Skip to content
BackEsc
Sign in

No weakness recorded · 2020

No weakness recorded: 2020

3,661 CVEs · 18 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE whose record names no weakness (CWE), published in 2020. The named ones are the most at risk.

exploited in the wild
18
check available
20
likely to be exploited
112

Every one of the 3,661 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Oracle Weblogic Server - Remote Command ExecutionCVE-2020-14882Oracle Corporation · CVSS 9.8 · 100% likelycovered by CyberSIXT

    Oracle

  2. Netlogon Elevation of Privilege VulnerabilityCVE-2020-1472Microsoft · CVSS 5.5 · 99% likely

    MicrosoftBerserk BearFIN7

  3. Ghostcat - Apache Tomcat - AJP File Read/Inclusion VulnerabilityCVE-2020-1938Apache · CVSS 9.8 · 99% likely

    Apache

  4. Oracle WebLogic Server - Remote Command ExecutionCVE-2020-14750Oracle Corporation · CVSS 9.8 · 99% likely

    Oracle

  5. Oracle Fusion Middleware WebLogic Server Administration Console - Remote Code ExecutionCVE-2020-14883Oracle Corporation · CVSS 7.2 · 98% likely

    Oracle

  6. D-Link DCS-2530L/DCS-2670L - Administrator Password DisclosureCVE-2020-25078D-Link · CVSS 7.5 · 98% likely

    D-Link

  7. An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a r…CVE-2020-11651SaltStack · CVSS 9.8 · 97% likely

    SaltStack

  8. UnRaid <=6.80 - Remote Code ExecutionCVE-2020-5847Unraid · CVSS 9.8 · 96% likely

    Unraid

  9. A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '…CVE-2020-1147Microsoft · CVSS 7.8 · 96% likely

    Microsoft

  10. Oracle WebLogic Server - Remote Code ExecutionCVE-2020-2883Oracle Corporation · CVSS 9.8 · 95% likely

    Oracle

  11. Oracle WebLogic Server - Remote Code Execution (Insecure Deserialization)CVE-2020-14644Oracle Corporation · CVSS 9.8 · 95% likely

    Oracle

  12. Oracle WebLogic Server - Remote Code ExecutionCVE-2020-2551Oracle Corporation · CVSS 9.8 · 93% likelycovered by CyberSIXT

    Oracle

  13. Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succ…CVE-2020-28949PEAR · CVSS 7.8 · 85% likely

    PEAR

  14. NETGEAR ProSAFE Plus - Unauthenticated Remote Code ExecutionCVE-2020-26919NETGEAR · CVSS 9.8 · 57% likely

    NETGEAR

  15. Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected inst…CVE-2020-8599Trend Micro · CVSS 9.8 · 12% likely

    Trend Micro

  16. A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected insta…CVE-2020-8467Trend Micro · CVSS 8.8 · 11% likely

    Trend Micro

  17. An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15…CVE-2020-9934Apple · CVSS 5.5 · 3.2% likely

    Apple

  18. A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable t…CVE-2020-24557Trend Micro · CVSS 7.8 · 2.7% likely

    Trend Micro

  19. LinuxKI Toolset <= 6.01 - Remote Command ExecutionCVE-2020-7209LinuxKI · 99% likely
  20. Gogs 0.5.5 - 0.12.2 - Remote Code ExecutionCVE-2020-1586787% likely
  21. HPE Smart Update Manager < 8.5.6 - Remote Unauthorized AccessCVE-2020-7136Hewlett Packard Enterprise · 81% likely

    Hewlett Packard Enterprise

  22. Cisco Unified IP Conference Station 7937G - Denial-of-ServiceCVE-2020-1613980% likely
  23. Micro Focus Operations Bridge Manager <=2020.05 - Remote Code ExecutionCVE-2020-11853Micro Focus · CVSS 8.8 · 77% likely

    Micro Focus

  24. Atlassian Jira Server/Data Center <8.5.8/8.6.0 - 8.11.1 - Information DisclosureCVE-2020-14179Atlassian · 76% likely

    Atlassian

  25. Apache APISIX - Insufficiently Protected CredentialsCVE-2020-13945Apache Software Foundation · 74% likely

    Apache

  26. PHP-Fusion 9.03.50 - Remote Code ExecutionCVE-2020-2494967% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in