| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability |
SaltStack · Salt | Nov 3, 2021 | May 3, 2022 | 96.6% | — |
| CVE-2020-11652
SaltStack Salt Path Traversal Vulnerability |
SaltStack · Salt | Nov 3, 2021 | May 3, 2022 | 86.4% | — |
| CVE-2020-11738
WordPress Snap Creek Duplicator Plugin File Download Vulnerability |
WordPress · Snap Creek Duplicator Plugin | Nov 3, 2021 | May 3, 2022 | 97.8% | — |
| CVE-2020-12271 Ransomware
Sophos SFOS SQL Injection Vulnerability |
Sophos · SFOS | Nov 3, 2021 | May 3, 2022 | 43.3% | — |
| CVE-2020-12812 Ransomware
Fortinet FortiOS SSL VPN Improper Authentication Vulnerability |
Fortinet · FortiOS | Nov 3, 2021 | May 3, 2022 | 45.4% | — |
| CVE-2020-1350
Microsoft Windows DNS Server Remote Code Execution Vulnerability |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 96.7% | — |
| CVE-2020-1380
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability |
Microsoft · Internet Explorer | Nov 3, 2021 | May 3, 2022 | 24.2% | — |
| CVE-2020-1464
Microsoft Windows Spoofing Vulnerability |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 38.9% | — |
| CVE-2020-1472 Ransomware
Microsoft Netlogon Privilege Escalation Vulnerability |
Microsoft · Netlogon | Nov 3, 2021 | May 3, 2022 | 99.4% | — |
| CVE-2020-14750
Oracle WebLogic Server Remote Code Execution Vulnerability |
Oracle · WebLogic Server | Nov 3, 2021 | May 3, 2022 | 99.2% | — |
| CVE-2020-14871
Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability |
Oracle · Solaris and Zettabyte File System (ZFS) | Nov 3, 2021 | May 3, 2022 | 80.2% | — |
| CVE-2020-14882
Oracle WebLogic Server Remote Code Execution Vulnerability |
Oracle · WebLogic Server | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2020-14883
Oracle WebLogic Server Unspecified Vulnerability |
Oracle · WebLogic Server | Nov 3, 2021 | May 3, 2022 | 97.7% | — |
| CVE-2020-15505
Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability |
Ivanti · MobileIron Multiple Products | Nov 3, 2021 | May 3, 2022 | 99.7% | — |
| CVE-2020-15999
Google Chrome FreeType Heap Buffer Overflow Vulnerability |
Google · Chrome FreeType | Nov 3, 2021 | Nov 17, 2021 | 63.9% | — |
| CVE-2020-16009
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Nov 3, 2021 | May 3, 2022 | 48.3% | — |
| CVE-2020-16010
Google Chrome for Android UI Heap Buffer Overflow Vulnerability |
Google · Chrome for Android UI | Nov 3, 2021 | May 3, 2022 | 6.4% | — |
| CVE-2020-16013
Google Chromium V8 Incorrect Implementation Vulnerabililty |
Google · Chromium V8 | Nov 3, 2021 | May 3, 2022 | 2.8% | — |
| CVE-2020-16017
Google Chrome Use-After-Free Vulnerability |
Google · Chrome | Nov 3, 2021 | May 3, 2022 | 2.7% | — |
| CVE-2020-16846
SaltStack Salt Shell Injection Vulnerability |
SaltStack · Salt | Nov 3, 2021 | May 3, 2022 | 99.6% | — |
| CVE-2020-17087
Microsoft Windows Kernel Privilege Escalation Vulnerability |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 5.4% | — |
| CVE-2020-17144
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | May 3, 2022 | 36.5% | — |
| CVE-2020-17496
vBulletin PHP Module Remote Code Execution Vulnerability |
vBulletin · vBulletin | Nov 3, 2021 | May 3, 2022 | 87.5% | — |
| CVE-2020-17530
Apache Struts Remote Code Execution Vulnerability |
Apache · Struts | Nov 3, 2021 | May 3, 2022 | 96.3% | — |
| CVE-2020-24557
Trend Micro Multiple Products Improper Access Control Vulnerability |
Trend Micro · Apex One, OfficeScan, and Worry-Free Business Security | Nov 3, 2021 | May 3, 2022 | 2.7% | — |
| CVE-2020-25213
WordPress File Manager Plugin Remote Code Execution Vulnerability |
WordPress · File Manager Plugin | Nov 3, 2021 | May 3, 2022 | 97.3% | — |
| CVE-2020-25506
D-Link DNS-320 Device Command Injection Vulnerability |
D-Link · DNS-320 Device | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2020-2555
Oracle Multiple Products Remote Code Execution Vulnerability |
Oracle · Multiple Products | Nov 3, 2021 | May 3, 2022 | 97.1% | — |
| CVE-2020-26919
Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability |
NETGEAR · JGS516PE Devices | Nov 3, 2021 | May 3, 2022 | 57.5% | — |
| CVE-2020-27930
Apple Multiple Products Memory Corruption Vulnerability |
Apple · Multiple Products | Nov 3, 2021 | May 3, 2022 | 22.0% | — |
| CVE-2020-27932
Apple Multiple Products Type Confusion Vulnerability |
Apple · Multiple Products | Nov 3, 2021 | May 3, 2022 | 10.3% | — |
| CVE-2020-27950
Apple Multiple Products Memory Initialization Vulnerability |
Apple · Multiple Products | Nov 3, 2021 | May 3, 2022 | 16.5% | — |
| CVE-2020-29557
D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability |
D-Link · DIR-825 R1 Devices | Nov 3, 2021 | May 3, 2022 | 55.7% | — |
| CVE-2020-29583
Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability |
Zyxel · Multiple Products | Nov 3, 2021 | May 3, 2022 | 90.2% | — |
| CVE-2020-3118
Cisco IOS XR Software Discovery Protocol Format String Vulnerability |
Cisco · IOS XR | Nov 3, 2021 | May 3, 2022 | 11.7% | — |
| CVE-2020-3161
Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerab… |
Cisco · Cisco IP Phones | Nov 3, 2021 | May 3, 2022 | 83.9% | — |
| CVE-2020-3452
Cisco ASA and FTD Read-Only Path Traversal Vulnerability |
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2020-3566
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability |
Cisco · IOS XR | Nov 3, 2021 | May 3, 2022 | 3.7% | — |
| CVE-2020-3569
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability |
Cisco · IOS XR | Nov 3, 2021 | May 3, 2022 | 3.3% | — |
| CVE-2020-3580 Ransomware
Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability |
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Nov 3, 2021 | May 3, 2022 | 85.6% | — |
| CVE-2020-3950
VMware Multiple Products Privilege Escalation Vulnerability |
VMware · Multiple Products | Nov 3, 2021 | May 3, 2022 | 7.3% | — |
| CVE-2020-3952
VMware vCenter Server Information Disclosure Vulnerability |
VMware · vCenter Server | Nov 3, 2021 | May 3, 2022 | 90.4% | — |
| CVE-2020-3992 Ransomware
VMware ESXi OpenSLP Use-After-Free Vulnerability |
VMware · ESXi | Nov 3, 2021 | May 3, 2022 | 83.0% | — |
| CVE-2020-4006
Multiple VMware Products Command Injection Vulnerability |
VMware · Multiple Products | Nov 3, 2021 | May 3, 2022 | 17.3% | — |
| CVE-2020-4427
IBM Data Risk Manager Security Bypass Vulnerability |
IBM · Data Risk Manager | Nov 3, 2021 | May 3, 2022 | 70.0% | — |
| CVE-2020-4428
IBM Data Risk Manager Remote Code Execution Vulnerability |
IBM · Data Risk Manager | Nov 3, 2021 | May 3, 2022 | 61.7% | — |
| CVE-2020-4430
IBM Data Risk Manager Directory Traversal Vulnerability |
IBM · Data Risk Manager | Nov 3, 2021 | May 3, 2022 | 68.5% | — |
| CVE-2020-5735
Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability |
Amcrest · Cameras and Network Video Recorder (NVR) | Nov 3, 2021 | May 3, 2022 | 36.2% | — |
| CVE-2020-5847
Unraid Remote Code Execution Vulnerability |
Unraid · Unraid | Nov 3, 2021 | May 3, 2022 | 95.8% | — |
| CVE-2020-5849
Unraid Authentication Bypass Vulnerability |
Unraid · Unraid | Nov 3, 2021 | May 3, 2022 | 93.2% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.