Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2020-8655 | EyesOfNetwork | EyesOfNetwork | 7.8 High | EyesOfNetwork Improper Privilege Management Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8644 | PlaySMS | PlaySMS | 9.8 Critical | PlaySMS Server-Side Template Injection Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8599 | Trend Micro | Apex One and OfficeScan | 9.8 Critical | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8515 | DrayTek | Multiple Vigor Routers | 9.8 Critical | Multiple DrayTek Vigor Routers Web Management Page Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8468 | Trend Micro | Apex One, OfficeScan and Worry-Free Business Security Agents | 8.8 High | Trend Micro Multiple Products Content Validation Escape Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8467 | Trend Micro | Apex One and OfficeScan | 8.8 High | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8260 | Ivanti | Pulse Connect Secure | 7.2 High | Ivanti Pulse Connect Secure Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8243 | Ivanti | Pulse Connect Secure | 7.2 High | Ivanti Pulse Connect Secure Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8196 | Citrix | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 4.3 Medium | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8195 | Citrix | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 6.5 Medium | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8193 | Citrix | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 6.5 Medium | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-7961 | Liferay | Liferay Portal | 9.8 Critical | Liferay Portal Deserialization of Untrusted Data Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-6820 | Mozilla | Firefox and Thunderbird | 8.1 High | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-6819 | Mozilla | Firefox and Thunderbird | 8.1 High | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-6418 | Chromium V8 | 8.8 High | Google Chromium V8 Type Confusion Vulnerability | 2021-11-03 | 2022-05-03 | Unknown | |
| CVE-2020-6287 | SAP | NetWeaver | 10.0 Critical | SAP NetWeaver Missing Authentication for Critical Function Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-6207 | SAP | Solution Manager | 9.8 Critical | SAP Solution Manager Missing Authentication for Critical Function Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-5902 | F5 | BIG-IP | 9.8 Critical | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2020-5849 | Unraid | Unraid | 7.5 High | Unraid Authentication Bypass Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-5847 | Unraid | Unraid | 9.8 Critical | Unraid Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-5735 | Amcrest | Cameras and Network Video Recorder (NVR) | 8.8 High | Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-4430 | IBM | Data Risk Manager | 4.3 Medium | IBM Data Risk Manager Directory Traversal Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-4428 | IBM | Data Risk Manager | 9.1 Critical | IBM Data Risk Manager Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-4427 | IBM | Data Risk Manager | 9.8 Critical | IBM Data Risk Manager Security Bypass Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-4006 | VMware | Multiple Products | 9.1 Critical | Multiple VMware Products Command Injection Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-3992 | VMware | ESXi | 9.8 Critical | VMware ESXi OpenSLP Use-After-Free Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2020-3952 | VMware | vCenter Server | 9.8 Critical | VMware vCenter Server Information Disclosure Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-3950 | VMware | Multiple Products | 7.8 High | VMware Multiple Products Privilege Escalation Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-3580 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 6.1 Medium | Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2020-3569 | Cisco | IOS XR | 8.6 High | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-3566 | Cisco | IOS XR | 8.6 High | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-3452 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 7.5 High | Cisco ASA and FTD Read-Only Path Traversal Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-3161 | Cisco | Cisco IP Phones | 9.8 Critical | Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-3118 | Cisco | IOS XR | 8.8 High | Cisco IOS XR Software Discovery Protocol Format String Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-29583 | Zyxel | Multiple Products | 9.8 Critical | Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-29557 | D-Link | DIR-825 R1 Devices | 9.8 Critical | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-27950 | Apple | Multiple Products | 5.5 Medium | Apple Multiple Products Memory Initialization Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-27932 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Type Confusion Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-27930 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Memory Corruption Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-26919 | NETGEAR | JGS516PE Devices | 9.8 Critical | Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-2555 | Oracle | Multiple Products | 9.8 Critical | Oracle Multiple Products Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-25506 | D-Link | DNS-320 Device | 9.8 Critical | D-Link DNS-320 Device Command Injection Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-25213 | WordPress | File Manager Plugin | 9.8 Critical | WordPress File Manager Plugin Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-24557 | Trend Micro | Apex One, OfficeScan, and Worry-Free Business Security | 7.8 High | Trend Micro Multiple Products Improper Access Control Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-17530 | Apache | Struts | 9.8 Critical | Apache Struts Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-17496 | vBulletin | vBulletin | 9.8 Critical | vBulletin PHP Module Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-17144 | Microsoft | Exchange Server | 8.4 High | Microsoft Exchange Server Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-17087 | Microsoft | Windows | 7.8 High | Microsoft Windows Kernel Privilege Escalation Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-16846 | SaltStack | Salt | 9.8 Critical | SaltStack Salt Shell Injection Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-16017 | Chrome | 9.6 Critical | Google Chrome Use-After-Free Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |