Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 20, 2026
755 vulnerabilities · highest score first
- CVE-2007-3624Critical 10.0Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrary code via a long string in the group parameter to /msgserver/html/group.sap · sap message serverEPSS37%1 exploitPublished Jul 9, 2007
- CVE-2007-1749Critical 9.3Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid buffer size, which triggers a…microsoft · internet explorerEPSS42%1 exploitPublished Aug 14, 2007
- CVE-2006-2383Critical 9.3Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data" related to "parameter validation" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet…microsoft · internet explorerEPSS40%1 exploitPublished Jun 13, 2006
- CVE-2005-0582Critical 10.0Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request.broadcom · license softwareEPSS37%1 exploitPublished May 2, 2005
- CVE-2004-0386Critical 10.0Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.mplayer · mplayerEPSS27%1 exploitPublished May 4, 2004
- CVE-2026-106173Critical 9.4A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.fortinet · fortisiemEPSS0.4%1 exploitPublished Oct 13, 2026
- CVE-2025-34035Critical 10.0An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier.engeniustech · epg5000 firmwareEPSS23%1 exploitPublished Jun 23, 2025
- CVE-2025-28137Critical 9.8The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.totolink · a810r firmwareEPSS34%1 exploitPublished Apr 15, 2025
- CVE-2024-6235Critical 9.4Sensitive information disclosure in NetScaler Consolecitrix · netscaler consoleEPSS21%·Published Jul 16, 2024
- CVE-2024-50330Critical 9.8SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution.ivanti · endpoint managerEPSS40%·Published Nov 12, 2024
- CVE-2023-36210Critical 9.8MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter.motocms · motocmsEPSS31%1 exploitPublished Aug 1, 2023
- CVE-2023-25279Critical 9.8OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload.dlink · dir-820l firmwareEPSS31%1 exploitPublished Mar 13, 2023
- CVE-2022-37134Critical 9.8D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi.dlink · dir-816 firmwareEPSS22%1 exploitPublished Aug 22, 2022
- CVE-2022-37128Critical 9.8In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end.dlink · dir-816 firmwareEPSS22%1 exploitPublished Aug 31, 2022
- CVE-2022-34974Critical 9.8D-Link DIR810LA1_FW102B22 was discovered to contain a command injection vulnerability via the Ping_addr function.dlink · dir-810l firmwareEPSS23%1 exploitPublished Aug 3, 2022
- CVE-2022-32417Critical 9.8PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php.pbootcms · pbootcmsEPSS35%1 exploitPublished Jul 14, 2022
- CVE-2022-31446Critical 9.8Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.tendacn · ac18 firmwareEPSS35%1 exploitPublished Jun 14, 2022
- CVE-2022-28956Critical 9.8An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload.dlink · dir-816l firmwareEPSS23%1 exploitPublished May 18, 2022
- CVE-2021-43118Critical 9.8A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor 300B 1.5.1.3 via a crafted HTTP message containing malformed QUERY STRING in mainfunction.cgi, which could let a remote malicious user execute arbitrary…draytek · vigor2960 firmwareEPSS35%1 exploitPublished Mar 29, 2022
- CVE-2021-39378Critical 9.8A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database.os4ed · opensisEPSS23%1 exploitPublished Sep 1, 2021
- CVE-2021-3064Critical 9.8A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges.paloaltonetworks · pan-osEPSS20%·Published Nov 11, 2021
- CVE-2021-27114Critical 9.8Within the handler function of the /goform/addassignment route, a very long text entry for the"'s_ip" and "s_mac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address.dlink · dir-816 firmwareEPSS25%1 exploitPublished Apr 14, 2021
- CVE-2020-10549Critical 9.8rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection.rconfig · rconfigEPSS32%1 exploitPublished Jun 4, 2020
- CVE-2019-9203Critical 9.8Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.nagios · incident managerEPSS20%1 exploitPublished Mar 28, 2019
- CVE-2019-8196Critical 9.8Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability.adobe · acrobat dcEPSS23%1 exploitPublished Oct 17, 2019
- CVE-2019-8195Critical 9.8Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability.adobe · acrobat dcEPSS23%1 exploitPublished Oct 17, 2019
- CVE-2019-8048Critical 9.8Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a buffer error vulnerability.adobe · acrobat dcEPSS35%1 exploitPublished Aug 20, 2019
- CVE-2019-13086Critical 9.8core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter.cszcms · csz cmsEPSS32%1 exploitPublished Jun 30, 2019
- CVE-2019-12990Critical 9.8Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal.citrix · netscaler sd-wanEPSS39%·Published Jul 16, 2019
- CVE-2018-8302Critical 9.8A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.microsoft · exchange serverEPSS26%·Published Aug 15, 2018
- CVE-2018-19864Critical 9.8NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability to read camera feeds or reconfigure the device.nuuo · nvrmini2 firmwareEPSS25%1 exploitPublished Dec 5, 2018
- CVE-2017-8225Critical 9.8On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked.wificam · wireless ip camera \(p2p\) firmwareEPSS35%1 exploitPublished Apr 25, 2017
