Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 20, 2026
1,462 vulnerabilities · highest score first
- CVE-2010-2561Critical 9.3Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted response, aka "Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption…microsoft · xml core servicesEPSS25%1 exploitPublished Aug 11, 2010
- CVE-2010-1246Critical 9.3Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record, aka "Excel RTD Memory Corruption Vulnerability."microsoft · excelEPSS25%1 exploitPublished Jun 8, 2010
- CVE-2009-4487Medium 6.8nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.f5 · nginxEPSS30%1 exploitPublished Jan 13, 2010
- CVE-2009-1558High 7.8Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e.cisco · wvc54gcaEPSS30%1 exploitPublished May 6, 2009
- CVE-2009-1493Medium 6.8acroread: multiple vulnerabilities in Adobe Reader 8.1.4adobe · readerEPSS22%1 exploitPublished Apr 27, 2009
- CVE-2008-3984Medium 5.5Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than…oracle · database 10gEPSS42%1 exploitPublished Oct 14, 2008
- CVE-2008-3983Medium 5.5Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than…oracle · database 10gEPSS42%1 exploitPublished Oct 14, 2008
- CVE-2008-3263High 7.8The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote…asterisk · asteriskEPSS28%1 exploitPublished Jul 22, 2008
- CVE-2007-3927Critical 10.0Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe."ipswitch · imail serverEPSS22%1 exploitPublished Jul 20, 2007
- CVE-2007-3670Medium 4.3Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1)…microsoft · internet explorerEPSS29%1 exploitPublished Jul 10, 2007
- CVE-2007-1683Medium 6.8Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control (ImShExt.dll) allows remote attackers to execute arbitrary code via unspecified vectors.incredimail · immenushellext activex controlEPSS38%2 exploitsPublished Apr 26, 2007
- CVE-2006-7066High 7.1Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating an object inside an iframe, deleting the frame by setting its location.href to about:blank, then accessing a property of the object within the deleted frame,…microsoft · internet explorerEPSS22%1 exploitPublished Mar 2, 2007
- CVE-2006-3469Medium 4.0mysql server DoSmysql · mysqlEPSS29%1 exploitPublished Jun 27, 2006
- CVE-2006-3431High 7.5Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option,…microsoft · excelEPSS28%1 exploitPublished Jul 7, 2006
- CVE-2006-3081Medium 4.0mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.mysql · mysqlEPSS26%1 exploitPublished Jun 14, 2006
- CVE-2005-3745Medium 4.3Apache Struts Cross-site scripting Vulnerabilityapache · strutsEPSS26%1 exploitPublished May 1, 2022
- CVE-2005-1988Medium 5.1Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka "JPEG Image Rendering Memory Corruption Vulnerability".microsoft · internet explorerEPSS46%2 exploitsPublished Aug 10, 2005
- CVE-2005-1979Medium 5.0Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit) via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol…microsoft · windows 2000EPSS33%2 exploitsPublished Oct 12, 2005
- CVE-2005-1381Medium 6.8Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage parameter.oracle · application server web cacheEPSS20%2 exploitsPublished May 3, 2005
- CVE-2005-0551Critical 10.0Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window…microsoft · windows 2000EPSS20%1 exploitPublished May 2, 2005
- CVE-2004-1043Medium 5.0Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript…microsoft · internet explorerEPSS45%1 exploitPublished Dec 31, 2004
- CVE-2004-0727High 7.5Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the…microsoft · internet explorerEPSS40%1 exploitPublished Jul 27, 2004
- CVE-2004-0104High 7.5Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.metamail corporation · metamailEPSS26%1 exploitPublished Feb 18, 2004
- CVE-2003-0910High 7.2The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points…microsoft · windows 2000EPSS26%1 exploitPublished Jun 1, 2004
- CVE-2003-0908High 7.2The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using…microsoft · windows 2000EPSS26%1 exploitPublished Jun 1, 2004
- CVE-2003-0838High 7.5Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but…microsoft · internet explorerEPSS38%1 exploitPublished Nov 17, 2003
- CVE-2003-0226Medium 5.0Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled.microsoft · internet information servicesEPSS43%2 exploitsPublished Jun 9, 2003
- CVE-2003-0113High 7.5Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP response containing long values in (1) Content-type and (2) Content-encoding fields.microsoft · internet explorerEPSS39%1 exploitPublished May 12, 2003
- CVE-2002-1973High 7.5Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in multiple products including BadBlue, allows remote attackers to cause a denial of…working resources inc. · badblueEPSS40%1 exploitPublished Dec 31, 2002
- CVE-2002-1412High 7.5Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script.gallery project · galleryEPSS39%1 exploitPublished Apr 11, 2003
- CVE-2001-0239High 7.5Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.microsoft · isa serverEPSS28%1 exploitPublished Jul 2, 2001
