Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
1,412 vulnerabilities · highest score first
- CVE-2004-0990Critical 10.0Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the…gd graphics library · gdlibEPSS28%1 exploitPublished Mar 1, 2005
- CVE-2004-0835High 7.5MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.mysql · mysqlEPSS22%1 exploitPublished Mar 23, 2004
- CVE-2004-0600Critical 10.0Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.samba · sambaEPSS29%1 exploitPublished Jul 27, 2004
- CVE-2004-0595Medium 6.8The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore…php · phpEPSS45%1 exploitPublished Jul 14, 2004
- CVE-2004-0110High 7.5Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.xmlsoft · libxmlEPSS24%1 exploitPublished Mar 15, 2004
- CVE-2003-1026Critical 9.3Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by…microsoft · internet explorerEPSS39%1 exploitPublished Jan 20, 2004
- CVE-2003-0659High 7.2Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to ListBox or (2) CB_DIR messages to ComboBox controls in a privileged application.microsoft · windows ntEPSS43%2 exploitsPublished Nov 17, 2003
- CVE-2003-0209Critical 10.0Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.sourcefire · snortEPSS39%1 exploitPublished May 5, 2003
- CVE-2003-0015High 7.5Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.cvs · cvsEPSS24%1 exploitPublished Feb 7, 2003
- CVE-2002-0721Critical 10.0Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1)…microsoft · sql serverEPSS46%1 exploitPublished Sep 5, 2002
- CVE-2001-1021High 7.5Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.progress · ws ftp serverEPSS42%2 exploitsPublished Jul 26, 2001
- CVE-2000-0854Critical 10.0When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.microsoft · officeEPSS37%1 exploitPublished Nov 14, 2000
- CVE-1999-0009Critical 10.0Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.isc · bindEPSS29%2 exploitsPublished Apr 8, 1998
- CVE-2026-104745High 8.1Customer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' ParameterEPSS0.5%1 exploitPublished Oct 16, 2026
- CVE-2025-58443Critical 9.9Versions 1.5.10.1673 and below contain an authentication bypass vulnerability.fogproject · fogprojectEPSS21%1 exploitPublished Sep 6, 2025
- CVE-2025-34036Critical 10.0An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82.tvt · td-2004ts-cl-c firmwareEPSS31%1 exploitPublished Jun 23, 2025
- CVE-2024-57045Critical 9.8A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication.dlink · dir-859 a3 firmwareEPSS32%1 exploitPublished Feb 18, 2025
- CVE-2024-57004Medium 6.1Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading to the triggering of the XSS by visiting the SENT session.roundcube · webmailEPSS40%1 exploitPublished Feb 3, 2025
- CVE-2024-5585High 8.8In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces.php · phpEPSS29%1 exploitPublished Jun 7, 2024
- CVE-2024-53457Medium 5.4LibreNMS stored cross-site scripting (XSS) vulnerability in the Device Settings sectionlibrenms · librenmsEPSS46%1 exploitPublished Dec 6, 2024
- CVE-2024-39914Critical 9.8Prior to 1.5.10.34, packages/web/lib/fog/reportmaker.class.php in FOG was affected by a command injection via the filename parameter to /fog/management/export.php.fogproject · fogprojectEPSS23%1 exploitPublished Jul 12, 2024
- CVE-2024-27747Critical 9.8File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component.mayurik · petrol pump managementEPSS24%2 exploitsPublished Mar 1, 2024
- CVE-2023-6579Critical 9.8A vulnerability, which was classified as critical, has been found in osCommerce 4.oscommerce · oscommerceEPSS24%1 exploitPublished Dec 7, 2023
- CVE-2023-4873Critical 9.8A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906.byzoro · smart s45f firmwareEPSS22%1 exploitPublished Sep 10, 2023
- CVE-2023-44974Critical 9.8An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.emlog · emlogEPSS20%1 exploitPublished Oct 3, 2023
- CVE-2023-34747Critical 9.8File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload.ujcms · ujcmsEPSS20%1 exploitPublished Jun 14, 2023
