Security Warnings — Source: cisa kev

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

2025-03-10 CVE-2024-13161

highIvanti CISA-KEV 2025-W11

Linux Kernel Use of Uninitialized Resource Vulnerability

2025-03-04 CVE-2024-50302

highLinux CISA-KEV 2025-W10

VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

2025-03-04 CVE-2025-22224

highVMware CISA-KEV 2025-W10

VMware ESXi Arbitrary Write Vulnerability

2025-03-04 CVE-2025-22225

criticalVMware CISA-KEV 2025-W10

VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

2025-03-04 CVE-2025-22226

highVMware CISA-KEV 2025-W10

Cisco Small Business RV Series Routers Command Injection Vulnerability

2025-03-03 CVE-2023-20118

highCisco CISA-KEV 2025-W10

Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

2025-03-03 CVE-2022-43939

highHitachi Vantara CISA-KEV 2025-W10

Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

2025-03-03 CVE-2022-43769

highHitachi Vantara CISA-KEV 2025-W10

Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

2025-03-03 CVE-2018-8639

criticalMicrosoft CISA-KEV 2025-W10

Progress WhatsUp Gold Path Traversal Vulnerability

2025-03-03 CVE-2024-4885

highProgress CISA-KEV 2025-W10

Microsoft Partner Center Improper Access Control Vulnerability

2025-02-25 CVE-2024-49035

highMicrosoft CISA-KEV 2025-W09

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

2025-02-25 CVE-2023-34192

highSynacor CISA-KEV 2025-W09

Adobe ColdFusion Deserialization Vulnerability

2025-02-24 CVE-2017-3066

highAdobe CISA-KEV 2025-W09

Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

2025-02-24 CVE-2024-20953

highOracle CISA-KEV 2025-W09

Microsoft Power Pages Improper Access Control Vulnerability

2025-02-21 CVE-2025-24989

highMicrosoft CISA-KEV 2025-W08

Craft CMS Code Injection Vulnerability

2025-02-20 CVE-2025-23209

highCraft CMS CISA-KEV 2025-W08

Palo Alto Networks PAN-OS File Read Vulnerability

2025-02-20 CVE-2025-0111

highPalo Alto Networks CISA-KEV 2025-W08

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

2025-02-18 CVE-2025-0108

highPalo Alto Networks CISA-KEV 2025-W08

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

2025-02-18 CVE-2024-53704

criticalSonicWall CISA-KEV 2025-W08

SimpleHelp Path Traversal Vulnerability

2025-02-13 CVE-2024-57727

criticalSimpleHelp CISA-KEV 2025-W07

Apple iOS and iPadOS Incorrect Authorization Vulnerability

2025-02-12 CVE-2025-24200

highApple CISA-KEV 2025-W07

Mitel SIP Phones Argument Injection Vulnerability

2025-02-12 CVE-2024-41710

highMitel CISA-KEV 2025-W07

Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

2025-02-11 CVE-2025-21418

highMicrosoft CISA-KEV 2025-W07

Microsoft Windows Storage Link Following Vulnerability

2025-02-11 CVE-2025-21391

highMicrosoft CISA-KEV 2025-W07

Zyxel DSL CPE OS Command Injection Vulnerability

2025-02-11 CVE-2024-40890

highZyxel CISA-KEV 2025-W07

Zyxel DSL CPE OS Command Injection Vulnerability

2025-02-11 CVE-2024-40891

highZyxel CISA-KEV 2025-W07

Trimble Cityworks Deserialization Vulnerability

2025-02-07 CVE-2025-0994

highTrimble CISA-KEV 2025-W06

7-Zip Mark of the Web Bypass Vulnerability

2025-02-06 CVE-2025-0411

high7-Zip CISA-KEV 2025-W06

CyberoamOS (CROS) SQL Injection Vulnerability

2025-02-06 CVE-2020-29574

highSophos CISA-KEV 2025-W06

Dante Discovery Process Control Vulnerability

2025-02-06 CVE-2022-23748

highAudinate CISA-KEV 2025-W06

