Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
1,463 vulnerabilities · highest score first
- CVE-2022-38621Critical 9.8Doufox v0.0.4 was discovered to contain a remote code execution (RCE) vulnerability via the edit file page.doufox · doufoxEPSS25%1 exploitPublished Sep 16, 2022
- CVE-2022-37159Critical 9.8Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload.claroline · clarolineEPSS26%1 exploitPublished Aug 25, 2022
- CVE-2022-29298High 7.5SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.contec · sv-cpt-mc310 firmwareEPSS47%2 exploitsPublished May 12, 2022
- CVE-2022-26265Critical 9.8Remote Code Execution in Contao Managed Editioncontao · contaoEPSS30%1 exploitPublished Mar 20, 2022
- CVE-2022-24630High 7.2BrowseFiles.php allows a ?cmd=ssh POST request with an ssh_command field that is executed.audiocodes · device manager expressEPSS24%1 exploitPublished May 30, 2023
- CVE-2022-0651High 7.5The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL…veronalabs · wp statisticsEPSS32%1 exploitPublished Feb 24, 2022
- CVE-2021-46378High 7.5DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote configuration download.dlink · dir-850l firmwareEPSS32%2 exploitsPublished Mar 4, 2022
- CVE-2021-3317High 8.8KLog Server through 2.4.1 allows authenticated command injection.klogserver · klog serverEPSS41%2 exploitsPublished Jan 26, 2021
- CVE-2021-26419High 7.5Scripting Engine Memory Corruption Vulnerabilitymicrosoft · internet explorerEPSS23%1 exploitPublished Sep 15, 2021
- CVE-2020-21224Critical 9.8A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0.inspur · clusterengineEPSS39%1 exploitPublished Feb 22, 2021
- CVE-2020-14425High 7.8Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API.foxitsoftware · foxit readerEPSS31%2 exploitsPublished Nov 2, 2020
- CVE-2020-13432High 7.5rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers.rejetto · http file serverEPSS31%2 exploitsPublished Jun 8, 2020
- CVE-2020-12608High 7.8There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\.solarwinds · managed service provider patch management engineEPSS22%3 exploitsPublished May 7, 2020
- CVE-2020-11819Critical 9.8In Rukovoditel 2.5.2, an attacker may inject an arbitrary .php file location instead of a language file and thus achieve command execution.rukovoditel · rukovoditelEPSS27%2 exploitsPublished Apr 16, 2020
- CVE-2019-18217High 7.5ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long commands because main.c in a child process enters an infinite loop.proftpd · proftpdEPSS20%1 exploitPublished Oct 21, 2019
- CVE-2019-17503Medium 5.3An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd) directly: it contains sensitive information about the database through the SQL queries within this batch file.kirona · dynamic resource schedulingEPSS48%3 exploitsPublished Oct 11, 2019
- CVE-2019-13358High 7.5lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system.opencats · opencatsEPSS24%2 exploitsPublished Jul 5, 2019
- CVE-2019-12988Critical 9.8Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6).citrix · netscaler sd-wanEPSS43%·Published Jul 16, 2019
- CVE-2019-12987Critical 9.8Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6).citrix · netscaler sd-wanEPSS43%·Published Jul 16, 2019
- CVE-2018-2791High 8.2Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites.oracle · webcenter sitesEPSS38%1 exploitPublished Apr 18, 2018
- CVE-2018-20470High 7.5A directory traversal (arbitrary file access) vulnerability exists in the web reports module.sahipro · sahi proEPSS46%2 exploitsPublished Jun 17, 2019
- CVE-2018-15535High 7.5/filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize get_file sequences such as ".." that can resolve to a location that is…tecrail · responsive filemanagerEPSS45%2 exploitsPublished Aug 24, 2018
- CVE-2018-14058Medium 6.5Pimcore SQLi Vulnerabilitypimcore · pimcoreEPSS29%3 exploitsPublished May 14, 2022
- CVE-2018-12589High 7.8Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in the current working directory.polarisoffice · polaris office 2017EPSS20%3 exploitsPublished Jun 28, 2018
