CISA – Known Exploited Vulnerabilities (KEV)

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 14:14 UTC 2026-10-21 14:14 UTC 0 - W/"ea28426db6e3daf822f8973000a8a7e18220e986453336acb8f1520560aa59aa" -

Letzte Eintraege

1755 Eintraege · 50 pro Seite · Seite 10 von 36

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2025-03-19 00:00

CVE-2025-1316 — Edimax IC-7100 IP Camera OS Command Injection Vulnerability

CVE-2025-1316

CRITICAL
2025-03-18 00:00

CVE-2025-24472 — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

CVE-2025-24472

HIGH
2025-03-18 00:00

CVE-2025-30066 — tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability

CVE-2025-30066

HIGH
2025-03-13 00:00

CVE-2025-21590 — Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability

CVE-2025-21590

MEDIUM
2025-03-13 00:00

CVE-2025-24201 — Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

CVE-2025-24201

CRITICAL
2025-03-11 00:00

CVE-2025-24985 — Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

CVE-2025-24985

HIGH
2025-03-11 00:00

CVE-2025-24991 — Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability

CVE-2025-24991

MEDIUM
2025-03-11 00:00

CVE-2025-24984 — Microsoft Windows NTFS Information Disclosure Vulnerability

CVE-2025-24984

MEDIUM
2025-03-11 00:00

CVE-2025-24993 — Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

CVE-2025-24993

HIGH
2025-03-11 00:00

CVE-2025-26633 — Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

CVE-2025-26633

HIGH
2025-03-11 00:00

CVE-2025-24983 — Microsoft Windows Win32k Use-After-Free Vulnerability

CVE-2025-24983

HIGH
2025-03-10 00:00

CVE-2024-13161 — Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

CVE-2024-13161

CRITICAL
2025-03-10 00:00

CVE-2024-13159 — Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

CVE-2024-13159

CRITICAL
2025-03-10 00:00

CVE-2024-13160 — Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

CVE-2024-13160

CRITICAL
2025-03-10 00:00

CVE-2024-57968 — Advantive VeraCore Unrestricted File Upload Vulnerability

CVE-2024-57968

CRITICAL
2025-03-10 00:00

CVE-2025-25181 — Advantive VeraCore SQL Injection Vulnerability

CVE-2025-25181

MEDIUM
2025-03-04 00:00

CVE-2024-50302 — Linux Kernel Use of Uninitialized Resource Vulnerability

CVE-2024-50302

MEDIUM
2025-03-04 00:00

CVE-2025-22224 — VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

CVE-2025-22224

CRITICAL
2025-03-04 00:00

CVE-2025-22225 — VMware ESXi Arbitrary Write Vulnerability

CVE-2025-22225

HIGH
2025-03-04 00:00

CVE-2025-22226 — VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

CVE-2025-22226

HIGH
2025-03-03 00:00

CVE-2024-4885 — Progress WhatsUp Gold Path Traversal Vulnerability

CVE-2024-4885

CRITICAL
2025-03-03 00:00

CVE-2023-20118 — Cisco Small Business RV Series Routers Command Injection Vulnerability

CVE-2023-20118

MEDIUM
2025-03-03 00:00

CVE-2022-43939 — Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

CVE-2022-43939

HIGH
2025-03-03 00:00

CVE-2022-43769 — Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

CVE-2022-43769

HIGH
2025-03-03 00:00

CVE-2018-8639 — Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

CVE-2018-8639

HIGH
2025-02-25 00:00

CVE-2023-34192 — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CVE-2023-34192

CRITICAL
2025-02-25 00:00

CVE-2024-49035 — Microsoft Partner Center Improper Access Control Vulnerability

CVE-2024-49035

HIGH
2025-02-24 00:00

CVE-2017-3066 — Adobe ColdFusion Deserialization Vulnerability

CVE-2017-3066

CRITICAL
2025-02-24 00:00

CVE-2024-20953 — Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

CVE-2024-20953

HIGH
2025-02-21 00:00

CVE-2025-24989 — Microsoft Power Pages Improper Access Control Vulnerability

CVE-2025-24989

HIGH
2025-02-20 00:00

CVE-2025-0111 — Palo Alto Networks PAN-OS File Read Vulnerability

CVE-2025-0111

HIGH
2025-02-20 00:00

CVE-2025-23209 — Craft CMS Code Injection Vulnerability

CVE-2025-23209

HIGH
2025-02-18 00:00

CVE-2025-0108 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

CVE-2025-0108

HIGH
2025-02-18 00:00

CVE-2024-53704 — SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

CVE-2024-53704

0.99868 HIGH
2025-02-13 00:00

CVE-2024-57727 — SimpleHelp Path Traversal Vulnerability

CVE-2024-57727

CRITICAL
2025-02-12 00:00

CVE-2024-41710 — Mitel SIP Phones Argument Injection Vulnerability

CVE-2024-41710

MEDIUM
2025-02-12 00:00

CVE-2025-24200 — Apple iOS and iPadOS Incorrect Authorization Vulnerability

CVE-2025-24200

MEDIUM
2025-02-11 00:00

CVE-2024-40891 — Zyxel DSL CPE OS Command Injection Vulnerability

CVE-2024-40891

HIGH
2025-02-11 00:00

CVE-2025-21391 — Microsoft Windows Storage Link Following Vulnerability

CVE-2025-21391

HIGH
2025-02-11 00:00

CVE-2024-40890 — Zyxel DSL CPE OS Command Injection Vulnerability

CVE-2024-40890

HIGH
2025-02-11 00:00

CVE-2025-21418 — Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

CVE-2025-21418

HIGH
2025-02-07 00:00

CVE-2025-0994 — Trimble Cityworks Deserialization Vulnerability

CVE-2025-0994

HIGH
2025-02-06 00:00

CVE-2022-23748 — Dante Discovery Process Control Vulnerability

CVE-2022-23748

HIGH
2025-02-06 00:00

CVE-2020-29574 — CyberoamOS (CROS) SQL Injection Vulnerability

CVE-2020-29574

CRITICAL
2025-02-06 00:00

CVE-2020-15069 — Sophos XG Firewall Buffer Overflow Vulnerability

CVE-2020-15069

CRITICAL
2025-02-06 00:00

CVE-2024-21413 — Microsoft Outlook Improper Input Validation Vulnerability

CVE-2024-21413

CRITICAL
2025-02-06 00:00

CVE-2025-0411 — 7-Zip Mark of the Web Bypass Vulnerability

CVE-2025-0411

HIGH
2025-02-05 00:00

CVE-2024-53104 — Linux Kernel Out-of-Bounds Write Vulnerability

CVE-2024-53104

HIGH
2025-02-04 00:00

CVE-2024-29059 — Microsoft .NET Framework Information Disclosure Vulnerability

CVE-2024-29059

HIGH
2025-02-04 00:00

CVE-2018-9276 — Paessler PRTG Network Monitor OS Command Injection Vulnerability

CVE-2018-9276

HIGH