Full CISA KEV catalog

Every CVE the U.S. cybersecurity agency has ever flagged as actively exploited. Filter by category, sort by severity or exploit-likelihood, search by vendor or product.

Showing 571–600 of 1,619 CVEs · Page 20 of 54 30 per page

Added	CVE	Vendor / Product	Name & description	CVSS	EPSS
Dec 7, 2023	CVE-2023-41266 Ransomware	Qlik Sense	Qlik Sense Path Traversal Vulnerability Qlik Sense contains a path traversal vulnerability that allows a remote, unauthenticated attacker to create an anonymous session by sending maliciously crafted HTTP requests. This…	—	94.2%
Dec 5, 2023	CVE-2022-22071	Qualcomm Multiple Chipsets	Qualcomm Multiple Chipsets Use-After-Free Vulnerability Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress.	—	0.6%
Dec 5, 2023	CVE-2023-33063	Qualcomm Multiple Chipsets	Qualcomm Multiple Chipsets Use-After-Free Vulnerability Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP.	—	0.4%
Dec 5, 2023	CVE-2023-33106	Qualcomm Multiple Chipsets	Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX c…	—	0.2%
Dec 5, 2023	CVE-2023-33107	Qualcomm Multiple Chipsets	Qualcomm Multiple Chipsets Integer Overflow Vulnerability Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.	—	0.4%
Dec 4, 2023	CVE-2023-42916	Apple Multiple Products browser endpoint mobile smb essential	Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. Th…	—	0.1%
Dec 4, 2023	CVE-2023-42917	Apple Multiple Products browser endpoint mobile smb essential	Apple Multiple Products WebKit Memory Corruption Vulnerability Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerabil…	—	0.1%
Nov 30, 2023	CVE-2023-49103	ownCloud ownCloud graphapi	ownCloud graphapi Information Disclosure Vulnerability ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, including administrative credentials.	—	94.3%
Nov 30, 2023	CVE-2023-6345	Google Chromium Skia browser smb essential	Google Skia Integer Overflow Vulnerability Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape vi…	—	1.3%
Nov 21, 2023	CVE-2023-4911	GNU GNU C Library	GNU C Library Buffer Overflow Vulnerability GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code wi…	—	65.1%
Nov 16, 2023	CVE-2020-2551	Oracle Fusion Middleware database enterprise	Oracle Fusion Middleware Unspecified Vulnerability Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the We…	—	94.4%
Nov 16, 2023	CVE-2023-1671	Sophos Web Appliance endpoint network	Sophos Web Appliance Command Injection Vulnerability Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution.	—	94.3%
Nov 16, 2023	CVE-2023-36584	Microsoft Windows endpoint m365 smb essential	Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.	—	15.4%
Nov 14, 2023	CVE-2023-36025	Microsoft Windows endpoint m365 smb essential	Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prom…	—	90.2%
Nov 14, 2023	CVE-2023-36033	Microsoft Windows endpoint m365 smb essential	Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.	—	0.9%
Nov 14, 2023	CVE-2023-36036	Microsoft Windows endpoint m365 smb essential	Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an attacker to gain SYSTEM privileges.	—	1.8%
Nov 13, 2023	CVE-2023-36844	Juniper Junos OS network	Juniper Junos OS EX Series PHP External Variable Modification Vulnerability Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control certain, important envi…	—	94.2%
Nov 13, 2023	CVE-2023-36845	Juniper Junos OS network	Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an impor…	—	94.4%
Nov 13, 2023	CVE-2023-36846	Juniper Junos OS network	Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact…	—	94.3%
Nov 13, 2023	CVE-2023-36847	Juniper Junos OS network	Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact …	—	93.9%
Nov 13, 2023	CVE-2023-36851	Juniper Junos OS network	Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact…	—	14.9%
Nov 13, 2023	CVE-2023-47246 Ransomware	SysAid SysAid Server	SysAid Server Path Traversal Vulnerability SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execution.	—	94.4%
Nov 8, 2023	CVE-2023-29552	IETF Service Location Protocol (SLP)	Service Location Protocol (SLP) Denial-of-Service Vulnerability The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP …	—	92.1%
Nov 7, 2023	CVE-2023-22518 Ransomware	Atlassian Confluence Data Center and Server enterprise smb essential	Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker.…	—	94.4%
Nov 2, 2023	CVE-2023-46604 Ransomware	Apache ActiveMQ web server	Apache ActiveMQ Deserialization of Untrusted Data Vulnerability Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating s…	—	94.4%
Oct 31, 2023	CVE-2023-46747 Ransomware	F5 BIG-IP Configuration Utility network vpn remote	F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated at…	—	94.4%
Oct 31, 2023	CVE-2023-46748	F5 BIG-IP Configuration Utility network vpn remote	F5 BIG-IP Configuration Utility SQL Injection Vulnerability F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access through the BIG-IP management port and/or self…	—	4.3%
Oct 26, 2023	CVE-2023-5631	Roundcube Webmail	Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code.	—	83.2%
Oct 23, 2023	CVE-2023-20273	Cisco Cisco IOS XE Web UI mobile network	Cisco IOS XE Web UI Command Injection Vulnerability Cisco IOS XE contains a command injection vulnerability in the web user interface. When chained with CVE-2023-20198, the attacker can leverage the new local user to elevate privil…	—	92.6%
Oct 18, 2023	CVE-2023-4966 Ransomware	Citrix NetScaler ADC and NetScaler Gateway enterprise vpn remote	Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual serve…	—	94.3%

Source: CISA KEV catalog. Severity (CVSS) and exploit-probability (EPSS) sync nightly from NVD and FIRST.