The CISA KEV Catalogue, Searchable
Every flaw attackers are known to be using: what it is, how bad, and what fixes it.
- Flaws on the list
- 1,779
- Added in 30 days
- 40
- Used in ransomware
- 361
- In web & server software
- 181
3 Nov 2021 Apple iOS, iPadOS, and watchOS Memory corruption
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple ipados 13.5, apple iphone os 13.5, apple iphone os 12.4.7, apple watchos 6.2.5, apple watchos 5.3.7
- CISA due date
- 3 May 2022
- Weakness
- CWE-787
3 Nov 2021 Apple iOS, iPadOS, and watchOS Memory corruption
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple ipados 13.5, apple iphone os 13.5, apple iphone os 12.4.7, apple watchos 6.2.5
- CISA due date
- 3 May 2022
- Weakness
- CWE-787
3 Nov 2021 EyesOfNetwork Authentication bypass
An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access token.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-798
3 Nov 2021 EyesOfNetwork Privilege escalation
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-269
3 Nov 2021 PlaySMS Remote code execution
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- playsms 1.4.3
- CISA due date
- 3 May 2022
- Weakness
- CWE-94
3 Nov 2021 Trend Micro Apex One and OfficeScan Security flaw
Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
3 Nov 2021 DrayTek Multiple Vigor Routers Command injection
DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacters to the cgi-bin/mainfunction.cgi URI. This issue has been fixed in Vigor3900/2960/300B v1.5.1.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-78
3 Nov 2021 Trend Micro Apex One, OfficeScan and Worry-Free Business Security Agents Input validation flaw
Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-74
3 Nov 2021 Trend Micro Apex One and OfficeScan Security flaw
A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
3 Nov 2021 Ivanti Pulse Connect Secure Malicious file upload
A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using uncontrolled gzip extraction.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-434
3 Nov 2021 Ivanti Pulse Connect Secure Remote code execution
A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-94
3 Nov 2021 Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Authentication bypass
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- citrix application delivery controller firmware 13.0-58.30, citrix gateway firmware 13.0-58.30, citrix application delivery controller firmware 12.1-57.18, citrix netscaler gateway firmware 12.1-57.18, citrix application delivery controller firmware 12.0-63.21 and 7 older
- CISA due date
- 3 May 2022
- Weakness
- CWE-284
3 Nov 2021 Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Path traversal
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- citrix application delivery controller firmware 13.0-58.30, citrix gateway firmware 13.0-58.30, citrix application delivery controller firmware 12.1-57.18, citrix netscaler gateway firmware 12.1-57.18, citrix application delivery controller firmware 12.0-63.21 and 7 older
- CISA due date
- 3 May 2022
- Weakness
- CWE-20
3 Nov 2021 Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Authentication bypass
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- citrix application delivery controller firmware 13.0-58.30, citrix gateway firmware 13.0-58.30, citrix application delivery controller firmware 12.1-57.18, citrix netscaler gateway firmware 12.1-57.18, citrix application delivery controller firmware 12.0-63.21 and 7 older
- CISA due date
- 3 May 2022
- Weakness
- CWE-284
3 Nov 2021 Liferay Portal Remote code execution
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- liferay portal 7.2.1
- CISA due date
- 3 May 2022
- Weakness
- CWE-502
3 Nov 2021 Mozilla Firefox and Thunderbird Race condition
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- mozilla firefox 74.0.1, mozilla thunderbird 68.7.0, mozilla firefox 68.6.1
- CISA due date
- 3 May 2022
- Weakness
- CWE-362
3 Nov 2021 Mozilla Firefox and Thunderbird Memory corruption
Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- mozilla firefox 74.0.1, mozilla thunderbird 68.7.0, mozilla firefox 68.6.1
- CISA due date
- 3 May 2022
- Weakness
- CWE-362, CWE-416
3 Nov 2021 Google Chromium V8 Memory corruption
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 80.0.3987.122
- CISA due date
- 3 May 2022
- Weakness
- CWE-843
3 Nov 2021 SAP NetWeaver Authentication bypass
SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an administrative user, and therefore compromising Confidentiality, Integrity and Availability of the system, leading to Missing Authentication Check.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-306
3 Nov 2021 SAP Solution Manager Authentication bypass
SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-306
3 Nov 2021 F5 BIG-IP Path traversal
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- f5 big-ip access policy manager 15.1.0.4, f5 big-ip access policy manager 14.1.2.6, f5 big-ip access policy manager 13.1.3.4, f5 big-ip access policy manager 12.1.5.2, f5 big-ip access policy manager 11.6.5.2 and 7 older
