JASON SOAR

$ grep -i "$QUERY" cisa-kev-archive.log

KEV Archive

Every entry this site has seen from the CISA Known Exploited Vulnerabilities catalog, going back to its start in 2021. Nothing is removed. Search by CVE, vendor, product or any word in the description.

Back to the current feed

1,756 entries Clear search

cisa-kev-archive.log

  1. CVE-2020-0938

    Microsoft Windows

    Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

    Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10....

    Read the full description

    Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entry

  2. CVE-2020-0878

    Ransomware

    Microsoft Edge and Internet Explorer

    Microsoft Edge and Internet Explorer Memory Corruption Vulnerability

    Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entry

  3. CVE-2020-0688

    Ransomware

    Microsoft Exchange Server

    Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

    Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entryExploit-DBzcgonvh on GitHub

  4. CVE-2020-0683

    Microsoft Windows

    Microsoft Windows Installer Privilege Escalation Vulnerability

    Microsoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links, which allows attackers to bypass access restrictions to add or remove files.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entryExploit-DBpadovah4ck on GitHub

  5. CVE-2020-0674

    Microsoft Internet Explorer

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entryExploit-DBmaxpl0it on GitHub

  6. CVE-2020-0646

    Microsoft .NET Framework

    Microsoft .NET Framework Remote Code Execution Vulnerability

    Microsoft .NET Framework contains an improper input validation vulnerability that allows for remote code execution.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entryExploit-DB

  7. CVE-2020-0601

    Microsoft Windows

    Microsoft Windows CryptoAPI Spoofing Vulnerability

    Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to...

    Read the full description

    Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source. A successful exploit could also allow the attacker to conduct man-in-the-middle attacks and decrypt confidential information on user connections to the affected software. The vulnerability is also known under the moniker of CurveBall.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entryExploit-DBly4k on GitHub

  8. CVE-2020-0069

    MediaTek Multiple Chipsets

    Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability

    Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue drivers ioctl handlers. This causes an out-of-bounds write leading to privilege escalation. This...

    Read the full description

    Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue drivers ioctl handlers. This causes an out-of-bounds write leading to privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0041 under exploit chain "AbstractEmu."

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entryR0rt1z2 on GitHubquarkslab on GitHub

  9. CVE-2020-0041

    Android Android Kernel

    Android Kernel Out-of-Bounds Write Vulnerability

    Android Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allow for local privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and...

    Read the full description

    Android Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allow for local privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0069 under exploit chain "AbstractEmu."

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entrybluefrostsecurity on GitHubj4nn on GitHub

  10. CVE-2019-9978

    WordPress Social Warfare Plugin

    WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability

    WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entryExploit-DBhash3liZer on GitHub

  11. CVE-2019-9082

    ThinkPHP ThinkPHP

    ThinkPHP Remote Code Execution Vulnerability

    ThinkPHP contains an unspecified vulnerability that allows for remote code execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entryExploit-DBExploit-DB

  12. CVE-2019-8394

    Zoho ManageEngine

    Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability

    Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entryExploit-DB

  13. CVE-2019-7481

    Ransomware

    SonicWall SMA100

    SonicWall SMA100 SQL Injection Vulnerability

    SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entry

  14. CVE-2019-6223

    Apple iOS and macOS

    Apple iOS and macOS Group Facetime Vulnerability

    Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device to answer unknowingly or without user interaction.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entry

  15. CVE-2019-5591

    Ransomware

    Fortinet FortiOS

    Fortinet FortiOS Default Configuration Vulnerability

    Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol (LDAP) server.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entry

  16. CVE-2019-5544

    Ransomware

    VMware VMware ESXi and Horizon DaaS

    VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

    VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entrydgh05t on GitHubHynekPetrak on GitHub

  17. CVE-2019-4716

    IBM Planning Analytics

    IBM Planning Analytics Remote Code Execution Vulnerability

    IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entryExploit-DB

  18. CVE-2019-3398

    Atlassian Confluence Server and Data Center

    Atlassian Confluence Server and Data Center Path Traversal Vulnerability

    Atlassian Confluence Server and Data Center contain a path traversal vulnerability in the downloadallattachments resource that may allow a privileged, remote attacker to write files. Exploitation can lead to remote code execution.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entryExploit-DBsuperevr on GitHub

  19. CVE-2019-3396

    Ransomware

    Atlassian Confluence Server and Data Server

    Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability

    Atlassian Confluence Server and Data Center contain a server-side template injection vulnerability that may allow an attacker to achieve path traversal and remote code execution.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entryExploit-DBYt1g3r on GitHub

  20. CVE-2019-2215

    Android Android Kernel

    Android Kernel Use-After-Free Vulnerability

    Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entryExploit-DBkangtastic on GitHub

Exploit links go to public code from third parties, found through Exploit-DB and PoC-in-GitHub. They're there for research. Read the code before you run anything, and only test against systems you own or have permission to test.

Source CISA Known Exploited Vulnerabilities Catalog. JSON