CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerability listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and po...

Detect and prioritize CISA Known Exploited Vulnerabilities in the cloud with Wiz

For each CVE, the Wiz Research team maintains data from multiple threat intelligence sources and our own independent research. Now that we’ve added support for the new CISA KEV catalog, learn how you can use it in your cloud environment...

CISA Adds 15 Known Exploited Vulnerabilities to Catalog

CISA has added 15 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...

CVE-2022-24260

creationtimestamp| type| source ---|---|--- 2022-02-04 20:31:01+00:00| seen| https://t.me/cibsecurity/36865 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-21 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...

CISA Adds Eight Known Exploited Vulnerabilities to Catalog

CISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types a...

CVE-2021-35587

creationtimestamp| type| source ---|---|--- 2022-01-19 14:32:10+00:00| seen| https://t.me/cibsecurity/35815 2022-03-10 13:25:43+00:00| published-proof-of-concept| https://t.me/ptswarm/113 2022-03-14 11:00:19+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5601 2022-03-15...

CISA Adds 13 Known Exploited Vulnerabilities to Catalog

CISA has added 13 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...

CVE-2022-23178

creationtimestamp| type| source ---|---|--- 2022-01-15 18:50:39+00:00| seen| https://t.me/cibsecurity/35645 2024-11-25 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-25 2024-11-29 00:00:00+00:00| exploited| The Shadowserver...

CISA Adds 15 Known Exploited Vulnerabilities to Catalog

CISA has added 15 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...

Apache Archiva < 2.2.6 Multiple Log4j Vulnerabilities (Log4Shell) - Version Check

Apache Archiva is prone to multiple vulnerabilities in the Apache Log4j library. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2021-44228

creationtimestamp| type| source ---|---|--- 2021-12-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=700 2021-12-10 08:54:02+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus38/2021 2021-12-10 09:44:22+00:00| exploited| https://t.me/poxek/229 2021-12-1...

CISA Adds 13 Known Exploited Vulnerabilities to Catalog

CISA has added 13 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...

CISA Adds Thirteen Known Exploited Vulnerabilities to Catalog

CISA has added thirteen new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all typ...

CVE-2021-42567

creationtimestamp| type| source ---|---|--- 2021-12-08 00:23:19+00:00| seen| https://t.me/cibsecurity/33537 2025-01-01 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-01 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CVE-2021-43798

creationtimestamp| type| source ---|---|--- 2021-12-07 13:19:30+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/917 2021-12-07 15:48:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/918 2021-12-07 17:34:45+00:00| published-proof-of-concept|...

CVE-2021-41266

creationtimestamp| type| source ---|---|--- 2021-11-17 16:27:38+00:00| seen| https://t.me/cibsecurity/32511 2024-10-30 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-10-30 2024-11-12 00:00:00+00:00| exploited| The Shadowserver...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, which require remediation from federal civilian executive branch FCEB agencies by December 1, 2021. CISA has evidence that threat actors are actively exploiting the vulnerabilities listed in the table below...

CVE-2021-42237

creationtimestamp| type| source ---|---|--- 2021-11-05 13:25:41+00:00| seen| https://t.me/cibsecurity/31868 2021-11-08 17:26:22+00:00| exploited| https://t.me/BleepingComputer/10895 2021-11-09 17:50:00+00:00| exploited| https://t.me/truesecator/2299 2021-11-15 19:46:09+00:00| seen|...