CVEs in the wild

Every CVE signature we have seen probed on our honeypot network. Filter by how recently it was seen and by severity; click a row for the IPs currently trying it. KEV badge means CISA lists the CVE as actively exploited.

Seen in

Severity

Loading…


CVE-2017-9841	KEV	PHPUnit - Remote Code Execution	critical	Jun 27, 2017	-	52,051	673
CVE-2026-34197	KEV	Apache ActiveMQ - Remote Code Execution	critical	Apr 7, 2026	-	48,898	1,521
CVE-2021-36260	KEV	Hikvision IP camera/NVR - Remote Command Execution	critical	Sep 22, 2021	-	24,020	28
CVE-2026-4020		Gravity SMTP WordPress Plugin - Sensitive Information Exposure	high	Mar 31, 2026	-	5,115	1,632
CVE-2026-27771		Gitea Container Registry - Unauthorized Private Image Access	high	Jul 3, 2026	-	3,734	299
CVE-2024-4836		Edito CMS - Sensitive Data Leak	high	Jul 2, 2024	-	1,738	1,187
CVE-2024-50340		Symfony Profiler - Remote Access via Injected Arguments	high	Nov 6, 2024	-	1,649	1,175
CVE-2021-42013	KEV	Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution	critical	Oct 7, 2021	-	1,644	656
CVE-2026-41940	KEV	cPanel & WHM - Authentication Bypass via Session-File CRLF Injection	critical	Apr 29, 2026	-	1,611	400
CVE-2020-9425		rConfig <3.9.4 - Sensitive Information Disclosure	high	Mar 20, 2020	-	1,441	1,097
CVE-2026-5027		Langflow <= 1.8.4 - Path Traversal to RCE via File Upload	high	Mar 27, 2026	-	567	33
CVE-2018-10562	KEV	Dasan GPON Devices - Remote Code Execution	critical	May 4, 2018	-	545	487
CVE-2025-31324	KEV	SAP NetWeaver Visual Composer Metadata Uploader - Deserialization	critical	Apr 24, 2025	-	511	440
CVE-2025-1025		Cockpit < 2.4.1 - Arbitrary File Upload	high	Feb 5, 2025	-	419	29
CVE-2022-45038		WBCE CMS v1.5.4 - Cross Site Scripting (Stored)	medium	Nov 25, 2022	-	400	55
CVE-2023-27524	KEV	Apache Superset - Authentication Bypass	critical	Apr 24, 2023	-	379	24
CVE-2024-37152		Argo CD Unauthenticated Access to sensitive setting	medium	Jun 6, 2024	-	357	31
CVE-2024-31621		Flowise 1.6.5 - Authentication Bypass	high	Apr 29, 2024	-	357	38
CVE-2025-27134		Joplin 3.3.3 Server - Privilege Escalation	high	Apr 30, 2025	-	344	26
CVE-2022-26352	KEV	DotCMS - Arbitrary File Upload	critical	Jul 17, 2022	-	337	24
CVE-2023-38646		Metabase < 0.46.6.1 - Remote Code Execution	critical	Jul 21, 2023	-	317	128
CVE-2023-33831		FUXA - Unauthenticated Remote Code Execution	critical	Sep 18, 2023	-	242	7
CVE-2025-0282	KEV	Ivanti Connect Secure - Stack-based Buffer Overflow	critical	Jan 8, 2025	-	230	104
CVE-2007-4556		OpenSymphony XWork/Apache Struts2 - Remote Code Execution	medium	Aug 28, 2007	-	228	87
CVE-2020-2551	KEV	Oracle WebLogic Server - Remote Code Execution	critical	Jan 15, 2020	-	220	68
CVE-2018-13379	KEV	Fortinet FortiOS - Credentials Disclosure	critical	Jun 4, 2019	-	205	82
CVE-2019-9621	KEV	Zimbra Collaboration Suite - SSRF	high	Apr 30, 2019	-	197	148
CVE-2023-39141		Aria2 WebUI - Path traversal	high	Aug 22, 2023	-	186	11
CVE-2022-45037		WBCE CMS v1.5.4 - Cross Site Scripting (Stored)	medium	-	-	160	17
CVE-2022-40684	KEV	Fortinet - Authentication Bypass	critical	Oct 18, 2022	-	160	80
CVE-2017-5983		JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)	critical	Apr 10, 2017	-	157	77
CVE-2019-11248		Debug Endpoint pprof - Exposure Detection	high	Aug 29, 2019	-	152	35
CVE-2021-29441		Nacos <1.4.1 - Authentication Bypass	critical	Apr 27, 2021	-	142	53
CVE-2021-3129	KEV	Laravel with Ignition <= v8.4.2 Debug Mode - Remote Code Execution	critical	-	-	140	12
CVE-2021-26855	KEV	Microsoft Exchange Server SSRF Vulnerability	critical	Mar 3, 2021	-	136	14
CVE-2019-7315		Genie Access WIP3BVAF IP Camera - Local File Inclusion	high	Jun 17, 2019	-	120	5
CVE-2024-44000		LiteSpeed Cache <= 6.4.1 - Sensitive Information Exposure	high	Oct 20, 2024	-	114	46
CVE-2020-3452	KEV	Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion	high	Jul 22, 2020	-	107	81
CVE-2019-18922		Allied Telesis AT-GS950/8 - Local File Inclusion	high	Nov 29, 2019	-	107	5
CVE-2026-22739		Spring Cloud Config Server - Path Traversal	high	Mar 24, 2026	-	93	3
CVE-2025-71334		Flowise - Path Traversal	critical	Jun 25, 2026	-	93	3
CVE-2020-10987	KEV	Tenda AC15 AC1900 version 15.03.05.19 - Command Injection	critical	Jul 13, 2020	-	91	8
CVE-2026-27971		Qwik - Unauthenticated RCE via server$ Deserialization	critical	Mar 3, 2026	-	88	3
CVE-2017-12149	KEV	Jboss Application Server - Remote Code Execution	critical	-	-	84	11
CVE-2024-0012	KEV	PAN-OS Management Web Interface - Authentication Bypass	critical	Nov 18, 2024	-	83	83
CVE-2022-3236	KEV	Sophos Firewall <= 19.0 MR1 - Remote Code Execution	critical	-	-	82	12
CVE-2022-38794		Zaver - Local File Inclusion	high	Aug 27, 2022	-	81	5
CVE-2023-40044	KEV	WS_FTP Server - Insecure Deserialization	critical	Sep 27, 2023	-	80	79
CVE-2023-49103	KEV	OwnCloud - Phpinfo Configuration	high	Nov 21, 2023	-	76	2
CVE-2024-25723		ZenML ZenML Server - Improper Authentication	critical	Feb 27, 2024	-	70	4
CVE-2025-31125	KEV	Vite Development Server - Path Traversal	medium	Mar 31, 2025	-	64	13
CVE-2023-50968		Apache OFBiz < 18.12.11 - Server Side Request Forgery	high	Dec 26, 2023	-	55	41
CVE-2022-35413		WAPPLES Web Application Firewall <=6.0 - Hardcoded Credentials	critical	Sep 13, 2022	-	55	6
CVE-2023-1389	KEV	TP-Link Archer AX21 (AX1800) - Unauthenticated Command Injection	critical	Mar 15, 2023	-	52	18
CVE-2025-2129		Mage AI - Insecure Default Authentication Setup	medium	Mar 9, 2025	-	52	14
CVE-2023-23752	KEV	Joomla! Webservice - Password Disclosure	medium	Feb 16, 2023	-	50	6
CVE-2024-11303		Korenix JetPort 5601v3 - Path Traversal	high	Nov 18, 2024	-	46	8
CVE-2020-35234		SMTP WP Plugin Directory Listing	high	Dec 14, 2020	-	46	5
CVE-2023-22480		KubeOperator Foreground `kubeconfig` - File Download	critical	Jan 14, 2023	-	44	2
CVE-2025-1595		EasyCVR <=2.1.2 - Information Disclosure	medium	Feb 23, 2025	-	43	2
CVE-2026-34908	KEV	UniFi OS - Authentication Bypass via Path Traversal (..%2f)	critical	May 22, 2026	-	43	9
CVE-2023-3380		WAVLINK WN579X3 - Remote Command Execution	critical	Jun 23, 2023	-	42	6
