CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated just now

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2024-21287

Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

Oracle · Agile Product Lifecycle Management (PLM)remediation: past CISA due date

P2added 2024-11-21due 2024-12-12

⋮

CVECVE-2024-44308

Apple Multiple Products Code Execution Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2024-11-21due 2024-12-12

⋮

CVECVE-2024-44309

Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2024-11-21due 2024-12-12

⋮

CVECVE-2024-38812

VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

VMware · vCenter Serverremediation: past CISA due date

P2added 2024-11-20due 2024-12-11

⋮

CVECVE-2024-38813

VMware vCenter Server Privilege Escalation Vulnerability

VMware · vCenter Serverremediation: past CISA due date

P2added 2024-11-20due 2024-12-11

⋮

CVECVE-2024-0012

Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

Palo Alto Networks · PAN-OSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-11-18due 2024-12-09

⋮

CVECVE-2024-1212

Progress Kemp LoadMaster OS Command Injection Vulnerability

Progress · Kemp LoadMasterremediation: past CISA due date

P2added 2024-11-18due 2024-12-09

⋮

CVECVE-2024-9474

Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

Palo Alto Networks · PAN-OSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-11-18due 2024-12-09

⋮

CVECVE-2024-9463

Palo Alto Networks Expedition OS Command Injection Vulnerability

Palo Alto Networks · Expeditionremediation: past CISA due date

P2added 2024-11-14due 2024-12-05

⋮

CVECVE-2024-9465

Palo Alto Networks Expedition SQL Injection Vulnerability

Palo Alto Networks · Expeditionremediation: past CISA due date

P2added 2024-11-14due 2024-12-05

⋮

CVECVE-2014-2120

Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

Cisco · Adaptive Security Appliance (ASA)remediation: past CISA due date

P2added 2024-11-12due 2024-12-03

⋮

CVECVE-2021-26086

Atlassian Jira Server and Data Center Path Traversal Vulnerability

Atlassian · Jira Server and Data Centerremediation: past CISA due date

P2added 2024-11-12due 2024-12-03

⋮

CVECVE-2021-41277

Metabase GeoJSON API Local File Inclusion Vulnerability

Metabase · Metabaseremediation: past CISA due date

P2added 2024-11-12due 2024-12-03

⋮

CVECVE-2024-43451

Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2024-11-12due 2024-12-03

⋮

CVECVE-2024-49039

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-11-12due 2024-12-03

⋮

CVECVE-2019-16278

Nostromo nhttpd Directory Traversal Vulnerability

Nostromo · nhttpdremediation: past CISA due date

P2added 2024-11-07due 2024-11-28

⋮

CVECVE-2024-43093

Android Framework Privilege Escalation Vulnerability

Android · Frameworkremediation: past CISA due date

P2added 2024-11-07due 2024-11-28

⋮

CVECVE-2024-51567

CyberPanel Incorrect Default Permissions Vulnerability

CyberPersons · CyberPanelremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-11-07due 2024-11-28

⋮

CVECVE-2024-5910

Palo Alto Networks Expedition Missing Authentication Vulnerability

Palo Alto Networks · Expeditionremediation: past CISA due date

P2added 2024-11-07due 2024-11-28

⋮

CVECVE-2024-8956

PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

PTZOptics · PT30X-SDI/NDI Camerasremediation: past CISA due date

P2added 2024-11-04due 2024-11-25

⋮

CVECVE-2024-8957

PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

PTZOptics · PT30X-SDI/NDI Camerasremediation: past CISA due date

P2added 2024-11-04due 2024-11-25

⋮

CVECVE-2024-20481

Cisco ASA and FTD Denial-of-Service Vulnerability

Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)remediation: past CISA due date

P2added 2024-10-24due 2024-11-14

⋮

CVECVE-2024-37383

RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

Roundcube · Webmailremediation: past CISA due date

P2added 2024-10-24due 2024-11-14

⋮

CVECVE-2024-47575

Fortinet FortiManager Missing Authentication Vulnerability

Fortinet · FortiManagerremediation: past CISA due date

P2added 2024-10-23due 2024-11-13

⋮

CVECVE-2024-38094

Microsoft SharePoint Deserialization Vulnerability

Microsoft · SharePointremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-10-22due 2024-11-12

