CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2020-9934 Apple iOS, iPadOS, and macOS Input Validation Vulnerability Apple iOS, Apple macOS Versions & vendor guidance →	Known exploitedCISA KEV	5.5Medium
CVE-2020-9907 Apple Multiple Products Memory Corruption Vulnerability Apple iOS, Apple tvOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2020-9859 Apple Multiple Products Code Execution Vulnerability Apple iOS, Apple macOS, Apple tvOS, Apple watchOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2020-9819 Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability Apple iOS, Apple iOS-1, Apple watchOS, Apple watchOS-1 Versions & vendor guidance →	Known exploitedCISA KEV	4.3Medium
CVE-2020-9818 Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability Apple iOS, Apple iOS-1, Apple watchOS Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2020-9715 Adobe Acrobat Use-After-Free Vulnerability Adobe Adobe Acrobat and Reader Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2020-9377 D-Link DIR-610 Devices Remote Command Execution n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2020-9054 ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi ZyXEL NAS326, ZyXEL NAS520, ZyXEL NAS540, ZyXEL NAS542, ZyXEL NSA210, ZyXEL NSA220, ZyXEL NSA220+, ZyXEL NSA221, ZyXEL NSA310, ZyXEL NSA320, ZyXEL NSA320S, ZyXEL NSA325, ZyXEL NSA325v2 Reported fix guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-8816 Pi-Hole AdminLTE Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2020-8657 EyesOfNetwork Use of Hard-Coded Credentials Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-8655 EyesOfNetwork Improper Privilege Management Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2020-8644 PlaySMS Server-Side Template Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-8599 Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability Trend Micro Trend Micro OfficeScan, Trend Micro Apex One Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-8515 Multiple DrayTek Vigor Routers Web Management Page Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-8468 Trend Micro Multiple Products Content Validation Escape Vulnerability Trend Micro Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free Business Security (WFBS) Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2020-8467 Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability Trend Micro Trend Micro OfficeScan, Trend Micro Apex One Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2020-8260 Ivanti Pulse Connect Secure Code Execution Vulnerability n/a Pulse Connect Secure / Pulse Policy Secure Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2020-8243 Ivanti Pulse Connect Secure Code Execution Vulnerability n/a Pulse Connect Secre Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2020-8218 Pulse Connect Secure Code Injection Vulnerability n/a Pulse Connect Secure Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2020-8196 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability n/a Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Versions & vendor guidance →	Known exploitedCISA KEV	4.3Medium
CVE-2020-8195 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability n/a Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2020-8193 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability n/a Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2020-7961 Liferay Portal Deserialization of Untrusted Data Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-7796 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-7247 OpenSMTPD Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.