Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
1,462 vulnerabilities · highest score first
- CVE-2023-26609High 7.2ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wireless_mft ap field.abus · tvip 20000-21150 firmwareEPSS39%2 exploitsPublished Feb 26, 2023
- CVE-2022-4855Critical 9.8A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0.lead management system project · lead management systemEPSS25%1 exploitPublished Dec 30, 2022
- CVE-2022-47874Medium 6.5Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'com.jedox.etl.mngr.Connections' and method 'getGlobalConnection'.jedox · jedoxEPSS21%2 exploitsPublished May 3, 2023
- CVE-2022-42233Critical 9.8Tenda 11N with firmware version V5.07.33_cn suffers from an Authentication Bypass vulnerability.tenda · 11n firmwareEPSS43%1 exploitPublished Oct 20, 2022
- CVE-2022-40032Critical 9.8SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information.simple task managing system project · simple task managing systemEPSS21%2 exploitsPublished Feb 17, 2023
- CVE-2022-35620Critical 9.8D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function binary.soapcgi_main.dlink · dir-818l firmwareEPSS32%1 exploitPublished Aug 3, 2022
- CVE-2022-31885Critical 9.8Marval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of VBScripts.marvalglobal · marval msmEPSS33%1 exploitPublished Jun 28, 2022
- CVE-2022-29009Critical 9.8Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication.phpgurukul · cyber cafe management systemEPSS23%2 exploitsPublished May 11, 2022
- CVE-2022-26272Critical 9.8A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to execute arbitrary code via a crafted string written to the file application/config/config.php.ionizecms · ionizeEPSS22%1 exploitPublished Mar 24, 2022
- CVE-2022-2488Critical 9.8The manipulation of the argument IP leads to os command injection.wavlink · wl-wn535k2 firmwareEPSS33%1 exploitPublished Jul 20, 2022
- CVE-2022-20964High 8.8A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system.cisco · identity services engineEPSS31%·Published Nov 29, 2022
- CVE-2022-1390Critical 9.8The Admin Word Count Column WordPress plugin through 2.2 does not validate the path parameter given to readfile(), which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique.admin word count column project · admin word count columnEPSS22%1 exploitPublished Apr 25, 2022
- CVE-2021-46367High 7.2RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel.ritecms · ritecmsEPSS30%2 exploitsPublished Apr 8, 2022
- CVE-2021-46314Critical 9.8A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable…dlink · dir-846 firmwareEPSS33%1 exploitPublished Feb 17, 2022
- CVE-2021-43405High 8.8The fax_extension may have risky characters (it is not constrained to be numeric).fusionpbx · fusionpbxEPSS36%2 exploitsPublished Nov 5, 2021
- CVE-2021-42887Critical 9.8In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.totolink · ex1200t firmwareEPSS44%1 exploitPublished Jun 3, 2022
- CVE-2021-40345High 7.2In the Manage Dashlets section of the Admin panel, an administrator can upload ZIP files.nagios · nagios xiEPSS23%1 exploitPublished Oct 27, 2021
- CVE-2021-35380High 7.5A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download…solari · termtalk serverEPSS37%1 exploitPublished Feb 15, 2022
- CVE-2021-31251Critical 9.8An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileged connection with the target device by supplying a specially malformed request and an attacker may force the remote…chiyu-tech · bf-430 firmwareEPSS36%1 exploitPublished Jun 4, 2021
- CVE-2021-28481Critical 9.8Microsoft Exchange Server Remote Code Execution Vulnerabilitymicrosoft · exchange serverEPSS36%·Published Apr 14, 2021
- CVE-2021-25162High 8.1A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant…arubanetworks · instantEPSS26%2 exploitsPublished Mar 29, 2021
- CVE-2020-9375High 7.5TP-Link Archer C50 V3 devices before Build 200318 Rel.tp-link · archer c50EPSS27%2 exploitsPublished Mar 25, 2020
- CVE-2020-8947High 7.2functions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the index.php?operation/netflow/nf_live_view ip_dst, dst_port, or src_port parameter, a different vulnerability than CVE-2019-20224.artica · pandora fmsEPSS22%3 exploitsPublished Feb 12, 2020