- CVE-2017-7588Critical 9.8On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt.brother · ads firmwareEPSS34%1 exploitPublished Apr 12, 2017
- CVE-2017-3623Critical 10.0For supported versions that are affected see note.oracle · solarisEPSS23%1 exploitPublished Apr 24, 2017
- CVE-2017-12787Critical 9.8A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are…noviflow · noviwareEPSS25%1 exploitPublished Aug 22, 2017
- CVE-2016-9682Critical 9.8The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface.dell · sonicwall secure remote access serverEPSS23%1 exploitPublished Feb 22, 2017
- CVE-2016-5649Critical 9.8A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to access this page without any authentication.netgear · dgn2200 firmwareEPSS24%1 exploitPublished Jul 24, 2018
- CVE-2015-8617Critical 9.8php: Format string vulnerability in class name error messagephp · phpEPSS23%1 exploitPublished Dec 12, 2015
- CVE-2015-2510Critical 9.3Buffer overflow in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute…microsoft · lyncEPSS36%1 exploitPublished Sep 8, 2015
- CVE-2015-2444Critical 9.3Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2442.microsoft · internet explorerEPSS34%1 exploitPublished Aug 14, 2015
- CVE-2015-0050Critical 9.3Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-8967 and CVE-2015-0044.microsoft · internet explorerEPSS33%1 exploitPublished Feb 11, 2015
- CVE-2014-8387Critical 9.0cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell metacharacters in the pinghost parameter to ping.cgi.advantech · eki-6340EPSS31%1 exploitPublished Nov 20, 2014
- CVE-2014-4138Critical 9.3Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4130 and CVE-2014-4132.microsoft · internet explorerEPSS32%1 exploitPublished Oct 15, 2014
- CVE-2014-1799Critical 9.3Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282,…microsoft · internet explorerEPSS33%1 exploitPublished Jun 11, 2014
- CVE-2013-7052Critical 9.8D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi scriptdlink · dir-100 firmwareEPSS25%1 exploitPublished Feb 4, 2020
- CVE-2013-3164Critical 9.3Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS24%1 exploitPublished Jul 10, 2013
- CVE-2013-3152Critical 9.3Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3146.microsoft · internet explorerEPSS24%1 exploitPublished Jul 10, 2013
- CVE-2013-3146Critical 9.3Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3152.microsoft · internet explorerEPSS24%1 exploitPublished Jul 10, 2013
- CVE-2012-5960Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)portable sdk for upnp project · portable sdk for upnpEPSS33%1 exploitPublished Jan 29, 2013
- CVE-2012-4353Critical 9.3Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the…sielcosistemi · winlog liteEPSS25%1 exploitPublished Aug 19, 2012
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2007-3624 | Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrary code via a long string in the group parameter to /msgserver/html/group. sap · sap message server | Critical 10.0 | 37% | 1 exploit | |
| CVE-2007-1749 | Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid buffer size, which triggers a… microsoft · internet explorer | Critical 9.3 | 42% | 1 exploit | |
| CVE-2006-2383 | Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data" related to "parameter validation" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet… microsoft · internet explorer | Critical 9.3 | 40% | 1 exploit | |
| CVE-2005-0582 | Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request. broadcom · license software | Critical 10.0 | 37% | 1 exploit | |
| CVE-2004-0386 | Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header. mplayer · mplayer | Critical 10.0 | 27% | 1 exploit | |
| CVE-2026-106173 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets. fortinet · fortisiem | Critical 9.4 | 0.4% | 1 exploit | |
| CVE-2025-34035 | An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. engeniustech · epg5000 firmware | Critical 10.0 | 23% | 1 exploit | |
| CVE-2025-28137 | The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter. totolink · a810r firmware | Critical 9.8 | 34% | 1 exploit | |
| CVE-2024-6235 | Sensitive information disclosure in NetScaler Console citrix · netscaler console | Critical 9.4 | 21% | · | |
| CVE-2024-50330 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution. ivanti · endpoint manager | Critical 9.8 | 40% | · | |
| CVE-2023-36210 | MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter. motocms · motocms | Critical 9.8 | 31% | 1 exploit | |
| CVE-2023-25279 | OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload. dlink · dir-820l firmware | Critical 9.8 | 31% | 1 exploit | |
| CVE-2022-37134 | D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. dlink · dir-816 firmware | Critical 9.8 | 22% | 1 exploit | |
| CVE-2022-37128 | In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end. dlink · dir-816 firmware | Critical 9.8 | 22% | 1 exploit | |
| CVE-2022-34974 | D-Link DIR810LA1_FW102B22 was discovered to contain a command injection vulnerability via the Ping_addr function. dlink · dir-810l firmware | Critical 9.8 | 23% | 1 exploit | |
