Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 20, 2026
1,462 vulnerabilities · highest score first
- CVE-2005-4131Medium 6.8Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to…microsoft · excelEPSS31%1 exploitPublished Dec 9, 2005
- CVE-2005-3862High 7.5Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives.unalz · unalzEPSS20%1 exploitPublished Nov 29, 2005
- CVE-2005-3116Critical 10.0Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.symantec veritas · netbackupEPSS28%1 exploitPublished Nov 18, 2005
- CVE-2005-2871High 7.5Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character…mozilla · firefoxEPSS21%1 exploitPublished Sep 9, 2005
- CVE-2005-1989High 7.5Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability".microsoft · internet explorerEPSS46%1 exploitPublished Aug 10, 2005
- CVE-2005-0688Medium 5.0Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability…microsoft · windows 2003 serverEPSS47%2 exploitsPublished Mar 5, 2005
- CVE-2005-0058High 7.5Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message.microsoft · windows 2000EPSS46%1 exploitPublished Aug 10, 2005
- CVE-2004-1104High 7.5Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor (a) element with an empty "href" attribute,…microsoft · ieEPSS35%1 exploitPublished Dec 31, 2004
- CVE-2003-0543Medium 5.0Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.openssl · opensslEPSS27%1 exploitPublished Nov 17, 2003
- CVE-2003-0469High 7.5Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align"…microsoft · windows 2000EPSS45%1 exploitPublished Aug 7, 2003
- CVE-2003-0240Critical 10.0The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).axis · 2100 network cameraEPSS30%1 exploitPublished Jun 9, 2003
- CVE-2003-0228High 7.5Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed…microsoft · windows media playerEPSS46%1 exploitPublished May 27, 2003
- CVE-2002-20001High 7.5The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack.f5 · big-ip access policy managerEPSS25%·Published Nov 11, 2021
- CVE-2002-0693High 7.5Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink…microsoft · windows 2000EPSS31%1 exploitPublished Oct 10, 2002
- CVE-2001-0932High 7.5Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command.cooolsoft · powerftpEPSS23%2 exploitsPublished Nov 28, 2001
- CVE-2001-0552Critical 10.0ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message.hp · openview network node managerEPSS26%1 exploitPublished Sep 20, 2001
- CVE-1999-0725High 7.1When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a.microsoft · internet information serverEPSS25%1 exploitPublished Aug 19, 1999
- CVE-1999-0153Medium 5.0Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.microsoft · windows 95EPSS21%4 exploitsPublished Jul 1, 1997
- CVE-1999-0002Critical 10.0Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.redhat · linuxEPSS28%1 exploitPublished Oct 12, 1998
- CVE-2026-80344High 8.2Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component.Published Oct 19, 2026
- CVE-2026-79983High 7.4Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component.Published Oct 19, 2026
- CVE-2026-0006Critical 9.8In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow.google · androidEPSS0.7%1 exploitPublished Mar 2, 2026
- CVE-2025-67303High 7.5An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data.comfy · comfyui-managerEPSS1.4%1 exploitPublished Jan 5, 2026
- CVE-2025-24071Medium 6.5Microsoft Windows File Explorer Spoofing Vulnerabilitymicrosoft · windows 10 1507EPSS23%2 exploitsPublished Mar 11, 2025
- CVE-2025-20188Critical 10.0A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to upload arbitrary files to…cisco · ios xeEPSS27%·Published May 7, 2025
- CVE-2025-1122Medium 6.7Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.google · chromeEPSS0.2%4 exploitsPublished Apr 15, 2025
- CVE-2024-9793Medium 5.3A vulnerability classified as critical was found in Tenda AC1206 up to 15.03.06.23.tenda · ac1206 firmwareEPSS23%2 exploitsPublished Oct 10, 2024
- CVE-2024-8191Critical 9.8SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution.ivanti · endpoint managerEPSS20%·Published Sep 11, 2024
- CVE-2024-8129Medium 5.3A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to…dlink · dnr-202l firmwareEPSS23%1 exploitPublished Aug 26, 2024
- CVE-2024-7469Medium 5.3It has been declared as critical.raisecom · msg1200 firmwareEPSS25%1 exploitPublished Aug 5, 2024
- CVE-2024-7468Medium 5.3It has been classified as critical.raisecom · msg1200 firmwareEPSS25%1 exploitPublished Aug 5, 2024
- CVE-2024-34783High 7.2An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.ivanti · endpoint managerEPSS43%·Published Sep 12, 2024
- CVE-2024-32848High 7.2An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.ivanti · endpoint managerEPSS43%·Published Sep 12, 2024
- CVE-2024-32479Medium 5.4LibreNMS uses Improper Sanitization on Service template name leads to Stored XSSlibrenms · librenmsEPSS34%1 exploitPublished Apr 22, 2024
