Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
1,460 vulnerabilities · highest score first
- CVE-2011-1669High 7.5WP Custom Pages <= 0.5.0.1 - Path Traversalmikoviny · wp custom pagesEPSS22%2 exploitsPublished Apr 2, 2011
- CVE-2011-0096Medium 6.1The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document,…microsoft · windows 7EPSS47%2 exploitsPublished Jan 31, 2011
- CVE-2010-4538Critical 9.3Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ENTTEC DMX packet with Run Length Encoding (RLE)…wireshark · wiresharkEPSS29%1 exploitPublished Jan 7, 2011
- CVE-2010-3639Critical 9.3flash-plugin: security bulletin APSB10-26adobe · flash playerEPSS22%1 exploitPublished Nov 4, 2010
- CVE-2010-3227Critical 9.3Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and…microsoft · windows 7EPSS21%2 exploitsPublished Oct 26, 2010
- CVE-2010-2321Critical 9.3Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file.adobe · indesign cs3EPSS21%2 exploitsPublished Jun 18, 2010
- CVE-2010-0432Medium 4.3Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlier, as used in Opentaps, Neogia, and Entente Oya, allow remote attackers to inject arbitrary web script or HTML via (1) the productStoreId parameter to…apache · ofbizEPSS23%3 exploitsPublished Apr 15, 2010
- CVE-2009-3641Medium 4.3Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.snort · snortEPSS39%2 exploitsPublished Oct 28, 2009
- CVE-2009-0692Critical 10.0dhclient: stack overflow leads to arbitrary code execution as rootisc · dhcpEPSS26%1 exploitPublished Jul 14, 2009
- CVE-2009-0565Critical 9.3Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote…microsoft · officeEPSS41%2 exploitsPublished Jun 10, 2009
- CVE-2008-0116Critical 9.3Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability."microsoft · excelEPSS48%1 exploitPublished Mar 11, 2008
- CVE-2007-2217Critical 9.3Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute arbitrary code via crafted image files that trigger memory corruption, as demonstrated by a certain .tif (TIFF) file.kodak · image viewerEPSS41%1 exploitPublished Oct 9, 2007
- CVE-2007-2216Critical 9.3The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to…microsoft · internet explorerEPSS41%1 exploitPublished Aug 14, 2007
- CVE-2007-0216Critical 9.3wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section length headers, aka "Microsoft Works File Converter Input Validation…microsoft · officeEPSS38%1 exploitPublished Feb 12, 2008
- CVE-2006-6332High 7.5Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via unspecified vectors, related to the encode_ie and giwscan_cb functions.madwifi · madwifiEPSS20%3 exploitsPublished Dec 10, 2006
- CVE-2006-4193High 7.5Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including (1) imskdic.dll (Microsoft IME), (2) chtskdic.dll (Microsoft IME),…microsoft · internet explorerEPSS47%2 exploitsPublished Aug 16, 2006
- CVE-2005-1219High 7.5Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.microsoft · image color managementEPSS50%2 exploitsPublished Jul 12, 2005
- CVE-2003-0816High 7.5Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript,…microsoft · internet explorerEPSS48%2 exploitsPublished Feb 3, 2004
- CVE-2003-0725High 7.5Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code.realnetworks · helix universal serverEPSS49%1 exploitPublished Oct 20, 2003
- CVE-2002-1561Medium 5.0The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference.microsoft · windows 2000EPSS38%4 exploitsPublished Apr 2, 2003
- CVE-2001-0876High 7.5Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.microsoft · windows 98EPSS49%2 exploitsPublished Dec 20, 2001
- CVE-1999-0911Critical 10.0Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.proftpd project · proftpdEPSS38%2 exploitsPublished Aug 27, 1999
- CVE-1999-0368Critical 10.0Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a.proftpd project · proftpdEPSS40%2 exploitsPublished Feb 9, 1999
- CVE-2026-97205Critical 9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module.microsoft · azl3 httpd 2.4.68-1EPSS0.5%1 exploitPublished Oct 14, 2026
- CVE-2025-64155Critical 9.8An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an…fortinet · fortisiemEPSS43%1 exploitPublished Jan 13, 2026
- CVE-2025-59719Critical 9.8An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.fortinet · fortiwebEPSS29%·Published Dec 10, 2025
- CVE-2025-11001High 7.87-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability.7-zip · 7-zipEPSS27%1 exploitPublished Nov 19, 2025
- CVE-2025-1097High 8.8ngress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotationEPSS33%1 exploitPublished Mar 25, 2025
- CVE-2024-55661High 8.7Laravel Pulse Allows Remote Code Execution via Unprotected Query Methodlaravel · pulseEPSS30%1 exploitPublished Dec 13, 2024
- CVE-2024-31445High 8.8Cacti provides an operational monitoring and fault management framework.cacti · cactiEPSS26%1 exploitPublished May 14, 2024
- CVE-2024-24824High 8.8Graylog vulnerable to instantiation of arbitrary classes triggered by API requestgraylog · graylogEPSS35%1 exploitPublished Feb 7, 2024
