Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2020-37278 CVE-2020-37278 HIGH 8.7 0.36% cvelistv5
cve-2020-37214 thecontrolgroup voyager Improper Limitation of a Pathname to a Restricted Directory HIGH 8.7 0.71% cvelistv5 2026-02-11
cve-2020-36870 Improper Control of Generation of Code HIGH N/A 0.62% cvelistv5 2025-11-07
cve-2020-36728 Adning Advertising plugin for WordPress Directory Traversal File Deletion MEDIUM 6.5 3.13% cvelistv5 2020-07-07
cve-2020-36193 PEAR Archive_Tar Improper Link Resolution Vulnerability CRITICAL N/A 70.59% cvelistv5 2022-08-25
cve-2020-36112 cse_bookstore_project cse_bookstore Improper Neutralization of Special Elements used in an SQL Command HIGH N/A 17.59% cvelistv5 2023-12-21
cve-2020-35949 An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made it possible for unauthenticated attackers to upload arbitrary files and achieve remote code execution. If a quiz question could be answered by uploading a file, only the Content-Type header was checked during the upload, and thus the attacker could use text/plain for a .php file. CRITICAL 10.0 5.15% cvelistv5 2026-06-17
cve-2020-35948 CVE-2020-35948 CRITICAL 9.9 24.94% cvelistv5
cve-2020-35945 elegantthemes divi Unrestricted Upload of File with Dangerous Type HIGH N/A 2.45% cvelistv5 2020-08-04
cve-2020-3580 Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability MEDIUM 6.1 85.58% cvelistv5 2021-11-03
cve-2020-35730 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability HIGH N/A 32.92% cvelistv5 2023-06-20
cve-2020-35713 Linksys re6500_firmware Improper Neutralization of Special Elements used in an OS Command HIGH N/A 32.94% cvelistv5 2024-01-22
cve-2020-3569 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability HIGH 8.6 3.32% cvelistv5 2020-08-29
cve-2020-35665 TerraMaster TerraMaster OS Improper Neutralization of Special Elements used in an OS Command HIGH N/A 78.48% cvelistv5 2021-01-14
cve-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability HIGH 8.6 3.70% cvelistv5 2020-08-29
cve-2020-35580 searchblox searchblox Improper Limitation of a Pathname to a Restricted Directory HIGH N/A 13.98% cvelistv5 2023-11-13
cve-2020-35476 opentsdb opentsdb Improper Neutralization of Special Elements used in an OS Command HIGH N/A 85.33% cvelistv5 2024-01-21
cve-2020-35235 Secure-file-manager plugin through 2.5 for WordPress Remote Code Execution HIGH N/A 18.28% cvelistv5 2024-01-21
cve-2020-35131 agentejo cockpit Improper Control of Generation of Code HIGH N/A 50.26% cvelistv5 2023-11-13
cve-2020-3452 Cisco ASA and FTD Read-Only Path Traversal Vulnerability HIGH 7.5 99.99% cvelistv5 2021-11-03
cve-2020-3433 Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability HIGH 7.8 10.05% cvelistv5 2022-10-20
cve-2020-3259 Cisco ASA and FTD Information Disclosure Vulnerability CRITICAL N/A 71.50% cvelistv5 2024-01-29
cve-2020-3161 Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability CRITICAL 9.8 83.86% cvelistv5 2021-11-03
cve-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability CRITICAL N/A 28.52% cvelistv5 2022-10-20
cve-2020-3118 Cisco IOS XR Software Discovery Protocol Format String Vulnerability HIGH 8.8 11.68% cvelistv5 2020-10-20
cve-2020-29597 incomcms_project incomcms Unrestricted Upload of File with Dangerous Type HIGH N/A 71.33% cvelistv5 2023-12-25
cve-2020-29583 Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability CRITICAL 9.8 90.16% cvelistv5 2021-11-03
cve-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability CRITICAL N/A 4.70% cvelistv5 2024-10-31
cve-2020-29557 D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability HIGH N/A 55.75% cvelistv5 2021-06-01
cve-2020-29390 CVE-2020-29390 HIGH N/A 39.56% cvelistv5