Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
1,413 vulnerabilities · highest score first
- CVE-2010-3639Critical 9.3flash-plugin: security bulletin APSB10-26adobe · flash playerEPSS22%1 exploitPublished Nov 4, 2010
- CVE-2010-3227Critical 9.3Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and…microsoft · windows 7EPSS21%2 exploitsPublished Oct 26, 2010
- CVE-2010-2321Critical 9.3Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file.adobe · indesign cs3EPSS21%2 exploitsPublished Jun 18, 2010
- CVE-2010-0432Medium 4.3Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlier, as used in Opentaps, Neogia, and Entente Oya, allow remote attackers to inject arbitrary web script or HTML via (1) the productStoreId parameter to…apache · ofbizEPSS23%3 exploitsPublished Apr 15, 2010
- CVE-2009-3641Medium 4.3Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.snort · snortEPSS39%2 exploitsPublished Oct 28, 2009
- CVE-2009-0692Critical 10.0dhclient: stack overflow leads to arbitrary code execution as rootisc · dhcpEPSS26%1 exploitPublished Jul 14, 2009
- CVE-2009-0565Critical 9.3Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote…microsoft · officeEPSS41%2 exploitsPublished Jun 10, 2009
- CVE-2008-0116Critical 9.3Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability."microsoft · excelEPSS48%1 exploitPublished Mar 11, 2008
- CVE-2007-2217Critical 9.3Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute arbitrary code via crafted image files that trigger memory corruption, as demonstrated by a certain .tif (TIFF) file.kodak · image viewerEPSS41%1 exploitPublished Oct 9, 2007
- CVE-2007-2216Critical 9.3The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to…microsoft · internet explorerEPSS41%1 exploitPublished Aug 14, 2007
- CVE-2007-0216Critical 9.3wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section length headers, aka "Microsoft Works File Converter Input Validation…microsoft · officeEPSS38%1 exploitPublished Feb 12, 2008
- CVE-2006-6332High 7.5Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via unspecified vectors, related to the encode_ie and giwscan_cb functions.madwifi · madwifiEPSS20%3 exploitsPublished Dec 10, 2006
- CVE-2006-4193High 7.5Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including (1) imskdic.dll (Microsoft IME), (2) chtskdic.dll (Microsoft IME),…microsoft · internet explorerEPSS47%2 exploitsPublished Aug 16, 2006
- CVE-2005-1219High 7.5Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.microsoft · image color managementEPSS50%2 exploitsPublished Jul 12, 2005
- CVE-2003-0816High 7.5Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript,…microsoft · internet explorerEPSS48%2 exploitsPublished Feb 3, 2004
- CVE-2003-0725High 7.5Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code.realnetworks · helix universal serverEPSS49%1 exploitPublished Oct 20, 2003
- CVE-2002-1561Medium 5.0The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference.microsoft · windows 2000EPSS38%4 exploitsPublished Apr 2, 2003
- CVE-2001-0876High 7.5Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.microsoft · windows 98EPSS49%2 exploitsPublished Dec 20, 2001
- CVE-1999-0911Critical 10.0Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.proftpd project · proftpdEPSS38%2 exploitsPublished Aug 27, 1999
- CVE-1999-0368Critical 10.0Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a.proftpd project · proftpdEPSS40%2 exploitsPublished Feb 9, 1999
- CVE-2026-97205Critical 9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module.microsoft · azl3 httpd 2.4.68-1EPSS0.5%1 exploitPublished Oct 14, 2026
- CVE-2025-64155Critical 9.8An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an…fortinet · fortisiemEPSS43%1 exploitPublished Jan 13, 2026
- CVE-2025-11001High 7.87-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability.7-zip · 7-zipEPSS27%1 exploitPublished Nov 19, 2025
