Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
1,463 vulnerabilities · highest score first
- CVE-2016-1102High 7.5flash-plugin: multiple code execution issues fixed in APSB16-15adobe · flash playerEPSS40%1 exploitPublished May 10, 2016
- CVE-2016-1101High 7.5flash-plugin: multiple code execution issues fixed in APSB16-15adobe · flash playerEPSS38%1 exploitPublished May 10, 2016
- CVE-2016-1096High 7.5flash-plugin: multiple code execution issues fixed in APSB16-15adobe · flash playerEPSS40%1 exploitPublished May 10, 2016
- CVE-2016-0801Critical 9.8The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal…google · androidEPSS33%1 exploitPublished Feb 7, 2016
- CVE-2015-8644High 8.8flash-plugin: multiple code execution issues fixed in APSB16-01adobe · airEPSS26%1 exploitPublished Dec 28, 2015
- CVE-2015-8635High 8.8flash-plugin: multiple code execution issues fixed in APSB16-01adobe · airEPSS25%1 exploitPublished Dec 28, 2015
- CVE-2015-8634High 8.8flash-plugin: multiple code execution issues fixed in APSB16-01adobe · airEPSS25%1 exploitPublished Dec 28, 2015
- CVE-2015-7855Medium 6.5The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.ntp · ntpEPSS31%2 exploitsPublished Aug 7, 2017
- CVE-2015-0008High 8.3The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not include authentication from the server to the client,…microsoft · windows 7EPSS29%1 exploitPublished Feb 11, 2015
- CVE-2014-5006High 7.5Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a ..zohocorp · manageengine desktop centralEPSS25%3 exploitsPublished Oct 21, 2014
- CVE-2014-2994Critical 10.0Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL (src attribute).acunetix · web vulnerability scannerEPSS23%2 exploitsPublished Apr 27, 2014
- CVE-2014-1770Critical 9.3Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript code that interacts improperly with a CollectGarbage function call on a CMarkup object allocated by the CMarkup::CreateInitialMarkup…microsoft · internet explorerEPSS35%1 exploitPublished May 22, 2014
- CVE-2014-1303Critical 10.0webkitgtk: heap-based buffer overflow (WSA-2015-0001)apple · safariEPSS35%2 exploitsPublished Jan 26, 2015
- CVE-2013-2143Medium 6.5Katello: /app/controllers/users_controller.rb insufficient privilege checktheforeman · katelloEPSS48%3 exploitsPublished Mar 24, 2014
- CVE-2012-1592High 8.8Unrestricted Upload of File with Dangerous Type in Apache Struts2apache · strutsEPSS29%1 exploitPublished Apr 23, 2022
- CVE-2012-1205Critical 9.8Relocate Upload < 0.20 - Remote File Inclusionalanft · relocate-uploadEPSS25%1 exploitPublished Sep 18, 2011
- CVE-2011-1255Critical 9.3The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized…microsoft · internet explorerEPSS42%1 exploitPublished Jun 16, 2011
- CVE-2010-2553Critical 9.3The Cinepak codec in Microsoft Windows XP SP2 and SP3, Windows Vista SP1 and SP2, and Windows 7 does not properly decompress media files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Cinepak Codec Decompression Vulnerability."microsoft · windows 7EPSS31%2 exploitsPublished Aug 11, 2010
- CVE-2010-0270Critical 10.0The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot)…microsoft · windows 7EPSS48%1 exploitPublished Apr 14, 2010
- CVE-2009-4462Critical 10.0Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA allows remote attackers to execute arbitrary code via a long hn (hostname) parameter in a crafted HICP-protocol UDP packet.intellicom · netbiterconfigEPSS20%2 exploitsPublished Dec 30, 2009
- CVE-2008-5518Critical 9.4Apache Geronimo Application Server multiple directory traversal vulnerabilitiesapache · geronimoEPSS36%1 exploitPublished May 14, 2022
- CVE-2007-5461Low 3.5Apache Tomcat Path Traversal Vulnerabilityapache · tomcatEPSS40%2 exploitsPublished May 1, 2022
- CVE-2007-0427Critical 9.3Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a help project (.HPJ) file with a long HLP field in the OPTIONS section.microsoft · html help workshopEPSS31%2 exploitsPublished Jan 22, 2007
