Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
178 vulnerabilities · highest score first
- CVE-2017-11906Medium 5.3Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the…microsoft · internet explorerEPSS25%2 exploitsPublished Dec 12, 2017
- CVE-2017-1130Medium 6.5IBM Notes 8.5 and 9.0 is vulnerable to a denial of service.ibm · inotesEPSS29%2 exploitsPublished Sep 5, 2017
- CVE-2016-6897Medium 6.5Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to…wordpress · wordpressEPSS29%1 exploitPublished Jan 18, 2017
- CVE-2015-2790Medium 4.3Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image.foxitsoftware · enterprise readerEPSS25%4 exploitsPublished Mar 30, 2015
- CVE-2014-5111Medium 5.0Multiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a ..netfortris · trixboxEPSS22%5 exploitsPublished Jul 28, 2014
- CVE-2008-1609Medium 6.8Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) website parameter to (a) forum.php, (b) headlines.php, and (c) main.php in forum/, and (2) main_dir parameter…jaf cms · jaf cmsEPSS44%2 exploitsPublished Apr 1, 2008
- CVE-2008-1145Medium 5.0ruby: webrick directory traversalruby-lang · webrickEPSS28%1 exploitPublished Mar 3, 2008
- CVE-2006-3281Medium 5.1Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitrary code via a link to an SMB file share with a filename that contains encoded ..\ (%2e%2e%5c) sequences and whose extension contains the…microsoft · internet explorerEPSS48%1 exploitPublished Jun 28, 2006
- CVE-2006-3014Medium 5.1Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet.microsoft · excelEPSS30%1 exploitPublished Jun 21, 2006
- CVE-2006-2111Medium 4.3A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information…microsoft · outlook expressEPSS41%1 exploitPublished May 1, 2006
- CVE-2005-4131Medium 6.8Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to…microsoft · excelEPSS31%1 exploitPublished Dec 9, 2005
- CVE-2005-0688Medium 5.0Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability…microsoft · windows 2003 serverEPSS47%2 exploitsPublished Mar 5, 2005
- CVE-2003-0543Medium 5.0Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.openssl · opensslEPSS27%1 exploitPublished Nov 17, 2003
- CVE-1999-0153Medium 5.0Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.microsoft · windows 95EPSS21%4 exploitsPublished Jul 1, 1997
- CVE-2025-24071Medium 6.5Microsoft Windows File Explorer Spoofing Vulnerabilitymicrosoft · windows 10 1507EPSS23%2 exploitsPublished Mar 11, 2025
- CVE-2025-1122Medium 6.7Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.google · chromeEPSS0.2%4 exploitsPublished Apr 15, 2025
- CVE-2024-9793Medium 5.3A vulnerability classified as critical was found in Tenda AC1206 up to 15.03.06.23.tenda · ac1206 firmwareEPSS23%2 exploitsPublished Oct 10, 2024
- CVE-2024-8129Medium 5.3A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to…dlink · dnr-202l firmwareEPSS23%1 exploitPublished Aug 26, 2024
- CVE-2024-7469Medium 5.3It has been declared as critical.raisecom · msg1200 firmwareEPSS25%1 exploitPublished Aug 5, 2024
- CVE-2024-7468Medium 5.3It has been classified as critical.raisecom · msg1200 firmwareEPSS25%1 exploitPublished Aug 5, 2024
- CVE-2024-32479Medium 5.4LibreNMS uses Improper Sanitization on Service template name leads to Stored XSSlibrenms · librenmsEPSS34%1 exploitPublished Apr 22, 2024
- CVE-2024-27564Medium 6.5pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter.dirk1983 · chatgptEPSS41%1 exploitPublished Mar 5, 2024
- CVE-2024-21320Medium 6.5Windows Themes Spoofing Vulnerabilitymicrosoft · windows 10 1507EPSS23%1 exploitPublished Jan 10, 2024
- CVE-2023-2796Medium 5.3The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id.myeventon · eventonEPSS43%1 exploitPublished Jul 10, 2023
- CVE-2022-2863Medium 4.9Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Administrator+) Path Traversalwpvivid · migration\, backup\, stagingEPSS25%1 exploitPublished Sep 16, 2022
- CVE-2019-12616Medium 6.5phpMyAdmin CSRF Vulnerabilityphpmyadmin · phpmyadminEPSS20%1 exploitPublished May 24, 2022
- CVE-2018-8533Medium 5.5An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server…microsoft · sql server management studioEPSS23%2 exploitsPublished Oct 10, 2018
- CVE-2018-8532Medium 5.5An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server…microsoft · sql server management studioEPSS23%2 exploitsPublished Oct 10, 2018
- CVE-2018-8527Medium 5.5An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server…microsoft · sql server management studioEPSS23%2 exploitsPublished Oct 10, 2018
- CVE-2018-14493Medium 6.1Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the group name.opmantek · open-auditEPSS41%2 exploitsPublished Jul 25, 2018
- CVE-2017-8683Medium 5.5Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an attacker to execute remote code by the way it handles embedded…microsoft · windows 10EPSS23%2 exploitsPublished Sep 12, 2017
- CVE-2016-5725Medium 5.9Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.jcraft · jschEPSS24%1 exploitPublished Apr 21, 2021
