JASON SOAR

$ grep -i "$QUERY" cisa-kev-archive.log

KEV Archive

Every entry this site has seen from the CISA Known Exploited Vulnerabilities catalog, going back to its start in 2021. Nothing is removed. Search by CVE, vendor, product or any word in the description.

Back to the current feed

1,756 entries Clear search

cisa-kev-archive.log

  1. CVE-2021-30554

    Google Chromium WebGL

    Google Chromium WebGL Use-After-Free Vulnerability

    Google Chromium WebGL contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium,...

    Read the full description

    Google Chromium WebGL contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  2. CVE-2021-30551

    Google Chromium V8

    Google Chromium V8 Type Confusion Vulnerability

    Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium,...

    Read the full description

    Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entryxmzyshypnc on GitHub

  3. CVE-2021-30116

    Ransomware

    Kaseya Virtual System/Server Administrator (VSA)

    Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability

    Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  4. CVE-2021-28664

    Arm Mali Graphics Processing Unit (GPU)

    Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability

    Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other processes.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  5. CVE-2021-28663

    Arm Mali Graphics Processing Unit (GPU)

    Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability

    Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entrylntrx on GitHub

  6. CVE-2021-28550

    Adobe Acrobat and Reader

    Adobe Acrobat and Reader Use-After-Free Vulnerability

    Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  7. CVE-2021-28310

    Microsoft Win32k

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  8. CVE-2021-27562

    Arm Trusted Firmware

    Arm Trusted Firmware Out-of-Bounds Write Vulnerability

    Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure (NS) world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing...

    Read the full description

    Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure (NS) world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing environment (NSPE) handler mode. This vulnerability affects Yealink Device Management servers.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  9. CVE-2021-27561

    Yealink Device Management

    Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability

    Yealink Device Management contains a server-side request forgery (SSRF) vulnerability that allows for unauthenticated remote code execution.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  10. CVE-2021-27104

    Ransomware

    Accellion FTA

    Accellion FTA OS Command Injection Vulnerability

    Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  11. CVE-2021-27103

    Ransomware

    Accellion FTA

    Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability

    Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  12. CVE-2021-27102

    Ransomware

    Accellion FTA

    Accellion FTA OS Command Injection Vulnerability

    Accellion FTA contains an OS command injection vulnerability exploited via a local web service call.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  13. CVE-2021-27101

    Ransomware

    Accellion FTA

    Accellion FTA SQL Injection Vulnerability

    Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  14. CVE-2021-27085

    Microsoft Internet Explorer

    Microsoft Internet Explorer Remote Code Execution Vulnerability

    Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  15. CVE-2021-27065

    Ransomware

    Microsoft Exchange Server

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entryExploit-DBadamrpostjr on GitHub

  16. CVE-2021-27059

    Microsoft Office

    Microsoft Office Remote Code Execution Vulnerability

    Microsoft Office contains an unspecified vulnerability that allows for remote code execution.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  17. CVE-2021-26858

    Ransomware

    Microsoft Exchange Server

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entry

  18. CVE-2021-26857

    Ransomware

    Microsoft Exchange Server

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entrysirpedrotavares on GitHub

  19. CVE-2021-26855

    Ransomware

    Microsoft Exchange Server

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entryExploit-DBFlangvik on GitHub

  20. CVE-2021-26411

    Ransomware

    Microsoft Internet Explorer

    Microsoft Internet Explorer Memory Corruption Vulnerability

    Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

Exploit links go to public code from third parties, found through Exploit-DB and PoC-in-GitHub. They're there for research. Read the code before you run anything, and only test against systems you own or have permission to test.

Source CISA Known Exploited Vulnerabilities Catalog. JSON