Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
1,412 vulnerabilities · highest score first
- CVE-2010-1900Critical 9.3Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle…microsoft · officeEPSS40%1 exploitPublished Aug 11, 2010
- CVE-2010-0231Critical 10.0The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote…microsoft · windows 2000EPSS41%1 exploitPublished Feb 10, 2010
- CVE-2009-1868Critical 9.3flash-plugin: multiple code execution flaws (APSB09-10)adobe · airEPSS21%1 exploitPublished Jul 30, 2009
- CVE-2009-0553Critical 9.3Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in…microsoft · internet explorerEPSS41%1 exploitPublished Apr 15, 2009
- CVE-2008-6504Medium 5.0Improper Input Validation in OpenSymphony XWorkapache · strutsEPSS37%1 exploitPublished May 17, 2022
- CVE-2008-0115Critical 9.3Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability."microsoft · excelEPSS39%1 exploitPublished Mar 11, 2008
- CVE-2008-0114Critical 9.3Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption.microsoft · excelEPSS39%1 exploitPublished Mar 11, 2008
- CVE-2007-3624Critical 10.0Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrary code via a long string in the group parameter to /msgserver/html/group.sap · sap message serverEPSS37%1 exploitPublished Jul 9, 2007
- CVE-2007-3382Medium 4.3Apache Tomcat treats single quotes as delimiters in cookiesapache · tomcatEPSS37%1 exploitPublished May 1, 2022
- CVE-2007-2293High 7.6Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute arbitrary code via a long (1) T38FaxRateManagement or (2) T38FaxUdpEC SDP parameter in an SIP message, as…asterisk · asteriskEPSS24%2 exploitsPublished Apr 26, 2007
- CVE-2007-1749Critical 9.3Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid buffer size, which triggers a…microsoft · internet explorerEPSS42%1 exploitPublished Aug 14, 2007
- CVE-2006-3124High 7.5Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers.streamripper · streamripperEPSS20%2 exploitsPublished Aug 26, 2006
- CVE-2006-2842High 7.5PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter.squirrelmail · squirrelmailEPSS47%1 exploitPublished Jun 1, 2006
- CVE-2006-2444High 7.8The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees…linux · linux kernelEPSS22%1 exploitPublished May 20, 2006
- CVE-2006-2383Critical 9.3Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data" related to "parameter validation" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet…microsoft · internet explorerEPSS40%1 exploitPublished Jun 13, 2006
- CVE-2006-0030Medium 5.1Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption.microsoft · excelEPSS40%1 exploitPublished Mar 14, 2006
- CVE-2005-3792High 7.5Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type.francisco burzi · php-nukeEPSS44%1 exploitPublished Nov 24, 2005
- CVE-2005-2842High 7.5Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username.dameware development · mini remote control serverEPSS21%2 exploitsPublished Sep 8, 2005
- CVE-2005-0582Critical 10.0Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request.broadcom · license softwareEPSS37%1 exploitPublished May 2, 2005
- CVE-2005-0063High 7.5The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as…microsoft · windows 2000EPSS48%1 exploitPublished May 2, 2005
- CVE-2004-0386Critical 10.0Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.mplayer · mplayerEPSS27%1 exploitPublished May 4, 2004
- CVE-2003-0681High 7.5A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.sendmail · sendmailEPSS22%1 exploitPublished Oct 6, 2003
- CVE-2003-0666High 7.5Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data offset and data size parameters in a Corel WordPerfect file.microsoft · wordperfect converterEPSS22%2 exploitsPublished Oct 20, 2003
- CVE-2003-0309High 7.5Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which…microsoft · internet explorerEPSS50%1 exploitPublished Jun 9, 2003
- CVE-2002-2007Medium 5.0The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3)…apache · tomcatEPSS41%3 exploitsPublished Dec 31, 2002
- CVE-2002-1375High 7.5The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.oracle · mysqlEPSS24%1 exploitPublished Dec 12, 2002
- CVE-2002-1374High 7.5The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real…oracle · mysqlEPSS20%1 exploitPublished Dec 12, 2002
- CVE-2002-1217High 7.5Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses…microsoft · internet explorerEPSS50%1 exploitPublished Oct 28, 2002
- CVE-2002-0659Medium 5.0The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.openssl · opensslEPSS36%1 exploitPublished Aug 12, 2002
- CVE-2026-89754High 7.8Linux kernel: mm/pagewalk: fix stale walk->action escaping walk_pmd_range()linux · linux kernelEPSS0.2%1 exploitPublished Sep 11, 2026
- CVE-2026-85884High 7.8Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.microsoft · windows 11 version 26h2 for arm64-based systemsEPSS0.4%1 exploitPublished Oct 13, 2026
- CVE-2026-50229Medium 6.1Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example for Apache Tomcat.apache · tomcatEPSS4.1%2 exploitsPublished Jun 29, 2026
