Exploited Vulnerabilities DailyCVEs from 2020 known to be exploited
Entries146
Ransomware-linked19
Avg. lag1.7 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2020-9715 | Adobe Acrobat | 2026-04-13 | 48.5% | Unknown |
| CVE-2020-7796 | Synacor Zimbra Collaboration Suite | 2026-02-17 | 84.4% | Unknown |
| CVE-2020-24363 | TP-Link TL-WA855RE | 2025-09-02 | 20.6% | Unknown |
| CVE-2020-25079 | D-Link DCS-2530L and DCS-2670L Devices | 2025-08-05 | 54.0% | Unknown |
| CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices | 2025-08-05 | 97.5% | Unknown |
| CVE-2020-29574 | Sophos CyberoamOS | 2025-02-06 | 4.6% | Known |
| CVE-2020-15069 | Sophos XG Firewall | 2025-02-06 | 10.6% | Unknown |
| CVE-2020-11023 | JQuery JQuery | 2025-01-23 | 84.8% | Unknown |
| CVE-2020-2883 | Oracle WebLogic Server | 2025-01-07 | 94.9% | Unknown |
| CVE-2020-15415 | DrayTek Multiple Vigor Routers | 2024-09-30 | 84.4% | Unknown |
| CVE-2020-14644 | Oracle WebLogic Server | 2024-09-18 | 94.5% | Unknown |
| CVE-2020-0618 | Microsoft SQL Server | 2024-09-18 | 99.0% | Known |
| CVE-2020-13965 | Roundcube Webmail | 2024-06-26 | 76.5% | Unknown |
| CVE-2020-17519 | Apache Flink | 2024-05-23 | 97.8% | Unknown |
| CVE-2020-3259 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-02-15 | 71.7% | Known |
| CVE-2020-2551 | Oracle Fusion Middleware | 2023-11-16 | 93.2% | Unknown |
| CVE-2020-35730 | Roundcube Roundcube Webmail | 2023-06-22 | 32.9% | Unknown |
| CVE-2020-12641 | Roundcube Roundcube Webmail | 2023-06-22 | 84.3% | Unknown |
| CVE-2020-5741 | Plex Media Server | 2023-03-10 | 72.9% | Unknown |
| CVE-2020-3433 | Cisco AnyConnect Secure | 2022-10-24 | 10.0% | Known |
| CVE-2020-3153 | Cisco AnyConnect Secure | 2022-10-24 | 28.3% | Known |
| CVE-2020-9934 | Apple iOS, iPadOS, and macOS | 2022-09-08 | 3.2% | Unknown |
| CVE-2020-36193 | PEAR Archive_Tar | 2022-08-25 | 70.5% | Unknown |
| CVE-2020-28949 | PEAR Archive_Tar | 2022-08-25 | 84.5% | Unknown |
| CVE-2020-9907 | Apple Multiple Products | 2022-06-27 | 3.1% | Unknown |
| CVE-2020-3837 | Apple Multiple Products | 2022-06-27 | 14.8% | Unknown |
| CVE-2020-1027 | Microsoft Windows | 2022-05-23 | 4.5% | Unknown |
| CVE-2020-0638 | Microsoft Update Notification Manager | 2022-05-23 | 2.3% | Known |
| CVE-2020-2509 | QNAP QNAP Network-Attached Storage (NAS) | 2022-04-11 | 33.9% | Unknown |
| CVE-2020-9377 | D-Link DIR-610 Devices | 2022-03-25 | 21.3% | Unknown |
| CVE-2020-9054 | Zyxel Multiple Network-Attached Storage (NAS) Devices | 2022-03-25 | 99.9% | Unknown |
| CVE-2020-7247 | OpenBSD OpenSMTPD | 2022-03-25 | 98.9% | Unknown |
| CVE-2020-5410 | VMware Tanzu Spring Cloud Configuration (Config) Server | 2022-03-25 | 95.5% | Unknown |
| CVE-2020-25223 | Sophos SG UTM | 2022-03-25 | 96.7% | Unknown |
| CVE-2020-2506 | QNAP Systems Helpdesk | 2022-03-25 | 1.9% | Unknown |
