Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 20, 2026
729 vulnerabilities · highest score first
- CVE-2019-1913Critical 9.8Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating…cisco · sf-220-24 firmwareEPSS26%1 exploitPublished Aug 7, 2019
- CVE-2019-18370Critical 9.8An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable.mi · millet router 3g firmwareEPSS40%1 exploitPublished Oct 23, 2019
- CVE-2019-16124Critical 9.8In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code.youphptube · youphptubeEPSS28%1 exploitPublished Sep 8, 2019
- CVE-2018-6580Critical 9.8Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla!janguo · jimtawlEPSS36%1 exploitPublished Feb 2, 2018
- CVE-2018-19986Critical 9.8In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices.d-link · dir-818lw firmwareEPSS42%1 exploitPublished May 13, 2019
- CVE-2017-12786Critical 9.8Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are…noviflow · noviwareEPSS25%1 exploitPublished Aug 22, 2017
- CVE-2015-1730Critical 9.3Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS29%1 exploitPublished Jun 9, 2015
- CVE-2015-0097Critical 9.3Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Word Local Zone Remote Code Execution Vulnerability."microsoft · excelEPSS41%1 exploitPublished Mar 11, 2015
- CVE-2014-6363Critical 9.3vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption…microsoft · internet explorerEPSS28%1 exploitPublished Dec 10, 2014
- CVE-2014-2782Critical 9.3Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773,…microsoft · internet explorerEPSS22%1 exploitPublished Jun 19, 2014
- CVE-2014-2776Critical 9.3Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1769, CVE-2014-1782,…microsoft · internet explorerEPSS22%1 exploitPublished Jun 11, 2014
- CVE-2014-1806Critical 10.0The .NET Remoting implementation in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly restrict memory access, which allows remote attackers to execute arbitrary code via vectors involving malformed objects, aka "TypeFilterLevel…microsoft · .net frameworkEPSS40%1 exploitPublished May 14, 2014
- CVE-2014-1764Critical 10.0Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism by leveraging "object confusion" in a broker process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.microsoft · internet explorerEPSS38%1 exploitPublished Apr 27, 2014
- CVE-2013-3162Critical 9.3Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3115.microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3161Critical 9.3Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3143.microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3153Critical 9.3Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3148.microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3150Critical 9.3Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3145.microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3149Critical 9.3Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3148Critical 9.3Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3153.microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3147Critical 9.3Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3145Critical 9.3Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3150.microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3115Critical 9.3Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3162.microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2012-5965Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)portable sdk for upnp project · portable sdk for upnpEPSS37%1 exploitPublished Jan 29, 2013
- CVE-2012-5964Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)portable sdk for upnp project · portable sdk for upnpEPSS37%1 exploitPublished Jan 29, 2013
- CVE-2012-5963Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)portable sdk for upnp project · portable sdk for upnpEPSS37%1 exploitPublished Jan 29, 2013
- CVE-2012-5962Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)portable sdk for upnp project · portable sdk for upnpEPSS37%1 exploitPublished Jan 29, 2013
- CVE-2012-5961Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)libupnp project · libupnpEPSS37%1 exploitPublished Jan 29, 2013
- CVE-2012-0163Critical 9.3Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a…microsoft · .net frameworkEPSS38%1 exploitPublished Apr 10, 2012
- CVE-2011-1999Critical 9.3Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute arbitrary code via vectors involving a "dereferenced memory address," aka "Select Element Remote Code Execution Vulnerability."microsoft · internet explorerEPSS27%1 exploitPublished Oct 11, 2011
- CVE-2010-3967Critical 9.3Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Movie Maker (MSWMM) file, aka "Insecure Library Loading…microsoft · windows movie makerEPSS20%1 exploitPublished Dec 16, 2010
- CVE-2010-3749Critical 9.3The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this…realnetworks · realplayerEPSS26%1 exploitPublished Oct 18, 2010
- CVE-2010-1900Critical 9.3Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle…microsoft · officeEPSS40%1 exploitPublished Aug 11, 2010
- CVE-2010-0231Critical 10.0The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote…microsoft · windows 2000EPSS41%1 exploitPublished Feb 10, 2010
