Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
751 vulnerabilities · highest score first
- CVE-2015-2462Critical 9.3ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5,…microsoft · .net frameworkEPSS36%2 exploitsPublished Aug 14, 2015
- CVE-2015-2456Critical 9.3Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1,…microsoft · live meetingEPSS36%2 exploitsPublished Aug 14, 2015
- CVE-2014-6436Critical 9.8Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login.aztech · adsl dsl5018en \(1t1r\) firmwareEPSS42%2 exploitsPublished Jan 12, 2018
- CVE-2014-1766Critical 9.3Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014.microsoft · internet explorerEPSS33%1 exploitPublished Apr 27, 2014
- CVE-2011-5046Critical 9.3The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which…microsoft · windows 7EPSS45%2 exploitsPublished Dec 30, 2011
- CVE-2007-3410Critical 9.3RealPlayer/HelixPlayer buffer overflowrealnetworks · helix playerEPSS36%1 exploitPublished Jun 26, 2007
- CVE-2003-0150Critical 9.0MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.oracle · mysqlEPSS45%1 exploitPublished Mar 8, 2003
- CVE-2026-61732Critical 10.0Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals.EPSS1.2%2 exploitsPublished Sep 24, 2026
- CVE-2026-104736Critical 9.8LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' ParameterEPSS0.4%2 exploitsPublished Oct 16, 2026
- CVE-2026-103849Critical 10.0Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)EPSS0.8%1 exploitPublished Oct 13, 2026
- CVE-2025-29306Critical 9.8An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.foxcms · foxcmsEPSS47%2 exploitsPublished Mar 27, 2025
- CVE-2024-42640Critical 9.3angular-base64-upload vulnerable to unauthenticated remote code executionEPSS40%2 exploitsPublished Oct 11, 2024
- CVE-2024-24724Critical 9.8Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine (messengerSettings.php) without sanitization.gibbonedu · gibbonEPSS26%2 exploitsPublished Apr 3, 2024
- CVE-2023-22496Critical 9.8An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent.netdata · netdataEPSS36%1 exploitPublished Jan 14, 2023
- CVE-2022-37130Critical 9.8In D-Link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerabilitydlink · dir-816 firmwareEPSS27%1 exploitPublished Sep 1, 2022
- CVE-2022-31161Critical 9.8Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file.roxy-wi · roxy-wiEPSS29%1 exploitPublished Jul 15, 2022
- CVE-2022-25359Critical 9.1On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files.iclinks · scadaflex ii firmwareEPSS37%2 exploitsPublished Feb 26, 2022
- CVE-2022-24627Critical 9.8It is an unauthenticated SQL injection in the p parameter of the process_login.php login form.audiocodes · device manager expressEPSS26%1 exploitPublished May 30, 2023
- CVE-2021-3120Critical 9.8An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server.yithemes · yith woocommerce gift cardsEPSS37%Ransomware1 exploit3 actorsPublished Feb 22, 2021
- CVE-2021-26709Critical 9.8D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to take over a device via the login.xgi user and pass parameters.d-link · dsl-320b-d1EPSS40%1 exploitPublished Apr 7, 2021
- CVE-2019-18952Critical 9.8SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload.sibsoft · xfilesharingEPSS45%2 exploitsPublished Nov 13, 2019
- CVE-2018-5262Critical 9.8A stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated remote attackers to execute arbitrary code in the context of a highly privileged account.flexense · diskbossEPSS39%2 exploitsPublished Jan 12, 2018
- CVE-2018-20525Critical 9.1Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.roxyfileman · roxy filemanEPSS22%4 exploitsPublished Mar 21, 2019
- CVE-2018-15839Critical 9.8D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.dlink · dir-615 firmwareEPSS45%1 exploitPublished Aug 28, 2018
- CVE-2018-15152Critical 9.1Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker to access (1) portal/add_edit_event_user.php, (2) portal/find_appt_popup_user.php, (3) portal/get_allergies.php, (4) portal/get_amendments.php, (5)…open-emr · openemrEPSS26%3 exploitsPublished Aug 15, 2018
- CVE-2017-6517Critical 9.8Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system.microsoft · skypeEPSS46%1 exploitPublished Mar 23, 2017
- CVE-2017-6359Critical 9.8QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vectors.qnap · qtsEPSS27%1 exploitPublished Mar 23, 2017
- CVE-2017-5586Critical 9.8OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries.opentext · documentum d2EPSS25%3 exploitsPublished Feb 22, 2017
- CVE-2017-5173Critical 9.8An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12.geutebrueck · ip camera g-cam efd-2250 firmwareEPSS30%2 exploitsPublished May 19, 2017
- CVE-2017-16887Critical 9.8The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal.fiberhome · lm53q1 firmwareEPSS37%2 exploitsPublished Jan 12, 2018
- CVE-2017-14322Critical 9.8The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEM_CookieLogin cookie with a specially crafted value.interspire · email marketerEPSS37%2 exploitsPublished Oct 18, 2017
- CVE-2017-0561Critical 9.8A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC.linux · linux kernelEPSS30%2 exploitsPublished Apr 7, 2017
