CISA KEV CVEs with vendor advisories

Fortinet Multiple Products Path Traversal Vulnerability

Fortinet · 1 advisory

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

Atlassian · 1 advisory

Cisco Secure Email Gateway Relative Path Traversal Vulnerability

Cisco · 1 advisory

Palo Alto Networks PAN-OS Code Injection Vulnerability

Palo Alto · 1 advisory

Microsoft Windows Command Injection Vulnerability

MS Server · 1 advisory

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

Ivanti · 1 advisory

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

NetScaler · 1 advisory

Fortinet FortiMail Path Traversal Vulnerability

Fortinet · 1 advisory

Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

Cisco · 1 advisory

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

NetScaler · 2 advisories

Citrix NetScaler Improper Input Validation Vulnerability

NetScaler · 2 advisories

Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

MikroTik · 1 advisory

Microsoft SharePoint Code Injection Vulnerability

MS Server · 1 advisory

F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

F5 · 1 advisory

Check Point Multiple Products Path Traversal Vulnerability

Check Point · 1 advisory

Check Point Multiple Products Improper Certificate Validation Vulnerability

Check Point · 1 advisory

Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability

Zyxel · 1 advisory

Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

Cisco · 2 advisories

Cisco Secure Email Gateway SQL Injection Vulnerability

Cisco · 1 advisory

GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

GitLab · 1 advisory

MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

MikroTik · 1 advisory

MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

MikroTik · 1 advisory

Google Chromium V8 Out of Bounds Write Vulnerability

Palo Alto · 1 advisory

Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

Cisco · 1 advisory

Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability

NetScaler · 1 advisory

Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

Fortinet · 1 advisory

N-able N-central Static Code Injection Vulnerability

N-able · 1 advisory

Microsoft Windows Heap-Based Buffer Overflow Vulnerability

MS Server · 1 advisory

Microsoft Windows Link Following Vulnerability

MS Server · 1 advisory

Google Chromium V8 Type Confusion Vulnerability

Palo Alto · 1 advisory

SonicWall SMA1000 Appliances OS Command Injection Vulnerability

SonicWall · 2 advisories

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

SonicWall · 2 advisories

Kludex Starlette HTTP Request/Response Smuggling Vulnerability

NetApp, Red Hat · 3 advisories

Linux Kernel Unspecified Vulnerability

NetApp, Red Hat · 2 advisories

Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

NetScaler · 1 advisory

Linux Kernel Out-of-Bounds Write Vulnerability

Red Hat · 1 advisory

Microsoft SQL Server Remote Code Execution Vulnerability

MS Server · 1 advisory

MLflow Server-Side Request Forgery Vulnerability

Red Hat · 1 advisory

Broadcom VMware vCenter Path Traversal Vulnerability

VMware · 1 advisory

Microsoft SharePoint Weak Authentication Vulnerability

MS Server · 1 advisory

Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

MS Server · 1 advisory

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

MS Server · 1 advisory

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

Cisco · 1 advisory

Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

Apache, NetApp, Red Hat · 3 advisories

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

N-able · 2 advisories

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

N-able · 1 advisory

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

Cisco · 1 advisory

Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Fortinet · 1 advisory

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

MS Server · 1 advisory

Check Point SmartConsole Improper Authentication Vulnerability

Check Point · 1 advisory

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

MS Server · 1 advisory

Fortinet FortiSandbox OS Command Injection Vulnerability

Fortinet · 1 advisory

Fortinet FortiSandbox OS Command Injection Vulnerability

Fortinet · 1 advisory

Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

MS Server · 1 advisory

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

MS Server · 1 advisory

SonicWall SMA1000 Appliances Code Injection Vulnerability

SonicWall · 1 advisory

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

SonicWall · 1 advisory

Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

MS Server · 1 advisory

Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

Cisco · 1 advisory

Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

Cisco · 1 advisory

Ivanti Sentry OS Command Injection Vulnerability

Ivanti · 1 advisory

Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

Cisco · 1 advisory

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Palo Alto, Red Hat · 2 advisories

Check Point Security Gateway Improper Authentication Vulnerability

Check Point · 1 advisory

BerriAI LiteLLM Command Injection Vulnerability

Red Hat · 1 advisory

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Palo Alto · 1 advisory

Microsoft Exchange Server Cross-Site Scripting Vulnerability

MS Server · 1 advisory

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Cisco · 2 advisories

BerriAI LiteLLM SQL Injection Vulnerability

Red Hat · 1 advisory

Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

Ivanti · 1 advisory

Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

Palo Alto · 1 advisory

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Fortinet, NetApp, Red Hat · 4 advisories