- CVE-2016-3717Medium 5.5The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.imagemagick · imagemagickEPSS20%1 exploitPublished May 5, 2016
- CVE-2012-5611Medium 6.5mysql: acl_get() stack-based buffer overflowmariadb · mariadbEPSS24%1 exploitPublished Nov 29, 2012
- CVE-2012-0840Medium 5.0tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to…apache · portable runtimeEPSS42%1 exploitPublished Feb 10, 2012
- CVE-2011-0419Medium 4.3Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris…apache · http serverEPSS30%1 exploitPublished May 16, 2011
- CVE-2009-4487Medium 6.8nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.f5 · nginxEPSS30%1 exploitPublished Jan 13, 2010
- CVE-2009-1493Medium 6.8acroread: multiple vulnerabilities in Adobe Reader 8.1.4adobe · readerEPSS22%1 exploitPublished Apr 27, 2009
- CVE-2008-3984Medium 5.5Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than…oracle · database 10gEPSS42%1 exploitPublished Oct 14, 2008
- CVE-2008-3983Medium 5.5Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than…oracle · database 10gEPSS42%1 exploitPublished Oct 14, 2008
- CVE-2007-3670Medium 4.3Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1)…microsoft · internet explorerEPSS29%1 exploitPublished Jul 10, 2007
- CVE-2007-1683Medium 6.8Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control (ImShExt.dll) allows remote attackers to execute arbitrary code via unspecified vectors.incredimail · immenushellext activex controlEPSS38%2 exploitsPublished Apr 26, 2007
- CVE-2006-3469Medium 4.0mysql server DoSmysql · mysqlEPSS29%1 exploitPublished Jun 27, 2006
- CVE-2006-3081Medium 4.0mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.mysql · mysqlEPSS26%1 exploitPublished Jun 14, 2006
- CVE-2005-3745Medium 4.3Apache Struts Cross-site scripting Vulnerabilityapache · strutsEPSS26%1 exploitPublished May 1, 2022
- CVE-2005-1988Medium 5.1Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka "JPEG Image Rendering Memory Corruption Vulnerability".microsoft · internet explorerEPSS46%2 exploitsPublished Aug 10, 2005
- CVE-2005-1979Medium 5.0Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit) via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol…microsoft · windows 2000EPSS33%2 exploitsPublished Oct 12, 2005
- CVE-2005-1381Medium 6.8Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage parameter.oracle · application server web cacheEPSS20%2 exploitsPublished May 3, 2005
- CVE-2004-1043Medium 5.0Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript…microsoft · internet explorerEPSS45%1 exploitPublished Dec 31, 2004
- CVE-2003-0226Medium 5.0Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled.microsoft · internet information servicesEPSS43%2 exploitsPublished Jun 9, 2003
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-11906 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the… microsoft · internet explorer | Medium 5.3 | 25% | 2 exploits | |
| CVE-2017-1130 | IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. ibm · inotes | Medium 6.5 | 29% | 2 exploits | |
| CVE-2016-6897 | Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to… wordpress · wordpress | Medium 6.5 | 29% | 1 exploit | |
| CVE-2015-2790 | Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image. foxitsoftware · enterprise reader | Medium 4.3 | 25% | 4 exploits | |
| CVE-2014-5111 | Multiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a .. netfortris · trixbox | Medium 5.0 | 22% | 5 exploits | |
| CVE-2008-1609 | Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) website parameter to (a) forum.php, (b) headlines.php, and (c) main.php in forum/, and (2) main_dir parameter… jaf cms · jaf cms | Medium 6.8 | 44% | 2 exploits | |
| CVE-2008-1145 | ruby: webrick directory traversal ruby-lang · webrick | Medium 5.0 | 28% | 1 exploit | |
| CVE-2006-3281 | Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitrary code via a link to an SMB file share with a filename that contains encoded ..\ (%2e%2e%5c) sequences and whose extension contains the… microsoft · internet explorer | Medium 5.1 | 48% | 1 exploit | |
| CVE-2006-3014 | Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet. microsoft · excel | Medium 5.1 | 30% | 1 exploit | |
| CVE-2006-2111 | A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information… microsoft · outlook express | Medium 4.3 | 41% | 1 exploit | |
| CVE-2005-4131 | Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to… microsoft · excel | Medium 6.8 | 31% | 1 exploit | |
| CVE-2005-0688 | Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability… microsoft · windows 2003 server | Medium 5.0 | 47% | 2 exploits | |
| CVE-2003-0543 | Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values. openssl · openssl | Medium 5.0 | 27% | 1 exploit | |
| CVE-1999-0153 | Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke. microsoft · windows 95 | Medium 5.0 | 21% | 4 exploits | |
| CVE-2025-24071 | Microsoft Windows File Explorer Spoofing Vulnerability microsoft · windows 10 1507 | Medium 6.5 | 23% | 2 exploits | |