CVE-2020-13937		Apache Kylin - Exposed Configuration File	medium	Oct 19, 2020	-	40	2
CVE-2024-24116		Ruijie RG-NBS2009G-P - Improper Authentication	critical	Oct 2, 2024	-	40	2
CVE-2001-0537		Cisco IOS HTTP Configuration - Authentication Bypass	critical	Jul 21, 2001	-	40	2
CVE-2012-3153		Oracle Forms & Reports RCE (CVE-2012-3152 & CVE-2012-3153)	medium	Oct 16, 2012	-	40	2
CVE-2017-7925		Dahua Security - Configuration File Disclosure	critical	May 6, 2017	-	40	3
CVE-2017-8229		Amcrest IP Camera Web Management - Data Exposure	critical	Jul 3, 2019	-	39	2
CVE-2026-25892		Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent DoS	high	Feb 9, 2026	-	39	18
CVE-2026-23744		MCPJam Inspector - Remote Code Execution	critical	Jan 16, 2026	-	36	4
CVE-2022-0342		Zyxel - Authentication Bypass	critical	Mar 28, 2022	-	35	6
CVE-2024-1709	KEV	ConnectWise ScreenConnect 23.9.7 - Authentication Bypass	critical	Feb 21, 2024	-	34	7
CVE-2019-1653	KEV	Cisco Small Business WAN VPN Routers - Sensitive Information Disclosure	high	Jan 24, 2019	-	33	28
CVE-2024-30569		Netgear R6850 - Information Disclosure	high	Apr 3, 2024	-	30	3
CVE-2023-20198	KEV	Cisco IOS XE Web UI - Command Injection	critical	-	-	29	7
CVE-2018-19326		Zyxel VMG1312-B10D 5.13AAXA.8 - Local File Inclusion	high	Nov 17, 2018	-	27	4
CVE-2024-7029		AVTECH IP Camera - Command Injection	high	Aug 2, 2024	-	26	7
CVE-2024-32735		CyberPower - Missing Authentication	critical	May 14, 2024	-	25	1
CVE-2019-3396	KEV	Atlassian Confluence Server - Path Traversal	critical	-	-	24	3
CVE-2022-22963	KEV	Spring Cloud - Remote Code Execution	critical	-	-	23	4
CVE-2022-1711		draw.io < 18.0.5 - Server Side Request Forgery (SSRF)	high	May 17, 2022	-	23	2
CVE-2019-11580	KEV	Atlassian Crowd and Crowd Data Center - Unauthenticated Remote Code Execution	critical	-	-	22	2
CVE-2019-9670	KEV	Synacor Zimbra Collaboration <8.7.11p10 - XML External Entity Injection	critical	-	-	22	7
CVE-2026-10520	KEV	Ivanti Sentry - OS Command Injection	critical	Jun 9, 2026	-	21	3
CVE-2010-4231		Camtron CMNC-200 IP Camera - Directory Traversal	high	Nov 17, 2010	-	21	2
CVE-2024-4577	KEV	PHP CGI - Argument Injection	critical	Jun 9, 2024	-	20	3
CVE-2014-2321		ZTE Cable Modem Web Shell	critical	Mar 11, 2014	-	19	8
CVE-2023-6875		WordPress POST SMTP Mailer <= 2.8.7 - Authorization Bypass	critical	-	-	18	3
CVE-2025-68613	KEV	n8n - Remote Code Execution via Expression Injection	critical	Dec 19, 2025	-	18	12
CVE-2024-44349		AnteeoWMS < v4.7.34 - SQL Injection	critical	-	-	18	4
CVE-2018-17153		Western Digital MyCloud NAS - Authentication Bypass	critical	Sep 18, 2018	-	17	6
CVE-2024-37014		Langflow <= 1.0.12 - Remote Code Execution	critical	-	-	16	2
CVE-2020-13945		Apache APISIX - Insufficiently Protected Credentials	medium	-	-	16	15
CVE-2009-1151	KEV	PhpMyAdmin Scripts - Remote Code Execution	high	Mar 26, 2009	-	14	6
CVE-2021-40150		Reolink E1 Zoom Camera <=3.0.0.716 - Information Disclosure	high	Jul 17, 2022	-	13	1
CVE-2022-30525	KEV	Zyxel Firewall - OS Command Injection	critical	May 12, 2022	-	13	6
CVE-2024-36420		Flowise 1.4.3 - Arbitrary File Read	high	-	-	12	1
CVE-2025-29635	KEV	D-Link DIR-823X set_prohibiting - Command Injection	high	Mar 25, 2025	-	12	3
CVE-2022-25082		TOTOLink - Unauthenticated Command Injection	critical	Feb 24, 2022	-	11	4
CVE-2026-54236		vLLM <= 0.23.0 - Anthropic Router Heap Address Information Leak	medium	Jun 22, 2026	117d early1 focused	11	3
CVE-2025-59287	KEV	Windows Server Update Service - Insecure Deserialization	critical	Oct 14, 2025	-	11	5
CVE-2024-23917		JetBrains TeamCity > 2023.11.3 - Authentication Bypass	critical	Feb 6, 2024	-	11	3
CVE-2020-25078	KEV	D-Link DCS-2530L/DCS-2670L - Administrator Password Disclosure	high	Sep 2, 2020	-	10	3
CVE-2021-41773	KEV	Apache 2.4.49 - Path Traversal and Remote Code Execution	high	-	-	10	6
CVE-2026-21643	KEV	Fortinet FortiClientEMS 7.4.4 - SQL Injection	critical	Feb 6, 2026	-	10	3
CVE-2026-59801		9Router - Unauthenticated LLM Provider API Exposure	critical	Jul 13, 2026	-	10	6
CVE-2026-3055	KEV	Citrix NetScaler SAML IDP - Memory Overread	critical	Mar 23, 2026	-	10	2
CVE-2024-27198	KEV	TeamCity < 2023.11.4 - Authentication Bypass	critical	Mar 4, 2024	-	9	2
CVE-2023-6895		Hikvision IP ping.php - Command Execution	critical	Dec 17, 2023	-	9	4
CVE-2025-62512		Piwigo - User Enumeration via Password Reset	medium	Feb 24, 2026	-	9	3
CVE-2021-44138		Caucho Resin >=4.0.52 <=4.0.56 - Directory traversal	high	Apr 4, 2022	-	9	5
CVE-2024-53704	KEV	SSL VPN Session Hijacking	critical	Jan 9, 2025	-	9	4
CVE-2024-6746		EasySpider 0.6.2 - Arbitrary File Read	medium	-	-	8	1
CVE-2023-3643		CAREL Boss Mini <= 1.4.0 - Local File Inclusion	critical	-	-	8	2
CVE-2020-24571		NexusDB <4.50.23 - Local File Inclusion	high	Aug 21, 2020	-	8	1
CVE-2019-10068	KEV	Kentico CMS Insecure Deserialization Remote Code Execution	critical	Mar 26, 2019	-	8	3
CVE-2026-48313		ColdFusion - Path Traversal	high	Jun 30, 2026	-	8	2
CVE-2026-35029		LiteLLM - Arbitrary File Read	high	Apr 6, 2026	-	8	3
CVE-2023-46747	KEV	F5 BIG-IP - Unauthenticated RCE via AJP Smuggling	critical	Oct 26, 2023	-	8	3
CVE-2023-2648		Weaver E-Office 9.5 - Remote Code Execution	critical	-	-	7	2
CVE-2020-5902	KEV	F5 BIG-IP TMUI - Remote Code Execution	critical	Jul 1, 2020	-	7	1
CVE-2021-29442		Nacos <1.4.1 - Authentication Bypass	high	Apr 27, 2021	-	7	7
CVE-2024-22729		Netis MW5360 V1.0.1.3031 - Command Injection	critical	Jan 25, 2024	-	7	3
CVE-2026-39364		Vite Dev Server - Directory Traversal	high	Apr 7, 2026	-	7	1
CVE-2023-28432	KEV	MinIO Cluster Deployment - Information Disclosure	high	-	-	7	2
CVE-2026-33032		Nginx UI - Broken Access Control	critical	Mar 30, 2026	-	6	3
CVE-2014-1203		Eyou E-Mail <3.6 - Remote Code Execution	critical	-	-	6	3
CVE-2020-3187		Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal	critical	May 6, 2020	-	6	2
CVE-2015-5688		Geddy <13.0.8 - Local File Inclusion	medium	Sep 4, 2015	-	6	3
CVE-2023-34843		Traggo Server - Local File Inclusion	high	Jun 29, 2023	-	6	3
CVE-2026-27483		MindsDB - Remote Code Execution	high	Feb 24, 2026	-	5	1
