Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2020-4427 | IBM | Data Risk Manager | 9.8 Critical | IBM Data Risk Manager Security Bypass Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-4006 | VMware | Multiple Products | 9.1 Critical | Multiple VMware Products Command Injection Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-3992 | VMware | ESXi | 9.8 Critical | VMware ESXi OpenSLP Use-After-Free Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2020-3952 | VMware | vCenter Server | 9.8 Critical | VMware vCenter Server Information Disclosure Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-3950 | VMware | Multiple Products | 7.8 High | VMware Multiple Products Privilege Escalation Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-3580 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 6.1 Medium | Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2020-3569 | Cisco | IOS XR | 8.6 High | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-3566 | Cisco | IOS XR | 8.6 High | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-3452 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 7.5 High | Cisco ASA and FTD Read-Only Path Traversal Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-3161 | Cisco | Cisco IP Phones | 9.8 Critical | Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-3118 | Cisco | IOS XR | 8.8 High | Cisco IOS XR Software Discovery Protocol Format String Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-29583 | Zyxel | Multiple Products | 9.8 Critical | Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-29557 | D-Link | DIR-825 R1 Devices | 9.8 Critical | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-27950 | Apple | Multiple Products | 5.5 Medium | Apple Multiple Products Memory Initialization Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-27932 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Type Confusion Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-27930 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Memory Corruption Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-26919 | NETGEAR | JGS516PE Devices | 9.8 Critical | Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-2555 | Oracle | Multiple Products | 9.8 Critical | Oracle Multiple Products Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-25506 | D-Link | DNS-320 Device | 9.8 Critical | D-Link DNS-320 Device Command Injection Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-25213 | WordPress | File Manager Plugin | 9.8 Critical | WordPress File Manager Plugin Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-24557 | Trend Micro | Apex One, OfficeScan, and Worry-Free Business Security | 7.8 High | Trend Micro Multiple Products Improper Access Control Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-17530 | Apache | Struts | 9.8 Critical | Apache Struts Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-17496 | vBulletin | vBulletin | 9.8 Critical | vBulletin PHP Module Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-17144 | Microsoft | Exchange Server | 8.4 High | Microsoft Exchange Server Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-17087 | Microsoft | Windows | 7.8 High | Microsoft Windows Kernel Privilege Escalation Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-16846 | SaltStack | Salt | 9.8 Critical | SaltStack Salt Shell Injection Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-16017 | Chrome | 9.6 Critical | Google Chrome Use-After-Free Vulnerability | 2021-11-03 | 2022-05-03 | Unknown | |
| CVE-2020-16013 | Chromium V8 | 8.8 High | Google Chromium V8 Incorrect Implementation Vulnerabililty | 2021-11-03 | 2022-05-03 | Unknown | |
| CVE-2020-16010 | Chrome for Android UI | 9.6 Critical | Google Chrome for Android UI Heap Buffer Overflow Vulnerability | 2021-11-03 | 2022-05-03 | Unknown | |
| CVE-2020-16009 | Chromium V8 | 8.8 High | Google Chromium V8 Type Confusion Vulnerability | 2021-11-03 | 2022-05-03 | Unknown | |
| CVE-2020-15999 | Chrome FreeType | 9.6 Critical | Google Chrome FreeType Heap Buffer Overflow Vulnerability | 2021-11-03 | 2021-11-17 | Unknown | |
| CVE-2020-15505 | Ivanti | MobileIron Multiple Products | 9.8 Critical | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-14883 | Oracle | WebLogic Server | 7.2 High | Oracle WebLogic Server Unspecified Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-14882 | Oracle | WebLogic Server | 9.8 Critical | Oracle WebLogic Server Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-14871 | Oracle | Solaris and Zettabyte File System (ZFS) | 10.0 Critical | Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-14750 | Oracle | WebLogic Server | 9.8 Critical | Oracle WebLogic Server Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-1472 | Microsoft | Netlogon | 5.5 Medium | Microsoft Netlogon Privilege Escalation Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2020-1464 | Microsoft | Windows | 7.8 High | Microsoft Windows Spoofing Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-1380 | Microsoft | Internet Explorer | 7.8 High | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-1350 | Microsoft | Windows | 10.0 Critical | Microsoft Windows DNS Server Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-12812 | Fortinet | FortiOS | 9.8 Critical | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2020-12271 | Sophos | SFOS | 9.8 Critical | Sophos SFOS SQL Injection Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2020-11738 | WordPress | Snap Creek Duplicator Plugin | 7.5 High | WordPress Snap Creek Duplicator Plugin File Download Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-11652 | SaltStack | Salt | 6.5 Medium | SaltStack Salt Path Traversal Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-11651 | SaltStack | Salt | 9.8 Critical | SaltStack Salt Authentication Bypass Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-1147 | Microsoft | .NET Framework, SharePoint, Visual Studio | 7.8 High | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-10987 | Tenda | AC1900 Router AC15 Model | 9.8 Critical | Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-1054 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-1040 | Microsoft | Hyper-V RemoteFX | 9.0 Critical | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-10221 | rConfig | rConfig | 8.8 High | rConfig OS Command Injection Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |