Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
1,462 vulnerabilities · highest score first
- CVE-2022-46476Critical 9.8D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function.dlink · dir-859 a1 firmwareEPSS41%1 exploitPublished Jan 19, 2023
- CVE-2022-28573Critical 9.8D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting.dlink · dir-823 pro firmwareEPSS28%1 exploitPublished May 2, 2022
- CVE-2022-2486Critical 9.8A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3.wavlink · wl-wn535k2 firmwareEPSS30%1 exploitPublished Jul 20, 2022
- CVE-2022-23854High 7.5AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of the secure gateway web server.aveva · intouch access anywhereEPSS47%1 exploitPublished Dec 23, 2022
- CVE-2021-43711Critical 9.8The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters.totolink · ex200 firmwareEPSS38%1 exploitPublished Jan 4, 2022
- CVE-2021-31642Medium 6.5A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC.chiyu-tech · bf-630 firmwareEPSS44%2 exploitsPublished Jun 1, 2021
- CVE-2021-28143High 8.0/jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools).dlink · dir-841 firmwareEPSS47%1 exploitPublished Mar 11, 2021
- CVE-2021-20040High 7.5A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a 'nobody' user.sonicwall · sma 200 firmwareEPSS25%·Published Jan 4, 2022
- CVE-2020-24219High 7.5An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97.szuray · iptv\/h.264 video encoder firmwareEPSS24%2 exploitsPublished Oct 6, 2020
- CVE-2020-11107High 8.8An unprivileged user can change a .exe configuration in xampp-contol.ini for all users (including admins) to enable arbitrary command execution.apachefriends · xamppEPSS22%2 exploitsPublished Apr 2, 2020
- CVE-2020-10548Critical 9.8rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection.rconfig · rconfigEPSS37%1 exploitPublished Jun 4, 2020
- CVE-2020-10547Critical 9.8rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection.rconfig · rconfigEPSS37%1 exploitPublished Jun 4, 2020
- CVE-2019-9041High 7.2In the inc/zzz_template.php file, the parserIfLabel() function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:assert substring.zzzcms · zzzphpEPSS31%2 exploitsPublished Feb 23, 2019
- CVE-2019-8050Critical 9.8Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability.adobe · acrobat dcEPSS41%1 exploitPublished Aug 20, 2019
- CVE-2019-7442Critical 9.8An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault <=10.7 allows remote attackers to read arbitrary files or potentially bypass authentication via a crafted DTD in the SAML authentication system.cyberark · enterprise password vaultEPSS40%1 exploitPublished May 8, 2019
- CVE-2019-19368Medium 6.1A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1.maxum · rumpusEPSS26%3 exploitsPublished Dec 16, 2019
- CVE-2019-1913Critical 9.8Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating…cisco · sf-220-24 firmwareEPSS26%1 exploitPublished Aug 7, 2019
- CVE-2019-18370Critical 9.8An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable.mi · millet router 3g firmwareEPSS40%1 exploitPublished Oct 23, 2019
- CVE-2019-17671Medium 5.3In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.wordpress · wordpressEPSS37%1 exploitPublished Oct 17, 2019
- CVE-2019-16124Critical 9.8In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code.youphptube · youphptubeEPSS28%1 exploitPublished Sep 8, 2019
- CVE-2019-15276Medium 6.5A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.cisco · wireless lan controller softwareEPSS46%2 exploitsPublished Nov 26, 2019
- CVE-2019-0573High 7.8An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.microsoft · windows 10EPSS20%2 exploitsPublished Jan 8, 2019
- CVE-2018-8716Medium 5.4WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers.wso2 · identity serverEPSS38%3 exploitsPublished Apr 25, 2018
- CVE-2018-6580Critical 9.8Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla!janguo · jimtawlEPSS36%1 exploitPublished Feb 2, 2018
- CVE-2018-19986Critical 9.8In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices.d-link · dir-818lw firmwareEPSS42%1 exploitPublished May 13, 2019
- CVE-2018-16133Medium 5.3Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI.cybrotech · cybrohttpserverEPSS39%3 exploitsPublished Aug 29, 2018
- CVE-2017-9946High 7.5An attacker with network access to the integrated web server (80/tcp and 443/tcp) could bypass the authentication and download sensitive information from the device.siemens · apogee pxc firmwareEPSS25%1 exploitPublished Oct 23, 2017
- CVE-2017-17058High 7.5The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/emails/plain/ URI, which accesses a parent directory.automattic · woocommerceEPSS24%1 exploitPublished Nov 29, 2017
- CVE-2017-12786Critical 9.8Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are…noviflow · noviwareEPSS25%1 exploitPublished Aug 22, 2017
- CVE-2017-1129Medium 6.5IBM Notes 8.5 and 9.0 is vulnerable to a denial of service.ibm · expeditorEPSS30%3 exploitsPublished Sep 5, 2017
- CVE-2017-0781High 8.8A remote code execution vulnerability in the Android system (bluetooth).google · androidEPSS23%2 exploitsPublished Sep 14, 2017
- CVE-2017-0283High 8.8Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office Word Viewer, Microsoft Lync 2013…microsoft · lyncEPSS39%1 exploitPublished Jun 14, 2017
- CVE-2017-0202High 7.5A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.microsoft · internet explorerEPSS46%1 exploitPublished Apr 12, 2017
- CVE-2017-0084High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web…microsoft · windows 10EPSS37%1 exploitPublished Mar 16, 2017
- CVE-2016-7054High 7.5In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads.openssl · opensslEPSS32%1 exploitPublished May 4, 2017
- CVE-2016-5639High 7.5Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a ..crestron · airmedia am-100 firmwareEPSS21%1 exploitPublished Aug 2, 2016
- CVE-2016-3313High 7.8Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability."microsoft · officeEPSS50%1 exploitPublished Aug 9, 2016
- CVE-2016-3115Medium 6.4Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.openbsd · opensshEPSS36%1 exploitPublished Mar 22, 2016
- CVE-2016-0170High 8.8GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka "Windows Graphics…microsoft · windows 10EPSS49%1 exploitPublished May 10, 2016
- CVE-2015-5468High 7.5WP eCommerce Shop Styling < 2.6 - Directory Traversalwpshopstyling · wp e-commerce shop stylingEPSS24%1 exploitPublished Jul 4, 2015
- CVE-2015-3783High 7.5SceneKit in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.apple · mac os xEPSS36%1 exploitPublished Aug 16, 2015
- CVE-2015-2177High 7.5Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or (2) Profibus.siemens · simatic s7-300 cpuEPSS34%1 exploitPublished Mar 7, 2015
- CVE-2015-2067Medium 5.0MAGMI plugin for Magento Server Directory Traversalmagmi project · magmiEPSS38%1 exploitPublished May 13, 2022
- CVE-2015-1730Critical 9.3Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS29%1 exploitPublished Jun 9, 2015
- CVE-2015-0252Medium 5.0internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) via crafted XML data.apache · xerces-c\+\+EPSS40%1 exploitPublished Mar 24, 2015
- CVE-2015-0097Critical 9.3Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Word Local Zone Remote Code Execution Vulnerability."microsoft · excelEPSS41%1 exploitPublished Mar 11, 2015
- CVE-2014-8676Medium 5.3Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attackers to determine the existence of arbitrary files via a ..soplanning · soplanningEPSS41%1 exploitPublished Aug 31, 2017
- CVE-2014-6363Critical 9.3vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption…microsoft · internet explorerEPSS28%1 exploitPublished Dec 10, 2014
- CVE-2014-2782Critical 9.3Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773,…microsoft · internet explorerEPSS22%1 exploitPublished Jun 19, 2014
- CVE-2014-2776Critical 9.3Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1769, CVE-2014-1782,…microsoft · internet explorerEPSS22%1 exploitPublished Jun 11, 2014
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-46476 | D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function. dlink · dir-859 a1 firmware | Critical 9.8 | 41% | 1 exploit | |
| CVE-2022-28573 | D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. dlink · dir-823 pro firmware | Critical 9.8 | 28% | 1 exploit | |
| CVE-2022-2486 | A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. wavlink · wl-wn535k2 firmware | Critical 9.8 | 30% | 1 exploit | |
| CVE-2022-23854 | AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of the secure gateway web server. aveva · intouch access anywhere | High 7.5 | 47% | 1 exploit | |
| CVE-2021-43711 | The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters. totolink · ex200 firmware | Critical 9.8 | 38% | 1 exploit | |
| CVE-2021-31642 | A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC. chiyu-tech · bf-630 firmware | Medium 6.5 | 44% | 2 exploits | |
| CVE-2021-28143 | /jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools). dlink · dir-841 firmware | High 8.0 | 47% | 1 exploit | |
| CVE-2021-20040 | A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a 'nobody' user. sonicwall · sma 200 firmware | High 7.5 | 25% | · | |
| CVE-2020-24219 | An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. szuray · iptv\/h.264 video encoder firmware | High 7.5 | 24% | 2 exploits | |
| CVE-2020-11107 | An unprivileged user can change a .exe configuration in xampp-contol.ini for all users (including admins) to enable arbitrary command execution. apachefriends · xampp | High 8.8 | 22% | 2 exploits | |
| CVE-2020-10548 | rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection. rconfig · rconfig | Critical 9.8 | 37% | 1 exploit | |
| CVE-2020-10547 | rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. rconfig · rconfig | Critical 9.8 | 37% | 1 exploit | |
| CVE-2019-9041 | In the inc/zzz_template.php file, the parserIfLabel() function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:assert substring. zzzcms · zzzphp | High 7.2 | 31% | 2 exploits | |
| CVE-2019-8050 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability. adobe · acrobat dc | Critical 9.8 | 41% | 1 exploit | |
| CVE-2019-7442 | An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault <=10.7 allows remote attackers to read arbitrary files or potentially bypass authentication via a crafted DTD in the SAML authentication system. cyberark · enterprise password vault | Critical 9.8 | 40% | 1 exploit | |
