Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
178 vulnerabilities · highest score first
- CVE-2024-6269Medium 5.1The manipulation of the argument indevice leads to command injection.ruijie · rg-uac firmwareEPSS21%1 exploitPublished Jun 24, 2024
- CVE-2024-47525Medium 6.2LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Rules" featurelibrenms · librenmsEPSS30%1 exploitPublished Oct 1, 2024
- CVE-2023-0084Medium 6.1Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scriptingwpmet · metform elementor contact form builderEPSS29%1 exploitPublished Feb 1, 2023
- CVE-2021-25158Medium 5.9A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and…arubanetworks · instantEPSS30%2 exploitsPublished Mar 29, 2021
- CVE-2018-18777Medium 4.3Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subpage) allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /..microstrategy · microstrategy webEPSS23%3 exploitsPublished Nov 1, 2018
- CVE-2015-5116Medium 5.0flash-plugin: information disclosure issues fixed in APSB15-16adobe · airEPSS22%1 exploitPublished Jul 8, 2015
- CVE-2015-3337Medium 4.3Improper Limitation of a Pathname to a Restricted Directory in Elasticsearchelasticsearch · elasticsearchEPSS33%1 exploitPublished May 17, 2022
- CVE-2015-2998Medium 5.0SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as demonstrated by decrypting the database password in WEB-INF/conf/serverConf.xml.sysaid · sysaidEPSS26%2 exploitsPublished Jun 8, 2015
- CVE-2015-2746Medium 6.5The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances before 7.8.4 Hotfix 02 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the "second"…websense · tritonEPSS25%2 exploitsPublished Mar 26, 2015
- CVE-2015-1579Medium 5.0Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a ..elegantthemes · diviEPSS21%3 exploitsPublished Feb 11, 2015
- CVE-2014-7883Medium 5.0HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response.hp · universal configuration management databaseEPSS37%1 exploitPublished Feb 15, 2015
- CVE-2014-6308Medium 5.0Directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a ..osclass · osclassEPSS22%3 exploitsPublished Oct 20, 2014
- CVE-2014-5258Medium 4.0Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated users to read arbitrary files via a ..webedition · webedition cmsEPSS20%2 exploitsPublished Nov 6, 2014
- CVE-2013-2419Medium 5.0Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D.oracle · jreEPSS23%1 exploitPublished Apr 17, 2013
- CVE-2011-5057Medium 5.0struts: improper access restrictions to collections such as session and requestapache · strutsEPSS27%1 exploitPublished Dec 21, 2011
- CVE-2010-4598Medium 5.0Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a ..ecava · integraxorEPSS26%2 exploitsPublished Dec 23, 2010
- CVE-2010-4476Medium 5.0Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environmentsun · jreEPSS23%1 exploitPublished May 14, 2022
- CVE-2010-4051Medium 5.0The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (application crash) via a regular expression containing adjacent bounded repetitions that bypass the…gnu · glibcEPSS40%1 exploitPublished Jan 13, 2011
- CVE-2010-2265Medium 4.3Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote attackers to inject arbitrary web script or HTML via the svr parameter to…microsoft · windows server 2003EPSS21%1 exploitPublished Jun 15, 2010
- CVE-2010-1305Medium 5.0Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly other versions before 1.26.03, a module for Joomla!, allows remote attackers to read arbitrary files via a ..joomlamo · com jinventoryEPSS21%2 exploitsPublished Apr 8, 2010
- CVE-2009-3270Medium 5.0Microsoft Internet Explorer 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821.microsoft · internet explorerEPSS28%1 exploitPublished Sep 18, 2009
- CVE-2008-1311Medium 5.0The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang) by uploading a file named (1) '|' (pipe), (2) '"' (quotation mark), or (3) "<>" (less than, greater than); or (4) a file with a long name.packettrap · pt360 tool suite proEPSS49%1 exploitPublished Mar 12, 2008
- CVE-2007-2581Medium 4.3Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) in "every main page," as…microsoft · sharepoint serverEPSS36%1 exploitPublished May 9, 2007
- CVE-2007-2353Medium 5.3Apache Axis allows Exposure of Sensitive Information to an Unauthorized Actorapache · axisEPSS28%1 exploitPublished May 1, 2022
- CVE-2007-0247Medium 5.0squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.squid · squidEPSS20%1 exploitPublished Jan 16, 2007
- CVE-2004-0791Medium 5.0Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack." NOTE: CVE-2004-0790,…sun · solarisEPSS20%1 exploitPublished Apr 12, 2005
- CVE-2004-0558Medium 5.0The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port.easy software products · cupsEPSS27%1 exploitPublished Sep 28, 2004
