CISA KEV Catalog

An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key

An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1,

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 1

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.

VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this is

Memory corruption while using alignments for memory allocation.

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privil

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalys

FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user

Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the

Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the ani

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab af

Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. Thi

Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in

Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enab

ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with

Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside

BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-auth

Microsoft Configuration Manager Remote Code Execution Vulnerability

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3,

Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a networ

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a net

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service loc

The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default

SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in

Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions start

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions 17.0.2.36 and abov

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead

A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnaly

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with a

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any lo

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password res

Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a secu

vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor wi

A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy

eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Inst

Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Manag

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to d