Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2020-28949 SUSE CVE CVE-2020-28949 HIGH 7.8 84.55% cvelistv5 2026-09-02
cve-2020-2883 Oracle WebLogic Server Unspecified Vulnerability HIGH N/A 94.58% cvelistv5 2020-04-30
cve-2020-28188 TerraMaster tos Improper Neutralization of Special Elements used in an OS Command CRITICAL N/A 96.45% cvelistv5 2021-01-19
cve-2020-28185 TerraMaster TOS <= 4.2.06 Unauthenticated User Enumeration HIGH N/A 18.25% cvelistv5 2023-11-20
cve-2020-27986 sonarsource sonarqube Missing Authentication for Critical Functionality HIGH 7.5 15.97% cvelistv5 2023-11-13
cve-2020-27950 Apple Multiple Products Memory Initialization Vulnerability HIGH N/A 16.52% cvelistv5 2020-10-29
cve-2020-27932 Apple Multiple Products Type Confusion Vulnerability HIGH 7.8 10.34% cvelistv5 2020-10-26
cve-2020-27930 Apple Multiple Products Memory Corruption Vulnerability HIGH 7.8 22.01% cvelistv5 2020-10-26
cve-2020-27387 horizontcms_project horizontcms Unrestricted Upload of File with Dangerous Type HIGH N/A 18.46% cvelistv5 2025-07-13
cve-2020-26948 emby emby Server-Side Request Forgery HIGH N/A 87.15% cvelistv5 2025-11-18
cve-2020-26919 Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability HIGH N/A 57.47% cvelistv5 2021-03-15
cve-2020-26879 commscope ruckus_vriot Use of Hard-coded Credentials HIGH N/A 44.37% cvelistv5 2022-06-28
cve-2020-26876 wpcoursesplugin wp-courses Missing Authentication for Critical Functionality HIGH N/A 10.55% cvelistv5 2020-10-07
cve-2020-26073 Cisco SD-WAN vManage Software Directory Traversal Vulnerability HIGH 7.5 12.58% cvelistv5 2024-01-05
cve-2020-2555 Oracle Multiple Products Remote Code Execution Vulnerability CRITICAL 9.8 97.12% cvelistv5 2020-10-20
cve-2020-25540 thinkadmin thinkadmin Improper Limitation of a Pathname to a Restricted Directory HIGH N/A 75.33% cvelistv5 2024-07-21
cve-2020-2551 Oracle Fusion Middleware Unspecified Vulnerability HIGH N/A 92.82% cvelistv5 2023-06-02
cve-2020-25506 D-Link DNS-320 Device Command Injection Vulnerability CRITICAL 9.8 99.97% cvelistv5 2021-03-15
cve-2020-25223 CVE-2020-25223 HIGH N/A 96.75% cvelistv5
cve-2020-25213 WordPress File Manager Plugin Remote Code Execution Vulnerability CRITICAL 10.0 97.33% cvelistv5 2020-09-09
cve-2020-2509 QNAP Network-Attached Storage (NAS) Command Injection Vulnerability CRITICAL N/A 33.99% cvelistv5 2022-04-11
cve-2020-25079 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability HIGH N/A 54.01% cvelistv5 2025-08-05
cve-2020-25078 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability HIGH N/A 97.51% cvelistv5 2021-06-01
cve-2020-2507 QNAP Helpdesk Improper Neutralization of Special Elements used in a Command HIGH N/A 3.08% cvelistv5 2021-03-05
cve-2020-2506 QNAP Helpdesk Improper Access Control Vulnerability HIGH N/A 2.01% cvelistv5 2021-03-05
cve-2020-24949 PHP-Fusion 9.03.50 downloads/downloads.php Authenticated Remote Code Execution HIGH N/A 67.52% cvelistv5 2021-09-16
cve-2020-24914 QCubed QCubed Deserialization of Untrusted Data HIGH N/A 4.98% cvelistv5 2024-01-22
cve-2020-24589 WSO2 api_manager Improper Restriction of XML External Entity Reference CRITICAL 9.1 26.28% cvelistv5 2024-01-22
cve-2020-24581 D-Link dsl2888a_firmware Improper Neutralization of Special Elements used in an OS Command HIGH N/A 13.73% cvelistv5 2021-06-01
cve-2020-24557 Trend Micro Multiple Products Improper Access Control Vulnerability HIGH N/A 2.67% cvelistv5 2021-04-21