← Back to Radar

Vulnerability archive

The complete catalogue of actively exploited vulnerabilities (CISA KEV and EUVD/ENISA) tracked by Radar — search by CVE, vendor, or product.

50 of 1670 vulnerabilities

• CVE: CVE-2019-9670

  Vendor / product: Synacor · Zimbra Collaboration Suite (ZCS)

  Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component.

  View source ↗

  Source: CISA KEV

  Added: 1/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-13382[watched vendor]

  Vendor / product: Fortinet · FortiOS and FortiProxy

  An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.

  View source ↗

  Source: CISA KEV

  Added: 1/10/22

  Severity: [Known ransomware use]

• CVE: CVE-2018-13383[watched vendor]

  Vendor / product: Fortinet · FortiOS and FortiProxy

  A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.

  View source ↗

  Source: CISA KEV

  Added: 1/10/22

  Severity: [Known ransomware use]

• CVE: CVE-2019-1579

  Vendor / product: Palo Alto Networks · PAN-OS

  Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.

  View source ↗

  Source: CISA KEV

  Added: 1/10/22

  Severity: [Known ransomware use]

• CVE: CVE-2019-10149

  Vendor / product: Exim · Mail Transfer Agent (MTA)

  Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.

  View source ↗

  Source: CISA KEV

  Added: 1/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-1000486

  Vendor / product: Primetek · Primefaces Application

  Primetek Primefaces is vulnerable to a weak encryption flaw resulting in remote code execution

  View source ↗

  Source: CISA KEV

  Added: 1/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-7609

  Vendor / product: Elastic · Kibana

  Kibana contain an arbitrary code execution flaw in the Timelion visualizer.

  View source ↗

  Source: CISA KEV

  Added: 1/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-27860

  Vendor / product: FatPipe · WARP, IPVPN, and MPVPN software

  A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem.

  View source ↗

  Source: CISA KEV

  Added: 1/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-43890[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.

  View source ↗

  Source: CISA KEV

  Added: 12/15/21

  Severity: [Known ransomware use]

• CVE: CVE-2021-4102

  Vendor / product: Google · Chromium V8

  Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 12/15/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-12149

  Vendor / product: Red Hat · JBoss Application Server

  The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.

  View source ↗

  Source: CISA KEV

  Added: 12/10/21

  Severity: [Known ransomware use]

• CVE: CVE-2021-44515

  Vendor / product: Zoho · Desktop Central

  Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop Central MSP server.

  View source ↗

  Source: CISA KEV

  Added: 12/10/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-13272

  Vendor / product: Linux · Kernel

  Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.

  View source ↗

  Source: CISA KEV

  Added: 12/10/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-35394

  Vendor / product: Realtek · Jungle Software Development Kit (SDK)

  RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 12/10/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-7238

  Vendor / product: Sonatype · Nexus Repository Manager

  Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 12/10/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-0193

  Vendor / product: Apache · Solr

  The optional Apache Solr module DataImportHandler contains a code injection vulnerability.

  View source ↗

  Source: CISA KEV

  Added: 12/10/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-44168[watched vendor]

  Vendor / product: Fortinet · FortiOS

  Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files.

  View source ↗

  Source: CISA KEV

  Added: 12/10/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-17562

  Vendor / product: Embedthis · GoAhead

  Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.

  View source ↗

  Source: CISA KEV

  Added: 12/10/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2010-1871

  Vendor / product: Red Hat · JBoss Seam 2

  JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.

  View source ↗

  Source: CISA KEV

  Added: 12/10/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-17463

  Vendor / product: Fuel CMS · Fuel CMS

  FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

  View source ↗

  Source: CISA KEV

  Added: 12/10/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-8816

  Vendor / product: Pi-hole · AdminLTE

  Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.

  View source ↗

  Source: CISA KEV

  Added: 12/10/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-10758

  Vendor / product: MongoDB · mongo-express

  mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method.

