JASON SOAR

$ grep -i "$QUERY" cisa-kev-archive.log

KEV Archive

Every entry this site has seen from the CISA Known Exploited Vulnerabilities catalog, going back to its start in 2021. Nothing is removed. Search by CVE, vendor, product or any word in the description.

Back to the current feed

1,754 entries Clear search

cisa-kev-archive.log

  1. CVE-2024-11120

    GeoVision Multiple Devices

    GeoVision Devices OS Command Injection Vulnerability

    Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service...

    Read the full description

    Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

    Added
    2025-05-07
    Federal due date
    2025-05-28
    NVD entry

  2. CVE-2025-27363

    FreeType FreeType

    FreeType Out-of-Bounds Write Vulnerability

    FreeType contains an out-of-bounds write vulnerability when attempting to parse font subglyph structures related to TrueType GX and variable font files that may allow for arbitrary code execution.

    Added
    2025-05-06
    Federal due date
    2025-05-27
    NVD entryzhuowei on GitHubtin-z on GitHub

  3. CVE-2025-3248

    Ransomware

    Langflow Langflow

    Langflow Missing Authentication Vulnerability

    Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.

    Added
    2025-05-05
    Federal due date
    2025-05-26
    NVD entryExploit-DBynsmroztas on GitHub

  4. CVE-2025-34028

    Commvault Command Center

    Commvault Command Center Path Traversal Vulnerability

    Commvault Command Center contains a path traversal vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code.

    Added
    2025-05-02
    Federal due date
    2025-05-23
    NVD entrywatchtowrlabs on GitHub

  5. CVE-2024-58136

    Yiiframework Yii

    Yiiframework Yii Improper Protection of Alternate Path Vulnerability

    Yii Framework contains an improper protection of alternate path vulnerability that may allow a remote attacker to execute arbitrary code. This vulnerability could affect other products that implement Yii, including—but not limited to—Craft...

    Read the full description

    Yii Framework contains an improper protection of alternate path vulnerability that may allow a remote attacker to execute arbitrary code. This vulnerability could affect other products that implement Yii, including—but not limited to—Craft CMS, as represented by CVE-2025-32432.

    Added
    2025-05-02
    Federal due date
    2025-05-23
    NVD entry

  6. CVE-2024-38475

    Apache HTTP Server

    Apache HTTP Server Improper Escaping of Output Vulnerability

    Apache HTTP Server contains an improper escaping of output vulnerability in mod_rewrite that allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable...

    Read the full description

    Apache HTTP Server contains an improper escaping of output vulnerability in mod_rewrite that allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure.

    Added
    2025-05-01
    Federal due date
    2025-05-22
    NVD entryp0in7s on GitHub

  7. CVE-2023-44221

    SonicWall SMA100 Appliances

    SonicWall SMA100 Appliances OS Command Injection Vulnerability

    SonicWall SMA100 appliances contain an OS command injection vulnerability in the SSL-VPN management interface that allows a remote, authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user.

    Added
    2025-05-01
    Federal due date
    2025-05-22
    NVD entry

  8. CVE-2025-31324

    Ransomware

    SAP NetWeaver

    SAP NetWeaver Unrestricted File Upload Vulnerability

    SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries.

    Added
    2025-04-29
    Federal due date
    2025-05-20
    NVD entryredrays-io on GitHubantichainalysis on GitHub

  9. CVE-2025-42599

    Qualitia Active! Mail

    Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

    Qualitia Active! Mail contains a stack-based buffer overflow vulnerability that allows a remote, unauthenticated attacker to execute arbitrary or trigger a denial-of-service via a specially crafted request.

    Added
    2025-04-28
    Federal due date
    2025-05-19
    NVD entry

  10. CVE-2025-3928

    Commvault Web Server

    Commvault Web Server Unspecified Vulnerability

    Commvault Web Server contains an unspecified vulnerability that allows a remote, authenticated attacker to create and execute webshells.

    Added
    2025-04-28
    Federal due date
    2025-05-19
    NVD entry

  11. CVE-2025-1976

    Broadcom Brocade Fabric OS

    Broadcom Brocade Fabric OS Code Injection Vulnerability

    Broadcom Brocade Fabric OS contains a code injection vulnerability that allows a local user with administrative privileges to execute arbitrary code with full root privileges.

    Added
    2025-04-28
    Federal due date
    2025-05-19
    NVD entry

  12. CVE-2025-31201

    Apple Multiple Products

    Apple Multiple Products Arbitrary Read and Write Vulnerability

    Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.

    Added
    2025-04-17
    Federal due date
    2025-05-08
    NVD entry

  13. CVE-2025-31200

    Apple Multiple Products

    Apple Multiple Products Memory Corruption Vulnerability

    Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file.

    Added
    2025-04-17
    Federal due date
    2025-05-08
    NVD entryJGoyd on GitHubzhuowei on GitHub

  14. CVE-2025-24054

    Microsoft Windows

    Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

    Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.

    Added
    2025-04-17
    Federal due date
    2025-05-08
    NVD entryExploit-DBhelidem on GitHub

  15. CVE-2021-20035

    SonicWall SMA100 Appliances

    SonicWall SMA100 Appliances OS Command Injection Vulnerability

    SonicWall SMA100 appliances contain an OS command injection vulnerability in the management interface that allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, which could potentially lead to code execution.

    Added
    2025-04-16
    Federal due date
    2025-05-07
    NVD entry

  16. CVE-2024-53197

    Linux Kernel

    Linux Kernel Out-of-Bounds Access Vulnerability

    Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or...

    Read the full description

    Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code.

    Added
    2025-04-09
    Federal due date
    2025-04-30
    NVD entry

  17. CVE-2024-53150

    Linux Kernel

    Linux Kernel Out-of-Bounds Read Vulnerability

    Linux Kernel contains an out-of-bounds read vulnerability in the USB-audio driver that allows a local, privileged attacker to obtain potentially sensitive information.

    Added
    2025-04-09
    Federal due date
    2025-04-30
    NVD entry

  18. CVE-2025-30406

    Gladinet CentreStack

    Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability

    Gladinet CentreStack and Triofox contains a use of hard-coded cryptographic key vulnerability in the way that the application manages keys used for ViewState integrity verification. Successful exploitation allows an attacker to forge...

    Read the full description

    Gladinet CentreStack and Triofox contains a use of hard-coded cryptographic key vulnerability in the way that the application manages keys used for ViewState integrity verification. Successful exploitation allows an attacker to forge ViewState payloads for server-side deserialization, allowing for remote code execution.

    Added
    2025-04-08
    Federal due date
    2025-04-29
    NVD entrymchklt on GitHubW01fh4cker on GitHub

  19. CVE-2025-29824

    Ransomware

    Microsoft Windows

    Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

    Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

    Added
    2025-04-08
    Federal due date
    2025-04-29
    NVD entryencrypter15 on GitHubAfanPan on GitHub

  20. CVE-2025-31161

    Ransomware

    CrushFTP CrushFTP

    CrushFTP Authentication Bypass Vulnerability

    CrushFTP contains an authentication bypass vulnerability in the HTTP authorization header that allows a remote unauthenticated attacker to authenticate to any known or guessable user account (e.g., crushadmin), potentially leading to a full compromise.

    Added
    2025-04-07
    Federal due date
    2025-04-28
    NVD entryExploit-DBImmersive-Labs-Sec on GitHub

Exploit links go to public code from third parties, found through Exploit-DB and PoC-in-GitHub. They're there for research. Read the code before you run anything, and only test against systems you own or have permission to test.

Source CISA Known Exploited Vulnerabilities Catalog. JSON