CISA – Known Exploited Vulnerabilities (KEV)

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 14:14 UTC 2026-10-21 14:14 UTC 0 - W/"ea28426db6e3daf822f8973000a8a7e18220e986453336acb8f1520560aa59aa" -

Letzte Eintraege

1755 Eintraege · 50 pro Seite · Seite 11 von 36

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2025-02-04 00:00

CVE-2018-19410 — Paessler PRTG Network Monitor Local File Inclusion Vulnerability

CVE-2018-19410

CRITICAL
2025-02-04 00:00

CVE-2024-45195 — Apache OFBiz Forced Browsing Vulnerability

CVE-2024-45195

CRITICAL
2025-01-29 00:00

CVE-2025-24085 — Apple Multiple Products Use-After-Free Vulnerability

CVE-2025-24085

CRITICAL
2025-01-24 00:00

CVE-2025-23006 — SonicWall SMA1000 Appliances Deserialization Vulnerability

CVE-2025-23006

0.97776 CRITICAL
2025-01-23 00:00

CVE-2020-11023 — JQuery Cross-Site Scripting (XSS) Vulnerability

CVE-2020-11023

MEDIUM
2025-01-16 00:00

CVE-2024-50603 — Aviatrix Controllers OS Command Injection Vulnerability

CVE-2024-50603

CRITICAL
2025-01-14 00:00

CVE-2024-55591 — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

CVE-2024-55591

0.99849 CRITICAL
2025-01-14 00:00

CVE-2025-21335 — Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CVE-2025-21335

HIGH
2025-01-14 00:00

CVE-2025-21334 — Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CVE-2025-21334

HIGH
2025-01-14 00:00

CVE-2025-21333 — Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

CVE-2025-21333

HIGH
2025-01-13 00:00

CVE-2024-12686 — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

CVE-2024-12686

MEDIUM
2025-01-13 00:00

CVE-2023-48365 — Qlik Sense HTTP Tunneling Vulnerability

CVE-2023-48365

CRITICAL
2025-01-08 00:00

CVE-2025-0282 — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CVE-2025-0282
CVE-2025-0283

0.99981 CRITICAL
2025-01-07 00:00

CVE-2024-55550 — Mitel MiCollab Path Traversal Vulnerability

CVE-2024-41713
CVE-2024-55550

CRITICAL
2025-01-07 00:00

CVE-2020-2883 — Oracle WebLogic Server Unspecified Vulnerability

CVE-2020-2883

CRITICAL
2025-01-07 00:00

CVE-2024-41713 — Mitel MiCollab Path Traversal Vulnerability

CVE-2024-41713
CVE-2024-55550

CRITICAL
2024-12-30 00:00

CVE-2024-3393 — Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

CVE-2024-3393

HIGH
2024-12-23 00:00

CVE-2021-44207 — Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2021-44207

HIGH
2024-12-19 00:00

CVE-2024-12356 — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2024-12356

CRITICAL
2024-12-18 00:00

CVE-2019-11001 — Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2019-11001

HIGH
2024-12-18 00:00

CVE-2022-23227 — NUUO NVRmini2 Devices Missing Authentication Vulnerability

CVE-2022-23227

CRITICAL
2024-12-18 00:00

CVE-2021-40407 — Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2021-40407

CRITICAL
2024-12-18 00:00

CVE-2018-14933 — NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2018-14933

CRITICAL
2024-12-17 00:00

CVE-2024-55956 — Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-55956

CRITICAL
2024-12-16 00:00

CVE-2024-20767 — Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-20767

HIGH
2024-12-16 00:00

CVE-2024-35250 — Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-35250

HIGH
2024-12-13 00:00

CVE-2024-50623 — Cleo Multiple Products Unrestricted File Upload Vulnerability

CVE-2024-50623

CRITICAL
2024-12-10 00:00

CVE-2024-49138 — Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

CVE-2024-49138

HIGH
2024-12-04 00:00

CVE-2024-51378 — CyberPanel Incorrect Default Permissions Vulnerability

CVE-2024-51378

CRITICAL
2024-12-03 00:00

CVE-2023-45727 — North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability

CVE-2023-45727

HIGH
2024-12-03 00:00

CVE-2024-11680 — ProjectSend Improper Authentication Vulnerability

CVE-2024-11680

CRITICAL
2024-12-03 00:00

CVE-2024-11667 — Zyxel Multiple Firewalls Path Traversal Vulnerability

CVE-2024-11667

HIGH
2024-11-25 00:00

CVE-2023-28461 — Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

CVE-2023-28461

CRITICAL
2024-11-21 00:00

CVE-2024-44308 — Apple Multiple Products Code Execution Vulnerability

CVE-2024-44308

HIGH
2024-11-21 00:00

CVE-2024-44309 — Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

CVE-2024-44309

MEDIUM
2024-11-21 00:00

CVE-2024-21287 — Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

CVE-2024-21287

HIGH
2024-11-20 00:00

CVE-2024-38813 — VMware vCenter Server Privilege Escalation Vulnerability

CVE-2024-38813

HIGH
2024-11-20 00:00

CVE-2024-38812 — VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CVE-2024-38812

CRITICAL
2024-11-18 00:00

CVE-2024-0012 — Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

CVE-2024-0012

0.99952 CRITICAL
2024-11-18 00:00

CVE-2024-9474 — Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

CVE-2024-9474

0.99855 MEDIUM
2024-11-18 00:00

CVE-2024-1212 — Progress Kemp LoadMaster OS Command Injection Vulnerability

CVE-2024-1212

CRITICAL
2024-11-14 00:00

CVE-2024-9465 — Palo Alto Networks Expedition SQL Injection Vulnerability

CVE-2024-9465

CRITICAL
2024-11-14 00:00

CVE-2024-9463 — Palo Alto Networks Expedition OS Command Injection Vulnerability

CVE-2024-9463

CRITICAL
2024-11-12 00:00

CVE-2024-49039 — Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

CVE-2024-49039

HIGH
2024-11-12 00:00

CVE-2024-43451 — Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

CVE-2024-43451

MEDIUM
2024-11-12 00:00

CVE-2021-41277 — Metabase GeoJSON API Local File Inclusion Vulnerability

CVE-2021-41277

CRITICAL
2024-11-12 00:00

CVE-2014-2120 — Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

CVE-2014-2120

MEDIUM
2024-11-12 00:00

CVE-2021-26086 — Atlassian Jira Server and Data Center Path Traversal Vulnerability

CVE-2021-26086

MEDIUM
2024-11-07 00:00

CVE-2024-5910 — Palo Alto Networks Expedition Missing Authentication Vulnerability

CVE-2024-5910

CRITICAL
2024-11-07 00:00

CVE-2019-16278 — Nostromo nhttpd Directory Traversal Vulnerability

CVE-2019-16278

CRITICAL