全件ブラウズ

悪用確認済み脆弱性(CISA KEV)全件

CISAが「実際に悪用が確認された」とするKEVカタログの全件を、深刻度・ランサム悪用・追加日で絞り込み・検索できます。

条件クリア

該当 1,721 件

緊急度CVE名称・製品ベンダーKEV追加日
緊急 CVE-2019-1579 ↗ Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Remote Code Execution Vu... Palo Alto Networks 2022/01/10
緊急 CVE-2018-13383 ↗ Fortinet FortiOS and FortiProxy — Fortinet FortiOS and FortiProxy Out-of-bound... Fortinet 2022/01/10
緊急 CVE-2018-13382 ↗ Fortinet FortiOS and FortiProxy — Fortinet FortiOS and FortiProxy Improper Aut... Fortinet 2022/01/10
CVE-2019-9670 ↗ Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite... Synacor 2022/01/10
緊急 CVE-2019-2725 ↗ Oracle WebLogic Server — Oracle WebLogic Server, Injection Oracle 2022/01/10
CVE-2013-3900 ↗ Microsoft WinVerifyTrust function — Microsoft WinVerifyTrust function Remote C... Microsoft 2022/01/10
緊急 CVE-2019-1458 ↗ Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability Microsoft 2022/01/10
CVE-2020-6572 ↗ Google Chrome Media — Google Chrome Media Use-After-Free Vulnerability Google 2022/01/10
CVE-2021-36260 ↗ Hikvision Security cameras web server — Hikvision Improper Input Validation Hikvision 2022/01/10
CVE-2021-22017 ↗ VMware vCenter Server — VMware vCenter Server Improper Access Control VMware 2022/01/10
CVE-2021-4102 ↗ Google Chromium V8 — Google Chromium V8 Use-After-Free Vulnerability Google 2021/12/15
緊急 CVE-2021-43890 ↗ Microsoft Windows — Microsoft Windows AppX Installer Spoofing Vulnerability Microsoft 2021/12/15
緊急 CVE-2021-44228 解説あり Apache Log4j2 — Apache Log4j2 Remote Code Execution Vulnerability Apache 2021/12/10
CVE-2019-10758 ↗ MongoDB mongo-express — MongoDB mongo-express Remote Code Execution Vulnerabil... MongoDB 2021/12/10
CVE-2020-8816 ↗ Pi-hole AdminLTE — Pi-Hole AdminLTE Remote Code Execution Vulnerability Pi-hole 2021/12/10
CVE-2020-17463 ↗ Fuel CMS Fuel CMS — Fuel CMS SQL Injection Vulnerability Fuel CMS 2021/12/10
CVE-2010-1871 ↗ Red Hat JBoss Seam 2 — Red Hat Linux JBoss Seam 2 Remote Code Execution Vulner... Red Hat 2021/12/10
緊急 CVE-2017-12149 ↗ Red Hat JBoss Application Server — Red Hat JBoss Application Server Remote Cod... Red Hat 2021/12/10
CVE-2017-17562 ↗ Embedthis GoAhead — Embedthis GoAhead Remote Code Execution Vulnerability Embedthis 2021/12/10
CVE-2021-44168 ↗ Fortinet FortiOS — Fortinet FortiOS Arbitrary File Download Fortinet 2021/12/10
CVE-2019-0193 ↗ Apache Solr — Apache Solr DataImportHandler Code Injection Vulnerability Apache 2021/12/10
CVE-2019-7238 ↗ Sonatype Nexus Repository Manager — Sonatype Nexus Repository Manager Incorrec... Sonatype 2021/12/10
CVE-2021-35394 ↗ Realtek Jungle Software Development Kit (SDK) — Realtek Jungle SDK Remote Code... Realtek 2021/12/10
CVE-2019-13272 ↗ Linux Kernel — Linux Kernel Improper Privilege Management Vulnerability Linux 2021/12/10
CVE-2021-44515 ↗ Zoho Desktop Central — Zoho Desktop Central Authentication Bypass Vulnerabilit... Zoho 2021/12/10
CVE-2021-44077 ↗ Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus — Zoho ManageEng... Zoho 2021/12/01
