The CISA KEV Catalogue, Searchable
Every flaw attackers are known to be using: what it is, how bad, and what fixes it.
- Flaws on the list
- 1,779
- Added in 30 days
- 40
- Used in ransomware
- 361
- In web & server software
- 181
25 Mar 2022 D-Link DCS-930L Devices Command injection
setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter.
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- dlink dcs-930l firmware 2.12
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-78
25 Mar 2022 NETGEAR WNR2000v5 Router Memory corruption
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-119
25 Mar 2022 Rails Ruby on Rails Path traversal
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- rubyonrails rails 4.2.5.1, rubyonrails rails 4.1.14.1, rubyonrails rails 3.2.22.1
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-22
25 Mar 2022 Arcserve Unified Data Protection (UDP) Path traversal
Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFileServlet or (2) exportServlet servlet.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- arcserve udp 5.0
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-22
25 Mar 2022 TP-Link Multiple Archer Devices Path traversal
Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- tp-link tl-wdr4300 firmware 150302, tp-link tl-wdr3600 firmware 150302, tp-link tl-wdr3500 firmware 150302, tp-link tl-wr841n firmware 150310, tp-link tl-wr841nd firmware 150310 and 6 older
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-22
25 Mar 2022 Elasticsearch Access control flaw
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- elasticsearch 1.4.3, elasticsearch 1.3.8
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-284
25 Mar 2022 D-Link and TRENDnet Multiple Devices Authentication bypass
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-287
25 Mar 2022 Cisco Prime Data Center Network Manager (DCNM) Path traversal
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-22
25 Mar 2022 Microsoft Windows Memory corruption
OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function, aka "Windows OLE Automation Array Remote Code Execution Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-119
25 Mar 2022 Microsoft Kerberos Key Distribution Center (KDC) Security flaw
The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka "Kerberos Checksum Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-264
25 Mar 2022 Rejetto HTTP File Server (HFS) Remote code execution
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- rejetto http file server 2.3c
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-94
25 Mar 2022 Elasticsearch Access control flaw
The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- elasticsearch 1.2.0
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-284
25 Mar 2022 Rails Ruby on Rails Path traversal
Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- rubyonrails rails 4.1.1, rubyonrails rails 4.0.5, rubyonrails rails 3.2.18
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-22
25 Mar 2022 D-Link DSL-2760U Cross-site scripting
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated users to inject arbitrary web script or HTML via the (1) ntpServer1 parameter to sntpcfg.cgi, username parameter to (2) ddnsmngr.cmd or (3) todmngr.tod, (4) TodUrlAdd parameter to urlfilter.cmd, (5) appName parameter to scprttrg.cmd, (6) fltName in an add action or (7) rmLst parameter in a remove action to scoutflt.cmd, (8) groupName parameter to portmapcfg.cmd, (9) snmpRoCommunity parameter to snmpconfig.cgi, (10) fltName parameter to scinflt.cmd, (11) PolicyName in an add action or (12) rmLst parameter in a remove action to prmngr.cmd, (13) ippName parameter to ippcfg.cmd, (14) smbNetBiosName or (15) smbDirName parameter to samba.cgi, or (16) wlSsid parameter to wlcfg.wl.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- dlink dsl-2760u firmware 1.12
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-79
25 Mar 2022 Hewlett Packard (HP) ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management Remote code execution
HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet, aka ZDI-CAN-1760. NOTE: this is probably a duplicate of CVE-2007-1036, CVE-2010-0738, and/or CVE-2012-0874.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-94
25 Mar 2022 Apache Struts Input validation flaw
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apache archiva 1.3.8
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-20
25 Mar 2022 PHP Command injection
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple mac os x 10.8.2, apple mac os x 10.7.5, php 5.4.2, php 5.3.12
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-20
25 Mar 2022 Exim Command injection
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-264
25 Mar 2022 Exim Memory corruption
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- exim 4.70
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-119
25 Mar 2022 Cisco IOS XR Input validation flaw
Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-20
25 Mar 2022 Adobe ColdFusion Path traversal
Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-22
25 Mar 2022 Cisco IOS XR Input validation flaw
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-20
25 Mar 2022 phpMyAdmin Remote code execution
Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a configuration file via the save action.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- phpmyadmin 3.1.3.1, phpmyadmin 2.11.9.5
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-94
25 Mar 2022 Adobe Reader and Acrobat Memory corruption
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- adobe acrobat reader 9.1, adobe acrobat reader 8.1.3, adobe acrobat reader 7.1.1
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-20
25 Mar 2022 Hewlett Packard (HP) OpenView Network Node Manager Command injection
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Apr 2022
- Weakness
- CWE-77
15 Mar 2022 SonicWall SonicOS Memory corruption
