Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability HIGH 8.6 3.70% cvelistv5 2021-11-03
cve-2020-3452 Cisco ASA and FTD Read-Only Path Traversal Vulnerability HIGH 7.5 99.99% cvelistv5 2021-11-03
cve-2020-3161 Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability CRITICAL 9.8 83.86% cvelistv5 2021-11-03
cve-2020-3118 Cisco IOS XR Software Discovery Protocol Format String Vulnerability HIGH 8.8 11.68% cvelistv5 2021-11-03
cve-2020-29583 Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability CRITICAL 9.8 90.16% cvelistv5 2021-11-03
cve-2020-29557 D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability CRITICAL 9.8 54.32% cvelistv5 2021-11-03
cve-2020-27950 Apple Multiple Products Memory Initialization Vulnerability HIGH N/A 16.52% cvelistv5 2021-11-03
cve-2020-27932 Apple Multiple Products Type Confusion Vulnerability HIGH 7.8 10.34% cvelistv5 2021-11-03
cve-2020-27930 Apple Multiple Products Memory Corruption Vulnerability HIGH 7.8 22.01% cvelistv5 2021-11-03
cve-2020-26919 Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability HIGH N/A 57.47% cvelistv5 2021-11-03
cve-2020-2555 Oracle Multiple Products Remote Code Execution Vulnerability CRITICAL 9.8 97.12% cvelistv5 2021-11-03
cve-2020-25506 D-Link DNS-320 Device Command Injection Vulnerability CRITICAL 9.8 99.97% cvelistv5 2021-11-03
cve-2020-25213 WordPress File Manager Plugin Remote Code Execution Vulnerability CRITICAL 10.0 97.33% cvelistv5 2021-11-03
cve-2020-24557 Trend Micro Multiple Products Improper Access Control Vulnerability HIGH N/A 2.67% cvelistv5 2021-11-03
cve-2020-17530 struts2: using forced OGNL evaluation on untrusted user input can lead to a RCE and security degradation HIGH 8.1 95.93% cvelistv5 2026-08-05
cve-2020-17496 vBulletin PHP Module Remote Code Execution Vulnerability CRITICAL 9.8 87.74% cvelistv5 2021-11-03
cve-2020-17144 Microsoft Exchange Server Remote Code Execution Vulnerability HIGH 8.4 36.51% cvelistv5 2021-11-03
cve-2020-17087 Microsoft Windows Kernel Privilege Escalation Vulnerability HIGH 7.8 5.43% cvelistv5 2021-11-03
cve-2020-16846 salt: sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection CRITICAL 9.8 99.59% cvelistv5 2025-11-21
cve-2020-16017 chromium-browser: Use after free in site isolation HIGH 8.8 2.75% cvelistv5 2026-06-28
cve-2020-16013 chromium-browser: Inappropriate implementation in V8 HIGH 8.8 2.75% cvelistv5 2026-06-28
cve-2020-16010 Google Chrome for Android UI Heap Buffer Overflow Vulnerability CRITICAL 9.6 6.36% cvelistv5 2021-11-03
cve-2020-16009 chromium-browser: Inappropriate implementation in V8 HIGH 8.8 48.29% cvelistv5 2026-06-28
cve-2020-15999 freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png HIGH 8.6 44.30% cvelistv5 2026-06-28
cve-2020-15505 Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability CRITICAL 9.8 99.74% cvelistv5 2021-11-03
cve-2020-14883 Oracle WebLogic Server Unspecified Vulnerability HIGH 7.2 97.93% cvelistv5 2021-11-03
cve-2020-14882 Oracle WebLogic Server Remote Code Execution Vulnerability CRITICAL 9.8 100.00% cvelistv5 2021-11-03
cve-2020-14871 Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability HIGH N/A 80.16% cvelistv5 2021-11-03
cve-2020-14750 Oracle WebLogic Server Remote Code Execution Vulnerability CRITICAL 9.8 99.27% cvelistv5 2021-11-03
cve-2020-1472 samba: Netlogon elevation of privilege vulnerability (Zerologon) CRITICAL 9.8 99.39% cvelistv5 2026-02-23