| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2020-5902 Ransomware
F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulner… |
F5 · BIG-IP | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2020-6207
SAP Solution Manager Missing Authentication for Critical Function Vulnerability |
SAP · Solution Manager | Nov 3, 2021 | May 3, 2022 | 98.1% | — |
| CVE-2020-6287
SAP NetWeaver Missing Authentication for Critical Function Vulnerability |
SAP · NetWeaver | Nov 3, 2021 | May 3, 2022 | 94.7% | — |
| CVE-2020-6418
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Nov 3, 2021 | May 3, 2022 | 78.8% | — |
| CVE-2020-6819
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability |
Mozilla · Firefox and Thunderbird | Nov 3, 2021 | May 3, 2022 | 3.0% | — |
| CVE-2020-6820
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability |
Mozilla · Firefox and Thunderbird | Nov 3, 2021 | May 3, 2022 | 7.1% | — |
| CVE-2020-7961
Liferay Portal Deserialization of Untrusted Data Vulnerability |
Liferay · Liferay Portal | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2020-8193
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerabil… |
Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Nov 3, 2021 | May 3, 2022 | 88.3% | — |
| CVE-2020-8195
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerab… |
Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Nov 3, 2021 | May 3, 2022 | 33.0% | — |
| CVE-2020-8196
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerab… |
Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Nov 3, 2021 | May 3, 2022 | 26.3% | — |
| CVE-2020-8243
Ivanti Pulse Connect Secure Code Execution Vulnerability |
Ivanti · Pulse Connect Secure | Nov 3, 2021 | May 3, 2022 | 90.8% | — |
| CVE-2020-8260
Ivanti Pulse Connect Secure Code Execution Vulnerability |
Ivanti · Pulse Connect Secure | Nov 3, 2021 | May 3, 2022 | 96.5% | — |
| CVE-2020-8467
Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability |
Trend Micro · Apex One and OfficeScan | Nov 3, 2021 | May 3, 2022 | 10.9% | — |
| CVE-2020-8468
Trend Micro Multiple Products Content Validation Escape Vulnerability |
Trend Micro · Apex One, OfficeScan and Worry-Free Business Security Agents | Nov 3, 2021 | May 3, 2022 | 6.2% | — |
| CVE-2020-8515
Multiple DrayTek Vigor Routers Web Management Page Vulnerability |
DrayTek · Multiple Vigor Routers | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2020-8599
Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability |
Trend Micro · Apex One and OfficeScan | Nov 3, 2021 | May 3, 2022 | 11.9% | — |
| CVE-2020-8644
PlaySMS Server-Side Template Injection Vulnerability |
PlaySMS · PlaySMS | Nov 3, 2021 | May 3, 2022 | 86.3% | — |
| CVE-2020-8655
EyesOfNetwork Improper Privilege Management Vulnerability |
EyesOfNetwork · EyesOfNetwork | Nov 3, 2021 | May 3, 2022 | 59.9% | — |
| CVE-2020-8657
EyesOfNetwork Use of Hard-Coded Credentials Vulnerability |
EyesOfNetwork · EyesOfNetwork | Nov 3, 2021 | May 3, 2022 | 91.9% | — |
| CVE-2020-9818
Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability |
Apple · iOS, iPadOS, and watchOS | Nov 3, 2021 | May 3, 2022 | 2.3% | — |
| CVE-2020-9819
Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability |
Apple · iOS, iPadOS, and watchOS | Nov 3, 2021 | May 3, 2022 | 2.2% | — |
| CVE-2020-9859
Apple Multiple Products Code Execution Vulnerability |
Apple · Multiple Products | Nov 3, 2021 | May 3, 2022 | 0.8% | — |
| CVE-2021-1497
Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability |
Cisco · HyperFlex HX | Nov 3, 2021 | Nov 17, 2021 | 99.9% | — |
| CVE-2021-1498
Cisco HyperFlex HX Data Platform Command Injection Vulnerability |
Cisco · HyperFlex HX | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2021-1647
Microsoft Defender Remote Code Execution Vulnerability |
