Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 20, 2026
1,412 vulnerabilities · highest score first
- CVE-2010-1225Critical 9.3The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM…microsoft · virtual pcEPSS28%1 exploitPublished Apr 1, 2010
- CVE-2010-0269Critical 10.0The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for SMB responses, which allows remote SMB servers and…microsoft · windows 2000EPSS28%1 exploitPublished Apr 14, 2010
- CVE-2010-0265Critical 9.3Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie Maker and Producer Buffer Overflow Vulnerability."microsoft · producerEPSS27%1 exploitPublished Mar 10, 2010
- CVE-2008-1609Medium 6.8Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) website parameter to (a) forum.php, (b) headlines.php, and (c) main.php in forum/, and (2) main_dir parameter…jaf cms · jaf cmsEPSS44%2 exploitsPublished Apr 1, 2008
- CVE-2008-1145Medium 5.0ruby: webrick directory traversalruby-lang · webrickEPSS28%1 exploitPublished Mar 3, 2008
- CVE-2007-6401Critical 9.3Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6402.microsoft · windows media playerEPSS30%1 exploitPublished Dec 17, 2007
- CVE-2007-6026Critical 9.3Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a…microsoft · jetEPSS28%1 exploitPublished Nov 19, 2007
- CVE-2007-5775Critical 9.8Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024.bitdefender · antivirusEPSS29%1 exploitPublished Nov 1, 2007
- CVE-2006-6379High 7.5Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via…broadcom · server protection suiteEPSS21%1 exploitPublished Dec 10, 2006
- CVE-2006-3281Medium 5.1Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitrary code via a link to an SMB file share with a filename that contains encoded ..\ (%2e%2e%5c) sequences and whose extension contains the…microsoft · internet explorerEPSS48%1 exploitPublished Jun 28, 2006
- CVE-2006-3014Medium 5.1Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet.microsoft · excelEPSS30%1 exploitPublished Jun 21, 2006
- CVE-2006-2111Medium 4.3A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information…microsoft · outlook expressEPSS41%1 exploitPublished May 1, 2006
- CVE-2006-0143High 7.5Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths.microsoft · windows 2000EPSS31%1 exploitPublished Jan 9, 2006
- CVE-2005-4131Medium 6.8Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to…microsoft · excelEPSS31%1 exploitPublished Dec 9, 2005
- CVE-2005-3862High 7.5Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives.unalz · unalzEPSS20%1 exploitPublished Nov 29, 2005
- CVE-2005-3116Critical 10.0Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.symantec veritas · netbackupEPSS28%1 exploitPublished Nov 18, 2005
- CVE-2005-2871High 7.5Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character…mozilla · firefoxEPSS21%1 exploitPublished Sep 9, 2005
- CVE-2005-1989High 7.5Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability".microsoft · internet explorerEPSS46%1 exploitPublished Aug 10, 2005
- CVE-2005-0688Medium 5.0Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability…microsoft · windows 2003 serverEPSS47%2 exploitsPublished Mar 5, 2005
- CVE-2005-0058High 7.5Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message.microsoft · windows 2000EPSS46%1 exploitPublished Aug 10, 2005
- CVE-2004-1104High 7.5Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor (a) element with an empty "href" attribute,…microsoft · ieEPSS35%1 exploitPublished Dec 31, 2004
- CVE-2003-0543Medium 5.0Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.openssl · opensslEPSS27%1 exploitPublished Nov 17, 2003
- CVE-2003-0469High 7.5Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align"…microsoft · windows 2000EPSS45%1 exploitPublished Aug 7, 2003
- CVE-2003-0240Critical 10.0The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).axis · 2100 network cameraEPSS30%1 exploitPublished Jun 9, 2003
- CVE-2003-0228High 7.5Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed…microsoft · windows media playerEPSS46%1 exploitPublished May 27, 2003
- CVE-2002-0693High 7.5Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink…microsoft · windows 2000EPSS31%1 exploitPublished Oct 10, 2002
- CVE-2001-0932High 7.5Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command.cooolsoft · powerftpEPSS23%2 exploitsPublished Nov 28, 2001
- CVE-2001-0552Critical 10.0ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message.hp · openview network node managerEPSS26%1 exploitPublished Sep 20, 2001
- CVE-1999-0725High 7.1When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a.microsoft · internet information serverEPSS25%1 exploitPublished Aug 19, 1999
- CVE-1999-0153Medium 5.0Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.microsoft · windows 95EPSS21%4 exploitsPublished Jul 1, 1997
- CVE-1999-0002Critical 10.0Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.redhat · linuxEPSS28%1 exploitPublished Oct 12, 1998
