JASON SOAR

$ grep -i "$QUERY" cisa-kev-archive.log

KEV Archive

Every entry this site has seen from the CISA Known Exploited Vulnerabilities catalog, going back to its start in 2021. Nothing is removed. Search by CVE, vendor, product or any word in the description.

Back to the current feed

1,756 entries Clear search

cisa-kev-archive.log
  1. CVE-2012-4969

    Microsoft Internet Explorer

    Microsoft Internet Explorer Use-After-Free Vulnerability

    Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.

    Added
    2022-06-08
    Federal due date
    2022-06-22
  2. CVE-2012-1889

    Microsoft XML Core Services

    Microsoft XML Core Services Memory Corruption Vulnerability

    Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.

    Added
    2022-06-08
    Federal due date
    2022-06-22
  3. CVE-2012-0767

    Adobe Flash Player

    Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability

    Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.

    Added
    2022-06-08
    Federal due date
    2022-06-22
  4. CVE-2012-0754

    Adobe Flash Player

    Adobe Flash Player Memory Corruption Vulnerability

    Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

    Added
    2022-06-08
    Federal due date
    2022-06-22
  5. CVE-2012-0151

    Microsoft Windows

    Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

    The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.

    Added
    2022-06-08
    Federal due date
    2022-06-22
  6. CVE-2011-2462

    Adobe Reader and Acrobat

    Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability

    The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).

    Added
    2022-06-08
    Federal due date
    2022-06-22
  7. CVE-2011-0609

    Adobe Flash Player

    Adobe Flash Player Unspecified Vulnerability

    Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

    Added
    2022-06-08
    Federal due date
    2022-06-22
  8. CVE-2010-2883

    Adobe Acrobat and Reader

    Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability

    Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

    Added
    2022-06-08
    Federal due date
    2022-06-22
  9. CVE-2010-2572

    Microsoft PowerPoint

    Microsoft PowerPoint Buffer Overflow Vulnerability

    Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.

    Added
    2022-06-08
    Federal due date
    2022-06-22
  10. CVE-2010-1297

    Adobe Flash Player

    Adobe Flash Player Memory Corruption Vulnerability

    Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

    Added
    2022-06-08
    Federal due date
    2022-06-22
  11. CVE-2009-4324

    Adobe Acrobat and Reader

    Adobe Acrobat and Reader Use-After-Free Vulnerability

    Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.

    Added
    2022-06-08
    Federal due date
    2022-06-22
  12. CVE-2009-3953

    Adobe Acrobat and Reader

    Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

    Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.

    Added
    2022-06-08
    Federal due date
    2022-06-22
  13. CVE-2009-1862

    Adobe Acrobat and Reader, Flash Player

    Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability

    Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).

    Added
    2022-06-08
    Federal due date
    2022-06-22
  14. CVE-2009-0563

    Microsoft Office

    Microsoft Office Buffer Overflow Vulnerability

    Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.

    Added
    2022-06-08
    Federal due date
    2022-06-22
  15. CVE-2009-0557

    Microsoft Office

    Microsoft Office Object Record Corruption Vulnerability

    Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.

    Added
    2022-06-08
    Federal due date
    2022-06-22
  16. CVE-2008-0655

    Adobe Acrobat and Reader

    Adobe Acrobat and Reader Unspecified Vulnerability

    Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.

    Added
    2022-06-08
    Federal due date
    2022-06-22
  17. CVE-2007-5659

    Adobe Acrobat and Reader

    Adobe Acrobat and Reader Buffer Overflow Vulnerability

    Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.

    Added
    2022-06-08
    Federal due date
    2022-06-22
  18. CVE-2006-2492

    Microsoft Word

    Microsoft Word Malformed Object Pointer Vulnerability

    Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.

    Added
    2022-06-08
    Federal due date
    2022-06-22
  19. CVE-2022-26134

    Ransomware

    Atlassian Confluence Server/Data Center

    Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability

    Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.

    Added
    2022-06-02
    Federal due date
    2022-06-06
  20. CVE-2019-3010

    Oracle Solaris

    Oracle Solaris Privilege Escalation Vulnerability

    Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation.

    Added
    2022-05-25
    Federal due date
    2022-06-15

Exploit links go to public code from third parties, found through Exploit-DB and PoC-in-GitHub. They're there for research. Read the code before you run anything, and only test against systems you own or have permission to test.

Source CISA Known Exploited Vulnerabilities Catalog. JSON