CISA Known Exploited Vulnerabilities

468 results · Clear filters · Feed

• Critical 9.8
  CVE-2012-1723 Exploited · Ransomware Public exploit EPSS 94%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 u…

  Jun 16, 2012

  KEV Mar 3, 2022
• Critical 9.8
  CVE-2012-4681 Exploited · Ransomware Public exploit EPSS 99%

  Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow…

  Aug 28, 2012

  KEV Mar 3, 2022
• Critical 10.0
  CVE-2022-20699 Exploited Public exploit EPSS 72%

  Cisco Small Business RV Series Routers Vulnerabilities

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization pro…

  Cisco Cisco Small Business RV Series Router Firmware Network devices
  Feb 10, 2022

  KEV Mar 3, 2022
• Critical 9.1
  CVE-2022-23131 Exploited Public exploit Scanner template EPSS 96%

  Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

  In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to esca…

  Zabbix Frontend
  Jan 13, 2022

  KEV Feb 22, 2022
• Critical 9.8
  CVE-2022-24086 Exploited Public exploit Scanner template EPSS 99%

  Adobe Commerce checkout improper input validation leads to remote code execution

  Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code e…

  Adobe Magento Commerce magento/community-edition Web / CMS Packagist
  Feb 16, 2022

  KEV Feb 15, 2022
• Critical 9.8
  CVE-2017-9841 Exploited Public exploit Scanner template EPSS 100%

  Code Injection in PHPUnit

  Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., ex…

  phpunit/phpunit phpunit phpunit Debian Ubuntu Packagist
  Jun 27, 2017

  KEV Feb 15, 2022
• Critical 10.0
  CVE-2020-0796 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Mar 12, 2020

  KEV Feb 10, 2022
• Critical 9.8
  CVE-2015-1635 Exploited Public exploit Scanner template EPSS 100%

  HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold a…

  Apr 14, 2015

  KEV Feb 10, 2022
• Critical 9.8
  CVE-2018-1000861 Exploited Public exploit Scanner template EPSS 98%

  Deserialization of Untrusted Data in Jenkins

  A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by acce…

  org.jenkins-ci.main:jenkins-core Maven
  Dec 10, 2018

  KEV Feb 10, 2022
• Critical 9.8
  CVE-2016-3088 Exploited Public exploit Scanner template EPSS 98%

  Improper Input Validation in Apache ActiveMQ

  The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

  activemq activemq org.apache.activemq:activemq-client Debian Ubuntu Maven
  Jun 1, 2016

  KEV Feb 10, 2022
• Critical 9.8
  CVE-2017-9791 Exploited Public exploit Scanner template EPSS 99%

  Code execution in Apache Struts 1 plugin

  The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.

  Apache Software Foundation Apache Struts org.apache.struts:struts2-struts1-plugin Maven
  Jul 10, 2017

  KEV Feb 10, 2022
• Critical 9.8
  CVE-2020-5722 Exploited Public exploit Scanner template EPSS 84%

  The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via craft…

  Mar 23, 2020

  KEV Jan 28, 2022
• Critical 9.8
  CVE-2014-7169 Exploited Public exploit EPSS 100%

  GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…

  bash bash Debian Ubuntu
  Sep 25, 2014

  KEV Jan 28, 2022
• Critical 9.8
  CVE-2014-6271 Exploited Public exploit Scanner template EPSS 100%

  GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, whic…

  bash bash Debian Ubuntu
  Sep 24, 2014

  KEV Jan 28, 2022
• Critical 9.8
  CVE-2017-5689 Exploited Public exploit Scanner template EPSS 92%

  An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Man…

  Intel Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability
  May 2, 2017

  KEV Jan 28, 2022
• Critical 9.8
  CVE-2021-20038 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows…

  SonicWall SonicWall SMA100 Network devices
  Dec 8, 2021

  KEV Jan 28, 2022
• Critical 9.8
  CVE-2012-0391 Exploited Public exploit EPSS 76%

  Apache Struts Remote Java Code Execution

  The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a craf…

  org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven
  Jan 8, 2012

  KEV Jan 21, 2022
• Critical 9.8
  CVE-2020-13927 Exploited Public exploit Scanner template EPSS 100%

  Authentication bypass in Apache Airflow

  The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and …

  apache-airflow PyPI
  Nov 10, 2020

  KEV Jan 18, 2022
• Critical 9.8
  CVE-2021-40870 Exploited Public exploit Scanner template EPSS 93%

