Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
1,412 vulnerabilities · highest score first
- CVE-2007-0031Critical 9.3Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a BIFF8 spreadsheet with a PALETTE record that contains a large number of entries.microsoft · excelEPSS42%1 exploitPublished Jan 9, 2007
- CVE-2006-6027Critical 9.3Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the LoadFile method in an AcroPDF ActiveX control.adobe · acrobat readerEPSS44%1 exploitPublished Nov 21, 2006
- CVE-2006-5379High 7.5The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be…nvidia · binary graphics driverEPSS27%1 exploitPublished Oct 18, 2006
- CVE-2006-3835Medium 5.0Apache Tomcat Reveals Directoriesapache · tomcatEPSS46%1 exploitPublished May 1, 2022
- CVE-2006-0058High 7.6Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.sendmail · sendmailEPSS29%1 exploitPublished Mar 22, 2006
- CVE-2005-2340High 7.5Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (QTIF), (2) PICT, or (3) JPEG format image with a long data field.apple · quicktimeEPSS26%1 exploitPublished Dec 31, 2005
- CVE-2005-1344High 7.5Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument.apache · http serverEPSS29%2 exploitsPublished May 2, 2005
- CVE-2005-0416High 7.5The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.microsoft · windows 2000EPSS41%2 exploitsPublished Apr 27, 2005
- CVE-2004-1137Critical 10.0Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the…linux · linux kernelEPSS21%1 exploitPublished Dec 14, 2004
- CVE-2004-0333Critical 10.0Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.uudeview · uudeviewEPSS24%1 exploitPublished Nov 23, 2004
- CVE-2003-1025Medium 4.3Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL…microsoft · internet explorerEPSS27%3 exploitsPublished Jan 20, 2004
- CVE-2002-0764High 7.5Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contains a PHP file with the commands.phorum · phorumEPSS38%1 exploitPublished Aug 12, 2002
- CVE-2000-0305High 7.8Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability.microsoft · terminal serverEPSS38%1 exploitPublished May 19, 2000
- CVE-1999-0003Critical 10.0Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).sun · solarisEPSS25%2 exploitsPublished Apr 1, 1998
- CVE-2026-98180High 7.1drm/msm: RCU-free the scheduler-containing ring and VM objectslinux · linux kernelEPSS0.1%1 exploitPublished Oct 6, 2026
- CVE-2026-94169Critical 10.0WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerabilityEPSS1.0%1 exploitPublished Oct 16, 2026
- CVE-2026-105105Critical 9.8CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server) in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data,…EPSS0.8%1 exploitPublished Oct 3, 2026
- CVE-2025-7083Low 2.1It has been classified as critical.belkin · f9k1122 firmwareEPSS46%2 exploitsPublished Jul 6, 2025
- CVE-2025-58180High 7.5OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Uploadoctoprint · octoprintEPSS21%1 exploitPublished Sep 9, 2025
- CVE-2025-4978Critical 9.3A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA.netgear · dgnd3700 firmwareEPSS21%1 exploitPublished May 20, 2025
- CVE-2024-38289Critical 9.8A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to extract hashed passwords from the database, and authenticate to the application, via crafted SQL input.rhubcom · turbomeetingEPSS41%1 exploitPublished Jul 25, 2024
- CVE-2024-24116Critical 9.8An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the system/config_menu.htm.ruijie · rg-nbs2009g-p firmwareEPSS28%1 exploitPublished Oct 2, 2024
- CVE-2024-0265High 8.8It has been rated as critical.oretnom23 · clinic queuing systemEPSS21%1 exploitPublished Jan 7, 2024
- CVE-2023-34800Critical 9.8D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main.dlink · go-rt-ac750 firmwareEPSS28%1 exploitPublished Jun 15, 2023
- CVE-2022-46770High 7.5qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a crafted multicast UDP packet (IP address range of 224.0.0.0 through 239.255.255.255).linuxfoundation · mirage firewallEPSS22%1 exploitPublished Dec 7, 2022
- CVE-2022-46476Critical 9.8D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function.dlink · dir-859 a1 firmwareEPSS41%1 exploitPublished Jan 19, 2023
- CVE-2022-28573Critical 9.8D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting.dlink · dir-823 pro firmwareEPSS28%1 exploitPublished May 2, 2022
- CVE-2022-2486Critical 9.8A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3.wavlink · wl-wn535k2 firmwareEPSS30%1 exploitPublished Jul 20, 2022
- CVE-2022-23854High 7.5AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of the secure gateway web server.aveva · intouch access anywhereEPSS47%1 exploitPublished Dec 23, 2022
- CVE-2021-43711Critical 9.8The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters.totolink · ex200 firmwareEPSS38%1 exploitPublished Jan 4, 2022
- CVE-2021-31642Medium 6.5A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC.chiyu-tech · bf-630 firmwareEPSS44%2 exploitsPublished Jun 1, 2021
- CVE-2021-28143High 8.0/jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools).dlink · dir-841 firmwareEPSS47%1 exploitPublished Mar 11, 2021
- CVE-2020-24219High 7.5An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97.szuray · iptv\/h.264 video encoder firmwareEPSS24%2 exploitsPublished Oct 6, 2020