Microsoft · Defender | Nov 3, 2021 | Nov 17, 2021 | 39.7% | — |
| CVE-2021-1675 Ransomware
Microsoft Windows Print Spooler Remote Code Execution Vulnerability |
Microsoft · Windows | Nov 3, 2021 | Nov 17, 2021 | 85.3% | — |
| CVE-2021-1732 Ransomware
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Nov 3, 2021 | Nov 17, 2021 | 78.4% | — |
| CVE-2021-1782
Apple Multiple Products Race Condition Vulnerability |
Apple · Multiple Products | Nov 3, 2021 | Nov 17, 2021 | 2.2% | — |
| CVE-2021-1870
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability |
Apple · iOS, iPadOS, and macOS | Nov 3, 2021 | Nov 17, 2021 | 7.7% | — |
| CVE-2021-1871
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability |
Apple · iOS, iPadOS, and macOS | Nov 3, 2021 | Nov 17, 2021 | 7.0% | — |
| CVE-2021-1879
Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability |
Apple · iOS, iPadOS, and watchOS | Nov 3, 2021 | Nov 17, 2021 | 7.1% | — |
| CVE-2021-1905
Qualcomm Multiple Chipsets Use-After-Free Vulnerability |
Qualcomm · Multiple Chipsets | Nov 3, 2021 | May 3, 2022 | 1.5% | — |
| CVE-2021-1906
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerab… |
Qualcomm · Multiple Chipsets | Nov 3, 2021 | Nov 17, 2021 | 0.5% | — |
| CVE-2021-20016 Ransomware
SonicWall SSLVPN SMA100 SQL Injection Vulnerability |
SonicWall · SSLVPN SMA100 | Nov 3, 2021 | Nov 17, 2021 | 40.0% | — |
| CVE-2021-20021 Ransomware
SonicWall Email Security Improper Privilege Management Vulnerability |
SonicWall · SonicWall Email Security | Nov 3, 2021 | Nov 17, 2021 | 88.8% | — |
| CVE-2021-20022 Ransomware
SonicWall Email Security Unrestricted Upload of File Vulnerability |
SonicWall · SonicWall Email Security | Nov 3, 2021 | Nov 17, 2021 | 16.6% | — |
| CVE-2021-20023 Ransomware
SonicWall Email Security Path Traversal Vulnerability |
SonicWall · SonicWall Email Security | Nov 3, 2021 | Nov 17, 2021 | 51.7% | — |
| CVE-2021-20090
Arcadyan Buffalo Firmware Path Traversal Vulnerability |
Arcadyan · Buffalo Firmware | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2021-21017
Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability |
Adobe · Acrobat and Reader | Nov 3, 2021 | Nov 17, 2021 | 86.3% | — |
| CVE-2021-21148
Google Chromium V8 Heap Buffer Overflow Vulnerability |
Google · Chromium V8 | Nov 3, 2021 | Nov 17, 2021 | 20.0% | — |
| CVE-2021-21166
Google Chromium Race Condition Vulnerability |
Google · Chromium | Nov 3, 2021 | Nov 17, 2021 | 24.0% | — |
| CVE-2021-21193
Google Chromium Blink Use-After-Free Vulnerability |
Google · Chromium Blink | Nov 3, 2021 | Nov 17, 2021 | 10.0% | — |
| CVE-2021-21206
Google Chromium Blink Use-After-Free Vulnerability |
Google · Chromium Blink | Nov 3, 2021 | Nov 17, 2021 | 9.3% | — |
| CVE-2021-21220
Google Chromium V8 Improper Input Validation Vulnerability |
Google · Chromium V8 | Nov 3, 2021 | Nov 17, 2021 | 70.4% | — |
| CVE-2021-21224
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Nov 3, 2021 | Nov 17, 2021 | 84.2% | — |
| CVE-2021-21972 Ransomware
VMware vCenter Server Remote Code Execution Vulnerability |
VMware · vCenter Server | Nov 3, 2021 | Nov 17, 2021 | 99.9% | — |
| CVE-2021-21985 Ransomware
VMware vCenter Server Improper Input Validation Vulnerability |
VMware · vCenter Server | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2021-22005 Ransomware
VMware vCenter Server File Upload Vulnerability |
VMware · vCenter Server | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2021-22205 Ransomware
GitLab Community and Enterprise Editions Remote Code Execution Vulnerability |
GitLab · Community and Enterprise Editions | Nov 3, 2021 | Nov 17, 2021 | 99.7% | — |
| CVE-2021-22502
Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability |
Micro Focus · Operation Bridge Reporter (OBR) | Nov 3, 2021 | Nov 17, 2021 | 96.7% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.