Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
1,458 vulnerabilities · highest score first
- CVE-2015-8424Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8423Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8422Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8421Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-8420Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-32adobe · airEPSS43%1 exploitPublished Dec 8, 2015
- CVE-2015-5574Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-23adobe · airEPSS46%1 exploitPublished Sep 21, 2015
- CVE-2015-5563Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS46%1 exploitPublished Aug 12, 2015
- CVE-2015-5562Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS44%1 exploitPublished Aug 12, 2015
- CVE-2015-5561Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS45%1 exploitPublished Aug 12, 2015
- CVE-2015-5558Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS43%1 exploitPublished Aug 12, 2015
- CVE-2015-5557Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS45%1 exploitPublished Aug 12, 2015
- CVE-2015-5556Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS45%1 exploitPublished Aug 12, 2015
- CVE-2015-5555Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS43%1 exploitPublished Aug 12, 2015
- CVE-2015-5554Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS43%1 exploitPublished Aug 12, 2015
- CVE-2015-5551Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS45%1 exploitPublished Aug 12, 2015
- CVE-2015-5550Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS45%1 exploitPublished Aug 12, 2015
- CVE-2015-5540Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS46%1 exploitPublished Aug 12, 2015
- CVE-2015-5539Critical 10.0flash-plugin: multiple code execution flaws (APSB15-19)adobe · airEPSS46%1 exploitPublished Aug 12, 2015
- CVE-2015-3106Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-11adobe · airEPSS43%1 exploitPublished Jun 9, 2015
- CVE-2015-1158Critical 10.0The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1)…cups · cupsEPSS30%2 exploitsPublished Jun 26, 2015
- CVE-2014-9566High 7.5Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor (NPM) before 11.5, NetFlow Traffic Analyzer (NTA) before 4.1, Network Configuration Manager…solarwinds · orion ip address managerEPSS48%3 exploitsPublished Mar 10, 2015
- CVE-2014-5007Critical 9.8Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a ..zohocorp · manageengine desktop centralEPSS37%3 exploitsPublished Jan 17, 2020
- CVE-2013-1599Critical 9.8A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/5635 1.01, DCS-1100L/1130L 1.04, DCS-1100/1130 1.03, DCS-1100/1130 1.04_US, DCS-2102/2121 1.05_RU, DCS-3410 1.02, DCS-5230 1.02, DCS-5230L…dlink · dcs-1100 firmwareEPSS40%2 exploitsPublished Jan 28, 2020
- CVE-2013-1595Critical 9.8A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the RTSP service, which could let a remote malicious user execute arbitrary code or cause a Denial of Service.vivotek · pt7135 firmwareEPSS42%2 exploitsPublished Jan 24, 2020
- CVE-2012-3363Critical 9.1Zend Framework XXE Vulnerabilityzend · zend frameworkEPSS49%1 exploitPublished May 17, 2022
- CVE-2007-3456Critical 9.3flash-plugin input validation flawadobe · flash playerEPSS48%1 exploitPublished Jul 10, 2007
- CVE-2007-2223Critical 9.3Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a buffer overflow.microsoft · xml core servicesEPSS49%1 exploitPublished Aug 14, 2007
- CVE-2007-1277Critical 9.8WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externally introduced backdoor that allows remote attackers to execute arbitrary commands via (1) an eval injection vulnerability in the ix parameter to…wordpress · wordpressEPSS28%2 exploitsPublished Mar 2, 2007
- CVE-2007-0515Critical 9.3Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by…microsoft · wordEPSS38%2 exploitsPublished Jan 25, 2007
- CVE-2006-2373Critical 10.0The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an…microsoft · windows 2000EPSS29%2 exploitsPublished Jun 13, 2006
- CVE-2006-0005Critical 9.3Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element…microsoft · windows 2000EPSS38%3 exploitsPublished Feb 14, 2006
- CVE-2003-0003High 7.5Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.microsoft · windows 2000EPSS43%2 exploitsPublished Feb 7, 2003
- CVE-2023-5146High 8.8UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical.dlink · dar-7000 firmwareEPSS32%2 exploitsPublished Sep 25, 2023
- CVE-2023-41887Critical 9.8OpenRefine Remote Code execution in project import with mysql jdbc url attackopenrefine · openrefineEPSS43%1 exploitPublished Sep 12, 2023
