Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 20, 2026
503 vulnerabilities · highest score first
- CVE-2003-0681High 7.5A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.sendmail · sendmailEPSS22%1 exploitPublished Oct 6, 2003
- CVE-2003-0666High 7.5Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data offset and data size parameters in a Corel WordPerfect file.microsoft · wordperfect converterEPSS22%2 exploitsPublished Oct 20, 2003
- CVE-2003-0309High 7.5Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which…microsoft · internet explorerEPSS50%1 exploitPublished Jun 9, 2003
- CVE-2002-1375High 7.5The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.oracle · mysqlEPSS24%1 exploitPublished Dec 12, 2002
- CVE-2002-1374High 7.5The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real…oracle · mysqlEPSS20%1 exploitPublished Dec 12, 2002
- CVE-2002-1217High 7.5Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses…microsoft · internet explorerEPSS50%1 exploitPublished Oct 28, 2002
- CVE-2025-41450High 8.2Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2EPSS0.4%2 exploitsPublished May 8, 2025
- CVE-2023-50564High 8.8An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file.pluck-cms · pluckEPSS29%1 exploitPublished Dec 14, 2023
- CVE-2023-36212High 8.8File Upload vulnerability in Total CMS v.1.7.4 allows a remote attacker to execute arbitrary code via a crafted PHP file to the edit page function.totalcms · total cmsEPSS26%1 exploitPublished Aug 2, 2023
- CVE-2023-33782High 8.8D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function.dlink · dir-842v2 firmwareEPSS36%1 exploitPublished Jun 6, 2023
- CVE-2023-33781High 8.8An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file.dlink · dir-842v2 firmwareEPSS31%1 exploitPublished Jun 6, 2023
- CVE-2023-1162High 8.8UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5.draytek · vigor 2960 firmwareEPSS26%1 exploitPublished Mar 3, 2023
- CVE-2022-28955High 7.5An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.dlink · dir-816l firmwareEPSS40%1 exploitPublished May 18, 2022
- CVE-2021-46441High 8.8In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization.dlink · dir-825 firmwareEPSS33%1 exploitPublished Apr 27, 2022
- CVE-2021-27224High 7.5The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code.irfanview · wpgEPSS38%1 exploitPublished Feb 17, 2021
- CVE-2020-35606High 8.8Arbitrary command execution can occur in Webmin through 1.962.webmin · webminEPSS28%2 exploitsPublished Dec 21, 2020
- CVE-2020-10931High 7.5Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary protocol header to try_read_command_binary in memcached.c.memcached · memcachedEPSS28%1 exploitPublished Mar 24, 2020
- CVE-2019-3948High 7.5The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH-SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX…dahua · dh-ipc-hx863xEPSS25%2 exploitsPublished Jul 29, 2019
- CVE-2019-17418High 7.2There is SQL injection via the admin/?n=language&c=language_general&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997.metinfo · metinfoEPSS49%1 exploitPublished Oct 9, 2019
- CVE-2019-16997High 7.2In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doExportPack appno parameter.metinfo · metinfoEPSS49%1 exploitPublished Sep 30, 2019
- CVE-2018-7777High 8.8The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software versions prior to v1.3.4.schneider-electric · u.motion builderEPSS32%1 exploitPublished Jul 3, 2018
- CVE-2018-15517High 8.6The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, leading to SSRF, as demonstrated by an…dlink · central wifimanagerEPSS44%1 exploitPublished Jan 31, 2019
- CVE-2017-9355High 7.4XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted XSPF playlist file.subsonic · subsonicEPSS27%2 exploitsPublished Jun 7, 2017
- CVE-2017-0090High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…microsoft · windows 7EPSS43%1 exploitPublished Mar 16, 2017
- CVE-2017-0088High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Uniscribe Remote Code Execution Vulnerability."microsoft · windows 7EPSS42%1 exploitPublished Mar 16, 2017
- CVE-2017-0087High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…microsoft · windows 7EPSS43%1 exploitPublished Mar 16, 2017
- CVE-2017-0086High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…microsoft · windows 7EPSS43%1 exploitPublished Mar 16, 2017
- CVE-2017-0083High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…microsoft · windows 7EPSS43%1 exploitPublished Mar 16, 2017
- CVE-2017-0072High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…microsoft · windows 7EPSS43%1 exploitPublished Mar 16, 2017
- CVE-2016-7274High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web…microsoft · windows 10EPSS42%1 exploitPublished Dec 20, 2016
- CVE-2016-3316High 7.8Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability."microsoft · wordEPSS47%1 exploitPublished Aug 9, 2016
- CVE-2016-3301High 7.8The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync…microsoft · live meetingEPSS44%1 exploitPublished Aug 9, 2016
