CISAKevBot
For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild: the Known Exploited Vulnerability (KEV) catalog. CISA strongly recommends all organizations review and monitor the KEV catalog and prioritize remediation of the listed vulnerabilities to reduce the likelihood of compromise by known threat actors.
Fediverse name: Text copied!
Fediverse URL: Text copied!
Feed URL: https://rud.is/cisa-kev.rssWebsite: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Refreshed at: 1/7/2026, 4:24:31 AM
Entries
- 2022-04-25: [CVE-2019-1003029] Jenkins Script Security Plugin Sandbox Bypass Vulnerability
Posted at: 12/24/2024, 8:21:09 PM - 2022-04-19: [CVE-2018-6882] Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Posted at: 12/24/2024, 8:21:09 PM - 2022-04-19: [CVE-2019-3568] WhatsApp VOIP Stack Buffer Overflow Vulnerability
Posted at: 12/24/2024, 8:21:09 PM - 2022-04-19: [CVE-2022-22718] Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Posted at: 12/24/2024, 8:21:09 PM - 2022-04-15: [CVE-2022-22960] VMware Multiple Products Privilege Escalation Vulnerability
Posted at: 12/24/2024, 8:21:09 PM - 2022-04-15: [CVE-2022-1364] Google Chromium V8 Type Confusion Vulnerability
Posted at: 12/24/2024, 8:21:09 PM - 2022-04-15: [CVE-2019-3929] Crestron Multiple Products Command Injection Vulnerability
Posted at: 12/24/2024, 8:21:09 PM - 2022-04-15: [CVE-2019-16057] D-Link DNS-320 Remote Code Execution Vulnerability
Posted at: 12/24/2024, 8:21:09 PM - 2022-04-15: [CVE-2018-7841] Schneider Electric U.motion Builder SQL Injection Vulnerability
Posted at: 12/24/2024, 8:21:09 PM - 2022-04-15: [CVE-2016-4523] Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
Posted at: 12/24/2024, 8:21:09 PM