Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2019-1003030 | Jenkins Matrix Project plugin contains a vulnerability which can allow users to escape the sandbox, opening opportunity to perform remote… | Jenkins / Matrix Project Plugin | Mar 25, 2022 | — | View → |
| CVE-2019-10068 | Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution. | Kentico / Xperience | Mar 25, 2022 | — | View → |
| CVE-2019-11043 | In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers… | PHP / FastCGI Process Manager (FPM) | Mar 25, 2022 | Ransomware | View → |
| CVE-2019-12989 | Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection. | Citrix / SD-WAN and NetScaler | Mar 25, 2022 | — | View → |
| CVE-2019-12991 | Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance. | Citrix / SD-WAN and NetScaler | Mar 25, 2022 | — | View → |
| CVE-2019-15107 | An issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability. | Webmin / Webmin | Mar 25, 2022 | Ransomware | View → |
| CVE-2019-16920 | Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise. | D-Link / Multiple Routers | Mar 25, 2022 | — | View → |
| CVE-2019-2616 | Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions.… | Oracle / BI Publisher (Formerly XML Publisher) | Mar 25, 2022 | — | View → |
| CVE-2019-6340 | In Drupal Core, some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in… | Drupal / Core | Mar 25, 2022 | — | View → |
| CVE-2020-1631 | A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication… | Juniper / Junos OS | Mar 25, 2022 | — | View → |
| CVE-2020-1956 | Apache Kylin contains an OS command injection vulnerability which could permit an attacker to perform remote code execution. | Apache / Kylin | Mar 25, 2022 | — | View → |
| CVE-2020-2021 | Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication. | Palo Alto Networks / PAN-OS | Mar 25, 2022 | Ransomware | View → |
| CVE-2020-2506 | QNAP Helpdesk contains an improper access control vulnerability which could allow an attacker to gain privileges or to read sensitive… | QNAP Systems / Helpdesk | Mar 25, 2022 | — | View → |
| CVE-2020-25223 | A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM. | Sophos / SG UTM | Mar 25, 2022 | — | View → |
| CVE-2020-5410 | Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration… | VMware Tanzu / Spring Cloud Configuration (Config) Server | Mar 25, 2022 | — | View → |
| CVE-2020-7247 | smtp_mailaddr in smtp_session.c in OpenSMTPD, as used in OpenBSD and other products, allows remote attackers to execute arbitrary commands… | OpenBSD / OpenSMTPD | Mar 25, 2022 | — | View → |
| CVE-2020-9054 | Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability, which may allow a… | Zyxel / Multiple Network-Attached Storage (NAS) Devices | Mar 25, 2022 | — | View → |
| CVE-2020-9377 | D-Link DIR-610 devices allow remote code execution via the cmd parameter to command.php. | D-Link / DIR-610 Devices | Mar 25, 2022 | — | View → |
| CVE-2021-22941 | Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the… | Citrix / ShareFile | Mar 25, 2022 | Ransomware | View → |
| CVE-2021-42237 | Sitcore XP contains an insecure deserialization vulnerability which can allow for remote code execution. | Sitecore / XP | Mar 25, 2022 | Ransomware | View → |