Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 20, 2026
525 vulnerabilities · highest score first
- CVE-2022-28096High 7.2Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/Develop.php.skycaiji · skycaijiEPSS21%1 exploitPublished May 4, 2022
- CVE-2022-27474High 7.2SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field.salesagility · suitecrmEPSS23%1 exploitPublished Apr 15, 2022
- CVE-2021-34805High 7.5For each URL request, it accesses the corresponding .fau file on the operating system without preventing %2e%2e%5c directory traversal.land-software · faust iserverEPSS27%1 exploitPublished Jan 31, 2022
- CVE-2020-11579High 7.5installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.chadhaajay · phpkbEPSS27%1 exploitPublished Sep 3, 2020
- CVE-2019-9757High 7.5Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or visualization-exportPDF.view allows local files to be read.labkey · labkey serverEPSS37%1 exploitPublished Oct 29, 2019
- CVE-2019-16893High 7.5The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request.tp-link · tp-sg105e firmwareEPSS38%1 exploitPublished Feb 3, 2020
- CVE-2019-13063High 7.5Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_view page.sahipro · sahi proEPSS27%1 exploitPublished Sep 23, 2019
- CVE-2018-10822High 7.5Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices allows remote attackers…dlink · dir-140l firmwareEPSS39%1 exploitPublished Oct 17, 2018
- CVE-2017-5869High 8.8Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and execute arbitrary JSP code via a ..nuxeo · nuxeoEPSS35%1 exploitPublished Mar 24, 2017
- CVE-2017-15647High 7.5On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value.fiberhome · routerfiberhome firmwareEPSS27%1 exploitPublished Oct 19, 2017
- CVE-2016-9554High 7.2The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface.sophos · web applianceEPSS25%1 exploitPublished Jan 28, 2017
- CVE-2016-2389High 7.5Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a ..sap · netweaverEPSS41%1 exploitPublished Feb 16, 2016
- CVE-2016-0122High 7.8Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption…microsoft · excelEPSS41%1 exploitPublished Apr 12, 2016
- CVE-2016-0111High 7.5Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than…microsoft · edgeEPSS39%1 exploitPublished Mar 9, 2016
- CVE-2016-0108High 7.5Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0102, CVE-2016-0103,…microsoft · internet explorerEPSS39%1 exploitPublished Mar 9, 2016
- CVE-2010-4367High 7.5awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server or (2) NFS server.awstats · awstatsEPSS27%1 exploitPublished Dec 2, 2010
- CVE-2009-1558High 7.8Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e.cisco · wvc54gcaEPSS30%1 exploitPublished May 6, 2009
- CVE-2008-3263High 7.8The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote…asterisk · asteriskEPSS28%1 exploitPublished Jul 22, 2008
- CVE-2006-7066High 7.1Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating an object inside an iframe, deleting the frame by setting its location.href to about:blank, then accessing a property of the object within the deleted frame,…microsoft · internet explorerEPSS22%1 exploitPublished Mar 2, 2007
- CVE-2006-3431High 7.5Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option,…microsoft · excelEPSS28%1 exploitPublished Jul 7, 2006
- CVE-2004-0727High 7.5Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the…microsoft · internet explorerEPSS40%1 exploitPublished Jul 27, 2004
- CVE-2004-0104High 7.5Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.metamail corporation · metamailEPSS26%1 exploitPublished Feb 18, 2004
- CVE-2003-0910High 7.2The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points…microsoft · windows 2000EPSS26%1 exploitPublished Jun 1, 2004
- CVE-2003-0908High 7.2The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using…microsoft · windows 2000EPSS26%1 exploitPublished Jun 1, 2004
- CVE-2003-0838High 7.5Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but…microsoft · internet explorerEPSS38%1 exploitPublished Nov 17, 2003
- CVE-2003-0113High 7.5Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP response containing long values in (1) Content-type and (2) Content-encoding fields.microsoft · internet explorerEPSS39%1 exploitPublished May 12, 2003
- CVE-2002-1973High 7.5Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in multiple products including BadBlue, allows remote attackers to cause a denial of…working resources inc. · badblueEPSS40%1 exploitPublished Dec 31, 2002
- CVE-2002-1412High 7.5Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script.gallery project · galleryEPSS39%1 exploitPublished Apr 11, 2003
- CVE-2001-0239High 7.5Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.microsoft · isa serverEPSS28%1 exploitPublished Jul 2, 2001
- CVE-2000-0834High 7.5The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication"…microsoft · windows 2000EPSS40%1 exploitPublished Nov 14, 2000
- CVE-1999-0236High 7.5ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.apache · http serverEPSS26%1 exploitPublished Jan 1, 1997
- CVE-2026-85250High 7.5Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component.Published Oct 19, 2026
- CVE-2026-58221High 8.8Samba AD authenticated LDAP access domain takeover.Published Jul 28, 2026
- CVE-2026-53995High 8.8MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint.Published Oct 19, 2026
- CVE-2026-52856High 7.5Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic.EPSS0.6%1 exploitPublished Jul 31, 2026
- CVE-2026-102578High 8.8Moodle: sql injection in question bank web servicemoodle · moodleEPSS0.3%1 exploitPublished Sep 30, 2026
- CVE-2025-7206High 8.9A vulnerability, which was classified as critical, has been found in D-Link DIR-825 2.10.dlink · dir-825 firmwareEPSS22%1 exploitPublished Jul 8, 2025
- CVE-2025-47166High 8.8Microsoft SharePoint Server Remote Code Execution Vulnerabilitymicrosoft · sharepoint enterprise serverEPSS22%1 exploitPublished Jun 9, 2025
- CVE-2024-27356High 7.5An issue was discovered on certain GL-iNet devices.gl-inet · a1300 firmwareEPSS24%1 exploitPublished Feb 26, 2024
- CVE-2023-28130High 7.2Local user may lead to privilege escalation using Gaia Portal hostnames page.checkpoint · gaia portalEPSS21%·Published Jul 26, 2023
- CVE-2023-2522High 7.2It has been declared as critical.feiyuxing · vec40g firmwareEPSS34%1 exploitPublished May 4, 2023
- CVE-2023-0656High 7.5A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.sonicwall · sonicosEPSS41%·Published Mar 2, 2023
- CVE-2022-36620High 7.5D-link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting.dlink · dir-816 firmwareEPSS24%1 exploitPublished Aug 31, 2022
- CVE-2022-36309High 8.8Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web management UI.airspan · airvelocity 1500 firmwareEPSS25%1 exploitPublished Aug 15, 2022
- CVE-2022-34047High 7.5An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/set_safety.shtml?r=52300 and searching for [var syspasswd].wavlink · wl-wn530hg4 firmwareEPSS22%1 exploitPublished Jul 20, 2022
- CVE-2022-34046High 7.5An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/sysinit.shtml?r=52300 and searching for [logincheck(user);].wavlink · wn533a8 firmwareEPSS21%1 exploitPublished Jul 20, 2022
- CVE-2021-45043High 7.5HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_Language parameter.hd-network real-time monitoring system project · hd-network real-time monitoring systemEPSS33%1 exploitPublished Dec 15, 2021
- CVE-2021-40382High 7.5An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices.comprotech · ip570 firmwareEPSS23%1 exploitPublished Sep 1, 2021
- CVE-2021-40381High 7.5An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices.comprotech · ip570 firmwareEPSS23%1 exploitPublished Sep 1, 2021
- CVE-2021-40380High 7.5An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices.comprotech · ip570 firmwareEPSS23%1 exploitPublished Sep 1, 2021
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-28096 | Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/Develop.php. skycaiji · skycaiji | High 7.2 | 21% | 1 exploit | |
| CVE-2022-27474 | SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field. salesagility · suitecrm | High 7.2 | 23% | 1 exploit | |
| CVE-2021-34805 | For each URL request, it accesses the corresponding .fau file on the operating system without preventing %2e%2e%5c directory traversal. land-software · faust iserver | High 7.5 | 27% | 1 exploit | |
| CVE-2020-11579 | installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled. chadhaajay · phpkb | High 7.5 | 27% | 1 exploit | |
| CVE-2019-9757 | Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or visualization-exportPDF.view allows local files to be read. labkey · labkey server | High 7.5 | 37% | 1 exploit | |
| CVE-2019-16893 | The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request. tp-link · tp-sg105e firmware | High 7.5 | 38% | 1 exploit | |
| CVE-2019-13063 | Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_view page. sahipro · sahi pro | High 7.5 | 27% | 1 exploit | |
| CVE-2018-10822 | Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices allows remote attackers… dlink · dir-140l firmware | High 7.5 | 39% | 1 exploit | |
| CVE-2017-5869 | Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and execute arbitrary JSP code via a .. nuxeo · nuxeo | High 8.8 | 35% | 1 exploit | |
| CVE-2017-15647 | On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value. fiberhome · routerfiberhome firmware | High 7.5 | 27% | 1 exploit | |
| CVE-2016-9554 | The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. sophos · web appliance | High 7.2 | 25% | 1 exploit | |
| CVE-2016-2389 | Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. sap · netweaver | High 7.5 | 41% | 1 exploit | |
| CVE-2016-0122 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption… microsoft · excel | High 7.8 | 41% | 1 exploit | |
| CVE-2016-0111 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than… microsoft · edge | High 7.5 | 39% | 1 exploit | |
| CVE-2016-0108 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0102, CVE-2016-0103,… microsoft · internet explorer | High 7.5 | 39% | 1 exploit | |
| CVE-2010-4367 | awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server or (2) NFS server. awstats · awstats | High 7.5 | 27% | 1 exploit | |