- CVE-2024-24747High 8.8Minio unsafe default: Access keys inherit admin of root user, allowing privilege escalationminio · minioEPSS34%1 exploitPublished Feb 1, 2024
- CVE-2024-0778Critical 9.8UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930.uniview · isc 2500-s firmwareEPSS32%1 exploitPublished Jan 22, 2024
- CVE-2023-6612Critical 9.8It has been rated as critical.totolink · x5000r firmwareEPSS31%1 exploitPublished Dec 8, 2023
- CVE-2023-5147High 8.8UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231.dlink · dar-7000 firmwareEPSS26%1 exploitPublished Sep 25, 2023
- CVE-2023-50252Critical 9.8Prior to version 0.5.1, when handling tag that references an tag, it merges the attributes from the tag to the tag.dompdf · php-svg-libEPSS24%1 exploitPublished Dec 12, 2023
- CVE-2023-4548Medium 5.3A vulnerability classified as critical has been found in SPA-Cart eCommerce CMS 1.9.0.3.spa-cart · ecommerce cmsEPSS32%2 exploitsPublished Aug 26, 2023
- CVE-2023-4473Critical 9.8A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted URL to a vulnerable…zyxel · nas326 firmwareEPSS41%·Published Dec 1, 2023
- CVE-2023-3852High 7.2It has been declared as critical.openrapid · rapidcmsEPSS25%1 exploitPublished Jul 23, 2023
- CVE-2023-37569High 8.8This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component.esds.co · emagic data center managementEPSS34%2 exploitsPublished Aug 8, 2023
- CVE-2023-3710Critical 9.8Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004.honeywell · pm43 firmwareEPSS49%1 exploitPublished Sep 12, 2023
- CVE-2023-36355Critical 9.9TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm.tp-link · tl-wr940n firmwareEPSS32%2 exploitsPublished Jun 22, 2023
- CVE-2023-35138Critical 9.8A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a…zyxel · nas326 firmwareEPSS40%·Published Dec 1, 2023
- CVE-2023-34129High 8.8Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying…sonicwall · analyticsEPSS41%·Published Jul 13, 2023
- CVE-2023-32235High 7.5Path Traversal in Ghostghost · ghostEPSS39%1 exploitPublished May 5, 2023
- CVE-2023-30261Critical 9.8Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request.openwb · openwbEPSS32%1 exploitPublished Jun 26, 2023
- CVE-2023-26802Critical 9.8An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request.dcnglobal · dcbi-netlog-lab firmwareEPSS49%1 exploitPublished Mar 26, 2023
- CVE-2023-2523Critical 9.8It has been rated as critical.e-office · e-officeEPSS33%1 exploitPublished May 4, 2023
- CVE-2023-0562Critical 9.8It has been rated as critical.phpgurukul · bank locker management systemEPSS44%1 exploitPublished Jan 28, 2023
- CVE-2022-48194High 8.8TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the signature check is inadequate.tp-link · tl-wr902ac firmwareEPSS33%1 exploitPublished Dec 30, 2022
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2011-1669 | WP Custom Pages <= 0.5.0.1 - Path Traversal mikoviny · wp custom pages | High 7.5 | 22% | 2 exploits | |
| CVE-2011-0096 | The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document,… microsoft · windows 7 | Medium 6.1 | 47% | 2 exploits | |
| CVE-2010-4538 | Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ENTTEC DMX packet with Run Length Encoding (RLE)… wireshark · wireshark | Critical 9.3 | 29% | 1 exploit | |
| CVE-2010-3639 | flash-plugin: security bulletin APSB10-26 adobe · flash player | Critical 9.3 | 22% | 1 exploit | |
| CVE-2010-3227 | Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and… microsoft · windows 7 | Critical 9.3 | 21% | 2 exploits | |
| CVE-2010-2321 | Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file. adobe · indesign cs3 | Critical 9.3 | 21% | 2 exploits | |
| CVE-2010-0432 | Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlier, as used in Opentaps, Neogia, and Entente Oya, allow remote attackers to inject arbitrary web script or HTML via (1) the productStoreId parameter to… apache · ofbiz | Medium 4.3 | 23% | 3 exploits | |
| CVE-2009-3641 | Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol. snort · snort | Medium 4.3 | 39% | 2 exploits | |
| CVE-2009-0692 | dhclient: stack overflow leads to arbitrary code execution as root isc · dhcp | Critical 10.0 | 26% | 1 exploit | |
| CVE-2009-0565 | Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote… microsoft · office | Critical 9.3 | 41% | 2 exploits | |
| CVE-2008-0116 | Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability." microsoft · excel | Critical 9.3 | 48% | 1 exploit | |
| CVE-2007-2217 | Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute arbitrary code via crafted image files that trigger memory corruption, as demonstrated by a certain .tif (TIFF) file. kodak · image viewer | Critical 9.3 | 41% | 1 exploit | |
| CVE-2007-2216 | The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to… microsoft · internet explorer | Critical 9.3 | 41% | 1 exploit | |
| CVE-2007-0216 | wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section length headers, aka "Microsoft Works File Converter Input Validation… microsoft · office | Critical 9.3 | 38% | 1 exploit | |
