JASON SOAR

$ grep -i "$QUERY" cisa-kev-archive.log

KEV Archive

Every entry this site has seen from the CISA Known Exploited Vulnerabilities catalog, going back to its start in 2021. Nothing is removed. Search by CVE, vendor, product or any word in the description.

Back to the current feed

1,754 entries Clear search

cisa-kev-archive.log

  1. CVE-2022-40799

    D-Link DNR-322L

    D-Link DNR-322L Download of Code Without Integrity Check Vulnerability

    D-Link DNR-322L contains a download of code without integrity check vulnerability that could allow an authenticated attacker to execute OS level commands on the device. The impacted products could be end-of-life (EoL) and/or end-of-service...

    Read the full description

    D-Link DNR-322L contains a download of code without integrity check vulnerability that could allow an authenticated attacker to execute OS level commands on the device. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

    Added
    2025-08-05
    Federal due date
    2025-08-26
    NVD entry

  2. CVE-2020-25079

    D-Link DCS-2530L and DCS-2670L Devices

    D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability

    D-Link DCS-2530L and DCS-2670L devices contains a command injection vulnerability in the cgi-bin/ddns_enc.cgi. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

    Added
    2025-08-05
    Federal due date
    2025-08-26
    NVD entry

  3. CVE-2020-25078

    D-Link DCS-2530L and DCS-2670L Devices

    D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability

    D-Link DCS-2530L and DCS-2670L devices contains an unspecified vulnerability that could allow for remote administrator password disclosure. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should...

    Read the full description

    D-Link DCS-2530L and DCS-2670L devices contains an unspecified vulnerability that could allow for remote administrator password disclosure. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

    Added
    2025-08-05
    Federal due date
    2025-08-26
    NVD entry

  4. CVE-2025-20337

    Cisco Identity Services Engine

    Cisco Identity Services Engine Injection Vulnerability

    Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a...

    Read the full description

    Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.

    Added
    2025-07-28
    Federal due date
    2025-08-18
    NVD entry

  5. CVE-2025-20281

    Cisco Identity Services Engine

    Cisco Identity Services Engine Injection Vulnerability

    Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a...

    Read the full description

    Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.

    Added
    2025-07-28
    Federal due date
    2025-08-18
    NVD entryabrewer251 on GitHubgrupooruss on GitHub

  6. CVE-2023-2533

    PaperCut NG/MF

    PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

    PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code.

    Added
    2025-07-28
    Federal due date
    2025-08-18
    NVD entry

  7. CVE-2025-6558

    Google Chromium

    Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

    Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect...

    Read the full description

    Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

    Added
    2025-07-22
    Federal due date
    2025-08-12
    NVD entryDevBuiHieu on GitHub

  8. CVE-2025-54309

    CrushFTP CrushFTP

    CrushFTP Unprotected Alternate Channel Vulnerability

    CrushFTP contains an unprotected alternate channel vulnerability. When the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers to obtain admin access via HTTPS.

    Added
    2025-07-22
    Federal due date
    2025-08-12
    NVD entrywatchtowrlabs on GitHub

  9. CVE-2025-49706

    Ransomware

    Microsoft SharePoint

    Microsoft SharePoint Improper Authentication Vulnerability

    Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some...

    Read the full description

    Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some changes to disclosed information. This vulnerability could be chained with CVE-2025-49704. CVE-2025-53771 is a patch bypass for CVE-2025-49706, and the updates for CVE-2025-53771 include more robust protection than those for CVE-2025-49706.

    Added
    2025-07-22
    Federal due date
    2025-07-23
    NVD entryAdityaBhatt3010 on GitHub

  10. CVE-2025-49704

    Ransomware

    Microsoft SharePoint

    Microsoft SharePoint Code Injection Vulnerability

    Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for...

    Read the full description

    Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.

    Added
    2025-07-22
    Federal due date
    2025-07-23
    NVD entry

  11. CVE-2025-2776

    SysAid SysAid On-Prem

    SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

    SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.

    Added
    2025-07-22
    Federal due date
    2025-08-12
    NVD entry

  12. CVE-2025-2775

    SysAid SysAid On-Prem

    SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

    SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.

    Added
    2025-07-22
    Federal due date
    2025-08-12
    NVD entrywatchtowrlabs on GitHub

  13. CVE-2025-53770

    Ransomware

    Microsoft SharePoint

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-53771....

    Read the full description

    Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-53771. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.

    Added
    2025-07-20
    Federal due date
    2025-07-21
    NVD entryExploit-DBsoltanali0 on GitHub

  14. CVE-2025-25257

    Fortinet FortiWeb

    Fortinet FortiWeb SQL Injection Vulnerability

    Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.

    Added
    2025-07-18
    Federal due date
    2025-08-08
    NVD entryExploit-DBwatchtowrlabs on GitHub

  15. CVE-2025-47812

    Wing FTP Server Wing FTP Server

    Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

    Wing FTP Server contains an improper neutralization of null byte or NUL character vulnerability that can allow injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the...

    Read the full description

    Wing FTP Server contains an improper neutralization of null byte or NUL character vulnerability that can allow injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default).

    Added
    2025-07-14
    Federal due date
    2025-08-04
    NVD entryExploit-DB4m3rr0r on GitHub

  16. CVE-2025-5777

    Ransomware

    Citrix NetScaler ADC and Gateway

    Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

    Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy,...

    Read the full description

    Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.

    Added
    2025-07-10
    Federal due date
    2025-07-11
    NVD entryExploit-DBwin3zz on GitHub

  17. CVE-2019-9621

    Synacor Zimbra Collaboration Suite (ZCS)

    Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

    Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery (SSRF) vulnerability via the ProxyServlet component.

    Added
    2025-07-07
    Federal due date
    2025-07-28
    NVD entryExploit-DBk8gege on GitHub

  18. CVE-2019-5418

    Rails Ruby on Rails

    Rails Ruby on Rails Path Traversal Vulnerability

    Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.

    Added
    2025-07-07
    Federal due date
    2025-07-28
    NVD entryExploit-DBmpgn on GitHub

  19. CVE-2016-10033

    PHP PHPMailer

    PHPMailer Command Injection Vulnerability

    PHPMailer contains a command injection vulnerability because it fails to sanitize user-supplied input. Specifically, this issue affects the 'mail()' function of 'class.phpmailer.php' script. An attacker can exploit this issue to execute...

    Read the full description

    PHPMailer contains a command injection vulnerability because it fails to sanitize user-supplied input. Specifically, this issue affects the 'mail()' function of 'class.phpmailer.php' script. An attacker can exploit this issue to execute arbitrary code within the context of the application. Failed exploit attempts will result in a denial-of-service condition.

    Added
    2025-07-07
    Federal due date
    2025-07-28
    NVD entryExploit-DBopsxcq on GitHub

  20. CVE-2014-3931

    Looking Glass Multi-Router Looking Glass (MRLG)

    Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability

    Multi-Router Looking Glass (MRLG) contains a buffer overflow vulnerability that could allow remote attackers to cause an arbitrary memory write and memory corruption.

    Added
    2025-07-07
    Federal due date
    2025-07-28
    NVD entry

Exploit links go to public code from third parties, found through Exploit-DB and PoC-in-GitHub. They're there for research. Read the code before you run anything, and only test against systems you own or have permission to test.

Source CISA Known Exploited Vulnerabilities Catalog. JSON