CVE-2021-40978		MKdocs 1.2.2 - Directory Traversal	high	Oct 7, 2021	-	5	2
CVE-2026-24423	KEV	SmarterMail - Remote Code Execution	critical	Jan 23, 2026	-	5	3
CVE-2010-0219		Apache Axis2 Default Login	critical	-	-	5	2
CVE-2023-22527	KEV	Atlassian Confluence - Remote Code Execution	critical	-	-	5	3
CVE-2024-24919	KEV	Check Point Quantum Gateway - Information Disclosure	high	-	-	5	1
CVE-2020-15050		Suprema BioStar <2.8.2 - Local File Inclusion	high	Jul 13, 2020	-	4	1
CVE-2023-22515	KEV	Atlassian Confluence - Privilege Escalation	critical	-	-	4	1
CVE-2019-8390		qdPM 9.1 - Cross-site Scripting	medium	-	-	4	1
CVE-2021-47795		GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site Scripting	high	-	-	4	1
CVE-2021-40539	KEV	Zoho ManageEngine ADSelfService Plus v6113 - Unauthenticated Remote Command Execution	critical	-	-	4	1
CVE-2023-38992		Jeecg-Boot v3.5.1 - SQL Injection	critical	Jul 28, 2023	-	4	1
CVE-2011-0518		LotusCMS 3.0 - Remote Code Execution	critical	Jan 20, 2011	-	4	2
CVE-2022-37061		FLIR AX8 1.46.16 - Remote Command Injection	critical	-	-	4	2
CVE-2026-23760	KEV	SmarterTools SmarterMail - Admin Password Reset	critical	Jan 22, 2026	-	4	2
CVE-2026-0545		MLflow Job API - Authentication Bypass	critical	Apr 3, 2026	-	4	2
CVE-2026-1581		wpForo Forum <= 2.4.14 - SQL Injection	critical	Feb 19, 2026	-	4	2
CVE-2024-3274		D-LINK DNS-320L,DNS-320LW and DNS-327L - Information Disclosure	medium	-	-	4	3
CVE-2024-21650		XWiki < 4.10.20 - Remote code execution	critical	-	-	4	1
CVE-2026-1405		WordPress Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload	critical	Feb 19, 2026	-	4	2
CVE-2024-1561		Gradio 4.3-4.12 - Local File Read	high	-	-	4	1
CVE-2026-21891		ZimaOS - Authentication Bypass	critical	Jan 8, 2026	-	4	2
CVE-2025-63387		Dify v1.9.1 - Broken Access Control	medium	Dec 18, 2025	-	3	2
CVE-2021-3378		FortiLogger 4.4.2.2 - Arbitrary File Upload	critical	-	-	3	1
CVE-2022-39952		Fortinet FortiNAC - Arbitrary File Write	critical	Feb 16, 2023	-	3	2
CVE-2024-5315		Dolibarr ERP CMS `list.php` - SQL Injection	critical	-	-	3	2
CVE-2026-71209		Audiobookshelf - Authentication Bypass	critical	Aug 5, 2026	-	3	2
CVE-2022-31814		pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection	critical	-	-	3	1
CVE-2022-36446		Webmin <1.997 - Authenticated Remote Code Execution	critical	-	-	3	3
CVE-2021-29006		rConfig 3.9.6 - Local File Inclusion	medium	-	-	3	2
CVE-2026-33478		AVideo <= 26.0 - WWBN AVideo - Remote Code Execution	critical	Mar 23, 2026	-	3	1
CVE-2022-22897		PrestaShop AP Pagebuilder <= 2.4.4 - SQL Injection	critical	-	-	3	1
CVE-2025-64446	KEV	FortiWeb - Authentication Bypass	critical	Nov 14, 2025	-	3	2
CVE-2022-35914	KEV	GLPI <=10.0.2 - Remote Command Execution	critical	-	-	3	1
CVE-2022-31976		Online Fire Reporting System v1.0 - SQL injection	critical	-	-	3	1
CVE-2021-46424		Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete	critical	-	-	3	1
CVE-2019-17444		Jfrog Artifactory <6.17.0 - Default Admin Password	critical	-	-	3	1
CVE-2023-34362	KEV	MOVEit Transfer - Remote Code Execution	critical	-	-	3	1
CVE-2021-43798	KEV	Grafana v8.x - Arbitrary File Read	high	Dec 7, 2021	-	3	1
CVE-2026-72898	KEV	Metabase - Unauthenticated SQL Injection	critical	Aug 10, 2026	-	3	1
CVE-2021-26084	KEV	Confluence Server - Remote Code Execution	critical	-	-	3	1
CVE-2024-57050		TP-LINK WR840N v6 up to 0.9.1 4.16 - Improper Authentication	critical	-	-	3	2
CVE-2020-8515	KEV	DrayTek - Remote Code Execution	critical	-	-	3	1
CVE-2025-67303		ComfyUI-Manager < 3.38 - Configuration Overwrite	critical	Jan 5, 2026	-	3	1
CVE-2024-36858		Jan v0.4.12 - Arbitrary File Upload	critical	-	-	3	1
CVE-2023-0777		modoboa 2.0.4 - Admin TakeOver	critical	-	-	2	1
CVE-2018-19276		OpenMRS Platform < 2.24.0 - Insecure Object Deserialization	critical	-	-	2	1
CVE-2025-5569		IdeaCMS <= 1.7 - SQL Injection	critical	Jun 4, 2025	-	2	1
CVE-2019-20224		Pandora FMS 7.0NG - Remote Command Injection	high	-	-	2	1
CVE-2022-29383		NETGEAR ProSafe SSL VPN firmware - SQL Injection	critical	-	-	2	1
CVE-2022-45808		LearnPress Plugin < 4.2.0 - Unauthenticated Time-Based Blind SQLi	critical	-	-	2	1
CVE-2026-9082	KEV	Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query	critical	May 20, 2026	-	2	1
CVE-2018-11511		ASUSTOR ADM 3.1.0.RFQ3 - SQL Injection	critical	-	-	2	1
CVE-2022-29007		Dairy Farm Shop Management System 1.0 - SQL Injection	critical	-	-	2	1
CVE-2018-6961	KEV	VMware NSX SD-WAN Edge - Command Injection	critical	-	-	2	1
CVE-2024-38475	KEV	Sonicwall - Pre-Authentication Arbitrary File Read	critical	Jul 1, 2024	-	2	1
CVE-2022-2314		WordPress VR Calendar <=2.3.2 - Remote Code Execution	critical	-	-	2	1
CVE-2024-48307		JeecgBoot v3.7.1 - SQL Injection	critical	-	-	2	1
CVE-2018-17431		Comodo Unified Threat Management Web Console - Remote Code Execution	critical	-	-	2	1
CVE-2021-29203		HPE Edgeline Infrastructure Manager <1.22 - Authentication Bypass	critical	-	-	2	1
CVE-2024-57046		Netgear DGN2200 - Improper Authentication	high	-	-	2	1
CVE-2022-0747		Infographic Maker iList < 4.3.8 - SQL Injection	critical	-	-	2	1
CVE-2023-34124		SonicWall GMS and Analytics Web Services - Shell Injection	critical	Jul 13, 2023	-	2	1
CVE-2019-9733		JFrog Artifactory 6.7.3 - Admin Login Bypass	critical	-	-	2	1
CVE-2023-52163	KEV	Digiever DS-2105 Pro - Command Injection	high	-	-	2	2
CVE-2025-6403		Code-Projects School Fees Payment System 1.0 - SQL Injection	critical	Jun 21, 2025	-	2	1
CVE-2022-29006		Directory Management System 1.0 - SQL Injection	critical	-	-	2	1
CVE-2024-5217	KEV	ServiceNow - Incomplete Input Validation	critical	-	-	2	1
CVE-2025-24016	KEV	Wazuh - Unsafe Deserialization Remote Code Execution	critical	Feb 10, 2025	-	2	1
CVE-2020-7961	KEV	Liferay Portal Unauthenticated < 7.2.1 CE GA2 - Remote Code Execution	critical	-	-	2	1
CVE-2015-1427	KEV	ElasticSearch - Remote Code Execution	high	-	-	2	1
CVE-2022-28080		Royal Event - SQL Injection	high	-	-	2	1
CVE-2022-36553		Hytec Inter HWL-2511-SS - Remote Command Execution	critical	-	-	2	1
CVE-2018-10818		LG NAS Devices - Remote Code Execution	critical	-	-	2	1
CVE-2017-3132		Fortinet FortiOS < 5.6.0 - Cross-Site Scripting	medium	Sep 12, 2017	-	2	1