緊急 CVE-2021-40438 ↗ Apache Apache — Apache HTTP Server-Side Request Forgery (SSRF) Apache 2021/12/01
CVE-2021-37415 ↗ Zoho ManageEngine ServiceDesk Plus (SDP) — Zoho ManageEngine ServiceDesk Authe... Zoho 2021/12/01
CVE-2018-14847 ↗ MikroTik RouterOS — MikroTik Router OS Directory Traversal Vulnerability MikroTik 2021/12/01
CVE-2020-11261 ↗ Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra... Qualcomm 2021/12/01
CVE-2021-42292 ↗ Microsoft Office — Microsoft Excel Security Feature Bypass Microsoft 2021/11/17
緊急 CVE-2021-42321 ↗ Microsoft Exchange — Microsoft Exchange Server Remote Code Execution Vulnerabi... Microsoft 2021/11/17
緊急 CVE-2021-40449 ↗ Microsoft Windows — Microsoft Windows Win32k Privilege Escalation Vulnerabilit... Microsoft 2021/11/17
CVE-2021-22204 ↗ Perl Exiftool — ExifTool Remote Code Execution Vulnerability Perl 2021/11/17
CVE-2020-29583 ↗ Zyxel Multiple Products — Zyxel Multiple Products Use of Hard-Coded Credential... Zyxel 2021/11/03
CVE-2019-8394 ↗ Zoho ManageEngine — Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulne... Zoho 2021/11/03
CVE-2020-10189 ↗ Zoho ManageEngine — Zoho ManageEngine Desktop Central File Upload Vulnerabilit... Zoho 2021/11/03
緊急 CVE-2021-40539 ↗ Zoho ManageEngine — Zoho ManageEngine ADSelfService Plus Authentication Bypass... Zoho 2021/11/03
CVE-2021-27561 ↗ Yealink Device Management — Yealink Device Management Server-Side Request Forg... Yealink 2021/11/03
CVE-2019-9978 ↗ WordPress Social Warfare Plugin — WordPress Social Warfare Plugin Cross-Site S... WordPress 2021/11/03
CVE-2020-11738 ↗ WordPress Snap Creek Duplicator Plugin — WordPress Snap Creek Duplicator Plugi... WordPress 2021/11/03
CVE-2020-25213 ↗ WordPress File Manager Plugin — WordPress File Manager Plugin Remote Code Exec... WordPress 2021/11/03
CVE-2020-4006 ↗ VMware Multiple Products — Multiple VMware Products Command Injection Vulnerab... VMware 2021/11/03
緊急 CVE-2021-21985 ↗ VMware vCenter Server — VMware vCenter Server Improper Input Validation Vulner... VMware 2021/11/03
緊急 CVE-2021-21972 ↗ VMware vCenter Server — VMware vCenter Server Remote Code Execution Vulnerabil... VMware 2021/11/03
CVE-2020-3952 ↗ VMware vCenter Server — VMware vCenter Server Information Disclosure Vulnerabi... VMware 2021/11/03
緊急 CVE-2021-22005 ↗ VMware vCenter Server — VMware vCenter Server File Upload Vulnerability VMware 2021/11/03
CVE-2020-3950 ↗ VMware Multiple Products — VMware Multiple Products Privilege Escalation Vulne... VMware 2021/11/03
緊急 CVE-2020-3992 ↗ VMware ESXi — VMware ESXi OpenSLP Use-After-Free Vulnerability VMware 2021/11/03
緊急 CVE-2019-5544 ↗ VMware VMware ESXi and Horizon DaaS — VMware ESXi and Horizon DaaS OpenSLP Hea... VMware 2021/11/03

出典:米国政府公式の公開データ。本サイトは収集・整理した索引で、米国政府公式ではありません。「解説あり」は当サイトの日本語解説ページ、それ以外は公式の一次情報へリンクします。

免責: 本サイトは各公式データソースをもとに独自に要約・分類したものです。最新・正確な情報は必ず公式ソースをご確認ください。金融・医療・法務・セキュリティに関する内容は情報整理であり、助言ではありません。本サイトは米国政府の公式サイトではありません。