Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Nov 3, 2021 | CVE-2020-8243 | Ivanti · Pulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | High 7.2 | 90.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-8196 | Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | Medium 4.3 | 26.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-8195 | Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | Medium 6.5 | 33.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-8193 | Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | Medium 6.5 | 88.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-7961 | Liferay · Liferay Portal | Liferay Portal Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 99.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-6820 | Mozilla · Firefox and Thunderbird | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | High 8.1 | 7.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-6819 | Mozilla · Firefox and Thunderbird | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | High 8.1 | 3.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-6418 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | High 8.8 | 78.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-6287 | SAP · NetWeaver | SAP NetWeaver Missing Authentication for Critical Function Vulnerability | Critical 10.0 | 94.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-6207 | SAP · Solution Manager | SAP Solution Manager Missing Authentication for Critical Function Vulnerability | Critical 10.0 | 98.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-5902 Ransomware | F5 · BIG-IP | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | Critical 9.8 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-5849 | Unraid · Unraid | Unraid Authentication Bypass Vulnerability | High 7.5 | 93.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-5847 | Unraid · Unraid | Unraid Remote Code Execution Vulnerability | Critical 9.8 | 95.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-5735 | Amcrest · Cameras and Network Video Recorder (NVR) | Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability | High 8.8 | 36.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-4430 | IBM · Data Risk Manager | IBM Data Risk Manager Directory Traversal Vulnerability | Medium 4.3 | 68.5% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-4428 | IBM · Data Risk Manager | IBM Data Risk Manager Remote Code Execution Vulnerability | Critical 9.1 | 61.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-4427 | IBM · Data Risk Manager | IBM Data Risk Manager Security Bypass Vulnerability | Critical 9.0 | 70.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-4006 | VMware · Multiple Products | Multiple VMware Products Command Injection Vulnerability | Critical 9.1 | 17.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-3992 Ransomware | VMware · ESXi | VMware ESXi OpenSLP Use-After-Free Vulnerability | Critical 9.8 | 83.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-3952 | VMware · vCenter Server | VMware vCenter Server Information Disclosure Vulnerability | Critical 9.8 | 90.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-3950 | VMware · Multiple Products | VMware Multiple Products Privilege Escalation Vulnerability | High 7.8 | 7.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-3580 Ransomware | Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 85.6% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-3569 | Cisco · IOS XR | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | High 8.6 | 3.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-3566 | Cisco · IOS XR | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | High 8.6 | 3.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-3452 | Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Read-Only Path Traversal Vulnerability | High 7.5 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-3161 | Cisco · Cisco IP Phones | Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | Critical 9.8 | 83.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-3118 | Cisco · IOS XR | Cisco IOS XR Software Discovery Protocol Format String Vulnerability | High 8.8 | 11.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-29583 | Zyxel · Multiple Products | Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | Critical 9.8 | 90.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-29557 | D-Link · DIR-825 R1 Devices | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | Critical 9.8 | 55.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-27950 | Apple · Multiple Products | Apple Multiple Products Memory Initialization Vulnerability | Medium 5.5 | 16.5% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-27932 | Apple · Multiple Products | Apple Multiple Products Type Confusion Vulnerability | High 7.8 | 10.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-27930 | Apple · Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | High 7.8 | 22.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-26919 | NETGEAR · JGS516PE Devices | Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability | Critical 9.8 | 57.5% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-2555 | Oracle · Multiple Products | Oracle Multiple Products Remote Code Execution Vulnerability | Critical 9.8 | 97.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-25506 | D-Link · DNS-320 Device | D-Link DNS-320 Device Command Injection Vulnerability | Critical 9.8 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-25213 | WordPress · File Manager Plugin | WordPress File Manager Plugin Remote Code Execution Vulnerability | Critical 10.0 | 97.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-24557 | Trend Micro · Apex One, OfficeScan, and Worry-Free Business Security | Trend Micro Multiple Products Improper Access Control Vulnerability | High 7.8 | 2.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-17530 | Apache · Struts | Apache Struts Remote Code Execution Vulnerability | Critical 9.8 | 96.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-17496 | vBulletin · vBulletin | vBulletin PHP Module Remote Code Execution Vulnerability | Critical 9.8 | 87.5% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-17144 | Microsoft · Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | High 8.4 | 36.5% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-17087 | Microsoft · Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | High 7.8 | 5.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-16846 | SaltStack · Salt | SaltStack Salt Shell Injection Vulnerability | Critical 9.8 | 99.6% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-16017 | Google · Chrome | Google Chrome Use-After-Free Vulnerability | Critical 9.6 | 2.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-16013 | Google · Chromium V8 | Google Chromium V8 Incorrect Implementation Vulnerabililty | High 8.8 | 2.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-16010 | Google · Chrome for Android UI | Google Chrome for Android UI Heap Buffer Overflow Vulnerability | Critical 9.6 | 6.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-16009 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | High 8.8 | 48.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-15999 | Google · Chrome FreeType | Google Chrome FreeType Heap Buffer Overflow Vulnerability | Critical 9.6 | 63.9% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2020-15505 | Ivanti · MobileIron Multiple Products | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | Critical 9.8 | 99.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-14883 | Oracle · WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | High 7.2 | 97.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-14882 | Oracle · WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | Critical 9.8 | 100.0% | May 3, 2022 |