Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 20, 2026
1,462 vulnerabilities · highest score first
- CVE-2005-3277Critical 10.0The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("" or single backquote) in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different…hp · hp-uxEPSS22%1 exploitPublished Oct 21, 2005
- CVE-2004-2289Critical 10.0Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file.microsoft · windows xpEPSS23%1 exploitPublished Dec 31, 2004
- CVE-2003-1328High 7.5The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp…microsoft · internet explorerEPSS39%1 exploitPublished Feb 19, 2003
- CVE-2003-0686High 7.5Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code.dave airlie · pam smbEPSS27%1 exploitPublished Aug 26, 2003
- CVE-2003-0227Medium 5.0The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute…microsoft · windows ntEPSS34%1 exploitPublished Jun 9, 2003
- CVE-2003-0042Medium 5.0Jakarta Tomcat Directory Listing vulnerabilityapache · tomcatEPSS46%1 exploitPublished Apr 29, 2022
- CVE-2002-1131High 7.5Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.squirrelmail · squirrelmailEPSS26%1 exploitPublished Sep 16, 2002
- CVE-2002-0866High 7.5Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL…microsoft · virtual machineEPSS41%1 exploitPublished Oct 11, 2002
- CVE-2002-0724High 7.5Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2, or (3) NetServerEnum3,…microsoft · windows 2000EPSS26%2 exploitsPublished Sep 24, 2002
- CVE-2002-0702Critical 10.0Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.isc · dhcpdEPSS31%1 exploitPublished Jul 26, 2002
- CVE-2002-0597Medium 5.0LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformed data to microsoft-ds port 445.microsoft · windows 2000EPSS47%2 exploitsPublished Jun 18, 2002
- CVE-2002-0033Critical 10.0Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.sun · solarisEPSS23%1 exploitPublished May 29, 2002
- CVE-2001-0875High 7.5Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download.microsoft · internet explorerEPSS28%2 exploitsPublished Nov 26, 2001
- CVE-2001-0341High 7.5Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll.microsoft · frontpage server extensionsEPSS30%2 exploitsPublished Jul 21, 2001
- CVE-2000-0967High 10.0PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.php · phpEPSS21%2 exploitsPublished Oct 12, 2000
- CVE-1999-1575Medium 5.1The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup…microsoft · internet explorerEPSS36%3 exploitsPublished Sep 10, 1999
- CVE-1999-0920Critical 10.0Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.university of washington · imapEPSS32%1 exploitPublished May 26, 1999
- CVE-2026-27606High 8.8Rollup 4 has Arbitrary File Write via Path Traversalrollupjs · rollupEPSS1.6%1 exploitPublished Feb 25, 2026
- CVE-2024-7332Critical 9.3It has been classified as critical.totolink · cp450 firmwareEPSS21%1 exploitPublished Jul 31, 2024
- CVE-2024-50352Medium 5.4LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.phplibrenms · librenmsEPSS39%1 exploitPublished Nov 15, 2024
- CVE-2024-49357High 7.5In version 1.2.4 and all prior versions, the API endpoints in ZimaOS, such as http:///v1/users/image?path=/var/lib/casaos/1/app_order.json and http:///v1/users/image?path=/var/lib/casaos/1/system.json, expose sensitive data like installed applications and system information…zimaspace · zimaosEPSS24%1 exploitPublished Oct 24, 2024
- CVE-2023-26255High 7.5An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira.stagil · stagil navigationEPSS47%1 exploitPublished Feb 28, 2023
- CVE-2022-47071Critical 9.8In NVS365 V01, the background network test function can trigger command execution.nvs365 · nvs-365-v01 firmwareEPSS26%1 exploitPublished Feb 6, 2023
- CVE-2022-40881Critical 9.8SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.phpcontec · solarview compact firmwareEPSS30%1 exploitPublished Nov 17, 2022
- CVE-2022-35555Critical 9.8A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput parameters for arbitrary command execution.tenda · w6 firmwareEPSS26%1 exploitPublished Aug 12, 2022
- CVE-2022-31680Critical 9.1The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller).vmware · vcenter serverEPSS33%·Published Oct 7, 2022
- CVE-2022-30887Critical 9.8Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/editProductImage.php.pharmacy management system project · pharmacy management systemEPSS26%1 exploitPublished May 20, 2022
- CVE-2022-30860High 7.2FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel.fudforum · fudforumEPSS25%1 exploitPublished Jun 6, 2022
- CVE-2022-30023High 8.8Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.tenda · hg9 firmwareEPSS39%1 exploitPublished Jun 16, 2022
- CVE-2022-28590High 7.2A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme.pixelimity · pixelimityEPSS24%1 exploitPublished May 3, 2022
- CVE-2022-26263Medium 6.1Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability via the component /u8sl/WebHelp.yonyou · u8\+EPSS42%1 exploitPublished Mar 25, 2022
- CVE-2022-26213Critical 9.8Totolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters.totolink · x5000r firmwareEPSS26%1 exploitPublished Mar 15, 2022
- CVE-2022-24632Medium 5.3It is directory traversal during file download via the BrowseFiles.php view parameter.audiocodes · device manager expressEPSS27%1 exploitPublished May 30, 2023
