全件ブラウズ
悪用確認済み脆弱性(CISA KEV)全件
CISAが「実際に悪用が確認された」とするKEVカタログの全件を、深刻度・ランサム悪用・追加日で絞り込み・検索できます。
該当 1,721 件
| 緊急度 | CVE | 名称・製品 | ベンダー | KEV追加日 |
|---|---|---|---|---|
| 高 | CVE-2024-44309 ↗ | Apple Multiple Products — Apple Multiple Products Cross-Site Scripting (XSS) V... | Apple | 2024/11/21 |
| 高 | CVE-2024-21287 ↗ | Oracle Agile Product Lifecycle Management (PLM) — Oracle Agile Product Lifecyc... | Oracle | 2024/11/21 |
| 高 | CVE-2024-38812 ↗ | VMware vCenter Server — VMware vCenter Server Heap-Based Buffer Overflow Vulne... | VMware | 2024/11/20 |
| 高 | CVE-2024-38813 ↗ | VMware vCenter Server — VMware vCenter Server Privilege Escalation Vulnerabili... | VMware | 2024/11/20 |
| 高 | CVE-2024-1212 ↗ | Progress Kemp LoadMaster — Progress Kemp LoadMaster OS Command Injection Vulne... | Progress | 2024/11/18 |
| 緊急 | CVE-2024-0012 解説あり | Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Management Interface Aut... | Palo Alto Networks | 2024/11/18 |
| 緊急 | CVE-2024-9474 ↗ | Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Management Interface OS... | Palo Alto Networks | 2024/11/18 |
| 高 | CVE-2024-9463 ↗ | Palo Alto Networks Expedition — Palo Alto Networks Expedition OS Command Injec... | Palo Alto Networks | 2024/11/14 |
| 高 | CVE-2024-9465 ↗ | Palo Alto Networks Expedition — Palo Alto Networks Expedition SQL Injection Vu... | Palo Alto Networks | 2024/11/14 |
| 緊急 | CVE-2024-49039 ↗ | Microsoft Windows — Microsoft Windows Task Scheduler Privilege Escalation Vuln... | Microsoft | 2024/11/12 |
| 高 | CVE-2024-43451 ↗ | Microsoft Windows — Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerab... | Microsoft | 2024/11/12 |
| 高 | CVE-2021-41277 ↗ | Metabase Metabase — Metabase GeoJSON API Local File Inclusion Vulnerability | Metabase | 2024/11/12 |
| 高 | CVE-2014-2120 ↗ | Cisco Adaptive Security Appliance (ASA) — Cisco Adaptive Security Appliance (A... | Cisco | 2024/11/12 |
| 高 | CVE-2021-26086 ↗ | Atlassian Jira Server and Data Center — Atlassian Jira Server and Data Center... | Atlassian | 2024/11/12 |
| 高 | CVE-2024-5910 ↗ | Palo Alto Networks Expedition — Palo Alto Networks Expedition Missing Authenti... | Palo Alto Networks | 2024/11/07 |
| 高 | CVE-2024-43093 ↗ | Android Framework — Android Framework Privilege Escalation Vulnerability | Android | 2024/11/07 |
| 緊急 | CVE-2024-51567 ↗ | CyberPersons CyberPanel — CyberPanel Incorrect Default Permissions Vulnerabili... | CyberPersons | 2024/11/07 |
| 高 | CVE-2019-16278 ↗ | Nostromo nhttpd — Nostromo nhttpd Directory Traversal Vulnerability | Nostromo | 2024/11/07 |
| 高 | CVE-2024-8957 ↗ | PTZOptics PT30X-SDI/NDI Cameras — PTZOptics PT30X-SDI/NDI Cameras OS Command I... | PTZOptics | 2024/11/04 |
| 高 | CVE-2024-8956 ↗ | PTZOptics PT30X-SDI/NDI Cameras — PTZOptics PT30X-SDI/NDI Cameras Authenticati... | PTZOptics | 2024/11/04 |
| 高 | CVE-2024-20481 ↗ | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) — C... | Cisco | 2024/10/24 |
| 高 | CVE-2024-37383 ↗ | Roundcube Webmail — RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability | Roundcube | 2024/10/24 |
| 高 | CVE-2024-47575 ↗ | Fortinet FortiManager — Fortinet FortiManager Missing Authentication Vulnerabi... | Fortinet | 2024/10/23 |
| 緊急 | CVE-2024-38094 ↗ | Microsoft SharePoint — Microsoft SharePoint Deserialization Vulnerability | Microsoft | 2024/10/22 |
