Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 20, 2026
729 vulnerabilities · highest score first
- CVE-2022-32417Critical 9.8PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php.pbootcms · pbootcmsEPSS35%1 exploitPublished Jul 14, 2022
- CVE-2022-31446Critical 9.8Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.tendacn · ac18 firmwareEPSS35%1 exploitPublished Jun 14, 2022
- CVE-2022-28956Critical 9.8An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload.dlink · dir-816l firmwareEPSS23%1 exploitPublished May 18, 2022
- CVE-2021-43118Critical 9.8A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor 300B 1.5.1.3 via a crafted HTTP message containing malformed QUERY STRING in mainfunction.cgi, which could let a remote malicious user execute arbitrary…draytek · vigor2960 firmwareEPSS35%1 exploitPublished Mar 29, 2022
- CVE-2021-39378Critical 9.8A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database.os4ed · opensisEPSS23%1 exploitPublished Sep 1, 2021
- CVE-2021-27114Critical 9.8Within the handler function of the /goform/addassignment route, a very long text entry for the"'s_ip" and "s_mac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address.dlink · dir-816 firmwareEPSS25%1 exploitPublished Apr 14, 2021
- CVE-2020-10549Critical 9.8rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection.rconfig · rconfigEPSS32%1 exploitPublished Jun 4, 2020
- CVE-2019-9203Critical 9.8Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.nagios · incident managerEPSS20%1 exploitPublished Mar 28, 2019
- CVE-2019-8196Critical 9.8Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability.adobe · acrobat dcEPSS23%1 exploitPublished Oct 17, 2019
- CVE-2019-8195Critical 9.8Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability.adobe · acrobat dcEPSS23%1 exploitPublished Oct 17, 2019
- CVE-2019-8048Critical 9.8Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a buffer error vulnerability.adobe · acrobat dcEPSS35%1 exploitPublished Aug 20, 2019
- CVE-2019-13086Critical 9.8core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter.cszcms · csz cmsEPSS32%1 exploitPublished Jun 30, 2019
- CVE-2018-19864Critical 9.8NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability to read camera feeds or reconfigure the device.nuuo · nvrmini2 firmwareEPSS25%1 exploitPublished Dec 5, 2018
- CVE-2017-8225Critical 9.8On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked.wificam · wireless ip camera \(p2p\) firmwareEPSS35%1 exploitPublished Apr 25, 2017
- CVE-2017-7588Critical 9.8On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt.brother · ads firmwareEPSS34%1 exploitPublished Apr 12, 2017
- CVE-2017-3623Critical 10.0For supported versions that are affected see note.oracle · solarisEPSS23%1 exploitPublished Apr 24, 2017
- CVE-2017-12787Critical 9.8A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are…noviflow · noviwareEPSS25%1 exploitPublished Aug 22, 2017
- CVE-2016-9682Critical 9.8The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface.dell · sonicwall secure remote access serverEPSS23%1 exploitPublished Feb 22, 2017
- CVE-2016-5649Critical 9.8A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to access this page without any authentication.netgear · dgn2200 firmwareEPSS24%1 exploitPublished Jul 24, 2018
- CVE-2015-8617Critical 9.8php: Format string vulnerability in class name error messagephp · phpEPSS23%1 exploitPublished Dec 12, 2015
- CVE-2015-2510Critical 9.3Buffer overflow in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute…microsoft · lyncEPSS36%1 exploitPublished Sep 8, 2015
- CVE-2015-2444Critical 9.3Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2442.microsoft · internet explorerEPSS34%1 exploitPublished Aug 14, 2015
- CVE-2015-0050Critical 9.3Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-8967 and CVE-2015-0044.microsoft · internet explorerEPSS33%1 exploitPublished Feb 11, 2015
- CVE-2014-8387Critical 9.0cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell metacharacters in the pinghost parameter to ping.cgi.advantech · eki-6340EPSS31%1 exploitPublished Nov 20, 2014
- CVE-2014-4138Critical 9.3Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4130 and CVE-2014-4132.microsoft · internet explorerEPSS32%1 exploitPublished Oct 15, 2014
- CVE-2014-1799Critical 9.3Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282,…microsoft · internet explorerEPSS33%1 exploitPublished Jun 11, 2014
- CVE-2013-7052Critical 9.8D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi scriptdlink · dir-100 firmwareEPSS25%1 exploitPublished Feb 4, 2020
- CVE-2013-3164Critical 9.3Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS24%1 exploitPublished Jul 10, 2013
- CVE-2013-3152Critical 9.3Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3146.microsoft · internet explorerEPSS24%1 exploitPublished Jul 10, 2013
- CVE-2013-3146Critical 9.3Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3152.microsoft · internet explorerEPSS24%1 exploitPublished Jul 10, 2013
- CVE-2012-5960Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)portable sdk for upnp project · portable sdk for upnpEPSS33%1 exploitPublished Jan 29, 2013
- CVE-2012-4353Critical 9.3Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the…sielcosistemi · winlog liteEPSS25%1 exploitPublished Aug 19, 2012
