Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2020-3952 | VMware vCenter Server Information Disclosure Vulnerability | CRITICAL | 9.8 | 90.38% | cvelistv5 | 2021-11-03 |
| cve-2020-3950 | VMware Multiple Products Privilege Escalation Vulnerability | HIGH | 7.8 | 7.25% | cvelistv5 | 2021-11-03 |
| cve-2020-3837 | Apple Multiple Products Memory Corruption Vulnerability | HIGH | N/A | 14.72% | cvelistv5 | 2022-06-27 |
| cve-2020-36870 | CVE-2020-36870 | CRITICAL | 9.2 | 0.75% | cvelistv5 | |
| cve-2020-36728 | CVE-2020-36728 | MEDIUM | 6.5 | 3.13% | cvelistv5 | |
| cve-2020-36193 | SUSE CVE CVE-2020-36193 | HIGH | 7.5 | 70.59% | cvelistv5 | 2026-09-01 |
| cve-2020-36112 | CVE-2020-36112 | HIGH | N/A | 18.05% | cvelistv5 | |
| cve-2020-35949 | CVE-2020-35949 | CRITICAL | 10.0 | 4.93% | cvelistv5 | |
| cve-2020-35948 | CVE-2020-35948 | CRITICAL | 9.9 | 24.94% | cvelistv5 | |
| cve-2020-35945 | CVE-2020-35945 | CRITICAL | 9.9 | 2.42% | cvelistv5 | |
| cve-2020-3580 | Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability | MEDIUM | 6.1 | 85.58% | cvelistv5 | 2021-11-03 |
| cve-2020-35730 | SUSE CVE CVE-2020-35730 | MEDIUM | 6.1 | 32.69% | cvelistv5 | 2025-03-15 |
| cve-2020-35713 | Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page. | CRITICAL | 9.8 | 32.94% | cvelistv5 | 2026-06-17 |
| cve-2020-3569 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | HIGH | 8.6 | 3.32% | cvelistv5 | 2021-11-03 |
| cve-2020-35665 | CVE-2020-35665 | HIGH | N/A | 78.48% | cvelistv5 | |
| cve-2020-3566 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | HIGH | 8.6 | 3.70% | cvelistv5 | 2021-11-03 |
| cve-2020-35580 | CVE-2020-35580 | HIGH | N/A | 13.98% | cvelistv5 | |
| cve-2020-35476 | CVE-2020-35476 | HIGH | N/A | 85.33% | cvelistv5 | |
| cve-2020-35235 | CVE-2020-35235 | HIGH | N/A | 18.28% | cvelistv5 | |
| cve-2020-35131 | cockpit: registerCriteriaFunction in lib/MongoLite/Database.php allows for a Remote Command Execution via custom php code injection | CRITICAL | 9.8 | 51.30% | cvelistv5 | 2025-11-21 |
| cve-2020-3452 | Cisco ASA and FTD Read-Only Path Traversal Vulnerability | HIGH | 7.5 | 99.99% | cvelistv5 | 2021-11-03 |
| cve-2020-3433 | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | HIGH | 7.8 | 10.05% | cvelistv5 | 2022-10-24 |
| cve-2020-3259 | Cisco ASA and FTD Information Disclosure Vulnerability | HIGH | 7.5 | 71.79% | cvelistv5 | 2024-02-15 |
| cve-2020-3161 | Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | CRITICAL | 9.8 | 83.86% | cvelistv5 | 2021-11-03 |
| cve-2020-3153 | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability | MEDIUM | 6.5 | 28.31% | cvelistv5 | 2022-10-24 |
| cve-2020-3118 | Cisco IOS XR Software Discovery Protocol Format String Vulnerability | HIGH | 8.8 | 11.68% | cvelistv5 | 2021-11-03 |
| cve-2020-29597 | CVE-2020-29597 | HIGH | N/A | 71.01% | cvelistv5 | |
| cve-2020-29583 | Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | CRITICAL | 9.8 | 90.16% | cvelistv5 | 2021-11-03 |
| cve-2020-29574 | CyberoamOS (CROS) SQL Injection Vulnerability | CRITICAL | 9.8 | 4.66% | cvelistv5 | 2025-02-06 |
| cve-2020-29557 | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | CRITICAL | 9.8 | 54.32% | cvelistv5 | 2021-11-03 |