Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
1,462 vulnerabilities · highest score first
- CVE-2018-15517High 8.6The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, leading to SSRF, as demonstrated by an…dlink · central wifimanagerEPSS44%1 exploitPublished Jan 31, 2019
- CVE-2017-9355High 7.4XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted XSPF playlist file.subsonic · subsonicEPSS27%2 exploitsPublished Jun 7, 2017
- CVE-2017-8225Critical 9.8On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked.wificam · wireless ip camera \(p2p\) firmwareEPSS35%1 exploitPublished Apr 25, 2017
- CVE-2017-7588Critical 9.8On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt.brother · ads firmwareEPSS34%1 exploitPublished Apr 12, 2017
- CVE-2017-3623Critical 10.0For supported versions that are affected see note.oracle · solarisEPSS23%1 exploitPublished Apr 24, 2017
- CVE-2017-12787Critical 9.8A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are…noviflow · noviwareEPSS25%1 exploitPublished Aug 22, 2017
- CVE-2017-0090High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…microsoft · windows 7EPSS43%1 exploitPublished Mar 16, 2017
- CVE-2017-0088High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Uniscribe Remote Code Execution Vulnerability."microsoft · windows 7EPSS42%1 exploitPublished Mar 16, 2017
- CVE-2017-0087High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…microsoft · windows 7EPSS43%1 exploitPublished Mar 16, 2017
- CVE-2017-0086High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…microsoft · windows 7EPSS43%1 exploitPublished Mar 16, 2017
- CVE-2017-0083High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…microsoft · windows 7EPSS43%1 exploitPublished Mar 16, 2017
- CVE-2017-0072High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…microsoft · windows 7EPSS43%1 exploitPublished Mar 16, 2017
- CVE-2016-9682Critical 9.8The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface.dell · sonicwall secure remote access serverEPSS23%1 exploitPublished Feb 22, 2017
- CVE-2016-7274High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web…microsoft · windows 10EPSS42%1 exploitPublished Dec 20, 2016
- CVE-2016-5649Critical 9.8A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to access this page without any authentication.netgear · dgn2200 firmwareEPSS24%1 exploitPublished Jul 24, 2018
- CVE-2016-3316High 7.8Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability."microsoft · wordEPSS47%1 exploitPublished Aug 9, 2016
- CVE-2016-3301High 7.8The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync…microsoft · live meetingEPSS44%1 exploitPublished Aug 9, 2016
- CVE-2015-8617Critical 9.8php: Format string vulnerability in class name error messagephp · phpEPSS23%1 exploitPublished Dec 12, 2015
- CVE-2015-5471Medium 5.3Swim Team < 1.45.1085 - Directory Traversalswim team project · swim teamEPSS32%2 exploitsPublished Jul 7, 2015
- CVE-2015-3622Medium 5.9The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.gnu · libtasn1EPSS33%1 exploitPublished May 12, 2015
- CVE-2015-2510Critical 9.3Buffer overflow in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute…microsoft · lyncEPSS36%1 exploitPublished Sep 8, 2015
- CVE-2015-2444Critical 9.3Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2442.microsoft · internet explorerEPSS34%1 exploitPublished Aug 14, 2015
- CVE-2015-0050Critical 9.3Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-8967 and CVE-2015-0044.microsoft · internet explorerEPSS33%1 exploitPublished Feb 11, 2015
- CVE-2014-8387Critical 9.0cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell metacharacters in the pinghost parameter to ping.cgi.advantech · eki-6340EPSS31%1 exploitPublished Nov 20, 2014
- CVE-2014-4138Critical 9.3Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4130 and CVE-2014-4132.microsoft · internet explorerEPSS32%1 exploitPublished Oct 15, 2014
- CVE-2014-1799Critical 9.3Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282,…microsoft · internet explorerEPSS33%1 exploitPublished Jun 11, 2014
- CVE-2013-7052Critical 9.8D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi scriptdlink · dir-100 firmwareEPSS25%1 exploitPublished Feb 4, 2020
- CVE-2013-3827Medium 5.0Path Traversal in Eclipse Mojarraoracle · fusion middlewareEPSS32%1 exploitPublished May 17, 2022
- CVE-2013-3164Critical 9.3Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS24%1 exploitPublished Jul 10, 2013
- CVE-2013-3152Critical 9.3Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3146.microsoft · internet explorerEPSS24%1 exploitPublished Jul 10, 2013
- CVE-2013-3146Critical 9.3Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3152.microsoft · internet explorerEPSS24%1 exploitPublished Jul 10, 2013
- CVE-2013-2160Medium 5.0Missing XML Validation in Apache CXFapache · cxfEPSS32%1 exploitPublished May 13, 2022
- CVE-2012-5960Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)portable sdk for upnp project · portable sdk for upnpEPSS33%1 exploitPublished Jan 29, 2013