- CVE-2012-2052Critical 9.3Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a long Collada asset element in a DAE file, as demonstrated by the cameraYFov value in the…adobe · photoshop cs5EPSS23%1 exploitPublished Jun 19, 2014
- CVE-2011-2013Critical 9.8Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka "Reference…microsoft · windows 7EPSS32%1 exploitPublished Nov 8, 2011
- CVE-2010-0476Critical 10.0The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted SMB…microsoft · windows server 2003EPSS34%1 exploitPublished Apr 14, 2010
- CVE-2010-0027Critical 9.3The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary…microsoft · internet explorerEPSS34%1 exploitPublished Jan 22, 2010
- CVE-2010-0017Critical 9.3Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold…microsoft · windows 7EPSS31%1 exploitPublished Feb 10, 2010
- CVE-2008-0117Critical 9.3Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability."microsoft · excelEPSS33%1 exploitPublished Mar 11, 2008
- CVE-2008-0112Critical 9.3Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability."microsoft · excelEPSS32%1 exploitPublished Mar 11, 2008
- CVE-2007-2221Critical 9.3Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; or 7 on Windows Vista allows remote…microsoft · internet explorerEPSS35%1 exploitPublished May 8, 2007
- CVE-2007-1658Critical 9.3Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local file or (2) UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as…microsoft · windows vistaEPSS36%1 exploitPublished Mar 24, 2007
- CVE-2005-3524Critical 10.0Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a long directory name, then executing the XPWD command.linux-ftpd-ssl · linux-ftpd-sslEPSS21%1 exploitPublished Nov 7, 2005
- CVE-2005-3277Critical 10.0The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("" or single backquote) in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different…hp · hp-uxEPSS22%1 exploitPublished Oct 21, 2005
- CVE-2004-2289Critical 10.0Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file.microsoft · windows xpEPSS23%1 exploitPublished Dec 31, 2004
- CVE-2002-0702Critical 10.0Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.isc · dhcpdEPSS31%1 exploitPublished Jul 26, 2002
- CVE-2002-0033Critical 10.0Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.sun · solarisEPSS23%1 exploitPublished May 29, 2002
- CVE-1999-0920Critical 10.0Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.university of washington · imapEPSS32%1 exploitPublished May 26, 1999
- CVE-2024-7332Critical 9.3It has been classified as critical.totolink · cp450 firmwareEPSS21%1 exploitPublished Jul 31, 2024
- CVE-2022-47071Critical 9.8In NVS365 V01, the background network test function can trigger command execution.nvs365 · nvs-365-v01 firmwareEPSS26%1 exploitPublished Feb 6, 2023
- CVE-2022-40881Critical 9.8SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.phpcontec · solarview compact firmwareEPSS30%1 exploitPublished Nov 17, 2022
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-32417 | PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php. pbootcms · pbootcms | Critical 9.8 | 35% | 1 exploit | |
| CVE-2022-31446 | Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac. tendacn · ac18 firmware | Critical 9.8 | 35% | 1 exploit | |
| CVE-2022-28956 | An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload. dlink · dir-816l firmware | Critical 9.8 | 23% | 1 exploit | |
| CVE-2021-43118 | A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor 300B 1.5.1.3 via a crafted HTTP message containing malformed QUERY STRING in mainfunction.cgi, which could let a remote malicious user execute arbitrary… draytek · vigor2960 firmware | Critical 9.8 | 35% | 1 exploit | |
| CVE-2021-39378 | A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database. os4ed · opensis | Critical 9.8 | 23% | 1 exploit | |
| CVE-2021-27114 | Within the handler function of the /goform/addassignment route, a very long text entry for the"'s_ip" and "s_mac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address. dlink · dir-816 firmware | Critical 9.8 | 25% | 1 exploit | |
| CVE-2020-10549 | rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection. rconfig · rconfig | Critical 9.8 | 32% | 1 exploit | |
| CVE-2019-9203 | Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API. nagios · incident manager | Critical 9.8 | 20% | 1 exploit | |
| CVE-2019-8196 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. adobe · acrobat dc | Critical 9.8 | 23% | 1 exploit | |
| CVE-2019-8195 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. adobe · acrobat dc | Critical 9.8 | 23% | 1 exploit | |
| CVE-2019-8048 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a buffer error vulnerability. adobe · acrobat dc | Critical 9.8 | 35% | 1 exploit | |
| CVE-2019-13086 | core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter. cszcms · csz cms | Critical 9.8 | 32% | 1 exploit | |
| CVE-2018-19864 | NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability to read camera feeds or reconfigure the device. nuuo · nvrmini2 firmware | Critical 9.8 | 25% | 1 exploit | |
| CVE-2017-8225 | On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. wificam · wireless ip camera \(p2p\) firmware | Critical 9.8 | 35% | 1 exploit | |
| CVE-2017-7588 | On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt. brother · ads firmware | Critical 9.8 | 34% | 1 exploit | |
