CISA Known Exploited Vulnerabilities catalog (page 17)
Page 17 of 18 of the CISA Known Exploited Vulnerabilities catalog, newest additions first, with PoC counts, Metasploit and EPSS.
Known exploited CVEs, newest addition first (page 17 of 18)
| CVE | Product | Severity | Added to KEV | Due date | Ransomware use | Public PoCs | Metasploit | EPSS | Summary |
|---|---|---|---|---|---|---|---|---|---|
CVE-2020-9859 | Apple iOS +6 | High 7.8 | — | 0 | — | 0.008 (57.8th percentile) | A memory consumption issue was addressed with improved memory handling. | ||
CVE-2020-9819 | Apple iOS +5 | Medium 4.3 | — | 0 | — | 0.022 (82.9th percentile) | A memory consumption issue was addressed with improved memory handling. | ||
CVE-2020-9818 | Apple iOS +4 | High 8.8 | — | 0 | — | 0.023 (83.8th percentile) | An out-of-bounds write issue was addressed with improved bounds checking. | ||
CVE-2020-8657 | Eyesofnetwork Eyesofnetwork +1 | Critical 9.8 | — | 0 | Yes | 0.919 (99.8th percentile) | An issue was discovered in EyesOfNetwork 5.3. | ||
CVE-2020-8655 | Eyesofnetwork Eyesofnetwork +1 | High 7.8 | — | 0 | Yes | 0.599 (99.1th percentile) | An issue was discovered in EyesOfNetwork 5.3. | ||
CVE-2020-8644 | — | Critical 9.8 | — | 1 | Yes | 0.863 (99.7th percentile) | PlaySMS before 1.4.3 does not sanitize inputs from a malicious string. | ||
CVE-2020-8599 | Trend Micro Trend Micro Officescan, Trend Micro Apex One +2 | Critical 9.8 | — | 0 | — | 0.119 (96.1th percentile) | Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass… | ||
CVE-2020-8515 | Draytek Vigor2960 Firmware +3 | Critical 9.8 | — | 5 | — | 1.000 (100.0th percentile) | DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacter… | ||
CVE-2020-8468 | Trend Micro Trend Micro Officescan, Trend Micro Apex One, Trend Micro Worry-Free Business Security (Wfbs) +3 | High 8.8 | — | 0 | — | 0.062 (93.5th percentile) | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipula… | ||
CVE-2020-8467 | Trend Micro Trend Micro Officescan, Trend Micro Apex One +2 | High 8.8 | — | 0 | — | 0.109 (95.9th percentile) | A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). | ||
CVE-2020-8260 | Ivanti Connect Secure +1 | High 7.2 | — | 0 | Yes | 0.965 (99.9th percentile) | A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using uncontrolled gzip extraction. | ||
CVE-2020-8243 | Ivanti Connect Secure +2 | High 7.2 | — | 0 | — | 0.908 (99.8th percentile) | A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution. | ||
CVE-2020-8196 | Citrix Application Delivery Controller Firmware +4 | Medium 4.3 | — | 0 | — | 0.263 (98.0th percentile) | Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10… | ||
CVE-2020-8195 | Citrix Application Delivery Controller Firmware +5 | Medium 6.5 | — | 0 | — | 0.330 (98.4th percentile) | Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 1… | ||
CVE-2020-8193 | Citrix Application Delivery Controller Firmware +4 | Medium 6.5 | — | 5 | — | 0.883 (99.8th percentile) | Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10… | ||
CVE-2020-7961 | Liferay Liferay Portal +1 | Critical 9.8 | — | 17 | Yes | 0.999 (100.0th percentile) | Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS). | ||
CVE-2020-6820 | Mozilla Firefox +2 | High 8.1 | — | 0 | — | 0.071 (94.3th percentile) | Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. | ||
CVE-2020-6819 | Mozilla Firefox +2 | High 8.1 | — | 0 | — | 0.030 (87.6th percentile) | Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. | ||
CVE-2020-6418 | Debian Debian Linux +5 | High 8.8 | — | 6 | Yes | 0.788 (99.6th percentile) | Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2020-6287 | SAP Netweaver Application Server Java +1 | Critical 10.0 | — | 7 | Yes | 0.947 (99.9th percentile) | SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configura… | ||
CVE-2020-6207 | SAP Solution Manager +1 | Critical 9.8 | — | 1 | Yes | 0.981 (99.9th percentile) | SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgent… | ||
CVE-2020-5902 | F5 Big-Ip Access Policy Manager +14 | Critical 9.8 | Known | 66 | Yes | 1.000 (100.0th percentile) | In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility… | ||
