全件ブラウズ

悪用確認済み脆弱性(CISA KEV)全件

CISAが「実際に悪用が確認された」とするKEVカタログの全件を、深刻度・ランサム悪用・追加日で絞り込み・検索できます。

条件クリア

該当 1,721 件

緊急度CVE名称・製品ベンダーKEV追加日
CVE-2024-44309 ↗ Apple Multiple Products — Apple Multiple Products Cross-Site Scripting (XSS) V... Apple 2024/11/21
CVE-2024-21287 ↗ Oracle Agile Product Lifecycle Management (PLM) — Oracle Agile Product Lifecyc... Oracle 2024/11/21
CVE-2024-38812 ↗ VMware vCenter Server — VMware vCenter Server Heap-Based Buffer Overflow Vulne... VMware 2024/11/20
CVE-2024-38813 ↗ VMware vCenter Server — VMware vCenter Server Privilege Escalation Vulnerabili... VMware 2024/11/20
CVE-2024-1212 ↗ Progress Kemp LoadMaster — Progress Kemp LoadMaster OS Command Injection Vulne... Progress 2024/11/18
緊急 CVE-2024-0012 解説あり Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Management Interface Aut... Palo Alto Networks 2024/11/18
緊急 CVE-2024-9474 ↗ Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Management Interface OS... Palo Alto Networks 2024/11/18
CVE-2024-9463 ↗ Palo Alto Networks Expedition — Palo Alto Networks Expedition OS Command Injec... Palo Alto Networks 2024/11/14
CVE-2024-9465 ↗ Palo Alto Networks Expedition — Palo Alto Networks Expedition SQL Injection Vu... Palo Alto Networks 2024/11/14
緊急 CVE-2024-49039 ↗ Microsoft Windows — Microsoft Windows Task Scheduler Privilege Escalation Vuln... Microsoft 2024/11/12
CVE-2024-43451 ↗ Microsoft Windows — Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerab... Microsoft 2024/11/12
CVE-2021-41277 ↗ Metabase Metabase — Metabase GeoJSON API Local File Inclusion Vulnerability Metabase 2024/11/12
CVE-2014-2120 ↗ Cisco Adaptive Security Appliance (ASA) — Cisco Adaptive Security Appliance (A... Cisco 2024/11/12
CVE-2021-26086 ↗ Atlassian Jira Server and Data Center — Atlassian Jira Server and Data Center... Atlassian 2024/11/12
CVE-2024-5910 ↗ Palo Alto Networks Expedition — Palo Alto Networks Expedition Missing Authenti... Palo Alto Networks 2024/11/07
CVE-2024-43093 ↗ Android Framework — Android Framework Privilege Escalation Vulnerability Android 2024/11/07
緊急 CVE-2024-51567 ↗ CyberPersons CyberPanel — CyberPanel Incorrect Default Permissions Vulnerabili... CyberPersons 2024/11/07
CVE-2019-16278 ↗ Nostromo nhttpd — Nostromo nhttpd Directory Traversal Vulnerability Nostromo 2024/11/07
CVE-2024-8957 ↗ PTZOptics PT30X-SDI/NDI Cameras — PTZOptics PT30X-SDI/NDI Cameras OS Command I... PTZOptics 2024/11/04
CVE-2024-8956 ↗ PTZOptics PT30X-SDI/NDI Cameras — PTZOptics PT30X-SDI/NDI Cameras Authenticati... PTZOptics 2024/11/04
CVE-2024-20481 ↗ Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) — C... Cisco 2024/10/24
CVE-2024-37383 ↗ Roundcube Webmail — RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube 2024/10/24
CVE-2024-47575 ↗ Fortinet FortiManager — Fortinet FortiManager Missing Authentication Vulnerabi... Fortinet 2024/10/23
緊急 CVE-2024-38094 ↗ Microsoft SharePoint — Microsoft SharePoint Deserialization Vulnerability Microsoft 2024/10/22
CVE-2024-9537 ↗ ScienceLogic SL1 — ScienceLogic SL1 Unspecified Vulnerability ScienceLogic 2024/10/21