| CVE-2020-2021 | Palo Alto Networks PAN-OS | 2022-03-25 | 4.3% | Known |
| CVE-2020-1956 | Apache Kylin | 2022-03-25 | 97.3% | Unknown |
| CVE-2020-1631 | Juniper Junos OS | 2022-03-25 | 4.8% | Unknown |
| CVE-2020-5135 | SonicWall SonicOS | 2022-03-15 | 26.8% | Known |
| CVE-2020-8218 | Pulse Secure Pulse Connect Secure | 2022-03-07 | 32.2% | Unknown |
| CVE-2020-1938 | Apache Tomcat | 2022-03-03 | 99.2% | Unknown |
| CVE-2020-11899 | Treck TCP/IP stack IPv6 | 2022-03-03 | 18.4% | Unknown |
| CVE-2020-0796 | Microsoft SMBv3 | 2022-02-10 | 99.8% | Known |
| CVE-2020-5722 | Grandstream UCM6200 | 2022-01-28 | 84.4% | Unknown |
| CVE-2020-0787 | Microsoft Windows | 2022-01-28 | 42.5% | Known |
| CVE-2020-14864 | Oracle Intelligence Enterprise Edition | 2022-01-18 | 97.2% | Unknown |
| CVE-2020-13927 | Apache Airflow's Experimental API | 2022-01-18 | 99.7% | Unknown |
| CVE-2020-13671 | Drupal Drupal core | 2022-01-18 | 35.3% | Unknown |
| CVE-2020-11978 | Apache Airflow | 2022-01-18 | 99.1% | Unknown |
| CVE-2020-6572 | Google Chrome Media | 2022-01-10 | 10.5% | Unknown |
| CVE-2020-8816 | Pi-hole AdminLTE | 2021-12-10 | 78.1% | Unknown |
| CVE-2020-17463 | Fuel CMS Fuel CMS | 2021-12-10 | 89.6% | Unknown |
| CVE-2020-11261 | Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | 2021-12-01 | 1.6% | Unknown |
| CVE-2020-9859 | Apple Multiple Products | 2021-11-03 | 0.8% | Unknown |
| CVE-2020-9819 | Apple iOS, iPadOS, and watchOS | 2021-11-03 | 2.1% | Unknown |
| CVE-2020-9818 | Apple iOS, iPadOS, and watchOS | 2021-11-03 | 2.2% | Unknown |
| CVE-2020-8657 | EyesOfNetwork EyesOfNetwork | 2021-11-03 | 91.8% | Unknown |
| CVE-2020-8655 | EyesOfNetwork EyesOfNetwork | 2021-11-03 | 60.0% | Unknown |
| CVE-2020-8644 | PlaySMS PlaySMS | 2021-11-03 | 86.6% | Unknown |
| CVE-2020-8599 | Trend Micro Apex One and OfficeScan | 2021-11-03 | 11.8% | Unknown |
| CVE-2020-8515 | DrayTek Multiple Vigor Routers | 2021-11-03 | 99.9% | Unknown |
| CVE-2020-8468 | Trend Micro Apex One, OfficeScan and Worry-Free Business Security Agents | 2021-11-03 | 6.1% | Unknown |
| CVE-2020-8467 | Trend Micro Apex One and OfficeScan | 2021-11-03 | 10.9% | Unknown |
| CVE-2020-8260 | Ivanti Pulse Connect Secure | 2021-11-03 | 96.4% | Unknown |
| CVE-2020-8243 | Ivanti Pulse Connect Secure | 2021-11-03 | 90.7% | Unknown |
| CVE-2020-8196 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 26.3% | Unknown |
| CVE-2020-8195 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 33.0% | Unknown |
| CVE-2020-8193 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 88.4% | Unknown |
| CVE-2020-7961 | Liferay Liferay Portal | 2021-11-03 | 99.9% | Unknown |
| CVE-2020-6820 | Mozilla Firefox and Thunderbird | 2021-11-03 | 7.0% | Unknown |
| CVE-2020-6819 | Mozilla Firefox and Thunderbird | 2021-11-03 | 3.0% | Unknown |
| CVE-2020-6418 | Google Chromium V8 | 2021-11-03 | 78.8% | Unknown |
