Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2017-12149 — Red Hat JBoss Application Server Remote Code Execution Vulnerability
The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.
|
Red Hat | JBoss Application Server | Dec 10, 2021 | Jun 10, 2022 | Ransomware |
|
CVE-2017-17562 — Embedthis GoAhead Remote Code Execution Vulnerability
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.
|
Embedthis | GoAhead | Dec 10, 2021 | Jun 10, 2022 | |
|
CVE-2019-0193 — Apache Solr DataImportHandler Code Injection Vulnerability
The optional Apache Solr module DataImportHandler contains a code injection vulnerability.
|
Apache | Solr | Dec 10, 2021 | Jun 10, 2022 | |
|
CVE-2019-10758 — MongoDB mongo-express Remote Code Execution Vulnerability
mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method.
|
MongoDB | mongo-express | Dec 10, 2021 | Jun 10, 2022 | |
|
CVE-2019-13272 — Linux Kernel Improper Privilege Management Vulnerability
Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.
|
Linux | Kernel | Dec 10, 2021 | Jun 10, 2022 | |
|
CVE-2019-7238 — Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.
|
Sonatype | Nexus Repository Manager | Dec 10, 2021 | Jun 10, 2022 | |
|
CVE-2020-17463 — Fuel CMS SQL Injection Vulnerability
FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.
|
Fuel CMS | Fuel CMS | Dec 10, 2021 | Jun 10, 2022 | |
|
CVE-2020-8816 — Pi-Hole AdminLTE Remote Code Execution Vulnerability
Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.
|
Pi-hole | AdminLTE | Dec 10, 2021 | Jun 10, 2022 | |
|
CVE-2021-35394 — Realtek Jungle SDK Remote Code Execution Vulnerability
RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.
|
Realtek | Jungle Software Development Kit (SDK) | Dec 10, 2021 | Dec 24, 2021 | |
|
CVE-2021-44168 — Fortinet FortiOS Arbitrary File Download
Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files.
|
Fortinet | FortiOS | Dec 10, 2021 | Dec 24, 2021 |
The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.
JBoss Application Server · Dec 10, 2021
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.
GoAhead · Dec 10, 2021
The optional Apache Solr module DataImportHandler contains a code injection vulnerability.
Solr · Dec 10, 2021
mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method.
mongo-express · Dec 10, 2021
Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.
Kernel · Dec 10, 2021
Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.
Nexus Repository Manager · Dec 10, 2021
FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.
Fuel CMS · Dec 10, 2021
Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.
AdminLTE · Dec 10, 2021
RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.
Jungle Software Development Kit (SDK) · Dec 10, 2021
Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files.
FortiOS · Dec 10, 2021