- CVE-2020-11107High 8.8An unprivileged user can change a .exe configuration in xampp-contol.ini for all users (including admins) to enable arbitrary command execution.apachefriends · xamppEPSS22%2 exploitsPublished Apr 2, 2020
- CVE-2020-10548Critical 9.8rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection.rconfig · rconfigEPSS37%1 exploitPublished Jun 4, 2020
- CVE-2020-10547Critical 9.8rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection.rconfig · rconfigEPSS37%1 exploitPublished Jun 4, 2020
- CVE-2019-9041High 7.2In the inc/zzz_template.php file, the parserIfLabel() function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:assert substring.zzzcms · zzzphpEPSS31%2 exploitsPublished Feb 23, 2019
- CVE-2019-8050Critical 9.8Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability.adobe · acrobat dcEPSS41%1 exploitPublished Aug 20, 2019
- CVE-2019-7442Critical 9.8An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault <=10.7 allows remote attackers to read arbitrary files or potentially bypass authentication via a crafted DTD in the SAML authentication system.cyberark · enterprise password vaultEPSS40%1 exploitPublished May 8, 2019
- CVE-2019-19368Medium 6.1A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1.maxum · rumpusEPSS26%3 exploitsPublished Dec 16, 2019
- CVE-2019-1913Critical 9.8Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating…cisco · sf-220-24 firmwareEPSS26%1 exploitPublished Aug 7, 2019
- CVE-2019-18370Critical 9.8An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable.mi · millet router 3g firmwareEPSS40%1 exploitPublished Oct 23, 2019
- CVE-2019-17671Medium 5.3In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.wordpress · wordpressEPSS37%1 exploitPublished Oct 17, 2019
- CVE-2019-16124Critical 9.8In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code.youphptube · youphptubeEPSS28%1 exploitPublished Sep 8, 2019
- CVE-2019-15276Medium 6.5A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.cisco · wireless lan controller softwareEPSS46%2 exploitsPublished Nov 26, 2019
- CVE-2019-0573High 7.8An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.microsoft · windows 10EPSS20%2 exploitsPublished Jan 8, 2019
- CVE-2018-8716Medium 5.4WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers.wso2 · identity serverEPSS38%3 exploitsPublished Apr 25, 2018
- CVE-2018-6580Critical 9.8Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla!janguo · jimtawlEPSS36%1 exploitPublished Feb 2, 2018
- CVE-2018-19986Critical 9.8In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices.d-link · dir-818lw firmwareEPSS42%1 exploitPublished May 13, 2019
- CVE-2018-16133Medium 5.3Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI.cybrotech · cybrohttpserverEPSS39%3 exploitsPublished Aug 29, 2018
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2007-0031 | Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a BIFF8 spreadsheet with a PALETTE record that contains a large number of entries. microsoft · excel | Critical 9.3 | 42% | 1 exploit | |
| CVE-2006-6027 | Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the LoadFile method in an AcroPDF ActiveX control. adobe · acrobat reader | Critical 9.3 | 44% | 1 exploit | |
| CVE-2006-5379 | The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be… nvidia · binary graphics driver | High 7.5 | 27% | 1 exploit | |
| CVE-2006-3835 | Apache Tomcat Reveals Directories apache · tomcat | Medium 5.0 | 46% | 1 exploit | |
| CVE-2006-0058 | Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations. sendmail · sendmail | High 7.6 | 29% | 1 exploit | |
| CVE-2005-2340 | Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (QTIF), (2) PICT, or (3) JPEG format image with a long data field. apple · quicktime | High 7.5 | 26% | 1 exploit | |
| CVE-2005-1344 | Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. apache · http server | High 7.5 | 29% | 2 exploits | |
| CVE-2005-0416 | The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow. microsoft · windows 2000 | High 7.5 | 41% | 2 exploits | |
| CVE-2004-1137 | Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the… linux · linux kernel | Critical 10.0 | 21% | 1 exploit | |
| CVE-2004-0333 | Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters. uudeview · uudeview | Critical 10.0 | 24% | 1 exploit | |
| CVE-2003-1025 | Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL… microsoft · internet explorer | Medium 4.3 | 27% | 3 exploits | |
| CVE-2002-0764 | Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contains a PHP file with the commands. phorum · phorum | High 7.5 | 38% | 1 exploit | |
| CVE-2000-0305 | Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability. microsoft · terminal server | High 7.8 | 38% | 1 exploit | |
| CVE-1999-0003 | Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd). sun · solaris | Critical 10.0 | 25% | 2 exploits | |
| CVE-2026-98180 | drm/msm: RCU-free the scheduler-containing ring and VM objects linux · linux kernel | High 7.1 | 0.1% | 1 exploit | |
| CVE-2026-94169 | WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability | Critical 10.0 | 1.0% | 1 exploit | |
