Skip to content

August 2020 · Band 2

Check available, not yet exploited

21 CVEs

Each square is a CVE with a public nuclei template and no known exploitation yet. The named ones are the most likely to be exploited.

check available
21

Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.

  1. WordPress wpDiscuz <=7.0.4 - Remote Code ExecutionCVE-2020-24186Gvectors · CVSS 10 · 95% likely

    CWE-434gVectors Team

  2. Artica Web Proxy 4.30 - Authentication Bypass/SQL InjectionCVE-2020-17506Articatech · 94% likely

    CWE-89Articatech

  3. Apache HTTP Server - Remote Code ExecutionCVE-2020-11984Apache · 90% likely

    CWE-120Apache

  4. Artica Web Proxy 4.30 - OS Command InjectionCVE-2020-17505Articatech · 82% likely

    CWE-78Articatech

  5. Cisco Unified IP Conference Station 7937G - Denial-of-ServiceCVE-2020-16139Cisco · 80% likely

    Cisco

  6. SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code ExecutionCVE-2020-17456Seowonintech · 74% likely

    CWE-78Seowonintech

  7. Citrix XenMobile Server - Local File InclusionCVE-2020-8209Citrix · 44% likely

    CWE-22Citrix (NetScaler)

  8. Joomla! Component GMapFP 3.5 - Arbitrary File UploadCVE-2020-23972Gmapfp · 31% likely

    CWE-434

  9. WSO2 API Manager <=3.1.0 - Blind XML External Entity InjectionCVE-2020-24589Wso2 · CVSS 9.1 · 26% likely

    CWE-611WSO2

  10. OpenSIS 7.3 - SQL InjectionCVE-2020-6637Os4ed · 18% likely

    CWE-89Os4ed

  11. NexusDB <4.50.23 - Local File InclusionCVE-2020-24571Nexusdb · 17% likely

    CWE-22

  12. WordPress Plugin File Manager (wp-file-manager) Backup DisclosureCVE-2020-24312Filemanagerpro · 16% likely

    CWE-552Filemanagerpro

  13. Mara CMS 7.5 - Cross-Site ScriptingCVE-2020-24223Mara Cms Project · 15% likely

    CWE-79

  14. Spring Cloud Netflix - Server-Side Request ForgeryCVE-2020-5412Spring by VMware · 10% likely

    CWE-441Spring by VMware

  15. WordPress Sell Media 2.4.1 - Cross-Site ScriptingCVE-2019-6112Graphpaperpress · 9.2% likely

    CWE-79

  16. Canvas LMS v2020-07-29 - Blind Server-Side Request ForgeryCVE-2020-5775Instructure · 6.8% likely

    CWE-918

  17. Extreme Management Center 8.4.1.24 - Cross-Site ScriptingCVE-2020-13820Extremenetworks · 4.2% likely

    CWE-79Extremenetworks

  18. Jeedom <=4.0.38 - Cross-Site ScriptingCVE-2020-9036Jeedom · 3.8% likely

    CWE-79

  19. Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)CVE-2020-16248Prometheus · 3.1% likely

    CWE-918Prometheus

  20. Nova Lite < 1.3.9 - Cross-Site ScriptingCVE-2020-17362Themeinprogress · 2.9% likely

    CWE-79

  21. GiveWP - Missing Authorization to Settings UpdateCVE-2020-20627Givewp · 1.9% likely

    CWE-306GiveWP

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.