CISA – Known Exploited Vulnerabilities (KEV)

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 13:02 UTC 2026-10-21 13:02 UTC 0 - W/"ea28426db6e3daf822f8973000a8a7e18220e986453336acb8f1520560aa59aa" -

Letzte Eintraege

1755 Eintraege · 50 pro Seite · Seite 14 von 36

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2024-05-13 00:00

CVE-2024-4671 — Google Chromium Visuals Use-After-Free Vulnerability

CVE-2024-4671

CRITICAL
2024-05-01 00:00

CVE-2023-7028 — GitLab Community and Enterprise Editions Improper Access Control Vulnerability

CVE-2023-7028

CRITICAL
2024-04-30 00:00

CVE-2024-29988 — Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

CVE-2023-38831
CVE-2024-21412
CVE-2024-29988

HIGH
2024-04-24 00:00

CVE-2024-20353 — Cisco ASA and FTD Denial of Service Vulnerability

CVE-2024-20353

HIGH
2024-04-24 00:00

CVE-2024-4040 — CrushFTP VFS Sandbox Escape Vulnerability

CVE-2024-4040

0.99942 CRITICAL
2024-04-24 00:00

CVE-2024-20359 — Cisco ASA and FTD Privilege Escalation Vulnerability

CVE-2024-20359

MEDIUM
2024-04-23 00:00

CVE-2022-38028 — Microsoft Windows Print Spooler Privilege Escalation Vulnerability

CVE-2022-38028

HIGH
2024-04-12 00:00

CVE-2024-3400 — Palo Alto Networks PAN-OS Command Injection Vulnerability

CVE-2024-3400

0.99948 CRITICAL
2024-04-11 00:00

CVE-2024-3272 — D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability

CVE-2024-3272

CRITICAL
2024-04-11 00:00

CVE-2024-3273 — D-Link Multiple NAS Devices Command Injection Vulnerability

CVE-2024-3272
CVE-2024-3273

CRITICAL
2024-04-04 00:00

CVE-2024-29748 — Android Pixel Privilege Escalation Vulnerability

CVE-2024-29748

HIGH
2024-04-04 00:00

CVE-2024-29745 — Android Pixel Information Disclosure Vulnerability

CVE-2024-29745

MEDIUM
2024-03-26 00:00

CVE-2023-24955 — Microsoft SharePoint Server Code Injection Vulnerability

CVE-2023-24955

HIGH
2024-03-25 00:00

CVE-2019-7256 — Nice Linear eMerge E3-Series OS Command Injection Vulnerability

CVE-2019-7256

CRITICAL
2024-03-25 00:00

CVE-2021-44529 — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

CVE-2021-44529

CRITICAL
2024-03-25 00:00

CVE-2023-48788 — Fortinet FortiClient EMS SQL Injection Vulnerability

CVE-2023-48788

CRITICAL
2024-03-07 00:00

CVE-2024-27198 — JetBrains TeamCity Authentication Bypass Vulnerability

CVE-2024-27198
CVE-2024-27199

CRITICAL
2024-03-06 00:00

CVE-2024-23225 — Apple Multiple Products Memory Corruption Vulnerability

CVE-2024-23225

HIGH
2024-03-06 00:00

CVE-2024-23296 — Apple Multiple Products Memory Corruption Vulnerability

CVE-2024-23296

HIGH
2024-03-05 00:00

CVE-2023-21237 — Android Pixel Information Disclosure Vulnerability

CVE-2023-21237

MEDIUM
2024-03-05 00:00

CVE-2021-36380 — Sunhillo SureLine OS Command Injection Vulnerablity

CVE-2021-36380

CRITICAL
2024-03-04 00:00

CVE-2024-21338 — Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

CVE-2024-21338

HIGH
2024-02-29 00:00

CVE-2023-29360 — Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability

CVE-2023-29360

HIGH
2024-02-22 00:00

CVE-2024-1709 — ConnectWise ScreenConnect Authentication Bypass Vulnerability

CVE-2024-1709

CRITICAL
2024-02-15 00:00

CVE-2020-3259 — Cisco ASA and FTD Information Disclosure Vulnerability

CVE-2020-3259

HIGH
2024-02-15 00:00

CVE-2024-21410 — Microsoft Exchange Server Privilege Escalation Vulnerability

CVE-2024-21410

CRITICAL
2024-02-13 00:00

CVE-2024-21412 — Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

CVE-2024-21412

HIGH
2024-02-13 00:00

CVE-2024-21351 — Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2024-21351

HIGH
2024-02-12 00:00

CVE-2023-43770 — Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

CVE-2023-43770

MEDIUM
2024-02-09 00:00

CVE-2024-21762 — Fortinet FortiOS Out-of-Bound Write Vulnerability

CVE-2024-21762

CRITICAL
2024-02-06 00:00

CVE-2023-4762 — Google Chromium V8 Type Confusion Vulnerability

CVE-2023-4762

HIGH
2024-01-31 00:00

CVE-2024-21893 — Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

CVE-2023-46805
CVE-2024-21887
CVE-2024-21893

CRITICAL
2024-01-31 00:00

CVE-2022-48618 — Apple Multiple Products Memory Corruption Vulnerability

CVE-2022-48618

HIGH
2024-01-24 00:00

CVE-2023-22527 — Atlassian Confluence Data Center and Server Template Injection Vulnerability

CVE-2023-22527

CRITICAL
2024-01-23 00:00

CVE-2024-23222 — Apple Multiple Products WebKit Type Confusion Vulnerability

CVE-2024-23222

HIGH
2024-01-22 00:00

CVE-2023-34048 — VMware vCenter Server Out-of-Bounds Write Vulnerability

CVE-2023-34048

CRITICAL
2024-01-18 00:00

CVE-2023-35082 — Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability

CVE-2023-35082

CRITICAL
2024-01-17 00:00

CVE-2023-6548 — Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

CVE-2023-6548

MEDIUM
2024-01-17 00:00

CVE-2024-0519 — Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

CVE-2024-0519

HIGH
2024-01-17 00:00

CVE-2023-6549 — Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

CVE-2023-6549

HIGH
2024-01-16 00:00

CVE-2018-15133 — Laravel Deserialization of Untrusted Data Vulnerability

CVE-2018-15133

HIGH
2024-01-10 00:00

CVE-2024-21887 — Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

CVE-2023-46805
CVE-2024-21887

CRITICAL
2024-01-10 00:00

CVE-2023-29357 — Microsoft SharePoint Server Privilege Escalation Vulnerability

CVE-2023-29357

CRITICAL
2024-01-10 00:00

CVE-2023-46805 — Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

CVE-2023-46805
CVE-2024-21887

CRITICAL
2024-01-08 00:00

CVE-2023-27524 — Apache Superset Insecure Default Initialization of Resource Vulnerability

CVE-2023-27524

HIGH
2024-01-08 00:00

CVE-2023-38203 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CVE-2023-38203

CRITICAL
2024-01-08 00:00

CVE-2016-20017 — D-Link DSL-2750B Devices Command Injection Vulnerability

CVE-2016-20017

CRITICAL
2024-01-08 00:00

CVE-2023-23752 — Joomla! Improper Access Control Vulnerability

CVE-2023-23752

MEDIUM
2024-01-08 00:00

CVE-2023-41990 — Apple Multiple Products Code Execution Vulnerability

CVE-2023-41990

HIGH
2024-01-08 00:00

CVE-2023-29300 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CVE-2023-29300

CRITICAL