Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
Includes advisories where the vendor will not fix the issue or the product is end of life, and vulnerabilities for which we have not recorded a fix. For the latter the vendor may already have one, so check the vendor's advisory.
On 2025-05-19, CISA added CVE-2025-4428 (Ivanti Endpoint Manager Mobile (EPMM)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-05-19, CISA added CVE-2025-4427 (Ivanti Endpoint Manager Mobile (EPMM)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-05-15, CISA added CVE-2025-42999 (SAP NetWeaver) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-05-14, CISA added CVE-2025-32756 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-05-05, CISA added CVE-2025-3248 (Langflow Langflow) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-05-01, CISA added CVE-2024-38475 (Apache HTTP Server) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-05-01, CISA added CVE-2023-44221 (SonicWall SMA100 Appliances) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-04-29, CISA added CVE-2025-31324 (SAP NetWeaver) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-04-28, CISA added CVE-2025-1976 (Broadcom Brocade Fabric OS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-04-16, CISA added CVE-2021-20035 (SonicWall SMA100 Appliances) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-04-08, CISA added CVE-2025-29824 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-04-07, CISA added CVE-2025-31161 (CrushFTP CrushFTP) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-04-04, CISA added CVE-2025-22457 (Ivanti Connect Secure, Policy Secure, and ZTA Gateways) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-03-31, CISA added CVE-2024-20439 (Cisco Smart Licensing Utility) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-19, CISA added CVE-2017-12637 (SAP NetWeaver) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-18, CISA added CVE-2025-24472 (Fortinet FortiOS and FortiProxy) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-11, CISA added CVE-2025-26633 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-10, CISA added CVE-2024-13161 (Ivanti Endpoint Manager (EPM)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-10, CISA added CVE-2024-13160 (Ivanti Endpoint Manager (EPM)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-10, CISA added CVE-2024-13159 (Ivanti Endpoint Manager (EPM)) to its Known Exploited Vulnerabilities (KEV) catalog .