Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2009-2055 | Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS). | Cisco / IOS XR | Mar 25, 2022 | — | View → |
| CVE-2010-2861 | A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read… | Adobe / ColdFusion | Mar 25, 2022 | Ransomware | View → |
| CVE-2010-3035 | Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS). | Cisco / IOS XR | Mar 25, 2022 | — | View → |
| CVE-2010-4344 | Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary… | Exim / Exim | Mar 25, 2022 | — | View → |
| CVE-2010-4345 | Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file… | Exim / Exim | Mar 25, 2022 | — | View → |
| CVE-2012-1823 | sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to… | PHP / PHP | Mar 25, 2022 | — | View → |
| CVE-2013-2251 | Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions. | Apache / Struts | Mar 25, 2022 | — | View → |
| CVE-2013-4810 | HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute… | Hewlett Packard (HP) / ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management | Mar 25, 2022 | — | View → |
| CVE-2013-5223 | A cross-site scripting (XSS) vulnerability exists in the D-Link DSL-2760U gateway, allowing remote authenticated users to inject arbitrary… | D-Link / DSL-2760U | Mar 25, 2022 | — | View → |
| CVE-2014-0130 | Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails… | Rails / Ruby on Rails | Mar 25, 2022 | — | View → |
| CVE-2014-3120 | Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code. | Elastic / Elasticsearch | Mar 25, 2022 | — | View → |
| CVE-2014-6287 | The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (HFS or HttpFileServer) allows remote attackers to execute… | Rejetto / HTTP File Server (HFS) | Mar 25, 2022 | — | View → |
| CVE-2014-6324 | The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges. | Microsoft / Kerberos Key Distribution Center (KDC) | Mar 25, 2022 | — | View → |
| CVE-2014-6332 | OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site. | Microsoft / Windows | Mar 25, 2022 | — | View → |
| CVE-2015-0666 | Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) allows remote attackers to… | Cisco / Prime Data Center Network Manager (DCNM) | Mar 25, 2022 | — | View → |
| CVE-2015-1187 | The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to perform remote code execution. | D-Link and TRENDnet / Multiple Devices | Mar 25, 2022 | — | View → |
| CVE-2015-1427 | The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary… | Elastic / Elasticsearch | Mar 25, 2022 | — | View → |
| CVE-2015-3035 | Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in… | TP-Link / Multiple Archer Devices | Mar 25, 2022 | — | View → |
| CVE-2015-4068 | Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service. | Arcserve / Unified Data Protection (UDP) | Mar 25, 2022 | — | View → |
| CVE-2016-0752 | Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files. | Rails / Ruby on Rails | Mar 25, 2022 | — | View → |