JASON SOAR

$ grep -i "$QUERY" cisa-kev-archive.log

KEV Archive

Every entry this site has seen from the CISA Known Exploited Vulnerabilities catalog, going back to its start in 2021. Nothing is removed. Search by CVE, vendor, product or any word in the description.

Back to the current feed

1,754 entries Clear search

cisa-kev-archive.log

  1. CVE-2025-0111

    Palo Alto Networks PAN-OS

    Palo Alto Networks PAN-OS File Read Vulnerability

    Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem...

    Read the full description

    Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user.

    Added
    2025-02-20
    Federal due date
    2025-03-13
    NVD entry

  2. CVE-2025-0108

    Palo Alto Networks PAN-OS

    Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

    Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web interface. This vulnerability allows an unauthenticated attacker with network access to the management web interface to bypass the...

    Read the full description

    Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web interface. This vulnerability allows an unauthenticated attacker with network access to the management web interface to bypass the authentication normally required and invoke certain PHP scripts.

    Added
    2025-02-18
    Federal due date
    2025-03-11
    NVD entryiSee857 on GitHubFOLKS-iwd on GitHub

  3. CVE-2024-53704

    Ransomware

    SonicWall SonicOS

    SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

    SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication.

    Added
    2025-02-18
    Federal due date
    2025-03-11
    NVD entry

  4. CVE-2024-57727

    Ransomware

    SimpleHelp SimpleHelp

    SimpleHelp Path Traversal Vulnerability

    SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server...

    Read the full description

    SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server configuration files and hashed user passwords.

    Added
    2025-02-13
    Federal due date
    2025-03-06
    NVD entryimjdl on GitHub

  5. CVE-2025-24200

    Apple iOS and iPadOS

    Apple iOS and iPadOS Incorrect Authorization Vulnerability

    Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device.

    Added
    2025-02-12
    Federal due date
    2025-03-05
    NVD entry

  6. CVE-2024-41710

    Mitel SIP Phones

    Mitel SIP Phones Argument Injection Vulnerability

    Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may...

    Read the full description

    Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may allow an attacker to execute arbitrary commands within the context of the system.

    Added
    2025-02-12
    Federal due date
    2025-03-05
    NVD entry

  7. CVE-2025-21418

    Microsoft Windows

    Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

    Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.

    Added
    2025-02-11
    Federal due date
    2025-03-04
    NVD entry

  8. CVE-2025-21391

    Microsoft Windows

    Microsoft Windows Storage Link Following Vulnerability

    Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.

    Added
    2025-02-11
    Federal due date
    2025-03-04
    NVD entry

  9. CVE-2024-40891

    Zyxel DSL CPE Devices

    Zyxel DSL CPE OS Command Injection Vulnerability

    Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow an authenticated attacker to execute OS commands via Telnet.

    Added
    2025-02-11
    Federal due date
    2025-03-04
    NVD entry

  10. CVE-2024-40890

    Zyxel DSL CPE Devices

    Zyxel DSL CPE OS Command Injection Vulnerability

    Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that could allow an authenticated attacker to execute OS commands via a crafted HTTP request.

    Added
    2025-02-11
    Federal due date
    2025-03-04
    NVD entry

  11. CVE-2025-0994

    Trimble Cityworks

    Trimble Cityworks Deserialization Vulnerability

    Trimble Cityworks contains a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer's Microsoft Internet Information Services (IIS) web server.

    Added
    2025-02-07
    Federal due date
    2025-02-28
    NVD entry

  12. CVE-2025-0411

    7-Zip 7-Zip

    7-Zip Mark of the Web Bypass Vulnerability

    7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user.

    Added
    2025-02-06
    Federal due date
    2025-02-27
    NVD entrydhmosfunk on GitHub

  13. CVE-2024-21413

    Microsoft Office Outlook

    Microsoft Outlook Improper Input Validation Vulnerability

    Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode...

    Read the full description

    Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.

    Added
    2025-02-06
    Federal due date
    2025-02-27
    NVD entryxaitax on GitHubCMNatic on GitHub

  14. CVE-2022-23748

    Audinate Dante Discovery

    Dante Discovery Process Control Vulnerability

    Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code.

    Added
    2025-02-06
    Federal due date
    2025-02-27
    NVD entry

  15. CVE-2020-29574

    Ransomware

    Sophos CyberoamOS

    CyberoamOS (CROS) SQL Injection Vulnerability

    CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely.

    Added
    2025-02-06
    Federal due date
    2025-02-27
    NVD entry

  16. CVE-2020-15069

    Sophos XG Firewall

    Sophos XG Firewall Buffer Overflow Vulnerability

    Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the "HTTP/S bookmark" feature.

    Added
    2025-02-06
    Federal due date
    2025-02-27
    NVD entry

  17. CVE-2024-53104

    Linux Kernel

    Linux Kernel Out-of-Bounds Write Vulnerability

    Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that could allow for physical escalation of privilege.

    Added
    2025-02-05
    Federal due date
    2025-02-26
    NVD entry

  18. CVE-2024-45195

    Apache OFBiz

    Apache OFBiz Forced Browsing Vulnerability

    Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obtain unauthorized access.

    Added
    2025-02-04
    Federal due date
    2025-02-25
    NVD entry

  19. CVE-2024-29059

    Microsoft .NET Framework

    Microsoft .NET Framework Information Disclosure Vulnerability

    Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution.

    Added
    2025-02-04
    Federal due date
    2025-02-25
    NVD entrycodewhitesec on GitHub

  20. CVE-2018-9276

    Paessler PRTG Network Monitor

    Paessler PRTG Network Monitor OS Command Injection Vulnerability

    Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execute commands via the PRTG System Administrator web console.

    Added
    2025-02-04
    Federal due date
    2025-02-25
    NVD entryExploit-DBwildkindcc on GitHub

Exploit links go to public code from third parties, found through Exploit-DB and PoC-in-GitHub. They're there for research. Read the code before you run anything, and only test against systems you own or have permission to test.

Source CISA Known Exploited Vulnerabilities Catalog. JSON