Microsoft Windows Protection Mechanism Failure Vulnerability

MS Server · 1 advisory

Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Cisco · 1 advisory

Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

Cisco · 1 advisory

Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

Cisco · 1 advisory

Apache ActiveMQ Improper Input Validation Vulnerability

Apache, NetApp, Red Hat · 4 advisories

Microsoft SharePoint Server Improper Input Validation Vulnerability

MS Server · 1 advisory

Fortinet FortiClient EMS SQL Injection Vulnerability

Fortinet · 1 advisory

Microsoft Windows Link Following Vulnerability

MS Server · 1 advisory

Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

MS Server · 1 advisory

Fortinet FortiClient EMS Improper Access Control Vulnerability

Fortinet · 1 advisory

Google Dawn Use-After-Free Vulnerability

Palo Alto, Red Hat · 4 advisories

Citrix NetScaler Out-of-Bounds Read Vulnerability

NetScaler · 1 advisory

F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

F5 · 1 advisory

Apple Multiple Products Buffer Overflow Vulnerability

Red Hat · 1 advisory

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

Cisco · 1 advisory

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

MS Server · 1 advisory

Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

Red Hat · 1 advisory

Google Skia Out-of-Bounds Write Vulnerability

Red Hat · 1 advisory

Broadcom VMware Aria Operations Command Injection Vulnerability

VMware · 1 advisory

Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

Cisco · 2 advisories

GitLab Server-Side Request Forgery (SSRF) Vulnerability

GitLab · 1 advisory

Google Chromium CSS Use-After-Free Vulnerability

Red Hat · 1 advisory

Microsoft Windows Improper Privilege Management Vulnerability

MS Server · 1 advisory

Microsoft Windows NULL Pointer Dereference Vulnerability

MS Server · 1 advisory

Microsoft Windows Type Confusion Vulnerability

MS Server · 1 advisory

Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

MS Server · 1 advisory

Microsoft Windows Shell Protection Mechanism Failure Vulnerability

MS Server · 1 advisory

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Ivanti · 1 advisory

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

Fortinet · 1 advisory

Cisco Unified Communications Products Code Injection Vulnerability

Cisco · 1 advisory

Microsoft Windows Information Disclosure Vulnerability

MS Server · 1 advisory

MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

Commvault · 1 advisory

WatchGuard Firebox Out of Bounds Write Vulnerability

WatchGuard · 1 advisory

Cisco Multiple Products Improper Input Validation Vulnerability

Cisco · 1 advisory

Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

Fortinet · 2 advisories

WatchGuard Firebox Out-of-Bounds Write Vulnerability

WatchGuard · 1 advisory

Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

NetApp · 1 advisory

Grafana Path Traversal Vulnerability

Veeam · 1 advisory

Microsoft Windows Privilege Escalation Vulnerability

MS Server · 1 advisory

Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

NetApp · 1 advisory

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

Cisco · 1 advisory

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

Cisco · 1 advisory

Citrix NetScaler Memory Overflow Vulnerability

NetScaler · 1 advisory

Microsoft SharePoint Improper Authentication Vulnerability

MS Server · 1 advisory

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

MS Server · 1 advisory

Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

NetScaler · 1 advisory

Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

Fortinet · 1 advisory

FreeType Out-of-Bounds Write Vulnerability

NetApp · 1 advisory

Commvault Command Center Path Traversal Vulnerability

Commvault · 1 advisory

Commvault Web Server Unspecified Vulnerability

Commvault · 1 advisory

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

MS Server · 1 advisory

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Ivanti · 1 advisory

Apache Tomcat Path Equivalence Vulnerability

NetApp · 1 advisory

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Fortinet · 2 advisories

Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

MS Server · 1 advisory

VMware ESXi Arbitrary Write Vulnerability

VMware · 1 advisory

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

SonicWall · 1 advisory

7-Zip Mark of the Web Bypass Vulnerability

NetApp · 1 advisory

Dante Discovery Process Control Vulnerability

Check Point · 1 advisory

SonicWall SMA1000 Appliances Deserialization Vulnerability

SonicWall · 1 advisory

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Fortinet · 2 advisories

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Ivanti · 1 advisory

Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

MS Server · 1 advisory

Zyxel Multiple Firewalls Path Traversal Vulnerability

Zyxel · 1 advisory

Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

Palo Alto · 2 advisories

Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

