Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
1,462 vulnerabilities · highest score first
- CVE-2015-0081Critical 9.3Windows Text Services (WTS) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a…microsoft · windows 7EPSS24%1 exploitPublished Mar 11, 2015
- CVE-2014-8499Medium 6.5Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition before 7.1 build 7105 allow remote authenticated users to execute arbitrary SQL commands via the SEARCH_ALL parameter to (1)…manageengine · password manager proEPSS36%3 exploitsPublished Nov 17, 2014
- CVE-2014-2962High 7.8Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.belkin · n150 f9k1009EPSS47%1 exploitPublished Jun 19, 2014
- CVE-2014-2383Medium 6.8DOMPDF Arbitrary File Readdompdf · dompdfEPSS39%1 exploitPublished May 14, 2022
- CVE-2013-3174Critical 9.3DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted GIF file, aka "DirectShow Arbitrary…microsoft · windows 7EPSS32%1 exploitPublished Jul 10, 2013
- CVE-2013-3120Critical 9.3Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3118 and CVE-2013-3125.microsoft · internet explorerEPSS32%1 exploitPublished Jun 12, 2013
- CVE-2013-3111Critical 9.3Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3123.microsoft · internet explorerEPSS34%1 exploitPublished Jun 12, 2013
- CVE-2013-1306Critical 9.3Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1313.microsoft · internet explorerEPSS33%1 exploitPublished May 15, 2013
- CVE-2013-0657Critical 10.0Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execute arbitrary code by sending TCP port-12397 data that does not comply with a protocol.schneider-electric · interactive graphical scada systemEPSS21%2 exploitsPublished Jan 21, 2013
- CVE-2013-0019Critical 9.3Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer COmWindowProxy Use After Free Vulnerability."microsoft · internet explorerEPSS35%1 exploitPublished Feb 13, 2013
- CVE-2012-5863Critical 10.0These Sinapsi devices do not check for special elements in commands sent to the system.sinapsitech · esolar duo photovoltaic system monitorEPSS25%2 exploitsPublished Nov 23, 2012
- CVE-2012-5612Medium 6.5mysql: MDL subsystem heap-based buffer overflowmariadb · mariadbEPSS21%2 exploitsPublished Dec 1, 2012
- CVE-2012-1661Critical 9.3ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map (.mxd) file.esri · arcmapEPSS24%2 exploitsPublished Jul 12, 2012
- CVE-2011-1866Critical 10.0Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXEC_CMD functionality.hp · openview storage data protectorEPSS21%1 exploitPublished Jul 1, 2011
- CVE-2011-0978Critical 9.3Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an…microsoft · excelEPSS43%1 exploitPublished Feb 10, 2011
- CVE-2011-0966Medium 6.8Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a ..cisco · ciscoworks common servicesEPSS41%3 exploitsPublished May 20, 2011
- CVE-2011-0285Critical 10.0The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted…mit · kerberos 5EPSS21%1 exploitPublished Apr 15, 2011
- CVE-2010-4588Critical 9.3The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute arbitrary code via a crafted argument to the ReleaseContext method, a different vector than CVE-2010-3973, possibly an untrusted pointer…microsoft · wmi administrative toolsEPSS33%1 exploitPublished Dec 23, 2010
- CVE-2010-4172Medium 4.3Improper Neutralization of Input During Web Page Generation in Apache Tomcatapache · tomcatEPSS42%1 exploitPublished May 14, 2022
- CVE-2010-3714High 7.1TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanismtypo3 · typo3EPSS24%1 exploitPublished May 17, 2022
- CVE-2008-2469Critical 10.0Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field.libspf · libspf2EPSS22%1 exploitPublished Oct 23, 2008
- CVE-2008-0105Critical 9.3Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section header index table information, aka "Microsoft Works File Converter Index Table…microsoft · officeEPSS44%1 exploitPublished Feb 12, 2008
- CVE-2007-1399Critical 9.8Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a long zip:// URL, as demonstrated by actively triggering URL access from a remote PHP interpreter via…php · phpEPSS20%1 exploitPublished Mar 10, 2007
- CVE-2007-0031Critical 9.3Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a BIFF8 spreadsheet with a PALETTE record that contains a large number of entries.microsoft · excelEPSS42%1 exploitPublished Jan 9, 2007
- CVE-2006-6027Critical 9.3Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the LoadFile method in an AcroPDF ActiveX control.adobe · acrobat readerEPSS44%1 exploitPublished Nov 21, 2006
- CVE-2006-5379High 7.5The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be…nvidia · binary graphics driverEPSS27%1 exploitPublished Oct 18, 2006
- CVE-2006-3835Medium 5.0Apache Tomcat Reveals Directoriesapache · tomcatEPSS46%1 exploitPublished May 1, 2022
- CVE-2006-0058High 7.6Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.sendmail · sendmailEPSS29%1 exploitPublished Mar 22, 2006
- CVE-2005-2340High 7.5Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (QTIF), (2) PICT, or (3) JPEG format image with a long data field.apple · quicktimeEPSS26%1 exploitPublished Dec 31, 2005
- CVE-2005-1344High 7.5Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument.apache · http serverEPSS29%2 exploitsPublished May 2, 2005
- CVE-2005-0416High 7.5The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.microsoft · windows 2000EPSS41%2 exploitsPublished Apr 27, 2005
- CVE-2004-1137Critical 10.0Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the…linux · linux kernelEPSS21%1 exploitPublished Dec 14, 2004
- CVE-2004-0333Critical 10.0Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.uudeview · uudeviewEPSS24%1 exploitPublished Nov 23, 2004
- CVE-2003-1025Medium 4.3Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL…microsoft · internet explorerEPSS27%3 exploitsPublished Jan 20, 2004
- CVE-2002-0764High 7.5Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contains a PHP file with the commands.phorum · phorumEPSS38%1 exploitPublished Aug 12, 2002
- CVE-2000-0305High 7.8Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability.microsoft · terminal serverEPSS38%1 exploitPublished May 19, 2000
- CVE-1999-0003Critical 10.0Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).sun · solarisEPSS25%2 exploitsPublished Apr 1, 1998
- CVE-2026-98180High 7.1drm/msm: RCU-free the scheduler-containing ring and VM objectslinux · linux kernelEPSS0.1%1 exploitPublished Oct 6, 2026
- CVE-2026-94169Critical 10.0WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerabilityEPSS1.0%1 exploitPublished Oct 16, 2026
- CVE-2026-105105Critical 9.8CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server) in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data,…EPSS0.8%1 exploitPublished Oct 3, 2026
- CVE-2025-7083Low 2.1It has been classified as critical.belkin · f9k1122 firmwareEPSS46%2 exploitsPublished Jul 6, 2025
- CVE-2025-58180High 7.5OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Uploadoctoprint · octoprintEPSS21%1 exploitPublished Sep 9, 2025
- CVE-2025-4978Critical 9.3A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA.netgear · dgnd3700 firmwareEPSS21%1 exploitPublished May 20, 2025
- CVE-2024-38289Critical 9.8A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to extract hashed passwords from the database, and authenticate to the application, via crafted SQL input.rhubcom · turbomeetingEPSS41%1 exploitPublished Jul 25, 2024
- CVE-2024-29974Critical 9.8UNSUPPORTED WHEN ASSIGNED The remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute arbitrary code…zyxel · nas326 firmwareEPSS23%·Published Jun 7, 2024
- CVE-2024-24116Critical 9.8An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the system/config_menu.htm.ruijie · rg-nbs2009g-p firmwareEPSS28%1 exploitPublished Oct 2, 2024
- CVE-2024-0265High 8.8It has been rated as critical.oretnom23 · clinic queuing systemEPSS21%1 exploitPublished Jan 7, 2024
- CVE-2023-34800Critical 9.8D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main.dlink · go-rt-ac750 firmwareEPSS28%1 exploitPublished Jun 15, 2023
- CVE-2023-28310High 8.0Microsoft Exchange Server Remote Code Execution Vulnerabilitymicrosoft · exchange serverEPSS25%·Published Jun 15, 2023
