← Back to Radar

Vulnerability archive

The complete catalogue of actively exploited vulnerabilities (CISA KEV and EUVD/ENISA) tracked by Radar — search by CVE, vendor, or product.

50 of 1670 vulnerabilities

• CVE: CVE-2014-6287

  Vendor / product: Rejetto · HTTP File Server (HFS)

  The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (HFS or HttpFileServer) allows remote attackers to execute arbitrary programs.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2014-3120

  Vendor / product: Elastic · Elasticsearch

  Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2014-0130

  Vendor / product: Rails · Ruby on Rails

  Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2013-5223

  Vendor / product: D-Link · DSL-2760U

  A cross-site scripting (XSS) vulnerability exists in the D-Link DSL-2760U gateway, allowing remote authenticated users to inject arbitrary web script or HTML.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2013-4810

  Vendor / product: Hewlett Packard (HP) · ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management

  HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2013-2251

  Vendor / product: Apache · Struts

  Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2012-1823

  Vendor / product: PHP · PHP

  sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2010-4345

  Vendor / product: Exim · Exim

  Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2010-4344

  Vendor / product: Exim · Exim

  Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2010-3035[watched vendor]

  Vendor / product: Cisco · IOS XR

  Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2010-2861

  Vendor / product: Adobe · ColdFusion

  A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Known ransomware use]

• CVE: CVE-2009-2055[watched vendor]

  Vendor / product: Cisco · IOS XR

  Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2009-1151

  Vendor / product: phpMyAdmin · phpMyAdmin

  Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2009-0927

  Vendor / product: Adobe · Reader and Acrobat

  Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2005-2773

  Vendor / product: Hewlett Packard (HP) · OpenView Network Node Manager

  HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-5135

  Vendor / product: SonicWall · SonicOS

  A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.

  View source ↗

  Source: CISA KEV

  Added: 3/15/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-1405[watched vendor]

  Vendor / product: Microsoft · Windows

  A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.

  View source ↗

  Source: CISA KEV

  Added: 3/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2019-1322[watched vendor]

  Vendor / product: Microsoft · Windows

  A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

  View source ↗

  Source: CISA KEV

  Added: 3/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2019-1315[watched vendor]

  Vendor / product: Microsoft · Windows

  A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.

  View source ↗

  Source: CISA KEV

  Added: 3/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2019-1253[watched vendor]

  Vendor / product: Microsoft · Windows

  A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.

  View source ↗

  Source: CISA KEV

  Added: 3/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2019-1132[watched vendor]

  Vendor / product: Microsoft · Win32k

  A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

  View source ↗

  Source: CISA KEV

  Added: 3/15/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-1129[watched vendor]

  Vendor / product: Microsoft · Windows

  A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

  View source ↗

  Source: CISA KEV

  Added: 3/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2019-1069[watched vendor]

  Vendor / product: Microsoft · Task Scheduler

  A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.

  View source ↗

  Source: CISA KEV

  Added: 3/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2019-1064[watched vendor]

  Vendor / product: Microsoft · Windows

  A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

  View source ↗

  Source: CISA KEV

  Added: 3/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2019-0841[watched vendor]

  Vendor / product: Microsoft · Windows

  A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

  View source ↗

  Source: CISA KEV

  Added: 3/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2019-0543[watched vendor]

  Vendor / product: Microsoft · Windows

  A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

  View source ↗

  Source: CISA KEV

  Added: 3/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2018-8120[watched vendor]

  Vendor / product: Microsoft · Win32k

  A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

  View source ↗

  Source: CISA KEV

  Added: 3/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2017-0101[watched vendor]

  Vendor / product: Microsoft · Windows

  A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.

  View source ↗

  Source: CISA KEV

  Added: 3/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2016-3309[watched vendor]

  Vendor / product: Microsoft · Windows

  A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

  View source ↗

  Source: CISA KEV

  Added: 3/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2015-2546[watched vendor]

  Vendor / product: Microsoft · Win32k

  The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.

  View source ↗

  Source: CISA KEV

  Added: 3/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2022-26486

  Vendor / product: Mozilla · Firefox

  Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.

  View source ↗

  Source: CISA KEV

  Added: 3/7/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2022-26485

  Vendor / product: Mozilla · Firefox

  Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.

  View source ↗

  Source: CISA KEV

  Added: 3/7/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-21973[watched vendor]

  Vendor / product: VMware · vCenter Server and Cloud Foundation

  VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.

  View source ↗

  Source: CISA KEV

  Added: 3/7/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-8218

  Vendor / product: Pulse Secure · Pulse Connect Secure

  A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

  View source ↗

  Source: CISA KEV

  Added: 3/7/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-11581

  Vendor / product: Atlassian · Jira Server and Data Center

  Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 3/7/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-6077

  Vendor / product: NETGEAR · Wireless Router DGN2200

  NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 3/7/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2016-6277

  Vendor / product: NETGEAR · Multiple Routers

  NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 3/7/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2013-0631

  Vendor / product: Adobe · ColdFusion

  Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.

  View source ↗

  Source: CISA KEV

  Added: 3/7/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2013-0629

  Vendor / product: Adobe · ColdFusion

  Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.

  View source ↗

  Source: CISA KEV

  Added: 3/7/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2013-0625

  Vendor / product: Adobe · ColdFusion

  Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.

  View source ↗

  Source: CISA KEV

  Added: 3/7/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2009-3960

  Vendor / product: Adobe · BlazeDS

  Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.

  View source ↗

  Source: CISA KEV

  Added: 3/7/22

  Severity: [Known ransomware use]

• CVE: CVE-2022-20708[watched vendor]

  Vendor / product: Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers

  A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2022-20703[watched vendor]

  Vendor / product: Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers

  A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2022-20701[watched vendor]

  Vendor / product: Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers

  A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2022-20700[watched vendor]

  Vendor / product: Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers

  A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2022-20699[watched vendor]

  Vendor / product: Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers

  A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-41379[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Known ransomware use]

• CVE: CVE-2020-1938

  Vendor / product: Apache · Tomcat

  Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-11899

  Vendor / product: Treck TCP/IP stack · IPv6

  The Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-16928

  Vendor / product: Exim · Exim Internet Mailer

  Exim contains an out-of-bounds write vulnerability which can allow for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]