Complete index
Zero-Day Vulnerability Archive
Search all tracked zero-day vulnerabilities and narrow the results by year, vendor, software, weakness type, or presence in the CISA and ENISA known exploited vulnerability catalogs.
| CVE | Vendor / Product | Vulnerability | CWE | Discovered | KEV |
|---|---|---|---|---|---|
| CVE-2025-0282 | IvantiIvanti Connect Secure (formerly Pulse Connect Secure) | Stack-based buffer overflow in Ivanti Connect Secure (formerly Pulse Connect Secure) | CWE-121 | CISA KEVENISA KEV | |
| CVE-2024-3393 | Palo Alto Networks, Inc.Palo Alto PAN-OS | Improper Check for Unusual or Exceptional Conditions in Palo Alto PAN-OS | CWE-754 | CISA KEVENISA KEV | |
| CVE-2024-12356 | BeyondTrustRemote Support | OS Command Injection in Remote Support and Privileged Remote Access (PRA) | CWE-78 | CISA KEVENISA KEV | |
| CVE-2024-12686 | BeyondTrustRemote Support | OS Command Injection in Remote Support and Privileged Remote Access (PRA) | CWE-78 | CISA KEVENISA KEV | |
| CVE-2024-49138 | MicrosoftMicrosoft Windows | Heap-based buffer overflow in Microsoft Windows and Windows Server | CWE-122 | CISA KEVENISA KEV | |
| CVE-2024-55956 | CleoCleo LexiCom | Arbitrary file upload in Cleo products | CWE-434 | CISA KEVENISA KEV | |
| CVE-2024-44309 | Apple Inc.macOS | Universal cross-site scripting in WPE WebKit and WebKitGTK+ | CWE-79 | CISA KEVENISA KEV | |
| CVE-2024-44308 | Apple Inc.macOS | Input validation error in WebKitGTK+ and WPE WebKit | CWE-20 | CISA KEVENISA KEV | |
| CVE-2024-21287 | OracleOracle Agile PLM Framework | Missing Authorization in Oracle Agile PLM Framework | CWE-862 | CISA KEVENISA KEV | |
| CVE-2024-0012 | Palo Alto Networks, Inc.Palo Alto PAN-OS | Improper authentication in Palo Alto PAN-OS | CWE-287 | CISA KEVENISA KEV | |
| CVE-2024-11120 | GeoVisionGV-DSP_LPR_V3, GV-VS11, GV-VS12, GVLX 4 V2, GVLX 4 V3 | OS Command Injection in GeoVision products | CWE-78 | CISA KEVENISA KEV | |
| CVE-2024-57968 | AdvantiveVeraCore | Path traversal in VeraCore | CWE-22 | CISA KEVENISA KEV | |
| CVE-2024-43451 | MicrosoftMicrosoft Windows | Information disclosure in Microsoft products | CWE-200 | CISA KEVENISA KEV | |
| CVE-2024-49039 | MicrosoftMicrosoft Windows | Improper Authentication in Microsoft Windows and Windows Server | CWE-287 | CISA KEVENISA KEV | |
| CVE-2024-9474 | Palo Alto Networks, Inc.Palo Alto PAN-OS | OS Command Injection in Palo Alto PAN-OS | CWE-78 | CISA KEVENISA KEV | |
| CVE-2024-43093 | GoogleGoogle Android | Improper input validation in Google Android | CWE-20 | CISA KEVENISA KEV | |
| CVE-2024-51378 | CyberPanelCyberPanel | Improper Authentication in CyberPanel | CWE-287 | CISA KEVENISA KEV | |
| CVE-2024-51567 | CyberPanelCyberPanel | Improper authentication in CyberPanel | CWE-287 | CISA KEVENISA KEV | |
| CVE-2024-20481 | Cisco Systems, IncCisco Secure Firewall Adaptive Security Appliance (ASA) | Missing Release of Resource after Effective Lifetime in Cisco Secure Firewall Threat Defense (FTD) and Cisco Secure Firewall Adaptive Security Appliance (ASA) | CWE-772 | CISA KEVENISA KEV | |
| CVE-2024-47575 | Fortinet, IncFortiManager | Missing authentication for critical function in FortiManager | CWE-306 | CISA KEVENISA KEV |
Showing 181–200 of 699 results