CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1001–1010 of 1746 records

CVE Vendor Product Added Due Status
CVE-2018-4990 — Adobe Acrobat and Reader Double Free Vulnerability
Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022
CVE-2018-6065 — Google Chromium V8 Integer Overflow Vulnerability
Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
 Google Chromium V8 Jun 8, 2022 Jun 22, 2022
CVE-2019-15271 — Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability
A deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an attacker to execute code with root privileges.
 Cisco RV Series Routers Jun 8, 2022 Jun 22, 2022
CVE-2019-5825 — Google Chromium V8 Out-of-Bounds Write Vulnerability
Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
 Google Chromium V8 Jun 8, 2022 Jun 22, 2022
CVE-2019-7192 — QNAP Photo Station Improper Access Control Vulnerability
QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.
 QNAP Photo Station Jun 8, 2022 Jun 22, 2022 Ransomware
CVE-2019-7193 — QNAP QTS Improper Input Validation Vulnerability
QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system.
 QNAP QTS Jun 8, 2022 Jun 22, 2022 Ransomware
CVE-2019-7194 — QNAP Photo Station Path Traversal Vulnerability
QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
 QNAP Photo Station Jun 8, 2022 Jun 22, 2022 Ransomware
CVE-2019-7195 — QNAP Photo Station Path Traversal Vulnerability
QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
 QNAP Photo Station Jun 8, 2022 Jun 22, 2022 Ransomware
CVE-2022-26134 — Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.
 Atlassian Confluence Server/Data Center Jun 2, 2022 Jun 6, 2022 Ransomware
CVE-2010-0738 — Red Hat JBoss Authentication Bypass Vulnerability
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.
 Red Hat JBoss May 25, 2022 Jun 15, 2022 Ransomware