CISA Expands KEV with Five Actively Exploited Flaws
6 Articles
6 Articles
CISA expands KEV with five actively exploited flaws
CISA added ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND vulnerabilities to its Known Exploited Vulnerabilities catalog. The listed CVEs span file access abuse, path traversal with possible RCE, sensitive data exposure, command...
CISA adds ProFTPD, ONLYOFFICE, Strapi, Apache Struts and ISC BIND to the KEV catalog. ProFTPD's failure reaches CVSS 10.0 and the federal deadline expires today. The CISA KEV entry: five vulnerabilities exploited, ProFTPD with CVSS 10.0 aparece primero en Moncloa.
CISA Warns of Apache Struts Command Injection Vulnerability Exploited in Attacks
CISA has added a long-standing Apache Struts flaw, tracked as CVE-2016-3081, to its Known Exploited Vulnerabilities catalog after confirming that attackers are using it in real-world attacks. The issue is a command injection vulnerability in Apache Struts that can allow a remote attacker to run code on a vulnerable server when Dynamic Method Invocation is […]
The CISA warns against observed attacks on Apache Struts, BIND and ProFTPD. The gaps are sometimes very old.
U.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND to its Known Exploited… Read more →
Coverage Details
Bias Distribution
- 100% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium







