Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
178 vulnerabilities · highest score first
- CVE-2008-1547Medium 4.3Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter.microsoft · exchange serverEPSS48%1 exploitPublished Oct 20, 2008
- CVE-2021-46387Medium 6.1ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS).zyxel · zywall 2 plus internet security appliance firmwareEPSS21%2 exploitsPublished Mar 2, 2022
- CVE-2019-9955Medium 6.1On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100 devices, the security firewall login page is vulnerable to Reflected XSS via the unsanitized 'mp_idx'…zyxel · atp200 firmwareEPSS21%3 exploitsPublished Apr 22, 2019
- CVE-2016-6435Medium 6.5The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376.cisco · secure firewall management centerEPSS37%1 exploitPublished Oct 6, 2016
- CVE-2012-2626Medium 5.0cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action.sonicwall · scrutinizerEPSS44%1 exploitPublished Jul 31, 2012
- CVE-2009-0689Medium 6.8Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x…k-meleon project · k-meleonEPSS28%11 exploitsPublished Jul 1, 2009
- CVE-2005-0420Medium 5.8Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.microsoft · exchange serverEPSS26%1 exploitPublished Apr 27, 2005
- CVE-2018-16323Medium 6.5ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value.imagemagick · imagemagickEPSS49%2 exploitsPublished Sep 1, 2018
- CVE-2022-23513Medium 5.3In case of an attack, the threat actor will obtain the ability to perform an unauthorized query for blocked domains on queryads endpoint.pi-hole · adminlteEPSS41%3 exploitsPublished Dec 22, 2022
- CVE-2010-0467Medium 5.8Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla!chillcreations · com ccnewsletterEPSS43%2 exploitsPublished Feb 2, 2010
- CVE-2021-28113Medium 6.7A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (with admin access to the Okta Access Gateway UI) to execute OS commands as a privileged system account.okta · access gatewayEPSS22%1 exploitPublished Apr 2, 2021
- CVE-2019-6110Medium 6.8In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.openbsd · opensshEPSS25%3 exploitsPublished Jan 31, 2019
- CVE-2019-0186Medium 6.1Cross-site Scripting in Apache Pluto Chatroom demoapache · plutoEPSS21%3 exploitsPublished May 24, 2022
- CVE-2015-4870Medium 4.0mysql-5.5 - packages as an option announcementmariadb · mariadbEPSS30%3 exploitsPublished Dec 4, 2015
- CVE-2001-0136Medium 5.0Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.proftpd · proftpdEPSS45%3 exploitsPublished Mar 12, 2001
- CVE-2018-0833Medium 5.3The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerability due to how specially crafted requests are handled, aka "SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability".microsoft · windows 8.1EPSS40%3 exploitsPublished Feb 14, 2018
- CVE-2014-2671Medium 6.8Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted WAV file.microsoft · windows media playerEPSS46%8 exploitsPublished Mar 31, 2014
- CVE-2011-0096Medium 6.1The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document,…microsoft · windows 7EPSS47%2 exploitsPublished Jan 31, 2011
- CVE-2010-0432Medium 4.3Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlier, as used in Opentaps, Neogia, and Entente Oya, allow remote attackers to inject arbitrary web script or HTML via (1) the productStoreId parameter to…apache · ofbizEPSS23%3 exploitsPublished Apr 15, 2010
- CVE-2009-3641Medium 4.3Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.snort · snortEPSS39%2 exploitsPublished Oct 28, 2009
- CVE-2002-1561Medium 5.0The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference.microsoft · windows 2000EPSS38%4 exploitsPublished Apr 2, 2003
- CVE-2023-4548Medium 5.3A vulnerability classified as critical has been found in SPA-Cart eCommerce CMS 1.9.0.3.spa-cart · ecommerce cmsEPSS32%2 exploitsPublished Aug 26, 2023
- CVE-2022-29548Medium 6.1A reflected XSS issue exists in the Management Console of several WSO2 products.wso2 · api managerEPSS41%2 exploitsPublished Apr 20, 2022