- CVE-2024-27564Medium 6.5pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter.dirk1983 · chatgptEPSS41%1 exploitPublished Mar 5, 2024
- CVE-2024-25830Critical 9.8F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction.f-logic · datacube3 firmwareEPSS24%1 exploitPublished Feb 28, 2024
- CVE-2024-21320Medium 6.5Windows Themes Spoofing Vulnerabilitymicrosoft · windows 10 1507EPSS23%1 exploitPublished Jan 10, 2024
- CVE-2023-5372High 7.2The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and NAS542 firmware versions through V5.21(ABAG.12)C0 could allow an authenticated attacker with administrator privileges to execute some operating system (OS)…zyxel · nas326 firmwareEPSS28%·Published Jan 30, 2024
- CVE-2023-51123Critical 9.8An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main function of the cgibin binary component.dlink · dir-815 firmwareEPSS24%1 exploitPublished Jan 10, 2024
- CVE-2023-46865High 7.2/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image.craterapp · craterEPSS20%1 exploitPublished Oct 29, 2023
- CVE-2023-46042Critical 9.8An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo().get-simple · getsimplecmsEPSS23%1 exploitPublished Oct 19, 2023
- CVE-2023-36144High 7.5An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration.intelbras · sg 2404 mrEPSS37%1 exploitPublished Jun 30, 2023
- CVE-2023-31983Critical 9.8A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations.edimax · br-6428ns firmwareEPSS25%1 exploitPublished May 12, 2023
- CVE-2023-2796Medium 5.3The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id.myeventon · eventonEPSS43%1 exploitPublished Jul 10, 2023
- CVE-2023-27076Critical 9.8Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter.tenda · g103 firmwareEPSS23%1 exploitPublished Apr 10, 2023
- CVE-2023-24734Critical 9.8An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file.sigb · pmbEPSS21%1 exploitPublished Mar 6, 2023
- CVE-2022-47949Critical 9.8The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn.nintendo · animal crossing\EPSS23%1 exploitPublished Dec 24, 2022
- CVE-2022-38828Critical 9.8TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgitotolink · t6 firmwareEPSS20%1 exploitPublished Sep 16, 2022
- CVE-2022-36572Critical 9.8Sinsiu Sinsiu Enterprise Website System v1.1.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /upload/admin.php?/deal/.sinsiu · enterprise website systemEPSS22%1 exploitPublished Aug 28, 2022
- CVE-2022-34555Critical 9.8TP-LINK TL-R473G 2.0.1 Build 220529 Rel.65574n was discovered to contain a remote code execution vulnerability which is exploited via a crafted packet.tp-link · tl-r473g firmwareEPSS23%1 exploitPublished Jul 28, 2022
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2005-4131 | Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to… microsoft · excel | Medium 6.8 | 31% | 1 exploit | |
| CVE-2005-3862 | Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives. unalz · unalz | High 7.5 | 20% | 1 exploit | |
| CVE-2005-3116 | Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet. symantec veritas · netbackup | Critical 10.0 | 28% | 1 exploit | |
| CVE-2005-2871 | Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character… mozilla · firefox | High 7.5 | 21% | 1 exploit | |
| CVE-2005-1989 | Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability". microsoft · internet explorer | High 7.5 | 46% | 1 exploit | |
| CVE-2005-0688 | Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability… microsoft · windows 2003 server | Medium 5.0 | 47% | 2 exploits | |
| CVE-2005-0058 | Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message. microsoft · windows 2000 | High 7.5 | 46% | 1 exploit | |
| CVE-2004-1104 | Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor (a) element with an empty "href" attribute,… microsoft · ie | High 7.5 | 35% | 1 exploit | |
| CVE-2003-0543 | Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values. openssl · openssl | Medium 5.0 | 27% | 1 exploit | |
| CVE-2003-0469 | Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align"… microsoft · windows 2000 | High 7.5 | 45% | 1 exploit | |
| CVE-2003-0240 | The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash). axis · 2100 network camera | Critical 10.0 | 30% | 1 exploit | |
| CVE-2003-0228 | Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed… microsoft · windows media player | High 7.5 | 46% | 1 exploit | |
| CVE-2002-20001 | The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. f5 · big-ip access policy manager | High 7.5 | 25% | · | |
| CVE-2002-0693 | Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink… microsoft · windows 2000 | High 7.5 | 31% | 1 exploit | |
| CVE-2001-0932 | Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command. cooolsoft · powerftp | High 7.5 | 23% | 2 exploits | |
| CVE-2001-0552 | ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message. hp · openview network node manager | Critical 10.0 | 26% | 1 exploit | |