- CVE-2000-0834High 7.5The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication"…microsoft · windows 2000EPSS40%1 exploitPublished Nov 14, 2000
- CVE-1999-0702Critical 10.0Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability.microsoft · internet explorerEPSS24%1 exploitPublished Sep 10, 1999
- CVE-1999-0236High 7.5ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.apache · http serverEPSS26%1 exploitPublished Jan 1, 1997
- CVE-2026-92262Critical 9.9Numerous issues caused by historical #mysql50# tablename encoding bypassEPSS0.7%1 exploitPublished Sep 7, 2026
- CVE-2026-59774Critical 9.8Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files.EPSS28%·Published Oct 14, 2026
- CVE-2026-58221High 8.8Samba AD authenticated LDAP access domain takeover.Published Jul 28, 2026
- CVE-2026-53995High 8.8MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint.Published Oct 19, 2026
- CVE-2026-103663Medium 6.9Path Traversal leading to Remote Code Execution in OllamaEPSS0.7%1 exploitPublished Oct 8, 2026
- CVE-2025-9769Low 0.9The manipulation of the argument addr with the input echo 12345 > poc.txt results in command injection.dlink · di-7400g\+ firmwareEPSS29%2 exploitsPublished Sep 1, 2025
- CVE-2025-7206High 8.9A vulnerability, which was classified as critical, has been found in D-Link DIR-825 2.10.dlink · dir-825 firmwareEPSS22%1 exploitPublished Jul 8, 2025
- CVE-2025-47166High 8.8Microsoft SharePoint Server Remote Code Execution Vulnerabilitymicrosoft · sharepoint enterprise serverEPSS22%1 exploitPublished Jun 9, 2025
- CVE-2024-6269Medium 5.1The manipulation of the argument indevice leads to command injection.ruijie · rg-uac firmwareEPSS21%1 exploitPublished Jun 24, 2024
- CVE-2024-47525Medium 6.2LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Rules" featurelibrenms · librenmsEPSS30%1 exploitPublished Oct 1, 2024
- CVE-2024-27356High 7.5An issue was discovered on certain GL-iNet devices.gl-inet · a1300 firmwareEPSS24%1 exploitPublished Feb 26, 2024
- CVE-2023-28130High 7.2Local user may lead to privilege escalation using Gaia Portal hostnames page.checkpoint · gaia portalEPSS21%·Published Jul 26, 2023
- CVE-2023-2522High 7.2It has been declared as critical.feiyuxing · vec40g firmwareEPSS34%1 exploitPublished May 4, 2023
- CVE-2023-20894Critical 9.8The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol.vmware · vcenter serverEPSS34%·Published Jun 22, 2023
- CVE-2023-0656High 7.5A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.sonicwall · sonicosEPSS41%·Published Mar 2, 2023
- CVE-2023-0084Medium 6.1Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scriptingwpmet · metform elementor contact form builderEPSS29%1 exploitPublished Feb 1, 2023
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2010-2561 | Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted response, aka "Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption… microsoft · xml core services | Critical 9.3 | 25% | 1 exploit | |
| CVE-2010-1246 | Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record, aka "Excel RTD Memory Corruption Vulnerability." microsoft · excel | Critical 9.3 | 25% | 1 exploit | |
| CVE-2009-4487 | nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. f5 · nginx | Medium 6.8 | 30% | 1 exploit | |
| CVE-2009-1558 | Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e. cisco · wvc54gca | High 7.8 | 30% | 1 exploit | |
| CVE-2009-1493 | acroread: multiple vulnerabilities in Adobe Reader 8.1.4 adobe · reader | Medium 6.8 | 22% | 1 exploit | |
| CVE-2008-3984 | Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than… oracle · database 10g | Medium 5.5 | 42% | 1 exploit | |
| CVE-2008-3983 | Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than… oracle · database 10g | Medium 5.5 | 42% | 1 exploit | |
| CVE-2008-3263 | The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote… asterisk · asterisk | High 7.8 | 28% | 1 exploit | |
| CVE-2007-3927 | Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe." ipswitch · imail server | Critical 10.0 | 22% | 1 exploit | |
| CVE-2007-3670 | Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1)… microsoft · internet explorer | Medium 4.3 | 29% | 1 exploit | |
| CVE-2007-1683 | Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control (ImShExt.dll) allows remote attackers to execute arbitrary code via unspecified vectors. incredimail · immenushellext activex control | Medium 6.8 | 38% | 2 exploits | |
| CVE-2006-7066 | Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating an object inside an iframe, deleting the frame by setting its location.href to about:blank, then accessing a property of the object within the deleted frame,… microsoft · internet explorer | High 7.1 | 22% | 1 exploit | |
| CVE-2006-3469 | mysql server DoS mysql · mysql | Medium 4.0 | 29% | 1 exploit | |
| CVE-2006-3431 | Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option,… microsoft · excel | High 7.5 | 28% | 1 exploit | |
| CVE-2006-3081 | mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function. mysql · mysql | Medium 4.0 | 26% | 1 exploit | |
