CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 1h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2019-16256

SIMalliance Toolbox Browser Command Injection Vulnerability

SIMalliance · Toolbox Browserremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-1653

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

Cisco · Small Business RV320 and RV325 Routersremediation: past CISA due date

ATT&CKT1190exploitation T1007secondary impact T1082primary impact T1005secondary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-16759

vBulletin PHP Module Remote Code Execution Vulnerability

vBulletin · vBulletinremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-17026

Mozilla Firefox And Thunderbird Type Confusion Vulnerability

Mozilla · Firefox and Thunderbirdremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-17558

Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability

Apache · Solrremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-18187

Trend Micro OfficeScan Directory Traversal Vulnerability

Trend Micro · OfficeScanremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-18935

Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability

Progress · Telerik UI for ASP.NET AJAXremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1496primary impact T1041primary impact T1505.003primary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-18988

TeamViewer Desktop Bypass Remote Login Vulnerability

TeamViewer · Desktopremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-19356

Netis WF2419 Devices Remote Code Execution Vulnerability

Netis · WF2419 Devicesremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-19781

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability

Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Applianceremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059primary impact T1083secondary impact T1133exploitation

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-20085

TVT NVMS-1000 Directory Traversal Vulnerability

TVT · NVMS-1000remediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-2215

Android Kernel Use-After-Free Vulnerability

Android · Android Kernelremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-3396

Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability

Atlassian · Confluence Server and Data Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1202secondary impact T1090primary impact T1133exploitation

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-3398

Atlassian Confluence Server and Data Center Path Traversal Vulnerability

Atlassian · Confluence Server and Data Centerremediation: past CISA due date

ATT&CKT1202exploitation T1059primary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-4716

IBM Planning Analytics Remote Code Execution Vulnerability

IBM · Planning Analyticsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-5544

VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

VMware · VMware ESXi and Horizon DaaSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-5591

Fortinet FortiOS Default Configuration Vulnerability

Fortinet · FortiOSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1005secondary impact T1557primary impact T1133exploitation

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-6223

Apple iOS and macOS Group Facetime Vulnerability

Apple · iOS and macOSremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-7481

SonicWall SMA100 SQL Injection Vulnerability

SonicWall · SMA100remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-8394

Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability

Zoho · ManageEngineremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-9082

ThinkPHP Remote Code Execution Vulnerability

ThinkPHP · ThinkPHPremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-9978

WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability

WordPress · Social Warfare Pluginremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-0041

Android Kernel Out-of-Bounds Write Vulnerability

Android · Android Kernelremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-0069

Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability

MediaTek · Multiple Chipsetsremediation: past CISA due date

ATT&CKT1068exploitation

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-0601

Microsoft Windows CryptoAPI Spoofing Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-0646

Microsoft .NET Framework Remote Code Execution Vulnerability

Microsoft · .NET Frameworkremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-0674

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-0683

Microsoft Windows Installer Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-0688

Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

Microsoft · Exchange Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1114primary impact T1190exploitation T1505.003secondary impact T1110primary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-0878

Microsoft Edge and Internet Explorer Memory Corruption Vulnerability

Microsoft · Edge and Internet Explorerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-0938

Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-0968

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft · Internet Explorerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-0986

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-10148

SolarWinds Orion Authentication Bypass Vulnerability

SolarWinds · Orionremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-10181

Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability

Sumavision · Enhanced Multimedia Router (EMR)remediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-10189

Zoho ManageEngine Desktop Central File Upload Vulnerability

Zoho · ManageEngineremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-10199

Sonatype Nexus Repository Remote Code Execution Vulnerability

Sonatype · Nexus Repositoryremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-1020

Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-10221

rConfig OS Command Injection Vulnerability

rConfig · rConfigremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-1040

Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

Microsoft · Hyper-V RemoteFXremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-1054

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-10987

Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability

Tenda · AC1900 Router AC15 Modelremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-1147

Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

Microsoft · .NET Framework, SharePoint, Visual Studioremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-11651

SaltStack Salt Authentication Bypass Vulnerability

SaltStack · Saltremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-11652

SaltStack Salt Path Traversal Vulnerability

SaltStack · Saltremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-11738

WordPress Snap Creek Duplicator Plugin File Download Vulnerability

WordPress · Snap Creek Duplicator Pluginremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-12271

Sophos SFOS SQL Injection Vulnerability

Sophos · SFOSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-12812

Fortinet FortiOS SSL VPN Improper Authentication Vulnerability

Fortinet · FortiOSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1556primary impact T1556exploitation

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-1350

Microsoft Windows DNS Server Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-1380

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

1,501–1,550 of ~1,722

← Prev Next →