CVE & Exploit Intelligence Database

Updated 2h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

337,098 CVEs tracked 53,218 with exploits 4,684 exploited in wild 1,536 CISA KEV 3,912 Nuclei templates 37,750 vendors 42,417 researchers

15 results Clear all

CVE-2023-4863 8.8 HIGH KEV 10 PoCs Analysis EPSS 0.94

Google Chrome <116.0.5845.187 - Buffer Overflow

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

CWE-787 Sep 12, 2023

CVE-2023-38180 7.5 HIGH KEV EPSS 0.01

.NET and Visual Studio Denial of Service Vulnerability

CWE-400 Aug 08, 2023

CVE-2022-0609 8.8 HIGH KEV RANSOMWARE EPSS 0.40

Google Chrome <98.0.4758.102 - Use After Free

Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CWE-416 Apr 05, 2022

CVE-2020-16017 9.6 CRITICAL KEV EPSS 0.21

Google Chrome < 86.0.4240.198 - Use After Free

Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CWE-416 Jan 08, 2021

CVE-2020-16013 8.8 HIGH KEV EPSS 0.26

Google Chrome < 86.0.4240.198 - Out-of-Bounds Write

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CWE-787 Jan 08, 2021

CVE-2020-16009 8.8 HIGH KEV EPSS 0.84

Cefsharp < 86.0.241 - Out-of-Bounds Write

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CWE-843 Nov 03, 2020

CVE-2020-15999 9.6 CRITICAL KEV 5 PoCs Analysis EPSS 0.93

Google Chrome < 86.0.4240.111 - Out-of-Bounds Write

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CWE-120 Nov 03, 2020

CVE-2020-1147 7.8 HIGH KEV 3 PoCs Analysis EPSS 0.93

Microsoft .net Core < 15.9 - Remote Code Execution

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

CVE-2020-11023 6.9 MEDIUM KEV 7 PoCs Analysis EPSS 0.36

jQuery <3.5.0 - XSS

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CWE-79 Apr 29, 2020

CVE-2018-18325 7.5 HIGH KEV 1 PoC Analysis NUCLEI EPSS 0.91

Dnnsoftware Dotnetnuke < 9.2.2 - Weak Encryption

DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.

CWE-326 Jul 03, 2019

CVE-2018-15811 7.5 HIGH KEV 1 PoC Analysis NUCLEI EPSS 0.91

Dnnsoftware Dotnetnuke < 9.2.1 - Weak Encryption

DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

CWE-326 Jul 03, 2019

CVE-2018-8298 7.5 HIGH KEV 1 PoC Analysis EPSS 0.90

ChakraCore - Memory Corruption

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296.

CWE-843 Jul 11, 2018

CVE-2017-9822 8.8 HIGH KEV RANSOMWARE 4 PoCs Analysis NUCLEI EPSS 0.94

DNN <9.1.1 - RCE

DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."

CWE-94 Jul 20, 2017

CVE-2016-7201 8.8 HIGH KEV RANSOMWARE 3 PoCs Analysis EPSS 0.90

Microsoft Edge < 1.2.2 - Type Confusion

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.

CWE-843 Nov 10, 2016

CVE-2016-7200 8.8 HIGH KEV RANSOMWARE 3 PoCs Analysis EPSS 0.89

Microsoft Edge < 1.2.2 - Out-of-Bounds Write

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.

CWE-787 Nov 10, 2016