Skip to content
BackEsc
Sign in

February 2020 · Band 1

Exploited in the wild

16 CVEs · 16 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Each square is a CVE listed by CISA as exploited. The named ones are the most likely to be exploited again.

exploited in the wild
16

Every one of the 16 is a mark on the map. Named now: 1 to 16, most at risk first.

  1. DrayTek - Remote Code ExecutionCVE-2020-8515DrayTek · CVSS 9.8 · 100% likely

    CWE-78DrayTek Corporation

  2. A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption…CVE-2020-0688Microsoft · CVSS 8.8 · 100% likelycovered by CyberSIXT

    CWE-287MicrosoftNightEagleAPT291 article

  3. Ghostcat - Apache Tomcat - AJP File Read/Inclusion VulnerabilityCVE-2020-1938Apache · CVSS 9.8 · 99% likely

    Apache

  4. Microsoft SQL Server Reporting Services - Remote Code ExecutionCVE-2020-0618Microsoft · CVSS 9.8 · 99% likely

    CWE-502Microsoft

  5. Zimbra Collaboration Suite < 8.8.15 Patch 7 - Server-Side Request ForgeryCVE-2020-7796Synacor · CVSS 9.8 · 94% likelycovered by CyberSIXT

    CWE-918Zimbra

  6. EyesOfNetwork - Hardcoded API KeyCVE-2020-8657EyesOfNetwork · CVSS 9.8 · 92% likely

    CWE-798EyesOfNetwork

  7. A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerabi…CVE-2020-0674Microsoft · CVSS 7.5 · 87% likely

    CWE-416MicrosoftSideWinder

  8. playSMS <1.4.3 - Remote Code ExecutionCVE-2020-8644PlaySMS · CVSS 9.8 · 86% likely

    CWE-94PlaySMS

  9. Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2020-6418Google · CVSS 8.8 · 79% likely

    CWE-843Google

  10. An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as roo…CVE-2020-8655EyesOfNetwork · CVSS 7.8 · 60% likely

    CWE-269EyesOfNetwork

  11. Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityCVE-2020-3153Cisco · CVSS 6.5 · 29% likely

    CWE-427Cisco

  12. Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.3…CVE-2019-19356Netis · CVSS 7.5 · 28% likely

    CWE-78Netis

  13. A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An…CVE-2020-3837Apple · CVSS 7.8 · 15% likely

    CWE-787Apple

  14. Cisco IOS XR Software Cisco Discovery Protocol Format String VulnerabilityCVE-2020-3118Cisco · CVSS 8.8 · 12% likely

    CWE-134Cisco

  15. An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. Thi…CVE-2020-0683Microsoft · CVSS 7.8 · 7.7% likely

    CWE-59Microsoft

  16. TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installations. It used a shared AES key f…CVE-2019-18988TeamViewer · CVSS 7 · 4.7% likely

    CWE-521TeamViewer

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in