- CVE-2016-2851Critical 9.8Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.cypherpunks · libotrEPSS25%1 exploitPublished Apr 7, 2016
- CVE-2015-8046Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-28adobe · airEPSS30%1 exploitPublished Nov 10, 2015
- CVE-2015-8043Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-28adobe · airEPSS29%1 exploitPublished Nov 10, 2015
- CVE-2015-7648Critical 10.0flash-plugin: multiple code execution issue fixed in APSB15-27adobe · flash playerEPSS30%1 exploitPublished Oct 14, 2015
- CVE-2015-7647Critical 10.0flash-plugin: multiple code execution issue fixed in APSB15-27adobe · flash playerEPSS30%1 exploitPublished Oct 14, 2015
- CVE-2015-6024Critical 9.8ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIA_IPADDRESS parameter.netcommwireless · hspa 3g10wve firmwareEPSS26%1 exploitPublished Feb 9, 2017
- CVE-2015-5118Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-16adobe · airEPSS28%1 exploitPublished Jul 8, 2015
- CVE-2015-3134Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-16adobe · airEPSS26%1 exploitPublished Jul 8, 2015
- CVE-2015-2461Critical 9.3ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary…microsoft · windows 10EPSS36%1 exploitPublished Aug 14, 2015
- CVE-2013-6225Critical 9.8LiveZilla 5.0.1.4 has a Remote Code Execution vulnerabilitylivezilla · livezillaEPSS27%2 exploitsPublished Jan 13, 2020
- CVE-2011-3478Critical 10.0The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filter login and authentication data, which allows remote attackers to execute arbitrary code via a…symantec · pcanywhereEPSS40%2 exploitsPublished Jan 25, 2012
- CVE-2011-0222Critical 9.3WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.apple · safariEPSS22%2 exploitsPublished Jul 21, 2011
- CVE-2010-3143Critical 9.3Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32res.dll that is located in the same folder as a .contact, .group, .p7c, .vcf,…microsoft · windowsEPSS21%4 exploitsPublished Aug 27, 2010
- CVE-2010-0211Critical 9.8The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN…openldap · openldapEPSS28%1 exploitPublished Jul 28, 2010
- CVE-2009-1492Critical 9.3acroread: multiple vulnerabilities in Adobe Reader 8.1.4adobe · acrobatEPSS26%1 exploitPublished Apr 27, 2009
- CVE-2009-1330Critical 9.3Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long filename in a playlist (.pls) file.mini-stream · easy rm to mp3 converterEPSS22%9 exploitsPublished Apr 17, 2009
- CVE-2008-1436Critical 9.0Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource…microsoft · windows xpEPSS37%1 exploitPublished Apr 21, 2008
- CVE-2008-0016Critical 10.0Mozilla UTF-8 stack buffer overflowmozilla · firefoxEPSS44%1 exploitPublished Sep 23, 2008
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-2462 | ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5,… microsoft · .net framework | Critical 9.3 | 36% | 2 exploits | |
| CVE-2015-2456 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1,… microsoft · live meeting | Critical 9.3 | 36% | 2 exploits | |
| CVE-2014-6436 | Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login. aztech · adsl dsl5018en \(1t1r\) firmware | Critical 9.8 | 42% | 2 exploits | |
| CVE-2014-1766 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014. microsoft · internet explorer | Critical 9.3 | 33% | 1 exploit | |
| CVE-2011-5046 | The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which… microsoft · windows 7 | Critical 9.3 | 45% | 2 exploits | |
| CVE-2007-3410 | RealPlayer/HelixPlayer buffer overflow realnetworks · helix player | Critical 9.3 | 36% | 1 exploit | |
| CVE-2003-0150 | MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf. oracle · mysql | Critical 9.0 | 45% | 1 exploit | |
| CVE-2026-61732 | Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. | Critical 10.0 | 1.2% | 2 exploits | |
| CVE-2026-104736 | LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter | Critical 9.8 | 0.4% | 2 exploits | |
| CVE-2026-103849 | Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) | Critical 10.0 | 0.8% | 1 exploit | |
| CVE-2025-29306 | An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component. foxcms · foxcms | Critical 9.8 | 47% | 2 exploits | |
| CVE-2024-42640 | angular-base64-upload vulnerable to unauthenticated remote code execution | Critical 9.3 | 40% | 2 exploits | |
| CVE-2024-24724 | Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine (messengerSettings.php) without sanitization. gibbonedu · gibbon | Critical 9.8 | 26% | 2 exploits | |
| CVE-2023-22496 | An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. netdata · netdata | Critical 9.8 | 36% | 1 exploit | |
| CVE-2022-37130 | In D-Link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability dlink · dir-816 firmware | Critical 9.8 | 27% | 1 exploit | |
| CVE-2022-31161 | Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file. roxy-wi · roxy-wi | Critical 9.8 | 29% | 1 exploit | |
| CVE-2022-25359 | On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files. iclinks · scadaflex ii firmware | Critical 9.1 | 37% | 2 exploits | |