CVE-2020-25506	KEV	D-Link DNS-320 - Unauthenticated Remote Code Execution	critical	-	-	2	1
CVE-2022-37042	KEV	Zimbra Collaboration Suite 8.8.15/9.0 - Remote Code Execution	critical	-	-	2	1
CVE-2023-50839		JS Help Desk <= 2.8.1 - SQL Injection	critical	-	-	2	1
CVE-2021-21307		Lucee Admin - Remote Code Execution	critical	-	-	2	1
CVE-2020-13700		WordPress acf-to-rest-api <=3.1.0 - Insecure Direct Object Reference	high	Jun 24, 2020	-	2	1
CVE-2025-47188		Mitel 6000 - OS Command Injection	critical	Aug 7, 2025	-	2	1
CVE-2020-12641	KEV	Roundcube Webmail - Command Injection	critical	May 4, 2020	-	2	1
CVE-2026-58138		Orkes Conductor 3.21.21-3.30.1 - Remote Code Execution	critical	Jun 30, 2026	-	2	1
CVE-2025-32101		UNA CMS <= 14.0.0-RC4 - PHP Object Injection	critical	-	-	2	1
CVE-2023-29357	KEV	Microsoft SharePoint - Authentication Bypass	critical	-	-	2	1
CVE-2024-7314		AJ-Report < 1.4.1 - Remote Code Execution	critical	-	-	2	2
CVE-2025-31161	KEV	CrushFTP - Authentication Bypass	critical	Apr 3, 2025	-	2	1
CVE-2022-29009		Cyber Cafe Management System 1.0 - SQL Injection	critical	-	-	2	1
CVE-2023-29084		ManageEngine ADManager Plus - Command Injection	high	-	-	2	1
CVE-2022-0773		Documentor <= 1.5.3 - Unauthenticated SQL Injection	critical	-	-	2	1
CVE-2024-6396		Aimhubio Aim Server 3.19.3 - Arbitrary File Overwrite	critical	-	-	2	1
CVE-2022-2756		Kavita <0.5.4.1 - Server-Side Request Forgery	medium	-	-	2	1
CVE-2017-18349		Fastjson Insecure Deserialization - Remote Code Execution	critical	Oct 23, 2018	-	2	1
CVE-2022-0949		WordPress Stop Bad Bots <6.930 - SQL Injection	critical	-	-	2	1
CVE-2022-31798		Nortek Linear eMerge E3-Series - Cross-Site Scripting	medium	Aug 25, 2022	-	2	1
CVE-2013-1965		Apache Struts2 S2-012 RCE	critical	Jul 10, 2013	-	2	2
CVE-2018-25114		osCommerce 2.3.4.1 - Remote Code Execution	critical	-	-	2	1
CVE-2022-22947	KEV	Spring Cloud Gateway Code Injection	critical	-	-	2	1
CVE-2025-10035	KEV	GoAnywhere - Authentication Bypass	critical	Sep 18, 2025	-	2	1
CVE-2014-9614		Netsweeper 4.0.5 - Default Weak Account	critical	-	-	2	2
CVE-2025-14611	KEV	Gladinet CentreStack & Triofox - Hardcoded Credentials	critical	Dec 12, 2025	-	2	1
CVE-2024-38289		TurboMeeting - Boolean-based SQL Injection	critical	-	-	2	1
CVE-2025-25570		Vue Vben Admin - Default Credentials	critical	Feb 27, 2025	-	2	1
CVE-2016-15042		WordPress Frontend File Manager < 4.0 & N-Media Post Frontend < 1.1 - Arbitrary File Upload	critical	-	-	2	1
CVE-2019-12990		Citrix SD-WAN Center - Local File Inclusion	critical	-	-	2	1
CVE-2024-6646		Netgear-WN604 downloadFile.php - Information Disclosure	medium	Jul 10, 2024	-	2	1
CVE-2018-2894		Oracle WebLogic Server - Remote Code Execution	critical	-	-	2	1
CVE-2022-24816	KEV	GeoServer <1.2.2 - Remote Code Execution	critical	-	-	2	1
CVE-2026-35616	KEV	FortiClient EMS - Authentication Bypass	high	Apr 4, 2026	-	2	1
CVE-2025-0107		Palo Alto Networks Expedition - OS Command Injection	critical	Jan 11, 2025	-	2	2
CVE-2018-13317		TOTOLINK A3002RU 1.0.8 - Information Disclosure	medium	Nov 26, 2018	-	2	1
CVE-2020-12447		Onkyo TX-NR585 Web Interface - Directory Traversal	high	Apr 29, 2020	-	2	1
CVE-2024-34102	KEV	Adobe Commerce & Magento - CosmicSting	critical	-	-	1	1
CVE-2025-30406	KEV	Gladinet CentreStack < 16.4.10315.56368 Use of Hard-coded Key Leads to Unauthenticated RCE	critical	Apr 3, 2025	-	1	1
CVE-2023-34133		SonicWall GMS and Analytics - SQL Injection	high	Jul 13, 2023	-	1	1
CVE-2024-0939		Smart S210 Management Platform - Arbitary File Upload	critical	-	-	1	1
CVE-2023-6750		WordPress WP Clone <= 2.4.2 - Database Backup Exposure	critical	Jan 8, 2024	-	1	1
CVE-2024-48766		NetAlert X - Arbitary File Read	critical	-	-	1	1
CVE-2020-12720		vBulletin SQL Injection	critical	-	-	1	1
CVE-2024-30490		ProfileGrid <= 5.7.8 - SQL Injection	critical	-	-	1	1
CVE-2022-40022		Symmetricom SyncServer Unauthenticated - Remote Command Execution	critical	-	-	1	1
CVE-2022-47615		LearnPress Plugin < 4.2.0 - Local File Inclusion	critical	-	-	1	1
CVE-2023-34659		JeecgBoot 3.5.0 - SQL Injection	critical	-	-	1	1
CVE-2025-29085		Vipshop Saturn Console <= 3.5.1 - SQL Injection via ClusterKey Component	critical	Apr 2, 2025	-	1	1
CVE-2022-38296		Cuppa CMS v1.0 - Arbitrary File Upload	critical	-	-	1	1
CVE-2018-20526		Roxy Fileman 1.4.5 - Unrestricted File Upload	critical	-	-	1	1
CVE-2023-6623		Essential Blocks < 4.4.3 - Local File Inclusion	critical	Jan 15, 2024	-	1	1
CVE-2024-23334		aiohttp - Directory Traversal	high	Jan 29, 2024	-	1	1
CVE-2023-20887	KEV	VMware VRealize Network Insight - Remote Code Execution	critical	Jun 7, 2023	-	1	1
CVE-2017-9791	KEV	Apache Struts2 S2-053 - Remote Code Execution	critical	Jul 10, 2017	-	1	1
CVE-2021-24284		WordPress Kaswara Modern VC Addons <=3.0.1 - Arbitrary File Upload	critical	-	-	1	1
CVE-2023-32563		Ivanti Avalanche - Remote Code Execution	critical	-	-	1	1
CVE-2021-25003		WordPress WPCargo Track & Trace <6.9.0 - Remote Code Execution	critical	-	-	1	1
CVE-2024-2876		Wordpress Email Subscribers by Icegram Express - SQL Injection	critical	-	-	1	1
CVE-2022-26134	KEV	Confluence - Remote Code Execution	critical	Jun 3, 2022	-	1	1
CVE-2024-9047		WordPress File Upload <= 4.24.11 - Arbitrary File Read	critical	-	-	1	1
CVE-2022-2467		Garage Management System 1.0 - SQL Injection	critical	-	-	1	1
CVE-2019-12985		Citrix SD-WAN Center - Remote Command Injection	critical	-	-	1	1
CVE-2023-5074		D-Link D-View 8 v2.0.1.28 - Authentication Bypass	critical	-	-	1	1
CVE-2021-31755	KEV	Tenda Router AC11 - Remote Command Injection	critical	May 7, 2021	-	1	1
CVE-2025-54236	KEV	Adobe Commerce - Authentication Bypass	critical	Sep 9, 2025	-	1	1
CVE-2022-0679		WordPress Narnoo Distributor <=2.5.1 - Local File Inclusion	critical	-	-	1	1
CVE-2016-5649		NETGEAR DGN2200 / DGND3700 - Admin Password Disclosure	critical	-	-	1	1
CVE-2022-0867		WordPress ARPrice <3.6.1 - SQL Injection	critical	-	-	1	1
CVE-2023-37629		Online Piggery Management System v1.0 - Unauthenticated File Upload	critical	-	-	1	1
