Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2017-16651 | Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based… | Roundcube / Roundcube Webmail | Nov 3, 2021 | — | View → |
| CVE-2017-5638 | Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution. | Apache / Struts | Nov 3, 2021 | Ransomware | View → |
| CVE-2017-6327 | Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution. With the ability to perform… | Symantec / Symantec Messaging Gateway | Nov 3, 2021 | — | View → |
| CVE-2017-7269 | Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services (IIS) 6.0 which allows remote… | Microsoft / Internet Information Services (IIS) | Nov 3, 2021 | — | View → |
| CVE-2017-8759 | Microsoft .NET Framework contains a remote code execution vulnerability when processing untrusted input that could allow an attacker to… | Microsoft / .NET Framework | Nov 3, 2021 | — | View → |
| CVE-2017-9248 | Progress Telerik UI for ASP.NET AJAX and Sitefinity have a cryptographic weakness in Telerik.Web.UI.dll that can be exploited to disclose… | Progress / ASP.NET AJAX and Sitefinity | Nov 3, 2021 | — | View → |
| CVE-2017-9805 | Apache Struts REST Plugin uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can… | Apache / Struts | Nov 3, 2021 | — | View → |
| CVE-2017-9822 | DotNetNuke (DNN) contains a vulnerability that may allow for remote code execution via cookie deserialization. | DotNetNuke (DNN) / DotNetNuke (DNN) | Nov 3, 2021 | Ransomware | View → |
| CVE-2018-0171 | Cisco IOS and IOS XE Software improperly validates packet data, allowing an unauthenticated, remote attacker to trigger a reload of an… | Cisco / IOS and IOS XE | Nov 3, 2021 | — | View → |
| CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) contains an improper input validation vulnerability with HTTP URLs. Exploitation could allow an… | Cisco / Adaptive Security Appliance (ASA) | Nov 3, 2021 | — | View → |
| CVE-2018-0798 | Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows… | Microsoft / Office | Nov 3, 2021 | — | View → |
| CVE-2018-0802 | Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows… | Microsoft / Office | Nov 3, 2021 | Ransomware | View → |
| CVE-2018-11776 | Apache Struts contains a vulnerability that allows for remote code execution under two circumstances. One, where the… | Apache / Struts | Nov 3, 2021 | — | View → |
| CVE-2018-13379 | Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS… | Fortinet / FortiOS | Nov 3, 2021 | Ransomware | View → |
| CVE-2018-14558 | Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd… | Tenda / AC7, AC9, and AC10 Routers | Nov 3, 2021 | — | View → |
| CVE-2018-15811 | DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect… | DotNetNuke (DNN) / DotNetNuke (DNN) | Nov 3, 2021 | — | View → |
| CVE-2018-15961 | Adobe ColdFusion contains an unrestricted file upload vulnerability that could allow for code execution. | Adobe / ColdFusion | Nov 3, 2021 | — | View → |
| CVE-2018-18325 | DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect… | DotNetNuke (DNN) / DotNetNuke (DNN) | Nov 3, 2021 | — | View → |
| CVE-2018-20062 | ThinkPHP "noneCms" contains an unspecified vulnerability that allows for remote code execution through crafted use of the filter parameter. | ThinkPHP / noneCms | Nov 3, 2021 | — | View → |
| CVE-2018-2380 | SAP Customer Relationship Management (CRM) contains a path traversal vulnerability that allows an attacker to exploit insufficient… | SAP / Customer Relationship Management (CRM) | Nov 3, 2021 | Ransomware | View → |