Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 20, 2026
755 vulnerabilities · highest score first
- CVE-2012-2052Critical 9.3Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a long Collada asset element in a DAE file, as demonstrated by the cameraYFov value in the…adobe · photoshop cs5EPSS23%1 exploitPublished Jun 19, 2014
- CVE-2011-2013Critical 9.8Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka "Reference…microsoft · windows 7EPSS32%1 exploitPublished Nov 8, 2011
- CVE-2010-0476Critical 10.0The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted SMB…microsoft · windows server 2003EPSS34%1 exploitPublished Apr 14, 2010
- CVE-2010-0027Critical 9.3The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary…microsoft · internet explorerEPSS34%1 exploitPublished Jan 22, 2010
- CVE-2010-0017Critical 9.3Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold…microsoft · windows 7EPSS31%1 exploitPublished Feb 10, 2010
- CVE-2008-0117Critical 9.3Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability."microsoft · excelEPSS33%1 exploitPublished Mar 11, 2008
- CVE-2008-0112Critical 9.3Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability."microsoft · excelEPSS32%1 exploitPublished Mar 11, 2008
- CVE-2007-2221Critical 9.3Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; or 7 on Windows Vista allows remote…microsoft · internet explorerEPSS35%1 exploitPublished May 8, 2007
- CVE-2007-1658Critical 9.3Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local file or (2) UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as…microsoft · windows vistaEPSS36%1 exploitPublished Mar 24, 2007
- CVE-2005-3524Critical 10.0Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a long directory name, then executing the XPWD command.linux-ftpd-ssl · linux-ftpd-sslEPSS21%1 exploitPublished Nov 7, 2005
- CVE-2005-3277Critical 10.0The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("" or single backquote) in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different…hp · hp-uxEPSS22%1 exploitPublished Oct 21, 2005
- CVE-2004-2289Critical 10.0Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file.microsoft · windows xpEPSS23%1 exploitPublished Dec 31, 2004
- CVE-2002-0702Critical 10.0Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.isc · dhcpdEPSS31%1 exploitPublished Jul 26, 2002
- CVE-2002-0033Critical 10.0Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.sun · solarisEPSS23%1 exploitPublished May 29, 2002
- CVE-1999-0920Critical 10.0Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.university of washington · imapEPSS32%1 exploitPublished May 26, 1999
- CVE-2024-7332Critical 9.3It has been classified as critical.totolink · cp450 firmwareEPSS21%1 exploitPublished Jul 31, 2024
- CVE-2022-47071Critical 9.8In NVS365 V01, the background network test function can trigger command execution.nvs365 · nvs-365-v01 firmwareEPSS26%1 exploitPublished Feb 6, 2023
- CVE-2022-40881Critical 9.8SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.phpcontec · solarview compact firmwareEPSS30%1 exploitPublished Nov 17, 2022
- CVE-2022-35555Critical 9.8A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput parameters for arbitrary command execution.tenda · w6 firmwareEPSS26%1 exploitPublished Aug 12, 2022
- CVE-2022-31680Critical 9.1The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller).vmware · vcenter serverEPSS33%·Published Oct 7, 2022
- CVE-2022-30887Critical 9.8Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/editProductImage.php.pharmacy management system project · pharmacy management systemEPSS26%1 exploitPublished May 20, 2022
- CVE-2022-26213Critical 9.8Totolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters.totolink · x5000r firmwareEPSS26%1 exploitPublished Mar 15, 2022
- CVE-2021-42756Critical 9.8Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and below, 6.4 all versions may allow an unauthenticated remote attacker to achieve arbitrary code execution…fortinet · fortiwebEPSS35%·Published Feb 16, 2023
- CVE-2021-27828Critical 9.1SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.in4velocity · in4suite erpEPSS20%1 exploitPublished Jun 1, 2021
- CVE-2020-15906Critical 9.8tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts.tiki · tikiEPSS27%1 exploitPublished Oct 22, 2020
- CVE-2019-8982Critical 9.6com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF.wavemaker · wavemarker studioEPSS28%1 exploitPublished Feb 21, 2019
- CVE-2019-16072Critical 9.8An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ip_address variable within an snmp_browser action.netsas · enigma network management solutionEPSS26%1 exploitPublished Mar 19, 2020
- CVE-2019-15106Critical 9.8One can bypass the user password requirement and execute commands on the server.zohocorp · manageengine opmanagerEPSS25%1 exploitPublished Aug 16, 2019
- CVE-2019-12583Critical 9.1Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator.zyxel · uag2100 firmwareEPSS44%·Published Jun 27, 2019
- CVE-2018-8154Critical 9.8A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.microsoft · exchange serverEPSS24%·Published May 9, 2018
- CVE-2016-7182Critical 9.8The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync…microsoft · live meetingEPSS30%1 exploitPublished Oct 13, 2016
- CVE-2016-4203Critical 9.8Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…adobe · acrobatEPSS27%1 exploitPublished Jul 12, 2016