  An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous…

  Sep 13, 2021

  KEV Jan 18, 2022
• Critical 9.8
  CVE-2021-21975 Exploited · Ransomware Public exploit Scanner template EPSS 78%

  Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious acto…

  Mar 31, 2021

  KEV Jan 18, 2022
• Critical 9.8
  CVE-2015-7450 Exploited Public exploit Scanner template EPSS 98%

  Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and…

  Jan 2, 2016

  KEV Jan 10, 2022
• Critical 9.1
  CVE-2018-13382 Exploited · Ransomware Public exploit EPSS 82%

  An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and Fort…

  Fortinet Fortinet FortiOS, FortiProxy Network devices
  Jun 4, 2019

  KEV Jan 10, 2022
• Critical 9.8
  CVE-2017-1000486 Exploited Public exploit Scanner template EPSS 94%

  Inadequate Encryption Strength

  Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

  org.primefaces:primefaces Maven
  Jan 3, 2018

  KEV Jan 10, 2022
• Critical 9.8
  CVE-2021-36260 Exploited Public exploit Scanner template EPSS 100%

  A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation…

  Sep 22, 2021

  KEV Jan 10, 2022
• Critical 9.8
  CVE-2019-7609 Exploited Public exploit Scanner template EPSS 95%

  Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacke…

  Elastic Kibana
  Mar 25, 2019

  KEV Jan 10, 2022
• Critical 9.8
  CVE-2019-9670 Exploited Public exploit Scanner template EPSS 100%

  mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (X…

  May 29, 2019

  KEV Jan 10, 2022
• Critical 9.0
  CVE-2019-10149 Exploited Public exploit EPSS 100%

  A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message…

  Exim Exim exim4 exim4 Debian Ubuntu Alpine
  Jun 5, 2019

  KEV Jan 10, 2022
• Critical 9.1
  CVE-2020-8816 Exploited Public exploit EPSS 78%

  Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static …

  May 29, 2020

  KEV Dec 10, 2021
• Critical 9.8
  CVE-2017-12149 Exploited · Ransomware Public exploit Scanner template EPSS 91%

  In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter…

  Red Hat jbossas
  Oct 4, 2017

  KEV Dec 10, 2021
• Critical 10.0
  CVE-2021-44228 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

  Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who …

  Apache Software Foundation Apache Log4j2 apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
  Dec 10, 2021

  KEV Dec 10, 2021
• Critical 9.8
  CVE-2019-7238 Exploited Public exploit Scanner template EPSS 77%

  Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

  Mar 21, 2019

  KEV Dec 10, 2021
• Critical 9.9
  CVE-2019-10758 Exploited Public exploit Scanner template EPSS 85%

  Remote Code Execution Vulnerability in NPM mongo-express

  mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.

  mongo-express npm
  Dec 24, 2019

  KEV Dec 10, 2021
• Critical 9.1
  CVE-2018-14847 Exploited Public exploit EPSS 96%

  MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated…

  Aug 2, 2018

  KEV Dec 1, 2021
• Critical 9.0
  CVE-2021-40438 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  mod_proxy SSRF

  A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Sep 16, 2021

  KEV Dec 1, 2021
• Critical 9.8
  CVE-2021-44077 Exploited Public exploit Scanner template EPSS 94%

  Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014…

  Nov 29, 2021

  KEV Dec 1, 2021
• Critical 9.8
  CVE-2020-0646 Exploited Public exploit EPSS 99%

  A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.…

  Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows
  Jan 14, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-16846 Exploited Public exploit Scanner template EPSS 100%

  SaltStack Salt Command Injection in netapi ssh client

  An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.

  salt salt salt Ubuntu Alpine PyPI
  Nov 6, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-7961 Exploited Public exploit Scanner template EPSS 100%

  Deserialization of Untrusted Data in Liferay Portal

  Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).

  com.liferay.portal:com.liferay.portal.kernel Maven
  Mar 20, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-11651 Exploited Public exploit EPSS 97%

  SaltStack Salt Unauthenticated Remote Code Execution

  An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be u…

  salt salt salt Ubuntu Alpine PyPI
  Apr 30, 2020

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2020-1350 Exploited Public exploit EPSS 97%

  A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle re…

  Microsoft Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server Windows
  Jul 14, 2020

  KEV Nov 3, 2021