Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 19, 2026
1,459 vulnerabilities · highest score first
- CVE-2017-5173Critical 9.8An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12.geutebrueck · ip camera g-cam efd-2250 firmwareEPSS30%2 exploitsPublished May 19, 2017
- CVE-2017-3106High 8.8flash-plugin: Remote Code Execution due to Type Confusion issue fixed in APSB17-23adobe · flash playerEPSS22%2 exploitsPublished Aug 8, 2017
- CVE-2017-3068High 8.8flash-plugin: multiple code execution issues fixed in APSB17-15adobe · flash playerEPSS20%2 exploitsPublished May 9, 2017
- CVE-2017-2985High 8.8flash-plugin: multiple code execution issues fixed in APSB17-04adobe · flash playerEPSS22%2 exploitsPublished Feb 14, 2017
- CVE-2017-2932High 8.8flash-plugin: multiple code execution issues fixed in APSB17-02adobe · flash playerEPSS25%2 exploitsPublished Jan 10, 2017
- CVE-2017-2931High 8.8flash-plugin: multiple code execution issues fixed in APSB17-02adobe · flash playerEPSS21%2 exploitsPublished Jan 10, 2017
- CVE-2017-16887Critical 9.8The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal.fiberhome · lm53q1 firmwareEPSS37%2 exploitsPublished Jan 12, 2018
- CVE-2017-14322Critical 9.8The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEM_CookieLogin cookie with a specially crafted value.interspire · email marketerEPSS37%2 exploitsPublished Oct 18, 2017
- CVE-2017-11903High 7.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to…microsoft · internet explorerEPSS47%2 exploitsPublished Dec 12, 2017
- CVE-2017-11855High 7.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user…microsoft · internet explorerEPSS49%2 exploitsPublished Nov 15, 2017
- CVE-2017-0561Critical 9.8A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC.linux · linux kernelEPSS30%2 exploitsPublished Apr 7, 2017
- CVE-2016-9565High 8.1nagios: Command injection via curl in MagpieRSSnagios · nagiosEPSS23%2 exploitsPublished Dec 13, 2016
- CVE-2016-4179High 8.8flash-plugin: multiple code execution issues fixed in APSB16-25adobe · flash playerEPSS20%2 exploitsPublished Jul 12, 2016
- CVE-2016-4175High 8.8flash-plugin: multiple code execution issues fixed in APSB16-25adobe · flash playerEPSS20%2 exploitsPublished Jul 12, 2016
- CVE-2016-2851Critical 9.8Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.cypherpunks · libotrEPSS25%1 exploitPublished Apr 7, 2016
- CVE-2016-1013High 8.8flash-plugin: multiple code execution issues fixed in APSB16-10adobe · flash playerEPSS23%2 exploitsPublished Apr 7, 2016
- CVE-2016-0063High 8.8Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0060,…microsoft · internet explorerEPSS39%2 exploitsPublished Feb 10, 2016
- CVE-2015-8046Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-28adobe · airEPSS30%1 exploitPublished Nov 10, 2015
- CVE-2015-8043Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-28adobe · airEPSS29%1 exploitPublished Nov 10, 2015
- CVE-2015-7648Critical 10.0flash-plugin: multiple code execution issue fixed in APSB15-27adobe · flash playerEPSS30%1 exploitPublished Oct 14, 2015
- CVE-2015-7647Critical 10.0flash-plugin: multiple code execution issue fixed in APSB15-27adobe · flash playerEPSS30%1 exploitPublished Oct 14, 2015
- CVE-2015-7245High 7.5Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read sensitive information via a ..d-link · dvg-n5402sp firmwareEPSS45%3 exploitsPublished Apr 24, 2017
- CVE-2015-6024Critical 9.8ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIA_IPADDRESS parameter.netcommwireless · hspa 3g10wve firmwareEPSS26%1 exploitPublished Feb 9, 2017
- CVE-2015-5118Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-16adobe · airEPSS28%1 exploitPublished Jul 8, 2015
