| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2018-8414
Microsoft Windows Shell Remote Code Execution Vulnerability |
Microsoft · Windows | Mar 25, 2022 | Apr 15, 2022 | 72.6% | — |
| CVE-2019-0903
Microsoft GDI Remote Code Execution Vulnerability |
Microsoft · Graphics Device Interface (GDI) | Mar 25, 2022 | Apr 15, 2022 | 21.7% | — |
| CVE-2019-1003030
Jenkins Matrix Project Plugin Remote Code Execution Vulnerability |
Jenkins · Matrix Project Plugin | Mar 25, 2022 | Apr 15, 2022 | 97.1% | — |
| CVE-2019-10068
Kentico Xperience Deserialization of Untrusted Data Vulnerability |
Kentico · Xperience | Mar 25, 2022 | Apr 15, 2022 | 95.1% | — |
| CVE-2019-11043 Ransomware
PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability |
PHP · FastCGI Process Manager (FPM) | Mar 25, 2022 | Apr 15, 2022 | 99.8% | — |
| CVE-2019-12989
Citrix SD-WAN and NetScaler SQL Injection Vulnerability |
Citrix · SD-WAN and NetScaler | Mar 25, 2022 | Apr 15, 2022 | 95.0% | — |
| CVE-2019-12991
Citrix SD-WAN and NetScaler Command Injection Vulnerability |
Citrix · SD-WAN and NetScaler | Mar 25, 2022 | Apr 15, 2022 | 74.1% | — |
| CVE-2019-15107 Ransomware
Webmin Command Injection Vulnerability |
Webmin · Webmin | Mar 25, 2022 | Apr 15, 2022 | 99.7% | — |
| CVE-2019-16920
D-Link Multiple Routers Command Injection Vulnerability |
D-Link · Multiple Routers | Mar 25, 2022 | Apr 15, 2022 | 100.0% | — |
| CVE-2019-2616
Oracle BI Publisher Unauthorized Access Vulnerability |
Oracle · BI Publisher (Formerly XML Publisher) | Mar 25, 2022 | Apr 15, 2022 | 92.2% | — |
| CVE-2019-6340
Drupal Core Remote Code Execution Vulnerability |
Drupal · Core | Mar 25, 2022 | Apr 15, 2022 | 92.0% | — |
| CVE-2020-1631
Juniper Junos OS Path Traversal Vulnerability |
Juniper · Junos OS | Mar 25, 2022 | Apr 15, 2022 | 4.9% | — |
| CVE-2020-1956
Apache Kylin OS Command Injection Vulnerability |
Apache · Kylin | Mar 25, 2022 | Apr 15, 2022 | 98.0% | — |
| CVE-2020-2021 Ransomware
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability |
Palo Alto Networks · PAN-OS | Mar 25, 2022 | Apr 15, 2022 | 4.4% | — |
| CVE-2020-2506
QNAP Helpdesk Improper Access Control Vulnerability |
QNAP Systems · Helpdesk | Mar 25, 2022 | Apr 15, 2022 | 2.0% | — |
| CVE-2020-25223
Sophos SG UTM Remote Code Execution Vulnerability |
Sophos · SG UTM | Mar 25, 2022 | Apr 15, 2022 | 96.8% | — |
| CVE-2020-5410
VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability |
VMware Tanzu · Spring Cloud Configuration (Config) Server | Mar 25, 2022 | Apr 15, 2022 | 95.6% | — |
| CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability |
OpenBSD · OpenSMTPD | Mar 25, 2022 | Apr 15, 2022 | 99.0% | — |
| CVE-2020-9054
Zyxel Multiple NAS Devices OS Command Injection Vulnerability |
Zyxel · Multiple Network-Attached Storage (NAS) Devices | Mar 25, 2022 | Apr 15, 2022 | 100.0% | — |
| CVE-2020-9377
D-Link DIR-610 Devices Remote Command Execution |
D-Link · DIR-610 Devices | Mar 25, 2022 | Apr 15, 2022 | 21.9% | — |
| CVE-2021-22941 Ransomware
Citrix ShareFile Improper Access Control Vulnerability |
Citrix · ShareFile | Mar 25, 2022 | Apr 15, 2022 | 53.6% | — |
| CVE-2021-42237 Ransomware
Sitecore XP Remote Command Execution Vulnerability |
Sitecore · XP | Mar 25, 2022 | Apr 15, 2022 | 97.4% | — |
| CVE-2022-21999 Ransomware
Microsoft Windows Print Spooler Privilege Escalation Vulnerability |
Microsoft · Windows | Mar 25, 2022 | Apr 15, 2022 | 41.0% | — |
| CVE-2022-26143
MiCollab, MiVoice Business Express Access Control Vulnerability |
Mitel · MiCollab, MiVoice Business Express | Mar 25, 2022 | Apr 15, 2022 | 87.3% | — |
| CVE-2022-26318
WatchGuard Firebox and XTM Appliances Arbitrary Code Execution |
