Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
Includes advisories where the vendor will not fix the issue or the product is end of life, and vulnerabilities for which we have not recorded a fix. For the latter the vendor may already have one, so check the vendor's advisory.
On 2024-03-04, CISA added CVE-2024-21338 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-02-15, CISA added CVE-2024-21410 (Microsoft Exchange Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-02-15, CISA added CVE-2020-3259 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-02-13, CISA added CVE-2024-21412 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2024-01-31, CISA added CVE-2024-21893 (Ivanti Connect Secure, Policy Secure, and Neurons) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-01-24, CISA added CVE-2023-22527 (Atlassian Confluence Data Center and Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-01-22, CISA added CVE-2023-34048 (VMware vCenter Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-01-18, CISA added CVE-2023-35082 (Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-01-17, CISA added CVE-2023-6549 (Citrix NetScaler ADC and NetScaler Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-01-17, CISA added CVE-2023-6548 (Citrix NetScaler ADC and NetScaler Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-01-10, CISA added CVE-2023-29357 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On January 10, 2024, CISA issued an alert warning that Ivanti Connect Secure and Policy Secure contain vulnerabilities CVE-2023-46805 and CVE-2024-21887 .
On 2024-01-08, CISA added CVE-2023-38203 (Adobe ColdFusion) to its Known Exploited Vulnerabilities (KEV) catalog .
On January 8, 2024, CISA added CVE-2023-29300 (Adobe ColdFusion) to its Known Exploited Vulnerabilities (KEV) catalog .