Sec Feed Reader

CISA – Known Exploited Vulnerabilities (KEV)

Uebersicht

Quellen-ID (source_id): cisa_kev
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: threat_intel
Provider: cisa_kev_json
Sprache: de
Zielgruppe: —
Tags: cisa, kev
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 14:14 UTC	2026-10-21 14:14 UTC	0	-	W/"ea28426db6e3daf822f8973000a8a7e18220e986453336acb8f1520560aa59aa"	-

Letzte Eintraege

1755 Eintraege · 50 pro Seite · Seite 9 von 36

Veroeffentlicht	Titel	CVEs	EPSS-Pctl	Severity
2025-06-02 00:00	CVE-2024-56145 — Craft CMS Code Injection Vulnerability	CVE-2024-56145		CRITICAL
2025-06-02 00:00	CVE-2023-39780 — ASUS RT-AX55 Routers OS Command Injection Vulnerability	CVE-2023-39780 CVE-2023-41346		HIGH
2025-06-02 00:00	CVE-2021-32030 — ASUS Routers Improper Authentication Vulnerability	CVE-2021-32030		CRITICAL
2025-06-02 00:00	CVE-2025-35939 — Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability	CVE-2024-58136 CVE-2025-32432 CVE-2025-35939		CRITICAL
2025-05-22 00:00	CVE-2025-4632 — Samsung MagicINFO 9 Server Path Traversal Vulnerability	CVE-2025-4632		CRITICAL
2025-05-19 00:00	CVE-2025-27920 — Srimax Output Messenger Directory Traversal Vulnerability	CVE-2025-27920		HIGH
2025-05-19 00:00	CVE-2024-11182 — MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability	CVE-2024-11182		MEDIUM
2025-05-19 00:00	CVE-2024-27443 — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability	CVE-2024-27443		MEDIUM
2025-05-19 00:00	CVE-2025-4427 — Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability	CVE-2025-4427	0.9997	MEDIUM
2025-05-19 00:00	CVE-2025-4428 — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability	CVE-2025-35036 CVE-2025-4428	0.99766	HIGH
2025-05-19 00:00	CVE-2023-38950 — ZKTeco BioTime Path Traversal Vulnerability	CVE-2023-38950		HIGH
2025-05-15 00:00	CVE-2025-42999 — SAP NetWeaver Deserialization Vulnerability	CVE-2025-42999		CRITICAL
2025-05-15 00:00	CVE-2024-12987 — DrayTek Vigor Routers OS Command Injection Vulnerability	CVE-2024-12987		HIGH
2025-05-14 00:00	CVE-2025-32756 — Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability	CVE-2025-32756		CRITICAL
2025-05-13 00:00	CVE-2025-30397 — Microsoft Windows Scripting Engine Type Confusion Vulnerability	CVE-2025-30397		HIGH
2025-05-13 00:00	CVE-2025-30400 — Microsoft Windows DWM Core Library Use-After-Free Vulnerability	CVE-2025-30400		HIGH
2025-05-13 00:00	CVE-2025-32709 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability	CVE-2025-32709		HIGH
2025-05-13 00:00	CVE-2025-32701 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability	CVE-2025-32701		HIGH
2025-05-13 00:00	CVE-2025-32706 — Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability	CVE-2025-32706		HIGH
2025-05-12 00:00	CVE-2025-47729 — TeleMessage TM SGNL Hidden Functionality Vulnerability	CVE-2025-47729		LOW
2025-05-07 00:00	CVE-2024-11120 — GeoVision Devices OS Command Injection Vulnerability	CVE-2024-11120		CRITICAL
2025-05-07 00:00	CVE-2024-6047 — GeoVision Devices OS Command Injection Vulnerability	CVE-2024-6047		CRITICAL
2025-05-06 00:00	CVE-2025-27363 — FreeType Out-of-Bounds Write Vulnerability	CVE-2025-27363		HIGH
