CISA KEV Catalog

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenti

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in p

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate p

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, r

On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LA

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker t

Microsoft Defender Denial of Service Vulnerability

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vul

A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive info

A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite a

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a netw

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7

loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab af

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service loc

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions start

Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to d

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance manageme

In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisio

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptograph

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site scripting (XSS) vulnera

Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a

Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Softwar

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows ne

Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Bu

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a networ

The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heap

The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacke

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affe

This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPad

Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed an

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in

An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail messag

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to a

Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to

An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local at

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information

A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to ex

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since

A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320

An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker wit