CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2020-6820 Mozilla Firefox And Thunderbird Use-After-Free Vulnerability Mozilla Thunderbird, Mozilla Firefox, Mozilla Firefox ESR Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2020-6819 Mozilla Firefox And Thunderbird Use-After-Free Vulnerability Mozilla Thunderbird, Mozilla Firefox, Mozilla Firefox ESR Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2020-6572 Google Chrome Media Use-After-Free Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2020-6418 Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2020-6287 SAP NetWeaver Missing Authentication for Critical Function Vulnerability SAP SE SAP NetWeaver AS JAVA (LM Configuration Wizard) Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2020-6207 SAP Solution Manager Missing Authentication for Critical Function Vulnerability SAP SE SAP Solution Manager (User Experience Monitoring) Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2020-5902 F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability n/a BIG-IP Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-5849 Unraid Authentication Bypass Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2020-5847 Unraid Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-5741 Plex Media Server Remote Code Execution Vulnerability n/a Plex Media Server (Windows) Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2020-5735 Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability n/a Amcrest Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2020-5722 Grandstream Networks UCM6200 Series SQL Injection Vulnerability n/a Grandstream UCM6200 Series Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-5410 Directory Traversal with spring-cloud-config-server Spring by VMware Spring Cloud Config Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2020-5135 SonicWall SonicOS Buffer Overflow Vulnerability SonicWall SonicOS Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-4430 IBM Data Risk Manager Directory Traversal Vulnerability IBM Data Risk Manager Versions & vendor guidance →	Known exploitedCISA KEV	4.3Medium
CVE-2020-4428 IBM Data Risk Manager Remote Code Execution Vulnerability IBM Data Risk Manager Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2020-4427 IBM Data Risk Manager Security Bypass Vulnerability IBM Data Risk Manager Versions & vendor guidance →	Known exploitedCISA KEV	9Critical
CVE-2020-4006 Multiple VMware Products Command Injection Vulnerability n/a VMware Workspace One Access (Access), VMware Workspace One Access Connector (Access Connector), VMware Identity Manager (vIDM), VMware Identity Manager Connector (vIDM Connector), VMware Cloud Foundation, vRealize Suite Lifecycle Manager Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2020-3992 VMware ESXi OpenSLP Use-After-Free Vulnerability n/a VMware ESXi Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-3952 VMware vCenter Server Information Disclosure Vulnerability n/a VMware vCenter Server Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-3950 VMware Multiple Products Privilege Escalation Vulnerability n/a VMware Fusion, VMware Remote Console for Mac and Horizon Client for Mac Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2020-3837 Apple Multiple Products Memory Corruption Vulnerability Apple iOS, Apple macOS, Apple tvOS, Apple watchOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2020-36193 PEAR Archive_Tar Improper Link Resolution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2020-3580 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities Cisco Cisco Adaptive Security Appliance (ASA) Software Versions & vendor guidance →	Known exploitedCISA KEV	6.1Medium
CVE-2020-35730 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	6.1Medium

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.