Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2020-15999 | Google Chrome FreeType Heap Buffer Overflow Vulnerability | HIGH | N/A | 44.30% | cvelistv5 | 2021-11-03 |
| cve-2020-15920 | CVE-2020-15920 | HIGH | N/A | 98.24% | cvelistv5 | |
| cve-2020-15916 | CVE-2020-15916 | HIGH | N/A | 3.43% | cvelistv5 | |
| cve-2020-15568 | CVE-2020-15568 | HIGH | N/A | 28.98% | cvelistv5 | |
| cve-2020-15505 | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | CRITICAL | 9.8 | 99.74% | cvelistv5 | 2021-11-03 |
| cve-2020-15415 | DrayTek Multiple Vigor Routers OS Command Injection Vulnerability | CRITICAL | 9.8 | 84.48% | cvelistv5 | 2024-09-30 |
| cve-2020-15227 | php-nette: Code injection attack by passing specially formed parameters to URL | UNKNOWN | N/A | 34.42% | cvelistv5 | 2025-11-21 |
| cve-2020-15069 | Sophos XG Firewall Buffer Overflow Vulnerability | CRITICAL | 9.8 | 10.67% | cvelistv5 | 2025-02-06 |
| cve-2020-14883 | Oracle WebLogic Server Unspecified Vulnerability | HIGH | 7.2 | 97.93% | cvelistv5 | 2021-11-03 |
| cve-2020-14882 | Oracle WebLogic Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 100.00% | cvelistv5 | 2021-11-03 |
| cve-2020-14871 | SUSE CVE CVE-2020-14871 | UNKNOWN | N/A | 80.16% | cvelistv5 | 2026-09-02 |
| cve-2020-14864 | Oracle Business Intelligence Enterprise Edition Path Transversal | HIGH | 7.5 | 97.23% | cvelistv5 | 2022-01-18 |
| cve-2020-14750 | Oracle WebLogic Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 99.27% | cvelistv5 | 2021-11-03 |
| cve-2020-1472 | Microsoft Netlogon Privilege Escalation Vulnerability | CRITICAL | N/A | 99.39% | cvelistv5 | 2021-11-03 |
| cve-2020-14644 | Oracle WebLogic Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 94.55% | cvelistv5 | 2024-09-18 |
| cve-2020-1464 | Microsoft Windows Spoofing Vulnerability | HIGH | 7.8 | 38.95% | cvelistv5 | 2021-11-03 |
| cve-2020-13965 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | HIGH | N/A | 76.60% | cvelistv5 | 2024-06-26 |
| cve-2020-13942 | Remote Code Execution in Apache Unomi | CRITICAL | 9.8 | 68.30% | cvelistv5 | 2026-06-17 |
| cve-2020-13927 | Apache Airflow's Experimental API Authentication Bypass | CRITICAL | 9.8 | 99.78% | cvelistv5 | 2022-01-18 |
| cve-2020-1380 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | HIGH | 7.8 | 24.19% | cvelistv5 | 2021-11-03 |
| cve-2020-13671 | Drupal core Un-restricted Upload of File | HIGH | N/A | 35.35% | cvelistv5 | 2022-01-18 |
| cve-2020-13638 | CVE-2020-13638 | HIGH | N/A | 76.60% | cvelistv5 | |
| cve-2020-1350 | Microsoft Windows DNS Server Remote Code Execution Vulnerability | HIGH | N/A | 96.72% | cvelistv5 | 2021-11-03 |
| cve-2020-13379 | grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send HTTP requests to any URL | HIGH | 8.2 | 99.86% | cvelistv5 | 2026-06-28 |
| cve-2020-13167 | CVE-2020-13167 | HIGH | N/A | 95.42% | cvelistv5 | |
| cve-2020-13158 | CVE-2020-13158 | HIGH | N/A | 53.97% | cvelistv5 | |
| cve-2020-13117 | CVE-2020-13117 | HIGH | N/A | 68.58% | cvelistv5 | |
| cve-2020-12832 | CVE-2020-12832 | HIGH | N/A | 7.07% | cvelistv5 | |
| cve-2020-12812 | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | CRITICAL | 9.8 | 49.34% | cvelistv5 | 2021-11-03 |
| cve-2020-12800 | CVE-2020-12800 | HIGH | N/A | 78.61% | cvelistv5 |