- CVE-2020-5505Critical 9.8Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring (in conjunction with "type":"application/x-php"} to the /api/files/ URI.vaaip · freelancyEPSS44%1 exploitPublished Jan 14, 2020
- CVE-2020-35576High 8.8A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577.tp-link · tl-wr841n firmwareEPSS42%1 exploitPublished Jan 26, 2021
- CVE-2019-12992High 8.8Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6).citrix · netscaler sd-wanEPSS49%·Published Jul 16, 2019
- CVE-2019-12986Critical 9.8Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6).citrix · netscaler sd-wanEPSS40%·Published Jul 16, 2019
- CVE-2019-12985Critical 9.8Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6).citrix · netscaler sd-wanEPSS40%·Published Jul 16, 2019
- CVE-2019-12593High 7.5IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal.icewarp · mail serverEPSS41%2 exploitsPublished Jun 3, 2019
- CVE-2019-0572High 7.8An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.microsoft · windows 10EPSS25%2 exploitsPublished Jan 8, 2019
- CVE-2018-8269High 7.5Denial of service in ASP.NET Coremicrosoft · microsoft.data.odataEPSS27%1 exploitPublished Oct 16, 2018
- CVE-2018-7583High 7.5Proxy.exe in DualDesk 20 allows Remote Denial Of Service (daemon crash) via a long string to TCP port 5500.advantig · dualdeskEPSS38%2 exploitsPublished Mar 3, 2018
- CVE-2018-6849Medium 4.3In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request.duckduckgo · duckduckgoEPSS29%2 exploitsPublished Apr 1, 2018
- CVE-2018-6794Medium 5.3Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c.suricata-ids · suricataEPSS24%2 exploitsPublished Feb 7, 2018
- CVE-2018-5997Critical 9.8Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root.ravpower · filehub firmwareEPSS24%2 exploitsPublished Jan 25, 2018
- CVE-2018-4936Medium 6.5Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability.adobe · flash playerEPSS25%2 exploitsPublished May 19, 2018
- CVE-2018-16288High 8.6LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.lg · supersign cmsEPSS36%2 exploitsPublished Sep 14, 2018
- CVE-2018-16158Critical 9.8Eaton Power Xpert Meter 4000, 6000, and 8000 devices before 13.4.0.10 have a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins (to uid 0) via the…eaton · power xpert meter 4000 firmwareEPSS35%1 exploitPublished Aug 30, 2018
- CVE-2018-14392Medium 6.1The New Threads plugin before 1.2 for MyBB has XSS.mybb · new threadsEPSS49%2 exploitsPublished Jul 18, 2018
- CVE-2018-13417Critical 9.8In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack.vuze · bittorrent clientEPSS20%2 exploitsPublished Aug 13, 2018
- CVE-2018-12571Critical 9.8uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url parameter, possibly causing a traffic amplification and/or…microsoft · forefront unified access gatewayEPSS31%1 exploitPublished Jul 5, 2018
- CVE-2017-11346Critical 9.8Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos.zohocorp · manageengine desktop centralEPSS43%1 exploitPublished Jul 17, 2017
- CVE-2016-3386High 7.5ChakraCore RCE Vulnerabilitymicrosoft · edgeEPSS41%1 exploitPublished May 14, 2022
- CVE-2016-2209High 7.3Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint…symantec · advanced threat protectionEPSS21%1 exploitPublished Jun 30, 2016
- CVE-2016-0145High 8.8The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, and 3.5.1; Skype…microsoft · live meetingEPSS43%1 exploitPublished Apr 12, 2016
- CVE-2016-0016High 7.8Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted…microsoft · windows 10EPSS30%2 exploitsPublished Jan 13, 2016
- CVE-2015-7622Critical 10.0Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial…adobe · acrobatEPSS23%1 exploitPublished Oct 14, 2015
- CVE-2015-6127Medium 4.3Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to read arbitrary files via a crafted .mcl file, aka "Windows Media Center Information Disclosure Vulnerability."microsoft · windows 7EPSS46%2 exploitsPublished Dec 9, 2015