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 5 Apr 2022
- Weakness
- CWE-120
15 Mar 2022 Microsoft Windows Privilege escalation
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 5 Apr 2022
- Weakness
- CWE-269
15 Mar 2022 Microsoft Windows Security flaw
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1320, CVE-2019-1340.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 5 Apr 2022
15 Mar 2022 Microsoft Windows Path traversal
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1339, CVE-2019-1342.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 5 Apr 2022
- Weakness
- CWE-59
15 Mar 2022 Microsoft Windows Path traversal
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1215, CVE-2019-1278, CVE-2019-1303.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 5 Apr 2022
- Weakness
- CWE-59
15 Mar 2022 Microsoft Win32k Security flaw
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 5 Apr 2022
15 Mar 2022 Microsoft Windows Path traversal
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1130.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 5 Apr 2022
- Weakness
- CWE-59
15 Mar 2022 Microsoft Task Scheduler Path traversal
An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system. The security update addresses the vulnerability by correctly validating file operations.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 5 Apr 2022
- Weakness
- CWE-59
15 Mar 2022 Microsoft Windows Path traversal
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The security update addresses the vulnerability by correcting how Windows AppX Deployment Service handles hard links.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 5 Apr 2022
- Weakness
- CWE-59
15 Mar 2022 Microsoft Windows Path traversal
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 5 Apr 2022
- Weakness
- CWE-59
15 Mar 2022 Microsoft Windows Authentication bypass
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 5 Apr 2022
- Weakness
- CWE-287
15 Mar 2022 Microsoft Win32k Denial of service
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 5 Apr 2022
- Weakness
- CWE-404
15 Mar 2022 Microsoft Windows Memory corruption
The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 5 Apr 2022
- Weakness
- CWE-119
15 Mar 2022 Microsoft Windows Security flaw
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 5 Apr 2022
- Weakness
- CWE-264
15 Mar 2022 Microsoft Win32k Memory corruption
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2511, CVE-2015-2517, and CVE-2015-2518.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 5 Apr 2022
- Weakness
- CWE-119
7 Mar 2022 Mozilla Firefox Memory corruption
An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- mozilla firefox focus 97.3.0, mozilla firefox mobile 97.3.0, mozilla firefox 97.0.2, mozilla thunderbird 91.6.2, mozilla firefox 91.6.1
- CISA due date
- 21 Mar 2022
- Weakness
- CWE-416
7 Mar 2022 Mozilla Firefox Memory corruption
Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- mozilla firefox focus 97.3.0, mozilla firefox mobile 97.3.0, mozilla firefox 97.0.2, mozilla thunderbird 91.6.2, mozilla firefox 91.6.1
- CISA due date
- 21 Mar 2022
- Weakness
- CWE-416
7 Mar 2022 VMware vCenter Server and Cloud Foundation Server-side request forgery
The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- vmware cloud foundation 4.2, vmware cloud foundation 3.10.1.2
- CISA due date
- 21 Mar 2022
- Weakness
- CWE-20, CWE-918
7 Mar 2022 Pulse Secure Pulse Connect Secure Remote code execution
A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 7 Sep 2022
- Weakness
- CWE-94
7 Mar 2022 Atlassian Jira Server and Data Center Input validation flaw
There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and Data Center from 4.4.0 before 7.6.14, from 7.7.0 before 7.13.5, from 8.0.0 before 8.0.3, from 8.1.0 before 8.1.2, and from 8.2.0 before 8.2.3 are affected by this vulnerability.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- atlassian jira server 8.2.3, atlassian jira server 8.1.2, atlassian jira server 8.0.3, atlassian jira server 7.13.5, atlassian jira server 7.6.14
- CISA due date
- 7 Sep 2022
- Weakness
- CWE-74
7 Mar 2022 NETGEAR Wireless Router DGN2200 Command injection
ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POST request.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 7 Sep 2022
- Weakness
- CWE-78
7 Mar 2022 NETGEAR Multiple Routers Cross-site request forgery
NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 7 Sep 2022
- Weakness
- CWE-352
7 Mar 2022 Adobe ColdFusion Information disclosure
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 7 Sep 2022
- Weakness
- CWE-200
7 Mar 2022 Adobe ColdFusion Security flaw
Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 7 Sep 2022
- Weakness
- CWE-264
7 Mar 2022 Adobe ColdFusion Authentication bypass
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, as exploited in the wild in January 2013.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 7 Sep 2022
- Weakness
- CWE-255
Know when it's your software
Get an email within half an hour when a flaw in your software is added. Free.
About the KEV Catalogue
What is the CISA KEV catalogue?
CISA's list of flaws attackers are known to be using. A flaw is added only with reliable evidence of attacks and a known fix.
Why does it matter more than the CVSS score?
Few CVEs are ever used in attacks. These are, so fix them first, whatever their score.
What is the due date?
The deadline for US federal agencies to fix it (BOD 26-04, which replaced BOD 22-01): as little as three days for recent entries. A sensible deadline for anyone.
Does it apply outside the US?
The deadlines don't, but the flaws are in software used everywhere. If you run it, it applies to you.
What does "used in ransomware" mean?
CISA knows ransomware groups have used the flaw.
How often is it updated?
CISA adds flaws several times a week. CVE Hawk checks hourly and alerts you within half an hour if it's your software.