| CVE-2020-6287 | SAP NetWeaver | 2021-11-03 | 94.7% | Unknown |
| CVE-2020-6207 | SAP Solution Manager | 2021-11-03 | 98.1% | Unknown |
| CVE-2020-5902 | F5 BIG-IP | 2021-11-03 | 99.9% | Known |
| CVE-2020-5849 | Unraid Unraid | 2021-11-03 | 93.2% | Unknown |
| CVE-2020-5847 | Unraid Unraid | 2021-11-03 | 95.8% | Unknown |
| CVE-2020-5735 | Amcrest Cameras and Network Video Recorder (NVR) | 2021-11-03 | 36.2% | Unknown |
| CVE-2020-4430 | IBM Data Risk Manager | 2021-11-03 | 68.5% | Unknown |
| CVE-2020-4428 | IBM Data Risk Manager | 2021-11-03 | 61.6% | Unknown |
| CVE-2020-4427 | IBM Data Risk Manager | 2021-11-03 | 70.0% | Unknown |
| CVE-2020-4006 | VMware Multiple Products | 2021-11-03 | 17.3% | Unknown |
| CVE-2020-3992 | VMware ESXi | 2021-11-03 | 83.0% | Known |
| CVE-2020-3952 | VMware vCenter Server | 2021-11-03 | 90.3% | Unknown |
| CVE-2020-3950 | VMware Multiple Products | 2021-11-03 | 7.2% | Unknown |
| CVE-2020-3580 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2021-11-03 | 85.5% | Known |
| CVE-2020-3569 | Cisco IOS XR | 2021-11-03 | 3.3% | Unknown |
| CVE-2020-3566 | Cisco IOS XR | 2021-11-03 | 3.7% | Unknown |
| CVE-2020-3452 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2021-11-03 | 99.9% | Unknown |
| CVE-2020-3161 | Cisco Cisco IP Phones | 2021-11-03 | 83.8% | Unknown |
| CVE-2020-3118 | Cisco IOS XR | 2021-11-03 | 11.6% | Unknown |
| CVE-2020-29583 | Zyxel Multiple Products | 2021-11-03 | 90.1% | Unknown |
| CVE-2020-29557 | D-Link DIR-825 R1 Devices | 2021-11-03 | 54.3% | Unknown |
| CVE-2020-27950 | Apple Multiple Products | 2021-11-03 | 16.5% | Unknown |
| CVE-2020-27932 | Apple Multiple Products | 2021-11-03 | 10.3% | Unknown |
| CVE-2020-27930 | Apple Multiple Products | 2021-11-03 | 22.0% | Unknown |
| CVE-2020-26919 | NETGEAR JGS516PE Devices | 2021-11-03 | 57.4% | Unknown |
| CVE-2020-2555 | Oracle Multiple Products | 2021-11-03 | 97.1% | Unknown |
| CVE-2020-25506 | D-Link DNS-320 Device | 2021-11-03 | 99.9% | Unknown |
| CVE-2020-25213 | WordPress File Manager Plugin | 2021-11-03 | 97.3% | Unknown |
| CVE-2020-24557 | Trend Micro Apex One, OfficeScan, and Worry-Free Business Security | 2021-11-03 | 2.6% | Unknown |
| CVE-2020-17530 | Apache Struts | 2021-11-03 | 95.9% | Unknown |
| CVE-2020-17496 | vBulletin vBulletin | 2021-11-03 | 87.3% | Unknown |
| CVE-2020-17144 | Microsoft Exchange Server | 2021-11-03 | 36.5% | Unknown |
| CVE-2020-17087 | Microsoft Windows | 2021-11-03 | 5.4% | Unknown |
| CVE-2020-16846 | SaltStack Salt | 2021-11-03 | 99.5% | Unknown |
| CVE-2020-16017 | Google Chrome | 2021-11-03 | 2.7% | Unknown |
| CVE-2020-16013 | Google Chromium V8 | 2021-11-03 | 2.7% | Unknown |
| CVE-2020-16010 | Google Chrome for Android UI | 2021-11-03 | 6.3% | Unknown |
| CVE-2020-16009 | Google Chromium V8 | 2021-11-03 | 48.2% | Unknown |