- CVE-2023-34600Critical 9.8Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.adiscon · loganalyzerEPSS24%1 exploitPublished Jun 20, 2023
- CVE-2023-33735Critical 9.8D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface.dlink · dir-846 firmwareEPSS32%1 exploitPublished May 31, 2023
- CVE-2023-3306Critical 9.8It has been declared as critical.ruijie · rg-ew1200g firmwareEPSS23%1 exploitPublished Jun 18, 2023
- CVE-2023-31689Critical 9.8In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parameter and the textAreaCode parameter.wcms · wcmsEPSS20%1 exploitPublished May 22, 2023
- CVE-2023-2924Critical 9.8A vulnerability, which was classified as critical, has been found in Supcon SimField up to 1.80.00.00.supcontech · simfield firmwareEPSS24%1 exploitPublished May 27, 2023
- CVE-2023-26613Critical 9.8An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCU_SHELL.dlink · dir-823g firmwareEPSS31%1 exploitPublished Jun 29, 2023
- CVE-2023-26609High 7.2ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wireless_mft ap field.abus · tvip 20000-21150 firmwareEPSS39%2 exploitsPublished Feb 26, 2023
- CVE-2022-4855Critical 9.8A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0.lead management system project · lead management systemEPSS25%1 exploitPublished Dec 30, 2022
- CVE-2022-47874Medium 6.5Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'com.jedox.etl.mngr.Connections' and method 'getGlobalConnection'.jedox · jedoxEPSS21%2 exploitsPublished May 3, 2023
- CVE-2022-42233Critical 9.8Tenda 11N with firmware version V5.07.33_cn suffers from an Authentication Bypass vulnerability.tenda · 11n firmwareEPSS43%1 exploitPublished Oct 20, 2022
- CVE-2022-40032Critical 9.8SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information.simple task managing system project · simple task managing systemEPSS21%2 exploitsPublished Feb 17, 2023
- CVE-2022-35620Critical 9.8D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function binary.soapcgi_main.dlink · dir-818l firmwareEPSS32%1 exploitPublished Aug 3, 2022
- CVE-2022-31885Critical 9.8Marval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of VBScripts.marvalglobal · marval msmEPSS33%1 exploitPublished Jun 28, 2022
- CVE-2022-29009Critical 9.8Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication.phpgurukul · cyber cafe management systemEPSS23%2 exploitsPublished May 11, 2022
- CVE-2022-26272Critical 9.8A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to execute arbitrary code via a crafted string written to the file application/config/config.php.ionizecms · ionizeEPSS22%1 exploitPublished Mar 24, 2022
- CVE-2022-2488Critical 9.8The manipulation of the argument IP leads to os command injection.wavlink · wl-wn535k2 firmwareEPSS33%1 exploitPublished Jul 20, 2022
- CVE-2022-1390Critical 9.8The Admin Word Count Column WordPress plugin through 2.2 does not validate the path parameter given to readfile(), which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique.admin word count column project · admin word count columnEPSS22%1 exploitPublished Apr 25, 2022
- CVE-2021-46367High 7.2RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel.ritecms · ritecmsEPSS30%2 exploitsPublished Apr 8, 2022
- CVE-2021-46314Critical 9.8A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable…dlink · dir-846 firmwareEPSS33%1 exploitPublished Feb 17, 2022
- CVE-2021-43405High 8.8The fax_extension may have risky characters (it is not constrained to be numeric).fusionpbx · fusionpbxEPSS36%2 exploitsPublished Nov 5, 2021
- CVE-2021-42887Critical 9.8In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.totolink · ex1200t firmwareEPSS44%1 exploitPublished Jun 3, 2022
- CVE-2021-40345High 7.2In the Manage Dashlets section of the Admin panel, an administrator can upload ZIP files.nagios · nagios xiEPSS23%1 exploitPublished Oct 27, 2021
- CVE-2021-35380High 7.5A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download…solari · termtalk serverEPSS37%1 exploitPublished Feb 15, 2022
- CVE-2021-31251Critical 9.8An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileged connection with the target device by supplying a specially malformed request and an attacker may force the remote…chiyu-tech · bf-430 firmwareEPSS36%1 exploitPublished Jun 4, 2021
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2004-0990 | Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the… gd graphics library · gdlib | Critical 10.0 | 28% | 1 exploit | |
| CVE-2004-0835 | MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities. mysql · mysql | High 7.5 | 22% | 1 exploit | |
| CVE-2004-0600 | Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication. samba · samba | Critical 10.0 | 29% | 1 exploit | |
| CVE-2004-0595 | The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore… php · php | Medium 6.8 | 45% | 1 exploit | |
| CVE-2004-0110 | Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL. xmlsoft · libxml | High 7.5 | 24% | 1 exploit | |
| CVE-2003-1026 | Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by… microsoft · internet explorer | Critical 9.3 | 39% | 1 exploit | |
| CVE-2003-0659 | Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to ListBox or (2) CB_DIR messages to ComboBox controls in a privileged application. microsoft · windows nt | High 7.2 | 43% | 2 exploits | |
| CVE-2003-0209 | Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow. sourcefire · snort | Critical 10.0 | 39% | 1 exploit | |
| CVE-2003-0015 | Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands. cvs · cvs | High 7.5 | 24% | 1 exploit | |
| CVE-2002-0721 | Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1)… microsoft · sql server | Critical 10.0 | 46% | 1 exploit | |
| CVE-2001-1021 | Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD. progress · ws ftp server | High 7.5 | 42% | 2 exploits | |
| CVE-2000-0854 | When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document. microsoft · office | Critical 10.0 | 37% | 1 exploit | |
| CVE-1999-0009 | Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. isc · bind | Critical 10.0 | 29% | 2 exploits | |
| CVE-2026-104745 | Customer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter | High 8.1 | 0.5% | 1 exploit | |
| CVE-2025-58443 | Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. fogproject · fogproject | Critical 9.9 | 21% | 1 exploit | |
| CVE-2025-34036 | An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82. tvt · td-2004ts-cl-c firmware | Critical 10.0 | 31% | 1 exploit | |
| CVE-2024-57045 | A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. dlink · dir-859 a3 firmware | Critical 9.8 | 32% | 1 exploit | |
| CVE-2024-57004 | Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading to the triggering of the XSS by visiting the SENT session. roundcube · webmail | Medium 6.1 | 40% | 1 exploit | |
| CVE-2024-5585 | In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. php · php | High 8.8 | 29% | 1 exploit | |
| CVE-2024-53457 | LibreNMS stored cross-site scripting (XSS) vulnerability in the Device Settings section librenms · librenms | Medium 5.4 | 46% | 1 exploit | |
| CVE-2024-39914 | Prior to 1.5.10.34, packages/web/lib/fog/reportmaker.class.php in FOG was affected by a command injection via the filename parameter to /fog/management/export.php. fogproject · fogproject | Critical 9.8 | 23% | 1 exploit | |
| CVE-2024-27747 | File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component. mayurik · petrol pump management | Critical 9.8 | 24% | 2 exploits | |
| CVE-2023-6579 | A vulnerability, which was classified as critical, has been found in osCommerce 4. oscommerce · oscommerce | Critical 9.8 | 24% | 1 exploit | |
| CVE-2023-4873 | A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. byzoro · smart s45f firmware | Critical 9.8 | 22% | 1 exploit | |
| CVE-2023-44974 | An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file. emlog · emlog | Critical 9.8 | 20% | 1 exploit | |
| CVE-2023-34747 | File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload. ujcms · ujcms | Critical 9.8 | 20% | 1 exploit | |