| CVE-2009-1558 | Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e. cisco · wvc54gca | High 7.8 | 30% | 1 exploit | |
| CVE-2008-3263 | The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote… asterisk · asterisk | High 7.8 | 28% | 1 exploit | |
| CVE-2006-7066 | Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating an object inside an iframe, deleting the frame by setting its location.href to about:blank, then accessing a property of the object within the deleted frame,… microsoft · internet explorer | High 7.1 | 22% | 1 exploit | |
| CVE-2006-3431 | Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option,… microsoft · excel | High 7.5 | 28% | 1 exploit | |
| CVE-2004-0727 | Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the… microsoft · internet explorer | High 7.5 | 40% | 1 exploit | |
| CVE-2004-0104 | Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code. metamail corporation · metamail | High 7.5 | 26% | 1 exploit | |
| CVE-2003-0910 | The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points… microsoft · windows 2000 | High 7.2 | 26% | 1 exploit | |
| CVE-2003-0908 | The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using… microsoft · windows 2000 | High 7.2 | 26% | 1 exploit | |
| CVE-2003-0838 | Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but… microsoft · internet explorer | High 7.5 | 38% | 1 exploit | |
| CVE-2003-0113 | Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP response containing long values in (1) Content-type and (2) Content-encoding fields. microsoft · internet explorer | High 7.5 | 39% | 1 exploit | |
| CVE-2002-1973 | Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in multiple products including BadBlue, allows remote attackers to cause a denial of… working resources inc. · badblue | High 7.5 | 40% | 1 exploit | |
| CVE-2002-1412 | Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script. gallery project · gallery | High 7.5 | 39% | 1 exploit | |
| CVE-2001-0239 | Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type. microsoft · isa server | High 7.5 | 28% | 1 exploit | |
| CVE-2000-0834 | The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication"… microsoft · windows 2000 | High 7.5 | 40% | 1 exploit | |
| CVE-1999-0236 | ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs. apache · http server | High 7.5 | 26% | 1 exploit | |
| CVE-2026-85250 | Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component. | High 7.5 | · | 1 exploit | |
| CVE-2026-58221 | Samba AD authenticated LDAP access domain takeover. | High 8.8 | · | 1 exploit | |
| CVE-2026-53995 | MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint. | High 8.8 | · | 1 exploit | |
| CVE-2026-52856 | Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. | High 7.5 | 0.6% | 1 exploit | |
| CVE-2026-102578 | Moodle: sql injection in question bank web service moodle · moodle | High 8.8 | 0.3% | 1 exploit | |
| CVE-2025-7206 | A vulnerability, which was classified as critical, has been found in D-Link DIR-825 2.10. dlink · dir-825 firmware | High 8.9 | 22% | 1 exploit | |
| CVE-2025-47166 | Microsoft SharePoint Server Remote Code Execution Vulnerability microsoft · sharepoint enterprise server | High 8.8 | 22% | 1 exploit | |
| CVE-2024-27356 | An issue was discovered on certain GL-iNet devices. gl-inet · a1300 firmware | High 7.5 | 24% | 1 exploit | |
| CVE-2023-28130 | Local user may lead to privilege escalation using Gaia Portal hostnames page. checkpoint · gaia portal | High 7.2 | 21% | · | |
| CVE-2023-2522 | It has been declared as critical. feiyuxing · vec40g firmware | High 7.2 | 34% | 1 exploit | |
| CVE-2023-0656 | A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash. sonicwall · sonicos | High 7.5 | 41% | · | |
| CVE-2022-36620 | D-link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting. dlink · dir-816 firmware | High 7.5 | 24% | 1 exploit | |
| CVE-2022-36309 | Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web management UI. airspan · airvelocity 1500 firmware | High 8.8 | 25% | 1 exploit | |
| CVE-2022-34047 | An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/set_safety.shtml?r=52300 and searching for [var syspasswd]. wavlink · wl-wn530hg4 firmware | High 7.5 | 22% | 1 exploit | |
| CVE-2022-34046 | An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/sysinit.shtml?r=52300 and searching for [logincheck(user);]. wavlink · wn533a8 firmware | High 7.5 | 21% | 1 exploit | |
| CVE-2021-45043 | HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_Language parameter. hd-network real-time monitoring system project · hd-network real-time monitoring system | High 7.5 | 33% | 1 exploit | |
| CVE-2021-40382 | An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. comprotech · ip570 firmware | High 7.5 | 23% | 1 exploit | |
| CVE-2021-40381 | An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. comprotech · ip570 firmware | High 7.5 | 23% | 1 exploit | |
| CVE-2021-40380 | An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. comprotech · ip570 firmware | High 7.5 | 23% | 1 exploit |
Showing 451–500 of 525
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.