緊急 CVE-2024-40711 解説あり Veeam Backup & Replication — Veeam Backup and Replication Deserialization Vuln... Veeam 2024/10/17
緊急 CVE-2024-30088 ↗ Microsoft Windows — Microsoft Windows Kernel TOCTOU Race Condition Vulnerabili... Microsoft 2024/10/15
緊急 CVE-2024-9680 ↗ Mozilla Firefox — Mozilla Firefox Use-After-Free Vulnerability Mozilla 2024/10/15
CVE-2024-28987 ↗ SolarWinds Web Help Desk — SolarWinds Web Help Desk Hardcoded Credential Vulne... SolarWinds 2024/10/15
CVE-2024-23113 ↗ Fortinet Multiple Products — Fortinet Multiple Products Format String Vulnerab... Fortinet 2024/10/09
CVE-2024-9379 ↗ Ivanti Cloud Services Appliance (CSA) — Ivanti Cloud Services Appliance (CSA)... Ivanti 2024/10/09
CVE-2024-9380 ↗ Ivanti Cloud Services Appliance (CSA) — Ivanti Cloud Services Appliance (CSA)... Ivanti 2024/10/09
CVE-2024-43047 ↗ Qualcomm Multiple Chipsets — Qualcomm Multiple Chipsets Use-After-Free Vulnera... Qualcomm 2024/10/08
CVE-2024-43572 ↗ Microsoft Windows — Microsoft Windows Management Console Remote Code Execution... Microsoft 2024/10/08
CVE-2024-43573 ↗ Microsoft Windows — Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft 2024/10/08
CVE-2024-45519 ↗ Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite... Synacor 2024/10/03
CVE-2024-29824 ↗ Ivanti Endpoint Manager (EPM) — Ivanti Endpoint Manager (EPM) SQL Injection Vu... Ivanti 2024/10/02
CVE-2023-25280 ↗ D-Link DIR-820 Router — D-Link DIR-820 Router OS Command Injection Vulnerabili... D-Link 2024/09/30
CVE-2020-15415 ↗ DrayTek Multiple Vigor Routers — DrayTek Multiple Vigor Routers OS Command Inj... DrayTek 2024/09/30
CVE-2019-0344 ↗ SAP Commerce Cloud — SAP Commerce Cloud Deserialization of Untrusted Data Vuln... SAP 2024/09/30
CVE-2024-7593 ↗ Ivanti Virtual Traffic Manager — Ivanti Virtual Traffic Manager Authentication... Ivanti 2024/09/24
CVE-2024-8963 ↗ Ivanti Cloud Services Appliance (CSA) — Ivanti Cloud Services Appliance (CSA)... Ivanti 2024/09/19
CVE-2024-27348 ↗ Apache HugeGraph-Server — Apache HugeGraph-Server Improper Access Control Vuln... Apache 2024/09/18
緊急 CVE-2020-0618 ↗ Microsoft SQL Server — Microsoft SQL Server Reporting Services Remote Code Exe... Microsoft 2024/09/18
CVE-2022-21445 ↗ Oracle ADF Faces — Oracle ADF Faces Deserialization of Untrusted Data Vulnerab... Oracle 2024/09/18
CVE-2020-14644 ↗ Oracle WebLogic Server — Oracle WebLogic Server Remote Code Execution Vulnerab... Oracle 2024/09/18
CVE-2014-0497 ↗ Adobe Flash Player — Adobe Flash Player Integer Underflow Vulnerablity Adobe 2024/09/17
CVE-2013-0643 ↗ Adobe Flash Player — Adobe Flash Player Incorrect Default Permissions Vulnerab... Adobe 2024/09/17
CVE-2013-0648 ↗ Adobe Flash Player — Adobe Flash Player Code Execution Vulnerability Adobe 2024/09/17
CVE-2014-0502 解説あり Adobe Flash Player — Adobe Flash Player Double Free Vulnerablity Adobe 2024/09/17

出典:米国政府公式の公開データ。本サイトは収集・整理した索引で、米国政府公式ではありません。「解説あり」は当サイトの日本語解説ページ、それ以外は公式の一次情報へリンクします。

免責: 本サイトは各公式データソースをもとに独自に要約・分類したものです。最新・正確な情報は必ず公式ソースをご確認ください。金融・医療・法務・セキュリティに関する内容は情報整理であり、助言ではありません。本サイトは米国政府の公式サイトではありません。