← Back to Radar

Vulnerability archive

The complete catalogue of actively exploited vulnerabilities (CISA KEV and EUVD/ENISA) tracked by Radar — search by CVE, vendor, or product.

50 of 1856 vulnerabilities

• CVE: CVE-2020-11899

  Vendor / product: Treck TCP/IP stack · IPv6

  The Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-8298

  Vendor / product: ChakraCore · ChakraCore scripting engine

  The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-16928

  Vendor / product: Exim · Exim Internet Mailer

  Exim contains an out-of-bounds write vulnerability which can allow for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-0180[watched vendor]

  Vendor / product: Cisco · IOS Software

  A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-0179[watched vendor]

  Vendor / product: Cisco · IOS Software

  A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-6738[watched vendor]

  Vendor / product: Cisco · IOS and IOS XE Software

  The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-0172[watched vendor]

  Vendor / product: Cisco · IOS and IOS XE Software

  A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-0161[watched vendor]

  Vendor / product: Cisco · IOS Software

  A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service (DoS) condition.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-0151[watched vendor]

  Vendor / product: Cisco · IOS and IOS XE Software

  A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-6743[watched vendor]

  Vendor / product: Cisco · IOS and IOS XE Software

  The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-6739[watched vendor]

  Vendor / product: Cisco · IOS and IOS XE Software

  The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-0174[watched vendor]

  Vendor / product: Cisco · IOS XE Software

  A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-0159[watched vendor]

  Vendor / product: Cisco · IOS Software and Cisco IOS XE Software

  A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-0158[watched vendor]

  Vendor / product: Cisco · IOS Software and Cisco IOS XE Software

  A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-0156[watched vendor]

  Vendor / product: Cisco · IOS Software and Cisco IOS XE Software

  A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial-of-service (DoS) condition.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-0155[watched vendor]

  Vendor / product: Cisco · Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches

  A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to cause a crash of the iosd process, causing a denial-of-service (DoS) condition.

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-8540[watched vendor]

  Vendor / product: Microsoft · Malware Protection Engine

  The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability".

  View source ↗

  Source: CISA KEV

  Added: 3/3/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-0222[watched vendor]

  Vendor / product: Microsoft · Internet Explorer

  A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.

  View source ↗

  Source: CISA KEV

  Added: 2/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-8570[watched vendor]

  Vendor / product: Microsoft · Office

  A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.

  View source ↗

  Source: CISA KEV

  Added: 2/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2022-24682

  Vendor / product: Synacor · Zimbra Collaborate Suite (ZCS)

  Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code.

  View source ↗

  Source: CISA KEV

  Added: 2/25/22

  Severity: [Known ransomware use]

• CVE: CVE-2014-6352[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object.

  View source ↗

  Source: CISA KEV

  Added: 2/25/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2022-23134

  Vendor / product: Zabbix · Frontend

  Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend.

  View source ↗

  Source: CISA KEV

  Added: 2/22/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2022-23131

  Vendor / product: Zabbix · Frontend

  Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML.

  View source ↗

  Source: CISA KEV

  Added: 2/22/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2013-3906[watched vendor]

  Vendor / product: Microsoft · Graphics Component

  Microsoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 2/15/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-0752[watched vendor]

  Vendor / product: Microsoft · Internet Explorer

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer

  View source ↗

  Source: CISA KEV

  Added: 2/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2018-8174[watched vendor]

  Vendor / product: Microsoft · Windows

  A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"

  View source ↗

  Source: CISA KEV

  Added: 2/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2018-15982

  Vendor / product: Adobe · Flash Player

  Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability

  View source ↗

  Source: CISA KEV

  Added: 2/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2022-0609

  Vendor / product: Google · Chromium Animation

  Google Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 2/15/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2014-1761[watched vendor]

  Vendor / product: Microsoft · Word

  Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 2/15/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2022-24086

  Vendor / product: Adobe · Commerce and Magento Open Source

  Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.

  View source ↗

  Source: CISA KEV

  Added: 2/15/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-20250

  Vendor / product: RARLAB · WinRAR

  WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution

  View source ↗

  Source: CISA KEV

  Added: 2/15/22

  Severity: [Known ransomware use]

• CVE: CVE-2017-9841

  Vendor / product: PHPUnit · PHPUnit

  PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.

  View source ↗

  Source: CISA KEV

  Added: 2/15/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2022-22620

  Vendor / product: Apple · iOS, iPadOS, and macOS

  Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

  View source ↗

  Source: CISA KEV

  Added: 2/11/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-0145[watched vendor]

  Vendor / product: Microsoft · SMBv1

  The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.

  View source ↗

  Source: CISA KEV

  Added: 2/10/22

  Severity: [Known ransomware use]

• CVE: CVE-2015-1130

  Vendor / product: Apple · OS X

  The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.

  View source ↗

  Source: CISA KEV

  Added: 2/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2014-4404

  Vendor / product: Apple · OS X

  Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbitrary code in a privileged context.

  View source ↗

  Source: CISA KEV

  Added: 2/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2015-2051

  Vendor / product: D-Link · DIR-645 Router

  D-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.

  View source ↗

  Source: CISA KEV

  Added: 2/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-0144[watched vendor]

  Vendor / product: Microsoft · SMBv1

  The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.

  View source ↗

  Source: CISA KEV

  Added: 2/10/22

  Severity: [Known ransomware use]

• CVE: CVE-2017-8464[watched vendor]

  Vendor / product: Microsoft · Windows

  Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file

  View source ↗

  Source: CISA KEV

  Added: 2/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2016-3088

  Vendor / product: Apache · ActiveMQ

  The Fileserver web application in Apache ActiveMQ allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request

  View source ↗

  Source: CISA KEV

  Added: 2/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-0262[watched vendor]

  Vendor / product: Microsoft · Office

  A remote code execution vulnerability exists in Microsoft Office.

  View source ↗

  Source: CISA KEV

  Added: 2/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-10271

  Vendor / product: Oracle · WebLogic Server

  Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 2/10/22

  Severity: [Known ransomware use]

• CVE: CVE-2017-0263[watched vendor]

  Vendor / product: Microsoft · Win32k

  Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.

  View source ↗

  Source: CISA KEV

  Added: 2/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2015-1635[watched vendor]

  Vendor / product: Microsoft · HTTP.sys

  Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 2/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-0796[watched vendor]

  Vendor / product: Microsoft · SMBv3

  A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.

  View source ↗

  Source: CISA KEV

  Added: 2/10/22

  Severity: [Known ransomware use]

• CVE: CVE-2021-36934[watched vendor]

  Vendor / product: Microsoft · Windows

  If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.

  View source ↗

  Source: CISA KEV

  Added: 2/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2017-9791

  Vendor / product: Apache · Struts 1

  The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.

  View source ↗

  Source: CISA KEV

  Added: 2/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-1000861

  Vendor / product: Jenkins · Jenkins Stapler Web Framework

  A code execution vulnerability exists in the Stapler web framework used by Jenkins

  View source ↗

  Source: CISA KEV

  Added: 2/10/22

  Severity: [Confirmed active exploitation]

• CVE: CVE-2022-21882[watched vendor]

  Vendor / product: Microsoft · Win32k

  Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

  View source ↗

  Source: CISA KEV

  Added: 2/4/22

  Severity: [Known ransomware use]

• CVE: CVE-2017-5689

  Vendor / product: Intel · Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability

  Intel products contain a vulnerability which can allow attackers to perform privilege escalation.

  View source ↗

  Source: CISA KEV

  Added: 1/28/22

  Severity: [Confirmed active exploitation]