CVE-2024-30498		CRM Perks Forms <= 1.1.4 - SQL Injection	critical	-	-	1	1
CVE-2022-31137		Roxy-WI < 6.1.1.0 - Remote Code Execution	critical	-	-	1	1
CVE-2021-36380	KEV	Sunhillo SureLine <8.7.0.1.1 - Unauthenticated OS Command Injection	critical	-	-	1	1
CVE-2020-29583	KEV	ZyXel USG - Hardcoded Credentials	critical	-	-	1	1
CVE-2026-28496		FOSSBilling - Server-Side Template Injection	critical	Jun 23, 2026	-	1	1
CVE-2021-27931		LumisXP <10.0.0 - Blind XML External Entity Attack	critical	-	-	1	1
CVE-2023-6989		Shield Security WP Plugin <= 18.5.9 - Local File Inclusion	critical	-	-	1	1
CVE-2018-1217		Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager - Invalid Access Control	critical	-	-	1	1
CVE-2020-6287	KEV	SAP NetWeaver AS JAVA 7.30-7.50 - Remote Admin Addition	critical	-	-	1	1
CVE-2026-40308		My Calendar WordPress Plugin - Information Disclosure	high	Apr 16, 2026	-	1	1
CVE-2024-4358	KEV	Progress Telerik Report Server - Authentication Bypass	critical	-	-	1	1
CVE-2020-11546		SuperWebmailer 7.21.0.01526 - Remote Code Execution	critical	-	-	1	1
CVE-2023-25135		vBulletin <= 5.6.9 - Pre-authentication Remote Code Execution	critical	-	-	1	1
CVE-2026-25555		OpenBullet2 <= 0.3.2 - Authentication Bypass	critical	Jun 8, 2026	-	1	1
CVE-2023-29919		SolarView Compact <= 6.00 - Local File Inclusion	critical	-	-	1	1
CVE-2021-21985	KEV	VMware vSphere Client (HTML5) - Remote Code Execution	critical	-	-	1	1
CVE-2024-13979		St. Joe ERP system - SQL Injection	critical	-	-	1	1
CVE-2021-27850		Apache Tapestry - Remote Code Execution	critical	-	-	1	1
CVE-2020-7980		Satellian Intellian Aptus Web <= 1.24 - Remote Command Execution	critical	-	-	1	1
CVE-2021-22005	KEV	VMware vCenter Server - Arbitrary File Upload	critical	-	-	1	1
CVE-2020-25213	KEV	WordPress File Manager Plugin - Remote Code Execution	critical	-	-	1	1
CVE-2021-41649		PuneethReddyHC Online Shopping System homeaction.php SQL Injection	critical	Oct 1, 2021	-	1	1
CVE-2025-32814		NetMRI Unauthenticated SQL Injection via skipjackUsername	critical	May 22, 2025	-	1	1
CVE-2016-15043		WP Mobile Detector <= 3.5 - Unrestricted File Upload	critical	-	-	1	1
CVE-2019-5127		YouPHPTube Encoder 2.3 - Remote Command Injection	critical	Oct 25, 2019	-	1	1
CVE-2021-42887		TOTOLINK EX1200T 4.1.2cu.5215 - Authentication Bypass	critical	-	-	1	1
CVE-2024-10571		Chartify – WordPress Chart Plugin < 2.9.6 - Local File Inclusion	critical	-	-	1	1
CVE-2020-24589		WSO2 API Manager <=3.1.0 - Blind XML External Entity Injection	critical	-	-	1	1
CVE-2021-41266		MinIO Operator Console Authentication Bypass	critical	-	-	1	1
CVE-2025-55169		WeGIA - Directory Traversal	critical	Aug 12, 2025	-	1	1
CVE-2023-0037		WordPress 10Web Map Builder < 1.0.73 - Unauthenticated SQL Injection	critical	-	-	1	1
CVE-2025-20281	KEV	Cisco ISE - Remote Code Execution	critical	Jun 25, 2025	-	1	1
CVE-2024-51978		Brother Printers – Authentication Bypass via Default Admin Password	critical	-	-	1	1
CVE-2026-5718		Drag and Drop Multiple File Upload - CF7 <= 1.3.9.6 - Remote Code Execution	critical	Apr 17, 2026	-	1	1
CVE-2022-34267		RWS WorldServer - Authentication Bypass	critical	-	-	1	1
CVE-2021-4374		WordPress Automatic Plugin - Unauthenticated Options Change	critical	-	-	1	1
CVE-2020-6207	KEV	SAP Solution Manager 7.2 - Remote Command Execution	critical	-	-	1	1
CVE-2022-0787		Limit Login Attempts (Spam Protection) < 5.1 - SQL Injection	critical	-	-	1	1
CVE-2022-47966	KEV	ManageEngine - Remote Command Execution	critical	-	-	1	1
CVE-2023-49070		Apache OFBiz < 18.12.10 - Arbitrary Code Execution	critical	-	-	1	1
CVE-2024-29972		Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - NsaRescueAngel Backdoor Account	critical	-	-	1	1
CVE-2024-9463	KEV	PaloAlto Networks Expedition - Remote Code Execution	critical	-	-	1	1
CVE-2023-2732		MStore API <= 3.9.2 - Authentication Bypass	critical	-	-	1	1
CVE-2021-46422		SDT-CW3B1 1.1.0 - OS Command Injection	critical	Apr 27, 2022	-	1	1
CVE-2024-23163		GestSup - Account Takeover	critical	-	-	1	1
CVE-2019-12989	KEV	Citrix SD-WAN and NetScaler SD-WAN - SQL Injection	critical	-	-	1	1
CVE-2021-27651		Pega Infinity - Authentication Bypass	critical	Apr 29, 2021	-	1	1
CVE-2016-10960		WordPress wSecure Lite < 2.4 - Remote Code Execution	high	Sep 16, 2019	-	1	1
CVE-2023-20073		Cisco VPN Routers - Unauthenticated Arbitrary File Upload	critical	Apr 5, 2023	-	1	1
CVE-2019-18818		strapi CMS <3.0.0-beta.17.5 - Admin Password Reset	critical	Nov 7, 2019	-	1	1
CVE-2020-14883	KEV	Oracle Fusion Middleware WebLogic Server Administration Console - Remote Code Execution	high	-	-	1	1
CVE-2024-5488		SEOPress < 7.9 - Authentication Bypass	critical	-	-	1	1
CVE-2022-34753		SpaceLogic C-Bus Home Controller <=1.31.460 - Remote Command Execution	high	-	-	1	1
CVE-2021-25114		WordPress Paid Memberships Pro <2.6.7 - Blind SQL Injection	critical	-	-	1	1
CVE-2022-25487		Atom CMS v2.0 - Remote Code Execution	critical	-	-	1	1
CVE-2024-27956		WordPress Automatic Plugin <= 3.92.0 - SQL Injection	critical	-	-	1	1
CVE-2018-17207		WordPress Duplicator Plugin < 1.2.42 - Arbitrary Code Execution	critical	-	-	1	1
CVE-2024-6235		NetScaler Console - Sensitive Information Disclosure	critical	-	-	1	1
CVE-2025-53118		Securden Unified PAM - Authentication Bypass	critical	Aug 25, 2025	-	1	1
CVE-2023-29300	KEV	Adobe ColdFusion - Pre-Auth Remote Code Execution	critical	-	-	1	1
CVE-2024-12987	KEV	DrayTek Vigor - Command Injection	critical	-	-	1	1
CVE-2025-22214		Landray EIS SQL注入漏洞	critical	Jan 2, 2025	-	1	1
CVE-2021-27856		FatPipe WARP/IPVPN/MPVPN - Backdoor Account	critical	-	-	1	1
CVE-2023-34105		SRS - Command Injection	high	-	-	1	1
CVE-2019-9874	KEV	Sitecore Experience Platform - Deserialization of Untrusted Data	critical	-	-	1	1
CVE-2021-21978		VMware View Planner <4.6 SP1- Remote Code Execution	critical	-	-	1	1
CVE-2022-4117		WordPress IWS Geo Form Fields <=1.0 - SQL Injection	critical	-	-	1	1
CVE-2022-26833		Open Automation Software OAS Platform V16.00.0121 - Missing Authentication	critical	-	-	1	1
CVE-2020-15906		Tiki Wiki CMS GroupWare - Authentication Bypass	critical	-	-	1	1