- CVE-2015-2523Critical 9.3Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption…microsoft · excelEPSS30%1 exploitPublished Sep 8, 2015
- CVE-2015-2521Critical 9.3Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."microsoft · excelEPSS28%1 exploitPublished Sep 8, 2015
- CVE-2015-2520Critical 9.3Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."microsoft · excelEPSS28%1 exploitPublished Sep 8, 2015
- CVE-2015-2431Critical 9.3Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library (OGL) font, aka "Microsoft Office Graphics Component…microsoft · live meetingEPSS30%1 exploitPublished Aug 14, 2015
- CVE-2015-0065Critical 9.3Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "OneTableDocumentStream Remote Code Execution Vulnerability."microsoft · wordEPSS30%1 exploitPublished Feb 11, 2015
- CVE-2015-0064Critical 9.3Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory…microsoft · officeEPSS30%1 exploitPublished Feb 11, 2015
- CVE-2015-0040Critical 9.3Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0018, CVE-2015-0037, and…microsoft · internet explorerEPSS30%1 exploitPublished Feb 11, 2015
- CVE-2014-4141Critical 9.3Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS31%1 exploitPublished Oct 15, 2014
- CVE-2014-1789Critical 9.3Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1790.microsoft · internet explorerEPSS29%1 exploitPublished Jun 11, 2014
- CVE-2014-1201Critical 10.0Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-33_1D97A, and Edge3 LH340 series with firmware 11.19.85_1FE3A allows remote attackers to cause a denial of…lorextechnology · edge2EPSS29%1 exploitPublished Jan 15, 2014
- CVE-2013-5912Critical 10.0VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action.thomsonreuters · velocity analytics vhayu analytic serverEPSS30%1 exploitPublished Nov 28, 2013
- CVE-2013-3686Critical 10.0cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action.ovislink · airlive wl2600camEPSS28%1 exploitPublished Oct 11, 2013
- CVE-2013-3151Critical 9.3Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3144 and…microsoft · internet explorerEPSS23%1 exploitPublished Jul 10, 2013
- CVE-2013-3144Critical 9.3Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3151 and…microsoft · internet explorerEPSS23%1 exploitPublished Jul 10, 2013
- CVE-2013-1311Critical 9.3Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability."microsoft · internet explorerEPSS21%1 exploitPublished May 15, 2013
- CVE-2013-0946Critical 9.3Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to execute arbitrary code via crafted commands.emc · alphastorEPSS29%1 exploitPublished May 10, 2013
- CVE-2011-2003Critical 9.3Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon…microsoft · windows 7EPSS27%1 exploitPublished Oct 11, 2011
- CVE-2011-1276Critical 9.3Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute…microsoft · excelEPSS28%1 exploitPublished Jun 16, 2011
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2012-2052 | Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a long Collada asset element in a DAE file, as demonstrated by the cameraYFov value in the… adobe · photoshop cs5 | Critical 9.3 | 23% | 1 exploit | |
| CVE-2011-2013 | Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka "Reference… microsoft · windows 7 | Critical 9.8 | 32% | 1 exploit | |
| CVE-2010-0476 | The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted SMB… microsoft · windows server 2003 | Critical 10.0 | 34% | 1 exploit | |
| CVE-2010-0027 | The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary… microsoft · internet explorer | Critical 9.3 | 34% | 1 exploit | |
| CVE-2010-0017 | Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold… microsoft · windows 7 | Critical 9.3 | 31% | 1 exploit | |
| CVE-2008-0117 | Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability." microsoft · excel | Critical 9.3 | 33% | 1 exploit | |
| CVE-2008-0112 | Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability." microsoft · excel | Critical 9.3 | 32% | 1 exploit | |
| CVE-2007-2221 | Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; or 7 on Windows Vista allows remote… microsoft · internet explorer | Critical 9.3 | 35% | 1 exploit | |
| CVE-2007-1658 | Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local file or (2) UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as… microsoft · windows vista | Critical 9.3 | 36% | 1 exploit | |
| CVE-2005-3524 | Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a long directory name, then executing the XPWD command. linux-ftpd-ssl · linux-ftpd-ssl | Critical 10.0 | 21% | 1 exploit | |
| CVE-2005-3277 | The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("" or single backquote) in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different… hp · hp-ux | Critical 10.0 | 22% | 1 exploit | |
| CVE-2004-2289 | Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file. microsoft · windows xp | Critical 10.0 | 23% | 1 exploit | |
| CVE-2002-0702 | Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response. isc · dhcpd | Critical 10.0 | 31% | 1 exploit | |
| CVE-2002-0033 | Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name. sun · solaris | Critical 10.0 | 23% | 1 exploit | |
| CVE-1999-0920 | Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command. university of washington · imap | Critical 10.0 | 32% | 1 exploit | |