- CVE-2015-3083Medium 6.4flash-plugin: multiple code execution issues fixed in APSB15-09adobe · airEPSS41%1 exploitPublished May 12, 2015
- CVE-2015-2562High 7.5Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla!web-dorado · ecommerce wdEPSS39%2 exploitsPublished Mar 20, 2015
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-26609 | ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wireless_mft ap field. abus · tvip 20000-21150 firmware | High 7.2 | 39% | 2 exploits | |
| CVE-2022-4855 | A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. lead management system project · lead management system | Critical 9.8 | 25% | 1 exploit | |
| CVE-2022-47874 | Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'com.jedox.etl.mngr.Connections' and method 'getGlobalConnection'. jedox · jedox | Medium 6.5 | 21% | 2 exploits | |
| CVE-2022-42233 | Tenda 11N with firmware version V5.07.33_cn suffers from an Authentication Bypass vulnerability. tenda · 11n firmware | Critical 9.8 | 43% | 1 exploit | |
| CVE-2022-40032 | SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information. simple task managing system project · simple task managing system | Critical 9.8 | 21% | 2 exploits | |
| CVE-2022-35620 | D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function binary.soapcgi_main. dlink · dir-818l firmware | Critical 9.8 | 32% | 1 exploit | |
| CVE-2022-31885 | Marval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of VBScripts. marvalglobal · marval msm | Critical 9.8 | 33% | 1 exploit | |
| CVE-2022-29009 | Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication. phpgurukul · cyber cafe management system | Critical 9.8 | 23% | 2 exploits | |
| CVE-2022-26272 | A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to execute arbitrary code via a crafted string written to the file application/config/config.php. ionizecms · ionize | Critical 9.8 | 22% | 1 exploit | |
| CVE-2022-2488 | The manipulation of the argument IP leads to os command injection. wavlink · wl-wn535k2 firmware | Critical 9.8 | 33% | 1 exploit | |
| CVE-2022-20964 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system. cisco · identity services engine | High 8.8 | 31% | · | |
| CVE-2022-1390 | The Admin Word Count Column WordPress plugin through 2.2 does not validate the path parameter given to readfile(), which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique. admin word count column project · admin word count column | Critical 9.8 | 22% | 1 exploit | |
| CVE-2021-46367 | RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel. ritecms · ritecms | High 7.2 | 30% | 2 exploits | |
| CVE-2021-46314 | A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable… dlink · dir-846 firmware | Critical 9.8 | 33% | 1 exploit | |
| CVE-2021-43405 | The fax_extension may have risky characters (it is not constrained to be numeric). fusionpbx · fusionpbx | High 8.8 | 36% | 2 exploits | |
| CVE-2021-42887 | In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm. totolink · ex1200t firmware | Critical 9.8 | 44% | 1 exploit | |
| CVE-2021-40345 | In the Manage Dashlets section of the Admin panel, an administrator can upload ZIP files. nagios · nagios xi | High 7.2 | 23% | 1 exploit | |
| CVE-2021-35380 | A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download… solari · termtalk server | High 7.5 | 37% | 1 exploit | |
| CVE-2021-31251 | An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileged connection with the target device by supplying a specially malformed request and an attacker may force the remote… chiyu-tech · bf-430 firmware | Critical 9.8 | 36% | 1 exploit | |
| CVE-2021-28481 | Microsoft Exchange Server Remote Code Execution Vulnerability microsoft · exchange server | Critical 9.8 | 36% | · | |
| CVE-2021-25162 | A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant… arubanetworks · instant | High 8.1 | 26% | 2 exploits | |
| CVE-2020-9375 | TP-Link Archer C50 V3 devices before Build 200318 Rel. tp-link · archer c50 | High 7.5 | 27% | 2 exploits | |
| CVE-2020-8947 | functions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the index.php?operation/netflow/nf_live_view ip_dst, dst_port, or src_port parameter, a different vulnerability than CVE-2019-20224. artica · pandora fms | High 7.2 | 22% | 3 exploits | |