CVE-2025-11368		LearnPress < 4.3.0 - Arbitrary Callback Execution to Information Exposure	medium	Nov 21, 2025	-	1	1
CVE-2024-9193		WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update	critical	-	-	1	1
CVE-2020-35848		Agentejo Cockpit <0.12.0 - NoSQL Injection	critical	Dec 30, 2020	-	1	1
CVE-2022-0592		MapSVG < 6.2.20 - Unauthenticated SQLi	critical	-	-	1	1
CVE-2015-7245		D-Link DVG-N5402SP - Local File Inclusion	high	-	-	1	1
CVE-2026-20079		Cisco Secure Firewall Management Center - Authentication Bypass	critical	Mar 4, 2026	-	1	1
CVE-2018-16763		FUEL CMS 1.4.1 - Remote Code Execution	critical	-	-	1	1
CVE-2024-29824	KEV	Ivanti EPM - Remote Code Execution	critical	-	-	1	1
CVE-2022-40032		Simple Task Managing System v1.0 - SQL Injection	critical	-	-	1	1
CVE-2023-6549	KEV	Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read	critical	-	-	1	1
CVE-2022-38130		KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution	critical	-	-	1	1
CVE-2025-40554		SolarWinds Web Help Desk - Authentication Bypass	critical	Jan 28, 2026	-	1	1
CVE-2020-35729		Klog Server <=2.41 - Unauthenticated Command Injection	critical	Dec 27, 2020	-	1	1
CVE-2022-28219		Zoho ManageEngine ADAudit Plus <7600 - XML Entity Injection/Remote Code Execution	critical	Apr 5, 2022	-	1	1
CVE-2019-15107	KEV	Webmin <= 1.920 - Unauthenticated Remote Command Execution	critical	-	-	1	1
CVE-2022-26960		elFinder <=2.1.60 - Local File Inclusion	critical	-	-	1	1
CVE-2024-35286		Mitel MiCollab <= 9.8.0.33 - SQL Injection	critical	-	-	1	1
CVE-2023-33193		Emby Server - Authentication Bypass	critical	-	-	1	1
CVE-2024-57049		TP-Link Archer C20 - Authentication Bypass	critical	-	-	1	1
CVE-2025-37164	KEV	HPE OneView - Remote Code Execution	critical	Dec 16, 2025	-	1	1
CVE-2020-35713		Belkin Linksys RE6500 <1.0.012.001 - Remote Command Execution	critical	-	-	1	1
CVE-2021-22911		Rocket.Chat <=3.13 - NoSQL Injection	critical	-	-	1	1
CVE-2022-43939	KEV	Hitachi Pentaho Business Analytics Server - Bypass Authorization	high	Apr 3, 2023	-	1	1
CVE-2019-12986		Citrix SD-WAN Center - Remote Command Injection	critical	-	-	1	1
CVE-2023-39796		WBCE 1.6.0 - SQL Injection	critical	-	-	1	1
CVE-2026-47668		DbGate - Remote Code Execution via Anonymous JWT	critical	Jul 23, 2026	-	1	1
CVE-2021-24442		Wordpress Polls Widget < 1.5.3 - SQL Injection	critical	-	-	1	1
CVE-2025-34030		sar2html <=3.2.2 Plot Parameter - Remote Code Execution	critical	Jun 20, 2025	-	1	1
CVE-2022-0769		Users Ultra <= 3.1.0 - SQL Injection	critical	-	-	1	1
CVE-2025-5777	KEV	Citrix NetScaler Memory Disclosure - CitrixBleed 2	critical	Jun 17, 2025	-	1	1
CVE-2020-36708		WordPress Epsilon Framework Themes <=2.4.8 - Remote Code Execution	critical	-	-	1	1
CVE-2020-28185		TerraMaster TOS < 4.2.06 - User Enumeration	medium	Dec 24, 2020	-	1	1
CVE-2024-3400	KEV	GlobalProtect - OS Command Injection	critical	-	-	1	1
CVE-2024-1698		NotificationX <= 2.8.2 - SQL Injection	critical	-	-	1	1
CVE-2025-54782		NestJS DevTools Integration - Remote Code Execution	critical	Aug 2, 2025	-	1	1
CVE-2025-22785		Course Booking System <= 6.0.6 - SQL Injection	critical	-	-	1	1
CVE-2022-0784		WordPress Title Experiments Free <9.0.1 - SQL Injection	critical	-	-	1	1
CVE-2023-26258		Arcserve UDP <= 9.0.6034 - Authentication Bypass	critical	-	-	1	1
CVE-2025-34026	KEV	Versa Concerto Actuator Endpoint - Authentication Bypass	critical	May 21, 2025	-	1	1
CVE-2021-45420		Emerson Dixell XWEB-500 - Arbitrary File Write	critical	-	-	1	1
CVE-2023-34048	KEV	VMware vCenter Server - Out-of-Bounds Write	critical	-	-	1	1
CVE-2025-27223		TRUfusion Enterprise <= 7.10.4.0 - Authentication Bypass	critical	Oct 27, 2025	-	1	1
CVE-2026-4810		Google ADK-Python - Unauthenticated Builder Endpoint	critical	Apr 13, 2026	-	1	1
CVE-2017-1000486	KEV	Primetek Primefaces 5.x - Remote Code Execution	critical	-	-	1	1
CVE-2024-40711	KEV	Veeam Backup & Replication - Unauthenticated	critical	Sep 7, 2024	-	1	1
CVE-2021-27314		Doctor Appointment System 1.0 - SQL Injection	critical	-	-	1	1
CVE-2022-0826		WordPress WP Video Gallery <=1.7.1 - SQL Injection	critical	-	-	1	1
CVE-2021-20167		Netgear RAX43 1.0.3.96 - Command Injection/Authentication Bypass Buffer Overrun	high	-	-	1	1
CVE-2022-38637		Hospital Management System 1.0 - SQL Injection	critical	-	-	1	1
CVE-2024-13985		Dahua EIMS - Unauthenticated Remote Code Execution via capture_handle	critical	-	-	1	1
CVE-2019-19825		TOTOLINK/Realtek Routers - CAPTCHA Bypass	critical	-	-	1	1
CVE-2017-15944	KEV	Palo Alto Network PAN-OS - Remote Code Execution	critical	-	-	1	1
CVE-2016-1555	KEV	NETGEAR WNAP320 Access Point Firmware - Remote Command Injection	critical	-	-	1	1
CVE-2021-1498	KEV	Cisco HyperFlex HX Data Platform - Remote Command Execution	critical	-	-	1	1
CVE-2026-41432		New API < v0.12.10 - Stripe Webhook Bypass	high	May 8, 2026	-	1	1
CVE-2022-3254		AWP Classifieds <= 4.2.1 - Unauthenticated SQL Injection	critical	-	-	1	1
CVE-2024-6028		Quiz Maker <= 6.5.8.3 - SQL Injection	critical	-	-	1	1
CVE-2018-9995		TBK DVR4104/DVR4216 Devices - Authentication Bypass	critical	Apr 10, 2018	-	1	1
CVE-2022-0349		WordPress NotificationX <2.3.9 - SQL Injection	critical	-	-	1	1
CVE-2023-1698		WAGO - Remote Command Execution	critical	-	-	1	1
CVE-2024-9643		Four-Faith F3x36 - Authentication Bypass	critical	-	-	1	1
CVE-2025-2776	KEV	SysAid On-Prem <= 23.3.40 - XML External Entity	critical	May 7, 2025	-	1	1
CVE-2024-5827		Vanna - SQL injection	critical	-	-	1	1
CVE-2024-1021		Rebuild <= 3.5.5 - Server-Side Request Forgery	critical	Jan 29, 2024	-	1	1
CVE-2024-45507		Apache OFBiz - Remote Code Execution	critical	-	-	1	1
CVE-2023-32590		Subscribe to Category <= 2.7.4 - SQL Injection	critical	-	-	1	1
CVE-2026-41176		Rclone RC - Broken Access Control	critical	Apr 23, 2026	-	1	1
CVE-2025-34143		ETQ Reliance - Authentication Bypass via Trailing Space	critical	Jul 22, 2025	-	1	1
CVE-2019-2729		Oracle WebLogic Server Administration Console - Remote Code Execution	critical	-	-	1	1
CVE-2025-12480	KEV	Triofox - Improper Access Control	critical	Nov 10, 2025	-	1	1
CVE-2021-40870	KEV	Aviatrix Controller 6.x before 6.5-1804.1922 - Remote Command Execution	critical	-	-	1	1
