1,734 totalEPSS avg 50.4%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 32 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2020-10221rConfig / rConfigrConfig OS Command Injection Vulnerability2021-11-03
77.1%
CVE-2020-1040Microsoft / Hyper-V RemoteFXMicrosoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability2021-11-03
7.4%
CVE-2020-1054microsoft / windows_10_1507CVE-2020-10542021-11-03
54.2%
CVE-2020-10987Tenda / AC1900 Router AC15 ModelTenda AC1900 Router AC15 Model Remote Code Execution Vulnerability2021-11-03
79.8%
CVE-2020-1147Microsoft / .NET Framework, SharePoint, Visual StudioMicrosoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution…2021-11-03
94.0%
CVE-2020-11651SaltStack / SaltSaltStack Salt Authentication Bypass Vulnerability2021-11-03
96.6%
CVE-2020-11652SaltStack / SaltSaltStack Salt Path Traversal Vulnerability2021-11-03
86.2%
CVE-2020-11738WordPress / Snap Creek Duplicator PluginWordPress Snap Creek Duplicator Plugin File Download Vulnerability2021-11-03
97.8%
CVE-2020-12271Sophos / SFOSSophos SFOS SQL Injection Vulnerability2021-11-03
42.4%
CVE-2020-12812Fortinet / FortiOSFortinet FortiOS SSL VPN Improper Authentication Vulnerability2021-11-03
45.4%
CVE-2020-1350Microsoft / WindowsMicrosoft Windows DNS Server Remote Code Execution Vulnerability2021-11-03
96.7%
CVE-2020-1380Microsoft / Internet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability2021-11-03
24.2%
CVE-2020-1464Microsoft / WindowsMicrosoft Windows Spoofing Vulnerability2021-11-03
38.9%
CVE-2020-1472Microsoft / NetlogonMicrosoft Netlogon Privilege Escalation Vulnerability2021-11-03
99.4%
CVE-2020-14750Oracle / WebLogic ServerOracle WebLogic Server Remote Code Execution Vulnerability2021-11-03
99.3%
CVE-2020-14871Oracle / Solaris and Zettabyte File System (ZFS)Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability2021-11-03
80.2%
CVE-2020-14882Oracle / WebLogic ServerOracle WebLogic Server Remote Code Execution Vulnerability2021-11-03
100.0%
CVE-2020-14883Oracle / WebLogic ServerOracle WebLogic Server Unspecified Vulnerability2021-11-03
97.9%
CVE-2020-15505Ivanti / MobileIron Multiple ProductsIvanti MobileIron Multiple Products Remote Code Execution Vulnerability2021-11-03
99.7%
CVE-2020-15999Google / Chrome FreeTypeGoogle Chrome FreeType Heap Buffer Overflow Vulnerability2021-11-03
63.9%
CVE-2020-16009Google / Chromium V8Google Chromium V8 Type Confusion Vulnerability2021-11-03
48.3%
CVE-2020-16010Google / Chrome for Android UIGoogle Chrome for Android UI Heap Buffer Overflow Vulnerability2021-11-03
6.4%
CVE-2020-16013Google / Chromium V8Google Chromium V8 Incorrect Implementation Vulnerabililty2021-11-03
2.8%
CVE-2020-16017Google / ChromeGoogle Chrome Use-After-Free Vulnerability2021-11-03
2.7%
CVE-2020-16846SaltStack / SaltSaltStack Salt Shell Injection Vulnerability2021-11-03
99.6%
CVE-2020-17087Microsoft / WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability2021-11-03
5.4%
CVE-2020-17144Microsoft / Exchange ServerMicrosoft Exchange Server Remote Code Execution Vulnerability2021-11-03
36.5%
CVE-2020-17496vBulletin / vBulletinvBulletin PHP Module Remote Code Execution Vulnerability2021-11-03
87.4%
CVE-2020-17530Apache / StrutsApache Struts Remote Code Execution Vulnerability2021-11-03
95.9%
CVE-2020-24557Trend Micro / Apex One, OfficeScan, and Worry-Free Business SecurityTrend Micro Multiple Products Improper Access Control Vulnerability2021-11-03
2.7%
CVE-2020-25213WordPress / File Manager PluginWordPress File Manager Plugin Remote Code Execution Vulnerability2021-11-03
97.3%
CVE-2020-25506D-Link / DNS-320 DeviceD-Link DNS-320 Device Command Injection Vulnerability2021-11-03
100.0%
CVE-2020-2555Oracle / Multiple ProductsOracle Multiple Products Remote Code Execution Vulnerability2021-11-03
97.1%
CVE-2020-26919NETGEAR / JGS516PE DevicesNetgear JGS516PE Devices Missing Function Level Access Control Vulnerability2021-11-03
57.5%
CVE-2020-27930Apple / Multiple ProductsApple Multiple Products Memory Corruption Vulnerability2021-11-03
22.0%
CVE-2020-27932Apple / Multiple ProductsApple Multiple Products Type Confusion Vulnerability2021-11-03
10.3%
CVE-2020-27950Apple / Multiple ProductsApple Multiple Products Memory Initialization Vulnerability2021-11-03
16.5%
CVE-2020-29557D-Link / DIR-825 R1 DevicesD-Link DIR-825 R1 Devices Buffer Overflow Vulnerability2021-11-03
54.3%
CVE-2020-29583Zyxel / Multiple ProductsZyxel Multiple Products Use of Hard-Coded Credentials Vulnerability2021-11-03
90.2%
CVE-2020-3118Cisco / IOS XRCisco IOS XR Software Discovery Protocol Format String Vulnerability2021-11-03
11.7%
CVE-2020-3161Cisco / Cisco IP PhonesCisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulner…2021-11-03
83.9%
CVE-2020-3452Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Read-Only Path Traversal Vulnerability2021-11-03
100.0%
CVE-2020-3566Cisco / IOS XRCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability2021-11-03
3.7%
CVE-2020-3569Cisco / IOS XRCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability2021-11-03
3.3%
CVE-2020-3580Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability2021-11-03
85.6%
CVE-2020-3950VMware / Multiple ProductsVMware Multiple Products Privilege Escalation Vulnerability2021-11-03
7.3%
CVE-2020-3952VMware / vCenter ServerVMware vCenter Server Information Disclosure Vulnerability2021-11-03
90.4%
CVE-2020-3992VMware / ESXiVMware ESXi OpenSLP Use-After-Free Vulnerability2021-11-03
83.0%
CVE-2020-4006VMware / Multiple ProductsMultiple VMware Products Command Injection Vulnerability2021-11-03
17.3%
CVE-2020-4427IBM / Data Risk ManagerIBM Data Risk Manager Security Bypass Vulnerability2021-11-03
70.0%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.