- CVE-2011-3315High 7.8Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response…cisco · unified communications managerEPSS26%1 exploitPublished Oct 27, 2011
- CVE-2010-1173High 7.1The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a…linux · linux kernelEPSS21%1 exploitPublished May 7, 2010
- CVE-2007-0612High 7.8Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the (1) giffile, (2)…microsoft · internet explorerEPSS44%1 exploitPublished Jan 31, 2007
- CVE-2003-1328High 7.5The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp…microsoft · internet explorerEPSS39%1 exploitPublished Feb 19, 2003
- CVE-2003-0686High 7.5Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code.dave airlie · pam smbEPSS27%1 exploitPublished Aug 26, 2003
- CVE-2002-1131High 7.5Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.squirrelmail · squirrelmailEPSS26%1 exploitPublished Sep 16, 2002
- CVE-2002-0866High 7.5Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL…microsoft · virtual machineEPSS41%1 exploitPublished Oct 11, 2002
- CVE-2002-0724High 7.5Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2, or (3) NetServerEnum3,…microsoft · windows 2000EPSS26%2 exploitsPublished Sep 24, 2002
- CVE-2001-0875High 7.5Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download.microsoft · internet explorerEPSS28%2 exploitsPublished Nov 26, 2001
- CVE-2001-0341High 7.5Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll.microsoft · frontpage server extensionsEPSS30%2 exploitsPublished Jul 21, 2001
- CVE-2000-0967High 10.0PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.php · phpEPSS21%2 exploitsPublished Oct 12, 2000
- CVE-2026-27606High 8.8Rollup 4 has Arbitrary File Write via Path Traversalrollupjs · rollupEPSS1.6%1 exploitPublished Feb 25, 2026
- CVE-2024-49357High 7.5In version 1.2.4 and all prior versions, the API endpoints in ZimaOS, such as http:///v1/users/image?path=/var/lib/casaos/1/app_order.json and http:///v1/users/image?path=/var/lib/casaos/1/system.json, expose sensitive data like installed applications and system information…zimaspace · zimaosEPSS24%1 exploitPublished Oct 24, 2024
- CVE-2023-26255High 7.5An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira.stagil · stagil navigationEPSS47%1 exploitPublished Feb 28, 2023
- CVE-2022-30860High 7.2FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel.fudforum · fudforumEPSS25%1 exploitPublished Jun 6, 2022
- CVE-2022-30023High 8.8Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.tenda · hg9 firmwareEPSS39%1 exploitPublished Jun 16, 2022
- CVE-2022-28590High 7.2A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme.pixelimity · pixelimityEPSS24%1 exploitPublished May 3, 2022
- CVE-2021-46418High 7.5An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.telesquare · tlr-2855ks6 firmwareEPSS24%2 exploitsPublished Apr 7, 2022
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2003-0681 | A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences. sendmail · sendmail | High 7.5 | 22% | 1 exploit | |
| CVE-2003-0666 | Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data offset and data size parameters in a Corel WordPerfect file. microsoft · wordperfect converter | High 7.5 | 22% | 2 exploits | |
| CVE-2003-0309 | Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which… microsoft · internet explorer | High 7.5 | 50% | 1 exploit | |
| CVE-2002-1375 | The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response. oracle · mysql | High 7.5 | 24% | 1 exploit | |
| CVE-2002-1374 | The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real… oracle · mysql | High 7.5 | 20% | 1 exploit | |
| CVE-2002-1217 | Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses… microsoft · internet explorer | High 7.5 | 50% | 1 exploit | |
| CVE-2025-41450 | Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2 | High 8.2 | 0.4% | 2 exploits | |
| CVE-2023-50564 | An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file. pluck-cms · pluck | High 8.8 | 29% | 1 exploit | |
| CVE-2023-36212 | File Upload vulnerability in Total CMS v.1.7.4 allows a remote attacker to execute arbitrary code via a crafted PHP file to the edit page function. totalcms · total cms | High 8.8 | 26% | 1 exploit | |
| CVE-2023-33782 | D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function. dlink · dir-842v2 firmware | High 8.8 | 36% | 1 exploit | |
| CVE-2023-33781 | An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file. dlink · dir-842v2 firmware | High 8.8 | 31% | 1 exploit | |
| CVE-2023-1162 | UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. draytek · vigor 2960 firmware | High 8.8 | 26% | 1 exploit | |
| CVE-2022-28955 | An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php. dlink · dir-816l firmware | High 7.5 | 40% | 1 exploit | |
| CVE-2021-46441 | In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization. dlink · dir-825 firmware | High 8.8 | 33% | 1 exploit | |
| CVE-2021-27224 | The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code. irfanview · wpg | High 7.5 | 38% | 1 exploit | |
| CVE-2020-35606 | Arbitrary command execution can occur in Webmin through 1.962. webmin · webmin | High 8.8 | 28% | 2 exploits | |