- CVE-2019-13344Medium 5.3An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to change settings.crudlab · wp like buttonEPSS45%2 exploitsPublished Jul 5, 2019
- CVE-2017-14537Medium 6.5trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/home/index.php.netfortris · trixboxEPSS39%3 exploitsPublished Feb 16, 2018
- CVE-2015-7855Medium 6.5The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.ntp · ntpEPSS31%2 exploitsPublished Aug 7, 2017
- CVE-2013-2143Medium 6.5Katello: /app/controllers/users_controller.rb insufficient privilege checktheforeman · katelloEPSS48%3 exploitsPublished Mar 24, 2014
- CVE-2019-17503Medium 5.3An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd) directly: it contains sensitive information about the database through the SQL queries within this batch file.kirona · dynamic resource schedulingEPSS48%3 exploitsPublished Oct 11, 2019
- CVE-2018-14058Medium 6.5Pimcore SQLi Vulnerabilitypimcore · pimcoreEPSS29%3 exploitsPublished May 14, 2022
- CVE-2017-8295Medium 5.9WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a crafted wp-login.php?action=lostpassword request and then arranging for this message to bounce or be…wordpress · wordpressEPSS27%2 exploitsPublished May 4, 2017
- CVE-2017-11885Medium 6.6Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a remote code execution vulnerability due to the way the Routing and…microsoft · windows 10EPSS46%2 exploitsPublished Dec 12, 2017
- CVE-2017-1002000Medium 5.3How to Create an App for Android iPhone Easytouch <= 3.0 - Missing Authorizationmobile-friendly-app-builder-by-easytouch project · mobile-friendly-app-builder-by-easytouchEPSS27%2 exploitsPublished Feb 28, 2017
- CVE-2015-3082Medium 6.4flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS43%1 exploitPublished May 12, 2015
- CVE-2011-2757Medium 5.0Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a ..manageengine · servicedesk plusEPSS39%4 exploitsPublished Jul 17, 2011
- CVE-2011-1137Medium 5.0Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message.proftpd · proftpdEPSS28%2 exploitsPublished Mar 11, 2011
- CVE-2009-1523Medium 5.3Directory traversal in Mort Bay Jettymortbay · jettyEPSS26%2 exploitsPublished May 2, 2022
- CVE-2009-0932Medium 6.4horde: XSS vulnerability and directory traversal vulnerabilitydebian · hordeEPSS46%1 exploitPublished Jan 27, 2009
- CVE-2009-0815Medium 6.9TYPO3 leaks a hash secret in an error messagetypo3 · typo3EPSS42%1 exploitPublished May 2, 2022
- CVE-2006-0254Medium 4.3Apache Geronimo console 1.0 vulnerable to cross-site scriptingapache · geronimoEPSS32%2 exploitsPublished May 1, 2022
- CVE-2005-3388Medium 4.3Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."php · phpEPSS49%1 exploitPublished Oct 31, 2005
- CVE-2004-0595Medium 6.8The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore…php · phpEPSS45%1 exploitPublished Jul 14, 2004
- CVE-2024-57004Medium 6.1Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading to the triggering of the XSS by visiting the SENT session.roundcube · webmailEPSS40%1 exploitPublished Feb 3, 2025
- CVE-2024-53457Medium 5.4LibreNMS stored cross-site scripting (XSS) vulnerability in the Device Settings sectionlibrenms · librenmsEPSS46%1 exploitPublished Dec 6, 2024
- CVE-2022-47874Medium 6.5Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'com.jedox.etl.mngr.Connections' and method 'getGlobalConnection'.jedox · jedoxEPSS21%2 exploitsPublished May 3, 2023
- CVE-2018-6849Medium 4.3In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request.duckduckgo · duckduckgoEPSS29%2 exploitsPublished Apr 1, 2018
- CVE-2018-6794Medium 5.3Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c.suricata-ids · suricataEPSS24%2 exploitsPublished Feb 7, 2018
- CVE-2018-4936Medium 6.5Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability.adobe · flash playerEPSS25%2 exploitsPublished May 19, 2018
- CVE-2018-14392Medium 6.1The New Threads plugin before 1.2 for MyBB has XSS.mybb · new threadsEPSS49%2 exploitsPublished Jul 18, 2018
- CVE-2015-6127Medium 4.3Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to read arbitrary files via a crafted .mcl file, aka "Windows Media Center Information Disclosure Vulnerability."microsoft · windows 7EPSS46%2 exploitsPublished Dec 9, 2015
- CVE-2015-3083Medium 6.4flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS41%1 exploitPublished May 12, 2015
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2008-1547 | Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter. microsoft · exchange server | Medium 4.3 | 48% | 1 exploit | |
| CVE-2021-46387 | ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). zyxel · zywall 2 plus internet security appliance firmware | Medium 6.1 | 21% | 2 exploits | |
| CVE-2019-9955 | On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100 devices, the security firewall login page is vulnerable to Reflected XSS via the unsanitized 'mp_idx'… zyxel · atp200 firmware | Medium 6.1 | 21% | 3 exploits | |
| CVE-2016-6435 | The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376. cisco · secure firewall management center | Medium 6.5 | 37% | 1 exploit | |
| CVE-2012-2626 | cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action. sonicwall · scrutinizer | Medium 5.0 | 44% | 1 exploit | |
| CVE-2009-0689 | Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x… k-meleon project · k-meleon | Medium 6.8 | 28% | 11 exploits | |
| CVE-2005-0420 | Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application. microsoft · exchange server | Medium 5.8 | 26% | 1 exploit | |
| CVE-2018-16323 | ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. imagemagick · imagemagick | Medium 6.5 | 49% | 2 exploits | |
| CVE-2022-23513 | In case of an attack, the threat actor will obtain the ability to perform an unauthorized query for blocked domains on queryads endpoint. pi-hole · adminlte | Medium 5.3 | 41% | 3 exploits | |
| CVE-2010-0467 | Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! chillcreations · com ccnewsletter | Medium 5.8 | 43% | 2 exploits | |
| CVE-2021-28113 | A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (with admin access to the Okta Access Gateway UI) to execute OS commands as a privileged system account. okta · access gateway | Medium 6.7 | 22% | 1 exploit | |
| CVE-2019-6110 | In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred. openbsd · openssh | Medium 6.8 | 25% | 3 exploits | |
| CVE-2019-0186 | Cross-site Scripting in Apache Pluto Chatroom demo apache · pluto | Medium 6.1 | 21% | 3 exploits | |
| CVE-2015-4870 | mysql-5.5 - packages as an option announcement mariadb · mariadb | Medium 4.0 | 30% | 3 exploits | |
| CVE-2001-0136 | Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed. proftpd · proftpd | Medium 5.0 | 45% | 3 exploits | |
| CVE-2018-0833 | The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerability due to how specially crafted requests are handled, aka "SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability". microsoft · windows 8.1 | Medium 5.3 | 40% | 3 exploits | |
| CVE-2014-2671 | Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted WAV file. microsoft · windows media player | Medium 6.8 | 46% | 8 exploits | |
| CVE-2011-0096 | The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document,… microsoft · windows 7 | Medium 6.1 | 47% | 2 exploits | |
| CVE-2010-0432 | Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlier, as used in Opentaps, Neogia, and Entente Oya, allow remote attackers to inject arbitrary web script or HTML via (1) the productStoreId parameter to… apache · ofbiz | Medium 4.3 | 23% | 3 exploits | |
| CVE-2009-3641 | Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol. snort · snort | Medium 4.3 | 39% | 2 exploits | |
| CVE-2002-1561 | The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference. microsoft · windows 2000 | Medium 5.0 | 38% | 4 exploits | |
| CVE-2023-4548 | A vulnerability classified as critical has been found in SPA-Cart eCommerce CMS 1.9.0.3. spa-cart · ecommerce cms | Medium 5.3 | 32% | 2 exploits | |
| CVE-2022-29548 | A reflected XSS issue exists in the Management Console of several WSO2 products. wso2 · api manager | Medium 6.1 | 41% | 2 exploits | |
| CVE-2019-13344 | An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to change settings. crudlab · wp like button | Medium 5.3 | 45% | 2 exploits | |
