Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2020-6287 | SAP NetWeaver Application Server Java Platforms contains a missing authentication for critical function vulnerability allowing… | SAP / NetWeaver | Nov 3, 2021 | — | View → |
| CVE-2020-6418 | Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a… | Google / Chromium V8 | Nov 3, 2021 | — | View → |
| CVE-2020-6819 | Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions.… | Mozilla / Firefox and Thunderbird | Nov 3, 2021 | — | View → |
| CVE-2020-6820 | Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race… | Mozilla / Firefox and Thunderbird | Nov 3, 2021 | — | View → |
| CVE-2020-7961 | Liferay Portal contains a deserialization of untrusted data vulnerability that allows remote attackers to execute code via JSON web… | Liferay / Liferay Portal | Nov 3, 2021 | — | View → |
| CVE-2020-8193 | Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow… | Citrix / Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Nov 3, 2021 | — | View → |
| CVE-2020-8195 | Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability. | Citrix / Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Nov 3, 2021 | — | View → |
| CVE-2020-8196 | Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability. | Citrix / Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Nov 3, 2021 | — | View → |
| CVE-2020-8243 | Ivanti Pulse Connect Secure contains an unspecified vulnerability in the admin web interface that could allow an authenticated attacker to… | Ivanti / Pulse Connect Secure | Nov 3, 2021 | — | View → |
| CVE-2020-8260 | Pulse Connect Secure contains an unspecified vulnerability that allows an authenticated attacker to perform code execution using… | Ivanti / Pulse Connect Secure | Nov 3, 2021 | — | View → |
| CVE-2020-8467 | Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code… | Trend Micro / Apex One and OfficeScan | Nov 3, 2021 | — | View → |
| CVE-2020-8468 | Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could… | Trend Micro / Apex One, OfficeScan and Worry-Free Business Security Agents | Nov 3, 2021 | — | View → |
| CVE-2020-8515 | DrayTek Vigor3900, Vigor2960, and Vigor300B routers contain an unspecified vulnerability that allows for remote code execution. | DrayTek / Multiple Vigor Routers | Nov 3, 2021 | — | View → |
| CVE-2020-8599 | Trend Micro Apex One and OfficeScan server contain a vulnerable EXE file that could allow a remote attacker to write data to a path on… | Trend Micro / Apex One and OfficeScan | Nov 3, 2021 | — | View → |
| CVE-2020-8644 | PlaySMS contains a server-side template injection vulnerability that allows for remote code execution. | PlaySMS / PlaySMS | Nov 3, 2021 | — | View → |
| CVE-2020-8655 | EyesOfNetwork contains an improper privilege management vulnerability that may allow a user to run commands as root via a crafted Nmap… | EyesOfNetwork / EyesOfNetwork | Nov 3, 2021 | — | View → |
| CVE-2020-8657 | EyesOfNetwork contains a use of hard-coded credentials vulnerability, as it uses the same API key by default. Exploitation allows an… | EyesOfNetwork / EyesOfNetwork | Nov 3, 2021 | — | View → |
| CVE-2020-9818 | Apple iOS, iPadOS, and watchOS Mail contains an out-of-bounds write vulnerability which may allow memory modification or application… | Apple / iOS, iPadOS, and watchOS | Nov 3, 2021 | — | View → |
| CVE-2020-9819 | Apple iOS, iPadOS, and watchOS Mail contains a memory corruption vulnerability that may allow heap corruption when processing a… | Apple / iOS, iPadOS, and watchOS | Nov 3, 2021 | — | View → |
| CVE-2020-9859 | Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel… | Apple / Multiple Products | Nov 3, 2021 | — | View → |