Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 20, 2026
755 vulnerabilities · highest score first
- CVE-2011-0041Critical 9.3Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted EMF image, aka "GDI+ Integer…microsoft · officeEPSS28%1 exploitPublished Apr 13, 2011
- CVE-2010-3329Critical 9.3mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office document that causes the HtmlDlgHelper class destructor to access uninitialized memory, aka "Uninitialized Memory Corruption Vulnerability."microsoft · internet explorerEPSS28%1 exploitPublished Oct 13, 2010
- CVE-2010-1225Critical 9.3The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM…microsoft · virtual pcEPSS28%1 exploitPublished Apr 1, 2010
- CVE-2010-0269Critical 10.0The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for SMB responses, which allows remote SMB servers and…microsoft · windows 2000EPSS28%1 exploitPublished Apr 14, 2010
- CVE-2010-0265Critical 9.3Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie Maker and Producer Buffer Overflow Vulnerability."microsoft · producerEPSS27%1 exploitPublished Mar 10, 2010
- CVE-2007-6401Critical 9.3Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6402.microsoft · windows media playerEPSS30%1 exploitPublished Dec 17, 2007
- CVE-2007-6026Critical 9.3Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a…microsoft · jetEPSS28%1 exploitPublished Nov 19, 2007
- CVE-2007-5775Critical 9.8Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024.bitdefender · antivirusEPSS29%1 exploitPublished Nov 1, 2007
- CVE-2005-3116Critical 10.0Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.symantec veritas · netbackupEPSS28%1 exploitPublished Nov 18, 2005
- CVE-2003-0240Critical 10.0The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).axis · 2100 network cameraEPSS30%1 exploitPublished Jun 9, 2003
- CVE-2001-0552Critical 10.0ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message.hp · openview network node managerEPSS26%1 exploitPublished Sep 20, 2001
- CVE-1999-0002Critical 10.0Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.redhat · linuxEPSS28%1 exploitPublished Oct 12, 1998
- CVE-2026-94169Critical 10.0WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerabilityEPSS1.0%1 exploitPublished Oct 16, 2026
- CVE-2026-0006Critical 9.8In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow.google · androidEPSS0.7%1 exploitPublished Mar 2, 2026
- CVE-2025-20188Critical 10.0A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to upload arbitrary files to…cisco · ios xeEPSS27%·Published May 7, 2025
- CVE-2024-8191Critical 9.8SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution.ivanti · endpoint managerEPSS20%·Published Sep 11, 2024
- CVE-2024-25830Critical 9.8F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction.f-logic · datacube3 firmwareEPSS24%1 exploitPublished Feb 28, 2024
- CVE-2023-51123Critical 9.8An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main function of the cgibin binary component.dlink · dir-815 firmwareEPSS24%1 exploitPublished Jan 10, 2024
- CVE-2023-46042Critical 9.8An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo().get-simple · getsimplecmsEPSS23%1 exploitPublished Oct 19, 2023
- CVE-2023-31983Critical 9.8A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations.edimax · br-6428ns firmwareEPSS25%1 exploitPublished May 12, 2023
- CVE-2023-27076Critical 9.8Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter.tenda · g103 firmwareEPSS23%1 exploitPublished Apr 10, 2023
- CVE-2023-24734Critical 9.8An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file.sigb · pmbEPSS21%1 exploitPublished Mar 6, 2023
- CVE-2022-47949Critical 9.8The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn.nintendo · animal crossing\EPSS23%1 exploitPublished Dec 24, 2022
- CVE-2022-38828Critical 9.8TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgitotolink · t6 firmwareEPSS20%1 exploitPublished Sep 16, 2022
- CVE-2022-36572Critical 9.8Sinsiu Sinsiu Enterprise Website System v1.1.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /upload/admin.php?/deal/.sinsiu · enterprise website systemEPSS22%1 exploitPublished Aug 28, 2022
- CVE-2022-34555Critical 9.8TP-LINK TL-R473G 2.0.1 Build 220529 Rel.65574n was discovered to contain a remote code execution vulnerability which is exploited via a crafted packet.tp-link · tl-r473g firmwareEPSS23%1 exploitPublished Jul 28, 2022
- CVE-2022-34531Critical 9.8DedeCMS v5.7.95 was discovered to contain a remote code execution (RCE) vulnerability via the component mytag_ main.php.dedecms · dedecmsEPSS24%1 exploitPublished Jul 29, 2022
- CVE-2022-29592Critical 9.8Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route).tenda · tx9 pro firmwareEPSS20%1 exploitPublished May 5, 2022
- CVE-2022-28557Critical 9.8There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, which can also cooperate with CVE-2021-44971 to cause unconditional arbitrary command executiontenda · ac15 firmwareEPSS23%1 exploitPublished May 4, 2022
- CVE-2022-28021Critical 9.8Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user.purchase order management system project · purchase order management systemEPSS24%1 exploitPublished Apr 21, 2022
- CVE-2022-23389Critical 9.8PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter.publiccms · publiccmsEPSS22%1 exploitPublished Feb 14, 2022
- CVE-2021-31932Critical 9.8Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass.nokia · bts trs web consoleEPSS22%1 exploitPublished Feb 11, 2022