- CVE-2009-1868Critical 9.3flash-plugin: multiple code execution flaws (APSB09-10)adobe · airEPSS21%1 exploitPublished Jul 30, 2009
- CVE-2009-0553Critical 9.3Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in…microsoft · internet explorerEPSS41%1 exploitPublished Apr 15, 2009
- CVE-2008-0115Critical 9.3Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability."microsoft · excelEPSS39%1 exploitPublished Mar 11, 2008
- CVE-2008-0114Critical 9.3Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption.microsoft · excelEPSS39%1 exploitPublished Mar 11, 2008
- CVE-2007-3624Critical 10.0Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrary code via a long string in the group parameter to /msgserver/html/group.sap · sap message serverEPSS37%1 exploitPublished Jul 9, 2007
- CVE-2007-1749Critical 9.3Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid buffer size, which triggers a…microsoft · internet explorerEPSS42%1 exploitPublished Aug 14, 2007
- CVE-2006-2383Critical 9.3Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data" related to "parameter validation" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet…microsoft · internet explorerEPSS40%1 exploitPublished Jun 13, 2006
- CVE-2005-0582Critical 10.0Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request.broadcom · license softwareEPSS37%1 exploitPublished May 2, 2005
- CVE-2004-0386Critical 10.0Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.mplayer · mplayerEPSS27%1 exploitPublished May 4, 2004
- CVE-2026-106173Critical 9.4A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.fortinet · fortisiemEPSS0.4%1 exploitPublished Oct 13, 2026
- CVE-2025-34035Critical 10.0An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier.engeniustech · epg5000 firmwareEPSS23%1 exploitPublished Jun 23, 2025
- CVE-2025-28137Critical 9.8The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.totolink · a810r firmwareEPSS34%1 exploitPublished Apr 15, 2025
- CVE-2023-36210Critical 9.8MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter.motocms · motocmsEPSS31%1 exploitPublished Aug 1, 2023
- CVE-2023-25279Critical 9.8OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload.dlink · dir-820l firmwareEPSS31%1 exploitPublished Mar 13, 2023
- CVE-2022-37134Critical 9.8D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi.dlink · dir-816 firmwareEPSS22%1 exploitPublished Aug 22, 2022
- CVE-2022-37128Critical 9.8In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end.dlink · dir-816 firmwareEPSS22%1 exploitPublished Aug 31, 2022
- CVE-2022-34974Critical 9.8D-Link DIR810LA1_FW102B22 was discovered to contain a command injection vulnerability via the Ping_addr function.dlink · dir-810l firmwareEPSS23%1 exploitPublished Aug 3, 2022
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-1913 | Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating… cisco · sf-220-24 firmware | Critical 9.8 | 26% | 1 exploit | |
| CVE-2019-18370 | An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. mi · millet router 3g firmware | Critical 9.8 | 40% | 1 exploit | |
| CVE-2019-16124 | In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code. youphptube · youphptube | Critical 9.8 | 28% | 1 exploit | |
| CVE-2018-6580 | Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! janguo · jimtawl | Critical 9.8 | 36% | 1 exploit | |
| CVE-2018-19986 | In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices. d-link · dir-818lw firmware | Critical 9.8 | 42% | 1 exploit | |
| CVE-2017-12786 | Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are… noviflow · noviware | Critical 9.8 | 25% | 1 exploit | |
| CVE-2015-1730 | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 29% | 1 exploit | |
| CVE-2015-0097 | Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Word Local Zone Remote Code Execution Vulnerability." microsoft · excel | Critical 9.3 | 41% | 1 exploit | |
| CVE-2014-6363 | vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption… microsoft · internet explorer | Critical 9.3 | 28% | 1 exploit | |
| CVE-2014-2782 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773,… microsoft · internet explorer | Critical 9.3 | 22% | 1 exploit | |
| CVE-2014-2776 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1769, CVE-2014-1782,… microsoft · internet explorer | Critical 9.3 | 22% | 1 exploit | |
| CVE-2014-1806 | The .NET Remoting implementation in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly restrict memory access, which allows remote attackers to execute arbitrary code via vectors involving malformed objects, aka "TypeFilterLevel… microsoft · .net framework | Critical 10.0 | 40% | 1 exploit | |
| CVE-2014-1764 | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism by leveraging "object confusion" in a broker process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014. microsoft · internet explorer | Critical 10.0 | 38% | 1 exploit | |