| CVE-2005-3745 | Apache Struts Cross-site scripting Vulnerability apache · struts | Medium 4.3 | 26% | 1 exploit | |
| CVE-2005-1988 | Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka "JPEG Image Rendering Memory Corruption Vulnerability". microsoft · internet explorer | Medium 5.1 | 46% | 2 exploits | |
| CVE-2005-1979 | Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit) via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol… microsoft · windows 2000 | Medium 5.0 | 33% | 2 exploits | |
| CVE-2005-1381 | Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage parameter. oracle · application server web cache | Medium 6.8 | 20% | 2 exploits | |
| CVE-2005-0551 | Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window… microsoft · windows 2000 | Critical 10.0 | 20% | 1 exploit | |
| CVE-2004-1043 | Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript… microsoft · internet explorer | Medium 5.0 | 45% | 1 exploit | |
| CVE-2004-0727 | Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the… microsoft · internet explorer | High 7.5 | 40% | 1 exploit | |
| CVE-2004-0104 | Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code. metamail corporation · metamail | High 7.5 | 26% | 1 exploit | |
| CVE-2003-0910 | The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points… microsoft · windows 2000 | High 7.2 | 26% | 1 exploit | |
| CVE-2003-0908 | The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using… microsoft · windows 2000 | High 7.2 | 26% | 1 exploit | |
| CVE-2003-0838 | Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but… microsoft · internet explorer | High 7.5 | 38% | 1 exploit | |
| CVE-2003-0226 | Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled. microsoft · internet information services | Medium 5.0 | 43% | 2 exploits | |
| CVE-2003-0113 | Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP response containing long values in (1) Content-type and (2) Content-encoding fields. microsoft · internet explorer | High 7.5 | 39% | 1 exploit | |
| CVE-2002-1973 | Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in multiple products including BadBlue, allows remote attackers to cause a denial of… working resources inc. · badblue | High 7.5 | 40% | 1 exploit | |
| CVE-2002-1412 | Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script. gallery project · gallery | High 7.5 | 39% | 1 exploit | |
| CVE-2001-0239 | Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type. microsoft · isa server | High 7.5 | 28% | 1 exploit | |
| CVE-2000-0834 | The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication"… microsoft · windows 2000 | High 7.5 | 40% | 1 exploit | |
| CVE-1999-0702 | Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability. microsoft · internet explorer | Critical 10.0 | 24% | 1 exploit | |
| CVE-1999-0236 | ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs. apache · http server | High 7.5 | 26% | 1 exploit | |
| CVE-2026-92262 | Numerous issues caused by historical #mysql50# tablename encoding bypass | Critical 9.9 | 0.7% | 1 exploit | |
| CVE-2026-59774 | Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. | Critical 9.8 | 28% | · | |
| CVE-2026-58221 | Samba AD authenticated LDAP access domain takeover. | High 8.8 | · | 1 exploit | |
| CVE-2026-53995 | MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint. | High 8.8 | · | 1 exploit | |
| CVE-2026-103663 | Path Traversal leading to Remote Code Execution in Ollama | Medium 6.9 | 0.7% | 1 exploit | |
| CVE-2025-9769 | The manipulation of the argument addr with the input echo 12345 > poc.txt results in command injection. dlink · di-7400g\+ firmware | Low 0.9 | 29% | 2 exploits | |
| CVE-2025-7206 | A vulnerability, which was classified as critical, has been found in D-Link DIR-825 2.10. dlink · dir-825 firmware | High 8.9 | 22% | 1 exploit | |
| CVE-2025-47166 | Microsoft SharePoint Server Remote Code Execution Vulnerability microsoft · sharepoint enterprise server | High 8.8 | 22% | 1 exploit | |
| CVE-2024-6269 | The manipulation of the argument indevice leads to command injection. ruijie · rg-uac firmware | Medium 5.1 | 21% | 1 exploit | |
| CVE-2024-47525 | LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Rules" feature librenms · librenms | Medium 6.2 | 30% | 1 exploit | |
| CVE-2024-27356 | An issue was discovered on certain GL-iNet devices. gl-inet · a1300 firmware | High 7.5 | 24% | 1 exploit | |
| CVE-2023-28130 | Local user may lead to privilege escalation using Gaia Portal hostnames page. checkpoint · gaia portal | High 7.2 | 21% | · | |
| CVE-2023-2522 | It has been declared as critical. feiyuxing · vec40g firmware | High 7.2 | 34% | 1 exploit | |
| CVE-2023-20894 | The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. vmware · vcenter server | Critical 9.8 | 34% | · | |
| CVE-2023-0656 | A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash. sonicwall · sonicos | High 7.5 | 41% | · | |
| CVE-2023-0084 | Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting wpmet · metform elementor contact form builder | Medium 6.1 | 29% | 1 exploit |
Showing 1,301–1,350 of 1,462
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.