CVE-2020-5849 | — | High 7.5 | — | 0 | Yes | 0.932 (99.8th percentile) | Unraid 6.8.0 allows authentication bypass. | ||
CVE-2020-5847 | — | Critical 9.8 | — | 1 | Yes | 0.958 (99.9th percentile) | Unraid through 6.8.0 allows Remote Code Execution. | ||
CVE-2020-5735 | Amcrest 1080-Lite 8ch Firmware +18 | High 8.8 | — | 0 | — | 0.362 (98.5th percentile) | Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. | ||
CVE-2020-4430 | IBM Data Risk Manager +1 | Medium 4.3 | — | 0 | — | 0.685 (99.3th percentile) | IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. | ||
CVE-2020-4428 | IBM Data Risk Manager +1 | Critical 9.1 | — | 0 | Yes | 0.617 (99.2th percentile) | IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. | ||
CVE-2020-4427 | IBM Data Risk Manager +1 | Critical 9.8 | — | 0 | Yes | 0.700 (99.4th percentile) | IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. | ||
CVE-2020-4006 | VMware Workspace One Access (Access), VMware Workspace One Access Connector (Access Connector), VMware Identity Manager (Vidm), VMware Identity Manager Connector (Vidm Connector), VMware Cloud Foundation, Vrealize Suite Lifecycle Manager +5 | Critical 9.1 | — | 0 | — | 0.173 (97.1th percentile) | VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability. | ||
CVE-2020-3992 | VMware Esxi +2 | Critical 9.8 | Known | 3 | — | 0.830 (99.7th percentile) | OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. | ||
CVE-2020-3952 | VMware Vcenter Server +1 | Critical 9.8 | — | 8 | Yes | 0.904 (99.8th percentile) | Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls. | ||
CVE-2020-3950 | VMware Fusion, VMware Remote Console For Mac And Horizon Client For Mac +3 | High 7.8 | — | 0 | Yes | 0.073 (94.4th percentile) | VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability d… | ||
CVE-2020-3580 | Cisco Adaptive Security Appliance Software +2 | Medium 6.1 | Known | 5 | — | 0.856 (99.7th percentile) | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote att… | ||
CVE-2020-3569 | Cisco Cisco iOS Xr Software +1 | High 8.6 | — | 0 | — | 0.033 (88.7th percentile) | Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Int… | ||
CVE-2020-3566 | Cisco Cisco iOS Xr Software +1 | High 8.6 | — | 0 | — | 0.037 (89.8th percentile) | A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected dev… | ||
CVE-2020-3452 | Cisco Adaptive Security Appliance Software +2 | High 7.5 | — | 25 | — | 1.000 (100.0th percentile) | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to… | ||
CVE-2020-3161 | Cisco 8831 Firmware +13 | Critical 9.8 | — | 1 | — | 0.839 (99.7th percentile) | A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a de… | ||
CVE-2020-3118 | Cisco Cisco iOS Xr Software +1 | High 8.8 | — | 0 | — | 0.117 (96.1th percentile) | A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected d… | ||
CVE-2020-29583 | — | Critical 9.8 | — | 1 | — | 0.902 (99.8th percentile) | Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. | ||
CVE-2020-29557 | Dlink Dir-825 R1 Firmware +1 | Critical 9.8 | — | 0 | — | 0.557 (99.0th percentile) | An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. | ||
CVE-2020-27950 | Apple iOS And Ipados +4 | Medium 5.5 | — | 2 | — | 0.165 (97.0th percentile) | A memory initialization issue was addressed. | ||
CVE-2020-27932 | Apple Icloud +7 | High 7.8 | — | 0 | — | 0.103 (95.7th percentile) | A type confusion issue was addressed with improved state handling. | ||
CVE-2020-27930 | Apple iOS And Ipados +5 | High 7.8 | — | 1 | — | 0.220 (97.7th percentile) | A memory corruption issue was addressed with improved input validation. | ||
CVE-2020-26919 | — | Critical 9.8 | — | 0 | — | 0.575 (99.1th percentile) | NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level. | ||
CVE-2020-2555 | Oracle Access Manager +10 | Critical 9.8 | — | 7 | Yes | 0.971 (99.9th percentile) | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). | ||
CVE-2020-25506 | Dlink Dns-320 Firmware +1 | Critical 9.8 | — | 0 | — | 1.000 (100.0th percentile) | D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution. | ||
CVE-2020-25213 | Filemanagerpro File Manager +1 | Critical 10.0 | — | 13 | Yes | 0.973 (99.9th percentile) | The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to hav… | ||