- CVE-2003-0540Medium 5.0The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes…wietse venema · postfixEPSS21%2 exploitsPublished Aug 27, 2003
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-6269 | The manipulation of the argument indevice leads to command injection. ruijie · rg-uac firmware | Medium 5.1 | 21% | 1 exploit | |
| CVE-2024-47525 | LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Rules" feature librenms · librenms | Medium 6.2 | 30% | 1 exploit | |
| CVE-2023-0084 | Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting wpmet · metform elementor contact form builder | Medium 6.1 | 29% | 1 exploit | |
| CVE-2021-25158 | A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and… arubanetworks · instant | Medium 5.9 | 30% | 2 exploits | |
| CVE-2018-18777 | Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subpage) allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. microstrategy · microstrategy web | Medium 4.3 | 23% | 3 exploits | |
| CVE-2015-5116 | flash-plugin: information disclosure issues fixed in APSB15-16 adobe · air | Medium 5.0 | 22% | 1 exploit | |
| CVE-2015-3337 | Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch elasticsearch · elasticsearch | Medium 4.3 | 33% | 1 exploit | |
| CVE-2015-2998 | SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as demonstrated by decrypting the database password in WEB-INF/conf/serverConf.xml. sysaid · sysaid | Medium 5.0 | 26% | 2 exploits | |
| CVE-2015-2746 | The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances before 7.8.4 Hotfix 02 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the "second"… websense · triton | Medium 6.5 | 25% | 2 exploits | |
| CVE-2015-1579 | Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. elegantthemes · divi | Medium 5.0 | 21% | 3 exploits | |
| CVE-2014-7883 | HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response. hp · universal configuration management database | Medium 5.0 | 37% | 1 exploit | |
| CVE-2014-6308 | Directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. osclass · osclass | Medium 5.0 | 22% | 3 exploits | |
| CVE-2014-5258 | Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated users to read arbitrary files via a .. webedition · webedition cms | Medium 4.0 | 20% | 2 exploits | |
| CVE-2013-2419 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. oracle · jre | Medium 5.0 | 23% | 1 exploit | |
| CVE-2011-5057 | struts: improper access restrictions to collections such as session and request apache · struts | Medium 5.0 | 27% | 1 exploit | |
| CVE-2010-4598 | Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. ecava · integraxor | Medium 5.0 | 26% | 2 exploits | |
| CVE-2010-4476 | Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment sun · jre | Medium 5.0 | 23% | 1 exploit | |
| CVE-2010-4051 | The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (application crash) via a regular expression containing adjacent bounded repetitions that bypass the… gnu · glibc | Medium 5.0 | 40% | 1 exploit | |
| CVE-2010-2265 | Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote attackers to inject arbitrary web script or HTML via the svr parameter to… microsoft · windows server 2003 | Medium 4.3 | 21% | 1 exploit | |
| CVE-2010-1305 | Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly other versions before 1.26.03, a module for Joomla!, allows remote attackers to read arbitrary files via a .. joomlamo · com jinventory | Medium 5.0 | 21% | 2 exploits | |
| CVE-2009-3270 | Microsoft Internet Explorer 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821. microsoft · internet explorer | Medium 5.0 | 28% | 1 exploit | |
| CVE-2008-1311 | The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang) by uploading a file named (1) '|' (pipe), (2) '"' (quotation mark), or (3) "<>" (less than, greater than); or (4) a file with a long name. packettrap · pt360 tool suite pro | Medium 5.0 | 49% | 1 exploit | |
| CVE-2007-2581 | Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) in "every main page," as… microsoft · sharepoint server | Medium 4.3 | 36% | 1 exploit | |
| CVE-2007-2353 | Apache Axis allows Exposure of Sensitive Information to an Unauthorized Actor apache · axis | Medium 5.3 | 28% | 1 exploit | |
| CVE-2007-0247 | squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions. squid · squid | Medium 5.0 | 20% | 1 exploit | |
| CVE-2004-0791 | Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack." NOTE: CVE-2004-0790,… sun · solaris | Medium 5.0 | 20% | 1 exploit | |
| CVE-2004-0558 | The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port. easy software products · cups | Medium 5.0 | 27% | 1 exploit | |
| CVE-2003-0540 | The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes… wietse venema · postfix | Medium 5.0 | 21% | 2 exploits |
Showing 151–178 of 178
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.