- CVE-2012-4353Critical 9.3Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the…sielcosistemi · winlog liteEPSS25%1 exploitPublished Aug 19, 2012
- CVE-2012-2052Critical 9.3Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a long Collada asset element in a DAE file, as demonstrated by the cameraYFov value in the…adobe · photoshop cs5EPSS23%1 exploitPublished Jun 19, 2014
- CVE-2012-0393Medium 6.4Apache Struts's ParameterInterceptor component does not prevent access to public constructorsapache · strutsEPSS36%1 exploitPublished May 4, 2022
- CVE-2011-3315High 7.8Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response…cisco · unified communications managerEPSS26%1 exploitPublished Oct 27, 2011
- CVE-2011-2755Medium 5.0Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 allows remote attackers to read arbitrary files via unspecified vectors.manageengine · servicedesk plusEPSS31%3 exploitsPublished Jul 17, 2011
- CVE-2011-2013Critical 9.8Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka "Reference…microsoft · windows 7EPSS32%1 exploitPublished Nov 8, 2011
- CVE-2010-2103Medium 4.3Improper Neutralization of Input During Web Page Generation in Apache Axis2apache · axis2EPSS35%1 exploitPublished May 14, 2022
- CVE-2010-1173High 7.1The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a…linux · linux kernelEPSS21%1 exploitPublished May 7, 2010
- CVE-2010-0926Low 3.5The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in…samba · sambaEPSS30%2 exploitsPublished Mar 10, 2010
- CVE-2010-0476Critical 10.0The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted SMB…microsoft · windows server 2003EPSS34%1 exploitPublished Apr 14, 2010
- CVE-2010-0027Critical 9.3The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary…microsoft · internet explorerEPSS34%1 exploitPublished Jan 22, 2010
- CVE-2010-0017Critical 9.3Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold…microsoft · windows 7EPSS31%1 exploitPublished Feb 10, 2010
- CVE-2009-0026Medium 4.3Apache Jackrabbit contains Cross-site Scriptingapache · jackrabbitEPSS27%2 exploitsPublished May 2, 2022
- CVE-2008-0117Critical 9.3Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability."microsoft · excelEPSS33%1 exploitPublished Mar 11, 2008
- CVE-2008-0112Critical 9.3Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability."microsoft · excelEPSS32%1 exploitPublished Mar 11, 2008
- CVE-2007-2221Critical 9.3Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; or 7 on Windows Vista allows remote…microsoft · internet explorerEPSS35%1 exploitPublished May 8, 2007
- CVE-2007-1658Critical 9.3Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local file or (2) UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as…microsoft · windows vistaEPSS36%1 exploitPublished Mar 24, 2007
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-15517 | The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, leading to SSRF, as demonstrated by an… dlink · central wifimanager | High 8.6 | 44% | 1 exploit | |
| CVE-2017-9355 | XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted XSPF playlist file. subsonic · subsonic | High 7.4 | 27% | 2 exploits | |
| CVE-2017-8225 | On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. wificam · wireless ip camera \(p2p\) firmware | Critical 9.8 | 35% | 1 exploit | |
| CVE-2017-7588 | On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt. brother · ads firmware | Critical 9.8 | 34% | 1 exploit | |
| CVE-2017-3623 | For supported versions that are affected see note. oracle · solaris | Critical 10.0 | 23% | 1 exploit | |
| CVE-2017-12787 | A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are… noviflow · noviware | Critical 9.8 | 25% | 1 exploit | |
| CVE-2017-0090 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in… microsoft · windows 7 | High 8.8 | 43% | 1 exploit | |
| CVE-2017-0088 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Uniscribe Remote Code Execution Vulnerability." microsoft · windows 7 | High 8.8 | 42% | 1 exploit | |
| CVE-2017-0087 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in… microsoft · windows 7 | High 8.8 | 43% | 1 exploit | |
| CVE-2017-0086 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in… microsoft · windows 7 | High 8.8 | 43% | 1 exploit | |
| CVE-2017-0083 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in… microsoft · windows 7 | High 8.8 | 43% | 1 exploit | |
| CVE-2017-0072 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in… microsoft · windows 7 | High 8.8 | 43% | 1 exploit | |
| CVE-2016-9682 | The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. dell · sonicwall secure remote access server | Critical 9.8 | 23% | 1 exploit | |
| CVE-2016-7274 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web… microsoft · windows 10 | High 8.8 | 42% | 1 exploit | |
| CVE-2016-5649 | A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to access this page without any authentication. netgear · dgn2200 firmware | Critical 9.8 | 24% | 1 exploit | |
| CVE-2016-3316 | Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability." microsoft · word | High 7.8 | 47% | 1 exploit | |
