The KEV catalog lists vulnerabilities that are known to be actively exploited in the wild. Federal agencies are required to remediate these on defined deadlines.
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2015-1427 | UNKNOWN | — | The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands. | Mar 25, 2022 |
| CVE-2015-3035 | UNKNOWN | — | Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/. | Mar 25, 2022 |
| CVE-2015-4068 | UNKNOWN | — | Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service. | Mar 25, 2022 |
| CVE-2016-10174 | UNKNOWN | — | The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution. | Mar 25, 2022 |
| CVE-2013-2251 | UNKNOWN | — | Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions. | Mar 25, 2022 |
| CVE-2013-4810 | UNKNOWN | — | HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet. | Mar 25, 2022 |
| CVE-2019-11043 | UNKNOWN | — | In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution. | Mar 25, 2022 |
| CVE-2019-12989 | UNKNOWN | — | Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection. | Mar 25, 2022 |
| CVE-2022-26318 | UNKNOWN | — | On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code. | Mar 25, 2022 |
| CVE-2019-2616 | UNKNOWN | — | Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass. | Mar 25, 2022 |
| CVE-2019-16920 | UNKNOWN | — | Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise. | Mar 25, 2022 |
| CVE-2014-0130 | UNKNOWN | — | Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request. | Mar 25, 2022 |
| CVE-2010-4344 | UNKNOWN | — | Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session. | Mar 25, 2022 |
| CVE-2020-1631 | UNKNOWN | — | A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform remote code execution. | Mar 25, 2022 |
| CVE-2020-9377 | UNKNOWN | — | D-Link DIR-610 devices allow remote code execution via the cmd parameter to command.php. | Mar 25, 2022 |
| CVE-2022-21999 | UNKNOWN | — | Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation. | Mar 25, 2022 |
| CVE-2022-26143 | UNKNOWN | — | A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to sensitive information and services, cause performance degradations or a denial of service condition on the affected system. | Mar 25, 2022 |
| CVE-2017-6316 | UNKNOWN | — | A vulnerability has been identified in the management interface of Citrix NetScaler SD-WAN Enterprise and Standard Edition and Citrix CloudBridge Virtual WAN Edition that could result in an unauthenticated, remote attacker being able to execute arbitrary code as a root user. This vulnerability also affects XenMobile Server. | Mar 25, 2022 |
| CVE-2005-2773 | UNKNOWN | — | HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system. | Mar 25, 2022 |
| CVE-2009-0927 | UNKNOWN | — | Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code. | Mar 25, 2022 |
| CVE-2009-1151 | UNKNOWN | — | Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file. | Mar 25, 2022 |
| CVE-2009-2055 | UNKNOWN | — | Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS). | Mar 25, 2022 |
| CVE-2010-3035 | UNKNOWN | — | Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS). | Mar 25, 2022 |
| CVE-2010-4345 | UNKNOWN | — | Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands. | Mar 25, 2022 |
| CVE-2014-3120 | UNKNOWN | — | Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code. | Mar 25, 2022 |