CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2020-5741 Plex Media Server Remote Code Execution Vulnerability n/a Plex Media Server (Windows) Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2020-5735 Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability n/a Amcrest Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2020-5722 Grandstream Networks UCM6200 Series SQL Injection Vulnerability n/a Grandstream UCM6200 Series Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-5410 Directory Traversal with spring-cloud-config-server Spring by VMware Spring Cloud Config Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2020-5135 SonicWall SonicOS Buffer Overflow Vulnerability SonicWall SonicOS Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-4430 IBM Data Risk Manager Directory Traversal Vulnerability IBM Data Risk Manager Versions & vendor guidance →	Known exploitedCISA KEV	4.3Medium
CVE-2020-4428 IBM Data Risk Manager Remote Code Execution Vulnerability IBM Data Risk Manager Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2020-4427 IBM Data Risk Manager Security Bypass Vulnerability IBM Data Risk Manager Versions & vendor guidance →	Known exploitedCISA KEV	9Critical
CVE-2020-4006 Multiple VMware Products Command Injection Vulnerability n/a VMware Workspace One Access (Access), VMware Workspace One Access Connector (Access Connector), VMware Identity Manager (vIDM), VMware Identity Manager Connector (vIDM Connector), VMware Cloud Foundation, vRealize Suite Lifecycle Manager Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2020-3992 VMware ESXi OpenSLP Use-After-Free Vulnerability n/a VMware ESXi Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-3952 VMware vCenter Server Information Disclosure Vulnerability n/a VMware vCenter Server Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-3950 VMware Multiple Products Privilege Escalation Vulnerability n/a VMware Fusion, VMware Remote Console for Mac and Horizon Client for Mac Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2020-3837 Apple Multiple Products Memory Corruption Vulnerability Apple iOS, Apple macOS, Apple tvOS, Apple watchOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2020-36323 CVE-2020-36323 n/a n/a Versions & vendor guidance →	Not in downloaded KEV	Unknown
CVE-2020-36193 PEAR Archive_Tar Improper Link Resolution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2020-3580 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities Cisco Cisco Adaptive Security Appliance (ASA) Software Versions & vendor guidance →	Known exploitedCISA KEV	6.1Medium
CVE-2020-35730 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	6.1Medium
CVE-2020-3569 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities Cisco Cisco IOS XR Software Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Cisco Cisco IOS XR Software Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2020-3452 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability Cisco Cisco Adaptive Security Appliance (ASA) Software Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2020-3433 Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability Cisco Cisco AnyConnect Secure Mobility Client Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2020-3259 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability Cisco Cisco Adaptive Security Appliance (ASA) Software Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2020-3161 Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability Cisco Cisco IP phone Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability Cisco Cisco AnyConnect Secure Mobility Client Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2020-3118 Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability Cisco Cisco IOS XR Software Versions & vendor guidance →	Known exploitedCISA KEV	8.8High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.