- CVE-2025-1097High 8.8ngress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotationEPSS33%1 exploitPublished Mar 25, 2025
- CVE-2024-55661High 8.7Laravel Pulse Allows Remote Code Execution via Unprotected Query Methodlaravel · pulseEPSS30%1 exploitPublished Dec 13, 2024
- CVE-2024-31445High 8.8Cacti provides an operational monitoring and fault management framework.cacti · cactiEPSS26%1 exploitPublished May 14, 2024
- CVE-2024-24824High 8.8Graylog vulnerable to instantiation of arbitrary classes triggered by API requestgraylog · graylogEPSS35%1 exploitPublished Feb 7, 2024
- CVE-2024-24747High 8.8Minio unsafe default: Access keys inherit admin of root user, allowing privilege escalationminio · minioEPSS34%1 exploitPublished Feb 1, 2024
- CVE-2024-0778Critical 9.8UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930.uniview · isc 2500-s firmwareEPSS32%1 exploitPublished Jan 22, 2024
- CVE-2023-6612Critical 9.8It has been rated as critical.totolink · x5000r firmwareEPSS31%1 exploitPublished Dec 8, 2023
- CVE-2023-5147High 8.8UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231.dlink · dar-7000 firmwareEPSS26%1 exploitPublished Sep 25, 2023
- CVE-2023-50252Critical 9.8Prior to version 0.5.1, when handling tag that references an tag, it merges the attributes from the tag to the tag.dompdf · php-svg-libEPSS24%1 exploitPublished Dec 12, 2023
- CVE-2023-4548Medium 5.3A vulnerability classified as critical has been found in SPA-Cart eCommerce CMS 1.9.0.3.spa-cart · ecommerce cmsEPSS32%2 exploitsPublished Aug 26, 2023
- CVE-2023-3852High 7.2It has been declared as critical.openrapid · rapidcmsEPSS25%1 exploitPublished Jul 23, 2023
- CVE-2023-37569High 8.8This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component.esds.co · emagic data center managementEPSS34%2 exploitsPublished Aug 8, 2023
- CVE-2023-3710Critical 9.8Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004.honeywell · pm43 firmwareEPSS49%1 exploitPublished Sep 12, 2023
- CVE-2023-36355Critical 9.9TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm.tp-link · tl-wr940n firmwareEPSS32%2 exploitsPublished Jun 22, 2023
- CVE-2023-32235High 7.5Path Traversal in Ghostghost · ghostEPSS39%1 exploitPublished May 5, 2023
- CVE-2023-30261Critical 9.8Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request.openwb · openwbEPSS32%1 exploitPublished Jun 26, 2023
- CVE-2023-26802Critical 9.8An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request.dcnglobal · dcbi-netlog-lab firmwareEPSS49%1 exploitPublished Mar 26, 2023
- CVE-2023-2523Critical 9.8It has been rated as critical.e-office · e-officeEPSS33%1 exploitPublished May 4, 2023
- CVE-2023-0562Critical 9.8It has been rated as critical.phpgurukul · bank locker management systemEPSS44%1 exploitPublished Jan 28, 2023
- CVE-2022-48194High 8.8TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the signature check is inadequate.tp-link · tl-wr902ac firmwareEPSS33%1 exploitPublished Dec 30, 2022
- CVE-2022-45701High 8.8Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.commscope · arris tg2482a firmwareEPSS43%2 exploitsPublished Feb 17, 2023
- CVE-2022-45025Critical 9.8Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF file import function.markdown preview enhanced project · markdown preview enhancedEPSS35%1 exploitPublished Dec 6, 2022
- CVE-2022-4257Critical 9.8It has been rated as critical.cdatatec · c-data web management systemEPSS44%1 exploitPublished Dec 1, 2022
- CVE-2022-38352Critical 9.8ThinkPHP deserialization vulnerabilitythinkphp · thinkphpEPSS21%1 exploitPublished Sep 16, 2022
- CVE-2022-37190High 8.8CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE).cuppacms · cuppacmsEPSS46%2 exploitsPublished Sep 13, 2022
- CVE-2022-33107Critical 9.8Deserialization of Untrusted Data in topthink/frameworkthinkphp · thinkphpEPSS24%1 exploitPublished Jun 30, 2022
- CVE-2022-31125Critical 9.8A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to bypass authentication and access admin functionality by sending a specially crafted HTTP request.roxy-wi · roxy-wiEPSS20%1 exploitPublished Jul 6, 2022
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2010-3639 | flash-plugin: security bulletin APSB10-26 adobe · flash player | Critical 9.3 | 22% | 1 exploit | |
| CVE-2010-3227 | Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and… microsoft · windows 7 | Critical 9.3 | 21% | 2 exploits | |
| CVE-2010-2321 | Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file. adobe · indesign cs3 | Critical 9.3 | 21% | 2 exploits | |
| CVE-2010-0432 | Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlier, as used in Opentaps, Neogia, and Entente Oya, allow remote attackers to inject arbitrary web script or HTML via (1) the productStoreId parameter to… apache · ofbiz | Medium 4.3 | 23% | 3 exploits | |
| CVE-2009-3641 | Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol. snort · snort | Medium 4.3 | 39% | 2 exploits | |
| CVE-2009-0692 | dhclient: stack overflow leads to arbitrary code execution as root isc · dhcp | Critical 10.0 | 26% | 1 exploit | |
| CVE-2009-0565 | Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote… microsoft · office | Critical 9.3 | 41% | 2 exploits | |
| CVE-2008-0116 | Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability." microsoft · excel | Critical 9.3 | 48% | 1 exploit | |
| CVE-2007-2217 | Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute arbitrary code via crafted image files that trigger memory corruption, as demonstrated by a certain .tif (TIFF) file. kodak · image viewer | Critical 9.3 | 41% | 1 exploit | |
| CVE-2007-2216 | The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to… microsoft · internet explorer | Critical 9.3 | 41% | 1 exploit | |
| CVE-2007-0216 | wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section length headers, aka "Microsoft Works File Converter Input Validation… microsoft · office | Critical 9.3 | 38% | 1 exploit | |
| CVE-2006-6332 | Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via unspecified vectors, related to the encode_ie and giwscan_cb functions. madwifi · madwifi | High 7.5 | 20% | 3 exploits | |
| CVE-2006-4193 | Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including (1) imskdic.dll (Microsoft IME), (2) chtskdic.dll (Microsoft IME),… microsoft · internet explorer | High 7.5 | 47% | 2 exploits | |
| CVE-2005-1219 | Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags. microsoft · image color management | High 7.5 | 50% | 2 exploits | |
| CVE-2003-0816 | Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript,… microsoft · internet explorer | High 7.5 | 48% | 2 exploits | |
| CVE-2003-0725 | Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code. realnetworks · helix universal server | High 7.5 | 49% | 1 exploit | |
| CVE-2002-1561 | The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference. microsoft · windows 2000 | Medium 5.0 | 38% | 4 exploits | |
| CVE-2001-0876 | Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL. microsoft · windows 98 | High 7.5 | 49% | 2 exploits | |
| CVE-1999-0911 | Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories. proftpd project · proftpd | Critical 10.0 | 38% | 2 exploits | |
| CVE-1999-0368 | Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. proftpd project · proftpd | Critical 10.0 | 40% | 2 exploits | |
| CVE-2026-97205 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. microsoft · azl3 httpd 2.4.68-1 | Critical 9.2 | 0.5% | 1 exploit | |
| CVE-2025-64155 | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an… fortinet · fortisiem | Critical 9.8 | 43% | 1 exploit | |
| CVE-2025-11001 | 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. 7-zip · 7-zip | High 7.8 | 27% | 1 exploit | |