  View source ↗

  Source: CISA KEV

  Added: 12/10/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-44228

  Vendor / product: Apache · Log4j2

  Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 12/10/21

  Severity: [Known ransomware use]

• CVE: CVE-2020-11261

  Vendor / product: Qualcomm · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

  Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

  View source ↗

  Source: CISA KEV

  Added: 12/1/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-14847

  Vendor / product: MikroTik · RouterOS

  MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

  View source ↗

  Source: CISA KEV

  Added: 12/1/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-37415

  Vendor / product: Zoho · ManageEngine ServiceDesk Plus (SDP)

  Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication

  View source ↗

  Source: CISA KEV

  Added: 12/1/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-40438

  Vendor / product: Apache · Apache

  A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

  View source ↗

  Source: CISA KEV

  Added: 12/1/21

  Severity: [Known ransomware use]

• CVE: CVE-2021-44077

  Vendor / product: Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus

  Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution

  View source ↗

  Source: CISA KEV

  Added: 12/1/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-22204

  Vendor / product: Perl · Exiftool

  Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image

  View source ↗

  Source: CISA KEV

  Added: 11/17/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-40449[watched vendor]

  Vendor / product: Microsoft · Windows

  Unspecified vulnerability allows for an authenticated user to escalate privileges.

  View source ↗

  Source: CISA KEV

  Added: 11/17/21

  Severity: [Known ransomware use]

• CVE: CVE-2021-42321[watched vendor]

  Vendor / product: Microsoft · Exchange

  An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 11/17/21

  Severity: [Known ransomware use]

• CVE: CVE-2021-42292[watched vendor]

  Vendor / product: Microsoft · Office

  A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.

  View source ↗

  Source: CISA KEV

  Added: 11/17/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-4006[watched vendor]

  Vendor / product: VMware · Multiple Products

  VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An attacker with network access to the administrative configurator on port 8443 and a valid password for the configurator administrator account can execute commands with unrestricted privileges on the underlying operating system.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-3952[watched vendor]

  Vendor / product: VMware · vCenter Server

  VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attacker with network access to port 389 to extract sensitive information.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-14558

  Vendor / product: Tenda · AC7, AC9, and AC10 Routers

  Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Successful exploitation allows an attacker to execute OS commands via a crafted goform/setUsbUnload request.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-10987

  Vendor / product: Tenda · AC1900 Router AC15 Model

  Tenda AC1900 Router AC15 Model contains an unspecified vulnerability that allows remote attackers to execute system commands via the deviceName POST parameter.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-20021

  Vendor / product: SonicWall · SonicWall Email Security

  SonicWall Email Security contains an improper privilege management vulnerability that allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20022 and CVE-2021-20023 to achieve privilege escalation.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Known ransomware use]

• CVE: CVE-2020-11651

  Vendor / product: SaltStack · Salt

  SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method calls. The vulnerability allows a remote user to access some methods without authentication, which can be used to retrieve user tokens from the salt master and/or run commands on salt minions. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-22893

  Vendor / product: Ivanti · Pulse Connect Secure

  Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Known ransomware use]

• CVE: CVE-2020-1147[watched vendor]

  Vendor / product: Microsoft · .NET Framework, SharePoint, Visual Studio

  Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file input. Successful exploitation allows an attacker to execute code in the context of the process responsible for deserialization of the XML content.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-0601[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source. A successful exploit could also allow the attacker to conduct man-in-the-middle attacks and decrypt confidential information on user connections to the affected software. The vulnerability is also known under the moniker of CurveBall.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-1367[watched vendor]

  Vendor / product: Microsoft · Internet Explorer

  Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exploitation allows for remote code execution in the context of the current user.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Known ransomware use]

• CVE: CVE-2021-27059[watched vendor]

  Vendor / product: Microsoft · Office

  Microsoft Office contains an unspecified vulnerability that allows for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-1040[watched vendor]

  Vendor / product: Microsoft · Hyper-V RemoteFX

  Microsoft Hyper-V RemoteFX vGPU contains an improper input validation vulnerability due to the host server failing to properly validate input from an authenticated user on a guest operating system. Successful exploitation allows for remote code execution on the host operating system.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-31207[watched vendor]

  Vendor / product: Microsoft · Exchange Server

  Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Known ransomware use]

• CVE: CVE-2021-31956[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-33771[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-4428

  Vendor / product: IBM · Data Risk Manager

  IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-30633

  Vendor / product: Google · Chromium Indexed DB API

  Google Chromium Indexed DB API contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-22205

  Vendor / product: GitLab · Community and Enterprise Editions

  GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the image files.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Known ransomware use]