Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2020-29557 | D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution. | D-Link / DIR-825 R1 Devices | Nov 3, 2021 | — | View → |
| CVE-2020-29583 | Zyxel firewalls (ATP, USG, VM) and AP Controllers (NXC2500 and NXC5500) contain a use of hard-coded credentials vulnerability in an… | Zyxel / Multiple Products | Nov 3, 2021 | — | View → |
| CVE-2020-3118 | Cisco IOS XR improperly validates string input from certain fields in Cisco Discovery Protocol messages. Exploitation could allow an… | Cisco / IOS XR | Nov 3, 2021 | — | View → |
| CVE-2020-3161 | Cisco IP Phones contain an improper input validation vulnerability for HTTP requests. Exploitation could allow an attacker to execute code… | Cisco / Cisco IP Phones | Nov 3, 2021 | — | View → |
| CVE-2020-3452 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input validation vulnerability when HTTP… | Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Nov 3, 2021 | — | View → |
| CVE-2020-3566 | Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets.… | Cisco / IOS XR | Nov 3, 2021 | — | View → |
| CVE-2020-3569 | Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets.… | Cisco / IOS XR | Nov 3, 2021 | — | View → |
| CVE-2020-3580 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient input validation vulnerability for… | Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Nov 3, 2021 | Ransomware | View → |
| CVE-2020-3950 | VMware Fusion, Remote Console (VMRC) for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use… | VMware / Multiple Products | Nov 3, 2021 | — | View → |
| CVE-2020-3952 | VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services… | VMware / vCenter Server | Nov 3, 2021 | — | View → |
| CVE-2020-3992 | VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port… | VMware / ESXi | Nov 3, 2021 | Ransomware | View → |
| CVE-2020-4006 | VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability.… | VMware / Multiple Products | Nov 3, 2021 | — | View → |
| CVE-2020-4427 | IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when… | IBM / Data Risk Manager | Nov 3, 2021 | — | View → |
| CVE-2020-4428 | IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the… | IBM / Data Risk Manager | Nov 3, 2021 | — | View → |
| CVE-2020-4430 | IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse… | IBM / Data Risk Manager | Nov 3, 2021 | — | View → |
| CVE-2020-5735 | Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote… | Amcrest / Cameras and Network Video Recorder (NVR) | Nov 3, 2021 | — | View → |
| CVE-2020-5847 | Unraid contains a vulnerability due to the insecure use of the extract PHP function that can be abused to execute remote code as root.… | Unraid / Unraid | Nov 3, 2021 | — | View → |
| CVE-2020-5849 | Unraid contains an authentication bypass vulnerability that allows attackers to gain access to the administrative interface. This CVE is… | Unraid / Unraid | Nov 3, 2021 | — | View → |
| CVE-2020-5902 | F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in undisclosed pages. | F5 / BIG-IP | Nov 3, 2021 | Ransomware | View → |
| CVE-2020-6207 | SAP Solution Manager User Experience Monitoring contains a missing authentication for critical function vulnerability which results in… | SAP / Solution Manager | Nov 3, 2021 | — | View → |