| CVE-2017-3623 | For supported versions that are affected see note. oracle · solaris | Critical 10.0 | 23% | 1 exploit | |
| CVE-2017-12787 | A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are… noviflow · noviware | Critical 9.8 | 25% | 1 exploit | |
| CVE-2016-9682 | The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. dell · sonicwall secure remote access server | Critical 9.8 | 23% | 1 exploit | |
| CVE-2016-5649 | A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to access this page without any authentication. netgear · dgn2200 firmware | Critical 9.8 | 24% | 1 exploit | |
| CVE-2015-8617 | php: Format string vulnerability in class name error message php · php | Critical 9.8 | 23% | 1 exploit | |
| CVE-2015-2510 | Buffer overflow in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute… microsoft · lync | Critical 9.3 | 36% | 1 exploit | |
| CVE-2015-2444 | Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2442. microsoft · internet explorer | Critical 9.3 | 34% | 1 exploit | |
| CVE-2015-0050 | Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-8967 and CVE-2015-0044. microsoft · internet explorer | Critical 9.3 | 33% | 1 exploit | |
| CVE-2014-8387 | cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell metacharacters in the pinghost parameter to ping.cgi. advantech · eki-6340 | Critical 9.0 | 31% | 1 exploit | |
| CVE-2014-4138 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4130 and CVE-2014-4132. microsoft · internet explorer | Critical 9.3 | 32% | 1 exploit | |
| CVE-2014-1799 | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282,… microsoft · internet explorer | Critical 9.3 | 33% | 1 exploit | |
| CVE-2013-7052 | D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script dlink · dir-100 firmware | Critical 9.8 | 25% | 1 exploit | |
| CVE-2013-3164 | Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 24% | 1 exploit | |
| CVE-2013-3152 | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3146. microsoft · internet explorer | Critical 9.3 | 24% | 1 exploit | |
| CVE-2013-3146 | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3152. microsoft · internet explorer | Critical 9.3 | 24% | 1 exploit | |
| CVE-2012-5960 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) portable sdk for upnp project · portable sdk for upnp | Critical 10.0 | 33% | 1 exploit | |
| CVE-2012-4353 | Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the… sielcosistemi · winlog lite | Critical 9.3 | 25% | 1 exploit | |
| CVE-2012-2052 | Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a long Collada asset element in a DAE file, as demonstrated by the cameraYFov value in the… adobe · photoshop cs5 | Critical 9.3 | 23% | 1 exploit | |
| CVE-2011-2013 | Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka "Reference… microsoft · windows 7 | Critical 9.8 | 32% | 1 exploit | |
| CVE-2010-0476 | The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted SMB… microsoft · windows server 2003 | Critical 10.0 | 34% | 1 exploit | |
| CVE-2010-0027 | The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary… microsoft · internet explorer | Critical 9.3 | 34% | 1 exploit | |
| CVE-2010-0017 | Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold… microsoft · windows 7 | Critical 9.3 | 31% | 1 exploit | |
| CVE-2008-0117 | Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability." microsoft · excel | Critical 9.3 | 33% | 1 exploit | |
| CVE-2008-0112 | Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability." microsoft · excel | Critical 9.3 | 32% | 1 exploit | |
| CVE-2007-2221 | Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; or 7 on Windows Vista allows remote… microsoft · internet explorer | Critical 9.3 | 35% | 1 exploit | |
| CVE-2007-1658 | Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local file or (2) UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as… microsoft · windows vista | Critical 9.3 | 36% | 1 exploit | |
| CVE-2005-3524 | Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a long directory name, then executing the XPWD command. linux-ftpd-ssl · linux-ftpd-ssl | Critical 10.0 | 21% | 1 exploit | |
| CVE-2005-3277 | The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("" or single backquote) in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different… hp · hp-ux | Critical 10.0 | 22% | 1 exploit | |
| CVE-2004-2289 | Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file. microsoft · windows xp | Critical 10.0 | 23% | 1 exploit | |
| CVE-2002-0702 | Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response. isc · dhcpd | Critical 10.0 | 31% | 1 exploit | |
| CVE-2002-0033 | Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name. sun · solaris | Critical 10.0 | 23% | 1 exploit | |
| CVE-1999-0920 | Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command. university of washington · imap | Critical 10.0 | 32% | 1 exploit | |
| CVE-2024-7332 | It has been classified as critical. totolink · cp450 firmware | Critical 9.3 | 21% | 1 exploit | |
| CVE-2022-47071 | In NVS365 V01, the background network test function can trigger command execution. nvs365 · nvs-365-v01 firmware | Critical 9.8 | 26% | 1 exploit | |
| CVE-2022-40881 | SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php contec · solarview compact firmware | Critical 9.8 | 30% | 1 exploit |
Showing 551–600 of 729
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.