- CVE-2026-80344High 8.2Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component.Published Oct 19, 2026
- CVE-2026-79983High 7.4Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component.Published Oct 19, 2026
- CVE-2026-0006Critical 9.8In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow.google · androidEPSS0.7%1 exploitPublished Mar 2, 2026
- CVE-2025-67303High 7.5An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data.comfy · comfyui-managerEPSS1.4%1 exploitPublished Jan 5, 2026
- CVE-2025-24071Medium 6.5Microsoft Windows File Explorer Spoofing Vulnerabilitymicrosoft · windows 10 1507EPSS23%2 exploitsPublished Mar 11, 2025
- CVE-2025-1122Medium 6.7Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.google · chromeEPSS0.2%4 exploitsPublished Apr 15, 2025
- CVE-2024-9793Medium 5.3A vulnerability classified as critical was found in Tenda AC1206 up to 15.03.06.23.tenda · ac1206 firmwareEPSS23%2 exploitsPublished Oct 10, 2024
- CVE-2024-8129Medium 5.3A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to…dlink · dnr-202l firmwareEPSS23%1 exploitPublished Aug 26, 2024
- CVE-2024-7469Medium 5.3It has been declared as critical.raisecom · msg1200 firmwareEPSS25%1 exploitPublished Aug 5, 2024
- CVE-2024-7468Medium 5.3It has been classified as critical.raisecom · msg1200 firmwareEPSS25%1 exploitPublished Aug 5, 2024
- CVE-2024-32479Medium 5.4LibreNMS uses Improper Sanitization on Service template name leads to Stored XSSlibrenms · librenmsEPSS34%1 exploitPublished Apr 22, 2024
- CVE-2024-27564Medium 6.5pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter.dirk1983 · chatgptEPSS41%1 exploitPublished Mar 5, 2024
- CVE-2024-25830Critical 9.8F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction.f-logic · datacube3 firmwareEPSS24%1 exploitPublished Feb 28, 2024
- CVE-2024-21320Medium 6.5Windows Themes Spoofing Vulnerabilitymicrosoft · windows 10 1507EPSS23%1 exploitPublished Jan 10, 2024
- CVE-2023-51123Critical 9.8An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main function of the cgibin binary component.dlink · dir-815 firmwareEPSS24%1 exploitPublished Jan 10, 2024
- CVE-2023-46865High 7.2/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image.craterapp · craterEPSS20%1 exploitPublished Oct 29, 2023
- CVE-2023-46042Critical 9.8An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo().get-simple · getsimplecmsEPSS23%1 exploitPublished Oct 19, 2023
- CVE-2023-36144High 7.5An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration.intelbras · sg 2404 mrEPSS37%1 exploitPublished Jun 30, 2023
- CVE-2023-31983Critical 9.8A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations.edimax · br-6428ns firmwareEPSS25%1 exploitPublished May 12, 2023
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2010-1225 | The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM… microsoft · virtual pc | Critical 9.3 | 28% | 1 exploit | |
| CVE-2010-0269 | The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for SMB responses, which allows remote SMB servers and… microsoft · windows 2000 | Critical 10.0 | 28% | 1 exploit | |
| CVE-2010-0265 | Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie Maker and Producer Buffer Overflow Vulnerability." microsoft · producer | Critical 9.3 | 27% | 1 exploit | |
| CVE-2008-1609 | Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) website parameter to (a) forum.php, (b) headlines.php, and (c) main.php in forum/, and (2) main_dir parameter… jaf cms · jaf cms | Medium 6.8 | 44% | 2 exploits | |
| CVE-2008-1145 | ruby: webrick directory traversal ruby-lang · webrick | Medium 5.0 | 28% | 1 exploit | |
| CVE-2007-6401 | Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6402. microsoft · windows media player | Critical 9.3 | 30% | 1 exploit | |
| CVE-2007-6026 | Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a… microsoft · jet | Critical 9.3 | 28% | 1 exploit | |
| CVE-2007-5775 | Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024. bitdefender · antivirus | Critical 9.8 | 29% | 1 exploit | |
| CVE-2006-6379 | Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via… broadcom · server protection suite | High 7.5 | 21% | 1 exploit | |
| CVE-2006-3281 | Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitrary code via a link to an SMB file share with a filename that contains encoded ..\ (%2e%2e%5c) sequences and whose extension contains the… microsoft · internet explorer | Medium 5.1 | 48% | 1 exploit | |
| CVE-2006-3014 | Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet. microsoft · excel | Medium 5.1 | 30% | 1 exploit | |
| CVE-2006-2111 | A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information… microsoft · outlook express | Medium 4.3 | 41% | 1 exploit | |
| CVE-2006-0143 | Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths. microsoft · windows 2000 | High 7.5 | 31% | 1 exploit | |
| CVE-2005-4131 | Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to… microsoft · excel | Medium 6.8 | 31% | 1 exploit | |
