Skip to content
OpenAdvisories

Source

CISA Known Exploited Vulnerabilities

Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

All Critical High Medium Low Public exploit

1,779 results · Feed

  • High 8.6
    CVE-2018-0172 Exploited

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0155 Exploited

    A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Sw…

    iOS
    KEV Mar 3, 2022
  • Medium 6.3
    CVE-2018-0161 Exploited

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain mod…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0174 Exploited

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…

    iOS
    KEV Mar 3, 2022
  • Medium 6.8
    CVE-2018-0179 Exploited

    Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthent…

    iOS
    KEV Mar 3, 2022
  • Medium 6.8
    CVE-2018-0180 Exploited

    Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthent…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-0159 Exploited

    A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software an…

    iOS
    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2018-0151 Exploited EPSS 14%

    A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow a…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0173 Exploited

    A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 infor…

    iOS
    KEV Mar 3, 2022
  • High 8.8
    CVE-2018-0167 Exploited

    Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, C…

    iOS
    KEV Mar 3, 2022
  • High 7.4
    CVE-2018-8581 Exploited · Ransomware Public exploit EPSS 28%

    An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation o…

    Microsoft Microsoft Exchange Server
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-8298 Exploited Public exploit EPSS 75%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, C…

    Microsoft ChakraCore Microsoft.ChakraCore NuGet
    KEV Mar 3, 2022
  • High 7.8
    CVE-2013-0640 Exploited Public exploit EPSS 87%

    Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execut…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2013-0641 Exploited EPSS 32%

    Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote…

    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2013-0632 Exploited Public exploit EPSS 93%

    administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and po…

    KEV Mar 3, 2022
  • Medium 6.5
    CVE-2013-1675 Exploited

    Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2013-1347 Exploited Public exploit EPSS 78%

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2013-3346 Exploited Public exploit EPSS 79%

    Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbit…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2013-3897 Exploited Public exploit EPSS 77%

    Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 all…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2013-5065 Exploited Public exploit EPSS 35%

    NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2004-0210 Exploited Public exploit

    The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain p…

    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2012-0507 Exploited · Ransomware Public exploit EPSS 98%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 U…

    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2012-1723 Exploited · Ransomware Public exploit EPSS 94%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 u…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2012-1856 Exploited EPSS 72%

    The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Compo…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2012-1535 Exploited Public exploit EPSS 70%

    Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on …

    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2012-4681 Exploited · Ransomware Public exploit EPSS 99%

    Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2008-3431 Exploited Public exploit

    The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communica…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2008-2992 Exploited · Ransomware Public exploit EPSS 100%

    Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary …

    KEV Mar 3, 2022
  • Critical 10.0
    CVE-2022-20699 Exploited Public exploit EPSS 72%

    Cisco Small Business RV Series Routers Vulnerabilities

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization pro…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Mar 3, 2022
  • Critical 10.0
    CVE-2022-20701 Exploited

    Cisco Small Business RV Series Routers Vulnerabilities

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization pro…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Mar 3, 2022
  • Critical 10.0
    CVE-2022-20708 Exploited EPSS 15%

    Cisco Small Business RV Series Routers Vulnerabilities

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization pro…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Mar 3, 2022
  • Critical 10.0
    CVE-2022-20703 Exploited

    Cisco Small Business RV Series Routers Vulnerabilities

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization pro…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Mar 3, 2022
  • Critical 10.0
    CVE-2022-20700 Exploited

    Cisco Small Business RV Series Routers Vulnerabilities

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization pro…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Mar 3, 2022
  • High 7.8
    CVE-2002-0367 Exploited Public exploit

    smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to oth…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2014-0496 Exploited EPSS 40%

    Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac …

    KEV Mar 3, 2022
  • High 7.8
    CVE-2014-4114 Exploited Public exploit EPSS 82%

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

    KEV Mar 3, 2022
  • High 7.8
    CVE-2016-0099 Exploited · Ransomware Public exploit EPSS 37%

    The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows …

    KEV Mar 3, 2022
  • High 7.8
    CVE-2016-7262 Exploited EPSS 59%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3,…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2016-7855 Exploited Public exploit EPSS 25%

    Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Lin…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2016-7193 Exploited EPSS 58%

    Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for …

    KEV Mar 3, 2022