- CVE-2015-3134Critical 10.0flash-plugin: multiple code execution issues fixed in APSB15-16adobe · airEPSS26%1 exploitPublished Jul 8, 2015
- CVE-2015-2461Critical 9.3ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary…microsoft · windows 10EPSS36%1 exploitPublished Aug 14, 2015
- CVE-2015-0273High 7.5php: use after free vulnerability in unserialize() with DateTimeZonephp · phpEPSS44%1 exploitPublished Feb 19, 2015
- CVE-2013-6225Critical 9.8LiveZilla 5.0.1.4 has a Remote Code Execution vulnerabilitylivezilla · livezillaEPSS27%2 exploitsPublished Jan 13, 2020
- CVE-2012-2386High 7.5php: Integer overflow leading to heap-buffer overflow in the Phar extensionphp · phpEPSS42%1 exploitPublished May 21, 2012
- CVE-2011-3478Critical 10.0The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filter login and authentication data, which allows remote attackers to execute arbitrary code via a…symantec · pcanywhereEPSS40%2 exploitsPublished Jan 25, 2012
- CVE-2011-0222Critical 9.3WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.apple · safariEPSS22%2 exploitsPublished Jul 21, 2011
- CVE-2010-4701High 7.6Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute…microsoft · windows 7EPSS48%2 exploitsPublished Jan 20, 2011
- CVE-2010-3143Critical 9.3Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32res.dll that is located in the same folder as a .contact, .group, .p7c, .vcf,…microsoft · windowsEPSS21%4 exploitsPublished Aug 27, 2010
- CVE-2010-0467Medium 5.8Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla!chillcreations · com ccnewsletterEPSS43%2 exploitsPublished Feb 2, 2010
- CVE-2010-0211Critical 9.8The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN…openldap · openldapEPSS28%1 exploitPublished Jul 28, 2010
- CVE-2009-1492Critical 9.3acroread: multiple vulnerabilities in Adobe Reader 8.1.4adobe · acrobatEPSS26%1 exploitPublished Apr 27, 2009
- CVE-2009-1330Critical 9.3Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long filename in a playlist (.pls) file.mini-stream · easy rm to mp3 converterEPSS22%9 exploitsPublished Apr 17, 2009
- CVE-2008-4864High 7.5python: imageop module multiple integer overflowspython · pythonEPSS21%2 exploitsPublished Oct 19, 2008
- CVE-2008-1436Critical 9.0Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource…microsoft · windows xpEPSS37%1 exploitPublished Apr 21, 2008
- CVE-2008-0645High 7.5Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) config/conf-activation.php, (2) menu/item.php, and (3) modules/conf_modules.php in admin/system/; and…portail web php · portail web phpEPSS34%4 exploitsPublished Feb 7, 2008
- CVE-2008-0016Critical 10.0Mozilla UTF-8 stack buffer overflowmozilla · firefoxEPSS44%1 exploitPublished Sep 23, 2008
- CVE-2007-6015Critical 9.3Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset…samba · sambaEPSS27%1 exploitPublished Dec 13, 2007
- CVE-2006-3059Critical 9.3Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors.microsoft · excelEPSS41%1 exploitPublished Jun 17, 2006
- CVE-2005-0944High 7.5Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a crafted mdb file.microsoft · jetEPSS34%3 exploitsPublished May 2, 2005
- CVE-2004-0214Critical 10.0Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated…microsoft · internet explorerEPSS47%1 exploitPublished Nov 3, 2004
- CVE-2000-0666Critical 10.0rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.conectiva · linuxEPSS26%3 exploitsPublished Jul 16, 2000
- CVE-2026-102255Critical 10.0A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path.EPSS0.5%2 exploitsPublished Oct 7, 2026
- CVE-2024-0939Critical 9.8The manipulation of the argument file_upload leads to unrestricted upload.byzoro · smart s210 firmwareEPSS44%1 exploitPublished Jan 26, 2024
- CVE-2023-38874High 8.8Economizzer remote code execution vulnerabilityeconomizzer · economizzerEPSS32%1 exploitPublished Sep 28, 2023