- CVE-2018-12453High 7.5Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0 allows remote attackers to cause denial-of-service via an XGROUP command in which the key is not a stream.redislabs · redisEPSS24%3 exploitsPublished Jun 16, 2018
- CVE-2017-8295Medium 5.9WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a crafted wp-login.php?action=lostpassword request and then arranging for this message to bounce or be…wordpress · wordpressEPSS27%2 exploitsPublished May 4, 2017
- CVE-2017-11885Medium 6.6Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a remote code execution vulnerability due to the way the Routing and…microsoft · windows 10EPSS46%2 exploitsPublished Dec 12, 2017
- CVE-2017-1002000Medium 5.3How to Create an App for Android iPhone Easytouch <= 3.0 - Missing Authorizationmobile-friendly-app-builder-by-easytouch project · mobile-friendly-app-builder-by-easytouchEPSS27%2 exploitsPublished Feb 28, 2017
- CVE-2016-7982High 7.5Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on the system via the var_url parameter in a valider_xml action.spip · spipEPSS21%1 exploitPublished Jan 18, 2017
- CVE-2016-6808High 8.1Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.apache · tomcat jk connectorEPSS23%1 exploitPublished Oct 6, 2016
- CVE-2016-6272High 7.5XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display strings, such as field labels, via the topic parameter to help.asp.epic · mychartEPSS21%3 exploitsPublished Feb 20, 2018
- CVE-2016-2819High 8.8Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element.mozilla · firefoxEPSS24%1 exploitPublished Jun 13, 2016
- CVE-2016-1606Critical 9.8Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via (1) the NetworkName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, (2) the CPName property value to…microfocus · rumbaEPSS46%1 exploitPublished Jul 2, 2016
- CVE-2015-8636High 8.8flash-plugin: multiple code execution issues fixed in APSB16-01adobe · airEPSS21%1 exploitPublished Dec 28, 2015
- CVE-2015-3082Medium 6.4flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS43%1 exploitPublished May 12, 2015
- CVE-2015-2432Critical 9.3ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a…microsoft · windows 7EPSS30%1 exploitPublished Aug 14, 2015
- CVE-2014-8147High 7.5The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause…icu-project · international components for unicodeEPSS24%1 exploitPublished Sep 13, 2021
- CVE-2014-8146High 7.5The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a…icu-project · international components for unicodeEPSS25%1 exploitPublished Sep 13, 2021
- CVE-2014-7235Critical 10.0htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ari_auth cookie, related to the PHP unserialize function, as…freepbx · freepbxEPSS43%1 exploitPublished Oct 7, 2014
- CVE-2014-1785Critical 9.3Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1769, CVE-2014-1782,…microsoft · internet explorerEPSS30%2 exploitsPublished Jun 11, 2014
- CVE-2013-2569High 7.5A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access to the live video stream.zavio · f3105 firmwareEPSS31%1 exploitPublished Jan 29, 2020
- CVE-2013-1309Critical 9.3Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than…microsoft · internet explorerEPSS39%1 exploitPublished May 15, 2013
- CVE-2012-0207High 7.5kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP querieslinux · linux kernelEPSS20%1 exploitPublished Jan 10, 2012
- CVE-2011-4367High 7.5Apache MyFaces Vulnerable to Path Traversalapache · myfacesEPSS34%1 exploitPublished May 13, 2022
- CVE-2011-2757Medium 5.0Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a ..manageengine · servicedesk plusEPSS39%4 exploitsPublished Jul 17, 2011
- CVE-2011-1248Critical 9.3WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets, related to…microsoft · windows server 2003EPSS48%1 exploitPublished May 13, 2011
- CVE-2011-1137Medium 5.0Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message.proftpd · proftpdEPSS28%2 exploitsPublished Mar 11, 2011
- CVE-2010-2330Critical 9.3Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Content-Length header.upredsun · isharer file sharing wizardEPSS28%1 exploitPublished Jun 18, 2010
- CVE-2010-1938Critical 9.3Off-by-one error in the opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a…nrl · opieEPSS22%1 exploitPublished May 28, 2010
