Skip to main content

cve.nowby Sazabi

Latest Critical KEV EPSS Daily Index Live Agents

CVEs with an EPSS score above 30%

Every CVE with at least a 30% EPSS chance of exploitation in the next 30 days: 7,152 as of 2026-11-03, highest first.

CVE-2023-32707‘edit_user’ Capability Privilege EscalationSplunk Enterprise · Splunk Cloud PlatformHigh · 8.8EPSS 78.7%Fix availableJun 1, 2023
CVE-2017-13696A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze…UnratedEPSS 78.7%Jan 24, 2018
CVE-2019-11945A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.HPE Intelligent Management Center (IMC) PLATUnratedEPSS 78.6%Jun 5, 2019
CVE-2020-5791Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admin user to execute…Nagios XIUnratedEPSS 78.6%Oct 20, 2020
CVE-2020-12800The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Upload and remote code…UnratedEPSS 78.6%Jun 8, 2020
CVE-2014-7205Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for the hapi server…bassmasterUnratedEPSS 78.6%Fix availableOct 8, 2014
CVE-2010-2063Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13…UnratedEPSS 78.6%Jun 17, 2010
CVE-2017-0070A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in…Microsoft BrowserUnratedEPSS 78.5%Mar 17, 2017
CVE-2009-4189HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary…UnratedEPSS 78.5%Dec 3, 2009
CVE-2023-46847Squid: denial of service in http digest authenticationsquid · Red Hat Enterprise Linux 6 Extended Lifecycle Su… +1High · 8.6EPSS 78.5%Fix availableNov 3, 2023
CVE-2009-0077The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and…UnratedEPSS 78.5%Apr 15, 2009
CVE-2020-35665An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in the Event…UnratedEPSS 78.5%Dec 23, 2020
CVE-2021-28169For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to…The Eclipse Foundation Eclipse Jetty · org.eclipse.jetty:je…Medium · 5.3EPSS 78.5%Fix availableJun 9, 2021
CVE-2019-1181Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows · Microsoft Remote Desktop for Android +2Critical · 9.8EPSS 78.4%Aug 14, 2019
CVE-2024-32640MasaCMS SQL Injection vulnerabilityMasaCMSCritical · 9.8EPSS 78.4%Fix availableAug 11, 2025
CVE-2018-0770Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…Microsoft EdgeUnratedEPSS 78.4%Jan 4, 2018
CVE-2018-0776Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…Microsoft EdgeUnratedEPSS 78.4%Jan 4, 2018
CVE-2018-0777Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…Microsoft EdgeUnratedEPSS 78.4%Jan 4, 2018
CVE-2025-0107Expedition: OS Command Injection VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks Exped… +3High · 7.7EPSS 78.4%Fix availableJan 11, 2025
CVE-2020-8863This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and…D-Link Multiple RoutersHigh · 8.8EPSS 78.4%Mar 23, 2020
CVE-2014-5301Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8…UnratedEPSS 78.4%Aug 28, 2017
CVE-2021-1732Windows Win32k Elevation of Privilege VulnerabilityMicrosoft WindowsHigh · 7.8KEVEPSS 78.4%Fix availableFeb 25, 2021
CVE-2001-0098Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with…UnratedEPSS 78.4%Feb 2, 2001
CVE-2003-0780Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE…UnratedEPSS 78.4%Sep 12, 2003
CVE-2025-2294Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusionextendthemes Kubio AI Page BuilderCritical · 9.8EPSS 78.4%Mar 28, 2025
CVE-2023-28342Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API.High · 7.5EPSS 78.3%Apr 5, 2023
CVE-2020-8816Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.Critical · 9.1KEVEPSS 78.3%May 29, 2020
CVE-2020-13937Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6…Apache Kylin · org.apache.kylin:kylinUnratedEPSS 78.3%Fix availableOct 19, 2020
CVE-2014-0113CookieInterceptor in Apache Struts before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the…org.apache.struts:struts2-coreUnratedEPSS 78.3%Fix availableApr 29, 2014
CVE-2017-17215Huawei HG532 with some customized versions has a remote code execution vulnerability.Huawei Technologies Co. HG532UnratedEPSS 78.3%Mar 20, 2018
CVE-2017-12478It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input…UnratedEPSS 78.3%Aug 7, 2017
CVE-2021-31813Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details (e.g., a crafted…UnratedEPSS 78.3%Jul 1, 2021
CVE-2020-11108The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files.UnratedEPSS 78.3%May 11, 2020
CVE-2021-28799Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync)QNAP Systems HBSCritical · 10.0KEVEPSS 78.3%Fix availableMay 13, 2021
CVE-2019-0192In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request.Apache Software Foundation Apache Solr · org.apache.solr:so…UnratedEPSS 78.2%Fix availableMar 7, 2019
CVE-2026-21858n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handlingn8n-io n8n · n8nCritical · 10.0EPSS 78.2%Fix availableJan 7, 2026
CVE-2009-3068Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers…UnratedEPSS 78.2%Sep 4, 2009
CVE-2026-88772Memory overflow vulnerability leading to Remote Code Execution or Denial of ServiceCitrix NetScaler ADC · Citrix NetScaler GatewayCritical · 9.5KEVEPSS 78.2%Fix availableSep 27, 2026
CVE-2024-28741Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code via the login.php…High · 8.8EPSS 78.2%Apr 6, 2024
CVE-2022-26318On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786.Critical · 9.8KEVEPSS 78.2%Mar 4, 2022
CVE-2011-3402Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, High · 8.8KEVEPSS 78.1%Nov 4, 2011
CVE-2017-0261Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly Microsoft OfficeHigh · 7.8KEVEPSS 78.1%May 12, 2017
CVE-2003-0466Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary…UnratedEPSS 78.1%Aug 1, 2003
CVE-2019-16113Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and…UnratedEPSS 78.1%Sep 8, 2019
CVE-2013-3183The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server…UnratedEPSS 78.1%Aug 14, 2013
CVE-2015-0936Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to…UnratedEPSS 78.1%Jun 1, 2017
CVE-2011-3587Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote…zope2UnratedEPSS 78.1%Fix availableOct 10, 2011
CVE-2023-27351This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914).PaperCut NGHigh · 8.2KEVEPSS 78.1%Apr 20, 2023
CVE-2022-38772Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658…UnratedEPSS 78.0%Aug 29, 2022
CVE-2020-27223In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple…The Eclipse Foundation Eclipse Jetty · org.eclipse.jetty:je…Medium · 5.2EPSS 78.0%Fix availableFeb 26, 2021

Showing 1,651–1,700 of 7,152← Higher Lower →

Want to know which of these affect your systems? Sazabi can tell you.

Data: CVE List, GitHub Advisory Database, OSV, NVD, ENISA EUVD, CISA KEV, FIRST EPSS, Exploit-DB. Summaries CC-BY 4.0. Uses NVD data; not endorsed by NVD. About · CISA KEV catalog · EPSS scores · @cvedotnow on X · GitHub