Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 20, 2026
1,462 vulnerabilities · highest score first
- CVE-2022-34531Critical 9.8DedeCMS v5.7.95 was discovered to contain a remote code execution (RCE) vulnerability via the component mytag_ main.php.dedecms · dedecmsEPSS24%1 exploitPublished Jul 29, 2022
- CVE-2022-30079High 8.8Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to modify values in the vulnerable parameter.netgear · r6200EPSS25%1 exploitPublished Sep 8, 2022
- CVE-2022-29592Critical 9.8Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route).tenda · tx9 pro firmwareEPSS20%1 exploitPublished May 5, 2022
- CVE-2022-2863Medium 4.9Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Administrator+) Path Traversalwpvivid · migration\, backup\, stagingEPSS25%1 exploitPublished Sep 16, 2022
- CVE-2022-28557Critical 9.8There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, which can also cooperate with CVE-2021-44971 to cause unconditional arbitrary command executiontenda · ac15 firmwareEPSS23%1 exploitPublished May 4, 2022
- CVE-2022-28096High 7.2Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/Develop.php.skycaiji · skycaijiEPSS21%1 exploitPublished May 4, 2022
- CVE-2022-28021Critical 9.8Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user.purchase order management system project · purchase order management systemEPSS24%1 exploitPublished Apr 21, 2022
- CVE-2022-27474High 7.2SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field.salesagility · suitecrmEPSS23%1 exploitPublished Apr 15, 2022
- CVE-2022-23389Critical 9.8PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter.publiccms · publiccmsEPSS22%1 exploitPublished Feb 14, 2022
- CVE-2021-34805High 7.5For each URL request, it accesses the corresponding .fau file on the operating system without preventing %2e%2e%5c directory traversal.land-software · faust iserverEPSS27%1 exploitPublished Jan 31, 2022
- CVE-2021-31932Critical 9.8Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass.nokia · bts trs web consoleEPSS22%1 exploitPublished Feb 11, 2022
- CVE-2020-28070Critical 9.8SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GET input in view_event.php via the 'id' parameter.alumni management system project · alumni management systemEPSS23%1 exploitPublished Dec 23, 2020
- CVE-2020-11579High 7.5installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.chadhaajay · phpkbEPSS27%1 exploitPublished Sep 3, 2020
- CVE-2019-9757High 7.5Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or visualization-exportPDF.view allows local files to be read.labkey · labkey serverEPSS37%1 exploitPublished Oct 29, 2019
- CVE-2019-8016Critical 9.8Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds write vulnerability.adobe · acrobat dcEPSS22%1 exploitPublished Aug 20, 2019
- CVE-2019-16893High 7.5The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request.tp-link · tp-sg105e firmwareEPSS38%1 exploitPublished Feb 3, 2020
- CVE-2019-13063High 7.5Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_view page.sahipro · sahi proEPSS27%1 exploitPublished Sep 23, 2019
- CVE-2019-12616Medium 6.5phpMyAdmin CSRF Vulnerabilityphpmyadmin · phpmyadminEPSS20%1 exploitPublished May 24, 2022
- CVE-2018-8533Medium 5.5An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server…microsoft · sql server management studioEPSS23%2 exploitsPublished Oct 10, 2018
- CVE-2018-8532Medium 5.5An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server…microsoft · sql server management studioEPSS23%2 exploitsPublished Oct 10, 2018
- CVE-2018-8527Medium 5.5An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server…microsoft · sql server management studioEPSS23%2 exploitsPublished Oct 10, 2018
- CVE-2018-18006Critical 9.8Hardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android give access to any externally disclosed myPrint WSDL API, as demonstrated by discovering API secrets of related Google cloud printers, encrypted passwords of mail servers, and names…ricoh · myprintEPSS21%1 exploitPublished Dec 14, 2018
- CVE-2018-14493Medium 6.1Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the group name.opmantek · open-auditEPSS41%2 exploitsPublished Jul 25, 2018
- CVE-2018-12596Critical 9.8Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden (normally available…episerver · ektron cmsEPSS22%1 exploitPublished Oct 10, 2018
- CVE-2018-10822High 7.5Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices allows remote attackers…dlink · dir-140l firmwareEPSS39%1 exploitPublished Oct 17, 2018
- CVE-2017-8683Medium 5.5Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an attacker to execute remote code by the way it handles embedded…microsoft · windows 10EPSS23%2 exploitsPublished Sep 12, 2017
- CVE-2017-8303Critical 9.8An issue was discovered on Accellion FTA devices before FTA_9_12_180.accellion · file transfer applianceEPSS24%1 exploitPublished May 5, 2017
- CVE-2017-6548Critical 9.8Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with…asus · rt-ac53 firmwareEPSS21%1 exploitPublished Mar 9, 2017
- CVE-2017-5869High 8.8Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and execute arbitrary JSP code via a ..nuxeo · nuxeoEPSS35%1 exploitPublished Mar 24, 2017
- CVE-2017-15647High 7.5On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value.fiberhome · routerfiberhome firmwareEPSS27%1 exploitPublished Oct 19, 2017
