Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2016-10174 | The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution. | NETGEAR / WNR2000v5 Router | Mar 25, 2022 | — | View → |
| CVE-2016-11021 | setSystemCommand on D-Link DCS-930L devices allows a remote attacker to execute code via an OS command. | D-Link / DCS-930L Devices | Mar 25, 2022 | — | View → |
| CVE-2016-1555 | Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface.… | NETGEAR / Wireless Access Point (WAP) Devices | Mar 25, 2022 | — | View → |
| CVE-2016-4171 | Unspecified vulnerability in Adobe Flash Player allows for remote code execution. | Adobe / Flash Player | Mar 25, 2022 | — | View → |
| CVE-2016-7892 | Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class. | Adobe / Flash Player | Mar 25, 2022 | — | View → |
| CVE-2017-0146 | The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution. | Microsoft / Windows | Mar 25, 2022 | Ransomware | View → |
| CVE-2017-12615 | When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted… | Apache / Tomcat | Mar 25, 2022 | Ransomware | View → |
| CVE-2017-12617 | When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be… | Apache / Tomcat | Mar 25, 2022 | — | View → |
| CVE-2017-3881 | A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an… | Cisco / IOS and IOS XE | Mar 25, 2022 | — | View → |
| CVE-2017-6316 | A vulnerability has been identified in the management interface of Citrix NetScaler SD-WAN Enterprise and Standard Edition and Citrix… | Citrix / NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | Mar 25, 2022 | — | View → |
| CVE-2017-6334 | dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands | NETGEAR / DGN2200 Devices | Mar 25, 2022 | — | View → |
| CVE-2018-0125 | A vulnerability in the web interface of the Cisco VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as… | Cisco / VPN Routers | Mar 25, 2022 | — | View → |
| CVE-2018-0147 | A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker… | Cisco / Secure Access Control System (ACS) | Mar 25, 2022 | — | View → |
| CVE-2018-11138 | The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance is accessible by anonymous users and can… | Quest / KACE System Management Appliance | Mar 25, 2022 | Ransomware | View → |
| CVE-2018-1273 | Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform remote code execution. | VMware Tanzu / Spring Data Commons | Mar 25, 2022 | Ransomware | View → |
| CVE-2018-14839 | LG N1A1 NAS 3718.510 is affected by a remote code execution vulnerability. | LG / N1A1 NAS | Mar 25, 2022 | — | View → |
| CVE-2018-6961 | VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this… | VMware / SD-WAN Edge | Mar 25, 2022 | — | View → |
| CVE-2018-8373 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. | Microsoft / Internet Explorer Scripting Engine | Mar 25, 2022 | — | View → |
| CVE-2018-8414 | A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths. | Microsoft / Windows | Mar 25, 2022 | — | View → |
| CVE-2019-0903 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An… | Microsoft / Graphics Device Interface (GDI) | Mar 25, 2022 | — | View → |