By publication date

Exploited and new serious CVEs: February 2020

111 records · 16 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 2 of 2

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
43Plan	CVE-2020-4212No exploit	IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system.ibm · spectrum protect · CWE-20 pre-auth RCE	Critical9.8	—	14.9%	Feb 24, 2020
44Plan	CVE-2020-4213No exploit	IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system.ibm · spectrum protect · CWE-78 pre-auth RCE Command injection	Critical9.8	—	15.4%	Feb 24, 2020
44Plan	CVE-2020-4222No exploit	IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system.ibm · spectrum protect · CWE-78 pre-auth RCE Command injection	Critical9.8	—	15.4%	Feb 24, 2020
52Plan	CVE-2020-9374Proof of concept	On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker tp-link · tl-wr849n firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	42.6%	Feb 24, 2020
99Now	CVE-2020-1938Weaponized	When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.apache · geode Pre-auth	Critical9.8	KEV	99.2%	Feb 24, 2020
66This week	CVE-2020-8794Weaponized	OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies.opensmtpd · opensmtpd · CWE-125 pre-auth RCE Memory safety	Critical9.8	—	88.9%	Feb 25, 2020
40Plan	CVE-2019-3999Weaponized	Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, unauthenticated attacdruva · insync client · CWE-78 RCE Local privilege escalation Command injection	High7.8	—	8.5%	Feb 25, 2020
44Plan	CVE-2015-0565Proof of concept	NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible.google · native client · CWE-119 Pre-auth Memory safety	Critical10.0	—	13.6%	Feb 25, 2020
65This week	CVE-2020-3837Weaponized	A memory corruption issue was addressed with improved memory handling.apple · ipados · CWE-787 RCE Local privilege escalation Memory safety	High7.8	KEV	14.7%	Feb 27, 2020
89Now	CVE-2020-6418Weaponized	Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted google · chrome · CWE-843 Pre-auth	High8.8	KEV	78.8%	Feb 27, 2020
64This week	CVE-2020-9465Weaponized	An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3.eyesofnetwork · eyesofnetwork · CWE-89 Pre-auth Auth bypass SQL injection	Critical9.8	—	81.8%	Feb 28, 2020

CVE-2020-4212
43Plan
IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system.
CriticalCVSS 9.8No exploitEPSS 14%
- pre-auth RCE
ibm · spectrum protectFeb 24, 2020
CVE-2020-4213
44Plan
IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system.
CriticalCVSS 9.8No exploitEPSS 15%
- pre-auth RCE
- Command injection
ibm · spectrum protectFeb 24, 2020
CVE-2020-4222
44Plan
IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system.
CriticalCVSS 9.8No exploitEPSS 15%
- pre-auth RCE
- Command injection
ibm · spectrum protectFeb 24, 2020
CVE-2020-9374
52Plan
On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker
CriticalCVSS 9.8Proof of conceptEPSS 42%
- pre-auth RCE
- Command injection
tp-link · tl-wr849n firmwareFeb 24, 2020
CVE-2020-1938
99Now
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.
CriticalCVSS 9.8KEVWeaponizedEPSS 99%
- Pre-auth
apache · geodeFeb 24, 2020
CVE-2020-8794
66This week
OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies.
CriticalCVSS 9.8WeaponizedEPSS 88%
- pre-auth RCE
- Memory safety
opensmtpd · opensmtpdFeb 25, 2020
CVE-2019-3999
40Plan
Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, unauthenticated attac
HighCVSS 7.8WeaponizedEPSS 8%
druva · insync clientFeb 25, 2020
CVE-2015-0565
44Plan
NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible.
CriticalCVSS 10.0Proof of conceptEPSS 13%
- Pre-auth
- Memory safety
google · native clientFeb 25, 2020
CVE-2020-3837
65This week
A memory corruption issue was addressed with improved memory handling.
HighCVSS 7.8KEVWeaponizedEPSS 14%
apple · ipadosFeb 27, 2020
CVE-2020-6418
89Now
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted
HighCVSS 8.8KEVWeaponizedEPSS 78%
- Pre-auth
google · chromeFeb 27, 2020
CVE-2020-9465
64This week
An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3.
CriticalCVSS 9.8WeaponizedEPSS 81%
eyesofnetwork · eyesofnetworkFeb 28, 2020