- CVE-2025-41450High 8.2Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2EPSS0.4%2 exploitsPublished May 8, 2025
- CVE-2025-34035Critical 10.0An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier.engeniustech · epg5000 firmwareEPSS23%1 exploitPublished Jun 23, 2025
- CVE-2025-28137Critical 9.8The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.totolink · a810r firmwareEPSS34%1 exploitPublished Apr 15, 2025
- CVE-2025-23200Medium 5.4LibreNMS Misc Section Stored Cross-site Scripting vulnerabilitylibrenms · librenmsEPSS31%1 exploitPublished Jan 16, 2025
- CVE-2023-50564High 8.8An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file.pluck-cms · pluckEPSS29%1 exploitPublished Dec 14, 2023
- CVE-2023-36212High 8.8File Upload vulnerability in Total CMS v.1.7.4 allows a remote attacker to execute arbitrary code via a crafted PHP file to the edit page function.totalcms · total cmsEPSS26%1 exploitPublished Aug 2, 2023
- CVE-2023-36210Critical 9.8MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter.motocms · motocmsEPSS31%1 exploitPublished Aug 1, 2023
- CVE-2023-33782High 8.8D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function.dlink · dir-842v2 firmwareEPSS36%1 exploitPublished Jun 6, 2023
- CVE-2023-33781High 8.8An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file.dlink · dir-842v2 firmwareEPSS31%1 exploitPublished Jun 6, 2023
- CVE-2023-25279Critical 9.8OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload.dlink · dir-820l firmwareEPSS31%1 exploitPublished Mar 13, 2023
- CVE-2023-1162High 8.8UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5.draytek · vigor 2960 firmwareEPSS26%1 exploitPublished Mar 3, 2023
- CVE-2022-37134Critical 9.8D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi.dlink · dir-816 firmwareEPSS22%1 exploitPublished Aug 22, 2022
- CVE-2022-37128Critical 9.8In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end.dlink · dir-816 firmwareEPSS22%1 exploitPublished Aug 31, 2022
- CVE-2022-34974Critical 9.8D-Link DIR810LA1_FW102B22 was discovered to contain a command injection vulnerability via the Ping_addr function.dlink · dir-810l firmwareEPSS23%1 exploitPublished Aug 3, 2022
- CVE-2022-32417Critical 9.8PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php.pbootcms · pbootcmsEPSS35%1 exploitPublished Jul 14, 2022
- CVE-2022-31446Critical 9.8Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.tendacn · ac18 firmwareEPSS35%1 exploitPublished Jun 14, 2022
- CVE-2022-28956Critical 9.8An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload.dlink · dir-816l firmwareEPSS23%1 exploitPublished May 18, 2022
- CVE-2022-28955High 7.5An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.dlink · dir-816l firmwareEPSS40%1 exploitPublished May 18, 2022
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2010-1900 | Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle… microsoft · office | Critical 9.3 | 40% | 1 exploit | |
| CVE-2010-0231 | The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote… microsoft · windows 2000 | Critical 10.0 | 41% | 1 exploit | |
| CVE-2009-1868 | flash-plugin: multiple code execution flaws (APSB09-10) adobe · air | Critical 9.3 | 21% | 1 exploit | |
| CVE-2009-0553 | Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in… microsoft · internet explorer | Critical 9.3 | 41% | 1 exploit | |
| CVE-2008-6504 | Improper Input Validation in OpenSymphony XWork apache · struts | Medium 5.0 | 37% | 1 exploit | |
| CVE-2008-0115 | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability." microsoft · excel | Critical 9.3 | 39% | 1 exploit | |
| CVE-2008-0114 | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption. microsoft · excel | Critical 9.3 | 39% | 1 exploit | |
| CVE-2007-3624 | Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrary code via a long string in the group parameter to /msgserver/html/group. sap · sap message server | Critical 10.0 | 37% | 1 exploit | |
| CVE-2007-3382 | Apache Tomcat treats single quotes as delimiters in cookies apache · tomcat | Medium 4.3 | 37% | 1 exploit | |
| CVE-2007-2293 | Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute arbitrary code via a long (1) T38FaxRateManagement or (2) T38FaxUdpEC SDP parameter in an SIP message, as… asterisk · asterisk | High 7.6 | 24% | 2 exploits | |
| CVE-2007-1749 | Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid buffer size, which triggers a… microsoft · internet explorer | Critical 9.3 | 42% | 1 exploit | |
| CVE-2006-3124 | Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers. streamripper · streamripper | High 7.5 | 20% | 2 exploits | |
| CVE-2006-2842 | PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter. squirrelmail · squirrelmail | High 7.5 | 47% | 1 exploit | |
| CVE-2006-2444 | The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees… linux · linux kernel | High 7.8 | 22% | 1 exploit | |
| CVE-2006-2383 | Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data" related to "parameter validation" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet… microsoft · internet explorer | Critical 9.3 | 40% | 1 exploit | |