- CVE-2021-46418High 7.5An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.telesquare · tlr-2855ks6 firmwareEPSS24%2 exploitsPublished Apr 7, 2022
- CVE-2021-44595High 8.8Wondershare Dr.wondershare · dr.foneEPSS21%2 exploitsPublished Apr 29, 2022
- CVE-2021-42756Critical 9.8Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and below, 6.4 all versions may allow an unauthenticated remote attacker to achieve arbitrary code execution…fortinet · fortiwebEPSS35%·Published Feb 16, 2023
- CVE-2021-27828Critical 9.1SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.in4velocity · in4suite erpEPSS20%1 exploitPublished Jun 1, 2021
- CVE-2021-25156Medium 4.9A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant…arubanetworks · instantEPSS40%2 exploitsPublished Mar 29, 2021
- CVE-2021-24563Medium 6.1The Frontend Uploader WordPress plugin through 1.3.2 does not prevent HTML files from being uploaded via its form, allowing unauthenticated user to upload a malicious HTML file containing JavaScript for example, which will be triggered when someone access the file directlyfrontend uploader project · frontend uploaderEPSS26%2 exploitsPublished Oct 11, 2021
- CVE-2021-20041High 7.5An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfiles/sonicfiles resulting in a loop with unreachable exit condition.sonicwall · sma 200 firmwareEPSS21%·Published Jan 4, 2022
- CVE-2020-8958High 7.2Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the boaform/admin/formPing Dest IP Address field.gpononu · 1ge\+3fe\+wifi onu v2804rgw firmwareEPSS46%1 exploitPublished Jul 15, 2020
- CVE-2020-28976Medium 5.3The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability.canto · cantoEPSS28%1 exploitPublished Nov 30, 2020
- CVE-2020-23972High 7.5In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file…gmapfp · gmapfpEPSS31%1 exploitPublished Aug 27, 2020
- CVE-2020-15906Critical 9.8tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts.tiki · tikiEPSS27%1 exploitPublished Oct 22, 2020
- CVE-2020-11798Medium 5.3A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation.mitel · micollab audio\, web \& video conferencingEPSS49%1 exploitPublished Jun 10, 2020
- CVE-2019-8982Critical 9.6com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF.wavemaker · wavemarker studioEPSS28%1 exploitPublished Feb 21, 2019
- CVE-2019-16072Critical 9.8An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ip_address variable within an snmp_browser action.netsas · enigma network management solutionEPSS26%1 exploitPublished Mar 19, 2020
- CVE-2019-15106Critical 9.8One can bypass the user password requirement and execute commands on the server.zohocorp · manageengine opmanagerEPSS25%1 exploitPublished Aug 16, 2019
- CVE-2019-12583Critical 9.1Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator.zyxel · uag2100 firmwareEPSS44%·Published Jun 27, 2019
- CVE-2018-8154Critical 9.8A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.microsoft · exchange serverEPSS24%·Published May 9, 2018
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2005-3277 | The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("" or single backquote) in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different… hp · hp-ux | Critical 10.0 | 22% | 1 exploit | |
| CVE-2004-2289 | Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file. microsoft · windows xp | Critical 10.0 | 23% | 1 exploit | |
| CVE-2003-1328 | The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp… microsoft · internet explorer | High 7.5 | 39% | 1 exploit | |
| CVE-2003-0686 | Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code. dave airlie · pam smb | High 7.5 | 27% | 1 exploit | |
| CVE-2003-0227 | The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute… microsoft · windows nt | Medium 5.0 | 34% | 1 exploit | |
| CVE-2003-0042 | Jakarta Tomcat Directory Listing vulnerability apache · tomcat | Medium 5.0 | 46% | 1 exploit | |
| CVE-2002-1131 | Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php. squirrelmail · squirrelmail | High 7.5 | 26% | 1 exploit | |
| CVE-2002-0866 | Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL… microsoft · virtual machine | High 7.5 | 41% | 1 exploit | |
| CVE-2002-0724 | Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2, or (3) NetServerEnum3,… microsoft · windows 2000 | High 7.5 | 26% | 2 exploits | |
| CVE-2002-0702 | Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response. isc · dhcpd | Critical 10.0 | 31% | 1 exploit | |
| CVE-2002-0597 | LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformed data to microsoft-ds port 445. microsoft · windows 2000 | Medium 5.0 | 47% | 2 exploits | |
| CVE-2002-0033 | Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name. sun · solaris | Critical 10.0 | 23% | 1 exploit | |
| CVE-2001-0875 | Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download. microsoft · internet explorer | High 7.5 | 28% | 2 exploits | |
| CVE-2001-0341 | Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll. microsoft · frontpage server extensions | High 7.5 | 30% | 2 exploits | |
| CVE-2000-0967 | PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs. php · php | High 10.0 | 21% | 2 exploits | |
| CVE-1999-1575 | The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup… microsoft · internet explorer | Medium 5.1 | 36% | 3 exploits | |
| CVE-1999-0920 | Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command. university of washington · imap | Critical 10.0 | 32% | 1 exploit | |
