No vendor recorded · 2020
No vendor recorded: 2020
9,911 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE whose record names no vendor, published in 2020. The named ones are the most at risk.
- check available
- 189
- likely to be exploited
- 337
Every one of the 9,911 is a mark on the map. Named now: 1 to 26, most at risk first.
- Grafana 3.0.1-7.0.1 - Server-Side Request Forgery
- rConfig 3.9 - SQL Injection
- Apache OFBiz 17.12.03 - Cross-Site Scripting
- LinuxKI Toolset <= 6.01 - Remote Command Execution
- Mida eFramework <=2.9.0 - Remote Command Execution
- Agentejo Cockpit <0.11.2 - NoSQL Injection
- Zoho ManageEngine OpManger - Arbitrary File Read
- LimeSurvey 4.1.11 - Local File Inclusion
- Apache Struts <=2.5.20 - Remote Code Execution
- TerraMaster TOS - Unauthenticated Remote Command Execution
- rConfig 3.9.4 - Cross-Site Scripting
- rConfig 3.9.4 - Cross-Site Scripting
- Gitea 1.1.0 - 1.12.5 - Remote Code Execution
- WordPress Chop Slider 3 - Blind SQL Injection
- Netsweeper <=6.4.3 - Python Code Injection
- WordPress wpDiscuz <=7.0.4 - Remote Code Execution
- WordPress PayPal Pro <1.1.65 - SQL Injection
- Artica Web Proxy 4.30 - Authentication Bypass/SQL Injection
- Agentejo Cockpit < 0.11.2 - NoSQL Injection
- WordPress Sexy Contact Form (<= 0.9.7) - Arbitrary File Upload
- EyesOfNetwork 5.1-5.3 - SQL Injection/Remote Code Execution
- Artica Pandora FMS 7.44 - Remote Code Execution
- Apache HTTP Server - Remote Code Execution
- vBulletin SQL Injection
- Klog Server <=2.41 - Unauthenticated Command Injection
- WordPress InfiniteWP <1.9.4.5 - Authorization Bypass
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.