| CVE-2025-1097 | ngress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation | High 8.8 | 33% | 1 exploit | |
| CVE-2024-55661 | Laravel Pulse Allows Remote Code Execution via Unprotected Query Method laravel · pulse | High 8.7 | 30% | 1 exploit | |
| CVE-2024-31445 | Cacti provides an operational monitoring and fault management framework. cacti · cacti | High 8.8 | 26% | 1 exploit | |
| CVE-2024-24824 | Graylog vulnerable to instantiation of arbitrary classes triggered by API request graylog · graylog | High 8.8 | 35% | 1 exploit | |
| CVE-2024-24747 | Minio unsafe default: Access keys inherit admin of root user, allowing privilege escalation minio · minio | High 8.8 | 34% | 1 exploit | |
| CVE-2024-0778 | UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930. uniview · isc 2500-s firmware | Critical 9.8 | 32% | 1 exploit | |
| CVE-2023-6612 | It has been rated as critical. totolink · x5000r firmware | Critical 9.8 | 31% | 1 exploit | |
| CVE-2023-5147 | UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. dlink · dar-7000 firmware | High 8.8 | 26% | 1 exploit | |
| CVE-2023-50252 | Prior to version 0.5.1, when handling tag that references an tag, it merges the attributes from the tag to the tag. dompdf · php-svg-lib | Critical 9.8 | 24% | 1 exploit | |
| CVE-2023-4548 | A vulnerability classified as critical has been found in SPA-Cart eCommerce CMS 1.9.0.3. spa-cart · ecommerce cms | Medium 5.3 | 32% | 2 exploits | |
| CVE-2023-3852 | It has been declared as critical. openrapid · rapidcms | High 7.2 | 25% | 1 exploit | |
| CVE-2023-37569 | This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. esds.co · emagic data center management | High 8.8 | 34% | 2 exploits | |
| CVE-2023-3710 | Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. honeywell · pm43 firmware | Critical 9.8 | 49% | 1 exploit | |
| CVE-2023-36355 | TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. tp-link · tl-wr940n firmware | Critical 9.9 | 32% | 2 exploits | |
| CVE-2023-32235 | Path Traversal in Ghost ghost · ghost | High 7.5 | 39% | 1 exploit | |
| CVE-2023-30261 | Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request. openwb · openwb | Critical 9.8 | 32% | 1 exploit | |
| CVE-2023-26802 | An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request. dcnglobal · dcbi-netlog-lab firmware | Critical 9.8 | 49% | 1 exploit | |
| CVE-2023-2523 | It has been rated as critical. e-office · e-office | Critical 9.8 | 33% | 1 exploit | |
| CVE-2023-0562 | It has been rated as critical. phpgurukul · bank locker management system | Critical 9.8 | 44% | 1 exploit | |
| CVE-2022-48194 | TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the signature check is inadequate. tp-link · tl-wr902ac firmware | High 8.8 | 33% | 1 exploit | |
| CVE-2022-45701 | Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature. commscope · arris tg2482a firmware | High 8.8 | 43% | 2 exploits | |
| CVE-2022-45025 | Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF file import function. markdown preview enhanced project · markdown preview enhanced | Critical 9.8 | 35% | 1 exploit | |
| CVE-2022-4257 | It has been rated as critical. cdatatec · c-data web management system | Critical 9.8 | 44% | 1 exploit | |
| CVE-2022-38352 | ThinkPHP deserialization vulnerability thinkphp · thinkphp | Critical 9.8 | 21% | 1 exploit | |
| CVE-2022-37190 | CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE). cuppacms · cuppacms | High 8.8 | 46% | 2 exploits | |
| CVE-2022-33107 | Deserialization of Untrusted Data in topthink/framework thinkphp · thinkphp | Critical 9.8 | 24% | 1 exploit | |
| CVE-2022-31125 | A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to bypass authentication and access admin functionality by sending a specially crafted HTTP request. roxy-wi · roxy-wi | Critical 9.8 | 20% | 1 exploit |
Showing 551–600 of 1,413
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.