Threats & CVE Intelligence
Search the locally synchronized CISA known-exploited vulnerabilities catalog, or enter a CVE ID or keyword to search the broader NIST National Vulnerability Database. NVD searches are retrieved on demand and may be rate limited.
Last successful sync: 2026-11-07 22:40:39 UTC · Source catalog updated: 2026-11-06T19:44:45.1797Z · 1769 records in latest import.
CISA Known Exploited Vulnerabilities · 1769 matches
Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability
Apple — iOS, iPadOS, and watchOS
Apple iOS, iPadOS, and watchOS Mail contains a memory corruption vulnerability that may allow heap corruption when processing a maliciously crafted mail message.
CVE-2020-9818 · KEV 2021-11-03Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
Apple — iOS, iPadOS, and watchOS
Apple iOS, iPadOS, and watchOS Mail contains an out-of-bounds write vulnerability which may allow memory modification or application termination when processing a maliciously crafted mail message.
CVE-2020-8657 · KEV 2021-11-03EyesOfNetwork Use of Hard-Coded Credentials Vulnerability
EyesOfNetwork — EyesOfNetwork
EyesOfNetwork contains a use of hard-coded credentials vulnerability, as it uses the same API key by default. Exploitation allows an attacker to calculate or guess the admin access token.
CVE-2020-8655 · KEV 2021-11-03EyesOfNetwork Improper Privilege Management Vulnerability
EyesOfNetwork — EyesOfNetwork
EyesOfNetwork contains an improper privilege management vulnerability that may allow a user to run commands as root via a crafted Nmap Scripting Engine (NSE) script to nmap7.
CVE-2020-8644 · KEV 2021-11-03PlaySMS Server-Side Template Injection Vulnerability
PlaySMS — PlaySMS
PlaySMS contains a server-side template injection vulnerability that allows for remote code execution.
CVE-2020-8599 · KEV 2021-11-03Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
Trend Micro — Apex One and OfficeScan
Trend Micro Apex One and OfficeScan server contain a vulnerable EXE file that could allow a remote attacker to write data to a path on affected installations and bypass root login.
CVE-2020-8515 · KEV 2021-11-03Multiple DrayTek Vigor Routers Web Management Page Vulnerability
DrayTek — Multiple Vigor Routers
DrayTek Vigor3900, Vigor2960, and Vigor300B routers contain an unspecified vulnerability that allows for remote code execution.
CVE-2020-8468 · KEV 2021-11-03Trend Micro Multiple Products Content Validation Escape Vulnerability
Trend Micro — Apex One, OfficeScan and Worry-Free Business Security Agents
Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain agent client components.
CVE-2020-8467 · KEV 2021-11-03Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
Trend Micro — Apex One and OfficeScan
Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execution.
CVE-2020-8260 · KEV 2021-11-03Ivanti Pulse Connect Secure Code Execution Vulnerability
Ivanti — Pulse Connect Secure
Pulse Connect Secure contains an unspecified vulnerability that allows an authenticated attacker to perform code execution using uncontrolled gzip extraction.
CVE-2020-8243 · KEV 2021-11-03Ivanti Pulse Connect Secure Code Execution Vulnerability
Ivanti — Pulse Connect Secure
Ivanti Pulse Connect Secure contains an unspecified vulnerability in the admin web interface that could allow an authenticated attacker to upload a custom template to perform code execution.
CVE-2020-8196 · KEV 2021-11-03Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
Citrix — Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability.
CVE-2020-8195 · KEV 2021-11-03Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
Citrix — Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability.
CVE-2020-8193 · KEV 2021-11-03Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
Citrix — Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (N…
CVE-2020-7961 · KEV 2021-11-03Liferay Portal Deserialization of Untrusted Data Vulnerability
Liferay — Liferay Portal
Liferay Portal contains a deserialization of untrusted data vulnerability that allows remote attackers to execute code via JSON web services.
CVE-2020-6820 · KEV 2021-11-03Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
Mozilla — Firefox and Thunderbird
Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.
CVE-2020-6819 · KEV 2021-11-03Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
Mozilla — Firefox and Thunderbird
Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.
CVE-2020-6418 · KEV 2021-11-03Google Chromium V8 Type Confusion Vulnerability
Google — Chromium V8
Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, includin…
CVE-2020-6287 · KEV 2021-11-03SAP NetWeaver Missing Authentication for Critical Function Vulnerability
SAP — NetWeaver
SAP NetWeaver Application Server Java Platforms contains a missing authentication for critical function vulnerability allowing unauthenticated access to execute configuration tasks and create administrative users.
CVE-2020-6207 · KEV 2021-11-03SAP Solution Manager Missing Authentication for Critical Function Vulnerability
SAP — Solution Manager
SAP Solution Manager User Experience Monitoring contains a missing authentication for critical function vulnerability which results in complete compromise of all SMDAgents connected to the Solution Manager.
CVE-2020-5902 · KEV 2021-11-03F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability
F5 — BIG-IP
F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in undisclosed pages.
Ransomware use reportedCVE-2020-5849 · KEV 2021-11-03Unraid Authentication Bypass Vulnerability
Unraid — Unraid
Unraid contains an authentication bypass vulnerability that allows attackers to gain access to the administrative interface. This CVE is chainable with CVE-2020-5847 for remote code execution.
CVE-2020-5847 · KEV 2021-11-03Unraid Remote Code Execution Vulnerability
Unraid — Unraid
Unraid contains a vulnerability due to the insecure use of the extract PHP function that can be abused to execute remote code as root. This CVE is chainable with CVE-2020-5849 for initial access.
CVE-2020-5735 · KEV 2021-11-03Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
Amcrest — Cameras and Network Video Recorder (NVR)
Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code.
CVE-2020-4430 · KEV 2021-11-03IBM Data Risk Manager Directory Traversal Vulnerability
IBM — Data Risk Manager
IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.
CVE-2020-4428 · KEV 2021-11-03IBM Data Risk Manager Remote Code Execution Vulnerability
IBM — Data Risk Manager
IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�
CVE-2020-4427 · KEV 2021-11-03IBM Data Risk Manager Security Bypass Vulnerability
IBM — Data Risk Manager
IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could explo…
CVE-2020-4006 · KEV 2021-11-03Multiple VMware Products Command Injection Vulnerability
VMware — Multiple Products
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An attacker with network access to the administrative configurator on port 8443 and a valid password …
CVE-2020-3992 · KEV 2021-11-03VMware ESXi OpenSLP Use-After-Free Vulnerability
VMware — ESXi
VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution.
Ransomware use reportedCVE-2020-3952 · KEV 2021-11-03VMware vCenter Server Information Disclosure Vulnerability
VMware — vCenter Server
VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attac…
Source: CISA KEV catalog and NIST NVD. “Known” ransomware use is a CISA catalog label, not a real-time incident alert. Always review vendor advisories for patches.