- CVE-2007-0039High 7.8The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of service (crash) via an Internet Calendar (iCal) file containing multiple X-MICROSOFT-CDO-MODPROPS…microsoft · exchange serverEPSS45%·Published May 8, 2007
- CVE-2006-4812Critical 10.0Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function…php · phpEPSS20%1 exploitPublished Sep 30, 2006
- CVE-2006-1236High 7.5Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.crossfire · crossfireEPSS28%2 exploitsPublished Mar 15, 2006
- CVE-2005-1987High 7.5Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type"…microsoft · exchange serverEPSS44%·Published Oct 13, 2005
- CVE-2005-0468High 7.5Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated.ncsa · telnetEPSS27%1 exploitPublished May 2, 2005
- CVE-2004-0989Critical 10.0Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that…xmlsoft · libxmlEPSS22%1 exploitPublished Mar 1, 2005
- CVE-2004-0840Critical 10.0The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a…microsoft · exchange serverEPSS30%·Published Nov 3, 2004
- CVE-2004-0084Critical 10.0Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than…xfree86 project · x11r6EPSS25%1 exploitPublished Feb 12, 2004
- CVE-2003-1339Critical 10.0Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attackers to cause a denial of service (crash) or execute arbitrary code, as demonstrated via (1) a long GET request and (2) a long operation or…ezmeeting · ezmeetingEPSS49%1 exploitPublished Dec 31, 2003
- CVE-2003-1083Critical 10.0Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.tildeslash · monitEPSS21%2 exploitsPublished Dec 31, 2003
- CVE-2003-0899Critical 9.8Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '' characters, which trigger the overflow when the characters are expanded to "<" and…acme · thttpdEPSS22%2 exploitsPublished Nov 3, 2003
- CVE-2001-0144Critical 10.0CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.ssh · sshEPSS32%2 exploitsPublished Mar 12, 2001
- CVE-1999-0918High 7.8Denial of service in various Windows systems via malformed, fragmented IGMP packets.microsoft · windows 2000EPSS26%3 exploitsPublished Jul 3, 1999
- CVE-2026-98256High 7.8signal: Prevent exec() racelinux · linux kernelEPSS0.1%2 exploitsPublished Oct 6, 2026
- CVE-2026-97941High 7.8Linux kernel: mm/slab: take n->list_lock in slab_try_return_freelist() to avoid racelinux · linux kernelEPSS0.2%1 exploitPublished Sep 25, 2026
- CVE-2026-76268Critical 9.8Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprisesplunk · splunkEPSS1.6%1 exploitPublished Oct 7, 2026
- CVE-2025-2011High 7.5Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' ParameterEPSS46%1 exploitPublished May 5, 2025
- CVE-2024-38200Critical 9.1Microsoft Office Spoofing Vulnerabilitymicrosoft · officeEPSS20%1 exploitPublished Aug 13, 2024
- CVE-2023-5149High 8.8UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231.dlink · dar-7000 firmwareEPSS21%1 exploitPublished Sep 25, 2023
- CVE-2023-48292High 8.8Run Shell Command allows Cross-Site Request Forgeryxwiki · admin toolsEPSS23%1 exploitPublished Nov 20, 2023
- CVE-2023-36757High 8.0Microsoft Exchange Server Spoofing Vulnerabilitymicrosoft · exchange serverEPSS37%·Published Sep 13, 2023
- CVE-2023-36050High 8.0Microsoft Exchange Server Spoofing Vulnerabilitymicrosoft · exchange serverEPSS39%·Published Nov 15, 2023
- CVE-2023-33404Critical 9.8An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earlier allows remote attackers to execute remote code.blogengine · blogengine.netEPSS26%1 exploitPublished Jun 26, 2023
- CVE-2023-31465Critical 9.8By intercepting requests from various timekeeper streams, it is possible to find the getsamplebacklog call.fsmlabs · timekeeperEPSS46%1 exploitPublished Jul 26, 2023
- CVE-2023-2648Critical 9.8It has been classified as critical.weaver · e-officeEPSS28%1 exploitPublished May 11, 2023
- CVE-2023-2114High 7.2The NEX-Forms WordPress plugin before 8.4 does not properly escape the table parameter, which is populated with user input, before concatenating it to an SQL query.basixonline · nex-formsEPSS45%1 exploitPublished May 8, 2023