- CVE-2020-28070Critical 9.8SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GET input in view_event.php via the 'id' parameter.alumni management system project · alumni management systemEPSS23%1 exploitPublished Dec 23, 2020
- CVE-2019-8016Critical 9.8Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds write vulnerability.adobe · acrobat dcEPSS22%1 exploitPublished Aug 20, 2019
- CVE-2018-18006Critical 9.8Hardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android give access to any externally disclosed myPrint WSDL API, as demonstrated by discovering API secrets of related Google cloud printers, encrypted passwords of mail servers, and names…ricoh · myprintEPSS21%1 exploitPublished Dec 14, 2018
- CVE-2018-12596Critical 9.8Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden (normally available…episerver · ektron cmsEPSS22%1 exploitPublished Oct 10, 2018
- CVE-2017-8303Critical 9.8An issue was discovered on Accellion FTA devices before FTA_9_12_180.accellion · file transfer applianceEPSS24%1 exploitPublished May 5, 2017
- CVE-2017-6548Critical 9.8Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with…asus · rt-ac53 firmwareEPSS21%1 exploitPublished Mar 9, 2017
- CVE-2016-4201Critical 9.8Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…adobe · acrobatEPSS21%1 exploitPublished Jul 12, 2016
- CVE-2014-1800Critical 9.3Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS24%1 exploitPublished Jun 11, 2014
- CVE-2014-1797Critical 9.3Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780,…microsoft · internet explorerEPSS24%1 exploitPublished Jun 11, 2014
- CVE-2014-1795Critical 9.3Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773,…microsoft · internet explorerEPSS25%1 exploitPublished Jun 11, 2014
- CVE-2014-1791Critical 9.3Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS25%1 exploitPublished Jun 11, 2014
- CVE-2014-1779Critical 9.3Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282,…microsoft · internet explorerEPSS24%1 exploitPublished Jun 11, 2014
- CVE-2013-7471Critical 9.8B, and DIR-865 devices.dlink · dir-300 firmwareEPSS24%1 exploitPublished Jun 11, 2019
- CVE-2013-0658Critical 10.0Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitrary code via a crafted HTTP request.schneider-electric · accutech managerEPSS22%1 exploitPublished Feb 15, 2013
- CVE-2010-2745Critical 9.3Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka "Windows Media Player Memory…microsoft · windows media playerEPSS24%1 exploitPublished Oct 13, 2010
- CVE-2010-2561Critical 9.3Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted response, aka "Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption…microsoft · xml core servicesEPSS25%1 exploitPublished Aug 11, 2010
- CVE-2010-1246Critical 9.3Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record, aka "Excel RTD Memory Corruption Vulnerability."microsoft · excelEPSS25%1 exploitPublished Jun 8, 2010
- CVE-2007-3927Critical 10.0Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe."ipswitch · imail serverEPSS22%1 exploitPublished Jul 20, 2007
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2011-0041 | Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted EMF image, aka "GDI+ Integer… microsoft · office | Critical 9.3 | 28% | 1 exploit | |
| CVE-2010-3329 | mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office document that causes the HtmlDlgHelper class destructor to access uninitialized memory, aka "Uninitialized Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 28% | 1 exploit | |
| CVE-2010-1225 | The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM… microsoft · virtual pc | Critical 9.3 | 28% | 1 exploit | |
| CVE-2010-0269 | The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for SMB responses, which allows remote SMB servers and… microsoft · windows 2000 | Critical 10.0 | 28% | 1 exploit | |
| CVE-2010-0265 | Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie Maker and Producer Buffer Overflow Vulnerability." microsoft · producer | Critical 9.3 | 27% | 1 exploit | |
| CVE-2007-6401 | Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6402. microsoft · windows media player | Critical 9.3 | 30% | 1 exploit | |
| CVE-2007-6026 | Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a… microsoft · jet | Critical 9.3 | 28% | 1 exploit | |
| CVE-2007-5775 | Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024. bitdefender · antivirus | Critical 9.8 | 29% | 1 exploit | |
| CVE-2005-3116 | Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet. symantec veritas · netbackup | Critical 10.0 | 28% | 1 exploit | |
| CVE-2003-0240 | The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash). axis · 2100 network camera | Critical 10.0 | 30% | 1 exploit | |
| CVE-2001-0552 | ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message. hp · openview network node manager | Critical 10.0 | 26% | 1 exploit | |
| CVE-1999-0002 | Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems. redhat · linux | Critical 10.0 | 28% | 1 exploit | |
| CVE-2026-94169 | WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability | Critical 10.0 | 1.0% | 1 exploit | |
| CVE-2026-0006 | In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. google · android | Critical 9.8 | 0.7% | 1 exploit | |
| CVE-2025-20188 | A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to upload arbitrary files to… cisco · ios xe | Critical 10.0 | 27% | · | |
| CVE-2024-8191 | SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution. ivanti · endpoint manager | Critical 9.8 | 20% | · | |
