Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2020-10199 Sonatype Nexus Repository Remote Code Execution Vulnerability HIGH 8.8 99.06% cvelistv5 2021-11-03
cve-2020-10189 Zoho ManageEngine Desktop Central File Upload Vulnerability CRITICAL 9.8 99.94% cvelistv5 2021-11-03
cve-2020-10181 Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability CRITICAL 9.8 14.67% cvelistv5 2021-11-03
cve-2020-10173 CVE-2020-10173 HIGH N/A 77.13% cvelistv5
cve-2020-10148 SolarWinds Orion Authentication Bypass Vulnerability CRITICAL 9.8 91.98% cvelistv5 2021-11-03
cve-2020-0986 Microsoft Windows Kernel Privilege Escalation Vulnerability HIGH 7.8 15.93% cvelistv5 2021-11-03
cve-2020-0968 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability HIGH 7.5 30.68% cvelistv5 2021-11-03
cve-2020-0938 Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability HIGH N/A 68.95% cvelistv5 2021-11-03
cve-2020-0878 Microsoft Edge and Internet Explorer Memory Corruption Vulnerability MEDIUM 4.2 2.70% cvelistv5 2021-11-03
cve-2020-0796 Microsoft SMBv3 Remote Code Execution Vulnerability CRITICAL 10.0 99.81% cvelistv5 2022-02-10
cve-2020-0787 Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability HIGH 7.8 42.52% cvelistv5 2022-01-28
cve-2020-0688 Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability CRITICAL N/A 99.96% cvelistv5 2021-11-03
cve-2020-0683 Microsoft Windows Installer Privilege Escalation Vulnerability HIGH N/A 7.61% cvelistv5 2021-11-03
cve-2020-0674 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability HIGH 7.5 86.86% cvelistv5 2021-11-03
cve-2020-0646 Microsoft .NET Framework Remote Code Execution Vulnerability CRITICAL 9.8 99.22% cvelistv5 2021-11-03
cve-2020-0638 Microsoft Update Notification Manager Privilege Escalation Vulnerability CRITICAL N/A 2.35% cvelistv5 2022-05-23
cve-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability HIGH 8.8 99.02% cvelistv5 2024-09-18
cve-2020-0601 Microsoft Windows CryptoAPI Spoofing Vulnerability HIGH N/A 89.44% cvelistv5 2021-11-03
cve-2020-0069 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability HIGH 7.8 1.37% cvelistv5 2021-11-03
cve-2020-0041 Android Kernel Out-of-Bounds Write Vulnerability HIGH N/A 3.15% cvelistv5 2021-11-03
cve-2019-9978 WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability MEDIUM 6.1 72.95% cvelistv5 2021-11-03
cve-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability HIGH N/A 13.79% cvelistv5 2025-03-26
cve-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability CRITICAL 9.8 83.74% cvelistv5 2025-03-26
cve-2019-9762 A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication. CRITICAL 9.8 6.04% cvelistv5 2026-06-17
cve-2019-9733 An issue was discovered in JFrog Artifactory 6.7.3. By default, the access-admin account is used to reset the password of the admin account in case an administrator gets locked out from the Artifactory console. This is only allowable from a connection directly from localhost, but providing a X-Forwarded-For HTTP header to the request allows an unauthenticated user to login with the default credentials of the access-admin account while bypassing the whitelist of allowed IP addresses. The access-admin account can use Artifactory's API to request authentication tokens for all users including the admin account and, in turn, assume full control of all artifacts and repositories managed by Artifactory. CRITICAL 9.8 52.95% cvelistv5 2026-06-17
cve-2019-9670 Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference CRITICAL 9.8 99.99% cvelistv5 2022-01-10
cve-2019-9621 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability HIGH 7.5 81.04% cvelistv5 2025-07-07
cve-2019-9082 ThinkPHP Remote Code Execution Vulnerability HIGH 8.8 97.42% cvelistv5 2021-11-03
cve-2019-8720 WebKitGTK Memory Corruption Vulnerability HIGH N/A 1.56% cvelistv5 2022-05-23
cve-2019-8605 Apple Multiple Products Use-After-Free Vulnerability HIGH N/A 17.61% cvelistv5 2022-06-27