CVE-2020-24557 | Trend Micro Trend Micro Apex One +3 | High 7.8 | — | 0 | — | 0.027 (85.9th percentile) | A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporar… | ||
CVE-2020-17530 | Apache Struts +8 | Critical 9.8 | — | 16 | Yes | 0.963 (99.9th percentile) | Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. | ||
CVE-2020-17496 | — | Critical 9.8 | — | 2 | Yes | 0.875 (99.8th percentile) | vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. | ||
CVE-2020-17144 | Microsoft Exchange Server +1 | High 8.4 | — | 2 | — | 0.365 (98.5th percentile) | Microsoft Exchange Remote Code Execution Vulnerability | ||
CVE-2020-17087 | Microsoft Windows 10 1507 +44 | High 7.8 | — | 4 | — | 0.054 (92.8th percentile) | Windows Kernel Local Elevation of Privilege Vulnerability | ||
CVE-2020-16846 | Debian Debian Linux +4 | Critical 9.8 | — | 2 | Yes | 0.996 (99.9th percentile) | An issue was discovered in SaltStack Salt through 3002. | ||
CVE-2020-16017 | Google Chrome | Critical 9.6 | — | 0 | — | 0.027 (86.2th percentile) | Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML… | ||
CVE-2020-16013 | Google Chrome | High 8.8 | — | 0 | — | 0.028 (86.4th percentile) | Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2020-16010 | Google Chrome | Critical 9.6 | — | 0 | — | 0.064 (93.7th percentile) | Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted… | ||
CVE-2020-16009 | Cefsharp Cefsharp +7 | High 8.8 | — | 0 | — | 0.483 (98.9th percentile) | Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2020-15999 | Debian Debian Linux +5 | Critical 9.6 | — | 4 | — | 0.639 (99.2th percentile) | Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2020-15505 | Mobileiron Core +4 | Critical 9.8 | — | 0 | Yes | 0.997 (100.0th percentile) | A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2… | ||
CVE-2020-14883 | Oracle Weblogic Server +1 | High 7.2 | — | 5 | Yes | 0.977 (99.9th percentile) | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). | ||
CVE-2020-14882 | Oracle Weblogic Server +1 | Critical 9.8 | — | 43 | Yes | 1.000 (100.0th percentile) | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). | ||
CVE-2020-14871 | Oracle Solaris +1 | Critical 10.0 | — | 2 | Yes | 0.802 (99.6th percentile) | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). | ||
CVE-2020-14750 | Oracle Weblogic Server +1 | Critical 9.8 | — | 2 | Yes | 0.992 (99.9th percentile) | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). | ||
CVE-2020-1472 | Canonical Ubuntu Linux +28 | Medium 5.5 | Known | 86 | Yes | 0.994 (99.9th percentile) | An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). | ||
CVE-2020-1464 | Microsoft Windows 10 1507 +47 | High 7.8 | — | 0 | — | 0.389 (98.6th percentile) | A spoofing vulnerability exists when Windows incorrectly validates file signatures. | ||
CVE-2020-1380 | Microsoft Internet Explorer +1 | High 7.8 | — | 0 | — | 0.242 (97.9th percentile) | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. | ||
CVE-2020-1350 | Microsoft Windows Server +7 | Critical 10.0 | — | 20 | — | 0.967 (99.9th percentile) | A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'. | ||
CVE-2020-12812 | Fortinet Fortios +1 | Critical 9.8 | Known | 0 | — | 0.454 (98.8th percentile) | An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second fact… | ||
CVE-2020-12271 | — | Critical 9.8 | Known | 0 | — | 0.433 (98.7th percentile) | A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. | ||
CVE-2020-11738 | Awesomemotive Duplicator +1 | High 7.5 | — | 1 | Yes | 0.978 (99.9th percentile) | The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init. | ||
CVE-2020-11652 | Blackberry Workspaces Server +6 | Medium 6.5 | — | 7 | Yes | 0.864 (99.7th percentile) | An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. | ||
CVE-2020-11651 | Canonical Ubuntu Linux +5 | Critical 9.8 | — | 18 | Yes | 0.966 (99.9th percentile) | An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. | ||
CVE-2020-1147 | Microsoft Microsoft .Net Framework 2.0 +73 | High 7.8 | — | 0 | Yes | 0.958 (99.9th percentile) | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, Shar… | ||