| CVE-2024-25830 | F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. f-logic · datacube3 firmware | Critical 9.8 | 24% | 1 exploit | |
| CVE-2023-51123 | An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main function of the cgibin binary component. dlink · dir-815 firmware | Critical 9.8 | 24% | 1 exploit | |
| CVE-2023-46042 | An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo(). get-simple · getsimplecms | Critical 9.8 | 23% | 1 exploit | |
| CVE-2023-31983 | A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations. edimax · br-6428ns firmware | Critical 9.8 | 25% | 1 exploit | |
| CVE-2023-27076 | Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter. tenda · g103 firmware | Critical 9.8 | 23% | 1 exploit | |
| CVE-2023-24734 | An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file. sigb · pmb | Critical 9.8 | 21% | 1 exploit | |
| CVE-2022-47949 | The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. nintendo · animal crossing\ | Critical 9.8 | 23% | 1 exploit | |
| CVE-2022-38828 | TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi totolink · t6 firmware | Critical 9.8 | 20% | 1 exploit | |
| CVE-2022-36572 | Sinsiu Sinsiu Enterprise Website System v1.1.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /upload/admin.php?/deal/. sinsiu · enterprise website system | Critical 9.8 | 22% | 1 exploit | |
| CVE-2022-34555 | TP-LINK TL-R473G 2.0.1 Build 220529 Rel.65574n was discovered to contain a remote code execution vulnerability which is exploited via a crafted packet. tp-link · tl-r473g firmware | Critical 9.8 | 23% | 1 exploit | |
| CVE-2022-34531 | DedeCMS v5.7.95 was discovered to contain a remote code execution (RCE) vulnerability via the component mytag_ main.php. dedecms · dedecms | Critical 9.8 | 24% | 1 exploit | |
| CVE-2022-29592 | Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route). tenda · tx9 pro firmware | Critical 9.8 | 20% | 1 exploit | |
| CVE-2022-28557 | There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, which can also cooperate with CVE-2021-44971 to cause unconditional arbitrary command execution tenda · ac15 firmware | Critical 9.8 | 23% | 1 exploit | |
| CVE-2022-28021 | Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user. purchase order management system project · purchase order management system | Critical 9.8 | 24% | 1 exploit | |
| CVE-2022-23389 | PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter. publiccms · publiccms | Critical 9.8 | 22% | 1 exploit | |
| CVE-2021-31932 | Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. nokia · bts trs web console | Critical 9.8 | 22% | 1 exploit | |
| CVE-2020-28070 | SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GET input in view_event.php via the 'id' parameter. alumni management system project · alumni management system | Critical 9.8 | 23% | 1 exploit | |
| CVE-2019-8016 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds write vulnerability. adobe · acrobat dc | Critical 9.8 | 22% | 1 exploit | |
| CVE-2018-18006 | Hardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android give access to any externally disclosed myPrint WSDL API, as demonstrated by discovering API secrets of related Google cloud printers, encrypted passwords of mail servers, and names… ricoh · myprint | Critical 9.8 | 21% | 1 exploit | |
| CVE-2018-12596 | Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden (normally available… episerver · ektron cms | Critical 9.8 | 22% | 1 exploit | |
| CVE-2017-8303 | An issue was discovered on Accellion FTA devices before FTA_9_12_180. accellion · file transfer appliance | Critical 9.8 | 24% | 1 exploit | |
| CVE-2017-6548 | Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with… asus · rt-ac53 firmware | Critical 9.8 | 21% | 1 exploit | |
| CVE-2016-4201 | Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via… adobe · acrobat | Critical 9.8 | 21% | 1 exploit | |
| CVE-2014-1800 | Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 24% | 1 exploit | |
| CVE-2014-1797 | Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780,… microsoft · internet explorer | Critical 9.3 | 24% | 1 exploit | |
| CVE-2014-1795 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773,… microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2014-1791 | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2014-1779 | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282,… microsoft · internet explorer | Critical 9.3 | 24% | 1 exploit | |
| CVE-2013-7471 | B, and DIR-865 devices. dlink · dir-300 firmware | Critical 9.8 | 24% | 1 exploit | |
| CVE-2013-0658 | Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitrary code via a crafted HTTP request. schneider-electric · accutech manager | Critical 10.0 | 22% | 1 exploit | |
| CVE-2010-2745 | Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka "Windows Media Player Memory… microsoft · windows media player | Critical 9.3 | 24% | 1 exploit | |
| CVE-2010-2561 | Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted response, aka "Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption… microsoft · xml core services | Critical 9.3 | 25% | 1 exploit | |
| CVE-2010-1246 | Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record, aka "Excel RTD Memory Corruption Vulnerability." microsoft · excel | Critical 9.3 | 25% | 1 exploit | |
| CVE-2007-3927 | Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe." ipswitch · imail server | Critical 10.0 | 22% | 1 exploit |
Showing 651–700 of 755
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.