- CISA due date
- 3 May 2022
- Weakness
- CWE-22
3 Nov 2021 Unraid Authentication bypass
Unraid 6.8.0 allows authentication bypass.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-287, CWE-697
3 Nov 2021 Unraid Security flaw
Unraid through 6.8.0 allows Remote Code Execution.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
3 Nov 2021 Amcrest Cameras and Network Video Recorder (NVR) Memory corruption
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- amcrest ipm-721 firmware v2.420.ac00.18.r.20200217, amcrest ip8m-2597e firmware v2.800.00ac000.0.r.200330, amcrest ip8m-2496eb firmware v2.622.00ac000.0.r.200320, amcrest ip8m-2493eb firmware v2.622.00ac000.0.r.200320, amcrest ip8m-2454ew firmware v2.622.00ac000.0.r.200320 and 7 older
- CISA due date
- 3 May 2022
- Weakness
- CWE-121
3 Nov 2021 IBM Data Risk Manager Path traversal
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-22
3 Nov 2021 IBM Data Risk Manager Command injection
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-78
3 Nov 2021 IBM Data Risk Manager Authentication bypass
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-287
3 Nov 2021 VMware Multiple Products Command injection
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-78
3 Nov 2021 VMware ESXi Memory corruption
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- vmware cloud foundation 4.1.0.1, vmware cloud foundation 3.10.1.2
- CISA due date
- 3 May 2022
- Weakness
- CWE-416
3 Nov 2021 VMware vCenter Server Authentication bypass
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-306
On Hacker News
Exploit for CVE-2020-3952 in vCenter 6.73 Nov 2021 VMware Multiple Products Privilege escalation
VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC or Horizon Client is installed.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- vmware fusion 11.5.2, vmware remote console 11.0.1, vmware horizon client 5.4.0
- CISA due date
- 3 May 2022
- Weakness
- CWE-269
3 Nov 2021 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cross-site scripting
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web services interface of an affected device. The vulnerabilities are due to insufficient validation of user-supplied input by the web services interface of an affected device. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive, browser-based information. Note: These vulnerabilities affect only specific AnyConnect and WebVPN configurations. For more information, see the Vulnerable Products section.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- cisco adaptive security appliance software 9.15.1.15, cisco adaptive security appliance software 9.14.2.8, cisco adaptive security appliance software 9.13.1.21, cisco adaptive security appliance software 9.12.4.13, cisco adaptive security appliance software 9.9.2.85 and 4 older
- CISA due date
- 3 May 2022
- Weakness
- CWE-79
3 Nov 2021 Cisco IOS XR Denial of service
Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Internet Group Management Protocol (IGMP) process or make it consume available memory and eventually crash. The memory consumption may negatively impact other processes that are running on the device. These vulnerabilities are due to the incorrect handling of IGMP packets. An attacker could exploit these vulnerabilities by sending crafted IGMP traffic to an affected device. A successful exploit could allow the attacker to immediately crash the IGMP process or cause memory exhaustion, resulting in other processes becoming unstable. These processes may include, but are not limited to, interior and exterior routing protocols. Cisco will release software updates that address these vulnerabilities.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- cisco ios xr 6.5.2
- CISA due date
- 3 May 2022
- Weakness
- CWE-400
3 Nov 2021 Cisco IOS XR Denial of service
A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The vulnerability is due to insufficient queue management for Internet Group Management Protocol (IGMP) packets. An attacker could exploit this vulnerability by sending crafted IGMP traffic to an affected device. A successful exploit could allow the attacker to cause memory exhaustion, resulting in instability of other processes. These processes may include, but are not limited to, interior and exterior routing protocols. Cisco will release software updates that address this vulnerability.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-400
3 Nov 2021 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Path traversal
