Threat filter

Home/Threat filter

▤

Build a query across the whole graph by combining signals on the left. Each one narrows the list, and the count on the right updates as you tick. Hover any option to learn what it means and why it matters - the goal is that you leave understanding the difference between severity, likelihood, and real-world exploitation.

Your query

· CVEs in scope

New here? Try KEV + public exploit · severe + likely · ransomware

Why it matters · hover any option on the left

782 CVEs matched · page 1 of 32

↓ Export JSON (up to 1000)

CVE-2014-1812 KEV HIGH act-now

The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

CVSS 8.8

EPSS 0.643

CVE-2017-8229 CRITICAL schedule

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative cred

CVSS 9.8

EPSS 0.738

CVE-2013-4786 HIGH schedule

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote

CVSS 7.5

EPSS 0.818

CVE-2016-7456 CRITICAL schedule

VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which mak

CVSS 9.8

EPSS 0.328

CVE-2010-0219 schedule

Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products

EPSS 0.899

CVE-2014-9195 monitor

Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary

EPSS 0.811

CVE-2009-3548 monitor

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a

EPSS 0.790

CVE-2016-6599 CRITICAL monitor

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService)

CVSS 9.8

EPSS 0.125

CVE-2015-7251 CRITICAL monitor

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, whic

CVSS 9.8

EPSS 0.106

CVE-2009-4189 monitor

HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to exe

EPSS 0.727

CVE-2015-8282 CRITICAL monitor

SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account.

CVSS 9.8

EPSS 0.066

CVE-2015-7258 HIGH monitor

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain

CVSS 8.8

EPSS 0.129

CVE-2015-6016 CRITICAL monitor

ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N

CVSS 9.8

EPSS 0.057

CVE-2010-5305 CRITICAL monitor

The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0

CVSS 9.8

EPSS 0.057

CVE-2016-10401 HIGH monitor

ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access

CVSS 8.8

EPSS 0.123

CVE-2009-4188 monitor

HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers t

EPSS 0.702

CVE-2015-8362 CRITICAL monitor

The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a hardcoded password for the

CVSS 9.8

EPSS 0.047

CVE-2017-3834 CRITICAL monitor

A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express

CVSS 9.8

EPSS 0.045

CVE-2015-2874 CRITICAL monitor

Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices

CVSS 9.8

EPSS 0.042

CVE-2016-6554 CRITICAL monitor

Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1

CVSS 9.8

EPSS 0.041

CVE-2016-1984 CRITICAL monitor

The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2016-01-20 has a hardcoded password for the

CVSS 9.8

EPSS 0.041

CVE-2019-13560 CRITICAL monitor

D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password via the apply_sec.cgi se

CVSS 9.8

EPSS 0.036

CVE-2016-2230 CRITICAL monitor

OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote attackers

CVSS 9.8

EPSS 0.036

CVE-2017-9385 CRITICAL monitor

An issue was discovered on Vera Veralite 1.7.481 devices. The device has an additional OpenWRT interface in addition to

CVSS 9.8

EPSS 0.035

CVE-2019-7690 CRITICAL monitor

In MobaTek MobaXterm Personal Edition v11.1 Build 3860, the SSH private key and its password can be retrieved from proce

CVSS 9.8

EPSS 0.032

1 / 32 Next

Threat filter

Build a filter