Microsoft Outlook Improper Input Validation Vulnerability

2025-02-06 CVE-2024-21413

highMicrosoft CISA-KEV 2025-W06

Sophos XG Firewall Buffer Overflow Vulnerability

2025-02-06 CVE-2020-15069

highSophos CISA-KEV 2025-W06

Linux Kernel Out-of-Bounds Write Vulnerability

2025-02-05 CVE-2024-53104

highLinux CISA-KEV 2025-W06

Apache OFBiz Forced Browsing Vulnerability

2025-02-04 CVE-2024-45195

highApache CISA-KEV 2025-W06

Microsoft .NET Framework Information Disclosure Vulnerability

2025-02-04 CVE-2024-29059

highMicrosoft CISA-KEV 2025-W06

Paessler PRTG Network Monitor Local File Inclusion Vulnerability

2025-02-04 CVE-2018-19410

highPaessler CISA-KEV 2025-W06

Paessler PRTG Network Monitor OS Command Injection Vulnerability

2025-02-04 CVE-2018-9276

highPaessler CISA-KEV 2025-W06

Apple Multiple Products Use-After-Free Vulnerability

2025-01-29 CVE-2025-24085

highApple CISA-KEV 2025-W05

SonicWall SMA1000 Appliances Deserialization Vulnerability

2025-01-24 CVE-2025-23006

criticalSonicWall CISA-KEV 2025-W04

JQuery Cross-Site Scripting (XSS) Vulnerability

2025-01-23 CVE-2020-11023

highJQuery CISA-KEV 2025-W04

Aviatrix Controllers OS Command Injection Vulnerability

2025-01-16 CVE-2024-50603

highAviatrix CISA-KEV 2025-W03

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

2025-01-14 CVE-2024-55591

criticalFortinet CISA-KEV 2025-W03

Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

2025-01-14 CVE-2025-21333

highMicrosoft CISA-KEV 2025-W03

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

2025-01-14 CVE-2025-21334

highMicrosoft CISA-KEV 2025-W03

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

2025-01-14 CVE-2025-21335

highMicrosoft CISA-KEV 2025-W03

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

2025-01-13 CVE-2024-12686

highBeyondTrust CISA-KEV 2025-W03

Qlik Sense HTTP Tunneling Vulnerability

2025-01-13 CVE-2023-48365

criticalQlik CISA-KEV 2025-W03

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

2025-01-08 CVE-2025-0282

criticalIvanti CISA-KEV 2025-W02

Mitel MiCollab Path Traversal Vulnerability

2025-01-07 CVE-2024-41713

criticalMitel CISA-KEV 2025-W02

Mitel MiCollab Path Traversal Vulnerability

2025-01-07 CVE-2024-55550

criticalMitel CISA-KEV 2025-W02

Oracle WebLogic Server Unspecified Vulnerability

2025-01-07 CVE-2020-2883

highOracle CISA-KEV 2025-W02

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

2024-12-30 CVE-2024-3393

highPalo Alto Networks CISA-KEV 2025-W01

Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

2024-12-23 CVE-2021-44207

highAcclaim Systems CISA-KEV 2024-W52

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

2024-12-19 CVE-2024-12356

highBeyondTrust CISA-KEV 2024-W51

NUUO NVRmini Devices OS Command Injection Vulnerability

2024-12-18 CVE-2018-14933

highNUUO CISA-KEV 2024-W51

NUUO NVRmini2 Devices Missing Authentication Vulnerability

2024-12-18 CVE-2022-23227

highNUUO CISA-KEV 2024-W51

Reolink Multiple IP Cameras OS Command Injection Vulnerability

2024-12-18 CVE-2019-11001

highReolink CISA-KEV 2024-W51

Reolink RLC-410W IP Camera OS Command Injection Vulnerability

2024-12-18 CVE-2021-40407

highReolink CISA-KEV 2024-W51

Cleo Multiple Products Unauthenticated File Upload Vulnerability

2024-12-17 CVE-2024-55956

criticalCleo CISA-KEV 2024-W51

Adobe ColdFusion Improper Access Control Vulnerability

2024-12-16 CVE-2024-20767

highAdobe CISA-KEV 2024-W51