JASON SOAR

$ grep -i "$QUERY" cisa-kev-archive.log

KEV Archive

Every entry this site has seen from the CISA Known Exploited Vulnerabilities catalog, going back to its start in 2021. Nothing is removed. Search by CVE, vendor, product or any word in the description.

Back to the current feed

1,756 entries Clear search

cisa-kev-archive.log

  1. CVE-2022-20701

    Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and...

    Read the full description

    A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entry

  2. CVE-2022-20700

    Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and...

    Read the full description

    A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entry

  3. CVE-2022-20699

    Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and...

    Read the full description

    A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entryAudiobahn on GitHub

  4. CVE-2021-41379

    Ransomware

    Microsoft Windows

    Microsoft Windows Installer Privilege Escalation Vulnerability

    Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entry

  5. CVE-2020-1938

    Apache Tomcat

    Apache Tomcat Improper Privilege Management Vulnerability

    Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entryExploit-DB00theway on GitHub

  6. CVE-2020-11899

    Treck TCP/IP stack IPv6

    Treck TCP/IP stack Out-of-Bounds Read Vulnerability

    The Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability.

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entry

  7. CVE-2019-16928

    Exim Exim Internet Mailer

    Exim Out-of-bounds Write Vulnerability

    Exim contains an out-of-bounds write vulnerability which can allow for remote code execution.

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entry

  8. CVE-2019-1652

    Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers

    Cisco Small Business Routers Improper Input Validation Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands.

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entryExploit-DB0x27 on GitHub

  9. CVE-2019-1297

    Microsoft Excel

    Microsoft Excel Remote Code Execution Vulnerability

    A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entry

  10. CVE-2018-8581

    Ransomware

    Microsoft Exchange Server

    Microsoft Exchange Server Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entryRidter on GitHubWyAtu on GitHub

  11. CVE-2018-8298

    ChakraCore ChakraCore scripting engine

    ChakraCore Scripting Engine Type Confusion Vulnerability

    The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entryExploit-DB

  12. CVE-2018-0180

    Cisco IOS Software

    Cisco IOS Software Denial-of-Service Vulnerability

    A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entry

  13. CVE-2018-0179

    Cisco IOS Software

    Cisco IOS Software Denial-of-Service Vulnerability

    A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entry

  14. CVE-2018-0175

    Cisco IOS, XR, and XE Software

    Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

    Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS)...

    Read the full description

    Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device.

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entry

  15. CVE-2018-0174

    Cisco IOS XE Software

    Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entry

  16. CVE-2018-0173

    Cisco IOS and IOS XE Software

    Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

    A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets can allow for denial-of-service (DoS).

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entry

  17. CVE-2018-0172

    Cisco IOS and IOS XE Software

    Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entry

  18. CVE-2018-0167

    Cisco IOS, XR, and XE Software

    Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

    There is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software which could allow an unauthenticated, adjacent attacker to cause a...

    Read the full description

    There is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software which could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code.

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entry

  19. CVE-2018-0161

    Cisco IOS Software

    Cisco IOS Software Resource Management Errors Vulnerability

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service (DoS) condition.

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entry

  20. CVE-2018-0159

    Cisco IOS Software and Cisco IOS XE Software

    Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability

    A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting...

    Read the full description

    A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.

    Added
    2022-03-03
    Federal due date
    2022-03-17
    NVD entry

Exploit links go to public code from third parties, found through Exploit-DB and PoC-in-GitHub. They're there for research. Read the code before you run anything, and only test against systems you own or have permission to test.

Source CISA Known Exploited Vulnerabilities Catalog. JSON