| CVE-1999-0725 | When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. microsoft · internet information server | High 7.1 | 25% | 1 exploit | |
| CVE-1999-0153 | Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke. microsoft · windows 95 | Medium 5.0 | 21% | 4 exploits | |
| CVE-1999-0002 | Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems. redhat · linux | Critical 10.0 | 28% | 1 exploit | |
| CVE-2026-80344 | Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component. | High 8.2 | · | 1 exploit | |
| CVE-2026-79983 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component. | High 7.4 | · | 1 exploit | |
| CVE-2026-0006 | In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. google · android | Critical 9.8 | 0.7% | 1 exploit | |
| CVE-2025-67303 | An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. comfy · comfyui-manager | High 7.5 | 1.4% | 1 exploit | |
| CVE-2025-24071 | Microsoft Windows File Explorer Spoofing Vulnerability microsoft · windows 10 1507 | Medium 6.5 | 23% | 2 exploits | |
| CVE-2025-20188 | A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to upload arbitrary files to… cisco · ios xe | Critical 10.0 | 27% | · | |
| CVE-2025-1122 | Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process. google · chrome | Medium 6.7 | 0.2% | 4 exploits | |
| CVE-2024-9793 | A vulnerability classified as critical was found in Tenda AC1206 up to 15.03.06.23. tenda · ac1206 firmware | Medium 5.3 | 23% | 2 exploits | |
| CVE-2024-8191 | SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution. ivanti · endpoint manager | Critical 9.8 | 20% | · | |
| CVE-2024-8129 | A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to… dlink · dnr-202l firmware | Medium 5.3 | 23% | 1 exploit | |
| CVE-2024-7469 | It has been declared as critical. raisecom · msg1200 firmware | Medium 5.3 | 25% | 1 exploit | |
| CVE-2024-7468 | It has been classified as critical. raisecom · msg1200 firmware | Medium 5.3 | 25% | 1 exploit | |
| CVE-2024-34783 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution. ivanti · endpoint manager | High 7.2 | 43% | · | |
| CVE-2024-32848 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution. ivanti · endpoint manager | High 7.2 | 43% | · | |
| CVE-2024-32479 | LibreNMS uses Improper Sanitization on Service template name leads to Stored XSS librenms · librenms | Medium 5.4 | 34% | 1 exploit | |
| CVE-2024-27564 | pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter. dirk1983 · chatgpt | Medium 6.5 | 41% | 1 exploit | |
| CVE-2024-25830 | F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. f-logic · datacube3 firmware | Critical 9.8 | 24% | 1 exploit | |
| CVE-2024-21320 | Windows Themes Spoofing Vulnerability microsoft · windows 10 1507 | Medium 6.5 | 23% | 1 exploit | |
| CVE-2023-5372 | The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and NAS542 firmware versions through V5.21(ABAG.12)C0 could allow an authenticated attacker with administrator privileges to execute some operating system (OS)… zyxel · nas326 firmware | High 7.2 | 28% | · | |
| CVE-2023-51123 | An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main function of the cgibin binary component. dlink · dir-815 firmware | Critical 9.8 | 24% | 1 exploit | |
| CVE-2023-46865 | /api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image. craterapp · crater | High 7.2 | 20% | 1 exploit | |
| CVE-2023-46042 | An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo(). get-simple · getsimplecms | Critical 9.8 | 23% | 1 exploit | |
| CVE-2023-36144 | An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration. intelbras · sg 2404 mr | High 7.5 | 37% | 1 exploit | |
| CVE-2023-31983 | A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations. edimax · br-6428ns firmware | Critical 9.8 | 25% | 1 exploit | |
| CVE-2023-2796 | The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id. myeventon · eventon | Medium 5.3 | 43% | 1 exploit | |
| CVE-2023-27076 | Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter. tenda · g103 firmware | Critical 9.8 | 23% | 1 exploit | |
| CVE-2023-24734 | An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file. sigb · pmb | Critical 9.8 | 21% | 1 exploit | |
| CVE-2022-47949 | The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. nintendo · animal crossing\ | Critical 9.8 | 23% | 1 exploit | |
| CVE-2022-38828 | TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi totolink · t6 firmware | Critical 9.8 | 20% | 1 exploit | |
| CVE-2022-36572 | Sinsiu Sinsiu Enterprise Website System v1.1.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /upload/admin.php?/deal/. sinsiu · enterprise website system | Critical 9.8 | 22% | 1 exploit | |
| CVE-2022-34555 | TP-LINK TL-R473G 2.0.1 Build 220529 Rel.65574n was discovered to contain a remote code execution vulnerability which is exploited via a crafted packet. tp-link · tl-r473g firmware | Critical 9.8 | 23% | 1 exploit |
Showing 1,201–1,250 of 1,462
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.