- CVE-2023-3824Critical 9.8In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.php · phpEPSS22%1 exploitPublished Aug 11, 2023
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-5173 | An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. geutebrueck · ip camera g-cam efd-2250 firmware | Critical 9.8 | 30% | 2 exploits | |
| CVE-2017-3106 | flash-plugin: Remote Code Execution due to Type Confusion issue fixed in APSB17-23 adobe · flash player | High 8.8 | 22% | 2 exploits | |
| CVE-2017-3068 | flash-plugin: multiple code execution issues fixed in APSB17-15 adobe · flash player | High 8.8 | 20% | 2 exploits | |
| CVE-2017-2985 | flash-plugin: multiple code execution issues fixed in APSB17-04 adobe · flash player | High 8.8 | 22% | 2 exploits | |
| CVE-2017-2932 | flash-plugin: multiple code execution issues fixed in APSB17-02 adobe · flash player | High 8.8 | 25% | 2 exploits | |
| CVE-2017-2931 | flash-plugin: multiple code execution issues fixed in APSB17-02 adobe · flash player | High 8.8 | 21% | 2 exploits | |
| CVE-2017-16887 | The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. fiberhome · lm53q1 firmware | Critical 9.8 | 37% | 2 exploits | |
| CVE-2017-14322 | The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEM_CookieLogin cookie with a specially crafted value. interspire · email marketer | Critical 9.8 | 37% | 2 exploits | |
| CVE-2017-11903 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to… microsoft · internet explorer | High 7.5 | 47% | 2 exploits | |
| CVE-2017-11855 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user… microsoft · internet explorer | High 7.5 | 49% | 2 exploits | |
| CVE-2017-0561 | A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. linux · linux kernel | Critical 9.8 | 30% | 2 exploits | |
| CVE-2016-9565 | nagios: Command injection via curl in MagpieRSS nagios · nagios | High 8.1 | 23% | 2 exploits | |
| CVE-2016-4179 | flash-plugin: multiple code execution issues fixed in APSB16-25 adobe · flash player | High 8.8 | 20% | 2 exploits | |
| CVE-2016-4175 | flash-plugin: multiple code execution issues fixed in APSB16-25 adobe · flash player | High 8.8 | 20% | 2 exploits | |
| CVE-2016-2851 | Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow. cypherpunks · libotr | Critical 9.8 | 25% | 1 exploit | |
| CVE-2016-1013 | flash-plugin: multiple code execution issues fixed in APSB16-10 adobe · flash player | High 8.8 | 23% | 2 exploits | |
| CVE-2016-0063 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0060,… microsoft · internet explorer | High 8.8 | 39% | 2 exploits | |
| CVE-2015-8046 | flash-plugin: multiple code execution issues fixed in APSB15-28 adobe · air | Critical 10.0 | 30% | 1 exploit | |
| CVE-2015-8043 | flash-plugin: multiple code execution issues fixed in APSB15-28 adobe · air | Critical 10.0 | 29% | 1 exploit | |
| CVE-2015-7648 | flash-plugin: multiple code execution issue fixed in APSB15-27 adobe · flash player | Critical 10.0 | 30% | 1 exploit | |
| CVE-2015-7647 | flash-plugin: multiple code execution issue fixed in APSB15-27 adobe · flash player | Critical 10.0 | 30% | 1 exploit | |
| CVE-2015-7245 | Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read sensitive information via a .. d-link · dvg-n5402sp firmware | High 7.5 | 45% | 3 exploits | |
| CVE-2015-6024 | ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIA_IPADDRESS parameter. netcommwireless · hspa 3g10wve firmware | Critical 9.8 | 26% | 1 exploit | |
| CVE-2015-5118 | flash-plugin: multiple code execution issues fixed in APSB15-16 adobe · air | Critical 10.0 | 28% | 1 exploit | |
| CVE-2015-3134 | flash-plugin: multiple code execution issues fixed in APSB15-16 adobe · air | Critical 10.0 | 26% | 1 exploit | |