| CVE-2020-10931 | Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary protocol header to try_read_command_binary in memcached.c. memcached · memcached | High 7.5 | 28% | 1 exploit | |
| CVE-2019-3948 | The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH-SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX… dahua · dh-ipc-hx863x | High 7.5 | 25% | 2 exploits | |
| CVE-2019-17418 | There is SQL injection via the admin/?n=language&c=language_general&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997. metinfo · metinfo | High 7.2 | 49% | 1 exploit | |
| CVE-2019-16997 | In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doExportPack appno parameter. metinfo · metinfo | High 7.2 | 49% | 1 exploit | |
| CVE-2018-7777 | The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. schneider-electric · u.motion builder | High 8.8 | 32% | 1 exploit | |
| CVE-2018-15517 | The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, leading to SSRF, as demonstrated by an… dlink · central wifimanager | High 8.6 | 44% | 1 exploit | |
| CVE-2017-9355 | XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted XSPF playlist file. subsonic · subsonic | High 7.4 | 27% | 2 exploits | |
| CVE-2017-0090 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in… microsoft · windows 7 | High 8.8 | 43% | 1 exploit | |
| CVE-2017-0088 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Uniscribe Remote Code Execution Vulnerability." microsoft · windows 7 | High 8.8 | 42% | 1 exploit | |
| CVE-2017-0087 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in… microsoft · windows 7 | High 8.8 | 43% | 1 exploit | |
| CVE-2017-0086 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in… microsoft · windows 7 | High 8.8 | 43% | 1 exploit | |
| CVE-2017-0083 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in… microsoft · windows 7 | High 8.8 | 43% | 1 exploit | |
| CVE-2017-0072 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in… microsoft · windows 7 | High 8.8 | 43% | 1 exploit | |
| CVE-2016-7274 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web… microsoft · windows 10 | High 8.8 | 42% | 1 exploit | |
| CVE-2016-3316 | Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability." microsoft · word | High 7.8 | 47% | 1 exploit | |
| CVE-2016-3301 | The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync… microsoft · live meeting | High 7.8 | 44% | 1 exploit | |
| CVE-2011-3315 | Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response… cisco · unified communications manager | High 7.8 | 26% | 1 exploit | |
| CVE-2010-1173 | The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a… linux · linux kernel | High 7.1 | 21% | 1 exploit | |
| CVE-2007-0612 | Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the (1) giffile, (2)… microsoft · internet explorer | High 7.8 | 44% | 1 exploit | |
| CVE-2003-1328 | The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp… microsoft · internet explorer | High 7.5 | 39% | 1 exploit | |
| CVE-2003-0686 | Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code. dave airlie · pam smb | High 7.5 | 27% | 1 exploit | |
| CVE-2002-1131 | Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php. squirrelmail · squirrelmail | High 7.5 | 26% | 1 exploit | |
| CVE-2002-0866 | Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL… microsoft · virtual machine | High 7.5 | 41% | 1 exploit | |
| CVE-2002-0724 | Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2, or (3) NetServerEnum3,… microsoft · windows 2000 | High 7.5 | 26% | 2 exploits | |
| CVE-2001-0875 | Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download. microsoft · internet explorer | High 7.5 | 28% | 2 exploits | |
| CVE-2001-0341 | Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll. microsoft · frontpage server extensions | High 7.5 | 30% | 2 exploits | |
| CVE-2000-0967 | PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs. php · php | High 10.0 | 21% | 2 exploits | |
| CVE-2026-27606 | Rollup 4 has Arbitrary File Write via Path Traversal rollupjs · rollup | High 8.8 | 1.6% | 1 exploit | |
| CVE-2024-49357 | In version 1.2.4 and all prior versions, the API endpoints in ZimaOS, such as http:///v1/users/image?path=/var/lib/casaos/1/app_order.json and http:///v1/users/image?path=/var/lib/casaos/1/system.json, expose sensitive data like installed applications and system information… zimaspace · zimaos | High 7.5 | 24% | 1 exploit | |
| CVE-2023-26255 | An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. stagil · stagil navigation | High 7.5 | 47% | 1 exploit | |
| CVE-2022-30860 | FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel. fudforum · fudforum | High 7.2 | 25% | 1 exploit | |
| CVE-2022-30023 | Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function. tenda · hg9 firmware | High 8.8 | 39% | 1 exploit | |
| CVE-2022-28590 | A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme. pixelimity · pixelimity | High 7.2 | 24% | 1 exploit | |
| CVE-2021-46418 | An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts. telesquare · tlr-2855ks6 firmware | High 7.5 | 24% | 2 exploits |
Showing 351–400 of 503
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.