Known exploited vulnerabilities

Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.

Known exploited vulnerabilities, newest first
CVEProductCVSS AddedReport
CVE-2020-9819 Apple iOS, iPadOS, and watchOS – –
CVE-2020-9818 Apple iOS, iPadOS, and watchOS – –
CVE-2020-8657 EyesOfNetwork – –
CVE-2020-8655 EyesOfNetwork – –
CVE-2020-8644 PlaySMS – –
CVE-2020-8599 Trend Micro Apex One and OfficeScan – –
CVE-2020-8515 DrayTek Multiple Vigor Routers – –
CVE-2020-8468 Trend Micro Apex One, OfficeScan and Worry-Free Business Security Agents – –
CVE-2020-8467 Trend Micro Apex One and OfficeScan – –
CVE-2020-8260 Ivanti Pulse Connect Secure – –
CVE-2020-8243 Ivanti Pulse Connect Secure – –
CVE-2020-8196 Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance – –
CVE-2020-8195 Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance – –
CVE-2020-8193 Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance – –
CVE-2020-7961 Liferay Portal – –
CVE-2020-6820 Mozilla Firefox and Thunderbird – –
CVE-2020-6819 Mozilla Firefox and Thunderbird – –
CVE-2020-6418 Google Chromium V8 – –
CVE-2020-6287 SAP NetWeaver – –
CVE-2020-6207 SAP Solution Manager – –
CVE-2020-5902 F5 BIG-IP – –
CVE-2020-5849 Unraid – –
CVE-2020-5847 Unraid – –
CVE-2020-5735 Amcrest Cameras and Network Video Recorder (NVR) – –
CVE-2020-4430 IBM Data Risk Manager – –
CVE-2020-4428 IBM Data Risk Manager – –
CVE-2020-4427 IBM Data Risk Manager – –
CVE-2020-4006 VMware Multiple Products – –
CVE-2020-3992 VMware ESXi – –
CVE-2020-3952 VMware vCenter Server – –
CVE-2020-3950 VMware Multiple Products – –
CVE-2020-3580 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) – –
CVE-2020-3569 Cisco IOS XR – –
CVE-2020-3566 Cisco IOS XR – –
CVE-2020-3452 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) – –
CVE-2020-3161 Cisco IP Phones – –
CVE-2020-3118 Cisco IOS XR – –
CVE-2020-29583 Zyxel Multiple Products – –
CVE-2020-29557 D-Link DIR-825 R1 Devices – –
CVE-2020-27950 Apple Multiple Products – –
CVE-2020-27932 Apple Multiple Products – –
CVE-2020-27930 Apple Multiple Products – –
CVE-2020-26919 NETGEAR JGS516PE Devices – –
CVE-2020-2555 Oracle Multiple Products – –
CVE-2020-25506 D-Link DNS-320 Device – –
CVE-2020-25213 WordPress File Manager Plugin – –
CVE-2020-24557 Trend Micro Apex One, OfficeScan, and Worry-Free Business Security – –
CVE-2020-17530 Apache Struts – –
CVE-2020-17496 vBulletin – –
CVE-2020-17144 Microsoft Exchange Server – –