| CVE-2026-27606 | Rollup 4 has Arbitrary File Write via Path Traversal rollupjs · rollup | High 8.8 | 1.6% | 1 exploit | |
| CVE-2024-7332 | It has been classified as critical. totolink · cp450 firmware | Critical 9.3 | 21% | 1 exploit | |
| CVE-2024-50352 | LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.php librenms · librenms | Medium 5.4 | 39% | 1 exploit | |
| CVE-2024-49357 | In version 1.2.4 and all prior versions, the API endpoints in ZimaOS, such as http:///v1/users/image?path=/var/lib/casaos/1/app_order.json and http:///v1/users/image?path=/var/lib/casaos/1/system.json, expose sensitive data like installed applications and system information… zimaspace · zimaos | High 7.5 | 24% | 1 exploit | |
| CVE-2023-26255 | An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. stagil · stagil navigation | High 7.5 | 47% | 1 exploit | |
| CVE-2022-47071 | In NVS365 V01, the background network test function can trigger command execution. nvs365 · nvs-365-v01 firmware | Critical 9.8 | 26% | 1 exploit | |
| CVE-2022-40881 | SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php contec · solarview compact firmware | Critical 9.8 | 30% | 1 exploit | |
| CVE-2022-35555 | A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput parameters for arbitrary command execution. tenda · w6 firmware | Critical 9.8 | 26% | 1 exploit | |
| CVE-2022-31680 | The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). vmware · vcenter server | Critical 9.1 | 33% | · | |
| CVE-2022-30887 | Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/editProductImage.php. pharmacy management system project · pharmacy management system | Critical 9.8 | 26% | 1 exploit | |
| CVE-2022-30860 | FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel. fudforum · fudforum | High 7.2 | 25% | 1 exploit | |
| CVE-2022-30023 | Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function. tenda · hg9 firmware | High 8.8 | 39% | 1 exploit | |
| CVE-2022-28590 | A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme. pixelimity · pixelimity | High 7.2 | 24% | 1 exploit | |
| CVE-2022-26263 | Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability via the component /u8sl/WebHelp. yonyou · u8\+ | Medium 6.1 | 42% | 1 exploit | |
| CVE-2022-26213 | Totolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters. totolink · x5000r firmware | Critical 9.8 | 26% | 1 exploit | |
| CVE-2022-24632 | It is directory traversal during file download via the BrowseFiles.php view parameter. audiocodes · device manager express | Medium 5.3 | 27% | 1 exploit | |
| CVE-2021-46418 | An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts. telesquare · tlr-2855ks6 firmware | High 7.5 | 24% | 2 exploits | |
| CVE-2021-44595 | Wondershare Dr. wondershare · dr.fone | High 8.8 | 21% | 2 exploits | |
| CVE-2021-42756 | Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and below, 6.4 all versions may allow an unauthenticated remote attacker to achieve arbitrary code execution… fortinet · fortiweb | Critical 9.8 | 35% | · | |
| CVE-2021-27828 | SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries. in4velocity · in4suite erp | Critical 9.1 | 20% | 1 exploit | |
| CVE-2021-25156 | A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant… arubanetworks · instant | Medium 4.9 | 40% | 2 exploits | |
| CVE-2021-24563 | The Frontend Uploader WordPress plugin through 1.3.2 does not prevent HTML files from being uploaded via its form, allowing unauthenticated user to upload a malicious HTML file containing JavaScript for example, which will be triggered when someone access the file directly frontend uploader project · frontend uploader | Medium 6.1 | 26% | 2 exploits | |
| CVE-2021-20041 | An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfiles/sonicfiles resulting in a loop with unreachable exit condition. sonicwall · sma 200 firmware | High 7.5 | 21% | · | |
| CVE-2020-8958 | Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the boaform/admin/formPing Dest IP Address field. gpononu · 1ge\+3fe\+wifi onu v2804rgw firmware | High 7.2 | 46% | 1 exploit | |
| CVE-2020-28976 | The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. canto · canto | Medium 5.3 | 28% | 1 exploit | |
| CVE-2020-23972 | In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file… gmapfp · gmapfp | High 7.5 | 31% | 1 exploit | |
| CVE-2020-15906 | tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts. tiki · tiki | Critical 9.8 | 27% | 1 exploit | |
| CVE-2020-11798 | A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. mitel · micollab audio\, web \& video conferencing | Medium 5.3 | 49% | 1 exploit | |
| CVE-2019-8982 | com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF. wavemaker · wavemarker studio | Critical 9.6 | 28% | 1 exploit | |
| CVE-2019-16072 | An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ip_address variable within an snmp_browser action. netsas · enigma network management solution | Critical 9.8 | 26% | 1 exploit | |
| CVE-2019-15106 | One can bypass the user password requirement and execute commands on the server. zohocorp · manageengine opmanager | Critical 9.8 | 25% | 1 exploit | |
| CVE-2019-12583 | Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. zyxel · uag2100 firmware | Critical 9.1 | 44% | · | |
| CVE-2018-8154 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. microsoft · exchange server | Critical 9.8 | 24% | · |
Showing 1,101–1,150 of 1,462
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.