⋮

CVECVE-2024-9537

ScienceLogic SL1 Unspecified Vulnerability

ScienceLogic · SL1remediation: past CISA due date

P2added 2024-10-21due 2024-11-11

⋮

CVECVE-2024-40711

Veeam Backup and Replication Deserialization Vulnerability

Veeam · Backup & Replicationremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-10-17due 2024-11-07

⋮

CVECVE-2024-28987

SolarWinds Web Help Desk Hardcoded Credential Vulnerability

SolarWinds · Web Help Deskremediation: past CISA due date

P2added 2024-10-15due 2024-11-05

⋮

CVECVE-2024-30088

Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

Microsoft · Windows remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-10-15due 2024-11-05

⋮

CVECVE-2024-9680

Mozilla Firefox Use-After-Free Vulnerability

Mozilla · Firefoxremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-10-15due 2024-11-05

⋮

CVECVE-2024-23113

Fortinet Multiple Products Format String Vulnerability

Fortinet · Multiple Productsremediation: past CISA due date

P2added 2024-10-09due 2024-10-30

⋮

CVECVE-2024-9379

Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

Ivanti · Cloud Services Appliance (CSA)remediation: past CISA due date

P2added 2024-10-09due 2024-10-30

⋮

CVECVE-2024-9380

Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

Ivanti · Cloud Services Appliance (CSA)remediation: past CISA due date

P2added 2024-10-09due 2024-10-30

⋮

CVECVE-2024-43047

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm · Multiple Chipsets remediation: past CISA due date

P2added 2024-10-08due 2024-10-29

⋮

CVECVE-2024-43572

Microsoft Windows Management Console Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2024-10-08due 2024-10-29

⋮

CVECVE-2024-43573

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2024-10-08due 2024-10-29

⋮

CVECVE-2024-45519

Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)remediation: past CISA due date

P2added 2024-10-03due 2024-10-24

⋮

CVECVE-2024-29824

Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

Ivanti · Endpoint Manager (EPM)remediation: past CISA due date

P2added 2024-10-02due 2024-10-23

⋮

CVECVE-2019-0344

SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

SAP · Commerce Cloudremediation: past CISA due date

P2added 2024-09-30due 2024-10-21

⋮

CVECVE-2020-15415

DrayTek Multiple Vigor Routers OS Command Injection Vulnerability

DrayTek · Multiple Vigor Routersremediation: past CISA due date

P2added 2024-09-30due 2024-10-21

⋮

CVECVE-2023-25280

D-Link DIR-820 Router OS Command Injection Vulnerability

D-Link · DIR-820 Routerremediation: past CISA due date

P2added 2024-09-30due 2024-10-21

⋮

CVECVE-2024-7593

Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

Ivanti · Virtual Traffic Managerremediation: past CISA due date

P2added 2024-09-24due 2024-10-15

⋮

CVECVE-2024-8963

Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

Ivanti · Cloud Services Appliance (CSA)remediation: past CISA due date

P2added 2024-09-19due 2024-10-10

⋮

CVECVE-2020-0618

Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

Microsoft · SQL Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-09-18due 2024-10-09

⋮

CVECVE-2020-14644

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle · WebLogic Serverremediation: past CISA due date

P2added 2024-09-18due 2024-10-09

⋮

CVECVE-2022-21445

Oracle ADF Faces Deserialization of Untrusted Data Vulnerability

Oracle · ADF Facesremediation: past CISA due date

P2added 2024-09-18due 2024-10-09

⋮

CVECVE-2024-27348

Apache HugeGraph-Server Improper Access Control Vulnerability

Apache · HugeGraph-Serverremediation: past CISA due date

P2added 2024-09-18due 2024-10-09

⋮

CVECVE-2013-0643

Adobe Flash Player Incorrect Default Permissions Vulnerability

Adobe · Flash Playerremediation: past CISA due date

P2added 2024-09-17due 2024-10-08

⋮

CVECVE-2013-0648

Adobe Flash Player Code Execution Vulnerability

Adobe · Flash Playerremediation: past CISA due date

P2added 2024-09-17due 2024-10-08

⋮

CVECVE-2014-0497

Adobe Flash Player Integer Underflow Vulnerablity

Adobe · Flash Playerremediation: past CISA due date

P2added 2024-09-17due 2024-10-08

⋮

501–550 of ~1,722

← Prev Next →