2025-05-05 00:00	CVE-2025-3248 — Langflow Missing Authentication Vulnerability	CVE-2025-3248		CRITICAL
2025-05-02 00:00	CVE-2024-58136 — Yiiframework Yii Improper Protection of Alternate Path Vulnerability	CVE-2024-58136 CVE-2025-32432		CRITICAL
2025-05-02 00:00	CVE-2025-34028 — Commvault Command Center Path Traversal Vulnerability	CVE-2025-34028		CRITICAL
2025-05-01 00:00	CVE-2024-38475 — Apache HTTP Server Improper Escaping of Output Vulnerability	CVE-2024-38475		CRITICAL
2025-05-01 00:00	CVE-2023-44221 — SonicWall SMA100 Appliances OS Command Injection Vulnerability	CVE-2023-44221		HIGH
2025-04-29 00:00	CVE-2025-31324 — SAP NetWeaver Unrestricted File Upload Vulnerability	CVE-2025-31324		CRITICAL
2025-04-28 00:00	CVE-2025-1976 — Broadcom Brocade Fabric OS Code Injection Vulnerability	CVE-2025-1976		HIGH
2025-04-28 00:00	CVE-2025-3928 — Commvault Web Server Unspecified Vulnerability	CVE-2025-3928		HIGH
2025-04-28 00:00	CVE-2025-42599 — Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability	CVE-2025-42599		CRITICAL
2025-04-17 00:00	CVE-2025-31201 — Apple Multiple Products Arbitrary Read and Write Vulnerability	CVE-2025-31201		CRITICAL
2025-04-17 00:00	CVE-2025-31200 — Apple Multiple Products Memory Corruption Vulnerability	CVE-2025-31200		CRITICAL
2025-04-17 00:00	CVE-2025-24054 — Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability	CVE-2025-24054		MEDIUM
2025-04-16 00:00	CVE-2021-20035 — SonicWall SMA100 Appliances OS Command Injection Vulnerability	CVE-2021-20035		MEDIUM
2025-04-09 00:00	CVE-2024-53150 — Linux Kernel Out-of-Bounds Read Vulnerability	CVE-2024-53150		HIGH
2025-04-09 00:00	CVE-2024-53197 — Linux Kernel Out-of-Bounds Access Vulnerability	CVE-2024-53197		HIGH
2025-04-08 00:00	CVE-2025-30406 — Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability	CVE-2025-30406		CRITICAL
2025-04-08 00:00	CVE-2025-29824 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability	CVE-2025-29824		HIGH
2025-04-07 00:00	CVE-2025-31161 — CrushFTP Authentication Bypass Vulnerability	CVE-2025-31161		CRITICAL
2025-04-04 00:00	CVE-2025-22457 — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability	CVE-2025-22457	0.99982	CRITICAL
2025-04-01 00:00	CVE-2025-24813 — Apache Tomcat Path Equivalence Vulnerability	CVE-2025-24813		CRITICAL
2025-03-31 00:00	CVE-2024-20439 — Cisco Smart Licensing Utility Static Credential Vulnerability	CVE-2024-20439		CRITICAL
2025-03-27 00:00	CVE-2025-2783 — Google Chromium Mojo Sandbox Escape Vulnerability	CVE-2025-2783		HIGH
2025-03-26 00:00	CVE-2019-9874 — Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability	CVE-2019-9874		CRITICAL
2025-03-26 00:00	CVE-2019-9875 — Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability	CVE-2019-9875		HIGH
2025-03-24 00:00	CVE-2025-30154 — reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability	CVE-2025-30066 CVE-2025-30154		HIGH
2025-03-19 00:00	CVE-2017-12637 — SAP NetWeaver Directory Traversal Vulnerability	CVE-2017-12637		HIGH
2025-03-19 00:00	CVE-2024-48248 — NAKIVO Backup and Replication Absolute Path Traversal Vulnerability	CVE-2024-48248		HIGH

Alle Quellen