Skip to content

February 2018 · Band 2

Check available, not yet exploited

14 CVEs

Each square is a CVE with a public nuclei template and no known exploitation yet. The named ones are the most likely to be exploited.

check available
14

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

  1. HPE Integrated Lights-out 4 (ILO4) <2.53 - Authentication BypassCVE-2017-12542Hewlett Packard Enterprise · 99% likely

    Hewlett Packard Enterprise

  2. Cisco RV132W/RV134W Router - Information DisclosureCVE-2018-0127Cisco · 78% likely

    CWE-200Cisco

  3. Anchor CMS 0.12.3 - Error Log ExposureCVE-2018-7251Anchorcms · 72% likely

    CWE-200Anchorcms

  4. uWSGI PHP Plugin Local File InclusionCVE-2018-7490Unbit · 69% likely

    CWE-22

  5. Joomla! Component PrayerCenter 3.0.2 - SQL InjectionCVE-2018-7314Mlwebtechnologies · 58% likely

    CWE-89

  6. Joomla! Component Zh BaiduMap 3.0.0.1 - SQL InjectionCVE-2018-6605Zh Baidumap Project · 58% likely

    CWE-89

  7. Seagate BlackArmor NAS - Command InjectionCVE-2014-3206Seagate · 51% likely

    CWE-20Seagate

  8. Trixbox - 2.8.0.4 OS Command InjectionCVE-2017-14535Netfortris · 50% likely

    CWE-78Netfortris

  9. SAP Internet Graphics Server (IGS) - XML External Entity InjectionCVE-2018-2392SAP SE · 41% likely

    CWE-611SAP

  10. Trixbox 2.8.0 - Path TraversalCVE-2017-14537Netfortris · 39% likely

    CWE-22Netfortris

  11. DedeCMS 5.7 - Path DisclosureCVE-2018-6910Dedecms · 19% likely

    CWE-668Dedecms

  12. AxxonSoft Axxon Next - Local File InclusionCVE-2018-7467Axxonsoft · 10% likely

    CWE-22AxxonSoft

  13. Combodo iTop <2.2.0-2459 - Cross-Site ScriptingCVE-2015-6544Combodo · 5.4% likely

    CWE-79Combodo

  14. HPE System Management - Cross-Site ScriptingCVE-2017-12544Hewlett Packard Enterprise · 4.5% likely

    CWE-79Hewlett Packard Enterprise

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.