| CVE-2013-3162 | Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3115. microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3161 | Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3143. microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3153 | Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3148. microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3150 | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3145. microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3149 | Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3148 | Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3153. microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3147 | Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3145 | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3150. microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3115 | Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3162. microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2012-5965 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) portable sdk for upnp project · portable sdk for upnp | Critical 10.0 | 37% | 1 exploit | |
| CVE-2012-5964 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) portable sdk for upnp project · portable sdk for upnp | Critical 10.0 | 37% | 1 exploit | |
| CVE-2012-5963 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) portable sdk for upnp project · portable sdk for upnp | Critical 10.0 | 37% | 1 exploit | |
| CVE-2012-5962 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) portable sdk for upnp project · portable sdk for upnp | Critical 10.0 | 37% | 1 exploit | |
| CVE-2012-5961 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) libupnp project · libupnp | Critical 10.0 | 37% | 1 exploit | |
| CVE-2012-0163 | Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a… microsoft · .net framework | Critical 9.3 | 38% | 1 exploit | |
| CVE-2011-1999 | Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute arbitrary code via vectors involving a "dereferenced memory address," aka "Select Element Remote Code Execution Vulnerability." microsoft · internet explorer | Critical 9.3 | 27% | 1 exploit | |
| CVE-2010-3967 | Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Movie Maker (MSWMM) file, aka "Insecure Library Loading… microsoft · windows movie maker | Critical 9.3 | 20% | 1 exploit | |
| CVE-2010-3749 | The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this… realnetworks · realplayer | Critical 9.3 | 26% | 1 exploit | |
| CVE-2010-1900 | Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle… microsoft · office | Critical 9.3 | 40% | 1 exploit | |
| CVE-2010-0231 | The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote… microsoft · windows 2000 | Critical 10.0 | 41% | 1 exploit | |
| CVE-2009-1868 | flash-plugin: multiple code execution flaws (APSB09-10) adobe · air | Critical 9.3 | 21% | 1 exploit | |
| CVE-2009-0553 | Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in… microsoft · internet explorer | Critical 9.3 | 41% | 1 exploit | |
| CVE-2008-0115 | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability." microsoft · excel | Critical 9.3 | 39% | 1 exploit | |
| CVE-2008-0114 | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption. microsoft · excel | Critical 9.3 | 39% | 1 exploit | |
| CVE-2007-3624 | Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrary code via a long string in the group parameter to /msgserver/html/group. sap · sap message server | Critical 10.0 | 37% | 1 exploit | |
| CVE-2007-1749 | Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid buffer size, which triggers a… microsoft · internet explorer | Critical 9.3 | 42% | 1 exploit | |
| CVE-2006-2383 | Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data" related to "parameter validation" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet… microsoft · internet explorer | Critical 9.3 | 40% | 1 exploit | |
| CVE-2005-0582 | Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request. broadcom · license software | Critical 10.0 | 37% | 1 exploit | |
| CVE-2004-0386 | Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header. mplayer · mplayer | Critical 10.0 | 27% | 1 exploit | |
| CVE-2026-106173 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets. fortinet · fortisiem | Critical 9.4 | 0.4% | 1 exploit | |
| CVE-2025-34035 | An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. engeniustech · epg5000 firmware | Critical 10.0 | 23% | 1 exploit | |
| CVE-2025-28137 | The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter. totolink · a810r firmware | Critical 9.8 | 34% | 1 exploit | |
| CVE-2023-36210 | MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter. motocms · motocms | Critical 9.8 | 31% | 1 exploit | |
| CVE-2023-25279 | OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload. dlink · dir-820l firmware | Critical 9.8 | 31% | 1 exploit | |
| CVE-2022-37134 | D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. dlink · dir-816 firmware | Critical 9.8 | 22% | 1 exploit | |
| CVE-2022-37128 | In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end. dlink · dir-816 firmware | Critical 9.8 | 22% | 1 exploit | |
| CVE-2022-34974 | D-Link DIR810LA1_FW102B22 was discovered to contain a command injection vulnerability via the Ping_addr function. dlink · dir-810l firmware | Critical 9.8 | 23% | 1 exploit |
Showing 501–550 of 729
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.