- CVE-2022-4510High 7.8Path traversal in binwalkmicrosoft · binwalkEPSS22%1 exploitPublished Jan 26, 2023
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2016-1102 | flash-plugin: multiple code execution issues fixed in APSB16-15 adobe · flash player | High 7.5 | 40% | 1 exploit | |
| CVE-2016-1101 | flash-plugin: multiple code execution issues fixed in APSB16-15 adobe · flash player | High 7.5 | 38% | 1 exploit | |
| CVE-2016-1096 | flash-plugin: multiple code execution issues fixed in APSB16-15 adobe · flash player | High 7.5 | 40% | 1 exploit | |
| CVE-2016-0801 | The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal… google · android | Critical 9.8 | 33% | 1 exploit | |
| CVE-2015-8644 | flash-plugin: multiple code execution issues fixed in APSB16-01 adobe · air | High 8.8 | 26% | 1 exploit | |
| CVE-2015-8635 | flash-plugin: multiple code execution issues fixed in APSB16-01 adobe · air | High 8.8 | 25% | 1 exploit | |
| CVE-2015-8634 | flash-plugin: multiple code execution issues fixed in APSB16-01 adobe · air | High 8.8 | 25% | 1 exploit | |
| CVE-2015-7855 | The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value. ntp · ntp | Medium 6.5 | 31% | 2 exploits | |
| CVE-2015-0008 | The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not include authentication from the server to the client,… microsoft · windows 7 | High 8.3 | 29% | 1 exploit | |
| CVE-2014-5006 | Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a .. zohocorp · manageengine desktop central | High 7.5 | 25% | 3 exploits | |
| CVE-2014-2994 | Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL (src attribute). acunetix · web vulnerability scanner | Critical 10.0 | 23% | 2 exploits | |
| CVE-2014-1770 | Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript code that interacts improperly with a CollectGarbage function call on a CMarkup object allocated by the CMarkup::CreateInitialMarkup… microsoft · internet explorer | Critical 9.3 | 35% | 1 exploit | |
| CVE-2014-1303 | webkitgtk: heap-based buffer overflow (WSA-2015-0001) apple · safari | Critical 10.0 | 35% | 2 exploits | |
| CVE-2013-2143 | Katello: /app/controllers/users_controller.rb insufficient privilege check theforeman · katello | Medium 6.5 | 48% | 3 exploits | |
| CVE-2012-1592 | Unrestricted Upload of File with Dangerous Type in Apache Struts2 apache · struts | High 8.8 | 29% | 1 exploit | |
| CVE-2012-1205 | Relocate Upload < 0.20 - Remote File Inclusion alanft · relocate-upload | Critical 9.8 | 25% | 1 exploit | |
| CVE-2011-1255 | The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized… microsoft · internet explorer | Critical 9.3 | 42% | 1 exploit | |
| CVE-2010-2553 | The Cinepak codec in Microsoft Windows XP SP2 and SP3, Windows Vista SP1 and SP2, and Windows 7 does not properly decompress media files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Cinepak Codec Decompression Vulnerability." microsoft · windows 7 | Critical 9.3 | 31% | 2 exploits | |
| CVE-2010-0270 | The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot)… microsoft · windows 7 | Critical 10.0 | 48% | 1 exploit | |
| CVE-2009-4462 | Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA allows remote attackers to execute arbitrary code via a long hn (hostname) parameter in a crafted HICP-protocol UDP packet. intellicom · netbiterconfig | Critical 10.0 | 20% | 2 exploits | |
| CVE-2008-5518 | Apache Geronimo Application Server multiple directory traversal vulnerabilities apache · geronimo | Critical 9.4 | 36% | 1 exploit | |
| CVE-2007-5461 | Apache Tomcat Path Traversal Vulnerability apache · tomcat | Low 3.5 | 40% | 2 exploits | |
| CVE-2007-0427 | Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a help project (.HPJ) file with a long HLP field in the OPTIONS section. microsoft · html help workshop | Critical 9.3 | 31% | 2 exploits | |