| CVE-2006-6332 | Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via unspecified vectors, related to the encode_ie and giwscan_cb functions. madwifi · madwifi | High 7.5 | 20% | 3 exploits | |
| CVE-2006-4193 | Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including (1) imskdic.dll (Microsoft IME), (2) chtskdic.dll (Microsoft IME),… microsoft · internet explorer | High 7.5 | 47% | 2 exploits | |
| CVE-2005-1219 | Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags. microsoft · image color management | High 7.5 | 50% | 2 exploits | |
| CVE-2003-0816 | Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript,… microsoft · internet explorer | High 7.5 | 48% | 2 exploits | |
| CVE-2003-0725 | Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code. realnetworks · helix universal server | High 7.5 | 49% | 1 exploit | |
| CVE-2002-1561 | The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference. microsoft · windows 2000 | Medium 5.0 | 38% | 4 exploits | |
| CVE-2001-0876 | Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL. microsoft · windows 98 | High 7.5 | 49% | 2 exploits | |
| CVE-1999-0911 | Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories. proftpd project · proftpd | Critical 10.0 | 38% | 2 exploits | |
| CVE-1999-0368 | Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. proftpd project · proftpd | Critical 10.0 | 40% | 2 exploits | |
| CVE-2026-97205 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. microsoft · azl3 httpd 2.4.68-1 | Critical 9.2 | 0.5% | 1 exploit | |
| CVE-2025-64155 | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an… fortinet · fortisiem | Critical 9.8 | 43% | 1 exploit | |
| CVE-2025-59719 | An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message. fortinet · fortiweb | Critical 9.8 | 29% | · | |
| CVE-2025-11001 | 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. 7-zip · 7-zip | High 7.8 | 27% | 1 exploit | |
| CVE-2025-1097 | ngress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation | High 8.8 | 33% | 1 exploit | |
| CVE-2024-55661 | Laravel Pulse Allows Remote Code Execution via Unprotected Query Method laravel · pulse | High 8.7 | 30% | 1 exploit | |
| CVE-2024-31445 | Cacti provides an operational monitoring and fault management framework. cacti · cacti | High 8.8 | 26% | 1 exploit | |
| CVE-2024-24824 | Graylog vulnerable to instantiation of arbitrary classes triggered by API request graylog · graylog | High 8.8 | 35% | 1 exploit | |
| CVE-2024-24747 | Minio unsafe default: Access keys inherit admin of root user, allowing privilege escalation minio · minio | High 8.8 | 34% | 1 exploit | |
| CVE-2024-0778 | UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930. uniview · isc 2500-s firmware | Critical 9.8 | 32% | 1 exploit | |
| CVE-2023-6612 | It has been rated as critical. totolink · x5000r firmware | Critical 9.8 | 31% | 1 exploit | |
| CVE-2023-5147 | UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. dlink · dar-7000 firmware | High 8.8 | 26% | 1 exploit | |
| CVE-2023-50252 | Prior to version 0.5.1, when handling tag that references an tag, it merges the attributes from the tag to the tag. dompdf · php-svg-lib | Critical 9.8 | 24% | 1 exploit | |
| CVE-2023-4548 | A vulnerability classified as critical has been found in SPA-Cart eCommerce CMS 1.9.0.3. spa-cart · ecommerce cms | Medium 5.3 | 32% | 2 exploits | |
| CVE-2023-4473 | A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted URL to a vulnerable… zyxel · nas326 firmware | Critical 9.8 | 41% | · | |
| CVE-2023-3852 | It has been declared as critical. openrapid · rapidcms | High 7.2 | 25% | 1 exploit | |
| CVE-2023-37569 | This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. esds.co · emagic data center management | High 8.8 | 34% | 2 exploits | |
| CVE-2023-3710 | Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. honeywell · pm43 firmware | Critical 9.8 | 49% | 1 exploit | |
| CVE-2023-36355 | TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. tp-link · tl-wr940n firmware | Critical 9.9 | 32% | 2 exploits | |
| CVE-2023-35138 | A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a… zyxel · nas326 firmware | Critical 9.8 | 40% | · | |
| CVE-2023-34129 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying… sonicwall · analytics | High 8.8 | 41% | · | |
| CVE-2023-32235 | Path Traversal in Ghost ghost · ghost | High 7.5 | 39% | 1 exploit | |
| CVE-2023-30261 | Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request. openwb · openwb | Critical 9.8 | 32% | 1 exploit | |
| CVE-2023-26802 | An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request. dcnglobal · dcbi-netlog-lab firmware | Critical 9.8 | 49% | 1 exploit | |
| CVE-2023-2523 | It has been rated as critical. e-office · e-office | Critical 9.8 | 33% | 1 exploit | |
| CVE-2023-0562 | It has been rated as critical. phpgurukul · bank locker management system | Critical 9.8 | 44% | 1 exploit | |
| CVE-2022-48194 | TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the signature check is inadequate. tp-link · tl-wr902ac firmware | High 8.8 | 33% | 1 exploit |
Showing 551–600 of 1,460
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.