- CVE-2010-1717High 7.5Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla!if surfalert project · if surfalertEPSS22%2 exploitsPublished May 4, 2010
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-38621 | Doufox v0.0.4 was discovered to contain a remote code execution (RCE) vulnerability via the edit file page. doufox · doufox | Critical 9.8 | 25% | 1 exploit | |
| CVE-2022-37159 | Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload. claroline · claroline | Critical 9.8 | 26% | 1 exploit | |
| CVE-2022-29298 | SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal. contec · sv-cpt-mc310 firmware | High 7.5 | 47% | 2 exploits | |
| CVE-2022-26265 | Remote Code Execution in Contao Managed Edition contao · contao | Critical 9.8 | 30% | 1 exploit | |
| CVE-2022-24630 | BrowseFiles.php allows a ?cmd=ssh POST request with an ssh_command field that is executed. audiocodes · device manager express | High 7.2 | 24% | 1 exploit | |
| CVE-2022-0651 | The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL… veronalabs · wp statistics | High 7.5 | 32% | 1 exploit | |
| CVE-2021-46378 | DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote configuration download. dlink · dir-850l firmware | High 7.5 | 32% | 2 exploits | |
| CVE-2021-3317 | KLog Server through 2.4.1 allows authenticated command injection. klogserver · klog server | High 8.8 | 41% | 2 exploits | |
| CVE-2021-26419 | Scripting Engine Memory Corruption Vulnerability microsoft · internet explorer | High 7.5 | 23% | 1 exploit | |
| CVE-2020-21224 | A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. inspur · clusterengine | Critical 9.8 | 39% | 1 exploit | |
| CVE-2020-14425 | Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. foxitsoftware · foxit reader | High 7.8 | 31% | 2 exploits | |
| CVE-2020-13432 | rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers. rejetto · http file server | High 7.5 | 31% | 2 exploits | |
| CVE-2020-12608 | There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\. solarwinds · managed service provider patch management engine | High 7.8 | 22% | 3 exploits | |
| CVE-2020-11819 | In Rukovoditel 2.5.2, an attacker may inject an arbitrary .php file location instead of a language file and thus achieve command execution. rukovoditel · rukovoditel | Critical 9.8 | 27% | 2 exploits | |
| CVE-2019-18217 | ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long commands because main.c in a child process enters an infinite loop. proftpd · proftpd | High 7.5 | 20% | 1 exploit | |
| CVE-2019-17503 | An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd) directly: it contains sensitive information about the database through the SQL queries within this batch file. kirona · dynamic resource scheduling | Medium 5.3 | 48% | 3 exploits | |
| CVE-2019-13358 | lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system. opencats · opencats | High 7.5 | 24% | 2 exploits | |
| CVE-2019-12988 | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6). citrix · netscaler sd-wan | Critical 9.8 | 43% | · | |
| CVE-2019-12987 | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6). citrix · netscaler sd-wan | Critical 9.8 | 43% | · | |
| CVE-2018-2791 | Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. oracle · webcenter sites | High 8.2 | 38% | 1 exploit | |
| CVE-2018-20470 | A directory traversal (arbitrary file access) vulnerability exists in the web reports module. sahipro · sahi pro | High 7.5 | 46% | 2 exploits | |
| CVE-2018-15535 | /filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize get_file sequences such as ".." that can resolve to a location that is… tecrail · responsive filemanager | High 7.5 | 45% | 2 exploits | |
| CVE-2018-14058 | Pimcore SQLi Vulnerability pimcore · pimcore | Medium 6.5 | 29% | 3 exploits | |
| CVE-2018-12589 | Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in the current working directory. polarisoffice · polaris office 2017 | High 7.8 | 20% | 3 exploits | |
| CVE-2018-12453 | Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0 allows remote attackers to cause denial-of-service via an XGROUP command in which the key is not a stream. redislabs · redis | High 7.5 | 24% | 3 exploits | |
