Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
Includes advisories where the vendor will not fix the issue or the product is end of life, and vulnerabilities for which we have not recorded a fix. For the latter the vendor may already have one, so check the vendor's advisory.
On 2024-09-09, CISA added CVE-2017-1000253 (Linux Kernel) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2024-08-21, CISA added CVE-2021-31196 (Microsoft Exchange Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-08-19, CISA added CVE-2024-23897 (Jenkins Jenkins Command Line Interface (CLI)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-07-30, CISA added CVE-2024-37085 (VMware ESXi) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-07-17, CISA added CVE-2022-22948 (VMware vCenter Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-07-09, CISA added CVE-2024-23692 (Rejetto HTTP File Server) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2024-07-02, CISA added CVE-2024-20399 (Cisco NX-OS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-06-13, CISA added CVE-2024-4358 (Progress Telerik Report Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-06-13, CISA added CVE-2024-26169 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2024-05-30, CISA added CVE-2024-24919 (Check Point Quantum Security Gateways) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-05-30, CISA added CVE-2024-1086 (Linux Kernel) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-05-20, CISA added CVE-2023-43208 (NextGen Healthcare Mirth Connect) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-05-14, CISA added CVE-2024-30051 (Microsoft DWM Core Library) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2024-05-01, CISA added CVE-2023-7028 (GitLab GitLab CE/EE) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-04-24, CISA added CVE-2024-20359 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-04-24, CISA added CVE-2024-20353 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)) to its Known Exploited Vulnerabilities (KEV) catalog .
In April 2024, Palo Alto Networks disclosed CVE-2024-3400, a command injection vulnerability in PAN-OS GlobalProtect .
On 2024-03-26, CISA added CVE-2023-24955 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-03-25, CISA added CVE-2023-48788 (Fortinet FortiClient EMS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-03-25, CISA added CVE-2021-44529 (Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA)) to its Known Exploited Vulnerabilities (KEV) catalog .