← Back to Radar

Vulnerability archive

The complete catalogue of actively exploited vulnerabilities (CISA KEV and EUVD/ENISA) tracked by Radar — search by CVE, vendor, or product.

50 of 1856 vulnerabilities

• CVE: CVE-2021-20028

  Vendor / product: SonicWall · Secure Remote Access (SRA)

  SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Known ransomware use]

• CVE: CVE-2019-7483

  Vendor / product: SonicWall · SMA100

  In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-8405[watched vendor]

  Vendor / product: Microsoft · DirectX Graphics Kernel (DXGKRNL)

  An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Known ransomware use]

• CVE: CVE-2017-0213[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Known ransomware use]

• CVE: CVE-2017-0059[watched vendor]

  Vendor / product: Microsoft · Internet Explorer

  Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-0037[watched vendor]

  Vendor / product: Microsoft · Edge and Internet Explorer

  Microsoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2016-7201[watched vendor]

  Vendor / product: Microsoft · Edge

  The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2016-7200[watched vendor]

  Vendor / product: Microsoft · Edge

  The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2016-0189[watched vendor]

  Vendor / product: Microsoft · Internet Explorer

  The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Known ransomware use]

• CVE: CVE-2016-0151[watched vendor]

  Vendor / product: Microsoft · Client-Server Run-time Subsystem (CSRSS)

  The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Known ransomware use]

• CVE: CVE-2016-0040[watched vendor]

  Vendor / product: Microsoft · Windows

  The kernel in Microsoft Windows allows local users to gain privileges via a crafted application.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2012-0518

  Vendor / product: Oracle · Fusion Middleware

  Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via Unknown vectors

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2011-2005[watched vendor]

  Vendor / product: Microsoft · Ancillary Function Driver (afd.sys)

  afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2012-2539[watched vendor]

  Vendor / product: Microsoft · Word

  Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-34486[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2012-2034

  Vendor / product: Adobe · Flash Player

  Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2010-4398[watched vendor]

  Vendor / product: Microsoft · Windows

  Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2012-5076

  Vendor / product: Oracle · Java SE

  The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2022-0543

  Vendor / product: Redis · Debian-specific Redis Servers

  Redis is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2022-1096

  Vendor / product: Google · Chromium V8

  Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2013-1690

  Vendor / product: Mozilla · Firefox and Thunderbird

  Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-8440[watched vendor]

  Vendor / product: Microsoft · Windows

  An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Known ransomware use]

• CVE: CVE-2018-8406[watched vendor]

  Vendor / product: Microsoft · DirectX Graphics Kernel (DXGKRNL)

  An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Known ransomware use]

• CVE: CVE-2015-2426[watched vendor]

  Vendor / product: Microsoft · Windows

  A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2015-2419[watched vendor]

  Vendor / product: Microsoft · Internet Explorer

  JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2015-1770[watched vendor]

  Vendor / product: Microsoft · Office

  Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2013-3660[watched vendor]

  Vendor / product: Microsoft · Win32k

  The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-38646[watched vendor]

  Vendor / product: Microsoft · Office

  Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Known ransomware use]

• CVE: CVE-2021-26085

  Vendor / product: Atlassian · Confluence Server

  Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.

  View source ↗

  Source: CISA KEV

  Added: 3/28/22

  Severity: [Known ransomware use]

• CVE: CVE-2022-0995

  Vendor / product: n/a

  An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

  View source ↗

  Source: EUVD / ENISA

  Added: 3/25/22

  Severity: [High · CVSS 7.8]

• CVE: CVE-2009-0927

  Vendor / product: Adobe · Reader and Acrobat

  Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2015-4068

  Vendor / product: Arcserve · Unified Data Protection (UDP)

  Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2015-1187

  Vendor / product: D-Link and TRENDnet · Multiple Devices

  The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to perform remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2015-0666[watched vendor]

  Vendor / product: Cisco · Prime Data Center Network Manager (DCNM)

  Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) allows remote attackers to read arbitrary files.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2014-6332[watched vendor]

  Vendor / product: Microsoft · Windows

  OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2014-6324[watched vendor]

  Vendor / product: Microsoft · Kerberos Key Distribution Center (KDC)

  The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2014-6287

  Vendor / product: Rejetto · HTTP File Server (HFS)

  The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (HFS or HttpFileServer) allows remote attackers to execute arbitrary programs.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2014-3120

  Vendor / product: Elastic · Elasticsearch

  Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2014-0130

  Vendor / product: Rails · Ruby on Rails

  Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2013-5223

  Vendor / product: D-Link · DSL-2760U

  A cross-site scripting (XSS) vulnerability exists in the D-Link DSL-2760U gateway, allowing remote authenticated users to inject arbitrary web script or HTML.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2013-2251

  Vendor / product: Apache · Struts

  Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2022-26143

  Vendor / product: Mitel · MiCollab, MiVoice Business Express

  A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to sensitive information and services, cause performance degradations or a denial of service condition on the affected system.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-11043

  Vendor / product: PHP · FastCGI Process Manager (FPM)

  In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Known ransomware use]

• CVE: CVE-2018-0147[watched vendor]

  Vendor / product: Cisco · Secure Access Control System (ACS)

  A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2016-10174

  Vendor / product: NETGEAR · WNR2000v5 Router

  The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2005-2773

  Vendor / product: Hewlett Packard (HP) · OpenView Network Node Manager

  HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2013-4810

  Vendor / product: Hewlett Packard (HP) · ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management

  HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-12991

  Vendor / product: Citrix · SD-WAN and NetScaler

  Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-12989

  Vendor / product: Citrix · SD-WAN and NetScaler

  Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2016-4171

  Vendor / product: Adobe · Flash Player

  Unspecified vulnerability in Adobe Flash Player allows for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 3/25/22

  Severity: [Confirmed active exploitation]