| CVE-2005-3862 | Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives. unalz · unalz | High 7.5 | 20% | 1 exploit | |
| CVE-2005-3116 | Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet. symantec veritas · netbackup | Critical 10.0 | 28% | 1 exploit | |
| CVE-2005-2871 | Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character… mozilla · firefox | High 7.5 | 21% | 1 exploit | |
| CVE-2005-1989 | Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability". microsoft · internet explorer | High 7.5 | 46% | 1 exploit | |
| CVE-2005-0688 | Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability… microsoft · windows 2003 server | Medium 5.0 | 47% | 2 exploits | |
| CVE-2005-0058 | Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message. microsoft · windows 2000 | High 7.5 | 46% | 1 exploit | |
| CVE-2004-1104 | Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor (a) element with an empty "href" attribute,… microsoft · ie | High 7.5 | 35% | 1 exploit | |
| CVE-2003-0543 | Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values. openssl · openssl | Medium 5.0 | 27% | 1 exploit | |
| CVE-2003-0469 | Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align"… microsoft · windows 2000 | High 7.5 | 45% | 1 exploit | |
| CVE-2003-0240 | The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash). axis · 2100 network camera | Critical 10.0 | 30% | 1 exploit | |
| CVE-2003-0228 | Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed… microsoft · windows media player | High 7.5 | 46% | 1 exploit | |
| CVE-2002-0693 | Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink… microsoft · windows 2000 | High 7.5 | 31% | 1 exploit | |
| CVE-2001-0932 | Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command. cooolsoft · powerftp | High 7.5 | 23% | 2 exploits | |
| CVE-2001-0552 | ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message. hp · openview network node manager | Critical 10.0 | 26% | 1 exploit | |
| CVE-1999-0725 | When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. microsoft · internet information server | High 7.1 | 25% | 1 exploit | |
| CVE-1999-0153 | Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke. microsoft · windows 95 | Medium 5.0 | 21% | 4 exploits | |
| CVE-1999-0002 | Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems. redhat · linux | Critical 10.0 | 28% | 1 exploit | |
| CVE-2026-80344 | Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component. | High 8.2 | · | 1 exploit | |
| CVE-2026-79983 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component. | High 7.4 | · | 1 exploit | |
| CVE-2026-0006 | In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. google · android | Critical 9.8 | 0.7% | 1 exploit | |
| CVE-2025-67303 | An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. comfy · comfyui-manager | High 7.5 | 1.4% | 1 exploit | |
| CVE-2025-24071 | Microsoft Windows File Explorer Spoofing Vulnerability microsoft · windows 10 1507 | Medium 6.5 | 23% | 2 exploits | |
| CVE-2025-1122 | Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process. google · chrome | Medium 6.7 | 0.2% | 4 exploits | |
| CVE-2024-9793 | A vulnerability classified as critical was found in Tenda AC1206 up to 15.03.06.23. tenda · ac1206 firmware | Medium 5.3 | 23% | 2 exploits | |
| CVE-2024-8129 | A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to… dlink · dnr-202l firmware | Medium 5.3 | 23% | 1 exploit | |
| CVE-2024-7469 | It has been declared as critical. raisecom · msg1200 firmware | Medium 5.3 | 25% | 1 exploit | |
| CVE-2024-7468 | It has been classified as critical. raisecom · msg1200 firmware | Medium 5.3 | 25% | 1 exploit | |
| CVE-2024-32479 | LibreNMS uses Improper Sanitization on Service template name leads to Stored XSS librenms · librenms | Medium 5.4 | 34% | 1 exploit | |
| CVE-2024-27564 | pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter. dirk1983 · chatgpt | Medium 6.5 | 41% | 1 exploit | |
| CVE-2024-25830 | F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. f-logic · datacube3 firmware | Critical 9.8 | 24% | 1 exploit | |
| CVE-2024-21320 | Windows Themes Spoofing Vulnerability microsoft · windows 10 1507 | Medium 6.5 | 23% | 1 exploit | |
| CVE-2023-51123 | An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main function of the cgibin binary component. dlink · dir-815 firmware | Critical 9.8 | 24% | 1 exploit | |
| CVE-2023-46865 | /api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image. craterapp · crater | High 7.2 | 20% | 1 exploit | |
| CVE-2023-46042 | An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo(). get-simple · getsimplecms | Critical 9.8 | 23% | 1 exploit | |
| CVE-2023-36144 | An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration. intelbras · sg 2404 mr | High 7.5 | 37% | 1 exploit | |
| CVE-2023-31983 | A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations. edimax · br-6428ns firmware | Critical 9.8 | 25% | 1 exploit |
Showing 1,151–1,200 of 1,412
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.