February 2020

14 results · Clear filters · Feed

• High 8.8
  CVE-2020-6418 Exploited Public exploit EPSS 79%

  Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corr…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 27, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-3837 Exploited Public exploit EPSS 15%

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.…

  Apple macOS watchOS tvOS macOS iOS
  Feb 27, 2020

  KEV Jun 27, 2022
• Critical 9.8
  CVE-2020-1938 Exploited Public exploit EPSS 99%

  Improper Privilege Management in Tomcat

  When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an atta…

  Apache Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
  Feb 24, 2020

  KEV Mar 3, 2022
• Medium 6.5
  CVE-2020-3153 Exploited · Ransomware Public exploit EPSS 29%

  Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

  A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the…

  Cisco Cisco AnyConnect Secure Mobility Client Network devices
  Feb 19, 2020

  KEV Oct 24, 2022
• High 8.8
  CVE-2020-0688 Exploited · Ransomware Public exploit EPSS 100%

  A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle …

  Microsoft Microsoft Exchange Server 2013 Microsoft Exchange Server 2016 Cumulative Update 14 Microsoft Exchange Server 2019 Cumulative Update 3
  Feb 11, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-0683 Exploited Public exploit

  An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka '…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Feb 11, 2020

  KEV Nov 3, 2021
• High 7.5
  CVE-2020-0674 Exploited Public exploit EPSS 87%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 9 Windows
  Feb 11, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-0618 Exploited · Ransomware Public exploit EPSS 99%

  A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles pag…

  Microsoft Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) Microsoft SQL Server Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)
  Feb 11, 2020

  KEV Sep 18, 2024
• High 7.5
  CVE-2019-19356 Exploited Public exploit EPSS 28%

  Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page.…

  Feb 7, 2020

  KEV Nov 3, 2021
• High 7.0
  CVE-2019-18988 Exploited Public exploit

  TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for di…

  Feb 7, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-8655 Exploited Public exploit EPSS 60%

  An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerabilit…

  Feb 6, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-8657 Exploited Public exploit EPSS 92%

  An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in includ…

  Feb 6, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-8644 Exploited Public exploit EPSS 86%

  PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.

  Feb 5, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-8515 Exploited Public exploit EPSS 100%

  DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allo…

  Feb 1, 2020

  KEV Nov 3, 2021