CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 971–980 of 1746 records

CVE Vendor Product Added Due Status
CVE-2016-2386 — SAP NetWeaver SQL Injection Vulnerability
SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
 SAP NetWeaver Jun 9, 2022 Jun 30, 2022
CVE-2016-2388 — SAP NetWeaver Information Disclosure Vulnerability
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.
 SAP NetWeaver Jun 9, 2022 Jun 30, 2022
CVE-2021-38163 — SAP NetWeaver Unrestricted File Upload Vulnerability
SAP NetWeaver contains a vulnerability that allows unrestricted file upload.
 SAP NetWeaver Jun 9, 2022 Jun 30, 2022
CVE-2006-2492 — Microsoft Word Malformed Object Pointer Vulnerability
Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.
 Microsoft Word Jun 8, 2022 Jun 22, 2022
CVE-2007-5659 — Adobe Acrobat and Reader Buffer Overflow Vulnerability
Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022
CVE-2008-0655 — Adobe Acrobat and Reader Unspecified Vulnerability
Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022
CVE-2009-0557 — Microsoft Office Object Record Corruption Vulnerability
Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.
 Microsoft Office Jun 8, 2022 Jun 22, 2022
CVE-2009-0563 — Microsoft Office Buffer Overflow Vulnerability
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.
 Microsoft Office Jun 8, 2022 Jun 22, 2022
CVE-2009-1862 — Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).
 Adobe Acrobat and Reader, Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2009-3953 — Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022