- CVE-2016-9554High 7.2The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface.sophos · web applianceEPSS25%1 exploitPublished Jan 28, 2017
- CVE-2016-5725Medium 5.9Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.jcraft · jschEPSS24%1 exploitPublished Apr 21, 2021
- CVE-2016-4201Critical 9.8Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…adobe · acrobatEPSS21%1 exploitPublished Jul 12, 2016
- CVE-2016-3717Medium 5.5The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.imagemagick · imagemagickEPSS20%1 exploitPublished May 5, 2016
- CVE-2016-2389High 7.5Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a ..sap · netweaverEPSS41%1 exploitPublished Feb 16, 2016
- CVE-2016-0122High 7.8Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption…microsoft · excelEPSS41%1 exploitPublished Apr 12, 2016
- CVE-2016-0111High 7.5Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than…microsoft · edgeEPSS39%1 exploitPublished Mar 9, 2016
- CVE-2016-0108High 7.5Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0102, CVE-2016-0103,…microsoft · internet explorerEPSS39%1 exploitPublished Mar 9, 2016
- CVE-2014-1800Critical 9.3Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS24%1 exploitPublished Jun 11, 2014
- CVE-2014-1797Critical 9.3Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780,…microsoft · internet explorerEPSS24%1 exploitPublished Jun 11, 2014
- CVE-2014-1795Critical 9.3Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773,…microsoft · internet explorerEPSS25%1 exploitPublished Jun 11, 2014
- CVE-2014-1791Critical 9.3Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS25%1 exploitPublished Jun 11, 2014
- CVE-2014-1779Critical 9.3Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282,…microsoft · internet explorerEPSS24%1 exploitPublished Jun 11, 2014
- CVE-2013-7471Critical 9.8B, and DIR-865 devices.dlink · dir-300 firmwareEPSS24%1 exploitPublished Jun 11, 2019
- CVE-2013-0658Critical 10.0Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitrary code via a crafted HTTP request.schneider-electric · accutech managerEPSS22%1 exploitPublished Feb 15, 2013
- CVE-2012-5611Medium 6.5mysql: acl_get() stack-based buffer overflowmariadb · mariadbEPSS24%1 exploitPublished Nov 29, 2012
- CVE-2012-0840Medium 5.0tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to…apache · portable runtimeEPSS42%1 exploitPublished Feb 10, 2012
- CVE-2011-0419Medium 4.3Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris…apache · http serverEPSS30%1 exploitPublished May 16, 2011
- CVE-2010-4367High 7.5awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server or (2) NFS server.awstats · awstatsEPSS27%1 exploitPublished Dec 2, 2010
- CVE-2010-2745Critical 9.3Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka "Windows Media Player Memory…microsoft · windows media playerEPSS24%1 exploitPublished Oct 13, 2010
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-34531 | DedeCMS v5.7.95 was discovered to contain a remote code execution (RCE) vulnerability via the component mytag_ main.php. dedecms · dedecms | Critical 9.8 | 24% | 1 exploit | |
| CVE-2022-30079 | Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to modify values in the vulnerable parameter. netgear · r6200 | High 8.8 | 25% | 1 exploit | |
| CVE-2022-29592 | Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route). tenda · tx9 pro firmware | Critical 9.8 | 20% | 1 exploit | |
| CVE-2022-2863 | Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Administrator+) Path Traversal wpvivid · migration\, backup\, staging | Medium 4.9 | 25% | 1 exploit | |
| CVE-2022-28557 | There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, which can also cooperate with CVE-2021-44971 to cause unconditional arbitrary command execution tenda · ac15 firmware | Critical 9.8 | 23% | 1 exploit | |
| CVE-2022-28096 | Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/Develop.php. skycaiji · skycaiji | High 7.2 | 21% | 1 exploit | |
| CVE-2022-28021 | Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user. purchase order management system project · purchase order management system | Critical 9.8 | 24% | 1 exploit | |
| CVE-2022-27474 | SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field. salesagility · suitecrm | High 7.2 | 23% | 1 exploit | |
| CVE-2022-23389 | PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter. publiccms · publiccms | Critical 9.8 | 22% | 1 exploit | |
| CVE-2021-34805 | For each URL request, it accesses the corresponding .fau file on the operating system without preventing %2e%2e%5c directory traversal. land-software · faust iserver | High 7.5 | 27% | 1 exploit | |
| CVE-2021-31932 | Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. nokia · bts trs web console | Critical 9.8 | 22% | 1 exploit | |
| CVE-2020-28070 | SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GET input in view_event.php via the 'id' parameter. alumni management system project · alumni management system | Critical 9.8 | 23% | 1 exploit | |
| CVE-2020-11579 | installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled. chadhaajay · phpkb | High 7.5 | 27% | 1 exploit | |
| CVE-2019-9757 | Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or visualization-exportPDF.view allows local files to be read. labkey · labkey server | High 7.5 | 37% | 1 exploit | |
