Known exploited (KEV)
Advisories for flaws listed in the CISA Known Exploited Vulnerabilities catalogue.
-
CVSS severity: High 7.7Known exploited (CISA KEV)
nginx resolver off-by-one (CVE-2021-23017)
A security issue in the nginx resolver allows an off-by-one error. The CISA catalogue sample lists it as an off-by-one in the nginx resolver, and the required action is to apply…
-
CVSS severity: High 7.5Known exploited (CISA KEV)
HTTP/2 Rapid Reset denial of service (CVE-2023-44487)
HTTP/2 Rapid Reset is a denial of service weakness: an attacker can use the protocol's reset feature to overload a server.
How to read an advisory
- KEV
- The US cyber agency CISA keeps a catalogue of vulnerabilities it knows have been exploited. Listed ones deserve attention first.
- EPSS
- A probability from 0 to 1, published by FIRST, that exploitation activity is seen in the next 30 days. It describes the vulnerability, not your business.
- Data as at
- The date the facts on the page were current. Always check the vendor's own advisory before you act.
More in the glossary.