| 高 | CVE-2024-9537 ↗ | ScienceLogic SL1 — ScienceLogic SL1 Unspecified Vulnerability | ScienceLogic | 2024/10/21 |
| 緊急 | CVE-2024-40711 解説あり | Veeam Backup & Replication — Veeam Backup and Replication Deserialization Vuln... | Veeam | 2024/10/17 |
| 緊急 | CVE-2024-30088 ↗ | Microsoft Windows — Microsoft Windows Kernel TOCTOU Race Condition Vulnerabili... | Microsoft | 2024/10/15 |
| 緊急 | CVE-2024-9680 ↗ | Mozilla Firefox — Mozilla Firefox Use-After-Free Vulnerability | Mozilla | 2024/10/15 |
| 高 | CVE-2024-28987 ↗ | SolarWinds Web Help Desk — SolarWinds Web Help Desk Hardcoded Credential Vulne... | SolarWinds | 2024/10/15 |
| 高 | CVE-2024-23113 ↗ | Fortinet Multiple Products — Fortinet Multiple Products Format String Vulnerab... | Fortinet | 2024/10/09 |
| 高 | CVE-2024-9379 ↗ | Ivanti Cloud Services Appliance (CSA) — Ivanti Cloud Services Appliance (CSA)... | Ivanti | 2024/10/09 |
| 高 | CVE-2024-9380 ↗ | Ivanti Cloud Services Appliance (CSA) — Ivanti Cloud Services Appliance (CSA)... | Ivanti | 2024/10/09 |
| 高 | CVE-2024-43047 ↗ | Qualcomm Multiple Chipsets — Qualcomm Multiple Chipsets Use-After-Free Vulnera... | Qualcomm | 2024/10/08 |
| 高 | CVE-2024-43572 ↗ | Microsoft Windows — Microsoft Windows Management Console Remote Code Execution... | Microsoft | 2024/10/08 |
| 高 | CVE-2024-43573 ↗ | Microsoft Windows — Microsoft Windows MSHTML Platform Spoofing Vulnerability | Microsoft | 2024/10/08 |
| 高 | CVE-2024-45519 ↗ | Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite... | Synacor | 2024/10/03 |
| 高 | CVE-2024-29824 ↗ | Ivanti Endpoint Manager (EPM) — Ivanti Endpoint Manager (EPM) SQL Injection Vu... | Ivanti | 2024/10/02 |
| 高 | CVE-2023-25280 ↗ | D-Link DIR-820 Router — D-Link DIR-820 Router OS Command Injection Vulnerabili... | D-Link | 2024/09/30 |
| 高 | CVE-2020-15415 ↗ | DrayTek Multiple Vigor Routers — DrayTek Multiple Vigor Routers OS Command Inj... | DrayTek | 2024/09/30 |
| 高 | CVE-2019-0344 ↗ | SAP Commerce Cloud — SAP Commerce Cloud Deserialization of Untrusted Data Vuln... | SAP | 2024/09/30 |
| 高 | CVE-2024-7593 ↗ | Ivanti Virtual Traffic Manager — Ivanti Virtual Traffic Manager Authentication... | Ivanti | 2024/09/24 |
| 高 | CVE-2024-8963 ↗ | Ivanti Cloud Services Appliance (CSA) — Ivanti Cloud Services Appliance (CSA)... | Ivanti | 2024/09/19 |
| 高 | CVE-2024-27348 ↗ | Apache HugeGraph-Server — Apache HugeGraph-Server Improper Access Control Vuln... | Apache | 2024/09/18 |
| 緊急 | CVE-2020-0618 ↗ | Microsoft SQL Server — Microsoft SQL Server Reporting Services Remote Code Exe... | Microsoft | 2024/09/18 |
| 高 | CVE-2022-21445 ↗ | Oracle ADF Faces — Oracle ADF Faces Deserialization of Untrusted Data Vulnerab... | Oracle | 2024/09/18 |
| 高 | CVE-2020-14644 ↗ | Oracle WebLogic Server — Oracle WebLogic Server Remote Code Execution Vulnerab... | Oracle | 2024/09/18 |
| 高 | CVE-2014-0497 ↗ | Adobe Flash Player — Adobe Flash Player Integer Underflow Vulnerablity | Adobe | 2024/09/17 |
| 高 | CVE-2013-0643 ↗ | Adobe Flash Player — Adobe Flash Player Incorrect Default Permissions Vulnerab... | Adobe | 2024/09/17 |
| 高 | CVE-2013-0648 ↗ | Adobe Flash Player — Adobe Flash Player Code Execution Vulnerability | Adobe | 2024/09/17 |
| 高 | CVE-2014-0502 解説あり | Adobe Flash Player — Adobe Flash Player Double Free Vulnerablity | Adobe | 2024/09/17 |
出典:米国政府公式の公開データ。本サイトは収集・整理した索引で、米国政府公式ではありません。「解説あり」は当サイトの日本語解説ページ、それ以外は公式の一次情報へリンクします。