| CVE-2023-34600 | Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection. adiscon · loganalyzer | Critical 9.8 | 24% | 1 exploit | |
| CVE-2023-33735 | D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface. dlink · dir-846 firmware | Critical 9.8 | 32% | 1 exploit | |
| CVE-2023-3306 | It has been declared as critical. ruijie · rg-ew1200g firmware | Critical 9.8 | 23% | 1 exploit | |
| CVE-2023-31689 | In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parameter and the textAreaCode parameter. wcms · wcms | Critical 9.8 | 20% | 1 exploit | |
| CVE-2023-2924 | A vulnerability, which was classified as critical, has been found in Supcon SimField up to 1.80.00.00. supcontech · simfield firmware | Critical 9.8 | 24% | 1 exploit | |
| CVE-2023-26613 | An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCU_SHELL. dlink · dir-823g firmware | Critical 9.8 | 31% | 1 exploit | |
| CVE-2023-26609 | ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wireless_mft ap field. abus · tvip 20000-21150 firmware | High 7.2 | 39% | 2 exploits | |
| CVE-2022-4855 | A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. lead management system project · lead management system | Critical 9.8 | 25% | 1 exploit | |
| CVE-2022-47874 | Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'com.jedox.etl.mngr.Connections' and method 'getGlobalConnection'. jedox · jedox | Medium 6.5 | 21% | 2 exploits | |
| CVE-2022-42233 | Tenda 11N with firmware version V5.07.33_cn suffers from an Authentication Bypass vulnerability. tenda · 11n firmware | Critical 9.8 | 43% | 1 exploit | |
| CVE-2022-40032 | SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information. simple task managing system project · simple task managing system | Critical 9.8 | 21% | 2 exploits | |
| CVE-2022-35620 | D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function binary.soapcgi_main. dlink · dir-818l firmware | Critical 9.8 | 32% | 1 exploit | |
| CVE-2022-31885 | Marval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of VBScripts. marvalglobal · marval msm | Critical 9.8 | 33% | 1 exploit | |
| CVE-2022-29009 | Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication. phpgurukul · cyber cafe management system | Critical 9.8 | 23% | 2 exploits | |
| CVE-2022-26272 | A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to execute arbitrary code via a crafted string written to the file application/config/config.php. ionizecms · ionize | Critical 9.8 | 22% | 1 exploit | |
| CVE-2022-2488 | The manipulation of the argument IP leads to os command injection. wavlink · wl-wn535k2 firmware | Critical 9.8 | 33% | 1 exploit | |
| CVE-2022-1390 | The Admin Word Count Column WordPress plugin through 2.2 does not validate the path parameter given to readfile(), which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique. admin word count column project · admin word count column | Critical 9.8 | 22% | 1 exploit | |
| CVE-2021-46367 | RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel. ritecms · ritecms | High 7.2 | 30% | 2 exploits | |
| CVE-2021-46314 | A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable… dlink · dir-846 firmware | Critical 9.8 | 33% | 1 exploit | |
| CVE-2021-43405 | The fax_extension may have risky characters (it is not constrained to be numeric). fusionpbx · fusionpbx | High 8.8 | 36% | 2 exploits | |
| CVE-2021-42887 | In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm. totolink · ex1200t firmware | Critical 9.8 | 44% | 1 exploit | |
| CVE-2021-40345 | In the Manage Dashlets section of the Admin panel, an administrator can upload ZIP files. nagios · nagios xi | High 7.2 | 23% | 1 exploit | |
| CVE-2021-35380 | A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download… solari · termtalk server | High 7.5 | 37% | 1 exploit | |
| CVE-2021-31251 | An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileged connection with the target device by supplying a specially malformed request and an attacker may force the remote… chiyu-tech · bf-430 firmware | Critical 9.8 | 36% | 1 exploit |
Showing 751–800 of 1,412
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.