| CVE-2022-32417 | PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php. pbootcms · pbootcms | Critical 9.8 | 35% | 1 exploit | |
| CVE-2022-31446 | Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac. tendacn · ac18 firmware | Critical 9.8 | 35% | 1 exploit | |
| CVE-2022-28956 | An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload. dlink · dir-816l firmware | Critical 9.8 | 23% | 1 exploit | |
| CVE-2021-43118 | A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor 300B 1.5.1.3 via a crafted HTTP message containing malformed QUERY STRING in mainfunction.cgi, which could let a remote malicious user execute arbitrary… draytek · vigor2960 firmware | Critical 9.8 | 35% | 1 exploit | |
| CVE-2021-39378 | A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database. os4ed · opensis | Critical 9.8 | 23% | 1 exploit | |
| CVE-2021-3064 | A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges. paloaltonetworks · pan-os | Critical 9.8 | 20% | · | |
| CVE-2021-27114 | Within the handler function of the /goform/addassignment route, a very long text entry for the"'s_ip" and "s_mac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address. dlink · dir-816 firmware | Critical 9.8 | 25% | 1 exploit | |
| CVE-2020-10549 | rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection. rconfig · rconfig | Critical 9.8 | 32% | 1 exploit | |
| CVE-2019-9203 | Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API. nagios · incident manager | Critical 9.8 | 20% | 1 exploit | |
| CVE-2019-8196 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. adobe · acrobat dc | Critical 9.8 | 23% | 1 exploit | |
| CVE-2019-8195 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. adobe · acrobat dc | Critical 9.8 | 23% | 1 exploit | |
| CVE-2019-8048 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a buffer error vulnerability. adobe · acrobat dc | Critical 9.8 | 35% | 1 exploit | |
| CVE-2019-13086 | core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter. cszcms · csz cms | Critical 9.8 | 32% | 1 exploit | |
| CVE-2019-12990 | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal. citrix · netscaler sd-wan | Critical 9.8 | 39% | · | |
| CVE-2018-8302 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. microsoft · exchange server | Critical 9.8 | 26% | · | |
| CVE-2018-19864 | NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability to read camera feeds or reconfigure the device. nuuo · nvrmini2 firmware | Critical 9.8 | 25% | 1 exploit | |
| CVE-2017-8225 | On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. wificam · wireless ip camera \(p2p\) firmware | Critical 9.8 | 35% | 1 exploit | |
| CVE-2017-7588 | On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt. brother · ads firmware | Critical 9.8 | 34% | 1 exploit | |
| CVE-2017-3623 | For supported versions that are affected see note. oracle · solaris | Critical 10.0 | 23% | 1 exploit | |
| CVE-2017-12787 | A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are… noviflow · noviware | Critical 9.8 | 25% | 1 exploit | |
| CVE-2016-9682 | The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. dell · sonicwall secure remote access server | Critical 9.8 | 23% | 1 exploit | |
| CVE-2016-5649 | A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to access this page without any authentication. netgear · dgn2200 firmware | Critical 9.8 | 24% | 1 exploit | |
| CVE-2015-8617 | php: Format string vulnerability in class name error message php · php | Critical 9.8 | 23% | 1 exploit | |
| CVE-2015-2510 | Buffer overflow in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute… microsoft · lync | Critical 9.3 | 36% | 1 exploit | |
| CVE-2015-2444 | Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2442. microsoft · internet explorer | Critical 9.3 | 34% | 1 exploit | |
| CVE-2015-0050 | Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-8967 and CVE-2015-0044. microsoft · internet explorer | Critical 9.3 | 33% | 1 exploit | |
| CVE-2014-8387 | cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell metacharacters in the pinghost parameter to ping.cgi. advantech · eki-6340 | Critical 9.0 | 31% | 1 exploit | |
| CVE-2014-4138 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4130 and CVE-2014-4132. microsoft · internet explorer | Critical 9.3 | 32% | 1 exploit | |
| CVE-2014-1799 | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282,… microsoft · internet explorer | Critical 9.3 | 33% | 1 exploit | |
| CVE-2013-7052 | D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script dlink · dir-100 firmware | Critical 9.8 | 25% | 1 exploit | |
| CVE-2013-3164 | Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 24% | 1 exploit | |
| CVE-2013-3152 | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3146. microsoft · internet explorer | Critical 9.3 | 24% | 1 exploit | |
| CVE-2013-3146 | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3152. microsoft · internet explorer | Critical 9.3 | 24% | 1 exploit | |
| CVE-2012-5960 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) portable sdk for upnp project · portable sdk for upnp | Critical 10.0 | 33% | 1 exploit | |
| CVE-2012-4353 | Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the… sielcosistemi · winlog lite | Critical 9.3 | 25% | 1 exploit |
Showing 551–600 of 755
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.