WatchGuard · Firebox and XTM Appliances | Mar 25, 2022 | Apr 15, 2022 | 78.2% | — |
| CVE-2015-2546 Ransomware
Microsoft Win32k Memory Corruption Vulnerability |
Microsoft · Win32k | Mar 15, 2022 | Apr 5, 2022 | 10.1% | — |
| CVE-2016-3309 Ransomware
Microsoft Windows Kernel Privilege Escalation Vulnerability |
Microsoft · Windows | Mar 15, 2022 | Apr 5, 2022 | 20.5% | — |
| CVE-2017-0101 Ransomware
Microsoft Windows Transaction Manager Privilege Escalation Vulnerability |
Microsoft · Windows | Mar 15, 2022 | Apr 5, 2022 | 57.5% | — |
| CVE-2018-8120 Ransomware
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Mar 15, 2022 | Apr 5, 2022 | 73.3% | — |
| CVE-2019-0543 Ransomware
Microsoft Windows Privilege Escalation Vulnerability |
Microsoft · Windows | Mar 15, 2022 | Apr 5, 2022 | 4.7% | — |
| CVE-2019-0841 Ransomware
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulner… |
Microsoft · Windows | Mar 15, 2022 | Apr 5, 2022 | 41.4% | — |
| CVE-2019-1064 Ransomware
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulner… |
Microsoft · Windows | Mar 15, 2022 | Apr 5, 2022 | 6.9% | — |
| CVE-2019-1069 Ransomware
Microsoft Task Scheduler Privilege Escalation Vulnerability |
Microsoft · Task Scheduler | Mar 15, 2022 | Apr 5, 2022 | 6.2% | — |
| CVE-2019-1129 Ransomware
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulner… |
Microsoft · Windows | Mar 15, 2022 | Apr 5, 2022 | 1.8% | — |
| CVE-2019-1132
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Mar 15, 2022 | Apr 5, 2022 | 9.9% | — |
| CVE-2019-1253 Ransomware
Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability |
Microsoft · Windows | Mar 15, 2022 | Apr 5, 2022 | 11.6% | — |
| CVE-2019-1315 Ransomware
Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability |
Microsoft · Windows | Mar 15, 2022 | Apr 5, 2022 | 3.5% | — |
| CVE-2019-1322 Ransomware
Microsoft Windows Privilege Escalation Vulnerability |
Microsoft · Windows | Mar 15, 2022 | Apr 5, 2022 | 18.8% | — |
| CVE-2019-1405 Ransomware
Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation V… |
Microsoft · Windows | Mar 15, 2022 | Apr 5, 2022 | 30.2% | — |
| CVE-2020-5135 Ransomware
SonicWall SonicOS Buffer Overflow Vulnerability |
SonicWall · SonicOS | Mar 15, 2022 | Apr 5, 2022 | 26.9% | — |
| CVE-2009-3960 Ransomware
Adobe BlazeDS Information Disclosure Vulnerability |
Adobe · BlazeDS | Mar 7, 2022 | Sep 7, 2022 | 90.1% | — |
| CVE-2013-0625
Adobe ColdFusion Authentication Bypass Vulnerability |
Adobe · ColdFusion | Mar 7, 2022 | Sep 7, 2022 | 93.8% | — |
| CVE-2013-0629
Adobe ColdFusion Directory Traversal Vulnerability |
Adobe · ColdFusion | Mar 7, 2022 | Sep 7, 2022 | 65.8% | — |
| CVE-2013-0631
Adobe ColdFusion Information Disclosure Vulnerability |
Adobe · ColdFusion | Mar 7, 2022 | Sep 7, 2022 | 66.4% | — |
| CVE-2016-6277
NETGEAR Multiple Routers Remote Code Execution Vulnerability |
NETGEAR · Multiple Routers | Mar 7, 2022 | Sep 7, 2022 | 99.8% | — |
| CVE-2017-6077
NETGEAR DGN2200 Remote Code Execution Vulnerability |
NETGEAR · Wireless Router DGN2200 | Mar 7, 2022 | Sep 7, 2022 | 68.7% | — |
| CVE-2019-11581
Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerabil… |
Atlassian · Jira Server and Data Center | Mar 7, 2022 | Sep 7, 2022 | 84.6% | — |
| CVE-2020-8218
Pulse Connect Secure Code Injection Vulnerability |
Pulse Secure · Pulse Connect Secure | Mar 7, 2022 | Sep 7, 2022 | 32.2% | — |
| CVE-2021-21973
VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) V… |
VMware · vCenter Server and Cloud Foundation | Mar 7, 2022 | Mar 21, 2022 | 88.0% | — |
| CVE-2022-26485
Mozilla Firefox Use-After-Free Vulnerability |
Mozilla · Firefox | Mar 7, 2022 | Mar 21, 2022 | 14.3% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.