Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2024-3273 — D-Link Multiple NAS Devices Command Injection Vulnerability
D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When combined with CVE-2024-3272, this can lead to remote, unauthorized code execution.
|
D-Link | Multiple NAS Devices | Apr 11, 2024 | May 2, 2024 | |
|
CVE-2024-29745 — Android Pixel Information Disclosure Vulnerability
Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices.
|
Android | Pixel | Apr 4, 2024 | Apr 25, 2024 | |
|
CVE-2024-29748 — Android Pixel Privilege Escalation Vulnerability
Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.
|
Android | Pixel | Apr 4, 2024 | Apr 25, 2024 | |
|
CVE-2023-24955 — Microsoft SharePoint Server Code Injection Vulnerability
Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.
|
Microsoft | SharePoint Server | Mar 26, 2024 | Apr 16, 2024 | Ransomware |
|
CVE-2019-7256 — Nice Linear eMerge E3-Series OS Command Injection Vulnerability
Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution.
|
Nice | Linear eMerge E3-Series | Mar 25, 2024 | Apr 15, 2024 | |
|
CVE-2021-44529 — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).
|
Ivanti | Endpoint Manager Cloud Service Appliance (EPM CSA) | Mar 25, 2024 | Apr 15, 2024 | Ransomware |
|
CVE-2023-48788 — Fortinet FortiClient EMS SQL Injection Vulnerability
Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.
|
Fortinet | FortiClient EMS | Mar 25, 2024 | Apr 15, 2024 | Ransomware |
|
CVE-2024-27198 — JetBrains TeamCity Authentication Bypass Vulnerability
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.
|
JetBrains | TeamCity | Mar 7, 2024 | Mar 28, 2024 | Ransomware |
|
CVE-2024-23225 — Apple Multiple Products Memory Corruption Vulnerability
Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS kernel contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.
|
Apple | Multiple Products | Mar 6, 2024 | Mar 27, 2024 | |
|
CVE-2024-23296 — Apple Multiple Products Memory Corruption Vulnerability
Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.
|
Apple | Multiple Products | Mar 6, 2024 | Mar 27, 2024 |
D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When combined with CVE-2024-3272, this can lead to remote, unauthorized code execution.
Multiple NAS Devices · Apr 11, 2024
Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices.
Pixel · Apr 4, 2024
Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.
Pixel · Apr 4, 2024
Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.
SharePoint Server · Mar 26, 2024
Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution.
Linear eMerge E3-Series · Mar 25, 2024
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).
Endpoint Manager Cloud Service Appliance (EPM CSA) · Mar 25, 2024
Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.
FortiClient EMS · Mar 25, 2024
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.
TeamCity · Mar 7, 2024
Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS kernel contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.
Multiple Products · Mar 6, 2024
Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.
Multiple Products · Mar 6, 2024