| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2019-1214
Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerabil… |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 1.4% | — |
| CVE-2019-1215 Ransomware
Microsoft Windows Privilege Escalation Vulnerability |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 19.3% | — |
| CVE-2019-13608 Ransomware
Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability |
Citrix · StoreFront Server | Nov 3, 2021 | May 3, 2022 | 30.0% | — |
| CVE-2019-1367 Ransomware
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability |
Microsoft · Internet Explorer | Nov 3, 2021 | May 3, 2022 | 52.4% | — |
| CVE-2019-1429
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability |
Microsoft · Internet Explorer | Nov 3, 2021 | May 3, 2022 | 77.3% | — |
| CVE-2019-15752
Docker Desktop Community Edition Privilege Escalation Vulnerability |
Docker · Desktop Community Edition | Nov 3, 2021 | May 3, 2022 | 48.8% | — |
| CVE-2019-15949
Nagios XI Remote Code Execution Vulnerability |
Nagios · Nagios XI | Nov 3, 2021 | May 3, 2022 | 77.0% | — |
| CVE-2019-16256
SIMalliance Toolbox Browser Command Injection Vulnerability |
SIMalliance · Toolbox Browser | Nov 3, 2021 | May 3, 2022 | 4.9% | — |
| CVE-2019-1653
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerabili… |
Cisco · Small Business RV320 and RV325 Routers | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2019-16759
vBulletin PHP Module Remote Code Execution Vulnerability |
vBulletin · vBulletin | Nov 3, 2021 | May 3, 2022 | 99.7% | — |
| CVE-2019-17026
Mozilla Firefox And Thunderbird Type Confusion Vulnerability |
Mozilla · Firefox and Thunderbird | Nov 3, 2021 | May 3, 2022 | 46.3% | — |
| CVE-2019-17558
Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability |
Apache · Solr | Nov 3, 2021 | May 3, 2022 | 98.6% | — |
| CVE-2019-18187
Trend Micro OfficeScan Directory Traversal Vulnerability |
Trend Micro · OfficeScan | Nov 3, 2021 | May 3, 2022 | 25.1% | — |
| CVE-2019-18935 Ransomware
Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerab… |
Progress · Telerik UI for ASP.NET AJAX | Nov 3, 2021 | May 3, 2022 | 99.7% | — |
| CVE-2019-18988
TeamViewer Desktop Bypass Remote Login Vulnerability |
TeamViewer · Desktop | Nov 3, 2021 | May 3, 2022 | 4.7% | — |
| CVE-2019-19356
Netis WF2419 Devices Remote Code Execution Vulnerability |
Netis · WF2419 Devices | Nov 3, 2021 | May 3, 2022 | 28.1% | — |
| CVE-2019-19781 Ransomware
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability |
Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2019-20085
TVT NVMS-1000 Directory Traversal Vulnerability |
TVT · NVMS-1000 | Nov 3, 2021 | May 3, 2022 | 96.1% | — |
| CVE-2019-2215
Android Kernel Use-After-Free Vulnerability |
Android · Android Kernel | Nov 3, 2021 | May 3, 2022 | 72.1% | — |
| CVE-2019-3396 Ransomware
Atlassian Confluence Server and Data Center Server-Side Template Injection Vuln… |
Atlassian · Confluence Server and Data Server | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2019-3398
Atlassian Confluence Server and Data Center Path Traversal Vulnerability |
Atlassian · Confluence Server and Data Center | Nov 3, 2021 | May 3, 2022 | 97.0% | — |
| CVE-2019-4716
IBM Planning Analytics Remote Code Execution Vulnerability |
IBM · Planning Analytics | Nov 3, 2021 | May 3, 2022 | 86.4% | — |
| CVE-2019-5544 Ransomware
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability |
VMware · VMware ESXi and Horizon DaaS | Nov 3, 2021 | May 3, 2022 | 98.1% | — |
| CVE-2019-5591 Ransomware
Fortinet FortiOS Default Configuration Vulnerability |
Fortinet · FortiOS | Nov 3, 2021 | May 3, 2022 | 18.6% | — |
