CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 1h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2022-0543

Debian-specific Redis Server Lua Sandbox Escape Vulnerability

Redis · Debian-specific Redis Serversremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2022-1096

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2005-2773

HP OpenView Network Node Manager Remote Code Execution Vulnerability

Hewlett Packard (HP) · OpenView Network Node Managerremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2009-0927

Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

Adobe · Reader and Acrobatremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2009-1151

phpMyAdmin Remote Code Execution Vulnerability

phpMyAdmin · phpMyAdminremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2009-2055

Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

Cisco · IOS XRremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2010-2861

Adobe ColdFusion Directory Traversal Vulnerability

Adobe · ColdFusionremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1119secondary impact T1105primary impact

P1added 2022-03-25due 2022-04-15

⋮

CVECVE-2010-3035

Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

Cisco · IOS XRremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2010-4344

Exim Heap-Based Buffer Overflow Vulnerability

Exim · Eximremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2010-4345

Exim Privilege Escalation Vulnerability

Exim · Eximremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2012-1823

PHP-CGI Query String Parameter Vulnerability

PHP · PHPremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2013-2251

Apache Struts Improper Input Validation Vulnerability

Apache · Strutsremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2013-4810

HP Multiple Products Remote Code Execution Vulnerability

Hewlett Packard (HP) · ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Managementremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2013-5223

D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability

D-Link · DSL-2760Uremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2014-0130

Ruby on Rails Directory Traversal Vulnerability

Rails · Ruby on Railsremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2014-3120

Elasticsearch Remote Code Execution Vulnerability

Elastic · Elasticsearchremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2014-6287

Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability

Rejetto · HTTP File Server (HFS)remediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2014-6324

Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability

Microsoft · Kerberos Key Distribution Center (KDC)remediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2014-6332

Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2015-0666

Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability

Cisco · Prime Data Center Network Manager (DCNM)remediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2015-1187

D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability

D-Link and TRENDnet · Multiple Devicesremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2015-1427

Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

Elastic · Elasticsearchremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2015-3035

TP-Link Multiple Archer Devices Directory Traversal Vulnerability

TP-Link · Multiple Archer Devicesremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2015-4068

Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability

Arcserve · Unified Data Protection (UDP)remediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2016-0752

Ruby on Rails Directory Traversal Vulnerability

Rails · Ruby on Railsremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2016-10174

NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability

NETGEAR · WNR2000v5 Routerremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2016-11021

D-Link DCS-930L Devices OS Command Injection Vulnerability

D-Link · DCS-930L Devicesremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2016-1555

NETGEAR Multiple WAP Devices Command Injection Vulnerability

NETGEAR · Wireless Access Point (WAP) Devicesremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2016-4171

Adobe Flash Player Remote Code Execution Vulnerability

Adobe · Flash Playerremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2016-7892

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Playerremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2017-0146

Microsoft Windows SMB Remote Code Execution Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-25due 2022-04-15

⋮

CVECVE-2017-12615

Apache Tomcat on Windows Remote Code Execution Vulnerability

Apache · Tomcatremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-25due 2022-04-15

⋮

CVECVE-2017-12617

Apache Tomcat Remote Code Execution Vulnerability

Apache · Tomcatremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2017-3881

Cisco IOS and IOS XE Remote Code Execution Vulnerability

Cisco · IOS and IOS XEremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2017-6316

Citrix Multiple Products Remote Code Execution Vulnerability

Citrix · NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Serverremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2017-6334

NETGEAR DGN2200 Devices OS Command Injection Vulnerability

NETGEAR · DGN2200 Devicesremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2018-0125

Cisco VPN Routers Remote Code Execution Vulnerability

Cisco · VPN Routersremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2018-0147

Cisco Secure Access Control System Java Deserialization Vulnerability

Cisco · Secure Access Control System (ACS)remediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2018-11138

Quest KACE System Management Appliance Remote Command Execution Vulnerability

Quest · KACE System Management Applianceremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-25due 2022-04-15

⋮

CVECVE-2018-1273

VMware Tanzu Spring Data Commons Property Binder Vulnerability

VMware Tanzu · Spring Data Commonsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-25due 2022-04-15

⋮

CVECVE-2018-14839

LG N1A1 NAS Remote Command Execution Vulnerability

LG · N1A1 NASremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2018-6961

VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability

VMware · SD-WAN Edgeremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2018-8373

Microsoft Scripting Engine Memory Corruption Vulnerability

Microsoft · Internet Explorer Scripting Engineremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2018-8414

Microsoft Windows Shell Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2019-0903

Microsoft GDI Remote Code Execution Vulnerability

Microsoft · Graphics Device Interface (GDI)remediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2019-1003030

Jenkins Matrix Project Plugin Remote Code Execution Vulnerability

Jenkins · Matrix Project Pluginremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2019-10068

Kentico Xperience Deserialization of Untrusted Data Vulnerability

Kentico · Xperienceremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2019-11043

PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

PHP · FastCGI Process Manager (FPM)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-25due 2022-04-15

⋮

CVECVE-2019-12989

Citrix SD-WAN and NetScaler SQL Injection Vulnerability

Citrix · SD-WAN and NetScalerremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2019-12991

Citrix SD-WAN and NetScaler Command Injection Vulnerability

Citrix · SD-WAN and NetScalerremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

1,151–1,200 of ~1,722

← Prev Next →