| CVE-2016-3301 | The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync… microsoft · live meeting | High 7.8 | 44% | 1 exploit | |
| CVE-2015-8617 | php: Format string vulnerability in class name error message php · php | Critical 9.8 | 23% | 1 exploit | |
| CVE-2015-5471 | Swim Team < 1.45.1085 - Directory Traversal swim team project · swim team | Medium 5.3 | 32% | 2 exploits | |
| CVE-2015-3622 | The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate. gnu · libtasn1 | Medium 5.9 | 33% | 1 exploit | |
| CVE-2015-2510 | Buffer overflow in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute… microsoft · lync | Critical 9.3 | 36% | 1 exploit | |
| CVE-2015-2444 | Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2442. microsoft · internet explorer | Critical 9.3 | 34% | 1 exploit | |
| CVE-2015-0050 | Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-8967 and CVE-2015-0044. microsoft · internet explorer | Critical 9.3 | 33% | 1 exploit | |
| CVE-2014-8387 | cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell metacharacters in the pinghost parameter to ping.cgi. advantech · eki-6340 | Critical 9.0 | 31% | 1 exploit | |
| CVE-2014-4138 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4130 and CVE-2014-4132. microsoft · internet explorer | Critical 9.3 | 32% | 1 exploit | |
| CVE-2014-1799 | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282,… microsoft · internet explorer | Critical 9.3 | 33% | 1 exploit | |
| CVE-2013-7052 | D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script dlink · dir-100 firmware | Critical 9.8 | 25% | 1 exploit | |
| CVE-2013-3827 | Path Traversal in Eclipse Mojarra oracle · fusion middleware | Medium 5.0 | 32% | 1 exploit | |
| CVE-2013-3164 | Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 24% | 1 exploit | |
| CVE-2013-3152 | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3146. microsoft · internet explorer | Critical 9.3 | 24% | 1 exploit | |
| CVE-2013-3146 | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3152. microsoft · internet explorer | Critical 9.3 | 24% | 1 exploit | |
| CVE-2013-2160 | Missing XML Validation in Apache CXF apache · cxf | Medium 5.0 | 32% | 1 exploit | |
| CVE-2012-5960 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) portable sdk for upnp project · portable sdk for upnp | Critical 10.0 | 33% | 1 exploit | |
| CVE-2012-4353 | Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the… sielcosistemi · winlog lite | Critical 9.3 | 25% | 1 exploit | |
| CVE-2012-2052 | Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a long Collada asset element in a DAE file, as demonstrated by the cameraYFov value in the… adobe · photoshop cs5 | Critical 9.3 | 23% | 1 exploit | |
| CVE-2012-0393 | Apache Struts's ParameterInterceptor component does not prevent access to public constructors apache · struts | Medium 6.4 | 36% | 1 exploit | |
| CVE-2011-3315 | Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response… cisco · unified communications manager | High 7.8 | 26% | 1 exploit | |
| CVE-2011-2755 | Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 allows remote attackers to read arbitrary files via unspecified vectors. manageengine · servicedesk plus | Medium 5.0 | 31% | 3 exploits | |
| CVE-2011-2013 | Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka "Reference… microsoft · windows 7 | Critical 9.8 | 32% | 1 exploit | |
| CVE-2010-2103 | Improper Neutralization of Input During Web Page Generation in Apache Axis2 apache · axis2 | Medium 4.3 | 35% | 1 exploit | |
| CVE-2010-1173 | The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a… linux · linux kernel | High 7.1 | 21% | 1 exploit | |
| CVE-2010-0926 | The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in… samba · samba | Low 3.5 | 30% | 2 exploits | |
| CVE-2010-0476 | The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted SMB… microsoft · windows server 2003 | Critical 10.0 | 34% | 1 exploit | |
| CVE-2010-0027 | The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary… microsoft · internet explorer | Critical 9.3 | 34% | 1 exploit | |
| CVE-2010-0017 | Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold… microsoft · windows 7 | Critical 9.3 | 31% | 1 exploit | |
| CVE-2009-0026 | Apache Jackrabbit contains Cross-site Scripting apache · jackrabbit | Medium 4.3 | 27% | 2 exploits | |
| CVE-2008-0117 | Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability." microsoft · excel | Critical 9.3 | 33% | 1 exploit | |
| CVE-2008-0112 | Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability." microsoft · excel | Critical 9.3 | 32% | 1 exploit | |
| CVE-2007-2221 | Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; or 7 on Windows Vista allows remote… microsoft · internet explorer | Critical 9.3 | 35% | 1 exploit | |
| CVE-2007-1658 | Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local file or (2) UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as… microsoft · windows vista | Critical 9.3 | 36% | 1 exploit |
Showing 1,051–1,100 of 1,462
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.