| CVE-2019-6223
Apple iOS and macOS Group Facetime Vulnerability |
Apple · iOS and macOS | Nov 3, 2021 | May 3, 2022 | 2.6% | — |
| CVE-2019-7481 Ransomware
SonicWall SMA100 SQL Injection Vulnerability |
SonicWall · SMA100 | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2019-8394
Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability |
Zoho · ManageEngine | Nov 3, 2021 | May 3, 2022 | 63.3% | — |
| CVE-2019-9082
ThinkPHP Remote Code Execution Vulnerability |
ThinkPHP · ThinkPHP | Nov 3, 2021 | May 3, 2022 | 97.4% | — |
| CVE-2019-9978
WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability |
WordPress · Social Warfare Plugin | Nov 3, 2021 | May 3, 2022 | 72.9% | — |
| CVE-2020-0041
Android Kernel Out-of-Bounds Write Vulnerability |
Android · Android Kernel | Nov 3, 2021 | May 3, 2022 | 3.2% | — |
| CVE-2020-0069
Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability |
MediaTek · Multiple Chipsets | Nov 3, 2021 | May 3, 2022 | 1.4% | — |
| CVE-2020-0601
Microsoft Windows CryptoAPI Spoofing Vulnerability |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 89.1% | — |
| CVE-2020-0646
Microsoft .NET Framework Remote Code Execution Vulnerability |
Microsoft · .NET Framework | Nov 3, 2021 | May 3, 2022 | 99.2% | — |
| CVE-2020-0674
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability |
Microsoft · Internet Explorer | Nov 3, 2021 | May 3, 2022 | 86.9% | — |
| CVE-2020-0683
Microsoft Windows Installer Privilege Escalation Vulnerability |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 7.7% | — |
| CVE-2020-0688 Ransomware
Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2020-0878 Ransomware
Microsoft Edge and Internet Explorer Memory Corruption Vulnerability |
Microsoft · Edge and Internet Explorer | Nov 3, 2021 | May 3, 2022 | 2.7% | — |
| CVE-2020-0938
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 69.0% | — |
| CVE-2020-0968 Ransomware
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability |
Microsoft · Internet Explorer | Nov 3, 2021 | May 3, 2022 | 30.7% | — |
| CVE-2020-0986
Microsoft Windows Kernel Privilege Escalation Vulnerability |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 16.4% | — |
| CVE-2020-10148
SolarWinds Orion Authentication Bypass Vulnerability |
SolarWinds · Orion | Nov 3, 2021 | May 3, 2022 | 92.0% | — |
| CVE-2020-10181
Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability |
Sumavision · Enhanced Multimedia Router (EMR) | Nov 3, 2021 | May 3, 2022 | 14.9% | — |
| CVE-2020-10189
Zoho ManageEngine Desktop Central File Upload Vulnerability |
Zoho · ManageEngine | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2020-10199
Sonatype Nexus Repository Remote Code Execution Vulnerability |
Sonatype · Nexus Repository | Nov 3, 2021 | May 3, 2022 | 99.1% | — |
| CVE-2020-1020
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 65.0% | — |
| CVE-2020-10221
rConfig OS Command Injection Vulnerability |
rConfig · rConfig | Nov 3, 2021 | May 3, 2022 | 77.3% | — |
| CVE-2020-1040
Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
Microsoft · Hyper-V RemoteFX | Nov 3, 2021 | May 3, 2022 | 7.6% | — |
| CVE-2020-1054
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Nov 3, 2021 | May 3, 2022 | 53.9% | — |
| CVE-2020-10987
Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability |
Tenda · AC1900 Router AC15 Model | Nov 3, 2021 | May 3, 2022 | 79.8% | — |
| CVE-2020-1147
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution V… |
Microsoft · .NET Framework, SharePoint, Visual Studio | Nov 3, 2021 | May 3, 2022 | 95.8% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.