| CVE-2022-24627 | It is an unauthenticated SQL injection in the p parameter of the process_login.php login form. audiocodes · device manager express | Critical 9.8 | 26% | 1 exploit | |
| CVE-2021-3120 | An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server. yithemes · yith woocommerce gift cards | Critical 9.8 | 37% | Ransomware1 exploit3 actors | |
| CVE-2021-26709 | D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to take over a device via the login.xgi user and pass parameters. d-link · dsl-320b-d1 | Critical 9.8 | 40% | 1 exploit | |
| CVE-2019-18952 | SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload. sibsoft · xfilesharing | Critical 9.8 | 45% | 2 exploits | |
| CVE-2018-5262 | A stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated remote attackers to execute arbitrary code in the context of a highly privileged account. flexense · diskboss | Critical 9.8 | 39% | 2 exploits | |
| CVE-2018-20525 | Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php. roxyfileman · roxy fileman | Critical 9.1 | 22% | 4 exploits | |
| CVE-2018-15839 | D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header. dlink · dir-615 firmware | Critical 9.8 | 45% | 1 exploit | |
| CVE-2018-15152 | Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker to access (1) portal/add_edit_event_user.php, (2) portal/find_appt_popup_user.php, (3) portal/get_allergies.php, (4) portal/get_amendments.php, (5)… open-emr · openemr | Critical 9.1 | 26% | 3 exploits | |
| CVE-2017-6517 | Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. microsoft · skype | Critical 9.8 | 46% | 1 exploit | |
| CVE-2017-6359 | QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vectors. qnap · qts | Critical 9.8 | 27% | 1 exploit | |
| CVE-2017-5586 | OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries. opentext · documentum d2 | Critical 9.8 | 25% | 3 exploits | |
| CVE-2017-5173 | An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. geutebrueck · ip camera g-cam efd-2250 firmware | Critical 9.8 | 30% | 2 exploits | |
| CVE-2017-16887 | The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. fiberhome · lm53q1 firmware | Critical 9.8 | 37% | 2 exploits | |
| CVE-2017-14322 | The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEM_CookieLogin cookie with a specially crafted value. interspire · email marketer | Critical 9.8 | 37% | 2 exploits | |
| CVE-2017-0561 | A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. linux · linux kernel | Critical 9.8 | 30% | 2 exploits | |
| CVE-2016-2851 | Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow. cypherpunks · libotr | Critical 9.8 | 25% | 1 exploit | |
| CVE-2015-8046 | flash-plugin: multiple code execution issues fixed in APSB15-28 adobe · air | Critical 10.0 | 30% | 1 exploit | |
| CVE-2015-8043 | flash-plugin: multiple code execution issues fixed in APSB15-28 adobe · air | Critical 10.0 | 29% | 1 exploit | |
| CVE-2015-7648 | flash-plugin: multiple code execution issue fixed in APSB15-27 adobe · flash player | Critical 10.0 | 30% | 1 exploit | |
| CVE-2015-7647 | flash-plugin: multiple code execution issue fixed in APSB15-27 adobe · flash player | Critical 10.0 | 30% | 1 exploit | |
| CVE-2015-6024 | ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIA_IPADDRESS parameter. netcommwireless · hspa 3g10wve firmware | Critical 9.8 | 26% | 1 exploit | |
| CVE-2015-5118 | flash-plugin: multiple code execution issues fixed in APSB15-16 adobe · air | Critical 10.0 | 28% | 1 exploit | |
| CVE-2015-3134 | flash-plugin: multiple code execution issues fixed in APSB15-16 adobe · air | Critical 10.0 | 26% | 1 exploit | |
| CVE-2015-2461 | ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary… microsoft · windows 10 | Critical 9.3 | 36% | 1 exploit | |
| CVE-2013-6225 | LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability livezilla · livezilla | Critical 9.8 | 27% | 2 exploits | |
| CVE-2011-3478 | The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filter login and authentication data, which allows remote attackers to execute arbitrary code via a… symantec · pcanywhere | Critical 10.0 | 40% | 2 exploits | |
| CVE-2011-0222 | WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. apple · safari | Critical 9.3 | 22% | 2 exploits | |
| CVE-2010-3143 | Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32res.dll that is located in the same folder as a .contact, .group, .p7c, .vcf,… microsoft · windows | Critical 9.3 | 21% | 4 exploits | |
| CVE-2010-0211 | The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN… openldap · openldap | Critical 9.8 | 28% | 1 exploit | |
| CVE-2009-1492 | acroread: multiple vulnerabilities in Adobe Reader 8.1.4 adobe · acrobat | Critical 9.3 | 26% | 1 exploit | |
| CVE-2009-1330 | Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long filename in a playlist (.pls) file. mini-stream · easy rm to mp3 converter | Critical 9.3 | 22% | 9 exploits | |
| CVE-2008-1436 | Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource… microsoft · windows xp | Critical 9.0 | 37% | 1 exploit | |
| CVE-2008-0016 | Mozilla UTF-8 stack buffer overflow mozilla · firefox | Critical 10.0 | 44% | 1 exploit |
Showing 201–250 of 751
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.