| CVE-2015-2461 | ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary… microsoft · windows 10 | Critical 9.3 | 36% | 1 exploit | |
| CVE-2015-0273 | php: use after free vulnerability in unserialize() with DateTimeZone php · php | High 7.5 | 44% | 1 exploit | |
| CVE-2013-6225 | LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability livezilla · livezilla | Critical 9.8 | 27% | 2 exploits | |
| CVE-2012-2386 | php: Integer overflow leading to heap-buffer overflow in the Phar extension php · php | High 7.5 | 42% | 1 exploit | |
| CVE-2011-3478 | The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filter login and authentication data, which allows remote attackers to execute arbitrary code via a… symantec · pcanywhere | Critical 10.0 | 40% | 2 exploits | |
| CVE-2011-0222 | WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. apple · safari | Critical 9.3 | 22% | 2 exploits | |
| CVE-2010-4701 | Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute… microsoft · windows 7 | High 7.6 | 48% | 2 exploits | |
| CVE-2010-3143 | Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32res.dll that is located in the same folder as a .contact, .group, .p7c, .vcf,… microsoft · windows | Critical 9.3 | 21% | 4 exploits | |
| CVE-2010-0467 | Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! chillcreations · com ccnewsletter | Medium 5.8 | 43% | 2 exploits | |
| CVE-2010-0211 | The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN… openldap · openldap | Critical 9.8 | 28% | 1 exploit | |
| CVE-2009-1492 | acroread: multiple vulnerabilities in Adobe Reader 8.1.4 adobe · acrobat | Critical 9.3 | 26% | 1 exploit | |
| CVE-2009-1330 | Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long filename in a playlist (.pls) file. mini-stream · easy rm to mp3 converter | Critical 9.3 | 22% | 9 exploits | |
| CVE-2008-4864 | python: imageop module multiple integer overflows python · python | High 7.5 | 21% | 2 exploits | |
| CVE-2008-1436 | Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource… microsoft · windows xp | Critical 9.0 | 37% | 1 exploit | |
| CVE-2008-0645 | Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) config/conf-activation.php, (2) menu/item.php, and (3) modules/conf_modules.php in admin/system/; and… portail web php · portail web php | High 7.5 | 34% | 4 exploits | |
| CVE-2008-0016 | Mozilla UTF-8 stack buffer overflow mozilla · firefox | Critical 10.0 | 44% | 1 exploit | |
| CVE-2007-6015 | Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset… samba · samba | Critical 9.3 | 27% | 1 exploit | |
| CVE-2006-3059 | Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. microsoft · excel | Critical 9.3 | 41% | 1 exploit | |
| CVE-2005-0944 | Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a crafted mdb file. microsoft · jet | High 7.5 | 34% | 3 exploits | |
| CVE-2004-0214 | Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated… microsoft · internet explorer | Critical 10.0 | 47% | 1 exploit | |
| CVE-2000-0666 | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges. conectiva · linux | Critical 10.0 | 26% | 3 exploits | |
| CVE-2026-102255 | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. | Critical 10.0 | 0.5% | 2 exploits | |
| CVE-2024-0939 | The manipulation of the argument file_upload leads to unrestricted upload. byzoro · smart s210 firmware | Critical 9.8 | 44% | 1 exploit | |
| CVE-2023-38874 | Economizzer remote code execution vulnerability economizzer · economizzer | High 8.8 | 32% | 1 exploit | |
| CVE-2023-3824 | In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE. php · php | Critical 9.8 | 22% | 1 exploit |
Showing 351–400 of 1,459
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.