Vulnerabilities with evidence of exploitation, including affected products and required actions.
This page is an archived snapshot of the CISA Exploited Vulnerabilities feed collected on Oct 2, 2026, preserved by BioThreat Corporation. Publication dates belong to the original source; this snapshot is not a current advisory.
Vendor: Microsoft | Product: Windows | Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability. | Required action: Apply updates per vendor instructions. | Federal remediation due: 2021-12-29
CVE-2021-4102 · CISA Known Exploited Vulnerabilities
Vendor: Google | Product: Chromium V8 | Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | Required action: Apply updates per vendor instructions. | Federal…
Read full source summary
Vendor: Google | Product: Chromium V8 | Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | Required action: Apply updates per vendor instructions. | Federal remediation due: 2021-12-29
CVE-2021-44515 · CISA Known Exploited Vulnerabilities
Vendor: Zoho | Product: Desktop Central | Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop Central MSP server. | Required action: Apply updates per vendor instructions. | Federal remediation due: 2021-12-24
CVE-2019-13272 · CISA Known Exploited Vulnerabilities
Vendor: Linux | Product: Kernel | Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access. | Required action: Apply updates per vendor instructions. | Federal remediation due: 2022-06-10
CVE-2021-35394 · CISA Known Exploited Vulnerabilities
Vendor: Embedthis | Product: GoAhead | Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. | Required action: Apply updates per vendor instructions. | Federal remediation due: 2022-06-10
CVE-2017-12149 · CISA Known Exploited Vulnerabilities
Vendor: Red Hat | Product: JBoss Application Server | The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data. | Required action: Apply updates per vendor instructions. | Federal remediation due: 2022-06-10
CVE-2010-1871 · CISA Known Exploited Vulnerabilities
Vendor: Red Hat | Product: JBoss Seam 2 | JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured. | Required action: Apply updates per vendor instructions. | Federal remediation due: 2022-06-10
CVE-2020-17463 · CISA Known Exploited Vulnerabilities
Vendor: MongoDB | Product: mongo-express | mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. | Required action: Apply updates per vendor instructions. | Federal remediation due: 2022-06-10
CVE-2021-44228 · CISA Known Exploited Vulnerabilities
Vendor: Apache | Product: Log4j2 | Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution. | Required action: For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one…
Read full source summary
Vendor: Apache | Product: Log4j2 | Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution. | Required action: For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available. | Federal remediation due: 2021-12-24
CVE-2020-11261 · CISA Known Exploited Vulnerabilities
Vendor: MikroTik | Product: RouterOS | MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface. | Required action: Apply updates per vendor instructions. | Federal remediation due: 2022-06-01
CVE-2021-37415 · CISA Known Exploited Vulnerabilities
Vendor: Zoho | Product: ManageEngine ServiceDesk Plus (SDP) | Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication | Required action: Apply updates per vendor instructions. | Federal remediation due: 2021-12-15
CVE-2021-40438 · CISA Known Exploited Vulnerabilities
Vendor: Apache | Product: Apache | A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. | Required action: Apply updates per vendor instructions. | Federal remediation due: 2021-12-15
CVE-2021-44077 · CISA Known Exploited Vulnerabilities
Vendor: Zoho | Product: ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution | Required action: Apply updates per vendor instructions. | Federal remediation due: 2021-12-15
BioThreat Corporation threat monitoring workflows bring together reports published by the named source institutions. These are public-source reports; publication dates and source links accompany each record.
01 / SOURCE
Read the source
Open a feed to search titles, summaries, or CVE IDs. Follow a record’s title or the Official source link to read the reporting in its original context.
Daily snapshots are collected when a source is visited and successfully refreshed. Archive dates indicate collection dates, and the archive may contain gaps.
JSON links provide machine-readable records with source names, titles, summaries, links, and publication dates. Choose a saved date for the records collected in that snapshot.