Sec Feed Reader

CISA – Known Exploited Vulnerabilities (KEV)

Uebersicht

Quellen-ID (source_id): cisa_kev
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: threat_intel
Provider: cisa_kev_json
Sprache: de
Zielgruppe: —
Tags: cisa, kev
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:17 UTC	2026-10-21 10:17 UTC	0	-	W/"ea28426db6e3daf822f8973000a8a7e18220e986453336acb8f1520560aa59aa"	-

Letzte Eintraege

1755 Eintraege · 50 pro Seite · Seite 7 von 36

Veroeffentlicht	Titel	CVEs	EPSS-Pctl	Severity
2025-11-04 00:00	CVE-2025-48703 — CWP Control Web Panel OS Command Injection Vulnerability	CVE-2025-48703		CRITICAL
2025-11-04 00:00	CVE-2025-11371 — Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability	CVE-2025-11371		HIGH
2025-10-30 00:00	CVE-2025-41244 — Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability	CVE-2025-41244		HIGH
2025-10-30 00:00	CVE-2025-24893 — XWiki Platform Eval Injection Vulnerability	CVE-2025-24893		CRITICAL
2025-10-28 00:00	CVE-2025-6205 — Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability	CVE-2025-6205		CRITICAL
2025-10-28 00:00	CVE-2025-6204 — Dassault Systèmes DELMIA Apriso Code Injection Vulnerability	CVE-2025-6204		HIGH
2025-10-24 00:00	CVE-2025-54236 — Adobe Commerce and Magento Improper Input Validation Vulnerability	CVE-2025-54236		CRITICAL
2025-10-24 00:00	CVE-2025-59287 — Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability	CVE-2025-59287	0.99981	CRITICAL
2025-10-22 00:00	CVE-2025-61932 — Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability	CVE-2025-61932		CRITICAL
2025-10-20 00:00	CVE-2025-2747 — Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability	CVE-2025-2747		CRITICAL
2025-10-20 00:00	CVE-2025-2746 — Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability	CVE-2025-2746		CRITICAL
2025-10-20 00:00	CVE-2025-61884 — Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability	CVE-2025-61884		HIGH
2025-10-20 00:00	CVE-2025-33073 — Microsoft Windows SMB Client Improper Access Control Vulnerability	CVE-2025-33073		HIGH
2025-10-20 00:00	CVE-2022-48503 — Apple Multiple Products Unspecified Vulnerability	CVE-2022-48503		HIGH
2025-10-15 00:00	CVE-2025-54253 — Adobe Experience Manager Forms Code Execution Vulnerability	CVE-2025-54253		CRITICAL
2025-10-14 00:00	CVE-2016-7836 — SKYSEA Client View Improper Authentication Vulnerability	CVE-2016-7836		CRITICAL
2025-10-14 00:00	CVE-2025-47827 — IGEL OS Use of a Key Past its Expiration Date Vulnerability	CVE-2025-47827		MEDIUM
2025-10-14 00:00	CVE-2025-24990 — Microsoft Windows Untrusted Pointer Dereference Vulnerability	CVE-2025-24990		HIGH
2025-10-14 00:00	CVE-2025-59230 — Microsoft Windows Improper Access Control Vulnerability	CVE-2025-59230		HIGH
2025-10-09 00:00	CVE-2021-43798 — Grafana Path Traversal Vulnerability	CVE-2021-43798		HIGH
2025-10-07 00:00	CVE-2025-27915 — Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability	CVE-2025-27915		MEDIUM
2025-10-06 00:00	CVE-2025-61882 — Oracle E-Business Suite Unspecified Vulnerability	CVE-2025-61882		CRITICAL
2025-10-06 00:00	CVE-2010-3962 — Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability	CVE-2010-3962		HIGH
2025-10-06 00:00	CVE-2011-3402 — Microsoft Windows Remote Code Execution Vulnerability	CVE-2011-3402		HIGH
2025-10-06 00:00	CVE-2013-3918 — Microsoft Windows Out-of-Bounds Write Vulnerability	CVE-2013-3918		HIGH
2025-10-06 00:00	CVE-2021-22555 — Linux Kernel Heap Out-of-Bounds Write Vulnerability	CVE-2021-22555		HIGH
2025-10-06 00:00	CVE-2021-43226 — Microsoft Windows Privilege Escalation Vulnerability	CVE-2021-43226		HIGH
2025-10-06 00:00	CVE-2010-3765 — Mozilla Multiple Products Remote Code Execution Vulnerability	CVE-2010-3765		CRITICAL
2025-10-02 00:00	CVE-2014-6278 — GNU Bash OS Command Injection Vulnerability	CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 +3		CRITICAL
2025-10-02 00:00	CVE-2017-1000353 — Jenkins Remote Code Execution Vulnerability	CVE-2017-1000353		CRITICAL
2025-10-02 00:00	CVE-2025-4008 — Smartbedded Meteobridge Command Injection Vulnerability	CVE-2025-4008		HIGH
2025-10-02 00:00	CVE-2015-7755 — Juniper ScreenOS Improper Authentication Vulnerability	CVE-2015-7755 CVE-2015-7756		CRITICAL
2025-10-02 00:00	CVE-2025-21043 — Samsung Mobile Devices Out-of-Bounds Write Vulnerability	CVE-2025-21043		HIGH
2025-09-29 00:00	CVE-2025-32463 — Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability	CVE-2025-32463		CRITICAL
2025-09-29 00:00	CVE-2025-20352 — Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability	CVE-2025-20352		HIGH
2025-09-29 00:00	CVE-2025-10035 — Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability	CVE-2025-10035		CRITICAL
2025-09-29 00:00	CVE-2021-21311 — Adminer Server-Side Request Forgery Vulnerability	CVE-2021-21311		HIGH
2025-09-29 00:00	CVE-2025-59689 — Libraesva Email Security Gateway Command Injection Vulnerability	CVE-2025-59689		MEDIUM
2025-09-25 00:00	CVE-2025-20333 — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability	CVE-2025-20333 CVE-2025-20362	0.99751	CRITICAL
2025-09-25 00:00	CVE-2025-20362 — Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability	CVE-2025-20333 CVE-2025-20362	0.99751	CRITICAL
2025-09-23 00:00	CVE-2025-10585 — Google Chromium V8 Type Confusion Vulnerability	CVE-2025-10585		HIGH
2025-09-11 00:00	CVE-2025-5086 — Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability	CVE-2025-5086		CRITICAL
2025-09-04 00:00	CVE-2025-38352 — Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability	CVE-2025-38352		HIGH
2025-09-04 00:00	CVE-2025-48543 — Android Runtime Use-After-Free Vulnerability	CVE-2025-48543		HIGH
2025-09-04 00:00	CVE-2025-53690 — Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability	CVE-2025-53690		CRITICAL
2025-09-03 00:00	CVE-2025-9377 — TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability	CVE-2025-9377		HIGH
2025-09-03 00:00	CVE-2023-50224 — TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability	CVE-2023-50224		MEDIUM
2025-09-02 00:00	CVE-2020-24363 — TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability	CVE-2020-24363		HIGH
2025-09-02 00:00	CVE-2025-55177 — Meta Platforms WhatsApp Incorrect Authorization Vulnerability	CVE-2025-55177		MEDIUM
2025-08-29 00:00	CVE-2025-57819 — Sangoma FreePBX Authentication Bypass Vulnerability	CVE-2025-57819		CRITICAL

Alle Quellen