Threats & CVE Intelligence
Search the locally synchronized CISA known-exploited vulnerabilities catalog, or enter a CVE ID or keyword to search the broader NIST National Vulnerability Database. NVD searches are retrieved on demand and may be rate limited.
Last successful sync: 2026-11-07 18:42:25 UTC · Source catalog updated: 2026-11-06T19:44:45.1797Z · 1769 records in latest import.
CISA Known Exploited Vulnerabilities · 1769 matches
Adobe BlazeDS Information Disclosure Vulnerability
Adobe — BlazeDS
Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.
Ransomware use reportedCVE-2022-20708 · KEV 2022-03-03Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco — Small Business RV160, RV260, RV340, and RV345 Series Routers
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and autho…
CVE-2022-20703 · KEV 2022-03-03Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco — Small Business RV160, RV260, RV340, and RV345 Series Routers
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and autho…
CVE-2022-20701 · KEV 2022-03-03Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco — Small Business RV160, RV260, RV340, and RV345 Series Routers
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and autho…
CVE-2022-20700 · KEV 2022-03-03Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco — Small Business RV160, RV260, RV340, and RV345 Series Routers
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and autho…
CVE-2022-20699 · KEV 2022-03-03Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco — Small Business RV160, RV260, RV340, and RV345 Series Routers
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and autho…
CVE-2021-41379 · KEV 2022-03-03Microsoft Windows Installer Privilege Escalation Vulnerability
Microsoft — Windows
Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.
Ransomware use reportedCVE-2020-1938 · KEV 2022-03-03Apache Tomcat Improper Privilege Management Vulnerability
Apache — Tomcat
Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.
CVE-2020-11899 · KEV 2022-03-03Treck TCP/IP stack Out-of-Bounds Read Vulnerability
Treck TCP/IP stack — IPv6
The Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability.
CVE-2019-16928 · KEV 2022-03-03Exim Out-of-bounds Write Vulnerability
Exim — Exim Internet Mailer
Exim contains an out-of-bounds write vulnerability which can allow for remote code execution.
CVE-2019-1652 · KEV 2022-03-03Cisco Small Business Routers Improper Input Validation Vulnerability
Cisco — Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitra…
CVE-2019-1297 · KEV 2022-03-03Microsoft Excel Remote Code Execution Vulnerability
Microsoft — Excel
A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.
CVE-2018-8581 · KEV 2022-03-03Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft — Exchange Server
A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.
Ransomware use reportedCVE-2018-8298 · KEV 2022-03-03ChakraCore Scripting Engine Type Confusion Vulnerability
ChakraCore — ChakraCore scripting engine
The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.
CVE-2018-0180 · KEV 2022-03-03Cisco IOS Software Denial-of-Service Vulnerability
Cisco — IOS Software
A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.
CVE-2018-0179 · KEV 2022-03-03Cisco IOS Software Denial-of-Service Vulnerability
Cisco — IOS Software
A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.
CVE-2018-0175 · KEV 2022-03-03Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
Cisco — IOS, XR, and XE Software
Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) c…
CVE-2018-0174 · KEV 2022-03-03Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
Cisco — IOS XE Software
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).
CVE-2018-0173 · KEV 2022-03-03Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
Cisco — IOS and IOS XE Software
A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets can allow for denial-of-service (DoS).
CVE-2018-0172 · KEV 2022-03-03Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
Cisco — IOS and IOS XE Software
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).
CVE-2018-0167 · KEV 2022-03-03Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
Cisco — IOS, XR, and XE Software
There is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software which could allow an unauthenticated, adjacent attacker to cause a denial…
CVE-2018-0161 · KEV 2022-03-03Cisco IOS Software Resource Management Errors Vulnerability
Cisco — IOS Software
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service (DoS) condition…
CVE-2018-0159 · KEV 2022-03-03Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
Cisco — IOS Software and Cisco IOS XE Software
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting …
CVE-2018-0158 · KEV 2022-03-03Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
Cisco — IOS Software and Cisco IOS XE Software
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting …
CVE-2018-0156 · KEV 2022-03-03Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
Cisco — IOS Software and Cisco IOS XE Software
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial-of-service (DoS) condition.
CVE-2018-0155 · KEV 2022-03-03Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
Cisco — Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches
A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to cause a crash of the …
CVE-2018-0154 · KEV 2022-03-03Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
Cisco — IOS Software
A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition.
CVE-2018-0151 · KEV 2022-03-03Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
Cisco — IOS and IOS XE Software
A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated p…
CVE-2017-8540 · KEV 2022-03-03Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability
Microsoft — Malware Protection Engine
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 151…
CVE-2017-6744 · KEV 2022-03-03Cisco IOS Software SNMP Remote Code Execution Vulnerability
Cisco — IOS software
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 1 contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An atta…
Source: CISA KEV catalog and NIST NVD. “Known” ransomware use is a CISA catalog label, not a real-time incident alert. Always review vendor advisories for patches.