| CVE-2019-19368 | A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. maxum · rumpus | Medium 6.1 | 26% | 3 exploits | |
| CVE-2019-1913 | Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating… cisco · sf-220-24 firmware | Critical 9.8 | 26% | 1 exploit | |
| CVE-2019-18370 | An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. mi · millet router 3g firmware | Critical 9.8 | 40% | 1 exploit | |
| CVE-2019-17671 | In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled. wordpress · wordpress | Medium 5.3 | 37% | 1 exploit | |
| CVE-2019-16124 | In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code. youphptube · youphptube | Critical 9.8 | 28% | 1 exploit | |
| CVE-2019-15276 | A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. cisco · wireless lan controller software | Medium 6.5 | 46% | 2 exploits | |
| CVE-2019-0573 | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. microsoft · windows 10 | High 7.8 | 20% | 2 exploits | |
| CVE-2018-8716 | WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers. wso2 · identity server | Medium 5.4 | 38% | 3 exploits | |
| CVE-2018-6580 | Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! janguo · jimtawl | Critical 9.8 | 36% | 1 exploit | |
| CVE-2018-19986 | In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices. d-link · dir-818lw firmware | Critical 9.8 | 42% | 1 exploit | |
| CVE-2018-16133 | Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI. cybrotech · cybrohttpserver | Medium 5.3 | 39% | 3 exploits | |
| CVE-2017-9946 | An attacker with network access to the integrated web server (80/tcp and 443/tcp) could bypass the authentication and download sensitive information from the device. siemens · apogee pxc firmware | High 7.5 | 25% | 1 exploit | |
| CVE-2017-17058 | The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/emails/plain/ URI, which accesses a parent directory. automattic · woocommerce | High 7.5 | 24% | 1 exploit | |
| CVE-2017-12786 | Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are… noviflow · noviware | Critical 9.8 | 25% | 1 exploit | |
| CVE-2017-1129 | IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. ibm · expeditor | Medium 6.5 | 30% | 3 exploits | |
| CVE-2017-0781 | A remote code execution vulnerability in the Android system (bluetooth). google · android | High 8.8 | 23% | 2 exploits | |
| CVE-2017-0283 | Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office Word Viewer, Microsoft Lync 2013… microsoft · lync | High 8.8 | 39% | 1 exploit | |
| CVE-2017-0202 | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. microsoft · internet explorer | High 7.5 | 46% | 1 exploit | |
| CVE-2017-0084 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web… microsoft · windows 10 | High 8.8 | 37% | 1 exploit | |
| CVE-2016-7054 | In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. openssl · openssl | High 7.5 | 32% | 1 exploit | |
| CVE-2016-5639 | Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a .. crestron · airmedia am-100 firmware | High 7.5 | 21% | 1 exploit | |
| CVE-2016-3313 | Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability." microsoft · office | High 7.8 | 50% | 1 exploit | |
| CVE-2016-3115 | Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions. openbsd · openssh | Medium 6.4 | 36% | 1 exploit | |
| CVE-2016-0170 | GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka "Windows Graphics… microsoft · windows 10 | High 8.8 | 49% | 1 exploit | |
| CVE-2015-5468 | WP eCommerce Shop Styling < 2.6 - Directory Traversal wpshopstyling · wp e-commerce shop styling | High 7.5 | 24% | 1 exploit | |
| CVE-2015-3783 | SceneKit in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors. apple · mac os x | High 7.5 | 36% | 1 exploit | |
| CVE-2015-2177 | Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or (2) Profibus. siemens · simatic s7-300 cpu | High 7.5 | 34% | 1 exploit | |
| CVE-2015-2067 | MAGMI plugin for Magento Server Directory Traversal magmi project · magmi | Medium 5.0 | 38% | 1 exploit | |
| CVE-2015-1730 | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 29% | 1 exploit | |
| CVE-2015-0252 | internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) via crafted XML data. apache · xerces-c\+\+ | Medium 5.0 | 40% | 1 exploit | |
| CVE-2015-0097 | Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Word Local Zone Remote Code Execution Vulnerability." microsoft · excel | Critical 9.3 | 41% | 1 exploit | |
| CVE-2014-8676 | Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attackers to determine the existence of arbitrary files via a .. soplanning · soplanning | Medium 5.3 | 41% | 1 exploit | |
| CVE-2014-6363 | vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption… microsoft · internet explorer | Critical 9.3 | 28% | 1 exploit | |
| CVE-2014-2782 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773,… microsoft · internet explorer | Critical 9.3 | 22% | 1 exploit | |
| CVE-2014-2776 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1769, CVE-2014-1782,… microsoft · internet explorer | Critical 9.3 | 22% | 1 exploit |
Showing 901–950 of 1,462
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.