- CVE-2022-37661Critical 9.8SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.adtran · sr506n firmwareEPSS35%3 exploitsPublished Sep 14, 2022
- CVE-2022-37109Critical 9.8patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control.camp project · campEPSS49%1 exploitPublished Nov 14, 2022
- CVE-2022-0332Critical 9.8SQL injection in Moodlemoodle · moodleEPSS44%1 exploitPublished Feb 7, 2022
- CVE-2021-43421Critical 9.8elFinder Unrestricted File Upload vulnerabilitystd42 · elfinderEPSS43%1 exploitPublished Apr 8, 2022
- CVE-2021-27928High 7.2mariadb-10.1 - security updategaleracluster · wsrepEPSS38%2 exploitsPublished Aug 9, 2021
- CVE-2021-26599Critical 9.8SQL Injection in ImpressCMSimpresscms · impresscmsEPSS21%2 exploitsPublished Mar 29, 2022
- CVE-2021-25833Critical 9.8A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21.onlyoffice · document serverEPSS44%1 exploitPublished Mar 1, 2021
- CVE-2020-9374Critical 9.8On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature.tp-link · tl-wr849n firmwareEPSS43%3 exploitsPublished Feb 24, 2020
- CVE-2020-35749High 7.7Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php.presstigers · simple board jobEPSS30%4 exploitsPublished Jan 15, 2021
- CVE-2019-9618Critical 9.8The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter.gracemedia media player project · gracemedia media playerEPSS44%1 exploitPublished May 13, 2019
- CVE-2019-6714Critical 9.8A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can cause unauthenticated users to load a PostView.ascx component from a potentially untrusted location on the local filesystem.blogengine · blogengine.netEPSS32%3 exploitsPublished Mar 21, 2019
- CVE-2019-6116High 7.8In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.artifex · ghostscriptEPSS42%2 exploitsPublished Mar 21, 2019
- CVE-2019-14348Critical 9.8The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsport_season/new-yorkers/?action=playerlist sid parameter.beardev · joomsportEPSS21%2 exploitsPublished Aug 5, 2019
- CVE-2018-5159Critical 9.8An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes.mozilla · firefoxEPSS21%2 exploitsPublished Jun 11, 2018
- CVE-2018-16159Critical 9.8The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doajax_front_template request.codemenschen · gift vouchersEPSS50%1 exploitPublished Aug 30, 2018
- CVE-2018-1235Critical 9.8Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability.emc · recoverpointEPSS42%2 exploitsPublished May 29, 2018
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-8424 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8423 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8422 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8421 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-8420 | flash-plugin: multiple code execution issues fixed in APSB15-32 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-5574 | flash-plugin: multiple code execution issues fixed in APSB15-23 adobe · air | Critical 10.0 | 46% | 1 exploit | |
| CVE-2015-5563 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 46% | 1 exploit | |
| CVE-2015-5562 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 44% | 1 exploit | |
| CVE-2015-5561 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 45% | 1 exploit | |
| CVE-2015-5558 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-5557 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 45% | 1 exploit | |
| CVE-2015-5556 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 45% | 1 exploit | |
| CVE-2015-5555 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-5554 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-5551 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 45% | 1 exploit | |
| CVE-2015-5550 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 45% | 1 exploit | |
| CVE-2015-5540 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 46% | 1 exploit | |
| CVE-2015-5539 | flash-plugin: multiple code execution flaws (APSB15-19) adobe · air | Critical 10.0 | 46% | 1 exploit | |
| CVE-2015-3106 | flash-plugin: multiple code execution issues fixed in APSB15-11 adobe · air | Critical 10.0 | 43% | 1 exploit | |
| CVE-2015-1158 | The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1)… cups · cups | Critical 10.0 | 30% | 2 exploits | |
| CVE-2014-9566 | Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor (NPM) before 11.5, NetFlow Traffic Analyzer (NTA) before 4.1, Network Configuration Manager… solarwinds · orion ip address manager | High 7.5 | 48% | 3 exploits | |