| CVE-2026-105105 | CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server) in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data,… | Critical 9.8 | 0.8% | 1 exploit | |
| CVE-2025-7083 | It has been classified as critical. belkin · f9k1122 firmware | Low 2.1 | 46% | 2 exploits | |
| CVE-2025-58180 | OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload octoprint · octoprint | High 7.5 | 21% | 1 exploit | |
| CVE-2025-4978 | A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. netgear · dgnd3700 firmware | Critical 9.3 | 21% | 1 exploit | |
| CVE-2024-38289 | A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to extract hashed passwords from the database, and authenticate to the application, via crafted SQL input. rhubcom · turbomeeting | Critical 9.8 | 41% | 1 exploit | |
| CVE-2024-24116 | An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the system/config_menu.htm. ruijie · rg-nbs2009g-p firmware | Critical 9.8 | 28% | 1 exploit | |
| CVE-2024-0265 | It has been rated as critical. oretnom23 · clinic queuing system | High 8.8 | 21% | 1 exploit | |
| CVE-2023-34800 | D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main. dlink · go-rt-ac750 firmware | Critical 9.8 | 28% | 1 exploit | |
| CVE-2022-46770 | qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a crafted multicast UDP packet (IP address range of 224.0.0.0 through 239.255.255.255). linuxfoundation · mirage firewall | High 7.5 | 22% | 1 exploit | |
| CVE-2022-46476 | D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function. dlink · dir-859 a1 firmware | Critical 9.8 | 41% | 1 exploit | |
| CVE-2022-28573 | D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. dlink · dir-823 pro firmware | Critical 9.8 | 28% | 1 exploit | |
| CVE-2022-2486 | A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. wavlink · wl-wn535k2 firmware | Critical 9.8 | 30% | 1 exploit | |
| CVE-2022-23854 | AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of the secure gateway web server. aveva · intouch access anywhere | High 7.5 | 47% | 1 exploit | |
| CVE-2021-43711 | The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters. totolink · ex200 firmware | Critical 9.8 | 38% | 1 exploit | |
| CVE-2021-31642 | A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC. chiyu-tech · bf-630 firmware | Medium 6.5 | 44% | 2 exploits | |
| CVE-2021-28143 | /jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools). dlink · dir-841 firmware | High 8.0 | 47% | 1 exploit | |
| CVE-2020-24219 | An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. szuray · iptv\/h.264 video encoder firmware | High 7.5 | 24% | 2 exploits | |
| CVE-2020-11107 | An unprivileged user can change a .exe configuration in xampp-contol.ini for all users (including admins) to enable arbitrary command execution. apachefriends · xampp | High 8.8 | 22% | 2 exploits | |
| CVE-2020-10548 | rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection. rconfig · rconfig | Critical 9.8 | 37% | 1 exploit | |
| CVE-2020-10547 | rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. rconfig · rconfig | Critical 9.8 | 37% | 1 exploit | |
| CVE-2019-9041 | In the inc/zzz_template.php file, the parserIfLabel() function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:assert substring. zzzcms · zzzphp | High 7.2 | 31% | 2 exploits | |
| CVE-2019-8050 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability. adobe · acrobat dc | Critical 9.8 | 41% | 1 exploit | |
| CVE-2019-7442 | An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault <=10.7 allows remote attackers to read arbitrary files or potentially bypass authentication via a crafted DTD in the SAML authentication system. cyberark · enterprise password vault | Critical 9.8 | 40% | 1 exploit | |
| CVE-2019-19368 | A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. maxum · rumpus | Medium 6.1 | 26% | 3 exploits | |
| CVE-2019-1913 | Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating… cisco · sf-220-24 firmware | Critical 9.8 | 26% | 1 exploit | |
| CVE-2019-18370 | An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. mi · millet router 3g firmware | Critical 9.8 | 40% | 1 exploit | |
| CVE-2019-17671 | In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled. wordpress · wordpress | Medium 5.3 | 37% | 1 exploit | |
| CVE-2019-16124 | In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code. youphptube · youphptube | Critical 9.8 | 28% | 1 exploit | |
| CVE-2019-15276 | A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. cisco · wireless lan controller software | Medium 6.5 | 46% | 2 exploits | |
| CVE-2019-0573 | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. microsoft · windows 10 | High 7.8 | 20% | 2 exploits | |
| CVE-2018-8716 | WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers. wso2 · identity server | Medium 5.4 | 38% | 3 exploits | |
| CVE-2018-6580 | Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! janguo · jimtawl | Critical 9.8 | 36% | 1 exploit | |
| CVE-2018-19986 | In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices. d-link · dir-818lw firmware | Critical 9.8 | 42% | 1 exploit | |
| CVE-2018-16133 | Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI. cybrotech · cybrohttpserver | Medium 5.3 | 39% | 3 exploits |
Showing 851–900 of 1,412
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.