JASON SOAR

$ grep -i "$QUERY" cisa-kev-archive.log

KEV Archive

Every entry this site has seen from the CISA Known Exploited Vulnerabilities catalog, going back to its start in 2021. Nothing is removed. Search by CVE, vendor, product or any word in the description.

Back to the current feed

1,754 entries Clear search

cisa-kev-archive.log

  1. CVE-2024-37079

    Broadcom VMware vCenter Server

    Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

    Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow a malicious actor with network access to vCenter Server to send specially crafted network packets,...

    Read the full description

    Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow a malicious actor with network access to vCenter Server to send specially crafted network packets, potentially leading to remote code execution.

    Added
    2026-01-23
    Federal due date
    2026-02-13
    NVD entry

  2. CVE-2025-68645

    Synacor Zimbra Collaboration Suite (ZCS)

    Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

    Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of...

    Read the full description

    Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.

    Added
    2026-01-22
    Federal due date
    2026-02-12
    NVD entry

  3. CVE-2025-54313

    Prettier eslint-config-prettier

    Prettier eslint-config-prettier Embedded Malicious Code Vulnerability

    Prettier eslint-config-prettier contains an embedded malicious code vulnerability. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.

    Added
    2026-01-22
    Federal due date
    2026-02-12
    NVD entry

  4. CVE-2025-34026

    Versa Concerto

    Versa Concerto Improper Authentication Vulnerability

    Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be...

    Read the full description

    Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.

    Added
    2026-01-22
    Federal due date
    2026-02-12
    NVD entry

  5. CVE-2025-31125

    Vite Vitejs

    Vite Vitejs Improper Access Control Vulnerability

    Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host...

    Read the full description

    Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected.

    Added
    2026-01-22
    Federal due date
    2026-02-12
    NVD entrysunhuiHi666 on GitHub

  6. CVE-2026-20045

    Cisco Unified Communications Manager

    Cisco Unified Communications Products Code Injection Vulnerability

    Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and...

    Read the full description

    Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance contain a code injection vulnerability that could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root.

    Added
    2026-01-21
    Federal due date
    2026-02-11
    NVD entrydkstar11q on GitHub

  7. CVE-2026-20805

    Microsoft Windows

    Microsoft Windows Information Disclosure Vulnerability

    Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally.

    Added
    2026-01-13
    Federal due date
    2026-02-03
    NVD entryZeroDayEvil on GitHubfevar54 on GitHub

  8. CVE-2025-8110

    Gogs Gogs

    Gogs Path Traversal Vulnerability

    Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution.

    Added
    2026-01-12
    Federal due date
    2026-02-02
    NVD entryzAbuQasem on GitHubrxerium on GitHub

  9. CVE-2025-37164

    Hewlett Packard Enterprise (HPE) OneView

    Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

    Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote code execution.

    Added
    2026-01-07
    Federal due date
    2026-01-28
    NVD entryg0vguy on GitHub

  10. CVE-2009-0556

    Microsoft Office

    Microsoft Office PowerPoint Code Injection Vulnerability

    Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers memory corruption.

    Added
    2026-01-07
    Federal due date
    2026-01-28
    NVD entry

  11. CVE-2025-14847

    MongoDB MongoDB and MongoDB Server

    MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

    MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib compressed protocol headers. This vulnerability may allow a read of uninitialized heap memory by an unauthenticated client.

    Added
    2025-12-29
    Federal due date
    2026-01-19
    NVD entryBlack1hp on GitHubcybertechajju on GitHub

  12. CVE-2023-52163

    Digiever DS-2105 Pro

    Digiever DS-2105 Pro Missing Authorization Vulnerability

    Digiever DS-2105 Pro contains a missing authorization vulnerability which could allow for command injection via time_tzsetup.cgi.

    Added
    2025-12-22
    Federal due date
    2026-01-12
    NVD entry

  13. CVE-2025-14733

    Ransomware

    WatchGuard Firebox

    WatchGuard Firebox Out of Bounds Write Vulnerability

    WatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code and affects both the mobile user VPN with...

    Read the full description

    WatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code and affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer.

    Added
    2025-12-19
    Federal due date
    2025-12-26
    NVD entry

  14. CVE-2025-59374

    ASUS Live Update

    ASUS Live Update Embedded Malicious Code Vulnerability

    ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting...

    Read the full description

    ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

    Added
    2025-12-17
    Federal due date
    2026-01-07
    NVD entry

  15. CVE-2025-40602

    SonicWall SMA1000 appliance

    SonicWall SMA1000 Missing Authorization Vulnerability

    SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices.

    Added
    2025-12-17
    Federal due date
    2025-12-24
    NVD entry

  16. CVE-2025-20393

    Cisco Multiple Products

    Cisco Multiple Products Improper Input Validation Vulnerability

    Cisco Secure Email Gateway, Secure Email, AsyncOS Software, and Web Manager appliances contains an improper input validation vulnerability that allows threat actors to execute arbitrary commands with root privileges on the underlying...

    Read the full description

    Cisco Secure Email Gateway, Secure Email, AsyncOS Software, and Web Manager appliances contains an improper input validation vulnerability that allows threat actors to execute arbitrary commands with root privileges on the underlying operating system of an affected appliance.

    Added
    2025-12-17
    Federal due date
    2025-12-24
    NVD entry

  17. CVE-2025-59718

    Fortinet Multiple Products

    Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

    Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic signature vulnerability that may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a...

    Read the full description

    Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic signature vulnerability that may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message. Please be aware that CVE-2025-59719 pertains to the same problem and is mentioned in the same vendor advisory. Ensure to apply all patches mentioned in the advisory.

    Added
    2025-12-16
    Federal due date
    2025-12-23
    NVD entryexfil0 on GitHub

  18. CVE-2025-43529

    Apple Multiple Products

    Apple Multiple Products Use-After-Free WebKit Vulnerability

    Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit,...

    Read the full description

    Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

    Added
    2025-12-15
    Federal due date
    2026-01-05
    NVD entry0xjohnnydev on GitHubGenericCoding on GitHub

  19. CVE-2025-14611

    Gladinet CentreStack and Triofox

    Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability

    Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer...

    Read the full description

    Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication.

    Added
    2025-12-15
    Federal due date
    2026-01-05
    NVD entry

  20. CVE-2025-14174

    Google Chromium

    Google Chromium Out of Bounds Memory Access Vulnerability

    Google Chromium contains an out of bounds memory access vulnerability in ANGLE that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability could affect multiple web browsers that...

    Read the full description

    Google Chromium contains an out of bounds memory access vulnerability in ANGLE that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

    Added
    2025-12-12
    Federal due date
    2026-01-02
    NVD entrySatirush on GitHub

Exploit links go to public code from third parties, found through Exploit-DB and PoC-in-GitHub. They're there for research. Read the code before you run anything, and only test against systems you own or have permission to test.

Source CISA Known Exploited Vulnerabilities Catalog. JSON