Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 30, 12:31 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2024-9474
Ransomware
PA
PAN-OS
Palo Alto Networks
7.2Nov 18Dec 9PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
CVE-2024-9465EX
Expedition
Palo Alto Networks
9.1Nov 14Dec 5Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
CVE-2024-9463EX
Expedition
Palo Alto Networks
7.5Nov 14Dec 5Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
CVE-2024-49039
Ransomware
WI
Windows
Microsoft
8.8Nov 12Dec 3Windows Task Scheduler Elevation of Privilege Vulnerability
CVE-2021-41277ME
metabase
metabase
7.5Nov 12Dec 3GeoJSON URL validation can expose server files and environment variables to unauthorized users
CVE-2024-43451WI
Windows
Microsoft
6.5Nov 12Dec 3NTLM Hash Disclosure Spoofing Vulnerability
CVE-2014-2120AS
Adaptive Security Appliance Software
Cisco
6.1Nov 12Dec 3Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
CVE-2021-26086JI
Jira
Atlassian
5.3Nov 12Dec 3Atlassian Jira Server and Data Center Path Traversal Vulnerability
CVE-2019-16278NN
Nostromo Nhttpd
Nazgul
9.8Nov 7Nov 28Nostromo nhttpd Directory Traversal Vulnerability
CVE-2024-5910EX
Expedition
Palo Alto Networks
9.8Nov 7Nov 28Expedition: Missing Authentication Leads to Admin Account Takeover
CVE-2024-51567
Ransomware
CY
Cyberpanel
Cyberpanel
9.8Nov 7Nov 28CyberPanel Incorrect Default Permissions Vulnerability
CVE-2024-43093AN
Android
Google
7.3Nov 7Nov 28Android Framework Privilege Escalation Vulnerability
CVE-2024-8956PT
PT30X-NDI
PTZOptics
9.1Nov 4Nov 25PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication
CVE-2024-8957PT
PT30X-NDI
PTZOptics
7.2Nov 4Nov 25PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration
CVE-2024-37383DL
Debian Linux
Debian
6.1Oct 24Nov 14RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability
CVE-2024-20481CA
Cisco Adaptive Security Appliance (ASA) Software
Cisco
5.8Oct 24Nov 14Cisco ASA and FTD Denial-of-Service Vulnerability
CVE-2024-47575FO
FortiManager
Fortinet
9.8Oct 23Nov 13Fortinet FortiManager Missing Authentication Vulnerability
CVE-2024-38094
Ransomware
SH
SharePoint
Microsoft
7.2Oct 22Nov 12Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2024-9537SL
SL1
ScienceLogic
9.8Oct 21Nov 11ScienceLogic SL1 unspecified vulnerability
CVE-2024-40711
Ransomware
BR
Backup & Replication
Veeam
9.8Oct 17Nov 7Veeam Backup and Replication Deserialization Vulnerability
CVE-2024-9680
Ransomware
FI
Firefox
Mozilla
9.8Oct 15Nov 5Mozilla Firefox Use-After-Free Vulnerability
CVE-2024-28987WH
Web Help Desk
SolarWinds
9.1Oct 15Nov 5SolarWinds Web Help Desk Hardcoded Credential Vulnerability
CVE-2024-30088
Ransomware
WI
Windows
Microsoft
7.0Oct 15Nov 5Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-23113FO
FortiOS
Fortinet
9.8Oct 9Oct 30Fortinet Multiple Products Format String Vulnerability
CVE-2024-9380CC
CSA (Cloud Services Appliance)
Ivanti
7.2Oct 9Oct 30Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
CVE-2024-9379CC
CSA (Cloud Services Appliance)
Ivanti
7.2Oct 9Oct 30Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
CVE-2024-43573WI
Windows
Microsoft
8.1Oct 8Oct 29Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-43047SN
Snapdragon
Qualcomm, Inc.
7.8Oct 8Oct 29Use After Free in DSP Service
CVE-2024-43572WI
Windows
Microsoft
7.8Oct 8Oct 29Microsoft Management Console Remote Code Execution Vulnerability
CVE-2024-45519ZC
Zimbra Collaboration Suite
Synacor
9.8Oct 3Oct 24Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
CVE-2024-29824EP
EPM
Ivanti
8.8Oct 2Oct 23Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
CVE-2020-15415VF
Vigor2960 Firmware
Draytek
9.8Sep 30Oct 21DrayTek Multiple Vigor Routers OS Command Injection Vulnerability
CVE-2019-0344SC
SAP Commerce Cloud (virtualjdbc extension)
SAP SE
9.8Sep 30Oct 21SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
CVE-2023-25280DF
Dir-820l Firmware
Dlink
9.8Sep 30Oct 21D-Link DIR-820 Router OS Command Injection Vulnerability
CVE-2024-7593VT
vTM
Ivanti
9.8Sep 24Oct 15Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
CVE-2024-8963CC
CSA (Cloud Services Appliance)
Ivanti
9.1Sep 19Oct 10Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
CVE-2022-21445AD
Application Development Framework (ADF)
Oracle Corporation
9.8Sep 18Oct 9Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
CVE-2020-14644WS
WebLogic Server
Oracle
9.8Sep 18Oct 9Oracle WebLogic Server Remote Code Execution Vulnerability
CVE-2024-27348AH
Apache HugeGraph-Server
Apache Software Foundation
9.8Sep 18Oct 9Apache HugeGraph-Server: Command execution in gremlin
CVE-2020-0618
Ransomware
MS
Microsoft SQL Server
Microsoft
8.8Sep 18Oct 9Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
CVE-2014-0497CH
Chrome
Google
9.8Sep 17Oct 8Adobe Flash Player Integer Underflow Vulnerablity
CVE-2013-0643FP
Flash Player
Adobe
8.8Sep 17Oct 8Adobe Flash Player Incorrect Default Permissions Vulnerability
CVE-2013-0648FP
Flash Player
Adobe
8.8Sep 17Oct 8Adobe Flash Player Code Execution Vulnerability
CVE-2014-0502AA
Adobe Air
Adobe
8.8Sep 17Oct 8Adobe Flash Player Double Free Vulnerablity
CVE-2024-6670
Ransomware
WG
WhatsUp Gold
Progress
9.8Sep 16Oct 7WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability
CVE-2024-43461WI
Windows
Microsoft
8.8Sep 16Oct 7Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-8190CC
CSA (Cloud Services Appliance)
Ivanti
7.2Sep 13Oct 4Ivanti Cloud Services Appliance OS Command Injection Vulnerability
CVE-2024-38014WI
Windows
Microsoft
7.8Sep 10Oct 1Windows Installer Elevation of Privilege Vulnerability
CVE-2024-38226MO
Microsoft Office 2019
Microsoft
7.3Sep 10Oct 1Microsoft Publisher Security Feature Bypass Vulnerability
CVE-2024-38217WI
Windows
Microsoft
5.4Sep 10Oct 1Windows Mark of the Web Security Feature Bypass Vulnerability
Page 12 of 36 · 1,765 total
1…111213…36