CISA Known Exploited Vulnerabilities Directory

SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection.

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.

Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.

Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.

Redis is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.

Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.

Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file.

Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).