| CVE-2019-8016 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds write vulnerability. adobe · acrobat dc | Critical 9.8 | 22% | 1 exploit | |
| CVE-2019-16893 | The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request. tp-link · tp-sg105e firmware | High 7.5 | 38% | 1 exploit | |
| CVE-2019-13063 | Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_view page. sahipro · sahi pro | High 7.5 | 27% | 1 exploit | |
| CVE-2019-12616 | phpMyAdmin CSRF Vulnerability phpmyadmin · phpmyadmin | Medium 6.5 | 20% | 1 exploit | |
| CVE-2018-8533 | An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server… microsoft · sql server management studio | Medium 5.5 | 23% | 2 exploits | |
| CVE-2018-8532 | An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server… microsoft · sql server management studio | Medium 5.5 | 23% | 2 exploits | |
| CVE-2018-8527 | An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server… microsoft · sql server management studio | Medium 5.5 | 23% | 2 exploits | |
| CVE-2018-18006 | Hardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android give access to any externally disclosed myPrint WSDL API, as demonstrated by discovering API secrets of related Google cloud printers, encrypted passwords of mail servers, and names… ricoh · myprint | Critical 9.8 | 21% | 1 exploit | |
| CVE-2018-14493 | Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the group name. opmantek · open-audit | Medium 6.1 | 41% | 2 exploits | |
| CVE-2018-12596 | Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden (normally available… episerver · ektron cms | Critical 9.8 | 22% | 1 exploit | |
| CVE-2018-10822 | Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices allows remote attackers… dlink · dir-140l firmware | High 7.5 | 39% | 1 exploit | |
| CVE-2017-8683 | Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an attacker to execute remote code by the way it handles embedded… microsoft · windows 10 | Medium 5.5 | 23% | 2 exploits | |
| CVE-2017-8303 | An issue was discovered on Accellion FTA devices before FTA_9_12_180. accellion · file transfer appliance | Critical 9.8 | 24% | 1 exploit | |
| CVE-2017-6548 | Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with… asus · rt-ac53 firmware | Critical 9.8 | 21% | 1 exploit | |
| CVE-2017-5869 | Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and execute arbitrary JSP code via a .. nuxeo · nuxeo | High 8.8 | 35% | 1 exploit | |
| CVE-2017-15647 | On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value. fiberhome · routerfiberhome firmware | High 7.5 | 27% | 1 exploit | |
| CVE-2016-9554 | The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. sophos · web appliance | High 7.2 | 25% | 1 exploit | |
| CVE-2016-5725 | Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command. jcraft · jsch | Medium 5.9 | 24% | 1 exploit | |
| CVE-2016-4201 | Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via… adobe · acrobat | Critical 9.8 | 21% | 1 exploit | |
| CVE-2016-3717 | The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image. imagemagick · imagemagick | Medium 5.5 | 20% | 1 exploit | |
| CVE-2016-2389 | Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. sap · netweaver | High 7.5 | 41% | 1 exploit | |
| CVE-2016-0122 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption… microsoft · excel | High 7.8 | 41% | 1 exploit | |
| CVE-2016-0111 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than… microsoft · edge | High 7.5 | 39% | 1 exploit | |
| CVE-2016-0108 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0102, CVE-2016-0103,… microsoft · internet explorer | High 7.5 | 39% | 1 exploit | |
| CVE-2014-1800 | Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 24% | 1 exploit | |
| CVE-2014-1797 | Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780,… microsoft · internet explorer | Critical 9.3 | 24% | 1 exploit | |
| CVE-2014-1795 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773,… microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2014-1791 | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2014-1779 | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282,… microsoft · internet explorer | Critical 9.3 | 24% | 1 exploit | |
| CVE-2013-7471 | B, and DIR-865 devices. dlink · dir-300 firmware | Critical 9.8 | 24% | 1 exploit | |
| CVE-2013-0658 | Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitrary code via a crafted HTTP request. schneider-electric · accutech manager | Critical 10.0 | 22% | 1 exploit | |
| CVE-2012-5611 | mysql: acl_get() stack-based buffer overflow mariadb · mariadb | Medium 6.5 | 24% | 1 exploit | |
| CVE-2012-0840 | tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to… apache · portable runtime | Medium 5.0 | 42% | 1 exploit | |
| CVE-2011-0419 | Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris… apache · http server | Medium 4.3 | 30% | 1 exploit | |
| CVE-2010-4367 | awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server or (2) NFS server. awstats · awstats | High 7.5 | 27% | 1 exploit | |
| CVE-2010-2745 | Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka "Windows Media Player Memory… microsoft · windows media player | Critical 9.3 | 24% | 1 exploit |
Showing 1,251–1,300 of 1,462
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.