CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2020-3569 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities Cisco Cisco IOS XR Software Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Cisco Cisco IOS XR Software Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2020-3452 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability Cisco Cisco Adaptive Security Appliance (ASA) Software Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2020-3433 Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability Cisco Cisco AnyConnect Secure Mobility Client Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2020-3259 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability Cisco Cisco Adaptive Security Appliance (ASA) Software Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2020-3161 Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability Cisco Cisco IP phone Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability Cisco Cisco AnyConnect Secure Mobility Client Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2020-3118 Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability Cisco Cisco IOS XR Software Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2020-29583 Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-29557 D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-28949 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability Oracle Corporation WebLogic Server Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-27950 Apple Multiple Products Memory Initialization Vulnerability Apple watchOS, Apple iOS and iPadOS, Apple macOS Versions & vendor guidance →	Known exploitedCISA KEV	5.5Medium
CVE-2020-27932 Apple Multiple Products Type Confusion Vulnerability Apple watchOS, Apple iOS and iPadOS, Apple macOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2020-27930 Apple Multiple Products Memory Corruption Vulnerability Apple watchOS, Apple iOS and iPadOS, Apple macOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2020-26919 Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-2555 Oracle Multiple Products Remote Code Execution Vulnerability Oracle Corporation WebCenter Portal, Oracle Corporation Utilities Framework Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-2551 Oracle Fusion Middleware Unspecified Vulnerability Oracle Corporation WebLogic Server Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-25506 D-Link DNS-320 Device Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-25223 Sophos SG UTM Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-25213 WordPress File Manager Plugin Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2020-2509 Command Injection Vulnerability in QTS and QuTS hero QNAP Systems Inc. QTS, QNAP Systems Inc. QuTS hero Reported fix guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-25079 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2020-25078 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.