| CVE-2006-0030 | Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption. microsoft · excel | Medium 5.1 | 40% | 1 exploit | |
| CVE-2005-3792 | Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type. francisco burzi · php-nuke | High 7.5 | 44% | 1 exploit | |
| CVE-2005-2842 | Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username. dameware development · mini remote control server | High 7.5 | 21% | 2 exploits | |
| CVE-2005-0582 | Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request. broadcom · license software | Critical 10.0 | 37% | 1 exploit | |
| CVE-2005-0063 | The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as… microsoft · windows 2000 | High 7.5 | 48% | 1 exploit | |
| CVE-2004-0386 | Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header. mplayer · mplayer | Critical 10.0 | 27% | 1 exploit | |
| CVE-2003-0681 | A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences. sendmail · sendmail | High 7.5 | 22% | 1 exploit | |
| CVE-2003-0666 | Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data offset and data size parameters in a Corel WordPerfect file. microsoft · wordperfect converter | High 7.5 | 22% | 2 exploits | |
| CVE-2003-0309 | Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which… microsoft · internet explorer | High 7.5 | 50% | 1 exploit | |
| CVE-2002-2007 | The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3)… apache · tomcat | Medium 5.0 | 41% | 3 exploits | |
| CVE-2002-1375 | The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response. oracle · mysql | High 7.5 | 24% | 1 exploit | |
| CVE-2002-1374 | The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real… oracle · mysql | High 7.5 | 20% | 1 exploit | |
| CVE-2002-1217 | Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses… microsoft · internet explorer | High 7.5 | 50% | 1 exploit | |
| CVE-2002-0659 | The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings. openssl · openssl | Medium 5.0 | 36% | 1 exploit | |
| CVE-2026-89754 | Linux kernel: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() linux · linux kernel | High 7.8 | 0.2% | 1 exploit | |
| CVE-2026-85884 | Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally. microsoft · windows 11 version 26h2 for arm64-based systems | High 7.8 | 0.4% | 1 exploit | |
| CVE-2026-50229 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example for Apache Tomcat. apache · tomcat | Medium 6.1 | 4.1% | 2 exploits | |
| CVE-2025-41450 | Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2 | High 8.2 | 0.4% | 2 exploits | |
| CVE-2025-34035 | An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. engeniustech · epg5000 firmware | Critical 10.0 | 23% | 1 exploit | |
| CVE-2025-28137 | The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter. totolink · a810r firmware | Critical 9.8 | 34% | 1 exploit | |
| CVE-2025-23200 | LibreNMS Misc Section Stored Cross-site Scripting vulnerability librenms · librenms | Medium 5.4 | 31% | 1 exploit | |
| CVE-2023-50564 | An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file. pluck-cms · pluck | High 8.8 | 29% | 1 exploit | |
| CVE-2023-36212 | File Upload vulnerability in Total CMS v.1.7.4 allows a remote attacker to execute arbitrary code via a crafted PHP file to the edit page function. totalcms · total cms | High 8.8 | 26% | 1 exploit | |
| CVE-2023-36210 | MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter. motocms · motocms | Critical 9.8 | 31% | 1 exploit | |
| CVE-2023-33782 | D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function. dlink · dir-842v2 firmware | High 8.8 | 36% | 1 exploit | |
| CVE-2023-33781 | An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file. dlink · dir-842v2 firmware | High 8.8 | 31% | 1 exploit | |
| CVE-2023-25279 | OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload. dlink · dir-820l firmware | Critical 9.8 | 31% | 1 exploit | |
| CVE-2023-1162 | UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. draytek · vigor 2960 firmware | High 8.8 | 26% | 1 exploit | |
| CVE-2022-37134 | D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. dlink · dir-816 firmware | Critical 9.8 | 22% | 1 exploit | |
| CVE-2022-37128 | In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end. dlink · dir-816 firmware | Critical 9.8 | 22% | 1 exploit | |
| CVE-2022-34974 | D-Link DIR810LA1_FW102B22 was discovered to contain a command injection vulnerability via the Ping_addr function. dlink · dir-810l firmware | Critical 9.8 | 23% | 1 exploit | |
| CVE-2022-32417 | PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php. pbootcms · pbootcms | Critical 9.8 | 35% | 1 exploit | |
| CVE-2022-31446 | Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac. tendacn · ac18 firmware | Critical 9.8 | 35% | 1 exploit | |
| CVE-2022-28956 | An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload. dlink · dir-816l firmware | Critical 9.8 | 23% | 1 exploit | |
| CVE-2022-28955 | An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php. dlink · dir-816l firmware | High 7.5 | 40% | 1 exploit |
Showing 951–1,000 of 1,412
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.