| CVE-2014-5007 | Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. zohocorp · manageengine desktop central | Critical 9.8 | 37% | 3 exploits | |
| CVE-2013-1599 | A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/5635 1.01, DCS-1100L/1130L 1.04, DCS-1100/1130 1.03, DCS-1100/1130 1.04_US, DCS-2102/2121 1.05_RU, DCS-3410 1.02, DCS-5230 1.02, DCS-5230L… dlink · dcs-1100 firmware | Critical 9.8 | 40% | 2 exploits | |
| CVE-2013-1595 | A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the RTSP service, which could let a remote malicious user execute arbitrary code or cause a Denial of Service. vivotek · pt7135 firmware | Critical 9.8 | 42% | 2 exploits | |
| CVE-2012-3363 | Zend Framework XXE Vulnerability zend · zend framework | Critical 9.1 | 49% | 1 exploit | |
| CVE-2007-3456 | flash-plugin input validation flaw adobe · flash player | Critical 9.3 | 48% | 1 exploit | |
| CVE-2007-2223 | Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a buffer overflow. microsoft · xml core services | Critical 9.3 | 49% | 1 exploit | |
| CVE-2007-1277 | WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externally introduced backdoor that allows remote attackers to execute arbitrary commands via (1) an eval injection vulnerability in the ix parameter to… wordpress · wordpress | Critical 9.8 | 28% | 2 exploits | |
| CVE-2007-0515 | Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by… microsoft · word | Critical 9.3 | 38% | 2 exploits | |
| CVE-2006-2373 | The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an… microsoft · windows 2000 | Critical 10.0 | 29% | 2 exploits | |
| CVE-2006-0005 | Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element… microsoft · windows 2000 | Critical 9.3 | 38% | 3 exploits | |
| CVE-2003-0003 | Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information. microsoft · windows 2000 | High 7.5 | 43% | 2 exploits | |
| CVE-2023-5146 | UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. dlink · dar-7000 firmware | High 8.8 | 32% | 2 exploits | |
| CVE-2023-41887 | OpenRefine Remote Code execution in project import with mysql jdbc url attack openrefine · openrefine | Critical 9.8 | 43% | 1 exploit | |
| CVE-2022-37661 | SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature. adtran · sr506n firmware | Critical 9.8 | 35% | 3 exploits | |
| CVE-2022-37109 | patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control. camp project · camp | Critical 9.8 | 49% | 1 exploit | |
| CVE-2022-0332 | SQL injection in Moodle moodle · moodle | Critical 9.8 | 44% | 1 exploit | |
| CVE-2021-43421 | elFinder Unrestricted File Upload vulnerability std42 · elfinder | Critical 9.8 | 43% | 1 exploit | |
| CVE-2021-27928 | mariadb-10.1 - security update galeracluster · wsrep | High 7.2 | 38% | 2 exploits | |
| CVE-2021-26599 | SQL Injection in ImpressCMS impresscms · impresscms | Critical 9.8 | 21% | 2 exploits | |
| CVE-2021-25833 | A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21. onlyoffice · document server | Critical 9.8 | 44% | 1 exploit | |
| CVE-2020-9374 | On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature. tp-link · tl-wr849n firmware | Critical 9.8 | 43% | 3 exploits | |
| CVE-2020-35749 | Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php. presstigers · simple board job | High 7.7 | 30% | 4 exploits | |
| CVE-2019-9618 | The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter. gracemedia media player project · gracemedia media player | Critical 9.8 | 44% | 1 exploit | |
| CVE-2019-6714 | A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can cause unauthenticated users to load a PostView.ascx component from a potentially untrusted location on the local filesystem. blogengine · blogengine.net | Critical 9.8 | 32% | 3 exploits | |
| CVE-2019-6116 | In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution. artifex · ghostscript | High 7.8 | 42% | 2 exploits | |
| CVE-2019-14348 | The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsport_season/new-yorkers/?action=playerlist sid parameter. beardev · joomsport | Critical 9.8 | 21% | 2 exploits | |
| CVE-2018-5159 | An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes. mozilla · firefox | Critical 9.8 | 21% | 2 exploits | |
| CVE-2018-16159 | The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doajax_front_template request. codemenschen · gift vouchers | Critical 9.8 | 50% | 1 exploit | |
| CVE-2018-1235 | Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability. emc · recoverpoint | Critical 9.8 | 42% | 2 exploits |
Showing 101–150 of 1,458
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.