| CVE-2017-8295 | WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a crafted wp-login.php?action=lostpassword request and then arranging for this message to bounce or be… wordpress · wordpress | Medium 5.9 | 27% | 2 exploits | |
| CVE-2017-11885 | Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a remote code execution vulnerability due to the way the Routing and… microsoft · windows 10 | Medium 6.6 | 46% | 2 exploits | |
| CVE-2017-1002000 | How to Create an App for Android iPhone Easytouch <= 3.0 - Missing Authorization mobile-friendly-app-builder-by-easytouch project · mobile-friendly-app-builder-by-easytouch | Medium 5.3 | 27% | 2 exploits | |
| CVE-2016-7982 | Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on the system via the var_url parameter in a valider_xml action. spip · spip | High 7.5 | 21% | 1 exploit | |
| CVE-2016-6808 | Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42. apache · tomcat jk connector | High 8.1 | 23% | 1 exploit | |
| CVE-2016-6272 | XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display strings, such as field labels, via the topic parameter to help.asp. epic · mychart | High 7.5 | 21% | 3 exploits | |
| CVE-2016-2819 | Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element. mozilla · firefox | High 8.8 | 24% | 1 exploit | |
| CVE-2016-1606 | Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via (1) the NetworkName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, (2) the CPName property value to… microfocus · rumba | Critical 9.8 | 46% | 1 exploit | |
| CVE-2015-8636 | flash-plugin: multiple code execution issues fixed in APSB16-01 adobe · air | High 8.8 | 21% | 1 exploit | |
| CVE-2015-3082 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Medium 6.4 | 43% | 1 exploit | |
| CVE-2015-2432 | ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a… microsoft · windows 7 | Critical 9.3 | 30% | 1 exploit | |
| CVE-2014-8147 | The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause… icu-project · international components for unicode | High 7.5 | 24% | 1 exploit | |
| CVE-2014-8146 | The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a… icu-project · international components for unicode | High 7.5 | 25% | 1 exploit | |
| CVE-2014-7235 | htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ari_auth cookie, related to the PHP unserialize function, as… freepbx · freepbx | Critical 10.0 | 43% | 1 exploit | |
| CVE-2014-1785 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1769, CVE-2014-1782,… microsoft · internet explorer | Critical 9.3 | 30% | 2 exploits | |
| CVE-2013-2569 | A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access to the live video stream. zavio · f3105 firmware | High 7.5 | 31% | 1 exploit | |
| CVE-2013-1309 | Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than… microsoft · internet explorer | Critical 9.3 | 39% | 1 exploit | |
| CVE-2012-0207 | kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries linux · linux kernel | High 7.5 | 20% | 1 exploit | |
| CVE-2011-4367 | Apache MyFaces Vulnerable to Path Traversal apache · myfaces | High 7.5 | 34% | 1 exploit | |
| CVE-2011-2757 | Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a .. manageengine · servicedesk plus | Medium 5.0 | 39% | 4 exploits | |
| CVE-2011-1248 | WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets, related to… microsoft · windows server 2003 | Critical 9.3 | 48% | 1 exploit | |
| CVE-2011-1137 | Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message. proftpd · proftpd | Medium 5.0 | 28% | 2 exploits | |
| CVE-2010-2330 | Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Content-Length header. upredsun · isharer file sharing wizard | Critical 9.3 | 28% | 1 exploit | |
| CVE-2010-1938 | Off-by-one error in the opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a… nrl · opie | Critical 9.3 | 22% | 1 exploit | |
| CVE-2010-1717 | Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla! if surfalert project · if surfalert | High 7.5 | 22% | 2 exploits |
Showing 701–750 of 1,463
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.