- CVE-2022-46770High 7.5qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a crafted multicast UDP packet (IP address range of 224.0.0.0 through 239.255.255.255).linuxfoundation · mirage firewallEPSS22%1 exploitPublished Dec 7, 2022
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-0081 | Windows Text Services (WTS) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a… microsoft · windows 7 | Critical 9.3 | 24% | 1 exploit | |
| CVE-2014-8499 | Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition before 7.1 build 7105 allow remote authenticated users to execute arbitrary SQL commands via the SEARCH_ALL parameter to (1)… manageengine · password manager pro | Medium 6.5 | 36% | 3 exploits | |
| CVE-2014-2962 | Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter. belkin · n150 f9k1009 | High 7.8 | 47% | 1 exploit | |
| CVE-2014-2383 | DOMPDF Arbitrary File Read dompdf · dompdf | Medium 6.8 | 39% | 1 exploit | |
| CVE-2013-3174 | DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted GIF file, aka "DirectShow Arbitrary… microsoft · windows 7 | Critical 9.3 | 32% | 1 exploit | |
| CVE-2013-3120 | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3118 and CVE-2013-3125. microsoft · internet explorer | Critical 9.3 | 32% | 1 exploit | |
| CVE-2013-3111 | Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3123. microsoft · internet explorer | Critical 9.3 | 34% | 1 exploit | |
| CVE-2013-1306 | Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1313. microsoft · internet explorer | Critical 9.3 | 33% | 1 exploit | |
| CVE-2013-0657 | Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execute arbitrary code by sending TCP port-12397 data that does not comply with a protocol. schneider-electric · interactive graphical scada system | Critical 10.0 | 21% | 2 exploits | |
| CVE-2013-0019 | Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer COmWindowProxy Use After Free Vulnerability." microsoft · internet explorer | Critical 9.3 | 35% | 1 exploit | |
| CVE-2012-5863 | These Sinapsi devices do not check for special elements in commands sent to the system. sinapsitech · esolar duo photovoltaic system monitor | Critical 10.0 | 25% | 2 exploits | |
| CVE-2012-5612 | mysql: MDL subsystem heap-based buffer overflow mariadb · mariadb | Medium 6.5 | 21% | 2 exploits | |
| CVE-2012-1661 | ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map (.mxd) file. esri · arcmap | Critical 9.3 | 24% | 2 exploits | |
| CVE-2011-1866 | Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXEC_CMD functionality. hp · openview storage data protector | Critical 10.0 | 21% | 1 exploit | |
| CVE-2011-0978 | Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an… microsoft · excel | Critical 9.3 | 43% | 1 exploit | |
| CVE-2011-0966 | Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. cisco · ciscoworks common services | Medium 6.8 | 41% | 3 exploits | |
| CVE-2011-0285 | The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted… mit · kerberos 5 | Critical 10.0 | 21% | 1 exploit | |
| CVE-2010-4588 | The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute arbitrary code via a crafted argument to the ReleaseContext method, a different vector than CVE-2010-3973, possibly an untrusted pointer… microsoft · wmi administrative tools | Critical 9.3 | 33% | 1 exploit | |
| CVE-2010-4172 | Improper Neutralization of Input During Web Page Generation in Apache Tomcat apache · tomcat | Medium 4.3 | 42% | 1 exploit | |
| CVE-2010-3714 | TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism typo3 · typo3 | High 7.1 | 24% | 1 exploit | |
| CVE-2008-2469 | Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field. libspf · libspf2 | Critical 10.0 | 22% | 1 exploit | |
| CVE-2008-0105 | Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section header index table information, aka "Microsoft Works File Converter Index Table… microsoft · office | Critical 9.3 | 44% | 1 exploit | |
| CVE-2007-1399 | Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a long zip:// URL, as demonstrated by actively triggering URL access from a remote PHP interpreter via… php · php | Critical 9.8 | 20% | 1 exploit | |