CVE-2018-3810		Oturia WordPress Smart Google Code Inserter <3.5 - Authentication Bypass	critical	Jan 1, 2018	-	1	1
CVE-2018-16159		WordPress Gift Voucher <4.1.8 - Blind SQL Injection	critical	-	-	1	1
CVE-2025-45985		Blink Router - Command Injection	critical	Jun 13, 2025	-	1	1
CVE-2025-48827		vBulletin 5.0.0-6.0.3 - Authentication Bypass	critical	May 27, 2025	-	1	1
CVE-2022-29081		Zoho ManageEngine - Access Control Bypass	critical	-	-	1	1
CVE-2017-12635		Apache CouchDB 1.7.0 / 2.x < 2.1.1 - Remote Privilege Escalation	critical	-	-	1	1
CVE-2022-0948		WordPress Order Listener for WooCommerce <3.2.2 - SQL Injection	critical	-	-	1	1
CVE-2023-5204		WordPress AI ChatBot (WPBot) <= 4.8.9 - SQL Injection	critical	-	-	1	1
CVE-2024-10081		CodeChecker <= 6.24.1 - Authentication Bypass	critical	-	-	1	1
CVE-2020-8813		Cacti v1.2.8 - Remote Code Execution	high	-	-	1	1
CVE-2021-37580		Apache ShenYu Admin JWT - Authentication Bypass	critical	-	-	1	1
CVE-2025-34027		Versa Concerto API Path Based - Authentication Bypass	critical	May 21, 2025	-	1	1
CVE-2023-2227		Modoboa < 2.1.0 - Improper Authorization	critical	-	-	1	1
CVE-2024-4885	KEV	Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution	critical	Jun 25, 2024	-	1	1
CVE-2025-6970		WordPress Events Manager <= 7.0.3 - SQL Injection	critical	-	-	1	1
CVE-2019-3929	KEV	Barco/AWIND OEM Presentation Platform - Remote Command Injection	critical	Apr 30, 2019	-	1	1
CVE-2020-7136		HPE Smart Update Manager < 8.5.6 - Remote Unauthorized Access	critical	-	-	1	1
CVE-2025-4380		Ads Pro Plugin <= 4.89 - Local File Inclusion	critical	-	-	1	1
CVE-2017-9805	KEV	Apache Struts2 S2-052 - Remote Code Execution	high	Sep 15, 2017	-	1	1
CVE-2011-3600		Apache OFBiz - XML External Entity Injection	high	-	-	1	1
CVE-2021-42237	KEV	Sitecore Experience Platform Pre-Auth RCE	critical	-	-	1	1
CVE-2025-8868		Chef Automate < 4.13.295 — SQL Injection	critical	Sep 29, 2025	-	1	1
CVE-2025-34152		Shenzhen Aitemi M300 Wi-Fi Repeater – Unauthenticated Remote Command Execution via `time` Parameter	critical	Aug 7, 2025	-	1	1
CVE-2023-1454		Jeecg-boot 3.5.0 qurestSql - SQL Injection	critical	-	-	1	1
CVE-2025-1661		HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion	critical	Mar 11, 2025	-	1	1
CVE-2021-20837		MovableType - Remote Command Injection	critical	-	-	1	1
CVE-2020-17496	KEV	vBulletin 5.5.4 - 5.6.2- Remote Command Execution	critical	-	-	1	1
CVE-2018-19127		PHPCMS 2008 - Remote Code Execution via Template Injection	critical	Nov 9, 2018	-	1	1
CVE-2023-0562		Bank Locker Management System v1.0 - SQL Injection	critical	-	-	1	1
CVE-2025-26793		FREEDOM Administration - Default Login	critical	Feb 15, 2025	-	1	1
CVE-2021-45382	KEV	D-Link - Remote Command Execution	critical	Feb 17, 2022	-	1	1
CVE-2019-7238	KEV	Sonatype Nexus Repository Manager <3.15.0 - Remote Code Execution	critical	-	-	1	1
CVE-2022-26143	KEV	Mitel MiCollab - Information Disclosure & Denial of Service	critical	-	-	1	1
CVE-2025-27222		TRUfusion Enterprise <= 7.10.4.0 - Path Traversal	critical	Oct 27, 2025	-	1	1
CVE-2024-3300		Delmia Apriso - Pre-Authentication Unsafe .NET Object Deserialization	critical	-	-	1	1
CVE-2021-33690		SAP NetWeaver Development Infrastructure - Server Side Request Forgery	critical	-	-	1	1
CVE-2024-24882		Masteriyo LMS <= 1.7.2 - Unauthenticated Privilege Escalation	critical	-	-	1	1
CVE-2020-9480		Apache Spark - Authentication Bypass	critical	-	-	1	1
CVE-2025-3515		Contact Form 7 Drag and Drop Multiple File Upload - Arbitrary File Upload	high	Jun 17, 2025	-	1	1
CVE-2020-28871		Monitorr 1.7.6m - Unauthenticated Remote Code Execution	critical	-	-	1	1
CVE-2023-36934		MOVEit Transfer - SQL Injection	critical	-	-	1	1
CVE-2019-5434		Revive Adserver 4.2 - Remote Code Execution	critical	-	-	1	1
CVE-2022-0788		WordPress WP Fundraising Donation and Crowdfunding Platform <1.5.0 - SQL Injection	critical	-	-	1	1
CVE-2023-23488		WordPress Paid Memberships Pro <2.9.8 - Blind SQL Injection	critical	-	-	1	1
CVE-2020-17518		Apache Flink 1.5.1 - Local File Inclusion	high	-	-	1	1
CVE-2018-11686		FlexPaper/FlowPaper 2.3.6 - Remote Code Execution	critical	-	-	1	1
CVE-2020-15505	KEV	MobileIron Core & Connector <= v10.6 & Sentry <= v9.8 - Remote Code Execution	critical	-	-	1	1
CVE-2020-13167		Netsweeper <=6.4.3 - Python Code Injection	critical	May 19, 2020	-	1	1
CVE-2019-7609	KEV	Kibana Timelion - Arbitrary Code Execution	critical	Mar 25, 2019	-	1	1
CVE-2020-29597		IncomCMS 2.0 - Arbitrary File Upload	critical	-	-	1	1
CVE-2024-51568		CyberPanel - Command Injection	critical	-	-	1	1
CVE-2019-12987		Citrix SD-WAN Center - Remote Command Injection	critical	-	-	1	1
CVE-2022-40881		SolarView 6.00 - Remote Command Execution	critical	-	-	1	1
CVE-2024-22319		IBM Operational Decision Manager - JNDI Injection	critical	Feb 2, 2024	-	1	1
CVE-2022-1390		WordPress Admin Word Count Column 2.2 - Local File Inclusion	critical	Apr 25, 2022	-	1	1
CVE-2021-44515	KEV	Zoho ManageEngine Desktop Central - Remote Code Execution	critical	-	-	1	1
CVE-2023-41265	KEV	Qlik Sense Enterprise - HTTP Request Smuggling	critical	-	-	1	1
CVE-2023-22463		KubePi JwtSigKey - Admin Authentication Bypass	critical	-	-	1	1
CVE-2023-3836		Dahua Smart Park Management - Arbitrary File Upload	critical	-	-	1	1
CVE-2020-6637		OpenSIS 7.3 - SQL Injection	critical	Aug 24, 2020	-	1	1
CVE-2021-22707		EVlink City < R8 V3.4.0.1 - Authentication Bypass	critical	-	-	1	1
CVE-2025-49493		Akamai CloudTest < 60 2025.06.02 - XML External Entity (XXE)	critical	Jun 30, 2025	-	1	1
CVE-2022-24112	KEV	Apache APISIX - Remote Code Execution	critical	-	-	1	1
CVE-2023-46805	KEV	Ivanti ICS - Authentication Bypass	high	-	-	1	1
CVE-2017-3506	KEV	Oracle Fusion Middleware Weblogic Server - Remote OS Command Execution	high	-	-	1	1
CVE-2019-7276		Optergy Proton/Enterprise - Unauthenticated RCE via Backdoor Console	critical	-	-	1	1
CVE-2023-22518	KEV	Atlassian Confluence Server - Improper Authorization	critical	-	-	1	1
CVE-2023-34993		Fortinet FortiWLM Unauthenticated Command Injection Vulnerability	critical	Oct 10, 2023	-	1	1
