Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2020-2021 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication.
|
Palo Alto Networks | PAN-OS | Mar 25, 2022 | Apr 15, 2022 | Ransomware |
|
CVE-2020-2506 — QNAP Helpdesk Improper Access Control Vulnerability
QNAP Helpdesk contains an improper access control vulnerability which could allow an attacker to gain privileges or to read sensitive information.
|
QNAP Systems | Helpdesk | Mar 25, 2022 | Apr 15, 2022 | |
|
CVE-2020-25223 — Sophos SG UTM Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM.
|
Sophos | SG UTM | Mar 25, 2022 | Apr 15, 2022 | |
|
CVE-2020-5410 — VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files.
|
VMware Tanzu | Spring Cloud Configuration (Config) Server | Mar 25, 2022 | Apr 15, 2022 | |
|
CVE-2020-7247 — OpenSMTPD Remote Code Execution Vulnerability
smtp_mailaddr in smtp_session.c in OpenSMTPD, as used in OpenBSD and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session.
|
OpenBSD | OpenSMTPD | Mar 25, 2022 | Apr 15, 2022 | |
|
CVE-2020-9054 — Zyxel Multiple NAS Devices OS Command Injection Vulnerability
Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code.
|
Zyxel | Multiple Network-Attached Storage (NAS) Devices | Mar 25, 2022 | Apr 15, 2022 | |
|
CVE-2020-9377 — D-Link DIR-610 Devices Remote Command Execution
D-Link DIR-610 devices allow remote code execution via the cmd parameter to command.php.
|
D-Link | DIR-610 Devices | Mar 25, 2022 | Apr 15, 2022 | |
|
CVE-2021-22941 — Citrix ShareFile Improper Access Control Vulnerability
Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller.
|
Citrix | ShareFile | Mar 25, 2022 | Apr 15, 2022 | Ransomware |
|
CVE-2021-42237 — Sitecore XP Remote Command Execution Vulnerability
Sitcore XP contains an insecure deserialization vulnerability which can allow for remote code execution.
|
Sitecore | XP | Mar 25, 2022 | Apr 15, 2022 | Ransomware |
|
CVE-2022-21999 — Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.
|
Microsoft | Windows | Mar 25, 2022 | Apr 15, 2022 | Ransomware |
Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication.
PAN-OS · Mar 25, 2022
QNAP Helpdesk contains an improper access control vulnerability which could allow an attacker to gain privileges or to read sensitive information.
Helpdesk · Mar 25, 2022
A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM.
SG UTM · Mar 25, 2022
Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files.
Spring Cloud Configuration (Config) Server · Mar 25, 2022
smtp_mailaddr in smtp_session.c in OpenSMTPD, as used in OpenBSD and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session.
OpenSMTPD · Mar 25, 2022
Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code.
Multiple Network-Attached Storage (NAS) Devices · Mar 25, 2022
D-Link DIR-610 devices allow remote code execution via the cmd parameter to command.php.
DIR-610 Devices · Mar 25, 2022
Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller.
ShareFile · Mar 25, 2022
Sitcore XP contains an insecure deserialization vulnerability which can allow for remote code execution.
XP · Mar 25, 2022
Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.
Windows · Mar 25, 2022