CVE-2020-10987 | — | Critical 9.8 | — | 1 | — | 0.798 (99.6th percentile) | The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter. | ||
CVE-2020-1054 | Microsoft Windows 10 1507 +44 | High 7.0 | — | 5 | Yes | 0.539 (99.0th percentile) | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. | ||
CVE-2020-1040 | Microsoft Windows Server +3 | Critical 9.0 | — | 0 | — | 0.076 (94.6th percentile) | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX… | ||
CVE-2020-10221 | — | High 8.8 | — | 0 | — | 0.773 (99.6th percentile) | lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter. | ||
CVE-2020-1020 | Microsoft Windows +25 | High 8.8 | — | 2 | — | 0.650 (99.3th percentile) | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format… | ||
CVE-2020-10199 | — | High 8.8 | — | 7 | Yes | 0.991 (99.9th percentile) | Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2). | ||
CVE-2020-10189 | — | Critical 9.8 | — | 1 | Yes | 0.999 (100.0th percentile) | Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage in the FileStorage class. | ||
CVE-2020-10181 | — | Critical 9.8 | — | 0 | — | 0.149 (96.7th percentile) | goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demonstrated by a setString=new_us… | ||
CVE-2020-10148 | Solarwinds Orion Platform +1 | Critical 9.8 | — | 4 | — | 0.920 (99.8th percentile) | The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. | ||
CVE-2020-0986 | Microsoft Windows +30 | High 7.8 | — | 0 | — | 0.164 (97.0th percentile) | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. | ||
CVE-2020-0968 | Microsoft Internet Explorer +9 | High 7.5 | Known | 0 | — | 0.307 (98.3th percentile) | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. | ||
CVE-2020-0938 | Microsoft Windows +26 | High 7.8 | — | 0 | — | 0.690 (99.4th percentile) | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format… | ||
CVE-2020-0878 | Microsoft Chakracore +5 | Medium 4.2 | Known | 0 | — | 0.027 (86.0th percentile) | <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. | ||
CVE-2020-0688 | Microsoft Exchange Server +6 | High 8.8 | Known | 29 | Yes | 1.000 (100.0th percentile) | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'. | ||
CVE-2020-0683 | Microsoft Windows +26 | High 7.8 | — | 1 | — | 0.077 (94.6th percentile) | An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. | ||
CVE-2020-0674 | Microsoft Internet Explorer +10 | High 7.5 | — | 8 | — | 0.869 (99.7th percentile) | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. | ||
CVE-2020-0646 | Microsoft Microsoft .Net Framework 3.0 +52 | Critical 9.8 | — | 0 | Yes | 0.992 (99.9th percentile) | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'. | ||
CVE-2020-0601 | Golang Go +22 | High 8.1 | — | 38 | — | 0.891 (99.8th percentile) | A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code… | ||
CVE-2020-0069 | Google Android +29 | High 7.8 | — | 5 | — | 0.014 (72.4th percentile) | In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. | ||
CVE-2020-0041 | Google Android +1 | High 7.8 | — | 6 | — | 0.032 (88.1th percentile) | In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. | ||
CVE-2019-9978 | — | Medium 6.1 | — | 19 | — | 0.729 (99.5th percentile) | The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. | ||
CVE-2019-9082 | — | High 8.8 | — | 0 | Yes | 0.974 (99.9th percentile) | ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=syste… | ||
CVE-2019-8394 | — | Medium 6.5 | — | 0 | Yes | 0.633 (99.2th percentile) | Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization. | ||
CVE-2019-7481 | SonicWall Sma100 +1 | High 7.5 | Known | 0 | — | 0.999 (100.0th percentile) | Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. | ||
CVE-2019-6223 | Apple iOS +3 | High 7.5 | — | 0 | — | 0.026 (85.6th percentile) | A logic issue existed in the handling of Group FaceTime calls. | ||
CVE-2019-5591 | Fortinet Fortinet Fortios +1 | Medium 6.5 | Known | 1 | — | 0.186 (97.3th percentile) | A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server. | ||
CVE-2019-5544 | Fedoraproject Fedora +16 | Critical 9.8 | Known | 2 | — | 0.981 (99.9th percentile) | OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. |