CVE-2025-47539		Eventin <= 4.0.26 - Privilege Escalation	critical	May 23, 2025	-	1	1
CVE-2025-15503		Sangfor OSM - Arbitrary File Upload	critical	Jan 10, 2026	-	1	1
CVE-2023-50578		Mingsoft MCMS 5.2.9 - SQL Injection	critical	-	-	1	1
CVE-2023-6018		Mlflow - Arbitrary File Write	critical	-	-	1	1
CVE-2020-15415	KEV	DrayTek Vigor - Command Injection	critical	-	-	1	1
CVE-2026-22557		UniFi Network Application - Path Traversal	critical	Mar 19, 2026	-	1	1
CVE-2024-55550	KEV	Mitel MiCollab - Arbitary File Read	critical	-	-	1	1
CVE-2021-42071		Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection	critical	-	-	1	1
CVE-2022-48323		Sunflower Simple and Personal 1.0.1.43315 - Remote Code Execution	critical	-	-	1	1
CVE-2025-22952		Elestio Memos <= v0.24.0 - Server-Side Request Forgery	critical	Feb 27, 2025	-	1	1
CVE-2022-0658		CommonsBooking < 2.6.8 - SQL Injection	critical	-	-	1	1
CVE-2024-3272	KEV	D-Link Network Attached Storage - Backdoor Account	critical	-	-	1	1
CVE-2020-10189	KEV	ManageEngine Desktop Central Java Deserialization	critical	-	-	1	1
CVE-2022-0846		SpeakOut Email Petitions < 2.14.15.1 - SQL Injection	critical	-	-	1	1
CVE-2022-4050		WordPress JoomSport <5.2.8 - SQL Injection	critical	-	-	1	1
CVE-2018-20985		WordPress Payeezy Pay <=2.97 - Local File Inclusion	critical	Aug 22, 2019	-	1	1
CVE-2022-39986		RaspAP 2.8.7 - Unauthenticated Command Injection	critical	-	-	1	1
CVE-2024-4879	KEV	ServiceNow UI Macros - Template Injection	critical	-	-	1	1
CVE-2022-29464	KEV	WSO2 Management - Arbitrary File Upload & Remote Code Execution	critical	-	-	1	1
CVE-2024-20439	KEV	Hardcoded Admin Credentials For Cisco Smart Licensing Utility API	critical	-	-	1	1
CVE-2024-28987	KEV	SolarWinds Web Help Desk - Hardcoded Credential	critical	-	-	1	1
CVE-2023-27482		Home Assistant Supervisor - Authentication Bypass	critical	-	-	1	1
CVE-2018-14728		Responsive filemanager 9.13.1 Server-Side Request Forgery	critical	Aug 3, 2018	-	1	1
CVE-2022-47986	KEV	IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution	critical	-	-	1	1
CVE-2020-35951		Wordpress Quiz and Survey Master <7.0.1 - Arbitrary File Deletion	critical	-	-	1	1
CVE-2024-32964		Lobe Chat <= v0.150.5 - Server-Side Request Forgery	critical	-	-	1	1
CVE-2024-3234		Chuanhu Chat - Directory Traversal	critical	-	-	1	1
CVE-2021-20617		Acmailer - Improper Access Control to OS Command Injection	critical	-	-	1	1
CVE-2024-0352		Likeshop < 2.5.7.20210311 - Arbitrary File Upload	critical	-	-	1	1
CVE-2026-26341		Tattile Camera < 1.181.5 - Default Login	high	Feb 24, 2026	-	1	1
CVE-2022-41800		F5 BIG-IP Appliance Mode - Command Injection	high	-	-	1	1
CVE-2022-0760		WordPress Simple Link Directory <7.7.2 - SQL injection	critical	-	-	1	1
CVE-2020-1956	KEV	Apache Kylin 3.0.1 - Command Injection Vulnerability	high	-	-	1	1
CVE-2021-22502	KEV	Micro Focus Operations Bridge Reporter - Remote Code Execution	critical	-	-	1	1
CVE-2022-3481		NotificationX Dropshipping < 4.4 - SQL Injection	critical	-	-	1	1
CVE-2020-21224		Inspur ClusterEngine 4.0 - Remote Code Execution	critical	Feb 22, 2021	-	1	1
CVE-2023-4634		Media Library Assistant < 3.09 - Remote Code Execution/Local File Inclusion	critical	Sep 6, 2023	-	1	1
CVE-2025-5086	KEV	Dassault Systèmes DELMIA Apriso (up to 2025) - Insecure Deserialization	critical	Jun 2, 2025	-	1	1
CVE-2022-0827		WordPress Best Books <=2.6.3 - SQL Injection	critical	-	-	1	1
CVE-2021-24212		WooCommerce Help Scout - Arbitrary File Upload	critical	-	-	1	1
CVE-2020-36112		CSE Bookstore 1.0 - SQL Injection	critical	-	-	1	1
CVE-2020-17456		SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code Execution	critical	Aug 20, 2020	-	1	1
CVE-2022-1950		Youzify < 1.2.0 - Unauthenticated SQLi	critical	-	-	1	1
CVE-2023-4450		JeecgBoot JimuReport - Template injection	critical	-	-	1	1
CVE-2023-51409		Jordy Meow AI Engine - Unrestricted File Upload	critical	-	-	1	1
CVE-2021-35395	KEV	RealTek Jungle SDK - Arbitrary Command Injection	critical	-	-	1	1
CVE-2018-15961	KEV	Adobe ColdFusion - Unrestricted File Upload Remote Code Execution	critical	-	-	1	1
CVE-2026-8054		dotCMS Core Publish Audit API - Unauthenticated SQL Injection	critical	May 27, 2026	-	1	1
CVE-2024-32640		Mura/Masa CMS - SQL Injection	critical	-	-	1	1
CVE-2019-13372		D-Link Central WiFi Manager CWM(100) - Remote Code Execution	critical	-	-	1	1
CVE-2023-49785		ChatGPT-Next-Web - SSRF/XSS	critical	Mar 12, 2024	-	1	1
CVE-2025-24799		GLPI < 10.0.17 - Pre-Auth SQL Injection	critical	Mar 18, 2025	-	1	1
CVE-2026-35273	KEV	Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE	critical	Jun 11, 2026	-	1	1
CVE-2021-24236		WordPress Imagements <=1.2.5 - Arbitrary File Upload	critical	May 6, 2021	-	1	1
CVE-2025-40551	KEV	SolarWinds Web Help Desk < 2026.1 - Unauthenticated JNDI Injection RCE	critical	Jan 28, 2026	-	1	1
CVE-2017-18362	KEV	Kaseya VSA 2017 ConnectWise ManagedITSync - Remote Code Execution	critical	-	-	1	1
CVE-2020-12832		WordPress Simple File List - Path Traversal	critical	-	-	1	1
CVE-2023-38203	KEV	Adobe ColdFusion - Deserialization of Untrusted Data	critical	-	-	1	1
CVE-2025-41646		RevPi Webstatus <= v2.4.5 - Authentication Bypass	critical	Jun 6, 2025	-	1	1
CVE-2023-0669	KEV	Fortra GoAnywhere MFT - Remote Code Execution	high	-	-	1	1
CVE-2016-3081		Apache S2-032 Struts - Remote Code Execution	high	-	-	1	1
CVE-2024-45216		Apache Solr - Authentication Bypass	critical	-	-	1	1
CVE-2021-25281		SaltStack Salt <3002.5 - Auth Bypass	critical	-	-	1	1
CVE-2021-28799	KEV	QNAP HBS 3 - Broken Access Control	critical	-	-	1	1

Click a column to sort.

Probed early = matching probes seen before the CVE's earliest public signal. Red = exploit-shaped; neutral = generic endpoint (could be routine). N focused = that many of the early probers hit this path without sweeping hundreds of others and are not recognised scanners, which is what separates a real lead from commodity recon that happened to include the path. How this is measured. Sort by the column to bring pre-disclosure CVEs to the top.

Refreshed every 5 minutes. JSON: /api/cves?window=1h|24h|7d|30d|90d.