Palo Alto · 1 advisory

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

MS Server · 1 advisory

Atlassian Jira Server and Data Center Path Traversal Vulnerability

Atlassian · 1 advisory

Veeam Backup and Replication Deserialization Vulnerability

Veeam · 1 advisory

Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

MS Server · 1 advisory

Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

Ivanti · 1 advisory

Microsoft Windows MSHTML Platform Spoofing Vulnerability

MS Server · 1 advisory

Microsoft Windows Management Console Remote Code Execution Vulnerability

MS Server · 1 advisory

Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

MS Server · 1 advisory

Microsoft Windows MSHTML Platform Spoofing Vulnerability

MS Server · 1 advisory

Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

MS Server · 1 advisory

Microsoft Windows Installer Improper Privilege Management Vulnerability

MS Server · 1 advisory

SonicWall SonicOS Improper Access Control Vulnerability

SonicWall · 1 advisory

Microsoft Exchange Server Information Disclosure Vulnerability

MS Server · 1 advisory

Check Point Quantum Security Gateways Information Disclosure Vulnerability

Check Point · 1 advisory

Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

MS Server · 1 advisory

GitLab Community and Enterprise Editions Improper Access Control Vulnerability

GitLab · 1 advisory

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

Ivanti · 1 advisory

Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

MS Server · 1 advisory

Microsoft Exchange Server Privilege Escalation Vulnerability

MS Server · 1 advisory

Cisco ASA and FTD Information Disclosure Vulnerability

Cisco · 1 advisory

Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

MS Server · 1 advisory

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

MS Server · 1 advisory

Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

Ivanti · 1 advisory

Atlassian Confluence Data Center and Server Template Injection Vulnerability

Atlassian · 1 advisory

QNAP VioStor NVR OS Command Injection Vulnerability

QNAP · 1 advisory

GNU C Library Buffer Overflow Vulnerability

NetApp, Red Hat · 2 advisories

Sophos Web Appliance Command Injection Vulnerability

Sophos · 1 advisory

Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

Atlassian · 1 advisory

Apache ActiveMQ Deserialization of Untrusted Data Vulnerability

Commvault · 1 advisory

F5 BIG-IP Configuration Utility SQL Injection Vulnerability

F5 · 1 advisory

F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability

F5 · 1 advisory

Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

Atlassian · 1 advisory

Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

Commvault · 1 advisory

Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

Cisco · 1 advisory

Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

Veeam · 1 advisory

Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

Ivanti · 1 advisory

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

NetScaler · 1 advisory

Microsoft Windows Search Remote Code Execution Vulnerability

MS Server · 1 advisory

Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability

Fortinet · 1 advisory

Apache Log4j2 Deserialization of Untrusted Data Vulnerability

Commvault · 1 advisory

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

MS Server · 1 advisory

Microsoft Windows Graphic Component Privilege Escalation Vulnerability

MS Server · 1 advisory

Microsoft Exchange Server Privilege Escalation Vulnerability

MS Server · 1 advisory

Veeam Backup & Replication Remote Code Execution Vulnerability

Veeam · 1 advisory

Veeam Backup & Replication Remote Code Execution Vulnerability

Veeam · 1 advisory

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

MS Server · 1 advisory

Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

MS Server · 1 advisory

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

MS Server · 1 advisory

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

MS Server · 1 advisory

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

MS Server · 1 advisory

Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

Cisco · 1 advisory

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

Cisco · 1 advisory

Fortinet Multiple Products Authentication Bypass Vulnerability

Fortinet · 1 advisory

Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

Atlassian · 1 advisory

Sophos Firewall Code Injection Vulnerability

Sophos · 1 advisory

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

MS Server · 1 advisory

QNAP Photo Station Externally Controlled Reference Vulnerability

QNAP · 1 advisory

Fortinet FortiOS and FortiADC Improper Access Control Vulnerability

Fortinet · 1 advisory

Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability

Atlassian · 1 advisory

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

Commvault, Red Hat · 2 advisories

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

MS Server · 1 advisory

QNAP Photo Station Path Traversal Vulnerability

QNAP · 1 advisory