| CVE-2007-0031 | Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a BIFF8 spreadsheet with a PALETTE record that contains a large number of entries. microsoft · excel | Critical 9.3 | 42% | 1 exploit | |
| CVE-2006-6027 | Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the LoadFile method in an AcroPDF ActiveX control. adobe · acrobat reader | Critical 9.3 | 44% | 1 exploit | |
| CVE-2006-5379 | The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be… nvidia · binary graphics driver | High 7.5 | 27% | 1 exploit | |
| CVE-2006-3835 | Apache Tomcat Reveals Directories apache · tomcat | Medium 5.0 | 46% | 1 exploit | |
| CVE-2006-0058 | Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations. sendmail · sendmail | High 7.6 | 29% | 1 exploit | |
| CVE-2005-2340 | Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (QTIF), (2) PICT, or (3) JPEG format image with a long data field. apple · quicktime | High 7.5 | 26% | 1 exploit | |
| CVE-2005-1344 | Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. apache · http server | High 7.5 | 29% | 2 exploits | |
| CVE-2005-0416 | The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow. microsoft · windows 2000 | High 7.5 | 41% | 2 exploits | |
| CVE-2004-1137 | Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the… linux · linux kernel | Critical 10.0 | 21% | 1 exploit | |
| CVE-2004-0333 | Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters. uudeview · uudeview | Critical 10.0 | 24% | 1 exploit | |
| CVE-2003-1025 | Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL… microsoft · internet explorer | Medium 4.3 | 27% | 3 exploits | |
| CVE-2002-0764 | Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contains a PHP file with the commands. phorum · phorum | High 7.5 | 38% | 1 exploit | |
| CVE-2000-0305 | Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability. microsoft · terminal server | High 7.8 | 38% | 1 exploit | |
| CVE-1999-0003 | Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd). sun · solaris | Critical 10.0 | 25% | 2 exploits | |
| CVE-2026-98180 | drm/msm: RCU-free the scheduler-containing ring and VM objects linux · linux kernel | High 7.1 | 0.1% | 1 exploit | |
| CVE-2026-94169 | WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability | Critical 10.0 | 1.0% | 1 exploit | |
| CVE-2026-105105 | CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server) in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data,… | Critical 9.8 | 0.8% | 1 exploit | |
| CVE-2025-7083 | It has been classified as critical. belkin · f9k1122 firmware | Low 2.1 | 46% | 2 exploits | |
| CVE-2025-58180 | OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload octoprint · octoprint | High 7.5 | 21% | 1 exploit | |
| CVE-2025-4978 | A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. netgear · dgnd3700 firmware | Critical 9.3 | 21% | 1 exploit | |
| CVE-2024-38289 | A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to extract hashed passwords from the database, and authenticate to the application, via crafted SQL input. rhubcom · turbomeeting | Critical 9.8 | 41% | 1 exploit | |
| CVE-2024-29974 | UNSUPPORTED WHEN ASSIGNED The remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute arbitrary code… zyxel · nas326 firmware | Critical 9.8 | 23% | · | |
| CVE-2024-24116 | An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the system/config_menu.htm. ruijie · rg-nbs2009g-p firmware | Critical 9.8 | 28% | 1 exploit | |
| CVE-2024-0265 | It has been rated as critical. oretnom23 · clinic queuing system | High 8.8 | 21% | 1 exploit | |
| CVE-2023-34800 | D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main. dlink · go-rt-ac750 firmware | Critical 9.8 | 28% | 1 exploit | |
| CVE-2023-28310 | Microsoft Exchange Server Remote Code Execution Vulnerability microsoft · exchange server | High 8.0 | 25% | · | |
| CVE-2022-46770 | qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a crafted multicast UDP packet (IP address range of 224.0.0.0 through 239.255.255.255). linuxfoundation · mirage firewall | High 7.5 | 22% | 1 exploit |
Showing 851–900 of 1,462
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.