The KEV catalog lists vulnerabilities that are known to be actively exploited in the wild. Federal agencies are required to remediate these on defined deadlines.
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2018-2628 | UNKNOWN | — | Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server. | Sep 8, 2022 |
| CVE-2022-3075 | UNKNOWN | — | Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | Sep 8, 2022 |
| CVE-2020-9934 | UNKNOWN | — | Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view sensitive user information. | Sep 8, 2022 |
| CVE-2018-7445 | UNKNOWN | — | In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. | Sep 8, 2022 |
| CVE-2018-6530 | UNKNOWN | — | Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands. | Sep 8, 2022 |
| CVE-2017-5521 | UNKNOWN | — | Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server. | Sep 8, 2022 |
| CVE-2022-27593 | UNKNOWN | — | Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed being utilized in a Deadbolt ransomware campaign. | Sep 8, 2022 |
| CVE-2011-4723 | UNKNOWN | — | The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information. | Sep 8, 2022 |
| CVE-2011-1823 | UNKNOWN | — | The vold volume manager daemon in Android kernel trusts messages from a PF_NETLINK socket, which allows an attacker to execute code and gain root privileges. This vulnerability is associated with GingerBreak and Exploit.AndroidOS.Lotoor. | Sep 8, 2022 |
| CVE-2021-31010 | UNKNOWN | — | In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions. | Aug 25, 2022 |
| CVE-2022-26352 | UNKNOWN | — | dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory traversal, in which the file is saved outside of the intended storage location. Exploitation allows for remote code execution. | Aug 25, 2022 |
| CVE-2022-24706 | UNKNOWN | — | Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges. | Aug 25, 2022 |
| CVE-2021-39226 | UNKNOWN | — | Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss. | Aug 25, 2022 |
| CVE-2022-24112 | UNKNOWN | — | Apache APISIX contains an authentication bypass vulnerability that allows for remote code execution. | Aug 25, 2022 |
| CVE-2021-38406 | UNKNOWN | — | Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific project files (improper input validation) resulting in an out-of-bounds write that allows for code execution. | Aug 25, 2022 |
| CVE-2022-22963 | UNKNOWN | — | When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources. | Aug 25, 2022 |
| CVE-2020-36193 | UNKNOWN | — | PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux. | Aug 25, 2022 |
| CVE-2020-28949 | UNKNOWN | — | PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux. | Aug 25, 2022 |
| CVE-2022-0028 | UNKNOWN | — | A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. | Aug 22, 2022 |
| CVE-2022-32893 | UNKNOWN | — | Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content. | Aug 18, 2022 |
| CVE-2022-2856 | UNKNOWN | — | Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | Aug 18, 2022 |
| CVE-2022-22536 | UNKNOWN | — | SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches. | Aug 18, 2022 |
| CVE-2022-32894 | UNKNOWN | — | Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges. | Aug 18, 2022 |
| CVE-2022-26923 | UNKNOWN | — | An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM. | Aug 18, 2022 |
| CVE-2017-15944 | UNKNOWN | — | Palo Alto Networks PAN-OS contains multiple, unspecified vulnerabilities which can allow for remote code execution when chained. | Aug 18, 2022 |