CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1191–1200 of 1746 records

CVE Vendor Product Added Due Status
CVE-2014-6287 — Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (HFS or HttpFileServer) allows remote attackers to execute arbitrary programs.
 Rejetto HTTP File Server (HFS) Mar 25, 2022 Apr 15, 2022
CVE-2014-6324 — Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges.
 Microsoft Kerberos Key Distribution Center (KDC) Mar 25, 2022 Apr 15, 2022
CVE-2014-6332 — Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site.
 Microsoft Windows Mar 25, 2022 Apr 15, 2022
CVE-2015-0666 — Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) allows remote attackers to read arbitrary files.
 Cisco Prime Data Center Network Manager (DCNM) Mar 25, 2022 Apr 15, 2022
CVE-2015-1187 — D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to perform remote code execution.
 D-Link and TRENDnet Multiple Devices Mar 25, 2022 Apr 15, 2022
CVE-2015-1427 — Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands.
 Elastic Elasticsearch Mar 25, 2022 Apr 15, 2022
CVE-2015-3035 — TP-Link Multiple Archer Devices Directory Traversal Vulnerability
Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.
 TP-Link Multiple Archer Devices Mar 25, 2022 Apr 15, 2022
CVE-2015-4068 — Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability
Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service.
 Arcserve Unified Data Protection (UDP) Mar 25, 2022 Apr 15, 2022
CVE-2016-0752 — Ruby on Rails Directory Traversal Vulnerability
Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.
 Rails Ruby on Rails Mar 25, 2022 Apr 15, 2022
CVE-2016-10174 — NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.
 NETGEAR WNR2000v5 Router Mar 25, 2022 Apr 15, 2022