| CVE-2020-15999 | Google Chrome FreeType | 2021-11-03 | 63.8% | Unknown |
| CVE-2020-15505 | Ivanti MobileIron Multiple Products | 2021-11-03 | 99.7% | Unknown |
| CVE-2020-14883 | Oracle WebLogic Server | 2021-11-03 | 97.9% | Unknown |
| CVE-2020-14882 | Oracle WebLogic Server | 2021-11-03 | 99.9% | Unknown |
| CVE-2020-14871 | Oracle Solaris and Zettabyte File System (ZFS) | 2021-11-03 | 80.1% | Unknown |
| CVE-2020-14750 | Oracle WebLogic Server | 2021-11-03 | 99.2% | Unknown |
| CVE-2020-1472 | Microsoft Netlogon | 2021-11-03 | 99.3% | Known |
| CVE-2020-1464 | Microsoft Windows | 2021-11-03 | 38.9% | Unknown |
| CVE-2020-1380 | Microsoft Internet Explorer | 2021-11-03 | 24.1% | Unknown |
| CVE-2020-1350 | Microsoft Windows | 2021-11-03 | 96.7% | Unknown |
| CVE-2020-12812 | Fortinet FortiOS | 2021-11-03 | 45.3% | Known |
| CVE-2020-12271 | Sophos SFOS | 2021-11-03 | 42.4% | Known |
| CVE-2020-11738 | WordPress Snap Creek Duplicator Plugin | 2021-11-03 | 97.8% | Unknown |
| CVE-2020-11652 | SaltStack Salt | 2021-11-03 | 86.1% | Unknown |
| CVE-2020-11651 | SaltStack Salt | 2021-11-03 | 96.6% | Unknown |
| CVE-2020-1147 | Microsoft .NET Framework, SharePoint, Visual Studio | 2021-11-03 | 93.9% | Unknown |
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model | 2021-11-03 | 79.8% | Unknown |
| CVE-2020-1054 | Microsoft Win32k | 2021-11-03 | 54.1% | Unknown |
| CVE-2020-1040 | Microsoft Hyper-V RemoteFX | 2021-11-03 | 7.3% | Unknown |
| CVE-2020-10221 | rConfig rConfig | 2021-11-03 | 77.1% | Unknown |
| CVE-2020-1020 | Microsoft Windows | 2021-11-03 | 65.0% | Unknown |
| CVE-2020-10199 | Sonatype Nexus Repository | 2021-11-03 | 99.0% | Unknown |
| CVE-2020-10189 | Zoho ManageEngine | 2021-11-03 | 99.9% | Unknown |
| CVE-2020-10181 | Sumavision Enhanced Multimedia Router (EMR) | 2021-11-03 | 14.6% | Unknown |
| CVE-2020-10148 | SolarWinds Orion | 2021-11-03 | 91.9% | Unknown |
| CVE-2020-0986 | Microsoft Windows | 2021-11-03 | 16.4% | Unknown |
| CVE-2020-0968 | Microsoft Internet Explorer | 2021-11-03 | 30.6% | Known |
| CVE-2020-0938 | Microsoft Windows | 2021-11-03 | 68.9% | Unknown |
| CVE-2020-0878 | Microsoft Edge and Internet Explorer | 2021-11-03 | 2.6% | Known |
| CVE-2020-0688 | Microsoft Exchange Server | 2021-11-03 | 99.9% | Known |
| CVE-2020-0683 | Microsoft Windows | 2021-11-03 | 7.6% | Unknown |
| CVE-2020-0674 | Microsoft Internet Explorer | 2021-11-03 | 86.8% | Unknown |
| CVE-2020-0646 | Microsoft .NET Framework | 2021-11-03 | 99.2% | Unknown |
| CVE-2020-0601 | Microsoft Windows | 2021-11-03 | 89.4% | Unknown |
| CVE-2020-0069 | MediaTek Multiple Chipsets | 2021-11-03 | 1.3% | Unknown |
| CVE-2020-0041 | Android Android Kernel | 2021-11-03 | 3.1% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
146 CVE-2020 vulnerabilities are in KEV; on average they were listed 1.7 years after the CVE year.