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files on a targeted system. The vulnerability is due to a lack of proper input validation of URLs in HTTP requests processed by an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A successful exploit could allow the attacker to view arbitrary files within the web services file system on the targeted device. The web services file system is enabled when the affected device is configured with either WebVPN or AnyConnect features. This vulnerability cannot be used to obtain access to ASA or FTD system files or underlying operating system (OS) files.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- cisco adaptive security appliance software 9.14.1.10, cisco adaptive security appliance software 9.13.1.10, cisco adaptive security appliance software 9.12.3.12, cisco adaptive security appliance software 9.10.1.42, cisco adaptive security appliance software 9.9.2.74 and 7 older
- CISA due date
- 3 May 2022
- Weakness
- CWE-20
3 Nov 2021 Cisco IP Phones Input validation flaw
A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-20
3 Nov 2021 Cisco IOS XR Memory corruption
A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of string input from certain fields in Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to cause a stack overflow, which could allow the attacker to execute arbitrary code with administrative privileges on an affected device. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- cisco ios xr 7.0.2, cisco ios xr 6.6.12
- CISA due date
- 3 May 2022
- Weakness
- CWE-134
3 Nov 2021 Zyxel Multiple Products Security flaw
Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the firmware. This account can be used by someone to login to the ssh server or web interface with admin privileges.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-522
3 Nov 2021 D-Link DIR-825 R1 Devices Memory corruption
An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-119
3 Nov 2021 Apple Multiple Products Security flaw
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to disclose kernel memory.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple ipados 14.2, apple iphone os 14.2, apple iphone os 12.4.9, apple macos 11.0.1, apple macos 10.15.7 and 3 older
- CISA due date
- 3 May 2022
- Weakness
- CWE-665
3 Nov 2021 Apple Multiple Products Memory corruption
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple ipados 14.2, apple iphone os 14.2, apple itunes 12.11, apple iphone os 12.4.9, apple icloud 11.5 and 5 older
- CISA due date
- 3 May 2022
- Weakness
- CWE-843
3 Nov 2021 Apple Multiple Products Memory corruption
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. Processing a maliciously crafted font may lead to arbitrary code execution.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple ipados 14.2, apple iphone os 14.2, apple iphone os 12.4.9, apple macos 11.0.1, apple mac os x 10.15.7 and 3 older
- CISA due date
- 3 May 2022
- Weakness
- CWE-787
3 Nov 2021 NETGEAR JGS516PE Devices Security flaw
NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- netgear jgs516pe firmware 2.6.0.43
- CISA due date
- 3 May 2022
3 Nov 2021 Oracle Multiple Products Remote code execution
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-502
3 Nov 2021 D-Link DNS-320 Device Command injection
D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-78
3 Nov 2021 WordPress File Manager Plugin Malicious file upload
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, for example, allows attackers to run the elFinder upload (or mkfile and put) command to write PHP code into the wp-content/plugins/wp-file-manager/lib/files/ directory. This was exploited in the wild in August and September 2020.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- filemanagerpro file manager 6.9
- CISA due date
- 3 May 2022
- Weakness
- CWE-434
3 Nov 2021 Trend Micro Apex One, OfficeScan, and Worry-Free Business Security Security flaw
A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
3 Nov 2021 Apache Struts Remote code execution
Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apache struts 2.5.30
- CISA due date
- 3 May 2022
- Weakness
- CWE-917
3 Nov 2021 vBulletin Input validation flaw
vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-74
3 Nov 2021 Microsoft Exchange Server Remote code execution
Microsoft Exchange Remote Code Execution Vulnerability
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 May 2022
- Weakness
- CWE-502
Know when it's your software
Get an email within half an hour when a flaw in your software is added. Free.
About the KEV Catalogue
What is the CISA KEV catalogue?
CISA's list of flaws attackers are known to be using. A flaw is added only with reliable evidence of attacks and a known fix.
Why does it matter more than the CVSS score?
Few CVEs are ever used in attacks. These are, so fix them first, whatever their score.
What is the due date?
The deadline for US federal agencies to fix it (BOD 26-04, which replaced BOD 22-01): as little as three days for recent entries. A sensible deadline for anyone.
Does it apply outside the US?
The deadlines don't, but the flaws are in software used everywhere. If you run it, it applies to you.
What does "used in ransomware" mean?
CISA knows ransomware groups have used the flaw.
How often is it updated?
CISA adds flaws several times a week. CVE Hawk checks hourly and alerts you within half an hour if it's your software.