| CVE-2017-14537 | trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/home/index.php. netfortris · trixbox | Medium 6.5 | 39% | 3 exploits | |
| CVE-2015-7855 | The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value. ntp · ntp | Medium 6.5 | 31% | 2 exploits | |
| CVE-2013-2143 | Katello: /app/controllers/users_controller.rb insufficient privilege check theforeman · katello | Medium 6.5 | 48% | 3 exploits | |
| CVE-2019-17503 | An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd) directly: it contains sensitive information about the database through the SQL queries within this batch file. kirona · dynamic resource scheduling | Medium 5.3 | 48% | 3 exploits | |
| CVE-2018-14058 | Pimcore SQLi Vulnerability pimcore · pimcore | Medium 6.5 | 29% | 3 exploits | |
| CVE-2017-8295 | WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a crafted wp-login.php?action=lostpassword request and then arranging for this message to bounce or be… wordpress · wordpress | Medium 5.9 | 27% | 2 exploits | |
| CVE-2017-11885 | Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a remote code execution vulnerability due to the way the Routing and… microsoft · windows 10 | Medium 6.6 | 46% | 2 exploits | |
| CVE-2017-1002000 | How to Create an App for Android iPhone Easytouch <= 3.0 - Missing Authorization mobile-friendly-app-builder-by-easytouch project · mobile-friendly-app-builder-by-easytouch | Medium 5.3 | 27% | 2 exploits | |
| CVE-2015-3082 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Medium 6.4 | 43% | 1 exploit | |
| CVE-2011-2757 | Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a .. manageengine · servicedesk plus | Medium 5.0 | 39% | 4 exploits | |
| CVE-2011-1137 | Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message. proftpd · proftpd | Medium 5.0 | 28% | 2 exploits | |
| CVE-2009-1523 | Directory traversal in Mort Bay Jetty mortbay · jetty | Medium 5.3 | 26% | 2 exploits | |
| CVE-2009-0932 | horde: XSS vulnerability and directory traversal vulnerability debian · horde | Medium 6.4 | 46% | 1 exploit | |
| CVE-2009-0815 | TYPO3 leaks a hash secret in an error message typo3 · typo3 | Medium 6.9 | 42% | 1 exploit | |
| CVE-2006-0254 | Apache Geronimo console 1.0 vulnerable to cross-site scripting apache · geronimo | Medium 4.3 | 32% | 2 exploits | |
| CVE-2005-3388 | Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment." php · php | Medium 4.3 | 49% | 1 exploit | |
| CVE-2004-0595 | The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore… php · php | Medium 6.8 | 45% | 1 exploit | |
| CVE-2024-57004 | Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading to the triggering of the XSS by visiting the SENT session. roundcube · webmail | Medium 6.1 | 40% | 1 exploit | |
| CVE-2024-53457 | LibreNMS stored cross-site scripting (XSS) vulnerability in the Device Settings section librenms · librenms | Medium 5.4 | 46% | 1 exploit | |
| CVE-2022-47874 | Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'com.jedox.etl.mngr.Connections' and method 'getGlobalConnection'. jedox · jedox | Medium 6.5 | 21% | 2 exploits | |
| CVE-2018-6849 | In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request. duckduckgo · duckduckgo | Medium 4.3 | 29% | 2 exploits | |
| CVE-2018-6794 | Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. suricata-ids · suricata | Medium 5.3 | 24% | 2 exploits | |
| CVE-2018-4936 | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability. adobe · flash player | Medium 6.5 | 25% | 2 exploits | |
| CVE-2018-14392 | The New Threads plugin before 1.2 for MyBB has XSS. mybb · new threads | Medium 6.1 | 49% | 2 exploits | |
| CVE-2015-6127 | Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to read arbitrary files via a crafted .mcl file, aka "Windows Media Center Information Disclosure Vulnerability." microsoft · windows 7 | Medium 4.3 | 46% | 2 exploits | |
| CVE-2015-3083 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Medium 6.4 | 41% | 1 exploit |
Showing 1–50 of 178
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.