| CVE-2024-7332 | It has been classified as critical. totolink · cp450 firmware | Critical 9.3 | 21% | 1 exploit | |
| CVE-2022-47071 | In NVS365 V01, the background network test function can trigger command execution. nvs365 · nvs-365-v01 firmware | Critical 9.8 | 26% | 1 exploit | |
| CVE-2022-40881 | SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php contec · solarview compact firmware | Critical 9.8 | 30% | 1 exploit | |
| CVE-2022-35555 | A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput parameters for arbitrary command execution. tenda · w6 firmware | Critical 9.8 | 26% | 1 exploit | |
| CVE-2022-31680 | The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). vmware · vcenter server | Critical 9.1 | 33% | · | |
| CVE-2022-30887 | Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/editProductImage.php. pharmacy management system project · pharmacy management system | Critical 9.8 | 26% | 1 exploit | |
| CVE-2022-26213 | Totolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters. totolink · x5000r firmware | Critical 9.8 | 26% | 1 exploit | |
| CVE-2021-42756 | Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and below, 6.4 all versions may allow an unauthenticated remote attacker to achieve arbitrary code execution… fortinet · fortiweb | Critical 9.8 | 35% | · | |
| CVE-2021-27828 | SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries. in4velocity · in4suite erp | Critical 9.1 | 20% | 1 exploit | |
| CVE-2020-15906 | tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts. tiki · tiki | Critical 9.8 | 27% | 1 exploit | |
| CVE-2019-8982 | com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF. wavemaker · wavemarker studio | Critical 9.6 | 28% | 1 exploit | |
| CVE-2019-16072 | An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ip_address variable within an snmp_browser action. netsas · enigma network management solution | Critical 9.8 | 26% | 1 exploit | |
| CVE-2019-15106 | One can bypass the user password requirement and execute commands on the server. zohocorp · manageengine opmanager | Critical 9.8 | 25% | 1 exploit | |
| CVE-2019-12583 | Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. zyxel · uag2100 firmware | Critical 9.1 | 44% | · | |
| CVE-2018-8154 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. microsoft · exchange server | Critical 9.8 | 24% | · | |
| CVE-2016-7182 | The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync… microsoft · live meeting | Critical 9.8 | 30% | 1 exploit | |
| CVE-2016-4203 | Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via… adobe · acrobat | Critical 9.8 | 27% | 1 exploit | |
| CVE-2015-2523 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption… microsoft · excel | Critical 9.3 | 30% | 1 exploit | |
| CVE-2015-2521 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." microsoft · excel | Critical 9.3 | 28% | 1 exploit | |
| CVE-2015-2520 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." microsoft · excel | Critical 9.3 | 28% | 1 exploit | |
| CVE-2015-2431 | Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library (OGL) font, aka "Microsoft Office Graphics Component… microsoft · live meeting | Critical 9.3 | 30% | 1 exploit | |
| CVE-2015-0065 | Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "OneTableDocumentStream Remote Code Execution Vulnerability." microsoft · word | Critical 9.3 | 30% | 1 exploit | |
| CVE-2015-0064 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory… microsoft · office | Critical 9.3 | 30% | 1 exploit | |
| CVE-2015-0040 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0018, CVE-2015-0037, and… microsoft · internet explorer | Critical 9.3 | 30% | 1 exploit | |
| CVE-2014-4141 | Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 31% | 1 exploit | |
| CVE-2014-1789 | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1790. microsoft · internet explorer | Critical 9.3 | 29% | 1 exploit | |
| CVE-2014-1201 | Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-33_1D97A, and Edge3 LH340 series with firmware 11.19.85_1FE3A allows remote attackers to cause a denial of… lorextechnology · edge2 | Critical 10.0 | 29% | 1 exploit | |
| CVE-2013-5912 | VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action. thomsonreuters · velocity analytics vhayu analytic server | Critical 10.0 | 30% | 1 exploit | |
| CVE-2013-3686 | cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action. ovislink · airlive wl2600cam | Critical 10.0 | 28% | 1 exploit | |
| CVE-2013-3151 | Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3144 and… microsoft · internet explorer | Critical 9.3 | 23% | 1 exploit | |
| CVE-2013-3144 | Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3151 and… microsoft · internet explorer | Critical 9.3 | 23% | 1 exploit | |
| CVE-2013-1311 | Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability." microsoft · internet explorer | Critical 9.3 | 21% | 1 exploit | |
| CVE-2013-0946 | Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to execute arbitrary code via crafted commands. emc · alphastor | Critical 9.3 | 29% | 1 exploit | |
| CVE-2011-2003 | Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon… microsoft · windows 7 | Critical 9.3 | 27% | 1 exploit | |
| CVE-2011-1276 | Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute… microsoft · excel | Critical 9.3 | 28% | 1 exploit |
Showing 601–650 of 755
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.