| CVE-2007-0039 | The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of service (crash) via an Internet Calendar (iCal) file containing multiple X-MICROSOFT-CDO-MODPROPS… microsoft · exchange server | High 7.8 | 45% | · | |
| CVE-2006-4812 | Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function… php · php | Critical 10.0 | 20% | 1 exploit | |
| CVE-2006-1236 | Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010. crossfire · crossfire | High 7.5 | 28% | 2 exploits | |
| CVE-2005-1987 | Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type"… microsoft · exchange server | High 7.5 | 44% | · | |
| CVE-2005-0468 | Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated. ncsa · telnet | High 7.5 | 27% | 1 exploit | |
| CVE-2004-0989 | Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that… xmlsoft · libxml | Critical 10.0 | 22% | 1 exploit | |
| CVE-2004-0840 | The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a… microsoft · exchange server | Critical 10.0 | 30% | · | |
| CVE-2004-0084 | Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than… xfree86 project · x11r6 | Critical 10.0 | 25% | 1 exploit | |
| CVE-2003-1339 | Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attackers to cause a denial of service (crash) or execute arbitrary code, as demonstrated via (1) a long GET request and (2) a long operation or… ezmeeting · ezmeeting | Critical 10.0 | 49% | 1 exploit | |
| CVE-2003-1083 | Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request. tildeslash · monit | Critical 10.0 | 21% | 2 exploits | |
| CVE-2003-0899 | Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '' characters, which trigger the overflow when the characters are expanded to "<" and… acme · thttpd | Critical 9.8 | 22% | 2 exploits | |
| CVE-2001-0144 | CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow. ssh · ssh | Critical 10.0 | 32% | 2 exploits | |
| CVE-1999-0918 | Denial of service in various Windows systems via malformed, fragmented IGMP packets. microsoft · windows 2000 | High 7.8 | 26% | 3 exploits | |
| CVE-2026-98256 | signal: Prevent exec() race linux · linux kernel | High 7.8 | 0.1% | 2 exploits | |
| CVE-2026-97941 | Linux kernel: mm/slab: take n->list_lock in slab_try_return_freelist() to avoid race linux · linux kernel | High 7.8 | 0.2% | 1 exploit | |
| CVE-2026-76268 | Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise splunk · splunk | Critical 9.8 | 1.6% | 1 exploit | |
| CVE-2025-2011 | Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter | High 7.5 | 46% | 1 exploit | |
| CVE-2024-38200 | Microsoft Office Spoofing Vulnerability microsoft · office | Critical 9.1 | 20% | 1 exploit | |
| CVE-2023-5149 | UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. dlink · dar-7000 firmware | High 8.8 | 21% | 1 exploit | |
| CVE-2023-48292 | Run Shell Command allows Cross-Site Request Forgery xwiki · admin tools | High 8.8 | 23% | 1 exploit | |
| CVE-2023-36757 | Microsoft Exchange Server Spoofing Vulnerability microsoft · exchange server | High 8.0 | 37% | · | |
| CVE-2023-36050 | Microsoft Exchange Server Spoofing Vulnerability microsoft · exchange server | High 8.0 | 39% | · | |
| CVE-2023-33404 | An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earlier allows remote attackers to execute remote code. blogengine · blogengine.net | Critical 9.8 | 26% | 1 exploit | |
| CVE-2023-31465 | By intercepting requests from various timekeeper streams, it is possible to find the getsamplebacklog call. fsmlabs · timekeeper | Critical 9.8 | 46% | 1 exploit | |
| CVE-2023-2648 | It has been classified as critical. weaver · e-office | Critical 9.8 | 28% | 1 exploit | |
| CVE-2023-2114 | The NEX-Forms WordPress plugin before 8.4 does not properly escape the table parameter, which is populated with user input, before concatenating it to an SQL query. basixonline · nex-forms | High 7.2 | 45% | 1 exploit | |
| CVE-2022-4510 | Path traversal in binwalk microsoft · binwalk | High 7.8 | 22% | 1 exploit |
Showing 651–700 of 1,463
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.