JASON SOAR

$ grep -i "$QUERY" cisa-kev-archive.log

KEV Archive

Every entry this site has seen from the CISA Known Exploited Vulnerabilities catalog, going back to its start in 2021. Nothing is removed. Search by CVE, vendor, product or any word in the description.

Back to the current feed

1,754 entries Clear search

cisa-kev-archive.log

  1. CVE-2024-21893

    Ransomware

    Ivanti Connect Secure, Policy Secure, and Neurons

    Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

    Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request forgery (SSRF) vulnerability in the SAML component that allows an attacker to access certain...

    Read the full description

    Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request forgery (SSRF) vulnerability in the SAML component that allows an attacker to access certain restricted resources without authentication.

    Added
    2024-01-31
    Federal due date
    2024-02-02
    NVD entryh4x0r-dz on GitHubChocapikk on GitHub

  2. CVE-2022-48618

    Apple Multiple Products

    Apple Multiple Products Memory Corruption Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication.

    Added
    2024-01-31
    Federal due date
    2024-02-21
    NVD entry

  3. CVE-2023-22527

    Ransomware

    Atlassian Confluence Data Center and Server

    Atlassian Confluence Data Center and Server Template Injection Vulnerability

    Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code execution.

    Added
    2024-01-24
    Federal due date
    2024-02-14
    NVD entryBoogipop on GitHubM0untainShley on GitHub

  4. CVE-2024-23222

    Apple Multiple Products

    Apple Multiple Products WebKit Type Confusion Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including...

    Read the full description

    Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

    Added
    2024-01-23
    Federal due date
    2024-02-13
    NVD entryFuzzySecurity on GitHubRohitberiwala on GitHub

  5. CVE-2023-34048

    VMware vCenter Server

    VMware vCenter Server Out-of-Bounds Write Vulnerability

    VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol that allows an attacker to conduct remote code execution.

    Added
    2024-01-22
    Federal due date
    2024-02-12
    NVD entry

  6. CVE-2023-35082

    Ransomware

    Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core

    Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability

    Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to access restricted functionality or resources of the application.

    Added
    2024-01-18
    Federal due date
    2024-02-08
    NVD entry

  7. CVE-2024-0519

    Google Chromium V8

    Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

    Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that...

    Read the full description

    Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

    Added
    2024-01-17
    Federal due date
    2024-02-07
    NVD entry

  8. CVE-2023-6549

    Citrix NetScaler ADC and NetScaler Gateway

    Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

    Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

    Added
    2024-01-17
    Federal due date
    2024-02-07
    NVD entry

  9. CVE-2023-6548

    Citrix NetScaler ADC and NetScaler Gateway

    Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

    Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.

    Added
    2024-01-17
    Federal due date
    2024-01-24
    NVD entry

  10. CVE-2018-15133

    Laravel Laravel Framework

    Laravel Deserialization of Untrusted Data Vulnerability

    Laravel Framework contains a deserialization of untrusted data vulnerability, allowing for remote command execution. This vulnerability may only be exploited if a malicious user has accessed the application encryption key (APP_KEY environment variable).

    Added
    2024-01-16
    Federal due date
    2024-02-06
    NVD entryExploit-DBkozmic on GitHub

  11. CVE-2024-21887

    Ransomware

    Ivanti Connect Secure and Policy Secure

    Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

    Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain a command injection vulnerability in the web components of these products, which can allow an authenticated administrator to send crafted...

    Read the full description

    Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain a command injection vulnerability in the web components of these products, which can allow an authenticated administrator to send crafted requests to execute code on affected appliances. This vulnerability can be leveraged in conjunction with CVE-2023-46805, an authenticated bypass issue.

    Added
    2024-01-10
    Federal due date
    2024-01-22
    NVD entryChocapikk on GitHubduy-31 on GitHub

  12. CVE-2023-46805

    Ransomware

    Ivanti Connect Secure and Policy Secure

    Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

    Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted resources by bypassing...

    Read the full description

    Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted resources by bypassing control checks. This vulnerability can be leveraged in conjunction with CVE-2024-21887, a command injection vulnerability.

    Added
    2024-01-10
    Federal due date
    2024-01-22
    NVD entryduy-31 on GitHubChocapikk on GitHub

  13. CVE-2023-29357

    Ransomware

    Microsoft SharePoint Server

    Microsoft SharePoint Server Privilege Escalation Vulnerability

    Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses...

    Read the full description

    Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses authentication, enabling the attacker to gain administrator privileges.

    Added
    2024-01-10
    Federal due date
    2024-01-31
    NVD entryChocapikk on GitHubLuemmelSec on GitHub

  14. CVE-2023-41990

    Apple Multiple Products

    Apple Multiple Products Code Execution Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file.

    Added
    2024-01-08
    Federal due date
    2024-01-29
    NVD entry

  15. CVE-2023-38203

    Ransomware

    Adobe ColdFusion

    Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

    Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.

    Added
    2024-01-08
    Federal due date
    2024-01-29
    NVD entry

  16. CVE-2023-29300

    Ransomware

    Adobe ColdFusion

    Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

    Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.

    Added
    2024-01-08
    Federal due date
    2024-01-29
    NVD entry

  17. CVE-2023-27524

    Apache Superset

    Apache Superset Insecure Default Initialization of Resource Vulnerability

    Apache Superset contains an insecure default initialization of a resource vulnerability that allows an attacker to authenticate and access unauthorized resources on installations that have not altered the default configured SECRET_KEY...

    Read the full description

    Apache Superset contains an insecure default initialization of a resource vulnerability that allows an attacker to authenticate and access unauthorized resources on installations that have not altered the default configured SECRET_KEY according to installation instructions.

    Added
    2024-01-08
    Federal due date
    2024-01-29
    NVD entryExploit-DBhorizon3ai on GitHub

  18. CVE-2023-23752

    Joomla! Joomla!

    Joomla! Improper Access Control Vulnerability

    Joomla! contains an improper access control vulnerability that allows unauthorized access to webservice endpoints.

    Added
    2024-01-08
    Federal due date
    2024-01-29
    NVD entryExploit-DBAcceis on GitHub

  19. CVE-2016-20017

    D-Link DSL-2750B Devices

    D-Link DSL-2750B Devices Command Injection Vulnerability

    D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.

    Added
    2024-01-08
    Federal due date
    2024-01-29
    NVD entry

  20. CVE-2023-7101

    Spreadsheet::ParseExcel Spreadsheet::ParseExcel

    Spreadsheet::ParseExcel Remote Code Execution Vulnerability

    Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.

    Added
    2024-01-02
    Federal due date
    2024-01-23
    NVD entry

Exploit links go to public code from third parties, found through Exploit-DB and PoC-in-GitHub. They're there for research. Read the code before you run anything, and only test against systems you own or have permission to test.

Source CISA Known Exploited Vulnerabilities Catalog. JSON