
CVE-2025-24985 Microsoft Windows 7.8 High Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability 2025-03-11 2025-04-01 Unknown
CVE-2025-24984 Microsoft Windows 4.6 Medium Microsoft Windows NTFS Information Disclosure Vulnerability 2025-03-11 2025-04-01 Unknown
CVE-2025-24983 Microsoft Windows 7.0 High Microsoft Windows Win32k Use-After-Free Vulnerability 2025-03-11 2025-04-01 Unknown
CVE-2025-25181 Advantive VeraCore 7.5 High Advantive VeraCore SQL Injection Vulnerability 2025-03-10 2025-03-31 Unknown
CVE-2024-57968 Advantive VeraCore 8.8 High Advantive VeraCore Unrestricted File Upload Vulnerability 2025-03-10 2025-03-31 Unknown
CVE-2024-13161 Ivanti Endpoint Manager (EPM) 7.5 High Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability 2025-03-10 2025-03-31 Unknown
CVE-2024-13160 Ivanti Endpoint Manager (EPM) 7.5 High Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability 2025-03-10 2025-03-31 Unknown
CVE-2024-13159 Ivanti Endpoint Manager (EPM) 7.5 High Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability 2025-03-10 2025-03-31 Unknown
CVE-2025-22226 VMware ESXi, Workstation, and Fusion 6.0 Medium VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability 2025-03-04 2025-03-25 Unknown
CVE-2025-22225 VMware ESXi 8.2 High VMware ESXi Arbitrary Write Vulnerability 2025-03-04 2025-03-25 Known
CVE-2025-22224 VMware ESXi and Workstation 8.2 High VMware ESXi and Workstation TOCTOU Race Condition Vulnerability 2025-03-04 2025-03-25 Unknown
CVE-2024-50302 Linux Kernel 5.5 Medium Linux Kernel Use of Uninitialized Resource Vulnerability 2025-03-04 2025-03-25 Unknown
CVE-2024-4885 Progress WhatsUp Gold 9.8 Critical Progress WhatsUp Gold Path Traversal Vulnerability 2025-03-03 2025-03-24 Unknown
CVE-2023-20118 Cisco Small Business RV Series Routers 7.2 High Cisco Small Business RV Series Routers Command Injection Vulnerability 2025-03-03 2025-03-24 Unknown
CVE-2022-43939 Hitachi Vantara Pentaho Business Analytics (BA) Server 9.8 Critical Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability 2025-03-03 2025-03-24 Unknown
CVE-2022-43769 Hitachi Vantara Pentaho Business Analytics (BA) Server 7.2 High Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability 2025-03-03 2025-03-24 Unknown
CVE-2018-8639 Microsoft Windows 7.8 High Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability 2025-03-03 2025-03-24 Known
CVE-2024-49035 Microsoft Partner Center 9.8 Critical Microsoft Partner Center Improper Access Control Vulnerability 2025-02-25 2025-03-18 Unknown
CVE-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) 9.0 Critical Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability 2025-02-25 2025-03-18 Unknown
CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) 8.8 High Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability 2025-02-24 2025-03-17 Unknown
CVE-2017-3066 Adobe ColdFusion 9.8 Critical Adobe ColdFusion Deserialization Vulnerability 2025-02-24 2025-03-17 Unknown
CVE-2025-24989 Microsoft Power Pages 9.8 Critical Microsoft Power Pages Improper Access Control Vulnerability 2025-02-21 2025-03-14 Unknown
CVE-2025-23209 Craft CMS Craft CMS 8.1 High Craft CMS Code Injection Vulnerability 2025-02-20 2025-03-13 Unknown
CVE-2025-0111 Palo Alto Networks PAN-OS 7.1 High Palo Alto Networks PAN-OS File Read Vulnerability 2025-02-20 2025-03-13 Unknown