Skip to content
OpenAdvisories

Archive

August 2020

Vulnerabilities first published in this month (UTC), newest first.

10 results · Clear filters · Feed

  • High 8.8
    CVE-2020-24363 Exploited Public exploit EPSS 22%

    TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDD…

    KEV Sep 2, 2025
  • High 8.6
    CVE-2020-3566 Exploited

    Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

    A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The vulnerability is due to insufficient queue manageme…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-9715 Exploited Public exploit EPSS 33%

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    KEV Apr 13, 2026
  • Medium 5.5
    CVE-2020-1472 Exploited · Ransomware Public exploit EPSS 99%

    Netlogon Elevation of Privilege Vulnerability

    An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-1464 Exploited EPSS 39%

    Windows Spoofing Vulnerability

    A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass secu…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-1380 Exploited EPSS 24%

    Scripting Engine Memory Corruption Vulnerability

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current …

    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-3433 Exploited · Ransomware Public exploit EPSS 10%

    Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

    A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to ha…

    KEV Oct 24, 2022
  • Medium 6.5
    CVE-2019-5591 Exploited · Ransomware Public exploit EPSS 19%

    A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept …

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-17463 Exploited EPSS 90%

    FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

    KEV Dec 10, 2021
  • Critical 9.8
    CVE-2020-17496 Exploited Public exploit EPSS 87%

    vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabb…

    KEV Nov 3, 2021