KEV 2020

Adobe Acrobat & Reader — Heap Use-After-Free in PDF Object Processing Leading to Code Execution

TP-Link TL-WA855RE — TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability

D-Link DCS-2530L and DCS-2670L Devices — D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability

D-Link DCS-2530L and DCS-2670L Devices — D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability

Microsoft SQL Server — Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

Apache Flink — Apache Flink Improper Access Control Vulnerability

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) — Cisco ASA and FTD Information Disclosure Vulnerability

Plex Media Server — Plex Media Server Remote Code Execution Vulnerability

Cisco AnyConnect Secure — Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

PEAR Archive_Tar — PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability

PEAR Archive_Tar — PEAR Archive_Tar Improper Link Resolution Vulnerability

Apple Multiple Products — Apple Multiple Products Memory Corruption Vulnerability

Apple Multiple Products — Apple Multiple Products Memory Corruption Vulnerability

Microsoft Update Notification Manager — Microsoft Update Notification Manager Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows Kernel Privilege Escalation Vulnerability

Juniper Junos OS — Juniper Junos OS Path Traversal Vulnerability

Apache Kylin — Apache Kylin OS Command Injection Vulnerability

D-Link DIR-610 Devices — D-Link DIR-610 Devices Remote Command Execution

VMware Tanzu Spring Cloud Configuration (Config) Server — VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability

QNAP Systems Helpdesk — QNAP Helpdesk Improper Access Control Vulnerability

Pulse Secure Pulse Connect Secure — Pulse Connect Secure Code Injection Vulnerability

Apache Airflow — Apache Airflow Command Injection

Drupal Drupal core — Drupal core Un-restricted Upload of File

Google Chrome Media — Google Chrome Media Use-After-Free Vulnerability

Microsoft Windows — Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

Oracle Intelligence Enterprise Edition — Oracle Business Intelligence Enterprise Edition Path Transversal

Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables — Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

Pi-hole AdminLTE — Pi-Hole AdminLTE Remote Code Execution Vulnerability

Microsoft Exchange Server — Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

Sonatype Nexus Repository — Sonatype Nexus Repository Remote Code Execution Vulnerability

Microsoft Windows — Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

rConfig rConfig — rConfig OS Command Injection Vulnerability

Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 — Google Chromium V8 Incorrect Implementation Vulnerabililty

Cisco IOS XR — Cisco IOS XR Software Discovery Protocol Format String Vulnerability

Amcrest Cameras and Network Video Recorder (NVR) — Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability

Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability

Trend Micro Apex One and OfficeScan — Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability

Trend Micro Apex One, OfficeScan and Worry-Free Business Security Agents — Trend Micro Multiple Products Content Validation Escape Vulnerability

Apple iOS, iPadOS, and watchOS — Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability

Cisco IOS XR — Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

Cisco IOS XR — Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

Microsoft Exchange Server — Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Windows — Microsoft Windows CryptoAPI Spoofing Vulnerability

Mozilla Firefox and Thunderbird — Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

Mozilla Firefox and Thunderbird — Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

Android Android Kernel — Android Kernel Out-of-Bounds Write Vulnerability

MediaTek Multiple Chipsets — Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability

Microsoft Windows — Microsoft Windows Installer Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

Microsoft Windows — Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft .NET Framework, SharePoint, Visual Studio — Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

Microsoft Internet Explorer — Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Windows — Microsoft Windows Spoofing Vulnerability

Microsoft Windows — Microsoft Windows Kernel Privilege Escalation Vulnerability

Trend Micro Apex One, OfficeScan, and Worry-Free Business Security — Trend Micro Multiple Products Improper Access Control Vulnerability

Apple Multiple Products — Apple Multiple Products Memory Corruption Vulnerability

Apple Multiple Products — Apple Multiple Products Type Confusion Vulnerability

VMware Multiple Products — VMware Multiple Products Privilege Escalation Vulnerability

EyesOfNetwork EyesOfNetwork — EyesOfNetwork Improper Privilege Management Vulnerability

Apple Multiple Products — Apple Multiple Products Code Execution Vulnerability

Microsoft Internet Explorer — Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer — Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

WordPress Snap Creek Duplicator Plugin — WordPress Snap Creek Duplicator Plugin File Download Vulnerability

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) — Cisco ASA and FTD Read-Only Path Traversal Vulnerability

Unraid Unraid — Unraid Authentication Bypass Vulnerability

Oracle WebLogic Server — Oracle WebLogic Server Unspecified Vulnerability

Ivanti Pulse Connect Secure — Ivanti Pulse Connect Secure Code Execution Vulnerability

Ivanti Pulse Connect Secure — Ivanti Pulse Connect Secure Code Execution Vulnerability