Skip to content

August 2018 · Band 2

Check available, not yet exploited

13 CVEs

Each square is a CVE with a public nuclei template and no known exploitation yet. The named ones are the most likely to be exploited.

check available
13

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

  1. Argus Surveillance DVR 4.0.0.0 - Local File InclusionCVE-2018-15745Argussurveillance · 98% likely

    CWE-22

  2. cgit < 1.2.1 - Directory TraversalCVE-2018-14912Cgit Project · 92% likely

    CWE-22

  3. Responsive filemanager 9.13.1 Server-Side Request ForgeryCVE-2018-14728Tecrail · 76% likely

    CWE-918Tecrail

  4. WordPress Gift Voucher <4.1.8 - Blind SQL InjectionCVE-2018-16159Codemenschen · 49% likely

    CWE-89Codemenschen

  5. Responsive FileManager <9.13.4 - Local File InclusionCVE-2018-15535Tecrail · 45% likely

    CWE-22Tecrail

  6. Cybrotech CyBroHttpServer 1.0.3 - Local File InclusionCVE-2018-16133Cybrotech · 39% likely

    CWE-22

  7. Django - Open RedirectCVE-2018-14574Djangoproject · 25% likely

    CWE-601Djangoproject

  8. Apache mod_userdir CRLF injectionCVE-2016-4975Apache Software Foundation · 20% likely

    CWE-93Apache1 bounty report

  9. Aruba Airwave <8.2.3.1 - Cross-Site ScriptingCVE-2016-8527Hewlett Packard Enterprise · 13% likely

    CWE-79Hewlett Packard Enterprise

  10. LG-Ericsson iPECS NMS 30M - Local File InclusionCVE-2018-15138Ericssonlg · 13% likely

    CWE-22Ericssonlg

  11. Cobbler - Authentication BypassCVE-2018-1000226Cobblerd · 13% likely

    CWE-732

  12. ASUSTOR ADM 3.1.0.RFQ3 - SQL InjectionCVE-2018-11511Asustor · 12% likelycovered by CyberSIXT

    CWE-89AsustorJadeProx

  13. Episerver 7 - Blind XML External Entity InjectionCVE-2017-17762Episerver · 4.6% likely

    CWE-611Episerver

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.