| CVE-2025-1122 | Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process. google · chrome | Medium 6.7 | 0.2% | 4 exploits | |
| CVE-2024-9793 | A vulnerability classified as critical was found in Tenda AC1206 up to 15.03.06.23. tenda · ac1206 firmware | Medium 5.3 | 23% | 2 exploits | |
| CVE-2024-8129 | A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to… dlink · dnr-202l firmware | Medium 5.3 | 23% | 1 exploit | |
| CVE-2024-7469 | It has been declared as critical. raisecom · msg1200 firmware | Medium 5.3 | 25% | 1 exploit | |
| CVE-2024-7468 | It has been classified as critical. raisecom · msg1200 firmware | Medium 5.3 | 25% | 1 exploit | |
| CVE-2024-32479 | LibreNMS uses Improper Sanitization on Service template name leads to Stored XSS librenms · librenms | Medium 5.4 | 34% | 1 exploit | |
| CVE-2024-27564 | pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter. dirk1983 · chatgpt | Medium 6.5 | 41% | 1 exploit | |
| CVE-2024-21320 | Windows Themes Spoofing Vulnerability microsoft · windows 10 1507 | Medium 6.5 | 23% | 1 exploit | |
| CVE-2023-2796 | The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id. myeventon · eventon | Medium 5.3 | 43% | 1 exploit | |
| CVE-2022-2863 | Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Administrator+) Path Traversal wpvivid · migration\, backup\, staging | Medium 4.9 | 25% | 1 exploit | |
| CVE-2019-12616 | phpMyAdmin CSRF Vulnerability phpmyadmin · phpmyadmin | Medium 6.5 | 20% | 1 exploit | |
| CVE-2018-8533 | An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server… microsoft · sql server management studio | Medium 5.5 | 23% | 2 exploits | |
| CVE-2018-8532 | An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server… microsoft · sql server management studio | Medium 5.5 | 23% | 2 exploits | |
| CVE-2018-8527 | An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server… microsoft · sql server management studio | Medium 5.5 | 23% | 2 exploits | |
| CVE-2018-14493 | Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the group name. opmantek · open-audit | Medium 6.1 | 41% | 2 exploits | |
| CVE-2017-8683 | Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an attacker to execute remote code by the way it handles embedded… microsoft · windows 10 | Medium 5.5 | 23% | 2 exploits | |
| CVE-2016-5725 | Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command. jcraft · jsch | Medium 5.9 | 24% | 1 exploit | |
| CVE-2016-3717 | The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image. imagemagick · imagemagick | Medium 5.5 | 20% | 1 exploit | |
| CVE-2012-5611 | mysql: acl_get() stack-based buffer overflow mariadb · mariadb | Medium 6.5 | 24% | 1 exploit | |
| CVE-2012-0840 | tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to… apache · portable runtime | Medium 5.0 | 42% | 1 exploit | |
| CVE-2011-0419 | Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris… apache · http server | Medium 4.3 | 30% | 1 exploit | |
| CVE-2009-4487 | nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. f5 · nginx | Medium 6.8 | 30% | 1 exploit | |
| CVE-2009-1493 | acroread: multiple vulnerabilities in Adobe Reader 8.1.4 adobe · reader | Medium 6.8 | 22% | 1 exploit | |
| CVE-2008-3984 | Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than… oracle · database 10g | Medium 5.5 | 42% | 1 exploit | |
| CVE-2008-3983 | Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than… oracle · database 10g | Medium 5.5 | 42% | 1 exploit | |
| CVE-2007-3670 | Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1)… microsoft · internet explorer | Medium 4.3 | 29% | 1 exploit | |
| CVE-2007-1683 | Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control (ImShExt.dll) allows remote attackers to execute arbitrary code via unspecified vectors. incredimail · immenushellext activex control | Medium 6.8 | 38% | 2 exploits | |
| CVE-2006-3469 | mysql server DoS mysql · mysql | Medium 4.0 | 29% | 1 exploit | |
| CVE-2006-3081 | mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function. mysql · mysql | Medium 4.0 | 26% | 1 exploit | |
| CVE-2005-3745 | Apache Struts Cross-site scripting Vulnerability apache · struts | Medium 4.3 | 26% | 1 exploit | |
| CVE-2005-1988 | Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka "JPEG Image Rendering Memory Corruption Vulnerability". microsoft · internet explorer | Medium 5.1 | 46% | 2 exploits | |
| CVE-2005-1979 | Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit) via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol… microsoft · windows 2000 | Medium 5.0 | 33% | 2 exploits | |
| CVE-2005-1381 | Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage parameter. oracle · application server web cache | Medium 6.8 | 20% | 2 exploits | |
| CVE-2004-1043 | Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript… microsoft · internet explorer | Medium 5.0 | 45% | 1 exploit | |
| CVE-2003-0226 | Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled. microsoft · internet information services | Medium 5.0 | 43% | 2 exploits |
Showing 101–150 of 178
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.