| CVE-2020-5505 | Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring (in conjunction with "type":"application/x-php"} to the /api/files/ URI. vaaip · freelancy | Critical 9.8 | 44% | 1 exploit | |
| CVE-2020-35576 | A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577. tp-link · tl-wr841n firmware | High 8.8 | 42% | 1 exploit | |
| CVE-2019-12992 | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6). citrix · netscaler sd-wan | High 8.8 | 49% | · | |
| CVE-2019-12986 | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6). citrix · netscaler sd-wan | Critical 9.8 | 40% | · | |
| CVE-2019-12985 | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6). citrix · netscaler sd-wan | Critical 9.8 | 40% | · | |
| CVE-2019-12593 | IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal. icewarp · mail server | High 7.5 | 41% | 2 exploits | |
| CVE-2019-0572 | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. microsoft · windows 10 | High 7.8 | 25% | 2 exploits | |
| CVE-2018-8269 | Denial of service in ASP.NET Core microsoft · microsoft.data.odata | High 7.5 | 27% | 1 exploit | |
| CVE-2018-7583 | Proxy.exe in DualDesk 20 allows Remote Denial Of Service (daemon crash) via a long string to TCP port 5500. advantig · dualdesk | High 7.5 | 38% | 2 exploits | |
| CVE-2018-6849 | In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request. duckduckgo · duckduckgo | Medium 4.3 | 29% | 2 exploits | |
| CVE-2018-6794 | Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. suricata-ids · suricata | Medium 5.3 | 24% | 2 exploits | |
| CVE-2018-5997 | Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root. ravpower · filehub firmware | Critical 9.8 | 24% | 2 exploits | |
| CVE-2018-4936 | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability. adobe · flash player | Medium 6.5 | 25% | 2 exploits | |
| CVE-2018-16288 | LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs. lg · supersign cms | High 8.6 | 36% | 2 exploits | |
| CVE-2018-16158 | Eaton Power Xpert Meter 4000, 6000, and 8000 devices before 13.4.0.10 have a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins (to uid 0) via the… eaton · power xpert meter 4000 firmware | Critical 9.8 | 35% | 1 exploit | |
| CVE-2018-14392 | The New Threads plugin before 1.2 for MyBB has XSS. mybb · new threads | Medium 6.1 | 49% | 2 exploits | |
| CVE-2018-13417 | In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. vuze · bittorrent client | Critical 9.8 | 20% | 2 exploits | |
| CVE-2018-12571 | uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url parameter, possibly causing a traffic amplification and/or… microsoft · forefront unified access gateway | Critical 9.8 | 31% | 1 exploit | |
| CVE-2017-11346 | Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos. zohocorp · manageengine desktop central | Critical 9.8 | 43% | 1 exploit | |
| CVE-2016-3386 | ChakraCore RCE Vulnerability microsoft · edge | High 7.5 | 41% | 1 exploit | |
| CVE-2016-2209 | Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint… symantec · advanced threat protection | High 7.3 | 21% | 1 exploit | |
| CVE-2016-0145 | The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, and 3.5.1; Skype… microsoft · live meeting | High 8.8 | 43% | 1 exploit | |
| CVE-2016-0016 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted… microsoft · windows 10 | High 7.8 | 30% | 2 exploits | |
| CVE-2015-7622 | Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial… adobe · acrobat | Critical 10.0 | 23% | 1 exploit | |
| CVE-2015-6127 | Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to read arbitrary files via a crafted .mcl file, aka "Windows Media Center Information Disclosure Vulnerability." microsoft · windows 7 | Medium 4.3 | 46% | 2 exploits | |
| CVE-2015-3083 | flash-plugin: multiple code execution issues fixed in APSB15-09 adobe · air | Medium 6.4 | 41% | 1 exploit | |
| CVE-2015-2562 | Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! web-dorado · ecommerce wd | High 7.5 | 39% | 2 exploits |
Showing 801–850 of 1,462
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.